@unbrained/pm-cli 2026.9.7 → 2026.9.9

package/dist/sdk/mcp/apps.js

@@ -1,131 +1,4 @@
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e6c49c89-781e-59a3-9c19-6a1c40424587")}catch(e){}}();
-import { PM_MCP_ERROR_CODES, PmMcpProtocolError, isMcpRecord, } from "./protocol.js";
-/** Stable MCP Apps extension identifier. */
-export const PM_MCP_APPS_EXTENSION = "io.modelcontextprotocol/ui";
-/** Stable MCP Apps specification revision implemented by pm. */
-export const PM_MCP_APPS_SPEC_VERSION = "2026-01-26";
-/** Official MIME type for MCP App HTML resources. */
-export const PM_MCP_APP_MIME_TYPE = "text/html;profile=mcp-app";
-/** Server-side MCP Apps capability advertised through discovery. */
-export const PM_MCP_APPS_SERVER_CAPABILITY = Object.freeze({
-    specVersion: PM_MCP_APPS_SPEC_VERSION,
-    mimeTypes: [PM_MCP_APP_MIME_TYPE],
-});
-/**
- * Resolve whether a request negotiated MCP Apps, rejecting malformed explicit
- * declarations instead of silently serving a different extension revision.
- */
-export function hasPmMcpAppsCapability(context) {
-    const extensions = context.clientCapabilities.extensions;
-    if (!isMcpRecord(extensions))
-        return false;
-    const declaration = extensions[PM_MCP_APPS_EXTENSION];
-    if (declaration === undefined)
-        return false;
-    if (!isMcpRecord(declaration)) {
-        throw new PmMcpProtocolError("Invalid MCP Apps client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, { requiredCapabilities: { extensions: { [PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY } } });
-    }
-    const mimeTypes = declaration.mimeTypes;
-    const specVersion = declaration.specVersion;
-    if (!Array.isArray(mimeTypes) ||
-        !mimeTypes.includes(PM_MCP_APP_MIME_TYPE) ||
-        (specVersion !== undefined && specVersion !== PM_MCP_APPS_SPEC_VERSION)) {
-        throw new PmMcpProtocolError("Unsupported MCP Apps client capability", PM_MCP_ERROR_CODES.missingRequiredClientCapability, { requiredCapabilities: { extensions: { [PM_MCP_APPS_EXTENSION]: PM_MCP_APPS_SERVER_CAPABILITY } } });
-    }
-    return true;
-}
-const PRIVATE_APP_RESOURCE_META = {
-    csp: { connectDomains: [], resourceDomains: [], frameDomains: [] },
-    permissions: {},
-    prefersBorder: true,
-};
-/** Canonical optional pm MCP Apps. */
-export const PM_MCP_APP_CONTRACTS = Object.freeze([
-    {
-        id: "context",
-        name: "Context explorer",
-        description: "Inspect bounded project context, provenance, omissions, and token accounting.",
-        toolName: "pm_context",
-        uri: "ui://pm/context.html",
-    },
-    {
-        id: "graph",
-        name: "Relationship graph",
-        description: "Explore typed relationships, explaining paths, and graph-governance evidence.",
-        toolName: "pm_graph",
-        uri: "ui://pm/graph.html",
-    },
-    {
-        id: "plan",
-        name: "Plan and milestone view",
-        description: "Review durable plan steps, dependencies, decisions, discoveries, and validation state.",
-        toolName: "pm_plan",
-        uri: "ui://pm/plan.html",
-    },
-    {
-        id: "assurance",
-        name: "Assurance dashboard",
-        description: "Inspect validation verdicts, evidence, omissions, and actionable recovery paths.",
-        toolName: "pm_validate",
-        uri: "ui://pm/assurance.html",
-    },
-    {
-        id: "operations",
-        name: "Long-operation view",
-        description: "Inspect durable test and operation results without creating a second task store.",
-        toolName: "pm_test",
-        uri: "ui://pm/operations.html",
-    },
-].map((contract) => ({
-    ...contract,
-    toolMeta: {
-        resourceUri: contract.uri,
-        visibility: ["model", "app"],
-    },
-    resourceMeta: PRIVATE_APP_RESOURCE_META,
-})));
-/** Return the app contract for a resource URI. */
-export function findPmMcpAppByUri(uri) {
-    return PM_MCP_APP_CONTRACTS.find((contract) => contract.uri === uri);
-}
-/** Attach negotiated MCP App metadata to matching tool definitions. */
-export function decoratePmMcpToolsWithApps(tools) {
-    const appsByTool = new Map(PM_MCP_APP_CONTRACTS.map((contract) => [contract.toolName, contract]));
-    return tools.map((tool) => {
-        const app = appsByTool.get(tool.name);
-        return app
-            ? {
-                ...tool,
-                _meta: { ...tool._meta, ui: app.toolMeta },
-            }
-            : { ...tool };
-    });
-}
-function escapeHtml(value) {
-    return value
-        .replaceAll("&", "&")
-        .replaceAll("<", "&lt;")
-        .replaceAll(">", "&gt;")
-        .replaceAll('"', "&quot;")
-        .replaceAll("'", "&#39;");
-}
-/**
- * Render a self-contained, sandbox-compatible MCP App document.
- *
- * The view keeps no durable state and exposes no mutation control. It receives
- * the authoritative tool input/result from the host, bounds large rendering,
- * and presents the text fallback when structured content is unavailable.
