trellis 3.2.2 → 3.2.4

package/dist/remote-manager-WGLCAMMC.js

@@ -0,0 +1,224 @@
+import {
+  TrellisVcsEngine,
+  init_engine
+} from "./chunk-UH7TZAN7.js";
+import "./chunk-NLFRRGX6.js";
+import "./chunk-G3XIHPSQ.js";
+import "./chunk-YKVB4LUQ.js";
+import "./chunk-547FZFKO.js";
+import "./chunk-GRWQPKYK.js";
+import "./chunk-2ESYSVXG.js";
+
+// src/federation/remote-manager.ts
+init_engine();
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join, resolve } from "path";
+var RemoteManager = class {
+  trellisPath;
+  remotesPath;
+  constructor(trellisPath) {
+    this.trellisPath = trellisPath;
+    this.remotesPath = join(trellisPath, "remotes.json");
+  }
+  /** Load remotes configuration */
+  loadRemotes() {
+    if (!existsSync(this.remotesPath)) {
+      return { remotes: {} };
+    }
+    try {
+      const content = readFileSync(this.remotesPath, "utf8");
+      return JSON.parse(content);
+    } catch (error) {
+      throw new Error(`Failed to load remotes config: ${error}`);
+    }
+  }
+  /** Save remotes configuration */
+  saveRemotes(config) {
+    try {
+      if (!existsSync(this.trellisPath)) {
+        mkdirSync(this.trellisPath, { recursive: true });
+      }
+      writeFileSync(this.remotesPath, JSON.stringify(config, null, 2), "utf8");
+    } catch (error) {
+      throw new Error(`Failed to save remotes config: ${error}`);
+    }
+  }
+  /** Add a new remote */
+  addRemote(name, path) {
+    const config = this.loadRemotes();
+    if (config.remotes[name]) {
+      throw new Error(`Remote '${name}' already exists`);
+    }
+    const resolvedPath = resolve(path);
+    if (!TrellisVcsEngine.isRepo(resolvedPath)) {
+      throw new Error(`Not a TrellisVCS repository: ${resolvedPath}`);
+    }
+    config.remotes[name] = {
+      name,
+      path: resolvedPath
+    };
+    this.saveRemotes(config);
+  }
+  /** Remove a remote */
+  removeRemote(name) {
+    const config = this.loadRemotes();
+    if (!config.remotes[name]) {
+      throw new Error(`Remote '${name}' not found`);
+    }
+    delete config.remotes[name];
+    this.saveRemotes(config);
+  }
+  /** List all remotes */
+  listRemotes() {
+    const config = this.loadRemotes();
+    return Object.values(config.remotes);
+  }
+  /** Pull new ops from a specific remote */
+  async pullRemote(remoteName, localEngine) {
+    const startTime = Date.now();
+    const config = this.loadRemotes();
+    const remote = config.remotes[remoteName];
+    if (!remote) {
+      throw new Error(`Remote '${remoteName}' not found`);
+    }
+    const errors = [];
+    let newOps = 0;
+    let latestOpId = remote.lastOpId || "";
+    try {
+      const remoteEngine = new TrellisVcsEngine({ rootPath: remote.path });
+      remoteEngine.open();
+      const remoteOps = remoteEngine.getOps();
+      if (remoteOps.length === 0) {
+        return {
+          remote: remoteName,
+          newOps: 0,
+          latestOpId: "",
+          durationMs: Date.now() - startTime,
+          errors: []
+        };
+      }
+      const lastOpHash = remote.lastOpId;
+      let startIndex = 0;
+      if (lastOpHash) {
+        startIndex = remoteOps.findIndex((op) => op.hash === lastOpHash);
+        if (startIndex === -1) {
+          startIndex = 0;
+          errors.push(
+            `Last op hash ${lastOpHash} not found in remote, pulling all ops`
+          );
+        } else {
+          startIndex++;
+        }
+      }
+      const opsToPull = remoteOps.slice(startIndex);
