@actuarial-ts/agents 0.1.0 → 0.3.0

package/dist/judgment.js

@@ -40,12 +40,27 @@ import { createLedger, recordAssumption, } from "@actuarial-ts/compliance";
 import { AgentsError } from "./errors.js";
 import { zodObjectShape } from "./tools.js";
 // ---------------------------------------------------------------------------
+// Public types
+/**
+ * The request-context key a host sets (server-side, from its authenticated
+ * session — the same trust path as the tenant id) to identify WHO is resuming
+ * gates. The resume payload cannot supply it: a payload travels through
+ * model-reachable surfaces, and an identity that can be asserted from there
+ * is a claim, not a record.
+ */
+export const ACTOR_IDENTITY_CONTEXT_KEY = "actorIdentity";
+// ---------------------------------------------------------------------------
 // Chain state threaded through step outputs
+// Declares EVERY JudgmentTrailEntry field: zod strips undeclared keys on the
+// step-output parse, so an undeclared field here is silently erased between
+// gates (the ledger schema below carries the same warning for the same reason).
 const trailEntrySchema = z.object({
     stage: z.string(),
     decision: z.string(),
     rationale: z.string(),
     skipped: z.boolean(),
+    actor: z.enum(["default", "actuary", "agent"]).optional(),
+    actorIdentity: z.string().optional(),
 });
 // Declares EVERY AssumptionEntry field: zod strips undeclared keys on parse,
 // and losing previousValue/source between steps would corrupt the ledger.
@@ -180,6 +195,10 @@ export function createJudgmentChain(options) {
                 throw new AgentsError("MISSING_RATIONALE", `Gate "${gate.id}" (${gate.stage}) resumed without a rationale; undocumented judgment is exactly what the ledger exists to prevent`);
             }
             const actor = actorOf(decision);
+            // WHO decided comes from the server-set context, never the payload:
+            // the payload's job is the decision and its coarse classification.
+            const rawIdentity = requestContext?.get(ACTOR_IDENTITY_CONTEXT_KEY);
+            const actorIdentity = typeof rawIdentity === "string" && rawIdentity.length > 0 ? rawIdentity : undefined;
             const applied = await gate.applyDecision(ctx, decision);
             // recordAssumption is the single validator/freezer: replay the
             // threaded entries into a ledger, append, and thread the plain
@@ -200,6 +219,8 @@ export function createJudgmentChain(options) {
                 trail: [
                     ...state.trail,
                     {
+                        actor,
+                        ...(actorIdentity !== undefined ? { actorIdentity } : {}),
                         stage: gate.stage,
                         decision: applied.summary ?? describeDecision(decision),
                         rationale,

package/dist/judgment.js.map

@@ -1 +1 @@
-{"version":3,"file":"judgment.js","sourceRoot":"","sources":["../src/judgment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,GAKjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAsH5C,8EAA8E;AAC9E,4CAA4C;AAE5C,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACtC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAE,KAA+B,CAAC,OAAO,CAAC,CAC1D;CACF,CAAC,CAAC;AAQH;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAwB,CAAC;IACjD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAChD,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;QACxE,SAAS,EACP,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;KACnF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAI,QAAmC,CAAC,QAAQ,CAAC;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,QAAmC,CAAC;QAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,QAAiB;IAChC,MAAM,KAAK,GAAI,QAAmD,EAAE,KAAK,CAAC;IAC1E,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED,8EAA8E;AAC9E,UAAU;AAEV,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAapC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC;IAErE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,EAAE,KAAK,gBAAgB,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CACnB,UAAU,EACV,YAAY,gBAAgB,6CAA6C,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,sBAAsB,IAAI,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CACnB,UAAU,EACV,SAAS,IAAI,CAAC,EAAE,2IAA2I,CAC5J,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,UAAU,CAAC;QACT,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,gBAAgB;QAC9B,aAAa;QACb,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;YACpE,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,GAAG,GAAwB;gBAC/B,cAAc;gBACd,GAAG;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAChD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvE,OAAO;oBACL,KAAK,EAAE;wBACL,GAAG,KAAK,CAAC,KAAK;wBACd,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;qBACjF;oBACD,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE;iBACnD,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC,CAAC,uDAAuD;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,UAAU,CAAC;YAC5B,MAAM,SAAS,GAAI,QAA2C,EAAE,SAAS,CAAC;YAC1E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC7D,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,SAAS,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,mGAAmG,CACpI,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEhC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAExD,+DAA+D;YAC/D,+DAA+D;YAC/D,8DAA8D;YAC9D,IAAI,MAAM,GAAqB,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;YAChE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;gBAChD,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE;oBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpF,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE;oBACnC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK;oBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,KAAK,EAAE;oBACL,GAAG,KAAK,CAAC,KAAK;oBACd;wBACE,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC;wBACvD,SAAS;wBACT,OAAO,EAAE,KAAK;qBACf;iBACF;gBACD,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBAClC,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE;aACvD,CAAC;QACJ,CAAC;KACF,CAAC,CACH,CAAC;IAEF,MAAM,YAAY,GAAG,UAAU,CAAC;QAC9B,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,iBAAiB;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE;YAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;gBACtC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GAAyB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACrE,MAAM,UAAU,EAAE,CAAC,OAAO,EAAE;gBAC1B,cAAc;gBACd,GAAG;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC,CAAC;IAUH,IAAI,OAAO,GAAG,cAAc,CAAC;QAC3B,EAAE;QACF,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,iBAAiB;QAC/B,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAA4B,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAA2B,CAAC;AACtE,CAAC"}
+{"version":3,"file":"judgment.js","sourceRoot":"","sources":["../src/judgment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,GAKjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,8EAA8E;AAC9E,eAAe;AAEf;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAC;AA2H1D,8EAA8E;AAC9E,4CAA4C;AAE5C,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACtC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,OAAO,CAAE,KAA+B,CAAC,OAAO,CAAC,CAC1D;CACF,CAAC,CAAC;AAQH;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAwB,CAAC;IACjD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAChD,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;QACxE,SAAS,EACP,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;KACnF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,gBAAgB,CAAC,QAAiB;IACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAI,QAAmC,CAAC,QAAQ,CAAC;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,QAAmC,CAAC;QAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,QAAiB;IAChC,MAAM,KAAK,GAAI,QAAmD,EAAE,KAAK,CAAC;IAC1E,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED,8EAA8E;AAC9E,UAAU;AAEV,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAapC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC;IAErE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,EAAE,KAAK,gBAAgB,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CACnB,UAAU,EACV,YAAY,gBAAgB,6CAA6C,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,sBAAsB,IAAI,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,WAAW,CACnB,UAAU,EACV,SAAS,IAAI,CAAC,EAAE,2IAA2I,CAC5J,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,UAAU,CAAC;QACT,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,gBAAgB;QAC9B,aAAa;QACb,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;YACpE,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,GAAG,GAAwB;gBAC/B,cAAc;gBACd,GAAG;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAChD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBACvE,OAAO;oBACL,KAAK,EAAE;wBACL,GAAG,KAAK,CAAC,KAAK;wBACd,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;qBACjF;oBACD,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE;iBACnD,CAAC;YACJ,CAAC;YAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBACpE,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC,CAAC,uDAAuD;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,UAAU,CAAC;YAC5B,MAAM,SAAS,GAAI,QAA2C,EAAE,SAAS,CAAC;YAC1E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC7D,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,SAAS,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,KAAK,mGAAmG,CACpI,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC,oEAAoE;YACpE,mEAAmE;YACnE,MAAM,WAAW,GAAG,cAAc,EAAE,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACpE,MAAM,aAAa,GACjB,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YAEtF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAExD,+DAA+D;YAC/D,+DAA+D;YAC/D,8DAA8D;YAC9D,IAAI,MAAM,GAAqB,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;YAChE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;gBAChD,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE;oBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpF,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE;oBACnC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK;oBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,KAAK,EAAE;oBACL,GAAG,KAAK,CAAC,KAAK;oBACd;wBACE,KAAK;wBACL,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzD,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC;wBACvD,SAAS;wBACT,OAAO,EAAE,KAAK;qBACf;iBACF;gBACD,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;gBAClC,SAAS,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE;aACvD,CAAC;QACJ,CAAC;KACF,CAAC,CACH,CAAC;IAEF,MAAM,YAAY,GAAG,UAAU,CAAC;QAC9B,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,iBAAiB;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE;YAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;gBACtC,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GAAyB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACrE,MAAM,UAAU,EAAE,CAAC,OAAO,EAAE;gBAC1B,cAAc;gBACd,GAAG;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC,CAAC;IAUH,IAAI,OAAO,GAAG,cAAc,CAAC;QAC3B,EAAE;QACF,WAAW,EAAE,gBAAgB;QAC7B,YAAY,EAAE,iBAAiB;QAC/B,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAA4B,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,SAAS;QAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,EAA2B,CAAC;AACtE,CAAC"}

package/dist/mcp.d.ts

@@ -0,0 +1,165 @@
+/**
+ * MCP tenant seam + boot self-test for the governed workspace.