- */
-export function renderPmMcpAppHtml(contract) {
-    const title = escapeHtml(contract.name);
-    const description = escapeHtml(contract.description);
-    const appInfo = JSON.stringify({
-        name: `pm-${contract.id}-view`,
-        version: PM_MCP_APPS_SPEC_VERSION,
-    });
-    const protocolVersion = JSON.stringify(PM_MCP_APPS_SPEC_VERSION);
-    return `<!doctype html>
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4f17095e-2dba-530c-935c-1803ed359510")}catch(e2){}})();import{PM_MCP_ERROR_CODES,PmMcpProtocolError,isMcpRecord}from"./protocol.js";const PM_MCP_APPS_EXTENSION="io.modelcontextprotocol/ui";const PM_MCP_APPS_SPEC_VERSION="2026-01-26";const PM_MCP_APP_MIME_TYPE="text/html;profile=mcp-app";const PM_MCP_APPS_SERVER_CAPABILITY=Object.freeze({specVersion:PM_MCP_APPS_SPEC_VERSION,mimeTypes:[PM_MCP_APP_MIME_TYPE]});function hasPmMcpAppsCapability(context){const extensions=context.clientCapabilities.extensions;if(!isMcpRecord(extensions))return false;const declaration=extensions[PM_MCP_APPS_EXTENSION];if(declaration===void 0)return false;if(!isMcpRecord(declaration)){throw new PmMcpProtocolError("Invalid MCP Apps client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}})}const mimeTypes=declaration.mimeTypes;const specVersion=declaration.specVersion;if(!Array.isArray(mimeTypes)||!mimeTypes.includes(PM_MCP_APP_MIME_TYPE)||specVersion!==void 0&&specVersion!==PM_MCP_APPS_SPEC_VERSION){throw new PmMcpProtocolError("Unsupported MCP Apps client capability",PM_MCP_ERROR_CODES.missingRequiredClientCapability,{requiredCapabilities:{extensions:{[PM_MCP_APPS_EXTENSION]:PM_MCP_APPS_SERVER_CAPABILITY}}})}return true}const PRIVATE_APP_RESOURCE_META={csp:{connectDomains:[],resourceDomains:[],frameDomains:[]},permissions:{},prefersBorder:true};const PM_MCP_APP_CONTRACTS=Object.freeze([{id:"context",name:"Context explorer",description:"Inspect bounded project context, provenance, omissions, and token accounting.",toolName:"pm_context",uri:"ui://pm/context.html"},{id:"graph",name:"Relationship graph",description:"Explore typed relationships, explaining paths, and graph-governance evidence.",toolName:"pm_graph",uri:"ui://pm/graph.html"},{id:"plan",name:"Plan and milestone view",description:"Review durable plan steps, dependencies, decisions, discoveries, and validation state.",toolName:"pm_plan",uri:"ui://pm/plan.html"},{id:"assurance",name:"Assurance dashboard",description:"Inspect validation verdicts, evidence, omissions, and actionable recovery paths.",toolName:"pm_validate",uri:"ui://pm/assurance.html"},{id:"operations",name:"Long-operation view",description:"Inspect durable test and operation results without creating a second task store.",toolName:"pm_test",uri:"ui://pm/operations.html"}].map(contract=>({...contract,toolMeta:{resourceUri:contract.uri,visibility:["model","app"]},resourceMeta:PRIVATE_APP_RESOURCE_META})));function findPmMcpAppByUri(uri){return PM_MCP_APP_CONTRACTS.find(contract=>contract.uri===uri)}function decoratePmMcpToolsWithApps(tools){const appsByTool=new Map(PM_MCP_APP_CONTRACTS.map(contract=>[contract.toolName,contract]));return tools.map(tool=>{const app=appsByTool.get(tool.name);return app?{...tool,_meta:{...tool._meta,ui:app.toolMeta}}:{...tool}})}function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#39;")}function renderPmMcpAppHtml(contract){const title=escapeHtml(contract.name);const description=escapeHtml(contract.description);const appInfo=JSON.stringify({name:`pm-${contract.id}-view`,version:PM_MCP_APPS_SPEC_VERSION});const protocolVersion=JSON.stringify(PM_MCP_APPS_SPEC_VERSION);return`<!doctype html>
 <html lang="en">
 <head>
   <meta charset="utf-8">
@@ -140,15 +13,13 @@ export function renderPmMcpAppHtml(contract) {
 <body>
 <main>
   <header><div class="status" id="status" role="status" aria-live="polite">Connecting to host</div><h1>${title}</h1><p>${description}</p></header>
-  <section aria-labelledby="summary-title"><h2 id="summary-title">Authoritative result</h2><pre id="result" tabindex="0">Waiting for the host tool result…</pre></section>
+  <section aria-labelledby="summary-title"><h2 id="summary-title">Authoritative result</h2><pre id="result" tabindex="0">Waiting for the host tool result\u2026</pre></section>
   <section aria-labelledby="input-title"><h2 id="input-title">Invocation context</h2><pre id="input" tabindex="0">No tool input received.</pre></section>
   <button type="button" id="copy">Copy visible evidence</button>
 </main>
 <script>
-(()=>{"use strict";const MAX=24000,status=document.querySelector("#status"),result=document.querySelector("#result"),input=document.querySelector("#input"),pending=new Map();let nextId=1;const render=(node,value)=>{let text;try{text=typeof value==="string"?value:JSON.stringify(value,null,2)}catch{text="Result could not be serialized."}if(text.length>MAX)text=text.slice(0,MAX)+"\\n\\n[View truncated at "+MAX+" characters; use the authoritative pm tool with a cursor or narrower projection.]";node.textContent=text};const send=(message)=>window.parent.postMessage(message,"*");window.addEventListener("message",event=>{if(event.source!==window.parent||!event.data||event.data.jsonrpc!=="2.0")return;const message=event.data;if(message.id!==undefined&&pending.has(message.id)){pending.get(message.id)(message);pending.delete(message.id);return}if(message.method==="ui/notifications/tool-input"||message.method==="ui/notifications/tool-input-partial"){render(input,message.params?.arguments??message.params);status.textContent="Input received"}else if(message.method==="ui/notifications/tool-result"){render(result,message.params);status.textContent="Current tool result"}else if(message.method==="ui/notifications/tool-cancelled"){status.textContent="Tool call cancelled";status.classList.add("notice")}else if(message.method==="ui/notifications/host-context-changed"&&message.params?.theme){document.documentElement.style.colorScheme=message.params.theme}});const request=(method,params)=>new Promise(resolve=>{const id=nextId++;pending.set(id,resolve);send({jsonrpc:"2.0",id,method,params})});document.querySelector("#copy").addEventListener("click",async()=>{const text=result.textContent+"\\n\\n"+input.textContent;try{await navigator.clipboard.writeText(text);status.textContent="Visible evidence copied"}catch{status.textContent="Clipboard permission unavailable";status.classList.add("notice")}});request("ui/initialize",{appInfo:${appInfo},appCapabilities:{},protocolVersion:${protocolVersion}}).then(message=>{if(message.error){status.textContent="Host rejected MCP App initialization";status.classList.add("notice");return}send({jsonrpc:"2.0",method:"ui/notifications/initialized"});status.textContent="Connected — awaiting authoritative result"})})();
