@webpieces/mcp-server 0.4.772 → 0.4.774

package/src/__tests__/McpRemoteFixtures.js

@@ -0,0 +1,409 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RelayWebpiecesPeerErrors = exports.BoundaryProbeFilter = exports.RecordingOidcVerifier = exports.RecordingOidcMinter = exports.RemoteThrowController = exports.LocalThrowController = exports.RemoteMcpController = exports.THROW_CASES = exports.ThrowCase = exports.RemoteThrowApi = exports.LocalThrowApi = exports.OidcFailRemoteApi = exports.GarbageRemoteApi = exports.RefusedRemoteApi = exports.MissingRemoteMcpApi = exports.RemoteMcpApi = exports.RemoteResponse = exports.RemoteRequest = exports.GATEWAY_PATH = exports.LOCAL_ENDPOINT_JWT = exports.EXTERNAL_MCP_BEARER = exports.OIDC_TOKEN = exports.GARBAGE_SERVICE = exports.REFUSED_SERVICE = exports.REMOTE_SERVICE = exports.REMOTE_ROLES = exports.REMOTE_USER = void 0;
+exports.raiseFor = raiseFor;
+const tslib_1 = require("tslib");
+require("reflect-metadata");
+const inversify_1 = require("inversify");
+const core_util_1 = require("@webpieces/core-util");
+const core_context_1 = require("@webpieces/core-context");
+const http_routing_1 = require("@webpieces/http-routing");
+/** Contracts, controllers and test doubles for McpRemoteBinding.integration.spec.ts. */
+exports.REMOTE_USER = core_util_1.ContextKey.trusted('mcpRemoteUser', 'verified by the MCP access-token authority before delegation', 'x-mcp-remote-user');
+exports.REMOTE_ROLES = core_util_1.ContextKey.trusted('mcpRemoteRoles', 'verified by the MCP access-token authority before delegation', 'x-mcp-remote-roles');
+exports.REMOTE_SERVICE = 'mcp-remote-integration';
+exports.REFUSED_SERVICE = 'mcp-remote-refused';
+exports.GARBAGE_SERVICE = 'mcp-remote-garbage';
+exports.OIDC_TOKEN = 'oidc-for-mcp-remote-integration';
+exports.EXTERNAL_MCP_BEARER = 'external-mcp-access-token';
+exports.LOCAL_ENDPOINT_JWT = 'local-endpoint-jwt-that-must-not-cross-the-remote-hop';
+exports.GATEWAY_PATH = '/gateway/mcp';
+let RemoteRequest = class RemoteRequest {
+    query;
+    constructor(query) {
+        if (query !== undefined)
+            this.query = query;
+    }
+};
+exports.RemoteRequest = RemoteRequest;
+tslib_1.__decorate([
+    (0, core_util_1.WpDtoField)(new core_util_1.WpDtoFieldOptions('Search text', true)),
+    tslib_1.__metadata("design:type", String)
+], RemoteRequest.prototype, "query", void 0);
+exports.RemoteRequest = RemoteRequest = tslib_1.__decorate([
+    (0, core_util_1.WpDto)(),
+    tslib_1.__metadata("design:paramtypes", [String])
+], RemoteRequest);
+let RemoteResponse = class RemoteResponse {
+    user;
+    roles;
+    result;
+    constructor(user, roles, result) {
+        if (user !== undefined)
+            this.user = user;
+        if (roles !== undefined)
+            this.roles = roles;
+        if (result !== undefined)
+            this.result = result;
+    }
+};
+exports.RemoteResponse = RemoteResponse;
+tslib_1.__decorate([
+    (0, core_util_1.WpDtoField)(new core_util_1.WpDtoFieldOptions('Delegated user', true)),
+    tslib_1.__metadata("design:type", String)
+], RemoteResponse.prototype, "user", void 0);
+tslib_1.__decorate([
+    (0, core_util_1.WpDtoField)(new core_util_1.WpDtoFieldOptions('Delegated roles', true)),
+    tslib_1.__metadata("design:type", String)
+], RemoteResponse.prototype, "roles", void 0);
+tslib_1.__decorate([
+    (0, core_util_1.WpDtoField)(new core_util_1.WpDtoFieldOptions('Result', true)),
+    tslib_1.__metadata("design:type", String)
+], RemoteResponse.prototype, "result", void 0);
+exports.RemoteResponse = RemoteResponse = tslib_1.__decorate([
+    (0, core_util_1.WpDto)(),
+    tslib_1.__metadata("design:paramtypes", [String, String, String])
+], RemoteResponse);
+let RemoteMcpApi = class RemoteMcpApi {
+    search(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.RemoteMcpApi = RemoteMcpApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthOidc)('mcp-gateway'),
+    (0, core_util_1.Endpoint)('/search', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'remote_integration_search',
+        description: 'Calls a remote Webpieces API.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RemoteMcpApi.prototype, "search", null);
+exports.RemoteMcpApi = RemoteMcpApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/remote-mcp')
+], RemoteMcpApi);
+let MissingRemoteMcpApi = class MissingRemoteMcpApi {
+    search(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.MissingRemoteMcpApi = MissingRemoteMcpApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthOidc)('mcp-gateway'),
+    (0, core_util_1.Endpoint)('/search', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'missing_remote_integration_search',
+        description: 'Intentionally absent route.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], MissingRemoteMcpApi.prototype, "search", null);
+exports.MissingRemoteMcpApi = MissingRemoteMcpApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/missing-remote-mcp')
