@webpieces/mcp-server 0.4.990 → 0.4.992

package/src/McpAuthorityCompileAssertions.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.McpProfilesCompileAssertions = exports.McpPrincipalCompileAssertions = exports.McpAuthorityCompileAssertions = void 0;
+exports.McpServerConfigCompileAssertions = exports.McpProfilesCompileAssertions = exports.McpPrincipalCompileAssertions = exports.McpAuthorityCompileAssertions = void 0;
 const http_routing_1 = require("@webpieces/http-routing");
 const McpAuth_1 = require("./McpAuth");
+const McpToolset_1 = require("./McpToolset");
 class ExampleJwtMintRequest {
     subject;
     constructor(subject) {
@@ -46,10 +47,37 @@ class McpPrincipalCompileAssertions {
 exports.McpPrincipalCompileAssertions = McpPrincipalCompileAssertions;
 /** Profile-selection arity is checked by tsc, not only by runtime specs. */
 class McpProfilesCompileAssertions {
-    empty(config) {
-        // @ts-expect-error an explicit server selection must include at least one group
-        config.setToolProfiles([]);
+    empty(bindings, policy) {
+        // @ts-expect-error a toolset must serve at least one profile group
+        new McpToolset_1.McpToolset(bindings, [], policy, []);
     }
 }
 exports.McpProfilesCompileAssertions = McpProfilesCompileAssertions;
+/**
+ * The OAuth-only setters moved into `mcpOAuth(...)` (#1416) and the toolset owns WHICH tools: none of
+ * the old spellings compiles, so an agent upgrading is told by tsc, not by a deprecation it never sees.
+ */
+class McpServerConfigCompileAssertions {
+    removedOAuthSetters(config, authority) {
+        // @ts-expect-error moved to mcpOAuth(authority, authorizationServers, requiredScopes, tokenFormat)
+        config.setAccessTokenAuthority(authority);
+        // @ts-expect-error moved to mcpOAuth(authority, authorizationServers, ...)
+        config.setAuthorizationServers(['https://login.example.test']);
+        // @ts-expect-error moved to mcpOAuth(authority, authorizationServers, requiredScopes, ...)
+        config.setRequiredScopes(['tools']);
+        // @ts-expect-error moved to mcpOAuth(..., maxAccountValidationAgeSeconds)
+        config.setMaxAccountValidationAgeSeconds(60);
+    }
+    noPublicDoor(config) {
+        // @ts-expect-error a public mode identifies no caller to authorize tools against
+        config.setAuth([{ kind: 'public' }]);
+    }
+    removedToolsetSetters(config, policy) {
+        // @ts-expect-error profiles are the McpToolset's: new McpToolset(bindings, catalogs, policy, profiles)
+        config.setToolProfiles(['default']);
+        // @ts-expect-error the policy is the McpToolset's: new McpToolset(bindings, catalogs, policy, profiles)
+        config.setAuthorizationService(policy);
+    }
+}
+exports.McpServerConfigCompileAssertions = McpServerConfigCompileAssertions;
 //# sourceMappingURL=McpAuthorityCompileAssertions.js.map

package/src/McpAuthorityCompileAssertions.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpAuthorityCompileAssertions.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/McpAuthorityCompileAssertions.ts"],"names":[],"mappings":";;;AAAA,0DAAkF;AAClF,uCAAoH;AAEpH,MAAM,qBAAqB;IACK;IAA5B,YAA4B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;CAClD;AAED,MAAM,eAAe;IAEG;IACA;IAFpB,YACoB,OAAe,EACf,QAAgB;QADhB,YAAO,GAAP,OAAO,CAAQ;QACf,aAAQ,GAAR,QAAQ,CAAQ;IACjC,CAAC;CACP;AAED,uGAAuG;AACvG,MAAa,6BACT,SAAQ,sBAA8B;IAG7B,KAAK,CAAC,IAAI,CAAC,OAA8B;QAC9C,OAAO,IAAI,wBAAS,CAAC,YAAY,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,OAAO,IAAI,kCAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAsB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,8BAAoB,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,iBAAiB,CACnB,YAAoB,EACpB,gBAAwB;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,+BAAqB,CAC5B,cAAc,EACd,6BAA6B,EAC7B,gBAAgB,EAChB,GAAG,EACH,GAAG,GAAG,EAAE,EACR,CAAC,OAAO,CAAC,EACT,GAAG,EACH,IAAI,kCAAmB,CAAC,cAAc,CAAC,CAC1C,CAAC;IACN,CAAC;CACJ;AAjCD,sEAiCC;AAED,+EAA+E;AAC/E,MAAa,6BAA6B;IACtC,KAAK,CAAC,UAAiC;QACnC,iGAAiG;QACjG,UAAU,CAAC,YAAY,CAAC;QACxB,OAAO,UAAU,CAAC,cAAc,CAAC;IACrC,CAAC;CACJ;AAND,sEAMC;AAED,4EAA4E;AAC5E,MAAa,4BAA4B;IACrC,KAAK,CAAC,MAAiC;QACnC,gFAAgF;QAChF,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;CACJ;AALD,oEAKC","sourcesContent":["import { AuthenticatedCaller, JwtHook, MintedJwt } from '@webpieces/http-routing';\nimport { McpAccessTokenAuthority, MintedMcpAccessToken, VerifiedMcpCredential, WpMcpServerConfig } from './McpAuth';\n\nclass ExampleJwtMintRequest {\n    constructor(public readonly subject: string) {}\n}\n\nclass ExampleMcpGrant {\n    constructor(\n        public readonly subject: string,\n        public readonly resource: string,\n    ) {}\n}\n\n/** Compile assertion: one application authority can own both endpoint JWT and MCP token lifecycles. */\nexport class McpAuthorityCompileAssertions\n    extends JwtHook<ExampleJwtMintRequest>\n    implements McpAccessTokenAuthority<ExampleMcpGrant>\n{\n    override async mint(request: ExampleJwtMintRequest): Promise<MintedJwt> {\n        return new MintedJwt(`endpoint:${request.subject}`, Date.now() / 1000 + 60);\n    }\n\n    override async parseJwt(token: string): Promise<AuthenticatedCaller> {\n        return new AuthenticatedCaller(token);\n    }\n\n    async mintAccessToken(grant: ExampleMcpGrant): Promise<MintedMcpAccessToken> {\n        const now = Math.floor(Date.now() / 1000);\n        return new MintedMcpAccessToken(`mcp:${grant.subject}`, grant.resource, now, now + 60);\n    }\n\n    async verifyAccessToken(\n        _accessToken: string,\n        expectedResource: string,\n    ): Promise<VerifiedMcpCredential> {\n        const now = Math.floor(Date.now() / 1000);\n        return new VerifiedMcpCredential(\n            'example-user',\n            'https://issuer.example.test',\n            expectedResource,\n            now,\n            now + 60,\n            ['tools'],\n            now,\n            new AuthenticatedCaller('example-user'),\n        );\n    }\n}\n\n/** Compiled hard-cut assertions; Vitest does not type-check specifications. */\nexport class McpPrincipalCompileAssertions {\n    roles(credential: VerifiedMcpCredential): readonly string[] {\n        // @ts-expect-error listingRoles was replaced by principalRoles derived from the canonical caller\n        credential.listingRoles;\n        return credential.principalRoles;\n    }\n}\n\n/** Profile-selection arity is checked by tsc, not only by runtime specs. */\nexport class McpProfilesCompileAssertions {\n    empty(config: WpMcpServerConfig<string>): void {\n        // @ts-expect-error an explicit server selection must include at least one group\n        config.setToolProfiles([]);\n    }\n}\n"]}
+{"version":3,"file":"McpAuthorityCompileAssertions.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/McpAuthorityCompileAssertions.ts"],"names":[],"mappings":";;;AAAA,0DAKiC;AACjC,uCAKmB;AAEnB,6CAA0C;AAE1C,MAAM,qBAAqB;IACK;IAA5B,YAA4B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;CAClD;AAED,MAAM,eAAe;IAEG;IACA;IAFpB,YACoB,OAAe,EACf,QAAgB;QADhB,YAAO,GAAP,OAAO,CAAQ;QACf,aAAQ,GAAR,QAAQ,CAAQ;IACjC,CAAC;CACP;AAED,uGAAuG;AACvG,MAAa,6BACT,SAAQ,sBAA8B;IAG7B,KAAK,CAAC,IAAI,CAAC,OAA8B;QAC9C,OAAO,IAAI,wBAAS,CAAC,YAAY,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,KAAa;QACjC,OAAO,IAAI,kCAAmB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAsB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,8BAAoB,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,iBAAiB,CACnB,YAAoB,EACpB,gBAAwB;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,+BAAqB,CAC5B,cAAc,EACd,6BAA6B,EAC7B,gBAAgB,EAChB,GAAG,EACH,GAAG,GAAG,EAAE,EACR,CAAC,OAAO,CAAC,EACT,GAAG,EACH,IAAI,kCAAmB,CAAC,cAAc,CAAC,CAC1C,CAAC;IACN,CAAC;CACJ;AAjCD,sEAiCC;AAED,+EAA+E;AAC/E,MAAa,6BAA6B;IACtC,KAAK,CAAC,UAAiC;QACnC,iGAAiG;QACjG,UAAU,CAAC,YAAY,CAAC;QACxB,OAAO,UAAU,CAAC,cAAc,CAAC;IACrC,CAAC;CACJ;AAND,sEAMC;AAED,4EAA4E;AAC5E,MAAa,4BAA4B;IACrC,KAAK,CAAC,QAAkC,EAAE,MAA4B;QAClE,mEAAmE;QACnE,IAAI,uBAAU,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;CACJ;AALD,oEAKC;AAED;;;GAGG;AACH,MAAa,gCAAgC;IACzC,mBAAmB,CACf,MAAyB,EACzB,SAA0C;QAE1C,mGAAmG;QACnG,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,MAAM,CAAC,uBAAuB,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC/D,2FAA2F;QAC3F,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpC,0EAA0E;QAC1E,MAAM,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,MAAyB;QAClC,iFAAiF;QACjF,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,qBAAqB,CAAC,MAAyB,EAAE,MAA4B;QACzE,uGAAuG;QACvG,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACpC,wGAAwG;QACxG,MAAM,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;CACJ;AA1BD,4EA0BC","sourcesContent":["import {\n    AuthenticatedCaller,\n    AuthorizationService,\n    JwtHook,\n    MintedJwt,\n} from '@webpieces/http-routing';\nimport {\n    McpAccessTokenAuthority,\n    MintedMcpAccessToken,\n    