+(()=>{"use strict";const MAX=24000,status=document.querySelector("#status"),result=document.querySelector("#result"),input=document.querySelector("#input"),pending=new Map();let nextId=1;const render=(node,value)=>{let text;try{text=typeof value==="string"?value:JSON.stringify(value,null,2)}catch{text="Result could not be serialized."}if(text.length>MAX)text=text.slice(0,MAX)+"\\n\\n[View truncated at "+MAX+" characters; use the authoritative pm tool with a cursor or narrower projection.]";node.textContent=text};const send=(message)=>window.parent.postMessage(message,"*");window.addEventListener("message",event=>{if(event.source!==window.parent||!event.data||event.data.jsonrpc!=="2.0")return;const message=event.data;if(message.id!==undefined&&pending.has(message.id)){pending.get(message.id)(message);pending.delete(message.id);return}if(message.method==="ui/notifications/tool-input"||message.method==="ui/notifications/tool-input-partial"){render(input,message.params?.arguments??message.params);status.textContent="Input received"}else if(message.method==="ui/notifications/tool-result"){render(result,message.params);status.textContent="Current tool result"}else if(message.method==="ui/notifications/tool-cancelled"){status.textContent="Tool call cancelled";status.classList.add("notice")}else if(message.method==="ui/notifications/host-context-changed"&&message.params?.theme){document.documentElement.style.colorScheme=message.params.theme}});const request=(method,params)=>new Promise(resolve=>{const id=nextId++;pending.set(id,resolve);send({jsonrpc:"2.0",id,method,params})});document.querySelector("#copy").addEventListener("click",async()=>{const text=result.textContent+"\\n\\n"+input.textContent;try{await navigator.clipboard.writeText(text);status.textContent="Visible evidence copied"}catch{status.textContent="Clipboard permission unavailable";status.classList.add("notice")}});request("ui/initialize",{appInfo:${appInfo},appCapabilities:{},protocolVersion:${protocolVersion}}).then(message=>{if(message.error){status.textContent="Host rejected MCP App initialization";status.classList.add("notice");return}send({jsonrpc:"2.0",method:"ui/notifications/initialized"});status.textContent="Connected \u2014 awaiting authoritative result"})})();
 </script>
 </body>
-</html>`;
-}
+</html>`}export{PM_MCP_APPS_EXTENSION,PM_MCP_APPS_SERVER_CAPABILITY,PM_MCP_APPS_SPEC_VERSION,PM_MCP_APP_CONTRACTS,PM_MCP_APP_MIME_TYPE,decoratePmMcpToolsWithApps,findPmMcpAppByUri,hasPmMcpAppsCapability,renderPmMcpAppHtml};
 //# sourceMappingURL=apps.js.map
-//# debugId=e6c49c89-781e-59a3-9c19-6a1c40424587

package/dist/sdk/mcp/authorization.js

@@ -1,405 +1,2 @@
-/**
- * @module sdk/mcp/authorization
- *
- * Defines issuer-bound OAuth resource-server, client-registration, credential,
- * and privacy-bounded trace propagation primitives for remote MCP transports.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="a9aefc86-a8ce-5ecf-bb54-e5fa3ea277c7")}catch(e){}}();
-import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash, timingSafeEqual } from "node:crypto";
-import { isMcpRecord } from "./protocol.js";
-/** Authorization failure with an HTTP status and disclosure-safe context. */
-export class PmMcpAuthorizationError extends Error {
-    /** HTTP status required at the remote MCP boundary. */
-    httpStatus;
-    /** Optional RFC 6750 challenge safe to send to an unauthenticated client. */
-    challenge;
-    /** Create one remote authorization refusal. */
-    constructor(message, httpStatus, challenge) {
-        super(message);
-        this.name = "PmMcpAuthorizationError";
-        this.httpStatus = httpStatus;
-        this.challenge = challenge;
-    }
-}
-const TRACE_PARENT_PATTERN = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/u;
-const TRACE_STATE_SIMPLE_KEY_PATTERN = /^[a-z][a-z0-9_*/-]{0,255}$/u;
-const TRACE_STATE_TENANT_KEY_PATTERN = /^(?:[a-z0-9][a-z0-9_*/-]{0,240})@[a-z][a-z0-9_*/-]{0,13}$/u;
-const TRACE_STATE_VALUE_PATTERN = /^[\x20-\x2B\x2D-\x3C\x3E-\x7E]{0,255}[\x21-\x2B\x2D-\x3C\x3E-\x7E]$/u;
-const SCOPE_PATTERN = /^[\x21\x23-\x5B\x5D-\x7E]+$/u;
-const BAGGAGE_KEY_PATTERN = /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/u;
-const BAGGAGE_VALUE_PATTERN = /^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*$/u;
-const INVALID_PERCENT_ENCODING_PATTERN = /%(?![0-9A-Fa-f]{2})/u;
-const MAX_TRACE_STATE_BYTES = 512;
-const MAX_TRACE_STATE_MEMBERS = 32;
-const MAX_BAGGAGE_MEMBERS = 180;
-const MAX_BAGGAGE_BYTES = 8_192;
-const MAX_BEARER_TOKEN_BYTES = 8_192;
-const MCP_TRACE_CONTEXT_STORAGE = new AsyncLocalStorage();
-function requireAbsoluteAuthorizationUrl(value, field, allowLocalHttp = false) {
-    if (/\p{Cc}/u.test(value)) {
-        throw new PmMcpAuthorizationError(`Invalid ${field}`, 401);
-    }
-    let parsed;
-    try {
-        parsed = new URL(value);
-    }
-    catch {
-        throw new PmMcpAuthorizationError(`Invalid ${field}`, 401);
-    }
-    const local = parsed.hostname === "127.0.0.1" || parsed.hostname === "localhost";
-    if (parsed.hash.length > 0 ||
-        (parsed.protocol !== "https:" &&
-            !(allowLocalHttp && local && parsed.protocol === "http:"))) {
