@auctra/mcp-gateway 0.1.9 → 0.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auctra/mcp-gateway",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "MCP gateway — gate tool calls and MCP/skill installs through Auctra action.execute",
   "type": "module",
   "main": "./src/index.js",

package/src/index.js

@@ -16,11 +16,12 @@ export function requireMcpGateway() {
 }
 
 export class McpToolBlockedError extends Error {
-  constructor(message, decision, evidence) {
+  constructor(message, decision, evidence, actionDecision = null) {
     super(message);
     this.name = "McpToolBlockedError";
     this.decision = decision;
     this.evidence = evidence;
+    this.actionDecision = actionDecision;
   }
 }
 
@@ -146,7 +147,7 @@ export async function gateMcpInstall(input) {
   if (result.decision !== "allowed") {
     const evidenceId = evidenceIdFromResult(result);
     const message = evidenceId ? `${result.reason} (evidence: ${evidenceId})` : result.reason;
-    throw new McpToolBlockedError(message, result.decision, result.evidence);
+    throw new McpToolBlockedError(message, result.decision, result.evidence, result.action_decision ?? null);
   }
 
   return { ...result, metadata };
@@ -195,7 +196,7 @@ export async function gateMcpToolCall(input) {
   if (result.decision !== "allowed") {
     const evidenceId = evidenceIdFromResult(result);
     const message = evidenceId ? `${result.reason} (evidence: ${evidenceId})` : result.reason;
-    throw new McpToolBlockedError(message, result.decision, result.evidence);
+    throw new McpToolBlockedError(message, result.decision, result.evidence, result.action_decision ?? null);
   }
 
   const requireLease =
@@ -209,6 +210,7 @@ export async function gateMcpToolCall(input) {
         "execution lease required but action.execute returned none — configure AUCTRA_EXECUTION_LEASE_SECRET",
         "blocked",
         result.evidence,
+        result.action_decision ?? null,
       );
     }
     if (!input.client.executionLease?.consume) {
@@ -217,18 +219,21 @@ export async function gateMcpToolCall(input) {
           "executionLease.consume client method required when AUCTRA_REQUIRE_EXECUTION_LEASE=1",
           "blocked",
           result.evidence,
+          result.action_decision ?? null,
         );
       }
     } else {
       const consumed = await input.client.executionLease.consume({
         lease: leaseToken,
         expectedActionType: resolveActionType(input),
+        expectedRequestFingerprint: result.execution_lease?.request_fingerprint,
       });
       if (!consumed.ok) {
         throw new McpToolBlockedError(
           consumed.error ?? "execution lease consume failed",
           "blocked",
           result.evidence,
+          result.action_decision ?? null,
         );
       }
     }

package/src/index.ts

@@ -42,6 +42,7 @@ export type ExecuteActionClient = {
         expires_at: string;
         action_request_id: string;
         action_type: string;
+        request_fingerprint?: string;
       } | null;
       evidence?: {
         format: string;
@@ -56,6 +57,7 @@ export type ExecuteActionClient = {
     consume(input: {
       lease: string;
       expectedActionType?: string;
+      expectedRequestFingerprint?: string;
     }): Promise<{ ok: boolean; error?: string; reason_codes?: string[] }>;
   };
 };
@@ -376,6 +378,7 @@ export async function gateMcpToolCall(input: McpToolGateInput) {
       const consumed = await input.client.executionLease.consume({
         lease: leaseToken,
         expectedActionType: resolveActionType(input),
+        expectedRequestFingerprint: result.execution_lease?.request_fingerprint,
       });
       if (!consumed.ok) {
         throw new McpToolBlockedError(