+ *
+ * When the workspace is exposed over the Model Context Protocol, external AI
+ * clients read everything and mutate nothing directly. The one hard guarantee
+ * is that EVERY exposed tool resolves its tenant (project id) from the MCP
+ * request's auth info, never from the model — the same secureToolWrapper rule
+ * the ActNG server proved in production, restated for the MCP transport.
+ *
+ * @mastra/mcp gives no built-in per-tool authorization outside its EE FGA path,
+ * so a missed wire-up FAILS OPEN: a tool that forgets to read authInfo would
+ * happily serve an unauthenticated caller. These two helpers close that caveat:
+ *
+ * 1. requireMcpTenant — the read side. A tool calls it instead of trusting the
+ *    model; absent auth info it THROWS AgentsError("NO_TENANT_CONTEXT"), which
+ *    the defineActuarialTool wrapper turns into a { success:false } envelope.
+ *    A tool built on it fails CLOSED.
+ *
+ * 2. assertFailClosed — the proof. At server startup, drive a probe read tool
+ *    through the server WITHOUT auth and assert it fails closed. If the probe
+ *    SUCCEEDS, the seam is not wired up: this throws MCP_SELF_TEST_FAILED and
+ *    startup MUST abort.
+ *
+ * ---------------------------------------------------------------------------
+ * VERIFIED against the installed @mastra/mcp 1.14.0 (house rule — types and
+ * compiled source, not memory):
+ *
+ * - MCPServer.executeTool(toolId, args, executionContext?: { messages?,
+ *   toolCallId?, requestContext? }): Promise<any> returns the tool's execute
+ *   result VERBATIM (dist/index.js: `const result = await tool.execute(...);
+ *   return result;`). For a defineActuarialTool with no outputSchema the core
+ *   tool builder passes the value through untouched, so an executeTool caller
+ *   sees exactly the { success:false, error:{ code } } envelope the wrapper
+ *   produced. Argument validation runs FIRST and, on failure, short-circuits
+ *   to a { error:true, message } object before the tool ever executes — hence
+ *   assertFailClosed passes minimal VALID probe args.
+ *
+ * - Auth-context access path. On the real streamable-HTTP call path the SDK
+ *   copies the transport `extra` (with `authInfo` from `req.auth`) into the
+ *   tool context TWO ways: directly at `context.mcp.extra`, and — via
+ *   createProxiedRequestContext — as INDIVIDUAL keys set on a fresh
+ *   RequestContext (`context.requestContext.get("authInfo")`). NOTE the
+ *   surprise: the installed 1.14.0 sets each extra key on the RequestContext
+ *   verbatim, so the tenant lives at `requestContext.get("authInfo")`, NOT
+ *   under a single `"mcp.extra"` key as the research draft documented. This
+ *   helper tries all three shapes so it is correct against both the installed
+ *   package and the documented pattern.