-        throw new PmMcpAuthorizationError(`Invalid ${field}`, 401);
-    }
-    return parsed;
-}
-function readHeader(headers, name) {
-    const expected = name.toLowerCase();
-    for (const [candidate, value] of Object.entries(headers)) {
-        if (candidate.toLowerCase() !== expected || value === undefined)
-            continue;
-        return typeof value === "string" ? value : value.join(", ");
-    }
-    return undefined;
-}
-/** Build and validate protected-resource metadata for a remote pm endpoint. */
-export function buildMcpProtectedResourceMetadata(input) {
-    const resource = requireAbsoluteAuthorizationUrl(input.resource, "protected resource URI", true).href.replace(/\/$/u, "");
-    if (input.authorizationServers.length === 0) {
-        throw new PmMcpAuthorizationError("Protected resource metadata requires an authorization server", 401);
-    }
-    const authorizationServers = input.authorizationServers.map((issuer) => requireAbsoluteAuthorizationUrl(issuer, "authorization server issuer").href.replace(/\/$/u, ""));
-    const scopes = [...new Set(input.scopes ?? [])];
-    if (scopes.some((scope) => !SCOPE_PATTERN.test(scope))) {
-        throw new PmMcpAuthorizationError("Invalid authorization scope", 401);
-    }
-    return {
-        resource,
-        authorization_servers: authorizationServers,
-        ...(scopes.length > 0 ? { scopes_supported: scopes.sort() } : {}),
-    };
-}
-/** Construct OAuth and OIDC discovery URLs in the MCP-required order. */
-export function buildMcpAuthorizationDiscoveryUrls(issuer) {
-    const parsed = requireAbsoluteAuthorizationUrl(issuer, "authorization server issuer");
-    const suffix = parsed.pathname.replace(/^\/+|\/+$/gu, "");
-    const origin = parsed.origin;
-    return suffix
-        ? [
-            `${origin}/.well-known/oauth-authorization-server/${suffix}`,
-            `${origin}/.well-known/openid-configuration/${suffix}`,
-            `${origin}/${suffix}/.well-known/openid-configuration`,
-        ]
-        : [
-            `${origin}/.well-known/oauth-authorization-server`,
-            `${origin}/.well-known/openid-configuration`,
-        ];
-}
-/** Validate authorization-server metadata, exact issuer binding, and S256 PKCE. */
-export function validateMcpAuthorizationServerMetadata(value, expectedIssuer) {
-    if (!isMcpRecord(value) || typeof value.issuer !== "string") {
-        throw new PmMcpAuthorizationError("Invalid authorization server metadata", 401);
-    }
-    const expected = requireAbsoluteAuthorizationUrl(expectedIssuer, "expected issuer").href.replace(/\/$/u, "");
-    const observed = requireAbsoluteAuthorizationUrl(value.issuer, "metadata issuer").href.replace(/\/$/u, "");
-    if (observed !== expected) {
-        throw new PmMcpAuthorizationError("Authorization server issuer mismatch", 401);
-    }
-    if (!Array.isArray(value.code_challenge_methods_supported) ||
-        !value.code_challenge_methods_supported.includes("S256")) {
-        throw new PmMcpAuthorizationError("Authorization server does not support required S256 PKCE", 401);
-    }
-    const requiredUrl = (field) => {
-        const candidate = value[field];
-        if (typeof candidate !== "string") {
-            throw new PmMcpAuthorizationError(`Authorization server metadata requires ${field}`, 401);
-        }
-        return requireAbsoluteAuthorizationUrl(candidate, field).href;
-    };
-    const optionalUrl = (field) => {
-        const candidate = value[field];
-        return typeof candidate === "string"
-            ? requireAbsoluteAuthorizationUrl(candidate, field).href
-            : undefined;
-    };
-    const authorizationEndpoint = requiredUrl("authorization_endpoint");
-    const tokenEndpoint = requiredUrl("token_endpoint");
-    const registrationEndpoint = optionalUrl("registration_endpoint");
-    return {
-        issuer: expected,
-        authorization_endpoint: authorizationEndpoint,
-        token_endpoint: tokenEndpoint,
-        code_challenge_methods_supported: [
-            ...new Set(value.code_challenge_methods_supported.filter((entry) => typeof entry === "string")),
-        ],
-        ...(value.client_id_metadata_document_supported === true
-            ? { client_id_metadata_document_supported: true }
-            : {}),
-        ...(registrationEndpoint
-            ? { registration_endpoint: registrationEndpoint }
-            : {}),
-    };
-}
-/** Apply the current pre-registration, metadata-document, dynamic, prompt order. */
-export function selectMcpClientRegistrationMode(input) {
-    if (input.hasPreRegisteredClient)
-        return "pre_registered";
-    if (input.metadata.client_id_metadata_document_supported)
-        return "client_id_metadata_document";
-    if (input.metadata.registration_endpoint)
-        return "dynamic";
-    return "user_supplied";
-}
-/** Validate a present authorization-response issuer before code redemption. */
-export function validateMcpAuthorizationResponseIssuer(input) {
-    if (input.responseIssuer === undefined) {
-        if (input.issuerParameterSupported) {
-            throw new PmMcpAuthorizationError("Authorization response omitted the advertised issuer", 401);
-        }
-        return;
-    }
-    if (input.responseIssuer !== input.expectedIssuer) {
-        throw new PmMcpAuthorizationError("Authorization response issuer mismatch", 401);
-    }
-}
-/** Validate a self-hosted Client ID Metadata Document and exact redirect set. */
-export function validateMcpClientMetadataDocument(value, documentUrl) {
-    const expected = requireAbsoluteAuthorizationUrl(documentUrl, "client metadata document URL");
-    if (expected.pathname === "/" ||
-        !isMcpRecord(value) ||
-        value.client_id !== expected.href ||
-        typeof value.client_name !== "string" ||
-        value.client_name.trim().length === 0 ||
-        !Array.isArray(value.redirect_uris) ||
-        value.redirect_uris.length === 0) {
