@angriff36/manifest 2.18.0

package/packages/mcp-server/dist/resources/semantics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantics.js","sourceRoot":"","sources":["../../src/resources/semantics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,yBAAyB,CAAC,MAAiB;IACzD,MAAM,CAAC,QAAQ,CACb,WAAW,EACX,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,eAAe;wBACzB,IAAI,EAAE,OAAO;qBACd;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,gCAAgC;qBACvC;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/packages/mcp-server/dist/server.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Server registration — wires all MCP tools and resources into the McpServer.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerTools(server: McpServer): void;
+export declare function registerResources(server: McpServer): void;
+//# sourceMappingURL=server.d.ts.map

package/packages/mcp-server/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AASzE,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAKrD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAIzD"}

package/packages/mcp-server/dist/server.js

@@ -0,0 +1,22 @@
+/**
+ * Server registration — wires all MCP tools and resources into the McpServer.
+ */
+import { registerCompileTool } from './tools/compile.js';
+import { registerExecuteTool } from './tools/execute.js';
+import { registerValidateTool } from './tools/validate.js';
+import { registerExplainTool } from './tools/explain.js';
+import { registerIRSchemaResource } from './resources/ir-schema.js';
+import { registerIRCacheResource } from './resources/ir-cache.js';
+import { registerSemanticsResource } from './resources/semantics.js';
+export function registerTools(server) {
+    registerCompileTool(server);
+    registerExecuteTool(server);
+    registerValidateTool(server);
+    registerExplainTool(server);
+}
+export function registerResources(server) {
+    registerIRSchemaResource(server);
+    registerIRCacheResource(server);
+    registerSemanticsResource(server);
+}
+//# sourceMappingURL=server.js.map

package/packages/mcp-server/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAErE,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC7B,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,yBAAyB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/packages/mcp-server/dist/state/session-store.d.ts

@@ -0,0 +1,39 @@
+/**
+ * In-process session store for compiled IR and RuntimeEngine instances.
+ *
+ * The MCP server is a long-lived stdio process managed by the host (e.g. Claude
+ * Desktop). This store caches compiled IR keyed by content hash so that the
+ * execute and explain tools can reference a prior compile result.
+ *
+ * No cross-process persistence — when the server process restarts, all cached
+ * IR is lost. Re-compilation is cheap (sub-millisecond for typical manifests).
+ */
+import type { IR } from '@angriff36/manifest/ir';
+import { RuntimeEngine, type RuntimeContext, type RuntimeOptions } from '@angriff36/manifest';
+export interface CacheEntry {
+    ir: IR;
+    contentHash: string;
+    engine: RuntimeEngine;
+    createdAt: number;
+}
+declare class SessionStore {
+    private cache;
+    private maxSize;
+    /**
+     * Store compiled IR and create a pre-warmed RuntimeEngine for it.
+     * Uses FIFO eviction when the cache exceeds maxSize.
+     */
+    store(contentHash: string, ir: IR, context?: RuntimeContext, options?: RuntimeOptions): void;
+    get(contentHash: string): CacheEntry | undefined;
+    getEngine(contentHash: string): RuntimeEngine | undefined;
+    getIR(contentHash: string): IR | undefined;
+    list(): Array<{
+        contentHash: string;
+        createdAt: number;
+    }>;
+    clear(): void;
+}
+/** Singleton session store for the MCP server process lifetime. */
+export declare const sessionStore: SessionStore;
+export {};
+//# sourceMappingURL=session-store.d.ts.map

package/packages/mcp-server/dist/state/session-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.d.ts","sourceRoot":"","sources":["../../src/state/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE9F,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,EAAE,CAAC;IACP,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,cAAM,YAAY;IAChB,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,OAAO,CAAM;IAErB;;;OAGG;IACH,KAAK,CACH,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,EAAE,EACN,OAAO,GAAE,cAAmB,EAC5B,OAAO,GAAE,cAAmB,GAC3B,IAAI;IAqBP,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAIhD,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIzD,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,EAAE,GAAG,SAAS;IAI1C,IAAI,IAAI,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAOzD,KAAK,IAAI,IAAI;CAGd;AAED,mEAAmE;AACnE,eAAO,MAAM,YAAY,cAAqB,CAAC"}

