@tangle-network/agent-app 0.45.7 → 0.45.9

package/dist/assistant/index.js

@@ -3,18 +3,18 @@ import {
   ChatMessages,
   ModelPicker,
   ProviderLogo
-} from "../chunk-YRFB2KEA.js";
+} from "../chunk-CKUZVDZ7.js";
+import "../chunk-6MUJROBT.js";
+import "../chunk-BATKJP3P.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-GINKOZFD.js";
 import "../chunk-YTMKRL3L.js";
 import "../chunk-GEYACSFW.js";
-import "../chunk-6MUJROBT.js";
-import "../chunk-BATKJP3P.js";
 import "../chunk-QY4BRKRJ.js";
 import "../chunk-WBHPN5DY.js";
-import "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+import "../chunk-WUZZVQKR.js";
 import "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import "../chunk-5EPIPT4V.js";
 import "../chunk-3ZK5IJSW.js";
 import "../chunk-YJMCRXQQ.js";

package/dist/auth-Bulnsz3V.d.ts

@@ -0,0 +1,73 @@
+import { A as AppToolContext } from './types-DbU-oO5h.js';
+
+/**
+ * Header names carrying the server-set per-turn context + the capability token.
+ * Defaults are product-neutral (`X-Agent-App-*`); a product that already ships
+ * a header convention (e.g. `X-Acme-User-Id`) passes its own.
+ */
+interface ToolHeaderNames {
+    userId: string;
+    workspaceId: string;
+    threadId: string;
+}
+/** Provide default HTTP header names for user, workspace, and thread identification */
+declare const DEFAULT_HEADER_NAMES: ToolHeaderNames;
+/**
+ * Which identity the bearer is bound to.
+ *
+ * `'userId'` (default) is right when the product mints a token per user and can
+ * deliver it per turn.
+ *
+ * `'workspaceId'` is the only workable choice when the token has to survive in
+ * the BOX ENVIRONMENT. Since agent-interface 0.38 a credential may reach a
+ * profile only as a reference the sandbox resolves from that environment, and
+ * the environment is workspace-wide and written once at box creation. A
+ * per-user token therefore cannot be delivered at all — and a per-user token
+ * that IS written there was never per-user in any meaningful sense, because
+ * every member of that workspace's box can read it.
+ *
+ * Binding the bearer to the workspace does NOT collapse the identity: the user
+ * header is still required, still server-set, still returned on `ctx`, and is
+ * what downstream domain code attributes work to. Only the question "may this
+ * caller act at all" moves from the user to the workspace — which is what the
+ * shared box already implies.
+ */
+type CapabilitySubject = 'userId' | 'workspaceId';
+/** Define options to verify bearer tokens and customize authentication header names */
+interface AuthenticateOptions {
+    /** Verify the bearer capability token belongs to the subject named by
+     *  {@link AuthenticateOptions.subject}. The product's HMAC/JWT impl — the
+     *  seam that keeps token crypto out of this package. */
+    verifyToken: (subject: string, bearer: string) => Promise<boolean>;
+    headerNames?: ToolHeaderNames;
+    /** What the bearer is bound to. Defaults to `'userId'`, so an existing caller
+     *  is byte-unchanged. */
+    subject?: CapabilitySubject;
+}
+/** Represent the result of tool authentication with success context or failure response */
+type ToolAuthResult = {
+    ok: true;
+    ctx: AppToolContext;
+} | {
+    ok: false;
+    response: Response;
+};
+/**
+ * Recover + verify the trusted context for a tool request.
+ *
+ * Both the user and the workspace come from server-set headers — never from
+ * tool args — so the model can neither forge identity nor target another
+ * workspace. The bearer must verify against whichever of the two the product
+ * declares as its {@link CapabilitySubject}.
+ *
+ * Fail-closed, and deliberately in this order: a missing credential or a token
+ * minted for another subject yields 401 before anything else is read. When the
+ * subject is the workspace, its header is required BEFORE verification rather
+ * than after — verifying against an absent subject is not a check at all.
+ */
+declare function authenticateToolRequest(request: Request, opts: AuthenticateOptions): Promise<ToolAuthResult>;
+/** Read a tool's argument object from the request body, tolerant of MCP host
+ *  aliases (`args` / `arguments`) or a bare body. Returns null on non-JSON. */
+declare function readToolArgs<T>(request: Request): Promise<T | null>;
+
+export { type AuthenticateOptions as A, DEFAULT_HEADER_NAMES as D, type ToolHeaderNames as T, type ToolAuthResult as a, authenticateToolRequest as b, readToolArgs as r };

package/dist/chat-routes/index.d.ts

@@ -16,7 +16,7 @@ import '../contract-CQNvv5th.js';
 import '../types-CCeYywdS.js';
 import '../plans/index.js';
 import '@tangle-network/sandbox/core';
-import '../auth-DJs6lfAs.js';
+import '../auth-Bulnsz3V.js';
 import '../types-DbU-oO5h.js';
 import '../harness/index.js';
 import '../model-CdCDfBA9.js';

package/dist/chat-routes/index.js

@@ -1,3 +1,6 @@
+import {
+  parseJsonObjectBody
+} from "../chunk-J25RST7G.js";
 import {
   createSandboxFileIndexRoute
 } from "../chunk-QY4BRKRJ.js";
@@ -32,16 +35,12 @@ import {
 import {
   createInteractionAnswerRoute
 } from "../chunk-3BK3BC2L.js";
-import {
-  parseJsonObjectBody
-} from "../chunk-J25RST7G.js";
 import {
   attachmentInputToPart,
   attachmentKindForMime,
   mentionInputToPart,
   toChatMessageParts
-} from "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+} from "../chunk-WUZZVQKR.js";
 import {
   ChatTurnInputError,
   DISPATCH_MAX_MEDIA_PARTS,
@@ -63,6 +62,7 @@ import {
   promptPartsByteSize,
   validateSandboxMentionPath
 } from "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   asRecord,
   asString,
@@ -100,11 +100,11 @@ import {
   flattenHistory,
   readSandboxBinaryBytes,
   statSandboxFileSize
-} from "../chunk-4XNCMUVI.js";
-import "../chunk-LWSJK546.js";
+} from "../chunk-EPOPI77J.js";
 import "../chunk-73F3CKVK.js";
-import "../chunk-ITCINLSU.js";
-import "../chunk-IVEKCOM7.js";
+import "../chunk-LWSJK546.js";
+import "../chunk-C5OIABSB.js";
+import "../chunk-YOFQO4R6.js";
 import "../chunk-YEFFHORB.js";
 import "../chunk-S5SRJJQG.js";
 import "../chunk-JML7WKWU.js";

package/dist/chat-store/index.js

@@ -19,9 +19,9 @@ import {
   mentionInputToPart,
   mentionPartsFromMessageParts,
   toChatMessageParts
-} from "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+} from "../chunk-WUZZVQKR.js";
 import "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   attachmentPartKey
 } from "../chunk-5EPIPT4V.js";

package/dist/{chunk-ITCINLSU.js → chunk-C5OIABSB.js}

@@ -1,6 +1,6 @@
 import {
   authenticateToolRequest
-} from "./chunk-IVEKCOM7.js";
+} from "./chunk-YOFQO4R6.js";
 import {
   ToolInputError,
   findCustomTool,
@@ -198,4 +198,4 @@ export {
   createAppToolRuntimeExecutor,
   handleAppToolRequest
 };
-//# sourceMappingURL=chunk-ITCINLSU.js.map
+//# sourceMappingURL=chunk-C5OIABSB.js.map

package/dist/{chunk-YRFB2KEA.js → chunk-CKUZVDZ7.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-YTMKRL3L.js";
 import {
   attachmentPartsFromMessageParts
-} from "./chunk-UXMIPX3Z.js";
+} from "./chunk-WUZZVQKR.js";
 import {
   formatBytes
 } from "./chunk-KWXUBMXU.js";
@@ -4309,4 +4309,4 @@ export {
   useThinkingSeconds,
   ChatMessages
 };
-//# sourceMappingURL=chunk-YRFB2KEA.js.map
+//# sourceMappingURL=chunk-CKUZVDZ7.js.map

package/dist/{chunk-4XNCMUVI.js → chunk-EPOPI77J.js}

@@ -1,13 +1,13 @@
+import {
+  assertHarnessModelCompatible
+} from "./chunk-73F3CKVK.js";
 import {
   assertProfilePromptWithinBudget,
   fingerprintAgentProfile
 } from "./chunk-LWSJK546.js";
-import {
-  assertHarnessModelCompatible
-} from "./chunk-73F3CKVK.js";
 import {
   buildAppToolMcpServer
-} from "./chunk-IVEKCOM7.js";
+} from "./chunk-YOFQO4R6.js";
 import {
   resolveTangleExecutionEnvironment,
   trimOrNull
@@ -2224,4 +2224,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-4XNCMUVI.js.map
+//# sourceMappingURL=chunk-EPOPI77J.js.map

package/dist/{chunk-DMYCGXBP.js → chunk-OO4DROKM.js}

@@ -11,4 +11,4 @@ export {
   DesignCanvasLazy,
   DesignCanvasChromeLazy
 };
-//# sourceMappingURL=chunk-DMYCGXBP.js.map
+//# sourceMappingURL=chunk-OO4DROKM.js.map

package/dist/{chunk-UXMIPX3Z.js → chunk-WUZZVQKR.js}

@@ -1,9 +1,9 @@
-import {
-  persistedPartToWorkProduct
-} from "./chunk-ZVEEWGDK.js";
 import {
   mentionKindForPath
 } from "./chunk-KWXUBMXU.js";
+import {
+  persistedPartToWorkProduct
+} from "./chunk-ZVEEWGDK.js";
 import {
   persistedPartToInteraction
 } from "./chunk-3ZK5IJSW.js";
@@ -155,4 +155,4 @@ export {
   buildAttachmentPromptBlock,
   historyContentWithAttachments
 };
-//# sourceMappingURL=chunk-UXMIPX3Z.js.map
+//# sourceMappingURL=chunk-WUZZVQKR.js.map

package/dist/{chunk-IVEKCOM7.js → chunk-YOFQO4R6.js}

@@ -13,7 +13,11 @@ async function authenticateToolRequest(request, opts) {
   if (!userId || !bearer) {
     return { ok: false, response: Response.json({ error: "Missing capability credentials" }, { status: 401 }) };
   }
-  if (!await opts.verifyToken(userId, bearer)) {
+  const subject = opts.subject === "workspaceId" ? workspaceId : userId;
+  if (!subject) {
+    return { ok: false, response: Response.json({ error: "Missing workspace context" }, { status: 400 }) };
+  }
+  if (!await opts.verifyToken(subject, bearer)) {
     return { ok: false, response: Response.json({ error: "Invalid capability token" }, { status: 401 }) };
   }
   if (!workspaceId) {
@@ -268,4 +272,4 @@ export {
   MCP_PROTOCOL_VERSIONS,
   createMcpToolHandler
 };
-//# sourceMappingURL=chunk-IVEKCOM7.js.map
+//# sourceMappingURL=chunk-YOFQO4R6.js.map

