@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.0

package/dist/adapters/mcp/web-handler.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Web Standard MCP Handler
+ *
+ * Production path for mcp.vibes.dev (a serverless isolate host).
+ */
+import type { VibesRuntime } from '@vibesdotdev/kernel/api/runtime';
+import type { LoggerImplementation } from '@vibesdotdev/logging/kinds/logger';
+import type { McpAdapterOptions } from '../types.ts';
+export interface McpWebHandlerOptions extends McpAdapterOptions {
+    logger: LoggerImplementation;
+    /**
+     * Stateless mode — set true on serverless/edge isolate runtimes,
+     * where requests fan across isolates with no shared memory. Builds a fresh
+     * server+transport per request instead of an in-memory session Map.
+     */
+    stateless?: boolean;
+    /** Override the session id minted on `initialize` (default: random UUID). */
+    sessionIdGenerator?: () => string;
+    /** Accepted HTTP endpoint paths. Defaults to `/mcp` and `/`. */
+    endpointPaths?: readonly string[];
+}
+/**
+ * Both entry points below fold their catalog as `'settled'` — the caller-side
+ * declaration that loader registration is bound for this surface (see
+ * `McpLoaderSettlement` in `tool-catalog.ts` for the full contract). The bound
+ * is nameable here:
+ *
+ * - The host hands in an already-booted runtime and owns all plugin
+ *   registration (mcp.vibes.dev boots through `bootstrapVibesRuntime` with a
+ *   literal composition of its cloud tool plugins; the OS runtime bootstrap
+ *   for the hq route). This handler
+ *   consumes that runtime; it is never the step whose selection decides whether
+ *   a loader registers, so a descriptor is never excluded by a warming step
+ *   that has not run yet.
+ * - Every connection is built from exactly one fold (`catalog.get()`), and the
+ *   fold is revision-keyed: a loader that registers after a fold arrives
+ *   through the runtime and bumps `descriptorRevision`, so the NEXT connection
+ *   refolds and re-evaluates. An unavailable descriptor is excluded per fold,
+ *   not permanently, and an already-built server is never mutated (protocol
+ *   2026-07-28: tools/list must not vary per connection).
+ *
+ * Surfaces that cannot name that bound keep `'advisory'` — notably the
+ * consumer serve paths, whose startup exposure selection also decides whether
+ * the session bridge warms at all (the 2026-06-11 session-family injury).
+ */
+export declare function createMcpWebStandardHandler(runtime: VibesRuntime, options: McpWebHandlerOptions): (req: Request) => Promise<Response>;
+/** Handle one stateless Web-Standard MCP request without retaining timers or sessions. */
+export declare function handleMcpWebStandardRequest(runtime: VibesRuntime, req: Request, unpreparedOptions: McpWebHandlerOptions): Promise<Response>;
+//# sourceMappingURL=web-handler.d.ts.map

package/dist/adapters/mcp/web-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-handler.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/web-handler.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAG9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAMrD,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC9D,MAAM,EAAE,oBAAoB,CAAC;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,gEAAgE;IAChE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,oBAAoB,GAC3B,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAWrC;AAmED,0FAA0F;AAC1F,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,OAAO,EACZ,iBAAiB,EAAE,oBAAoB,GACrC,OAAO,CAAC,QAAQ,CAAC,CAiCnB"}

