@webpieces/mcp-server 0.4.788 → 0.4.790

package/src/__tests__/McpRemoteFixtures.js

@@ -8,6 +8,7 @@ const inversify_1 = require("inversify");
 const core_util_1 = require("@webpieces/core-util");
 const core_context_1 = require("@webpieces/core-context");
 const http_routing_1 = require("@webpieces/http-routing");
+const http_server_1 = require("@webpieces/http-server");
 /** Contracts, controllers and test doubles for McpRemoteBinding.integration.spec.ts. */
 exports.REMOTE_USER = core_util_1.ContextKey.trusted('mcpRemoteUser', 'verified by the MCP access-token authority before delegation', 'x-mcp-remote-user');
 exports.REMOTE_ROLES = core_util_1.ContextKey.trusted('mcpRemoteRoles', 'verified by the MCP access-token authority before delegation', 'x-mcp-remote-roles');
@@ -239,37 +240,44 @@ tslib_1.__decorate([
 exports.RemoteThrowApi = RemoteThrowApi = tslib_1.__decorate([
     (0, core_util_1.ApiPath)('/remote-throw')
 ], RemoteThrowApi);
-/** One named throw, run identically behind the local and the remote binding. */
+/**
+ * One named throw, run identically behind the local and the remote binding.
+ *
+ * `expectedServerLevel` is the level of the ONE operator line the failure now produces on the server
+ * that raised it — `LogApiCall`'s, at `warn` for `[API-server-resp-OTHER]` (a healthy rejection of
+ * the caller's mistake) and `error` for `[API-server-resp-FAIL]`. `ApiErrorBoundary` no longer
+ * writes a second line of its own (#961).
+ */
 class ThrowCase {
     name;
     expectedKind;
-    expectedLevel;
+    expectedServerLevel;
     raise;
-    constructor(name, expectedKind, expectedLevel, raise) {
+    constructor(name, expectedKind, expectedServerLevel, raise) {
         this.name = name;
         this.expectedKind = expectedKind;
-        this.expectedLevel = expectedLevel;
+        this.expectedServerLevel = expectedServerLevel;
         this.raise = raise;
     }
 }
 exports.ThrowCase = ThrowCase;
 exports.THROW_CASES = [
-    new ThrowCase('end-user', 'end-user', 'info', () => {
+    new ThrowCase('end-user', 'end-user', 'warn', () => {
         throw new core_util_1.ApiEndUserError('The two passwords you entered do not match.', 'PW_MISMATCH');
     }),
-    new ThrowCase('bad-request', 'bad-request', 'info', () => {
+    new ThrowCase('bad-request', 'bad-request', 'warn', () => {
         throw new core_util_1.ApiBadRequestError('internal column name', '$.query', 'query must be a word');
     }),
-    new ThrowCase('unauthorized', 'unauthorized', 'info', () => {
+    new ThrowCase('unauthorized', 'unauthorized', 'warn', () => {
         throw new core_util_1.ApiUnauthorizedError('session internals');
     }),
-    new ThrowCase('forbidden', 'forbidden', 'info', () => {
+    new ThrowCase('forbidden', 'forbidden', 'warn', () => {
         throw new core_util_1.ApiForbiddenError('acl internals');
     }),
-    new ThrowCase('not-found', 'not-found', 'info', () => {
+    new ThrowCase('not-found', 'not-found', 'warn', () => {
         throw new core_util_1.ApiNotFoundError('row 7 missing');
     }),
-    new ThrowCase('endpoint-not-found', 'endpoint-not-found', 'info', () => {
+    new ThrowCase('endpoint-not-found', 'endpoint-not-found', 'warn', () => {
         throw new core_util_1.ApiEndpointNotFoundError('route internals');
     }),
     new ThrowCase('request-timeout', 'request-timeout', 'error', () => {
@@ -278,22 +286,22 @@ exports.THROW_CASES = [
     new ThrowCase('rate-limited', 'rate-limited', 'error', () => {
         throw new core_util_1.ApiRateLimitedError('quota internals');
     }),
-    new ThrowCase('conflict', 'conflict', 'info', () => {
+    new ThrowCase('conflict', 'conflict', 'warn', () => {
         throw new core_util_1.ApiConflictError('version internals');
     }),
-    new ThrowCase('unprocessable', 'unprocessable', 'info', () => {
+    new ThrowCase('unprocessable', 'unprocessable', 'warn', () => {
         throw new core_util_1.ApiUnprocessableError('rule internals');
     }),
-    new ThrowCase('precondition-failed', 'precondition-failed', 'info', () => {
+    new ThrowCase('precondition-failed', 'precondition-failed', 'warn', () => {
         throw new core_util_1.ApiPreconditionFailedError('etag internals');
     }),
-    new ThrowCase('unsupported-media-type', 'unsupported-media-type', 'info', () => {
+    new ThrowCase('unsupported-media-type', 'unsupported-media-type', 'warn', () => {
         throw new core_util_1.ApiUnsupportedMediaTypeError('parser internals');
     }),
     new ThrowCase('not-implemented', 'not-implemented', 'error', () => {
         throw new core_util_1.ApiNotImplementedError('feature internals');
     }),
-    new ThrowCase('coded-4xx', 'coded', 'info', () => {
+    new ThrowCase('coded-4xx', 'coded', 'warn', () => {
         throw new core_util_1.ApiCodedError('quota internals', 460, 'QUOTA');
     }),
     new ThrowCase('coded-5xx', 'coded', 'error', () => {
@@ -414,8 +422,8 @@ exports.BoundaryProbeFilter = BoundaryProbeFilter = tslib_1.__decorate([
  */
 class RelayWebpiecesPeerErrors {
     relay = true;
-    toWire(_error) {
-        return undefined;
+    toWire(error) {
+        return new http_server_1.ApiErrorHttpMapper('gui').toResponse(error);
     }
     fromWire(response) {
         if (!this.relay || !core_util_1.ApiErrorCodec.isPayload(response.body))
@@ -423,7 +431,10 @@ class RelayWebpiecesPeerErrors {
         const decoded = core_util_1.ApiErrorCodec.decode(response.body);
         if (!core_util_1.ApiErrorHttpStatus.hasCode(decoded))
             return undefined;
-        return core_util_1.ApiErrorHttpStatus.code(decoded) === response.status.code ? decoded : undefined;
+        const statusCode = decoded instanceof core_util_1.ApiCodedError ? decoded.statusCode : undefined;
+        return core_util_1.ApiErrorHttpStatus.codeFor(decoded.kind, statusCode) === response.status.code
+            ? decoded
+            : undefined;
     }
 }
 exports.RelayWebpiecesPeerErrors = RelayWebpiecesPeerErrors;

package/src/__tests__/McpRemoteFixtures.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpRemoteFixtures.js","sourceRoot":"","sources":["../../../../../../packages/http/mcp-server/src/__tests__/McpRemoteFixtures.ts"],"names":[],"mappings":";;;AA+SA,4BAIC;;AAnTD,4BAA0B;AAC1B,yCAAuC;AACvC,oDAyC8B;AAC9B,0DAAyD;AACzD,0DAA2E;AAE3E,wFAAwF;AAE3E,QAAA,WAAW,GAAG,sBAAU,CAAC,OAAO,CACzC,eAAe,EACf,8DAA8D,EAC9D,mBAAmB,CACtB,CAAC;AACW,QAAA,YAAY,GAAG,sBAAU,CAAC,OAAO,CAC1C,gBAAgB,EAChB,8DAA8D,EAC9D,oBAAoB,CACvB,CAAC;AACW,QAAA,cAAc,GAAG,wBAAwB,CAAC;AAC1C,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,UAAU,GAAG,iCAAiC,CAAC;AAC/C,QAAA,mBAAmB,GAAG,2BAA2B,CAAC;AAClD,QAAA,kBAAkB,GAAG,uDAAuD,CAAC;AAC7E,QAAA,YAAY,GAAG,cAAc,CAAC;AAGpC,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEtB,KAAK,CAAU;IAEf,YAAY,KAAc;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAChD,CAAC;CACJ,CAAA;AAPY,sCAAa;AAEtB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;;4CACxC;wBAFN,aAAa;IADzB,IAAA,iBAAK,GAAE;;GACK,aAAa,CAOzB;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEvB,IAAI,CAAU;IAGd,KAAK,CAAU;IAGf,MAAM,CAAU;IAEhB,YAAY,IAAa,EAAE,KAAc,EAAE,MAAe;QACtD,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACnD,CAAC;CACJ,CAAA;AAfY,wCAAc;AAEvB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;;4CAC5C;AAGd;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;;6CAC5C;AAGf;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;;8CAClC;yBARP,cAAc;IAD1B,IAAA,iBAAK,GAAE;;GACK,cAAc,CAe1B;AAGM,IAAe,YAAY,GAA3B,MAAe,YAAY;IAY9B,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,oCAAY;AAY9B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;0CAE7B;uBAdiB,YAAY;IADjC,IAAA,mBAAO,EAAC,aAAa,CAAC;GACD,YAAY,CAejC;AAGM,IAAe,mBAAmB,GAAlC,MAAe,mBAAmB;IAYrC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,kDAAmB;AAYrC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,6BAA6B;QAC1C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;iDAE7B;8BAdiB,mBAAmB;IADxC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,mBAAmB,CAexC;AAGM,IAAe,gBAAgB,GAA/B,MAAe,gBAAgB;IAYlC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,4CAAgB;AAYlC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;8CAE7B;2BAdiB,gBAAgB;IADrC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,gBAAgB,CAerC;AAGM,IAAe,gBAAgB,GAA/B,MAAe,gBAAgB;IAYlC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,4CAAgB;AAYlC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,8BAA8B;QAC3C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;8CAE7B;2BAdiB,gBAAgB;IADrC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,gBAAgB,CAerC;AAGM,IAAe,iBAAiB,GAAhC,MAAe,iBAAiB;IAYnC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,8CAAiB;AAYnC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,kCAAkC;QAC/C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;+CAE7B;4BAdiB,iBAAiB;IADtC,IAAA,mBAAO,EAAC,uBAAuB,CAAC;GACX,iBAAiB,CAetC;AAGM,IAAe,aAAa,GAA5B,MAAe,aAAa;IAY/B,IAAI,CAAC,QAAuB;QACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,sCAAa;AAY/B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,qBAAS,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACa,aAAa;;yCAE3B;wBAdiB,aAAa;IADlC,IAAA,mBAAO,EAAC,cAAc,CAAC;GACF,aAAa,CAelC;AAGM,IAAe,cAAc,GAA7B,MAAe,cAAc;IAYhC,IAAI,CAAC,QAAuB;QACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,wCAAc;AAYhC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wCAAwC;QACrD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACa,aAAa;;0CAE3B;yBAdiB,cAAc;IADnC,IAAA,mBAAO,EAAC,eAAe,CAAC;GACH,cAAc,CAenC;AAED,gFAAgF;AAChF,MAAa,SAAS;IAEE;IACA;IACA;IACA;IAJpB,YACoB,IAAY,EACZ,YAAoB,EACpB,aAAuB,EACvB,KAAkB;QAHlB,SAAI,GAAJ,IAAI,CAAQ;QACZ,iBAAY,GAAZ,YAAY,CAAQ;QACpB,kBAAa,GAAb,aAAa,CAAU;QACvB,UAAK,GAAL,KAAK,CAAa;IACnC,CAAC;CACP;AAPD,8BAOC;AAEY,QAAA,WAAW,GAAyB;IAC7C,IAAI,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,2BAAe,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,8BAAkB,CAAC,sBAAsB,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,gCAAoB,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,6BAAiB,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,4BAAgB,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,oCAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,kCAAsB,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,+BAAmB,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,4BAAgB,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,iCAAqB,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,sCAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,wCAA4B,CAAC,kBAAkB,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,kCAAsB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,yBAAa,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,yBAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,kCAAsB,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,8BAAkB,CAAC,oBAAoB,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,+BAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,qCAAyB,CAAC,yBAAyB,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,qCAAyB,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,8BAAkB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC3D,MAAM,yBAAyB,CAAC;IACpC,CAAC,CAAC;CACL,CAAC;AAEF,SAAgB,QAAQ,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,mBAAW,CAAC,IAAI,CAAC,CAAC,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,YAAY;IACjD,KAAK,GAAG,CAAC,CAAC;IACV,aAAa,CAAU;IAEd,MAAM,CAAC,OAAsB;QAClC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,aAAa,GAAG,6BAAc,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC,OAAO,CAClB,IAAI,cAAc,CACd,6BAAc,CAAC,UAAU,CAAC,mBAAW,CAAC,IAAI,cAAc,EACxD,6BAAc,CAAC,UAAU,CAAC,oBAAY,CAAC,IAAI,eAAe,EAC1D,UAAU,OAAO,CAAC,KAAK,EAAE,CAC5B,CACJ,CAAC;IACN,CAAC;CACJ,CAAA;AAfY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAe/B;AAGM,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,aAAa;IAC1C,KAAK,CAAC,IAAI,CAAC,OAAsB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AAJY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,sBAAU,GAAE;GACA,oBAAoB,CAIhC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,cAAc;IAC5C,KAAK,CAAC,IAAI,CAAC,OAAsB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AAJY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,GAAE;GACA,qBAAqB,CAIjC;AAED,MAAa,mBAAmB;IAIP;IACA;IAJZ,SAAS,GAAa,EAAE,CAAC;IAElC,YACqB,OAAe,EACf,QAAQ,kBAAU;QADlB,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAa;IACpC,CAAC;IAEJ,WAAW,CAAC,QAAgB;QACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;CACJ;AAbD,kDAaC;AAED,MAAa,qBAAsB,SAAQ,uBAAQ;IACtC,MAAM,GAAa,EAAE,CAAC;IACtB,WAAW,GAAe,EAAE,CAAC;IAE7B,UAAU,CAAC,KAAa,EAAE,OAAiB;QAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,kBAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,GAAG,CAAC,CAAC;QAC9E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ;AAVD,sDAUC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,kBAAuC;IAC5E,KAAK,GAAG,CAAC,CAAC;IACV,cAAc,GAAG,KAAK,CAAC;IACvB,cAAc,CAAU;IAEf,MAAM,CACX,IAAgB,EAChB,IAA8C;QAE9C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,cAAc;YACf,6BAAc,CAAC,YAAY,CAAC,gCAAoB,CAAC,UAAU,CAAC;gBACxD,qBAAqB;gBACzB,6BAAc,CAAC,YAAY,CAAC,gCAAoB,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,6BAAc,CAAC,UAAU,CAAC,mBAAW,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;CACJ,CAAA;AAjBY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAiB/B;AAED;;;;GAIG;AACH,MAAa,wBAAwB;IACjC,KAAK,GAAG,IAAI,CAAC;IAEb,MAAM,CAAC,MAAa;QAChB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,QAAQ,CAAC,QAAyB;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,yBAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,OAAO,GAAG,yBAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,8BAAkB,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,OAAO,8BAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;CACJ;AAbD,4DAaC","sourcesContent":["import 