webdaemon 26.4.0 → 27.0.0

package/dist/types/js/Token.d.ts

@@ -194,6 +194,20 @@ export class Token {
      * @return {string} the counterparty name.
      */
     getCounterparty(): string;
+    /**
+     * Returns the set of preceding principals this token acts after — the chain
+     * of `{counterparty, src}` parties on whose behalf the primary principal
+     * (`sub`/`src`) is acting. Empty for a first-hop token or a token minted
+     * before `pre` existed.
+     *
+     * These are asserted by the primary signer and trusted transitively: because
+     * permission is the intersection of the primary and every preceding principal,
+     * a signer can only ever narrow access by adding entries, never exceed its own
+     * grants. They are therefore not independently signatory-verified.
+     *
+     * @return {Principal[]} the preceding principals, or an empty array.
+     */
+    getPre(): Principal[];
     /**
      * Returns the source of the signatory who signed on behalf of the
      * counterparty. This is only available once the token is
@@ -287,11 +301,28 @@ export type TokenPayload = {
      * // Expiry time.
      */
     exp: number;
+    /**
+     * // Optional set of preceding principals this token acts after.
+     */
+    pre?: Principal[] | undefined;
     /**
      * // Signature if signed.
      */
     sig: string;
 };
+/**
+ * a (host, source) pair identifying a party acting through an app.
+ */
+export type Principal = {
+    /**
+     * the principal host (the `sub` host of its own token).
+     */
+    counterparty: string;
+    /**
+     * the source URL context of the principal.
+     */
+    src: string;
+};
 /**
  * the object to be served on the iss URL.
  */