+ */
+import type { ActuarialToolContext } from "./tools.js";
+import { type AgentsErrorCode } from "./errors.js";
+/**
+ * The MCP auth-info bag: whatever the host's bearer-token middleware set on
+ * `req.auth` before delegating to startHTTP (e.g. `{ projectId }`). Values are
+ * unknown — requireMcpTenant proves the tenant is a non-empty string.
+ */
+export interface McpAuthInfo {
+    [key: string]: unknown;
+}
+/**
+ * The transport `extra` (MCP SDK RequestHandlerExtra) surfaced to a tool at
+ * `context.mcp.extra`. Only `authInfo` is load-bearing here; the rest
+ * (sessionId, requestInfo, signal, ...) is carried opaquely.
+ */
+export interface McpRequestExtra {
+    authInfo?: McpAuthInfo;
+    [key: string]: unknown;
+}
+/**
+ * The structural slice of a Mastra tool-execution context this seam needs on
+ * the MCP path: the tenant-seam `requestContext` (inherited from
+ * ActuarialToolContext) plus the MCP-specific `mcp.extra`. Typed structurally
+ * so tests exercise the helper with a plain object and no live MCP server.
+ */
+export interface McpToolContext extends ActuarialToolContext {
+    mcp?: {
+        extra?: McpRequestExtra;
+    };
+}
+/**
+ * Reads the tenant id (default key "projectId") from the MCP execution
+ * context's auth info — the server-set identity, never the model. THROWS a
+ * typed AgentsError("NO_TENANT_CONTEXT") when the auth info or the key is
+ * absent, non-string, or empty. Inside a defineActuarialTool execute the
+ * wrapper converts that throw into a { success:false } envelope, so a tool
+ * built on requireMcpTenant fails CLOSED for any unauthenticated MCP caller.
+ */
+export declare function requireMcpTenant(context: McpToolContext | undefined, key?: string): string;
+/**
+ * The structural slice of @mastra/mcp's MCPServer that assertFailClosed drives.
+ * A real MCPServer satisfies it; so does a bare `{ executeTool }` stub, so the
+ * self-test is unit-testable without booting a transport. Verified against the
+ * installed executeTool signature (see the file header).
+ */
+export interface McpToolServer {
+    executeTool(toolId: string, args: Record<string, unknown>, executionContext?: {
+        requestContext?: unknown;
+        messages?: unknown[];
+        toolCallId?: string;
+    }): Promise<unknown>;
+    /**
+     * Tool enumeration, present on the installed @mastra/mcp MCPServer. The
+     * DECLARATION (server.d.ts) types entries by `name` and allows a Promise
+     * return; the runtime also carries `id`. Typed from the declaration — a
+     * runtime probe is how the first draft of this signature broke assignability.
+     * Optional so a bare `{ executeTool }` stub still satisfies the type; the
+     * self-test's probe-everything form requires it and says so when absent.
+     */
+    getToolListInfo?(): {
+        tools: Array<{
+            name: string;
+            id?: string;
+        }>;
+    } | Promise<{
+        tools: Array<{
+            name: string;
+            id?: string;
+        }>;
+    }>;
+}
+export interface AssertFailClosedOptions {
+    /** The MCP server whose exposed tools are being wired up (typically the workspace MCPServer). */
+    server: McpToolServer;
+    /**
+     * Probe ONE tool instead of every tool. Prefer omitting this: the
+     * single-tool form proved exactly one wire-up, and a sibling tool that
+     * skipped the tenant seam sailed through boot while serving every tenant's
+     * data to unauthenticated callers.
+     */
+    probeToolId?: string;
+    /**
+     * Minimal VALID args for the single-tool form. Defaults to `{}`
+     * (correct for read tools whose schema is `z.object({})` or all-optional).
+     * Args that fail schema validation would short-circuit before the tenant
+     * check runs, so pass real minimal args for probes that require input.
+     */
+    probeArgs?: Record<string, unknown>;
+    /**
+     * Per-tool minimal valid args for the probe-everything form, keyed by tool
+     * id. Any tool not listed is driven with `{}`.
