gemi 0.124.0 → 0.125.0

package/dist/services/logging/LogManager.d.ts

@@ -22,6 +22,7 @@ export declare class LogManager {
      * `httpProd` sets `ROOT_DIR` from, a moment later.
      */
     private get logsDirPath();
+    private readonly consoleThreshold;
     constructor(config: Required<LogConfig>);
     /**
      * Idempotent. `LogServiceProvider.boot()` calls this so the storage

package/dist/services/logging/LogManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LogManager.d.ts","sourceRoot":"","sources":["../../../services/logging/LogManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAapC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAY,QAAQ,EAAE,MAAM,SAAS,CAAC;AAElD,qBAAa,UAAU;IA0BF,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;IAzB9C,MAAM,CAAC,KAAK,SAAS;IAErB,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,OAAO,CAAS;IAEzB,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,WAAW,CAA8B;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAElC;;;;;;;;OAQG;IACH,OAAO,KAAK,WAAW,GAEtB;gBAEkB,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;IAE9C;;;;OAIG;IACH,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBP,aAAa;IAWrB,UAAU;IAgDV,GAAG,CACP,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM;IAmE9B,QAAQ;CAkBf"}
+{"version":3,"file":"LogManager.d.ts","sourceRoot":"","sources":["../../../services/logging/LogManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAapC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,KAAK,EAAY,QAAQ,EAAE,MAAM,SAAS,CAAC;AAElD,qBAAa,UAAU;IA4BF,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;IA3B9C,MAAM,CAAC,KAAK,SAAS;IAErB,MAAM,EAAE,QAAQ,CAAC;IACjB,OAAO,EAAE,OAAO,CAAS;IAEzB,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,cAAc,CAAkB;IACxC,OAAO,CAAC,WAAW,CAA8B;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAElC;;;;;;;;OAQG;IACH,OAAO,KAAK,WAAW,GAEtB;IAED,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;gBAEvB,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;IAI9C;;;;OAIG;IACH,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBP,aAAa;IAWrB,UAAU;IAgDV,GAAG,CACP,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM;IAuF9B,QAAQ;CAkBf"}

package/dist/services/logging/config.d.ts

@@ -1,6 +1,28 @@
-import type { LogEntry } from "./types";
+import type { LogEntry, LogLevel } from "./types";
+/**
+ * How the console sink writes an entry.
+ *
+ * - `"text"`: one readable line, `2026-10-11T09:00:00.000Z ERROR Payment failed {"orderId":1}`.
+ * - `"json"`: one JSON object per line, `{"timestamp":…,"level":"error","message":…,"orderId":1}`,
+ *   which platform log viewers (Railway, Fly, Datadog, …) parse into structured fields.
+ */
+export type LogConsoleFormat = "text" | "json";
 export interface LogConfig {
     maxFileSize?: number;
+    /**
+     * Also write every entry to the process's stdout (`debug`, `info`, `notice`)
+     * or stderr (`warning` and above), so platform log collectors pick it up.
+     *
+     * `true` writes every level, a level writes that level and above, `false`
+     * turns the sink off. Default: `true` when `NODE_ENV` is `"development"`
+     * (`gemi dev`), `false` otherwise.
+     */
+    console?: boolean | LogLevel;
+    /**
+     * Line format of the console sink. Default: `"text"` in development,
+     * `"json"` otherwise.
+     */
+    consoleFormat?: LogConsoleFormat;
     onLogFileClosed?: (file: File) => void | Promise<void>;
     onLogCreated?: (logEntry: LogEntry) => void | Promise<void>;
 }

package/dist/services/logging/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../services/logging/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAGxC,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAE5D;AAED,wBAAgB,iBAAiB,IAAI,QAAQ,CAAC,SAAS,CAAC,CAMvD"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../services/logging/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,CAAC;AAG/C,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAE7B;;;OAGG;IACH,aAAa,CAAC,EAAE,gBAAgB,CAAC;IAEjC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAE5D;AAED,wBAAgB,iBAAiB,IAAI,QAAQ,CAAC,SAAS,CAAC,CASvD"}

package/dist/services/logging/consoleSink.d.ts

@@ -0,0 +1,25 @@
+import type { LogConsoleFormat } from "./config";
+import type { LogLevel } from "./types";
+/**
+ * The lowest level index the console sink writes, or `-1` when it is off.
+ * An unknown string is treated as `true` rather than silently dropping every
+ * entry: a typo in the config should not hide the logs.
+ */
+export declare function consoleThreshold(option: boolean | LogLevel | undefined): number;
+export type ConsoleLogLine = {
+    timestamp: string;
+    level: LogLevel;
+    message: string;
+    /** Only what the caller passed, plus `method` and `path` inside a request. */
+    metadata: Record<string, unknown>;
+};
+export declare function formatConsoleLine(line: ConsoleLogLine, format: LogConsoleFormat): string;
+/**
+ * Writes one entry to stdout or stderr. Never throws: a closed pipe must not
+ * become the caller's error.
+ */
+export declare function writeConsoleLine(line: ConsoleLogLine, options: {
+    threshold: number;
+    format: LogConsoleFormat;
+}): void;
+//# sourceMappingURL=consoleSink.d.ts.map

package/dist/services/logging/consoleSink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consoleSink.d.ts","sourceRoot":"","sources":["../../../services/logging/consoleSink.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAexC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,UAStE;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,CAAC;AA6CF,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAeR;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,QAgBzD"}

