@agentvault/agentvault 0.17.5 → 0.19.0

package/dist/mcp-handlers.d.ts

@@ -0,0 +1,26 @@
+/**
+ * MCP HTTP request handlers — routes /mcp requests to AgentVaultMcpServer.
+ *
+ * Supports both self-managed HTTP and OpenClaw managed routes.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { AgentVaultMcpServer } from "./mcp-server.js";
+/**
+ * Create an HTTP request handler for MCP routes.
+ *
+ * Routes:
+ *   POST /mcp  — MCP Streamable HTTP messages
+ *   GET  /mcp  — MCP SSE stream (for server-initiated messages)
+ *   DELETE /mcp — Close MCP session
+ *
+ * All other paths are passed through to the next handler.
+ */
+export declare function createMcpHandler(mcpServer: AgentVaultMcpServer | null, basePath?: string): (req: IncomingMessage, res: ServerResponse, next?: () => void) => void;
+/**
+ * Build a status object with MCP info for the /status endpoint.
+ */
+export declare function getMcpStatus(mcpServer: AgentVaultMcpServer | null): {
+    mcp_enabled: boolean;
+    mcp_skills_count: number;
+};
+//# sourceMappingURL=mcp-handlers.d.ts.map

package/dist/mcp-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-handlers.d.ts","sourceRoot":"","sources":["../src/mcp-handlers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,mBAAmB,GAAG,IAAI,EACrC,QAAQ,GAAE,MAAe,GACxB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,MAAM,IAAI,KAAK,IAAI,CA0BxE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,mBAAmB,GAAG,IAAI,GACpC;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAQpD"}

package/dist/mcp-proxy-helpers.d.ts

@@ -0,0 +1,9 @@
+import type { AgentVaultMcpServer } from "./mcp-server.js";
+/**
+ * Forward a JSON-RPC payload to the MCP server by creating synthetic
+ * HTTP request/response objects that the Streamable HTTP transport expects.
+ *
+ * Returns the MCP server's JSON-RPC response.
+ */
+export declare function createMcpProxyRequest(mcpServer: AgentVaultMcpServer, payload: unknown): Promise<unknown>;
+//# sourceMappingURL=mcp-proxy-helpers.d.ts.map

package/dist/mcp-proxy-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy-helpers.d.ts","sourceRoot":"","sources":["../src/mcp-proxy-helpers.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,OAAO,CAAC,CAqDlB"}

package/dist/mcp-server.d.ts

@@ -0,0 +1,90 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export interface SkillDefinition {
+    name: string;
+    version?: string;
+    description?: string;
+    /** JSON Schema for the tool input (not Zod — raw JSON Schema object). */
+    inputSchema?: Record<string, unknown>;
+    /** Freeform instructions that are surfaced as an MCP prompt. */
+    instructions?: string;
+    /** SLA definition blob attached to the skill registry resource. */
+    slaDefinition?: Record<string, unknown>;
+    /** Tags for categorisation. */
+    tags?: string[];
+    /** Tools/capabilities explicitly allowed for this skill. */
+    toolsAllowed?: string[];
+    /** Tools/capabilities explicitly denied for this skill. */
+    toolsDenied?: string[];
+    /** JSON Schema for skill output validation. */
+    outputSchema?: Record<string, unknown>;
+    /** Model routing strategy: "auto" | "round-robin" | "least-latency". */
+    modelRouting?: string;
+    /** Allowed LLM models for this skill. */
+    allowedModels?: string[];
+    /** Default LLM model for this skill. */
+    defaultModel?: string;
+    /** AgentVault certification tier: "verified" | "certified" | "enterprise". */
+    certificationTier?: string;
+    /** Integrity configuration (algorithm, hashChain). */
+    integrity?: Record<string, unknown>;
+    /** Required policy presets (e.g., ["network: agentvault"]). */
+    requiredPolicies?: string[];
+}
+export interface McpServerOpts {
+    agentName: string;
+    apiUrl: string;
+    apiKey?: string;
+    /**
+     * Called when an MCP client invokes a registered skill tool.
+     * Return value is serialised as JSON and sent back as tool output.
+     */
+    onInvoke?: (skillName: string, args: Record<string, unknown>) => Promise<unknown>;
+}
+export declare class AgentVaultMcpServer {
+    private server;
+    private skills;
+    private opts;
+    private initialized;
+    constructor(opts: McpServerOpts);
+    /**
+     * Register a skill that will be exposed as an MCP tool.
+     * Must be called *before* `initialize()`.
+     */
+    registerSkill(skill: SkillDefinition): void;
+    /**
+     * Register all skills as MCP tools / resources / prompts.
+     * Called lazily on first request if not called explicitly.
+     */
+    initialize(): void;
+    /**
+     * Handle an incoming HTTP request to the /mcp endpoint.
+     *
+     * Supports the Streamable HTTP transport protocol:
+     * - POST for JSON-RPC messages
+     * - GET  for SSE notification stream
+     * - DELETE for session close
+     *
+     * Each request gets a fresh stateless transport; after the response is
+     * flushed the transport + underlying protocol connection are torn down
+     * so the single McpServer instance is ready for the next caller.
+     *
+     * Local requests from 127.0.0.1/::1 bypass SPT validation (owner access).
+     */
+    handleRequest(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /**
+     * Register a single skill as an MCP tool.
+     *
+     * The MCP SDK's `tool()` overloads that accept a schema expect Zod types.
+     * Since our skill definitions use raw JSON Schema we register without
+     * schema validation (name + description + handler) and let the handler
+     * receive the raw args object.
+     */
+    private registerToolForSkill;
+    /**
+     * Validate a Service Provider Token against the AgentVault backend.
+     */
+    private validateSpt;
+    get skillCount(): number;
+    get isInitialized(): boolean;
+}
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAIhB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACnF;AAMD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,MAAM,CAA2C;IACzD,OAAO,CAAC,IAAI,CAAgB;IAC5B,OAAO,CAAC,WAAW,CAAS;gBAEhB,IAAI,EAAE,aAAa;IAU/B;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAI3C;;;OAGG;IACH,UAAU,IAAI,IAAI;IA2DlB;;;;;;;;;;;;;OAaG;IACG,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA4C7E;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IA6B5B;;OAEG;YACW,WAAW;IAwBzB,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,aAAa,IAAI,OAAO,CAE3B;CACF"}