package/dist/chunk-YOFQO4R6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tools/auth.ts","../src/tools/mcp.ts","../src/tools/mcp-rpc.ts"],"sourcesContent":["import type { AppToolContext } from './types'\n\n/**\n * Header names carrying the server-set per-turn context + the capability token.\n * Defaults are product-neutral (`X-Agent-App-*`); a product that already ships\n * a header convention (e.g. `X-Acme-User-Id`) passes its own.\n */\nexport interface ToolHeaderNames {\n  userId: string\n  workspaceId: string\n  threadId: string\n}\n\n/** Provide default HTTP header names for user, workspace, and thread identification */\nexport const DEFAULT_HEADER_NAMES: ToolHeaderNames = {\n  userId: 'X-Agent-App-User-Id',\n  workspaceId: 'X-Agent-App-Workspace-Id',\n  threadId: 'X-Agent-App-Thread-Id',\n}\n\n/**\n * Which identity the bearer is bound to.\n *\n * `'userId'` (default) is right when the product mints a token per user and can\n * deliver it per turn.\n *\n * `'workspaceId'` is the only workable choice when the token has to survive in\n * the BOX ENVIRONMENT. Since agent-interface 0.38 a credential may reach a\n * profile only as a reference the sandbox resolves from that environment, and\n * the environment is workspace-wide and written once at box creation. A\n * per-user token therefore cannot be delivered at all — and a per-user token\n * that IS written there was never per-user in any meaningful sense, because\n * every member of that workspace's box can read it.\n *\n * Binding the bearer to the workspace does NOT collapse the identity: the user\n * header is still required, still server-set, still returned on `ctx`, and is\n * what downstream domain code attributes work to. Only the question \"may this\n * caller act at all\" moves from the user to the workspace — which is what the\n * shared box already implies.\n */\nexport type CapabilitySubject = 'userId' | 'workspaceId'\n\n/** Define options to verify bearer tokens and customize authentication header names */\nexport interface AuthenticateOptions {\n  /** Verify the bearer capability token belongs to the subject named by\n   *  {@link AuthenticateOptions.subject}. The product's HMAC/JWT impl — the\n   *  seam that keeps token crypto out of this package. */\n  verifyToken: (subject: string, bearer: string) => Promise<boolean>\n  headerNames?: ToolHeaderNames\n  /** What the bearer is bound to. Defaults to `'userId'`, so an existing caller\n   *  is byte-unchanged. */\n  subject?: CapabilitySubject\n}\n\n/** Represent the result of tool authentication with success context or failure response */\nexport type ToolAuthResult =\n  | { ok: true; ctx: AppToolContext }\n  | { ok: false; response: Response }\n\n/**\n * Recover + verify the trusted context for a tool request.\n *\n * Both the user and the workspace come from server-set headers — never from\n * tool args — so the model can neither forge identity nor target another\n * workspace. The bearer must verify against whichever of the two the product\n * declares as its {@link CapabilitySubject}.\n *\n * Fail-closed, and deliberately in this order: a missing credential or a token\n * minted for another subject yields 401 before anything else is read. When the\n * subject is the workspace, its header is required BEFORE verification rather\n * than after — verifying against an absent subject is not a check at all.\n */\nexport async function authenticateToolRequest(request: Request, opts: AuthenticateOptions): Promise<ToolAuthResult> {\n  const h = opts.headerNames ?? DEFAULT_HEADER_NAMES\n  const userId = request.headers.get(h.userId)?.trim()\n  const workspaceId = request.headers.get(h.workspaceId)?.trim()\n  const threadId = request.headers.get(h.threadId)?.trim() || null\n  const bearer = request.headers.get('authorization')?.match(/^Bearer\\s+(.+)$/i)?.[1]\n\n  if (!userId || !bearer) {\n    return { ok: false, response: Response.json({ error: 'Missing capability credentials' }, { status: 401 }) }\n  }\n  const subject = opts.subject === 'workspaceId' ? workspaceId : userId\n  if (!subject) {\n    return { ok: false, response: Response.json({ error: 'Missing workspace context' }, { status: 400 }) }\n  }\n  if (!(await opts.verifyToken(subject, bearer))) {\n    return { ok: false, response: Response.json({ error: 'Invalid capability token' }, { status: 401 }) }\n  }\n  if (!workspaceId) {\n    return { ok: false, response: Response.json({ error: 'Missing workspace context' }, { status: 400 }) }\n  }\n  return { ok: true, ctx: { userId, workspaceId, threadId } }\n}\n\n/** Read a tool's argument object from the request body, tolerant of MCP host\n *  aliases (`args` / `arguments`) or a bare body. Returns null on non-JSON. */\nexport async function readToolArgs<T>(request: Request): Promise<T | null> {\n  let body: { args?: T; arguments?: T }\n  try {\n    body = (await request.json()) as typeof body\n  } catch {\n    return null\n  }\n  return (body.args ?? body.arguments ?? (body as T)) as T\n}\n","/**\n * The tagged-configuration contract for every MCP server this package emits.\n *\n * An `AgentProfile` is digested, diffed, stored, and logged, so a credential\n * that rides it as plain text is a leak by construction. `@tangle-network/\n * agent-interface` closed that at **0.38.0**: `args`, `env`, and `headers` on\n * an `AgentProfileMcpServer` no longer take strings. Every value is either\n * deliberately public profile material (`defineAgentProfilePublicConfig`) or an\n * opaque reference to a credential (`defineAgentProfileSecretRef`) resolved\n * privately at materialization, validated by a `z.discriminatedUnion('kind')`.\n *\n * The schema also refuses to let a secret hide as public material: a `public`\n * value under a credential-bearing key name (`Authorization`, `*_TOKEN`,\n * `*_API_KEY`, `*_SECRET`, `Cookie`, …) is rejected with \"credential-bearing\n * config names require a secret-ref\", and any value whose bytes look like a\n * credential (`Bearer …`, `sk-…`, `ghp_…`) is rejected outright. So the\n * capability token this package used to inline as `Bearer <token>` cannot be\n * expressed at all — it must become a reference.\n *\n * **A reference resolves ONLY from an environment variable present on the box,\n * named by `key`.** That is why the builders below take a `tokenEnvKey` (the\n * box-env variable NAME) instead of a token VALUE: agent-app cannot guess the\n * name, and a reference to a key nothing places fails the turn at\n * materialization rather than running credential-less. The box env is what\n * `SandboxRuntimeConfig.env` (and the platform secret store via\n * `SandboxRuntimeConfig.secrets`) writes at sandbox creation, so the key must\n * name a variable one of those places — and it must therefore be a real\n * environment-variable name, which this module enforces.\n *\n * A per-request credential is only referenceable when the value written at box\n * creation is byte-identical to the one every later turn would mint (a\n * deterministic derivation such as an HMAC over the workspace id). A token\n * scoped narrower than the box — per-user, per-document — cannot be referenced\n * at all; {@link unresolvableSurfaceCredential} names that blocker instead of\n * emitting a reference that resolves to nothing.\n */\nimport {\n  agentProfileMcpServerSchema,\n  defineAgentProfilePublicConfig,\n  defineAgentProfileSecretRef,\n  type AgentProfileConfigValue,\n} from '@tangle-network/agent-interface'\nimport type { AppToolContext } from './types'\nimport type { AppToolName } from './openai'\nimport type { AppToolDefinition } from './registry'\nimport type { ToolHeaderNames } from './auth'\nimport { DEFAULT_HEADER_NAMES } from './auth'\n\n/** Default route path each app tool is served at. A product mounts its routes\n *  at these paths (or supplies its own via {@link BuildMcpServerOptions.paths}). */\nexport const DEFAULT_APP_TOOL_PATHS: Record<AppToolName, string> = {\n  submit_proposal: '/api/tools/propose',\n  schedule_followup: '/api/tools/followup',\n  render_ui: '/api/tools/render-ui',\n  add_citation: '/api/tools/citation',\n}\n\n/** The portable MCP server entry the sandbox SDK accepts (transport + url +\n *  tagged headers). Assignable to `AgentProfileMcpServer` without a cast —\n *  products spread it into their profile's `mcp` map. */\nexport interface AppToolMcpServer {\n  transport: 'http'\n  url: string\n  headers: Record<string, AgentProfileConfigValue>\n  enabled: true\n  metadata: { description: string }\n}\n\n/** POSIX environment-variable name — the same shape `agent-interface`'s\n *  `environmentNameSchema` accepts for an env key. A secret reference resolves\n *  from the box environment, so a key outside this shape can never resolve. */\nconst ENV_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/\n\n/**\n * Reject a secret-reference key that names nothing the box can hold.\n *\n * `agent-interface` accepts any non-credential string as a reference key, so a\n * typo or a token VALUE passed where a key belongs validates against the\n * profile schema and fails much later, inside materialization, as an opaque\n * missing-secret error. Failing here names the parameter.\n */\nfunction assertSecretEnvKey(key: string, label: string): string {\n  if (!ENV_NAME_PATTERN.test(key)) {\n    throw new Error(\n      `${label}: tokenEnvKey must be an environment-variable NAME the sandbox box carries ` +\n        `(e.g. 'APP_CAPABILITY_TOKEN'), not a token value — got ${JSON.stringify(key)}. ` +\n        'A profile may only REFERENCE a credential; the value is placed on the box by ' +\n        'SandboxRuntimeConfig.env or the platform secret store.',\n    )\n  }\n  return key\n}\n\n/**\n * Validate one emitted entry against the REAL `agentProfileMcpServerSchema`.\n *\n * The contract's rules (which key names demand a reference, which byte patterns\n * read as a credential) live in `agent-interface`. Re-implementing them here\n * would drift the moment that package moves — which it does: 0.36.0 → 0.40.0 in\n * three days. Running the shipped validator instead means a product that passes\n * a credential-bearing custom header name, a relative base URL, or a URL with\n * embedded credentials fails at the builder with the contract's own message.\n *\n * It is also the loud failure for a version skew: if the resolved\n * `@tangle-network/agent-interface` predates 0.38.0, its schema rejects the\n * tagged shape this package now emits, and that surfaces here instead of as a\n * sandbox provisioning error.\n */\nfunction assertProfileMcpServer<T extends AppToolMcpServer>(server: T, label: string): T {\n  const result = agentProfileMcpServerSchema.safeParse(server)\n  if (!result.success) {\n    const issues = result.error.issues\n      .map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)\n      .join('; ')\n    throw new Error(\n      `${label} produced an MCP server the AgentProfile contract rejects: ${issues}. ` +\n        'Requires @tangle-network/agent-interface >= 0.38.0 (tagged MCP config values).',\n    )\n  }\n  return server\n}\n\n/**\n * Refuse to mount a surface whose credential is scoped narrower than the box.\n *\n * A per-user or per-resource capability token is minted per request. The box\n * environment is written once at sandbox creation and shared by every turn and\n * every member of the workspace, so such a token can neither be placed there\n * ahead of time nor referenced from a per-turn profile. Widening the channel to\n * a workspace-bound token is not a substitute when the route authenticates the\n * CALLER: the agent can read its own box env, so it could forge that identity.\n *\n * Mounting the surface anyway would emit a plain-string `Authorization` header\n * (rejected by the schema) or a reference to a key nothing places (rejected at\n * materialization). Throwing here names the actual blocker. Exported because\n * every product with per-document MCP surfaces hits it and was writing this\n * message itself.\n */\nexport function unresolvableSurfaceCredential(surface: string): never {\n  throw new Error(\n    `The ${surface} MCP surface cannot be mounted: its capability token is scoped to a single ` +\n      'user and resource, and an AgentProfile may only reference a credential the sandbox can ' +\n      'resolve from the box environment, which is workspace-wide and fixed at sandbox creation. ' +\n      'Mounting it needs a per-session secret channel on the sandbox API, or a route that ' +\n      'authenticates the workspace rather than the caller.',\n  )\n}\n\n/** Define configuration options for building an HTTP MCP server including path, baseUrl, token env key, context, and description */\nexport interface BuildHttpMcpServerOptions {\n  /** Route path on the app the sandbox POSTs to (e.g. `/api/tools/propose`). */\n  path: string\n  /** App base URL the sandbox reaches back to (no trailing slash required). */\n  baseUrl: string\n  /**\n   * NAME of the box-environment variable holding the capability token — never\n   * the token itself. The emitted `Authorization` header is a `secret-ref` to\n   * this key with `format: 'bearer'`, so the sandbox resolves the value\n   * privately and the profile carries only the name.\n   *\n   * The key MUST name a variable the box actually carries (placed by\n   * `SandboxRuntimeConfig.env` at creation, or injected from the platform\n   * secret store via `SandboxRuntimeConfig.secrets`), and the value written\n   * there must be the token this route will accept for every turn — which in\n   * practice means a deterministic derivation (e.g. an HMAC over the workspace\n   * id), not a freshly-random per-request mint. A token scoped narrower than\n   * the box is not referenceable: see {@link unresolvableSurfaceCredential}.\n   */\n  tokenEnvKey: string\n  ctx: AppToolContext\n  /** Tool description the model sees. */\n  description: string\n  headerNames?: ToolHeaderNames\n}\n\n/**\n * Build ONE HTTP MCP server entry — the generic agent→app bridge. The\n * capability token (as a secret reference) + the user/workspace/thread ids ride\n * in server-set headers (never tool args), so the model can't forge identity or\n * target another workspace. Workspace/thread headers are omitted when their\n * `ctx` value is empty/null (e.g. an integration-invoke bridge that's\n * user-scoped only). Used directly for non-app-tool bridges\n * (integration_invoke) and via {@link buildAppToolMcpServer} for the four app\n * tools.\n */\nexport function buildHttpMcpServer(opts: BuildHttpMcpServerOptions): AppToolMcpServer {\n  const base = opts.baseUrl.replace(/\\/+$/, '')\n  const h = opts.headerNames ?? DEFAULT_HEADER_NAMES\n  return assertProfileMcpServer(\n    {\n      transport: 'http',\n      url: `${base}${opts.path}`,\n      headers: {\n        Authorization: defineAgentProfileSecretRef(\n          assertSecretEnvKey(opts.tokenEnvKey, 'buildHttpMcpServer'),\n          'bearer',\n        ),\n        [h.userId]: defineAgentProfilePublicConfig(opts.ctx.userId),\n        ...(opts.ctx.workspaceId\n          ? { [h.workspaceId]: defineAgentProfilePublicConfig(opts.ctx.workspaceId) }\n          : {}),\n        ...(opts.ctx.threadId\n          ? { [h.threadId]: defineAgentProfilePublicConfig(opts.ctx.threadId) }\n          : {}),\n        'Content-Type': defineAgentProfilePublicConfig('application/json'),\n      },\n      enabled: true,\n      metadata: { description: opts.description },\n    },\n    'buildHttpMcpServer',\n  )\n}\n\n/** Options for a per-document/scoped MCP channel entry (design-canvas,\n *  sequences, …). The capability token + path scope ONE resource; the document\n *  id lives in the path, never a tool argument. */\nexport interface ScopedMcpServerEntryOptions {\n  /** App base URL the sandbox reaches back to (trailing slash tolerated). */\n  baseUrl: string\n  /** Product route serving the resource's MCP handler — id is part of the path. */\n  path: string\n  /**\n   * NAME of the box-environment variable holding this channel's capability\n   * token — never the token itself. See\n   * {@link BuildHttpMcpServerOptions.tokenEnvKey}.\n   *\n   * A per-(user, resource) token cannot satisfy this: the box environment is\n   * workspace-wide and fixed at sandbox creation. A product whose channel needs\n   * one calls {@link unresolvableSurfaceCredential} rather than mounting an\n   * entry that cannot resolve.\n   */\n  tokenEnvKey: string\n  /** Override the channel's default tool-server description. */\n  description?: string\n  /** Identity headers for products whose route recovers the user via\n   *  `authenticateToolRequest`. Omit when the bearer token is self-contained. */\n  ctx?: AppToolContext\n  headerNames?: ToolHeaderNames\n}\n\n/**\n * Build the `AgentProfileMcpServer`-shaped entry for a scoped, per-resource MCP\n * channel. The shared mechanism behind the per-domain entry builders\n * (`buildDesignCanvasMcpServerEntry`, `buildSequencesMcpServerEntry`): same\n * token/path guards, same description default, same ctx-vs-self-contained-token\n * branching. The domain is two parameters — `label` (for guard messages) and\n * `defaultDescription` — never baked.\n *\n * The no-`ctx` branch is a GENUINE behavioral path, not a shortcut: it emits a\n * self-contained-token entry with ONLY `Authorization` + `Content-Type`.