+      if (opsToPull.length > 0) {
+        const prefixedOps = opsToPull.map(
+          (op) => this.prefixOpEntities(op, remoteName)
+        );
+        for (const op of prefixedOps) {
+          localEngine.opLog.append(op);
+          newOps++;
+        }
+        latestOpId = remoteOps[remoteOps.length - 1].hash;
+      }
+      remote.lastOpId = latestOpId;
+      remote.pulledAt = (/* @__PURE__ */ new Date()).toISOString();
+      this.saveRemotes(config);
+    } catch (error) {
+      errors.push(`Failed to pull from remote: ${error}`);
+    }
+    return {
+      remote: remoteName,
+      newOps,
+      latestOpId,
+      durationMs: Date.now() - startTime,
+      errors
+    };
+  }
+  /** Pull from all configured remotes */
+  async pullAll(localEngine) {
+    const config = this.loadRemotes();
+    const remoteNames = Object.keys(config.remotes);
+    if (remoteNames.length === 0) {
+      return {
+        results: [],
+        totalNewOps: 0,
+        totalDurationMs: 0
+      };
+    }
+    const startTime = Date.now();
+    const results = [];
+    let totalNewOps = 0;
+    for (const remoteName of remoteNames) {
+      try {
+        const result = await this.pullRemote(remoteName, localEngine);
+        results.push(result);
+        totalNewOps += result.newOps;
+      } catch (error) {
+        results.push({
+          remote: remoteName,
+          newOps: 0,
+          latestOpId: "",
+          durationMs: 0,
+          errors: [`Failed to pull: ${error}`]
+        });
+      }
+    }
+    return {
+      results,
+      totalNewOps,
+      totalDurationMs: Date.now() - startTime
+    };
+  }
+  /** Prefix entity IDs in operations with remote name */
+  prefixOpEntities(op, remoteName) {
+    const prefixed = { ...op };
+    if (op.vcs) {
+      const vcs = { ...op.vcs };
+      if (vcs.issueId && !vcs.issueId.includes(":")) {
+        vcs.issueId = `${remoteName}:${vcs.issueId}`;
+      }
+      if (vcs.parentIssueId && !vcs.parentIssueId.includes(":")) {
+        vcs.parentIssueId = `${remoteName}:${vcs.parentIssueId}`;
+      }
+      if (vcs.blockedByIssueId && !vcs.blockedByIssueId.includes(":")) {
+        vcs.blockedByIssueId = `${remoteName}:${vcs.blockedByIssueId}`;
+      }
+      if (vcs.decisionId && !vcs.decisionId.includes(":")) {
+        vcs.decisionId = `${remoteName}:${vcs.decisionId}`;
+      }
+      prefixed.vcs = vcs;
+    }
+    if (op.facts) {
+      prefixed.facts = op.facts.map((fact) => {
+        if (fact.e === "entity" && fact.a === "id" && typeof fact.v === "string" && !fact.v.includes(":")) {
+          return { ...fact, v: `${remoteName}:${fact.v}` };
+        }
+        if (fact.e === "entity" && fact.a === "from" && typeof fact.v === "string" && !fact.v.includes(":")) {
+          return { ...fact, v: `${remoteName}:${fact.v}` };
+        }
+        if (fact.e === "entity" && fact.a === "to" && typeof fact.v === "string" && !fact.v.includes(":")) {
+          return { ...fact, v: `${remoteName}:${fact.v}` };
+        }
+        return fact;
+      });
+    }
+    if (op.links) {
+      prefixed.links = op.links.map((link) => ({
+        ...link,
+        e1: link.e1.includes(":") ? link.e1 : `${remoteName}:${link.e1}`,
+        e2: link.e2.includes(":") ? link.e2 : `${remoteName}:${link.e2}`
+      }));
+    }
+    if (!prefixed.facts) prefixed.facts = [];
+    prefixed.facts.push({
+      e: "op",
+      a: "remote",
+      v: remoteName
+    });
+    return prefixed;
+  }
+};
+export {
+  RemoteManager
+};