-        throw new PmMcpAuthorizationError("Invalid Client ID Metadata Document", 401);
-    }
-    for (const redirect of value.redirect_uris) {
-        if (typeof redirect !== "string") {
-            throw new PmMcpAuthorizationError("Invalid client redirect URI", 401);
-        }
-        requireAbsoluteAuthorizationUrl(redirect, "client redirect URI", true);
-    }
-    return structuredClone(value);
-}
-/** Build bounded dynamic-registration metadata for explicit legacy fallback. */
-export function buildMcpDynamicRegistrationMetadata(input) {
-    if (input.redirectUris.length === 0 || input.clientName.trim().length === 0) {
-        throw new PmMcpAuthorizationError("Invalid dynamic client registration metadata", 401);
-    }
-    const redirectUris = input.redirectUris.map((redirect) => requireAbsoluteAuthorizationUrl(redirect, "redirect URI", true).href);
-    return {
-        application_type: input.applicationType,
-        client_name: input.clientName.trim().slice(0, 128),
-        redirect_uris: redirectUris,
-        grant_types: ["authorization_code", "refresh_token"],
-        response_types: ["code"],
-        token_endpoint_auth_method: "none",
-    };
-}
-/** In-memory issuer-keyed credential primitive that never reuses cross-issuer state. */
-export class PmMcpIssuerCredentialStore {
-    #credentials = new Map();
-    /** Persist a cloned credential under the exact validated issuer. */
-    set(issuer, credential) {
-        const key = requireAbsoluteAuthorizationUrl(issuer, "credential issuer").href;
-        this.#credentials.set(key, structuredClone(credential));
-    }
-    /** Read a cloned credential only for the exact issuer. */
-    get(issuer) {
-        const key = requireAbsoluteAuthorizationUrl(issuer, "credential issuer").href;
-        const credential = this.#credentials.get(key);
-        return credential ? structuredClone(credential) : undefined;
-    }
-    /** Remove credentials for one issuer during revocation or re-registration. */
-    delete(issuer) {
-        const key = requireAbsoluteAuthorizationUrl(issuer, "credential issuer").href;
-        return this.#credentials.delete(key);
-    }
-}
-function validateMcpTraceFields(meta) {
-    const traceparent = meta.traceparent;
-    const tracestate = meta.tracestate;
-    if (traceparent !== undefined) {
-        const match = typeof traceparent === "string"
-            ? TRACE_PARENT_PATTERN.exec(traceparent)
-            : null;
-        if (!match) {
-            throw new PmMcpAuthorizationError("Invalid MCP traceparent", 403);
-        }
-        const traceId = match[1];
-        const parentId = match[2];
-        if (/^0+$/u.test(traceId) || /^0+$/u.test(parentId)) {
-            throw new PmMcpAuthorizationError("Invalid MCP traceparent", 403);
-        }
-    }
-    if (tracestate !== undefined &&
-        (typeof tracestate !== "string" || !isValidMcpTraceState(tracestate))) {
-        throw new PmMcpAuthorizationError("Invalid MCP tracestate", 403);
-    }
-    return {
-        ...(typeof traceparent === "string" ? { traceparent } : {}),
-        ...(typeof tracestate === "string" ? { tracestate } : {}),
-    };
-}
-function trimOptionalWhitespace(value) {
-    return value.replace(/^[ \t]*|[ \t]*$/gu, "");
-}
-function isValidMcpTraceStateKey(key) {
-    return (TRACE_STATE_SIMPLE_KEY_PATTERN.test(key) ||
-        TRACE_STATE_TENANT_KEY_PATTERN.test(key));
-}
-function isValidMcpTraceState(value) {
-    if (Buffer.byteLength(value, "utf8") > MAX_TRACE_STATE_BYTES)
-        return false;
-    const members = value.split(",");
-    if (members.length > MAX_TRACE_STATE_MEMBERS)
-        return false;
-    const keys = new Set();
-    for (const source of members) {
-        const member = trimOptionalWhitespace(source);
-        if (member.length === 0)
-            continue;
-        const separator = member.indexOf("=");
-        const key = separator > 0 ? member.slice(0, separator) : "";
-        const memberValue = separator > 0 ? member.slice(separator + 1) : "";
-        if (!isValidMcpTraceStateKey(key) ||
-            !TRACE_STATE_VALUE_PATTERN.test(memberValue) ||
-            keys.has(key)) {
-            return false;
-        }
-        keys.add(key);
-    }
-    return true;
-}
-function isValidMcpBaggageValue(value) {
-    return (BAGGAGE_VALUE_PATTERN.test(value) &&
-        !INVALID_PERCENT_ENCODING_PATTERN.test(value));
-}
-function isValidMcpBaggageProperty(source) {
-    const property = trimOptionalWhitespace(source);
-    const separator = property.indexOf("=");
-    const key = trimOptionalWhitespace(separator >= 0 ? property.slice(0, separator) : property);
-    const value = separator >= 0
-        ? trimOptionalWhitespace(property.slice(separator + 1))
-        : undefined;
-    return (BAGGAGE_KEY_PATTERN.test(key) &&
-        (value === undefined || isValidMcpBaggageValue(value)));
-}
-function parseMcpBaggageMember(source) {
-    const serialized = trimOptionalWhitespace(source);
-    const segments = serialized.split(";");
-    const pair = segments[0];
-    const properties = segments.slice(1);
-    const separator = pair.indexOf("=");
-    const key = trimOptionalWhitespace(separator > 0 ? pair.slice(0, separator) : "");
-    const value = separator > 0 ? trimOptionalWhitespace(pair.slice(separator + 1)) : "";
-    if (!BAGGAGE_KEY_PATTERN.test(key) ||
-        !isValidMcpBaggageValue(value) ||
-        !properties.every(isValidMcpBaggageProperty)) {
-        return undefined;
-    }
-    return { key, serialized };
-}
-function filterMcpBaggage(baggage, allowlistEntries) {
-    if (baggage === undefined)
-        return undefined;
-    if (typeof baggage !== "string" ||
-        Buffer.byteLength(baggage, "utf8") > MAX_BAGGAGE_BYTES) {
-        throw new PmMcpAuthorizationError("Invalid MCP baggage", 403);
-    }
-    const allowlist = new Set(allowlistEntries);
-    const sources = baggage.split(",");