package/dist/services/mcp/McpRegistry.d.ts

@@ -1,4 +1,4 @@
-import type { ToolContext } from "../../ai/Agent";
+import type { AnyAgentTool, ToolContext } from "../../ai/Agent";
 import type { User } from "../../auth/types";
 import type { ProgressSink } from "../../http/modelOriginated";
 import { type SafeFetchOptions } from "../../http/safeFetch";
@@ -102,6 +102,12 @@ export type McpRemoteFileOptions = {
 export type McpRegistryOptions = {
     /** Remote callers' file arguments. See `McpRemoteFileOptions`. */
     files?: McpRemoteFileOptions;
+    /**
+     * Answers whether a tool's `feature` is on for the ambient request (#885).
+     * Defaults to `Features.enabled` through the container; a test passes its
+     * own.
+     */
+    featureOn?: (key: string) => boolean | Promise<boolean>;
 };
 /** What `execute` takes beside the call itself. */
 export type McpExecuteOptions = {
@@ -168,29 +174,33 @@ export type McpToolAnnotations = {
  * One tool, described without committing to who consumes it.
  *
  * The registry's native output. An in-process agent projects it to an
- * `AgentTool` (`toAgentTools`); v2's `tools/list` will project it to JSON.
+ * `AgentTool` (`toAgentTools`); v2's `tools/list` projects it to JSON.
  * Emitting `AgentTool`s here instead would leave v2 reversing JSON Schema back
  * out of them.
+ *
+ * Two kinds (#759), told apart by `kind`: a route the app exposed with
+ * `fromApiRoute`, and a native tool it registered with `fromTool`. Only a
+ * route has a `method` and a `url`.
  */
-export interface McpToolDescriptor {
+export type McpToolDescriptor = McpRouteToolDescriptor | McpNativeToolDescriptor;
+/** What every tool has, whatever it runs. */
+interface McpToolDescriptorBase {
     /** The `routes` key, verbatim. See `McpRouter`. */
     readonly name: string;
     readonly description: string;
-    readonly method: McpMethod;
-    /** The route's path as declared, params unfilled. */
-    readonly url: string;
     /**
-     * What the model fills in: the declared `input`, plus a string for every
-     * `"input"` path param and every `"input"` file field, and the model-facing
-     * field of every `this.param(...)` (#767), under its own name and schema.
-     * Bound params and bound files are not in it at all, and neither is the raw
-     * name of a param the model names in its own terms.
+     * What the model fills in. For a route: the declared `input`, plus a string
+     * for every `"input"` path param and every `"input"` file field, and the
+     * model-facing field of every `this.param(...)` (#767), under its own name
+     * and schema. Bound params and bound files are not in it at all, and neither
+     * is the raw name of a param the model names in its own terms. For a native
+     * tool: the tool's own `inputSchema`.
      */
     readonly inputSchema: Schema<Record<string, unknown>>;
     /**
-     * The route meta's `output`: the shape of what the tool answers, after
-     * `result`. Absent when the meta declares none. v2's `tools/list` emits it
-     * as `outputSchema`.
+     * The shape of what the tool answers: a route meta's `output` (after
+     * `result`), a native tool's `outputSchema`. Absent when there is none. v2's
+     * `tools/list` emits it as `outputSchema`.
      */
     readonly outputSchema?: AnySchema;
     /** The meta's `title`: a name for a client to show. Absent when it declares none. */
@@ -198,9 +208,29 @@ export interface McpToolDescriptor {
     readonly annotations: Readonly<McpToolAnnotations>;
     readonly tags: readonly string[];
     readonly requiresApproval: boolean;
+    /**
+     * The meta's `feature`: the `app/features` key the tool is offered behind
+     * (#885). Absent when it has none. `available` and `execute` apply it;
+     * `list` and `descriptors` do not.
+     */
+    readonly feature?: string;
+}
+/** A route exposed with `fromApiRoute`. */
+export interface McpRouteToolDescriptor extends McpToolDescriptorBase {
+    readonly kind: "route";
+    readonly method: McpMethod;
+    /** The route's path as declared, params unfilled. */
+    readonly url: string;
     /** The controller method mounted at the route, when there is one (#502). */
     readonly source?: RouteSource;
 }
+/** An `AgentTool` registered with `fromTool` (#759). */
+export interface McpNativeToolDescriptor extends McpToolDescriptorBase {
+    readonly kind: "tool";
+    readonly method?: undefined;
+    readonly url?: undefined;
+    readonly source?: undefined;
+}
 /**
  * Narrows `list`. Data rather than a predicate, because v2's per-token
  * visibility will come from a token's grants, which are data. Both fields
@@ -230,6 +260,23 @@ export declare class McpCallRefusedError extends Error {
     readonly reason: "unknown-tool" | "approval-required";
     constructor(message: string, reason: "unknown-tool" | "approval-required");
 }
+/**
+ * The call a native tool is running for (#759): who is calling, the request
+ * their identity comes from, the tool and its parsed arguments. `undefined`
+ * when the tool was not called through the registry — an agent holding the
+ * `AgentTool` directly, or a run with no request to act as.
+ *
+ * What lets a composite tool run the routes it composes as its own caller:
+ *
+ * ```ts
+ * const call = mcpCallOf(ctx);
+ * if (!call) throw new ToolError("…");
+ * const pages = await registry.execute(call.caller, "list-pages", {}, ctx);
+ * ```
+ *
+ * A remote caller is held there to the tools its scopes reach, as anywhere.
+ */
+export declare function mcpCallOf(ctx: ToolContext): McpCallContext | undefined;
 /**
  * The tools an app's `McpRouter` declares, resolved against the api route
  * table, and the one place a call to them is dispatched.
@@ -260,6 +307,7 @@ export declare class McpRegistry<R extends McpRouter<any> = McpRouter<any>> {
     /** Each scope, resolved to the names of the tools it reaches. */
     private readonly scopeTools;
     private readonly files;
+    private readonly featureOn;
     constructor(router: McpRouter<any>, dispatcher: Pick<ApiRouteDispatcher, "flatRoutes" | "dispatchAs" | "getRouteHandlerAndParams">, options?: McpRegistryOptions);
     /**
      * The tools `caller` may see, narrowed by `filter`.
@@ -272,6 +320,13 @@ export declare class McpRegistry<R extends McpRouter<any> = McpRouter<any>> {
      * does not exist.
      */
     list(caller: McpCaller, filter?: McpToolFilter): McpToolDescriptor[];
+    /**
+     * `list`, narrowed to the tools whose `feature` is on for the ambient
+     * request (#885): what the remote endpoint's `tools/list` answers. A tool
+     * with no `feature` is always in it. Evaluated in the caller's request
+     * context, so a feature's `when` sees the signed-in user.
+     */
+    available(caller: McpCaller, filter?: McpToolFilter): Promise<McpToolDescriptor[]>;
     /**
      * The same listing without a caller, for a projection built once before any
      * caller exists — `toAgentTools`. It is not per-caller visibility, and a
@@ -327,6 +382,7 @@ export declare class McpRegistry<R extends McpRouter<any> = McpRouter<any>> {
      * wrote the document it is reading.
      */
     execute(caller: McpCaller, name: string, args: unknown, ctx?: ToolContext, options?: McpExecuteOptions): Promise<unknown>;
+    private isOn;
     private plan;
     /**
      * What a remote caller sends for a file field: `{ name, mimeType, data }`,
@@ -340,6 +396,41 @@ export declare class McpRegistry<R extends McpRouter<any> = McpRouter<any>> {
      * so.
      */
     private remoteFileSchema;
+    /**
+     * A native tool (#759), checked as a route is: at boot, with a sentence
+     * naming the tool, so a tool the registry cannot list or run fails here
+     * rather than on the first call.
+     */
+    private planNative;
+    /**
+     * The `AgentTool` registered as the native tool `name`.
+     *
+     * @internal For `toAgentTools`, which carries its `timeoutMs` and `async`.
+     */
+    nativeTool(name: string): AnyAgentTool;
+    /**
+     * Starts a native tool for a local caller, and answers what its `execute`
+     * returns — a promise or a generator, untouched — so `toAgentTools` hands
+     * the agent loop exactly what the tool would have, its yields and its job
+     * handle included.
+     *
+     * Without a caller — a run that was not started inside a request — the tool
+     * runs as the agent would run it directly, and `mcpCallOf` answers
+     * `undefined` inside it.
+     *
+     * @internal For `toAgentTools`. App code calls `execute`.
+     */
+    startNative(caller: McpCaller | undefined, name: string, args: unknown, ctx: ToolContext): ReturnType<NonNullable<AnyAgentTool["execute"]>>;
+    /** Hands the tool a context of its own, keyed to the call, and starts it. */
+    private runNative;
+    /**
+     * `execute` for a native tool. Local: run with the caller's `ctx`, its
+     * yields reported to `options.progress`. Remote: the meta's `remote` builds
+     * the context, and the answer is held to what a route's is — parsed by the
+     * output schema when there is one, cut at `MAX_RESULT_BODY` — and every
+     * failure but a `ToolError` is the server's, logged.
+     */
+    private executeNative;
     private fillPath;
     private formData;
     /**
@@ -388,4 +479,5 @@ export declare class McpRegistry<R extends McpRouter<any> = McpRouter<any>> {
      */
     private bind;
 }
+export {};
 //# sourceMappingURL=McpRegistry.d.ts.map

