mandala-computer-mcp 0.5.0 → 0.6.0

package/dist/format.js.map

@@ -1 +1 @@
-{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/F,2BAA2B;AAC3B,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE9F,6FAA6F;AAC7F,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAErF,yDAAyD;AACzD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,CAAW,EAAkB,EAAE,CAChE,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,CAAW,EAAkB,EAAE,CAAC,CAAC;IACrE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChB,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,KAAiB,EAAE,QAAgB,EAAE,IAAa;IACtE,MAAM,OAAO,GAA8B;QACzC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE;KACzE,CAAC;IACF,IAAI,IAAI;QAAE,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,MAA0C;IAItE,MAAM,IAAI,GACR,MAAM,YAAY,QAAQ;QACxB,CAAC,CAAC;YACE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,eAAe;YACxC,cAAc,EAAE,MAAM,CAAC,YAAY;SACpC;QACH,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,GAAG;QACV,gBAAgB,EAAE,GAAG;KACtB,CAAC,EAAE,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,SAAS;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,MAA0C;IAE1C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IACtF,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,OAAO;YACjB,GAAG,IAAI,CACL,qBAAqB,OAAO,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,EAAE,EAAE,EACnF,MAAM,CACP,CAAC,OAAO;SACV;KACF,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,8EAA8E;IAC9E,gFAAgF;IAChF,2EAA2E;IAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9F,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,MAAM,CAAC,GAAY,EAAE,mBAAmB,GAAG,IAAI;IAC7D,MAAM,OAAO,GACX,GAAG,YAAY,QAAQ;QACrB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC;QACtB,CAAC,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,YAAY,KAAK;YACnD,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,MAAM,GAAI,GAA2B,EAAE,MAAM,CAAC;IACpD,MAAM,UAAU,GACd,MAAM,IAAI,OAAO,KAAK,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACnF,yEAAyE;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,kEAAkE;IAClE,EAAE;IACF,6EAA6E;IAC7E,+EAA+E;IAC/E,qEAAqE;IACrE,EAAE;IACF,qEAAqE;IACrE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,MAAM,GACV,GAAG,YAAY,QAAQ;QACrB,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;YACrC,CAAC,mBAAmB;gBACpB,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAChC,CAAC,CAAC,GAAG,CAAC,IAAI;oBACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAC5B,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC;oBACtB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;gBACnC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC1B,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/D,MAAM,IAAI,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACtE,CAAC;IACF,OAAO,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,IAAI,GAAG,IAA+B,CAAC;IAC7C,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,GAAG,mBAAmB;QACjC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,iGAAiG;QAC1I,CAAC,CAAC,MAAM,CAAC;IACb,OAAO,CACL,uFAAuF;QACvF,qFAAqF;QACrF,iEAAiE,KAAK,EAAE,CACzE,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAiC;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAyDD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,CAAW;IACzC,OAAO,CACL,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;QACjC,CAAC,CAAC,cAAc,KAAK,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,+DAA+D;QAC/D,0EAA0E;QAC1E,qEAAqE;QACrE,4EAA4E;QAC5E,MAAM,MAAM,GAAG,KAAiB,CAAC;QACjC,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAG,CAAC,CAAC,WAAkC,IAAI,MAAM,CAAC,WAAW;SACzE,CAAC;IACJ,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAW;IAC5C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,UAAyB;IACvE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GACX,UAAU,GAAG,CAAC;QACZ,CAAC,CAAC,GAAG,UAAU,YAAY,IAAI,6CAA6C;QAC5E,CAAC,CAAC,2DAA2D,IAAI,cAAc,CAAC;IACpF,OAAO,CACL,eAAe,OAAO,6DAA6D;QACnF,2DAA2D,CAC5D,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,QAAQ,CAAC,CAAW;IAClC,8EAA8E;IAC9E,wEAAwE;IACxE,2EAA2E;IAC3E,EAAE;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AACA,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,2BAA2B;AAC3B,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE9F,6FAA6F;AAC7F,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAErF,yDAAyD;AACzD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,CAAW,EAAkB,EAAE,CAChE,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAE5E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,CAAW,EAAkB,EAAE,CAAC,CAAC;IACrE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChB,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,KAAK,CAAC,KAAiB,EAAE,QAAgB,EAAE,IAAa;IACtE,MAAM,OAAO,GAA8B;QACzC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE;KACzE,CAAC;IACF,IAAI,IAAI;QAAE,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,MAA0C;IAItE,