@usestratus/mcp-aws 0.1.0

package/dist/compose.d.ts

@@ -0,0 +1,57 @@
+import { McpServer as SdkMcpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Executor } from "./codemode/executor.js";
+export type CodeMcpServerOptions = {
+    /** The MCP server to wrap */
+    server: SdkMcpServer;
+    /** Optional executor (default: FunctionExecutor with 30s timeout) */
+    executor?: Executor;
+    /** Name for the wrapper server */
+    name?: string;
+    /** Version for the wrapper server */
+    version?: string;
+};
+/**
+ * Wrap any MCP server with code mode. Returns a new MCP server with a single
+ * `execute_code` tool. The LLM writes code that calls the wrapped server's tools.
+ *
+ * @example
+ * ```ts
+ * import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+ * import { codeMcpServer } from "@usestratus/mcp-aws";
+ *
+ * const original = new McpServer({ name: "tools", version: "1.0" });
+ * original.registerTool("greet", { inputSchema: { name: z.string() } },
+ *   async ({ name }) => ({ content: [{ type: "text", text: `Hello ${name}` }] })
+ * );
+ *
+ * const codeServer = await codeMcpServer({ server: original });
+ * // codeServer has one tool: execute_code
+ * ```
+ */
+export declare function codeMcpServer(options: CodeMcpServerOptions): Promise<SdkMcpServer>;
+export type CreateMcpHandlerOptions = {
+    /** Factory that creates a fresh MCP server per request (stateless isolation). */
+    createServer: () => SdkMcpServer;
+};
+/**
+ * Create a stateless HTTP request handler from any MCP server.
+ * Each request gets a fresh transport. Works with Lambda Function URLs,
+ * Bun.serve, Deno.serve, or any Web Standard compatible runtime.
+ *
+ * @example
+ * ```ts
+ * import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+ * import { createMcpHandler } from "@usestratus/mcp-aws";
+ *
+ * const server = new McpServer({ name: "api", version: "1.0" });
+ * const handler = createMcpHandler({ server });
+ *
+ * // Bun
+ * Bun.serve({ fetch: handler });
+ *
+ * // Lambda Function URL
+ * export default handler;
+ * ```
+ */
+export declare function createMcpHandler(options: CreateMcpHandlerOptions): (req: Request) => Promise<Response>;
+//# sourceMappingURL=compose.d.ts.map

package/dist/compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../src/compose.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGvD,MAAM,MAAM,oBAAoB,GAAG;IAClC,6BAA6B;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC,CAmFxF;AAED,MAAM,MAAM,uBAAuB,GAAG;IACrC,iFAAiF;IACjF,YAAY,EAAE,MAAM,YAAY,CAAC;CACjC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,uBAAuB,GAC9B,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA0BrC"}

