mcp-google-multi 6.0.0-alpha.71 → 6.0.0-alpha.72

package/README.md

@@ -44,7 +44,7 @@ New to all this? It's written for someone who just installed Claude Code and has
 5. **Add it to Claude Code, then restart Claude Code:**
 
    ```bash
-   claude mcp add google-multi -s user -- npx -y mcp-google-multi
+   claude mcp add mcp-google-multi -s user -- npx -y mcp-google-multi
    ```
 
 **Stuck at any point? Run `mcp-google-multi doctor`.** It inspects every part and prints the exact fix for anything wrong (a missing sign-in, a Google API you still need to switch on, and so on). Once it reads all-green, just talk to Claude: *"summarize my unread email."*
@@ -55,14 +55,14 @@ New to all this? It's written for someone who just installed Claude Code and has
 
 **Go deeper:** [Configuration reference](./docs/configuration.md) · [What's covered](./COVERAGE.md) · [Features tour](./docs/features.md) · [Remote / HTTP setup](./docs/http-setup.md) · [Secrets in a vault](./docs/secrets.md) · [Local usage metrics](./docs/usage-metrics.md) · [Migrating to v6](./MIGRATION-v6.md) · [Security policy](./SECURITY.md) · [Roadmap](https://github.com/bakissation/mcp-google-multi/milestones)
 
-## Maintainer & credits
+## Maintainer, sponsor & license
 
 Built and maintained by **Abdelbaki Berkati** — [berkati.xyz](https://berkati.xyz) · [@bakissation](https://github.com/bakissation). [Read the case study →](https://berkati.xyz/case-studies/mcp-google-multi/)
 
 Development is **funded by [IdeaCrafters](https://ideacrafters.com)** ([@IdeaCraftersHQ](https://github.com/IdeaCraftersHQ)) — the studio that pays for this OSS to exist.
 
-Thanks to contributors [@obatried](https://github.com/obatried), [@trevor-commits](https://github.com/trevor-commits), and [@mjreddy](https://github.com/mjreddy). The project is maintainer-led (roadmap on [Milestones](https://github.com/bakissation/mcp-google-multi/milestones); bug reports welcome, feature PRs by prior agreement — see [CONTRIBUTING.md](./CONTRIBUTING.md)). **Feedback shapes the roadmap: [open an issue](https://github.com/bakissation/mcp-google-multi/issues/new/choose) with bugs, pain points, or what you wish it did.** Security reports go to [SECURITY.md](./SECURITY.md), never a public issue.
+An Enterprise Edition (hosted, multi-tenant) is available: ask through [berkati.xyz](https://berkati.xyz) (email or LinkedIn there).
 
-## License
+Thanks to contributors [@obatried](https://github.com/obatried), [@trevor-commits](https://github.com/trevor-commits), and [@mjreddy](https://github.com/mjreddy). The project is maintainer-led (roadmap on [Milestones](https://github.com/bakissation/mcp-google-multi/milestones); bug reports welcome, feature PRs by prior agreement — see [CONTRIBUTING.md](./CONTRIBUTING.md)). **Feedback shapes the roadmap: [open an issue](https://github.com/bakissation/mcp-google-multi/issues/new/choose) with bugs, pain points, or what you wish it did.** Security reports go to [SECURITY.md](./SECURITY.md), never a public issue.
 
-[MIT](./LICENSE)
+Licensed under [MIT](./LICENSE).

package/dist/accounts.d.ts

@@ -28,7 +28,7 @@ export declare function getAccountSet(): AccountSet;
 /** Re-resolve after a config.json mutation and swap the live set. */
 export declare function invalidateAccountSet(): AccountSet;
 export declare function refreshAccountSetIfStale(): void;
-/** Cross-process staleness probe (BR-7): one stat, compared against the stamp. */
+/** Cross-process staleness probe: one stat, compared against the stamp. */
 export declare function isAccountSetStale(): boolean;
 /** Account aliases (possibly empty on a fresh install).
  * Snapshot from the initial load; enums widen only when the registry is
@@ -43,7 +43,7 @@ export declare function unknownAliasMessage(aliases: readonly string[], selector
  * The `account` param schema, empty-registry-safe. A `z.enum` requires at least
  * one value, so a fresh install (zero aliases) would throw at schema-build time
  * (module load) and take down every CLI — including `doctor`, which is meant to
- * REPORT the empty registry (gap #23). Fall back to a plain string when there
+ * REPORT the empty registry. Fall back to a plain string when there
  * are no aliases: no alias exists to enumerate, the server refuses to boot empty
  * anyway, and dispatch validates the account against the live set. */
 export declare function accountAliasSchemaFor(aliases: readonly string[]): z.ZodType<string>;
@@ -62,7 +62,7 @@ export declare function liveAccountCheck(aliases: () => readonly string[], selec
 /** True for a field built on liveAccountCheck, optional or not. */
 export declare function isLiveAccountField(field: unknown): boolean;
 /**
- * BR-4: the stdio/http SERVER never boots with an empty registry — a fresh user
+ * The stdio/http SERVER never boots with an empty registry — a fresh user
  * bootstraps via env / `migrate-config` / `account import` / `auth` first. The
  * bootstrap and diagnostic CLIs return before this guard, so it gates only the
  * server path (called from index.ts after the CLI branches). */

