gemi 0.113.0 → 0.115.0

package/dist/services/mcp/http/oauth/McpOAuthServer.d.ts

@@ -0,0 +1,150 @@
+import type { User } from "../../../../auth/types";
+import { type McpCallerResolver, type McpResolution, type McpResolveContext } from "../callers";
+import { type Budget } from "../limits";
+import type { McpOAuthStore } from "./store";
+export type McpOAuthServerOptions = {
+    /** Where clients, codes and tokens are kept. `MemoryMcpOAuthStore` for one process; a database for more. */
+    store: McpOAuthStore;
+    /**
+     * Loads the user a token was issued to, by the id it was issued under
+     * (`String(user.id)`), on every request: a deleted user's tokens stop
+     * working, and routes see the user as they are now. Answer the same shape a
+     * signed-in request's `req.ctx().user` has.
+     */
+    findUser(id: string): Promise<User | null>;
+    /**
+     * The app's own consent page: a view (behind `auth`) that the browser is
+     * sent to as `<consentPath>?request=…`. It calls `consent(request, user)`
+     * and renders what that answers — the client, the scopes, and a form to
+     * post. Without it gemi serves a plain page of its own.
+     */
+    consentPath?: string;
+    /** Where a signed-out user is sent from gemi's own consent page. Default: `auth.signInPath`. */
+    signInPath?: string;
+    /** The app's name on gemi's own consent page. Default: the endpoint's host. */
+    appName?: string;
+    /** How the signed-in user is named on the consent page. Default: email, name, or id. */
+    userLabel?(user: User): string;
+    /** Access token lifetime, in seconds. Default one hour. */
+    accessTokenTtl?: number;
+    /** Refresh token lifetime, in seconds; each refresh rotates it. Default 30 days. */
+    refreshTokenTtl?: number;
+    /**
+     * Dynamic client registration (RFC 7591), which is how MCP clients
+     * (Claude, the Inspector) register themselves. On by default; `false`
+     * turns the endpoint off, for an app that registers its clients itself.
+     */
+    registration?: false | {
+        /** Registrations per client address. Default 20 an hour. */
+        rateLimit?: Budget;
+        /**
+         * Narrows which redirect URIs a client may register, beyond gemi's
+         * own rule (https, or http on a loopback address). Answer `false` to
+         * refuse one — to allow only the clients you know, say.
+         */
+        allowRedirectUri?(uri: URL): boolean;
+    };
+};
+/** What the consent page shows and posts, from `McpOAuthServer.consent`. */
+export type McpConsent = {
+    client: {
+        id: string;
+        /** What the client calls itself. Unverified: show it as such. */
+        name: string | null;
+        /** The host the user will be sent to after deciding — the one fact about the client that is verified. */
+        redirectHost: string;
+    };
+    scopes: {
+        name: string;
+        description: string;
+    }[];
+    user: {
+        id: string;
+        label: string;
+    };
+    /** The form to render: post `fields` and `decision=allow` or `decision=deny` to `action`. */
+    form: {
+        action: string;
+        method: "POST";
+        fields: {
+            request: string;
+            csrf: string;
+        };
+    };
+};
+/**
+ * An OAuth 2.1 authorization server for the MCP endpoint, and the resolver
+ * for the tokens it issues: what lets a hosted MCP client (Claude.ai's
+ * connectors) act for a user who signed in and agreed (#762).
+ *
+ * - Discovery: protected resource metadata (RFC 9728) and authorization
+ *   server metadata (RFC 8414). `WWW-Authenticate` on a 401 points at them.
+ * - Dynamic client registration (RFC 7591).
+ * - Authorization code with PKCE (S256 only), consent by the signed-in user
+ *   on a page that cannot be framed, with a CSRF token bound to the request
+ *   and the user, `iss` in the response (RFC 9207).
+ * - Tokens are opaque, stored hashed, and bound to the endpoint as their
+ *   audience (RFC 8707). Refresh tokens rotate; a replayed one, like a
+ *   replayed code, revokes the whole grant. Revocation (RFC 7009).
+ *
+ * The endpoints live under the MCP endpoint's path (`/mcp/oauth/…`) and the
+ * metadata at the origin's `/.well-known/…`, all on the configured host
+ * only.
+ */
+export declare class McpOAuthServer implements McpCallerResolver {
+    private readonly options;
+    readonly name = "oauth";
+    private context;
+    private issuer;
+    private base;
+    private readonly accessTtl;
+    private readonly refreshTtl;
+    constructor(options: McpOAuthServerOptions);
+    get store(): McpOAuthStore;
+    boot(context: McpResolveContext): void;
+    resolve(req: Request): Promise<McpResolution | null>;
+    challenge(): string;
+    handle(req: Request): Promise<Response | null>;
+    /**
+     * The consent request a consent page was sent with, for the signed-in
+     * `user`: what to show, and the form to post. `null` when the request is
+     * not one this server made, has expired, or names a client that is gone —
+     * render an error and offer no form.
+     *
+     * ```ts
+     * // a view behind `auth`, at consentPath
+     * const consent = await mcpOAuth.consent(req.search.get("request"), req.ctx().user);
+     * ```
+     */
+    consent(request: unknown, user: User | null | undefined): Promise<McpConsent | null>;
+    private resourceMetadata;
+    private serverMetadata;
+    private register;
+    private authorize;
+    /** gemi's own consent page, for an app without a `consentPath`. */
+    private consentScreen;
+    /**
+     * The user's decision, posted from a consent page. Only from this origin
+     * (`Origin`, or `Sec-Fetch-Site` when a browser sends no `Origin`), only by
+     * the user the page was rendered for (the CSRF token is bound to them and
+     * to the request), and only once.
+     */
+    private decide;
+    private token;
+    private issue;
+    /** RFC 7009: revokes the grant the token belongs to. Answers 200 whatever the token was. */
+    private revoke;
+    /**
+     * The client a token or revocation request is from. A public client names
+     * itself; a confidential one proves it with its secret, in the body or in
+     * Basic auth.
+     */
+    private authenticateClient;
+    private redirectBack;
+    /** The user signed in to this app in the browser: the session cookie only. */
+    private sessionUser;
+    private userLabel;
+    private scopeNames;
+    private resourceMetadataUrl;
+}
+//# sourceMappingURL=McpOAuthServer.d.ts.map

package/dist/services/mcp/http/oauth/McpOAuthServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpOAuthServer.d.ts","sourceRoot":"","sources":["../../../../../services/mcp/http/oauth/McpOAuthServer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAInD,OAAO,EAAe,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC7G,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAGpD,OAAO,KAAK,EAEV,aAAa,EAGd,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,qBAAqB,GAAG;IAClC,4GAA4G;IAC5G,KAAK,EAAE,aAAa,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC3C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gGAAgG;IAChG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC;IAC/B,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EACT,KAAK,GACL;QACE,4DAA4D;QAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB;;;;WAIG;QACH,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;KACtC,CAAC;CACP,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC;QACX,iEAAiE;QACjE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,yGAAyG;QACzG,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,6FAA6F;IAC7F,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CACrF,CAAC;AAyCF;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,cAAe,YAAW,iBAAiB;IAQ1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAPpC,QAAQ,CAAC,IAAI,WAAW;IACxB,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAU;IACxB,OAAO,CAAC,IAAI,CAAU;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAEP,OAAO,EAAE,qBAAqB;IAiB3D,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,IAAI,CAAC,OAAO,EAAE,iBAAiB;IASzB,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAwB1D,SAAS,IAAI,MAAM;IAOb,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAkDpD;;;;;;;;;;OAUG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAqB1F,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,cAAc;YAqBR,QAAQ;YAgFR,SAAS;IAkDvB,mEAAmE;YACrD,aAAa;IAgB3B;;;;;OAKG;YACW,MAAM;YA+CN,KAAK;YAyEL,KAAK;IAmBnB,4FAA4F;YAC9E,MAAM;IAWpB;;;;OAIG;YACW,kBAAkB;IA6BhC,OAAO,CAAC,YAAY;IAQpB,8EAA8E;YAChE,WAAW;IAQzB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,mBAAmB;CAG5B"}