package/dist/compose.js

@@ -0,0 +1,138 @@
+/**
+ * Composition utilities for MCP servers.
+ *
+ * codeMcpServer() — wraps any MCP server with code mode
+ * createMcpHandler() — stateless request handler from a McpServer
+ */
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
+import { McpServer as SdkMcpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { FunctionExecutor, normalizeCode, sanitizeToolName } from "./codemode/index.js";
+/**
+ * Wrap any MCP server with code mode. Returns a new MCP server with a single
+ * `execute_code` tool. The LLM writes code that calls the wrapped server's tools.
+ *
+ * @example
+ * ```ts
+ * import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+ * import { codeMcpServer } from "@usestratus/mcp-aws";
+ *
+ * const original = new McpServer({ name: "tools", version: "1.0" });
+ * original.registerTool("greet", { inputSchema: { name: z.string() } },
+ *   async ({ name }) => ({ content: [{ type: "text", text: `Hello ${name}` }] })
+ * );
+ *
+ * const codeServer = await codeMcpServer({ server: original });
+ * // codeServer has one tool: execute_code
+ * ```
+ */
+export async function codeMcpServer(options) {
+    const { server, name = "code-server", version = "1.0.0" } = options;
+    const executor = options.executor ?? new FunctionExecutor({ timeout: 30_000 });
+    // Connect a client to discover the wrapped server's tools
+    const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+    const client = new Client({ name: "code-bridge", version: "1.0.0" });
+    await server.connect(serverTransport);
+    await client.connect(clientTransport);
+    const toolsResponse = await client.listTools();
+    const tools = toolsResponse.tools;
+    // Generate type definitions for all discovered tools
+    const typeLines = [];
+    const toolMap = new Map();
+    for (const tool of tools) {
+        const safeName = sanitizeToolName(tool.name);
+        if (toolMap.has(safeName)) {
+            throw new Error(`Tool name collision: "${tool.name}" sanitizes to "${safeName}" which is already used. Rename one of the conflicting tools.`);
+        }
+        typeLines.push(`\t/** ${tool.description ?? tool.name} */`);
+        typeLines.push(`\t${safeName}: (input: unknown) => Promise<unknown>;`);
+        toolMap.set(safeName, async (args) => {
+            const result = await client.callTool({
+                name: tool.name,
+                arguments: (args ?? {}),
+            });
+            const content = result.content;
+            const textPart = content.find((c) => c.type === "text" && c.text);
+            if (textPart?.text) {
+                try {
+                    return JSON.parse(textPart.text);
+                }
+                catch {
+                    return textPart.text;
+                }
+            }
+            return null;
+        });
+    }
+    const types = `declare const codemode: {\n${typeLines.join("\n")}\n}`;
+    const description = `Execute code to use available tools.\n\nAvailable:\n${types}\n\nWrite an async arrow function in JavaScript.\nExample: async () => { const r = await codemode.greet({ name: "World" }); return r; }`;
+    // Create the wrapper server with a single code tool
+    const wrapper = new SdkMcpServer({ name, version });
+    wrapper.registerTool("execute_code", {
+        description,
+        inputSchema: {
+            code: z.string().describe("JavaScript async arrow function to execute"),
+        },
+    }, async ({ code }) => {
+        const fns = {};
+        for (const [safeName, fn] of toolMap) {
+            fns[safeName] = fn;
+        }
+        const normalized = normalizeCode(code);
+        const result = await executor.execute(normalized, fns);
+        if (result.error) {
+            const logs = result.logs?.length ? `\n\nLogs:\n${result.logs.join("\n")}` : "";
+            return {
+                content: [{ type: "text", text: `Error: ${result.error}${logs}` }],
+                isError: true,
+            };
+        }
+        return {
+            content: [{ type: "text", text: JSON.stringify(result.result) }],
+        };
+    });
+    return wrapper;
+}
+/**
+ * Create a stateless HTTP request handler from any MCP server.
+ * Each request gets a fresh transport. Works with Lambda Function URLs,
+ * Bun.serve, Deno.serve, or any Web Standard compatible runtime.
+ *
+ * @example
+ * ```ts
+ * import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+ * import { createMcpHandler } from "@usestratus/mcp-aws";
+ *
+ * const server = new McpServer({ name: "api", version: "1.0" });
+ * const handler = createMcpHandler({ server });
+ *
+ * // Bun
+ * Bun.serve({ fetch: handler });
+ *
+ * // Lambda Function URL
+ * export default handler;
+ * ```
+ */
+export function createMcpHandler(options) {
+    return async (req) => {
+        if (req.method !== "POST") {
+            return new Response(JSON.stringify({ error: "Method not allowed" }), {
+                status: 405,
+                headers: { "Content-Type": "application/json", Allow: "POST" },
+            });
+        }
+        const { WebStandardStreamableHTTPServerTransport } = await import("@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js");
+        const transport = new WebStandardStreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: true,
+        });
+        const server = options.createServer();
+        await server.connect(transport);
+        const response = await transport.handleRequest(req);
+        await transport.close();
+        await server.close();
+        return response;
+    };
+}
+//# sourceMappingURL=compose.js.map