package/dist/accounts.js

@@ -67,7 +67,7 @@ function noAccountsMessage() {
         `or set GOOGLE_ACCOUNTS=work:user@company.com,personal:user@gmail.com in the environment.${envHint}`);
 }
 /**
- * Registry resolution (BR-2): a non-empty GOOGLE_ACCOUNTS env takes the WHOLE
+ * Registry resolution: a non-empty GOOGLE_ACCOUNTS env takes the WHOLE
  * registry from env (12-factor override, never merged key-by-key); otherwise
  * the registry comes from config.json. GOOGLE_ADMIN_ACCOUNTS, when NON-EMPTY,
  * overrides per-account admin flags from the file (env var > config field);
@@ -88,7 +88,7 @@ opts = {}) {
     };
     // Validate the legacy global override AT BOOT, whatever GOOGLE_TOOLSETS
     // selects — otherwise a typo only surfaces at dispatch time inside
-    // account_list instead of the promised startup error (BR3).
+    // account_list instead of the promised startup error.
     const legacyNames = parseCsv(env.GOOGLE_OPTIONAL_SCOPES);
     if (legacyNames.length > 0) {
         for (const bundle of resolveBundleAliases(legacyNames)) {
@@ -130,9 +130,9 @@ opts = {}) {
         // Gap #23: an empty registry is NOT fatal at resolve time — the bootstrap and
         // diagnostic CLIs (doctor/reset/account import/migrate-config/config check)
         // must run on a fresh install. Only the stdio/http SERVER refuses to boot
-        // empty (BR-4), enforced by assertServerAccountsConfigured() in index.ts.
+        // empty, enforced by assertServerAccountsConfigured() in index.ts.
         // The dispatch-path reload ('throw') still throws so a mid-session emptied
-        // config.json keeps the last-good registry (BR-7) instead of dropping tools.
+        // config.json keeps the last-good registry instead of dropping tools.
         if (onInvalid === 'throw' && !opts.emptyOk) {
             throw new Error(`E_NO_ACCOUNTS_CONFIGURED: ${noAccountsMessage()}`);
         }
@@ -144,7 +144,7 @@ opts = {}) {
             stamp: `${config?.version ?? CONFIG_VERSION}:${preStamp.split(':')[1]}`,
         };
     }
-    // BR3: unknown bundle names fail loudly (a mis-scoped token is worse than a
+    // Unknown bundle names fail loudly (a mis-scoped token is worse than a
     // clear error); v5 silently filtered them. Null prototype: profile names are
     // user input and must never collide with Object.prototype members.
     const scopeProfiles = Object.create(null);
@@ -187,7 +187,7 @@ opts = {}) {
         ...def,
     };
 }
-/** A2: env GOOGLE_DEFAULT_ACCOUNT > config.defaultAccount > unset. A configured
+/** env GOOGLE_DEFAULT_ACCOUNT > config.defaultAccount > unset. A configured
  * default naming an unknown alias refuses to start (E_DEFAULT_ACCOUNT_UNKNOWN —
  * deliberately NOT E_CONFIG_INVALID: the config is schema-valid). */
 function resolveDefaultAccount(env, fromConfig, aliases, fail) {
@@ -208,7 +208,7 @@ export function fileStamp(filePath, version) {
         return `${version}:0`;
     }
 }
-// First-run shim (BC6): env is set and no config.json exists yet — materialize
+// First-run shim: env is set and no config.json exists yet — materialize
 // the file so the wizard has something to edit. Env still wins this session;
 // a write failure must never block boot (warn on stderr and continue).
 function materializeFirstRun(aliases, configs, filePath) {
@@ -251,7 +251,7 @@ export function invalidateAccountSet() {
     return current;
 }
 /**
- * Dispatch-path reload (BR-7): NEVER exits and never throws — a mid-edit,
+ * Dispatch-path reload: NEVER exits and never throws — a mid-edit,
  * corrupt, or deleted config.json keeps the last-good set and warns once per
  * distinct failure on stderr. failStartup semantics are boot/CLI-only.
  */
@@ -271,7 +271,7 @@ export function refreshAccountSetIfStale() {
         }
     }
 }
-/** Cross-process staleness probe (BR-7): one stat, compared against the stamp. */
+/** Cross-process staleness probe: one stat, compared against the stamp. */
 export function isAccountSetStale() {
     if (current.source !== 'file')
         return false;
@@ -297,7 +297,7 @@ export function unknownAliasMessage(aliases, selectors = false) {
  * The `account` param schema, empty-registry-safe. A `z.enum` requires at least
  * one value, so a fresh install (zero aliases) would throw at schema-build time
  * (module load) and take down every CLI — including `doctor`, which is meant to
- * REPORT the empty registry (gap #23). Fall back to a plain string when there
+ * REPORT the empty registry. Fall back to a plain string when there
  * are no aliases: no alias exists to enumerate, the server refuses to boot empty
  * anyway, and dispatch validates the account against the live set. */
 export function accountAliasSchemaFor(aliases) {
@@ -339,7 +339,7 @@ export function isLiveAccountField(field) {
     return def?.checks?.some((c) => LIVE_ACCOUNT_CHECKS.has(c)) ?? false;
 }
 /**
- * BR-4: the stdio/http SERVER never boots with an empty registry — a fresh user
+ * The stdio/http SERVER never boots with an empty registry — a fresh user
  * bootstraps via env / `migrate-config` / `account import` / `auth` first. The
  * bootstrap and diagnostic CLIs return before this guard, so it gates only the
  * server path (called from index.ts after the CLI branches). */