'reflect-metadata';\nimport { injectable } from 'inversify';\nimport {\n    ApiBadRequestError,\n    ApiCodedError,\n    ApiConflictError,\n    ApiConnectionError,\n    ApiDependencyBackoffError,\n    ApiDependencyError,\n    ApiDependencyTimeoutError,\n    ApiEndpointNotFoundError,\n    ApiEndUserError,\n    ApiError,\n    ApiErrorCodec,\n    ApiErrorHttpStatus,\n    ApiForbiddenError,\n    ApiImplementationError,\n    ApiNotFoundError,\n    ApiNotImplementedError,\n    ApiPath,\n    ApiPreconditionFailedError,\n    ApiRateLimitedError,\n    ApiRequestTimeoutError,\n    ApiUnauthorizedError,\n    ApiUnavailableError,\n    ApiUnprocessableError,\n    ApiUnsupportedMediaTypeError,\n    ContextKey,\n    Endpoint,\n    ErrorTranslators,\n    Filter,\n    HttpResponseDto,\n    LogLevel,\n    Service,\n    WebpiecesCoreHeaders,\n    WpAuthJwt,\n    WpAuthOidc,\n    WpDto,\n    WpDtoField,\n    WpDtoFieldOptions,\n    WpMcpAuthJwt,\n    WpMcpTool,\n    WpResponseDto,\n} from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\nimport { MethodMeta, OidcHook, WpResponse } from '@webpieces/http-routing';\n\n/** Contracts, controllers and test doubles for McpRemoteBinding.integration.spec.ts. */\n\nexport const REMOTE_USER = ContextKey.trusted<string>(\n    'mcpRemoteUser',\n    'verified by the MCP access-token authority before delegation',\n    'x-mcp-remote-user',\n);\nexport const REMOTE_ROLES = ContextKey.trusted<string>(\n    'mcpRemoteRoles',\n    'verified by the MCP access-token authority before delegation',\n    'x-mcp-remote-roles',\n);\nexport const REMOTE_SERVICE = 'mcp-remote-integration';\nexport const REFUSED_SERVICE = 'mcp-remote-refused';\nexport const GARBAGE_SERVICE = 'mcp-remote-garbage';\nexport const OIDC_TOKEN = 'oidc-for-mcp-remote-integration';\nexport const EXTERNAL_MCP_BEARER = 'external-mcp-access-token';\nexport const LOCAL_ENDPOINT_JWT = 'local-endpoint-jwt-that-must-not-cross-the-remote-hop';\nexport const GATEWAY_PATH = '/gateway/mcp';\n\n@WpDto()\nexport class RemoteRequest {\n    @WpDtoField(new WpDtoFieldOptions('Search text', true))\n    query!: string;\n\n    constructor(query?: string) {\n        if (query !== undefined) this.query = query;\n    }\n}\n\n@WpDto()\nexport class RemoteResponse {\n    @WpDtoField(new WpDtoFieldOptions('Delegated user', true))\n    user!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Delegated roles', true))\n    roles!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Result', true))\n    result!: string;\n\n    constructor(user?: string, roles?: string, result?: string) {\n        if (user !== undefined) this.user = user;\n        if (roles !== undefined) this.roles = roles;\n        if (result !== undefined) this.result = result;\n    }\n}\n\n@ApiPath('/remote-mcp')\nexport abstract class RemoteMcpApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'remote_integration_search',\n        description: 'Calls a remote Webpieces API.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/missing-remote-mcp')\nexport abstract class MissingRemoteMcpApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'missing_remote_integration_search',\n        description: 'Intentionally absent route.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/refused-remote-mcp')\nexport abstract class RefusedRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'refused_remote',\n        description: 'Nothing listens on this port.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/garbage-remote-mcp')\nexport abstract class GarbageRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'garbage_remote',\n        description: 'Answers an undecodable body.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/oidc-fail-remote-mcp')\nexport abstract class OidcFailRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'oidc_fail_remote',\n        description: 'Its OIDC token cannot be minted.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/local-throw')\nexport abstract class LocalThrowApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthJwt({ allRolesAllowed: true })\n    @Endpoint('/throw', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'local_throw',\n        description: 'Throws the requested failure in-process.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    fail(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/remote-throw')\nexport abstract class RemoteThrowApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/throw', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'remote_throw',\n        description: 'Throws the requested failure remotely.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    fail(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n/** One named throw, run identically behind the local and the remote binding. */\nexport class ThrowCase {\n    constructor(\n        public readonly name: string,\n        public readonly expectedKind: string,\n        public readonly expectedLevel: LogLevel,\n        public readonly raise: () => never,\n    ) {}\n}\n\nexport const THROW_CASES: readonly ThrowCase[] = [\n    new ThrowCase('end-user', 'end-user', 'info', () => {\n        throw new ApiEndUserError('The two passwords you entered do not match.', 'PW_MISMATCH');\n    }),\n    new ThrowCase('bad-request', 'bad-request', 'info', () => {\n        throw new ApiBadRequestError('internal column name', '$.query', 'query must be a word');\n    }),\n    new ThrowCase('unauthorized', 'unauthorized', 'info', () => {\n        throw new ApiUnauthorizedError('session internals');\n    }),\n    new ThrowCase('forbidden', 'forbidden', 'info', () => {\n        throw new ApiForbiddenError('acl internals');\n    }),\n    new ThrowCase('not-found', 'not-found', 'info', () => {\n        throw new ApiNotFoundError('row 7 missing');\n    }),\n    new ThrowCase('endpoint-not-found', 'endpoint-not-found', 'info', () => {\n        throw new ApiEndpointNotFoundError('route internals');\n    }),\n    new ThrowCase('request-timeout', 'request-timeout', 'error', () => {\n        throw new ApiRequestTimeoutError('slow internals');\n    }),\n    new ThrowCase('rate-limited', 'rate-limited', 'error', () => {\n        throw new ApiRateLimitedError('quota internals');\n    }),\n    new ThrowCase('conflict', 'conflict', 'info', () => {\n        throw new ApiConflictError('version internals');\n    }),\n    new ThrowCase('unprocessable', 'unprocessable', 'info', () => {\n        throw new ApiUnprocessableError('rule internals');\n    }),\n    new ThrowCase('precondition-failed', 'precondition-failed', 'info', () => {\n        throw new ApiPreconditionFailedError('etag internals');\n    }),\n    new ThrowCase('unsupported-media-type', 'unsupported-media-type', 'info', () => {\n        throw new ApiUnsupportedMediaTypeError('parser internals');\n    }),\n    new ThrowCase('not-implemented', 'not-implemented', 'error', () => {\n        throw new ApiNotImplementedError('feature internals');\n    }),\n    new ThrowCase('coded-4xx', 'coded', 'info', () => {\n        throw new ApiCodedError('quota internals', 460, 'QUOTA');\n    }),\n    new ThrowCase('coded-5xx', 'coded', 'error', () => {\n        throw new ApiCodedError('disk internals', 507);\n    }),\n    new ThrowCase('implementation', 'implementation', 'error', () => {\n        throw new ApiImplementationError('bug internals');\n    }),\n    new ThrowCase('dependency', 'dependency', 'error', () => {\n        throw new ApiDependencyError('upstream internals');\n    }),\n    new ThrowCase('unavailable', 'unavailable', 'error', () => {\n        throw new ApiUnavailableError('maintenance internals');\n    }),\n    new ThrowCase('dependency-timeout', 'dependency-timeout', 'error', () => {\n        throw new ApiDependencyTimeoutError('upstream slow internals');\n    }),\n    new ThrowCase('dependency-backoff', 'dependency-backoff', 'error', () => {\n        throw new ApiDependencyBackoffError('backoff internals', 42);\n    }),\n    new ThrowCase('connection', 'implementation', 'error', () => {\n        throw new ApiConnectionError('ECONNRESET internals');\n    }),\n    new ThrowCase('raw-error', 'implementation', 'error', () => {\n        throw new Error('SECRET-raw-internals');\n    }),\n    new ThrowCase('thrown-string', 'implementation', 'error', () => {\n        throw 'SECRET-string-internals';\n    }),\n];\n\nexport function raiseFor(query: string): never {\n    const found = THROW_CASES.find((candidate: ThrowCase) => candidate.name === query);\n    if (!found) throw new Error(`unknown throw case ${query}`);\n    return found.raise();\n}\n\n@injectable()\nexport class RemoteMcpController extends RemoteMcpApi {\n    calls = 0;\n    authorization?: string;\n\n    override search(request: RemoteRequest): Promise<RemoteResponse> {\n        this.calls += 1;\n        this.authorization = RequestContext.getRequest()?.getHeader('authorization');\n        return Promise.resolve(\n            new RemoteResponse(\n                RequestContext.getTrusted(REMOTE_USER) ?? 'missing-user',\n                RequestContext.getTrusted(REMOTE_ROLES) ?? 'missing-roles',\n                `remote:${request.query}`,\n            ),\n        );\n    }\n}\n\n@injectable()\nexport class LocalThrowController extends LocalThrowApi {\n    override async fail(request: RemoteRequest): Promise<RemoteResponse> {\n        return raiseFor(request.query);\n    }\n}\n\n@injectable()\nexport class RemoteThrowController extends RemoteThrowApi {\n    override async fail(request: RemoteRequest): Promise<RemoteResponse> {\n        return raiseFor(request.query);\n    }\n}\n\nexport class RecordingOidcMinter {\n    readonly audiences: string[] = [];\n\n    constructor(\n        private readonly failure?: Error,\n        private readonly token = OIDC_TOKEN,\n    ) {}\n\n    mintIdToken(audience: string): Promise<string> {\n        this.audiences.push(audience);\n        if (this.failure) return Promise.reject(this.failure);\n        return Promise.resolve(this.token);\n    }\n}\n\nexport class RecordingOidcVerifier extends OidcHook {\n    readonly tokens: string[] = [];\n    readonly callerLists: string[][] = [];\n\n    override verifyOidc(token: string, callers: string[]): Promise<void> {\n        this.tokens.push(token);\n        this.callerLists.push(callers);\n        if (token !== OIDC_TOKEN) throw new Error(`unexpected OIDC token '${token}'`);\n        return Promise.resolve();\n    }\n}\n\n@injectable()\nexport class BoundaryProbeFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    calls = 0;\n    sawLogIdentity = false;\n    sawTrustedUser?: string;\n\n    override filter(\n        meta: MethodMeta,\n        next: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        this.calls += 1;\n        this.sawLogIdentity =\n            RequestContext.getUntrusted(WebpiecesCoreHeaders.CONTROLLER) ===\n                'RemoteMcpController' &&\n            RequestContext.getUntrusted(WebpiecesCoreHeaders.METHOD) === 'search';\n        this.sawTrustedUser = RequestContext.getTrusted(REMOTE_USER);\n        return next.invoke(meta);\n    }\n}\n\n/**\n * The documented gateway opt-out from http-client-node's \"a dependency's 4xx is OUR 500\" invariant:\n * an MCP gateway relays a Webpieces peer's typed failure so the model sees the same kind it would see\n * for a local binding. `relay = false` answers \"not mine\", which is the framework default.\n */\nexport class RelayWebpiecesPeerErrors implements ErrorTranslators {\n    relay = true;\n\n    toWire(_error: Error): HttpResponseDto | undefined {\n        return undefined;\n    }\n\n    fromWire(response: HttpResponseDto): ApiError | undefined {\n        if (!this.relay || !ApiErrorCodec.isPayload(response.body)) return undefined;\n        const decoded = ApiErrorCodec.decode(response.body);\n        if (!ApiErrorHttpStatus.hasCode(decoded)) return undefined;\n        return ApiErrorHttpStatus.code(decoded) === response.status.code ? decoded : undefined;\n    }\n}\n"]}