package/dist/services/mcp/McpRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpRegistry.d.ts","sourceRoot":"","sources":["../../../services/mcp/McpRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAK,KAAK,SAAS,EAAmB,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAEV,SAAS,EAKT,SAAS,EACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,kBAAkB,EAElB,mBAAmB,EACpB,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAAC,SAAS,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAElF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,mCAAmC;IACnC,IAAI,EAAE,IAAI,CAAC;IACX,0FAA0F;IAC1F,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,8EAA8E;IAC9E,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAKvC,qDAAqD;AACrD,MAAM,MAAM,oBAAoB,GAAG;IACjC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;CACxC,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kEAAkE;IAClE,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B,CAAC;AAEF,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,SAAS,CAAC;IAClB,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,EAAE,WAAW,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uFAAuF;IACvF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,SAAS;IAGvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM;CAK3B;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAG1C,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,mBAAmB;gBADrD,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,cAAc,GAAG,mBAAmB;CAKxD;AAgDD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAW,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC;IAiB9D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAjB7B,MAAM,CAAC,KAAK,SAAgB;IAE5B;;;;;OAKG;IACH,SAAiB,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2B;IACjD,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkE;IAC7F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuD;gBAG1D,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,UAAU,EAAE,IAAI,CAC/B,kBAAkB,EAClB,YAAY,GAAG,YAAY,GAAG,0BAA0B,CACzD,EACD,OAAO,GAAE,kBAAuB;IASlC;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAWpE;;;;OAIG;IACH,WAAW,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAQxD,2DAA2D;IAC3D,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,MAAM,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE;IAIjD;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAIjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,OAAO,CACX,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,CAAC,EAAE,WAAW,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC;IAkHnB,OAAO,CAAC,IAAI;IAkLZ;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;YA+DV,QAAQ;YAuCR,QAAQ;IA6CtB;;;;;;OAMG;YACW,UAAU;IAgExB,+EAA+E;IAC/E,OAAO,CAAC,MAAM;IAOd;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAuCrB;;;;;;;;;;;;;;OAcG;YACW,OAAO;IAgDrB;;;;;;;;;;OAUG;YACW,IAAI;CAcnB"}
+{"version":3,"file":"McpRegistry.d.ts","sourceRoot":"","sources":["../../../services/mcp/McpRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAIhE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAkB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAK,KAAK,SAAS,EAAmB,KAAK,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAEV,SAAS,EAMT,SAAS,EAEV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,kBAAkB,EAElB,mBAAmB,EACpB,MAAM,8BAA8B,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAAC,SAAS,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAElF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,mCAAmC;IACnC,IAAI,EAAE,IAAI,CAAC;IACX,0FAA0F;IAC1F,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX,8EAA8E;IAC9E,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAKvC,qDAAqD;AACrD,MAAM,MAAM,oBAAoB,GAAG;IACjC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;CACxC,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kEAAkE;IAClE,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD,CAAC;AAEF,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,SAAS,CAAC;IAClB,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,EAAE,WAAW,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uFAAuF;IACvF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,GAAG,uBAAuB,CAAC;AAEjF,6CAA6C;AAC7C,UAAU,qBAAqB;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,wDAAwD;AACxD,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,SAAS;IAGvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM;CAK3B;AAED;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAG1C,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,mBAAmB;gBADrD,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,cAAc,GAAG,mBAAmB;CAKxD;AAkED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,CAEtE;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAW,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC;IAkB9D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAlB7B,MAAM,CAAC,KAAK,SAAgB;IAE5B;;;;;OAKG;IACH,SAAiB,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;IAC9D,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkE;IAC7F,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuD;IAC7E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;gBAGrD,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EACtB,UAAU,EAAE,IAAI,CAC/B,kBAAkB,EAClB,YAAY,GAAG,YAAY,GAAG,0BAA0B,CACzD,EACD,OAAO,GAAE,kBAAuB;IAelC;;;;;;;;;OASG;IACH,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAWpE;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQxF;;;;OAIG;IACH,WAAW,CAAC,MAAM,CAAC,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAQxD,2DAA2D;IAC3D,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;;;;OAKG;IACH,MAAM,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE;IAIjD;;;OAGG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;IAIjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACG,OAAO,CACX,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,CAAC,EAAE,WAAW,EACjB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC;YA6HL,IAAI;IAMlB,OAAO,CAAC,IAAI;IAwLZ;;;;;;;;;;OAUG;IACH,OAAO,CAAC,gBAAgB;IA6DxB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA0ElB;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY;IAQtC;;;;;;;;;;;OAWG;IACH,WAAW,CACT,MAAM,EAAE,SAAS,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,GACf,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAiBnD,6EAA6E;IAC7E,OAAO,CAAC,SAAS;IASjB;;;;;;OAMG;YACW,aAAa;YA8Gb,QAAQ;YAuCR,QAAQ;IA6CtB;;;;;;OAMG;YACW,UAAU;IAgExB,+EAA+E;IAC/E,OAAO,CAAC,MAAM;IAOd;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAuCrB;;;;;;;;;;;;;;OAcG;YACW,OAAO;IAgDrB;;;;;;;;;;OAUG;YACW,IAAI;CAcnB"}

package/dist/services/mcp/http/McpHttpServer.d.ts

@@ -1,4 +1,5 @@
 import { type NonceStore } from "../../../ai/store/Nonces";
+import type { FeatureKey } from "../../../client/rpc";
 import { type McpRegistry } from "../McpRegistry";
 import { type McpCallerResolver } from "./callers";
 /**
@@ -10,6 +11,27 @@ export type McpRemoteHttpConfig = {
      * read, until an app turns it on.
      */
     enabled?: boolean;
+    /**
+     * Serves the endpoint only while this `app/features` flag is on (#885), so
+     * turning it on or off is a switch in the `FeatureFlag` table rather than a
+     * deploy. `enabled` still has to be `true`: it is what builds and checks the
+     * endpoint at boot (`url`, `resolvers`, `SECRET`), whatever the flag says.
+     *
+     * Off: the endpoint and every resolver endpoint — the OAuth metadata,
+     * registration, authorize, consent, token and revoke — answer as they do
+     * with `enabled: false`, falling through to the app's routes (a 404).
+     *
+     * Asked only for the paths the endpoint can own: its path, the paths under
+     * it, and `/.well-known/…`, so the rest of the app's traffic never
+     * evaluates it. With `feature` set, a custom resolver's `handle()` is asked
+     * only for those paths too. It is evaluated before any credential is read,
+     * so there is no user: use it as an on/off switch — a `when` sees an
+     * anonymous request.
+     *
+     * `server.version` does not change with it, nor with the features of
+     * individual tools: see `server`.
+     */
+    feature?: FeatureKey;
     /**
      * The endpoint's canonical URL, like `"https://example.com/mcp"`: where it
      * is served (its path), which host it answers on, and the OAuth `resource`
@@ -43,7 +65,17 @@ export type McpRemoteHttpConfig = {
     } | false;
     /** The largest request body accepted, in bytes. Default: room for one file of `files.maxBytes` as base64, plus 1 MiB. */
     maxBodyBytes?: number;
-    /** What `initialize` and `server/discover` say about the server. */
+    /**
+     * What `initialize` and `server/discover` say about the server.
+     *
+     * `version` is sent as given. gemi does not fold feature state into it — not
+     * the endpoint's `feature`, nor a tool's — because tools behind a `when` are
+     * per user: two callers would be told different versions of one server,
+     * and a client comparing them would read a flag as a deploy. A flip reaches
+     * clients through `tools/list`, which is cached privately for 60 s. An app
+     * that derives `version` from its tool names should hash every declared tool
+     * (`registry.descriptors()`), not the ones a caller is shown.
+     */
     server?: {
         name?: string;
         version?: string;
@@ -85,11 +117,16 @@ export declare class McpHttpServer {
     private readonly instructions?;
     private readonly nonces;
     private readonly approvalTimeoutMs;
+    /** `feature`: the flag the endpoint is served behind, if any (#885). */
+    private readonly feature?;
+    private readonly featureOn;
     /** Legacy elicitations waiting for the client's answer, by the request id they were sent under. */
     private readonly pending;
     /** Legacy calls in flight, so `notifications/cancelled` can stop one. */
     private readonly inflight;
-    constructor(registry: McpRegistry, config: McpRemoteHttpConfig);
+    constructor(registry: McpRegistry, config: McpRemoteHttpConfig, options?: {
+        featureOn?: (key: string) => boolean | Promise<boolean>;
+    });
     /** The endpoint's URL as a resource identifier: no trailing slash, no query. */
     get resource(): string;
     /**
@@ -101,6 +138,8 @@ export declare class McpHttpServer {
      * and is answered by the app's ordinary routes, never by this.
      */
     handle(req: Request): Promise<Response | null>;
+    /** The endpoint's path, a path under it, or `/.well-known/…`. */
+    private ownsPath;
     private post;
     private dispatch;
     private modern;

package/dist/services/mcp/http/McpHttpServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpHttpServer.d.ts","sourceRoot":"","sources":["../../../../services/mcp/http/McpHttpServer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAK7E,OAAO,EAIL,KAAK,WAAW,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAe,KAAK,iBAAiB,EAA0B,MAAM,WAAW,CAAC;AAuBxF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IACtD,yHAAyH;IACzH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AA6CF;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IAsBtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IArB3B,MAAM,CAAC,KAAK,SAAqB;IAEjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4C;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,mGAAmG;IACnG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IACJ,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;gBAG5C,QAAQ,EAAE,WAAW,EACtC,MAAM,EAAE,mBAAmB;IA+C7B,gFAAgF;IAChF,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;YAwCtC,IAAI;YA8DJ,QAAQ;YA8FR,MAAM;YAwBN,MAAM;IAapB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;IA6BlB;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;IAiBf,OAAO,CAAC,kBAAkB;YAkCZ,QAAQ;IA0DtB,OAAO,CAAC,UAAU;IAIlB;;;;;;;;;;;;OAYG;YACW,QAAQ;YAyFR,UAAU;IAaxB;;;;;OAKG;YACW,OAAO;IA4CrB,OAAO,CAAC,YAAY;IAapB;;;;OAIG;YACW,aAAa;YAMb,KAAK;CAKpB"}
+{"version":3,"file":"McpHttpServer.d.ts","sourceRoot":"","sources":["../../../../services/mcp/http/McpHttpServer.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAKtD,OAAO,EAIL,KAAK,WAAW,EAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAe,KAAK,iBAAiB,EAA0B,MAAM,WAAW,CAAC;AAwBxF;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IACtD,yHAAyH;IACzH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AA6CF;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IAyBtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAxB3B,MAAM,CAAC,KAAK,SAAqB;IAEjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4C;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8C;IACxE,mGAAmG;IACnG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAGpB;IACJ,yEAAyE;IACzE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;gBAG5C,QAAQ,EAAE,WAAW,EACtC,MAAM,EAAE,mBAAmB,EAC3B,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAO;IAsD3E,gFAAgF;IAChF,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IA4CpD,iEAAiE;IACjE,OAAO,CAAC,QAAQ;YAYF,IAAI;YA8DJ,QAAQ;YA8FR,MAAM;YAyBN,MAAM;IAapB,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,UAAU;IA6BlB;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO;IAiBf,OAAO,CAAC,kBAAkB;YAkCZ,QAAQ;IA2DtB,OAAO,CAAC,UAAU;IAIlB;;;;;;;;;;;;OAYG;YACW,QAAQ;YAyFR,UAAU;IAaxB;;;;;OAKG;YACW,OAAO;IA4CrB,OAAO,CAAC,YAAY;IAapB;;;;OAIG;YACW,aAAa;YAMb,KAAK;CAKpB"}