package/dist/arg-strict.js

@@ -43,7 +43,7 @@ export const STRICT_EXEMPT_TOOLS = new Set();
  * no arguments; the others are call-plumbing that bridges and proxies have
  * been observed to fold into `arguments` instead of `params._meta`, where the
  * spec puts them. Rejecting these would fail a call the model got right.
- * Measured against the full 978-tool surface: none is a declared key. */
+ * Measured against the full tool surface: none is a declared key. */
 const CLIENT_ARTIFACT_KEYS = new Set([
     'random_string',
     'toolCallId',

package/dist/auth.d.ts

@@ -4,7 +4,7 @@ export declare const BASE_SCOPES: string[];
 export declare const OPTIONAL_SCOPE_BUNDLES: Record<string, string[]>;
 export { ADMIN_SCOPES };
 /** Union of every account's resolved bundles: a service registers if ANY
- * account can authorize it; per-account authz happens at call time (BR2). */
+ * account can authorize it; per-account authz happens at call time. */
 export declare function getOptionalBundles(set?: AccountSet): string[];
 /** Aliases granted ADMIN_SCOPES: per-account admin flag (env
  * GOOGLE_ADMIN_ACCOUNTS overrides config.json at resolve) OR the account's

package/dist/auth.js

@@ -32,9 +32,9 @@ function parseCsvEnv(name) {
         .filter(Boolean);
 }
 /**
- * Legacy global override (BC7): a set GOOGLE_OPTIONAL_SCOPES acts as an
+ * Legacy global override: a set GOOGLE_OPTIONAL_SCOPES acts as an
  * implicit "legacy-global" profile applied to every account (env wins over
- * file profiles, cc-config R2). Unknown names now fail loudly (BR3) where v5
+ * file profiles). Unknown names now fail loudly where v5
  * silently dropped them — the intended migration signal.
  */
 function legacyGlobalProfile() {
@@ -65,7 +65,7 @@ function profileForAccount(alias, set = getAccountSet()) {
     return Object.hasOwn(set.scopeProfiles, name) ? set.scopeProfiles[name] : { bundles: [] };
 }
 /** Union of every account's resolved bundles: a service registers if ANY
- * account can authorize it; per-account authz happens at call time (BR2). */
+ * account can authorize it; per-account authz happens at call time. */
 export function getOptionalBundles(set = getAccountSet()) {
     const legacy = legacyGlobalProfile();
     if (legacy)

package/dist/boot-gates.d.ts

@@ -11,7 +11,7 @@ export interface MtBootGates {
 export declare function setMtBootGates(g: MtBootGates | null): void;
 export declare function mtBootGates(): MtBootGates | null;
 export declare function isMultiTenantBoot(): boolean;
-/** BR-4 applies to stdio always, and to HTTP only when single-owner: a
+/** The empty-registry guard applies to stdio always, and to HTTP only when single-owner: a
  * multi-tenant HTTP deploy starts empty by design. */
 export declare function accountsAssertRequired(wantStdio: boolean, multiTenant: boolean): boolean;
 /** A set GOOGLE_ACCOUNTS on a multi-tenant boot is refused at DEPLOY time:

package/dist/boot-gates.js

@@ -1,4 +1,4 @@
-// S1.16: multi-tenant boot gates. The free core never sets these — every
+// Multi-tenant boot gates. The free core never sets these — every
 // helper reduces to today's single-owner behavior when no gates are
 // installed. Deliberately a side-effect-free module (accounts.ts/auth.ts
 // resolve env at import time) so the tenancy module can import it cheaply.
@@ -13,7 +13,7 @@ export function mtBootGates() {
 export function isMultiTenantBoot() {
     return gates?.multiTenant === true;
 }
-/** BR-4 applies to stdio always, and to HTTP only when single-owner: a
+/** The empty-registry guard applies to stdio always, and to HTTP only when single-owner: a
  * multi-tenant HTTP deploy starts empty by design. */
 export function accountsAssertRequired(wantStdio, multiTenant) {
     return wantStdio || !multiTenant;

package/dist/cimd-cache.js

@@ -1,4 +1,4 @@
-// H4 F6: GET /authorize is unauthenticated, and a client_id on an allowlisted
+// GET /authorize is unauthenticated, and a client_id on an allowlisted
 // issuer with a path never seen before forces an outbound fetch. So the
 // fetches running at once are capped, one client_id is fetched once however
 // many requests wait on it, and only a document that passed validation is

package/dist/client-config.d.ts

@@ -38,7 +38,7 @@ export interface EntryOptions {
 }
 /**
  * The client `mcpServers` entry. stdio needs no secret env: the server loads
- * its own .env from ~/.config/mcp-google-multi (cc-config R1), so we never
+ * its own .env from ~/.config/mcp-google-multi, so we never
  * inline MASTER_KEY / GOOGLE_CLIENT_SECRET into a world-readable client config.
  */
 export declare function buildServerEntry(opts: EntryOptions): ServerEntry;
@@ -73,7 +73,7 @@ export type ApplyResult = {
  * the prior file, update-in-place if the key exists.
  */
 export declare function applyFileEntry(client: ClientInfo, name: string, entry: ServerEntry, deps?: ClientDeps): ApplyResult;
-/** Resolve stdio-vs-http mode from the current transport config (B11).
+/** Resolve stdio-vs-http mode from the current transport config.
  * http/both → a `url` entry; stdio → a `command` entry. */
 export declare function resolveMode(httpConfig?: {
     transport: 'stdio' | 'http' | 'both';

package/dist/client-config.js

@@ -1,9 +1,9 @@
-// B15: after the setup wizard finalizes an account, offer to register the
+// After the setup wizard finalizes an account, offer to register the
 // server with the user's MCP client so they never hand-edit JSON. Pure core
 // (detection + entry building + idempotent apply), deps-injectable for tests.
 // Consent + non-TTY behavior live in the CLI/tool surfaces; secrets are NEVER
 // inlined — the server self-loads its .env from ~/.config/mcp-google-multi, so
-// a stdio entry needs no secret env at all (distribution.md B15).
+// a stdio entry needs no secret env at all.
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import * as readline from 'node:readline';
 import path from 'node:path';
@@ -78,7 +78,7 @@ export function detectClients(deps = {}) {
 }
 /**
  * The client `mcpServers` entry. stdio needs no secret env: the server loads
- * its own .env from ~/.config/mcp-google-multi (cc-config R1), so we never
+ * its own .env from ~/.config/mcp-google-multi, so we never
  * inline MASTER_KEY / GOOGLE_CLIENT_SECRET into a world-readable client config.
  */
 export function buildServerEntry(opts) {
@@ -166,7 +166,7 @@ export function applyFileEntry(client, name, entry, deps = {}) {
     r.writeFile(p, `${JSON.stringify(next, null, 2)}\n`);
     return { ok: true, client: client.id, action: had ? 'updated' : 'added', path: p, backup };
 }
-/** Resolve stdio-vs-http mode from the current transport config (B11).
+/** Resolve stdio-vs-http mode from the current transport config.
  * http/both → a `url` entry; stdio → a `command` entry. */
 export function resolveMode(httpConfig) {
     if (httpConfig && (httpConfig.transport === 'http' || httpConfig.transport === 'both')) {

package/dist/compose.js

@@ -1,4 +1,4 @@
-// S1.12: registry composition, extracted from index.ts so the tenancy module
+// Registry composition, extracted from index.ts so the tenancy module
 // (and tests) can build registries without touching the CLI entrypoint. This
 // module must stay free of import-time side effects of its own: no argv
 // parsing, no process.exit, no prints (accounts.js module-load resolution is

package/dist/discover.js

@@ -2,7 +2,7 @@ import { z } from 'zod';
 import { describePolicy } from './write-control.js';
 import { hints } from './hint-provider.js';
 // The description budget is the whole point of lazy mode: a full op list per
-// service put lazy tools/list at ~11.5k tokens (RQ2), so descriptions carry a
+// service put lazy tools/list at ~11.5k tokens, so descriptions carry a
 // CAPPED vocabulary and the complete catalog stays in this tool's RESULT.
 const CURATED_OPS_CAP = 10;
 const GENERATED_GROUPS_CAP = 6;
@@ -31,7 +31,7 @@ function opVocabulary(registry, service) {
 }
 export function registerDiscoverTools(registry, policy) {
     const registerMeta = registry.registerMeta;
-    // Agent-controllable runtime expansion (D3 refinement): reveal the whole
+    // Agent-controllable runtime expansion: reveal the whole
     // curated quality layer for heavy Google work, collapse to reclaim the
     // name/schema context budget after. stdio-only semantics — over stateless
     // HTTP the mode is forced curated and these are no-ops.