+{"version":3,"file":"McpRemoteFixtures.js","sourceRoot":"","sources":["../../../../../../packages/http/mcp-server/src/__tests__/McpRemoteFixtures.ts"],"names":[],"mappings":";;;AAsTA,4BAIC;;AA1TD,4BAA0B;AAC1B,yCAAuC;AACvC,oDAwC8B;AAC9B,0DAAyD;AACzD,0DAA2E;AAC3E,wDAA4D;AAE5D,wFAAwF;AAE3E,QAAA,WAAW,GAAG,sBAAU,CAAC,OAAO,CACzC,eAAe,EACf,8DAA8D,EAC9D,mBAAmB,CACtB,CAAC;AACW,QAAA,YAAY,GAAG,sBAAU,CAAC,OAAO,CAC1C,gBAAgB,EAChB,8DAA8D,EAC9D,oBAAoB,CACvB,CAAC;AACW,QAAA,cAAc,GAAG,wBAAwB,CAAC;AAC1C,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,UAAU,GAAG,iCAAiC,CAAC;AAC/C,QAAA,mBAAmB,GAAG,2BAA2B,CAAC;AAClD,QAAA,kBAAkB,GAAG,uDAAuD,CAAC;AAC7E,QAAA,YAAY,GAAG,cAAc,CAAC;AAGpC,IAAM,aAAa,GAAnB,MAAM,aAAa;IAEtB,KAAK,CAAU;IAEf,YAAY,KAAc;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAChD,CAAC;CACJ,CAAA;AAPY,sCAAa;AAEtB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;;4CACxC;wBAFN,aAAa;IADzB,IAAA,iBAAK,GAAE;;GACK,aAAa,CAOzB;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEvB,IAAI,CAAU;IAGd,KAAK,CAAU;IAGf,MAAM,CAAU;IAEhB,YAAY,IAAa,EAAE,KAAc,EAAE,MAAe;QACtD,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACnD,CAAC;CACJ,CAAA;AAfY,wCAAc;AAEvB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;;4CAC5C;AAGd;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;;6CAC5C;AAGf;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;;8CAClC;yBARP,cAAc;IAD1B,IAAA,iBAAK,GAAE;;GACK,cAAc,CAe1B;AAGM,IAAe,YAAY,GAA3B,MAAe,YAAY;IAY9B,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,oCAAY;AAY9B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;0CAE7B;uBAdiB,YAAY;IADjC,IAAA,mBAAO,EAAC,aAAa,CAAC;GACD,YAAY,CAejC;AAGM,IAAe,mBAAmB,GAAlC,MAAe,mBAAmB;IAYrC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,kDAAmB;AAYrC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,6BAA6B;QAC1C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;iDAE7B;8BAdiB,mBAAmB;IADxC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,mBAAmB,CAexC;AAGM,IAAe,gBAAgB,GAA/B,MAAe,gBAAgB;IAYlC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,4CAAgB;AAYlC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,+BAA+B;QAC5C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;8CAE7B;2BAdiB,gBAAgB;IADrC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,gBAAgB,CAerC;AAGM,IAAe,gBAAgB,GAA/B,MAAe,gBAAgB;IAYlC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,4CAAgB;AAYlC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,8BAA8B;QAC3C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;8CAE7B;2BAdiB,gBAAgB;IADrC,IAAA,mBAAO,EAAC,qBAAqB,CAAC;GACT,gBAAgB,CAerC;AAGM,IAAe,iBAAiB,GAAhC,MAAe,iBAAiB;IAYnC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,8CAAiB;AAYnC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,kCAAkC;QAC/C,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;+CAE7B;4BAdiB,iBAAiB;IADtC,IAAA,mBAAO,EAAC,uBAAuB,CAAC;GACX,iBAAiB,CAetC;AAGM,IAAe,aAAa,GAA5B,MAAe,aAAa;IAY/B,IAAI,CAAC,QAAuB;QACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,sCAAa;AAY/B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,qBAAS,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,0CAA0C;QACvD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACa,aAAa;;yCAE3B;wBAdiB,aAAa;IADlC,IAAA,mBAAO,EAAC,cAAc,CAAC;GACF,aAAa,CAelC;AAGM,IAAe,cAAc,GAA7B,MAAe,cAAc;IAYhC,IAAI,CAAC,QAAuB;QACxB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAfqB,wCAAc;AAYhC;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,EAAC,aAAa,CAAC;IACzB,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wCAAwC;QACrD,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACa,aAAa;;0CAE3B;yBAdiB,cAAc;IADnC,IAAA,mBAAO,EAAC,eAAe,CAAC;GACH,cAAc,CAenC;AAED;;;;;;;GAOG;AACH,MAAa,SAAS;IAEE;IACA;IACA;IACA;IAJpB,YACoB,IAAY,EACZ,YAAoB,EACpB,mBAA6B,EAC7B,KAAkB;QAHlB,SAAI,GAAJ,IAAI,CAAQ;QACZ,iBAAY,GAAZ,YAAY,CAAQ;QACpB,wBAAmB,GAAnB,mBAAmB,CAAU;QAC7B,UAAK,GAAL,KAAK,CAAa;IACnC,CAAC;CACP;AAPD,8BAOC;AAEY,QAAA,WAAW,GAAyB;IAC7C,IAAI,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,2BAAe,CAAC,6CAA6C,EAAE,aAAa,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,8BAAkB,CAAC,sBAAsB,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC5F,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,gCAAoB,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,6BAAiB,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,4BAAgB,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,oCAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,kCAAsB,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,+BAAmB,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,4BAAgB,CAAC,mBAAmB,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,iCAAqB,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,sCAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,wCAA4B,CAAC,kBAAkB,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,kCAAsB,CAAC,mBAAmB,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,yBAAa,CAAC,iBAAiB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,yBAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,kCAAsB,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,8BAAkB,CAAC,oBAAoB,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,+BAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,qCAAyB,CAAC,yBAAyB,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,EAAE;QACpE,MAAM,IAAI,qCAAyB,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,8BAAkB,CAAC,sBAAsB,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,SAAS,CAAC,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;QAC3D,MAAM,yBAAyB,CAAC;IACpC,CAAC,CAAC;CACL,CAAC;AAEF,SAAgB,QAAQ,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,mBAAW,CAAC,IAAI,CAAC,CAAC,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,YAAY;IACjD,KAAK,GAAG,CAAC,CAAC;IACV,aAAa,CAAU;IAEd,MAAM,CAAC,OAAsB;QAClC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,aAAa,GAAG,6BAAc,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7E,OAAO,OAAO,CAAC,OAAO,CAClB,IAAI,cAAc,CACd,6BAAc,CAAC,UAAU,CAAC,mBAAW,CAAC,IAAI,cAAc,EACxD,6BAAc,CAAC,UAAU,CAAC,oBAAY,CAAC,IAAI,eAAe,EAC1D,UAAU,OAAO,CAAC,KAAK,EAAE,CAC5B,CACJ,CAAC;IACN,CAAC;CACJ,CAAA;AAfY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAe/B;AAGM,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,aAAa;IAC1C,KAAK,CAAC,IAAI,CAAC,OAAsB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AAJY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,sBAAU,GAAE;GACA,oBAAoB,CAIhC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAsB,SAAQ,cAAc;IAC5C,KAAK,CAAC,IAAI,CAAC,OAAsB;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACJ,CAAA;AAJY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,sBAAU,GAAE;GACA,qBAAqB,CAIjC;AAED,MAAa,mBAAmB;IAIP;IACA;IAJZ,SAAS,GAAa,EAAE,CAAC;IAElC,YACqB,OAAe,EACf,QAAQ,kBAAU;QADlB,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAa;IACpC,CAAC;IAEJ,WAAW,CAAC,QAAgB;QACxB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;CACJ;AAbD,kDAaC;AAED,MAAa,qBAAsB,SAAQ,uBAAQ;IACtC,MAAM,GAAa,EAAE,CAAC;IACtB,WAAW,GAAe,EAAE,CAAC;IAE7B,UAAU,CAAC,KAAa,EAAE,OAAiB;QAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,kBAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,GAAG,CAAC,CAAC;QAC9E,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ;AAVD,sDAUC;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,kBAAuC;IAC5E,KAAK,GAAG,CAAC,CAAC;IACV,cAAc,GAAG,KAAK,CAAC;IACvB,cAAc,CAAU;IAEf,MAAM,CACX,IAAgB,EAChB,IAA8C;QAE9C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,cAAc;YACf,6BAAc,CAAC,YAAY,CAAC,gCAAoB,CAAC,UAAU,CAAC;gBACxD,qBAAqB;gBACzB,6BAAc,CAAC,YAAY,CAAC,gCAAoB,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,6BAAc,CAAC,UAAU,CAAC,mBAAW,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;CACJ,CAAA;AAjBY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,sBAAU,GAAE;GACA,mBAAmB,CAiB/B;AAED;;;;GAIG;AACH,MAAa,wBAAwB;IACjC,KAAK,GAAG,IAAI,CAAC;IAEb,MAAM,CAAC,KAAY;QACf,OAAO,IAAI,gCAAkB,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,QAAQ,CAAC,QAAyB;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,yBAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7E,MAAM,OAAO,GAAG,yBAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,8BAAkB,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,UAAU,GAAG,OAAO,YAAY,yBAAa,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,OAAO,8BAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,IAAI;YAChF,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;CACJ;AAhBD,4DAgBC","sourcesContent":["import 'reflect-metadata';\nimport { injectable } from 'inversify';\nimport {\n    ApiBadRequestError,\n    ApiCodedError,\n    ApiConflictError,\n    ApiConnectionError,\n    ApiDependencyBackoffError,\n    ApiDependencyError,\n    ApiDependencyTimeoutError,\n    ApiEndpointNotFoundError,\n    ApiEndUserError,\n    ApiErrorCodec,\n    ApiErrorHttpStatus,\n    ApiForbiddenError,\n    ApiImplementationError,\n    ApiNotFoundError,\n    ApiNotImplementedError,\n    ApiPath,\n    ApiPreconditionFailedError,\n    ApiRateLimitedError,\n    ApiRequestTimeoutError,\n    ApiUnauthorizedError,\n    ApiUnavailableError,\n    ApiUnprocessableError,\n    ApiUnsupportedMediaTypeError,\n    ContextKey,\n    Endpoint,\n    ErrorTranslators,\n    Filter,\n    HttpResponseDto,\n    LogLevel,\n    Service,\n    WebpiecesCoreHeaders,\n    WpAuthJwt,\n    WpAuthOidc,\n    WpDto,\n    WpDtoField,\n    WpDtoFieldOptions,\n    WpMcpAuthJwt,\n    WpMcpTool,\n    WpResponseDto,\n} from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\nimport { MethodMeta, OidcHook, WpResponse } from '@webpieces/http-routing';\nimport { ApiErrorHttpMapper } from '@webpieces/http-server';\n\n/** Contracts, controllers and test doubles for McpRemoteBinding.integration.spec.ts. */\n\nexport const REMOTE_USER = ContextKey.trusted<string>(\n    'mcpRemoteUser',\n    'verified by the MCP access-token authority before delegation',\n    'x-mcp-remote-user',\n);\nexport const REMOTE_ROLES = ContextKey.trusted<string>(\n    'mcpRemoteRoles',\n    'verified by the MCP access-token authority before delegation',\n    'x-mcp-remote-roles',\n);\nexport const REMOTE_SERVICE = 'mcp-remote-integration';\nexport const REFUSED_SERVICE = 'mcp-remote-refused';\nexport const GARBAGE_SERVICE = 'mcp-remote-garbage';\nexport const OIDC_TOKEN = 'oidc-for-mcp-remote-integration';\nexport const EXTERNAL_MCP_BEARER = 'external-mcp-access-token';\nexport const LOCAL_ENDPOINT_JWT = 'local-endpoint-jwt-that-must-not-cross-the-remote-hop';\nexport const GATEWAY_PATH = '/gateway/mcp';\n\n@WpDto()\nexport class RemoteRequest {\n    @WpDtoField(new WpDtoFieldOptions('Search text', true))\n    query!: string;\n\n    constructor(query?: string) {\n        if (query !== undefined) this.query = query;\n    }\n}\n\n@WpDto()\nexport class RemoteResponse {\n    @WpDtoField(new WpDtoFieldOptions('Delegated user', true))\n    user!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Delegated roles', true))\n    roles!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Result', true))\n    result!: string;\n\n    constructor(user?: string, roles?: string, result?: string) {\n        if (user !== undefined) this.user = user;\n        if (roles !== undefined) this.roles = roles;\n        if (result !== undefined) this.result = result;\n    }\n}\n\n@ApiPath('/remote-mcp')\nexport abstract class RemoteMcpApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'remote_integration_search',\n        description: 'Calls a remote Webpieces API.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/missing-remote-mcp')\nexport abstract class MissingRemoteMcpApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'missing_remote_integration_search',\n        description: 'Intentionally absent route.