@toa.io/extensions.exposition 1.0.0-alpha.34 → 1.0.0-alpha.340

package/transpiled/MCP/Server.js

@@ -0,0 +1,219 @@
+import { console } from 'openspan';
+import { BRANCH_TTL } from '@toa.io/definitions/extensions.exposition';
+import * as http from '../HTTP/index.js';
+import { discovery } from './discover.js';
+import { Manifest } from './manifest.js';
+import { call, list } from './tools.js';
+import { HEADER_MISMATCH, INVALID_PARAMS, INVALID_REQUEST, METHOD_NOT_FOUND, PARSE, UNSUPPORTED_VERSION, failure, response } from './errors.js';
+import { CLIENT_CAPABILITIES, JSONRPC, LEGACY, MODERN, PROTOCOL_VERSION, SERVER_INFO, VERSIONS } from './types.js';
+/**
+ * The Model Context Protocol, as one endpoint that remembers nothing between requests.
+ *
+ * Two revisions are answered from it. The modern one carries the version and the client's
+ * capabilities in every request; the one before it opens with `initialize`, which is what
+ * most clients still send. Neither needs a session, and neither needs a stream: every method
+ * here answers one object, which is why this can exist in a package that serves no SSE.
+ */
+export class Server {
+    options;
+    tree;
+    origins;
+    /** Built again when the icons of the manifest change; a request reads what it is then. */
+    discovery;
+    /**
+     * The reader of the application's web manifest, which the gateway connects: none without
+     * one named.
+     */
+    manifest;
+    /** The hosts this is served at the root of, lowercased as a request's host is. */
+    roots;
+    constructor(options, tree) {
+        this.options = options;
+        this.tree = tree;
+        this.discovery = discovery(options);
+        this.origins = new Set(options.origins ?? []);
+        this.manifest =
+            options.manifest === undefined
+                ? null
+                : new Manifest(options.manifest, (icons) => {
+                    this.discovery = discovery(options, icons);
+                });
+        this.roots = new Set(Object.values(options.hosts ?? {}).map((host) => host.toLowerCase()));
+    }
+    /** Whether the host is one this endpoint is the root of. */
+    hosted(host) {
+        return this.roots.has(host);
+    }
+    /**
+     * Where a model is pointed on behalf of the authority, where that is a host of its own —
+     * the origin its protected resource document names.
+     */
+    address(authority) {
+        const host = this.options.hosts?.[authority];
+        return host === undefined ? null : `https://${host.toLowerCase()}`;
+    }
+    async process(context, route) {
+        if (context.request.method !== 'POST')
+            throw new http.MethodNotAllowed(new Headers({ allow: 'POST' }));
+        this.admit(context);
+        const message = await this.read(context);
+        const version = this.version(context, message);
+        const modern = version === MODERN;
+        if (modern)
+            this.mirrored(context, message);
+        const result = await this.answer({ context, route, tree: this.tree }, message, modern);
+        // a notification is answered by not answering, and there is nothing here to remember
+        if (message.id === undefined)
+            return { status: ACCEPTED };
+        return {
+            status: OK,
+            body: { jsonrpc: JSONRPC, id: message.id, result },
+            headers: new Headers({ 'cache-control': 'no-store' })
+        };
+    }
+    /** Who may reach the endpoint at all, before anything it carries is read. */
+    admit(context) {
+        const origin = context.request.headers.origin;
+        // the revision requires this against DNS rebinding; a request without one is no browser's
+        if (origin !== undefined && !this.origins.has(origin))
+            throw new http.Forbidden('Origin is not allowed');
+        if (this.options.anonymous === true)
+            return;
+        if (context.identity == null)
+            throw new http.Unauthorized();
+    }
+    async answer(scope, message, modern) {
+        const params = message.params ?? {};
+        switch (message.method) {
+            case 'server/discover':
+                return this.complete(this.discovery.modern, modern, DISCOVERY_CACHE);
+            case 'tools/list':
+                return this.complete({ tools: await list(this.tree, scope.context) }, modern, TOOLS_CACHE);
+            case 'tools/call':
+                return this.complete(await this.tool(scope, params), modern);
+            // what a client of an earlier revision opens with; no session is made and none is named
+            case 'initialize':
+                return this.discovery.legacy(declared(params));
+            case 'notifications/initialized':
+                return null;
+            case 'ping':
+                return {};
+            default:
+                throw new http.NotFound(response(message.id ?? null, failure(METHOD_NOT_FOUND, `'${message.method}' is not a method this server answers`)));
+        }
+    }
+    async tool(scope, params) {
+        const named = params.name;
+        if (typeof named !== 'string')
+            throw new http.BadRequest(response(null, failure(INVALID_PARAMS, '`tools/call` states the tool it calls by name')));