package/dist/doctor.d.ts

@@ -52,7 +52,7 @@ export interface HttpProbeResult {
     unreachable?: boolean;
     problem?: string;
 }
-/** Console deep-link to enable one API (section-6 hint, error taxonomy B10). */
+/** Console deep-link to enable one API (section-6 hint). */
 export declare function apiEnableLink(api: string): string;
 /** One line, state AND source, so the people being measured can see both
  * here and in `diagnose` (metrics spec section 2). Read-only. */
@@ -64,7 +64,7 @@ export declare function runDiagnostics(deps?: DiagnosticsDeps, opts?: {
 }): Promise<DiagnosticsReport>;
 /** doctor CLI (brew-doctor style): glyph-coded human report. */
 export declare function renderDoctorText(report: DiagnosticsReport): string;
-/** Redacted, paste-ready bug report (BR8): verdicts + provenance labels + token
+/** Redacted, paste-ready bug report: verdicts + provenance labels + token
  * statuses + slugs; NO token values, secrets, keys, or full email addresses. */
 export declare function renderReport(report: DiagnosticsReport, version: string): string;
 /** Exit non-zero when any section FAILs; with strict, WARN counts too. */

package/dist/doctor.js

@@ -37,7 +37,7 @@ const DEFAULT_DEPS = {
 };
 /** §7 live check: the advertised OAuth metadata must derive from MCP_PUBLIC_URL
  * exactly — one mismatch between PRM `resource` / AS `issuer` and what clients
- * compute from the public URL is the perpetual-401 interop bug (BR4). */
+ * compute from the public URL is the perpetual-401 interop bug. */
 async function probeHttpEndpoints(cfg) {
     try {
         const prmRes = await fetch(`${cfg.publicUrl}/.well-known/oauth-protected-resource`, {
@@ -66,7 +66,7 @@ async function probeHttpEndpoints(cfg) {
         return { ok: false, unreachable: true };
     }
 }
-/** Console deep-link to enable one API (section-6 hint, error taxonomy B10). */
+/** Console deep-link to enable one API (section-6 hint). */
 export function apiEnableLink(api) {
     return `https://console.cloud.google.com/apis/library/${api}.googleapis.com`;
 }
@@ -75,8 +75,8 @@ function sectionRuntime(deps, tenantScope = false) {
     const major = Number.parseInt(deps.nodeVersion.split('.')[0] ?? '0', 10);
     if (!Number.isFinite(major) || major < MIN_NODE_MAJOR) {
         if (tenantScope) {
-            // The host version is operator infrastructure, not the tenant's (E7
-            // residue): no version string, and the fix is the operator's to apply.
+            // The host version is operator infrastructure, not the tenant's: no
+            // version string, and the fix is the operator's to apply.
             const rendered = hints()?.render({ kind: 'operator_only', slug: 'E_NODE_TOO_OLD' });
             return {
                 id: 1,
@@ -240,8 +240,7 @@ async function sectionApiEnablement(deps, aliases, tenantScope = false) {
     }
     catch (e) {
         // Network / transient: WARN with the target, never crash the report. The
-        // raw text can name an egress or proxy host (E7 residue): tenant scope
-        // drops it.
+        // raw text can name an egress or proxy host: tenant scope drops it.
         return {
             id: 6,
             title: 'API enablement',
@@ -381,8 +380,8 @@ export function renderDoctorText(report) {
 }
 const EMAIL_LOCAL_CHAR = /[A-Za-z0-9._%+-]/;
 const EMAIL_DOMAIN_CHAR = /[A-Za-z0-9.-]/;
-/** Mask the local-part of an email so a report never carries a full address
- * (BR8). A linear scan, not a regex: the `local* @domain` pattern backtracks
+/** Mask the local-part of an email so a report never carries a full address.
+ * A linear scan, not a regex: the `local* @domain` pattern backtracks
  * polynomially on long local-charset runs without an @ (CodeQL
  * js/polynomial-redos), and report text can embed arbitrary error strings. */
 function maskEmails(text) {
@@ -409,7 +408,7 @@ function maskEmails(text) {
     }
     return out;
 }
-/** Redacted, paste-ready bug report (BR8): verdicts + provenance labels + token
+/** Redacted, paste-ready bug report: verdicts + provenance labels + token
  * statuses + slugs; NO token values, secrets, keys, or full email addresses. */
 export function renderReport(report, version) {
     const out = [`mcp-google-multi doctor report (v${version})`, `overall: ${report.verdict}`, ''];