+], MissingRemoteMcpApi);
+let RefusedRemoteApi = class RefusedRemoteApi {
+    search(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.RefusedRemoteApi = RefusedRemoteApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthOidc)('mcp-gateway'),
+    (0, core_util_1.Endpoint)('/search', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'refused_remote',
+        description: 'Nothing listens on this port.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RefusedRemoteApi.prototype, "search", null);
+exports.RefusedRemoteApi = RefusedRemoteApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/refused-remote-mcp')
+], RefusedRemoteApi);
+let GarbageRemoteApi = class GarbageRemoteApi {
+    search(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.GarbageRemoteApi = GarbageRemoteApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthOidc)('mcp-gateway'),
+    (0, core_util_1.Endpoint)('/search', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'garbage_remote',
+        description: 'Answers an undecodable body.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], GarbageRemoteApi.prototype, "search", null);
+exports.GarbageRemoteApi = GarbageRemoteApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/garbage-remote-mcp')
+], GarbageRemoteApi);
+let OidcFailRemoteApi = class OidcFailRemoteApi {
+    search(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.OidcFailRemoteApi = OidcFailRemoteApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthOidc)('mcp-gateway'),
+    (0, core_util_1.Endpoint)('/search', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'oidc_fail_remote',
+        description: 'Its OIDC token cannot be minted.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], OidcFailRemoteApi.prototype, "search", null);
+exports.OidcFailRemoteApi = OidcFailRemoteApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/oidc-fail-remote-mcp')
+], OidcFailRemoteApi);
+let LocalThrowApi = class LocalThrowApi {
+    fail(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.LocalThrowApi = LocalThrowApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.Endpoint)('/throw', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'local_throw',
+        description: 'Throws the requested failure in-process.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], LocalThrowApi.prototype, "fail", null);
+exports.LocalThrowApi = LocalThrowApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/local-throw')
+], LocalThrowApi);
+let RemoteThrowApi = class RemoteThrowApi {
+    fail(_request) {
+        throw new Error('contract only');
+    }
+};
+exports.RemoteThrowApi = RemoteThrowApi;
+tslib_1.__decorate([
+    (0, core_util_1.WpMcpAuthJwt)({ allRolesAllowed: true }),
+    (0, core_util_1.WpAuthOidc)('mcp-gateway'),
+    (0, core_util_1.Endpoint)('/throw', 'rpc'),
+    (0, core_util_1.WpResponseDto)(() => RemoteResponse),
+    (0, core_util_1.WpMcpTool)({
+        name: 'remote_throw',
+        description: 'Throws the requested failure remotely.',
+        readOnlyHint: true,
+        idempotentHint: true,
+        openWorldHint: false,
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [RemoteRequest]),
+    tslib_1.__metadata("design:returntype", Promise)
+], RemoteThrowApi.prototype, "fail", null);
+exports.RemoteThrowApi = RemoteThrowApi = tslib_1.__decorate([
+    (0, core_util_1.ApiPath)('/remote-throw')
+], RemoteThrowApi);
+/** One named throw, run identically behind the local and the remote binding. */
+class ThrowCase {
+    name;
+    expectedKind;
+    expectedLevel;
+    raise;
+    constructor(name, expectedKind, expectedLevel, raise) {
+        this.name = name;
+        this.expectedKind = expectedKind;
+        this.expectedLevel = expectedLevel;
+        this.raise = raise;
+    }
+}
+exports.ThrowCase = ThrowCase;
+exports.THROW_CASES = [
+    new ThrowCase('end-user', 'end-user', 'info', () => {
+        throw new core_util_1.ApiEndUserError('The two passwords you entered do not match.', 'PW_MISMATCH');
+    }),
+    new ThrowCase('bad-request', 'bad-request', 'info', () => {
+        throw new core_util_1.ApiBadRequestError('internal column name', '$.query', 'query must be a word');
+    }),
+    new ThrowCase('unauthorized', 'unauthorized', 'info', () => {
+        throw new core_util_1.ApiUnauthorizedError('session internals');
+    }),
+    new ThrowCase('forbidden', 'forbidden', 'info', () => {
+        throw new core_util_1.ApiForbiddenError('acl internals');
+    }),
+    new ThrowCase('not-found', 'not-found', 'info', () => {
+        throw new core_util_1.ApiNotFoundError('row 7 missing');
+    }),
+    new ThrowCase('endpoint-not-found', 'endpoint-not-found', 'info', () => {
+        throw new core_util_1.ApiEndpointNotFoundError('route internals');
+    }),
+    new ThrowCase('request-timeout', 'request-timeout', 'error', () => {
+        throw new core_util_1.ApiRequestTimeoutError('slow internals');
+    }),