\n * Routing it through {@link buildHttpMcpServer} would unconditionally write a\n * `userId` identity header (here `undefined`), so it stays a distinct branch.\n */\nexport function buildScopedMcpServerEntry(\n  opts: ScopedMcpServerEntryOptions & { label: string; defaultDescription: string },\n): AppToolMcpServer {\n  if (opts.tokenEnvKey.trim().length === 0) {\n    throw new Error(`${opts.label} requires a capability token env key — omit the MCP server when none is available`)\n  }\n  if (!opts.path.startsWith('/')) {\n    throw new Error(`${opts.label} path must start with \"/\" (got \"${opts.path}\")`)\n  }\n  const description = opts.description ?? opts.defaultDescription\n\n  if (opts.ctx) {\n    return buildHttpMcpServer({\n      path: opts.path,\n      baseUrl: opts.baseUrl,\n      tokenEnvKey: opts.tokenEnvKey,\n      ctx: opts.ctx,\n      description,\n      headerNames: opts.headerNames ?? DEFAULT_HEADER_NAMES,\n    })\n  }\n\n  return assertProfileMcpServer(\n    {\n      transport: 'http',\n      url: `${opts.baseUrl.replace(/\\/+$/, '')}${opts.path}`,\n      headers: {\n        Authorization: defineAgentProfileSecretRef(\n          assertSecretEnvKey(opts.tokenEnvKey, opts.label),\n          'bearer',\n        ),\n        'Content-Type': defineAgentProfilePublicConfig('application/json'),\n      },\n      enabled: true,\n      metadata: { description },\n    },\n    opts.label,\n  )\n}\n\n/** Define configuration options required to build an MCP server including tool, baseUrl, token, and context */\nexport interface BuildMcpServerOptions {\n  /** A built-in app tool name, or a product-registered {@link AppToolDefinition}.\n   *  A custom tool supplies its route via `AppToolDefinition.path` (or `paths`). */\n  tool: AppToolName | AppToolDefinition\n  baseUrl: string\n  /** NAME of the box-environment variable holding the capability token — see\n   *  {@link BuildHttpMcpServerOptions.tokenEnvKey}. */\n  tokenEnvKey: string\n  ctx: AppToolContext\n  description: string\n  headerNames?: ToolHeaderNames\n  paths?: Partial<Record<string, string>>\n}\n\n/** Build one app-tool MCP server entry — a thin wrapper over\n *  {@link buildHttpMcpServer} that resolves the tool's route path. Built-ins map\n *  through {@link DEFAULT_APP_TOOL_PATHS}; a custom tool uses its own `path`\n *  (or a `paths` override). */\nexport function buildAppToolMcpServer(opts: BuildMcpServerOptions): AppToolMcpServer {\n  const path =\n    typeof opts.tool === 'string'\n      ? opts.paths?.[opts.tool] ?? DEFAULT_APP_TOOL_PATHS[opts.tool]\n      : opts.paths?.[opts.tool.name] ?? opts.tool.path\n  if (!path) {\n    const name = typeof opts.tool === 'string' ? opts.tool : opts.tool.name\n    throw new Error(`buildAppToolMcpServer: tool \"${name}\" has no route path — set AppToolDefinition.path or pass it via opts.paths`)\n  }\n  return buildHttpMcpServer({\n    path,\n    baseUrl: opts.baseUrl,\n    tokenEnvKey: opts.tokenEnvKey,\n    ctx: opts.ctx,\n    description: opts.description,\n    headerNames: opts.headerNames,\n  })\n}\n","/**\n * Generic streamable-HTTP JSON-RPC 2.0 envelope for a tools-only MCP server.\n * Stateless, Workers-compatible: no session table, no SSE — every request gets\n * a single `application/json` response, which the streamable-HTTP transport\n * explicitly permits for tools-only servers.\n *\n * Protocol surface:\n *   initialize   → echo client's protocolVersion if supported, else latest\n *   ping         → empty result {}\n *   notifications/* (no `id`)  → 202 with no body\n *   tools/list   → tool manifest\n *   tools/call   → run + surface execution failures as isError text results\n *   anything else → -32601\n *\n * Execution failures (argument shape, validation, store throws) become `isError`\n * tool results carrying the thrown message verbatim — the model reads WHY and\n * retries. Protocol misuse becomes a JSON-RPC error object.\n */\n\nexport const MCP_PROTOCOL_VERSIONS = ['2025-06-18', '2025-03-26', '2024-11-05'] as const\n/** Resolve a valid protocol version from the predefined MCP_PROTOCOL_VERSIONS array */\nexport type McpProtocolVersion = (typeof MCP_PROTOCOL_VERSIONS)[number]\n\nconst LATEST_PROTOCOL_VERSION: McpProtocolVersion = MCP_PROTOCOL_VERSIONS[0]\n\n/** Describe the structure of server information including name and version */\nexport interface McpServerInfo {\n  name: string\n  version: string\n}\n\n/** One tool entry in the registry the handler owns. */\nexport interface McpToolDefinition<TEnv = Record<string, never>> {\n  name: string\n  description: string\n  /** JSON Schema for the `params.arguments` object. */\n  inputSchema: Record<string, unknown>\n  /** Receive validated (Record) args + the env the handler threaded; throw to\n   *  surface an isError result — never throw for protocol/framing issues. */\n  run(args: Record<string, unknown>, env: TEnv): Promise<unknown>\n}\n\n/** Define options for creating a handler that manages MCP tools with environment support */\nexport interface CreateMcpToolHandlerOptions<TEnv = Record<string, never>> {\n  serverInfo: McpServerInfo\n  /** Full tool list; order IS the tools/list order. */\n  tools: McpToolDefinition<TEnv>[]\n  /** Per-request environment threaded into every `run` call. If your tools are\n   *  stateless (or carry state through closure) pass an empty builder:\n   *  `() => ({} as TEnv)`. */\n  buildEnv(request: Request): TEnv | Promise<TEnv>\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\ntype JsonRpcId = string | number | null\n\ninterface ToolCallContent {\n  content: Array<{ type: 'text'; text: string }>\n  isError?: true\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction rpcResult(id: JsonRpcId, result: unknown): Response {\n  return Response.json({ jsonrpc: '2.0', id, result })\n}\n\nfunction rpcError(id: JsonRpcId, code: number, message: string, status = 200): Response {\n  return Response.json({ jsonrpc: '2.0', id, error: { code, message } }, { status })\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/**\n * Build a request handler for a tools-only MCP server. The returned function\n * accepts a standard `Request` and resolves to a `Response` — mount it on any\n * Cloudflare Worker route or Remix `loader`.\n *\n * The handler calls `buildEnv` exactly ONCE per `tools/call` request (after\n * the tool is found, before `run`) — non-`tools/call` paths skip it entirely\n * so metadata requests do not pay env-build cost.\n */\nexport function createMcpToolHandler<TEnv = Record<string, never>>(\n  opts: CreateMcpToolHandlerOptions<TEnv>,\n): (request: Request) => Promise<Response> {\n  const toolMap = new Map<string, McpToolDefinition<TEnv>>()\n  for (const tool of opts.tools) {\n    if (toolMap.has(tool.name)) throw new Error(`duplicate MCP tool name: ${tool.name}`)\n    toolMap.set(tool.name, tool)\n  }\n\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== 'POST') {\n      return new Response('MCP server accepts JSON-RPC 2.0 over POST only', {\n        status: 405,\n        headers: { Allow: 'POST' },\n      })\n    }\n\n    let body: unknown\n    try {\n      body = await request.json()\n    } catch {\n      return rpcError(null, -32700, 'Parse error: request body is not valid JSON', 400)\n    }\n\n    if (Array.isArray(body)) {\n      return rpcError(null, -32600, 'Invalid request: JSON-RPC batching is not supported', 400)\n    }\n    if (!isRecord(body) || body.jsonrpc !== '2.0' || typeof body.method !== 'string') {\n      return rpcError(\n        null,\n        -32600,\n        'Invalid request: expected a JSON-RPC 2.0 object with jsonrpc \"2.0\" and a string method',\n        400,\n      )\n    }\n\n    const method = body.method\n    const params = isRecord(body.params) ? body.params : {}\n\n    // Notifications have no `id` — acknowledge without a JSON-RPC body.\n    if (!('id' in body) || body.id === undefined) {\n      return new Response(null, { status: 202 })\n    }\n    const id = body.id as JsonRpcId\n\n    switch (method) {\n      case 'initialize': {\n        const requested = typeof params.protocolVersion === 'string' ? params.protocolVersion : undefined\n        const protocolVersion =\n          requested !== undefined && (MCP_PROTOCOL_VERSIONS as readonly string[]).includes(requested)\n            ? requested\n            : LATEST_PROTOCOL_VERSION\n        return rpcResult(id, {\n          protocolVersion,\n          capabilities: { tools: { listChanged: false } },\n          serverInfo: opts.serverInfo,\n        })\n      }\n\n      case 'ping':\n        return rpcResult(id, {})\n\n      case 'tools/list':\n        return rpcResult(id, {\n          tools: opts.tools.map((tool) => ({\n            name: tool.name,\n            description: tool.description,\n            inputSchema: tool.inputSchema,\n          })),\n        })\n\n      case 'tools/call': {\n        const name = params.name\n        if (typeof name !== 'string' || name.length === 0) {\n          return rpcError(id, -32602, 'tools/call requires params.name (string)')\n        }\n        const tool = toolMap.get(name)\n        if (!tool) {\n          return rpcError(\n            id,\n            -32602,\n            `Unknown tool: ${name}. Available tools: ${opts.tools.map((t) => t.name).join(', ')}`,\n          )\n        }\n        if (params.arguments !== undefined && !isRecord(params.arguments)) {\n          return rpcError(id, -32602, 'tools/call params.arguments must be an object when provided')\n        }\n        const args = isRecord(params.arguments) ? params.arguments : {}\n        let env: TEnv\n        try {\n          env = await opts.buildEnv(request)\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err)\n          const payload: ToolCallContent = {\n            content: [{ type: 'text', text: `${name} failed to build env: ${message}` }],\n            isError: true,\n          }\n          return rpcResult(id, payload)\n        }\n        try {\n          const result = await tool.run(args, env)\n          const payload: ToolCallContent = { content: [{ type: 'text', text: JSON.stringify(result) }] }\n          return rpcResult(id, payload)\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err)\n          const payload: ToolCallContent = {\n            content: [{ type: 'text', text: `${name} failed: ${message}` }],\n            isError: true,\n          }\n          return rpcResult(id, payload)\n        }\n      }\n\n      default:\n        return rpcError(id, -32601, `Method not found: ${method}`)\n    }\n  }\n}\n"],"mappings":";AAcO,IAAM,uBAAwC;AAAA,EACnD,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,UAAU;AACZ;AAsDA,eAAsB,wBAAwB,SAAkB,MAAoD;AAClH,QAAM,IAAI,KAAK,eAAe;AAC9B,QAAM,SAAS,QAAQ,QAAQ,IAAI,EAAE,MAAM,GAAG,KAAK;AACnD,QAAM,cAAc,QAAQ,QAAQ,IAAI,EAAE,WAAW,GAAG,KAAK;AAC7D,QAAM,WAAW,QAAQ,QAAQ,IAAI,EAAE,QAAQ,GAAG,KAAK,KAAK;AAC5D,QAAM,SAAS,QAAQ,QAAQ,IAAI,eAAe,GAAG,MAAM,kBAAkB,IAAI,CAAC;AAElF,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,iCAAiC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EAC5G;AACA,QAAM,UAAU,KAAK,YAAY,gBAAgB,cAAc;AAC/D,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACvG;AACA,MAAI,CAAE,MAAM,KAAK,YAAY,SAAS,MAAM,GAAI;AAC9C,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACtG;AACA,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACvG;AACA,SAAO,EAAE,IAAI,MAAM,KAAK,EAAE,QAAQ,aAAa,SAAS,EAAE;AAC5D;AAIA,eAAsB,aAAgB,SAAqC;AACzE,MAAI;AACJ,MAAI;AACF,WAAQ,MAAM,QAAQ,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAQ,KAAK,QAAQ,KAAK,aAAc;AAC1C;;;ACrEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AASA,IAAM,yBAAsD;AAAA,EACjE,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,WAAW;AAAA,EACX,cAAc;AAChB;AAgBA,IAAM,mBAAmB;AAUzB,SAAS,mBAAmB,KAAa,OAAuB;AAC9D,MAAI,CAAC,iBAAiB,KAAK,GAAG,GAAG;AAC/B,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,0IACoD,KAAK,UAAU,GAAG,CAAC;AAAA,IAGjF;AAAA,EACF;AACA,SAAO;AACT;AAiBA,SAAS,uBAAmD,QAAW,OAAkB;AACvF,QAAM,SAAS,4BAA4B,UAAU,MAAM;AAC3D,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO,EAAE,EACtE,KAAK,IAAI;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,8DAA8D,MAAM;AAAA,IAE9E;AAAA,EACF;AACA,SAAO;AACT;AAkBO,SAAS,8BAA8B,SAAwB;AACpE,QAAM,IAAI;AAAA,IACR,OAAO,OAAO;AAAA,EAKhB;AACF;AAuCO,SAAS,mBAAmB,MAAmD;AACpF,QAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAC5C,QAAM,IAAI,KAAK,eAAe;AAC9B,SAAO;AAAA,IACL;AAAA,MACE,WAAW;AAAA,MACX,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI;AAAA,MACxB,SAAS;AAAA,QACP,eAAe;AAAA,UACb,mBAAmB,KAAK,aAAa,oBAAoB;AAAA,UACzD;AAAA,QACF;AAAA,QACA,CAAC,EAAE,MAAM,GAAG,+BAA+B,KAAK,IAAI,MAAM;AAAA,QAC1D,GAAI,KAAK,IAAI,cACT,EAAE,CAAC,EAAE,WAAW,GAAG,+BAA+B,KAAK,IAAI,WAAW,EAAE,IACxE,CAAC;AAAA,QACL,GAAI,KAAK,IAAI,WACT,EAAE,CAAC,EAAE,QAAQ,GAAG,+BAA+B,KAAK,IAAI,QAAQ,EAAE,IAClE,CAAC;AAAA,QACL,gBAAgB,+BAA+B,kBAAkB;AAAA,MACnE;AAAA,MACA,SAAS;AAAA,MACT,UAAU,EAAE,aAAa,KAAK,YAAY;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACF;AA0CO,SAAS,0BACd,MACkB;AAClB,MAAI,KAAK,YAAY,KAAK,EAAE,WAAW,GAAG;AACxC,UAAM,IAAI,MAAM,GAAG,KAAK,KAAK,wFAAmF;AAAA,EAClH;AACA,MAAI,CAAC,KAAK,KAAK,WAAW,GAAG,GAAG;AAC9B,UAAM,IAAI,MAAM,GAAG,KAAK,KAAK,mCAAmC,KAAK,IAAI,IAAI;AAAA,EAC/E;AACA,QAAM,cAAc,KAAK,eAAe,KAAK;AAE7C,MAAI,KAAK,KAAK;AACZ,WAAO,mBAAmB;AAAA,MACxB,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,aAAa,KAAK;AAAA,MAClB,KAAK,KAAK;AAAA,MACV;AAAA,MACA,aAAa,KAAK,eAAe;AAAA,IACnC,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,MACE,WAAW;AAAA,MACX,KAAK,GAAG,KAAK,QAAQ,QAAQ,QAAQ,EAAE,CAAC,GAAG,KAAK,IAAI;AAAA,MACpD,SAAS;AAAA,QACP,eAAe;AAAA,UACb,mBAAmB,KAAK,aAAa,KAAK,KAAK;AAAA,UAC/C;AAAA,QACF;AAAA,QACA,gBAAgB,+BAA+B,kBAAkB;AAAA,MACnE;AAAA,MACA,SAAS;AAAA,MACT,UAAU,EAAE,YAAY;AAAA,IAC1B;AAAA,IACA,KAAK;AAAA,EACP;AACF;AAqBO,SAAS,sBAAsB,MAA+C;AACnF,QAAM,OACJ,OAAO,KAAK,SAAS,WACjB,KAAK,QAAQ,KAAK,IAAI,KAAK,uBAAuB,KAAK,IAAI,IAC3D,KAAK,QAAQ,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK;AAChD,MAAI,CAAC,MAAM;AACT,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,KAAK;AACnE,UAAM,IAAI,MAAM,gCAAgC,IAAI,iFAA4E;AAAA,EAClI;AACA,SAAO,mBAAmB;AAAA,IACxB;AAAA,IACA,SAAS,KAAK;AAAA,IACd,aAAa,KAAK;AAAA,IAClB,KAAK,KAAK;AAAA,IACV,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,EACpB,CAAC;AACH;;;ACtTO,IAAM,wBAAwB,CAAC,cAAc,cAAc,YAAY;AAI9E,IAAM,0BAA8C,sBAAsB,CAAC;AAyC3E,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,UAAU,IAAe,QAA2B;AAC3D,SAAO,SAAS,KAAK,EAAE,SAAS,OAAO,IAAI,OAAO,CAAC;AACrD;AAEA,SAAS,SAAS,IAAe,MAAc,SAAiB,SAAS,KAAe;AACtF,SAAO,SAAS,KAAK,EAAE,SAAS,OAAO,IAAI,OAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;AACnF;AAeO,SAAS,qBACd,MACyC;AACzC,QAAM,UAAU,oBAAI,IAAqC;AACzD,aAAW,QAAQ,KAAK,OAAO;AAC7B,QAAI,QAAQ,IAAI,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,4BAA4B,KAAK,IAAI,EAAE;AACnF,YAAQ,IAAI,KAAK,MAAM,IAAI;AAAA,EAC7B;AAEA,SAAO,OAAO,YAAwC;AACpD,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO,IAAI,SAAS,kDAAkD;AAAA,QACpE,QAAQ;AAAA,QACR,SAAS,EAAE,OAAO,OAAO;AAAA,MAC3B,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,QAAQ,KAAK;AAAA,IAC5B,QAAQ;AACN,aAAO,SAAS,MAAM,QAAQ,+CAA+C,GAAG;AAAA,IAClF;AAEA,QAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,aAAO,SAAS,MAAM,QAAQ,uDAAuD,GAAG;AAAA,IAC1F;AACA,QAAI,CAAC,SAAS,IAAI,KAAK,KAAK,YAAY,SAAS,OAAO,KAAK,WAAW,UAAU;AAChF,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,KAAK;AACpB,UAAM,SAAS,SAAS,KAAK,MAAM,IAAI,KAAK,SAAS,CAAC;AAGtD,QAAI,EAAE,QAAQ,SAAS,KAAK,OAAO,QAAW;AAC5C,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AACA,UAAM,KAAK,KAAK;AAEhB,YAAQ,QAAQ;AAAA,MACd,KAAK,cAAc;AACjB,cAAM,YAAY,OAAO,OAAO,oBAAoB,WAAW,OAAO,kBAAkB;AACxF,cAAM,kBACJ,cAAc,UAAc,sBAA4C,SAAS,SAAS,IACtF,YACA;AACN,eAAO,UAAU,IAAI;AAAA,UACnB;AAAA,UACA,cAAc,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;AAAA,UAC9C,YAAY,KAAK;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,MAEA,KAAK;AACH,eAAO,UAAU,IAAI,CAAC,CAAC;AAAA,MAEzB,KAAK;AACH,eAAO,UAAU,IAAI;AAAA,UACnB,OAAO,KAAK,MAAM,IAAI,CAAC,UAAU;AAAA,YAC/B,MAAM,KAAK;AAAA,YACX,aAAa,KAAK;AAAA,YAClB,aAAa,KAAK;AAAA,UACpB,EAAE;AAAA,QACJ,CAAC;AAAA,MAEH,KAAK,cAAc;AACjB,cAAM,OAAO,OAAO;AACpB,YAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,iBAAO,SAAS,IAAI,QAAQ,0CAA0C;AAAA,QACxE;AACA,cAAM,OAAO,QAAQ,IAAI,IAAI;AAC7B,YAAI,CAAC,MAAM;AACT,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,YACA,iBAAiB,IAAI,sBAAsB,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,UACrF;AAAA,QACF;AACA,YAAI,OAAO,cAAc,UAAa,CAAC,SAAS,OAAO,SAAS,GAAG;AACjE,iBAAO,SAAS,IAAI,QAAQ,6DAA6D;AAAA,QAC3F;AACA,cAAM,OAAO,SAAS,OAAO,SAAS,IAAI,OAAO,YAAY,CAAC;AAC9D,YAAI;AACJ,YAAI;AACF,gBAAM,MAAM,KAAK,SAAS,OAAO;AAAA,QACnC,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAM,UAA2B;AAAA,YAC/B,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,GAAG,IAAI,yBAAyB,OAAO,GAAG,CAAC;AAAA,YAC3E,SAAS;AAAA,UACX;AACA,iBAAO,UAAU,IAAI,OAAO;AAAA,QAC9B;AACA,YAAI;AACF,gBAAM,SAAS,MAAM,KAAK,IAAI,MAAM,GAAG;AACvC,gBAAM,UAA2B,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC,EAAE;AAC7F,iBAAO,UAAU,IAAI,OAAO;AAAA,QAC9B,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAM,UAA2B;AAAA,YAC/B,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,GAAG,IAAI,YAAY,OAAO,GAAG,CAAC;AAAA,YAC9D,SAAS;AAAA,UACX;AACA,iBAAO,UAAU,IAAI,OAAO;AAAA,QAC9B;AAAA,MACF;AAAA,MAEA;AACE,eAAO,SAAS,IAAI,QAAQ,qBAAqB,MAAM,EAAE;AAAA,IAC7D;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-ZSJRDHCN.js