package/dist/adapters/mcp/web-handler.js

@@ -0,0 +1,129 @@
+import { resolveMcpTransportRegistry } from "./transport-registry.js";
+import { buildServer, createMcpServerCatalogCache } from "./server.js";
+import { createMcpHttpSessionHandler } from "./mcp-http-session.js";
+import { loadPurposePresetOverrides } from '@vibesdotdev/tools/config/load';
+import { runtimePurposePresets } from '@vibesdotdev/tools/schemas/presets/registry';
+import { resolveMcpPreset } from "./tool-selection.js";
+/**
+ * Both entry points below fold their catalog as `'settled'` — the caller-side
+ * declaration that loader registration is bound for this surface (see
+ * `McpLoaderSettlement` in `tool-catalog.ts` for the full contract). The bound
+ * is nameable here:
+ *
+ * - The host hands in an already-booted runtime and owns all plugin
+ *   registration (mcp.vibes.dev boots through `bootstrapVibesRuntime` with a
+ *   literal composition of its cloud tool plugins; the OS runtime bootstrap
+ *   for the hq route). This handler
+ *   consumes that runtime; it is never the step whose selection decides whether
+ *   a loader registers, so a descriptor is never excluded by a warming step
+ *   that has not run yet.
+ * - Every connection is built from exactly one fold (`catalog.get()`), and the
+ *   fold is revision-keyed: a loader that registers after a fold arrives
+ *   through the runtime and bumps `descriptorRevision`, so the NEXT connection
+ *   refolds and re-evaluates. An unavailable descriptor is excluded per fold,
+ *   not permanently, and an already-built server is never mutated (protocol
+ *   2026-07-28: tools/list must not vary per connection).
+ *
+ * Surfaces that cannot name that bound keep `'advisory'` — notably the
+ * consumer serve paths, whose startup exposure selection also decides whether
+ * the session bridge warms at all (the 2026-06-11 session-family injury).
+ */
+export function createMcpWebStandardHandler(runtime, options) {
+    let prepared;
+    return async (req) => {
+        prepared ??= loadPurposePresetOverrides(runtime).then(configured => preparedMcpWebStandardHandler(runtime, {
+            ...options, customPresets: { ...configured, ...options.customPresets }
+        })).catch(error => {
+            prepared = undefined;
+            throw error;
+        });
+        return (await prepared)(req);
+    };
+}
+/** A host keeps its configured policy fixed; registered owner declarations refold with the registry. */
+function preparedMcpWebStandardHandler(runtime, options) {
+    const logger = options.logger.child('web-mcp');
+    // One fold of the runtime registry, shared by every session this handler
+    // serves. Re-folded only when `runtime.descriptorRevision` moves (a plugin
+    // registered, retracted, or hot-swapped), so a hot reload is picked up by the
+    // very next `initialize` and no session can be served a stale catalog.
+    const catalog = createMcpServerCatalogCache(runtime, options, logger, 'settled');
+    // The transport registry's timers belong to this serving runtime (RC07),
+    // attached on the first request and stopped when the runtime is disposed.
+    let registryAttached = null;
+    let membershipOwner = null;
+    const attachRegistry = () => {
+        if (options.stateless)
+            return Promise.resolve();
+        return (registryAttached ??= (async () => {
+            try {
+                const { attachMcpMembershipOwner } = await import('@vibesdotdev/session/mcp/utils/participant');
+                const registry = await resolveMcpTransportRegistry(runtime);
+                if (runtime.hasContext('session/manager')) {
+                    membershipOwner = await attachMcpMembershipOwner(runtime, registry);
+                }
+                else {
+                    logger.warn('MCP membership renewal unavailable', { reason: 'session-manager-absent' });
+                    registry.attachLifecycle(runtime);
+                }
+            }
+            catch (error) {
+                // Any failed attach is retryable on a later request, never cached.
+                registryAttached = null;
+                throw error;
+            }
+        })());
+    };
+    const handle = createMcpHttpSessionHandler({
+        runtime,
+        bindMembershipOwner: (id) => membershipOwner?.bind(id) ?? (() => { }),
+        omitOutputSchema: resolveMcpPreset(options.mcpClientId, options.preset, runtimePurposePresets(runtime, options.customPresets)).preset.omitOutputSchemaOnWire === true,
+        buildServer: (connection) => buildServer(runtime, { ...options, resolveTransportSessionId: () => connection?.transportSessionId,
+            resolveConnectionIdentity: () => connection?.identity,
+            resolveVerifiedConnectionIdentity: () => connection?.verified }, logger, catalog.get()),
+        logger,
+        lifecycle: runtime.lifecycle,
+        // A request's `x-vibes-workspace-path` rides its invocation overlay (M-a).
+        runInRequestWorkspace: (workspace, fn) => runtime.runInvocation(fn, { workspace }),
+        authenticate: options.authenticate,
+        stateless: options.stateless,
+        sessionIdGenerator: options.sessionIdGenerator,
+        endpointPaths: options.endpointPaths,
+        healthExtras: { surface: 'mcp-cloud', via: 'createMcpWebStandardHandler' }
+    }).handleRequest;
+    return async (req) => {
+        await attachRegistry();
+        return handle(req);
+    };
+}
+/** Handle one stateless Web-Standard MCP request without retaining timers or sessions. */
+export async function handleMcpWebStandardRequest(runtime, req, unpreparedOptions) {
+    const options = { ...unpreparedOptions, customPresets: { ...await loadPurposePresetOverrides(runtime), ...unpreparedOptions.customPresets } };
+    const logger = options.logger.child('web-mcp');
+    // Same settled bound as `createMcpWebStandardHandler` above. This path is
+    // stateless: every request folds fresh and no server outlives its request,
+    // so a loader registered after the previous request is visible to the next.
+    const catalog = createMcpServerCatalogCache(runtime, options, logger, 'settled');
+    const session = createMcpHttpSessionHandler({
+        runtime,
+        omitOutputSchema: resolveMcpPreset(options.mcpClientId, options.preset, runtimePurposePresets(runtime, options.customPresets)).preset.omitOutputSchemaOnWire === true,
+        buildServer: (connection) => buildServer(runtime, { ...options, resolveTransportSessionId: () => connection?.transportSessionId,
+            resolveConnectionIdentity: () => connection?.identity,
+            resolveVerifiedConnectionIdentity: () => connection?.verified }, logger, catalog.get()),
+        logger,
+        lifecycle: runtime.lifecycle,
+        runInRequestWorkspace: (workspace, fn) => runtime.runInvocation(fn, { workspace }),
+        authenticate: options.authenticate,
+        stateless: true,
+        sessionIdGenerator: options.sessionIdGenerator,
+        endpointPaths: options.endpointPaths,
+        healthExtras: { surface: 'mcp-cloud', via: 'handleMcpWebStandardRequest' }
+    });
+    try {
+        return await session.handleRequest(req);
+    }
+    finally {
+        session.dispose();
+    }
+}
+//# sourceMappingURL=web-handler.js.map