+    new ThrowCase('rate-limited', 'rate-limited', 'error', () => {
+        throw new core_util_1.ApiRateLimitedError('quota internals');
+    }),
+    new ThrowCase('implementation', 'implementation', 'error', () => {
+        throw new core_util_1.ApiImplementationError('bug internals');
+    }),
+    new ThrowCase('dependency', 'dependency', 'error', () => {
+        throw new core_util_1.ApiDependencyError('upstream internals');
+    }),
+    new ThrowCase('unavailable', 'unavailable', 'error', () => {
+        throw new core_util_1.ApiUnavailableError('maintenance internals');
+    }),
+    new ThrowCase('dependency-timeout', 'dependency-timeout', 'error', () => {
+        throw new core_util_1.ApiDependencyTimeoutError('upstream slow internals');
+    }),
+    new ThrowCase('dependency-backoff', 'dependency-backoff', 'error', () => {
+        throw new core_util_1.ApiDependencyBackoffError('backoff internals', 42);
+    }),
+    new ThrowCase('connection', 'implementation', 'error', () => {
+        throw new core_util_1.ApiConnectionError('ECONNRESET internals');
+    }),
+    new ThrowCase('raw-error', 'implementation', 'error', () => {
+        throw new Error('SECRET-raw-internals');
+    }),
+    new ThrowCase('thrown-string', 'implementation', 'error', () => {
+        throw 'SECRET-string-internals';
+    }),
+];
+function raiseFor(query) {
+    const found = exports.THROW_CASES.find((candidate) => candidate.name === query);
+    if (!found)
+        throw new Error(`unknown throw case ${query}`);
+    return found.raise();
+}
+let RemoteMcpController = class RemoteMcpController extends RemoteMcpApi {
+    calls = 0;
+    authorization;
+    search(request) {
+        this.calls += 1;
+        this.authorization = core_context_1.RequestContext.getRequest()?.getHeader('authorization');
+        return Promise.resolve(new RemoteResponse(core_context_1.RequestContext.getTrusted(exports.REMOTE_USER) ?? 'missing-user', core_context_1.RequestContext.getTrusted(exports.REMOTE_ROLES) ?? 'missing-roles', `remote:${request.query}`));
+    }
+};
+exports.RemoteMcpController = RemoteMcpController;
+exports.RemoteMcpController = RemoteMcpController = tslib_1.__decorate([
+    (0, inversify_1.injectable)()
+], RemoteMcpController);
+let LocalThrowController = class LocalThrowController extends LocalThrowApi {
+    async fail(request) {
+        return raiseFor(request.query);
+    }
+};
+exports.LocalThrowController = LocalThrowController;
+exports.LocalThrowController = LocalThrowController = tslib_1.__decorate([
+    (0, inversify_1.injectable)()
+], LocalThrowController);
+let RemoteThrowController = class RemoteThrowController extends RemoteThrowApi {
+    async fail(request) {
+        return raiseFor(request.query);
+    }
+};
+exports.RemoteThrowController = RemoteThrowController;
+exports.RemoteThrowController = RemoteThrowController = tslib_1.__decorate([
+    (0, inversify_1.injectable)()
+], RemoteThrowController);
+class RecordingOidcMinter {
+    failure;
+    token;
+    audiences = [];
+    constructor(failure, token = exports.OIDC_TOKEN) {
+        this.failure = failure;
+        this.token = token;
+    }
+    mintIdToken(audience) {
+        this.audiences.push(audience);
+        if (this.failure)
+            return Promise.reject(this.failure);
+        return Promise.resolve(this.token);
+    }
+}
+exports.RecordingOidcMinter = RecordingOidcMinter;
+class RecordingOidcVerifier extends http_routing_1.OidcHook {
+    tokens = [];
+    callerLists = [];
+    verifyOidc(token, callers) {
+        this.tokens.push(token);
+        this.callerLists.push(callers);
+        if (token !== exports.OIDC_TOKEN)
+            throw new Error(`unexpected OIDC token '${token}'`);
+        return Promise.resolve();
+    }
+}
+exports.RecordingOidcVerifier = RecordingOidcVerifier;
+let BoundaryProbeFilter = class BoundaryProbeFilter extends core_util_1.Filter {
+    calls = 0;
+    sawLogIdentity = false;
+    sawTrustedUser;
+    filter(meta, next) {
+        this.calls += 1;
+        this.sawLogIdentity =
+            core_context_1.RequestContext.getUntrusted(core_util_1.WebpiecesCoreHeaders.CONTROLLER) ===
+                'RemoteMcpController' &&
+                core_context_1.RequestContext.getUntrusted(core_util_1.WebpiecesCoreHeaders.METHOD) === 'search';
+        this.sawTrustedUser = core_context_1.RequestContext.getTrusted(exports.REMOTE_USER);
+        return next.invoke(meta);
+    }
+};
+exports.BoundaryProbeFilter = BoundaryProbeFilter;
+exports.BoundaryProbeFilter = BoundaryProbeFilter = tslib_1.__decorate([
+    (0, inversify_1.injectable)()
+], BoundaryProbeFilter);
+/**
+ * The documented gateway opt-out from http-client-node's "a dependency's 4xx is OUR 500" invariant:
+ * an MCP gateway relays a Webpieces peer's typed failure so the model sees the same kind it would see
+ * for a local binding. `relay = false` answers "not mine", which is the framework default.