+        const args = params.arguments ?? {};
+        if (typeof args !== 'object' || args === null || Array.isArray(args))
+            throw new http.BadRequest(response(null, failure(INVALID_PARAMS, '`arguments` must be an object')));
+        return await console.span({ name: named }, async () => await call(scope, named, args));
+    }
+    /**
+     * Every result of the modern revision says what kind it is, and who answered it. Where the
+     * revision names the operation as one whose result may be held, it says that too, and must.
+     */
+    complete(result, modern, cache) {
+        return modern
+            ? {
+                ...result,
+                ...cache,
+                resultType: 'complete',
+                _meta: { [SERVER_INFO]: this.serverInfo() }
+            }
+            : result;
+    }
+    serverInfo() {
+        return this.discovery.modern._meta[SERVER_INFO];
+    }
+    /**
+     * Which revision this request is of. `initialize` is one by itself; otherwise the header
+     * says, and a request that names none is of a revision that did not send one.
+     */
+    version(context, message) {
+        if (message.method === 'initialize')
+            return LEGACY;
+        const header = context.request.headers['mcp-protocol-version'];
+        const stated = declared(message.params ?? {});
+        if (header !== undefined && stated !== undefined && header !== stated)
+            throw new http.BadRequest(response(message.id ?? null, failure(HEADER_MISMATCH, `'MCP-Protocol-Version' says '${String(header)}' and the body says '${stated}'`)));
+        const value = header ?? stated;
+        if (value === undefined)
+            return LEGACY;
+        if (!VERSIONS.includes(value))
+            throw new http.BadRequest(response(message.id ?? null, failure(UNSUPPORTED_VERSION, 'Unsupported protocol version', {
+                supported: VERSIONS,
+                requested: value
+            })));
+        return value;
+    }
+    /**
+     * What the modern revision mirrors into headers, so that what routes a request and what
+     * answers it cannot be told two different things.
+     */
+    mirrored(context, message) {
+        const meta = metadata(message.params ?? {});
+        if (meta?.[PROTOCOL_VERSION] === undefined || meta[CLIENT_CAPABILITIES] === undefined)
+            throw new http.BadRequest(response(message.id ?? null, failure(INVALID_PARAMS, `'_meta' states '${PROTOCOL_VERSION}' and '${CLIENT_CAPABILITIES}'`)));
+        const id = message.id ?? null;
+        mirrors(context, { id, header: 'mcp-method', value: message.method });
+        if (message.method === 'tools/call')
+            mirrors(context, { id, header: 'mcp-name', value: (message.params ?? {}).name });
+    }
+    /** A body the decoder refuses is a parse error; a media type it does not know is not. */
+    async read(context) {
+        let body;
+        try {
+            body = await context.body();
+        }
+        catch (exception) {
+            if (exception instanceof http.BadRequest)
+                throw new http.BadRequest(response(null, failure(PARSE, 'Parse error')));
+            throw exception;
+        }
+        if (typeof body !== 'object' ||
+            body === null ||
+            Array.isArray(body) ||
+            body.jsonrpc !== JSONRPC ||
+            typeof body.method !== 'string')
+            throw new http.BadRequest(response(null, failure(INVALID_REQUEST, 'A request carries one JSON-RPC message')));
+        return body;
+    }
+}
+/** What a header says must be what the body says, or what routes and what answers differ. */
+function mirrors(context, mirror) {
+    const { id, header, value } = mirror;
+    const stated = context.request.headers[header];
+    if (stated === undefined)
+        throw new http.BadRequest(response(id, failure(HEADER_MISMATCH, `'${header}' is required`)));
+    if (decode(String(stated)) !== value)
+        throw new http.BadRequest(response(id, failure(HEADER_MISMATCH, `'${header}' says '${String(stated)}' and the body says '${String(value)}'`)));
+}
+function metadata(params) {
+    const meta = params._meta;
+    return typeof meta === 'object' && meta !== null
+        ? meta
+        : undefined;
+}
+function declared(params) {
+    const stated = metadata(params)?.[PROTOCOL_VERSION];
+    return typeof stated === 'string' ? stated : undefined;
+}
+/** What a header value that could not be written as ASCII was encoded as. */
+function decode(value) {
+    if (!value.startsWith(SENTINEL) || !value.endsWith(TERMINATOR))
+        return value;
+    const encoded = value.slice(SENTINEL.length, -TERMINATOR.length);
+    return Buffer.from(encoded, 'base64').toString('utf8');
+}
+/** A tool list is what the tree holds, which stands until a branch of it expires. */
+const TOOLS_CACHE = { ttlMs: BRANCH_TTL, cacheScope: 'private' };
+/** What the annotation says, which is the same for every caller until the application is redeployed. */
+const DISCOVERY_CACHE = { ttlMs: BRANCH_TTL, cacheScope: 'public' };
+const OK = 200;
+const ACCEPTED = 202;
+const SENTINEL = '=?base64?';
+const TERMINATOR = '?=';
+//# sourceMappingURL=Server.js.map