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/refused-remote-mcp')\nexport abstract class RefusedRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'refused_remote',\n        description: 'Nothing listens on this port.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/garbage-remote-mcp')\nexport abstract class GarbageRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'garbage_remote',\n        description: 'Answers an undecodable body.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/oidc-fail-remote-mcp')\nexport abstract class OidcFailRemoteApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'oidc_fail_remote',\n        description: 'Its OIDC token cannot be minted.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/local-throw')\nexport abstract class LocalThrowApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthJwt({ allRolesAllowed: true })\n    @Endpoint('/throw', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'local_throw',\n        description: 'Throws the requested failure in-process.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    fail(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/remote-throw')\nexport abstract class RemoteThrowApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc('mcp-gateway')\n    @Endpoint('/throw', 'rpc')\n    @WpResponseDto(() => RemoteResponse)\n    @WpMcpTool({\n        name: 'remote_throw',\n        description: 'Throws the requested failure remotely.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    fail(_request: RemoteRequest): Promise<RemoteResponse> {\n        throw new Error('contract only');\n    }\n}\n\n/**\n * One named throw, run identically behind the local and the remote binding.\n *\n * `expectedServerLevel` is the level of the ONE operator line the failure now produces on the server\n * that raised it — `LogApiCall`'s, at `warn` for `[API-server-resp-OTHER]` (a healthy rejection of\n * the caller's mistake) and `error` for `[API-server-resp-FAIL]`. `ApiErrorBoundary` no longer\n * writes a second line of its own (#961).\n */\nexport class ThrowCase {\n    constructor(\n        public readonly name: string,\n        public readonly expectedKind: string,\n        public readonly expectedServerLevel: LogLevel,\n        public readonly raise: () => never,\n    ) {}\n}\n\nexport const THROW_CASES: readonly ThrowCase[] = [\n    new ThrowCase('end-user', 'end-user', 'warn', () => {\n        throw new ApiEndUserError('The two passwords you entered do not match.', 'PW_MISMATCH');\n    }),\n    new ThrowCase('bad-request', 'bad-request', 'warn', () => {\n        throw new ApiBadRequestError('internal column name', '$.query', 'query must be a word');\n    }),\n    new ThrowCase('unauthorized', 'unauthorized', 'warn', () => {\n        throw new ApiUnauthorizedError('session internals');\n    }),\n    new ThrowCase('forbidden', 'forbidden', 'warn', () => {\n        throw new ApiForbiddenError('acl internals');\n    }),\n    new ThrowCase('not-found', 'not-found', 'warn', () => {\n        throw new ApiNotFoundError('row 7 missing');\n    }),\n    new ThrowCase('endpoint-not-found', 'endpoint-not-found', 'warn', () => {\n        throw new ApiEndpointNotFoundError('route internals');\n    }),\n    new ThrowCase('request-timeout', 'request-timeout', 'error', () => {\n        throw new ApiRequestTimeoutError('slow internals');\n    }),\n    new ThrowCase('rate-limited', 'rate-limited', 'error', () => {\n        throw new ApiRateLimitedError('quota internals');\n    }),\n    new ThrowCase('conflict', 'conflict', 'warn', () => {\n        throw new ApiConflictError('version internals');\n    }),\n    new ThrowCase('unprocessable', 'unprocessable', 'warn', () => {\n        throw new ApiUnprocessableError('rule internals');\n    }),\n    new ThrowCase('precondition-failed', 'precondition-failed', 'warn', () => {\n        throw new ApiPreconditionFailedError('etag internals');\n    }),\n    new ThrowCase('unsupported-media-type', 'unsupported-media-type', 'warn', () => {\n        throw new ApiUnsupportedMediaTypeError('parser internals');\n    }),\n    new ThrowCase('not-implemented', 'not-implemented', 'error', () => {\n        throw new ApiNotImplementedError('feature internals');\n    }),\n    new ThrowCase('coded-4xx', 'coded', 'warn', () => {\n        throw new ApiCodedError('quota internals', 460, 'QUOTA');\n    }),\n    new ThrowCase('coded-5xx', 'coded', 'error', () => {\n        throw new ApiCodedError('disk internals', 507);\n    }),\n    new ThrowCase('implementation', 'implementation', 'error', () => {\n        throw new ApiImplementationError('bug internals');\n    }),\n    new ThrowCase('dependency', 'dependency', 'error', () => {\n        throw new ApiDependencyError('upstream internals');\n    }),\n    new ThrowCase('unavailable', 'unavailable', 'error', () => {\n        throw new ApiUnavailableError('maintenance internals');\n    }),\n    new ThrowCase('dependency-timeout', 'dependency-timeout', 'error', () => {\n        throw new ApiDependencyTimeoutError('upstream slow internals');\n    }),\n    new ThrowCase('dependency-backoff', 'dependency-backoff', 'error', () => {\n        throw new ApiDependencyBackoffError('backoff internals', 42);\n    }),\n    new ThrowCase('connection', 'implementation', 'error', () => {\n        throw new ApiConnectionError('ECONNRESET internals');\n    }),\n    new ThrowCase('raw-error', 'implementation', 'error', () => {\n        throw new Error('SECRET-raw-internals');\n    }),\n    new ThrowCase('thrown-string', 'implementation', 'error', () => {\n        throw 'SECRET-string-internals';\n    }),\n];\n\nexport function raiseFor(query: string): never {\n    const found = THROW_CASES.find((candidate: ThrowCase) => candidate.name === query);\n    if (!found) throw new Error(`unknown throw case ${query}`);\n    return found.raise();\n}\n\n@injectable()\nexport class RemoteMcpController extends RemoteMcpApi {\n    calls = 0;\n    authorization?: string;\n\n    override search(request: RemoteRequest): Promise<RemoteResponse> {\n        this.calls += 1;\n        this.authorization = RequestContext.getRequest()?.getHeader('authorization');\n        return Promise.resolve(\n            new RemoteResponse(\n                RequestContext.getTrusted(REMOTE_USER) ?? 'missing-user',\n                RequestContext.getTrusted(REMOTE_ROLES) ?? 'missing-roles',\n                `remote:${request.query}`,\n            ),\n        );\n    }\n}\n\n@injectable()\nexport class LocalThrowController extends LocalThrowApi {\n    override async fail(request: RemoteRequest): Promise<RemoteResponse> {\n        return raiseFor(request.query);\n    }\n}\n\n@injectable()\nexport class RemoteThrowController extends RemoteThrowApi {\n    override async fail(request: RemoteRequest): Promise<RemoteResponse> {\n        return raiseFor(request.query);\n    }\n}\n\nexport class RecordingOidcMinter {\n    readonly audiences: string[] = [];\n\n    constructor(\n        private readonly failure?: Error,\n        private readonly token = OIDC_TOKEN,\n    ) {}\n\n    mintIdToken(audience: string): Promise<string> {\n        this.audiences.push(audience);\n        if (this.failure) return Promise.reject(this.failure);\n        return Promise.resolve(this.token);\n    }\n}\n\nexport class RecordingOidcVerifier extends OidcHook {\n    readonly tokens: string[] = [];\n    readonly callerLists: string[][] = [];\n\n    override verifyOidc(token: string, callers: string[]): Promise<void> {\n        this.tokens.push(token);\n        this.callerLists.push(callers);\n        if (token !== OIDC_TOKEN) throw new Error(`unexpected OIDC token '${token}'`);\n        return Promise.resolve();\n    }\n}\n\n@injectable()\nexport class BoundaryProbeFilter extends Filter<MethodMeta, WpResponse<unknown>> {\n    calls = 0;\n    sawLogIdentity = false;\n    sawTrustedUser?: string;\n\n    override filter(\n        meta: MethodMeta,\n        next: Service<MethodMeta, WpResponse<unknown>>,\n    ): Promise<WpResponse<unknown>> {\n        this.calls += 1;\n        this.sawLogIdentity =\n            RequestContext.getUntrusted(WebpiecesCoreHeaders.CONTROLLER) ===\n                'RemoteMcpController' &&\n            RequestContext.getUntrusted(WebpiecesCoreHeaders.METHOD) === 'search';\n        this.sawTrustedUser = RequestContext.getTrusted(REMOTE_USER);\n        return next.invoke(meta);\n    }\n}\n\n/**\n * The documented gateway opt-out from http-client-node's \"a dependency's 4xx is OUR 500\" invariant:\n * an MCP gateway relays a Webpieces peer's typed failure so the model sees the same kind it would see\n * for a local binding. `relay = false` answers \"not mine\", which is the framework default.\n */\nexport class RelayWebpiecesPeerErrors implements ErrorTranslators {\n    relay = true;\n\n    toWire(error: Error): HttpResponseDto {\n        return new ApiErrorHttpMapper('gui').toResponse(error);\n    }\n\n    fromWire(response: HttpResponseDto): Error | undefined {\n        if (!this.relay || !ApiErrorCodec.isPayload(response.body)) return undefined;\n        const decoded = ApiErrorCodec.decode(response.body);\n        if (!ApiErrorHttpStatus.hasCode(decoded)) return undefined;\n        const statusCode = decoded instanceof ApiCodedError ? decoded.statusCode : undefined;\n        return ApiErrorHttpStatus.codeFor(decoded.kind, statusCode) === response.status.code\n            ? decoded\n            : undefined;\n    }\n}\n"]}

package/src/__tests__/WpMcpServerTestFixtures.d.ts

@@ -5,6 +5,12 @@ import { McpAccessTokenAuthority, VerifiedMcpCredential } from '../McpAuth';
 export declare const USER_ID: ContextKey<string, "trusted">;
 export declare const ENDPOINT_PATH = "/app-owned/mcp";
 export declare const MODERN_VERSION = "2026-07-28";
+/** What every shipping MCP client opens with today — the top of the 2025 negotiation table. */
+export declare const LEGACY_VERSION = "2025-11-25";
+/** An older 2025-era revision the negotiation table still carries. */
+export declare const OLDER_LEGACY_VERSION = "2025-03-26";
+/** A revision NO era knows: the one case a server is still right to refuse. */
+export declare const UNKNOWN_VERSION = "1999-01-01";
 export declare class SearchRequest {
     query: string;
 }

package/src/__tests__/WpMcpServerTestFixtures.js

@@ -1,7 +1,7 @@
 "use strict";
 var SearchController_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RecordingLoggerFactory = exports.RecordedLogLine = exports.TestTokenAuthority = exports.TestJwtHook = exports.RemoteSearchClient = exports.SearchController = exports.RemoteSearchApi = exports.SearchApi = exports.SearchResponse = exports.SearchRequest = exports.MODERN_VERSION = exports.ENDPOINT_PATH = exports.USER_ID = void 0;
+exports.RecordingLoggerFactory = exports.RecordedLogLine = exports.TestTokenAuthority = exports.TestJwtHook = exports.RemoteSearchClient = exports.SearchController = exports.RemoteSearchApi = exports.SearchApi = exports.SearchResponse = exports.SearchRequest = exports.UNKNOWN_VERSION = exports.OLDER_LEGACY_VERSION = exports.LEGACY_VERSION = exports.MODERN_VERSION = exports.ENDPOINT_PATH = exports.USER_ID = void 0;
 const tslib_1 = require("tslib");
 require("reflect-metadata");
 const inversify_1 = require("inversify");
@@ -13,6 +13,12 @@ const McpInvocationContext_1 = require("../McpInvocationContext");
 exports.USER_ID = core_util_1.ContextKey.trusted('mcpSpecUserId', 'proven by a credential verifier');
 exports.ENDPOINT_PATH = '/app-owned/mcp';
 exports.MODERN_VERSION = '2026-07-28';
+/** What every shipping MCP client opens with today — the top of the 2025 negotiation table. */
+exports.LEGACY_VERSION = '2025-11-25';
+/** An older 2025-era revision the negotiation table still carries. */
+exports.OLDER_LEGACY_VERSION = '2025-03-26';
+/** A revision NO era knows: the one case a server is still right to refuse. */
+exports.UNKNOWN_VERSION = '1999-01-01';
 let SearchRequest = class SearchRequest {
     query;
 };
@@ -120,7 +126,7 @@ let SearchController = class SearchController extends SearchApi {
         if (request.query === 'internal')
             throw new Error('database password appeared here');
         // A DOWNSTREAM call of ours failed. From the model's seat that is OUR bug, never a kind of
-        // its own on the wire — see #959 and ApiErrorBoundary.apiOutcome.