package/dist/services/mcp/http/oauth/consentPage.d.ts

@@ -0,0 +1,14 @@
+import type { McpConsent } from "./McpOAuthServer";
+/**
+ * Headers for any page that asks for consent: it must never be framed (a
+ * framed "Allow" button can be clicked through an overlay), cached, or leak
+ * its URL — which carries the request — in a `Referer`.
+ */
+export declare const CONSENT_PAGE_HEADERS: Readonly<Record<string, string>>;
+/** The consent page gemi serves when the app has no `consentPath` of its own. */
+export declare function consentPage(consent: McpConsent, app: {
+    name: string;
+}): string;
+/** A plain page for an authorization request that cannot be sent back to the client. */
+export declare function errorPage(message: string): string;
+//# sourceMappingURL=consentPage.d.ts.map

package/dist/services/mcp/http/oauth/consentPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consentPage.d.ts","sourceRoot":"","sources":["../../../../../services/mcp/http/oauth/consentPage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAShE,CAAC;AAEH,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CA4C9E;AAED,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/services/mcp/http/oauth/store.d.ts

@@ -0,0 +1,98 @@
+/**
+ * What `McpOAuthServer` keeps: the clients that registered, the authorization
+ * codes it handed out, and the tokens it issued.
+ *
+ * No secret is stored. A client secret, a code and a token are kept as their
+ * SHA-256 (`hash`), and looked up by it, so a read of the store is not a list
+ * of working credentials.
+ *
+ * Every code and token belongs to a *family*: one user's consent to one client.
+ * The family is what a refresh rotates within, what a replayed code or refresh
+ * token revokes, and what an app's "connected apps" screen lists and revokes.
+ */
+export interface McpOAuthStore {
+    createClient(client: McpOAuthClient): Promise<void>;
+    findClient(clientId: string): Promise<McpOAuthClient | null>;
+    saveCode(code: McpOAuthCode): Promise<void>;
+    findCode(hash: string): Promise<McpOAuthCode | null>;
+    saveToken(token: McpOAuthToken): Promise<void>;
+    /** The token with this hash, or `null` when there is none or its family was revoked. */
+    findToken(hash: string): Promise<McpOAuthToken | null>;
+    /**
+     * Spends a single-use credential (a code, a refresh token): `true` when this
+     * call is the one that spent it, `false` when it was already spent. Must be
+     * atomic across every process sharing the store — two exchanges of one code
+     * racing must not both win. Kept until `expiresAt` (epoch ms).
+     */
+    use(hash: string, expiresAt: number): Promise<boolean>;
+    /** Revokes every code and token of a family. Idempotent. */
+    revokeFamily(familyId: string): Promise<void>;
+}
+export type McpOAuthTokenEndpointAuthMethod = "none" | "client_secret_post" | "client_secret_basic";
+export type McpOAuthClient = {
+    clientId: string;
+    /** SHA-256 hex of the secret, for a confidential client; `null` for a public one. */
+    clientSecretHash: string | null;
+    tokenEndpointAuthMethod: McpOAuthTokenEndpointAuthMethod;
+    redirectUris: string[];
+    /** What the client calls itself: unverified, shown on the consent screen as such. */
+    clientName: string | null;
+    clientUri: string | null;
+    /** Epoch ms. */
+    createdAt: number;
+};
+export type McpOAuthCode = {
+    hash: string;
+    clientId: string;
+    userId: string;
+    redirectUri: string;
+    /** The S256 PKCE challenge the code is redeemed against. */
+    codeChallenge: string;
+    scopes: string[];
+    /** The resource (audience) the tokens will be for. */
+    resource: string;
+    familyId: string;
+    /** Epoch ms. */
+    expiresAt: number;
+};
+export type McpOAuthToken = {
+    hash: string;
+    kind: "access" | "refresh";
+    clientId: string;
+    userId: string;
+    scopes: string[];
+    /** The audience: the MCP endpoint's URL. A token is accepted nowhere else. */
+    resource: string;
+    familyId: string;
+    /** Epoch ms. */
+    expiresAt: number;
+};
+/**
+ * `McpOAuthStore` in this process's memory: for development, tests, and an
+ * app with one instance that accepts every connection being lost on a
+ * restart. With more than one instance use a shared store (a database), or a
+ * token issued by one instance is unknown to the next.
+ */
+export declare class MemoryMcpOAuthStore implements McpOAuthStore {
+    private readonly clients;
+    private readonly codes;
+    private readonly tokens;
+    private readonly used;
+    private readonly revoked;
+    createClient(client: McpOAuthClient): Promise<void>;
+    findClient(clientId: string): Promise<McpOAuthClient>;
+    saveCode(code: McpOAuthCode): Promise<void>;
+    findCode(hash: string): Promise<McpOAuthCode>;
+    saveToken(token: McpOAuthToken): Promise<void>;
+    findToken(hash: string): Promise<McpOAuthToken>;
+    use(hash: string, expiresAt: number): Promise<boolean>;
+    revokeFamily(familyId: string): Promise<void>;
+    /** Every family a user has, for a "connected apps" screen. */
+    families(userId: string): Promise<{
+        familyId: string;
+        clientId: string;
+        scopes: string[];
+    }[]>;
+    private sweep;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/services/mcp/http/oauth/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../../services/mcp/http/oauth/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAE7D,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAErD,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,wFAAwF;IACxF,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEvD;;;;;OAKG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,4DAA4D;IAC5D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,oBAAoB,GAAG,qBAAqB,CAAC;AAEpG,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,qFAAqF;IACrF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,mBAAoB,YAAW,aAAa;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAEvC,YAAY,CAAC,MAAM,EAAE,cAAc;IAInC,UAAU,CAAC,QAAQ,EAAE,MAAM;IAK3B,QAAQ,CAAC,IAAI,EAAE,YAAY;IAK3B,QAAQ,CAAC,IAAI,EAAE,MAAM;IAKrB,SAAS,CAAC,KAAK,EAAE,aAAa;IAK9B,SAAS,CAAC,IAAI,EAAE,MAAM;IAKtB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAMnC,YAAY,CAAC,QAAQ,EAAE,MAAM;IAMnC,8DAA8D;IACxD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAUnG,OAAO,CAAC,KAAK;CAKd"}