package/transpiled/MCP/Server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.js","sourceRoot":"","sources":["../../source/MCP/Server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAA;AACtE,OAAO,KAAK,IAAI,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,SAAS,EAAkB,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAc,MAAM,YAAY,CAAA;AACnD,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,KAAK,EACL,mBAAmB,EACnB,OAAO,EACP,QAAQ,EACT,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,MAAM,EACN,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,QAAQ,EAIT,MAAM,YAAY,CAAA;AAInB;;;;;;;GAOG;AACH,MAAM,OAAO,MAAM;IACA,OAAO,CAAK;IACZ,IAAI,CAAM;IACV,OAAO,CAAa;IAErC,0FAA0F;IAClF,SAAS,CAAW;IAE5B;;;OAGG;IACa,QAAQ,CAAiB;IAEzC,kFAAkF;IACjE,KAAK,CAAa;IAEnC,YAAmB,OAAY,EAAE,IAAU;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QAE7C,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ,KAAK,SAAS;gBAC5B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;oBACvC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAC5C,CAAC,CAAC,CAAA;QACR,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CACrE,CAAA;IACH,CAAC;IAED,4DAA4D;IACrD,MAAM,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC;IAED;;;OAGG;IACI,OAAO,CAAC,SAAiB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAA;QAE5C,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,EAAE,CAAA;IACpE,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,OAAqB,EACrB,KAAqB;QAErB,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YACnC,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QAEjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,OAAO,KAAK,MAAM,CAAA;QAEjC,IAAI,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAEtF,qFAAqF;QACrF,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;QAEzD,OAAO;YACL,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE;YAClD,OAAO,EAAE,IAAI,OAAO,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;SACtD,CAAA;IACH,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,OAAqB;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QAE7C,0FAA0F;QAC1F,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YACnD,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAA;QAEnD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI;YAAE,OAAM;QAE3C,IAAK,OAAkC,CAAC,QAAQ,IAAI,IAAI;YACtD,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAA;IACjC,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAY,EACZ,OAAgB,EAChB,MAAe;QAEf,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAA;QAEnC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;YAEtE,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,QAAQ,CAClB,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAC/C,MAAM,EACN,WAAW,CACZ,CAAA;YAEH,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;YAE9D,wFAAwF;YACxF,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAEhD,KAAK,2BAA2B;gBAC9B,OAAO,IAAI,CAAA;YAEb,KAAK,MAAM;gBACT,OAAO,EAAE,CAAA;YAEX;gBACE,MAAM,IAAI,IAAI,CAAC,QAAQ,CACrB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CACL,gBAAgB,EAChB,IAAI,OAAO,CAAC,MAAM,uCAAuC,CAC1D,CACF,CACF,CAAA;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,KAAY,EAAE,MAAc;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAA;QAEzB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC3B,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,IAAI,EACJ,OAAO,CAAC,cAAc,EAAE,+CAA+C,CAAC,CACzE,CACF,CAAA;QAEH,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;QAEnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAClE,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC,CACzE,CAAA;QAEH,OAAO,MAAM,OAAO,CAAC,IAAI,CACvB,EAAE,IAAI,EAAE,KAAK,EAAE,EACf,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAc,CAAC,CACrD,CAAA;IACH,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,MAAc,EAAE,MAAe,EAAE,KAAa;QAC7D,OAAO,MAAM;YACX,CAAC,CAAC;gBACE,GAAG,MAAM;gBACT,GAAG,KAAK;gBACR,UAAU,EAAE,UAAU;gBACtB,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE;aAC5C;YACH,CAAC,CAAC,MAAM,CAAA;IACZ,CAAC;IAEO,UAAU;QAChB,OAAQ,IAAI,CAAC,SAAS,CAAC,MAA6C,CAAC,KAAK,CACxE,WAAW,CACZ,CAAA;IACH,CAAC;IAED;;;OAGG;IACK,OAAO,CAAC,OAAqB,EAAE,OAAgB;QACrD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,MAAM,CAAA;QAElD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;QAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAE7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM;YACnE,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CACL,eAAe,EACf,gCAAgC,MAAM,CAAC,MAAM,CAAC,wBAAwB,MAAM,GAAG,CAChF,CACF,CACF,CAAA;QAEH,MAAM,KAAK,GAAI,MAA6B,IAAI,MAAM,CAAA;QAEtD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAEtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC3B,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CAAC,mBAAmB,EAAE,8BAA8B,EAAE;gBAC3D,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,KAAK;aACjB,CAAC,CACH,CACF,CAAA;QAEH,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,OAAqB,EAAE,OAAgB;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAE3C,IAAI,IAAI,EAAE,CAAC,gBAAgB,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,CAAC,KAAK,SAAS;YACnF,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB,OAAO,CACL,cAAc,EACd,mBAAmB,gBAAgB,UAAU,mBAAmB,GAAG,CACpE,CACF,CACF,CAAA;QAEH,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAA;QAE7B,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAErE,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY;YACjC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,IAAI,CAAC,OAAqB;QACtC,IAAI,IAAa,CAAA;QAEjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,SAAS,YAAY,IAAI,CAAC,UAAU;gBACtC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;YAE1E,MAAM,SAAS,CAAA;QACjB,CAAC;QAED,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAClB,IAAgB,CAAC,OAAO,KAAK,OAAO;YACrC,OAAQ,IAAgB,CAAC,MAAM,KAAK,QAAQ;YAE5C,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC,CACnF,CAAA;QAEH,OAAO,IAAe,CAAA;IACxB,CAAC;CACF;AAED,6FAA6F;AAC7F,SAAS,OAAO,CAAC,OAAqB,EAAE,MAAc;IACpD,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAE9C,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,MAAM,eAAe,CAAC,CAAC,CAClE,CAAA;IAEH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK;QAClC,MAAM,IAAI,IAAI,CAAC,UAAU,CACvB,QAAQ,CACN,EAAE,EACF,OAAO,CACL,eAAe,EACf,IAAI,MAAM,WAAW,MAAM,CAAC,MAAM,CAAC,wBAAwB,MAAM,CAAC,KAAK,CAAC,GAAG,CAC5E,CACF,CACF,CAAA;AACL,CAAC;AAQD,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAA;IAEzB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAC9C,CAAC,CAAE,IAAgC;QACnC,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAA;IAEnD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;AACxD,CAAC;AAED,6EAA6E;AAC7E,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAE5E,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxD,CAAC;AAED,qFAAqF;AACrF,MAAM,WAAW,GAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;AAEvE,wGAAwG;AACxG,MAAM,eAAe,GAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AAE1E,MAAM,EAAE,GAAG,GAAG,CAAA;AACd,MAAM,QAAQ,GAAG,GAAG,CAAA;AACpB,MAAM,QAAQ,GAAG,WAAW,CAAA;AAC5B,MAAM,UAAU,GAAG,IAAI,CAAA"}