package/dist/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../src/compose.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAaxF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAChE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,aAAa,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/E,0DAA0D;IAC1D,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAEtC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;IAElC,qDAAqD;IACrD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+C,CAAC;IAEvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACd,yBAAyB,IAAI,CAAC,IAAI,mBAAmB,QAAQ,+DAA+D,CAC5H,CAAC;QACH,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;QAC5D,SAAS,CAAC,IAAI,CAAC,KAAK,QAAQ,yCAAyC,CAAC,CAAC;QAEvE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;gBACpC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B;aAClD,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAA4C,CAAC;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACJ,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,QAAQ,CAAC,IAAI,CAAC;gBACtB,CAAC;YACF,CAAC;YACD,OAAO,IAAI,CAAC;QACb,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,8BAA8B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACtE,MAAM,WAAW,GAAG,uDAAuD,KAAK,yIAAyI,CAAC;IAE1N,oDAAoD;IACpD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpD,OAAO,CAAC,YAAY,CACnB,cAAc,EACd;QACC,WAAW;QACX,WAAW,EAAE;YACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;SACvE;KACD,EACD,KAAK,EAAE,EAAE,IAAI,EAAoB,EAAE,EAAE;QACpC,MAAM,GAAG,GAA6D,EAAE,CAAC;QACzE,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;YACtC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAEvD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,GAAG,IAAI,EAAE,EAAE,CAAC;gBAC3E,OAAO,EAAE,IAAI;aACb,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACzE,CAAC;IACH,CAAC,CACD,CAAC;IAEF,OAAO,OAAO,CAAC;AAChB,CAAC;AAOD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAC/B,OAAgC;IAEhC,OAAO,KAAK,EAAE,GAAY,EAAqB,EAAE;QAChD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,EAAE;gBACpE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE;aAC9D,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,wCAAwC,EAAE,GAAG,MAAM,MAAM,CAChE,+DAA+D,CAC/D,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;YAC9D,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC;AACH,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,22 @@
+import type { AuthContext, McpSession } from "./types.js";
+type RequestContext = {
+    auth: AuthContext;
+    session: McpSession;
+};
+/**
+ * Run a function with auth/session context available via getAuthContext()/getSession().
+ * Called internally by the server's tool handler wrapper.
+ */
+export declare function withContext<T>(ctx: RequestContext, fn: () => T | Promise<T>): T | Promise<T>;
+/**
+ * Get the current request's auth context from anywhere in the call stack.
+ * Returns unauthenticated context if called outside a request.
+ */
+export declare function getAuthContext(): AuthContext;
+/**
+ * Get the current request's session from anywhere in the call stack.
+ * Returns undefined if called outside a request.
+ */
+export declare function getSession(): McpSession | undefined;
+export {};
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1D,KAAK,cAAc,GAAG;IACrB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,UAAU,CAAC;CACpB,CAAC;AAIF;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5F;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,UAAU,GAAG,SAAS,CAEnD"}

package/dist/context.js

@@ -0,0 +1,39 @@
+/**
+ * AsyncLocalStorage-based auth and session context.
+ * Tool handlers can call getAuthContext() / getSession() without explicit parameters.
+ *
+ * @example
+ * ```ts
+ * import { getAuthContext, getSession } from "@usestratus/mcp-aws";
+ *
+ * server.tool("my_tool", async () => {
+ *   const auth = getAuthContext(); // no params needed
+ *   if (!auth.authenticated) return "Not logged in";
+ *   return `Hello, ${auth.subject}!`;
+ * });
+ * ```
+ */
+import { AsyncLocalStorage } from "node:async_hooks";
+const storage = new AsyncLocalStorage();
+/**
+ * Run a function with auth/session context available via getAuthContext()/getSession().
+ * Called internally by the server's tool handler wrapper.
+ */
+export function withContext(ctx, fn) {
+    return storage.run(ctx, fn);
+}
+/**
+ * Get the current request's auth context from anywhere in the call stack.
+ * Returns unauthenticated context if called outside a request.
+ */
+export function getAuthContext() {
+    return storage.getStore()?.auth ?? { authenticated: false, roles: [], claims: {} };
+}
+/**
+ * Get the current request's session from anywhere in the call stack.
+ * Returns undefined if called outside a request.
+ */
+export function getSession() {
+    return storage.getStore()?.session;
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAQrD,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAkB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAI,GAAmB,EAAE,EAAwB;IAC3E,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC7B,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU;IACzB,OAAO,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AACpC,CAAC"}