VerifiedMcpCredential,\n    WpMcpServerConfig,\n} from './McpAuth';\nimport { McpApiBinding } from './McpApiBinding';\nimport { McpToolset } from './McpToolset';\n\nclass ExampleJwtMintRequest {\n    constructor(public readonly subject: string) {}\n}\n\nclass ExampleMcpGrant {\n    constructor(\n        public readonly subject: string,\n        public readonly resource: string,\n    ) {}\n}\n\n/** Compile assertion: one application authority can own both endpoint JWT and MCP token lifecycles. */\nexport class McpAuthorityCompileAssertions\n    extends JwtHook<ExampleJwtMintRequest>\n    implements McpAccessTokenAuthority<ExampleMcpGrant>\n{\n    override async mint(request: ExampleJwtMintRequest): Promise<MintedJwt> {\n        return new MintedJwt(`endpoint:${request.subject}`, Date.now() / 1000 + 60);\n    }\n\n    override async parseJwt(token: string): Promise<AuthenticatedCaller> {\n        return new AuthenticatedCaller(token);\n    }\n\n    async mintAccessToken(grant: ExampleMcpGrant): Promise<MintedMcpAccessToken> {\n        const now = Math.floor(Date.now() / 1000);\n        return new MintedMcpAccessToken(`mcp:${grant.subject}`, grant.resource, now, now + 60);\n    }\n\n    async verifyAccessToken(\n        _accessToken: string,\n        expectedResource: string,\n    ): Promise<VerifiedMcpCredential> {\n        const now = Math.floor(Date.now() / 1000);\n        return new VerifiedMcpCredential(\n            'example-user',\n            'https://issuer.example.test',\n            expectedResource,\n            now,\n            now + 60,\n            ['tools'],\n            now,\n            new AuthenticatedCaller('example-user'),\n        );\n    }\n}\n\n/** Compiled hard-cut assertions; Vitest does not type-check specifications. */\nexport class McpPrincipalCompileAssertions {\n    roles(credential: VerifiedMcpCredential): readonly string[] {\n        // @ts-expect-error listingRoles was replaced by principalRoles derived from the canonical caller\n        credential.listingRoles;\n        return credential.principalRoles;\n    }\n}\n\n/** Profile-selection arity is checked by tsc, not only by runtime specs. */\nexport class McpProfilesCompileAssertions {\n    empty(bindings: readonly McpApiBinding[], policy: AuthorizationService): void {\n        // @ts-expect-error a toolset must serve at least one profile group\n        new McpToolset(bindings, [], policy, []);\n    }\n}\n\n/**\n * The OAuth-only setters moved into `mcpOAuth(...)` (#1416) and the toolset owns WHICH tools: none of\n * the old spellings compiles, so an agent upgrading is told by tsc, not by a deprecation it never sees.\n */\nexport class McpServerConfigCompileAssertions {\n    removedOAuthSetters(\n        config: WpMcpServerConfig,\n        authority: McpAccessTokenAuthority<string>,\n    ): void {\n        // @ts-expect-error moved to mcpOAuth(authority, authorizationServers, requiredScopes, tokenFormat)\n        config.setAccessTokenAuthority(authority);\n        // @ts-expect-error moved to mcpOAuth(authority, authorizationServers, ...)\n        config.setAuthorizationServers(['https://login.example.test']);\n        // @ts-expect-error moved to mcpOAuth(authority, authorizationServers, requiredScopes, ...)\n        config.setRequiredScopes(['tools']);\n        // @ts-expect-error moved to mcpOAuth(..., maxAccountValidationAgeSeconds)\n        config.setMaxAccountValidationAgeSeconds(60);\n    }\n\n    noPublicDoor(config: WpMcpServerConfig): void {\n        // @ts-expect-error a public mode identifies no caller to authorize tools against\n        config.setAuth([{ kind: 'public' }]);\n    }\n\n    removedToolsetSetters(config: WpMcpServerConfig, policy: AuthorizationService): void {\n        // @ts-expect-error profiles are the McpToolset's: new McpToolset(bindings, catalogs, policy, profiles)\n        config.setToolProfiles(['default']);\n        // @ts-expect-error the policy is the McpToolset's: new McpToolset(bindings, catalogs, policy, profiles)\n        config.setAuthorizationService(policy);\n    }\n}\n"]}

package/src/McpBindOptions.d.ts

@@ -1,18 +1,11 @@
-import { McpApiBinding } from './McpApiBinding';
 import { McpDeployment } from './McpDeployment';
-import { McpToolCatalog } from './McpToolCatalog';
+/**
+ * WHERE and HOW one `WpMcpServer` is mounted. WHICH tools it serves is the `McpToolset` handed to
+ * `new WpMcpServer(config, toolset)`, never a bind option: one server is one path is one toolset.