package/transpiled/MCP/discover.d.ts

@@ -0,0 +1,14 @@
+import type { Icon } from './manifest.ts';
+import type { MCPAnnotation as MCP } from '@toa.io/definitions/extensions.exposition';
+/**
+ * What a client is told before it calls anything: the revisions served, what is served, and
+ * who serves it. It is a function of the annotation alone, so it is built once and answered
+ * as it is.
+ */
+export interface Discovery {
+    /** `server/discover`, which the modern revision has replaced the handshake with. */
+    modern: object;
+    /** `initialize`, in the shape a client of an earlier revision reads. */
+    legacy: (offered: string | undefined) => object;
+}
+export declare function discovery(options: MCP, icons?: Icon[]): Discovery;

package/transpiled/MCP/discover.js

@@ -0,0 +1,32 @@
+import { readFileSync } from 'node:fs';
+import { LEGACY, MODERN, SERVER_INFO, VERSIONS } from './types.js';
+export function discovery(options, icons = []) {
+    const info = { name: options.name, version: VERSION };
+    // the application's own, where its manifest has been read and lists any
+    if (icons.length > 0)
+        info.icons = icons;
+    // `listChanged` is a stream a client holds open, and this endpoint holds none
+    const capabilities = { tools: {} };
+    const modern = {
+        supportedVersions: VERSIONS,
+        capabilities,
+        _meta: { [SERVER_INFO]: info }
+    };
+    if (options.instructions !== undefined)
+        modern.instructions = options.instructions;
+    function legacy(offered) {
+        const value = {
+            // what the client asked for where that is served, and the newest handshake otherwise
+            protocolVersion: offered !== undefined && offered !== MODERN ? offered : LEGACY,
+            capabilities,
+            serverInfo: info
+        };
+        if (options.instructions !== undefined)
+            value.instructions = options.instructions;
+        return value;
+    }
+    return { modern, legacy };
+}
+/** What this gateway is, which is what answers however an application names itself. */
+const VERSION = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version;
+//# sourceMappingURL=discover.js.map