package/dist/adapters/mcp/web-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-handler.js","sourceRoot":"","sources":["../../../src/adapters/mcp/web-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAUtE,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAgBvD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,2BAA2B,CAC1C,OAAqB,EACrB,OAA6B;IAE7B,IAAI,QAAkE,CAAC;IACvE,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QAClB,QAAQ,KAAK,0BAA0B,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,6BAA6B,CAAC,OAAO,EAAE;YAC1G,GAAG,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE;SACtE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACjB,QAAQ,GAAG,SAAS,CAAC;YACrB,MAAM,KAAK,CAAC;QACb,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,SAAS,6BAA6B,CACrC,OAAqB,EACrB,OAA6B;IAE7B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,yEAAyE;IACzE,2EAA2E;IAC3E,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAEjF,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,gBAAgB,GAAyB,IAAI,CAAC;IAClD,IAAI,eAAe,GAAmF,IAAI,CAAC;IAC3G,MAAM,cAAc,GAAG,GAAkB,EAAE;QAC1C,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAChD,OAAO,CAAC,gBAAgB,KAAK,CAAC,KAAK,IAAI,EAAE;YACxC,IAAI,CAAC;gBACL,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;gBAChG,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAC;gBAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBAC3C,eAAe,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACrE,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;oBACxF,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACnC,CAAC;YACD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,mEAAmE;gBACnE,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC,CAAC,EAAE,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,2BAA2B,CAAC;QAC1C,OAAO;QACP,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;QACpE,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,sBAAsB,KAAK,IAAI;QACrK,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE,CAC3B,WAAW,CACV,OAAO,EACP,EAAE,GAAG,OAAO,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,kBAAkB;YAC3E,yBAAyB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ;YACrD,iCAAiC,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EACjE,MAAM,EACN,OAAO,CAAC,GAAG,EAAE,CACb;QACF,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,2EAA2E;QAC3E,qBAAqB,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;QAClF,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,6BAA6B,EAAE;KAC1E,CAAC,CAAC,aAAa,CAAC;IACjB,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACpB,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAAqB,EACrB,GAAY,EACZ,iBAAuC;IAEvC,MAAM,OAAO,GAAG,EAAE,GAAG,iBAAiB,EAAE,aAAa,EAAE,EAAE,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,EAAE,GAAG,iBAAiB,CAAC,aAAa,EAAE,EAAE,CAAC;IAC9I,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,2BAA2B,CAAC;QAC3C,OAAO;QACP,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,sBAAsB,KAAK,IAAI;QACrK,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE,CAC3B,WAAW,CACV,OAAO,EACP,EAAE,GAAG,OAAO,EAAE,yBAAyB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,kBAAkB;YAC3E,yBAAyB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ;YACrD,iCAAiC,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,EACjE,MAAM,EACN,OAAO,CAAC,GAAG,EAAE,CACb;QACF,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,qBAAqB,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;QAClF,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,IAAI;QACf,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,YAAY,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,6BAA6B,EAAE;KAC1E,CAAC,CAAC;IACH,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACV,OAAO,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACF,CAAC"}

