kennel 0.1.8

package/dist/mcp/install-page.js

@@ -0,0 +1,360 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, relative, resolve } from 'node:path';
+import { isObject } from '../shared/object.js';
+const defaultSources = [
+    { text: 'Claude Code deep links', url: 'https://code.claude.com/docs/en/deep-links' },
+    { text: 'Claude Code MCP', url: 'https://code.claude.com/docs/en/mcp' },
+    { text: 'Codex app deep links', url: 'https://developers.openai.com/codex/app/commands#deep-links' },
+    { text: 'Codex MCP', url: 'https://developers.openai.com/codex/mcp' },
+    { text: 'Cursor deep links', url: 'https://cursor.com/docs/reference/deeplinks' },
+    { text: 'Cursor MCP', url: 'https://cursor.com/docs/mcp' },
+    {
+        text: 'Copilot Studio MCP onboarding',
+        url: 'https://learn.microsoft.com/en-us/microsoft-copilot-studio/mcp-add-existing-server-to-agent',
+    },
+    {
+        text: 'Microsoft 365 agent connectors for MCP',
+        url: 'https://learn.microsoft.com/en-us/microsoftteams/platform/m365-apps/agent-connectors',
+    },
+];
+function codeBlock(language, source) {
+    return [`\`\`\`${language}`, source, '```'].join('\n');
+}
+function frontmatter(title, description) {
+    return ['---', `title: ${JSON.stringify(title)}`, `description: ${JSON.stringify(description)}`, '---'].join('\n');
+}
+function escapeHtmlAttribute(value) {
+    return String(value).replace(/&/g, '&').replace(/"/g, '"');
+}
+function normalizeBasePath(base) {
+    if (typeof base !== 'string' || !base.trim() || base === '/')
+        return '/';
+    return `/${base.replace(/^\/+|\/+$/g, '')}/`;
+}
+function publicSiteUrl(config) {
+    const publication = config.publication ?? {};
+    const domains = publication.domains ?? {};
+    const url = config.url
+        ?? config.siteUrl
+        ?? publication.url
+        ?? domains.primary
+        ?? publication.hostname
+        ?? config.hostname;
+    if (typeof url !== 'string' || !url.trim())
+        return undefined;
+    const trimmed = url.trim().replace(/\/+$/, '');
+    return /^https?:\/\//.test(trimmed) ? trimmed : `https://${trimmed}`;
+}
+function publicMcpSiteUrl(config) {
+    const publicUrl = publicMcpEndpoint(config);
+    if (!publicUrl)
+        return undefined;
+    try {
+        return new URL(publicUrl).origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+function list(items = []) {
+    return items.map((item) => `   - \`${item}\``).join('\n');
+}
+function enabledInstallConfig(config) {
+    if (!isObject(config.install) || config.install.enabled === false)
+        return null;
+    if (config.install.enabled !== true && !publicMcpEndpoint(config))
+        return null;
+    return config.install;
+}
+function mcpEndpoints(config) {
+    const endpoints = isObject(config.mcp?.endpoints) ? config.mcp.endpoints : {};
+    const installMcp = isObject(config.install?.mcp) ? config.install.mcp : {};
+    return {
+        portal: stringValue(endpoints.portal),
+        protected: stringValue(installMcp.protectedUrl) ?? stringValue(endpoints.protected),
+        public: stringValue(installMcp.publicUrl) ?? stringValue(endpoints.public),
+    };
+}
+function publicMcpEndpoint(config) {
+    return mcpEndpoints(config).public;
+}
+function stringValue(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+function installMarkdownUrl(config) {
+    const siteUrl = publicMcpSiteUrl(config) ?? publicSiteUrl(config);
+    if (!siteUrl)
+        return undefined;
+    return `${siteUrl}${normalizeBasePath(config.base)}${installPagePath(config).replace(/^\/+/, '')}`;
+}
+function appGuideUrl(baseUrl, client) {
+    if (!baseUrl)
+        return undefined;
+    const fragment = client === 'Claude Code' ? 'claude-code' : client.toLowerCase();
+    return `${baseUrl.replace(/#.*$/, '')}#${fragment}`;
+}
+function quickStartPrompt(quickStart = {}, mcp, client) {
+    const promptKey = client === 'Claude Code' ? 'claudePrompt' : client === 'Cursor' ? 'cursorPrompt' : 'codexPrompt';
+    if (typeof quickStart[promptKey] === 'string')
+        return quickStart[promptKey];
+    if (typeof quickStart.prompt === 'string')
+        return quickStart.prompt;