package/dist/scaffold/write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/scaffold/write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,OAAO,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,SAAS,GACT,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AACjE,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,KAAK,GACL,QAAQ,GACR,MAAM,GACN,MAAM,GACN,UAAU,GACV,MAAM,GACN,KAAK,GACL,MAAM,GACN,KAAK,GACL,SAAS,GACT,WAAW,GACX,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,kBAAkB,CAAC;IAC9B,SAAS,EAAE,aAAa,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AA8QD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,aAAa,GACnB,IAAI,CAoCN;AAq4BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,gBAAgB,GACtB,IAAI,CA4IN"}
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../src/scaffold/write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAMhD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,OAAO,GACf,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,SAAS,GACT,OAAO,GACP,QAAQ,GACR,MAAM,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AACjE,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,KAAK,GACL,QAAQ,GACR,MAAM,GACN,MAAM,GACN,UAAU,GACV,MAAM,GACN,KAAK,GACL,MAAM,GACN,KAAK,GACL,SAAS,GACT,WAAW,GACX,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,kBAAkB,CAAC;IAC9B,SAAS,EAAE,aAAa,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AAuRD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,aAAa,GACnB,IAAI,CAoCN;AA83BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,gBAAgB,GACtB,IAAI,CA4IN"}

package/dist/schema/index.js

@@ -23,7 +23,7 @@ import {
   resolveRelations,
   whereCondition
 } from "../chunk-JUEMDWLU.js";
-import "../chunk-KFQGP6VL.js";
+import "../chunk-2ESYSVXG.js";
 export {
   bindingEntityId,
   bindingToEntity,

package/dist/server/cors.d.ts

@@ -0,0 +1,13 @@
+/**
+ * CORS for browser clients hitting a remote room node (TurtleDB Cloud C0 / deploy).
+ *
+ * Enabled when `TRELLIS_CORS_ORIGINS` is set, or when the server uses an API key
+ * (typical deployed Sprite). Set `TRELLIS_CORS_ORIGINS=*` to allow any origin.
+ *
+ * @module trellis/server
+ */
+export declare function corsEnabledForConfig(apiKey?: string): boolean;
+export declare function corsHeaders(req: Request): Record<string, string>;
+export declare function withCors(req: Request, res: Response): Response;
+export declare function corsPreflightResponse(req: Request): Response;
+//# sourceMappingURL=cors.d.ts.map

package/dist/server/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/server/cors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAE7D;AAQD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBhE;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,QAAQ,CAU9D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,CAK5D"}

package/dist/server/deploy-gateway.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Deploy Trellis MCP discovery gateway to Sprites.
+ *
+ * Provisions a lightweight Sprite running `startGatewayServer` — no room kernel.
+ * Writes `.trellis-mcp-gateway.json` and uploads `.trellis-rooms.json` for discovery.
+ *
+ * @module trellis/server
+ */
+export interface DeployGatewayOptions {
+    name: string;
+    /** Vanity URL printed to agents (default: https://mcp.trellis.computer). */
+    publicUrl?: string;
+    port?: number;
+    configDir?: string;
+    /** Extra rooms JSON file (merged with local registry at deploy time). */
+    roomsFile?: string;
+    onProgress?: (msg: string) => void;
+    stub?: boolean;
+}
+export interface DeployGatewayResult {
+    url: string;
+    publicUrl: string;
+    name: string;
+    roomCount: number;
+}
+export declare function deployMcpGateway(opts: DeployGatewayOptions): Promise<DeployGatewayResult>;
+//# sourceMappingURL=deploy-gateway.d.ts.map

package/dist/server/deploy-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-gateway.d.ts","sourceRoot":"","sources":["../../src/server/deploy-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA8BH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAqH9B"}

package/dist/server/deploy.d.ts

@@ -10,7 +10,7 @@
  *   1. Bundle the server entrypoint with Bun
  *   2. Create or wake the target Sprite via `sprite exec`
  *   3. Upload the bundle + SQLite file (if seeding)
- *   4. Install dependencies and start the server as a detached session
+ *   4. Install Bun and register the server via `sprite-env services` (port 8080)
  *   5. Write the resulting URL + API key back to .trellis-db.json
  *
  * Prerequisites:

package/dist/server/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/server/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAwBH,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAqFvE"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/server/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA2BH,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAsB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA4FvE"}

package/dist/server/deploy.js

@@ -0,0 +1,10 @@
+import {
+  deploy
+} from "../chunk-YPT6XMS4.js";
+import "../chunk-3XCOAP6G.js";
+import "../chunk-CAG4FULI.js";
+import "../chunk-JA7AIHRK.js";
+import "../chunk-2ESYSVXG.js";
+export {
+  deploy
+};

package/dist/server/discovery-mcp-gateway.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Discovery MCP gateway — room list / connect tools.
+ *
+ * @module trellis/server
+ */
+import { type DiscoveryMcpContext } from '../mcp/discovery.js';
+export declare class DiscoveryMcpGateway {
+    private gateway;
+    handle(req: Request, ctx: DiscoveryMcpContext): Promise<Response>;
+    close(): Promise<void>;
+}
+export declare const discoveryMcpGateway: DiscoveryMcpGateway;
+//# sourceMappingURL=discovery-mcp-gateway.d.ts.map

package/dist/server/discovery-mcp-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery-mcp-gateway.d.ts","sourceRoot":"","sources":["../../src/server/discovery-mcp-gateway.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAG7B,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAA8B;IAEvC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIjE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED,eAAO,MAAM,mBAAmB,qBAA4B,CAAC"}

package/dist/server/index.js

@@ -1,25 +1,8 @@
+import "../chunk-JAVAYMMS.js";
 import {
   attachRealtimeRelay,
   createRealtimeRelay
-} from "../chunk-PZ4XYZ4J.js";
-import {
-  getActiveSprite,
-  getSprite,
-  isSpriteTracked,
-  loadVmConfig,
-  saveVmConfig,
-  setActiveSprite,
-  trackSprite,
-  untrackSprite
-} from "../chunk-UZRUP7QW.js";
-import {
-  DeployNameError,
-  SPRITE_PUBLIC_HTTP_PORT,
-  buildDeployUrl,
-  deploy,
-  normalizeDeployName,
-  validateDeployName
-} from "../chunk-7ZFRVCUE.js";
+} from "../chunk-GXA73CNC.js";
 import {
   ADMIN_ONLY,
   ANONYMOUS,
@@ -31,28 +14,28 @@ import {
   PermissionError,
   PermissionRegistry,
   SubscriptionManager,
-  UsageMeter,
   buildOAuthUrl,
-  dayKey,
   exchangeOAuthCode,
   resolveAuth,
-  resolveUsageTenantId,
-  sampleTenantStorage,
   signJwt,
   startServer,
   startServerCrossRuntime,
-  verifyAdminKey,
   verifyJwt
-} from "../chunk-2W3MHTMG.js";
-import {
-  DEFAULT_TENANT,
-  TenantPool,
-  resolvePoolBackendFromEnv
-} from "../chunk-JHHEXEDM.js";
+} from "../chunk-SJWVDS5M.js";
 import {
   importFile,
   importRecords
-} from "../chunk-MLC5BUYO.js";
+} from "../chunk-WMERMSWI.js";
+import {
+  deploy
+} from "../chunk-YPT6XMS4.js";
+import {
+  DeployNameError,
+  SPRITE_PUBLIC_HTTP_PORT,
+  buildDeployUrl,
+  normalizeDeployName,
+  validateDeployName
+} from "../chunk-3XCOAP6G.js";
 import {
   SPRITE_ENSURE_BUN_SH,
   assertSpriteCli,
@@ -66,17 +49,41 @@ import {
   runSpriteExec,
   runSpriteInteractive
 } from "../chunk-CAG4FULI.js";
+import "../chunk-53PDCTJ3.js";
+import {
+  UsageMeter,
+  dayKey,
+  resolveUsageTenantId,
+  sampleTenantStorage,
+  verifyAdminKey
+} from "../chunk-CMSFD6OV.js";
+import {
+  DEFAULT_TENANT,
+  TenantPool,
+  resolvePoolBackendFromEnv
+} from "../chunk-GCQF75T4.js";
+import "../chunk-YC5I32PS.js";
+import {
+  getActiveSprite,
+  getSprite,
+  isSpriteTracked,
+  loadVmConfig,
+  saveVmConfig,
+  setActiveSprite,
+  trackSprite,
+  untrackSprite
+} from "../chunk-UZRUP7QW.js";
 import "../chunk-JA7AIHRK.js";
 import "../chunk-44FFQKQX.js";
 import "../chunk-JUEMDWLU.js";
-import "../chunk-SPSPV5BC.js";
 import "../chunk-X5FLTRUB.js";
-import "../chunk-XMQ7G77X.js";
-import "../chunk-KQ4A2D2P.js";
+import "../chunk-SZ3VAB5P.js";
+import "../chunk-OB4CMMX6.js";
+import "../chunk-V4YCJDYL.js";
 import "../chunk-6CTA6MCE.js";
-import "../chunk-4XIVMVHC.js";
-import "../chunk-GFZCJ4EH.js";
-import "../chunk-KFQGP6VL.js";
+import "../chunk-G3XIHPSQ.js";
+import "../chunk-KXAISKZT.js";
+import "../chunk-2ESYSVXG.js";
 export {
   ADMIN_ONLY,
   ANONYMOUS,