package/dist/adapters/session-id.d.ts

@@ -0,0 +1,3 @@
+export declare function resolveSessionIdFromNodeHeaders(headers: Record<string, string | string[] | undefined>): string | undefined;
+export declare function resolveSessionIdFromWebHeaders(headers: Headers): string | undefined;
+//# sourceMappingURL=session-id.d.ts.map

package/dist/adapters/session-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.d.ts","sourceRoot":"","sources":["../../src/adapters/session-id.ts"],"names":[],"mappings":"AA0BA,wBAAgB,+BAA+B,CAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACpD,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInF"}

package/dist/adapters/session-id.js

@@ -0,0 +1,42 @@
+function isHeaderString(value) {
+    return typeof value === 'string';
+}
+function readHeaderValue(value) {
+    if (isHeaderString(value))
+        return value;
+    if (!Array.isArray(value) || value.length === 0)
+        return undefined;
+    return value[value.length - 1];
+}
+function parseCookieHeader(cookieHeader) {
+    const cookies = new Map();
+    if (!cookieHeader)
+        return cookies;
+    for (const part of cookieHeader.split(';')) {
+        const trimmed = part.trim();
+        if (trimmed.length === 0)
+            continue;
+        const separator = trimmed.indexOf('=');
+        if (separator <= 0)
+            continue;
+        const name = trimmed.slice(0, separator).trim();
+        const value = trimmed.slice(separator + 1).trim();
+        if (name.length === 0)
+            continue;
+        cookies.set(name, value);
+    }
+    return cookies;
+}
+export function resolveSessionIdFromNodeHeaders(headers) {
+    const headerSessionId = readHeaderValue(headers['mcp-session-id']);
+    if (headerSessionId)
+        return headerSessionId;
+    return parseCookieHeader(readHeaderValue(headers.cookie)).get('mcp-session-id');
+}
+export function resolveSessionIdFromWebHeaders(headers) {
+    const headerSessionId = headers.get('mcp-session-id');
+    if (headerSessionId)
+        return headerSessionId;
+    return parseCookieHeader(headers.get('cookie') ?? undefined).get('mcp-session-id');
+}
+//# sourceMappingURL=session-id.js.map

package/dist/adapters/session-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.js","sourceRoot":"","sources":["../../src/adapters/session-id.ts"],"names":[],"mappings":"AAAA,SAAS,cAAc,CAAC,KAA2C;IAClE,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,KAA2C;IACnE,IAAI,cAAc,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAgC;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,CAAC,YAAY;QAAE,OAAO,OAAO,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC9C,OAAsD;IAEtD,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACnE,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,OAAO,iBAAiB,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAgB;IAC9D,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtD,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,OAAO,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACpF,CAAC"}