package/dist/openclaw-compat.d.ts

@@ -0,0 +1,33 @@
+/**
+ * OpenClaw SDK compatibility layer — dynamic import wrappers with caching.
+ *
+ * Each wrapper attempts to import a deep SDK module at runtime. If the import
+ * fails (older gateway, missing SDK), the function returns a no-op result.
+ * Results are cached after the first attempt.
+ *
+ * IMPORTANT: All imports are guarded by try/catch — the plugin degrades
+ * gracefully on older OpenClaw versions.
+ */
+import type { AgentEventPayload, TranscriptUpdatePayload } from "./openclaw-types.js";
+/**
+ * Request an immediate heartbeat wake from the OpenClaw gateway.
+ * Returns true if the heartbeat API was available and called, false otherwise.
+ * Never throws.
+ */
+export declare function requestHeartbeatNow(opts?: {
+    reason?: string;
+}): Promise<boolean>;
+type AgentEventCallback = (event: AgentEventPayload) => void;
+/**
+ * Subscribe to agent-level events (tool_use, reasoning_complete, error, etc.).
+ * Returns an unsubscribe function, or a no-op if the API is unavailable.
+ */
+export declare function onAgentEvent(callback: AgentEventCallback): Promise<() => void>;
+type TranscriptCallback = (update: TranscriptUpdatePayload) => void;
+/**
+ * Subscribe to session transcript updates for behavioral analysis.
+ * Returns an unsubscribe function, or a no-op if the API is unavailable.
+ */
+export declare function onSessionTranscriptUpdate(callback: TranscriptCallback): Promise<() => void>;
+export {};
+//# sourceMappingURL=openclaw-compat.d.ts.map

package/dist/openclaw-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-compat.d.ts","sourceRoot":"","sources":["../src/openclaw-compat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAQtF;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAmBtF;AAMD,KAAK,kBAAkB,GAAG,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAG7D;;;GAGG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAkBpF;AAMD,KAAK,kBAAkB,GAAG,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;AAGpE;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAkBjG"}

package/dist/openclaw-entry.d.ts

@@ -0,0 +1,27 @@
+/**
+ * OpenClaw channel plugin entry point.
+ *
+ * Intentionally thin — no heavy imports (libsodium etc.) at module load time.
+ * SecureChannel is dynamically imported inside gateway.startAccount (already async)
+ * so libsodium's top-level await never runs during plugin registration.
+ *
+ * Loaded by OpenClaw via the `openclaw.extensions` field in package.json.
+ */
+import type { OpenClawPluginApi } from "./openclaw-types.js";
+/** Whether OpenClaw managed HTTP routes are active (vs self-managed server). */
+export declare let isUsingManagedRoutes: boolean;
+/** Extract @mention names from plaintext. Returns lowercased names. */
+declare function _parseMentions(text: string): string[];
+/** Determine whether this agent should process a room message based on @mentions. */
+declare function _shouldProcessRoomMessage(plaintext: string, agentName: string, accountId: string): boolean;
+/** Strip the matching @mention prefix from plaintext so the agent sees clean text. */
+declare function _stripMentions(text: string, agentName: string, accountId: string): string;
+export { _parseMentions, _shouldProcessRoomMessage, _stripMentions };
+declare const _default: {
+    id: string;
+    name: string;
+    description: string;
+    register(api: OpenClawPluginApi): void;
+};
+export default _default;
+//# sourceMappingURL=openclaw-entry.d.ts.map

package/dist/openclaw-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-entry.d.ts","sourceRoot":"","sources":["../src/openclaw-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,OAAO,KAAK,EACV,iBAAiB,EASlB,MAAM,qBAAqB,CAAC;AAsD7B,gFAAgF;AAChF,eAAO,IAAI,oBAAoB,SAAQ,CAAC;AA+CxC,uEAAuE;AACvE,iBAAS,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9C;AAED,qFAAqF;AACrF,iBAAS,yBAAyB,CAChC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAcT;AAED,sFAAsF;AACtF,iBAAS,cAAc,CACrB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAiBR;AAi7BD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,cAAc,EAAE,CAAC;;;;;kBAQrD,iBAAiB;;AAJjC,wBA2SE"}