@amalgm/tools 0.1.7-preview.34938534039 → 0.1.7-preview.35132305560

package/PURPOSE.md

@@ -43,6 +43,10 @@ and parity evidence only.
 
 ## Axioms
 
+MCP execution context belongs to each host-admitted call. It passes unchanged
+to the driver, never comes from model-supplied arguments or metadata, and never
+leaks between concurrent calls sharing a prepared Toolbox view.
+
 Consumer assembly derives exact same-branch dependency pins from the declared
 package manifests and registry candidate records. One pending composition per
 branch preserves human edits; complete consumer checks for the exact merge tree govern its

package/dist/mcp-server.d.ts

@@ -14,7 +14,7 @@ declare function createMcpServer<T extends Toolbox | ToolboxView = Toolbox>(opti
     mcp?: McpOptions;
 }): {
     toolbox: T;
-    handle: (request: Request) => Promise<unknown>;
+    handle: (request: Request, context?: unknown) => Promise<unknown>;
     start: (input?: Readable, output?: Writable) => readline.Interface;
 };
 export { createMcpServer };

package/dist/mcp-server.js

@@ -8,7 +8,8 @@ function descriptor(tool) {
 function createMcpServer(options = {}) {
     const toolbox = options.toolbox || new Toolbox(options);
     const mcpOptions = options.mcp || {};
-    async function handle(request) {
+    /** Context is supplied by the trusted transport host, never parsed from MCP input. */
+    async function handle(request, context) {
         if (request.method === 'initialize') {
             return {
                 protocolVersion: request.params?.protocolVersion || '2024-11-05',
@@ -23,7 +24,7 @@ function createMcpServer(options = {}) {
             return { tools: tools.map(descriptor) };
         if (request.method === 'tools/call') {
             try {
-                return await callMcpTool(toolbox, String(request.params?.name || ''), request.params?.arguments || {}, mcpOptions);
+                return await callMcpTool(toolbox, String(request.params?.name || ''), request.params?.arguments || {}, context === undefined ? mcpOptions : { ...mcpOptions, context });
             }
             catch (error) {
                 if (error instanceof Error && error.message.startsWith('Unknown tool:')) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/tools",
-  "version": "0.1.7-preview.34938534039",
+  "version": "0.1.7-preview.35132305560",
   "description": "Local-first tool definitions, Toolbox registry, and agent execution surfaces.",
   "license": "UNLICENSED",
   "private": false,
@@ -88,11 +88,11 @@
       "package.json"
     ]
   },
-  "gitHead": "f5da1898ae08a6531db09197968c1a7134b209f8",
+  "gitHead": "5f61d1c4c9e5eeff976708c7afb7ec615d6d1aab",
   "amalgmSource": {
     "repository": "amalgm-inc/amalgm-tools",
     "branch": "preview",
-    "commit": "f5da1898ae08a6531db09197968c1a7134b209f8",
-    "occurrence": "34938534039"
+    "commit": "5f61d1c4c9e5eeff976708c7afb7ec615d6d1aab",
+    "occurrence": "35132305560"
   }
 }