+ */
 export declare class McpBindOptions {
     /** Supplied by the application/discovery config; Webpieces never assumes `/mcp`. */
     readonly endpointPath: string;
-    readonly bindings: readonly McpApiBinding[];
-    /**
-     * The tools the build published — ONE catalog per bound contract, each the
-     * `mcp-<ContractClass>-tools.json` `wp-openapi` wrote beside its library's OpenAPI documents,
-     * read with `McpToolCatalog.fromPackages([...], __dirname)`. REQUIRED because it is the only
-     * source of a tool's documentation and schemas; there is no reflect-metadata fallback.
-     * `McpToolRegistry` refuses to boot unless it holds exactly one catalog per bound contract.
-     */
-    readonly toolCatalogs: readonly McpToolCatalog[];
     readonly deployment: McpDeployment;
     /** Requests without Origin remain valid for non-browser MCP clients. */
     readonly allowedOrigins: readonly string[];
@@ -20,15 +13,7 @@ export declare class McpBindOptions {
     readonly keepAliveMs: number;
     constructor(
     /** Supplied by the application/discovery config; Webpieces never assumes `/mcp`. */
-    endpointPath: string, bindings: readonly McpApiBinding[], 
-    /**
-     * The tools the build published — ONE catalog per bound contract, each the
-     * `mcp-<ContractClass>-tools.json` `wp-openapi` wrote beside its library's OpenAPI documents,
-     * read with `McpToolCatalog.fromPackages([...], __dirname)`. REQUIRED because it is the only
-     * source of a tool's documentation and schemas; there is no reflect-metadata fallback.
-     * `McpToolRegistry` refuses to boot unless it holds exactly one catalog per bound contract.
-     */
-    toolCatalogs: readonly McpToolCatalog[], deployment: McpDeployment, 
+    endpointPath: string, deployment: McpDeployment, 
     /** Requests without Origin remain valid for non-browser MCP clients. */
     allowedOrigins?: readonly string[], maxSubscriptions?: number, keepAliveMs?: number);
 }

package/src/McpBindOptions.js

@@ -1,30 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.McpBindOptions = void 0;
+/**
+ * WHERE and HOW one `WpMcpServer` is mounted. WHICH tools it serves is the `McpToolset` handed to
+ * `new WpMcpServer(config, toolset)`, never a bind option: one server is one path is one toolset.
+ */
 class McpBindOptions {
     endpointPath;
-    bindings;
-    toolCatalogs;
     deployment;
     allowedOrigins;
     maxSubscriptions;
     keepAliveMs;
     constructor(
     /** Supplied by the application/discovery config; Webpieces never assumes `/mcp`. */
-    endpointPath, bindings, 
-    /**
-     * The tools the build published — ONE catalog per bound contract, each the
-     * `mcp-<ContractClass>-tools.json` `wp-openapi` wrote beside its library's OpenAPI documents,
-     * read with `McpToolCatalog.fromPackages([...], __dirname)`. REQUIRED because it is the only
-     * source of a tool's documentation and schemas; there is no reflect-metadata fallback.
-     * `McpToolRegistry` refuses to boot unless it holds exactly one catalog per bound contract.
-     */
-    toolCatalogs, deployment, 
+    endpointPath, deployment, 
     /** Requests without Origin remain valid for non-browser MCP clients. */
     allowedOrigins = [], maxSubscriptions = 1024, keepAliveMs = 15_000) {
         this.endpointPath = endpointPath;
-        this.bindings = bindings;
-        this.toolCatalogs = toolCatalogs;
         this.deployment = deployment;
         this.allowedOrigins = allowedOrigins;
         this.maxSubscriptions = maxSubscriptions;
@@ -32,8 +24,6 @@ class McpBindOptions {
         if (!endpointPath.startsWith('/') || endpointPath.includes('?')) {
             throw new Error('MCP endpointPath must be an absolute path without a query string.');
         }
-        if (bindings.length === 0)
-            throw new Error('MCP binding requires at least one API contract.');
         if (!Number.isInteger(maxSubscriptions) || maxSubscriptions <= 0) {
             throw new Error('MCP maxSubscriptions must be a positive integer.');
         }

package/src/McpBindOptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpBindOptions.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/McpBindOptions.ts"],"names":[],"mappings":";;;AAIA,MAAa,cAAc;IAGH;IACA;IAQA;IACA;IAEA;IACA;IACA;IAhBpB;IACI,oFAAoF;IACpE,YAAoB,EACpB,QAAkC;IAClD;;;;;;OAMG;IACa,YAAuC,EACvC,UAAyB;IACzC,wEAAwE;IACxD,iBAAoC,EAAE,EACtC,mBAAmB,IAAI,EACvB,cAAc,MAAM;QAdpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,aAAQ,GAAR,QAAQ,CAA0B;QAQlC,iBAAY,GAAZ,YAAY,CAA2B;QACvC,eAAU,GAAV,UAAU,CAAe;QAEzB,mBAAc,GAAd,cAAc,CAAwB;QACtC,qBAAgB,GAAhB,gBAAgB,CAAO;QACvB,gBAAW,GAAX,WAAW,CAAS;QAEpC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;IACL,CAAC;CACJ;AA/BD,wCA+BC","sourcesContent":["import { McpApiBinding } from './McpApiBinding';\nimport { McpDeployment } from './McpDeployment';\nimport { McpToolCatalog } from './McpToolCatalog';\n\nexport class McpBindOptions {\n    constructor(\n        /** Supplied by the application/discovery config; Webpieces never assumes `/mcp`. */\n        public readonly endpointPath: string,\n        public readonly bindings: readonly McpApiBinding[],\n        /**\n         * The tools the build published — ONE catalog per bound contract, each the\n         * `mcp-<ContractClass>-tools.json` `wp-openapi` wrote beside its library's OpenAPI documents,\n         * read with `McpToolCatalog.fromPackages([...], __dirname)`. REQUIRED because it is the only\n         * source of a tool's documentation and schemas; there is no reflect-metadata fallback.