-    if (sources.length > MAX_BAGGAGE_MEMBERS) {
-        throw new PmMcpAuthorizationError("Invalid MCP baggage", 403);
-    }
-    const entries = [];
-    for (const source of sources) {
-        const entry = parseMcpBaggageMember(source);
-        if (!entry) {
-            throw new PmMcpAuthorizationError("Invalid MCP baggage", 403);
-        }
-        if (allowlist.has(entry.key))
-            entries.push(entry.serialized);
-    }
-    return entries.length > 0 ? entries.join(",") : undefined;
-}
-/** Extract W3C trace context with strict syntax, size, and baggage allowlists. */
-export function extractMcpTraceContext(params, options = {}) {
-    const meta = isMcpRecord(params) && isMcpRecord(params._meta) ? params._meta : {};
-    const allowedBaggage = filterMcpBaggage(meta.baggage, options.baggageAllowlist ?? []);
-    return {
-        ...validateMcpTraceFields(meta),
-        ...(allowedBaggage ? { baggage: allowedBaggage } : {}),
-    };
-}
-/** Run one request with trace context isolated from every concurrent request. */
-export function runWithMcpTraceContext(context, callback) {
-    return MCP_TRACE_CONTEXT_STORAGE.run(structuredClone(context), callback);
-}
-/** Read a defensive copy of the current request's trace context. */
-export function getActiveMcpTraceContext() {
-    const context = MCP_TRACE_CONTEXT_STORAGE.getStore();
-    return context ? { ...context } : undefined;
-}
-/** Enforce bearer location, issuer, audience, and least-privilege scopes. */
-export async function authorizeMcpHttpRequest(input) {
-    const resourceMetadataUrl = requireAbsoluteAuthorizationUrl(input.policy.resourceMetadataUrl, "protected resource metadata URL", true).href;
-    const requiredScopes = [...new Set(input.policy.requiredScopes ?? [])];
-    if (requiredScopes.some((scope) => !SCOPE_PATTERN.test(scope))) {
-        throw new PmMcpAuthorizationError("Invalid authorization scope", 401);
-    }
-    const challenge = `Bearer resource_metadata="${resourceMetadataUrl}"`;
-    const parsedUrl = new URL(input.requestUrl, input.policy.resource);
-    if (parsedUrl.searchParams.has("access_token")) {
-        throw new PmMcpAuthorizationError("Access tokens must not appear in URI query parameters", 401, challenge);
-    }
-    const authorization = readHeader(input.headers, "authorization");
-    const match = authorization?.match(/^Bearer ([^\s]+)$/iu);
-    if (!match) {
-        throw new PmMcpAuthorizationError("Missing or malformed bearer token", 401, challenge);
-    }
-    const token = match[1];
-    if (Buffer.byteLength(token, "utf8") > MAX_BEARER_TOKEN_BYTES) {
-        throw new PmMcpAuthorizationError("Missing or malformed bearer token", 401, challenge);
-    }
-    let claims;
-    try {
-        claims = await input.policy.verifyAccessToken(token);
-    }
-    catch {
-        throw new PmMcpAuthorizationError("Invalid bearer token", 401, challenge);
-    }
-    const audiences = Array.isArray(claims.audience)
-        ? claims.audience
-        : [claims.audience];
-    if (claims.issuer !== input.policy.issuer ||
-        !audiences.includes(input.policy.resource)) {
-        throw new PmMcpAuthorizationError("Bearer token issuer or audience mismatch", 401, challenge);
-    }
-    const missingScopes = requiredScopes.filter((scope) => !claims.scopes.includes(scope));
-    if (missingScopes.length > 0) {
-        throw new PmMcpAuthorizationError("Bearer token has insufficient scope", 403, `${challenge}, scope="${missingScopes.join(" ")}"`);
-    }
-    return {
-        ...claims,
-        audience: [...audiences],
-        scopes: [...claims.scopes],
-    };
-}
-/** Create an exact opaque-token verifier without exposing token values in results. */
-export function createMcpStaticBearerVerifier(input) {
-    const expected = createHash("sha256").update(input.token).digest();
-    return (token) => {
-        const observed = createHash("sha256").update(token).digest();
-        if (!timingSafeEqual(expected, observed)) {
-            throw new PmMcpAuthorizationError("Invalid bearer token", 401);
-        }
-        return structuredClone(input.claims);
-    };
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="6a5310f6-3add-5108-b39f-61607918dc9f")}catch(e2){}})();import{AsyncLocalStorage}from"node:async_hooks";import{createHash,timingSafeEqual}from"node:crypto";import{isMcpRecord}from"./protocol.js";class PmMcpAuthorizationError extends Error{httpStatus;challenge;constructor(message,httpStatus,challenge){super(message);this.name="PmMcpAuthorizationError";this.httpStatus=httpStatus;this.challenge=challenge}}const TRACE_PARENT_PATTERN=/^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/u;const TRACE_STATE_SIMPLE_KEY_PATTERN=/^[a-z][a-z0-9_*/-]{0,255}$/u;const TRACE_STATE_TENANT_KEY_PATTERN=/^(?:[a-z0-9][a-z0-9_*/-]{0,240})@[a-z][a-z0-9_*/-]{0,13}$/u;const TRACE_STATE_VALUE_PATTERN=/^[\x20-\x2B\x2D-\x3C\x3E-\x7E]{0,255}[\x21-\x2B\x2D-\x3C\x3E-\x7E]$/u;const SCOPE_PATTERN=/^[\x21\x23-\x5B\x5D-\x7E]+$/u;const BAGGAGE_KEY_PATTERN=/^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/u;const BAGGAGE_VALUE_PATTERN=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]*$/u;const INVALID_PERCENT_ENCODING_PATTERN=/%(?![0-9A-Fa-f]{2})/u;const MAX_TRACE_STATE_BYTES=512;const MAX_TRACE_STATE_MEMBERS=32;const MAX_BAGGAGE_MEMBERS=180;const MAX_BAGGAGE_BYTES=8192;const MAX_BEARER_TOKEN_BYTES=8192;const MCP_TRACE_CONTEXT_STORAGE=new AsyncLocalStorage;function requireAbsoluteAuthorizationUrl(value,field,allowLocalHttp=false){if(new RegExp("\\p{Cc}","u").test(value)){throw new PmMcpAuthorizationError(`Invalid ${field}`,401)}let parsed;try{parsed=new URL(value)}catch{throw new PmMcpAuthorizationError(`Invalid ${field}`,401)}const local=parsed.hostname==="127.0.0.1"||parsed.hostname==="localhost";if(parsed.hash.length>0||parsed.protocol!=="https:"&&!