package/packages/mcp-server/dist/state/session-store.js

@@ -0,0 +1,58 @@
+/**
+ * In-process session store for compiled IR and RuntimeEngine instances.
+ *
+ * The MCP server is a long-lived stdio process managed by the host (e.g. Claude
+ * Desktop). This store caches compiled IR keyed by content hash so that the
+ * execute and explain tools can reference a prior compile result.
+ *
+ * No cross-process persistence — when the server process restarts, all cached
+ * IR is lost. Re-compilation is cheap (sub-millisecond for typical manifests).
+ */
+import { RuntimeEngine } from '@angriff36/manifest';
+class SessionStore {
+    cache = new Map();
+    maxSize = 50;
+    /**
+     * Store compiled IR and create a pre-warmed RuntimeEngine for it.
+     * Uses FIFO eviction when the cache exceeds maxSize.
+     */
+    store(contentHash, ir, context = {}, options = {}) {
+        if (this.cache.size >= this.maxSize && !this.cache.has(contentHash)) {
+            const firstKey = this.cache.keys().next().value;
+            if (firstKey !== undefined) {
+                this.cache.delete(firstKey);
+            }
+        }
+        const engine = new RuntimeEngine(ir, context, {
+            ...options,
+            requireValidProvenance: false,
+        });
+        this.cache.set(contentHash, {
+            ir,
+            contentHash,
+            engine,
+            createdAt: Date.now(),
+        });
+    }
+    get(contentHash) {
+        return this.cache.get(contentHash);
+    }
+    getEngine(contentHash) {
+        return this.cache.get(contentHash)?.engine;
+    }
+    getIR(contentHash) {
+        return this.cache.get(contentHash)?.ir;
+    }
+    list() {
+        return Array.from(this.cache.values()).map((e) => ({
+            contentHash: e.contentHash,
+            createdAt: e.createdAt,
+        }));
+    }
+    clear() {
+        this.cache.clear();
+    }
+}
+/** Singleton session store for the MCP server process lifetime. */
+export const sessionStore = new SessionStore();
+//# sourceMappingURL=session-store.js.map

package/packages/mcp-server/dist/state/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../src/state/session-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,aAAa,EAA4C,MAAM,qBAAqB,CAAC;AAS9F,MAAM,YAAY;IACR,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC3C,OAAO,GAAG,EAAE,CAAC;IAErB;;;OAGG;IACH,KAAK,CACH,WAAmB,EACnB,EAAM,EACN,UAA0B,EAAE,EAC5B,UAA0B,EAAE;QAE5B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE;YAC5C,GAAG,OAAO;YACV,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;YAC1B,EAAE;YACF,WAAW;YACX,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,WAAmB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,WAAmB;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;IACzC,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC"}

package/packages/mcp-server/dist/tools/compile.d.ts

@@ -0,0 +1,30 @@
+/**
+ * compile tool — compile .manifest source to IR JSON + diagnostics.
+ *
+ * Wraps `compileToIR` from the Manifest core and caches the result in
+ * the session store keyed by the IR's provenance contentHash.
+ * The returned contentHash is used by execute and explain tools to
+ * reference this compilation.
+ */
+import { z } from 'zod';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare const compileInputSchema: {
+    source: z.ZodString;
+    sourcePath: z.ZodOptional<z.ZodString>;
+};
+export declare function handleCompile(args: {
+    source: string;
+    sourcePath?: string;
+}): Promise<{
+    contentHash: string;
+    ir: import("@angriff36/manifest/ir.js").IR | null;
+    diagnostics: import("@angriff36/manifest/ir.js").IRDiagnostic[];
+    summary: {
+        entityCount: number;
+        commandCount: number;
+        policyCount: number;
+        hasErrors: boolean;
+    };
+}>;
+export declare function registerCompileTool(server: McpServer): void;
+//# sourceMappingURL=compile.d.ts.map