package/dist/deploy.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Deploy a McpServer to AWS Lambda with a Function URL.
+ *
+ * Uses Bun-native APIs:
+ * - Bun.build for bundling
+ * - Bun.gzipSync for compression
+ * - Bun.$ for shell commands (future)
+ */
+export type VpcConfig = {
+    /** Subnet IDs for the Lambda (use private subnets for VPC-only access) */
+    subnetIds: string[];
+    /** Security group IDs controlling inbound/outbound traffic */
+    securityGroupIds: string[];
+};
+export type DeployConfig = {
+    /** Path to the server entry file (must export `handler` via server.lambda()) */
+    entry: string;
+    /** AWS region (default: us-east-1) */
+    region?: string;
+    /** Lambda function name (default: derived from server name) */
+    functionName?: string;
+    /** Lambda memory in MB (default: 256) */
+    memory?: number;
+    /** Lambda timeout in seconds (default: 30) */
+    timeout?: number;
+    /** IAM role ARN. If not provided, creates one automatically. */
+    roleArn?: string;
+    /**
+     * Function URL auth type.
+     * - `"NONE"` (default): Public URL, MCP-level auth via server.auth().
+     * - `"AWS_IAM"`: Callers must sign requests with SigV4. Use for service-to-service.
+     * - `"none"`: No Function URL created. Invoke via AWS SDK only (most private).
+     */
+    urlAuth?: "NONE" | "AWS_IAM" | "none";
+    /**
+     * Deploy Lambda inside a VPC.
+     */
+    vpc?: VpcConfig;
+    /** Environment variables to set on the Lambda function */
+    environment?: Record<string, string>;
+    /** Additional IAM policy ARNs to attach to the Lambda role */
+    policies?: string[];
+};
+export type DeployResult = {
+    functionName: string;
+    functionArn: string;
+    /** HTTPS endpoint. Empty string if urlAuth is "none" (no Function URL). */
+    url: string;
+    region: string;
+};
+export type DestroyResult = {
+    functionName: string;
+    deleted: boolean;
+};
+export declare function deploy(config: DeployConfig): Promise<DeployResult>;
+export declare function destroy(functionName: string, region?: string): Promise<DestroyResult>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,SAAS,GAAG;IACvB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAC1B,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IAEtC;;OAEG;IACH,GAAG,CAAC,EAAE,SAAS,CAAC;IAEhB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAErC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CACjB,CAAC;AAyJF,wBAAsB,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CA8HxE;AAED,wBAAsB,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAShG"}