\n         * `McpToolRegistry` refuses to boot unless it holds exactly one catalog per bound contract.\n         */\n        public readonly toolCatalogs: readonly McpToolCatalog[],\n        public readonly deployment: McpDeployment,\n        /** Requests without Origin remain valid for non-browser MCP clients. */\n        public readonly allowedOrigins: readonly string[] = [],\n        public readonly maxSubscriptions = 1024,\n        public readonly keepAliveMs = 15_000,\n    ) {\n        if (!endpointPath.startsWith('/') || endpointPath.includes('?')) {\n            throw new Error('MCP endpointPath must be an absolute path without a query string.');\n        }\n        if (bindings.length === 0)\n            throw new Error('MCP binding requires at least one API contract.');\n        if (!Number.isInteger(maxSubscriptions) || maxSubscriptions <= 0) {\n            throw new Error('MCP maxSubscriptions must be a positive integer.');\n        }\n        if (!Number.isFinite(keepAliveMs) || keepAliveMs < 0) {\n            throw new Error('MCP keepAliveMs must be zero or a positive number.');\n        }\n    }\n}\n"]}
+{"version":3,"file":"McpBindOptions.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/McpBindOptions.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACH,MAAa,cAAc;IAGH;IACA;IAEA;IACA;IACA;IAPpB;IACI,oFAAoF;IACpE,YAAoB,EACpB,UAAyB;IACzC,wEAAwE;IACxD,iBAAoC,EAAE,EACtC,mBAAmB,IAAI,EACvB,cAAc,MAAM;QALpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,eAAU,GAAV,UAAU,CAAe;QAEzB,mBAAc,GAAd,cAAc,CAAwB;QACtC,qBAAgB,GAAhB,gBAAgB,CAAO;QACvB,gBAAW,GAAX,WAAW,CAAS;QAEpC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;IACL,CAAC;CACJ;AApBD,wCAoBC","sourcesContent":["import { McpDeployment } from './McpDeployment';\n\n/**\n * WHERE and HOW one `WpMcpServer` is mounted. WHICH tools it serves is the `McpToolset` handed to\n * `new WpMcpServer(config, toolset)`, never a bind option: one server is one path is one toolset.\n */\nexport class McpBindOptions {\n    constructor(\n        /** Supplied by the application/discovery config; Webpieces never assumes `/mcp`. */\n        public readonly endpointPath: string,\n        public readonly deployment: McpDeployment,\n        /** Requests without Origin remain valid for non-browser MCP clients. */\n        public readonly allowedOrigins: readonly string[] = [],\n        public readonly maxSubscriptions = 1024,\n        public readonly keepAliveMs = 15_000,\n    ) {\n        if (!endpointPath.startsWith('/') || endpointPath.includes('?')) {\n            throw new Error('MCP endpointPath must be an absolute path without a query string.');\n        }\n        if (!Number.isInteger(maxSubscriptions) || maxSubscriptions <= 0) {\n            throw new Error('MCP maxSubscriptions must be a positive integer.');\n        }\n        if (!Number.isFinite(keepAliveMs) || keepAliveMs < 0) {\n            throw new Error('MCP keepAliveMs must be zero or a positive number.');\n        }\n    }\n}\n"]}

package/src/McpClientSet.d.ts

@@ -0,0 +1,35 @@
+import { CallToolResult, Client, Tool } from '@modelcontextprotocol/client';
+/** The `tools/call` parameters, exactly as `Client.callTool` takes them. */
+export type McpClientSetCall = Parameters<Client['callTool']>[0];
+/** Two connected clients publish one tool name: tool names are flat across servers, so it is refused. */
+export declare class McpDuplicateToolError extends Error {
+    readonly toolName: string;
+    readonly firstClient: number;
+    readonly secondClient: number;
+    constructor(toolName: string, firstClient: number, secondClient: number);
+}
+/** A tool name no merged client publishes to the current caller. */
+export declare class McpUnknownToolError extends Error {
+    readonly toolName: string;
+    constructor(toolName: string);
+}
+/**
+ * Several MCP clients an agent holds — its in-memory toolset plus another service's remote endpoint —
+ * presented as one: `listTools()` is the union, `callTool()` routes by name.
+ *
+ * Tool names are flat across servers, so a name published by two clients is REFUSED with
+ * {@link McpDuplicateToolError}: at {@link merge} (connect time) and again on every `listTools()`,
+ * because each server projects its tools per caller and a later caller can see a tool an earlier one
+ * could not. Like the clients it merges, it reads the caller per request: call it inside the
+ * `RequestContext` of the caller.
