ctxr-cli 0.29.0 → 0.31.0

package/dist/core/mcp/http.js

@@ -0,0 +1,90 @@
+import { dispatch, parseErrorResponse } from './jsonrpc.js';
+/**
+ * serve-the-store-over-mcp design.md D2/D10: the Streamable HTTP transport,
+ * reduced to what a stateless, stream-free server needs. `POST /mcp` carries
+ * JSON-RPC in and plain JSON out (202 when nothing needs an answer); `GET`
+ * and `DELETE` answer 405, which the transport permits for a server that
+ * opens no stream and issues no session.
+ */
+export const MCP_PATH = '/mcp';
+/** Generous for a JSON-RPC message, small enough that a hostile body cannot exhaust memory. */
+export const MAX_MCP_BODY_BYTES = 1024 * 1024;
+export class BodyTooLargeError extends Error {
+    limit;
+    constructor(limit) {
+        super(`request body exceeds ${limit} bytes`);
+        this.limit = limit;
+        this.name = 'BodyTooLargeError';
+    }
+}
+export async function readBody(req, limit) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of req) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += buffer.length;
+        if (total > limit)
+            throw new BodyTooLargeError(limit);
+        chunks.push(buffer);
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+export function sendJson(res, status, body, headers = {}) {
+    const buffer = Buffer.from(JSON.stringify(body), 'utf8');
+    res.writeHead(status, { 'Content-Type': 'application/json', 'Content-Length': buffer.length, 'Cache-Control': 'no-store', ...headers });
+    res.end(buffer);
+}
+export function sendText(res, status, text, headers = {}) {
+    const buffer = Buffer.from(text, 'utf8');
+    res.writeHead(status, { 'Content-Type': 'text/plain; charset=utf-8', 'Content-Length': buffer.length, ...headers });
+    res.end(buffer);
+}
+/** Handles `/mcp`; returns false for any other path so the caller can route it. */
+export async function handleMcpRequest(options, req, res, pathname) {
+    if (pathname !== MCP_PATH)
+        return false;
+    const origin = req.headers.origin;
+    if (origin !== undefined && !options.originAllowed(origin)) {
+        sendText(res, 403, 'origin not allowed\n');
+        return true;
+    }
+    const method = req.method ?? 'GET';
+    if (method !== 'POST') {
+        sendText(res, 405, 'method not allowed: this server opens no stream; send JSON-RPC by POST\n', { Allow: 'POST' });
+        return true;
+    }
+    const auth = await options.authenticate(req);
+    if (auth.kind === 'refused') {
+        sendJson(res, auth.status, auth.body, auth.headers);
+        return true;
+    }
+    let text;
+    try {
+        text = await readBody(req, MAX_MCP_BODY_BYTES);
+    }
+    catch (err) {
+        if (err instanceof BodyTooLargeError) {
+            sendText(res, 413, `${err.message}\n`);
+            return true;
+        }
+        throw err;
+    }
+    let body;
+    try {
+        body = JSON.parse(text);
+    }
+    catch {
+        sendJson(res, 400, parseErrorResponse());
+        return true;
+    }
+    options.onMessage?.(auth.principal, body);
+    const answer = await dispatch(body, options.contextFor(auth.principal));
+    if (answer === null) {
+        res.writeHead(202, { 'Content-Length': 0 });
+        res.end();
+        return true;
+    }
+    sendJson(res, 200, answer);
+    return true;
+}
+//# sourceMappingURL=http.js.map

package/dist/core/mcp/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/core/mcp/http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAwB,MAAM,cAAc,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE/B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB,KAAK;IAA1B,YAAqB,KAAa;QAChC,KAAK,CAAC,wBAAwB,KAAK,QAAQ,CAAC,CAAC;qBAD1B,KAAK;QAExB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,KAAa;IAChE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC7E,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,GAAG,KAAK;YAAE,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,OAAO,GAA2B,EAAE;IAC/G,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACxI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAO,GAA2B,EAAE;IAC9G,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACpH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAgBD,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAwC,EACxC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAExC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,0EAA0E,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/mcp/jsonrpc.d.ts