package/dist/services/mcp/toAgentTools.d.ts

@@ -1,5 +1,5 @@
 import { AgentTool, ToolNamespace, type AnyAgentTool, type ToolEntry, type ToolShapesOf } from "../../ai/Agent";
-import type { McpRouteDeclaration, McpRouter } from "../../http/McpRouter";
+import type { McpRouteDeclaration, McpRouter, McpToolDeclaration } from "../../http/McpRouter";
 import type { McpRegistry, McpToolFilter } from "./McpRegistry";
 /** One namespace `toAgentTools` groups a tag's tools into. */
 export type McpToolNamespaceOptions = {
@@ -34,6 +34,18 @@ export type ToAgentToolsOptions = {
 type RoutesOf<R> = R extends {
     routes: infer T;
 } ? T : never;
+/** What a declaration types its tool as: a route's or a native tool's (#759). */
+type ToolTypesOf<D> = D extends McpRouteDeclaration<any, any, infer I, infer O, infer T> ? {
+    input: I;
+    output: O;
+    tags: T;
+    progress: never;
+} : D extends McpToolDeclaration<infer I, infer O, infer T, infer P> ? {
+    input: I;
+    output: O;
+    tags: T;
+    progress: P;
+} : never;
 /** Whether a filter's field narrows by literals, rather than by `string`s. */
 type LiteralsOf<L> = L extends readonly (infer X)[] ? (string extends X ? never : X) : never;
 /** Whether the tool `N`, declared as `D`, passes the filter `F`. */
@@ -41,7 +53,9 @@ type Passes<N, D, F> = (F extends {
     names: readonly string[];
 } ? [LiteralsOf<F["names"]>] extends [never] ? true : N extends LiteralsOf<F["names"]> ? true : false : true) extends true ? F extends {
     tags: readonly string[];
-} ? [LiteralsOf<F["tags"]>] extends [never] ? true : D extends McpRouteDeclaration<any, any, any, any, infer T> ? string extends T[number] ? true : [Extract<T[number], LiteralsOf<F["tags"]>>] extends [never] ? false : true : true : true : false;
+} ? [LiteralsOf<F["tags"]>] extends [never] ? true : ToolTypesOf<D> extends {
+    tags: infer T extends readonly string[];
+} ? string extends T[number] ? true : [Extract<T[number], LiteralsOf<F["tags"]>>] extends [never] ? false : true : true : true : false;
 /**
  * The tools of the router `R` that pass the filter `F`, as `toAgentTools`
  * builds them: named by their `routes` key, with the input the model sends and
@@ -49,7 +63,11 @@ type Passes<N, D, F> = (F extends {
  * container answers) gives `AnyAgentTool`, as before.
  */
 export type McpAgentTool<R extends McpRouter<any>, F = {}> = string extends keyof RoutesOf<R> ? AnyAgentTool : {
-    [N in keyof RoutesOf<R> & string]: Passes<N, RoutesOf<R>[N], F> extends true ? RoutesOf<R>[N] extends McpRouteDeclaration<any, any, infer I, infer O, any> ? AgentTool<N, I, O, never> : never : never;
+    [N in keyof RoutesOf<R> & string]: Passes<N, RoutesOf<R>[N], F> extends true ? ToolTypesOf<RoutesOf<R>[N]> extends {
+        input: infer I;
+        output: infer O;
+        progress: infer P;
+    } ? AgentTool<N, I, O, P> : never : never;
 }[keyof RoutesOf<R> & string];
 /**
  * The client's shapes of the router's tools, as `ToolShapesOf` gives them for

package/dist/services/mcp/toAgentTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toAgentTools.d.ts","sourceRoot":"","sources":["../../../services/mcp/toAgentTools.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAE,WAAW,EAAqB,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnF,8DAA8D;AAC9D,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACtD,CAAC;AAIF,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AAE7D,8EAA8E;AAC9E,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAE7F,oEAAoE;AACpE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAEjB,CAAC,CAAC,SAAS;IAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACnC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACtC,IAAI,GACJ,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAC9B,IAAI,GACJ,KAAK,GACT,IAAI,CAAC,SAAS,IAAI,GAGlB,CAAC,SAAS;IAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACnC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACrC,IAAI,GACJ,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,GACxD,MAAM,SAAS,CAAC,CAAC,MAAM,CAAC,GACtB,IAAI,GACJ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACzD,KAAK,GACL,IAAI,GACR,IAAI,GACR,IAAI,GACN,KAAK,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IACvD,MAAM,SAAS,MAAM,QAAQ,CAAC,CAAC,CAAC,GAC5B,YAAY,GACZ;KACG,CAAC,IAAI,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,GACxE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,GACzE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,GACzB,KAAK,GACP,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,YAAY,CAC1E,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACrB,CAAC;AAEF,iFAAiF;AACjF,KAAK,YAAY,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAC3C,MAAM,SAAS,MAAM,QAAQ,CAAC,CAAC,CAAC,GAC5B,SAAS,GACT,aAAa,CAAC,MAAM,EAAE,SAAS,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhF,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AAK1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAgB,YAAY,CAC1B,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACzC,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,EAClC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5E,wBAAgB,YAAY,CAC1B,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACzC,KAAK,CAAC,CAAC,SAAS,mBAAmB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACrD,GAAG,mBAAmB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;CAAE,EACjF,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtF,wBAAgB,YAAY,CAC1B,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACzC,KAAK,CAAC,CAAC,SAAS,mBAAmB,GAAG;IAAE,UAAU,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,mBAAmB,GAAG;IACvF,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB,EACD,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtF,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACpE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EACtC,OAAO,EAAE,mBAAmB,GAC3B,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC"}
+{"version":3,"file":"toAgentTools.d.ts","sourceRoot":"","sources":["../../../services/mcp/toAgentTools.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EACV,mBAAmB,EACnB,SAAS,EACT,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,WAAW,EAAqB,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnF,8DAA8D;AAC9D,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACtD,CAAC;AAIF,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AAE7D,iFAAiF;AACjF,KAAK,WAAW,CAAC,CAAC,IAChB,CAAC,SAAS,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GAC9D;IAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GACjD,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GAC9D;IAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,CAAC,CAAC;IAAC,QAAQ,EAAE,CAAC,CAAA;CAAE,GAC7C,KAAK,CAAC;AAEd,8EAA8E;AAC9E,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAE7F,oEAAoE;AACpE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAEjB,CAAC,CAAC,SAAS;IAAE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACnC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACtC,IAAI,GACJ,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAC9B,IAAI,GACJ,KAAK,GACT,IAAI,CAAC,SAAS,IAAI,GAGlB,CAAC,SAAS;IAAE,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACnC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACrC,IAAI,GACJ,WAAW,CAAC,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC,SAAS,SAAS,MAAM,EAAE,CAAA;CAAE,GAChE,MAAM,SAAS,CAAC,CAAC,MAAM,CAAC,GACtB,IAAI,GACJ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACzD,KAAK,GACL,IAAI,GACR,IAAI,GACR,IAAI,GACN,KAAK,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IACvD,MAAM,SAAS,MAAM,QAAQ,CAAC,CAAC,CAAC,GAC5B,YAAY,GACZ;KACG,CAAC,IAAI,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,GACxE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QAClC,KAAK,EAAE,MAAM,CAAC,CAAC;QACf,MAAM,EAAE,MAAM,CAAC,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,CAAC;KACnB,GACC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GACrB,KAAK,GACP,KAAK;CACV,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,YAAY,CAC1E,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CACrB,CAAC;AAEF,iFAAiF;AACjF,KAAK,YAAY,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAC3C,MAAM,SAAS,MAAM,QAAQ,CAAC,CAAC,CAAC,GAC5B,SAAS,GACT,aAAa,CAAC,MAAM,EAAE,SAAS,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhF,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AAK1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,wBAAgB,YAAY,CAC1B,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACzC,KAAK,CAAC,CAAC,SAAS,aAAa,GAAG,EAAE,EAClC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5E,wBAAgB,YAAY,CAC1B,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACzC,KAAK,CAAC,CAAC,SAAS,mBAAmB,GAAG;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CACrD,GAAG,mBAAmB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;CAAE,EACjF,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtF,wBAAgB,YAAY,CAC1B,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACzC,KAAK,CAAC,CAAC,SAAS,mBAAmB,GAAG;IAAE,UAAU,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,mBAAmB,GAAG;IACvF,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB,EACD,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtF,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EACpE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,EACtC,OAAO,EAAE,mBAAmB,GAC3B,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC"}