MAAM,IAAI,GACR,MAAM,YAAY,QAAQ;QACxB,CAAC,CAAC;YACE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,eAAe;YACxC,cAAc,EAAE,MAAM,CAAC,YAAY;SACpC;QACH,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,GAAG;QACV,gBAAgB,EAAE,GAAG;KACtB,CAAC,EAAE,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,SAAS;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,YAAY,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,MAA0C;IAE1C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IACtF,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,OAAO;YACjB,GAAG,IAAI,CACL,qBAAqB,OAAO,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,EAAE,EAAE,EACnF,MAAM,CACP,CAAC,OAAO;SACV;KACF,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,8EAA8E;IAC9E,gFAAgF;IAChF,2EAA2E;IAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9F,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAa;IAC7C,IAAI,CAAC,CAAC,GAAG,YAAY,gBAAgB,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,OAAO,mBAAmB,CAAC,GAAG,CAAC;QAC7B,CAAC,CAAC,gSAAgS;QAClS,CAAC,CAAC,kGAAkG,CAAC;AACzG,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,MAAM,CAAC,GAAY,EAAE,mBAAmB,GAAG,IAAI;IAC7D,MAAM,OAAO,GACX,GAAG,YAAY,QAAQ;QACrB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC;QACtB,CAAC,CAAC,GAAG,YAAY,YAAY,IAAI,GAAG,YAAY,KAAK;YACnD,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,MAAM,GAAI,GAA2B,EAAE,MAAM,CAAC;IACpD,MAAM,UAAU,GACd,MAAM,IAAI,OAAO,KAAK,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,UAAU,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IACnF,yEAAyE;IACzE,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAC/E,+EAA+E;IAC/E,4EAA4E;IAC5E,kEAAkE;IAClE,EAAE;IACF,6EAA6E;IAC7E,+EAA+E;IAC/E,qEAAqE;IACrE,EAAE;IACF,qEAAqE;IACrE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,EAAE;IACF,yEAAyE;IACzE,yEAAyE;IACzE,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,MAAM,GACV,GAAG,YAAY,QAAQ;QACrB,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC;YACvB,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;YACpC,CAAC,mBAAmB;gBACpB,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAChC,CAAC,CAAC,GAAG,CAAC,IAAI;oBACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAC5B,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC;oBACtB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;gBACnC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC1B,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/D,MAAM,IAAI,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACtE,CAAC;IACF,OAAO,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,MAAM,IAAI,GAAG,IAA+B,CAAC;IAC7C,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,GAAG,mBAAmB;QACjC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,iGAAiG;QAC1I,CAAC,CAAC,MAAM,CAAC;IACb,OAAO,CACL,uFAAuF;QACvF,qFAAqF;QACrF,iEAAiE,KAAK,EAAE,CACzE,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAiC;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AA0ED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,CAAW;IACzC,OAAO,CACL,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;QACjC,CAAC,CAAC,cAAc,KAAK,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,+DAA+D;QAC/D,0EAA0E;QAC1E,qEAAqE;QACrE,4EAA4E;QAC5E,MAAM,MAAM,GAAG,KAAiB,CAAC;QACjC,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAG,CAAC,CAAC,WAAkC,IAAI,MAAM,CAAC,WAAW;SACzE,CAAC;IACJ,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAW;IAC5C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,UAAyB;IACvE,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GACX,UAAU,GAAG,CAAC;QACZ,CAAC,CAAC,GAAG,UAAU,YAAY,IAAI,6CAA6C;QAC5E,CAAC,CAAC,2DAA2D,IAAI,cAAc,CAAC;IACpF,OAAO,CACL,eAAe,OAAO,6DAA6D;QACnF,2DAA2D,CAC5D,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,QAAQ,CAAC,CAAW;IAClC,8EAA8E;IAC9E,wEAAwE;IACxE,2EAA2E;IAC3E,EAAE;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,IAAI,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAClF,wEAAwE;IACxE,2EAA2E;IAC3E,sBAAsB;IACtB,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;SAC7F,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI;QACjC,IAAI,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE;QAC/D,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC"}

package/dist/http.d.ts

@@ -12,7 +12,49 @@ export type HttpConfig = Omit<ServerConfig, 'apiKey' | 'activity'> & {
     maxSessions?: number;
     /** How many requests may retain a parsed body above 256 KiB at once. */
     maxLargeBodyParses?: number;
+    /**
+     * The OAuth protected-resource metadata URL (RFC 9728) of this server, for
+     * the hosted install (OPL-4982). Setting it turns on the OAuth answers: a
+     * request with no bearer, or whose bearer the platform refused, is a 401
+     * carrying {@link bearerChallenge}, which is how an MCP client discovers
+     * where to authorize and knows to refresh. Unset, nothing changes.