+ */
+class RelayWebpiecesPeerErrors {
+    relay = true;
+    toWire(_error) {
+        return undefined;
+    }
+    fromWire(response) {
+        if (!this.relay || !core_util_1.ApiErrorCodec.isPayload(response.body))
+            return undefined;
+        const decoded = core_util_1.ApiErrorCodec.decode(response.body);
+        if (!core_util_1.ApiErrorHttpStatus.hasCode(decoded))
+            return undefined;
+        return core_util_1.ApiErrorHttpStatus.code(decoded) === response.status.code ? decoded : undefined;
+    }
+}
+exports.RelayWebpiecesPeerErrors = RelayWebpiecesPeerErrors;
+//# sourceMappingURL=McpRemoteFixtures.js.map

package/src/__tests__/McpRemoteFixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpRemoteFixtures.js","sourceRoot":"","sources":["../../../../../../packages/http/mcp-server/src/__tests__/McpRemoteFixtures.ts"],"names":[],"mappings":";;;AAoRA,4BAIC;;AAxRD,4BAA0B;AAC1B,yCAAuC;AACvC,oDAmC8B;AAC9B,0DAAyD;AACzD,0DAA2E;AAE3E,wFAAwF;AAE3E,QAAA,WAAW,GAAG,sBAAU,CAAC,OAAO,CACzC,eAAe,EACf,8DAA8D,EAC9D,mBAAmB,CACtB,CAAC;AACW,QAAA,YAAY,GAAG,sBAAU,CAAC,OAAO,CAC1C,gBAAgB,EAChB,8DAA8D,EAC9D,oBAAoB,CACvB,CAAC;AACW,QAAA,cAAc,GAAG,wBAAwB,CAAC;AAC1C,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,UAAU,GAAG,iCAAiC,CAAC;AAC/C,QAAA,mBAAmB,GAAG,2BAA2B,CAAC;AAClD,QAAA,kBAAkB,GAAG,uDAAuD,CAAC;AAC7E,QAAA,YAAY,GAAG,cAAc,CAAC;AAGpC,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEtB,KAAK,CAAU;IAEf,YAAY,KAAc;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAChD,CAAC;CACJ,CAAA;AAPY,sCAAa;AAEtB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;;4CACxC;wBAFN,aAAa;IADzB,IAAA,iBAAK,GAAE;;GACK,aAAa,CAOzB;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEvB,IAAI,CAAU;IAGd,KAAK,CAAU;IAGf,MAAM,CAAU;IAEhB,YAAY,IAAa,EAAE,KAAc,EAAE,MAAe;QACtD,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACnD,CAAC;CACJ,CAAA;AAfY,wCAAc;AAEvB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;;4CAC5C;AAGd;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;;6CAC5C;AAGf;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;;8CAClC;yBARP,cAAc;IAD1B,IAAA,iBAAK,GAAE;;GACK,cAAc,CAe1B;AAGM,IAAe,YAAY,GAA3B,MAAe,YAAY;IAY9B,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,oCAAY;AAY9B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;0CAE7B;uBAdiB,YAAY;IADjC,IAAA,mBAAO,EAAC,aAAa,CAAC;GACD,YAAY,CAejC;AAGM,IAAe,mBAAmB,GAAlC,MAAe,mBAAmB;IAYrC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,kDAAmB;AAYrC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,6BAA6B;QAC1C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;iDAE7B;8BAdiB,mBAAmB;IADxC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,mBAAmB,CAexC;AAGM,IAAe,gBAAgB,GAA/B,MAAe,gBAAgB;IAYlC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,4CAAgB;AAYlC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;8CAE7B;2BAdiB,gBAAgB;IADrC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,gBAAgB,CAerC;AAGM,IAAe,gBAAgB,GAA/B,MAAe,gBAAgB;IAYlC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,4CAAgB;AAYlC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,8BAA8B;QAC3C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;8CAE7B;2BAdiB,gBAAgB;IADrC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,gBAAgB,CAerC;AAGM,IAAe,iBAAiB,GAAhC,MAAe,iBAAiB;IAYnC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,8CAAiB;AAYnC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,kCAAkC;QAC/C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;+CAE7B;4BAdiB,iBAAiB;IADtC,IAAA,mBAAO,EAAC,uBAAuB,CAAC;GACX,iBAAiB,CAetC;AAGM,IAAe,aAAa,GAA5B,MAAe,aAAa;IAY/B,IAAI,CAAC,QAAuB;QACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,sCAAa;AAY/B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,qBAAS,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACa,aAAa;;yCAE3B;wBAdiB,aAAa;IADlC,IAAA,mBAAO,EAAC,cAAc,CAAC;GACF,aAAa,CAelC;AAGM,IAAe,cAAc,GAA7B,MAAe,cAAc;IAYhC,IAAI,CAAC,QAAuB;QACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,wCAAc;AAYhC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wCAAwC;QACrD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACa,aAAa;;0CAE3B;yBAdiB,cAAc;IADnC,IAAA,mBAAO,EAAC,eAAe,CAAC;GACH,cAAc,CAenC;AAED,gFAAgF;AAChF,MAAa,SAAS;IAEE;IACA;IACA;IACA;IAJpB,YACoB,IAAY,EACZ,YAAoB,EACpB,aAAuB,EACvB,KAAkB;QAHlB,SAAI,GAAJ,IAAI,CAAQ;QACZ,iBAAY,GAAZ,YAAY,CAAQ;QACpB,kBAAa,GAAb,aAAa,CAAU;QACvB,UAAK,GAAL,KAAK,CAAa;IACnC,CAAC;CACP;AAPD,8BAOC;AAEY,QAAA,WAAW,GAAyB;IAC7C,IAAI,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,2BAAe,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,8BAAkB,CAAC,sBAAsB,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,gCAAoB,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,6BAAiB,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,4BAAgB,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,oCAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,kCAAsB,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,+BAAmB,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,kCAAsB,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,8BAAkB,CAAC,oBAAoB,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,+BAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,qCAAyB,CAAC,yBAAyB,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,qCAAyB,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,8BAAkB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC3D,MAAM,yBAAyB,CAAC;IACpC,CAAC,CAAC;CACL,CAAC;AAEF,SAAgB,QAAQ,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,mBAAW,CAAC,IAAI,CAAC,CAAC,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,YAAY;IACjD,KAAK,GAAG,CAAC,CAAC;IACV,aAAa,CAAU;IAEd,MAAM,CAAC,OAAsB;QAClC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,aAAa,GAAG,6BAAc,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC,OAAO,CAClB,IAAI,cAAc,CACd,6BAAc,CAAC,UAAU,CAAC,mBAAW,CAAC,IAAI,cAAc,EACxD,6BAAc,CAAC,UAAU,CAAC,oBAAY,CAAC,IAAI,eAAe,EAC1D,UAAU,OAAO,CAAC,KAAK,EAAE,CAC5B,CACJ,CAAC;IACN,CAAC;CACJ,CAAA;AAfY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAe/B;AAGM,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,aAAa;IAC1C,KAAK,CAAC,IAAI,CAAC,OAAsB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AAJY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,sBAAU,GAAE;GACA,oBAAoB,CAIhC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,cAAc;IAC5C,KAAK,CAAC,IAAI,CAAC,OAAsB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AAJY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,GAAE;GACA,qBAAqB,CAIjC;AAED,MAAa,mBAAmB;IAIP;IACA;IAJZ,SAAS,GAAa,EAAE,CAAC;IAElC,YACqB,OAAe,EACf,QAAQ,kBAAU;QADlB,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAa;IACpC,CAAC;IAEJ,WAAW,CAAC,QAAgB;QACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;CACJ;AAbD,kDAaC;AAED,MAAa,qBAAsB,SAAQ,uBAAQ;IACtC,MAAM,GAAa,EAAE,CAAC;IACtB,WAAW,GAAe,EAAE,CAAC;IAE7B,UAAU,CAAC,KAAa,EAAE,OAAiB;QAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,kBAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,GAAG,CAAC,CAAC;QAC9E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ;AAVD,sDAUC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,kBAAuC;IAC5E,KAAK,GAAG,CAAC,CAAC;IACV,cAAc,GAAG,KAAK,CAAC;IACvB,cAAc,CAAU;IAEf,MAAM,CACX,IAAgB,EAChB,IAA8C;QAE9C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,cAAc;YACf,6BAAc,CAAC,YAAY,CAAC,gCAAoB,CAAC,UAAU,CAAC;gBACxD,qBAAqB;gBACzB,6BAAc,CAAC,YAAY,CAAC,gCAAoB,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,6BAAc,CAAC,UAAU,CAAC,mBAAW,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;CACJ,CAAA;AAjBY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAiB/B;AAED;;;;GAIG;AACH,MAAa,wBAAwB;IACjC,KAAK,GAAG,IAAI,CAAC;IAEb,MAAM,CAAC,MAAa;QAChB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,QAAQ,CAAC,QAAyB;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,yBAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,OAAO,GAAG,yBAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,8BAAkB,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,OAAO,8BAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;CACJ;AAbD,4DAaC","sourcesContent":["import 'reflect-metadata';\nimport { injectable } from 'inversify';\nimport {\n    ApiBadRequestError,\n    ApiConnectionError,\n    ApiDependencyBackoffError,\n    ApiDependencyError,\n    ApiDependencyTimeoutError,\n    ApiEndpointNotFoundError,\n    ApiEndUserError,\n    ApiError,\n    ApiErrorCodec,\n    ApiErrorHttpStatus,\n    ApiForbiddenError,\n    ApiImplementationError,\n    ApiNotFoundError,\n    ApiPath,\n    ApiRateLimitedError,\n    ApiRequestTimeoutError,\n    ApiUnauthorizedError,\n    ApiUnavailableError,\n    ContextKey,\n    Endpoint,\n    ErrorTranslators,\n    