package/dist/server/mcp-gateway.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Streamable HTTP MCP gateway for Trellis room graph tools.
+ *
+ * @module trellis/server
+ */
+import type { AuthContext } from './auth.js';
+import type { PermissionRegistry } from './permissions.js';
+import type { SubscriptionManager } from './realtime.js';
+import type { TenantPool } from './tenancy.js';
+import type { UsageMeter } from './usage-meter.js';
+import type { TrellisDbConfig } from '../client/config.js';
+export interface McpGatewayRouteCtx {
+    pool: TenantPool;
+    permissions: PermissionRegistry | null;
+    subs: SubscriptionManager;
+    meter: UsageMeter;
+    authConfig: import('./auth.js').AuthConfig;
+    config: TrellisDbConfig;
+}
+export declare class RoomMcpGateway {
+    private gateway;
+    handle(req: Request, ctx: McpGatewayRouteCtx, auth: AuthContext, tenantId: string | null): Promise<Response>;
+    close(): Promise<void>;
+}
+/** Shared gateway instance for the process lifetime. */
+export declare const roomMcpGateway: RoomMcpGateway;
+//# sourceMappingURL=mcp-gateway.d.ts.map

package/dist/server/mcp-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-gateway.d.ts","sourceRoot":"","sources":["../../src/server/mcp-gateway.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACvC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,OAAO,WAAW,EAAE,UAAU,CAAC;IAC3C,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAA8B;IAEvC,MAAM,CACV,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,kBAAkB,EACvB,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,QAAQ,CAAC;IAed,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED,wDAAwD;AACxD,eAAO,MAAM,cAAc,gBAAuB,CAAC"}

package/dist/server/mcp-oauth-metadata.d.ts

@@ -0,0 +1,31 @@
+/**
+ * OAuth metadata for MCP clients (ChatGPT Connectors, Claude web, etc.).
+ *
+ * Room servers issue JWTs via /auth/oauth/* and accept Bearer JWT on /mcp.
+ *
+ * @module trellis/server
+ */
+import type { AuthConfig } from './auth.js';
+export declare function oauthProtectedResourceMetadata(origin: string, resourcePath?: string): {
+    resource: string;
+    authorization_servers: string[];
+    bearer_methods_supported: string[];
+    scopes_supported: string[];
+};
+export declare function oauthAuthorizationServerMetadata(origin: string, providers?: string[]): {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    registration_endpoint: string;
+    scopes_supported: string[];
+    response_types_supported: string[];
+    grant_types_supported: string[];
+    code_challenge_methods_supported: string[];
+    mcp_resource: string;
+    oauth_providers: {
+        name: string;
+        authorization_endpoint: string;
+    }[];
+};
+export declare function mcpServiceDocument(origin: string, authConfig: AuthConfig): Record<string, unknown>;
+//# sourceMappingURL=mcp-oauth-metadata.d.ts.map