package/dist/deploy.js

@@ -0,0 +1,281 @@
+/**
+ * Deploy a McpServer to AWS Lambda with a Function URL.
+ *
+ * Uses Bun-native APIs:
+ * - Bun.build for bundling
+ * - Bun.gzipSync for compression
+ * - Bun.$ for shell commands (future)
+ */
+/**
+ * Bundle a server entry file into a Lambda-compatible zip.
+ * Uses Bun.build for bundling + Bun.gzipSync for compression.
+ */
+async function bundle(entry) {
+    const result = await Bun.build({
+        entrypoints: [entry],
+        target: "node",
+        format: "esm",
+        minify: true,
+        external: ["@aws-sdk/*", "bun:*"],
+    });
+    if (!result.success) {
+        const errors = result.logs.map((l) => l.message).join("\n");
+        throw new Error(`Bundle failed:\n${errors}`);
+    }
+    const output = result.outputs[0];
+    if (!output)
+        throw new Error("Bundle produced no output");
+    const code = await output.text();
+    // Use Bun's native zip creation via Bun.$
+    // Lambda expects a zip with index.mjs at the root
+    const zipBytes = await createZipWithBun({ "index.mjs": code });
+    return zipBytes;
+}
+/**
+ * Create a zip using Bun's shell to invoke the `zip` command,
+ * falling back to a manual implementation if zip isn't available.
+ */
+async function createZipWithBun(files) {
+    // Write files to a temp dir, zip them, read the zip back
+    const tmpDir = `${Bun.env.TMPDIR ?? "/tmp"}/stratus-deploy-${Date.now()}`;
+    try {
+        const { mkdirSync, writeFileSync, rmSync } = await import("node:fs");
+        mkdirSync(tmpDir, { recursive: true });
+        for (const [name, content] of Object.entries(files)) {
+            writeFileSync(`${tmpDir}/${name}`, content);
+        }
+        // Use Bun.$ shell to create the zip
+        const zipPath = `${tmpDir}/bundle.zip`;
+        const fileNames = Object.keys(files).join(" ");
+        await Bun.$ `cd ${tmpDir} && zip -j ${zipPath} ${fileNames}`.quiet();
+        const zipFile = Bun.file(zipPath);
+        const bytes = new Uint8Array(await zipFile.arrayBuffer());
+        // Cleanup
+        rmSync(tmpDir, { recursive: true, force: true });
+        return bytes;
+    }
+    catch {
+        // Fallback: manual zip if `zip` command not available
+        const { rmSync } = await import("node:fs");
+        try {
+            rmSync(tmpDir, { recursive: true, force: true });
+        }
+        catch { }
+        return manualCreateZip(files);
+    }
+}
+/** Fallback zip creator when the `zip` CLI isn't available. */
+function manualCreateZip(files) {
+    const entries = [];
+    const parts = [];
+    let offset = 0;
+    for (const [name, content] of Object.entries(files)) {
+        const nameBytes = new TextEncoder().encode(name);
+        const dataBytes = new TextEncoder().encode(content);
+        const crc = crc32(dataBytes);
+        const header = new ArrayBuffer(30 + nameBytes.length);
+        const v = new DataView(header);
+        v.setUint32(0, 0x04034b50, true);
+        v.setUint16(4, 20, true);
+        v.setUint16(8, 0, true);
+        v.setUint32(14, crc, true);
+        v.setUint32(18, dataBytes.length, true);
+        v.setUint32(22, dataBytes.length, true);
+        v.setUint16(26, nameBytes.length, true);
+        new Uint8Array(header).set(nameBytes, 30);
+        const hdr = new Uint8Array(header);
+        entries.push({ name: nameBytes, data: dataBytes, crc, offset });
+        parts.push(hdr, dataBytes);
+        offset += hdr.length + dataBytes.length;
+    }
+    const centralStart = offset;
+    for (const e of entries) {
+        const cd = new ArrayBuffer(46 + e.name.length);
+        const v = new DataView(cd);