package/dist/services/mcp/http/protocol.d.ts

@@ -0,0 +1,95 @@
+import type { McpToolDescriptor } from "../McpRegistry";
+/**
+ * The MCP wire vocabulary the transport speaks, kept apart from the transport
+ * so the shapes can be read in one place.
+ *
+ * Two eras share the endpoint (see "Versioning" in the 2026-07-28 spec):
+ *
+ * - **modern** (`2026-07-28`): stateless. Every request carries its protocol
+ *   version and the client's capabilities in `_meta`, and the transport keeps
+ *   nothing between requests. Server-to-client requests (elicitation) are
+ *   returned as an `input_required` result and the client retries.
+ * - **legacy** (`2025-03-26` to `2025-11-25`): an `initialize` handshake opens
+ *   a session named by `Mcp-Session-Id`, and the server sends its own requests
+ *   on the response stream of the call they belong to.
+ */
+export declare const MODERN_VERSIONS: readonly ["2026-07-28"];
+export declare const LEGACY_VERSIONS: readonly ["2025-11-25", "2025-06-18", "2025-03-26"];
+export declare const SUPPORTED_VERSIONS: readonly string[];
+export type LegacyVersion = (typeof LEGACY_VERSIONS)[number];
+export declare const META_PROTOCOL_VERSION = "io.modelcontextprotocol/protocolVersion";
+export declare const META_CLIENT_CAPABILITIES = "io.modelcontextprotocol/clientCapabilities";
+export declare const META_CLIENT_INFO = "io.modelcontextprotocol/clientInfo";
+export declare const META_SERVER_INFO = "io.modelcontextprotocol/serverInfo";
+/** JSON-RPC's own codes, and the ones the MCP spec allocates. */
+export declare const ErrorCode: {
+    readonly ParseError: -32700;
+    readonly InvalidRequest: -32600;
+    readonly MethodNotFound: -32601;
+    readonly InvalidParams: -32602;
+    readonly InternalError: -32603;
+    readonly HeaderMismatch: -32020;
+    readonly MissingRequiredClientCapability: -32021;
+    readonly UnsupportedProtocolVersion: -32022;
+};
+export type JsonRpcId = string | number;
+export type JsonRpcRequest = {
+    jsonrpc: "2.0";
+    id?: JsonRpcId;
+    method: string;
+    params?: Record<string, unknown>;
+};
+export type JsonRpcResponse = {
+    jsonrpc: "2.0";
+    id: JsonRpcId | null;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+};
+export declare class JsonRpcError extends Error {
+    readonly code: number;
+    readonly data?: unknown;
+    /** The HTTP status the response goes out with. */
+    readonly status: number;
+    constructor(code: number, message: string, data?: unknown, 
+    /** The HTTP status the response goes out with. */
+    status?: number);
+}
+export declare function errorResponse(id: JsonRpcId | null, error: JsonRpcError): JsonRpcResponse;
+/** A JSON-RPC message, told apart by its members. */
+export type Incoming = {
+    kind: "request";
+    message: JsonRpcRequest & {
+        id: JsonRpcId;
+    };
+} | {
+    kind: "notification";
+    message: JsonRpcRequest;
+} | {
+    kind: "response";
+    message: JsonRpcResponse & {
+        id: JsonRpcId;
+    };
+};
+export declare function classify(body: unknown): Incoming;
+/**
+ * A tool as `tools/list` describes it.
+ *
+ * `outputSchema` goes out as written for a modern client, which takes any
+ * JSON Schema. A legacy one requires an object at its root, as it requires
+ * `structuredContent` to be an object, so a tool whose output is not one is
+ * listed without it there and answers text only.
+ */
+export declare function toolJson(tool: McpToolDescriptor, modern: boolean): Record<string, unknown>;
+/** Whether a legacy client may be handed `value` as `structuredContent`. */
+export declare function isObject(value: unknown): value is Record<string, unknown>;
+/**
+ * The value of an `Mcp-Name` (or `Mcp-Param-*`) header, decoded from the
+ * `=?base64?…?=` sentinel when it is in one. `null` for a value the header
+ * could not legally carry.
+ */
+export declare function decodeHeaderValue(value: string): string | null;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/services/mcp/http/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../../services/mcp/http/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,eAAe,yBAA0B,CAAC;AACvD,eAAO,MAAM,eAAe,qDAAsD,CAAC;AACnF,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA6C,CAAC;AAE9F,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,eAAO,MAAM,qBAAqB,4CAA4C,CAAC;AAC/E,eAAO,MAAM,wBAAwB,+CAA+C,CAAC;AACrF,eAAO,MAAM,gBAAgB,uCAAuC,CAAC;AACrE,eAAO,MAAM,gBAAgB,uCAAuC,CAAC;AAErE,iEAAiE;AACjE,eAAO,MAAM,SAAS;;;;;;;;;CASZ,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExC,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D,CAAC;AAEF,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO;IACvB,kDAAkD;IAClD,QAAQ,CAAC,MAAM;gBAJN,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,OAAO;IACvB,kDAAkD;IACzC,MAAM,SAAM;CAKxB;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,eAAe,CAUxF;AAED,qDAAqD;AACrD,MAAM,MAAM,QAAQ,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,cAAc,GAAG;QAAE,EAAE,EAAE,SAAS,CAAA;KAAE,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,eAAe,GAAG;QAAE,EAAE,EAAE,SAAS,CAAA;KAAE,CAAA;CAAE,CAAC;AAEvE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,CA0BhD;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAW1F;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS9D"}

package/dist/services/mcp/http/signedState.d.ts

@@ -0,0 +1,25 @@
+/**
+ * State the transport hands a client and takes back: a legacy session id, an
+ * elicitation's `requestState`. Both pass through the client, so both are
+ * attacker-controlled on the way back in, and both are signed.
+ *
+ * `<tag>.<payload>.<mac>`: the payload is base64url JSON, the MAC is
+ * HMAC-SHA256 over the tag and the payload under a key HKDF-derived from the
+ * app's `SECRET` for this purpose alone (`purposeKey`), so a value signed for
+ * one use can never verify as another — a session id is not a request state.
+ * It is signed, not encrypted: nothing in it is a secret, and the client may
+ * read it.
+ *
+ * Expiry is in the payload and checked here. Anything else a value is bound
+ * to — the principal, the tool, the arguments — is the caller's to compare.
+ */
+export declare function sign(purpose: string, tag: string, payload: Record<string, unknown>): string;
+/**
+ * The payload of a value `sign` made for `purpose` and `tag`, or `null` when
+ * it is malformed, forged, signed for something else, or expired (`exp`, in
+ * epoch milliseconds, is required).
+ */
+export declare function verify<T extends {
+    exp: number;
+}>(purpose: string, tag: string, value: unknown, now?: number): T | null;
+//# sourceMappingURL=signedState.d.ts.map

package/dist/services/mcp/http/signedState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signedState.d.ts","sourceRoot":"","sources":["../../../../services/mcp/http/signedState.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAG3F;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,EAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,GAAG,SAAa,GACf,CAAC,GAAG,IAAI,CAiBV"}