+        // its own on the wire — see #959 and ApiErrorBoundary.encode.
         if (request.query === 'downstream') {
             throw new core_util_1.ApiConnectionError('ECONNREFUSED private-host:8443');
         }

package/src/__tests__/WpMcpServerTestFixtures.js.map

@@ -1 +1 @@
-{"version":3,"file":"WpMcpServerTestFixtures.js","sourceRoot":"","sources":["../../../../../../packages/http/mcp-server/src/__tests__/WpMcpServerTestFixtures.ts"],"names":[],"mappings":";;;;;AAAA,4BAA0B;AAC1B,yCAAuC;AACvC,oDAqB8B;AAC9B,0DAAyD;AACzD,0DAAkF;AAClF,wCAA4E;AAC5E,kEAAiE;AAEpD,QAAA,OAAO,GAAG,sBAAU,CAAC,OAAO,CACrC,eAAe,EACf,iCAAiC,CACpC,CAAC;AACW,QAAA,aAAa,GAAG,gBAAgB,CAAC;AACjC,QAAA,cAAc,GAAG,YAAY,CAAC;AAGpC,IAAM,aAAa,GAAnB,MAAM,aAAa;IAatB,KAAK,CAAU;CAClB,CAAA;AAdY,sCAAa;AAatB;IAZC,IAAA,sBAAU,EACP,IAAI,6BAAiB,CACjB,aAAa,EACb,IAAI,EACJ,SAAS,EACT,KAAK,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,IAAI,uBAAW,CAAC,OAAO,CAAC,CAC3B,CACJ;;4CACc;wBAbN,aAAa;IADzB,IAAA,iBAAK,GAAE;GACK,aAAa,CAczB;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEvB,MAAM,CAAU;IAGhB,MAAM,CAAU;CACnB,CAAA;AANY,wCAAc;AAEvB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;;8CAC9C;AAGhB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;;8CACzC;yBALP,cAAc;IAD1B,IAAA,iBAAK,GAAE;GACK,cAAc,CAM1B;AAGM,IAAe,SAAS,GAAxB,MAAe,SAAS;IAY3B,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAcD,KAAK,CAAC,QAAuB;QACzB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AA/BqB,8BAAS;AAY3B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,qBAAS,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,iDAAiD;QAC9D,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;uCAE7B;AAcD;IAZC,IAAA,wBAAY,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,IAAA,qBAAS,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wBAAwB;QACrC,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACc,aAAa;;sCAE5B;oBA9BiB,SAAS;IAD9B,IAAA,mBAAO,EAAC,WAAW,CAAC;GACC,SAAS,CA+B9B;AAGM,IAAe,eAAe,GAA9B,MAAe,eAAe;IAajC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAhBqB,0CAAe;AAajC;IAZC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,GAAE;IACZ,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,0BAA0B;QACvC,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;6CAE7B;0BAfiB,eAAe;IADpC,IAAA,mBAAO,EAAC,cAAc,CAAC;GACF,eAAe,CAgBpC;AAGM,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,SAAS;;IAC3C,MAAM,CAAC,eAAe,CAAc;IACpC,MAAM,CAAC,eAAe,CAAc;IACpC,gBAAgB,GAAG,CAAC,CAAC;IAEZ,KAAK,CAAC,MAAM,CAAC,OAAsB;QACxC,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrF,2FAA2F;QAC3F,kEAAkE;QAClE,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,IAAI,8BAAkB,CAAC,gCAAgC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO;YAAE,MAAM,IAAI,2BAAe,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAkB,CACxB,yCAAyC,EACzC,SAAS,EACT,oBAAoB,CACvB,CAAC;QACN,CAAC;QACD,MAAM,UAAU,GAAG,6BAAc,CAAC,UAAU,CAAC,6CAAsB,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,UAAU,EAAE,CAAC;YACzC,MAAM,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACnD,kBAAgB,CAAC,eAAe,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAE,EAAE;gBAC5C,MAAM,MAAM,GAAG,GAAS,EAAE;oBACtB,kBAAgB,CAAC,eAAe,EAAE,EAAE,CAAC;oBACrC,OAAO,EAAE,CAAC;gBACd,CAAC,CAAC;gBACF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,EAAE,CAAC;;oBACnC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,6BAAc,CAAC,UAAU,CAAC,eAAO,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9F,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,OAAsB;QACvC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;CACJ,CAAA;AA3CY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,sBAAU,GAAE;GACA,gBAAgB,CA2C5B;AAED,MAAa,kBAAmB,SAAQ,eAAe;IACnD,iBAAiB,CAAU;IAElB,KAAK,CAAC,MAAM,CAAC,OAAsB;QACxC,IAAI,CAAC,iBAAiB,GAAG,6BAAc,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,6BAAc,CAAC,UAAU,CAAC,eAAO,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9F,CAAC;CACJ;AAPD,gDAOC;AAED,MAAa,WAAY,SAAQ,sBAAe;IAC5C,YAAY,GAAa,EAAE,CAAC;IAC5B,eAAe,GAAG,EAAE,CAAC;IACrB,QAAQ,CAAS;IAER,KAAK,CAAC,IAAI,CAAC,OAAe;QAC/B,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GACP,OAAO,KAAK,aAAa;YACrB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,GAAG,OAAO,aAAa,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,wBAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACtF,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,IAAI,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,kCAAmB,CAC1B,SAAS,EACT,CAAC,OAAO,CAAC,EACT,CAAC,IAAI,wBAAY,CAAC,eAAO,EAAE,SAAS,CAAC,CAAC,CACzC,CAAC;QACN,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnF,OAAO,IAAI,kCAAmB,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,IAAI,wBAAY,CAAC,eAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AA1BD,kCA0BC;AAED,MAAa,kBAAkB;IAC3B,iBAAiB,GAAG,CAAC,CAAC;IACtB,KAAK,GAAsB,EAAE,CAAC;IAE9B,KAAK,CAAC,eAAe,CAAC,MAAc;QAChC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,QAAgB;QACnD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,gCAAoB,CAAC,eAAe,CAAC,CAAC;QACzE,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAChB,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QACrE,MAAM,MAAM,GACR,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,4BAA4B,CAAC;QACzF,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,+BAAqB,CACxC,OAAO,EACP,MAAM,EACN,cAAc,EACd,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EACpC,SAAS,EACT,MAAM,EACN,WAAW,EACX,IAAI,CAAC,KAAK,EACV,CAAC,IAAI,wBAAY,CAAC,eAAO,EAAE,GAAG,OAAO,YAAY,CAAC,CAAC,CACtD,CAAC;QACF,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE;gBAC9C,GAAG,EAAE,GAAsB,EAAE;oBACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;CACJ;AAzCD,gDAyCC;AAED,MAAa,eAAe;IAEJ;IACA;IACA;IACA;IAJpB,YACoB,MAAc,EACd,KAAe,EACf,OAAe,EACf,KAAa;QAHb,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAU;QACf,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;IAC9B,CAAC;IAEJ,gGAAgG;IAChG,QAAQ;QACJ,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC;CACJ;AAZD,0CAYC;AAED,MAAM,eAAe;IAEI;IACA;IAFrB,YACqB,IAAY,EACZ,KAAwB;QADxB,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAmB;IAC1C,CAAC;IAEJ,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;CACJ;AAED,6FAA6F;AAC7F,MAAa,sBAAsB;IACtB,KAAK,GAAsB,EAAE,CAAC;IAEvC,SAAS,CAAC,IAAY;QAClB,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,UAAU,CAAC,IAAY;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AAVD,wDAUC","sourcesContent":["import 'reflect-metadata';\nimport { injectable } from 'inversify';\nimport {\n    ApiBadRequestError,\n    ApiConnectionError,\n    ApiEndUserError,\n    ApiPath,\n    ApiUnauthorizedError,\n    Logger,\n    LoggerFactory,\n    LogLevel,\n    ContextKey,\n    ContextTuple,\n    Endpoint,\n    WpAuthJwt,\n    WpAuthOidc,\n    WpDto,\n    WpDtoField,\n    WpDtoFieldOptions,\n    WpMcpAuthJwt,\n    WpMcpHeader,\n    WpMcpTool,\n    WpResponseDto,\n} from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\nimport { AuthenticatedCaller, JwtHook, MintedJwt } from '@webpieces/http-routing';\nimport { McpAccessTokenAuthority, VerifiedMcpCredential } from '../McpAuth';\nimport { MCP_INVOCATION_CONTEXT } from '../McpInvocationContext';\n\nexport const USER_ID = ContextKey.trusted<string>(\n    'mcpSpecUserId',\n    'proven by a credential verifier',\n);\nexport const ENDPOINT_PATH = '/app-owned/mcp';\nexport const MODERN_VERSION = '2026-07-28';\n\n@WpDto()\nexport class SearchRequest {\n    @WpDtoField(\n        new WpDtoFieldOptions(\n            'Search text',\n            true,\n            undefined,\n            false,\n            undefined,\n            undefined,\n            undefined,\n            new WpMcpHeader('query'),\n        ),\n    )\n    query!: string;\n}\n\n@WpDto()\nexport class SearchResponse {\n    @WpDtoField(new WpDtoFieldOptions('Authenticated user', true))\n    userId!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Search result', true))\n    result!: string;\n}\n\n@ApiPath('/mcp-spec')\nexport abstract class SearchApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthJwt({ allRolesAllowed: true })\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => SearchResponse)\n    @WpMcpTool({\n        name: 'account_search',\n        description: 'Search records owned by the authenticated user.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: SearchRequest): Promise<SearchResponse> {\n        throw new Error('contract only');\n    }\n\n    @WpMcpAuthJwt({ roles: ['admin'] })\n    @WpAuthJwt({ roles: ['admin'] })\n    @Endpoint('/admin', 'rpc')\n    @WpResponseDto(() => SearchResponse)\n    @WpMcpTool({\n        name: 'admin_search',\n        description: 'Administrative search.',\n        readOnlyHint: false,\n        destructiveHint: false,\n        idempotentHint: false,\n        openWorldHint: false,\n    })\n    admin(_request: SearchRequest): Promise<SearchResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/remote-spec')\nexport abstract class RemoteSearchApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc()\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => SearchResponse)\n    @WpMcpTool({\n        name: 'remote_search',\n        description: 'Search a remote binding.',\n        readOnlyHint: false,\n        destructiveHint: false,\n        idempotentHint: false,\n        openWorldHint: false,\n    })\n    search(_request: SearchRequest): Promise<SearchResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@injectable()\nexport class SearchController extends SearchApi {\n    static waitStartedHook?: () => void;\n    static waitAbortedHook?: () => void;\n    adminInvocations = 0;\n\n    override async search(request: SearchRequest): Promise<SearchResponse> {\n        if (request.query === 'internal') throw new Error('database password appeared here');\n        // A DOWNSTREAM call of ours failed. From the model's seat that is OUR bug, never a kind of\n        // its own on the wire — see #959 and ApiErrorBoundary.apiOutcome.\n        if (request.query === 'downstream') {\n            throw new ApiConnectionError('ECONNREFUSED private-host:8443');\n        }\n        if (request.query === 'human') throw new ApiEndUserError('Safe human message', 'SAFE');\n        if (request.query === 'malformed') {\n            throw new ApiBadRequestError(\n                'operator-only: column tenant_7 rejected',\n                '$.query',\n                'query is malformed',\n            );\n        }\n        const invocation = RequestContext.getTrusted(MCP_INVOCATION_CONTEXT);\n        if (request.query === 'progress') {\n            await invocation?.reportProgress?.