+     */
+    resourceMetadataUrl?: string;
+    /**
+     * The platform's shared secret for this service, sent as
+     * `X-Mandala-MCP-Service` on every platform request a session makes. Needed
+     * for the platform to take an OAuth access token at all. Never logged.
+     */
+    serviceSecret?: string;
+    /**
+     * Hosted mode: how long a bearer the platform accepted is taken on trust
+     * before it is checked again, in ms. Default 60 s.
+     */
+    bearerCheckTtlMs?: number;
+    /**
+     * Hosted mode: refused initializes one source may make per minute before it
+     * is answered 429 without asking the platform. Default 20.
+     */
+    maxFailedInitializes?: number;
+    /**
+     * Hosted mode: once a source has spent that budget, how often it may still
+     * have one new bearer checked, in ms. Default 5 s.
+     */
+    exhaustedProbeIntervalMs?: number;
+    /** The SDK's SSE keep-alive interval, in ms. For tests; default 15 s. */
+    sseKeepAliveMs?: number;
 };
+/** The OAuth scope the hosted resource asks for. */
+export declare const MCP_SCOPE = "mcp:tools";
+/**
+ * The `WWW-Authenticate` value of every OAuth refusal this server makes.
+ *
+ * The same header whether no bearer was sent or the platform refused one: RFC
+ * 9728 §5.1 has a client find the authorization server through
+ * `resource_metadata`, and the MCP authorization spec has it refresh or
+ * re-authorize on any 401 that carries it.
+ */
+export declare function bearerChallenge(resourceMetadataUrl: string): string;
 export declare function isLoopbackHost(host: string): boolean;
 /**
  * One operator-supplied allowlist entry, as the Host headers it should match.

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAOxC,OAAO,EAA6C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3F,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAgEF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUpD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAWlE;AA+BD;;;;;;;;;;GAUG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+uB9D"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AASxC,OAAO,EAA6C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3F,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAyBF,oDAAoD;AACpD,eAAO,MAAM,SAAS,cAAc,CAAC;AAErC;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAEnE;AA+FD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUpD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAWlE;AA+BD;;;;;;;;;;GAUG;AACH,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAs+B9D"}

package/dist/http.js

@@ -5,9 +5,57 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
 import express, {} from 'express';
 import { Api, MODEL_KEY_HEADER } from './api.js';
+import { APIError } from './errors.js';
 import { MeteredBody } from './http-body.js';
+import { SSH_KEYS } from './paths.js';
 import { createServer, SERVER_NAME, SERVER_VERSION } from './server.js';
 import { toolFilter } from './tool-filters.js';
+/** The OAuth scope the hosted resource asks for. */
+export const MCP_SCOPE = 'mcp:tools';
+/**
+ * The `WWW-Authenticate` value of every OAuth refusal this server makes.
+ *
+ * The same header whether no bearer was sent or the platform refused one: RFC
+ * 9728 §5.1 has a client find the authorization server through
+ * `resource_metadata`, and the MCP authorization spec has it refresh or
+ * re-authorize on any 401 that carries it.
+ */
+export function bearerChallenge(resourceMetadataUrl) {
+    return `Bearer resource_metadata="${resourceMetadataUrl}", scope="${MCP_SCOPE}"`;
+}
+/**
+ * The metadata URL, or a refusal naming the setting.
+ *
+ * It goes inside a quoted-string in a response header, so a quote, a backslash
+ * or a control character would change what the header says — refused rather
+ * than escaped, since no real URL needs one.