package/dist/types/js/Token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Token.d.ts","sourceRoot":"","sources":["../../../js/Token.js"],"names":[],"mappings":"AA6FA;IAEE;;MAEC;IAGD;;MAEC;IAGD;;;;;;;;;;;;;;;;;;;;MAoBC;IAED,qCAAkD;IAClD,4BAAyC;IACzC,+BAAoC;IACpC,kDAA8C;IAC9C,mDAA0C;IAE1C,8CAA8C;IAC9C,+BADU,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CACR;IAElC,uDAAuD;IACvD,uCADU,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,CACT;IAsP1C;;;;;OAKG;IACH,0CAHW,MAAM,GACJ,OAAO,CAAC,mBAAmB,CAAC,CA+BxC;IAED;;;;;OAKG;IACH,+CAHW,MAAM,GACJ,mBAAmB,GAAG,IAAI,CAiBtC;IAED;;;;;OAKG;IACH,0CAHW,MAAM,SACN,mBAAmB,QAoB7B;IAED;;;;;;OAMG;IACH,+CAJW,MAAM,GACJ,OAAO,CAAC,SAAS,CAAC,CAgC9B;IAED;;;;;;;OAOG;IACH,0CALW,UAAU,UACV,MAAM,GACJ,OAAO,CAAC,SAAS,CAAC,CAc9B;IAoMD;;;;;OAKG;IACH,4BAHW,UAAU,GACR,MAAM,CAKlB;IAED;;;;;OAKG;IACH,6BAHW,MAAM,GACJ,UAAU,CAKtB;IAED;;;;;;;OAOG;IACH,qBAJW,OAAO,GACN,KAAK,GAAG,IAAI,CAUvB;IAED;;;;;;;;;;;OAWG;IACH,gCAHW,QAAQ,GACN,MAAM,CAUlB;IAhnBD;;;;;;;OAOG;IACH,oBAFW,MAAM,GAAG,MAAM,EAuDzB;IAED;;;;;;OAMG;IACH,4BAHW,OAAO,CAAC,UAAU,CAAC,GAClB,OAAO,CAAC,MAAM,CAAC,CA0B1B;IAED;;;;;OAKG;IACH,iCASC;IAED;;;;;;;;OAQG;IACH,gCAIC;IAED;;;;;;OAMG;IACH,iCAHW,OAAO,CAAC,UAAU,CAAC,iBAc7B;IAiOD;;;;OAIG;IACH,oBAFY,YAAY,CAWvB;IAED;;;;OAIG;IACH,cAFY,YAAY,CAOvB;IAED;;;;OAIG;IACH,UAFY,MAAM,CAIjB;IAED;;;;OAIG;IACH,YAFY,MAAM,CAIjB;IAED;;;;OAIG;IACH,UAFY,MAAM,CAIjB;IAED;;;;OAIG;IACH,UAFY,MAAM,CAIjB;IAED;;;;;OAKG;IACH,mBAFY,MAAM,CAIjB;IAED;;;;;;OAMG;IACH,mBAFa,MAAM,CAQlB;IAED;;;;OAIG;IACH,gBAFY,GAAG,CAId;IAED;;;;;OAKG;IACH,aAFY,GAAG,CAId;IAED;;;;OAIG;IACH,cAFY,MAAM,EAAE,CAYnB;IAED;;;;;;;;OAQG;IACH,wBAHW,MAAM,GACL,MAAM,EAAE,CAanB;IAED;;;;;;;OAOG;IACH,sBAJW,MAAM,cACN,MAAM,GACL,OAAO,CAIlB;IAED;;;;;OAKG;IACH,oBAkBC;IAED;;;;OAIG;IACH,kBAFY,MAAM,CAIjB;;CA8DF;;;;;;;;SAhuBa,MAAM;;;;SACN,MAAM;;;;SACN,MAAM;;;;SACN,MAAM;;;;WACN,KAAK;;;;SACL,MAAM;;;;SACN,MAAM;;;;SACN,MAAM;;;;;;;;;SAKN,MAAM;SACN,UAAU;;;eAKV,SAAS;eACT,SAAS;eACT,MAAM"}
+{"version":3,"file":"Token.d.ts","sourceRoot":"","sources":["../../../js/Token.js"],"names":[],"mappings":"AAoGA;IAEE;;MAEC;IAGD;;MAEC;IAGD;;;;;;;;;;;;;;;;;;;;MAoBC;IAED,qCAAkD;IAClD,4BAAyC;IACzC,+BAAoC;IACpC,kDAA8C;IAC9C,mDAA0C;IAE1C,8CAA8C;IAC9C,+BADU,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CACR;IAElC,uDAAuD;IACvD,uCADU,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,CACT;IAyQ1C;;;;;OAKG;IACH,0CAHW,MAAM,GACJ,OAAO,CAAC,mBAAmB,CAAC,CA+BxC;IAED;;;;;OAKG;IACH,+CAHW,MAAM,GACJ,mBAAmB,GAAG,IAAI,CAiBtC;IAED;;;;;OAKG;IACH,0CAHW,MAAM,SACN,mBAAmB,QAoB7B;IAED;;;;;;OAMG;IACH,+CAJW,MAAM,GACJ,OAAO,CAAC,SAAS,CAAC,CAgC9B;IAED;;;;;;;OAOG;IACH,0CALW,UAAU,UACV,MAAM,GACJ,OAAO,CAAC,SAAS,CAAC,CAc9B;IAqND;;;;;OAKG;IACH,4BAHW,UAAU,GACR,MAAM,CAKlB;IAED;;;;;OAKG;IACH,6BAHW,MAAM,GACJ,UAAU,CAKtB;IAED;;;;;;;OAOG;IACH,qBAJW,OAAO,GACN,KAAK,GAAG,IAAI,CAUvB;IAED;;;;;;;;;;;OAWG;IACH,gCAHW,QAAQ,GACN,MAAM,CAUlB;IAppBD;;;;;;;OAOG;IACH,oBAFW,MAAM,GAAG,MAAM,EA0EzB;IAED;;;;;;OAMG;IACH,4BAHW,OAAO,CAAC,UAAU,CAAC,GAClB,OAAO,CAAC,MAAM,CAAC,CA0B1B;IAED;;;;;OAKG;IACH,iCASC;IAED;;;;;;;;OAQG;IACH,gCAIC;IAED;;;;;;OAMG;IACH,iCAHW,OAAO,CAAC,UAAU,CAAC,iBAc7B;IAiOD;;;;OAIG;IACH,oBAFY,YAAY,CAWvB;IAED;;;;OAIG;IACH,cAFY,YAAY,CAOvB;IAED;;;;OAIG;IACH,UAFY,MAAM,CAIjB;IAED;;;;OAIG;IACH,YAFY,MAAM,CAIjB;IAED;;;;OAIG;IACH,UAFY,MAAM,CAIjB;IAED;;;;OAIG;IACH,UAFY,MAAM,CAIjB;IAED;;;;;OAKG;IACH,mBAFY,MAAM,CAIjB;IAED;;;;;;;;;;;;OAYG;IACH,UAFY,SAAS,EAAE,CAItB;IAED;;;;;;OAMG;IACH,mBAFa,MAAM,CAQlB;IAED;;;;OAIG;IACH,gBAFY,GAAG,CAId;IAED;;;;;OAKG;IACH,aAFY,GAAG,CAId;IAED;;;;OAIG;IACH,cAFY,MAAM,EAAE,CAYnB;IAED;;;;;;;;OAQG;IACH,wBAHW,MAAM,GACL,MAAM,EAAE,CAanB;IAED;;;;;;;OAOG;IACH,sBAJW,MAAM,cACN,MAAM,GACL,OAAO,CAIlB;IAED;;;;;OAKG;IACH,oBAkBC;IAED;;;;OAIG;IACH,kBAFY,MAAM,CAIjB;;CA8DF;;;;;;;;SA3wBa,MAAM;;;;SACN,MAAM;;;;SACN,MAAM;;;;SACN,MAAM;;;;WACN,KAAK;;;;SACL,MAAM;;;;SACN,MAAM;;;;UACN,SAAS,EAAE,YAAC;;;;SACZ,MAAM;;;;;;;;;kBAKN,MAAM;;;;SACN,MAAM;;;;;;;;;SAKN,MAAM;SACN,UAAU;;;eAKV,SAAS;eACT,SAAS;eACT,MAAM"}