(1, 2, 'halfway');\n        }\n        if (request.query === 'wait' && invocation) {\n            await invocation.reportProgress?.(0, 1, 'waiting');\n            SearchController.waitStartedHook?.();\n            await new Promise<void>((resolve: () => void) => {\n                const finish = (): void => {\n                    SearchController.waitAbortedHook?.();\n                    resolve();\n                };\n                if (invocation.signal.aborted) finish();\n                else invocation.signal.addEventListener('abort', finish, { once: true });\n            });\n        }\n        return { userId: RequestContext.getTrusted(USER_ID) ?? 'missing', result: request.query };\n    }\n\n    override async admin(request: SearchRequest): Promise<SearchResponse> {\n        this.adminInvocations += 1;\n        return this.search(request);\n    }\n}\n\nexport class RemoteSearchClient extends RemoteSearchApi {\n    seenAuthorization?: string;\n\n    override async search(request: SearchRequest): Promise<SearchResponse> {\n        this.seenAuthorization = RequestContext.getRequest()?.getHeader('authorization');\n        return { userId: RequestContext.getTrusted(USER_ID) ?? 'missing', result: request.query };\n    }\n}\n\nexport class TestJwtHook extends JwtHook<string> {\n    mintedTokens: string[] = [];\n    lifetimeSeconds = 60;\n    failWith?: Error;\n\n    override async mint(subject: string): Promise<MintedJwt> {\n        if (this.failWith) throw this.failWith;\n        const token =\n            subject === 'passthrough'\n                ? 'mcp-passthrough'\n                : `${subject}-endpoint-${this.mintedTokens.length + 1}`;\n        this.mintedTokens.push(token);\n        return new MintedJwt(token, Math.floor(Date.now() / 1000) + this.lifetimeSeconds);\n    }\n\n    override async parseJwt(token: string): Promise<AuthenticatedCaller> {\n        if (token.startsWith('admin-endpoint-')) {\n            return new AuthenticatedCaller(\n                'admin-7',\n                ['admin'],\n                [new ContextTuple(USER_ID, 'admin-7')],\n            );\n        }\n        if (!token.startsWith('user-endpoint-')) throw new Error('invalid endpoint token');\n        return new AuthenticatedCaller('user-7', [], [new ContextTuple(USER_ID, 'user-7')]);\n    }\n}\n\nexport class TestTokenAuthority implements McpAccessTokenAuthority<string> {\n    verificationCount = 0;\n    roles: readonly string[] = [];\n\n    async mintAccessToken(_grant: string): Promise<never> {\n        throw new Error('not used');\n    }\n\n    async verifyAccessToken(token: string, resource: string): Promise<VerifiedMcpCredential> {\n        this.verificationCount += 1;\n        if (token === 'invalid') throw new ApiUnauthorizedError('invalid token');\n        if (token === 'authority-bug') throw new Error('SECRET-internal-detail');\n        const now = Math.floor(Date.now() / 1000);\n        const actualResource =\n            token === 'wrong-resource' ? 'https://attacker.example/mcp' : resource;\n        const subject = token === 'mcp-passthrough' ? 'passthrough' : 'user';\n        const issuer =\n            token === 'wrong-issuer' ? 'https://attacker.example' : 'https://login.example.test';\n        const expiresAt = token === 'expired' ? now - 1 : now + 60;\n        const scopes = token === 'missing-scope' ? [] : ['tools'];\n        const validatedAt = token === 'stale-account' ? now - 3_601 : now;\n        const credential = new VerifiedMcpCredential(\n            subject,\n            issuer,\n            actualResource,\n            token === 'expired' ? now - 61 : now,\n            expiresAt,\n            scopes,\n            validatedAt,\n            this.roles,\n            [new ContextTuple(USER_ID, `${subject}-delegated`)],\n        );\n        if (token === 'list-bug') {\n            Object.defineProperty(credential, 'listingRoles', {\n                get: (): readonly string[] => {\n                    throw new Error('SECRET-internal-detail');\n                },\n            });\n        }\n        return credential;\n    }\n}\n\nexport class RecordedLogLine {\n    constructor(\n        public readonly logger: string,\n        public readonly level: LogLevel,\n        public readonly message: string,\n        public readonly error?: Error,\n    ) {}\n\n    /** The rendered line an operator would see, including an attached error's message and stack. */\n    rendered(): string {\n        return `${this.message} ${this.error?.message ?? ''} ${this.error?.stack ?? ''}`;\n    }\n}\n\nclass RecordingLogger implements Logger {\n    constructor(\n        private readonly name: string,\n        private readonly lines: RecordedLogLine[],\n    ) {}\n\n    trace(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'trace', message, err));\n    }\n\n    debug(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'debug', message, err));\n    }\n\n    info(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'info', message, err));\n    }\n\n    warn(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'warn', message, err));\n    }\n\n    error(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'error', message, err));\n    }\n}\n\n/** Captures every log line in-process so tests can count and level-check operator output. */\nexport class RecordingLoggerFactory implements LoggerFactory {\n    readonly lines: RecordedLogLine[] = [];\n\n    getLogger(name: string): Logger {\n        return new RecordingLogger(name, this.lines);\n    }\n\n    containing(text: string): RecordedLogLine[] {\n        return this.lines.filter((line: RecordedLogLine) => line.rendered().includes(text));\n    }\n}\n"]}
+{"version":3,"file":"WpMcpServerTestFixtures.js","sourceRoot":"","sources":["../../../../../../packages/http/mcp-server/src/__tests__/WpMcpServerTestFixtures.ts"],"names":[],"mappings":";;;;;AAAA,4BAA0B;AAC1B,yCAAuC;AACvC,oDAqB8B;AAC9B,0DAAyD;AACzD,0DAAkF;AAClF,wCAA4E;AAC5E,kEAAiE;AAEpD,QAAA,OAAO,GAAG,sBAAU,CAAC,OAAO,CACrC,eAAe,EACf,iCAAiC,CACpC,CAAC;AACW,QAAA,aAAa,GAAG,gBAAgB,CAAC;AACjC,QAAA,cAAc,GAAG,YAAY,CAAC;AAC3C,+FAA+F;AAClF,QAAA,cAAc,GAAG,YAAY,CAAC;AAC3C,sEAAsE;AACzD,QAAA,oBAAoB,GAAG,YAAY,CAAC;AACjD,+EAA+E;AAClE,QAAA,eAAe,GAAG,YAAY,CAAC;AAGrC,IAAM,aAAa,GAAnB,MAAM,aAAa;IAatB,KAAK,CAAU;CAClB,CAAA;AAdY,sCAAa;AAatB;IAZC,IAAA,sBAAU,EACP,IAAI,6BAAiB,CACjB,aAAa,EACb,IAAI,EACJ,SAAS,EACT,KAAK,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,IAAI,uBAAW,CAAC,OAAO,CAAC,CAC3B,CACJ;;4CACc;wBAbN,aAAa;IADzB,IAAA,iBAAK,GAAE;GACK,aAAa,CAczB;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEvB,MAAM,CAAU;IAGhB,MAAM,CAAU;CACnB,CAAA;AANY,wCAAc;AAEvB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;;8CAC9C;AAGhB;IADC,IAAA,sBAAU,EAAC,IAAI,6BAAiB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;;8CACzC;yBALP,cAAc;IAD1B,IAAA,iBAAK,GAAE;GACK,cAAc,CAM1B;AAGM,IAAe,SAAS,GAAxB,MAAe,SAAS;IAY3B,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAcD,KAAK,CAAC,QAAuB;QACzB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AA/BqB,8BAAS;AAY3B;IAXC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,qBAAS,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACpC,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,iDAAiD;QAC9D,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;uCAE7B;AAcD;IAZC,IAAA,wBAAY,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,IAAA,qBAAS,EAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,IAAA,oBAAQ,EAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wBAAwB;QACrC,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACc,aAAa;;sCAE5B;oBA9BiB,SAAS;IAD9B,IAAA,mBAAO,EAAC,WAAW,CAAC;GACC,SAAS,CA+B9B;AAGM,IAAe,eAAe,GAA9B,MAAe,eAAe;IAajC,MAAM,CAAC,QAAuB;QAC1B,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACJ,CAAA;AAhBqB,0CAAe;AAajC;IAZC,IAAA,wBAAY,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,sBAAU,GAAE;IACZ,IAAA,oBAAQ,EAAC,SAAS,EAAE,KAAK,CAAC;IAC1B,IAAA,yBAAa,EAAC,GAAG,EAAE,CAAC,cAAc,CAAC;IACnC,IAAA,qBAAS,EAAC;QACP,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,0BAA0B;QACvC,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;KACvB,CAAC;;6CACe,aAAa;;6CAE7B;0BAfiB,eAAe;IADpC,IAAA,mBAAO,EAAC,cAAc,CAAC;GACF,eAAe,CAgBpC;AAGM,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,SAAS;;IAC3C,MAAM,CAAC,eAAe,CAAc;IACpC,MAAM,CAAC,eAAe,CAAc;IACpC,gBAAgB,GAAG,CAAC,CAAC;IAEZ,KAAK,CAAC,MAAM,CAAC,OAAsB;QACxC,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrF,2FAA2F;QAC3F,8DAA8D;QAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,IAAI,8BAAkB,CAAC,gCAAgC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO;YAAE,MAAM,IAAI,2BAAe,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAkB,CACxB,yCAAyC,EACzC,SAAS,EACT,oBAAoB,CACvB,CAAC;QACN,CAAC;QACD,MAAM,UAAU,GAAG,6BAAc,CAAC,UAAU,CAAC,6CAAsB,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,UAAU,EAAE,CAAC;YACzC,MAAM,UAAU,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACnD,kBAAgB,CAAC,eAAe,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAE,EAAE;gBAC5C,MAAM,MAAM,GAAG,GAAS,EAAE;oBACtB,kBAAgB,CAAC,eAAe,EAAE,EAAE,CAAC;oBACrC,OAAO,EAAE,CAAC;gBACd,CAAC,CAAC;gBACF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,EAAE,CAAC;;oBACnC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,6BAAc,CAAC,UAAU,CAAC,eAAO,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9F,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,OAAsB;QACvC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;CACJ,CAAA;AA3CY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,sBAAU,GAAE;GACA,gBAAgB,CA2C5B;AAED,MAAa,kBAAmB,SAAQ,eAAe;IACnD,iBAAiB,CAAU;IAElB,KAAK,CAAC,MAAM,CAAC,OAAsB;QACxC,IAAI,CAAC,iBAAiB,GAAG,6BAAc,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,6BAAc,CAAC,UAAU,CAAC,eAAO,CAAC,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC9F,CAAC;CACJ;AAPD,gDAOC;AAED,MAAa,WAAY,SAAQ,sBAAe;IAC5C,YAAY,GAAa,EAAE,CAAC;IAC5B,eAAe,GAAG,EAAE,CAAC;IACrB,QAAQ,CAAS;IAER,KAAK,CAAC,IAAI,CAAC,OAAe;QAC/B,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GACP,OAAO,KAAK,aAAa;YACrB,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,GAAG,OAAO,aAAa,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,wBAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACtF,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,IAAI,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,kCAAmB,CAC1B,SAAS,EACT,CAAC,OAAO,CAAC,EACT,CAAC,IAAI,wBAAY,CAAC,eAAO,EAAE,SAAS,CAAC,CAAC,CACzC,CAAC;QACN,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnF,OAAO,IAAI,kCAAmB,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,IAAI,wBAAY,CAAC,eAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AA1BD,kCA0BC;AAED,MAAa,kBAAkB;IAC3B,iBAAiB,GAAG,CAAC,CAAC;IACtB,KAAK,GAAsB,EAAE,CAAC;IAE9B,KAAK,CAAC,eAAe,CAAC,MAAc;QAChC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,QAAgB;QACnD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,gCAAoB,CAAC,eAAe,CAAC,CAAC;QACzE,IAAI,KAAK,KAAK,eAAe;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,cAAc,GAChB,KAAK,KAAK,gBAAgB,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QACrE,MAAM,MAAM,GACR,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,4BAA4B,CAAC;QACzF,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,+BAAqB,CACxC,OAAO,EACP,MAAM,EACN,cAAc,EACd,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EACpC,SAAS,EACT,MAAM,EACN,WAAW,EACX,IAAI,CAAC,KAAK,EACV,CAAC,IAAI,wBAAY,CAAC,eAAO,EAAE,GAAG,OAAO,YAAY,CAAC,CAAC,CACtD,CAAC;QACF,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE;gBAC9C,GAAG,EAAE,GAAsB,EAAE;oBACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,CAAC;aACJ,CAAC,CAAC;QACP,CAAC;QACD,OAAO,UAAU,CAAC;IACtB,CAAC;CACJ;AAzCD,gDAyCC;AAED,MAAa,eAAe;IAEJ;IACA;IACA;IACA;IAJpB,YACoB,MAAc,EACd,KAAe,EACf,OAAe,EACf,KAAa;QAHb,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAU;QACf,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;IAC9B,CAAC;IAEJ,gGAAgG;IAChG,QAAQ;QACJ,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;IACrF,CAAC;CACJ;AAZD,0CAYC;AAED,MAAM,eAAe;IAEI;IACA;IAFrB,YACqB,IAAY,EACZ,KAAwB;QADxB,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAmB;IAC1C,CAAC;IAEJ,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,GAAW;QAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,GAAW;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;CACJ;AAED,6FAA6F;AAC7F,MAAa,sBAAsB;IACtB,KAAK,GAAsB,EAAE,CAAC;IAEvC,SAAS,CAAC,IAAY;QAClB,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,UAAU,CAAC,IAAY;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxF,CAAC;CACJ;AAVD,wDAUC","sourcesContent":["import 'reflect-metadata';\nimport { injectable } from 'inversify';\nimport {\n    ApiBadRequestError,\n    ApiConnectionError,\n    ApiEndUserError,\n    ApiPath,\n    ApiUnauthorizedError,\n    Logger,\n    LoggerFactory,\n    LogLevel,\n    ContextKey,\n    ContextTuple,\n    Endpoint,\n    WpAuthJwt,\n    WpAuthOidc,\n    WpDto,\n    WpDtoField,\n    WpDtoFieldOptions,\n    WpMcpAuthJwt,\n    WpMcpHeader,\n    WpMcpTool,\n    WpResponseDto,\n} from '@webpieces/core-util';\nimport { RequestContext } from '@webpieces/core-context';\nimport { AuthenticatedCaller, JwtHook, MintedJwt } from '@webpieces/http-routing';\nimport { McpAccessTokenAuthority, VerifiedMcpCredential } from '../McpAuth';\nimport { MCP_INVOCATION_CONTEXT } from '../McpInvocationContext';\n\nexport const USER_ID = ContextKey.trusted<string>(\n    'mcpSpecUserId',\n    'proven by a credential verifier',\n);\nexport const ENDPOINT_PATH = '/app-owned/mcp';\nexport const MODERN_VERSION = '2026-07-28';\n/** What every shipping MCP client opens with today — the top of the 2025 negotiation table. */\nexport const LEGACY_VERSION = '2025-11-25';\n/** An older 2025-era revision the negotiation table still carries. */\nexport const OLDER_LEGACY_VERSION = '2025-03-26';\n/** A revision NO era knows: the one case a server is still right to refuse. */\nexport const UNKNOWN_VERSION = '1999-01-01';\n\n@WpDto()\nexport class SearchRequest {\n    @WpDtoField(\n        new WpDtoFieldOptions(\n            'Search text',\n            true,\n            undefined,\n            false,\n            undefined,\n            undefined,\n            undefined,\n            new WpMcpHeader('query'),\n        ),\n    )\n    query!: string;\n}\n\n@WpDto()\nexport class SearchResponse {\n    @WpDtoField(new WpDtoFieldOptions('Authenticated user', true))\n    userId!: string;\n\n    @WpDtoField(new WpDtoFieldOptions('Search result', true))\n    result!: string;\n}\n\n@ApiPath('/mcp-spec')\nexport abstract class SearchApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthJwt({ allRolesAllowed: true })\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => SearchResponse)\n    @WpMcpTool({\n        name: 'account_search',\n        description: 'Search records owned by the authenticated user.',\n        readOnlyHint: true,\n        idempotentHint: true,\n        openWorldHint: false,\n    })\n    search(_request: SearchRequest): Promise<SearchResponse> {\n        throw new Error('contract only');\n    }\n\n    @WpMcpAuthJwt({ roles: ['admin'] })\n    @WpAuthJwt({ roles: ['admin'] })\n    @Endpoint('/admin', 'rpc')\n    @WpResponseDto(() => SearchResponse)\n    @WpMcpTool({\n        name: 'admin_search',\n        description: 'Administrative search.',\n        readOnlyHint: false,\n        destructiveHint: false,\n        idempotentHint: false,\n        openWorldHint: false,\n    })\n    admin(_request: SearchRequest): Promise<SearchResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@ApiPath('/remote-spec')\nexport abstract class RemoteSearchApi {\n    @WpMcpAuthJwt({ allRolesAllowed: true })\n    @WpAuthOidc()\n    @Endpoint('/search', 'rpc')\n    @WpResponseDto(() => SearchResponse)\n    @WpMcpTool({\n        name: 'remote_search',\n        description: 'Search a remote binding.',\n        readOnlyHint: false,\n        destructiveHint: false,\n        idempotentHint: false,\n        openWorldHint: false,\n    })\n    search(_request: SearchRequest): Promise<SearchResponse> {\n        throw new Error('contract only');\n    }\n}\n\n@injectable()\nexport class SearchController extends SearchApi {\n    static waitStartedHook?: () => void;\n    static waitAbortedHook?: () => void;\n    adminInvocations = 0;\n\n    override async search(request: SearchRequest): Promise<SearchResponse> {\n        if (request.query === 'internal') throw new Error('database password appeared here');\n        // A DOWNSTREAM call of ours failed. From the model's seat that is OUR bug, never a kind of\n        // its own on the wire — see #959 and ApiErrorBoundary.encode.\n        if (request.query === 'downstream') {\n            throw new ApiConnectionError('ECONNREFUSED private-host:8443');\n        }\n        if (request.query === 'human') throw new ApiEndUserError('Safe human message', 'SAFE');\n        if (request.query === 'malformed') {\n            throw new ApiBadRequestError(\n                'operator-only: column tenant_7 rejected',\n                '$.query',\n                'query is malformed',\n            );\n        }\n        const invocation = RequestContext.getTrusted(MCP_INVOCATION_CONTEXT);\n        if (request.query === 'progress') {\n            await invocation?.reportProgress?.(1, 2, 'halfway');\n        }\n        if (request.query === 'wait' && invocation) {\n            await invocation.reportProgress?.(0, 1, 'waiting');\n            SearchController.waitStartedHook?.();\n            await new Promise<void>((resolve: () => void) => {\n                const finish = (): void => {\n                    SearchController.waitAbortedHook?.();\n                    resolve();\n                };\n                if (invocation.signal.aborted) finish();\n                else invocation.signal.addEventListener('abort', finish, { once: true });\n            });\n        }\n        return { userId: RequestContext.getTrusted(USER_ID) ?? 'missing', result: request.query };\n    }\n\n    override async admin(request: SearchRequest): Promise<SearchResponse> {\n        this.adminInvocations += 1;\n        return this.search(request);\n    }\n}\n\nexport class RemoteSearchClient extends RemoteSearchApi {\n    seenAuthorization?: string;\n\n    override async search(request: SearchRequest): Promise<SearchResponse> {\n        this.seenAuthorization = RequestContext.getRequest()?.getHeader('authorization');\n        return { userId: RequestContext.getTrusted(USER_ID) ?? 'missing', result: request.query };\n    }\n}\n\nexport class TestJwtHook extends JwtHook<string> {\n    mintedTokens: string[] = [];\n    lifetimeSeconds = 60;\n    failWith?: Error;\n\n    override async mint(subject: string): Promise<MintedJwt> {\n        if (this.failWith) throw this.failWith;\n        const token =\n            subject === 'passthrough'\n                ? 'mcp-passthrough'\n                : `${subject}-endpoint-${this.mintedTokens.length + 1}`;\n        this.mintedTokens.push(token);\n        return new MintedJwt(token, Math.floor(Date.now() / 1000) + this.lifetimeSeconds);\n    }\n\n    override async parseJwt(token: string): Promise<AuthenticatedCaller> {\n        if (token.startsWith('admin-endpoint-')) {\n            return new AuthenticatedCaller(\n                'admin-7',\n                ['admin'],\n                [new ContextTuple(USER_ID, 'admin-7')],\n            );\n        }\n        if (!token.startsWith('user-endpoint-')) throw new Error('invalid endpoint token');\n        return new AuthenticatedCaller('user-7', [], [new ContextTuple(USER_ID, 'user-7')]);\n    }\n}\n\nexport class TestTokenAuthority implements McpAccessTokenAuthority<string> {\n    verificationCount = 0;\n    roles: readonly string[] = [];\n\n    async mintAccessToken(_grant: string): Promise<never> {\n        throw new Error('not used');\n    }\n\n    async verifyAccessToken(token: string, resource: string): Promise<VerifiedMcpCredential> {\n        this.verificationCount += 1;\n        if (token === 'invalid') throw new ApiUnauthorizedError('invalid token');\n        if (token === 'authority-bug') throw new Error('SECRET-internal-detail');\n        const now = Math.floor(Date.now() / 1000);\n        const actualResource =\n            token === 'wrong-resource' ? 'https://attacker.example/mcp' : resource;\n        const subject = token === 'mcp-passthrough' ? 'passthrough' : 'user';\n        const issuer =\n            token === 'wrong-issuer' ? 