package/transpiled/MCP/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../source/MCP/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAiBlE,MAAM,UAAU,SAAS,CAAC,OAAY,EAAE,KAAK,GAAW,EAAE;IACxD,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IAE9E,wEAAwE;IACxE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IAExC,8EAA8E;IAC9E,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IAElC,MAAM,MAAM,GAA4B;QACtC,iBAAiB,EAAE,QAAQ;QAC3B,YAAY;QACZ,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE;KAC/B,CAAA;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;IAElF,SAAS,MAAM,CAAC,OAA2B;QACzC,MAAM,KAAK,GAA4B;YACrC,qFAAqF;YACrF,eAAe,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC/E,YAAY;YACZ,UAAU,EAAE,IAAI;SACjB,CAAA;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;QAEjF,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,GAAW,IAAI,CAAC,KAAK,CAChC,YAAY,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACrE,CAAC,OAAO,CAAA"}

package/transpiled/MCP/errors.d.ts

@@ -0,0 +1,24 @@
+import * as http from '../HTTP/index.ts';
+import { type Failure, type Response } from './types.ts';
+export declare const PARSE = -32700;
+export declare const INVALID_REQUEST = -32600;
+export declare const METHOD_NOT_FOUND = -32601;
+export declare const INVALID_PARAMS = -32602;
+export declare const INTERNAL = -32603;
+export declare const HEADER_MISMATCH = -32020;
+export declare const MISSING_CAPABILITY = -32021;
+export declare const UNSUPPORTED_VERSION = -32022;
+export declare function failure(code: number, message: string, data?: unknown): Failure;
+export declare function response(id: string | number | null, error: Failure): Response;
+/**
+ * What an exception says as a JSON-RPC error.
+ *
+ * The readable text is `body`, never `message`: `http.Exception` calls `super()` with no
+ * argument, so every one of them carries an empty `message`.
+ */
+export declare function of(exception: unknown): Failure;
+/**
+ * What the call was refused with, which a model reads and may correct itself by: the code the
+ * operation refused with, where it did, and otherwise what the status means here.
+ */
+export declare function refusal(exception: http.ClientError): string;

package/transpiled/MCP/errors.js

@@ -0,0 +1,66 @@
+import * as http from '../HTTP/index.js';
+import { JSONRPC } from './types.js';
+/* The five JSON-RPC 2.0 fixes, which mean the same to every client. */
+export const PARSE = -32700;
+export const INVALID_REQUEST = -32600;
+export const METHOD_NOT_FOUND = -32601;
+export const INVALID_PARAMS = -32602;
+export const INTERNAL = -32603;
+/*
+ * MCP's own. It reserves -32020 to -32099 for the specification and tells an implementation
+ * to use nothing of -32000 to -32019 at all — which is where this gateway's JSON-RPC codes
+ * sit, so none of them is answered here.
+ */
+export const HEADER_MISMATCH = -32020;
+export const MISSING_CAPABILITY = -32021;
+export const UNSUPPORTED_VERSION = -32022;
+export function failure(code, message, data) {
+    const value = { code, message };
+    if (data !== undefined)
+        value.data = data;
+    return value;
+}
+export function response(id, error) {
+    return { jsonrpc: JSONRPC, id, error };
+}
+/**
+ * What an exception says as a JSON-RPC error.
+ *
+ * The readable text is `body`, never `message`: `http.Exception` calls `super()` with no
+ * argument, so every one of them carries an empty `message`.
+ */
+export function of(exception) {
+    if (exception instanceof http.NotFound || exception instanceof http.MethodNotAllowed)
+        return failure(METHOD_NOT_FOUND, text(exception, 'Method not found'));
+    if (exception instanceof http.BadRequest)
+        return failure(INVALID_PARAMS, text(exception, 'Invalid params'));
+    return failure(INTERNAL, 'Internal error');
+}
+/**
+ * What the call was refused with, which a model reads and may correct itself by: the code the
+ * operation refused with, where it did, and otherwise what the status means here.
+ */
+export function refusal(exception) {
+    const body = exception.body;
+    if (typeof body !== 'object' || body === null || typeof body.code !== 'string')
+        return text(exception, REFUSALS[exception.status] ?? 'Refused');
+    return body.code;
+}
+/**
+ * A refusal a model can act on, where the reply carried no words of its own. `auth` does
+ * not say which of its directives refused, and `auth:id` is what most of them are: a call
+ * naming a record that is not the caller's is the likeliest thing to have gone wrong.
+ */
+const REFUSALS = {
+    400: 'The arguments were refused',
+    403: "Not authorized. If an argument names an identity or a record, it may not be the caller's own",
+    404: 'There is nothing at that address',
+    409: 'The record changed while the call was made',
+    429: 'Too many calls'
+};
+function text(exception, fallback) {
+    return typeof exception.body === 'string' && exception.body !== ''
+        ? exception.body
+        : fallback;
+}
+//# sourceMappingURL=errors.js.map