+ */
+function checkedMetadataUrl(raw) {
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new Error('MANDALA_MCP_RESOURCE_METADATA_URL is not a URL. Set it to the absolute https URL of ' +
+            'this resource’s OAuth metadata, e.g. https://app.mandala.computer/.well-known/oauth-protected-resource/mcp');
+    }
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
+        throw new Error('MANDALA_MCP_RESOURCE_METADATA_URL must be an http(s) URL.');
+    }
+    // biome-ignore lint/suspicious/noControlCharactersInRegex: refusing them is the point.
+    if (/["\\\u0000-\u001f\u007f\s]/.test(raw)) {
+        throw new Error('MANDALA_MCP_RESOURCE_METADATA_URL contains a quote, backslash, space or control character.');
+    }
+    return raw;
+}
+/** Visible ASCII only: anything else cannot be a header value, and says so here. */
+function checkedServiceSecret(raw) {
+    if (!/^[\x21-\x7e]+$/.test(raw)) {
+        // The value is deliberately not echoed.
+        throw new Error('MANDALA_MCP_SERVICE_SECRET must be printable ASCII with no spaces; it is sent as a header.');
+    }
+    return raw;
+}
 const DEFAULT_TTL_MS = 30 * 60 * 1000;
 /**
  * A ceiling on live sessions.
@@ -142,7 +190,138 @@ export async function runHttp(cfg) {
     // with a generic 500. Validate it before opening the listening socket, using
     // the same constructor and therefore the same rules as every real session.
     new Api('startup-validation-only', cfg.baseUrl);
+    // The hosted install's two settings, checked before the bind for the same
+    // reason. `challenge` being set IS hosted mode: every OAuth-specific answer
+    // below is gated on it, so a server started without the metadata URL behaves
+    // exactly as it did before OPL-4982.
+    const metadataUrl = cfg.resourceMetadataUrl !== undefined ? checkedMetadataUrl(cfg.resourceMetadataUrl) : undefined;
+    const serviceSecret = cfg.serviceSecret !== undefined ? checkedServiceSecret(cfg.serviceSecret) : undefined;
+    const challenge = metadataUrl ? bearerChallenge(metadataUrl) : undefined;
+    /** The POST being answered, so a refused bearer can turn it into a 401. */
+    const heldAnswer = new AsyncLocalStorage();
+    // ---- Checking a bearer with the platform (hosted mode) -----------------
+    //
+    // Initialize makes no platform request, so without this an invented bearer
+    // bought a whole session: 256 of them filled the cap and every real client
+    // was 503'd until the sweep. And a POST's event stream is committed by the
+    // SDK's keep-alive after 15 s, after which a refused token can only end that
+    // call as a tool error. So in hosted mode a bearer is checked before a
+    // session is created for it, and before a POST carrying a request is
+    // dispatched — the latter cached briefly, keyed by the token's digest and
+    // never by the token.
+    const checkTtl = cfg.bearerCheckTtlMs ?? DEFAULT_BEARER_CHECK_TTL_MS;
+    const accepted = new Map();
+    let checksInFlight = 0;
+    /** Whether the platform accepted this bearer within the cache window. */
+    const isAccepted = (key) => {
+        const until = accepted.get(digest(key).toString('hex'));
+        return until !== undefined && until > Date.now();
+    };
+    /**
+     * `ok`: the probe answered 2xx, and only that — the one answer that says the
+     * platform authenticated this credential AND let it act. `refused`: a 401.
+     * `unknown`: anything else — a 403 (a suspended account or a lost
+     * membership), a 404 (the route moved), a 429, a 5xx, a timeout, or this
+     * server already asking about as many bearers as it will at once. Only `ok`
+     * is cached.
+     */
+    // `onStart` runs only when a probe really starts — never for a cached answer
+    // or a full cap — and synchronously, before the first await, so a caller's
+    // bookkeeping and its check against it cannot interleave with another's.
+    const checkBearer = async (key, onStart) => {
+        const id = digest(key).toString('hex');
+        if (isAccepted(key))
+            return 'ok';
+        if (checksInFlight >= MAX_BEARER_CHECKS_IN_FLIGHT)
+            return 'unknown';
+        checksInFlight++;
+        onStart?.();
+        try {
+            const api = new Api(key, cfg.baseUrl, AbortSignal.timeout(BEARER_CHECK_TIMEOUT_MS), {
+                serviceSecret,
+            });
+            // `GET ssh-keys`, chosen because it is the cheapest read that every
+            // valid credential is answered 2xx on. The platform's route table
+            // gives it the lowest role there is (viewer), a workspace-scoped key is
+            // refused only the key WRITES, and the handler lists the caller's own
+            // keys from the control plane without asking any host — so no role a
+            // grant can carry, and no host being down, turns it into a refusal.