Filter,\n    HttpResponseDto,\n    LogLevel,\n    Service,\n    WebpiecesCoreHeaders,\n    WpAuthJwt,\n    WpAuthOidc,\n    WpDto,\n    WpDtoField,\n    WpDtoFieldOptions,\n    WpMcpAuthJwt,\n    WpMcpTool,\n    WpResponseDto,\n} from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\nimport { MethodMeta, OidcHook, WpResponse } from '@webpieces/http-routing';\n\n/** Contracts, controllers and test doubles for McpRemoteBinding.integration.spec.ts. */\n\nexport const REMOTE_USER = ContextKey.trusted<string>(\n    'mcpRemoteUser',\n    'verified by the MCP access-token authority before delegation',\n    'x-mcp-remote-user',\n);\nexport const REMOTE_ROLES = ContextKey.trusted<string>(\n    'mcpRemoteRoles',\n    'verified by the MCP access-token authority before delegation',\n    'x-mcp-remote-roles',\n);\nexport const REMOTE_SERVICE = 'mcp-remote-integration';\nexport const REFUSED_SERVICE = 'mcp-remote-refused';\nexport const GARBAGE_SERVICE = 'mcp-remote-garbage';\nexport const OIDC_TOKEN = 'oidc-for-mcp-remote-integration';\nexport const EXTERNAL_MCP_BEARER = 'external-mcp-access-token';\nexport const LOCAL_ENDPOINT_JWT = 'local-endpoint-jwt-that-must-not-cross-the-remote-hop';\nexport const GATEWAY_PATH = '/gateway/mcp';\n\n@WpDto()\nexport class RemoteRequest {\n    @WpDtoField(new WpDtoFieldOptions('Search text', true))\n    query!: string;\n\n    constructor(query?: string) {\n        if (query !== undefined) this.query = query;\n    }\n}\n\n@WpDto()\nexport class RemoteResponse {\n    @WpDtoField(new WpDtoFieldOptions('Delegated user', true))\n    user!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Delegated roles', true))\n    roles!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Result', true))\n    result!: string;\n\n    constructor(user?: string, roles?: string, result?: string) {\n        if (user !== undefined) this.user = user;\n        if (roles !== undefined) this.roles = roles;\n        if (result !== undefined) this.result = result;\n    }\n}\n\n@ApiPath('/remote-mcp')\nexport abstract class RemoteMcpApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'remote_integration_search',\n        description: 'Calls a remote Webpieces API.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/missing-remote-mcp')\nexport abstract class MissingRemoteMcpApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'missing_remote_integration_search',\n        description: 'Intentionally absent route.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/refused-remote-mcp')\nexport abstract class RefusedRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'refused_remote',\n        description: 'Nothing listens on this port.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/garbage-remote-mcp')\nexport abstract class GarbageRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'garbage_remote',\n        description: 'Answers an undecodable body.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/oidc-fail-remote-mcp')\nexport abstract class OidcFailRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'oidc_fail_remote',\n        description: 'Its OIDC token cannot be minted.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/local-throw')\nexport abstract class LocalThrowApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthJwt({ allRolesAllowed: true })\n    @Endpoint('/throw', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'local_throw',\n        description: 'Throws the requested failure in-process.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    fail(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/remote-throw')\nexport abstract class RemoteThrowApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/throw', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'remote_throw',\n        description: 'Throws the requested failure remotely.