@@ -0,0 +1,73 @@
+/**
+ * serve-the-store-over-mcp design.md D2: the MCP subset the remote surface
+ * speaks, hand-rolled rather than taken from the SDK. Four methods, every
+ * notification accepted and ignored, everything else refused in protocol.
+ * Transport-free: `http.ts` hands this module a parsed body and writes back
+ * whatever it returns, so the dispatch is testable without a socket.
+ */
+/** Newest first. `initialize` echoes a client's version from this list, else answers with the first. */
+export declare const SUPPORTED_PROTOCOL_VERSIONS: readonly ['2025-11-25', '2025-06-18', '2025-03-26'];
+export declare const JSONRPC_PARSE_ERROR = -32700;
+export declare const JSONRPC_INVALID_REQUEST = -32600;
+export declare const JSONRPC_METHOD_NOT_FOUND = -32601;
+export declare const JSONRPC_INVALID_PARAMS = -32602;
+export declare const JSONRPC_INTERNAL_ERROR = -32603;
+export type JsonRpcId = string | number;
+export interface JsonRpcError {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+export interface JsonRpcResponse {
+    jsonrpc: '2.0';
+    id: JsonRpcId | null;
+    result?: unknown;
+    error?: JsonRpcError;
+}
+/** A tool as `tools/list` advertises it and `tools/call` runs it. */
+export interface ToolDefinition<TPrincipal> {
+    name: string;
+    title: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    /** The scope a principal must hold for the tool to be listed or called. */
+    scope: string;
+    readOnly: boolean;
+    run(args: Record<string, unknown>, principal: TPrincipal): Promise<unknown>;
+    /**
+     * The text a client model reads, when JSON is the wrong shape for it — the file tools answer
+     * in the plain text their Claude Code namesakes do. The structured result is sent alongside either way.
+     */
+    render?(data: unknown): string;
+}
+/** Raised by a tool for an expected refusal; becomes an `isError` result the client model can read, never a protocol error. */
+export declare class ToolRefusal extends Error {
+    readonly code: string;
+    readonly details: Record<string, unknown> | undefined;
+    constructor(code: string, message: string, details?: Record<string, unknown>);
+}
+export interface DispatchContext<TPrincipal> {
+    principal: TPrincipal;
+    /** The tools this principal may see and call — already filtered by scope. */
+    tools(): readonly ToolDefinition<TPrincipal>[];
+    /**
+     * Every tool the server has, whatever the principal holds — so a call to a
+     * tool its scopes do not reach is refused as insufficient scope by
+     * `authorizeCall`, rather than reported as a tool that does not exist.
+     */
+    lookup?(name: string): ToolDefinition<TPrincipal> | undefined;
+    instructions: string;
+    /** Re-checks membership and scope at call time (design.md D4); throws a ToolRefusal to refuse. */
+    authorizeCall(tool: ToolDefinition<TPrincipal>): void | Promise<void>;
+    /** Turns an unexpected error from a tool into a refusal the client can read, or rethrows. */
+    refusalFor(err: unknown): ToolRefusal | undefined;
+}
+export declare function parseErrorResponse(): JsonRpcResponse;
+export declare function negotiateProtocolVersion(requested: unknown): string;
+/**
+ * One POST body in, the body to answer with out — `null` when nothing in it
+ * expects an answer (only notifications and responses), which the transport
+ * turns into HTTP 202. A batch (allowed by 2025-03-26) is answered as a batch.
+ */
+export declare function dispatch<TPrincipal>(body: unknown, ctx: DispatchContext<TPrincipal>): Promise<JsonRpcResponse | JsonRpcResponse[] | null>;
+//# sourceMappingURL=jsonrpc.d.ts.map

package/dist/core/mcp/jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/jsonrpc.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,wGAAwG;AACxG,eAAO,MAAM,2BAA2B,YAAI,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAE/F,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAC9C,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAE7C,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAc,CAAC,UAAU;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E;;;OAGG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;CAChC;AAED,+HAA+H;AAC/H,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAEtD,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAK3E;CACF;AAED,MAAM,WAAW,eAAe,CAAC,UAAU;IACzC,SAAS,EAAE,UAAU,CAAC;IACtB,6EAA6E;IAC7E,KAAK,IAAI,SAAS,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;IAC/C;;;;OAIG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,kGAAkG;IAClG,aAAa,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,6FAA6F;IAC7F,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;CACnD;AAcD,wBAAgB,kBAAkB,IAAI,eAAe,CAEpD;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAInE;AAuFD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,eAAe,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC,CAW/I"}