+ */
+export declare class McpClientSet {
+    private readonly clients;
+    private routes;
+    private constructor();
+    static merge(clients: readonly Client[]): Promise<McpClientSet>;
+    /** The union of every client's tools for the current caller; refuses a name two clients publish. */
+    listTools(): Promise<Tool[]>;
+    /** Routes the call to the client that publishes `params.name`, refreshing the routes once if unknown. */
+    callTool(params: McpClientSetCall): Promise<CallToolResult>;
+}

package/src/McpClientSet.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpClientSet = exports.McpUnknownToolError = exports.McpDuplicateToolError = void 0;
+/** Two connected clients publish one tool name: tool names are flat across servers, so it is refused. */
+class McpDuplicateToolError extends Error {
+    toolName;
+    firstClient;
+    secondClient;
+    constructor(toolName, firstClient, secondClient) {
+        super(`MCP tool '${toolName}' is published by client #${firstClient} and client #${secondClient}. ` +
+            'Tool names are flat across every server an agent holds, so the call could not be routed; ' +
+            'rename one tool or drop one client.');
+        this.toolName = toolName;
+        this.firstClient = firstClient;
+        this.secondClient = secondClient;
+        this.name = 'McpDuplicateToolError';
+    }
+}
+exports.McpDuplicateToolError = McpDuplicateToolError;
+/** A tool name no merged client publishes to the current caller. */
+class McpUnknownToolError extends Error {
+    toolName;
+    constructor(toolName) {
+        super(`Unknown MCP tool '${toolName}': no merged client publishes it to this caller.`);
+        this.toolName = toolName;
+        this.name = 'McpUnknownToolError';
+    }
+}
+exports.McpUnknownToolError = McpUnknownToolError;
+/**
+ * Several MCP clients an agent holds — its in-memory toolset plus another service's remote endpoint —
+ * presented as one: `listTools()` is the union, `callTool()` routes by name.
+ *
+ * Tool names are flat across servers, so a name published by two clients is REFUSED with
+ * {@link McpDuplicateToolError}: at {@link merge} (connect time) and again on every `listTools()`,
+ * because each server projects its tools per caller and a later caller can see a tool an earlier one
+ * could not. Like the clients it merges, it reads the caller per request: call it inside the
+ * `RequestContext` of the caller.
+ */
+class McpClientSet {
+    clients;
+    routes = new Map();
+    constructor(clients) {
+        this.clients = clients;
+    }
+    // webpieces-disable no-function-outside-class -- validating factory; refuses duplicate names before the set exists
+    static async merge(clients) {
+        if (clients.length === 0)
+            throw new Error('McpClientSet.merge(...) requires at least one client.');
+        const set = new McpClientSet([...clients]);
+        await set.listTools();
+        return set;
+    }
+    /** The union of every client's tools for the current caller; refuses a name two clients publish. */
+    async listTools() {
+        const lists = await Promise.all(this.clients.map((client) => client.listTools()));
+        const routes = new Map();
+        const owners = new Map();
+        const tools = [];
+        lists.forEach((list, index) => {
+            for (const tool of list.tools) {
+                const owner = owners.get(tool.name);
+                if (owner !== undefined)
+                    throw new McpDuplicateToolError(tool.name, owner, index);
+                owners.set(tool.name, index);
+                routes.set(tool.name, this.clients[index]);
+                tools.push(tool);
+            }
+        });
+        this.routes = routes;
+        return tools;
+    }
+    /** Routes the call to the client that publishes `params.name`, refreshing the routes once if unknown. */
+    async callTool(params) {
+        let client = this.routes.get(params.name);
+        if (client === undefined) {
+            await this.listTools();
+            client = this.routes.get(params.name);
+        }
+        if (client === undefined)
+            throw new McpUnknownToolError(params.name);
+        return client.callTool(params);
+    }
+}
+exports.McpClientSet = McpClientSet;
+//# sourceMappingURL=McpClientSet.js.map

package/src/McpClientSet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpClientSet.js","sourceRoot":"","sources":["../../../../../packages/http/mcp-server/src/McpClientSet.ts"],"names":[],"mappings":";;;AAKA,yGAAyG;AACzG,MAAa,qBAAsB,SAAQ,KAAK;IAExB;IACA;IACA;IAHpB,YACoB,QAAgB,EAChB,WAAmB,EACnB,YAAoB;QAEpC,KAAK,CACD,aAAa,QAAQ,6BAA6B,WAAW,gBAAgB,YAAY,IAAI;YACzF,2FAA2F;YAC3F,qCAAqC,CAC5C,CAAC;QARc,aAAQ,GAAR,QAAQ,CAAQ;QAChB,gBAAW,GAAX,WAAW,CAAQ;QACnB,iBAAY,GAAZ,YAAY,CAAQ;QAOpC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACxC,CAAC;CACJ;AAbD,sDAaC;AAED,oEAAoE;AACpE,MAAa,mBAAoB,SAAQ,KAAK;IACd;IAA5B,YAA4B,QAAgB;QACxC,KAAK,CAAC,qBAAqB,QAAQ,kDAAkD,CAAC,CAAC;QAD/D,aAAQ,GAAR,QAAQ,CAAQ;QAExC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACtC,CAAC;CACJ;AALD,kDAKC;AAED;;;;;;;;;GASG;AACH,MAAa,YAAY;IAGgB;IAF7B,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,YAAqC,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAEnE,mHAAmH;IACnH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAA0B;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAC3C,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC;IACf,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,SAAS;QACX,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAqB,EAAE,KAAa,EAAE,EAAE;YACnD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAClF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,QAAQ,CAAC,MAAwB;QACnC,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACJ;AA3CD,oCA2CC","sourcesContent":["import { CallToolResult, Client, ListToolsResult, Tool } from '@modelcontextprotocol/client';\n\n/** The `tools/call` parameters, exactly as `Client.callTool` takes them. */\nexport type McpClientSetCall = Parameters<Client['callTool']>[0];\n\n/** Two connected clients publish one tool name: tool names are flat across servers, so it is refused. */\nexport class McpDuplicateToolError extends Error {\n    constructor(\n        public readonly toolName: string,\n        public readonly firstClient: number,\n        public readonly secondClient: number,\n    ) {\n        super(\n            `MCP tool '${toolName}' is published by client #${firstClient} and client #${secondClient}. ` +\n                'Tool names are flat across every server an agent holds, so the call could not be routed; ' +\n                'rename one tool or drop one client.',\n        );\n        this.name = 'McpDuplicateToolError';\n    }\n}\n\n/** A tool name no merged client publishes to the current caller. */\nexport class McpUnknownToolError extends Error {\n    constructor(public readonly toolName: string) {\n        super(`Unknown MCP tool '${toolName}': no merged client publishes it to this caller.`);\n        this.name = 'McpUnknownToolError';\n    }\n}\n\n/**\n * Several MCP clients an agent holds — its in-memory toolset plus another service's remote endpoint —\n * presented as one: `listTools()` is the union, `callTool()` routes by name.\n *\n * Tool names are flat across servers, so a name published by two clients is REFUSED with\n * {@link McpDuplicateToolError}: at {@link merge} (connect time) and again on every `listTools()`,\n * because each server projects its tools per caller and a later caller can see a tool an earlier one\n * could not. Like the clients it merges, it reads the caller per request: call it inside the\n * `RequestContext` of the caller.\n */\nexport class McpClientSet {\n    private routes = new Map<string, Client>();\n\n    private constructor(private readonly clients: readonly Client[]) {}\n\n    // webpieces-disable no-function-outside-class -- validating factory; refuses duplicate names before the set exists\n    static async merge(clients: readonly Client[]): Promise<McpClientSet> {\n        if (clients.length === 0)\n            throw new Error('McpClientSet.merge(...) requires at least one client.');\n        const set = new McpClientSet([...clients]);\n        await set.listTools();\n        return set;\n    }\n\n    /** The union of every client's tools for the current caller; refuses a name two clients publish. */\n    async listTools(): Promise<Tool[]> {\n        const lists = await Promise.all(this.clients.map((client: Client) => client.listTools()));\n        const routes = new Map<string, Client>();\n        const owners = new Map<string, number>();\n        const tools: Tool[] = [];\n        lists.forEach((list: ListToolsResult, index: number) => {\n            for (const tool of list.tools) {\n                const owner = owners.get(tool.name);\n                if (owner !== undefined) throw new McpDuplicateToolError(tool.name, owner, index);\n                owners.set(tool.name, index);\n                routes.set(tool.name, this.clients[index]);\n                tools.push(tool);\n            }\n        });\n        this.routes = routes;\n        return tools;\n    }\n\n    /** Routes the call to the client that publishes `params.name`, refreshing the routes once if unknown. */\n    async callTool(params: McpClientSetCall): Promise<CallToolResult> {\n        let client = this.routes.get(params.name);\n        if (client === undefined) {\n            await this.listTools();\n            client = this.routes.get(params.name);\n        }\n        if (client === undefined) throw new McpUnknownToolError(params.name);\n        return client.callTool(params);\n    }\n}\n"]}

package/src/McpDoorAuth.d.ts

@@ -0,0 +1,117 @@
+import { HttpRequest } from '@webpieces/core-context';
+import { DtoValue } from '@webpieces/core-util';
+import { CredentialVerifiers } from '@webpieces/http-routing';
+import { McpHttpAuth, McpOAuthMode } from './McpAuth';
+/**
+ * JwtPeek: base64url-decode a JWT's PAYLOAD only. NEVER trusted — the result is used solely to pick
+ * which ONE verifier sees the request, and that verifier fully verifies, so a token that merely
+ * claims an issuer fails its verification and is a 401. It never falls through to another mode.
+ */
+export declare class JwtPeek {
+    /** The unverified payload claims, or `undefined` when `token` is not a well-formed JWT. */
+    static payloadOf(token: string): Record<string, DtoValue> | undefined;
+    /** The unverified `iss` claim, or `undefined`. */
+    static issuerOf(token: string): string | undefined;
+    private static decodeRecord;
+}
+/** The inbound facts one door mode classifies and verifies: the transport-neutral request. */
+export declare class McpDoorRequest {
+    readonly http: HttpRequest;
+    constructor(http: HttpRequest);
+    header(name: string): string | undefined;
+    /** The `Authorization: Bearer <token>` value, or `undefined`. */
+    bearer(): string | undefined;
+    /** The `Authorization: Webpieces <secret>` value, or `undefined`. */
+    sharedSecret(): string | undefined;
+}
+/**
+ * What a successful authentication established. The caller itself is already PUBLISHED into
+ * `RequestContext` by the mode; these are the facts the door needs afterwards.