package/dist/adapters/transport-bun-http.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Bun-native MCP HTTP server using Web Standard APIs.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { LoggerImplementation } from '@vibesdotdev/logging';
+import { type RuntimeHttpListener } from '@vibesdotdev/kernel';
+import type { McpAuthRequest, McpAuthResult } from './auth-middleware.ts';
+import type { McpAdapter } from './types.ts';
+import { type McpHttpConnectionContext, type McpHttpSessionHandlerOptions } from './mcp/mcp-http-session.ts';
+export interface BunMcpServerOptions {
+    /** The serving runtime's HTTP listener (`getRuntimeHttpListener(runtime)`): the host owns the socket. */
+    listener: RuntimeHttpListener;
+    port: number;
+    hostname: string;
+    buildServer: (context?: McpHttpConnectionContext) => McpServer;
+    bindMembershipOwner?: McpHttpSessionHandlerOptions['bindMembershipOwner'];
+    logger: LoggerImplementation;
+    /** The serving runtime harness identity resolves against (flows into the session handler). */
+    runtime?: McpHttpSessionHandlerOptions['runtime'];
+    /** The serving runtime's lifecycle (`runtime.lifecycle`): session expiry is its timer (RC07). */
+    lifecycle: McpHttpSessionHandlerOptions['lifecycle'];
+    authenticate?: (req: McpAuthRequest) => Promise<McpAuthResult | null>;
+    relayAttestation?: McpHttpSessionHandlerOptions['relayAttestation'];
+    omitOutputSchema?: McpHttpSessionHandlerOptions['omitOutputSchema'];
+    runInRequestWorkspace?: McpHttpSessionHandlerOptions['runInRequestWorkspace'];
+    bindCachedDurableRestore?: McpHttpSessionHandlerOptions['bindCachedDurableRestore'];
+    resolveReadOnlyDurableRestore?: McpHttpSessionHandlerOptions['resolveReadOnlyDurableRestore'];
+    /** Maximum active sessions admitted before idle eviction triggers (default 256). */
+    maxSessions?: McpHttpSessionHandlerOptions['maxSessions'];
+    /** Maximum lifetime of an idle session before reaping in ms (default 2h). */
+    sessionTtlMs?: McpHttpSessionHandlerOptions['sessionTtlMs'];
+    /** Minimum quiet time in ms before an idle session can be evicted under pressure (default 60s). */
+    minEvictionIdleMs?: McpHttpSessionHandlerOptions['minEvictionIdleMs'];
+}
+export declare function createBunMcpServer(options: BunMcpServerOptions): McpAdapter;
+export type McpFetchHandler = (req: Request) => Promise<Response>;
+/** Web Standard fetch handler for Workers / SvelteKit (no Bun.serve). */
+export declare function createMcpFetchHandler(options: Omit<BunMcpServerOptions, 'listener'>): McpFetchHandler;
+//# sourceMappingURL=transport-bun-http.d.ts.map

package/dist/adapters/transport-bun-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-bun-http.d.ts","sourceRoot":"","sources":["../../src/adapters/transport-bun-http.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAA4B,KAAK,mBAAmB,EAAmC,MAAM,qBAAqB,CAAC;AAC1H,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAEN,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,mBAAmB;IACnC,yGAAyG;IACzG,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,wBAAwB,KAAK,SAAS,CAAC;IAC/D,mBAAmB,CAAC,EAAE,4BAA4B,CAAC,qBAAqB,CAAC,CAAC;IAC1E,MAAM,EAAE,oBAAoB,CAAC;IAC7B,8FAA8F;IAC9F,OAAO,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC,CAAC;IAClD,iGAAiG;IACjG,SAAS,EAAE,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACrD,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACtE,gBAAgB,CAAC,EAAE,4BAA4B,CAAC,kBAAkB,CAAC,CAAC;IACpE,gBAAgB,CAAC,EAAE,4BAA4B,CAAC,kBAAkB,CAAC,CAAC;IACpE,qBAAqB,CAAC,EAAE,4BAA4B,CAAC,uBAAuB,CAAC,CAAC;IAC9E,wBAAwB,CAAC,EAAE,4BAA4B,CAAC,0BAA0B,CAAC,CAAC;IACpF,6BAA6B,CAAC,EAAE,4BAA4B,CAAC,+BAA+B,CAAC,CAAC;IAC9F,oFAAoF;IACpF,WAAW,CAAC,EAAE,4BAA4B,CAAC,aAAa,CAAC,CAAC;IAC1D,6EAA6E;IAC7E,YAAY,CAAC,EAAE,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAC5D,mGAAmG;IACnG,iBAAiB,CAAC,EAAE,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;CACtE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,UAAU,CA2B3E;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAElE,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,GAAG,eAAe,CAMrG"}