package/dist/http-config.d.ts

@@ -11,7 +11,7 @@ export interface HttpConfig {
     transport: Transport;
     host: string;
     port: number;
-    /** Canonical public base URL (BR4): lowercase scheme+host, no default port,
+    /** Canonical public base URL: lowercase scheme+host, no default port,
      *  no trailing slash, no fragment/query. The issuer and every advertised
      *  endpoint derive from this. */
     publicUrl: string;
@@ -27,7 +27,7 @@ export interface HttpConfig {
 export declare function transportIncludesHttp(t: Transport): boolean;
 export declare function resolveTransport(env?: NodeJS.ProcessEnv): Transport;
 /**
- * Canonicalize a public base URL per BR4. WHATWG `URL` already lowercases the
+ * Canonicalize a public base URL. WHATWG `URL` already lowercases the
  * scheme+host and omits a default port from `.host`; this adds the HTTPS-only
  * scheme check, strips fragment/query/userinfo, and removes a trailing slash.
  */

package/dist/http-config.js

@@ -1,7 +1,6 @@
-// Transport selection + public-base-URL / Origin / host config plumbing (B11).
-// Pure, resolved once at boot; the HTTP host that consumes this lands in B12
-// (cc-transport-hosting) and the AS metadata in B13 (oauth-authorization-server).
-// Owns the canonicalization rule (cc-transport-hosting BR4): a single mismatch
+// Transport selection + public-base-URL / Origin / host config plumbing.
+// Pure, resolved once at boot; consumed by the HTTP host and the AS metadata.
+// Owns the canonicalization rule: a single mismatch
 // between the advertised resource URI and the client's `resource`/`aud` = a
 // perpetual 401 loop (the #1 interop bug), so it is normalized exactly once.
 export const DEFAULT_HTTP_HOST = '127.0.0.1';
@@ -30,7 +29,7 @@ export function resolveTransport(env = process.env) {
     throw new HttpConfigError('E_INVALID_TRANSPORT', `MCP_TRANSPORT must be one of stdio|http|both (got "${env.MCP_TRANSPORT}")`);
 }
 /**
- * Canonicalize a public base URL per BR4. WHATWG `URL` already lowercases the
+ * Canonicalize a public base URL. WHATWG `URL` already lowercases the
  * scheme+host and omits a default port from `.host`; this adds the HTTPS-only
  * scheme check, strips fragment/query/userinfo, and removes a trailing slash.
  */

package/dist/http-transport.d.ts

@@ -12,9 +12,9 @@ export type AuthOutcome = {
     body: string;
     headers?: Record<string, string>;
 };
-/** Bearer / owner check for POST /mcp. B12 default = loopback-owner; B13 swaps in JWT verify. */
+/** Bearer / owner check for POST /mcp. Default = loopback-owner; the AS swaps in JWT verify. */
 export type Authenticator = (req: IncomingMessage) => AuthOutcome | Promise<AuthOutcome>;
-/** A mounted extra route (the AS endpoints, B13). Return true if it wrote a response. */
+/** A mounted extra route (the AS endpoints). Return true if it wrote a response. */
 export type RouteHandler = (req: IncomingMessage, res: ServerResponse, url: URL) => boolean | Promise<boolean>;
 /** What a verified subject resolves to: ITS server plus the per-request hooks
  * bound to that server's registry (tool shapes, declared keys, the default
@@ -27,7 +27,7 @@ export interface ServerTarget {
     validationEnvelope?: ValidationEnvelopeOptions;
 }
 export interface HttpHostOptions {
-    /** The ONE McpServer + registry built at boot (P1 / BV gap #4: never per request). */
+    /** The ONE McpServer + registry built at boot (never per request). */
     server: McpServer;
     config: HttpConfig;
     version: string;
@@ -53,7 +53,7 @@ export interface HttpHostOptions {
             message: string;
         };
     };
-    /** Extra routes keyed by exact pathname (AS endpoints mount here in B13). */
+    /** Extra routes keyed by exact pathname (AS endpoints mount here). */
     routes?: Record<string, RouteHandler>;
     log?: (line: string) => void;
     /** Max /mcp JSON body bytes (DoS guard). */
@@ -81,7 +81,7 @@ export interface HttpHostOptions {
 export declare function parseOwnerEmails(env?: NodeJS.ProcessEnv): string[];
 /** Front guard: an Origin, if present, must be allowlisted; a Host must be
  * allowlisted. Absent Origin passes (native/CLI/backend clients — the claude.ai
- * connector calls /mcp server-to-server with no Origin, BV-4). */
+ * connector calls /mcp server-to-server with no Origin). */
 export declare function originAllowed(origin: string | undefined, allowed: string[]): boolean;
 export declare function hostAllowed(host: string | undefined, allowed: string[]): boolean;
 /** JSON-RPC method name(s) for an observability log line: no params, no PII.