package/dist/services/queue/work.js

@@ -1,4 +1,4 @@
 // @bun
-import{Rc as H,Uc as _}from"../../chunk-92sk56n0.js";import{gi as O}from"../../chunk-skf89vrv.js";import"../../chunk-mqtfaqx5.js";import"../../chunk-pe46a5a5.js";import"../../chunk-qycwjzsv.js";import"../../chunk-mvkz22p4.js";import"../../chunk-rpyczdta.js";import"../../chunk-zsvav1dk.js";import{Cj as Z,yj as U,zj as V}from"../../chunk-nnarmbjv.js";import{Gj as Y}from"../../chunk-nkzmk7v3.js";import"../../chunk-17dndh5z.js";import X from"path";function T(z){if(!z.config.get("route.channels"))return null;let C=z.config.get("broadcast",{}).driver;if(!(C===void 0||C==="memory"||C instanceof O))return null;return'[gemi] Broadcasts from this worker reach no one: the broadcast driver is "memory", which delivers to the sockets of the process that emits, and a worker has none. Set `driver: "redis"` in app/config/broadcast.ts.'}class J extends Error{name="QueueWorkerRefused"}class N{kernel;stopping;keepAlive;settings;constructor(z,C={}){this.kernel=z;this.settings={...V(),...C}}async start(){if(await this.kernel.waitForBoot(),this.stopping)return;let z=this.kernel.app;if(!z.bound(H))throw new J("[gemi] `gemi queue:work` has no queue to claim from: this application does not register QueueServiceProvider.");let C=z.make(H);if(!C.durable)throw new J('[gemi] `gemi queue:work` refuses to start: the queue uses the memory driver, which keeps each job in the process that dispatched it, so a worker never sees one. Set `driver: "database"` (or another driver every process can reach) in app/config/queue.ts, or run jobs in the server and drop the worker.');C.start(),this.keepAlive=setInterval(()=>{},1073741824),console.log(`[gemi] Queue worker started: claiming up to ${C.config.concurrency} job(s) at a time.`);let E=T(z);if(E)console.warn(E)}stop(z={}){return this.stopping??=this.drain({...this.settings,...z}),this.stopping}async drain(z){U();let C=this.kernel.app,E=C.resolved(H)?C.make(H):void 0;if(E)console.log(`[gemi] Shutting down: waiting for ${E.running} running job(s) (up to ${z.timeoutMs/1000}s).`),await E.drain(z.timeoutMs);let F=await this.kernel.shutdown({timeoutMs:z.providerTimeoutMs});clearInterval(this.keepAlive);let G=(E?.running??0)===0&&F.failed.length===0&&F.timedOut.length===0;return console.log(`[gemi] Shutdown ${G?"complete":"finished with errors"}.`),G?0:1}}async function $(){let z=Y();process.env.ROOT_DIR=z,process.env.APP_DIR=X.join(z,"app"),_();let C=X.join(z,"app/kernel/Kernel.ts"),{default:E}=await import(C);if(typeof E!=="function")return console.error(`[gemi] ${C} has no default export to boot the worker from.`),1;let F=new E;F.boot();let G=new N(F);Z(()=>G.stop());try{await G.start()}catch(L){if(!(L instanceof J))throw L;return console.error(L.message),1}return}$().then((z)=>{if(z!==void 0)process.exit(z)},(z)=>{console.error("[gemi] The queue worker failed to start:",z),process.exit(1)});
+import{Dd as H,Gd as _}from"../../chunk-h8w9mzjj.js";import{$i as O}from"../../chunk-entpqjyn.js";import"../../chunk-rany5zgk.js";import"../../chunk-sv125fqq.js";import"../../chunk-vhvvjaj3.js";import"../../chunk-npbf06c1.js";import"../../chunk-6gwxvmjv.js";import"../../chunk-rwmja4zs.js";import{rk as U,sk as V,wk as Z}from"../../chunk-z5nfve1k.js";import{Ak as Y}from"../../chunk-yhht1j7f.js";import"../../chunk-hxn0s3zh.js";import X from"path";function T(z){if(!z.config.get("route.channels"))return null;let C=z.config.get("broadcast",{}).driver;if(!(C===void 0||C==="memory"||C instanceof O))return null;return'[gemi] Broadcasts from this worker reach no one: the broadcast driver is "memory", which delivers to the sockets of the process that emits, and a worker has none. Set `driver: "redis"` in app/config/broadcast.ts.'}class J extends Error{name="QueueWorkerRefused"}class N{kernel;stopping;keepAlive;settings;constructor(z,C={}){this.kernel=z;this.settings={...V(),...C}}async start(){if(await this.kernel.waitForBoot(),this.stopping)return;let z=this.kernel.app;if(!z.bound(H))throw new J("[gemi] `gemi queue:work` has no queue to claim from: this application does not register QueueServiceProvider.");let C=z.make(H);if(!C.durable)throw new J('[gemi] `gemi queue:work` refuses to start: the queue uses the memory driver, which keeps each job in the process that dispatched it, so a worker never sees one. Set `driver: "database"` (or another driver every process can reach) in app/config/queue.ts, or run jobs in the server and drop the worker.');C.start(),this.keepAlive=setInterval(()=>{},1073741824),console.log(`[gemi] Queue worker started: claiming up to ${C.config.concurrency} job(s) at a time.`);let E=T(z);if(E)console.warn(E)}stop(z={}){return this.stopping??=this.drain({...this.settings,...z}),this.stopping}async drain(z){U();let C=this.kernel.app,E=C.resolved(H)?C.make(H):void 0;if(E)console.log(`[gemi] Shutting down: waiting for ${E.running} running job(s) (up to ${z.timeoutMs/1000}s).`),await E.drain(z.timeoutMs);let F=await this.kernel.shutdown({timeoutMs:z.providerTimeoutMs});clearInterval(this.keepAlive);let G=(E?.running??0)===0&&F.failed.length===0&&F.timedOut.length===0;return console.log(`[gemi] Shutdown ${G?"complete":"finished with errors"}.`),G?0:1}}async function $(){let z=Y();process.env.ROOT_DIR=z,process.env.APP_DIR=X.join(z,"app"),_();let C=X.join(z,"app/kernel/Kernel.ts"),{default:E}=await import(C);if(typeof E!=="function")return console.error(`[gemi] ${C} has no default export to boot the worker from.`),1;let F=new E;F.boot();let G=new N(F);Z(()=>G.stop());try{await G.start()}catch(L){if(!(L instanceof J))throw L;return console.error(L.message),1}return}$().then((z)=>{if(z!==void 0)process.exit(z)},(z)=>{console.error("[gemi] The queue worker failed to start:",z),process.exit(1)});
 