package/dist/adapters/transport-bun-http.js

@@ -0,0 +1,42 @@
+/**
+ * Bun-native MCP HTTP server using Web Standard APIs.
+ */
+import { settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { createMcpHttpSessionHandler } from "./mcp/mcp-http-session.js";
+export function createBunMcpServer(options) {
+    const session = createMcpHttpSessionHandler(options);
+    let binding = null;
+    const log = options.logger.child('http-listener');
+    /** A handler failure answers a fixed 500 and is logged once, value-free; the host never renders it. */
+    const fetch = async (request) => {
+        const handled = await settle(() => session.handleRequest(request));
+        if (handled.ok)
+            return handled.value;
+        log.error('MCP HTTP request handler failed; answering 500', { failure: valueFreeFailure(handled.cause) });
+        return new Response('Internal Server Error', { status: 500 });
+    };
+    return {
+        async start() {
+            binding = await options.listener.listen({ port: options.port, hostname: options.hostname, fetch });
+        },
+        async shutdown() {
+            const bound = binding;
+            binding = null;
+            try {
+                await bound?.stop();
+            }
+            finally {
+                session.dispose();
+            }
+        }
+    };
+}
+/** Web Standard fetch handler for Workers / SvelteKit (no Bun.serve). */
+export function createMcpFetchHandler(options) {
+    const session = createMcpHttpSessionHandler({
+        ...options,
+        healthExtras: { surface: 'mcp-cloud', via: 'runtime-surface-mcp' }
+    });
+    return session.handleRequest;
+}
+//# sourceMappingURL=transport-bun-http.js.map

package/dist/adapters/transport-bun-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-bun-http.js","sourceRoot":"","sources":["../../src/adapters/transport-bun-http.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAA6D,MAAM,qBAAqB,CAAC;AAG1H,OAAO,EACN,2BAA2B,EAG3B,MAAM,2BAA2B,CAAC;AA4BnC,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC9D,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,OAAO,GAAsC,IAAI,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAElD,uGAAuG;IACvG,MAAM,KAAK,GAAG,KAAK,EAAE,OAAgB,EAAqB,EAAE;QAC3D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,gDAAgD,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1G,OAAO,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC;IAEF,OAAO;QACN,KAAK,CAAC,KAAK;YACV,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,CAAC,QAAQ;YACb,MAAM,KAAK,GAAG,OAAO,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACJ,MAAM,KAAK,EAAE,IAAI,EAAE,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACV,OAAO,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC;AAID,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,OAA8C;IACnF,MAAM,OAAO,GAAG,2BAA2B,CAAC;QAC3C,GAAG,OAAO;QACV,YAAY,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,qBAAqB,EAAE;KAClE,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,aAAa,CAAC;AAC9B,CAAC"}