@@ -0,0 +1,129 @@
+// src/peer-floors/check.ts
+import { existsSync, readFileSync } from "fs";
+import { dirname, join } from "path";
+function readInstalledManifest(name, fromDir, modulesDir) {
+  let dir = fromDir;
+  for (; ; ) {
+    const manifest = join(dir, modulesDir, name, "package.json");
+    if (existsSync(manifest)) {
+      return JSON.parse(readFileSync(manifest, "utf8"));
+    }
+    const parent = dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function parseVersion(version) {
+  const [core] = version.split(/[-+]/);
+  const parts = (core ?? "").split(".").map((p) => Number.parseInt(p, 10));
+  return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
+}
+function compare(a, b) {
+  const va = parseVersion(a);
+  const vb = parseVersion(b);
+  for (let i = 0; i < 3; i += 1) {
+    if (va[i] !== vb[i]) return va[i] < vb[i] ? -1 : 1;
+  }
+  return 0;
+}
+function satisfiesComparator(version, comparator) {
+  const trimmed = comparator.trim();
+  if (!trimmed || trimmed === "*" || trimmed === "x") return true;
+  const match = /^(>=|<=|>|<|=|\^|~)?\s*v?(.+)$/.exec(trimmed);
+  if (!match) return false;
+  const [, op = "=", target = ""] = match;
+  const cmp = compare(version, target);
+  switch (op) {
+    case ">=":
+      return cmp >= 0;
+    case "<=":
+      return cmp <= 0;
+    case ">":
+      return cmp > 0;
+    case "<":
+      return cmp < 0;
+    case "=":
+      return cmp === 0;
+    case "~": {
+      const [major, minor] = parseVersion(target);
+      const [vMajor, vMinor] = parseVersion(version);
+      return cmp >= 0 && vMajor === major && vMinor === minor;
+    }
+    case "^": {
+      const [major, minor] = parseVersion(target);
+      const [vMajor, vMinor] = parseVersion(version);
+      if (cmp < 0) return false;
+      if (major > 0) return vMajor === major;
+      if (minor > 0) return vMajor === 0 && vMinor === minor;
+      return vMajor === 0 && vMinor === 0;
+    }
+    default:
+      return false;
+  }
+}
+function satisfiesRange(version, range) {
+  return range.split("||").some(
+    (alternative) => alternative.trim().split(/\s+/).filter(Boolean).every((c) => satisfiesComparator(version, c))
+  );
+}
+function checkPeerFloors(options) {
+  const {
+    appDir,
+    shell = "@tangle-network/agent-app",
+    scope = "@tangle-network/",
+    modulesDir = "node_modules"
+  } = options;
+  const shellManifest = options.shellManifest ?? readInstalledManifest(shell, appDir, modulesDir);
+  if (!shellManifest) throw new Error(`${shell} is not installed under ${appDir}`);
+  const appManifest = JSON.parse(readFileSync(join(appDir, "package.json"), "utf8"));
+  const declared = {
+    ...appManifest.dependencies,
+    ...appManifest.devDependencies,
+    ...appManifest.optionalDependencies
+  };
+  const floors = Object.entries(shellManifest.peerDependencies ?? {}).filter(([name]) => name.startsWith(scope));
+  const rows = floors.map(([name, range]) => {
+    const installed = readInstalledManifest(name, appDir, modulesDir)?.version ?? null;
+    if (installed === null) {
+      return { name, range, installed, verdict: declared[name] ? "absent-but-declared" : "absent-unused" };
+    }
+    return {
+      name,
+      range,
+      installed,
+      verdict: satisfiesRange(installed, range) ? "satisfied" : "below-floor"
+    };
+  });
+  const violations = rows.filter((row) => row.verdict === "below-floor" || row.verdict === "absent-but-declared");
+  return {
+    shellVersion: shellManifest.version ?? "unknown",
+    rows,
+    violations,
+    ok: violations.length === 0
+  };
+}
+function describePeerFloorViolation(row, shellVersion, shell = "@tangle-network/agent-app") {
+  if (row.verdict === "below-floor") {
+    return `PEER FLOOR VIOLATED: ${shell}@${shellVersion} requires ${row.name}@${row.range}, but ${row.installed} is installed. A peer floor encodes a wire contract \u2014 bump the dependency, do not widen the floor. A caret on a 0.x version is minor-locked (^0.36.0 can never resolve to 0.38.0), so reinstalling alone will not fix this: change the pin, in EVERY place it appears including pnpm.overrides.`;
+  }
+  return `${row.name} is a declared dependency of this app, but no installed version could be read, so its peer floor ${row.range} went UNCHECKED. Failing loudly rather than reporting a pass this guard did not earn.`;
+}
+function formatPeerFloorReport(report, shell = "@tangle-network/agent-app") {
+  const width = Math.max(...report.rows.map((r) => r.name.length), 4);
+  const lines = [
+    `${shell}@${report.shellVersion} \u2014 peer floors`,
+    "",
+    ...report.rows.map((row) => `  ${row.verdict === "satisfied" ? "ok  " : row.verdict.startsWith("absent") ? "--  " : "FAIL"} ${row.name.padEnd(width)}  installed ${(row.installed ?? "(none)").padEnd(10)} floor ${row.range}`),
+    "",
+    report.ok ? `all ${report.rows.length} floors satisfied` : report.violations.map((row) => describePeerFloorViolation(row, report.shellVersion, shell)).join("\n\n")
+  ];
+  return lines.join("\n");
+}
+
+export {
+  satisfiesRange,
+  checkPeerFloors,
+  describePeerFloorViolation,
+  formatPeerFloorReport
+};
+//# sourceMappingURL=chunk-ZSJRDHCN.js.map