package/dist/services/queue/work.js

@@ -1,4 +1,4 @@
 // @bun
-import{jc as E,mc as T}from"../../chunk-g8kx549d.js";import"../../chunk-c7mp2kyp.js";import"../../chunk-y6v0x869.js";import"../../chunk-4t1pbt9p.js";import"../../chunk-vwprq300.js";import"../../chunk-z5hrymvn.js";import"../../chunk-v4gwmhtf.js";import{Jh as I,Kh as J,Nh as O}from"../../chunk-vc9phr57.js";import{Rh as N}from"../../chunk-fr0arqdj.js";import"../../chunk-8mbyyh8j.js";import L from"path";class F extends Error{name="QueueWorkerRefused"}class H{kernel;stopping;keepAlive;settings;constructor(y,z={}){this.kernel=y;this.settings={...J(),...z}}async start(){if(await this.kernel.waitForBoot(),this.stopping)return;let y=this.kernel.app;if(!y.bound(E))throw new F("[gemi] `gemi queue:work` has no queue to claim from: this application does not register QueueServiceProvider.");let z=y.make(E);if(!z.durable)throw new F('[gemi] `gemi queue:work` refuses to start: the queue uses the memory driver, which keeps each job in the process that dispatched it, so a worker never sees one. Set `driver: "database"` (or another driver every process can reach) in app/config/queue.ts, or run jobs in the server and drop the worker.');z.start(),this.keepAlive=setInterval(()=>{},1073741824),console.log(`[gemi] Queue worker started: claiming up to ${z.config.concurrency} job(s) at a time.`)}stop(y={}){return this.stopping??=this.drain({...this.settings,...y}),this.stopping}async drain(y){I();let z=this.kernel.app,A=z.resolved(E)?z.make(E):void 0;if(A)console.log(`[gemi] Shutting down: waiting for ${A.running} running job(s) (up to ${y.timeoutMs/1000}s).`),await A.drain(y.timeoutMs);let B=await this.kernel.shutdown({timeoutMs:y.providerTimeoutMs});clearInterval(this.keepAlive);let C=(A?.running??0)===0&&B.failed.length===0&&B.timedOut.length===0;return console.log(`[gemi] Shutdown ${C?"complete":"finished with errors"}.`),C?0:1}}async function U(){let y=N();process.env.ROOT_DIR=y,process.env.APP_DIR=L.join(y,"app"),T();let z=L.join(y,"app/kernel/Kernel.ts"),{default:A}=await import(z);if(typeof A!=="function")return console.error(`[gemi] ${z} has no default export to boot the worker from.`),1;let B=new A;B.boot();let C=new H(B);O(()=>C.stop());try{await C.start()}catch(G){if(!(G instanceof F))throw G;return console.error(G.message),1}return}U().then((y)=>{if(y!==void 0)process.exit(y)},(y)=>{console.error("[gemi] The queue worker failed to start:",y),process.exit(1)});
+import{Ec as E,Hc as T}from"../../chunk-7vb4eey2.js";import"../../chunk-tn2bryy2.js";import"../../chunk-cbqazg9k.js";import"../../chunk-1myhm0g3.js";import"../../chunk-kejwjerj.js";import"../../chunk-t4yh4nf9.js";import"../../chunk-1vzks22y.js";import{fi as I,gi as J,ji as O}from"../../chunk-zyt2w03d.js";import{ni as N}from"../../chunk-1hr4xht1.js";import"../../chunk-vw8849ys.js";import L from"path";class F extends Error{name="QueueWorkerRefused"}class H{kernel;stopping;keepAlive;settings;constructor(y,z={}){this.kernel=y;this.settings={...J(),...z}}async start(){if(await this.kernel.waitForBoot(),this.stopping)return;let y=this.kernel.app;if(!y.bound(E))throw new F("[gemi] `gemi queue:work` has no queue to claim from: this application does not register QueueServiceProvider.");let z=y.make(E);if(!z.durable)throw new F('[gemi] `gemi queue:work` refuses to start: the queue uses the memory driver, which keeps each job in the process that dispatched it, so a worker never sees one. Set `driver: "database"` (or another driver every process can reach) in app/config/queue.ts, or run jobs in the server and drop the worker.');z.start(),this.keepAlive=setInterval(()=>{},1073741824),console.log(`[gemi] Queue worker started: claiming up to ${z.config.concurrency} job(s) at a time.`)}stop(y={}){return this.stopping??=this.drain({...this.settings,...y}),this.stopping}async drain(y){I();let z=this.kernel.app,A=z.resolved(E)?z.make(E):void 0;if(A)console.log(`[gemi] Shutting down: waiting for ${A.running} running job(s) (up to ${y.timeoutMs/1000}s).`),await A.drain(y.timeoutMs);let B=await this.kernel.shutdown({timeoutMs:y.providerTimeoutMs});clearInterval(this.keepAlive);let C=(A?.running??0)===0&&B.failed.length===0&&B.timedOut.length===0;return console.log(`[gemi] Shutdown ${C?"complete":"finished with errors"}.`),C?0:1}}async function U(){let y=N();process.env.ROOT_DIR=y,process.env.APP_DIR=L.join(y,"app"),T();let z=L.join(y,"app/kernel/Kernel.ts"),{default:A}=await import(z);if(typeof A!=="function")return console.error(`[gemi] ${z} has no default export to boot the worker from.`),1;let B=new A;B.boot();let C=new H(B);O(()=>C.stop());try{await C.start()}catch(G){if(!(G instanceof F))throw G;return console.error(G.message),1}return}U().then((y)=>{if(y!==void 0)process.exit(y)},(y)=>{console.error("[gemi] The queue worker failed to start:",y),process.exit(1)});
 
-//# debugId=C493F44272F4F1B064756E2164756E21
+//# debugId=94D4E3D8DDBEA88A64756E2164756E21