package/dist/core/mcp/jsonrpc.js

@@ -0,0 +1,149 @@
+import { CLI_VERSION } from '../../version.js';
+/**
+ * serve-the-store-over-mcp design.md D2: the MCP subset the remote surface
+ * speaks, hand-rolled rather than taken from the SDK. Four methods, every
+ * notification accepted and ignored, everything else refused in protocol.
+ * Transport-free: `http.ts` hands this module a parsed body and writes back
+ * whatever it returns, so the dispatch is testable without a socket.
+ */
+/** Newest first. `initialize` echoes a client's version from this list, else answers with the first. */
+export const SUPPORTED_PROTOCOL_VERSIONS = ['2025-11-25', '2025-06-18', '2025-03-26'];
+export const JSONRPC_PARSE_ERROR = -32700;
+export const JSONRPC_INVALID_REQUEST = -32600;
+export const JSONRPC_METHOD_NOT_FOUND = -32601;
+export const JSONRPC_INVALID_PARAMS = -32602;
+export const JSONRPC_INTERNAL_ERROR = -32603;
+/** Raised by a tool for an expected refusal; becomes an `isError` result the client model can read, never a protocol error. */
+export class ToolRefusal extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.name = 'ToolRefusal';
+        this.code = code;
+        this.details = details;
+    }
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isValidId(value) {
+    return typeof value === 'string' || (typeof value === 'number' && Number.isFinite(value));
+}
+function errorResponse(id, code, message, data) {
+    return { jsonrpc: '2.0', id, error: data === undefined ? { code, message } : { code, message, data } };
+}
+export function parseErrorResponse() {
+    return errorResponse(null, JSONRPC_PARSE_ERROR, 'Parse error: the request body is not valid JSON.');
+}
+export function negotiateProtocolVersion(requested) {
+    return typeof requested === 'string' && SUPPORTED_PROTOCOL_VERSIONS.includes(requested)
+        ? requested
+        : SUPPORTED_PROTOCOL_VERSIONS[0];
+}
+function toolResult(data, isError, render) {
+    return {
+        content: [{ type: 'text', text: render !== undefined && !isError ? render(data) : JSON.stringify(data, null, 2) }],
+        structuredContent: data,
+        isError,
+    };
+}
+async function callTool(id, params, ctx) {
+    if (!isObject(params) || typeof params.name !== 'string') {
+        return errorResponse(id, JSONRPC_INVALID_PARAMS, 'tools/call needs params.name naming a tool.');
+    }
+    const name = params.name;
+    const tool = ctx.lookup?.(name) ?? ctx.tools().find((t) => t.name === name);
+    if (tool === undefined)
+        return errorResponse(id, JSONRPC_INVALID_PARAMS, `Unknown tool "${params.name}".`);
+    const args = params.arguments === undefined ? {} : params.arguments;
+    if (!isObject(args))
+        return errorResponse(id, JSONRPC_INVALID_PARAMS, 'tools/call params.arguments must be an object.');
+    try {
+        await ctx.authorizeCall(tool);
+        return { jsonrpc: '2.0', id, result: toolResult(await tool.run(args, ctx.principal), false, tool.render) };
+    }
+    catch (err) {
+        const refusal = err instanceof ToolRefusal ? err : ctx.refusalFor(err);
+        if (refusal === undefined)
+            throw err;
+        const data = { error: { code: refusal.code, message: refusal.message, ...(refusal.details ? { details: refusal.details } : {}) } };
+        return { jsonrpc: '2.0', id, result: toolResult(data, true) };
+    }
+}
+async function dispatchOne(message, ctx) {
+    if (!isObject(message) || message.jsonrpc !== '2.0' || typeof message.method !== 'string') {
+        // A response object sent to us (a client answering a request we never made) is not a request; drop it.
+        if (isObject(message) && message.jsonrpc === '2.0' && message.method === undefined && ('result' in message || 'error' in message)) {
+            return null;
+        }
+        const id = isObject(message) && isValidId(message.id) ? message.id : null;
+        return errorResponse(id, JSONRPC_INVALID_REQUEST, 'Invalid request: expected a JSON-RPC 2.0 request object.');
+    }
+    // A notification has no id and gets no answer, whatever its method.
+    if (!('id' in message))
+        return null;
+    if (!isValidId(message.id))
+        return errorResponse(null, JSONRPC_INVALID_REQUEST, 'Invalid request: id must be a string or a number.');
+    const id = message.id;
+    try {
+        switch (message.method) {
+            case 'initialize': {
+                const params = isObject(message.params) ? message.params : {};
+                return {
+                    jsonrpc: '2.0',
+                    id,
+                    result: {
+                        protocolVersion: negotiateProtocolVersion(params.protocolVersion),
+                        capabilities: { tools: { listChanged: false } },
+                        serverInfo: { name: 'contexture', title: 'contexture store', version: CLI_VERSION },
+                        instructions: ctx.instructions,
+                    },
+                };
+            }
+            case 'ping':
+                return { jsonrpc: '2.0', id, result: {} };
+            case 'tools/list':
+                return {
+                    jsonrpc: '2.0',
+                    id,
+                    result: {
+                        tools: ctx.tools().map((tool) => ({
+                            name: tool.name,
+                            title: tool.title,
+                            description: tool.description,
+                            inputSchema: tool.inputSchema,
+                            annotations: { title: tool.title, readOnlyHint: tool.readOnly, destructiveHint: false, idempotentHint: tool.readOnly, openWorldHint: false },
+                        })),
+                    },
+                };
+            case 'tools/call':
+                return await callTool(id, message.params, ctx);
+            default:
+                return errorResponse(id, JSONRPC_METHOD_NOT_FOUND, `Method not found: "${message.method}".`);
+        }
+    }
+    catch (err) {
+        return errorResponse(id, JSONRPC_INTERNAL_ERROR, err instanceof Error ? err.message : String(err));
+    }
+}
+/**
+ * One POST body in, the body to answer with out — `null` when nothing in it
+ * expects an answer (only notifications and responses), which the transport
+ * turns into HTTP 202. A batch (allowed by 2025-03-26) is answered as a batch.
+ */
+export async function dispatch(body, ctx) {
+    if (Array.isArray(body)) {
+        if (body.length === 0)
+            return errorResponse(null, JSONRPC_INVALID_REQUEST, 'Invalid request: an empty batch.');
+        const answers = [];
+        for (const message of body) {
+            const answer = await dispatchOne(message, ctx);
+            if (answer !== null)
+                answers.push(answer);
+        }
+        return answers.length === 0 ? null : answers;
+    }
+    return dispatchOne(body, ctx);
+}
+//# sourceMappingURL=jsonrpc.js.map