(allowLocalHttp&&local&&parsed.protocol==="http:")){throw new PmMcpAuthorizationError(`Invalid ${field}`,401)}return parsed}function readHeader(headers,name){const expected=name.toLowerCase();for(const[candidate,value]of Object.entries(headers)){if(candidate.toLowerCase()!==expected||value===void 0)continue;return typeof value==="string"?value:value.join(", ")}return void 0}function buildMcpProtectedResourceMetadata(input){const resource=requireAbsoluteAuthorizationUrl(input.resource,"protected resource URI",true).href.replace(/\/$/u,"");if(input.authorizationServers.length===0){throw new PmMcpAuthorizationError("Protected resource metadata requires an authorization server",401)}const authorizationServers=input.authorizationServers.map(issuer=>requireAbsoluteAuthorizationUrl(issuer,"authorization server issuer").href.replace(/\/$/u,""));const scopes=[...new Set(input.scopes??[])];if(scopes.some(scope=>!SCOPE_PATTERN.test(scope))){throw new PmMcpAuthorizationError("Invalid authorization scope",401)}return{resource,authorization_servers:authorizationServers,...scopes.length>0?{scopes_supported:scopes.sort()}:{}}}function buildMcpAuthorizationDiscoveryUrls(issuer){const parsed=requireAbsoluteAuthorizationUrl(issuer,"authorization server issuer");const suffix=parsed.pathname.replace(/^\/+|\/+$/gu,"");const origin=parsed.origin;return suffix?[`${origin}/.well-known/oauth-authorization-server/${suffix}`,`${origin}/.well-known/openid-configuration/${suffix}`,`${origin}/${suffix}/.well-known/openid-configuration`]:[`${origin}/.well-known/oauth-authorization-server`,`${origin}/.well-known/openid-configuration`]}function validateMcpAuthorizationServerMetadata(value,expectedIssuer){if(!isMcpRecord(value)||typeof value.issuer!=="string"){throw new PmMcpAuthorizationError("Invalid authorization server metadata",401)}const expected=requireAbsoluteAuthorizationUrl(expectedIssuer,"expected issuer").href.replace(/\/$/u,"");const observed=requireAbsoluteAuthorizationUrl(value.issuer,"metadata issuer").href.replace(/\/$/u,"");if(observed!==expected){throw new PmMcpAuthorizationError("Authorization server issuer mismatch",401)}if(!Array.isArray(value.code_challenge_methods_supported)||!value.code_challenge_methods_supported.includes("S256")){throw new PmMcpAuthorizationError("Authorization server does not support required S256 PKCE",401)}const requiredUrl=field=>{const candidate=value[field];if(typeof candidate!=="string"){throw new PmMcpAuthorizationError(`Authorization server metadata requires ${field}`,401)}return requireAbsoluteAuthorizationUrl(candidate,field).href};const optionalUrl=field=>{const candidate=value[field];return typeof candidate==="string"?requireAbsoluteAuthorizationUrl(candidate,field).href:void 0};const authorizationEndpoint=requiredUrl("authorization_endpoint");const tokenEndpoint=requiredUrl("token_endpoint");const registrationEndpoint=optionalUrl("registration_endpoint");return{issuer:expected,authorization_endpoint:authorizationEndpoint,token_endpoint:tokenEndpoint,code_challenge_methods_supported:[...new Set(value.code_challenge_methods_supported.filter(entry=>typeof entry==="string"))],...value.client_id_metadata_document_supported===true?{client_id_metadata_document_supported:true}:{},...registrationEndpoint?{registration_endpoint:registrationEndpoint}:{}}}function selectMcpClientRegistrationMode(input){if(input.hasPreRegisteredClient)return"pre_registered";if(input.metadata.client_id_metadata_document_supported)return"client_id_metadata_document";if(input.metadata.registration_endpoint)return"dynamic";return"user_supplied"}function validateMcpAuthorizationResponseIssuer(input){if(input.responseIssuer===void 0){if(input.issuerParameterSupported){throw new PmMcpAuthorizationError("Authorization response omitted the advertised issuer",401)}return}if(input.responseIssuer!==input.expectedIssuer){throw new PmMcpAuthorizationError("Authorization response issuer mismatch",401)}}function validateMcpClientMetadataDocument(value,documentUrl){const expected=requireAbsoluteAuthorizationUrl(documentUrl,"client metadata document URL");if(expected.pathname==="/"||!isMcpRecord(value)||value.client_id!==expected.href||typeof value.client_name!=="string"||value.client_name.trim().length===0||!Array.isArray(value.redirect_uris)||value.redirect_uris.length===0){throw new PmMcpAuthorizationError("Invalid Client ID Metadata Document",401)}for(const redirect of value.redirect_uris){if(typeof redirect!=="string"){throw new PmMcpAuthorizationError("Invalid client redirect URI",401)}requireAbsoluteAuthorizationUrl(redirect,"client redirect URI",true)}return structuredClone(value)}function buildMcpDynamicRegistrationMetadata(input){if(input.redirectUris.length===0||input.clientName.trim().length===0){throw new PmMcpAuthorizationError("Invalid dynamic client registration metadata",401)}const redirectUris=input.redirectUris.map(redirect=>requireAbsoluteAuthorizationUrl(redirect,"redirect URI",true).href);return{application_type:input.applicationType,client_name:input.clientName.trim().slice(0,128),redirect_uris:redirectUris,grant_types:["authorization_code","refresh_token"],response_types:["code"],token_endpoint_auth_method:"none"}}class PmMcpIssuerCredentialStore{#credentials=new Map;set(issuer,credential){const key=requireAbsoluteAuthorizationUrl(issuer,"credential issuer").href;this.#credentials.set(key,structuredClone(credential))}get(issuer){const key=requireAbsoluteAuthorizationUrl(issuer,"credential issuer").href;const credential=this.#credentials.get(key);return credential?structuredClone(credential):void 0}delete(issuer){const key=requireAbsoluteAuthorizationUrl(issuer,"credential issuer").href;return this.#credentials.delete(key)}}function validateMcpTraceFields(meta){const traceparent=meta.traceparent;const tracestate=meta.tracestate;if(traceparent!==void 0){const match=typeof traceparent==="string"?TRACE_PARENT_PATTERN.exec(traceparent):null;if(!match){throw new PmMcpAuthorizationError("Invalid MCP traceparent",403)}const traceId=match[1];const parentId=match[2];if(/^0+$/u.test(traceId)||/^0+$/u.test(parentId)){throw new PmMcpAuthorizationError("Invalid MCP traceparent",403)}}if(tracestate!