package/dist/chunk-ZSJRDHCN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/peer-floors/check.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\n/**\n * Audit a consumer's installed tree against the peer floors this package\n * declares.\n *\n * A peer floor is not documentation — it encodes a WIRE CONTRACT, and breaking\n * one is invisible to every other gate. `pnpm` only WARNS on an unmet peer when\n * the package is also a direct dependency, and says nothing at all for an unmet\n * OPTIONAL peer, which is how most of the substrate is declared here. So a\n * product can sit below a floor with a clean install, a clean typecheck, a green\n * suite and a successful deploy, and fail only on a live wire call:\n *\n *   `@tangle-network/sandbox` 0.15.0 → 0.15.1 changed the sidecar spawn body\n *   from `{ command }` to `{ executable, args }`. Below the floor, every\n *   `box.exec()` on a live sandbox returns 400 `Unrecognized key: \"command\"`.\n *\n *   `@tangle-network/agent-interface` 0.38.0 changed MCP config values from\n *   plain strings to tagged public/secret-ref objects. Below the floor, this\n *   package fails at MODULE LOAD with \"does not provide an export named\n *   defineAgentProfilePublicConfig\" — while `tsc` reports zero errors, because\n *   the types resolve and only the runtime export is missing.\n *\n * That second shape is why this exists as its own gate: typecheck cannot see it,\n * and a suite only sees it as dozens of unrelated-looking import failures.\n */\n\n/** Installed, and inside the declared range. */\nexport type PeerFloorVerdict =\n  | 'satisfied'\n  /** Installed and BELOW the floor — the silent case this module exists for. */\n  | 'below-floor'\n  /** Not installed and never asked for. A legitimate answer for an optional peer. */\n  | 'absent-unused'\n  /** Declared by the app, yet no version could be read, so the floor went\n   *  UNCHECKED. Reported as a failure rather than a pass this did not earn. */\n  | 'absent-but-declared'\n\nexport interface PeerFloorRow {\n  readonly name: string\n  readonly range: string\n  readonly installed: string | null\n  readonly verdict: PeerFloorVerdict\n}\n\nexport interface PeerFloorReport {\n  readonly shellVersion: string\n  readonly rows: readonly PeerFloorRow[]\n  readonly violations: readonly PeerFloorRow[]\n  readonly ok: boolean\n}\n\nexport interface CheckPeerFloorsOptions {\n  /** Directory of the app under audit — the one whose `package.json` and\n   *  installed tree are read. */\n  appDir: string\n  /** Package whose peer floors are the contract. Defaults to this shell. */\n  shell?: string\n  /** Only audit peers under this scope. Third-party peers (react, drizzle) are\n   *  the app's own business, not part of the Tangle wire contract. Pass `''` to\n   *  audit every peer. */\n  scope?: string\n  /** Floors to audit against, when the shell is not resolvable from `appDir` —\n   *  the package auditing ITSELF, which has no copy of itself in its own\n   *  `node_modules`. Without this a package cannot check that the contract it\n   *  publishes is one its own dev install satisfies. */\n  shellManifest?: { version?: string; peerDependencies?: Record<string, string> }\n  /** Directory name to walk for installed packages. Overridable so a test can\n   *  point at a committed fixture tree — `node_modules` is gitignored\n   *  everywhere, so a fixture using that name could not be committed, and a\n   *  calibration proof that is not committed is a proof that stops running. */\n  modulesDir?: string\n}\n\n/**\n * Read a package's manifest off disk, walking `modulesDir` up from `fromDir`.\n *\n * Deliberately NOT `require.resolve('<name>/package.json')`: most of these\n * packages omit `./package.json` from their `exports` map, so that throws\n * ERR_PACKAGE_PATH_NOT_EXPORTED — and a try/catch around it reports an INSTALLED\n * package as absent, turning the whole audit into a silent no-op. Walking the\n * tree is exports-map-independent and mirrors Node's own resolution order, so\n * the version reported is the version that would actually load.\n *\n * Returns null only when no directory for the package exists anywhere up the\n * tree, which is the genuine not-installed case.\n */\nfunction readInstalledManifest(\n  name: string,\n  fromDir: string,\n  modulesDir: string,\n): { version?: string; peerDependencies?: Record<string, string> } | null {\n  let dir = fromDir\n  for (;;) {\n    const manifest = join(dir, modulesDir, name, 'package.json')\n    if (existsSync(manifest)) {\n      return JSON.parse(readFileSync(manifest, 'utf8')) as {\n        version?: string\n        peerDependencies?: Record<string, string>\n      }\n    }\n    const parent = dirname(dir)\n    if (parent === dir) return null\n    dir = parent\n  }\n}\n\n/**\n * Minimal range satisfaction for the ranges peer floors actually use:\n * `>=x <y`, `^x.y.z`, `~x.y.z`, `x.y.z`, and `*`/`x`.\n *\n * Hand-rolled rather than taking a `semver` dependency, because this package\n * ships zero runtime dependencies and a checker that forces one on every\n * consumer is a worse trade than 40 lines of comparison. Prerelease versions\n * compare by their release part — a floor is about the wire contract, and a\n * prerelease of a satisfying version speaks it.\n */\nfunction parseVersion(version: string): [number, number, number] {\n  const [core] = version.split(/[-+]/)\n  const parts = (core ?? '').split('.').map((p) => Number.parseInt(p, 10))\n  return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0]\n}\n\nfunction compare(a: string, b: string): number {\n  const va = parseVersion(a)\n  const vb = parseVersion(b)\n  for (let i = 0; i < 3; i += 1) {\n    if (va[i]! !== vb[i]!) return va[i]! < vb[i]! ? -1 : 1\n  }\n  return 0\n}\n\nfunction satisfiesComparator(version: string, comparator: string): boolean {\n  const trimmed = comparator.trim()\n  if (!trimmed || trimmed === '*' || trimmed === 'x') return true\n  const match = /^(>=|<=|>|<|=|\\^|~)?\\s*v?(.+)$/.exec(trimmed)\n  if (!match) return false\n  const [, op = '=', target = ''] = match\n  const cmp = compare(version, target)\n  switch (op) {\n    case '>=': return cmp >= 0\n    case '<=': return cmp <= 0\n    case '>': return cmp > 0\n    case '<': return cmp < 0\n    case '=': return cmp === 0\n    case '~': {\n      // ~1.2.3 allows patch bumps; ~1.2 allows minor.\n      const [major, minor] = parseVersion(target)\n      const [vMajor, vMinor] = parseVersion(version)\n      return cmp >= 0 && vMajor === major && vMinor === minor\n    }\n    case '^': {\n      // A caret on a 0.x version is MINOR-locked: ^0.36.0 can never resolve to\n      // 0.38.0. That is the single most common reason a floor cannot be met by\n      // reinstalling, so it is modelled exactly rather than approximated.\n      const [major, minor] = parseVersion(target)\n      const [vMajor, vMinor] = parseVersion(version)\n      if (cmp < 0) return false\n      if (major > 0) return vMajor === major\n      if (minor > 0) return vMajor === 0 && vMinor === minor\n      return vMajor === 0 && vMinor === 0\n    }\n    default: return false\n  }\n}\n\nexport function satisfiesRange(version: string, range: string): boolean {\n  // `||` is alternation; whitespace inside an alternative is conjunction.\n  return range.split('||').some((alternative) =>\n    alternative.trim().split(/\\s+/).filter(Boolean).every((c) => satisfiesComparator(version, c)),\n  )\n}\n\n/** Audit one app directory against the shell's declared peer floors. */\nexport function checkPeerFloors(options: CheckPeerFloorsOptions): PeerFloorReport {\n  const {\n    appDir,\n    shell = '@tangle-network/agent-app',\n    scope = '@tangle-network/',\n    modulesDir = 'node_modules',\n  } = options\n\n  const shellManifest = options.shellManifest ?? readInstalledManifest(shell, appDir, modulesDir)\n  if (!shellManifest) throw new Error(`${shell} is not installed under ${appDir}`)\n\n  const appManifest = JSON.parse(readFileSync(join(appDir, 'package.json'), 'utf8')) as {\n    dependencies?: Record<string, string>\n    devDependencies?: Record<string, string>\n    optionalDependencies?: Record<string, string>\n  }\n  const declared = {\n    ...appManifest.dependencies,\n    ...appManifest.devDependencies,\n    ...appManifest.optionalDependencies,\n  }\n\n  const floors = Object.entries(shellManifest.peerDependencies ?? {})\n    .filter(([name]) => name.startsWith(scope))\n\n  const rows = floors.map(([name, range]): PeerFloorRow => {\n    const installed = readInstalledManifest(name, appDir, modulesDir)?.version ?? null\n    if (installed === null) {\n      return { name, range, installed, verdict: declared[name] ? 'absent-but-declared' : 'absent-unused' }\n    }\n    return {\n      name,\n      range,\n      installed,\n      verdict: satisfiesRange(installed, range) ? 'satisfied' : 'below-floor',\n    }\n  })\n\n  const violations = rows.filter((row) => row.verdict === 'below-floor' || row.verdict === 'absent-but-declared')\n  return {\n    shellVersion: shellManifest.version ?? 'unknown',\n    rows,\n    violations,\n    ok: violations.length === 0,\n  }\n}\n\n/** The failure message for one violating row. Split out so a caller can raise\n *  it from a test and a CLI can print it identically. */\nexport function describePeerFloorViolation(row: PeerFloorRow, shellVersion: string, shell = '@tangle-network/agent-app'): string {\n  if (row.verdict === 'below-floor') {\n    return `PEER FLOOR VIOLATED: ${shell}@${shellVersion} requires ${row.name}@${row.range}, `\n      + `but ${row.installed} is installed. A peer floor encodes a wire contract — bump the `\n      + `dependency, do not widen the floor. A caret on a 0.x version is minor-locked `\n      + `(^0.36.0 can never resolve to 0.38.0), so reinstalling alone will not fix this: `\n      + `change the pin, in EVERY place it appears including pnpm.overrides.`\n  }\n  return `${row.name} is a declared dependency of this app, but no installed version could be `\n    + `read, so its peer floor ${row.range} went UNCHECKED. Failing loudly rather than `\n    + `reporting a pass this guard did not earn.`\n}\n\nexport function formatPeerFloorReport(report: PeerFloorReport, shell = '@tangle-network/agent-app'): string {\n  const width = Math.max(...report.rows.map((r) => r.name.length), 4)\n  const lines = [\n    `${shell}@${report.shellVersion} — peer floors`,\n    '',\n    ...report.rows.map((row) =>\n      `  ${row.verdict === 'satisfied' ? 'ok  ' : row.verdict.startsWith('absent') ? '--  ' : 'FAIL'} `\n      + `${row.name.padEnd(width)}  installed ${(row.installed ?? '(none)').padEnd(10)} floor ${row.range}`),\n    '',\n    report.ok\n      ? `all ${report.rows.length} floors satisfied`\n      : report.violations.map((row) => describePeerFloorViolation(row, report.shellVersion, shell)).join('\\n\\n'),\n  ]\n  return lines.join('\\n')\n}\n"],"mappings":";AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,YAAY;AAuF9B,SAAS,sBACP,MACA,SACA,YACwE;AACxE,MAAI,MAAM;AACV,aAAS;AACP,UAAM,WAAW,KAAK,KAAK,YAAY,MAAM,cAAc;AAC3D,QAAI,WAAW,QAAQ,GAAG;AACxB,aAAO,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAAA,IAIlD;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK,QAAO;AAC3B,UAAM;AAAA,EACR;AACF;AAYA,SAAS,aAAa,SAA2C;AAC/D,QAAM,CAAC,IAAI,IAAI,QAAQ,MAAM,MAAM;AACnC,QAAM,SAAS,QAAQ,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,CAAC;AACvE,SAAO,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;AACrD;AAEA,SAAS,QAAQ,GAAW,GAAmB;AAC7C,QAAM,KAAK,aAAa,CAAC;AACzB,QAAM,KAAK,aAAa,CAAC;AACzB,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG;AAC7B,QAAI,GAAG,CAAC,MAAO,GAAG,CAAC,EAAI,QAAO,GAAG,CAAC,IAAK,GAAG,CAAC,IAAK,KAAK;AAAA,EACvD;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAiB,YAA6B;AACzE,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,CAAC,WAAW,YAAY,OAAO,YAAY,IAAK,QAAO;AAC3D,QAAM,QAAQ,iCAAiC,KAAK,OAAO;AAC3D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,CAAC,EAAE,KAAK,KAAK,SAAS,EAAE,IAAI;AAClC,QAAM,MAAM,QAAQ,SAAS,MAAM;AACnC,UAAQ,IAAI;AAAA,IACV,KAAK;AAAM,aAAO,OAAO;AAAA,IACzB,KAAK;AAAM,aAAO,OAAO;AAAA,IACzB,KAAK;AAAK,aAAO,MAAM;AAAA,IACvB,KAAK;AAAK,aAAO,MAAM;AAAA,IACvB,KAAK;AAAK,aAAO,QAAQ;AAAA,IACzB,KAAK,KAAK;AAER,YAAM,CAAC,OAAO,KAAK,IAAI,aAAa,MAAM;AAC1C,YAAM,CAAC,QAAQ,MAAM,IAAI,aAAa,OAAO;AAC7C,aAAO,OAAO,KAAK,WAAW,SAAS,WAAW;AAAA,IACpD;AAAA,IACA,KAAK,KAAK;AAIR,YAAM,CAAC,OAAO,KAAK,IAAI,aAAa,MAAM;AAC1C,YAAM,CAAC,QAAQ,MAAM,IAAI,aAAa,OAAO;AAC7C,UAAI,MAAM,EAAG,QAAO;AACpB,UAAI,QAAQ,EAAG,QAAO,WAAW;AACjC,UAAI,QAAQ,EAAG,QAAO,WAAW,KAAK,WAAW;AACjD,aAAO,WAAW,KAAK,WAAW;AAAA,IACpC;AAAA,IACA;AAAS,aAAO;AAAA,EAClB;AACF;AAEO,SAAS,eAAe,SAAiB,OAAwB;AAEtE,SAAO,MAAM,MAAM,IAAI,EAAE;AAAA,IAAK,CAAC,gBAC7B,YAAY,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EAAE,MAAM,CAAC,MAAM,oBAAoB,SAAS,CAAC,CAAC;AAAA,EAC9F;AACF;AAGO,SAAS,gBAAgB,SAAkD;AAChF,QAAM;AAAA,IACJ;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,aAAa;AAAA,EACf,IAAI;AAEJ,QAAM,gBAAgB,QAAQ,iBAAiB,sBAAsB,OAAO,QAAQ,UAAU;AAC9F,MAAI,CAAC,cAAe,OAAM,IAAI,MAAM,GAAG,KAAK,2BAA2B,MAAM,EAAE;AAE/E,QAAM,cAAc,KAAK,MAAM,aAAa,KAAK,QAAQ,cAAc,GAAG,MAAM,CAAC;AAKjF,QAAM,WAAW;AAAA,IACf,GAAG,YAAY;AAAA,IACf,GAAG,YAAY;AAAA,IACf,GAAG,YAAY;AAAA,EACjB;AAEA,QAAM,SAAS,OAAO,QAAQ,cAAc,oBAAoB,CAAC,CAAC,EAC/D,OAAO,CAAC,CAAC,IAAI,MAAM,KAAK,WAAW,KAAK,CAAC;AAE5C,QAAM,OAAO,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAoB;AACvD,UAAM,YAAY,sBAAsB,MAAM,QAAQ,UAAU,GAAG,WAAW;AAC9E,QAAI,cAAc,MAAM;AACtB,aAAO,EAAE,MAAM,OAAO,WAAW,SAAS,SAAS,IAAI,IAAI,wBAAwB,gBAAgB;AAAA,IACrG;AACA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,eAAe,WAAW,KAAK,IAAI,cAAc;AAAA,IAC5D;AAAA,EACF,CAAC;AAED,QAAM,aAAa,KAAK,OAAO,CAAC,QAAQ,IAAI,YAAY,iBAAiB,IAAI,YAAY,qBAAqB;AAC9G,SAAO;AAAA,IACL,cAAc,cAAc,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,IACA,IAAI,WAAW,WAAW;AAAA,EAC5B;AACF;AAIO,SAAS,2BAA2B,KAAmB,cAAsB,QAAQ,6BAAqC;AAC/H,MAAI,IAAI,YAAY,eAAe;AACjC,WAAO,wBAAwB,KAAK,IAAI,YAAY,aAAa,IAAI,IAAI,IAAI,IAAI,KAAK,SAC3E,IAAI,SAAS;AAAA,EAI1B;AACA,SAAO,GAAG,IAAI,IAAI,oGACa,IAAI,KAAK;AAE1C;AAEO,SAAS,sBAAsB,QAAyB,QAAQ,6BAAqC;AAC1G,QAAM,QAAQ,KAAK,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,GAAG,CAAC;AAClE,QAAM,QAAQ;AAAA,IACZ,GAAG,KAAK,IAAI,OAAO,YAAY;AAAA,IAC/B;AAAA,IACA,GAAG,OAAO,KAAK,IAAI,CAAC,QAClB,KAAK,IAAI,YAAY,cAAc,SAAS,IAAI,QAAQ,WAAW,QAAQ,IAAI,SAAS,MAAM,IACzF,IAAI,KAAK,OAAO,KAAK,CAAC,gBAAgB,IAAI,aAAa,UAAU,OAAO,EAAE,CAAC,UAAU,IAAI,KAAK,EAAE;AAAA,IACvG;AAAA,IACA,OAAO,KACH,OAAO,OAAO,KAAK,MAAM,sBACzB,OAAO,WAAW,IAAI,CAAC,QAAQ,2BAA2B,KAAK,OAAO,cAAc,KAAK,CAAC,EAAE,KAAK,MAAM;AAAA,EAC7G;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/design-canvas/index.d.ts