package/dist/http-transport.js

@@ -1,8 +1,8 @@
 import { NodeStreamableHTTPServerTransport } from "@modelcontextprotocol/node";
 // node:http server, the route table, the front guard (Host / Origin / DNS-rebind),
 // and the stateless per-request /mcp dispatch. The OAuth AS endpoints and Bearer
-// verification are a seam filled by B13 (oauth-authorization-server); B12 ships a
-// loopback-owner authenticator so the local-HTTP model works before the AS lands.
+// verification are a seam filled by oauth-as.ts; the default is a loopback-owner
+// authenticator so the local-HTTP model works without the AS.
 import { createServer } from 'node:http';
 import { withArgNormalization, withValidationEnvelope } from './arg-normalize.js';
 import { logSafe } from './trim.js';
@@ -16,7 +16,7 @@ const DISPATCH_TIMEOUT_DEFAULT = 120_000;
  * of a batch synchronously in one tick: without a cap one body multiplies the
  * per-call work by however many frames fit in it. */
 const MAX_BATCH_FRAMES = 16;
-// A resolveServer refusal's body reaches the wire verbatim (H3 PR1): validated
+// A resolveServer refusal's body reaches the wire verbatim: validated
 // so a host cannot accidentally leak an operator path/env var through a wrongly
 // shaped slug or an overlong message. No new slug literal enters core itself —
 // the slug is always the host's own value.
@@ -42,7 +42,7 @@ export function parseOwnerEmails(env = process.env) {
 }
 /** Front guard: an Origin, if present, must be allowlisted; a Host must be
  * allowlisted. Absent Origin passes (native/CLI/backend clients — the claude.ai
- * connector calls /mcp server-to-server with no Origin, BV-4). */
+ * connector calls /mcp server-to-server with no Origin). */
 export function originAllowed(origin, allowed) {
     if (!origin)
         return true;
@@ -375,8 +375,8 @@ export class HttpTransportHost {
             return;
         }
         const sub = auth.sub ?? 'owner';
-        // Tenant resolution (the seam EE fills): map the verified subject to ITS
-        // server. Absent resolver = the one boot server for every subject.
+        // Tenant resolution (a multi-tenant host fills this seam): map the
+        // verified subject to ITS server. Absent resolver = the one boot server for every subject.
         let target = {
             server: this.opts.server,
             argShapeFor: this.opts.argShapeFor,
@@ -538,7 +538,7 @@ export class HttpTransportHost {
     health(res) {
         const { config, ownerConfigured, version } = this.opts;
         res.writeHead(200, { 'Content-Type': 'application/json' });
-        // No secrets, no owner emails (cc-transport-hosting /health rule).
+        // No secrets, no owner emails.
         res.end(JSON.stringify({
             status: 'ok',
             transport: config.transport,

package/dist/identity.d.ts

@@ -4,8 +4,8 @@ import { hasToken, readToken, updateToken, writeToken } from './token-store.js';
 import { type Policy, type Transport } from './write-control.js';
 /**
  * The one forward-compat seam (frozen public API): the free core builds
- * exactly one context with subject "owner"; EE later instantiates N contexts
- * from N registries. Nothing here may assume a global current-account.
+ * exactly one context with subject "owner"; a multi-tenant host instantiates
+ * N contexts from N registries. Nothing here may assume a global current-account.
  * `subject` is a string (not the literal 'owner') so a context can carry a
  * tenant id; the free core still always builds 'owner'.
  */

package/dist/identity.js

@@ -11,8 +11,8 @@ export function isOwnerContext(ctx) {
     return ctx !== undefined && ownerContexts.has(ctx);
 }
 export function buildIdentityContext(env = process.env, opts = {}) {
-    // Real closures over the single-owner state (the SAME factories EE
-    // instantiates per tenant), bound here to the global registry + token dir —
+    // Real closures over the single-owner state (the SAME factories a
+    // multi-tenant host instantiates per tenant), bound here to the global registry + token dir —
     // behavior-identical to the module-level functions for the free core.
     const tokenStore = createTokenStore(getTokenDir());
     const ctx = {
@@ -22,8 +22,8 @@ export function buildIdentityContext(env = process.env, opts = {}) {
         get accounts() {
             return getAccountSet();
         },
-        // The dispatch transport rides into the resolved policy as a reserved seam
-        // (cc-write-control B14); it does not change any write-control verdict.
+        // The dispatch transport rides into the resolved policy as a reserved seam;
+        // it does not change any write-control verdict.
         policy: resolvePolicy(env, { transport: opts.transport }),
         getClient: makeGetClient('owner', {
             accounts: getAccountSet,