package/dist/server/mcp-oauth-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-metadata.d.ts","sourceRoot":"","sources":["../../src/server/mcp-oauth-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,SAAS;;;;;EAQnF;AAED,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,MAAM,EAAyB;;;;;;;;;;;;;;EAkB3C;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,UAAU,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB"}

package/dist/server/node-adapter.d.ts

@@ -25,6 +25,13 @@ export interface NodeAdapterOptions {
         message: (ws: WsLike, data: string | Buffer) => void | Promise<void>;
         close: (ws: WsLike) => void;
     };
+    /**
+     * Mount a presence relay on `/rt` (or custom path). Coexists with the graph
+     * subscription socket at `/realtime` when upgrades are path-scoped.
+     */
+    attachPresenceRelay?: boolean | {
+        path?: string;
+    };
 }
 /**
  * Minimal interface satisfied by both Bun's WebSocket and the `ws` library's

package/dist/server/node-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-adapter.d.ts","sourceRoot":"","sources":["../../src/server/node-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,wDAAwD;IACxD,SAAS,EAAE;QACT,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;KAC7B,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CA6D5B"}
+{"version":3,"file":"node-adapter.d.ts","sourceRoot":"","sources":["../../src/server/node-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3C,wDAAwD;IACxD,SAAS,EAAE;QACT,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;KAC7B,CAAC;IACF;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED;;;GAGG;AACH,MAAM,WAAW,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CAwE5B"}

package/dist/server/node-adapter.js

@@ -1,8 +1,8 @@
 import {
   init_node_adapter,
   startNodeServer
-} from "../chunk-TCKXSOBP.js";
-import "../chunk-KFQGP6VL.js";
+} from "../chunk-RARKFVWU.js";
+import "../chunk-2ESYSVXG.js";
 init_node_adapter();
 export {
   startNodeServer

package/dist/server/realtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../src/server/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAM3D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACtC,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAMrB;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,KAAK,CAAoB;gBAG/B,IAAI,EAAE,UAAU,EAChB,WAAW,GAAE,kBAAkB,GAAG,IAAW,EAC7C,KAAK,GAAE,UAAU,GAAG,IAAW;IAWjC,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAClB,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,IAAI;IAUP,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ9B,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCjE;;;OAGG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBpD,IAAI,WAAW,IAAI,MAAM,CAExB;YAMa,gBAAgB;YAqEhB,WAAW;IA2CzB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;CAYd"}
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../src/server/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAM3D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACtC,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GACD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAMrB;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,KAAK,CAAoB;gBAG/B,IAAI,EAAE,UAAU,EAChB,WAAW,GAAE,kBAAkB,GAAG,IAAW,EAC7C,KAAK,GAAE,UAAU,GAAG,IAAW;IAWjC,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAClB,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,IAAI;IAUP,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ9B,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCjE;;;OAGG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBpD,IAAI,WAAW,IAAI,MAAM,CAExB;YAMa,gBAAgB;YAyEhB,WAAW;IA2CzB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,KAAK;CAYd"}

package/dist/server/server.d.ts

@@ -9,6 +9,7 @@
  *   PUT    /entities/:id               Update entity attributes
  *   DELETE /entities/:id               Delete entity
  *   GET    /entities?type=&limit=&offset=  List entities
+ *   GET    /ops?kind=&limit=&offset=       List causal ops (newest last in page)
  *   POST   /query                      EQL-S query
  *   POST   /upload                     File upload → blob hash
  *   GET    /files/:hash                Download blob
@@ -24,6 +25,9 @@
  * WebSocket:
  *   GET    /realtime                   Upgrade to WebSocket for subscriptions
  *
+ * MCP (Streamable HTTP):
+ *   GET/POST/DELETE /mcp               Remote graph query/CRUD for AI agents
+ *
  * @module trellis/server
  */
 import type { TrellisDbConfig } from '../client/config.js';
@@ -37,6 +41,10 @@ export interface ServerConfig {
     pool: TenantPool;
     permissions?: PermissionRegistry;
     oauthProviders?: Record<string, import('./auth.js').OAuthProvider>;
+    /** Mount a cross-browser presence relay at `/rt` on the same HTTP server. */
+    presenceRelay?: boolean | {
+        path?: string;
+    };
 }
 /**
  * Start the Trellis DB HTTP + WebSocket server.