+            // `account` is the alternative and costs two fleet inventories. The one
+            // valid credential it does not admit is a suspended account's (403),
+            // which is answered as unconfirmed. It takes no parameters, so none are
+            // sent.
+            await api.json('GET', SSH_KEYS);
+        }
+        catch (err) {
+            return err instanceof APIError && err.status === 401 ? 'refused' : 'unknown';
+        }
+        finally {
+            checksInFlight--;
+        }
+        const now = Date.now();
+        if (accepted.size >= MAX_ACCEPTED_BEARERS) {
+            for (const [k, t] of accepted)
+                if (t <= now)
+                    accepted.delete(k);
+            // Still full: drop the oldest, which Map iteration yields first.
+            if (accepted.size >= MAX_ACCEPTED_BEARERS) {
+                accepted.delete(accepted.keys().next().value);
+            }
+        }
+        accepted.set(id, now + checkTtl);
+        return 'ok';
+    };
+    // Refused initializes per source, in fixed one-minute windows. Kept apart
+    // from the session cap so a flood of invented tokens is turned away before
+    // it asks the platform anything, rather than by starving the pool.
+    const maxFailed = cfg.maxFailedInitializes ?? DEFAULT_MAX_FAILED_INITIALIZES;
+    // `lastProbeAt` lives on the window's entry, so the window's reset restores
+    // the normal budget and forgets the spent-address clock in one step.
+    const failures = new Map();
+    const exhaustedInterval = cfg.exhaustedProbeIntervalMs ?? DEFAULT_EXHAUSTED_PROBE_INTERVAL_MS;
+    const sourceOf = (req) => req.ip ?? req.socket.remoteAddress ?? 'unknown';
+    const overFailureBudget = (req) => {
+        const entry = failures.get(sourceOf(req));
+        if (!entry)
+            return undefined;
+        const now = Date.now();
+        if (entry.resetAt <= now) {
+            failures.delete(sourceOf(req));
+            return undefined;
+        }
+        return entry.count >= maxFailed ? Math.ceil((entry.resetAt - now) / 1000) : undefined;
+    };
+    const noteFailure = (req) => {
+        const source = sourceOf(req);
+        const now = Date.now();
+        const entry = failures.get(source);
+        if (entry && entry.resetAt > now) {
+            entry.count++;
+            return;
+        }
+        if (failures.size >= MAX_FAILURE_SOURCES) {
+            for (const [k, e] of failures)
+                if (e.resetAt <= now)
+                    failures.delete(k);
+            if (failures.size >= MAX_FAILURE_SOURCES) {
+                failures.delete(failures.keys().next().value);
+            }
+        }
+        failures.set(source, { count: 1, resetAt: now + FAILURE_WINDOW_MS });
+    };
+    /** A 401 an OAuth client acts on: authorize, or refresh and try again. */
+    const challenged = (res, message, id = null) => {
+        if (challenge)
+            res.set('WWW-Authenticate', challenge);
+        unauthorized(res, message, id);
+    };
     const app = express();
+    // Hosted mode sits behind a proxy on this machine, and the refused-
+    // initialize budget is per source: without this every caller would be the
+    // proxy's one loopback address, sharing one budget. Only a loopback peer's
+    // X-Forwarded-For is believed, so a direct caller cannot choose its source.
+    if (challenge)
+        app.set('trust proxy', 'loopback');
     // parseBody consumes every POST /mcp body. Every other route deliberately
     // ignores request bodies, so put those requests in flowing mode immediately:
     // leaving bytes unread can strand a keep-alive connection behind one wrong
@@ -548,6 +727,14 @@ export async function runHttp(cfg) {
     app.post('/mcp', parseBody, async (req, res) => {
         const sessionId = req.header('mcp-session-id');
         const key = bearer(req);
+        // Hosted: EVERY request needs a bearer, initialize and tools/list included.