+    const setupStep = client === 'Claude Code'
+        ? `Run: claude mcp add --transport http ${mcp.serverName} ${mcp.publicUrl}`
+        : client === 'Cursor'
+            ? `Add hosted MCP server ${mcp.serverName}: ${mcp.publicUrl}`
+            : `Run: codex mcp add ${mcp.serverName} --url ${mcp.publicUrl}`;
+    const guideUrl = appGuideUrl(mcp.installMarkdownUrl, client);
+    return [
+        `Set up ${mcp.displayName} in ${client}.`,
+        guideUrl ? `Guide: ${guideUrl}` : undefined,
+        setupStep,
+        `Verify tools; search ${mcp.displayName} for "${client} MCP setup". If blocked, give the next command.`,
+    ].filter(Boolean).join('\n');
+}
+function quickStartCard(input) {
+    return [
+        `<a href="${escapeHtmlAttribute(input.href)}" style="display:flex;flex:1 1 0;min-width:180px;gap:12px;align-items:center;justify-content:center;min-height:64px;border:1px solid var(--vp-c-brand-1);border-radius:8px;padding:12px 16px;text-decoration:none;color:var(--vp-c-text-1);background:var(--vp-c-bg-soft);cursor:pointer;font-weight:700;transition:border-color .15s ease,background-color .15s ease,transform .15s ease;">`,
+        `  <span aria-hidden="true" style="display:grid;place-items:center;flex:0 0 auto;width:34px;height:34px;border-radius:8px;background:var(--vp-c-bg);color:${input.color};">${input.icon}</span>`,
+        `  <span>${input.label}</span>`,
+        '</a>',
+    ].join('\n');
+}
+function quickStartSection(quickStart = {}, mcp) {
+    if (quickStart.enabled === false)
+        return [];
+    const codexPrompt = quickStartPrompt(quickStart, mcp, 'Codex');
+    const claudePrompt = quickStartPrompt(quickStart, mcp, 'Claude Code');
+    const cursorPrompt = quickStartPrompt(quickStart, mcp, 'Cursor');
+    const codexUrl = `codex://new?prompt=${encodeURIComponent(codexPrompt)}`;
+    const claudeUrl = `claude://claude.ai/new?q=${encodeURIComponent(claudePrompt)}`;
+    const cursorUrl = `cursor://anysphere.cursor-deeplink/prompt?text=${encodeURIComponent(cursorPrompt)}`;
+    const codexIcon = '<svg width="28" height="28" viewBox="0 0 24 24" role="img" aria-label="OpenAI"><path fill="currentColor" d="M22.282 9.821a6 6 0 0 0-.516-4.91a6.05 6.05 0 0 0-6.51-2.9A6.065 6.065 0 0 0 4.981 4.18a6 6 0 0 0-3.998 2.9a6.05 6.05 0 0 0 .743 7.097a5.98 5.98 0 0 0 .51 4.911a6.05 6.05 0 0 0 6.515 2.9A6 6 0 0 0 13.26 24a6.06 6.06 0 0 0 5.772-4.206a6 6 0 0 0 3.997-2.9a6.06 6.06 0 0 0-.747-7.073M13.26 22.43a4.48 4.48 0 0 1-2.876-1.04l.141-.081l4.779-2.758a.8.8 0 0 0 .392-.681v-6.737l2.02 1.168a.07.07 0 0 1 .038.052v5.583a4.504 4.504 0 0 1-4.494 4.494M3.6 18.304a4.47 4.47 0 0 1-.535-3.014l.142.085l4.783 2.759a.77.77 0 0 0 .78 0l5.843-3.369v2.332a.08.08 0 0 1-.033.062L9.74 19.95a4.5 4.5 0 0 1-6.14-1.646M2.34 7.896a4.5 4.5 0 0 1 2.366-1.973V11.6a.77.77 0 0 0 .388.677l5.815 3.354l-2.02 1.168a.08.08 0 0 1-.071 0l-4.83-2.786A4.504 4.504 0 0 1 2.34 7.872zm16.597 3.855l-5.833-3.387L15.119 7.2a.08.08 0 0 1 .071 0l4.83 2.791a4.494 4.494 0 0 1-.676 8.105v-5.678a.79.79 0 0 0-.407-.667m2.01-3.023l-.141-.085l-4.774-2.782a.78.78 0 0 0-.785 0L9.409 9.23V6.897a.07.07 0 0 1 .028-.061l4.83-2.787a4.5 4.5 0 0 1 6.68 4.66zm-12.64 4.135l-2.02-1.164a.08.08 0 0 1-.038-.057V6.075a4.5 4.5 0 0 1 7.375-3.453l-.142.08L8.704 5.46a.8.8 0 0 0-.393.681zm1.097-2.365l2.602-1.5l2.607 1.5v2.999l-2.597 1.5l-2.607-1.5Z"/></svg>';
+    const claudeIcon = '<svg width="28" height="28" viewBox="0 0 24 24" role="img" aria-label="Claude"><path fill="currentColor" d="m4.714 15.956l4.718-2.648l.079-.23l-.08-.128h-.23l-.79-.048l-2.695-.073l-2.337-.097l-2.265-.122l-.57-.121l-.535-.704l.055-.353l.48-.321l.685.06l1.518.104l2.277.157l1.651.098l2.447.255h.389l.054-.158l-.133-.097l-.103-.098l-2.356-1.596l-2.55-1.688l-1.336-.972l-.722-.491L2 6.223l-.158-1.008l.656-.722l.88.06l.224.061l.893.686l1.906 1.476l2.49 1.833l.364.304l.146-.104l.018-.072l-.164-.274l-1.354-2.446l-1.445-2.49l-.644-1.032l-.17-.619a3 3 0 0 1-.103-.729L6.287.133L6.7 0l.995.134l.42.364l.619 1.415L9.735 4.14l1.555 3.03l.455.898l.243.832l.09.255h.159V9.01l.127-1.706l.237-2.095l.23-2.695l.08-.76l.376-.91l.747-.492l.583.28l.48.685l-.067.444l-.286 1.851l-.558 2.903l-.365 