package/packages/mcp-server/dist/tools/compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/tools/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,eAAO,MAAM,kBAAkB;;;CAM9B,CAAC;AAEF,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;;;;;;;;;;GA8BA;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAY3D"}

package/packages/mcp-server/dist/tools/compile.js

@@ -0,0 +1,54 @@
+/**
+ * compile tool — compile .manifest source to IR JSON + diagnostics.
+ *
+ * Wraps `compileToIR` from the Manifest core and caches the result in
+ * the session store keyed by the IR's provenance contentHash.
+ * The returned contentHash is used by execute and explain tools to
+ * reference this compilation.
+ */
+import { z } from 'zod';
+import { compileToIR } from '@angriff36/manifest/ir-compiler';
+import { sessionStore } from '../state/session-store.js';
+export const compileInputSchema = {
+    source: z.string().describe('The .manifest source text to compile'),
+    sourcePath: z
+        .string()
+        .optional()
+        .describe('Optional file path for diagnostic messages'),
+};
+export async function handleCompile(args) {
+    const result = await compileToIR(args.source, {
+        useCache: false,
+        sourcePath: args.sourcePath,
+    });
+    const summary = {
+        entityCount: 0,
+        commandCount: 0,
+        policyCount: 0,
+        hasErrors: result.diagnostics.some((d) => d.severity === 'error'),
+    };
+    // Use the IR's provenance contentHash as the cache key.
+    // The IR compiler already computes SHA-256 of the source.
+    const contentHash = result.ir?.provenance?.contentHash ?? '';
+    if (result.ir) {
+        sessionStore.store(contentHash, result.ir);
+        summary.entityCount = result.ir.entities.length;
+        summary.commandCount = result.ir.commands.length;
+        summary.policyCount = result.ir.policies.length;
+    }
+    return {
+        contentHash,
+        ir: result.ir,
+        diagnostics: result.diagnostics,
+        summary,
+    };
+}
+export function registerCompileTool(server) {
+    server.tool('compile', 'Compile Manifest DSL source to Intermediate Representation (IR). Returns IR JSON, diagnostics, and a contentHash handle for use with execute/explain tools.', compileInputSchema, async (args) => {
+        const result = await handleCompile(args);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+    });
+}
+//# sourceMappingURL=compile.js.map

package/packages/mcp-server/dist/tools/compile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../src/tools/compile.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACnE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC;CAC1D,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAGnC;IACC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE;QAC5C,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;KAClE,CAAC;IAEF,wDAAwD;IACxD,0DAA0D;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,WAAW,IAAI,EAAE,CAAC;IAE7D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QACjD,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClD,CAAC;IAED,OAAO;QACL,WAAW;QACX,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,OAAO;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,MAAM,CAAC,IAAI,CACT,SAAS,EACT,6JAA6J,EAC7J,kBAAkB,EAClB,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/packages/mcp-server/dist/tools/execute.d.ts