+        // Orgo answers those two anonymously; refusing them is simpler, costs a
+        // client nothing (it authorizes on the first 401 whichever request that
+        // is), and means no McpServer is ever built for a caller with no credential.
+        if (challenge && !key) {
+            releaseLargeBody(res);
+            return challenged(res, NO_TOKEN, rpcId(req));
+        }
         if (sessionId) {
             try {
                 const live = sessions.get(sessionId);
@@ -557,10 +744,36 @@ export async function runHttp(cfg) {
                 // session id travels in a plain header and is the sort of thing that ends
                 // up in a proxy log; on its own it must not be a credential.
                 if (!key || !sameKey(live.keyDigest, key)) {
+                    // Hosted: a different bearer is most often the SAME client after a
+                    // token refresh, and nothing this server can see proves that — an
+                    // access token is opaque, and the refresh token never comes here. So
+                    // the session is not rebound, which would hand its bound computer,
+                    // buffered events and retained results to whoever holds any valid
+                    // credential and the session id. It is answered as unknown instead,
+                    // which is the MCP spec's signal to initialize a new session; the new
+                    // bearer gets a new session, and this one is left to the idle sweep
+                    // (closing it here would let anyone with the id end it).
+                    if (challenge) {
+                        return notFound(res, 'Unknown session. Initialize a new one.', rpcId(req));
+                    }
                     return unauthorized(res, 'This session belongs to a different API key.', rpcId(req));
                 }
+                if (challenge && live.refused)
+                    return challenged(res, TOKEN_REFUSED, rpcId(req));
+                // Checked before a request is dispatched, while the answer can still
+                // be a 401 whatever the call goes on to do. A platform that cannot say
+                // is not a refusal: the call goes ahead, and a real refusal during it
+                // still reaches the client through the held answer or the mark.
+                if (challenge && carriesRequest(req.body) && (await checkBearer(key)) === 'refused') {
+                    live.refused = true;
+                    return challenged(res, TOKEN_REFUSED, rpcId(req));
+                }
                 const lease = res.locals.largeBodyLease;
-                return await requestBodyLease.run(lease, () => serving(live, () => live.transport.handleRequest(req, res, req.body)));
+                const id = rpcId(req);
+                const held = challenge
+                    ? holdAnswer(res, () => challenged(res, TOKEN_REFUSED, id))
+                    : undefined;
+                return await heldAnswer.run(held, () => requestBodyLease.run(lease, () => serving(live, () => live.transport.handleRequest(req, res, req.body))));
             }
             finally {
                 // A verified session is the only request allowed through the large
@@ -587,6 +800,43 @@ export async function runHttp(cfg) {
         const refused = dnsRebindingRefusal(req, hosts, allowedOrigins);
         if (refused)
             return rpcError(res, 403, -32000, refused, rpcId(req));
+        // Hosted: no session for a bearer the platform does not accept. Before the
+        // cap and the reservation, so a refused bearer never holds a slot.
+        if (challenge) {
+            // A spent budget does not close the address. Many clients can share one
+            // (a NAT, an office), and one bad neighbour must not lock out the rest:
+            // a bearer the platform already accepted passes outright, and a new one
+            // still gets a probe — but at most one per interval per spent address,
+            // taken when the probe starts, so the address costs the platform one probe per
+            // interval however hard it pushes, and a valid client there waits at
+            // most one interval. The process-wide cap on probes bounds the total.
+            const spent = !isAccepted(key) && overFailureBudget(req) !== undefined;
+            if (spent) {
+                const entry = failures.get(sourceOf(req));
+                const wait = entry?.lastProbeAt !== undefined ? entry.lastProbeAt + exhaustedInterval - Date.now() : 0;
+                if (wait > 0) {
+                    res.set('Retry-After', String(Math.max(1, Math.ceil(wait / 1000))));
+                    return rpcError(res, 429, -32002, 'Too many refused initializes from this address. Retry later with a valid token.', rpcId(req));
+                }
+            }
+            // The interval is spent only by a probe that starts: a request turned
+            // away because the process-wide cap is full reached nobody, and must not
+            // make the next client at this address wait out an interval for it.