package/dist/types/ts/GenerativeChatAgent.d.ts

@@ -2,7 +2,6 @@ import { Token } from '../js/Token.js';
 import { type ChatToolCall } from './McpAgentTools.ts';
 import { type McpContext } from './McpServer.ts';
 import { type GenerativeChatRenderEvent } from './GenerativeChatEvents.ts';
-import type { McpCapabilityToken } from './McpToolAuthorization.ts';
 import type { YamlContent } from './YamlContent.ts';
 /**
  * A party whose tools this chat may draw on. `tools` is an optional allow-list
@@ -61,15 +60,16 @@ export interface GenerativeChatAgentOptions {
 }
 /**
  * Identity to forward to the target party so it authorizes tool/memory use as
- * the connecting counterparty (not the agent). `oauthContext` carries an OAuth
- * client; `counterpartyContext` carries a signed-token peer as `{counterparty,
- * src}`. The target intersects whichever is present with the agent's own grants.
+ * the connecting counterparty (not the agent alone).
  */
 interface ForwardContext {
-    oauthContext: string | null;
-    counterpartyContext: string | null;
+    pre: Principal[];
     continuation: string | null;
 }
+type Principal = {
+    counterparty: string;
+    src: string;
+};
 export interface GenerativeChatConversationResult {
     events: GenerativeChatRenderEvent[];
     clientToolCalls?: ChatToolCall[];
@@ -80,7 +80,7 @@ export interface GenerativeChatMcpContext extends McpContext {
     protocol: string;
     sourcePrefix: string;
     yaml?: YamlContent;
-    token: Token | McpCapabilityToken | null;
+    token: Token | null;
     request: Request;
 }
 export declare class GenerativeChatAgent {
@@ -90,6 +90,18 @@ export declare class GenerativeChatAgent {
     askExpert(request: Request, question: string): Promise<{
         answer: string;
     }>;
+    /**
+     * Expert path for external MCP clients that carry context across calls via a
+     * returned `conversationId`. The id is the persistent chat's own id, namespaced
+     * under the caller's verified `identity` so one caller can never continue
+     * another's chat. The chat is not closed — a later call with the same id
+     * continues it; an unknown/absent id starts a fresh conversation. Self-heals if
+     * the mapped chat was closed out-of-band.
+     */
+    askExpertConversation(request: Request, question: string, identity: string, conversationId: string | null): Promise<{
+        answer: string;
+        conversationId: string;
+    }>;
 }
 export {};
 //# sourceMappingURL=GenerativeChatAgent.d.ts.map