package/dist/services/queue/work.js.map

@@ -6,6 +6,6 @@
     "import type { Application, ShutdownReport } from \"../../foundation/Application\";\nimport { markShuttingDown, shutdownSettings, type ShutdownSettings } from \"../../server/shutdown\";\nimport { QueueManager } from \"./QueueManager\";\n\n/** The part of a `Kernel` a worker drives. */\nexport type WorkerKernel = {\n  readonly app: Application;\n  waitForBoot(): Promise<void>;\n  shutdown(options?: { timeoutMs?: number }): Promise<ShutdownReport>;\n};\n\n/**\n * A worker that was told to start in an application it cannot claim for. The\n * message is written for the operator reading the deploy's logs.\n */\nexport class QueueWorkerRefused extends Error {\n  name = \"QueueWorkerRefused\";\n}\n\n/**\n * The process `gemi queue:work` runs: the application booted as a server boots\n * it, claiming from the queue, and no `Bun.serve`. It exists so job capacity\n * can be scaled apart from request traffic, which needs a driver both kinds of\n * process can reach; see `start` for why the memory driver is refused.\n *\n * The caller marks the process as a worker (`markQueueWorker`) before the\n * kernel registers, so every claim rule that asks `claimsInThisProcess` sees a\n * process that claims, whatever `GEMI_QUEUE_CLAIM` says.\n */\nexport class QueueWorker {\n  private stopping: Promise<number> | undefined;\n  private keepAlive: ReturnType<typeof setInterval> | undefined;\n  private readonly settings: ShutdownSettings;\n\n  /**\n   * `settings` default to the `GEMI_SHUTDOWN_*` variables, read here rather\n   * than at the signal so a bad value is warned about while the deploy is\n   * being watched, as `Server.start` does.\n   */\n  constructor(\n    private readonly kernel: WorkerKernel,\n    settings: Partial<ShutdownSettings> = {},\n  ) {\n    this.settings = { ...shutdownSettings(), ...settings };\n  }\n\n  /**\n   * Boots the application and starts claiming. Rejects with\n   * `QueueWorkerRefused` when the application has no queue, or its queue uses\n   * the memory driver.\n   *\n   * Refused rather than warned about, because a memory worker can never do\n   * anything: its jobs live in a `Map` in the process that dispatched them,\n   * so a worker's is always empty. Left running, it looks like a healthy\n   * deploy — a process up, no errors — that runs nothing, and scaling it out\n   * adds no capacity. An exit the platform reports as a crash loop is a form\n   * of the mistake someone will see.\n   */\n  async start(): Promise<void> {\n    await this.kernel.waitForBoot();\n    // A signal during the boot has already drained and cleared the handle\n    // below. Going on would start the loop again and arm a handle nothing\n    // clears, holding open a worker that has finished shutting down.\n    if (this.stopping) return;\n\n    const application = this.kernel.app;\n    // `bound`, not `make` in a try: an application built without the queue\n    // provider is a configuration to name, not an unbound-token stack trace.\n    if (!application.bound(QueueManager)) {\n      throw new QueueWorkerRefused(\n        \"[gemi] `gemi queue:work` has no queue to claim from: this application \" +\n          \"does not register QueueServiceProvider.\",\n      );\n    }\n    const queue = application.make(QueueManager);\n    if (!queue.durable) {\n      throw new QueueWorkerRefused(\n        \"[gemi] `gemi queue:work` refuses to start: the queue uses the memory \" +\n          \"driver, which keeps each job in the process that dispatched it, so \" +\n          'a worker never sees one. Set `driver: \"database\"` (or another driver ' +\n          \"every process can reach) in app/config/queue.ts, or run jobs in the \" +\n          \"server and drop the worker.\",\n      );\n    }\n\n    // Idempotent: a production boot with a durable driver has already started\n    // it (`startClaimingIfServing`). Development has not, and a worker claims\n    // in either.\n    queue.start();\n    // The queue's poll timer is unref'd, so that a script's queue does not\n    // hold it open; here the queue is the process, and without a handle of its\n    // own an idle worker would exit 0 as soon as it booted.\n    this.keepAlive = setInterval(() => {}, 1 << 30);\n    console.log(\n      `[gemi] Queue worker started: claiming up to ${queue.config.concurrency} job(s) at a time.`,\n    );\n  }\n\n  /**\n   * Stops claiming, waits for the running jobs, runs every provider's\n   * `shutdown()`, and resolves with the exit code: 0 when no job was left\n   * running and every provider finished in time, 1 otherwise. Idempotent.\n   *\n   * `gemi start`'s drain, with the jobs where the requests were:\n   * `isShuttingDown()` turns true, which stops a durable queue claiming;\n   * running jobs get `timeoutMs` (`GEMI_SHUTDOWN_TIMEOUT`), which a server\n   * spends on requests; then `Application.shutdown` gets `providerTimeoutMs`,\n   * and in it the queue provider waits for whatever is still running and\n   * names it. The two budgets add up as they do for a server, so a worker\n   * fits the same grace period. `delayMs` is not waited: it is for a load\n   * balancer, and nothing routes to a worker.\n   */\n  stop(settings: Partial<ShutdownSettings> = {}): Promise<number> {\n    this.stopping ??= this.drain({ ...this.settings, ...settings });\n    return this.stopping;\n  }\n\n  private async drain(settings: ShutdownSettings): Promise<number> {\n    markShuttingDown();\n    const application = this.kernel.app;\n    // Resolving the manager now would build a driver only to stop it, which\n    // is what a signal during the boot, before the provider resolved it, finds.\n    const queue = application.resolved(QueueManager) ? application.make(QueueManager) : undefined;\n    if (queue) {\n      console.log(\n        `[gemi] Shutting down: waiting for ${queue.running} running job(s) ` +\n          `(up to ${settings.timeoutMs / 1000}s).`,\n      );\n      await queue.drain(settings.timeoutMs);\n    }\n\n    const report = await this.kernel.shutdown({ timeoutMs: settings.providerTimeoutMs });\n    clearInterval(this.keepAlive);\n    const clean =\n      (queue?.running ?? 0) === 0 && report.failed.length === 0 && report.timedOut.length === 0;\n    console.log(`[gemi] Shutdown ${clean ? \"complete\" : \"finished with errors\"}.`);\n    return clean ? 0 : 1;\n  }\n}\n"
   ],
   "mappings": ";iZAYA,kBCGO,IAAM,QAA2B,GAAM,DAC5C,GAAO,kBACT,DAYO,IAAM,CAAY,CAWJ,OAVX,SACA,UACS,SAOjB,WAAW,CACQ,EACjB,EAAsC,CAAC,EACvC,CAFiB,cAGjB,KAAK,SAAW,IAAK,EAAiB,KAAM,CAAS,OAejD,MAAK,EAAkB,CAK3B,GAJA,MAAM,KAAK,OAAO,YAAY,EAI1B,KAAK,SAAU,OAEnB,IAAM,EAAc,KAAK,OAAO,IAGhC,GAAI,CAAC,EAAY,MAAM,CAAY,EACjC,MAAM,IAAI,EACR,+GAEF,EAEF,IAAM,EAAQ,EAAY,KAAK,CAAY,EAC3C,GAAI,CAAC,EAAM,QACT,MAAM,IAAI,EACR,8SAKF,EAMF,EAAM,MAAM,EAIZ,KAAK,UAAY,YAAY,IAAM,GAAI,UAAO,EAC9C,QAAQ,IACN,+CAA+C,EAAM,OAAO,+BAC9D,EAiBF,IAAI,CAAC,EAAsC,CAAC,EAAoB,CAE9D,OADA,KAAK,WAAa,KAAK,MAAM,IAAK,KAAK,YAAa,CAAS,CAAC,EACvD,KAAK,cAGA,MAAK,CAAC,EAA6C,CAC/D,EAAiB,EACjB,IAAM,EAAc,KAAK,OAAO,IAG1B,EAAQ,EAAY,SAAS,CAAY,EAAI,EAAY,KAAK,CAAY,EAAI,OACpF,GAAI,EACF,QAAQ,IACN,qCAAqC,EAAM,iCAC/B,EAAS,UAAY,SACnC,EACA,MAAM,EAAM,MAAM,EAAS,SAAS,EAGtC,IAAM,EAAS,MAAM,KAAK,OAAO,SAAS,CAAE,UAAW,EAAS,iBAAkB,CAAC,EACnF,cAAc,KAAK,SAAS,EAC5B,IAAM,GACH,GAAO,SAAW,KAAO,GAAK,EAAO,OAAO,SAAW,GAAK,EAAO,SAAS,SAAW,EAE1F,OADA,QAAQ,IAAI,mBAAmB,EAAQ,WAAa,yBAAyB,EACtE,EAAQ,EAAI,EAEvB,CDvHA,eAAe,CAAI,EAAgC,CACjD,IAAM,EAAU,EAAY,EAI5B,QAAQ,IAAI,SAAW,EACvB,QAAQ,IAAI,QAAU,EAAK,KAAK,EAAS,KAAK,EAE9C,EAAgB,EAEhB,IAAM,EAAa,EAAK,KAAK,EAAS,sBAAsB,GACpD,QAAS,GAAY,MAAa,UAG1C,GAAI,OAAO,IAAW,WAEpB,OADA,QAAQ,MAAM,UAAU,kDAA2D,EAC5E,EAET,IAAM,EAAS,IAAI,EACnB,EAAO,KAAK,EAEZ,IAAM,EAAS,IAAI,EAAY,CAAM,EAKrC,EAAuB,IAAM,EAAO,KAAK,CAAC,EAE1C,GAAI,CACF,MAAM,EAAO,MAAM,EACnB,MAAO,EAAO,CACd,GAAI,EAAE,aAAiB,GAAqB,MAAM,EAElD,OADA,QAAQ,MAAM,EAAM,OAAO,EACpB,EAGT,OAGF,EAAK,EAAE,KACL,CAAC,IAAS,CACR,GAAI,IAAS,OAAW,QAAQ,KAAK,CAAI,GAE3C,CAAC,IAAU,CACT,QAAQ,MAAM,2CAA4C,CAAK,EAC/D,QAAQ,KAAK,CAAC,EAElB",
-  "debugId": "C493F44272F4F1B064756E2164756E21",
+  "debugId": "94D4E3D8DDBEA88A64756E2164756E21",
   "names": []
 }