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    fail(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n/** One named throw, run identically behind the local and the remote binding. */\nexport class ThrowCase {\n    constructor(\n        public readonly name: string,\n        public readonly expectedKind: string,\n        public readonly expectedLevel: LogLevel,\n        public readonly raise: () => never,\n    ) {}\n}\n\nexport const THROW_CASES: readonly ThrowCase[] = [\n    new ThrowCase('end-user', 'end-user', 'info', () => {\n        throw new ApiEndUserError('The two passwords you entered do not match.', 'PW_MISMATCH');\n    }),\n    new ThrowCase('bad-request', 'bad-request', 'info', () => {\n        throw new ApiBadRequestError('internal column name', '$.query', 'query must be a word');\n    }),\n    new ThrowCase('unauthorized', 'unauthorized', 'info', () => {\n        throw new ApiUnauthorizedError('session internals');\n    }),\n    new ThrowCase('forbidden', 'forbidden', 'info', () => {\n        throw new ApiForbiddenError('acl internals');\n    }),\n    new ThrowCase('not-found', 'not-found', 'info', () => {\n        throw new ApiNotFoundError('row 7 missing');\n    }),\n    new ThrowCase('endpoint-not-found', 'endpoint-not-found', 'info', () => {\n        throw new ApiEndpointNotFoundError('route internals');\n    }),\n    new ThrowCase('request-timeout', 'request-timeout', 'error', () => {\n        throw new ApiRequestTimeoutError('slow internals');\n    }),\n    new ThrowCase('rate-limited', 'rate-limited', 'error', () => {\n        throw new ApiRateLimitedError('quota internals');\n    }),\n    new ThrowCase('implementation', 'implementation', 'error', () => {\n        throw new ApiImplementationError('bug internals');\n    }),\n    new ThrowCase('dependency', 'dependency', 'error', () => {\n        throw new ApiDependencyError('upstream internals');\n    }),\n    new ThrowCase('unavailable', 'unavailable', 'error', () => {\n        throw new ApiUnavailableError('maintenance internals');\n    }),\n    new ThrowCase('dependency-timeout', 'dependency-timeout', 'error', () => {\n        throw new ApiDependencyTimeoutError('upstream slow internals');\n    }),\n    new ThrowCase('dependency-backoff', 'dependency-backoff', 'error', () => {\n        throw new ApiDependencyBackoffError('backoff internals', 42);\n    }),\n    new ThrowCase('connection', 'implementation', 'error', () => {\n        throw new ApiConnectionError('ECONNRESET internals');\n    }),\n    new ThrowCase('raw-error', 'implementation', 'error', () => {\n        throw new Error('SECRET-raw-internals');\n    }),\n    new ThrowCase('thrown-string', 'implementation', 'error', () => {\n        throw 'SECRET-string-internals';\n    }),\n];\n\nexport function raiseFor(query: string): never {\n    const found = THROW_CASES.find((candidate: ThrowCase) => candidate.name === query);\n    if (!found) throw new Error(`unknown throw case ${query}`);\n    return found.raise();\n}\n\n@injectable()\nexport class RemoteMcpController extends RemoteMcpApi {\n    calls = 0;\n    authorization?: string;\n\n    override search(request: RemoteRequest): Promise<RemoteResponse> {\n        this.calls += 1;\n        this.authorization = RequestContext.getRequest()?.getHeader('authorization');\n        return Promise.resolve(\n            new RemoteResponse(\n                RequestContext.getTrusted(REMOTE_USER) ?? 'missing-user',\n                RequestContext.getTrusted(REMOTE_ROLES) ?? 'missing-roles',\n                `remote:${request.query}`,\n            ),\n        );\n    }\n}\n\n@injectable()\nexport class LocalThrowController extends LocalThrowApi {\n    override async fail(request: RemoteRequest): Promise<RemoteResponse> {\n        return raiseFor(request.query);\n    }\n}\n\n@injectable()\nexport class RemoteThrowController extends RemoteThrowApi {\n    override async fail(request: RemoteRequest): Promise<RemoteResponse> {\n        return raiseFor(request.query);\n    }\n}\n\nexport class RecordingOidcMinter {\n    readonly audiences: string[] = [];\n\n    constructor(\n        private readonly failure?: Error,\n        private readonly token = OIDC_TOKEN,\n    ) {}\n\n    mintIdToken(audience: string): Promise<string> {\n        this.audiences.push(audience);\n        if (this.failure) return Promise.reject(this.failure);\n        return Promise.resolve(this.token);\n    }\n}\n\nexport class RecordingOidcVerifier extends OidcHook {\n    readonly tokens: string[] = [];\n    readonly callerLists: string[][] = [];\n\n    override verifyOidc(token: string, callers: string[]): Promise<void> {\n        this.tokens.push(token);\n        this.callerLists.push(callers);\n        if (token !