package/dist/core/mcp/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../../../src/core/mcp/jsonrpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C;;;;;;GAMG;AAEH,wGAAwG;AACxG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAE/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAK,CAAC;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,CAAC;AAC7C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAK,CAAC;AAkC7C,+HAA+H;AAC/H,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IACb,OAAO,CAAsC;IAEtD,YAAY,IAAY,EAAE,OAAe,EAAE,OAAiC;QAC1E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAmBD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,EAAoB,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IACxF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,aAAa,CAAC,IAAI,EAAE,mBAAmB,EAAE,kDAAkD,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAK,2BAAiD,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5G,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,OAAgB,EAAE,MAAkC;IACrF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAClH,iBAAiB,EAAE,IAAI;QACvB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAa,EAAa,EAAE,MAAe,EAAE,GAAgC;IAClG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,aAAa,CAAC,EAAE,EAAE,sBAAsB,EAAE,6CAA6C,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC5E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,EAAE,EAAE,sBAAsB,EAAE,iBAAiB,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,EAAE,EAAE,sBAAsB,EAAE,gDAAgD,CAAC,CAAC;IAExH,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC;QACrC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACnI,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAa,OAAgB,EAAE,GAAgC;IACvF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1F,uGAAuG;QACvG,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;YAClI,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,OAAO,aAAa,CAAC,EAAE,EAAE,uBAAuB,EAAE,0DAA0D,CAAC,CAAC;IAChH,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,EAAE,uBAAuB,EAAE,mDAAmD,CAAC,CAAC;IACrI,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,EAAE;oBACF,MAAM,EAAE;wBACN,eAAe,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;wBACjE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;wBAC/C,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE;wBACnF,YAAY,EAAE,GAAG,CAAC,YAAY;qBAC/B;iBACF,CAAC;YACJ,CAAC;YACD,KAAK,MAAM;gBACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC5C,KAAK,YAAY;gBACf,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,EAAE;oBACF,MAAM,EAAE;wBACN,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BAChC,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC7B,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE;yBAC7I,CAAC,CAAC;qBACJ;iBACF,CAAC;YACJ,KAAK,YAAY;gBACf,OAAO,MAAM,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACjD;gBACE,OAAO,aAAa,CAAC,EAAE,EAAE,wBAAwB,EAAE,sBAAsB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,EAAE,EAAE,sBAAsB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAa,IAAa,EAAE,GAAgC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC,IAAI,EAAE,uBAAuB,EAAE,kCAAkC,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC"}