package/dist/types/ts/GenerativeChatAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GenerativeChatAgent.d.ts","sourceRoot":"","sources":["../../../ts/GenerativeChatAgent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACtC,OAAO,EAGL,KAAK,YAAY,EAMlB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAGL,KAAK,UAAU,EAIhB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAIL,KAAK,yBAAyB,EAM/B,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAQnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AASnD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAA;IACnB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,CACrB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,gBAAgB,EAAE,GAAG,SAAS,CAAC,CAAA;IAC5C;;;;;;;;OAQG;IACH,sBAAsB,CAAC,EAAE,CACvB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IAClC;;;;;OAKG;IACH,gCAAgC,CAAC,EAAE,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;CACnC;AAED;;;;;GAKG;AACH,UAAU,cAAc;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAKlC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AA6BD,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,yBAAyB,EAAE,CAAA;IACnC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,wBAAyB,SAAQ,UAAU;IAC1D,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,KAAK,EAAE,KAAK,GAAG,kBAAkB,GAAG,IAAI,CAAA;IACxC,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,qBAAa,mBAAmB;;gBAqBlB,OAAO,EAAE,0BAA0B;IA6BzC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwG5C,SAAS,CACb,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAy8B/B"}
+{"version":3,"file":"GenerativeChatAgent.d.ts","sourceRoot":"","sources":["../../../ts/GenerativeChatAgent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACtC,OAAO,EAGL,KAAK,YAAY,EAMlB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAGL,KAAK,UAAU,EAIhB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAIL,KAAK,yBAAyB,EAM/B,MAAM,2BAA2B,CAAA;AAKlC,OAAO,KAAK,EAAW,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAO5D;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAA;IACnB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,CACrB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,gBAAgB,EAAE,GAAG,SAAS,CAAC,CAAA;IAC5C;;;;;;;;OAQG;IACH,sBAAsB,CAAC,EAAE,CACvB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IAClC;;;;;OAKG;IACH,gCAAgC,CAAC,EAAE,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,cAAc,KACpB,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;CACnC;AAED;;;GAGG;AACH,UAAU,cAAc;IAItB,GAAG,EAAE,SAAS,EAAE,CAAA;IAKhB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,KAAK,SAAS,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AA6BtD,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,yBAAyB,EAAE,CAAA;IACnC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,wBAAyB,SAAQ,UAAU;IAC1D,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,qBAAa,mBAAmB;;gBAqBlB,OAAO,EAAE,0BAA0B;IA6BzC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAwG5C,SAAS,CACb,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAmG9B;;;;;;;OAOG;IACG,qBAAqB,CACzB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAo7BvD"}

package/dist/types/ts/Lifecycle.d.ts

@@ -99,7 +99,10 @@ export declare class Lifecycle extends EventTarget {
      * @throws {string} if configuration not yet initialised.
      *
     */
-    static getTokenFor(scope: Scope, party?: string | null, src?: string | null, ttlMillis?: number): Promise<Token>;
+    static getTokenFor(scope: Scope, party?: string | null, src?: string | null, ttlMillis?: number, pre?: Array<{
+        counterparty: string;
+        src: string;
+    }>): Promise<Token>;
     static getStorage(): Promise<Storage>;
     /**
      * Returns a token for our party with the setitem and getitem