+ */
+export declare class McpDoorPass {
+    /** Which mode authenticated, e.g. `jwt()`, `mcpOAuth(...)`. */
+    readonly mode: string;
+    /** True for an internal hop (OIDC, shared secret) whose forwarded trusted context is believed. */
+    readonly callerVerified: boolean;
+    /** The raw credential, for the SDK's `AuthInfo.token`. Never forwarded downstream. */
+    readonly token: string;
+    /** The verified subject (user id or machine identity). */
+    readonly subject: string;
+    readonly scopes: readonly string[];
+    readonly expiresAtEpochSeconds?: number | undefined;
+    constructor(
+    /** Which mode authenticated, e.g. `jwt()`, `mcpOAuth(...)`. */
+    mode: string, 
+    /** True for an internal hop (OIDC, shared secret) whose forwarded trusted context is believed. */
+    callerVerified: boolean, 
+    /** The raw credential, for the SDK's `AuthInfo.token`. Never forwarded downstream. */
+    token: string, 
+    /** The verified subject (user id or machine identity). */
+    subject: string, scopes: readonly string[], expiresAtEpochSeconds?: number | undefined);
+}
+/** What a door mode needs to say about a request BEFORE any verification. */
+interface McpDoorMode {
+    readonly name: string;
+    /** Claims some `Authorization: Bearer` credentials, so it can overlap another bearer mode. */
+    readonly bearerFamily: boolean;
+    /** Pure, cheap, NO crypto, NO I/O: does this request carry MY kind of credential? */
+    claims(req: McpDoorRequest): boolean;
+    /** Full verification; throws `ApiUnauthorizedError` on reject. Publishes the trusted caller. */
+    authenticate(req: McpDoorRequest): Promise<McpDoorPass>;
+}
+/** `mcpOAuth(...)` — an audience-bound access token minted by the application's authority. */
+export declare class McpOAuthDoorMode implements McpDoorMode {
+    readonly mode: McpOAuthMode;
+    private readonly resource;
+    readonly name = "mcpOAuth(...)";
+    readonly bearerFamily = true;
+    private readonly callerContext;
+    constructor(mode: McpOAuthMode, resource: string);
+    claims(req: McpDoorRequest): boolean;
+    authenticate(req: McpDoorRequest): Promise<McpDoorPass>;
+    private validateCredential;
+}
+/**
+ * CLASSIFY, then verify with exactly ONE verifier.
+ *
+ * Credentials are self-describing, so one path serves every mode. The request is classified from
+ * UNVERIFIED surface facts — which header; a JWT's unverified `iss` — then handed to exactly ONE mode.
+ * Classifying on unverified data is safe because the chosen verifier fully verifies: a token that
+ * merely claims `iss: accounts.google.com` fails Google's verification and the request is a 401. It
+ * never falls through to another mode.
+ *
+ * - No claimant: only an `mcpOAuth(...)` server answers with the discovery challenge; others a plain 401.
+ * - Two claimants (an api-key header AND a bearer): ambiguous, refused — never "pick the one that works".
+ * - One claimant: its rejection IS the answer.
+ *
+ * The set is checked at construction (bind time): `vendorAuth` / public are refused, every mode's
+ * verifier must be bound, and no two modes may be able to claim one request.
+ */
+export declare class McpDoorAuthenticator {
+    private readonly modes;
+    readonly oauth: McpOAuthDoorMode | undefined;
+    private constructor();
+    static create(auth: readonly McpHttpAuth[], resource: string, verifiers: CredentialVerifiers | undefined): McpDoorAuthenticator;
+    /**
+     * Whether a 401 for this request carries the `mcpOAuth(...)` discovery challenge: only when the
+     * server has that mode AND the request either carried no credential at all or was classified as an
+     * OAuth access token. A rejected `jwt()` / OIDC / api-key credential gets a plain 401, with no hint
+     * of which mode came closest.
+     */
+    challengeApplies(req: McpDoorRequest): boolean;
+    authenticate(req: McpDoorRequest): Promise<McpDoorPass>;
+    private static refuseNonCallers;
+    private static refuseUnverifiable;
+    private static doorModes;
+    /**
+     * `claims()` sets must be DISJOINT BY CONSTRUCTION. The bearer space is the only shared one, so the
+     * refusals are about it:
+     * - `mcpOAuth(..., everyBearer())` claims every bearer, so it stands alone in the bearer family;
+     * - a bearer `apiKey(...)` claims every bearer too, so it stands alone as well;
+     * - `mcpOAuth(..., jwtIssuer())` may not list a Google issuer beside an OIDC mode.
+     * `jwt()` claims the remainder, and `McpAccessTokenFormat.opaquePrefix` refuses a prefix that could
+     * overlap a JWT or a dev-oidc token, so nothing else can collide.
+     */
+    private static refuseOverlaps;
+}
+export {};