-//# debugId=FEF3202E4247CD0A64756E2164756E21
+//# debugId=8AEC8B819AB1457C64756E2164756E21

package/dist/services/queue/work.js.map

@@ -7,6 +7,6 @@
     "import type { Application, ShutdownReport } from \"../../foundation/Application\";\nimport { markShuttingDown, shutdownSettings, type ShutdownSettings } from \"../../server/shutdown\";\nimport { memoryBroadcastInWorker } from \"../broadcast/workerWarning\";\nimport { QueueManager } from \"./QueueManager\";\n\n/** The part of a `Kernel` a worker drives. */\nexport type WorkerKernel = {\n  readonly app: Application;\n  waitForBoot(): Promise<void>;\n  shutdown(options?: { timeoutMs?: number }): Promise<ShutdownReport>;\n};\n\n/**\n * A worker that was told to start in an application it cannot claim for. The\n * message is written for the operator reading the deploy's logs.\n */\nexport class QueueWorkerRefused extends Error {\n  name = \"QueueWorkerRefused\";\n}\n\n/**\n * The process `gemi queue:work` runs: the application booted as a server boots\n * it, claiming from the queue, and no `Bun.serve`. It exists so job capacity\n * can be scaled apart from request traffic, which needs a driver both kinds of\n * process can reach; see `start` for why the memory driver is refused.\n *\n * The caller marks the process as a worker (`markQueueWorker`) before the\n * kernel registers, so every claim rule that asks `claimsInThisProcess` sees a\n * process that claims, whatever `GEMI_QUEUE_CLAIM` says.\n */\nexport class QueueWorker {\n  private stopping: Promise<number> | undefined;\n  private keepAlive: ReturnType<typeof setInterval> | undefined;\n  private readonly settings: ShutdownSettings;\n\n  /**\n   * `settings` default to the `GEMI_SHUTDOWN_*` variables, read here rather\n   * than at the signal so a bad value is warned about while the deploy is\n   * being watched, as `Server.start` does.\n   */\n  constructor(\n    private readonly kernel: WorkerKernel,\n    settings: Partial<ShutdownSettings> = {},\n  ) {\n    this.settings = { ...shutdownSettings(), ...settings };\n  }\n\n  /**\n   * Boots the application and starts claiming. Rejects with\n   * `QueueWorkerRefused` when the application has no queue, or its queue uses\n   * the memory driver.\n   *\n   * Refused rather than warned about, because a memory worker can never do\n   * anything: its jobs live in a `Map` in the process that dispatched them,\n   * so a worker's is always empty. Left running, it looks like a healthy\n   * deploy — a process up, no errors — that runs nothing, and scaling it out\n   * adds no capacity. An exit the platform reports as a crash loop is a form\n   * of the mistake someone will see.\n   */\n  async start(): Promise<void> {\n    await this.kernel.waitForBoot();\n    // A signal during the boot has already drained and cleared the handle\n    // below. Going on would start the loop again and arm a handle nothing\n    // clears, holding open a worker that has finished shutting down.\n    if (this.stopping) return;\n\n    const application = this.kernel.app;\n    // `bound`, not `make` in a try: an application built without the queue\n    // provider is a configuration to name, not an unbound-token stack trace.\n    if (!application.bound(QueueManager)) {\n      throw new QueueWorkerRefused(\n        \"[gemi] `gemi queue:work` has no queue to claim from: this application \" +\n          \"does not register QueueServiceProvider.\",\n      );\n    }\n    const queue = application.make(QueueManager);\n    if (!queue.durable) {\n      throw new QueueWorkerRefused(\n        \"[gemi] `gemi queue:work` refuses to start: the queue uses the memory \" +\n          \"driver, which keeps each job in the process that dispatched it, so \" +\n          'a worker never sees one. Set `driver: \"database\"` (or another driver ' +\n          \"every process can reach) in app/config/queue.ts, or run jobs in the \" +\n          \"server and drop the worker.\",\n      );\n    }\n\n    // Idempotent: a production boot with a durable driver has already started\n    // it (`startClaimingIfServing`). Development has not, and a worker claims\n    // in either.\n    queue.start();\n    // The queue's poll timer is unref'd, so that a script's queue does not\n    // hold it open; here the queue is the process, and without a handle of its\n    // own an idle worker would exit 0 as soon as it booted.\n    this.keepAlive = setInterval(() => {}, 1 << 30);\n    console.log(\n      `[gemi] Queue worker started: claiming up to ${queue.config.concurrency} job(s) at a time.`,\n    );\n    const broadcastWarning = memoryBroadcastInWorker(application);\n    if (broadcastWarning) console.warn(broadcastWarning);\n  }\n\n  /**\n   * Stops claiming, waits for the running jobs, runs every provider's\n   * `shutdown()`, and resolves with the exit code: 0 when no job was left\n   * running and every provider finished in time, 1 otherwise. Idempotent.\n   *\n   * `gemi start`'s drain, with the jobs where the requests were:\n   * `isShuttingDown()` turns true, which stops a durable queue claiming;\n   * running jobs get `timeoutMs` (`GEMI_SHUTDOWN_TIMEOUT`), which a server\n   * spends on requests; then `Application.shutdown` gets `providerTimeoutMs`,\n   * and in it the queue provider waits for whatever is still running and\n   * names it. The two budgets add up as they do for a server, so a worker\n   * fits the same grace period. `delayMs` is not waited: it is for a load\n   * balancer, and nothing routes to a worker.\n   */\n  stop(settings: Partial<ShutdownSettings> = {}): Promise<number> {\n    this.stopping ??= this.drain({ ...this.settings, ...settings });\n    return this.stopping;\n  }\n\n  private async drain(settings: ShutdownSettings): Promise<number> {\n    markShuttingDown();\n    const application = this.kernel.app;\n    // Resolving the manager now would build a driver only to stop it, which\n    // is what a signal during the boot, before the provider resolved it, finds.\n    const queue = application.resolved(QueueManager) ? application.make(QueueManager) : undefined;\n    if (queue) {\n      console.log(\n        `[gemi] Shutting down: waiting for ${queue.running} running job(s) ` +\n          `(up to ${settings.timeoutMs / 1000}s).`,\n      );\n      await queue.drain(settings.timeoutMs);\n    }\n\n    const report = await this.kernel.shutdown({ timeoutMs: settings.providerTimeoutMs });\n    clearInterval(this.keepAlive);\n    const clean =\n      (queue?.running ?? 0) === 0 && report.failed.length === 0 && report.timedOut.length === 0;\n    console.log(`[gemi] Shutdown ${clean ? \"complete\" : \"finished with errors\"}.`);\n    return clean ? 0 : 1;\n  }\n}\n"
   ],
   "mappings": ";gcAYA,kBCDO,OAAS,DAAuB,DAAC,AAAyC,DAC/E,CAAI,DAAC,AAAY,KAAO,IAAI,gBAAgB,EAAG,OAAO,KACtD,IAAM,EAAS,EAAY,OAAO,IAAqB,YAAa,CAAC,CAAC,EAAE,OAGxE,GAAI,EADF,IAAW,QAAa,IAAW,UAAY,aAAkB,GACtD,OAAO,KACpB,MACE,uNCFG,MAAM,UAA2B,KAAM,CAC5C,KAAO,oBACT,CAYO,MAAM,CAAY,CAWJ,OAVX,SACA,UACS,SAOjB,WAAW,CACQ,EACjB,EAAsC,CAAC,EACvC,CAFiB,cAGjB,KAAK,SAAW,IAAK,EAAiB,KAAM,CAAS,OAejD,MAAK,EAAkB,CAK3B,GAJA,MAAM,KAAK,OAAO,YAAY,EAI1B,KAAK,SAAU,OAEnB,IAAM,EAAc,KAAK,OAAO,IAGhC,GAAI,CAAC,EAAY,MAAM,CAAY,EACjC,MAAM,IAAI,EACR,+GAEF,EAEF,IAAM,EAAQ,EAAY,KAAK,CAAY,EAC3C,GAAI,CAAC,EAAM,QACT,MAAM,IAAI,EACR,8SAKF,EAMF,EAAM,MAAM,EAIZ,KAAK,UAAY,YAAY,IAAM,GAAI,UAAO,EAC9C,QAAQ,IACN,+CAA+C,EAAM,OAAO,+BAC9D,EACA,IAAM,EAAmB,EAAwB,CAAW,EAC5D,GAAI,EAAkB,QAAQ,KAAK,CAAgB,EAiBrD,IAAI,CAAC,EAAsC,CAAC,EAAoB,CAE9D,OADA,KAAK,WAAa,KAAK,MAAM,IAAK,KAAK,YAAa,CAAS,CAAC,EACvD,KAAK,cAGA,MAAK,CAAC,EAA6C,CAC/D,EAAiB,EACjB,IAAM,EAAc,KAAK,OAAO,IAG1B,EAAQ,EAAY,SAAS,CAAY,EAAI,EAAY,KAAK,CAAY,EAAI,OACpF,GAAI,EACF,QAAQ,IACN,qCAAqC,EAAM,iCAC/B,EAAS,UAAY,SACnC,EACA,MAAM,EAAM,MAAM,EAAS,SAAS,EAGtC,IAAM,EAAS,MAAM,KAAK,OAAO,SAAS,CAAE,UAAW,EAAS,iBAAkB,CAAC,EACnF,cAAc,KAAK,SAAS,EAC5B,IAAM,GACH,GAAO,SAAW,KAAO,GAAK,EAAO,OAAO,SAAW,GAAK,EAAO,SAAS,SAAW,EAE1F,OADA,QAAQ,IAAI,mBAAmB,EAAQ,WAAa,yBAAyB,EACtE,EAAQ,EAAI,EAEvB,CF1HA,eAAe,CAAI,EAAgC,CACjD,IAAM,EAAU,EAAY,EAI5B,QAAQ,IAAI,SAAW,EACvB,QAAQ,IAAI,QAAU,EAAK,KAAK,EAAS,KAAK,EAE9C,EAAgB,EAEhB,IAAM,EAAa,EAAK,KAAK,EAAS,sBAAsB,GACpD,QAAS,GAAY,MAAa,UAG1C,GAAI,OAAO,IAAW,WAEpB,OADA,QAAQ,MAAM,UAAU,kDAA2D,EAC5E,EAET,IAAM,EAAS,IAAI,EACnB,EAAO,KAAK,EAEZ,IAAM,EAAS,IAAI,EAAY,CAAM,EAKrC,EAAuB,IAAM,EAAO,KAAK,CAAC,EAE1C,GAAI,CACF,MAAM,EAAO,MAAM,EACnB,MAAO,EAAO,CACd,GAAI,EAAE,aAAiB,GAAqB,MAAM,EAElD,OADA,QAAQ,MAAM,EAAM,OAAO,EACpB,EAGT,OAGF,EAAK,EAAE,KACL,CAAC,IAAS,CACR,GAAI,IAAS,OAAW,QAAQ,KAAK,CAAI,GAE3C,CAAC,IAAU,CACT,QAAQ,MAAM,2CAA4C,CAAK,EAC/D,QAAQ,KAAK,CAAC,EAElB",
-  "debugId": "FEF3202E4247CD0A64756E2164756E21",
+  "debugId": "8AEC8B819AB1457C64756E2164756E21",
   "names": []
 }