+        v.setUint32(0, 0x02014b50, true);
+        v.setUint16(4, 20, true);
+        v.setUint16(6, 20, true);
+        v.setUint32(16, e.crc, true);
+        v.setUint32(20, e.data.length, true);
+        v.setUint32(24, e.data.length, true);
+        v.setUint16(28, e.name.length, true);
+        v.setUint32(42, e.offset, true);
+        new Uint8Array(cd).set(e.name, 46);
+        parts.push(new Uint8Array(cd));
+        offset += 46 + e.name.length;
+    }
+    const eocd = new ArrayBuffer(22);
+    const ev = new DataView(eocd);
+    ev.setUint32(0, 0x06054b50, true);
+    ev.setUint16(8, entries.length, true);
+    ev.setUint16(10, entries.length, true);
+    ev.setUint32(12, offset - centralStart, true);
+    ev.setUint32(16, centralStart, true);
+    parts.push(new Uint8Array(eocd));
+    const total = parts.reduce((s, p) => s + p.length, 0);
+    const out = new Uint8Array(total);
+    let pos = 0;
+    for (const p of parts) {
+        out.set(p, pos);
+        pos += p.length;
+    }
+    return out;
+}
+function crc32(data) {
+    let crc = 0xffffffff;
+    for (const byte of data) {
+        crc ^= byte;
+        for (let j = 0; j < 8; j++) {
+            crc = crc & 1 ? (crc >>> 1) ^ 0xedb88320 : crc >>> 1;
+        }
+    }
+    return (crc ^ 0xffffffff) >>> 0;
+}
+const LAMBDA_TRUST_POLICY = JSON.stringify({
+    Version: "2012-10-17",
+    Statement: [
+        {
+            Effect: "Allow",
+            Principal: { Service: "lambda.amazonaws.com" },
+            Action: "sts:AssumeRole",
+        },
+    ],
+});
+export async function deploy(config) {
+    const { entry, region = "us-east-1", memory = 256, timeout = 30, urlAuth = "NONE", vpc, environment, } = config;
+    const functionName = config.functionName ?? `stratus-mcp-${Date.now()}`;
+    const zipBuffer = await bundle(entry);
+    let roleArn = config.roleArn;
+    if (!roleArn) {
+        roleArn = await ensureRole(functionName, region, !!vpc, config.policies);
+        await Bun.sleep(15000);
+    }
+    const { LambdaClient, CreateFunctionCommand, UpdateFunctionCodeCommand, GetFunctionCommand, CreateFunctionUrlConfigCommand, GetFunctionUrlConfigCommand, AddPermissionCommand, } = await import("@aws-sdk/client-lambda");
+    const lambda = new LambdaClient({ region });
+    const envVars = {
+        NODE_OPTIONS: "--experimental-vm-modules",
+        ...environment,
+    };
+    let functionArn = "";
+    try {
+        const existing = await lambda.send(new GetFunctionCommand({ FunctionName: functionName }));
+        functionArn = existing.Configuration?.FunctionArn ?? "";
+        await lambda.send(new UpdateFunctionCodeCommand({ FunctionName: functionName, ZipFile: zipBuffer }));
+    }
+    catch {
+        let lastError;
+        for (let attempt = 0; attempt < 5; attempt++) {
+            try {
+                const result = await lambda.send(new CreateFunctionCommand({
+                    FunctionName: functionName,
+                    Runtime: "nodejs22.x",
+                    Handler: "index.handler",
+                    Role: roleArn,
+                    Code: { ZipFile: zipBuffer },
+                    MemorySize: memory,
+                    Timeout: timeout,
+                    PackageType: "Zip",
+                    Architectures: ["arm64"],
+                    Environment: { Variables: envVars },
+                    ...(vpc
+                        ? { VpcConfig: { SubnetIds: vpc.subnetIds, SecurityGroupIds: vpc.securityGroupIds } }
+                        : {}),
+                }));
+                functionArn = result.FunctionArn ?? "";
+                lastError = undefined;
+                break;
+            }
+            catch (err) {