@@ -6,10 +6,10 @@ import { a as SceneStore, N as NewSceneDecision, b as SceneDocumentRecord } from
 export { c as SceneDecision, d as SceneExportFormat, e as SceneExportRecord, S as SceneStoreScope } from '../store-CqfDtnPQ.js';
 export { C as CHANNEL_PRESETS, a as ChannelPreset, b as ChannelPresetId, c as ChannelScaleResult, E as EXPORT_PRESETS, d as ExportCropRect, e as ExportFormat, f as ExportPreset, S as SIZE_PRESETS, g as SizePreset, h as bleedAwareExportBounds, i as bleedAwareExportRect, j as findPreset, m as matchPreset, r as requireChannelPreset, s as scaleForPreset, k as scalePageForChannelPreset } from '../export-presets-mgVulRaV.js';
 import { a as McpToolDefinition } from '../mcp-rpc-CzU5LWWT.js';
-import { S as ScopedMcpServerEntryOptions, A as AppToolMcpServer } from '../mcp-BOgNWSED.js';
+import { S as ScopedMcpServerEntryOptions, A as AppToolMcpServer } from '../mcp-C-jV_Xe9.js';
 import '@tangle-network/agent-interface';
 import '../types-DbU-oO5h.js';
-import '../auth-DJs6lfAs.js';
+import '../auth-Bulnsz3V.js';
 
 /**
  * Pre-write validation for scene operations. Every rule runs against a

package/dist/design-canvas/index.js

@@ -36,7 +36,7 @@ import "../chunk-J25RST7G.js";
 import {
   buildScopedMcpServerEntry,
   createMcpToolHandler
-} from "../chunk-IVEKCOM7.js";
+} from "../chunk-YOFQO4R6.js";
 
 // src/design-canvas/operations.ts
 var SCENE_OPERATION_TYPES = [

package/dist/design-canvas-react/index.js

@@ -43,6 +43,10 @@ import {
   selectTickStep
 } from "../chunk-KPRBFNGT.js";
 import "../chunk-TZO3SOUL.js";
+import {
+  DesignCanvasChromeLazy,
+  DesignCanvasLazy
+} from "../chunk-OO4DROKM.js";
 import "../chunk-ZN5J47UX.js";
 import {
   DEFAULT_INSERT_TEMPLATES,
@@ -88,10 +92,6 @@ import {
   bleedAwareExportBounds,
   scaleForPreset
 } from "../chunk-U4BXAZCN.js";
-import {
-  DesignCanvasChromeLazy,
-  DesignCanvasLazy
-} from "../chunk-DMYCGXBP.js";
 import "../chunk-J25RST7G.js";
 
 // src/design-canvas-react/components/CanvasInsertPanel.tsx

package/dist/design-canvas-react/lazy.js

@@ -1,7 +1,7 @@
 import {
   DesignCanvasChromeLazy,
   DesignCanvasLazy
-} from "../chunk-DMYCGXBP.js";
+} from "../chunk-OO4DROKM.js";
 export {
   DesignCanvasChromeLazy,
   DesignCanvasLazy

package/dist/{mcp-BOgNWSED.d.ts → mcp-C-jV_Xe9.d.ts}

@@ -1,6 +1,6 @@
 import { AgentProfileConfigValue } from '@tangle-network/agent-interface';
 import { A as AppToolContext, a as AppToolName, b as AppToolDefinition } from './types-DbU-oO5h.js';
-import { T as ToolHeaderNames } from './auth-DJs6lfAs.js';
+import { T as ToolHeaderNames } from './auth-Bulnsz3V.js';
 
 /**
  * The tagged-configuration contract for every MCP server this package emits.

package/dist/peer-floors/check.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Audit a consumer's installed tree against the peer floors this package
+ * declares.
+ *
+ * A peer floor is not documentation — it encodes a WIRE CONTRACT, and breaking
+ * one is invisible to every other gate. `pnpm` only WARNS on an unmet peer when
+ * the package is also a direct dependency, and says nothing at all for an unmet
+ * OPTIONAL peer, which is how most of the substrate is declared here. So a
+ * product can sit below a floor with a clean install, a clean typecheck, a green
+ * suite and a successful deploy, and fail only on a live wire call:
+ *
+ *   `@tangle-network/sandbox` 0.15.0 → 0.15.1 changed the sidecar spawn body
+ *   from `{ command }` to `{ executable, args }`. Below the floor, every
+ *   `box.exec()` on a live sandbox returns 400 `Unrecognized key: "command"`.
+ *
+ *   `@tangle-network/agent-interface` 0.38.0 changed MCP config values from
+ *   plain strings to tagged public/secret-ref objects. Below the floor, this
+ *   package fails at MODULE LOAD with "does not provide an export named
+ *   defineAgentProfilePublicConfig" — while `tsc` reports zero errors, because
+ *   the types resolve and only the runtime export is missing.
+ *
+ * That second shape is why this exists as its own gate: typecheck cannot see it,
+ * and a suite only sees it as dozens of unrelated-looking import failures.
+ */
+/** Installed, and inside the declared range. */
+type PeerFloorVerdict = 'satisfied'
+/** Installed and BELOW the floor — the silent case this module exists for. */
+ | 'below-floor'
+/** Not installed and never asked for. A legitimate answer for an optional peer. */
+ | 'absent-unused'
+/** Declared by the app, yet no version could be read, so the floor went
+ *  UNCHECKED. Reported as a failure rather than a pass this did not earn. */
+ | 'absent-but-declared';
+interface PeerFloorRow {
+    readonly name: string;
+    readonly range: string;
+    readonly installed: string | null;
+    readonly verdict: PeerFloorVerdict;
+}
+interface PeerFloorReport {
+    readonly shellVersion: string;
+    readonly rows: readonly PeerFloorRow[];
+    readonly violations: readonly PeerFloorRow[];
+    readonly ok: boolean;
+}
+interface CheckPeerFloorsOptions {
+    /** Directory of the app under audit — the one whose `package.json` and
+     *  installed tree are read. */
+    appDir: string;
+    /** Package whose peer floors are the contract. Defaults to this shell. */
+    shell?: string;
+    /** Only audit peers under this scope. Third-party peers (react, drizzle) are
+     *  the app's own business, not part of the Tangle wire contract. Pass `''` to
+     *  audit every peer. */
+    scope?: string;
+    /** Floors to audit against, when the shell is not resolvable from `appDir` —
+     *  the package auditing ITSELF, which has no copy of itself in its own
+     *  `node_modules`. Without this a package cannot check that the contract it
+     *  publishes is one its own dev install satisfies. */
+    shellManifest?: {
+        version?: string;
+        peerDependencies?: Record<string, string>;
+    };
+    /** Directory name to walk for installed packages. Overridable so a test can
+     *  point at a committed fixture tree — `node_modules` is gitignored
+     *  everywhere, so a fixture using that name could not be committed, and a
+     *  calibration proof that is not committed is a proof that stops running. */
+    modulesDir?: string;
+}
+declare function satisfiesRange(version: string, range: string): boolean;
+/** Audit one app directory against the shell's declared peer floors. */
+declare function checkPeerFloors(options: CheckPeerFloorsOptions): PeerFloorReport;
+/** The failure message for one violating row. Split out so a caller can raise
+ *  it from a test and a CLI can print it identically. */
+declare function describePeerFloorViolation(row: PeerFloorRow, shellVersion: string, shell?: string): string;
+declare function formatPeerFloorReport(report: PeerFloorReport, shell?: string): string;
+
+export { type CheckPeerFloorsOptions, type PeerFloorReport, type PeerFloorRow, type PeerFloorVerdict, checkPeerFloors, describePeerFloorViolation, formatPeerFloorReport, satisfiesRange };

package/dist/peer-floors/check.js

@@ -0,0 +1,13 @@
+import {
+  checkPeerFloors,
+  describePeerFloorViolation,
+  formatPeerFloorReport,
+  satisfiesRange
+} from "../chunk-ZSJRDHCN.js";
+export {
+  checkPeerFloors,
+  describePeerFloorViolation,
+  formatPeerFloorReport,
+  satisfiesRange
+};
+//# sourceMappingURL=check.js.map

package/dist/peer-floors/check.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/peer-floors/cli.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/peer-floors/cli.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import {
+  checkPeerFloors,
+  formatPeerFloorReport
+} from "../chunk-ZSJRDHCN.js";
+
+// src/peer-floors/cli.ts
+var appDir = process.argv[2] ?? process.cwd();
+try {
+  const report = checkPeerFloors({ appDir });
+  process.stdout.write(`${formatPeerFloorReport(report)}
+`);
+  process.exit(report.ok ? 0 : 1);
+} catch (err) {
+  process.stderr.write(`agent-app-peer-check failed: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(1);
+}
+//# sourceMappingURL=cli.js.map

package/dist/peer-floors/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/peer-floors/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * `agent-app-peer-check` — fail a consumer's CI when its installed tree sits\n * below a peer floor this package declares.\n *\n * Runs in the CONSUMER's repo, over the consumer's own `node_modules`, because\n * the floors only mean anything against a real install. Add it next to\n * typecheck:\n *\n *     \"scripts\": { \"peer-check\": \"agent-app-peer-check\" }\n *\n * Exits 1 on any violation, 0 otherwise. Takes no configuration — the floors\n * come from the installed shell manifest, so the check cannot go stale when the\n * shell adds an engine.\n */\nimport { checkPeerFloors, formatPeerFloorReport } from './check'\n\nconst appDir = process.argv[2] ?? process.cwd()\n\ntry {\n  const report = checkPeerFloors({ appDir })\n  process.stdout.write(`${formatPeerFloorReport(report)}\\n`)\n  process.exit(report.ok ? 0 : 1)\n} catch (err) {\n  process.stderr.write(`agent-app-peer-check failed: ${err instanceof Error ? err.message : String(err)}\\n`)\n  process.exit(1)\n}\n"],"mappings":";;;;;;;AAiBA,IAAM,SAAS,QAAQ,KAAK,CAAC,KAAK,QAAQ,IAAI;AAE9C,IAAI;AACF,QAAM,SAAS,gBAAgB,EAAE,OAAO,CAAC;AACzC,UAAQ,OAAO,MAAM,GAAG,sBAAsB,MAAM,CAAC;AAAA,CAAI;AACzD,UAAQ,KAAK,OAAO,KAAK,IAAI,CAAC;AAChC,SAAS,KAAK;AACZ,UAAQ,OAAO,MAAM,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACzG,UAAQ,KAAK,CAAC;AAChB;","names":[]}

package/dist/preset-cloudflare/index.js

@@ -1,9 +1,9 @@
-import {
-  createWorkspaceKeyManager
-} from "../chunk-GXE6KHTS.js";
 import {
   createFieldCrypto
 } from "../chunk-TA5Q4I2K.js";
+import {
+  createWorkspaceKeyManager
+} from "../chunk-GXE6KHTS.js";
 
 // src/preset-cloudflare/workflow-instance.ts
 async function ensureCloudflareWorkflowInstance(binding, input) {

package/dist/runtime/index.d.ts

@@ -4,10 +4,10 @@ import * as _tangle_network_agent_runtime_tool_loop from '@tangle-network/agent-
 import { ToolLoopMessage } from '@tangle-network/agent-runtime/tool-loop';
 export { RunToolLoopOptions as AppToolLoopOptions, ToolLoopAssistantToolCall as LoopAssistantToolCall, ToolLoopMessage as LoopMessage, ToolLoopCall as LoopToolCall, StreamToolLoopOptions as StreamAppToolLoopOptions, StreamToolLoopYield as StreamLoopYield, ToolLoopEvent, ToolLoopResult, ToolLoopStopReason, runToolLoop as runAppToolLoop, streamToolLoop as streamAppToolLoop } from '@tangle-network/agent-runtime/tool-loop';
 import { CertifiedProfile } from '@tangle-network/agent-runtime/intelligence';
-import { A as AppToolMcpServer } from '../mcp-BOgNWSED.js';
+import { A as AppToolMcpServer } from '../mcp-C-jV_Xe9.js';
 import '@tangle-network/agent-interface';
 import '../types-DbU-oO5h.js';
-import '../auth-DJs6lfAs.js';
+import '../auth-Bulnsz3V.js';
 