package/dist/services/rate-limiter/RateLimiter.d.ts

@@ -9,6 +9,11 @@ export interface ConsumeOptions {
     /** How much this call costs. Defaults to `1`. */
     cost?: number;
 }
+/**
+ * What a refusal from `enforce` says: a string, or one built from the result
+ * that refused it (`retryAfter` is in milliseconds).
+ */
+export type RateLimitMessage = string | ((result: RateLimitResult) => string);
 export declare class RateLimiter {
     config: Required<RateLimiterConfig>;
     static token: string;
@@ -21,5 +26,12 @@ export declare class RateLimiter {
      * are written in — and converted to the milliseconds drivers work in.
      */
     consume(key: string, options?: ConsumeOptions): Promise<RateLimitResult>;
+    /**
+     * `consume`, refusing the request when it does not fit: over budget it throws
+     * `RateLimitExceededError`, the same 429 the `rate-limit` middleware answers
+     * (`Retry-After` and `X-RateLimit-*` headers, `{ error: { kind: "rate_limit",
+     * message, status: 429, retryAfter } }`). Within budget it returns the result.
+     */
+    enforce(key: string, options?: ConsumeOptions, message?: RateLimitMessage): Promise<RateLimitResult>;
 }
 //# sourceMappingURL=RateLimiter.d.ts.map

package/dist/services/rate-limiter/RateLimiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RateLimiter.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/RateLimiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,WAAW;IAGH,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAFtD,MAAM,CAAC,KAAK,SAAiB;gBAEV,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAEtD,IAAI,MAAM,IAAI,iBAAiB,CAE9B;IAED;;;;;OAKG;IACG,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC;CAsB5B"}
+{"version":3,"file":"RateLimiter.d.ts","sourceRoot":"","sources":["../../../services/rate-limiter/RateLimiter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,KAAK,MAAM,CAAC,CAAC;AAE9E,qBAAa,WAAW;IAGH,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAFtD,MAAM,CAAC,KAAK,SAAiB;gBAEV,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAEtD,IAAI,MAAM,IAAI,iBAAiB,CAE9B;IAED;;;;;OAKG;IACG,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC;IAuB3B;;;;;OAKG;IACG,OAAO,CACX,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,EAC5B,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,eAAe,CAAC;CAU5B"}

package/dist/services/router/globalMiddleware.d.ts

@@ -25,9 +25,10 @@ export interface GlobalMiddlewareOutcome {
  * `HttpRequest` a global middleware gets has no params and an empty
  * `routePath`, and its `kind` is read off the url the way `App.fetch` picks a
  * dispatcher. The scope is not the one the route later runs in: the route's
- * dispatcher opens a fresh one, as it always has. Two things cross over.
- * Headers and cookies reach the response through `apply`, and the user is
- * `carried` into the route's context, so a gate that looked the user up does
+ * dispatcher opens a fresh one, as it always has. Three things cross over.
+ * Headers and cookies reach the response through `apply`; the request state
+ * the list set (`req.state`, #887) is `carried` into the route's request; and
+ * so is the user, so a gate that looked the user up does
  * not make `auth` or `Auth.user()` look them up again. Both trust a user they
  * find on the context without checking it against a session or asking for a
  * token, so whatever a global middleware sets is treated as authenticated by

package/dist/services/router/globalMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"globalMiddleware.d.ts","sourceRoot":"","sources":["../../../services/router/globalMiddleware.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,2BAA2B,CAAC;AAShF,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC;IACzB;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC;;;OAGG;IACH,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;CAChC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAuDxF"}
+{"version":3,"file":"globalMiddleware.d.ts","sourceRoot":"","sources":["../../../services/router/globalMiddleware.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAkB,MAAM,2BAA2B,CAAC;AAShF,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC;IACzB;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACpC;;;OAGG;IACH,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;CAChC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAuDxF"}

package/dist/stats/route-table.js

@@ -1,4 +1,4 @@
 // @bun
-import"../chunk-17dndh5z.js";import M from"path";import{writeFileSync as Q}from"fs";var L=new Set(["FILE","REDIRECT"]);function H(j){return j.run(()=>{let x=[];for(let{group:z,view:D}of j.domains().viewGroups())for(let[G,B]of Object.entries(D.flatViewRoutes)){let C=D.routeManifest[G]??B.segments.map((K)=>K.viewPath);if(C.length===0||L.has(C.at(-1)))continue;x.push({path:G,group:z,views:C,...B.static?{static:{...B.static.layout?{layout:B.static.layout}:{},...B.static.navigation?{navigation:!0}:{}}}:{}})}return x})}var J=process.argv[2];async function U(){if(!J)throw Error("usage: route-table <out.json>");let j=M.resolve(process.cwd(),"app/kernel/Kernel.ts"),x=await import(j);if(typeof x.default!=="function")throw Error(`${j} has no default export (the Kernel subclass).`);let z=new x.default;z.boot();try{Q(J,JSON.stringify(H(z)))}finally{z.destroy()}}U().then(()=>process.exit(0),(j)=>{console.error(j?.stack??String(j)),process.exit(1)});
+import"../chunk-hxn0s3zh.js";import M from"path";import{writeFileSync as Q}from"fs";var L=new Set(["FILE","REDIRECT"]);function H(j){return j.run(()=>{let x=[];for(let{group:z,view:D}of j.domains().viewGroups())for(let[G,B]of Object.entries(D.flatViewRoutes)){let C=D.routeManifest[G]??B.segments.map((K)=>K.viewPath);if(C.length===0||L.has(C.at(-1)))continue;x.push({path:G,group:z,views:C,...B.static?{static:{...B.static.layout?{layout:B.static.layout}:{},...B.static.navigation?{navigation:!0}:{}}}:{}})}return x})}var J=process.argv[2];async function U(){if(!J)throw Error("usage: route-table <out.json>");let j=M.resolve(process.cwd(),"app/kernel/Kernel.ts"),x=await import(j);if(typeof x.default!=="function")throw Error(`${j} has no default export (the Kernel subclass).`);let z=new x.default;z.boot();try{Q(J,JSON.stringify(H(z)))}finally{z.destroy()}}U().then(()=>process.exit(0),(j)=>{console.error(j?.stack??String(j)),process.exit(1)});
 