'https://attacker.example' : 'https://login.example.test';\n        const expiresAt = token === 'expired' ? now - 1 : now + 60;\n        const scopes = token === 'missing-scope' ? [] : ['tools'];\n        const validatedAt = token === 'stale-account' ? now - 3_601 : now;\n        const credential = new VerifiedMcpCredential(\n            subject,\n            issuer,\n            actualResource,\n            token === 'expired' ? now - 61 : now,\n            expiresAt,\n            scopes,\n            validatedAt,\n            this.roles,\n            [new ContextTuple(USER_ID, `${subject}-delegated`)],\n        );\n        if (token === 'list-bug') {\n            Object.defineProperty(credential, 'listingRoles', {\n                get: (): readonly string[] => {\n                    throw new Error('SECRET-internal-detail');\n                },\n            });\n        }\n        return credential;\n    }\n}\n\nexport class RecordedLogLine {\n    constructor(\n        public readonly logger: string,\n        public readonly level: LogLevel,\n        public readonly message: string,\n        public readonly error?: Error,\n    ) {}\n\n    /** The rendered line an operator would see, including an attached error's message and stack. */\n    rendered(): string {\n        return `${this.message} ${this.error?.message ?? ''} ${this.error?.stack ?? ''}`;\n    }\n}\n\nclass RecordingLogger implements Logger {\n    constructor(\n        private readonly name: string,\n        private readonly lines: RecordedLogLine[],\n    ) {}\n\n    trace(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'trace', message, err));\n    }\n\n    debug(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'debug', message, err));\n    }\n\n    info(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'info', message, err));\n    }\n\n    warn(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'warn', message, err));\n    }\n\n    error(message: string, err?: Error): void {\n        this.lines.push(new RecordedLogLine(this.name, 'error', message, err));\n    }\n}\n\n/** Captures every log line in-process so tests can count and level-check operator output. */\nexport class RecordingLoggerFactory implements LoggerFactory {\n    readonly lines: RecordedLogLine[] = [];\n\n    getLogger(name: string): Logger {\n        return new RecordingLogger(name, this.lines);\n    }\n\n    containing(text: string): RecordedLogLine[] {\n        return this.lines.filter((line: RecordedLogLine) => line.rendered().includes(text));\n    }\n}\n"]}

package/src/index.d.ts

@@ -10,5 +10,5 @@ export { McpDeployment } from './McpDeployment';
 export type { McpDeploymentMode } from './McpDeployment';
 export { McpApiDispatcher } from './McpApiDispatcher';
 export { WpMcpServer } from './WpMcpServer';
-export { MCP_REQUEST_ID_META_KEY, McpErrorData, McpFailureScope, McpHttpErrorBody, McpHttpErrorDetail, ModelVisibleToolError, WpMcpErrorTranslator, } from './WpMcpErrorTranslator';
+export { MCP_REQUEST_ID_META_KEY, McpCorrelation, McpDefaultToolCallRenderer, McpErrorData, McpHttpErrorBody, McpHttpErrorDetail, ModelVisibleToolError, WpMcpErrorTranslator, } from './WpMcpErrorTranslator';
 export type { McpErrorTranslators } from './WpMcpErrorTranslator';

package/src/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WpMcpErrorTranslator = exports.ModelVisibleToolError = exports.McpHttpErrorDetail = exports.McpHttpErrorBody = exports.McpFailureScope = exports.McpErrorData = exports.MCP_REQUEST_ID_META_KEY = exports.WpMcpServer = exports.McpApiDispatcher = exports.McpDeployment = exports.McpBindOptions = exports.McpInvocationContext = exports.MCP_INVOCATION_CONTEXT = exports.McpApiBinding = exports.RegisteredMcpTool = exports.McpToolRegistry = exports.WpMcpServerConfig = exports.VerifiedMcpCredential = exports.McpProtectedResourceMetadata = exports.MintedMcpAccessToken = exports.McpEndpointDescriptor = exports.MAX_MCP_ENDPOINT_JWT_LIFETIME_SECONDS = exports.MAX_MCP_ACCOUNT_VALIDATION_AGE_SECONDS = exports.MAX_MCP_ACCESS_TOKEN_LIFETIME_SECONDS = void 0;
+exports.WpMcpErrorTranslator = exports.ModelVisibleToolError = exports.McpHttpErrorDetail = exports.McpHttpErrorBody = exports.McpErrorData = exports.McpDefaultToolCallRenderer = exports.McpCorrelation = exports.MCP_REQUEST_ID_META_KEY = exports.WpMcpServer = exports.McpApiDispatcher = exports.McpDeployment = exports.McpBindOptions = exports.McpInvocationContext = exports.MCP_INVOCATION_CONTEXT = exports.McpApiBinding = exports.RegisteredMcpTool = exports.McpToolRegistry = exports.WpMcpServerConfig = exports.VerifiedMcpCredential = exports.McpProtectedResourceMetadata = exports.MintedMcpAccessToken = exports.McpEndpointDescriptor = exports.MAX_MCP_ENDPOINT_JWT_LIFETIME_SECONDS = exports.MAX_MCP_ACCOUNT_VALIDATION_AGE_SECONDS = exports.MAX_MCP_ACCESS_TOKEN_LIFETIME_SECONDS = void 0;
 var McpAuth_1 = require("./McpAuth");
 Object.defineProperty(exports, "MAX_MCP_ACCESS_TOKEN_LIFETIME_SECONDS", { enumerable: true, get: function () { return McpAuth_1.MAX_MCP_ACCESS_TOKEN_LIFETIME_SECONDS; } });
 Object.defineProperty(exports, "MAX_MCP_ACCOUNT_VALIDATION_AGE_SECONDS", { enumerable: true, get: function () { return McpAuth_1.MAX_MCP_ACCOUNT_VALIDATION_AGE_SECONDS; } });
@@ -28,8 +28,9 @@ var WpMcpServer_1 = require("./WpMcpServer");
 Object.defineProperty(exports, "WpMcpServer", { enumerable: true, get: function () { return WpMcpServer_1.WpMcpServer; } });
 var WpMcpErrorTranslator_1 = require("./WpMcpErrorTranslator");
 Object.defineProperty(exports, "MCP_REQUEST_ID_META_KEY", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.MCP_REQUEST_ID_META_KEY; } });
+Object.defineProperty(exports, "McpCorrelation", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.McpCorrelation; } });
+Object.defineProperty(exports, "McpDefaultToolCallRenderer", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.McpDefaultToolCallRenderer; } });
 Object.defineProperty(exports, "McpErrorData", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.McpErrorData; } });
-Object.defineProperty(exports, "McpFailureScope", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.McpFailureScope; } });
 Object.defineProperty(exports, "McpHttpErrorBody", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.McpHttpErrorBody; } });
 Object.defineProperty(exports, "McpHttpErrorDetail", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.McpHttpErrorDetail; } });
 Object.defineProperty(exports, "ModelVisibleToolError", { enumerable: true, get: function () { return WpMcpErrorTranslator_1.ModelVisibleToolError; } });

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/index.ts"],"names":[],"mappings":";;;AAAA,qCASmB;AARf,gIAAA,qCAAqC,OAAA;AACrC,iIAAA,sCAAsC,OAAA;AACtC,gIAAA,qCAAqC,OAAA;AACrC,gHAAA,qBAAqB,OAAA;AACrB,+GAAA,oBAAoB,OAAA;AACpB,uHAAA,4BAA4B,OAAA;AAC5B,gHAAA,qBAAqB,OAAA;AACrB,4GAAA,iBAAiB,OAAA;AAGrB,qDAAuE;AAA9D,kHAAA,eAAe,OAAA;AAAE,oHAAA,iBAAiB,OAAA;AAC3C,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AAEtB,+DAAsF;AAA7E,8HAAA,sBAAsB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAErD,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AAEtB,uDAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AACzB,6CAA4C;AAAnC,0GAAA,WAAW,OAAA;AACpB,+DAQgC;AAP5B,+HAAA,uBAAuB,OAAA;AACvB,oHAAA,YAAY,OAAA;AACZ,uHAAA,eAAe,OAAA;AACf,wHAAA,gBAAgB,OAAA;AAChB,0HAAA,kBAAkB,OAAA;AAClB,6HAAA,qBAAqB,OAAA;AACrB,4HAAA,oBAAoB,OAAA","sourcesContent":["export {\n    MAX_MCP_ACCESS_TOKEN_LIFETIME_SECONDS,\n    MAX_MCP_ACCOUNT_VALIDATION_AGE_SECONDS,\n    MAX_MCP_ENDPOINT_JWT_LIFETIME_SECONDS,\n    McpEndpointDescriptor,\n    MintedMcpAccessToken,\n    McpProtectedResourceMetadata,\n    VerifiedMcpCredential,\n    WpMcpServerConfig,\n} from './McpAuth';\nexport type { McpAccessTokenAuthority, McpEndpointMintRequestFactory } from './McpAuth';\nexport { McpToolRegistry, RegisteredMcpTool } from './McpToolRegistry';\nexport { McpApiBinding } from './McpApiBinding';\nexport type { McpBindingTopology } from './McpApiBinding';\nexport { MCP_INVOCATION_CONTEXT, McpInvocationContext } from './McpInvocationContext';\nexport type { McpProgressReporter } from './McpInvocationContext';\nexport { McpBindOptions } from './McpBindOptions';\nexport { McpDeployment } from './McpDeployment';\nexport type { McpDeploymentMode } from './McpDeployment';\nexport { McpApiDispatcher } from './McpApiDispatcher';\nexport { WpMcpServer } from './WpMcpServer';\nexport {\n    MCP_REQUEST_ID_META_KEY,\n    McpErrorData,\n    McpFailureScope,\n    McpHttpErrorBody,\n    McpHttpErrorDetail,\n    ModelVisibleToolError,\n    WpMcpErrorTranslator,\n} from './WpMcpErrorTranslator';\nexport type { McpErrorTranslators } from './WpMcpErrorTranslator';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/index.ts"],"names":[],"mappings":";;;AAAA,qCASmB;AARf,gIAAA,qCAAqC,OAAA;AACrC,iIAAA,sCAAsC,OAAA;AACtC,gIAAA,qCAAqC,OAAA;AACrC,gHAAA,qBAAqB,OAAA;AACrB,+GAAA,oBAAoB,OAAA;AACpB,uHAAA,4BAA4B,OAAA;AAC5B,gHAAA,qBAAqB,OAAA;AACrB,4GAAA,iBAAiB,OAAA;AAGrB,qDAAuE;AAA9D,kHAAA,eAAe,OAAA;AAAE,oHAAA,iBAAiB,OAAA;AAC3C,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AAEtB,+DAAsF;AAA7E,8HAAA,sBAAsB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAErD,mDAAkD;AAAzC,gHAAA,cAAc,OAAA;AACvB,iDAAgD;AAAvC,8GAAA,aAAa,OAAA;AAEtB,uDAAsD;AAA7C,oHAAA,gBAAgB,OAAA;AACzB,6CAA4C;AAAnC,0GAAA,WAAW,OAAA;AACpB,+DASgC;AAR5B,+HAAA,uBAAuB,OAAA;AACvB,sHAAA,cAAc,OAAA;AACd,kIAAA,0BAA0B,OAAA;AAC1B,oHAAA,YAAY,OAAA;AACZ,wHAAA,gBAAgB,OAAA;AAChB,0HAAA,kBAAkB,OAAA;AAClB,6HAAA,qBAAqB,OAAA;AACrB,4HAAA,oBAAoB,OAAA","sourcesContent":["export {\n    MAX_MCP_ACCESS_TOKEN_LIFETIME_SECONDS,\n    MAX_MCP_ACCOUNT_VALIDATION_AGE_SECONDS,\n    MAX_MCP_ENDPOINT_JWT_LIFETIME_SECONDS,\n    McpEndpointDescriptor,\n    MintedMcpAccessToken,\n    McpProtectedResourceMetadata,\n    VerifiedMcpCredential,\n    WpMcpServerConfig,\n} from './McpAuth';\nexport type { McpAccessTokenAuthority, McpEndpointMintRequestFactory } from './McpAuth';\nexport { McpToolRegistry, RegisteredMcpTool } from './McpToolRegistry';\nexport { McpApiBinding } from './McpApiBinding';\nexport type { McpBindingTopology } from './McpApiBinding';\nexport { MCP_INVOCATION_CONTEXT, McpInvocationContext } from './McpInvocationContext';\nexport type { McpProgressReporter } from './McpInvocationContext';\nexport { McpBindOptions } from './McpBindOptions';\nexport { McpDeployment } from './McpDeployment';\nexport type { McpDeploymentMode } from './McpDeployment';\nexport { McpApiDispatcher } from './McpApiDispatcher';\nexport { WpMcpServer } from './WpMcpServer';\nexport {\n    MCP_REQUEST_ID_META_KEY,\n    McpCorrelation,\n    McpDefaultToolCallRenderer,\n    McpErrorData,\n    McpHttpErrorBody,\n    McpHttpErrorDetail,\n    ModelVisibleToolError,\n    WpMcpErrorTranslator,\n} from './WpMcpErrorTranslator';\nexport type { McpErrorTranslators } from './WpMcpErrorTranslator';\n"]}