+                lastError = err;
+                if (attempt < 4)
+                    await Bun.sleep(5000);
+            }
+        }
+        if (lastError)
+            throw lastError;
+        if (!functionArn)
+            throw new Error("Failed to create Lambda function");
+    }
+    // Wait for active
+    for (let i = 0; i < 30; i++) {
+        const fn = await lambda.send(new GetFunctionCommand({ FunctionName: functionName }));
+        if (fn.Configuration?.State === "Active")
+            break;
+        await Bun.sleep(2000);
+    }
+    // Function URL
+    let url = "";
+    if (urlAuth !== "none") {
+        try {
+            const cfg = await lambda.send(new GetFunctionUrlConfigCommand({ FunctionName: functionName }));
+            url = cfg.FunctionUrl ?? "";
+        }
+        catch {
+            const res = await lambda.send(new CreateFunctionUrlConfigCommand({
+                FunctionName: functionName,
+                AuthType: urlAuth,
+                InvokeMode: "BUFFERED",
+            }));
+            url = res.FunctionUrl ?? "";
+            const addPerm = (sid, action, extra) => lambda
+                .send(new AddPermissionCommand({
+                FunctionName: functionName,
+                StatementId: sid,
+                Action: action,
+                Principal: "*",
+                ...extra,
+            }))
+                .catch((err) => {
+                if (!err.name?.includes("ResourceConflict"))
+                    throw err;
+            });
+            if (urlAuth === "NONE") {
+                await addPerm("FunctionURLAllowPublicAccess", "lambda:InvokeFunctionUrl", {
+                    FunctionUrlAuthType: "NONE",
+                });
+                await addPerm("FunctionURLInvokeAllowPublicAccess", "lambda:InvokeFunction", {});
+            }
+        }
+    }
+    return { functionName, functionArn, url, region };
+}
+export async function destroy(functionName, region = "us-east-1") {
+    const { LambdaClient, DeleteFunctionCommand } = await import("@aws-sdk/client-lambda");
+    const lambda = new LambdaClient({ region });
+    try {
+        await lambda.send(new DeleteFunctionCommand({ FunctionName: functionName }));
+        return { functionName, deleted: true };
+    }
+    catch {
+        return { functionName, deleted: false };
+    }
+}
+async function ensureRole(functionName, region, needsVpc = false, extraPolicies) {
+    const { IAMClient, CreateRoleCommand, AttachRolePolicyCommand, GetRoleCommand } = await import("@aws-sdk/client-iam");
+    const iam = new IAMClient({ region });
+    const roleName = `${functionName}-role`;
+    try {
+        const existing = await iam.send(new GetRoleCommand({ RoleName: roleName }));
+        return existing.Role?.Arn ?? "";
+    }
+    catch {
+        const result = await iam.send(new CreateRoleCommand({ RoleName: roleName, AssumeRolePolicyDocument: LAMBDA_TRUST_POLICY }));
+        await iam.send(new AttachRolePolicyCommand({
+            RoleName: roleName,
+            PolicyArn: "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
+        }));
+        if (needsVpc) {
+            await iam.send(new AttachRolePolicyCommand({
+                RoleName: roleName,
+                PolicyArn: "arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole",
+            }));
+        }
+        if (extraPolicies) {
+            for (const policyArn of extraPolicies) {
+                await iam.send(new AttachRolePolicyCommand({ RoleName: roleName, PolicyArn: policyArn }));
+            }
+        }
+        return result.Role?.Arn ?? "";
+    }
+}
+//# sourceMappingURL=deploy.js.map