package/dist/types/ts/Lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Lifecycle.d.ts","sourceRoot":"","sources":["../../../ts/Lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAa,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG9C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE;QACN,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAA;QAC5B,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,MAAM,EAAE,MAAM,CAAA;QACd,YAAY,EAAE,MAAM,CAAA;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,UAAU,CAAA;KACvB,CAAA;IACD,OAAO,EAAE;QACP,IAAI,EAAE,WAAW,CAAA;QACjB,IAAI,CAAC,EAAE,WAAW,CAAA;KACnB,CAAA;IACD,IAAI,EAAE,KAAK,CAAA;CACZ;AAGD,eAAO,MAAM,aAAa,WAAW,CAAA;AAGrC,eAAO,MAAM,WAAW,WAAW,CAAA;AACnC,eAAO,MAAM,UAAU,UAAU,CAAA;AAkBjC;;;;;;;;;GASG;AACH,qBAAa,SAAU,SAAQ,WAAW;;IAIxC,MAAM,CAAC,EAAE;;MAAK;IAEd,MAAM,CAAC,WAAW;IAIlB;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IAO9C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IAS1C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IASzC;;;;;OAKG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYlD;;;;;;;OAOG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAWvD;;;;;OAKG;IACG,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAatD;;;;OAIG;IACH,MAAM,CAAC,SAAS,IAAI,YAAY;IAQhC;;;;;OAKG;IACH,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAS3C;;;;;;;;;;;;;;;MAeE;WACW,WAAW,CACtB,KAAK,EAAE,KAAK,EACZ,KAAK,GAAE,MAAM,GAAG,IAAW,EAC3B,GAAG,GAAE,MAAM,GAAG,IAAW,EACzB,SAAS,GAAE,MAA2B,GACrC,OAAO,CAAC,KAAK,CAAC;WAqCJ,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAK3C;;;OAGG;IACH,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC;CAazC"}
+{"version":3,"file":"Lifecycle.d.ts","sourceRoot":"","sources":["../../../ts/Lifecycle.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAa,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAG9C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE;QACN,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAA;QAC5B,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,MAAM,EAAE,MAAM,CAAA;QACd,YAAY,EAAE,MAAM,CAAA;QACpB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,UAAU,CAAA;KACvB,CAAA;IACD,OAAO,EAAE;QACP,IAAI,EAAE,WAAW,CAAA;QACjB,IAAI,CAAC,EAAE,WAAW,CAAA;KACnB,CAAA;IACD,IAAI,EAAE,KAAK,CAAA;CACZ;AAGD,eAAO,MAAM,aAAa,WAAW,CAAA;AAGrC,eAAO,MAAM,WAAW,WAAW,CAAA;AACnC,eAAO,MAAM,UAAU,UAAU,CAAA;AAkBjC;;;;;;;;;GASG;AACH,qBAAa,SAAU,SAAQ,WAAW;;IAIxC,MAAM,CAAC,EAAE;;MAAK;IAEd,MAAM,CAAC,WAAW;IAIlB;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IAO9C,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IAS1C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IASzC;;;;;OAKG;IACG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAYlD;;;;;;;OAOG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAWvD;;;;;OAKG;IACG,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAatD;;;;OAIG;IACH,MAAM,CAAC,SAAS,IAAI,YAAY;IAQhC;;;;;OAKG;IACH,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAS3C;;;;;;;;;;;;;;;MAeE;WACW,WAAW,CACtB,KAAK,EAAE,KAAK,EACZ,KAAK,GAAE,MAAM,GAAG,IAAW,EAC3B,GAAG,GAAE,MAAM,GAAG,IAAW,EACzB,SAAS,GAAE,MAA2B,EACtC,GAAG,GAAE,KAAK,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAM,GACrD,OAAO,CAAC,KAAK,CAAC;WAyCJ,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAK3C;;;OAGG;IACH,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC;CAazC"}