package/dist/services/router/ApiRouteDispatcher.d.ts

@@ -1,3 +1,5 @@
+import type { User } from "../../auth/types";
+import type { McpGrant, ProgressSink } from "../../http/modelOriginated";
 import { HttpRequest } from "../../http";
 import { type CarriedContext } from "../../http/requestContext";
 import { type ApiRouteConfig } from "./config";
@@ -18,6 +20,33 @@ export type DispatchCredentials = {
 };
 export type DispatchAsOptions = {
     credentials?: DispatchCredentials;
+    /**
+     * Dispatches as this user instead of copying the initiator's access token
+     * (#762): the user is on the request context before the route's middleware
+     * runs, as a global middleware's would be, so `auth` passes and policies
+     * see them. For a caller whose identity was verified some other way than a
+     * gemi session — a remote MCP client's OAuth token or API key — which has
+     * no session token to copy, and whose own credential must not be passed on.
+     *
+     * Only trusted code builds one: it is exactly as powerful as an app
+     * middleware calling `setUser`, and gemi's only writer is the MCP registry,
+     * from a principal a caller resolver verified. With it, nothing of the
+     * initiator's credentials is copied — not its `access_token` cookie or
+     * header — so a request that carried both cannot run as the session's user.
+     * `grant` is what `req.mcpGrant()` answers on the dispatched request.
+     */
+    identity?: DispatchIdentity;
+    /** Aborts the dispatched request: its `req.signal`, for a route that honours it. */
+    signal?: AbortSignal;
+    /**
+     * Receives what the route reports with `req.reportProgress` — a remote MCP
+     * client's `notifications/progress`.
+     */
+    progress?: ProgressSink;
+};
+export type DispatchIdentity = {
+    user: User;
+    grant?: McpGrant;
 };
 /**
  * A RequestBreakerError's `api` payload as a Response, from a middleware or a

package/dist/services/router/ApiRouteDispatcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApiRouteDispatcher.d.ts","sourceRoot":"","sources":["../../../services/router/ApiRouteDispatcher.ts"],"names":[],"mappings":"AAEA,OAAO,EAAa,WAAW,EAAE,MAAM,YAAY,CAAC;AAIpD,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,2BAA2B,CAAC;AAIhF,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAsChF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC,CAAC;AAiIF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,YAOA;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YA6CrB;AAED,qBAAa,kBAAkB;IAC7B,MAAM,CAAC,KAAK,SAAgB;IAE5B,UAAU,EAAE,aAAa,CAAM;IAE/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgD;IAC/E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8C;IAC3E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+C;gBAEjE,MAAM,EAAE,cAAc;IAiB3B,wBAAwB,CAAC,GAAG,EAAE,OAAO;;;;IAuBtC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW;IA+BzD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAkC9C;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;;;;;;;;;;;;;;OAkBG;YACW,UAAU;IAgCxB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,OAAO,CAAC,eAAe;IAMjB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI;IA4GpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACG,UAAU,CACd,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAChC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,QAAQ,CAAC;CA4ErB"}
+{"version":3,"file":"ApiRouteDispatcher.d.ts","sourceRoot":"","sources":["../../../services/router/ApiRouteDispatcher.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAa,WAAW,EAAE,MAAM,YAAY,CAAC;AAIpD,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,2BAA2B,CAAC;AAIhF,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAsChF,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,oFAAoF;IACpF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB,CAAC;AA+IF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,YAOA;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,YA6CrB;AAED,qBAAa,kBAAkB;IAC7B,MAAM,CAAC,KAAK,SAAgB;IAE5B,UAAU,EAAE,aAAa,CAAM;IAE/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgD;IAC/E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8C;IAC3E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+C;gBAEjE,MAAM,EAAE,cAAc;IAiB3B,wBAAwB,CAAC,GAAG,EAAE,OAAO;;;;IAuBtC,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW;IA+BzD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAkC9C;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;;;;;;;;;;;;;;OAkBG;YACW,UAAU;IAgCxB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,OAAO,CAAC,eAAe;IAMjB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI;IA4GpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACG,UAAU,CACd,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAChC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,QAAQ,CAAC;CAwFrB"}

package/dist/services/router/RouteServiceProvider.d.ts

@@ -6,6 +6,12 @@ import { ServiceProvider } from "../../support/ServiceProvider";
  */
 export declare class RouteServiceProvider extends ServiceProvider {
     register(): void;
+    /**
+     * Bound here and built at boot when `route.mcp.remote.enabled`, so a
+     * misconfigured endpoint — no resolver, no url, no SECRET — fails the boot,
+     * not the first client that connects.
+     */
+    private registerMcpHttp;
     /**
      * The dispatchers of every host group, and the MCP registry when an app declares one, must
      * not be built lazily: constructing the dispatchers flattens the route

package/dist/services/router/RouteServiceProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RouteServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/router/RouteServiceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAkBhE;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IACvD,QAAQ;IA6CR;;;;;;;;OAQG;IACH,IAAI;CASL"}
+{"version":3,"file":"RouteServiceProvider.d.ts","sourceRoot":"","sources":["../../../services/router/RouteServiceProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAmBhE;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IACvD,QAAQ;IAgDR;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAUvB;;;;;;;;OAQG;IACH,IAAI;CAeL"}

package/dist/services/router/config.d.ts

@@ -2,6 +2,8 @@ import type { JSX } from "react";
 import type { HttpRequest } from "../../http/HttpRequest";
 import type { ApiRouter } from "../../http/ApiRouter";
 import type { McpRouter } from "../../http/McpRouter";
+import type { McpRemoteFileOptions } from "../mcp/McpRegistry";
+import type { McpRemoteHttpConfig } from "../mcp/http/McpHttpServer";
 import type { ViewRouter } from "../../http/ViewRouter";
 import type { StreamSummary } from "./ServerQueryStore";
 export interface ApiRouteConfig {
@@ -44,6 +46,20 @@ export interface ViewRouteConfig {
 }
 export interface McpRouteConfig {
     router: new () => McpRouter<any>;
+    /** Remote MCP callers (#762). */
+    remote?: McpRemoteConfig;
+}
+/**
+ * The MCP endpoint remote clients connect to (#762). Off unless `enabled`.
+ * See `McpRemoteHttpConfig`.
+ */
+export interface McpRemoteConfig extends McpRemoteHttpConfig {
+    /**
+     * How a remote caller's file arguments are read: the largest file, and
+     * whether an `https` URL may be fetched instead of base64 bytes (off by
+     * default). See `McpRemoteFileOptions`.
+     */
+    files?: McpRemoteFileOptions;
 }
 export interface DomainGroupRouters {
     api?: Partial<ApiRouteConfig> & Pick<ApiRouteConfig, "rootRouter">;