@@ -0,0 +1,112 @@
+/**
+ * execute tool — execute a command against a previously compiled IR.
+ *
+ * References a prior compile result by contentHash and runs the named
+ * command through the Manifest RuntimeEngine.
+ */
+import { z } from 'zod';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { RuntimeContext } from '@angriff36/manifest';
+export declare const executeInputSchema: {
+    contentHash: z.ZodString;
+    commandName: z.ZodString;
+    input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    entityName: z.ZodOptional<z.ZodString>;
+    instanceId: z.ZodOptional<z.ZodString>;
+    context: z.ZodOptional<z.ZodObject<{
+        tenantId: z.ZodOptional<z.ZodString>;
+        orgId: z.ZodOptional<z.ZodString>;
+        actorId: z.ZodOptional<z.ZodString>;
+        requestId: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        user: z.ZodOptional<z.ZodObject<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        tenantId: z.ZodOptional<z.ZodString>;
+        orgId: z.ZodOptional<z.ZodString>;
+        actorId: z.ZodOptional<z.ZodString>;
+        requestId: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        user: z.ZodOptional<z.ZodObject<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        tenantId: z.ZodOptional<z.ZodString>;
+        orgId: z.ZodOptional<z.ZodString>;
+        actorId: z.ZodOptional<z.ZodString>;
+        requestId: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        user: z.ZodOptional<z.ZodObject<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+            id: z.ZodString;
+            role: z.ZodOptional<z.ZodString>;
+        }, z.ZodTypeAny, "passthrough">>>;
+    }, z.ZodTypeAny, "passthrough">>>;
+};
+export declare function handleExecute(args: {
+    contentHash: string;
+    commandName: string;
+    input: Record<string, unknown>;
+    entityName?: string;
+    instanceId?: string;
+    context?: RuntimeContext;
+}): Promise<{
+    success: boolean;
+    error: string;
+    emittedEvents: never[];
+    result?: undefined;
+    deniedBy?: undefined;
+    guardFailure?: undefined;
+    policyDenial?: undefined;
+    constraintOutcomes?: undefined;
+} | {
+    success: boolean;
+    result: unknown;
+    error: string | undefined;
+    deniedBy: string | undefined;
+    guardFailure: {
+        index: number;
+        expression: string;
+        formatted: string;
+        resolved: import("@angriff36/manifest").GuardResolvedValue[] | undefined;
+    } | undefined;
+    policyDenial: {
+        policyName: string;
+        formatted: string;
+        message: string | undefined;
+    } | undefined;
+    constraintOutcomes: {
+        code: string;
+        constraintName: string;
+        severity: "ok" | "warn" | "block";
+        passed: boolean;
+        message: string | undefined;
+    }[] | undefined;
+    emittedEvents: {
+        name: string;
+        channel: string;
+        payload: unknown;
+    }[];
+}>;
+export declare function registerExecuteTool(server: McpServer): void;
+//# sourceMappingURL=execute.d.ts.map

package/packages/mcp-server/dist/tools/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkC9B,CAAC;AAEF,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDA;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAY3D"}