+            const verdict = await checkBearer(key, spent
+                ? () => {
+                    const entry = failures.get(sourceOf(req));
+                    if (entry)
+                        entry.lastProbeAt = Date.now();
+                }
+                : undefined);
+            if (verdict === 'refused') {
+                noteFailure(req);
+                return challenged(res, TOKEN_REFUSED, rpcId(req));
+            }
+            if (verdict === 'unknown') {
+                return unavailable(res, 'The platform could not confirm this token just now. Retry shortly.', rpcId(req));
+            }
+        }
         // Swept sessions free their slot on the timer; this is the backstop for the
         // case the timer cannot help with, which is arrivals faster than the TTL.
         if (sessions.size + pending >= maxSessions) {
@@ -618,6 +868,7 @@ export async function runHttp(cfg) {
         try {
             const t = new StreamableHTTPServerTransport({
                 sessionIdGenerator: () => randomUUID(),
+                ...(cfg.sseKeepAliveMs !== undefined ? { keepAliveMs: cfg.sseKeepAliveMs } : {}),
                 // On whenever there is a list to check against, which for a loopback
                 // bind is always — see `allowedHosts`. A browser cannot be stopped from
                 // resolving a name it controls to 127.0.0.1, so the Host header is the
@@ -635,6 +886,7 @@ export async function runHttp(cfg) {
                         // Initialize is already in flight when the session first becomes
                         // visible to the sweeper. Count it until handleRequest settles.
                         active: 1,
+                        refused: false,
                     };
                     sessions.set(id, live);
                     let held = true;
@@ -680,6 +932,21 @@ export async function runHttp(cfg) {
                 // every call until they run use_computer 404s, and the id of a machine
                 // that is not theirs is named back to them by way of explanation.
                 computerId: undefined,
+                platform: {
+                    serviceSecret,
+                    // Hosted only. Marks the session, so the NEXT request on this bearer
+                    // is refused before dispatch, and turns the request in flight into a
+                    // 401 if nothing of its answer has been sent yet.
+                    onBearerRefused: challenge
+                        ? () => {
+                            const id = t.sessionId;
+                            const live = id ? sessions.get(id) : undefined;
+                            if (live)
+                                live.refused = true;
+                            heldAnswer.getStore()?.refuse();
+                        }
+                        : undefined,
+                },
             });
             mcp = server;
             await server.connect(t);
@@ -717,13 +984,22 @@ export async function runHttp(cfg) {
     // the POST does.
     const bySession = async (req, res) => {
         const sessionId = req.header('mcp-session-id');
+        const key = bearer(req);
+        if (challenge && !key)
+            return challenged(res, NO_TOKEN);
         const live = sessionId ? sessions.get(sessionId) : undefined;
         if (!live)
             return notFound(res, 'Unknown session.');
-        const key = bearer(req);
         if (!key || !sameKey(live.keyDigest, key)) {
+            // As on POST: hosted answers a different bearer as an unknown session.
+            if (challenge)
+                return notFound(res, 'Unknown session.');
             return unauthorized(res, 'This session belongs to a different API key.');
         }
+        // The stream is refused on a token the platform has already refused; a
+        // DELETE is still honoured, since the digest shows it is the holder.
+        if (challenge && live.refused && req.method === 'GET')
+            return challenged(res, TOKEN_REFUSED);
         // The DELETE is a request and is held for; the GET is the notification
         // stream and is only noted. See `serving`.
         if (req.method === 'GET') {
@@ -794,7 +1070,13 @@ export async function runHttp(cfg) {
             const addr = http.address();
             const bound = typeof addr === 'object' && addr ? addr.port : cfg.port;
             boundPort = bound;
-            console.error(`mandala-computer-mcp on http://${cfg.host}:${bound}/mcp — callers authenticate with their own Mandala API key`);
+            console.error(metadataUrl
+                ? `mandala-computer-mcp on http://${cfg.host}:${bound}/mcp — OAuth: callers without a bearer are sent to ${metadataUrl}`
+                : `mandala-computer-mcp on http://${cfg.host}:${bound}/mcp — callers authenticate with their own Mandala API key`);
+            // Said, never shown: whether the secret is set is the useful fact.