+     */
+    argsByTool?: Record<string, Record<string, unknown>>;
+    /**
+     * Tools that are tenant-free BY DESIGN and therefore expected to succeed
+     * without auth. The same contract as `tenant: "none"` on the definition:
+     * greppable, deliberate, reviewable. A name listed here that is not on the
+     * server fails the self-test — a stale exemption is how the next leak hides.
+     */
+    exempt?: string[];
+    /** The failure code every probed tool must fail closed with. Defaults to NO_TENANT_CONTEXT. */
+    expectedErrorCode?: AgentsErrorCode;
+}
+/**
+ * The boot self-test. Drives EVERY tool on the server WITHOUT any auth info
+ * and asserts each fails closed with the tenant error code, reporting every
+ * hole at once. THROWS AgentsError("MCP_SELF_TEST_FAILED") loudly for any
+ * other outcome — most importantly if a probe SUCCEEDED, which means that tool
+ * did not require tenant context and the MCP tenant seam is a fail-open hole.
+ * Tenant-free-by-design tools are excused only via the greppable `exempt`
+ * list; a single-tool form remains for targeted re-checks.
+ *
+ * Call this at server startup whenever MCP is enabled, and ABORT startup if it
+ * throws: a governed workspace must never accept unauthenticated MCP clients.
+ */
+export declare function assertFailClosed(options: AssertFailClosedOptions): Promise<void>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAuB,MAAM,YAAY,CAAC;AAE5E,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAKhE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAe,SAAQ,oBAAoB;IAC1D,GAAG,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CACnC;AAID;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,EAAE,GAAG,SAAc,GAAG,MAAM,CAK/F;AAKD;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,CACT,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,gBAAgB,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GACzF,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,IACZ;QAAE,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,GAC/C,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,uBAAuB;IACtC,iGAAiG;IACjG,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,eAAe,CAAC;CACrC;AA0BD;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDtF"}

package/dist/mcp.js

@@ -0,0 +1,155 @@
+/**
+ * MCP tenant seam + boot self-test for the governed workspace.
+ *
+ * When the workspace is exposed over the Model Context Protocol, external AI
+ * clients read everything and mutate nothing directly. The one hard guarantee
+ * is that EVERY exposed tool resolves its tenant (project id) from the MCP
+ * request's auth info, never from the model — the same secureToolWrapper rule
+ * the ActNG server proved in production, restated for the MCP transport.
+ *
+ * @mastra/mcp gives no built-in per-tool authorization outside its EE FGA path,
+ * so a missed wire-up FAILS OPEN: a tool that forgets to read authInfo would
+ * happily serve an unauthenticated caller. These two helpers close that caveat:
+ *
+ * 1. requireMcpTenant — the read side. A tool calls it instead of trusting the
+ *    model; absent auth info it THROWS AgentsError("NO_TENANT_CONTEXT"), which
+ *    the defineActuarialTool wrapper turns into a { success:false } envelope.
+ *    A tool built on it fails CLOSED.
+ *
+ * 2. assertFailClosed — the proof. At server startup, drive a probe read tool
+ *    through the server WITHOUT auth and assert it fails closed. If the probe
+ *    SUCCEEDS, the seam is not wired up: this throws MCP_SELF_TEST_FAILED and
+ *    startup MUST abort.
+ *
+ * ---------------------------------------------------------------------------
+ * VERIFIED against the installed @mastra/mcp 1.14.0 (house rule — types and
+ * compiled source, not memory):
+ *
+ * - MCPServer.executeTool(toolId, args, executionContext?: { messages?,
+ *   toolCallId?, requestContext? }): Promise<any> returns the tool's execute
+ *   result VERBATIM (dist/index.js: `const result = await tool.execute(...);
+ *   return result;`). For a defineActuarialTool with no outputSchema the core
+ *   tool builder passes the value through untouched, so an executeTool caller
+ *   sees exactly the { success:false, error:{ code } } envelope the wrapper
+ *   produced. Argument validation runs FIRST and, on failure, short-circuits
+ *   to a { error:true, message } object before the tool ever executes — hence
+ *   assertFailClosed passes minimal VALID probe args.