package/dist/core/mcp/members.d.ts

@@ -0,0 +1,11 @@
+import type { McpConfig } from '../../config/schema.js';
+/**
+ * remote-access spec, *Scopes follow the configuration on every call*: a
+ * verified email holds `read` when `mcp.readers` admits it, `capture` when
+ * `mcp.capturers` does and `edit` when `mcp.editors` does, matched by the same rule `change_approval.deciders`
+ * is matched by — so an `@domain` entry admits that domain only.
+ */
+export declare const MCP_SCOPES: readonly ['read', 'capture', 'edit'];
+export type McpScope = (typeof MCP_SCOPES)[number];
+export declare function scopesFor(email: string, mcp: McpConfig | undefined): McpScope[];
+//# sourceMappingURL=members.d.ts.map

package/dist/core/mcp/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGxD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,YAAI,MAAM,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAC/D,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,EAAE,CAO/E"}

package/dist/core/mcp/members.js

@@ -0,0 +1,21 @@
+import { isDecider } from '../approval/decision.js';
+/**
+ * remote-access spec, *Scopes follow the configuration on every call*: a
+ * verified email holds `read` when `mcp.readers` admits it, `capture` when
+ * `mcp.capturers` does and `edit` when `mcp.editors` does, matched by the same rule `change_approval.deciders`
+ * is matched by — so an `@domain` entry admits that domain only.
+ */
+export const MCP_SCOPES = ['read', 'capture', 'edit'];
+export function scopesFor(email, mcp) {
+    if (mcp === undefined)
+        return [];
+    const scopes = [];
+    if (isDecider(email, mcp.readers ?? []))
+        scopes.push('read');
+    if (isDecider(email, mcp.capturers ?? []))
+        scopes.push('capture');
+    if (isDecider(email, mcp.editors ?? []))
+        scopes.push('edit');
+    return scopes;
+}
+//# sourceMappingURL=members.js.map

package/dist/core/mcp/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../../src/core/mcp/members.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAG/D,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAA0B;IACjE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/mcp/oauth.d.ts