+            if (metadataUrl && !serviceSecret) {
+                console.error('  MANDALA_MCP_SERVICE_SECRET is not set — the platform accepts OAuth access tokens only with it, so every tool call will be refused');
+            }
             // Said once, at the only moment anybody is reading. A bind that is not
             // loopback cannot have its legitimate Host values guessed, so the check
             // is off and the operator is the only one who can turn it on — and an
@@ -860,6 +1142,100 @@ export async function runHttp(cfg) {
         http.on('close', teardown);
     });
 }
+const DEFAULT_BEARER_CHECK_TTL_MS = 60_000;
+const DEFAULT_MAX_FAILED_INITIALIZES = 20;
+const DEFAULT_EXHAUSTED_PROBE_INTERVAL_MS = 5_000;
+const FAILURE_WINDOW_MS = 60_000;
+const BEARER_CHECK_TIMEOUT_MS = 10_000;
+/** How many bearers this server will be asking the platform about at once. */
+const MAX_BEARER_CHECKS_IN_FLIGHT = 32;
+const MAX_ACCEPTED_BEARERS = 4096;
+const MAX_FAILURE_SOURCES = 10_000;
+/** Whether a POST body holds a JSON-RPC request, which is what opens a stream. */
+function carriesRequest(body) {
+    const isRequest = (m) => typeof m === 'object' && m !== null && 'method' in m && 'id' in m;
+    return Array.isArray(body) ? body.some(isRequest) : isRequest(body);
+}
+const NO_TOKEN = 'Authorization required. Authorize this client with Mandala (OAuth), or send a Mandala API key: Authorization: Bearer …';
+const TOKEN_REFUSED = 'The platform no longer accepts this access token. Refresh it, or authorize again.';
+/**
+ * Hold a response's status line until its first byte of body (hosted mode).
+ *
+ * A Streamable HTTP POST answers 200 and opens its event stream the moment the
+ * request is dispatched, long before a tool reaches the platform — so a token
+ * the platform refuses could only ever come back as a tool error inside a 200,
+ * which no MCP client treats as "refresh your token". Deferring `writeHead`
+ * and `flushHeaders` until the first write lets that refusal become the 401
+ * the client acts on instead: the platform's 401 is reported before the tool
+ * has produced anything, so the first write finds the answer already refused.
+ *
+ * The first byte of anything — a result, a progress notification, the SDK's
+ * keep-alive comment — commits the stream, and a refusal after that stays a
+ * tool error. The session is marked either way, so the next request carrying
+ * the refused bearer gets the 401 before it is dispatched.
+ */
+function holdAnswer(res, answer401) {
+    const target = res;
+    const names = ['writeHead', 'flushHeaders', 'write', 'end'];
+    const own = Object.fromEntries(names.map((n) => [n, target[n]]));
+    const deferred = [];
+    let state = 'holding';
+    const restore = () => {
+        for (const n of names)
+            target[n] = own[n];
+    };
+    const release = () => {
+        if (state !== 'holding')
+            return;
+        state = 'released';
+        restore();
+        for (const replay of deferred.splice(0))
+            replay();
+    };
+    const refuse = () => {
+        if (state !== 'holding')
+            return;
+        state = 'refused';
+        restore();
+        if (!res.headersSent && !res.writableEnded && !res.destroyed)
+            answer401();
+        // Whatever the transport still writes belongs to the answer that was
+        // replaced, and writing after end would raise an unhandled 'error'.
+        target.writeHead = () => res;
+        target.flushHeaders = () => undefined;
+        target.write = (...args) => {
+            const cb = args.find((a) => typeof a === 'function');
+            cb?.();
+            return true;
+        };
+        target.end = (...args) => {
+            const cb = args.find((a) => typeof a === 'function');
+            cb?.();
+            return res;
+        };
+    };
+    target.writeHead = (...args) => {
+        if (state !== 'holding')
+            return target.writeHead.apply(res, args);
+        deferred.push(() => own.writeHead.apply(res, args));
+        return res;
+    };
+    target.flushHeaders = (...args) => {
+        if (state !== 'holding')
+            return target.flushHeaders.apply(res, args);
+        deferred.push(() => own.flushHeaders.apply(res, args));
+        return undefined;
+    };
+    target.write = (...args) => {
+        release();
+        return target.write.apply(res, args);
+    };
+    target.end = (...args) => {
+        release();
+        return target.end.apply(res, args);
+    };
+    return { refuse };
+}
 /**
  * Whether this request is allowed through the 96mb parser.
  *