package/transpiled/MCP/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../source/MCP/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,OAAO,EAA+B,MAAM,YAAY,CAAA;AAEjE,uEAAuE;AACvE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAA;AAC3B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAA;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAA;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAA;AACpC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAA;AAE9B;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAA;AACrC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAA;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAA;AAEzC,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAe,EAAE,IAAc;IACnE,MAAM,KAAK,GAAY,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAExC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAA;IAEzC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAA0B,EAAE,KAAc;IACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,EAAE,CAAC,SAAkB;IACnC,IAAI,SAAS,YAAY,IAAI,CAAC,QAAQ,IAAI,SAAS,YAAY,IAAI,CAAC,gBAAgB;QAClF,OAAO,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAEvE,IAAI,SAAS,YAAY,IAAI,CAAC,UAAU;QACtC,OAAO,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAEnE,OAAO,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,SAA2B;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAA;IAE3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC5E,OAAO,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,CAAA;IAEjE,OAAO,IAAI,CAAC,IAAc,CAAA;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,QAAQ,GAA2B;IACvC,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,8FAA8F;IACnG,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,4CAA4C;IACjD,GAAG,EAAE,gBAAgB;CACtB,CAAA;AAED,SAAS,IAAI,CAAC,SAAyB,EAAE,QAAgB;IACvD,OAAO,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,EAAE;QAChE,CAAC,CAAC,SAAS,CAAC,IAAI;QAChB,CAAC,CAAC,QAAQ,CAAA;AACd,CAAC"}

package/transpiled/MCP/index.d.ts

@@ -0,0 +1 @@
+export { Server } from './Server.ts';

package/transpiled/MCP/index.js

@@ -0,0 +1,2 @@
+export { Server } from './Server.js';
+//# sourceMappingURL=index.js.map

package/transpiled/MCP/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../source/MCP/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA"}

package/transpiled/MCP/manifest.d.ts

@@ -0,0 +1,40 @@
+import { Connector } from '@toa.io/core';
+/** An icon a client may render, as the revision describes one. */
+export interface Icon {
+    src: string;
+    mimeType?: string;
+    sizes?: string[];
+}
+/**
+ * The icons of an application's web manifest, read in the background. A request never waits
+ * for a read: what it is answered with is what the last read that did not fail gave, and none
+ * before one has.
+ *
+ * Every replica reads for itself — a document this small is not worth sharing state for — and
+ * reads again on the cycle a client holds `server/discover` for, so what a client was shown is
+ * at most two cycles old. HTTP caching is not honoured: the cycle replaces it.
+ */
+export declare class Manifest extends Connector {
+    private readonly url;
+    private readonly shown;
+    private readonly fetch;
+    /** What was last shown, to tell a change from a read that found the same. */
+    private current;
+    /** Consecutive reads that failed, which is what the retry backs off by. */
+    private failures;
+    private timer;
+    private aborted;
+    constructor(url: string, shown: (icons: Icon[]) => void, fetch?: typeof globalThis.fetch);
+    protected open(): void;
+    protected close(): void;
+    private read;
+    private get;
+    private succeeded;
+    private failed;
+    private schedule;
+}
+/**
+ * What a client may render of a manifest's icons with no further trust: one of the manifest's
+ * own origin, meant to be shown as it is, and an image where it says what it is.
+ */
+export declare function icons(document: unknown, url: string): Icon[];