== OIDC_TOKEN) throw new Error(`unexpected OIDC token '${token}'`);\n        return Promise.resolve();\n    }\n}\n\n@injectable()\nexport class BoundaryProbeFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    calls = 0;\n    sawLogIdentity = false;\n    sawTrustedUser?: string;\n\n    override filter(\n        meta: MethodMeta,\n        next: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        this.calls += 1;\n        this.sawLogIdentity =\n            RequestContext.getUntrusted(WebpiecesCoreHeaders.CONTROLLER) ===\n                'RemoteMcpController' &&\n            RequestContext.getUntrusted(WebpiecesCoreHeaders.METHOD) === 'search';\n        this.sawTrustedUser = RequestContext.getTrusted(REMOTE_USER);\n        return next.invoke(meta);\n    }\n}\n\n/**\n * The documented gateway opt-out from http-client-node's \"a dependency's 4xx is OUR 500\" invariant:\n * an MCP gateway relays a Webpieces peer's typed failure so the model sees the same kind it would see\n * for a local binding. `relay = false` answers \"not mine\", which is the framework default.\n */\nexport class RelayWebpiecesPeerErrors implements ErrorTranslators {\n    relay = true;\n\n    toWire(_error: Error): HttpResponseDto | undefined {\n        return undefined;\n    }\n\n    fromWire(response: HttpResponseDto): ApiError | undefined {\n        if (!this.relay || !ApiErrorCodec.isPayload(response.body)) return undefined;\n        const decoded = ApiErrorCodec.decode(response.body);\n        if (!ApiErrorHttpStatus.hasCode(decoded)) return undefined;\n        return ApiErrorHttpStatus.code(decoded) === response.status.code ? decoded : undefined;\n    }\n}\n"]}

package/src/__tests__/WpMcpServerTestFixtures.d.ts

@@ -0,0 +1,60 @@
+import 'reflect-metadata';
+import { Logger, LoggerFactory, LogLevel, ContextKey } from '@webpieces/core-util';
+import { AuthenticatedCaller, JwtHook, MintedJwt } from '@webpieces/http-routing';
+import { McpAccessTokenAuthority, VerifiedMcpCredential } from '../McpAuth';
+export declare const USER_ID: ContextKey<string, "trusted">;
+export declare const ENDPOINT_PATH = "/app-owned/mcp";
+export declare const MODERN_VERSION = "2026-07-28";
+export declare class SearchRequest {
+    query: string;
+}
+export declare class SearchResponse {
+    userId: string;
+    result: string;
+}
+export declare abstract class SearchApi {
+    search(_request: SearchRequest): Promise<SearchResponse>;
+    admin(_request: SearchRequest): Promise<SearchResponse>;
+}
+export declare abstract class RemoteSearchApi {
+    search(_request: SearchRequest): Promise<SearchResponse>;
+}
+export declare class SearchController extends SearchApi {
+    static waitStartedHook?: () => void;
+    static waitAbortedHook?: () => void;
+    adminInvocations: number;
+    search(request: SearchRequest): Promise<SearchResponse>;
+    admin(request: SearchRequest): Promise<SearchResponse>;
+}
+export declare class RemoteSearchClient extends RemoteSearchApi {
+    seenAuthorization?: string;
+    search(request: SearchRequest): Promise<SearchResponse>;
+}
+export declare class TestJwtHook extends JwtHook<string> {
+    mintedTokens: string[];
+    lifetimeSeconds: number;
+    failWith?: Error;
+    mint(subject: string): Promise<MintedJwt>;
+    parseJwt(token: string): Promise<AuthenticatedCaller>;
+}
+export declare class TestTokenAuthority implements McpAccessTokenAuthority<string> {
+    verificationCount: number;
+    roles: readonly string[];
+    mintAccessToken(_grant: string): Promise<never>;
+    verifyAccessToken(token: string, resource: string): Promise<VerifiedMcpCredential>;
+}
+export declare class RecordedLogLine {
+    readonly logger: string;
+    readonly level: LogLevel;
+    readonly message: string;
+    readonly error?: Error | undefined;
+    constructor(logger: string, level: LogLevel, message: string, error?: Error | undefined);
+    /** The rendered line an operator would see, including an attached error's message and stack. */
+    rendered(): string;
+}
+/** Captures every log line in-process so tests can count and level-check operator output. */
+export declare class RecordingLoggerFactory implements LoggerFactory {
+    readonly lines: RecordedLogLine[];
+    getLogger(name: string): Logger;
+    containing(text: string): RecordedLogLine[];
+}