package/dist/adapters/types.d.ts

@@ -0,0 +1,135 @@
+import type { PurposePreset } from '@vibesdotdev/tools/schemas/presets/schema';
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { RuntimeInvokeCaller, VerifiedTransportIdentity } from '@vibesdotdev/kernel/schemas/invoke-caller';
+import type { RuntimeScopedValues } from '@vibesdotdev/kernel';
+import type { CreateMessageResult, ModelPreferences, SamplingMessage } from '@modelcontextprotocol/sdk/types.js';
+import type { LogLevel } from '@vibesdotdev/logging/schemas/entry';
+import type { ToolCallContext } from '@vibesdotdev/kernel/schemas/tool-call';
+import type { ToolAssetDescriptor } from '@vibesdotdev/tools/schemas/runtime/descriptors';
+import type { McpAuthRequest, McpAuthResult } from './auth-middleware.ts';
+export interface SamplingRequest {
+    messages: SamplingMessage[];
+    systemPrompt?: string;
+    includeContext?: 'none' | 'thisServer' | 'allServers';
+    temperature?: number;
+    maxTokens: number;
+    stopSequences?: string[];
+    metadata?: JsonObject;
+    modelPreferences?: ModelPreferences;
+}
+export type SamplingResult = CreateMessageResult;
+export interface McpAdapter {
+    start(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+export type McpAdapterMode = 'stdio' | 'http';
+export interface McpToolCallPreparation {
+    context: ToolCallContext;
+    toolId: string;
+    input: JsonObject;
+    descriptor: ToolAssetDescriptor;
+    transportSessionId?: string;
+}
+/**
+ * Validated host-owned request values selected through the handed Runtime.
+ */
+export type McpScopedValues = RuntimeScopedValues;
+export interface McpAdapterOptions {
+    /** Effective Tools-config overrides, captured by the host before synchronous catalog construction. */
+    customPresets?: Record<string, PurposePreset>;
+    mode: McpAdapterMode;
+    mcpClientId?: string;
+    /**
+     * Opt-in (default OFF): allow the post-`initialize` client auto-detect
+     * preset upgrade, which mutates `tools/list` after initialize — illegal
+     * under MCP protocol 2026-07-28 ("tools/list MUST NOT vary per
+     * connection"). Kept only for hosts that knowingly accept the violation;
+     * pass `mcpClientId` instead so the catalog is fixed at start.
+     */
+    allowClientAutoDetectUpgrade?: boolean;
+    /** Catalog preset (`full`, `presence`, `mcp:full`) distinct from harness/agent. */
+    preset?: string;
+    /** Extra allow-globs applied after the preset. */
+    toolPatterns?: readonly string[];
+    logLevel?: LogLevel;
+    toolExecutionTimeoutMs?: number;
+    /** Consumer surfaces refresh short-lived auth before each tool invocation. */
+    beforeToolCall?: () => Promise<void> | void;
+    /**
+     * Surface-owned request authority applied after the runtime's direct-context
+     * projection and before tool invocation. Use this for authenticated host
+     * metadata and resource ownership checks; tool input remains untrusted.
+     */
+    prepareToolCallContext?: (request: McpToolCallPreparation) => Promise<ToolCallContext> | ToolCallContext;
+    /** @internal Per-connection HTTP transport identity supplied by the adapter. */
+    resolveTransportSessionId?: () => string | undefined;
+    /**
+     * @internal Per-connection caller identity declared at `initialize`
+     * (agent, harness, harness session, projects). A declaration: admitted on
+     * each tool call only where the transport verified it (RC08 U7).
+     */
+    resolveConnectionIdentity?: () => RuntimeInvokeCaller | undefined;
+    /**
+     * @internal What the per-connection transport verified at `initialize`: an
+     * attested relay's launch identity (`mcp-relay-launch`).
+     */
+    resolveVerifiedConnectionIdentity?: () => VerifiedTransportIdentity | undefined;
+    /**
+     * The launch identity of the single client an isolated (non-shared) stdio
+     * server serves (`stdio-launch`): established by the harness that spawned
+     * it, from the server's own serve flags. A shared host leaves this unset.
+     */
+    verifiedConnectionIdentity?: VerifiedTransportIdentity;
+    /**
+     * The shared local host's relay attestation: verifies the secret a relay
+     * presents at `initialize` (runtime-rpc's local attestation). A host without it
+     * attests no connection.
+     */
+    relayAttestation?: {
+        verify(authorization: string | null): boolean;
+    };
+    /** @internal Host async context used to isolate per-request sampling callbacks. */
+    scopedValues?: McpScopedValues;
+    onStdioClose?: () => Promise<void> | void;
+    port?: number;
+    host?: string;
+    preloadedKnowledgeBaseIds?: string[];
+    preloadedKnowledgeBases?: Array<{
+        id: string;
+        slug?: string | null;
+        name?: string | null;
+    }>;
+    unresolvedKnowledgeBases?: string[];
+    authenticate?: (req: McpAuthRequest) => Promise<McpAuthResult | null>;
+    serverName?: string;
+    serverVersion?: string;
+    /**
+     * Build provenance string (git ref + dist freshness) computed by the
+     * serve impl at startup. Included in MCP `instructions` so a stale body
+     * is wire-detectable — the fan-out phantom saga's root cause was
+     * invisible staleness (long-lived stdio child, source moved under it).
+     */
+    buildProvenance?: string;
+    /**
+     * Supplied by the consumer serve impl: the ⚠️ STALE BODY banner to prefix
+     * onto every tool result and error while the executable this body runs has
+     * been replaced on disk (adapters/mcp/stale-body.consumer.ts). The universal
+     * server never reads the process itself; a host that cannot know passes
+     * nothing and no banner is emitted.
+     */
+    staleBodyBanner?: () => string | null;
+    /**
+     * Set when this process booted its OWN runtime instead of relaying to the
+     * workspace's shared host. Surfaced in MCP `instructions` so the agent
+     * holding the ~6GB knows it is holding it — from inside a process there is
+     * no other way to tell.
+     */
+    isolation?: import('./mcp/isolated-notice.ts').IsolatedNoticeInput;
+    /**
+     * Tool ids of project-local `.vibes/tools` tools. When omitted, buildServer
+     * reads the ones the runtime's discovery pass registered (`localToolsOf`).
+     * Tests may inject an explicit set.
+     */
+    localToolIds?: readonly string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/adapters/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AAChH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EACX,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC/B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,YAAY,CAAC;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED,MAAM,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAEjD,MAAM,WAAW,UAAU;IAC1B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9C,MAAM,WAAW,sBAAsB;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,mBAAmB,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAElD,MAAM,WAAW,iBAAiB;IACjC,sGAAsG;IACtG,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5C;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,CACxB,OAAO,EAAE,sBAAsB,KAC3B,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;IAChD,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACrD;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAC;IAClE;;;OAGG;IACH,iCAAiC,CAAC,EAAE,MAAM,yBAAyB,GAAG,SAAS,CAAC;IAChF;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,yBAAyB,CAAC;IACvD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE;QAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAA;KAAE,CAAC;IACrE,mFAAmF;IACnF,YAAY,CAAC,EAAE,eAAe,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAE1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;IACrC,uBAAuB,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC5F,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACtC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,0BAA0B,EAAE,mBAAmB,CAAC;IACnE;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC"}