1.942h.213l.243-.242l.983-1.306l1.652-2.064l.728-.82l.85-.904l.547-.431h1.032l.759 1.129l-.34 1.166l-1.063 1.347l-.88 1.142l-1.263 1.7l-.79 1.36l.074.11l.188-.02l2.853-.606l1.542-.28l1.84-.315l.832.388l.09.395l-.327.807l-1.967.486l-2.307.462l-3.436.813l-.043.03l.049.061l1.548.146l.662.036h1.62l3.018.225l.79.522l.473.638l-.08.485l-1.213.62l-1.64-.389l-3.825-.91l-1.31-.329h-.183v.11l1.093 1.068l2.003 1.81l2.508 2.33l.127.578l-.321.455l-.34-.049l-2.204-1.657l-.85-.747l-1.925-1.62h-.127v.17l.443.649l2.343 3.521l.122 1.08l-.17.353l-.607.213l-.668-.122l-1.372-1.924l-1.415-2.168l-1.141-1.943l-.14.08l-.674 7.254l-.316.37l-.728.28l-.607-.461l-.322-.747l.322-1.476l.388-1.924l.316-1.53l.285-1.9l.17-.632l-.012-.042l-.14.018l-1.432 1.967l-2.18 2.945l-1.724 1.845l-.413.164l-.716-.37l.066-.662l.401-.589l2.386-3.036l1.439-1.882l.929-1.086l-.006-.158h-.055L4.138 18.56l-1.13.146l-.485-.456l.06-.746l.231-.243l1.907-1.312Z"/></svg>';
+    const cards = [
+        quickStartCard({
+            href: codexUrl,
+            label: quickStart.codexLabel ?? 'OpenAI Codex',
+            icon: codexIcon,
+            color: '#111111',
+        }),
+        quickStartCard({
+            href: claudeUrl,
+            label: quickStart.claudeLabel ?? 'Claude Code',
+            icon: claudeIcon,
+            color: '#D97757',
+        }),
+        quickStartCard({
+            href: cursorUrl,
+            label: quickStart.cursorLabel ?? 'Cursor',
+            icon: '<svg width="28" height="28" viewBox="0 0 24 24" role="img" aria-label="Cursor"><path fill="currentColor" d="M12 2 3 7.25v9.5L12 22l9-5.25v-9.5zm0 2.32 6.98 4.07-4.17 2.44L12 9.19 9.19 10.83 5.02 8.39zm-7 5.8 4 2.34v4.65l-4-2.34zm6 9.28v-4.66l1 .59 1-.59v4.66l-1 .58zm3-2.29v-4.65l4-2.34v4.65zm-.99-5.25L12 12.45l-1.01-.59L12 11.27z"/></svg>',
+            color: '#111111',
+        }),
+    ];
+    const layoutStyle = cards.length >= 4
+        ? 'display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:12px;margin:20px 0;'
+        : 'display:flex;flex-wrap:wrap;gap:12px;margin:20px 0;';
+    return [
+        '## AI Quick Start',
+        '',
+        `<div class="ai-quick-start" style="${layoutStyle}">`,
+        ...cards,
+        '</div>',
+    ];
+}
+function installPagePath(config) {
+    const install = enabledInstallConfig(config);
+    const configured = String(install?.path ?? 'install.md').replace(/^\/+/, '');
+    if (!configured || configured.split('/').includes('..'))
+        throw new Error(`Invalid install.path: ${install?.path}`);
+    return configured.endsWith('.md') ? configured : `${configured}.md`;
+}
+function repositoryPrompt(config, displayName, remoteUrl) {
+    return config.setupPrompt ?? [
+        `Set up the ${displayName} MCP server from this repository.`,
+        'Read mcp/README.md, run npm install and npm run build in mcp/, then configure this local stdio MCP server for this client.',
+        `Use the Git remote ${remoteUrl}.`,
+    ].join(' ');
+}
+function cloudflarePortalSection(portal = {}, mcp) {
+    if (portal.enabled === false || !portal.url)
+        return [];
+    const serverId = portal.serverId ?? mcp.serverName;
+    const upstreamUrl = portal.upstreamUrl ?? mcp.publicUrl;
+    const portalId = portal.portalId ?? `${serverId}-portal`;
+    const hostname = portal.hostname ?? new URL(String(portal.url)).hostname;
+    const gatewayCname = portal.gatewayCname ?? 'gateway.agents.cloudflare.com';
+    return [
+        '## Cloudflare Managed Portal',
+        '',
+        "Cloudflare MCP server portals are managed under **Zero Trust** > **Access controls** > **AI controls**. They require a dedicated hostname that points at Cloudflare's MCP portal gateway, then expose MCP at `/mcp`.",
+        '',
+        'Target portal:',
+        '',
+        codeBlock('text', String(portal.url)),
+        '',
+        'Upstream MCP server:',
+        '',
+        codeBlock('text', upstreamUrl),
+        '',
+        'Cloudflare setup:',
+        '',
+        `1. Add an MCP server with server ID \`${serverId}\`, authentication \`${portal.authentication ?? 'Unauthenticated'}\`, and HTTP URL \`${upstreamUrl}\`.`,
+        `2. Create an MCP server portal with portal ID \`${portalId}\`, hostname \`${hostname}\`, and include the \`${serverId}\` server.`,