package/dist/index.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 // First import: triggers accounts.js module load (env files + registry) before
-// anything else. Named to also pull the server-only empty-registry guard (BR-4).
+// anything else. Named to also pull the server-only empty-registry guard.
 import { assertServerAccountsConfigured } from './accounts.js';
 import { accountsAssertRequired, assertNoEnvAccountsMode, assertNoEnvOptionalScopesMode, isMultiTenantBoot, mtBootGates } from './boot-gates.js';
 import { readFileSync } from 'node:fs';
@@ -139,7 +139,7 @@ async function main() {
     }
     const wantStdio = httpCfg.transport === 'stdio' || httpCfg.transport === 'both';
     const wantHttp = transportIncludesHttp(httpCfg.transport);
-    // BR-4: the SERVER never boots with an empty registry — stdio always, HTTP
+    // The SERVER never boots with an empty registry — stdio always, HTTP
     // when single-owner. The bootstrap and diagnostic CLIs above already
     // returned. A multi-tenant boot instead refuses the two process-wide env
     // vectors that would leak one operator's accounts/scopes into every tenant.
@@ -186,8 +186,8 @@ async function main() {
             });
         }
     }
-    // Build one McpServer + registry per transport at boot (P1 / BV gap #4:
-    // never rebuilt per request); `both` runs the two concurrently.
+    // Build one McpServer + registry per transport at boot (never
+    // rebuilt per request); `both` runs the two concurrently.
     if (wantStdio) {
         const server = createMcpServer(pkg.version);
         const stdioMetrics = initMetricsFor('stdio', resolveDiscoveryMode());
@@ -226,14 +226,14 @@ async function main() {
             gates.assertProvisioningGate();
         }
         else {
-            // BR3 / C13: the owner allowlist is the entire multi-tenant collapse;
+            // The owner allowlist is the entire multi-tenant collapse;
             // refuse to open an ungated HTTP endpoint.
             if (owners.length === 0) {
                 process.stderr.write('E_OWNER_EMAILS_REQUIRED: MCP_TRANSPORT includes http but MCP_OWNER_EMAILS is empty. Set MCP_OWNER_EMAILS to the Google email(s) allowed to authenticate.\n');
                 process.exit(1);
             }
         }
-        // BR7: stateless HTTP cannot push tools/list_changed, so it forces curated.
+        // Stateless HTTP cannot push tools/list_changed, so it forces curated.
         const configuredMode = (process.env.GOOGLE_DISCOVERY ?? '').trim().toLowerCase();
         if (configuredMode && configuredMode !== 'curated') {
             process.stderr.write(`GOOGLE_DISCOVERY="${configuredMode}" is ignored over HTTP; the stateless transport forces "curated".\n`);
@@ -244,7 +244,7 @@ async function main() {
         const registry = buildRegistry(httpServer, httpCtx, 'curated', httpMetrics);
         registry.installListHandler();
         registerSetupPrompt(httpServer);
-        // B13: mount the OAuth 2.1 AS (legs A + B) + the Bearer authenticator.
+        // Mount the OAuth 2.1 AS (MCP-client tokens + owner login) + the Bearer authenticator.
         const { buildAuthServer, verifiedEmailFromIdToken } = await import('./oauth-as.js');
         const { jwtSecretFrom } = await import('./mcp-token.js');
         const { resolveJwtKey, resolveMasterKeyForDispatch } = await import('./master-key.js');
@@ -287,7 +287,7 @@ async function main() {
             aliasEmail: (alias) => getAccountSet().configs[alias]?.email,
             log: (l) => process.stderr.write(`[as] ${l}\n`),
         });
-        // BV-1: over HTTP, a dead/missing per-account token surfaces a clickable,
+        // Over HTTP, a dead/missing per-account token surfaces a clickable,
         // signed re-auth link into the AS's alias_reauth flow instead of a CLI hint.
         const { setHttpReauthLink } = await import('./reauth-hint.js');
         setHttpReauthLink((alias) => authServer.reauthLink(alias));
@@ -313,7 +313,7 @@ async function main() {
         });
         await host.start();
         process.stderr.write(`HTTP transport listening on http://${httpCfg.host}:${httpCfg.port} (public ${httpCfg.publicUrl})\n`);
-        // Graceful shutdown so `docker run --init` (B16) forwards SIGTERM cleanly.
+        // Graceful shutdown so `docker run --init` forwards SIGTERM cleanly.
         const shutdown = () => {
             host.close().finally(() => process.exit(0));
         };