 /**
  * Events the app's OpenAI-compat stream adapter ({@link toLoopEvents}) yields.

package/dist/sandbox/index.d.ts

@@ -2,7 +2,7 @@ import { Sandbox } from '@tangle-network/sandbox/core';
 import { SandboxInstance, ProvisionEvent, EgressPolicy, StorageConfig, ScopedTokenScope, TurnDriveResult, MintScopedTokenOptions } from '@tangle-network/sandbox';
 export { StorageConfig } from '@tangle-network/sandbox';
 import { ReasoningEffort, AgentProfileMcpServer, AgentProfileFileMount, AgentProfile } from '@tangle-network/agent-interface';
-import { T as ToolHeaderNames } from '../auth-DJs6lfAs.js';
+import { T as ToolHeaderNames } from '../auth-Bulnsz3V.js';
 import { a as AppToolName, A as AppToolContext } from '../types-DbU-oO5h.js';
 import { Harness } from '../harness/index.js';
 import { a as TangleExecutionEnvironment } from '../model-CdCDfBA9.js';

package/dist/sandbox/index.js

@@ -85,11 +85,11 @@ import {
   workspaceSandboxRecoveryMessage,
   workspaceSandboxRecoveryRecommendedActions,
   writeProfileFilesToBox
-} from "../chunk-4XNCMUVI.js";
-import "../chunk-LWSJK546.js";
+} from "../chunk-EPOPI77J.js";
 import "../chunk-73F3CKVK.js";
-import "../chunk-ITCINLSU.js";
-import "../chunk-IVEKCOM7.js";
+import "../chunk-LWSJK546.js";
+import "../chunk-C5OIABSB.js";
+import "../chunk-YOFQO4R6.js";
 import "../chunk-YEFFHORB.js";
 import "../chunk-S5SRJJQG.js";
 import "../chunk-JML7WKWU.js";

package/dist/sequences/index.d.ts

@@ -1,11 +1,11 @@
 import { j as SequenceMediaKind, f as SequenceTimeline, k as TimelineInterval, b as SequenceStore } from '../store-B7LLlk9p.js';
 export { M as MIN_SEQUENCE_CLIP_FRAMES, N as NewSequenceClip, l as NewSequenceDecision, m as NewSequenceTrack, g as SequenceClip, a as SequenceClipMedia, n as SequenceClipPatch, o as SequenceDecision, d as SequenceExportFormat, h as SequenceExportRecord, p as SequenceExportStatus, q as SequenceFrameSnapshot, i as SequenceMeta, r as SequenceStatus, S as SequenceStoreScope, e as SequenceTrack, c as SequenceTrackKind, T as TimelineClipBounds, s as assertClipFitsSequence, t as chooseCaptionPlacement, u as clampClipDuration, v as clampClipStart, w as formatSeconds, x as formatTimecode, y as framesToSeconds, z as secondsToFrames, A as snapshotFrame, B as trackIntervals } from '../store-B7LLlk9p.js';
 export { A as AddCaptionOperation, C as CaptionTargetResolution, a as CreateTrackOperation, D as DeleteClipOperation, E as ExtendSequenceOperation, M as MoveClipOperation, P as PlaceClipOperation, Q as QueueExportOperation, S as SEQUENCE_OPERATION_TYPES, b as SequenceApplyResult, c as SequenceOperation, d as SequenceOperationContext, e as SequenceOperationType, f as SequencePlan, g as SetClipDisabledOperation, h as SetClipTextOperation, i as SplitClipOperation, T as TrimClipOperation, j as applySequenceOperation, k as applySequenceOperations, l as assertSequenceMediaUrl, m as captionTrackNameForLanguage, n as lastClipEndFrame, p as parseSequenceOperations, r as resolveCaptionPlacement, o as resolveCaptionTarget, q as resolvePlaceClipTrack, v as validateAddCaption, s as validateCreateTrack, t as validateDeleteClip, u as validateExtendSequence, w as validateMoveClip, x as validatePlaceClip, y as validateQueueExport, z as validateSequenceOperation, B as validateSequenceOperations, F as validateSetClipDisabled, G as validateSetClipText, H as validateSplitClip, I as validateTrimClip } from '../apply-6wlMOLf8.js';
-import { S as ScopedMcpServerEntryOptions, A as AppToolMcpServer } from '../mcp-BOgNWSED.js';
+import { S as ScopedMcpServerEntryOptions, A as AppToolMcpServer } from '../mcp-C-jV_Xe9.js';
 export { M as SEQUENCES_MCP_PROTOCOL_VERSIONS } from '../mcp-rpc-CzU5LWWT.js';
 import '@tangle-network/agent-interface';
 import '../types-DbU-oO5h.js';
-import '../auth-DJs6lfAs.js';
+import '../auth-Bulnsz3V.js';
 
 /**
  * Pure interchange-format builders over `SequenceTimeline` — SRT, WebVTT,

package/dist/sequences/index.js

@@ -18,7 +18,7 @@ import {
   MCP_PROTOCOL_VERSIONS,
   buildScopedMcpServerEntry,
   createMcpToolHandler
-} from "../chunk-IVEKCOM7.js";
+} from "../chunk-YOFQO4R6.js";
 
 // src/sequences/operations.ts
 var SEQUENCE_OPERATION_TYPES = [

package/dist/tools/index.d.ts

@@ -1,8 +1,8 @@
-import { T as ToolHeaderNames } from '../auth-DJs6lfAs.js';
-export { A as AuthenticateOptions, D as DEFAULT_HEADER_NAMES, a as ToolAuthResult, b as authenticateToolRequest, r as readToolArgs } from '../auth-DJs6lfAs.js';
+import { T as ToolHeaderNames } from '../auth-Bulnsz3V.js';
+export { A as AuthenticateOptions, D as DEFAULT_HEADER_NAMES, a as ToolAuthResult, b as authenticateToolRequest, r as readToolArgs } from '../auth-Bulnsz3V.js';
 import { e as AppToolTaxonomy, d as AppToolHandlers, b as AppToolDefinition, A as AppToolContext, c as AppToolProducedEvent, f as AppToolOutcome, a as AppToolName } from '../types-DbU-oO5h.js';
 export { g as APP_TOOL_NAMES, h as AddCitationArgs, i as AddCitationResult, B as BuildAppToolsOptions, O as OpenAIFunctionTool, R as RenderUiArgs, j as RenderUiResult, S as ScheduleFollowupArgs, k as ScheduleFollowupResult, l as SubmitProposalArgs, m as SubmitProposalResult, n as buildAppToolOpenAITools, o as customToolToOpenAI, p as defineAppTool, q as findCustomTool, r as isAppToolName } from '../types-DbU-oO5h.js';
-export { A as AppToolMcpServer, B as BuildHttpMcpServerOptions, a as BuildMcpServerOptions, D as DEFAULT_APP_TOOL_PATHS, S as ScopedMcpServerEntryOptions, b as buildAppToolMcpServer, c as buildHttpMcpServer, d as buildScopedMcpServerEntry, u as unresolvableSurfaceCredential } from '../mcp-BOgNWSED.js';
+export { A as AppToolMcpServer, B as BuildHttpMcpServerOptions, a as BuildMcpServerOptions, D as DEFAULT_APP_TOOL_PATHS, S as ScopedMcpServerEntryOptions, b as buildAppToolMcpServer, c as buildHttpMcpServer, d as buildScopedMcpServerEntry, u as unresolvableSurfaceCredential } from '../mcp-C-jV_Xe9.js';
 export { C as CreateMcpToolHandlerOptions, M as MCP_PROTOCOL_VERSIONS, b as McpProtocolVersion, c as McpServerInfo, a as McpToolDefinition, d as createMcpToolHandler } from '../mcp-rpc-CzU5LWWT.js';
 import '@tangle-network/agent-interface';
 

package/dist/tools/index.js

@@ -9,7 +9,7 @@ import {
   restrictTaxonomy,
   verifyCapabilityToken,
   verifyExpiringCapabilityToken
-} from "../chunk-ITCINLSU.js";
+} from "../chunk-C5OIABSB.js";
 import {
   DEFAULT_APP_TOOL_PATHS,
   DEFAULT_HEADER_NAMES,
@@ -21,7 +21,7 @@ import {
   createMcpToolHandler,
   readToolArgs,
   unresolvableSurfaceCredential
-} from "../chunk-IVEKCOM7.js";
+} from "../chunk-YOFQO4R6.js";
 import {
   APP_TOOL_NAMES,
   ToolInputError,

package/dist/web-react/index.js

@@ -78,7 +78,14 @@ import {
   useSmoothText,
   useThinkingSeconds,
   waterfallLayout
-} from "../chunk-YRFB2KEA.js";
+} from "../chunk-CKUZVDZ7.js";
+import {
+  useComposerAttachments
+} from "../chunk-6MUJROBT.js";
+import {
+  tabTerminalConnectionId,
+  useSandboxTerminalConnection
+} from "../chunk-BATKJP3P.js";
 import "../chunk-FBVLEGEG.js";
 import "../chunk-GINKOZFD.js";
 import {
@@ -96,13 +103,6 @@ import {
 import {
   parseReviewQueueItem
 } from "../chunk-GEYACSFW.js";
-import {
-  useComposerAttachments
-} from "../chunk-6MUJROBT.js";
-import {
-  tabTerminalConnectionId,
-  useSandboxTerminalConnection
-} from "../chunk-BATKJP3P.js";
 import "../chunk-QY4BRKRJ.js";
 import {
   ATTACHMENT_ACCEPT
@@ -114,8 +114,7 @@ import {
   isChatAttachmentPart,
   mentionInputToPart,
   mentionPartsFromMessageParts
-} from "../chunk-UXMIPX3Z.js";
-import "../chunk-ZVEEWGDK.js";
+} from "../chunk-WUZZVQKR.js";
 import {
   DISPATCH_MAX_MEDIA_PARTS,
   DISPATCH_MAX_PARTS,
@@ -128,6 +127,7 @@ import {
   mediaTypeForMentionPath,
   mentionKindForPath
 } from "../chunk-KWXUBMXU.js";
+import "../chunk-ZVEEWGDK.js";
 import {
   attachmentPartKey
 } from "../chunk-5EPIPT4V.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.45.7",
+  "version": "0.45.9",
   "packageManager": "pnpm@11.17.0",
   "description": "Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.",
   "keywords": [
@@ -33,7 +33,8 @@
   ],
   "bin": {
     "agent-app-theme-check": "./dist/theme-contract/cli.js",
-    "agent-app-preflight": "./dist/preflight/cli.js"
+    "agent-app-preflight": "./dist/preflight/cli.js",
+    "agent-app-peer-check": "./dist/peer-floors/cli.js"
   },
   "exports": {
     "./package.json": "./package.json",
@@ -418,7 +419,12 @@
       "import": "./dist/theme-contract/index.js",
       "default": "./dist/theme-contract/index.js"
     },
-    "./styles": "./dist/theme/tokens.css"
+    "./styles": "./dist/theme/tokens.css",
+    "./peer-floors": {
+      "types": "./dist/peer-floors/check.d.ts",
+      "import": "./dist/peer-floors/check.js",
+      "default": "./dist/peer-floors/check.js"
+    }
   },
   "scripts": {
     "build": "tsup",

package/dist/auth-DJs6lfAs.d.ts

@@ -1,42 +0,0 @@
-import { A as AppToolContext } from './types-DbU-oO5h.js';
-
-/**
- * Header names carrying the server-set per-turn context + the capability token.
- * Defaults are product-neutral (`X-Agent-App-*`); a product that already ships
- * a header convention (e.g. `X-Acme-User-Id`) passes its own.
- */
-interface ToolHeaderNames {
-    userId: string;
-    workspaceId: string;
-    threadId: string;
-}
-/** Provide default HTTP header names for user, workspace, and thread identification */
-declare const DEFAULT_HEADER_NAMES: ToolHeaderNames;
-/** Define options to verify bearer tokens and customize authentication header names */
-interface AuthenticateOptions {
-    /** Verify the bearer capability token belongs to `userId`. The product's
-     *  HMAC/JWT impl — the seam that keeps token crypto out of this package. */
-    verifyToken: (userId: string, bearer: string) => Promise<boolean>;
-    headerNames?: ToolHeaderNames;
-}
-/** Represent the result of tool authentication with success context or failure response */
-type ToolAuthResult = {
-    ok: true;
-    ctx: AppToolContext;
-} | {
-    ok: false;
-    response: Response;
-};
-/**
- * Recover + verify the trusted context for a tool request. The user comes from
- * a server-set header and the bearer token MUST verify against THAT user; the
- * workspace comes from a header too — never from tool args — so the model can
- * neither forge identity nor target another workspace. Fail-closed: any missing
- * credential or a token minted for another user yields a 401/400 Response.
- */
-declare function authenticateToolRequest(request: Request, opts: AuthenticateOptions): Promise<ToolAuthResult>;
-/** Read a tool's argument object from the request body, tolerant of MCP host
- *  aliases (`args` / `arguments`) or a bare body. Returns null on non-JSON. */
-declare function readToolArgs<T>(request: Request): Promise<T | null>;
-
-export { type AuthenticateOptions as A, DEFAULT_HEADER_NAMES as D, type ToolHeaderNames as T, type ToolAuthResult as a, authenticateToolRequest as b, readToolArgs as r };