+        `3. Create a proxied CNAME for \`${hostname}\` pointing to \`${gatewayCname}\` if the portal was created through the API or Terraform.`,
+        `4. Add Access policies for the portal and for the \`${serverId}\` MCP server entry so allowed users can see the server in the portal.`,
+        '',
+        'Equivalent Cloudflare API endpoints:',
+        '',
+        codeBlock('text', 'POST /accounts/{account_id}/access/ai-controls/mcp/servers\nPOST /accounts/{account_id}/access/ai-controls/mcp/portals'),
+        '',
+        portal.accessNote ?? 'Use a Cloudflare token with Zero Trust Access/AI Controls write access before provisioning the managed portal.',
+        '',
+        'For Claude or other MCP clients that need browser-based portal auth, Cloudflare recommends `mcp-remote`:',
+        '',
+        codeBlock('json', JSON.stringify({ mcpServers: { [serverId]: { command: 'npx', args: ['-y', 'mcp-remote@latest', portal.url] } } }, null, 2)),
+    ];
+}
+function localRepositorySection(repository = {}, mcp) {
+    if (repository.enabled === false || !repository.remoteUrl || !repository.localPath)
+        return [];
+    const prompt = repositoryPrompt(repository, mcp.displayName, repository.remoteUrl);
+    const codexUrl = `codex://new?originUrl=${encodeURIComponent(repository.remoteUrl)}&prompt=${encodeURIComponent(prompt)}`;
+    const claudeUrl = `claude-cli://open?cwd=${encodeURIComponent(repository.localPath)}&q=${encodeURIComponent(prompt)}`;
+    const configuredServerDirectory = repository.localServerDirectory ?? 'mcp';
+    const serverDirectory = String(configuredServerDirectory).startsWith('/')
+        ? String(configuredServerDirectory)
+        : `${String(repository.localPath).replace(/\/+$/, '')}/${String(configuredServerDirectory).replace(/^\/+/, '')}`;
+    const localServerCommand = repository.localServerCommand ?? `node ${serverDirectory}/dist/server.js`;
+    return [
+        '## Local Repository Setup',
+        '',
+        'Use these links only when you want to open the Git-backed repository in an agent and configure the local MCP server from `mcp/`.',
+        '',
+        `- [Open in Codex](${codexUrl}): uses Codex \`originUrl\` matching to find a local workspace with the \`${repository.remoteUrl}\` remote.`,
+        `- [Open in Claude Code](${claudeUrl}): uses Claude Code \`cwd\` matching for this local clone. Claude Code's \`repo=\` deeplink is GitHub \`owner/name\` based, so use \`cwd=\` for non-GitHub repositories.`,
+        '',
+        'If the clone is not present locally:',
+        '',
+        codeBlock('bash', `git clone ${repository.remoteUrl}.git ${repository.localPath}`),
+        '',
+        'Configure the local stdio MCP server:',
+        '',
+        codeBlock('bash', [
+            `claude mcp add --transport stdio ${mcp.serverName} -- ${localServerCommand}`,
+            `codex mcp add ${mcp.serverName} -- ${localServerCommand}`,
+        ].join('\n')),
+    ];
+}
+function sourceSection(sources = defaultSources) {
+    return sources.length ? [`Sources checked: ${sources.map((source) => `[${source.text}](${source.url})`).join(', ')}.`] : [];
+}
+function renderInstallPage(config) {
+    const install = enabledInstallConfig(config);
+    if (!install)
+        return undefined;
+    const endpoints = mcpEndpoints(config);
+    const coreMcp = isObject(config.mcp) ? config.mcp : {};
+    const installMcp = isObject(install.mcp) ? install.mcp : {};
+    const mcp = {
+        description: installMcp.description ?? config.description ?? '',
+        displayName: installMcp.displayName ?? install.title ?? config.title ?? 'Index',
+        protectedUrl: endpoints.protected ?? '',
+        publicUrl: endpoints.public ?? '',
+        serverName: installMcp.serverName ?? coreMcp.serverName ?? config.name ?? 'index',
+        tools: Array.isArray(installMcp.tools) ? installMcp.tools.map(String) : [],
+        installMarkdownUrl: installMarkdownUrl(config),
+    };
+    if (!mcp.publicUrl)
+        throw new Error('mcp.endpoints.public or install.mcp.publicUrl is required when install is enabled');
+    const title = install.title ?? 'Install';