package/dist/services/router/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../services/router/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,WAAW,cAAc;IAI7B,UAAU,EAAE,OAAO,SAAS,CAAC;IAE7B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAGD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC;IAClC,UAAU,EAAE,UAAU,UAAU,CAAC;IAEjC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,CACjB,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,aAAa,KACnB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAID,MAAM,WAAW,cAAc;IAG7B,MAAM,EAAE,UAAU,SAAS,CAAC,GAAG,CAAC,CAAC;CAClC;AAKD,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,CACP,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,OAAO,KACT,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,OAAO,EAAE,CACP,IAAI,EAAE,MAAM,KACT,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAE5E,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAID,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAExC,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAE7B,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAE5B;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1B;AAGD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,EAAE,eAAe,CAAC;IACtB,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAElE;AAGD,wBAAgB,sBAAsB,IAAI,IAAI,CAC5C,QAAQ,CAAC,cAAc,CAAC,EACxB,YAAY,CACb,CAMA;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAC7C,QAAQ,CAAC,eAAe,CAAC,EACzB,MAAM,GAAG,YAAY,CACtB,CAQA"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../services/router/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,WAAW,cAAc;IAI7B,UAAU,EAAE,OAAO,SAAS,CAAC;IAE7B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAGD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,GAAG,CAAC,OAAO,CAAC;IAClC,UAAU,EAAE,UAAU,UAAU,CAAC;IAEjC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,CACjB,GAAG,EAAE,WAAW,EAChB,OAAO,EAAE,aAAa,KACnB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAID,MAAM,WAAW,cAAc;IAG7B,MAAM,EAAE,UAAU,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,iCAAiC;IACjC,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,eAAgB,SAAQ,mBAAmB;IAC1D;;;;OAIG;IACH,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAKD,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,CACP,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,OAAO,KACT,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,OAAO,EAAE,CACP,IAAI,EAAE,MAAM,KACT,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAE5E,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAID,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAExC,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAE7B,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAE5B;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1B;AAGD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,EAAE,eAAe,CAAC;IACtB,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAElE;AAGD,wBAAgB,sBAAsB,IAAI,IAAI,CAC5C,QAAQ,CAAC,cAAc,CAAC,EACxB,YAAY,CACb,CAMA;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAC7C,QAAQ,CAAC,eAAe,CAAC,EACzB,MAAM,GAAG,YAAY,CACtB,CAQA"}

package/dist/stats/route-table.js

@@ -1,4 +1,4 @@
 // @bun
-import"../chunk-8mbyyh8j.js";import M from"path";import{writeFileSync as Q}from"fs";var L=new Set(["FILE","REDIRECT"]);function H(j){return j.run(()=>{let x=[];for(let{group:z,view:D}of j.domains().viewGroups())for(let[G,B]of Object.entries(D.flatViewRoutes)){let C=D.routeManifest[G]??B.segments.map((K)=>K.viewPath);if(C.length===0||L.has(C.at(-1)))continue;x.push({path:G,group:z,views:C,...B.static?{static:B.static.layout?{layout:B.static.layout}:{}}:{}})}return x})}var J=process.argv[2];async function U(){if(!J)throw Error("usage: route-table <out.json>");let j=M.resolve(process.cwd(),"app/kernel/Kernel.ts"),x=await import(j);if(typeof x.default!=="function")throw Error(`${j} has no default export (the Kernel subclass).`);let z=new x.default;z.boot();try{Q(J,JSON.stringify(H(z)))}finally{z.destroy()}}U().then(()=>process.exit(0),(j)=>{console.error(j?.stack??String(j)),process.exit(1)});
+import"../chunk-vw8849ys.js";import M from"path";import{writeFileSync as Q}from"fs";var L=new Set(["FILE","REDIRECT"]);function H(j){return j.run(()=>{let x=[];for(let{group:z,view:D}of j.domains().viewGroups())for(let[G,B]of Object.entries(D.flatViewRoutes)){let C=D.routeManifest[G]??B.segments.map((K)=>K.viewPath);if(C.length===0||L.has(C.at(-1)))continue;x.push({path:G,group:z,views:C,...B.static?{static:B.static.layout?{layout:B.static.layout}:{}}:{}})}return x})}var J=process.argv[2];async function U(){if(!J)throw Error("usage: route-table <out.json>");let j=M.resolve(process.cwd(),"app/kernel/Kernel.ts"),x=await import(j);if(typeof x.default!=="function")throw Error(`${j} has no default export (the Kernel subclass).`);let z=new x.default;z.boot();try{Q(J,JSON.stringify(H(z)))}finally{z.destroy()}}U().then(()=>process.exit(0),(j)=>{console.error(j?.stack??String(j)),process.exit(1)});
 
 //# debugId=2C354352EBF6475164756E2164756E21

package/dist/support/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{qc as Y}from"../chunk-f1y8eggf.js";import{Cg as M}from"../chunk-y6v0x869.js";import{Dh as P,Fh as R}from"../chunk-z5hrymvn.js";import"../chunk-v4gwmhtf.js";import{Oh as Q,Ph as U,Qh as V,Rh as W}from"../chunk-fr0arqdj.js";import"../chunk-8mbyyh8j.js";class S{static token;async boot(){}static inject(){if(!this.token)throw Error(`Service [${this.name}] does not declare a \`static token\`, so the container has no key to resolve it by.`);try{return R(this)}catch(x){throw Error(`Could not inject [${this.name}]. Services are constructed when the kernel boots, so `+"inject() only works from code that runs after that \u2014 a constructor default or a method "+`body, never module top level. Check that [${this.name}] is listed in \`services\` on your Kernel.`,{cause:x})}}static with(x){let f=new this;for(let[C,g]of Object.entries(x))if(g!==void 0)f[C]=g;return f}}import{readdir as z}from"fs/promises";import{join as B,parse as j}from"path";var H=[".ts",".tsx",".js",".mjs",".jsx"];function J(x={}){let f={};for(let[C,g]of Object.entries(x))f[C]=q(g);return new P(f)}async function L(x,f=new P){let C=[];try{C=await z(x)}catch(D){return f}let g=C.filter((D)=>{let{ext:v,name:F}=j(D);return H.includes(v)&&!F.startsWith(".")}).sort();for(let D of g){let{name:v}=j(D),F=await import(B(x,D));f.set(v,q(F))}return f}function q(x){if(x&&typeof x==="object"&&"default"in x)return x.default;return x}export{M as withDefaults,Q as sourceFiles,W as projectRoot,L as loadConfigFrom,V as discoverClasses,J as createConfigRepository,Y as ServiceProvider,S as Service,P as Repository,U as DiscoveryError};
+import{Lc as Y}from"../chunk-n672d4g8.js";import{_g as M}from"../chunk-cbqazg9k.js";import{$h as P,bi as R}from"../chunk-t4yh4nf9.js";import"../chunk-1vzks22y.js";import{ki as Q,li as U,mi as V,ni as W}from"../chunk-1hr4xht1.js";import"../chunk-vw8849ys.js";class S{static token;async boot(){}static inject(){if(!this.token)throw Error(`Service [${this.name}] does not declare a \`static token\`, so the container has no key to resolve it by.`);try{return R(this)}catch(x){throw Error(`Could not inject [${this.name}]. Services are constructed when the kernel boots, so `+"inject() only works from code that runs after that \u2014 a constructor default or a method "+`body, never module top level. Check that [${this.name}] is listed in \`services\` on your Kernel.`,{cause:x})}}static with(x){let f=new this;for(let[C,g]of Object.entries(x))if(g!==void 0)f[C]=g;return f}}import{readdir as z}from"fs/promises";import{join as B,parse as j}from"path";var H=[".ts",".tsx",".js",".mjs",".jsx"];function J(x={}){let f={};for(let[C,g]of Object.entries(x))f[C]=q(g);return new P(f)}async function L(x,f=new P){let C=[];try{C=await z(x)}catch(D){return f}let g=C.filter((D)=>{let{ext:v,name:F}=j(D);return H.includes(v)&&!F.startsWith(".")}).sort();for(let D of g){let{name:v}=j(D),F=await import(B(x,D));f.set(v,q(F))}return f}function q(x){if(x&&typeof x==="object"&&"default"in x)return x.default;return x}export{M as withDefaults,Q as sourceFiles,W as projectRoot,L as loadConfigFrom,V as discoverClasses,J as createConfigRepository,Y as ServiceProvider,S as Service,P as Repository,U as DiscoveryError};
 