package/dist/chunk-IVEKCOM7.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/tools/auth.ts","../src/tools/mcp.ts","../src/tools/mcp-rpc.ts"],"sourcesContent":["import type { AppToolContext } from './types'\n\n/**\n * Header names carrying the server-set per-turn context + the capability token.\n * Defaults are product-neutral (`X-Agent-App-*`); a product that already ships\n * a header convention (e.g. `X-Acme-User-Id`) passes its own.\n */\nexport interface ToolHeaderNames {\n  userId: string\n  workspaceId: string\n  threadId: string\n}\n\n/** Provide default HTTP header names for user, workspace, and thread identification */\nexport const DEFAULT_HEADER_NAMES: ToolHeaderNames = {\n  userId: 'X-Agent-App-User-Id',\n  workspaceId: 'X-Agent-App-Workspace-Id',\n  threadId: 'X-Agent-App-Thread-Id',\n}\n\n/** Define options to verify bearer tokens and customize authentication header names */\nexport interface AuthenticateOptions {\n  /** Verify the bearer capability token belongs to `userId`. The product's\n   *  HMAC/JWT impl — the seam that keeps token crypto out of this package. */\n  verifyToken: (userId: string, bearer: string) => Promise<boolean>\n  headerNames?: ToolHeaderNames\n}\n\n/** Represent the result of tool authentication with success context or failure response */\nexport type ToolAuthResult =\n  | { ok: true; ctx: AppToolContext }\n  | { ok: false; response: Response }\n\n/**\n * Recover + verify the trusted context for a tool request. The user comes from\n * a server-set header and the bearer token MUST verify against THAT user; the\n * workspace comes from a header too — never from tool args — so the model can\n * neither forge identity nor target another workspace. Fail-closed: any missing\n * credential or a token minted for another user yields a 401/400 Response.\n */\nexport async function authenticateToolRequest(request: Request, opts: AuthenticateOptions): Promise<ToolAuthResult> {\n  const h = opts.headerNames ?? DEFAULT_HEADER_NAMES\n  const userId = request.headers.get(h.userId)?.trim()\n  const workspaceId = request.headers.get(h.workspaceId)?.trim()\n  const threadId = request.headers.get(h.threadId)?.trim() || null\n  const bearer = request.headers.get('authorization')?.match(/^Bearer\\s+(.+)$/i)?.[1]\n\n  if (!userId || !bearer) {\n    return { ok: false, response: Response.json({ error: 'Missing capability credentials' }, { status: 401 }) }\n  }\n  if (!(await opts.verifyToken(userId, bearer))) {\n    return { ok: false, response: Response.json({ error: 'Invalid capability token' }, { status: 401 }) }\n  }\n  if (!workspaceId) {\n    return { ok: false, response: Response.json({ error: 'Missing workspace context' }, { status: 400 }) }\n  }\n  return { ok: true, ctx: { userId, workspaceId, threadId } }\n}\n\n/** Read a tool's argument object from the request body, tolerant of MCP host\n *  aliases (`args` / `arguments`) or a bare body. Returns null on non-JSON. */\nexport async function readToolArgs<T>(request: Request): Promise<T | null> {\n  let body: { args?: T; arguments?: T }\n  try {\n    body = (await request.json()) as typeof body\n  } catch {\n    return null\n  }\n  return (body.args ?? body.arguments ?? (body as T)) as T\n}\n","/**\n * The tagged-configuration contract for every MCP server this package emits.\n *\n * An `AgentProfile` is digested, diffed, stored, and logged, so a credential\n * that rides it as plain text is a leak by construction. `@tangle-network/\n * agent-interface` closed that at **0.38.0**: `args`, `env`, and `headers` on\n * an `AgentProfileMcpServer` no longer take strings. Every value is either\n * deliberately public profile material (`defineAgentProfilePublicConfig`) or an\n * opaque reference to a credential (`defineAgentProfileSecretRef`) resolved\n * privately at materialization, validated by a `z.discriminatedUnion('kind')`.\n *\n * The schema also refuses to let a secret hide as public material: a `public`\n * value under a credential-bearing key name (`Authorization`, `*_TOKEN`,\n * `*_API_KEY`, `*_SECRET`, `Cookie`, …) is rejected with \"credential-bearing\n * config names require a secret-ref\", and any value whose bytes look like a\n * credential (`Bearer …`, `sk-…`, `ghp_…`) is rejected outright. So the\n * capability token this package used to inline as `Bearer <token>` cannot be\n * expressed at all — it must become a reference.\n *\n * **A reference resolves ONLY from an environment variable present on the box,\n * named by `key`.** That is why the builders below take a `tokenEnvKey` (the\n * box-env variable NAME) instead of a token VALUE: agent-app cannot guess the\n * name, and a reference to a key nothing places fails the turn at\n * materialization rather than running credential-less. The box env is what\n * `SandboxRuntimeConfig.env` (and the platform secret store via\n * `SandboxRuntimeConfig.secrets`) writes at sandbox creation, so the key must\n * name a variable one of those places — and it must therefore be a real\n * environment-variable name, which this module enforces.\n *\n * A per-request credential is only referenceable when the value written at box\n * creation is byte-identical to the one every later turn would mint (a\n * deterministic derivation such as an HMAC over the workspace id). A token\n * scoped narrower than the box — per-user, per-document — cannot be referenced\n * at all; {@link unresolvableSurfaceCredential} names that blocker instead of\n * emitting a reference that resolves to nothing.\n */\nimport {\n  agentProfileMcpServerSchema,\n  defineAgentProfilePublicConfig,\n  defineAgentProfileSecretRef,\n  type AgentProfileConfigValue,\n} from '@tangle-network/agent-interface'\nimport type { AppToolContext } from './types'\nimport type { AppToolName } from './openai'\nimport type { AppToolDefinition } from './registry'\nimport type { ToolHeaderNames } from './auth'\nimport { DEFAULT_HEADER_NAMES } from './auth'\n\n/** Default route path each app tool is served at. A product mounts its routes\n *  at these paths (or supplies its own via {@link BuildMcpServerOptions.paths}). */\nexport const DEFAULT_APP_TOOL_PATHS: Record<AppToolName, string> = {\n  submit_proposal: '/api/tools/propose',\n  schedule_followup: '/api/tools/followup',\n  render_ui: '/api/tools/render-ui',\n  add_citation: '/api/tools/citation',\n}\n\n/** The portable MCP server entry the sandbox SDK accepts (transport + url +\n *  tagged headers). Assignable to `AgentProfileMcpServer` without a cast —\n *  products spread it into their profile's `mcp` map. */\nexport interface AppToolMcpServer {\n  transport: 'http'\n  url: string\n  headers: Record<string, AgentProfileConfigValue>\n  enabled: true\n  metadata: { description: string }\n}\n\n/** POSIX environment-variable name — the same shape `agent-interface`'s\n *  `environmentNameSchema` accepts for an env key. A secret reference resolves\n *  from the box environment, so a key outside this shape can never resolve. */\nconst ENV_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/\n\n/**\n * Reject a secret-reference key that names nothing the box can hold.\n *\n * `agent-interface` accepts any non-credential string as a reference key, so a\n * typo or a token VALUE passed where a key belongs validates against the\n * profile schema and fails much later, inside materialization, as an opaque\n * missing-secret error. Failing here names the parameter.\n */\nfunction assertSecretEnvKey(key: string, label: string): string {\n  if (!ENV_NAME_PATTERN.test(key)) {\n    throw new Error(\n      `${label}: tokenEnvKey must be an environment-variable NAME the sandbox box carries ` +\n        `(e.g. 'APP_CAPABILITY_TOKEN'), not a token value — got ${JSON.stringify(key)}. ` +\n        'A profile may only REFERENCE a credential; the value is placed on the box by ' +\n        'SandboxRuntimeConfig.env or the platform secret store.',\n    )\n  }\n  return key\n}\n\n/**\n * Validate one emitted entry against the REAL `agentProfileMcpServerSchema`.\n *\n * The contract's rules (which key names demand a reference, which byte patterns\n * read as a credential) live in `agent-interface`. Re-implementing them here\n * would drift the moment that package moves — which it does: 0.36.0 → 0.40.0 in\n * three days. Running the shipped validator instead means a product that passes\n * a credential-bearing custom header name, a relative base URL, or a URL with\n * embedded credentials fails at the builder with the contract's own message.\n *\n * It is also the loud failure for a version skew: if the resolved\n * `@tangle-network/agent-interface` predates 0.38.0, its schema rejects the\n * tagged shape this package now emits, and that surfaces here instead of as a\n * sandbox provisioning error.\n */\nfunction assertProfileMcpServer<T extends AppToolMcpServer>(server: T, label: string): T {\n  const result = agentProfileMcpServerSchema.safeParse(server)\n  if (!result.success) {\n    const issues = result.error.issues\n      .map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)\n      .join('; ')\n    throw new Error(\n      `${label} produced an MCP server the AgentProfile contract rejects: ${issues}. ` +\n        'Requires @tangle-network/agent-interface >= 0.38.0 (tagged MCP config values).',\n    )\n  }\n  return server\n}\n\n/**\n * Refuse to mount a surface whose credential is scoped narrower than the box.\n *\n * A per-user or per-resource capability token is minted per request. The box\n * environment is written once at sandbox creation and shared by every turn and\n * every member of the workspace, so such a token can neither be placed there\n * ahead of time nor referenced from a per-turn profile. Widening the channel to\n * a workspace-bound token is not a substitute when the route authenticates the\n * CALLER: the agent can read its own box env, so it could forge that identity.\n *\n * Mounting the surface anyway would emit a plain-string `Authorization` header\n * (rejected by the schema) or a reference to a key nothing places (rejected at\n * materialization). Throwing here names the actual blocker. Exported because\n * every product with per-document MCP surfaces hits it and was writing this\n * message itself.\n */\nexport function unresolvableSurfaceCredential(surface: string): never {\n  throw new Error(\n    `The ${surface} MCP surface cannot be mounted: its capability token is scoped to a single ` +\n      'user and resource, and an AgentProfile may only reference a credential the sandbox can ' +\n      'resolve from the box environment, which is workspace-wide and fixed at sandbox creation. ' +\n      'Mounting it needs a per-session secret channel on the sandbox API, or a route that ' +\n      'authenticates the workspace rather than the caller.',\n  )\n}\n\n/** Define configuration options for building an HTTP MCP server including path, baseUrl, token env key, context, and description */\nexport interface BuildHttpMcpServerOptions {\n  /** Route path on the app the sandbox POSTs to (e.g. `/api/tools/propose`). */\n  path: string\n  /** App base URL the sandbox reaches back to (no trailing slash required). */\n  baseUrl: string\n  /**\n   * NAME of the box-environment variable holding the capability token — never\n   * the token itself. The emitted `Authorization` header is a `secret-ref` to\n   * this key with `format: 'bearer'`, so the sandbox resolves the value\n   * privately and the profile carries only the name.\n   *\n   * The key MUST name a variable the box actually carries (placed by\n   * `SandboxRuntimeConfig.env` at creation, or injected from the platform\n   * secret store via `SandboxRuntimeConfig.secrets`), and the value written\n   * there must be the token this route will accept for every turn — which in\n   * practice means a deterministic derivation (e.g. an HMAC over the workspace\n   * id), not a freshly-random per-request mint. A token scoped narrower than\n   * the box is not referenceable: see {@link unresolvableSurfaceCredential}.\n   */\n  tokenEnvKey: string\n  ctx: AppToolContext\n  /** Tool description the model sees. */\n  description: string\n  headerNames?: ToolHeaderNames\n}\n\n/**\n * Build ONE HTTP MCP server entry — the generic agent→app bridge. The\n * capability token (as a secret reference) + the user/workspace/thread ids ride\n * in server-set headers (never tool args), so the model can't forge identity or\n * target another workspace. Workspace/thread headers are omitted when their\n * `ctx` value is empty/null (e.g. an integration-invoke bridge that's\n * user-scoped only). Used directly for non-app-tool bridges\n * (integration_invoke) and via {@link buildAppToolMcpServer} for the four app\n * tools.\n */\nexport function buildHttpMcpServer(opts: BuildHttpMcpServerOptions): AppToolMcpServer {\n  const base = opts.baseUrl.replace(/\\/+$/, '')\n  const h = opts.headerNames ?? DEFAULT_HEADER_NAMES\n  return assertProfileMcpServer(\n    {\n      transport: 'http',\n      url: `${base}${opts.path}`,\n      headers: {\n        Authorization: defineAgentProfileSecretRef(\n          assertSecretEnvKey(opts.tokenEnvKey, 'buildHttpMcpServer'),\n          'bearer',\n        ),\n        [h.userId]: defineAgentProfilePublicConfig(opts.ctx.userId),\n        ...(opts.ctx.workspaceId\n          ? { [h.workspaceId]: defineAgentProfilePublicConfig(opts.ctx.workspaceId) }\n          : {}),\n        ...(opts.ctx.threadId\n          ? { [h.threadId]: defineAgentProfilePublicConfig(opts.ctx.threadId) }\n          : {}),\n        'Content-Type': defineAgentProfilePublicConfig('application/json'),\n      },\n      enabled: true,\n      metadata: { description: opts.description },\n    },\n    'buildHttpMcpServer',\n  )\n}\n\n/** Options for a per-document/scoped MCP channel entry (design-canvas,\n *  sequences, …). The capability token + path scope ONE resource; the document\n *  id lives in the path, never a tool argument. */\nexport interface ScopedMcpServerEntryOptions {\n  /** App base URL the sandbox reaches back to (trailing slash tolerated). */\n  baseUrl: string\n  /** Product route serving the resource's MCP handler — id is part of the path. */\n  path: string\n  /**\n   * NAME of the box-environment variable holding this channel's capability\n   * token — never the token itself. See\n   * {@link BuildHttpMcpServerOptions.tokenEnvKey}.\n   *\n   * A per-(user, resource) token cannot satisfy this: the box environment is\n   * workspace-wide and fixed at sandbox creation. A product whose channel needs\n   * one calls {@link unresolvableSurfaceCredential} rather than mounting an\n   * entry that cannot resolve.\n   */\n  tokenEnvKey: string\n  /** Override the channel's default tool-server description. */\n  description?: string\n  /** Identity headers for products whose route recovers the user via\n   *  `authenticateToolRequest`. Omit when the bearer token is self-contained. */\n  ctx?: AppToolContext\n  headerNames?: ToolHeaderNames\n}\n\n/**\n * Build the `AgentProfileMcpServer`-shaped entry for a scoped, per-resource MCP\n * channel. The shared mechanism behind the per-domain entry builders\n * (`buildDesignCanvasMcpServerEntry`, `buildSequencesMcpServerEntry`): same\n * token/path guards, same description default, same ctx-vs-self-contained-token\n * branching. The domain is two parameters — `label` (for guard messages) and\n * `defaultDescription` — never baked.\n *\n * The no-`ctx` branch is a GENUINE behavioral path, not a shortcut: it emits a\n * self-contained-token entry with ONLY `Authorization` + `Content-Type`.\n * Routing it through {@link buildHttpMcpServer} would unconditionally write a\n * `userId` identity header (here `undefined`), so it stays a distinct branch.\n */\nexport function buildScopedMcpServerEntry(\n  opts: ScopedMcpServerEntryOptions & { label: string; defaultDescription: string },\n): AppToolMcpServer {\n  if (opts.tokenEnvKey.trim().length === 0) {\n    throw new Error(`${opts.label} requires a capability token env key — omit the MCP server when none is available`)\n  }\n  if (!opts.path.startsWith('/')) {\n    throw new Error(`${opts.label} path must start with \"/\" (got \"${opts.path}\")`)\n  }\n  const description = opts.description ?? opts.defaultDescription\n\n  if (opts.ctx) {\n    return buildHttpMcpServer({\n      path: opts.path,\n      baseUrl: opts.baseUrl,\n      tokenEnvKey: opts.tokenEnvKey,\n      ctx: opts.ctx,\n      description,\n      headerNames: opts.headerNames ?? DEFAULT_HEADER_NAMES,\n    })\n  }\n\n  return assertProfileMcpServer(\n    {\n      transport: 'http',\n      url: `${opts.baseUrl.replace(/\\/+$/, '')}${opts.path}`,\n      headers: {\n        Authorization: defineAgentProfileSecretRef(\n          assertSecretEnvKey(opts.tokenEnvKey, opts.label),\n          'bearer',\n        ),\n        'Content-Type': defineAgentProfilePublicConfig('application/json'),\n      },\n      enabled: true,\n      metadata: { description },\n    },\n    opts.label,\n  )\n}\n\n/** Define configuration options required to build an MCP server including tool, baseUrl, token, and context */\nexport interface BuildMcpServerOptions {\n  /** A built-in app tool name, or a product-registered {@link AppToolDefinition}.\n   *  A custom tool supplies its route via `AppToolDefinition.path` (or `paths`). */\n  tool: AppToolName | AppToolDefinition\n  baseUrl: string\n  /** NAME of the box-environment variable holding the capability token — see\n   *  {@link BuildHttpMcpServerOptions.tokenEnvKey}. */\n  tokenEnvKey: string\n  ctx: AppToolContext\n  description: string\n  headerNames?: ToolHeaderNames\n  paths?: Partial<Record<string, string>>\n}\n\n/** Build one app-tool MCP server entry — a thin wrapper over\n *  {@link buildHttpMcpServer} that resolves the tool's route path. Built-ins map\n *  through {@link DEFAULT_APP_TOOL_PATHS}; a custom tool uses its own `path`\n *  (or a `paths` override). */\nexport function buildAppToolMcpServer(opts: BuildMcpServerOptions): AppToolMcpServer {\n  const path =\n    typeof opts.tool === 'string'\n      ? opts.paths?.[opts.tool] ?? DEFAULT_APP_TOOL_PATHS[opts.tool]\n      : opts.paths?.[opts.tool.name] ?? opts.tool.path\n  if (!path) {\n    const name = typeof opts.tool === 'string' ? opts.tool : opts.tool.name\n    throw new Error(`buildAppToolMcpServer: tool \"${name}\" has no route path — set AppToolDefinition.path or pass it via opts.paths`)\n  }\n  return buildHttpMcpServer({\n    path,\n    baseUrl: opts.baseUrl,\n    tokenEnvKey: opts.tokenEnvKey,\n    ctx: opts.ctx,\n    description: opts.description,\n    headerNames: opts.headerNames,\n  })\n}\n","/**\n * Generic streamable-HTTP JSON-RPC 2.0 envelope for a tools-only MCP server.\n * Stateless, Workers-compatible: no session table, no SSE — every request gets\n * a single `application/json` response, which the streamable-HTTP transport\n * explicitly permits for tools-only servers.\n *\n * Protocol surface:\n *   initialize   → echo client's protocolVersion if supported, else latest\n *   ping         → empty result {}\n *   notifications/* (no `id`)  → 202 with no body\n *   tools/list   → tool manifest\n *   tools/call   → run + surface execution failures as isError text results\n *   anything else → -32601\n *\n * Execution failures (argument shape, validation, store throws) become `isError`\n * tool results carrying the thrown message verbatim — the model reads WHY and\n * retries. Protocol misuse becomes a JSON-RPC error object.\n */\n\nexport const MCP_PROTOCOL_VERSIONS = ['2025-06-18', '2025-03-26', '2024-11-05'] as const\n/** Resolve a valid protocol version from the predefined MCP_PROTOCOL_VERSIONS array */\nexport type McpProtocolVersion = (typeof MCP_PROTOCOL_VERSIONS)[number]\n\nconst LATEST_PROTOCOL_VERSION: McpProtocolVersion = MCP_PROTOCOL_VERSIONS[0]\n\n/** Describe the structure of server information including name and version */\nexport interface McpServerInfo {\n  name: string\n  version: string\n}\n\n/** One tool entry in the registry the handler owns. */\nexport interface McpToolDefinition<TEnv = Record<string, never>> {\n  name: string\n  description: string\n  /** JSON Schema for the `params.arguments` object. */\n  inputSchema: Record<string, unknown>\n  /** Receive validated (Record) args + the env the handler threaded; throw to\n   *  surface an isError result — never throw for protocol/framing issues. */\n  run(args: Record<string, unknown>, env: TEnv): Promise<unknown>\n}\n\n/** Define options for creating a handler that manages MCP tools with environment support */\nexport interface CreateMcpToolHandlerOptions<TEnv = Record<string, never>> {\n  serverInfo: McpServerInfo\n  /** Full tool list; order IS the tools/list order. */\n  tools: McpToolDefinition<TEnv>[]\n  /** Per-request environment threaded into every `run` call. If your tools are\n   *  stateless (or carry state through closure) pass an empty builder:\n   *  `() => ({} as TEnv)`. */\n  buildEnv(request: Request): TEnv | Promise<TEnv>\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\ntype JsonRpcId = string | number | null\n\ninterface ToolCallContent {\n  content: Array<{ type: 'text'; text: string }>\n  isError?: true\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\nfunction rpcResult(id: JsonRpcId, result: unknown): Response {\n  return Response.json({ jsonrpc: '2.0', id, result })\n}\n\nfunction rpcError(id: JsonRpcId, code: number, message: string, status = 200): Response {\n  return Response.json({ jsonrpc: '2.0', id, error: { code, message } }, { status })\n}\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\n/**\n * Build a request handler for a tools-only MCP server. The returned function\n * accepts a standard `Request` and resolves to a `Response` — mount it on any\n * Cloudflare Worker route or Remix `loader`.\n *\n * The handler calls `buildEnv` exactly ONCE per `tools/call` request (after\n * the tool is found, before `run`) — non-`tools/call` paths skip it entirely\n * so metadata requests do not pay env-build cost.\n */\nexport function createMcpToolHandler<TEnv = Record<string, never>>(\n  opts: CreateMcpToolHandlerOptions<TEnv>,\n): (request: Request) => Promise<Response> {\n  const toolMap = new Map<string, McpToolDefinition<TEnv>>()\n  for (const tool of opts.tools) {\n    if (toolMap.has(tool.name)) throw new Error(`duplicate MCP tool name: ${tool.name}`)\n    toolMap.set(tool.name, tool)\n  }\n\n  return async (request: Request): Promise<Response> => {\n    if (request.method !== 'POST') {\n      return new Response('MCP server accepts JSON-RPC 2.0 over POST only', {\n        status: 405,\n        headers: { Allow: 'POST' },\n      })\n    }\n\n    let body: unknown\n    try {\n      body = await request.json()\n    } catch {\n      return rpcError(null, -32700, 'Parse error: request body is not valid JSON', 400)\n    }\n\n    if (Array.isArray(body)) {\n      return rpcError(null, -32600, 'Invalid request: JSON-RPC batching is not supported', 400)\n    }\n    if (!isRecord(body) || body.jsonrpc !== '2.0' || typeof body.method !== 'string') {\n      return rpcError(\n        null,\n        -32600,\n        'Invalid request: expected a JSON-RPC 2.0 object with jsonrpc \"2.0\" and a string method',\n        400,\n      )\n    }\n\n    const method = body.method\n    const params = isRecord(body.params) ? body.params : {}\n\n    // Notifications have no `id` — acknowledge without a JSON-RPC body.\n    if (!('id' in body) || body.id === undefined) {\n      return new Response(null, { status: 202 })\n    }\n    const id = body.id as JsonRpcId\n\n    switch (method) {\n      case 'initialize': {\n        const requested = typeof params.protocolVersion === 'string' ? params.protocolVersion : undefined\n        const protocolVersion =\n          requested !== undefined && (MCP_PROTOCOL_VERSIONS as readonly string[]).includes(requested)\n            ? requested\n            : LATEST_PROTOCOL_VERSION\n        return rpcResult(id, {\n          protocolVersion,\n          capabilities: { tools: { listChanged: false } },\n          serverInfo: opts.serverInfo,\n        })\n      }\n\n      case 'ping':\n        return rpcResult(id, {})\n\n      case 'tools/list':\n        return rpcResult(id, {\n          tools: opts.tools.map((tool) => ({\n            name: tool.name,\n            description: tool.description,\n            inputSchema: tool.inputSchema,\n          })),\n        })\n\n      case 'tools/call': {\n        const name = params.name\n        if (typeof name !== 'string' || name.length === 0) {\n          return rpcError(id, -32602, 'tools/call requires params.name (string)')\n        }\n        const tool = toolMap.get(name)\n        if (!tool) {\n          return rpcError(\n            id,\n            -32602,\n            `Unknown tool: ${name}. Available tools: ${opts.tools.map((t) => t.name).join(', ')}`,\n          )\n        }\n        if (params.arguments !== undefined && !isRecord(params.arguments)) {\n          return rpcError(id, -32602, 'tools/call params.arguments must be an object when provided')\n        }\n        const args = isRecord(params.arguments) ? params.arguments : {}\n        let env: TEnv\n        try {\n          env = await opts.buildEnv(request)\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err)\n          const payload: ToolCallContent = {\n            content: [{ type: 'text', text: `${name} failed to build env: ${message}` }],\n            isError: true,\n          }\n          return rpcResult(id, payload)\n        }\n        try {\n          const result = await tool.run(args, env)\n          const payload: ToolCallContent = { content: [{ type: 'text', text: JSON.stringify(result) }] }\n          return rpcResult(id, payload)\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err)\n          const payload: ToolCallContent = {\n            content: [{ type: 'text', text: `${name} failed: ${message}` }],\n            isError: true,\n          }\n          return rpcResult(id, payload)\n        }\n      }\n\n      default:\n        return rpcError(id, -32601, `Method not found: ${method}`)\n    }\n  }\n}\n"],"mappings":";AAcO,IAAM,uBAAwC;AAAA,EACnD,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,UAAU;AACZ;AAsBA,eAAsB,wBAAwB,SAAkB,MAAoD;AAClH,QAAM,IAAI,KAAK,eAAe;AAC9B,QAAM,SAAS,QAAQ,QAAQ,IAAI,EAAE,MAAM,GAAG,KAAK;AACnD,QAAM,cAAc,QAAQ,QAAQ,IAAI,EAAE,WAAW,GAAG,KAAK;AAC7D,QAAM,WAAW,QAAQ,QAAQ,IAAI,EAAE,QAAQ,GAAG,KAAK,KAAK;AAC5D,QAAM,SAAS,QAAQ,QAAQ,IAAI,eAAe,GAAG,MAAM,kBAAkB,IAAI,CAAC;AAElF,MAAI,CAAC,UAAU,CAAC,QAAQ;AACtB,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,iCAAiC,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EAC5G;AACA,MAAI,CAAE,MAAM,KAAK,YAAY,QAAQ,MAAM,GAAI;AAC7C,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACtG;AACA,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,IAAI,OAAO,UAAU,SAAS,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACvG;AACA,SAAO,EAAE,IAAI,MAAM,KAAK,EAAE,QAAQ,aAAa,SAAS,EAAE;AAC5D;AAIA,eAAsB,aAAgB,SAAqC;AACzE,MAAI;AACJ,MAAI;AACF,WAAQ,MAAM,QAAQ,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAQ,KAAK,QAAQ,KAAK,aAAc;AAC1C;;;ACjCA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AASA,IAAM,yBAAsD;AAAA,EACjE,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,WAAW;AAAA,EACX,cAAc;AAChB;AAgBA,IAAM,mBAAmB;AAUzB,SAAS,mBAAmB,KAAa,OAAuB;AAC9D,MAAI,CAAC,iBAAiB,KAAK,GAAG,GAAG;AAC/B,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,0IACoD,KAAK,UAAU,GAAG,CAAC;AAAA,IAGjF;AAAA,EACF;AACA,SAAO;AACT;AAiBA,SAAS,uBAAmD,QAAW,OAAkB;AACvF,QAAM,SAAS,4BAA4B,UAAU,MAAM;AAC3D,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,MAAM,OAAO,EAAE,EACtE,KAAK,IAAI;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,8DAA8D,MAAM;AAAA,IAE9E;AAAA,EACF;AACA,SAAO;AACT;AAkBO,SAAS,8BAA8B,SAAwB;AACpE,QAAM,IAAI;AAAA,IACR,OAAO,OAAO;AAAA,EAKhB;AACF;AAuCO,SAAS,mBAAmB,MAAmD;AACpF,QAAM,OAAO,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAC5C,QAAM,IAAI,KAAK,eAAe;AAC9B,SAAO;AAAA,IACL;AAAA,MACE,WAAW;AAAA,MACX,KAAK,GAAG,IAAI,GAAG,KAAK,IAAI;AAAA,MACxB,SAAS;AAAA,QACP,eAAe;AAAA,UACb,mBAAmB,KAAK,aAAa,oBAAoB;AAAA,UACzD;AAAA,QACF;AAAA,QACA,CAAC,EAAE,MAAM,GAAG,+BAA+B,KAAK,IAAI,MAAM;AAAA,QAC1D,GAAI,KAAK,IAAI,cACT,EAAE,CAAC,EAAE,WAAW,GAAG,+BAA+B,KAAK,IAAI,WAAW,EAAE,IACxE,CAAC;AAAA,QACL,GAAI,KAAK,IAAI,WACT,EAAE,CAAC,EAAE,QAAQ,GAAG,+BAA+B,KAAK,IAAI,QAAQ,EAAE,IAClE,CAAC;AAAA,QACL,gBAAgB,+BAA+B,kBAAkB;AAAA,MACnE;AAAA,MACA,SAAS;AAAA,MACT,UAAU,EAAE,aAAa,KAAK,YAAY;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACF;AA0CO,SAAS,0BACd,MACkB;AAClB,MAAI,KAAK,YAAY,KAAK,EAAE,WAAW,GAAG;AACxC,UAAM,IAAI,MAAM,GAAG,KAAK,KAAK,wFAAmF;AAAA,EAClH;AACA,MAAI,CAAC,KAAK,KAAK,WAAW,GAAG,GAAG;AAC9B,UAAM,IAAI,MAAM,GAAG,KAAK,KAAK,mCAAmC,KAAK,IAAI,IAAI;AAAA,EAC/E;AACA,QAAM,cAAc,KAAK,eAAe,KAAK;AAE7C,MAAI,KAAK,KAAK;AACZ,WAAO,mBAAmB;AAAA,MACxB,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,aAAa,KAAK;AAAA,MAClB,KAAK,KAAK;AAAA,MACV;AAAA,MACA,aAAa,KAAK,eAAe;AAAA,IACnC,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,MACE,WAAW;AAAA,MACX,KAAK,GAAG,KAAK,QAAQ,QAAQ,QAAQ,EAAE,CAAC,GAAG,KAAK,IAAI;AAAA,MACpD,SAAS;AAAA,QACP,eAAe;AAAA,UACb,mBAAmB,KAAK,aAAa,KAAK,KAAK;AAAA,UAC/C;AAAA,QACF;AAAA,QACA,gBAAgB,+BAA+B,kBAAkB;AAAA,MACnE;AAAA,MACA,SAAS;AAAA,MACT,UAAU,EAAE,YAAY;AAAA,IAC1B;AAAA,IACA,KAAK;AAAA,EACP;AACF;AAqBO,SAAS,sBAAsB,MAA+C;AACnF,QAAM,OACJ,OAAO,KAAK,SAAS,WACjB,KAAK,QAAQ,KAAK,IAAI,KAAK,uBAAuB,KAAK,IAAI,IAC3D,KAAK,QAAQ,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK;AAChD,MAAI,CAAC,MAAM;AACT,UAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,KAAK;AACnE,UAAM,IAAI,MAAM,gCAAgC,IAAI,iFAA4E;AAAA,EAClI;AACA,SAAO,mBAAmB;AAAA,IACxB;AAAA,IACA,SAAS,KAAK;AAAA,IACd,aAAa,KAAK;AAAA,IAClB,KAAK,KAAK;AAAA,IACV,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,EACpB,CAAC;AACH;;;ACtTO,IAAM,wBAAwB,CAAC,cAAc,cAAc,YAAY;AAI9E,IAAM,0BAA8C,sBAAsB,CAAC;AAyC3E,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,UAAU,IAAe,QAA2B;AAC3D,SAAO,SAAS,KAAK,EAAE,SAAS,OAAO,IAAI,OAAO,CAAC;AACrD;AAEA,SAAS,SAAS,IAAe,MAAc,SAAiB,SAAS,KAAe;AACtF,SAAO,SAAS,KAAK,EAAE,SAAS,OAAO,IAAI,OAAO,EAAE,MAAM,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;AACnF;AAeO,SAAS,qBACd,MACyC;AACzC,QAAM,UAAU,oBAAI,IAAqC;AACzD,aAAW,QAAQ,KAAK,OAAO;AAC7B,QAAI,QAAQ,IAAI,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,4BAA4B,KAAK,IAAI,EAAE;AACnF,YAAQ,IAAI,KAAK,MAAM,IAAI;AAAA,EAC7B;AAEA,SAAO,OAAO,YAAwC;AACpD,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO,IAAI,SAAS,kDAAkD;AAAA,QACpE,QAAQ;AAAA,QACR,SAAS,EAAE,OAAO,OAAO;AAAA,MAC3B,CAAC;AAAA,IACH;AAEA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,QAAQ,KAAK;AAAA,IAC5B,QAAQ;AACN,aAAO,SAAS,MAAM,QAAQ,+CAA+C,GAAG;AAAA,IAClF;AAEA,QAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,aAAO,SAAS,MAAM,QAAQ,uDAAuD,GAAG;AAAA,IAC1F;AACA,QAAI,CAAC,SAAS,IAAI,KAAK,KAAK,YAAY,SAAS,OAAO,KAAK,WAAW,UAAU;AAChF,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,KAAK;AACpB,UAAM,SAAS,SAAS,KAAK,MAAM,IAAI,KAAK,SAAS,CAAC;AAGtD,QAAI,EAAE,QAAQ,SAAS,KAAK,OAAO,QAAW;AAC5C,aAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3C;AACA,UAAM,KAAK,KAAK;AAEhB,YAAQ,QAAQ;AAAA,MACd,KAAK,cAAc;AACjB,cAAM,YAAY,OAAO,OAAO,oBAAoB,WAAW,OAAO,kBAAkB;AACxF,cAAM,kBACJ,cAAc,UAAc,sBAA4C,SAAS,SAAS,IACtF,YACA;AACN,eAAO,UAAU,IAAI;AAAA,UACnB;AAAA,UACA,cAAc,EAAE,OAAO,EAAE,aAAa,MAAM,EAAE;AAAA,UAC9C,YAAY,KAAK;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,MAEA,KAAK;AACH,eAAO,UAAU,IAAI,CAAC,CAAC;AAAA,MAEzB,KAAK;AACH,eAAO,UAAU,IAAI;AAAA,UACnB,OAAO,KAAK,MAAM,IAAI,CAAC,UAAU;AAAA,YAC/B,MAAM,KAAK;AAAA,YACX,aAAa,KAAK;AAAA,YAClB,aAAa,KAAK;AAAA,UACpB,EAAE;AAAA,QACJ,CAAC;AAAA,MAEH,KAAK,cAAc;AACjB,cAAM,OAAO,OAAO;AACpB,YAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,iBAAO,SAAS,IAAI,QAAQ,0CAA0C;AAAA,QACxE;AACA,cAAM,OAAO,QAAQ,IAAI,IAAI;AAC7B,YAAI,CAAC,MAAM;AACT,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,YACA,iBAAiB,IAAI,sBAAsB,KAAK,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,UACrF;AAAA,QACF;AACA,YAAI,OAAO,cAAc,UAAa,CAAC,SAAS,OAAO,SAAS,GAAG;AACjE,iBAAO,SAAS,IAAI,QAAQ,6DAA6D;AAAA,QAC3F;AACA,cAAM,OAAO,SAAS,OAAO,SAAS,IAAI,OAAO,YAAY,CAAC;AAC9D,YAAI;AACJ,YAAI;AACF,gBAAM,MAAM,KAAK,SAAS,OAAO;AAAA,QACnC,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAM,UAA2B;AAAA,YAC/B,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,GAAG,IAAI,yBAAyB,OAAO,GAAG,CAAC;AAAA,YAC3E,SAAS;AAAA,UACX;AACA,iBAAO,UAAU,IAAI,OAAO;AAAA,QAC9B;AACA,YAAI;AACF,gBAAM,SAAS,MAAM,KAAK,IAAI,MAAM,GAAG;AACvC,gBAAM,UAA2B,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,MAAM,EAAE,CAAC,EAAE;AAC7F,iBAAO,UAAU,IAAI,OAAO;AAAA,QAC9B,SAAS,KAAK;AACZ,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,gBAAM,UAA2B;AAAA,YAC/B,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,GAAG,IAAI,YAAY,OAAO,GAAG,CAAC;AAAA,YAC9D,SAAS;AAAA,UACX;AACA,iBAAO,UAAU,IAAI,OAAO;AAAA,QAC9B;AAAA,MACF;AAAA,MAEA;AACE,eAAO,SAAS,IAAI,QAAQ,qBAAqB,MAAM,EAAE;AAAA,IAC7D;AAAA,EACF;AACF;","names":[]}