package/dist/server/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAcH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAU/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAQ3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAM5D,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,WAAW,EAAE,aAAa,CAAC,CAAC;CACpE;AAMD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAE5B;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oBAAc,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAcH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAU/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAQ3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAkB5D,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,WAAW,EAAE,aAAa,CAAC,CAAC;IACnE,6EAA6E;IAC7E,aAAa,CAAC,EAAE,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAMD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAE5B;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oBAAc,CAAC"}

package/dist/server/streamable-mcp-gateway.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Streamable HTTP MCP gateway — shared session transport for room + discovery.
+ *
+ * @module trellis/server
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare class StreamableMcpGateway {
+    private sessions;
+    handle(req: Request, createServer: () => McpServer | Promise<McpServer>): Promise<Response>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=streamable-mcp-gateway.d.ts.map

package/dist/server/streamable-mcp-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-mcp-gateway.d.ts","sourceRoot":"","sources":["../../src/server/streamable-mcp-gateway.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAsBzE,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAmC;IAE7C,MAAM,CACV,GAAG,EAAE,OAAO,EACZ,YAAY,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,GACjD,OAAO,CAAC,QAAQ,CAAC;IAkDd,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAM7B"}

package/dist/server/usage-meter.d.ts

@@ -22,6 +22,11 @@ export interface TenantUsageSnapshot {
 }
 export interface UsageMeterOptions {
     now?: () => Date;
+    /** Daily graph I/O cap per tenant (0 = unlimited). Env: TRELLIS_MCP_GRAPH_IO_LIMIT */
+    graphIoLimit?: number;
+}
+export declare class McpRateLimitError extends Error {
+    constructor(message: string);
 }
 export declare function resolveUsageTenantId(tenantId?: string | null): string;
 export declare function dayKey(date: Date): string;
@@ -38,7 +43,13 @@ export declare class UsageMeter {
     private buckets;
     private storageSampledAt;
     private now;
+    private graphIoLimit;
     constructor(opts?: UsageMeterOptions);
+    /**
+     * Enforce per-tenant daily graph I/O budget (MCP + REST).
+     * No-op when limit is 0 (unlimited).
+     */
+    assertGraphIoBudget(tenantId: string): void;
     recordGraphIo(tenantId: string, count?: number): void;
     recordEgress(tenantId: string, bytes: number): void;
     /** Set storage gauge for the current day (from sampler, not incremental). */

package/dist/server/usage-meter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage-meter.d.ts","sourceRoot":"","sources":["../../src/server/usage-meter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO/C,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,eAAe,GAAG,cAAc,CAAC;AAEtE,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,CAAC;IAClB,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAYD,wBAAgB,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAErE;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAEzC;AAYD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,UAAU,EAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAWR;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAUpD;AAMD,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,GAAG,CAAa;gBAEZ,IAAI,GAAE,iBAAsB;IAIxC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,IAAI;IAMhD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMnD,6EAA6E;IAC7E,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMpD,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAOjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAc7D,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE;IAMpC,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;CAYhB"}
+{"version":3,"file":"usage-meter.d.ts","sourceRoot":"","sources":["../../src/server/usage-meter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAO/C,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,eAAe,GAAG,cAAc,CAAC;AAEtE,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,CAAC;IAClB,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAYD,wBAAgB,oBAAoB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAErE;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAEzC;AAYD;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,UAAU,EAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,MAAM,CAWR;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAUpD;AAMD,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,YAAY,CAAS;gBAEjB,IAAI,GAAE,iBAAsB;IAQxC;;;OAGG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAU3C,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,IAAI;IAMhD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMnD,6EAA6E;IAC7E,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMpD,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAOjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAc7D,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE;IAMpC,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,OAAO;CAYhB"}