+ *
+ * - Auth-context access path. On the real streamable-HTTP call path the SDK
+ *   copies the transport `extra` (with `authInfo` from `req.auth`) into the
+ *   tool context TWO ways: directly at `context.mcp.extra`, and — via
+ *   createProxiedRequestContext — as INDIVIDUAL keys set on a fresh
+ *   RequestContext (`context.requestContext.get("authInfo")`). NOTE the
+ *   surprise: the installed 1.14.0 sets each extra key on the RequestContext
+ *   verbatim, so the tenant lives at `requestContext.get("authInfo")`, NOT
+ *   under a single `"mcp.extra"` key as the research draft documented. This
+ *   helper tries all three shapes so it is correct against both the installed
+ *   package and the documented pattern.
+ */
+import { resolveTenant } from "./tools.js";
+import { AgentsError } from "./errors.js";
+/**
+ * Reads the tenant id (default key "projectId") from the MCP execution
+ * context's auth info — the server-set identity, never the model. THROWS a
+ * typed AgentsError("NO_TENANT_CONTEXT") when the auth info or the key is
+ * absent, non-string, or empty. Inside a defineActuarialTool execute the
+ * wrapper converts that throw into a { success:false } envelope, so a tool
+ * built on requireMcpTenant fails CLOSED for any unauthenticated MCP caller.
+ */
+export function requireMcpTenant(context, key = "projectId") {
+    // One seam, one reader: this is resolveTenant with the MCP source pinned.
+    // Prefer declaring `tenant: "required", tenantSource: "mcp-auth"` on the
+    // tool itself, which makes the wrapper do this before the body runs.
+    return resolveTenant(context, { source: "mcp-auth", key });
+}
+/** Structural check for the { success:false, error:{ code } } tool-failure envelope. */
+function isFailureEnvelope(result) {
+    if (typeof result !== "object" || result === null)
+        return false;
+    if (result.success !== false)
+        return false;
+    const error = result.error;
+    return typeof error?.code === "string";
+}
+/** A short, log-safe description of an unexpected probe result for the abort message. */
+function describeResult(result) {
+    if (isFailureEnvelope(result)) {
+        return `a { success: false } envelope with code "${result.error.code}"`;
+    }
+    if (typeof result === "object" && result !== null) {
+        if (result.error === true) {
+            return "an argument-validation error (the probe never reached the tenant check — pass valid probeArgs)";
+        }
+        if (result.success === true) {
+            return "a { success: true } result (the probe SUCCEEDED without tenant context — the seam is not wired up)";
+        }
+    }
+    return "a non-envelope result (the probe did not fail closed on tenant context)";
+}
+/**
+ * The boot self-test. Drives EVERY tool on the server WITHOUT any auth info
+ * and asserts each fails closed with the tenant error code, reporting every
+ * hole at once. THROWS AgentsError("MCP_SELF_TEST_FAILED") loudly for any
+ * other outcome — most importantly if a probe SUCCEEDED, which means that tool
+ * did not require tenant context and the MCP tenant seam is a fail-open hole.
+ * Tenant-free-by-design tools are excused only via the greppable `exempt`
+ * list; a single-tool form remains for targeted re-checks.
+ *
+ * Call this at server startup whenever MCP is enabled, and ABORT startup if it
+ * throws: a governed workspace must never accept unauthenticated MCP clients.
+ */
+export async function assertFailClosed(options) {
+    const { server, probeToolId, probeArgs = {}, expectedErrorCode = "NO_TENANT_CONTEXT" } = options;
+    // Single-tool form: kept for hosts that need a targeted re-check, but the
+    // probe-everything form below is the one to call at boot.