+    const description = install.description ?? `Connect ${mcp.displayName} MCP to Codex, Claude, Microsoft Teams, and Copilot.`;
+    const lines = [
+        frontmatter(title, description),
+        '',
+        `# ${title}`,
+        '',
+        ...quickStartSection(install.quickStart, mcp),
+        '',
+        'Use the public Cloudflare MCP endpoint when you want an agent to use this knowledge base without Git credentials or a local clone.',
+        '',
+        codeBlock('text', mcp.publicUrl),
+        '',
+        mcp.protectedUrl ? `The custom domain is protected by Cloudflare Access, so use \`${mcp.publicUrl}\` for no-creds agent setup.` : undefined,
+        '',
+        ...cloudflarePortalSection({
+            url: endpoints.portal,
+            upstreamUrl: endpoints.public,
+            ...install.cloudflarePortal,
+        }, mcp),
+        '',
+        '## Codex',
+        '',
+        'Add the hosted MCP server:',
+        '',
+        codeBlock('bash', `codex mcp add ${mcp.serverName} --url ${mcp.publicUrl}`),
+        '',
+        `Restart Codex Desktop or open a new thread, then run \`/mcp\` to confirm \`${mcp.serverName}\` is connected.`,
+        '',
+        '## Claude Code',
+        '',
+        'Add the hosted MCP server:',
+        '',
+        codeBlock('bash', `claude mcp add --transport http ${mcp.serverName} ${mcp.publicUrl}`),
+        '',
+        'Restart Claude Code or open a new session. The tools should appear as:',
+        '',
+        codeBlock('text', mcp.tools.map((tool) => `mcp__${mcp.serverName}__${tool}`).join('\n')),
+        '',
+        '## Microsoft Teams and Copilot',
+        '',
+        'Use the same public MCP endpoint for Microsoft 365 Copilot and Teams agent experiments:',
+        '',
+        codeBlock('text', mcp.publicUrl),
+        '',
+        'Fastest Copilot Studio path:',
+        '',
+        '1. Open the target agent in Copilot Studio.',
+        '2. Go to **Tools**.',
+        '3. Select **Add a tool** > **New tool** > **Model Context Protocol**.',
+        '4. Enter:',
+        `   - Server name: \`${mcp.displayName}\``,
+        `   - Server description: \`${mcp.description}\``,
+        `   - Server URL: \`${mcp.publicUrl}\``,
+        '   - Authentication: `None`',
+        '5. Create the tool, add the MCP tools to the agent, then test with: `Search CDP Index for MCP setup.`',
+        '',
+        'Teams / Microsoft 365 Copilot agent path:',
+        '',
+        '1. Use Microsoft 365 Agents Toolkit in VS Code.',
+        '2. Create a new declarative agent.',
+        '3. Add an action and choose **Start with an MCP server**.',
+        `4. Enter \`${mcp.publicUrl}\`.`,
+        '5. Select the tools to expose, usually:',
+        list(mcp.tools),
+        '6. Test locally through Microsoft 365 Copilot, then package and publish the agent to Teams/Microsoft 365 through the tenant approval flow.',
+        '',
+        mcp.protectedUrl ? `Do not use \`${mcp.protectedUrl}\` for Copilot or Teams unless the Microsoft connector is configured with Cloudflare Access service-token headers. Without that, Microsoft clients receive the Cloudflare Access login redirect instead of MCP JSON-RPC.` : undefined,
+        '',
+        ...localRepositorySection(install.repository, mcp),
+        '',
+        ...sourceSection(Array.isArray(install.sources) ? install.sources : defaultSources),
+        '',
+    ];
+    return `${lines.filter((line) => line !== undefined).join('\n').replace(/\n{3,}/g, '\n\n')}\n`;
+}
+export function writeInstallPage(root, config) {
+    const source = renderInstallPage(config);
+    if (!source)
+        return undefined;
+    const resolvedRoot = resolve(root);
+    const target = resolve(resolvedRoot, installPagePath(config));
+    if (target !== resolvedRoot && !target.startsWith(`${resolvedRoot}/`)) {
+        throw new Error(`install.path must resolve inside project root: ${relative(resolvedRoot, target)}`);
+    }
+    if (existsSync(target) && readFileSync(target, 'utf8') === source)
+        return target;
+    mkdirSync(dirname(target), { recursive: true });
+    writeFileSync(target, source);
+    return target;
+}

