@absolutejs/mcp 0.11.0 → 0.11.1

package/README.md

@@ -21,6 +21,12 @@ action request; allowed calls execute through a short-lived single-use lease and
 produce a receipt. Requestable denials return an `absolute.action_decision`
 payload containing the action id for an approval workflow.
 
+Agency is a required host peer (`>=0.7.1 <0.8.0`) and is externalized from the
+MCP build. This guarantees that every transport uses the host's one action
+ledger instead of embedding a private enforcement runtime. The package tests
+against exactly `0.7.1`; a new Agency minor requires an explicit compatibility
+release.
+
 ```ts
 import { createAgency, createMemoryAgencyStore } from "@absolutejs/agency";
 

package/dist/index.js

@@ -644,24 +644,8 @@ var createMcpOAuthProvider = (options) => {
     }
   };
 };
-// node_modules/@absolutejs/agency/dist/authzen.js
-var createCoazActionInput = ({
-  actor,
-  call,
-  effects = ["read"],
-  requiredScopes = []
-}) => ({
-  action: "call_tool",
-  actor,
-  context: { required_scopes: requiredScopes, source: "mcp" },
-  effects,
-  input: call.arguments,
-  resource: {
-    id: call.name,
-    properties: { server_id: call.serverId },
-    type: "mcp_tool"
-  }
-});
+// src/dispatch.ts
+import { createCoazActionInput } from "@absolutejs/agency/authzen";
 
 // src/jsonrpc.ts
 var JSONRPC_PARSE_ERROR = -32700;

package/package.json

@@ -2,16 +2,17 @@
   "author": "Alex Kahn",
   "description": "Serve a remote Model Context Protocol endpoint (streamable HTTP, stateless) from a tool/prompt/resource registry — OAuth bearer auth, RFC 9728 discovery, and per-call guards are yours to wire, the JSON-RPC protocol is done correctly by construction.",
   "devDependencies": {
+    "@absolutejs/agency": "0.7.1",
     "@types/bun": "latest",
     "elysia": "^1.1.0",
     "prettier": "3.5.3",
     "typescript": "5.8.3"
   },
   "peerDependencies": {
+    "@absolutejs/agency": ">=0.7.1 <0.8.0",
     "elysia": ">=1.1.0"
   },
   "dependencies": {
-    "@absolutejs/agency": "^0.6.0",
     "@absolutejs/manifest": "^0.3.0",
     "@sinclair/typebox": "^0.34.0"
   },
@@ -51,12 +52,12 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "rm -rf dist && bun build src/index.ts src/manifest.ts --outdir dist --root ./src --target=bun --external elysia && tsc --emitDeclarationOnly --project tsconfig.json && absolute-manifest emit",
+    "build": "rm -rf dist && bun build src/index.ts src/manifest.ts --outdir dist --root ./src --target=bun --external @absolutejs/agency --external '@absolutejs/agency/*' --external elysia && tsc --emitDeclarationOnly --project tsconfig.json && absolute-manifest emit",
     "format": "prettier --write \"./**/*.{ts,json,md}\"",
     "release": "bun run format && bun run test && bun run build && bun publish",
     "test": "bun test",
     "typecheck": "tsc --noEmit --project tsconfig.json"
   },
   "types": "./dist/src/index.d.ts",
-  "version": "0.11.0"
+  "version": "0.11.1"
 }