@@ -0,0 +1,99 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { McpConfig } from '../../config/schema.js';
+import type { IdentityVerifier } from '../approval/identity.js';
+import { type Authentication } from './http.js';
+import { type McpScope } from './members.js';
+/**
+ * serve-the-store-over-mcp design.md D4–D5: `ctxr serve` is the OAuth 2.1
+ * authorisation server for its own `/mcp`, and it stores nothing it issues.
+ * Client ids, authorisation codes and access tokens are HMAC-signed payloads.
+ * Who may sign in is decided by the access proxy's verified identity — the
+ * assertion `change_approval.identity` configures, checked on every
+ * `/authorize` request exactly as the approval routes check it — and by the
+ * `mcp` block the server last loaded, consulted again on every `/mcp`
+ * request, so removing someone there refuses their next call.
+ */
+export declare const ACCESS_TOKEN_TTL_SECONDS: number;
+export declare const AUTHORIZATION_CODE_TTL_SECONDS: number;
+export declare const PROTECTED_RESOURCE_METADATA_PATH = "/.well-known/oauth-protected-resource";
+export declare const AUTHORIZATION_SERVER_METADATA_PATH = "/.well-known/oauth-authorization-server";
+export declare const OPENID_CONFIGURATION_PATH = "/.well-known/openid-configuration";
+export declare const REGISTER_PATH = "/register";
+export declare const AUTHORIZE_PATH = "/authorize";
+export declare const TOKEN_PATH = "/token";
+/** Every path the OAuth side of the MCP surface answers. */
+export declare const OAUTH_PATHS: readonly string[];
+/** Who an admitted `/mcp` request acts as. `scopes` is already narrowed to what the email holds right now. */
+export interface Principal {
+    email: string;
+    scopes: McpScope[];
+}
+/**
+ * `kind.payload.mac`, the kind inside the MAC so a client id can never be
+ * replayed as a token. Authorisation codes are signed under a key that mixes
+ * in a per-process nonce: a restart invalidates outstanding codes instead of
+ * forgetting which were spent (design.md D5).
+ */
+export declare class Signer {
+    private readonly key;
+    private readonly codeKey;
+    constructor(key: Buffer);
+    private keyFor;
+    sign(kind: string, payload: object): string;
+    verify<T>(kind: string, token: string): T | undefined;
+}
+export interface ConsentPageView {
+    clientName: string;
+    redirectHost: string;
+    email: string;
+    scopes: McpScope[];
+    hiddenFields: Record<string, string>;
+}
+export interface OAuthOptions {
+    /** The origin of `serve.base_url`: the issuer, and the only `Origin` a consent `POST` may carry. */
+    issuer: string;
+    /** `<issuer>/mcp`: the one resource tokens are bound to. */
+    resource: string;
+    /** `change_approval.identity.header`. */
+    identityHeader: string;
+    verifier: IdentityVerifier;
+    /** The `mcp` block of the configuration the server last loaded. */
+    mcp(): McpConfig | undefined;
+    signer: Signer;
+    /** Nonces of redeemed codes, kept by the server across configuration reloads. */
+    spentCodes: Map<string, number>;
+    now(): Date;
+    renderConsentPage(view: ConsentPageView): Promise<string>;
+    /** One line per registration attempt: what the client asked for and the outcome, never a secret. */
+    log?(line: string): void;
+}
+/** The OAuth endpoints of the MCP surface. Built per request from the loaded configuration; holds no state of its own. */
+export declare class AuthorizationServer {
+    private readonly options;
+    constructor(options: OAuthOptions);
+    private nowSeconds;
+    get protectedResourceMetadataUrl(): string;
+    protectedResourceMetadata(): Record<string, unknown>;
+    authorizationServerMetadata(): Record<string, unknown>;
+    /** Handles every OAuth path; returns false for anything else. */
+    handle(req: IncomingMessage, res: ServerResponse, pathname: string): Promise<boolean>;
+    private register;
+    /**
+     * Until the client and redirect URI are known good, an error is shown and
+     * never redirected — redirecting to an unverified URI is how an open
+     * redirector is built.
+     */
+    private validateAuthorizeRequest;
+    /** The verified member and the scopes this request would grant, or why there is none. */
+    private member;
+    private hiddenFieldsFor;
+    private authorizeForm;
+    /** The member's confirmation: only from a page this server rendered (`Origin`), only for a verified member. */
+    private authorizeConfirm;
+    private token;
+    private pruneSpent;
+    /** remote-access spec: every `/mcp` request carries a token this server issued, narrowed to what its email holds now. */
+    authenticate(req: IncomingMessage): Promise<Authentication<Principal>>;
+    principalFor(token: string): Principal | undefined;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/core/mcp/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/oauth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAmD,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACjG,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEpE;;;;;;;;;GASG;AAEH,eAAO,MAAM,wBAAwB,QAAoB,CAAC;AAC1D,eAAO,MAAM,8BAA8B,QAAU,CAAC;AAKtD,eAAO,MAAM,gCAAgC,0CAA0C,CAAC;AACxF,eAAO,MAAM,kCAAkC,4CAA4C,CAAC;AAC5F,eAAO,MAAM,yBAAyB,sCAAsC,CAAC;AAC7E,eAAO,MAAM,aAAa,cAAc,CAAC;AACzC,eAAO,MAAM,cAAc,eAAe,CAAC;AAC3C,eAAO,MAAM,UAAU,WAAW,CAAC;AAEnC,4DAA4D;AAC5D,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAQxC,CAAC;AAEF,8GAA8G;AAC9G,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,EAAE,CAAC;CACpB;AAMD;;;;;GAKG;AACH,qBAAa,MAAM;IAGL,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,YAA6B,GAAG,EAAE,MAAM,EAEvC;IAED,OAAO,CAAC,MAAM;IAId,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAI1C;IAED,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAWpD;CACF;AA+BD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,oGAAoG;IACpG,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mEAAmE;IACnE,GAAG,IAAI,SAAS,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,GAAG,IAAI,IAAI,CAAC;IACZ,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,oGAAoG;IACpG,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAkBD,0HAA0H;AAC1H,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAApC,YAA6B,OAAO,EAAE,YAAY,EAAI;IAEtD,OAAO,CAAC,UAAU;IAIlB,IAAI,4BAA4B,IAAI,MAAM,CAEzC;IAED,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQnD;IAED,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAcrD;IAED,iEAAiE;IAC3D,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA8C1F;YAIa,QAAQ;IA6CtB;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAgChC,yFAAyF;YAC3E,MAAM;IAUpB,OAAO,CAAC,eAAe;YAST,aAAa;IAkB3B,+GAA+G;YACjG,gBAAgB;YAkChB,KAAK;IAyCnB,OAAO,CAAC,UAAU;IAOlB,yHAAyH;IACnH,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAa3E;IAED,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAMjD;CACF"}