package/dist/notifications/email-worker.d.ts

@@ -0,0 +1,8 @@
+type GeneratedNotificationWorker = {
+    testPath: string;
+    workerPath: string;
+    wranglerPath: string;
+};
+export declare function writeNotificationEmailWorker(root: string, config: any, configPath: string): GeneratedNotificationWorker | null;
+export declare function notificationEmailConfig(config: any): Record<string, any> | null;
+export {};

package/dist/notifications/email-worker.js

@@ -0,0 +1,137 @@
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { dirname, relative, resolve } from 'node:path';
+import { isObject } from '../shared/object.js';
+import { publicationConfig, publishAccountId, publishProjectName } from '../publish/config.js';
+export function writeNotificationEmailWorker(root, config, configPath) {
+    const email = notificationEmailConfig(config);
+    if (!email)
+        return null;
+    const worker = isObject(email.worker) ? email.worker : {};
+    const wranglerPath = resolveInside(root, stringValue(worker.wranglerConfig) ?? 'email-worker/wrangler.toml', 'email worker wrangler config');
+    const workerPath = resolveInside(root, stringValue(worker.workerPath) ?? relative(root, resolve(dirname(wranglerPath), 'worker.ts')), 'email worker path');
+    const testPath = resolveInside(root, stringValue(worker.testPath) ?? relative(root, resolve(dirname(wranglerPath), 'test-send.ts')), 'email worker test path');
+    mkdirSync(dirname(workerPath), { recursive: true });
+    mkdirSync(dirname(wranglerPath), { recursive: true });
+    mkdirSync(dirname(testPath), { recursive: true });
+    writeFileSync(workerPath, workerSource(workerPath, configPath));
+    writeFileSync(testPath, testSource(email));
+    writeFileSync(wranglerPath, wranglerSource(root, config, email, worker, workerPath, wranglerPath));
+    return { testPath, workerPath, wranglerPath };
+}
+export function notificationEmailConfig(config) {
+    const publication = publicationConfig(config);
+    const notifications = isObject(publication.notifications) ? publication.notifications : {};
+    const email = isObject(notifications.email) ? notifications.email : {};
+    if (email.provider !== 'cloudflare-email-worker')
+        return null;
+    return email;
+}
+function workerSource(workerPath, configPath) {
+    return `import { createCloudflareEmailWorker } from '@raggle-ai/kennel-mcp/notifications/email-worker';
+import indexConfig from '${relativeImport(dirname(workerPath), configPath)}';
+
+export default createCloudflareEmailWorker(indexConfig);
+`;
+}
+function testSource(email) {
+    const endpointEnv = stringValue(email.endpointSecret) ?? stringValue(email.endpointEnv) ?? 'CLOUDFLARE_EMAIL_ENDPOINT';
+    const tokenEnv = stringValue(email.tokenSecret) ?? stringValue(email.tokenEnv) ?? 'CLOUDFLARE_EMAIL_TOKEN';
+    const defaultGroup = stringValue(email.defaultGroup) ?? 'email-groups/test-admins.txt';
+    return `import { readFile } from 'node:fs/promises';
+import { isAbsolute, resolve } from 'node:path';
+
+async function main() {
+  const endpoint = requireEnv('${endpointEnv}');
+  const token = requireEnv('${tokenEnv}');
+  const group = process.env.EMAIL_TEST_GROUP_PATH ?? ${JSON.stringify(defaultGroup)};
+  const recipients = await readEmailRecipients(group);
+  const response = await fetch(endpoint, {
+    body: JSON.stringify({
+      notificationType: process.env.EMAIL_TEST_NOTIFICATION_TYPE ?? 'test',
+      preheader: process.env.EMAIL_TEST_PREHEADER ?? 'Verifying the Kennel email worker configuration.',
+      text: \`Cloudflare Email Service test sent from Kennel at \${new Date().toISOString()}.\`,
+      to: recipients,
+    }),
+    headers: {
+      authorization: \`Bearer \${token}\`,
+      'content-type': 'application/json',
+    },
+    method: 'POST',
+  });
+  const body = await response.json().catch(async () => ({ error: await response.text() }));
+
+  if (!response.ok) {
+    throw new Error(\`Cloudflare email test failed (\${response.status}): \${JSON.stringify(body)}\`);
+  }
+
+  console.log(JSON.stringify(body, null, 2));
+}
+
+async function readEmailRecipients(filePath: string) {
+  const text = await readFile(isAbsolute(filePath) ? filePath : resolve(process.cwd(), filePath), 'utf8');
+  return text
+    .split(/\\r?\\n/u)
+    .map((line) => line.trim())
+    .filter((line) => line && !line.startsWith('#'));
+}
+
+function requireEnv(name: string) {
+  const value = process.env[name]?.trim();
+  if (!value) throw new Error(\`Missing required environment variable: \${name}\`);
+  return value;
+}
+
+main().catch((error) => {
+  console.error(error instanceof Error ? error.message : error);
+  process.exitCode = 1;
+});
+`;
+}
+function wranglerSource(root, config, email, worker, workerPath, wranglerPath) {
+    const name = stringValue(worker.name)
+        ?? `${publishProjectName(config, root)}-email`;
+    const accountId = stringValue(worker.accountId) ?? publishAccountId(config);
+    const compatibilityDate = stringValue(worker.compatibilityDate) ?? '2026-06-23';
+    const workersDev = worker.workersDev === false ? 'false' : 'true';
+    const senders = allowedSenderAddresses(email, worker);
+    const lines = [
+        `name = ${tomlString(name)}`,
+        `main = ${tomlString(relative(dirname(wranglerPath), workerPath).replace(/\\/gu, '/'))}`,
+        `compatibility_date = ${tomlString(compatibilityDate)}`,
+        ...(accountId ? [`account_id = ${tomlString(accountId)}`] : []),
+        `workers_dev = ${workersDev}`,
+        '',
+        '[[send_email]]',
+        'name = "EMAIL"',
+        'remote = true',
+        ...(senders.length ? [`allowed_sender_addresses = [${senders.map(tomlString).join(', ')}]`] : []),
+    ];
+    return `${lines.join('\n')}\n`;
+}
+function allowedSenderAddresses(email, worker) {
+    const configured = Array.isArray(worker.allowedSenderAddresses)
+        ? worker.allowedSenderAddresses.map(String)
+        : [];
+    const from = isObject(email.from) ? stringValue(email.from.address) : undefined;
+    return Array.from(new Set([...configured, ...(from ? [from] : [])].map((entry) => entry.trim()).filter(Boolean)));
+}
+function resolveInside(root, filePath, label) {
+    const resolvedRoot = resolve(root);
+    const target = resolve(resolvedRoot, filePath);
+    if (target !== resolvedRoot && !target.startsWith(`${resolvedRoot}/`)) {
+        throw new Error(`${label} must resolve inside project root: ${filePath}`);
+    }
+    return target;
+}
+function relativeImport(fromDir, target) {
+    let specifier = relative(fromDir, target).replace(/\\/gu, '/');
+    if (!specifier.startsWith('.'))
+        specifier = `./${specifier}`;
+    return specifier;
+}
+function stringValue(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+function tomlString(value) {
+    return JSON.stringify(value);
+}