package/dist/adapters/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/adapters/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/adapters/types.ts"],"names":[],"mappings":""}

package/dist/adapters/web-compatibility.d.ts

@@ -0,0 +1,6 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { McpWebHandlerOptions } from './mcp/web-handler.ts';
+/** Compatible root factory; explicit ./adapters/mcp/web-handler is the canonical adapter entry. */
+export declare function createMcpWebStandardHandler(runtime: VibesRuntime, options: McpWebHandlerOptions): (request: Request) => Promise<Response>;
+export declare function handleMcpWebStandardRequest(runtime: VibesRuntime, request: Request, options: McpWebHandlerOptions): Promise<Response>;
+//# sourceMappingURL=web-compatibility.d.ts.map

package/dist/adapters/web-compatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-compatibility.d.ts","sourceRoot":"","sources":["../../src/adapters/web-compatibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,mGAAmG;AACnG,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAMzI;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAG3I"}

package/dist/adapters/web-compatibility.js

@@ -0,0 +1,13 @@
+/** Compatible root factory; explicit ./adapters/mcp/web-handler is the canonical adapter entry. */
+export function createMcpWebStandardHandler(runtime, options) {
+    let handler;
+    return async (request) => {
+        handler ??= import("./mcp/web-handler.js").then(module => module.createMcpWebStandardHandler(runtime, options));
+        return (await handler)(request);
+    };
+}
+export async function handleMcpWebStandardRequest(runtime, request, options) {
+    const module = await import("./mcp/web-handler.js");
+    return module.handleMcpWebStandardRequest(runtime, request, options);
+}
+//# sourceMappingURL=web-compatibility.js.map

package/dist/adapters/web-compatibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-compatibility.js","sourceRoot":"","sources":["../../src/adapters/web-compatibility.ts"],"names":[],"mappings":"AAGA,mGAAmG;AACnG,MAAM,UAAU,2BAA2B,CAAC,OAAqB,EAAE,OAA6B;IAC/F,IAAI,OAAqE,CAAC;IAC1E,OAAO,KAAK,EAAC,OAAO,EAAC,EAAE;QACtB,OAAO,KAAK,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAChH,OAAO,CAAC,MAAM,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAqB,EAAE,OAAgB,EAAE,OAA6B;IACvH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC"}