+    if (probeToolId !== undefined) {
+        await probeOne(server, probeToolId, probeArgs, expectedErrorCode);
+        return;
+    }
+    if (typeof server.getToolListInfo !== "function") {
+        throw new AgentsError("MCP_SELF_TEST_FAILED", "MCP boot self-test cannot enumerate this server's tools (no getToolListInfo); " +
+            "pass probeToolId per tool, or upgrade @mastra/mcp. Refusing to certify a server " +
+            "whose tool list cannot be inspected.");
+    }
+    const listing = await server.getToolListInfo();
+    const toolIds = listing.tools.map((tool) => tool.id ?? tool.name);
+    const exempt = new Set(options.exempt ?? []);
+    const failures = [];
+    // A stale exemption is a future hole: the tool it excused is gone, and the
+    // next tool to take that name inherits a free pass nobody remembers granting.
+    for (const name of exempt) {
+        if (!toolIds.includes(name)) {
+            failures.push(`"${name}" is exempted but not on the server; remove the stale exemption`);
+        }
+    }
+    for (const toolId of toolIds) {
+        if (exempt.has(toolId))
+            continue;
+        try {
+            await probeOne(server, toolId, options.argsByTool?.[toolId] ?? {}, expectedErrorCode);
+        }
+        catch (err) {
+            // Collect EVERY hole before reporting: a boot test that stops at the
+            // first one hides the second.
+            failures.push(err instanceof AgentsError ? err.message : String(err));
+        }
+    }
+    if (failures.length > 0) {
+        throw new AgentsError("MCP_SELF_TEST_FAILED", `MCP boot self-test failed on ${failures.length} of ${toolIds.length} tool(s):\n` +
+            failures.map((message) => `  - ${message}`).join("\n") +
+            "\nAbort startup: a governed workspace must never accept unauthenticated MCP clients.");
+    }
+}
+/** Drives one tool with no auth info; it must fail closed with the expected code. */
+async function probeOne(server, toolId, args, expectedErrorCode) {
+    // No requestContext, no mcp.extra -> the probe sees no auth info at all.
+    const result = await server.executeTool(toolId, args, {});
+    if (isFailureEnvelope(result) && result.error.code === expectedErrorCode) {
+        return;
+    }
+    throw new AgentsError("MCP_SELF_TEST_FAILED", `probe tool "${toolId}" did not fail closed without auth. ` +
+        `Expected a { success: false, error.code: "${expectedErrorCode}" } envelope but got ${describeResult(result)}. ` +
+        `An MCP-exposed tool must either enforce the tenant seam (tenant: "required", tenantSource: "mcp-auth") ` +
+        "or be a declared exemption; this outcome means it is neither.");
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAwB,MAAM,aAAa,CAAC;AAoChE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAmC,EAAE,GAAG,GAAG,WAAW;IACrF,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,OAAO,aAAa,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7D,CAAC;AA+DD,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,IAAK,MAAgC,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,KAAK,GAAI,MAAyC,CAAC,KAAK,CAAC;IAC/D,OAAO,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC;AACzC,CAAC;AAED,yFAAyF;AACzF,SAAS,cAAc,CAAC,MAAe;IACrC,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,4CAA4C,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,IAAK,MAA8B,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACnD,OAAO,gGAAgG,CAAC;QAC1G,CAAC;QACD,IAAK,MAAgC,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACvD,OAAO,oGAAoG,CAAC;QAC9G,CAAC;IACH,CAAC;IACD,OAAO,yEAAyE,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgC;IACrE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,GAAG,EAAE,EAAE,iBAAiB,GAAG,mBAAmB,EAAE,GAAG,OAAO,CAAC;IAEjG,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,gFAAgF;YAC9E,kFAAkF;YAClF,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,2EAA2E;IAC3E,8EAA8E;IAC9E,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,iEAAiE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,8BAA8B;YAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,gCAAgC,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,aAAa;YAC/E,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACtD,sFAAsF,CACzF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,QAAQ,CACrB,MAAqB,EACrB,MAAc,EACd,IAA6B,EAC7B,iBAAkC;IAElC,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAE1D,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACzE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,eAAe,MAAM,sCAAsC;QACzD,6CAA6C,iBAAiB,wBAAwB,cAAc,CAAC,MAAM,CAAC,IAAI;QAChH,yGAAyG;QACzG,+DAA+D,CAClE,CAAC;AACJ,CAAC"}