package/dist/package/mcp-data.d.ts

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/data';

package/dist/package/mcp-data.js

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/data';

package/dist/package/mcp-email-worker.d.ts

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/notifications/email-worker';

package/dist/package/mcp-email-worker.js

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/notifications/email-worker';

package/dist/package/mcp-http.d.ts

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/http';

package/dist/package/mcp-http.js

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/http';

package/dist/package/mcp-stdio.d.ts

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/stdio';

package/dist/package/mcp-stdio.js

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp/stdio';

package/dist/package/mcp.d.ts

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp';

package/dist/package/mcp.js

@@ -0,0 +1 @@
+export * from '@raggle-ai/kennel-mcp';

package/dist/publish/cloudflare-init.d.ts

@@ -0,0 +1,12 @@
+export declare const CLOUDFLARE_WORKER_MAIN = ".kennel/generated/cloudflare/email-code-worker.js";
+export declare const CLOUDFLARE_WRANGLER_CONFIG = ".kennel/generated/cloudflare/wrangler.jsonc";
+export declare const LEGACY_CLOUDFLARE_WRANGLER_CONFIG = "wrangler.worker.jsonc";
+export type CloudflareSetup = {
+    root: string;
+    configPath: string;
+    config: any;
+    wranglerPath: string;
+    hostname: string;
+    hostnames: string[];
+};
+export declare function publishInitCloudflare(input: string[]): CloudflareSetup;