package/packages/mcp-server/dist/tools/execute.js

@@ -0,0 +1,103 @@
+/**
+ * execute tool — execute a command against a previously compiled IR.
+ *
+ * References a prior compile result by contentHash and runs the named
+ * command through the Manifest RuntimeEngine.
+ */
+import { z } from 'zod';
+import { sessionStore } from '../state/session-store.js';
+export const executeInputSchema = {
+    contentHash: z
+        .string()
+        .describe('SHA-256 content hash from a prior compile call'),
+    commandName: z.string().describe('Name of the command to execute'),
+    input: z
+        .record(z.unknown())
+        .describe('Command input parameters as key-value pairs'),
+    entityName: z
+        .string()
+        .optional()
+        .describe('Entity context (required for entity-scoped commands)'),
+    instanceId: z
+        .string()
+        .optional()
+        .describe('Target entity instance ID'),
+    context: z
+        .object({
+        tenantId: z.string().optional(),
+        orgId: z.string().optional(),
+        actorId: z.string().optional(),
+        requestId: z.string().optional(),
+        source: z.string().optional(),
+        user: z
+            .object({
+            id: z.string(),
+            role: z.string().optional(),
+        })
+            .passthrough()
+            .optional(),
+    })
+        .passthrough()
+        .optional()
+        .describe('Runtime context overrides (tenant, user, etc.)'),
+};
+export async function handleExecute(args) {
+    const entry = sessionStore.get(args.contentHash);
+    if (!entry) {
+        return {
+            success: false,
+            error: `No compiled IR found for contentHash '${args.contentHash}'. Run compile first.`,
+            emittedEvents: [],
+        };
+    }
+    const { engine } = entry;
+    if (args.context) {
+        engine.replaceContext(args.context);
+    }
+    const result = await engine.runCommand(args.commandName, args.input, {
+        entityName: args.entityName,
+        instanceId: args.instanceId,
+    });
+    return {
+        success: result.success,
+        result: result.result,
+        error: result.error,
+        deniedBy: result.deniedBy,
+        guardFailure: result.guardFailure
+            ? {
+                index: result.guardFailure.index,
+                expression: result.guardFailure.formatted,
+                formatted: result.guardFailure.formatted,
+                resolved: result.guardFailure.resolved,
+            }
+            : undefined,
+        policyDenial: result.policyDenial
+            ? {
+                policyName: result.policyDenial.policyName,
+                formatted: result.policyDenial.formatted,
+                message: result.policyDenial.message,
+            }
+            : undefined,
+        constraintOutcomes: result.constraintOutcomes?.map((co) => ({
+            code: co.code,
+            constraintName: co.constraintName,
+            severity: co.severity,
+            passed: co.passed,
+            message: co.message,
+        })),
+        emittedEvents: result.emittedEvents.map((e) => ({
+            name: e.name,
+            channel: e.channel,
+            payload: e.payload,
+        })),
+    };
+}
+export function registerExecuteTool(server) {
+    server.tool('execute', 'Execute a Manifest command against previously compiled IR. Requires a contentHash from a prior compile call.', executeInputSchema, async (args) => {
+        const result = await handleExecute(args);
+        return {
+            content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+    });
+}
+//# sourceMappingURL=execute.js.map

package/packages/mcp-server/dist/tools/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGzD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAClE,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACnB,QAAQ,CAAC,6CAA6C,CAAC;IAC1D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sDAAsD,CAAC;IACnE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;IACxC,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC;YACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC5B,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;KACd,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;SACV,QAAQ,CAAC,gDAAgD,CAAC;CAC9D,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAOnC;IACC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,yCAAyC,IAAI,CAAC,WAAW,uBAAuB;YACvF,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAEzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE;QACnE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;gBAChC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;gBACzC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;gBACxC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ;aACvC;YACH,CAAC,CAAC,SAAS;QACb,YAAY,EAAE,MAAM,CAAC,YAAY;YAC/B,CAAC,CAAC;gBACE,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU;gBAC1C,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS;gBACxC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,OAAO;aACrC;YACH,CAAC,CAAC,SAAS;QACb,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,cAAc,EAAE,EAAE,CAAC,cAAc;YACjC,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,OAAO,EAAE,EAAE,CAAC,OAAO;SACpB,CAAC,CAAC;QACH,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,MAAM,CAAC,IAAI,CACT,SAAS,EACT,8GAA8G,EAC9G,kBAAkB,EAClB,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/packages/mcp-server/dist/tools/explain.d.ts

@@ -0,0 +1,25 @@
+/**
+ * explain tool — explain an IR entity, command, or policy in human-readable form.
+ *
+ * References a prior compile result by contentHash and formats structured
+ * information about the requested target.
+ */
+import { z } from 'zod';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare const explainInputSchema: {
+    contentHash: z.ZodString;
+    target: z.ZodEnum<["entity", "command", "policy"]>;
+    name: z.ZodString;
+    entityName: z.ZodOptional<z.ZodString>;
+};
+export declare function handleExplain(args: {
+    contentHash: string;
+    target: 'entity' | 'command' | 'policy';
+    name: string;
+    entityName?: string;
+}): {
+    explanation: string;
+    details: unknown;
+};
+export declare function registerExplainTool(server: McpServer): void;
+//# sourceMappingURL=explain.d.ts.map

package/packages/mcp-server/dist/tools/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/tools/explain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,eAAO,MAAM,kBAAkB;;;;;CAY9B,CAAC;AAmMF,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CA0D5C;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAY3D"}