-//# debugId=413B303FE6EEC70064756E2164756E21
+//# debugId=6197F3E996C8C49964756E2164756E21

package/dist/support/index.js.map

@@ -6,6 +6,6 @@
     "import { readdir } from \"node:fs/promises\";\nimport { join, parse } from \"node:path\";\n\nimport { Repository } from \"./Repository\";\n\nconst CONFIG_EXTENSIONS = [\".ts\", \".tsx\", \".js\", \".mjs\", \".jsx\"];\n\n// Builds a Repository from an already-imported map of config modules. The map\n// key becomes the top-level config key, so `{ mail: mailModule }` is readable\n// as `config.get(\"mail.driver\")`. Each entry may be either the module namespace\n// (its `default` export is unwrapped) or the config object itself.\nexport function createConfigRepository(\n  modules: Record<string, any> = {},\n): Repository {\n  const items: Record<string, any> = {};\n\n  for (const [key, mod] of Object.entries(modules)) {\n    items[key] = unwrap(mod);\n  }\n\n  return new Repository(items);\n}\n\n// Reads every config module in an app's `app/config` directory into a\n// Repository. The file's basename is the top-level key: `app/config/mail.ts`\n// populates `mail.*`. A missing directory yields an empty Repository so apps\n// that declare no config still boot.\nexport async function loadConfigFrom(\n  directory: string,\n  repository = new Repository(),\n): Promise<Repository> {\n  let entries: string[] = [];\n\n  try {\n    entries = await readdir(directory);\n  } catch (err) {\n    return repository;\n  }\n\n  const files = entries\n    .filter((entry) => {\n      const { ext, name } = parse(entry);\n      return CONFIG_EXTENSIONS.includes(ext) && !name.startsWith(\".\");\n    })\n    .sort();\n\n  for (const file of files) {\n    const { name } = parse(file);\n    const mod = await import(join(directory, file));\n    repository.set(name, unwrap(mod));\n  }\n\n  return repository;\n}\n\nfunction unwrap(mod: any) {\n  if (mod && typeof mod === \"object\" && \"default\" in mod) {\n    return mod.default;\n  }\n  return mod;\n}\n"
   ],
   "mappings": ";2RAgCO,CAAe,JAAQ,EAOrB,OAMD,AAAI,EAAkB,QAmBrB,OAAS,EAKX,CACH,GAAI,CAAC,KAAK,MACR,MAAU,MACR,YAAY,KAAK,0FACnB,EAGF,GAAI,CACF,OAAO,EAAI,IAAuB,EAClC,MAAO,EAAO,CACd,MAAU,MACR,qBAAqB,KAAK,6DACxB,+FACA,6CAA6C,KAAK,kDAEpD,CAAE,OAAM,CACV,SAoBG,KAAuB,CAAoB,EAA0B,CAC1E,IAAM,EAAW,IAAI,KACrB,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAS,EACjD,GAAI,IAAU,OAAW,EAAS,GAAO,EAE3C,OAAO,EAEX,CChHA,kBAAS,oBACT,eAAS,WAAM,aAIf,IAAM,EAAoB,CAAC,MAAO,OAAQ,MAAO,OAAQ,MAAM,EAMxD,SAAS,CAAsB,CACpC,EAA+B,CAAC,EACpB,CACZ,IAAM,EAA6B,CAAC,EAEpC,QAAY,EAAK,KAAQ,OAAO,QAAQ,CAAO,EAC7C,EAAM,GAAO,EAAO,CAAG,EAGzB,OAAO,IAAI,EAAW,CAAK,EAO7B,eAAsB,CAAc,CAClC,EACA,EAAa,IAAI,EACI,CACrB,IAAI,EAAoB,CAAC,EAEzB,GAAI,CACF,EAAU,MAAM,EAAQ,CAAS,EACjC,MAAO,EAAK,CACZ,OAAO,EAGT,IAAM,EAAQ,EACX,OAAO,CAAC,IAAU,CACjB,IAAQ,MAAK,QAAS,EAAM,CAAK,EACjC,OAAO,EAAkB,SAAS,CAAG,GAAK,CAAC,EAAK,WAAW,GAAG,EAC/D,EACA,KAAK,EAER,QAAW,KAAQ,EAAO,CACxB,IAAQ,QAAS,EAAM,CAAI,EACrB,EAAM,MAAa,SAAK,EAAW,CAAI,GAC7C,EAAW,IAAI,EAAM,EAAO,CAAG,CAAC,EAGlC,OAAO,EAGT,SAAS,CAAM,CAAC,EAAU,CACxB,GAAI,GAAO,OAAO,IAAQ,UAAY,YAAa,EACjD,OAAO,EAAI,QAEb,OAAO",
-  "debugId": "413B303FE6EEC70064756E2164756E21",
+  "debugId": "6197F3E996C8C49964756E2164756E21",
   "names": []
 }

package/dist/vitest/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{ea as B,fa as D}from"../chunk-6wymbbes.js";import"../chunk-rg4hhxj3.js";import"../chunk-571rvxe6.js";import{za as J}from"../chunk-p1aqq0ga.js";import"../chunk-4mfrgd5m.js";import"../chunk-8mbyyh8j.js";function N(){return{name:"gemi-custom-request",enforce:"pre",async transform(G,H){let j=H.split("?",1)[0];if(j.includes("/node_modules/")||!B.test(j))return null;return{code:await D(G),map:null}}}}export{N as gemiRequestPlugin,J as gemiIslandPlugin};
+import{ea as B,fa as D}from"../chunk-gts5p6mw.js";import"../chunk-9n1hx3mq.js";import"../chunk-hdps9n52.js";import{za as J}from"../chunk-p1aqq0ga.js";import"../chunk-4mfrgd5m.js";import"../chunk-vw8849ys.js";function N(){return{name:"gemi-custom-request",enforce:"pre",async transform(G,H){let j=H.split("?",1)[0];if(j.includes("/node_modules/")||!B.test(j))return null;return{code:await D(G),map:null}}}}export{N as gemiRequestPlugin,J as gemiIslandPlugin};
 
 //# debugId=69032BE0B0AA208664756E2164756E21