==void 0&&(typeof tracestate!=="string"||!isValidMcpTraceState(tracestate))){throw new PmMcpAuthorizationError("Invalid MCP tracestate",403)}return{...typeof traceparent==="string"?{traceparent}:{},...typeof tracestate==="string"?{tracestate}:{}}}function trimOptionalWhitespace(value){return value.replace(/^[ \t]*|[ \t]*$/gu,"")}function isValidMcpTraceStateKey(key){return TRACE_STATE_SIMPLE_KEY_PATTERN.test(key)||TRACE_STATE_TENANT_KEY_PATTERN.test(key)}function isValidMcpTraceState(value){if(Buffer.byteLength(value,"utf8")>MAX_TRACE_STATE_BYTES)return false;const members=value.split(",");if(members.length>MAX_TRACE_STATE_MEMBERS)return false;const keys=new Set;for(const source of members){const member=trimOptionalWhitespace(source);if(member.length===0)continue;const separator=member.indexOf("=");const key=separator>0?member.slice(0,separator):"";const memberValue=separator>0?member.slice(separator+1):"";if(!isValidMcpTraceStateKey(key)||!TRACE_STATE_VALUE_PATTERN.test(memberValue)||keys.has(key)){return false}keys.add(key)}return true}function isValidMcpBaggageValue(value){return BAGGAGE_VALUE_PATTERN.test(value)&&!INVALID_PERCENT_ENCODING_PATTERN.test(value)}function isValidMcpBaggageProperty(source){const property=trimOptionalWhitespace(source);const separator=property.indexOf("=");const key=trimOptionalWhitespace(separator>=0?property.slice(0,separator):property);const value=separator>=0?trimOptionalWhitespace(property.slice(separator+1)):void 0;return BAGGAGE_KEY_PATTERN.test(key)&&(value===void 0||isValidMcpBaggageValue(value))}function parseMcpBaggageMember(source){const serialized=trimOptionalWhitespace(source);const segments=serialized.split(";");const pair=segments[0];const properties=segments.slice(1);const separator=pair.indexOf("=");const key=trimOptionalWhitespace(separator>0?pair.slice(0,separator):"");const value=separator>0?trimOptionalWhitespace(pair.slice(separator+1)):"";if(!BAGGAGE_KEY_PATTERN.test(key)||!isValidMcpBaggageValue(value)||!properties.every(isValidMcpBaggageProperty)){return void 0}return{key,serialized}}function filterMcpBaggage(baggage,allowlistEntries){if(baggage===void 0)return void 0;if(typeof baggage!=="string"||Buffer.byteLength(baggage,"utf8")>MAX_BAGGAGE_BYTES){throw new PmMcpAuthorizationError("Invalid MCP baggage",403)}const allowlist=new Set(allowlistEntries);const sources=baggage.split(",");if(sources.length>MAX_BAGGAGE_MEMBERS){throw new PmMcpAuthorizationError("Invalid MCP baggage",403)}const entries=[];for(const source of sources){const entry=parseMcpBaggageMember(source);if(!entry){throw new PmMcpAuthorizationError("Invalid MCP baggage",403)}if(allowlist.has(entry.key))entries.push(entry.serialized)}return entries.length>0?entries.join(","):void 0}function extractMcpTraceContext(params,options={}){const meta=isMcpRecord(params)&&isMcpRecord(params._meta)?params._meta:{};const allowedBaggage=filterMcpBaggage(meta.baggage,options.baggageAllowlist??[]);return{...validateMcpTraceFields(meta),...allowedBaggage?{baggage:allowedBaggage}:{}}}function runWithMcpTraceContext(context,callback){return MCP_TRACE_CONTEXT_STORAGE.run(structuredClone(context),callback)}function getActiveMcpTraceContext(){const context=MCP_TRACE_CONTEXT_STORAGE.getStore();return context?{...context}:void 0}async function authorizeMcpHttpRequest(input){const resourceMetadataUrl=requireAbsoluteAuthorizationUrl(input.policy.resourceMetadataUrl,"protected resource metadata URL",true).href;const requiredScopes=[...new Set(input.policy.requiredScopes??[])];if(requiredScopes.some(scope=>!SCOPE_PATTERN.test(scope))){throw new PmMcpAuthorizationError("Invalid authorization scope",401)}const challenge=`Bearer resource_metadata="${resourceMetadataUrl}"`;const parsedUrl=new URL(input.requestUrl,input.policy.resource);if(parsedUrl.searchParams.has("access_token")){throw new PmMcpAuthorizationError("Access tokens must not appear in URI query parameters",401,challenge)}const authorization=readHeader(input.headers,"authorization");const match=authorization?.match(/^Bearer ([^\s]+)$/iu);if(!match){throw new PmMcpAuthorizationError("Missing or malformed bearer token",401,challenge)}const token=match[1];if(Buffer.byteLength(token,"utf8")>MAX_BEARER_TOKEN_BYTES){throw new PmMcpAuthorizationError("Missing or malformed bearer token",401,challenge)}let claims;try{claims=await input.policy.verifyAccessToken(token)}catch{throw new PmMcpAuthorizationError("Invalid bearer token",401,challenge)}const audiences=Array.isArray(claims.audience)?claims.audience:[claims.audience];if(claims.issuer!==input.policy.issuer||!audiences.includes(input.policy.resource)){throw new PmMcpAuthorizationError("Bearer token issuer or audience mismatch",401,challenge)}const missingScopes=requiredScopes.filter(scope=>!claims.scopes.includes(scope));if(missingScopes.length>0){throw new PmMcpAuthorizationError("Bearer token has insufficient scope",403,`${challenge}, scope="${missingScopes.join(" ")}"`)}return{...claims,audience:[...audiences],scopes:[...claims.scopes]}}function createMcpStaticBearerVerifier(input){const expected=createHash("sha256").update(input.token).digest();return token=>{const observed=createHash("sha256").update(token).digest();if(!timingSafeEqual(expected,observed)){throw new PmMcpAuthorizationError("Invalid bearer token",401)}return structuredClone(input.claims)}}export{PmMcpAuthorizationError,PmMcpIssuerCredentialStore,authorizeMcpHttpRequest,buildMcpAuthorizationDiscoveryUrls,buildMcpDynamicRegistrationMetadata,buildMcpProtectedResourceMetadata,createMcpStaticBearerVerifier,extractMcpTraceContext,getActiveMcpTraceContext,runWithMcpTraceContext,selectMcpClientRegistrationMode,validateMcpAuthorizationResponseIssuer,validateMcpAuthorizationServerMetadata,validateMcpClientMetadataDocument};
 //# sourceMappingURL=authorization.js.map
-//# debugId=a9aefc86-a8ce-5ecf-bb54-e5fa3ea277c7