package/dist/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../src/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwDH;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC;QAC9B,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;KACjC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAEjC,0CAA0C;IAC1C,kDAAkD;IAClD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,KAA6B;IAC5D,yDAAyD;IACzD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAE1E,IAAI,CAAC;QACJ,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,aAAa,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,oCAAoC;QACpC,MAAM,OAAO,GAAG,GAAG,MAAM,aAAa,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,CAAC,CAAC,CAAA,MAAM,MAAM,cAAc,OAAO,IAAI,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC;QAEpE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAE1D,UAAU;QACV,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACR,sDAAsD;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACF,CAAC;AAED,+DAA+D;AAC/D,SAAS,eAAe,CAAC,KAA6B;IACrD,MAAM,OAAO,GAA0E,EAAE,CAAC;IAC1F,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAE1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IACzC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9C,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,IAAgB;IAC9B,IAAI,GAAG,GAAG,UAAU,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,GAAG,IAAI,IAAI,CAAC;QACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC;IAC1C,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACV;YACC,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;YAC9C,MAAM,EAAE,gBAAgB;SACxB;KACD;CACD,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAoB;IAChD,MAAM,EACL,KAAK,EACL,MAAM,GAAG,WAAW,EACpB,MAAM,GAAG,GAAG,EACZ,OAAO,GAAG,EAAE,EACZ,OAAO,GAAG,MAAM,EAChB,GAAG,EACH,WAAW,GACX,GAAG,MAAM,CAAC;IACX,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,eAAe,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAExE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtC,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,EACL,YAAY,EACZ,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,EAClB,8BAA8B,EAC9B,2BAA2B,EAC3B,oBAAoB,GACpB,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,MAAM,OAAO,GAA2B;QACvC,YAAY,EAAE,2BAA2B;QACzC,GAAG,WAAW;KACd,CAAC;IAEF,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3F,WAAW,GAAG,QAAQ,CAAC,aAAa,EAAE,WAAW,IAAI,EAAE,CAAC;QACxD,MAAM,MAAM,CAAC,IAAI,CAChB,IAAI,yBAAyB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CACjF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAC/B,IAAI,qBAAqB,CAAC;oBACzB,YAAY,EAAE,YAAY;oBAC1B,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE,eAAe;oBACxB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;oBAC5B,UAAU,EAAE,MAAM;oBAClB,OAAO,EAAE,OAAO;oBAChB,WAAW,EAAE,KAAK;oBAClB,aAAa,EAAE,CAAC,OAAO,CAAC;oBACxB,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;oBACnC,GAAG,CAAC,GAAG;wBACN,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,EAAE;wBACrF,CAAC,CAAC,EAAE,CAAC;iBACN,CAAC,CACF,CAAC;gBACF,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;gBACvC,SAAS,GAAG,SAAS,CAAC;gBACtB,MAAM;YACP,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,OAAO,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QACD,IAAI,SAAS;YAAE,MAAM,SAAS,CAAC;QAC/B,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACvE,CAAC;IAED,kBAAkB;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACrF,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,KAAK,QAAQ;YAAE,MAAM;QAChD,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,eAAe;IACf,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,2BAA2B,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAC/D,CAAC;YACF,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC5B,IAAI,8BAA8B,CAAC;gBAClC,YAAY,EAAE,YAAY;gBAC1B,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,UAAU;aACtB,CAAC,CACF,CAAC;YACF,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,MAAc,EAAE,KAA8B,EAAE,EAAE,CAC/E,MAAM;iBACJ,IAAI,CACJ,IAAI,oBAAoB,CAAC;gBACxB,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,GAAG;gBAChB,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,GAAG,KAAK;aACR,CAAC,CACF;iBACA,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;gBACrB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,kBAAkB,CAAC;oBAAE,MAAM,GAAG,CAAC;YACxD,CAAC,CAAC,CAAC;YAEL,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,OAAO,CAAC,8BAA8B,EAAE,0BAA0B,EAAE;oBACzE,mBAAmB,EAAE,MAAM;iBAC3B,CAAC,CAAC;gBACH,MAAM,OAAO,CAAC,oCAAoC,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;YAClF,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,YAAoB,EAAE,MAAM,GAAG,WAAW;IACvE,MAAM,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,YAAoB,EAAE,MAAc,EAAE,QAAQ,GAAG,KAAK,EAAE,aAAwB;IACzG,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAC7F,qBAAqB,CACrB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,YAAY,OAAO,CAAC;IAExC,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC5E,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC5B,IAAI,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,CAAC,CAC5F,CAAC;QACF,MAAM,GAAG,CAAC,IAAI,CACb,IAAI,uBAAuB,CAAC;YAC3B,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,kEAAkE;SAC7E,CAAC,CACF,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,GAAG,CAAC,IAAI,CACb,IAAI,uBAAuB,CAAC;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,sEAAsE;aACjF,CAAC,CACF,CAAC;QACH,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YACnB,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;gBACvC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3F,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IAC/B,CAAC;AACF,CAAC"}

package/dist/disclosure/index.d.ts

@@ -0,0 +1,3 @@
+export { SearchIndex, type SearchResult } from "./search.js";
+export { getVisibleTools, promoteToVisible, handleGateUnlock } from "./tier.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/disclosure/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/disclosure/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/disclosure/index.js

@@ -0,0 +1,3 @@
+export { SearchIndex } from "./search.js";
+export { getVisibleTools, promoteToVisible, handleGateUnlock } from "./tier.js";
+//# sourceMappingURL=index.js.map

package/dist/disclosure/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/disclosure/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}