package/transpiled/MCP/manifest.js

@@ -0,0 +1,164 @@
+import { console } from 'openspan';
+import { Connector } from '@toa.io/core';
+/**
+ * The icons of an application's web manifest, read in the background. A request never waits
+ * for a read: what it is answered with is what the last read that did not fail gave, and none
+ * before one has.
+ *
+ * Every replica reads for itself — a document this small is not worth sharing state for — and
+ * reads again on the cycle a client holds `server/discover` for, so what a client was shown is
+ * at most two cycles old. HTTP caching is not honoured: the cycle replaces it.
+ */
+export class Manifest extends Connector {
+    url;
+    shown;
+    fetch;
+    /** What was last shown, to tell a change from a read that found the same. */
+    current = null;
+    /** Consecutive reads that failed, which is what the retry backs off by. */
+    failures = 0;
+    timer = null;
+    aborted = new AbortController();
+    constructor(url, shown, fetch = globalThis.fetch) {
+        super();
+        this.url = url;
+        this.shown = shown;
+        this.fetch = fetch;
+    }
+    open() {
+        this.aborted = new AbortController();
+        // the endpoint answers without icons meanwhile: a site of another origin is not one to wait for
+        void this.read();
+    }
+    close() {
+        if (this.timer !== null)
+            clearTimeout(this.timer);
+        this.timer = null;
+        this.aborted.abort();
+    }
+    async read() {
+        const document = await this.get();
+        if (this.aborted.signal.aborted)
+            return;
+        if (document instanceof Error)
+            this.failed(document);
+        else
+            this.succeeded(icons(document, this.url));
+        this.schedule();
+    }
+    async get() {
+        try {
+            const response = await this.fetch(this.url, {
+                // a redirect leaves the address the annotation names
+                redirect: 'error',
+                signal: AbortSignal.any([this.aborted.signal, AbortSignal.timeout(TIMEOUT)]),
+                headers: { accept: 'application/manifest+json, application/json' }
+            });
+            if (!response.ok)
+                return new Error(`The manifest is answered with ${response.status}`);
+            return JSON.parse(await capped(response));
+        }
+        catch (error) {
+            return error instanceof Error ? error : new Error(String(error));
+        }
+    }
+    succeeded(found) {
+        if (this.failures > 0)
+            console.info('The web manifest is read again', { url: this.url });
+        this.failures = 0;
+        const value = JSON.stringify(found);
+        if (value === this.current)
+            return;
+        if (found.length === 0)
+            console.warn('The web manifest lists no icon to show', { url: this.url });
+        this.current = value;
+        this.shown(found);
+    }
+    failed(error) {
+        this.failures++;
+        const attributes = { url: this.url, message: error.message };
+        // a site that is down is said once, and not every time it is still down
+        if (this.failures === 1)
+            console.warn('The web manifest is not read', attributes);
+        else
+            console.debug('The web manifest is still not read', attributes);
+    }
+    schedule() {
+        // until a read succeeds, sooner; the icons of the last that did are kept meanwhile
+        const delay = this.failures === 0 || this.current !== null
+            ? CYCLE
+            : Math.min(RETRY * 2 ** (this.failures - 1), CYCLE);
+        this.timer = setTimeout(() => void this.read(), delay);
+        this.timer.unref?.();
+    }
+}
+/**
+ * What a client may render of a manifest's icons with no further trust: one of the manifest's
+ * own origin, meant to be shown as it is, and an image where it says what it is.
+ */
+export function icons(document, url) {
+    const listed = document?.icons;
+    if (!Array.isArray(listed))
+        return [];
+    const origin = new URL(url).origin;
+    const found = [];
+    for (const item of listed) {
+        if (typeof item !== 'object' || item === null)
+            continue;
+        const { src, type, sizes, purpose } = item;
+        if (typeof src !== 'string' || src === '')
+            continue;
+        const resolved = URL.parse(src, url);
+        if (resolved === null || resolved.origin !== origin)
+            continue;
+        if (purpose !== undefined &&
+            !(typeof purpose === 'string' && words(purpose).includes('any')))
+            continue;
+        if (type !== undefined && !(typeof type === 'string' && type.startsWith('image/')))
+            continue;
+        const icon = { src: resolved.href };
+        if (type !== undefined)
+            icon.mimeType = type;
+        const valid = typeof sizes === 'string' ? words(sizes).map(lower).filter(size) : [];
+        if (valid.length > 0)
+            icon.sizes = valid;
+        found.push(icon);
+    }
+    return found;
+}
+/** The body, not read past the cap: a document no manifest is this large is no manifest. */
+async function capped(response) {
+    const reader = response.body?.getReader();
+    if (reader === undefined)
+        return '';
+    const chunks = [];
+    let length = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        length += value.byteLength;
+        if (length > SIZE) {
+            await reader.cancel();
+            throw new Error(`The manifest is over ${SIZE} bytes`);
+        }
+        chunks.push(value);
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+function words(value) {
+    return value.split(/\s+/).filter((word) => word !== '');
+}
+function lower(value) {
+    return value.toLowerCase();
+}
+function size(value) {
+    return value === 'any' || /^[1-9]\d*x[1-9]\d*$/.test(value);
+}
+/** How often the manifest is read: the time a client may hold `server/discover`. */
+const CYCLE = 30 * 60_000;
+/** The first retry after a read failed, doubled until it is a cycle. */
+const RETRY = 60_000;
+const TIMEOUT = 3_000;
+const SIZE = 16 * 1024;
+//# sourceMappingURL=manifest.js.map