package/dist/publish/cloudflare-init.js

@@ -0,0 +1,98 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, relative } from 'node:path';
+import { readJson, readJsonc, writeJson } from '../shared/json.js';
+import { isObject } from '../shared/object.js';
+import { displayPath } from '../shared/path.js';
+import { projectConfigPath } from '../shared/project-config.js';
+import { displayBasePath, vitepressOutputDirectory } from '../site/vitepress.js';
+import { publishAccountId, publishAuthDefaults, publishAuthWithWranglerFallbacks, publicationAdminMcp, publishHostname, publishHostnames, publishWorkerName, publicationConfig, publicationDomains, } from './config.js';
+import { splitPublishArgs } from './options.js';
+export const CLOUDFLARE_WORKER_MAIN = '.kennel/generated/cloudflare/email-code-worker.js';
+export const CLOUDFLARE_WRANGLER_CONFIG = '.kennel/generated/cloudflare/wrangler.jsonc';
+export const LEGACY_CLOUDFLARE_WRANGLER_CONFIG = 'wrangler.worker.jsonc';
+function workerTemplate() {
+    return readFileSync(new URL('../../templates/cloudflare/email-code-worker.js', import.meta.url), 'utf8');
+}
+function readCloudflareWranglerConfig(root) {
+    for (const name of [CLOUDFLARE_WRANGLER_CONFIG, LEGACY_CLOUDFLARE_WRANGLER_CONFIG]) {
+        const filePath = join(root, name);
+        if (existsSync(filePath))
+            return readJsonc(filePath);
+    }
+    return {};
+}
+export function publishInitCloudflare(input) {
+    const options = splitPublishArgs(input);
+    const configPath = projectConfigPath(options.targetPath, options.configFile);
+    const root = dirname(configPath);
+    const config = readJson(configPath);
+    const publication = publicationConfig(config);
+    const adminMcp = publicationAdminMcp(config);
+    const domains = publicationDomains(config);
+    const wranglerPath = join(root, CLOUDFLARE_WRANGLER_CONFIG);
+    const wrangler = readCloudflareWranglerConfig(root);
+    const vars = isObject(wrangler.vars) ? wrangler.vars : {};
+    const auth = publishAuthWithWranglerFallbacks(publishAuthDefaults(config), vars);
+    const workerName = publishWorkerName(config, root);
+    const hostname = publishHostname(config, options);
+    const hostnames = publishHostnames(config, options);
+    config.publication = {
+        ...publication,
+        provider: 'cloudflare-workers',
+        workerName,
+        domains: {
+            ...domains,
+            ...(hostname ? { primary: hostname } : {}),
+            ...(hostnames.length > 1 ? { aliases: hostnames.slice(1) } : {}),
+        },
+        access: auth,
+    };
+    delete config.publish;
+    writeJson(configPath, config);
+    const workerPath = join(root, CLOUDFLARE_WORKER_MAIN);
+    mkdirSync(dirname(workerPath), { recursive: true });
+    writeFileSync(workerPath, workerTemplate());
+    wrangler.name = workerName;
+    const accountId = publishAccountId(config);
+    if (accountId)
+        wrangler.account_id = accountId;
+    if (typeof wrangler.account_id !== 'string' && typeof process.env.CLOUDFLARE_ACCOUNT_ID === 'string') {
+        wrangler.account_id = process.env.CLOUDFLARE_ACCOUNT_ID;
+    }
+    wrangler.main = relative(dirname(wranglerPath), workerPath);
+    wrangler.compatibility_date = wrangler.compatibility_date ?? new Date().toISOString().slice(0, 10);
+    wrangler.assets = {
+        binding: 'ASSETS',
+        directory: relative(dirname(wranglerPath), join(root, vitepressOutputDirectory(root))),
+        run_worker_first: true,
+    };
+    if (hostnames.length > 0) {
+        wrangler.routes = hostnames.map((pattern) => ({ pattern, custom_domain: true }));
+    }
+    if (auth.mode === 'email-code-worker') {
+        wrangler.send_email = [{ name: 'EMAIL', remote: true }];
+    }
+    else {
+        delete wrangler.send_email;
+    }
+    wrangler.vars = {
+        ...vars,
+        ...(auth.allowedDomains.length > 0 ? { KENNEL_AUTH_ALLOWED_DOMAINS: auth.allowedDomains.join(',') } : {}),
+        ...(auth.allowedEmails.length > 0 ? { KENNEL_AUTH_ALLOWED_EMAILS: auth.allowedEmails.join(',') } : {}),
+        ...(auth.fromEmail ? { KENNEL_AUTH_FROM_EMAIL: auth.fromEmail } : {}),
+        ...(auth.emailSubject ? { KENNEL_AUTH_EMAIL_SUBJECT: auth.emailSubject } : {}),
+        ...(typeof adminMcp.hostname === 'string' && adminMcp.hostname.trim() ? { KENNEL_ADMIN_MCP_HOSTNAMES: adminMcp.hostname.trim() } : {}),
+        ...(typeof adminMcp.role === 'string' && adminMcp.role.trim() ? { KENNEL_ADMIN_MCP_ROLE: adminMcp.role.trim() } : {}),
+        ...(typeof adminMcp.upstream === 'string' && adminMcp.upstream.trim() ? { KENNEL_ADMIN_MCP_UPSTREAM: adminMcp.upstream.trim() } : {}),
+        ...(typeof config.base === 'string' && config.base.trim() ? { KENNEL_SITE_BASE: displayBasePath(config) } : {}),
+    };
+    mkdirSync(dirname(wranglerPath), { recursive: true });
+    writeJson(wranglerPath, wrangler);
+    console.log(`ok ${displayPath(configPath)}`);
+    console.log(`ok ${displayPath(workerPath)}`);
+    console.log(`ok ${displayPath(wranglerPath)}`);
+    console.log('required secret: KENNEL_AUTH_SECRET');
+    if (!hostname)
+        console.log('optional: set publication.domains.primary or pass --hostname to attach a custom domain');
+    return { root, configPath, config, wranglerPath, hostname: hostnames[0] ?? hostname, hostnames };
+}