 //# debugId=05EB0087C5A2060D64756E2164756E21

package/dist/support/index.js

@@ -1,4 +1,4 @@
 // @bun
-import{Yc as Y}from"../chunk-30xxc6r7.js";import{ki as M}from"../chunk-pe46a5a5.js";import{mj as P,oj as R}from"../chunk-rpyczdta.js";import"../chunk-zsvav1dk.js";import{Dj as Q,Ej as U,Fj as V,Gj as W}from"../chunk-nkzmk7v3.js";import"../chunk-17dndh5z.js";class S{static token;async boot(){}static inject(){if(!this.token)throw Error(`Service [${this.name}] does not declare a \`static token\`, so the container has no key to resolve it by.`);try{return R(this)}catch(x){throw Error(`Could not inject [${this.name}]. Services are constructed when the kernel boots, so `+"inject() only works from code that runs after that \u2014 a constructor default or a method "+`body, never module top level. Check that [${this.name}] is listed in \`services\` on your Kernel.`,{cause:x})}}static with(x){let f=new this;for(let[C,g]of Object.entries(x))if(g!==void 0)f[C]=g;return f}}import{readdir as z}from"fs/promises";import{join as B,parse as j}from"path";var H=[".ts",".tsx",".js",".mjs",".jsx"];function J(x={}){let f={};for(let[C,g]of Object.entries(x))f[C]=q(g);return new P(f)}async function L(x,f=new P){let C=[];try{C=await z(x)}catch(D){return f}let g=C.filter((D)=>{let{ext:v,name:F}=j(D);return H.includes(v)&&!F.startsWith(".")}).sort();for(let D of g){let{name:v}=j(D),F=await import(B(x,D));f.set(v,q(F))}return f}function q(x){if(x&&typeof x==="object"&&"default"in x)return x.default;return x}export{M as withDefaults,Q as sourceFiles,W as projectRoot,L as loadConfigFrom,V as discoverClasses,J as createConfigRepository,Y as ServiceProvider,S as Service,P as Repository,U as DiscoveryError};
+import{Ld as Y}from"../chunk-rmgkc3a2.js";import{dj as M}from"../chunk-sv125fqq.js";import{fk as P,hk as R}from"../chunk-6gwxvmjv.js";import"../chunk-rwmja4zs.js";import{Ak as W,xk as Q,yk as U,zk as V}from"../chunk-yhht1j7f.js";import"../chunk-hxn0s3zh.js";class S{static token;async boot(){}static inject(){if(!this.token)throw Error(`Service [${this.name}] does not declare a \`static token\`, so the container has no key to resolve it by.`);try{return R(this)}catch(x){throw Error(`Could not inject [${this.name}]. Services are constructed when the kernel boots, so `+"inject() only works from code that runs after that \u2014 a constructor default or a method "+`body, never module top level. Check that [${this.name}] is listed in \`services\` on your Kernel.`,{cause:x})}}static with(x){let f=new this;for(let[C,g]of Object.entries(x))if(g!==void 0)f[C]=g;return f}}import{readdir as z}from"fs/promises";import{join as B,parse as j}from"path";var H=[".ts",".tsx",".js",".mjs",".jsx"];function J(x={}){let f={};for(let[C,g]of Object.entries(x))f[C]=q(g);return new P(f)}async function L(x,f=new P){let C=[];try{C=await z(x)}catch(D){return f}let g=C.filter((D)=>{let{ext:v,name:F}=j(D);return H.includes(v)&&!F.startsWith(".")}).sort();for(let D of g){let{name:v}=j(D),F=await import(B(x,D));f.set(v,q(F))}return f}function q(x){if(x&&typeof x==="object"&&"default"in x)return x.default;return x}export{M as withDefaults,Q as sourceFiles,W as projectRoot,L as loadConfigFrom,V as discoverClasses,J as createConfigRepository,Y as ServiceProvider,S as Service,P as Repository,U as DiscoveryError};
 
-//# debugId=B8296DBCE0424B4764756E2164756E21
+//# debugId=3937A60BDA2B21DC64756E2164756E21

package/dist/support/index.js.map

@@ -6,6 +6,6 @@
     "import { readdir } from \"node:fs/promises\";\nimport { join, parse } from \"node:path\";\n\nimport { Repository } from \"./Repository\";\n\nconst CONFIG_EXTENSIONS = [\".ts\", \".tsx\", \".js\", \".mjs\", \".jsx\"];\n\n// Builds a Repository from an already-imported map of config modules. The map\n// key becomes the top-level config key, so `{ mail: mailModule }` is readable\n// as `config.get(\"mail.driver\")`. Each entry may be either the module namespace\n// (its `default` export is unwrapped) or the config object itself.\nexport function createConfigRepository(\n  modules: Record<string, any> = {},\n): Repository {\n  const items: Record<string, any> = {};\n\n  for (const [key, mod] of Object.entries(modules)) {\n    items[key] = unwrap(mod);\n  }\n\n  return new Repository(items);\n}\n\n// Reads every config module in an app's `app/config` directory into a\n// Repository. The file's basename is the top-level key: `app/config/mail.ts`\n// populates `mail.*`. A missing directory yields an empty Repository so apps\n// that declare no config still boot.\nexport async function loadConfigFrom(\n  directory: string,\n  repository = new Repository(),\n): Promise<Repository> {\n  let entries: string[] = [];\n\n  try {\n    entries = await readdir(directory);\n  } catch (err) {\n    return repository;\n  }\n\n  const files = entries\n    .filter((entry) => {\n      const { ext, name } = parse(entry);\n      return CONFIG_EXTENSIONS.includes(ext) && !name.startsWith(\".\");\n    })\n    .sort();\n\n  for (const file of files) {\n    const { name } = parse(file);\n    const mod = await import(join(directory, file));\n    repository.set(name, unwrap(mod));\n  }\n\n  return repository;\n}\n\nfunction unwrap(mod: any) {\n  if (mod && typeof mod === \"object\" && \"default\" in mod) {\n    return mod.default;\n  }\n  return mod;\n}\n"
   ],
   "mappings": ";2RAgCO,CAAe,JAAQ,EAOrB,OAMD,AAAI,EAAkB,QAmBrB,OAAS,EAKX,CACH,GAAI,CAAC,KAAK,MACR,MAAU,MACR,YAAY,KAAK,0FACnB,EAGF,GAAI,CACF,OAAO,EAAI,IAAuB,EAClC,MAAO,EAAO,CACd,MAAU,MACR,qBAAqB,KAAK,6DACxB,+FACA,6CAA6C,KAAK,kDAEpD,CAAE,OAAM,CACV,SAoBG,KAAuB,CAAoB,EAA0B,CAC1E,IAAM,EAAW,IAAI,KACrB,QAAY,EAAK,KAAU,OAAO,QAAQ,CAAS,EACjD,GAAI,IAAU,OAAW,EAAS,GAAO,EAE3C,OAAO,EAEX,CChHA,kBAAS,oBACT,eAAS,WAAM,aAIf,IAAM,EAAoB,CAAC,MAAO,OAAQ,MAAO,OAAQ,MAAM,EAMxD,SAAS,CAAsB,CACpC,EAA+B,CAAC,EACpB,CACZ,IAAM,EAA6B,CAAC,EAEpC,QAAY,EAAK,KAAQ,OAAO,QAAQ,CAAO,EAC7C,EAAM,GAAO,EAAO,CAAG,EAGzB,OAAO,IAAI,EAAW,CAAK,EAO7B,eAAsB,CAAc,CAClC,EACA,EAAa,IAAI,EACI,CACrB,IAAI,EAAoB,CAAC,EAEzB,GAAI,CACF,EAAU,MAAM,EAAQ,CAAS,EACjC,MAAO,EAAK,CACZ,OAAO,EAGT,IAAM,EAAQ,EACX,OAAO,CAAC,IAAU,CACjB,IAAQ,MAAK,QAAS,EAAM,CAAK,EACjC,OAAO,EAAkB,SAAS,CAAG,GAAK,CAAC,EAAK,WAAW,GAAG,EAC/D,EACA,KAAK,EAER,QAAW,KAAQ,EAAO,CACxB,IAAQ,QAAS,EAAM,CAAI,EACrB,EAAM,MAAa,SAAK,EAAW,CAAI,GAC7C,EAAW,IAAI,EAAM,EAAO,CAAG,CAAC,EAGlC,OAAO,EAGT,SAAS,CAAM,CAAC,EAAU,CACxB,GAAI,GAAO,OAAO,IAAQ,UAAY,YAAa,EACjD,OAAO,EAAI,QAEb,OAAO",
-  "debugId": "B8296DBCE0424B4764756E2164756E21",
+  "debugId": "3937A60BDA2B21DC64756E2164756E21",
   "names": []
 }