package/transpiled/MCP/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../source/MCP/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AASxC;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAS,SAAQ,SAAS;IACpB,GAAG,CAAQ;IACX,KAAK,CAAyB;IAC9B,KAAK,CAAyB;IAE/C,6EAA6E;IACrE,OAAO,GAAkB,IAAI,CAAA;IAErC,2EAA2E;IACnE,QAAQ,GAAG,CAAC,CAAA;IAEZ,KAAK,GAAyC,IAAI,CAAA;IAClD,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;IAEvC,YACE,GAAW,EACX,KAA8B,EAC9B,KAAK,GAA4B,UAAU,CAAC,KAAK;QAEjD,KAAK,EAAE,CAAA;QAEP,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAEkB,IAAI;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,EAAE,CAAA;QAEpC,gGAAgG;QAChG,KAAK,IAAI,CAAC,IAAI,EAAE,CAAA;IAClB,CAAC;IAEkB,KAAK;QACtB,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAA;QAEjC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAM;QAEvC,IAAI,QAAQ,YAAY,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;;YAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAE9C,IAAI,CAAC,QAAQ,EAAE,CAAA;IACjB,CAAC;IAEO,KAAK,CAAC,GAAG;QACf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,qDAAqD;gBACrD,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC5E,OAAO,EAAE,EAAE,MAAM,EAAE,6CAA6C,EAAE;aACnE,CAAC,CAAA;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACd,OAAO,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YAEtE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAEnE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;QAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAEnC,IAAI,KAAK,KAAK,IAAI,CAAC,OAAO;YAAE,OAAM;QAElC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAE3E,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACnB,CAAC;IAEO,MAAM,CAAC,KAAY;QACzB,IAAI,CAAC,QAAQ,EAAE,CAAA;QAEf,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QAE5D,wEAAwE;QACxE,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,EAAE,UAAU,CAAC,CAAA;;YAC5E,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAA;IACtE,CAAC;IAEO,QAAQ;QACd,mFAAmF;QACnF,MAAM,KAAK,GACT,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAC1C,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QAEvD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAA;QACtD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,QAAiB,EAAE,GAAW;IAClD,MAAM,MAAM,GAAI,QAAuC,EAAE,KAAK,CAAA;IAE9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IAErC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAClC,MAAM,KAAK,GAAW,EAAE,CAAA;IAExB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,SAAQ;QAEvD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAA+B,CAAA;QAErE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;YAAE,SAAQ;QAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAEpC,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,SAAQ;QAE7D,IACE,OAAO,KAAK,SAAS;YACrB,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEhE,SAAQ;QAEV,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChF,SAAQ;QAEV,MAAM,IAAI,GAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAA;QAEzC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QAE5C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAEnF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAExC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,MAAM,CAAC,QAAkB;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;IAEzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAEnC,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAE3C,IAAI,IAAI;YAAE,MAAK;QAEf,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;QAE1B,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;YAClB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;YAErB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,QAAQ,CAAC,CAAA;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;AACzD,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAA;AAC5B,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,KAAK,KAAK,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,oFAAoF;AACpF,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,CAAA;AAEzB,wEAAwE;AACxE,MAAM,KAAK,GAAG,MAAM,CAAA;AAEpB,MAAM,OAAO,GAAG,KAAK,CAAA;AACrB,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAA"}

package/transpiled/MCP/schema.d.ts

@@ -0,0 +1,27 @@
+import type { Introspection, Schema } from '../Introspection.ts';
+import type { Annotations } from './types.ts';
+/**
+ * What a tool takes, which is what the procedure takes: a route variable by the name the
+ * template gives it, the querystring under a name of its own, and what is left is the body.
+ *
+ * A `map:headers` property is not here: a call carries no headers of its own, so there is
+ * nowhere for a model to put one.
+ */
+export declare function input(introspection: Introspection, variables: string[], selection: Record<string, Schema> | null): object;
+/**
+ * What a tool answers with, where that is worth stating. An operation's `output` is optional
+ * and normalizes to `{}`, which describes nothing — and a schema the revision would have the
+ * reply validated against is worse said emptily than left unsaid.
+ *
+ * The revision has it describe an object, which is all structured content may be: a reply of
+ * another type is the `result` of one, as `structured` answers it.
+ */
+export declare function output(introspection: Introspection): object | undefined;
+/** A reply as structured content, which is an object: one of another type is its `result`. */
+export declare function structured(body: unknown): Record<string, unknown>;
+/**
+ * What the call is, which the revision has a client treat as a hint — and a client that reads
+ * `readOnlyHint` may call a tool without asking, so a route that says it writes is believed over
+ * the verb it is served under.
+ */
+export declare function annotations(verb: string, introspection: Introspection): Annotations | undefined;