package/dist/types/ts/McpToolAuthorization.d.ts

@@ -6,21 +6,6 @@ export interface McpCapabilityToken {
     getSourceUrl(): URL;
     getSrc(): string;
 }
-export interface OAuthMcpContext {
-    party?: string;
-    counterparty: string;
-    src: string;
-    scope: Record<string, string>;
-}
-export declare class OAuthMcpToken implements McpCapabilityToken {
-    #private;
-    constructor(context: OAuthMcpContext);
-    hasCapability(source: string, capability: string): boolean;
-    getParty(): string;
-    getCounterparty(): string;
-    getSourceUrl(): URL;
-    getSrc(): string;
-}
 export interface McpToolAuthorization {
     token: McpCapabilityToken | null;
     providerSource: string;

package/dist/types/ts/McpToolAuthorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpToolAuthorization.d.ts","sourceRoot":"","sources":["../../../ts/McpToolAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE1D,eAAO,MAAM,oBAAoB,aAAa,CAAA;AAI9C,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1D,eAAe,IAAI,MAAM,CAAA;IACzB,YAAY,IAAI,GAAG,CAAA;IACnB,MAAM,IAAI,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9B;AAED,qBAAa,aAAc,YAAW,kBAAkB;;gBAG1C,OAAO,EAAE,eAAe;IAIpC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAM1D,QAAQ,IAAI,MAAM;IAIlB,eAAe,IAAI,MAAM;IAIzB,YAAY,IAAI,GAAG;IAInB,MAAM,IAAI,MAAM;CAGjB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,WAAW,CAAA;CAC3B;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,oBAAoB,GAClC,OAAO,CAwBT;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EACrE,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,OAAO,CAMT;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAMT;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CA2BT"}
+{"version":3,"file":"McpToolAuthorization.d.ts","sourceRoot":"","sources":["../../../ts/McpToolAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE1D,eAAO,MAAM,oBAAoB,aAAa,CAAA;AAI9C,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1D,eAAe,IAAI,MAAM,CAAA;IACzB,YAAY,IAAI,GAAG,CAAA;IACnB,MAAM,IAAI,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,WAAW,CAAA;CAC3B;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,oBAAoB,GAClC,OAAO,CAwBT;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE;IAAE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EACrE,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,OAAO,CAMT;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAMT;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CA2BT"}

package/dist/types/ts/Requests.d.ts

@@ -1,18 +1,4 @@
 import { Plain } from "./Assertions.ts";
-/**
- * Header carrying the resolved OAuth context (`OAuthContext` JSON) for a tab
- * request. Only ever set internally — either from a trusted in-process
- * injection or by re-verifying a bearer — and stripped from inbound requests so
- * an external caller can never forge it.
- */
-export declare const OAUTH_CONTEXT_HEADER = "x-tabserver-oauth-context";
-/**
- * Header carrying the connecting counterparty an agent is acting on behalf of,
- * as `{ counterparty, src }` JSON. Set by the agent from the identity it
- * authenticated at hop-1 (signed token or OAuth client) and consumed by AI
- * handlers as the authorization principal for tool/memory use.
- */
-export declare const COUNTERPARTY_CONTEXT_HEADER = "x-tabserver-counterparty";
 /**
  * Header carrying an opaque, caller-chosen continuation token that lets a callee
  * group repeated cross-party gateway calls into one continuing downstream

package/dist/types/ts/Requests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Requests.d.ts","sourceRoot":"","sources":["../../../ts/Requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AASxC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,8BAA8B,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,6BAA6B,CAAA;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,6BAA6B,CAAA;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAMtD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM1D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAKrD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAMlD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAGpD;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM7E;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAUlD"}
+{"version":3,"file":"Requests.d.ts","sourceRoot":"","sources":["../../../ts/Requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AASxC;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,6BAA6B,CAAA;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAMtD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAM1D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAKrD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAMlD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAGpD;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM7E;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAUlD"}

package/package.json

@@ -13,7 +13,7 @@
   "files": [
     "dist"
   ],
-  "version": "26.4.0",
+  "version": "27.0.0",
   "description": "Web Daemon",
   "module": "./dist/index.js",
   "keywords": [