@axiom-lattice/gateway 4.1.7 → 4.2.0

package/dist/{mcp-configs-SHRMQHIL.mjs → mcp-configs-IIKQM5GM.mjs}

@@ -11,7 +11,7 @@ import {
   testMcpServerConnection,
   testMcpServerTools,
   updateMcpServerConfig
-} from "./chunk-K4XELOSO.mjs";
+} from "./chunk-QKPZWWHH.mjs";
 export {
   connectMcpServer,
   convertToConnection,
@@ -26,4 +26,4 @@ export {
   testMcpServerTools,
   updateMcpServerConfig
 };
-//# sourceMappingURL=mcp-configs-SHRMQHIL.mjs.map
+//# sourceMappingURL=mcp-configs-IIKQM5GM.mjs.map

package/dist/mcpTransportRegistry-XMJ5Y2RG.mjs

@@ -0,0 +1,13 @@
+import {
+  clearSessions,
+  deleteSession,
+  getSession,
+  registerSession
+} from "./chunk-K32XEQLH.mjs";
+export {
+  clearSessions,
+  deleteSession,
+  getSession,
+  registerSession
+};
+//# sourceMappingURL=mcpTransportRegistry-XMJ5Y2RG.mjs.map

package/dist/mcpTransportRegistry-XMJ5Y2RG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/open-DCAOL5CG.mjs

@@ -0,0 +1,176 @@
+import {
+  deleteSession,
+  getSession,
+  registerSession
+} from "./chunk-K32XEQLH.mjs";
+
+// src/routes/open.ts
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+
+// src/services/open/openCredentials.ts
+var SPIKE_CREDENTIALS = /* @__PURE__ */ new Map([
+  [
+    "spike_all",
+    {
+      credentialId: "spike_all",
+      kind: "api_key",
+      tenantId: "spike-tenant",
+      projectId: "spike-project",
+      grants: [{ domain: "kb" }, { domain: "sandbox" }]
+    }
+  ],
+  [
+    "spike_kb",
+    {
+      credentialId: "spike_kb",
+      kind: "api_key",
+      tenantId: "spike-tenant",
+      projectId: "spike-project",
+      grants: [{ domain: "kb" }]
+    }
+  ]
+]);
+function resolveSpikeCredential(token) {
+  if (!token) return null;
+  return SPIKE_CREDENTIALS.get(token) ?? null;
+}
+
+// src/services/open/openMcpServer.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { randomUUID } from "crypto";
+
+// src/services/open/mcpCatalog.ts
+import { z } from "zod";
+function textResult(text) {
+  return [{ type: "text", text }];
+}
+var SPIKE_TOOL_CATALOG = [
+  {
+    toolName: "kb_search",
+    domain: "kb",
+    description: "Spike: pretend knowledge-base search.",
+    schema: {
+      query: z.string(),
+      limit: z.number().int().optional()
+    },
+    annotations: { readOnlyHint: true, destructiveHint: false },
+    execute: async (args) => {
+      const { query } = args;
+      return textResult(`kb_search spike result for: ${query}`);
+    }
+  },
+  {
+    toolName: "echo",
+    domain: "sandbox",
+    description: "Spike: echoes the message back.",
+    schema: { message: z.string() },
+    annotations: { readOnlyHint: true, destructiveHint: false },
+    execute: async (args) => {
+      const { message } = args;
+      return textResult(`echo: ${message}`);
+    }
+  }
+];
+function filterCatalogByGrants(credential) {
+  const domains = new Set(credential.grants.map((g) => g.domain));
+  return SPIKE_TOOL_CATALOG.filter((tool) => domains.has(tool.domain));
+}
+
+// src/services/open/openMcpServer.ts
+var OPEN_MCP_SERVER_INFO = {
+  name: "axiom-open",
+  version: "0.1.0"
+};
+function registerTools(server, tools) {
+  for (const tool of tools) {
+    server.registerTool(
+      tool.toolName,
+      {
+        description: tool.description,
+        inputSchema: tool.schema,
+        annotations: {
+          readOnlyHint: tool.annotations.readOnlyHint,
+          destructiveHint: tool.annotations.destructiveHint
+        }
+      },
+      async (args) => ({ content: await tool.execute(args) })
+    );
+  }
+}
+async function buildSessionServer(credential) {
+  const tools = filterCatalogByGrants(credential);
+  const server = new McpServer(OPEN_MCP_SERVER_INFO);
+  registerTools(server, tools);
+  const transport = new StreamableHTTPServerTransport({
+    sessionIdGenerator: () => {
+      const sessionId = randomUUID();
+      void registerSession(
+        sessionId,
+        { credentialId: credential.credentialId, kind: credential.kind },
+        { server, transport }
+      );
+      return sessionId;
+    },
+    enableJsonResponse: true,
+    onsessionclosed: (closedId) => {
+      void import("./mcpTransportRegistry-XMJ5Y2RG.mjs").then(
+        ({ deleteSession: deleteSession2 }) => deleteSession2(closedId)
+      );
+    }
+  });
+  await server.connect(transport);
+  return { server, transport, tools };
+}
+
+// src/routes/open.ts
+function extractBearer(request) {
+  const header = request.headers.authorization;
+  if (!header?.startsWith("Bearer ")) return void 0;
+  return header.slice("Bearer ".length).trim() || void 0;
+}
+function readSessionId(request) {
+  const raw = request.headers["mcp-session-id"];
+  const value = Array.isArray(raw) ? raw[0] : raw;
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function registerOpenRoutes(app) {
+  app.post("/open/mcp", async (request, reply) => {
+    const credential = resolveSpikeCredential(extractBearer(request));
+    if (!credential) {
+      return reply.status(401).send({ error: "AUTH_FAILED" });
+    }
+    const body = request.body;
+    const sessionId = readSessionId(request);
+    if (sessionId) {
+      const session = await getSession(sessionId);
+      if (!session || session.credential.credentialId !== credential.credentialId) {
+        return reply.status(404).send({ error: "SESSION_NOT_FOUND" });
+      }
+      reply.hijack();
+      await session.transport.handleRequest(request.raw, reply.raw, body);
+      return;
+    }
+    if (!isInitializeRequest(body)) {
+      return reply.status(400).send({ error: "SESSION_REQUIRED" });
+    }
+    const built = await buildSessionServer(credential);
+    reply.hijack();
+    await built.transport.handleRequest(request.raw, reply.raw, body);
+  });
+  app.delete(
+    "/open/mcp",
+    async (request, reply) => {
+      const sessionId = readSessionId(request);
+      if (!sessionId) {
+        return reply.status(400).send({ error: "SESSION_REQUIRED" });
+      }
+      await deleteSession(sessionId);
+      return reply.status(204).send();
+    }
+  );
+}
+export {
+  registerOpenRoutes
+};
+//# sourceMappingURL=open-DCAOL5CG.mjs.map

package/dist/open-DCAOL5CG.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/open.ts","../src/services/open/openCredentials.ts","../src/services/open/openMcpServer.ts","../src/services/open/mcpCatalog.ts"],"sourcesContent":["/**\n * Open API surface routes (Stage 0 spike): POST/DELETE /open/mcp.\n *\n * The route is a thin shell — credential resolution, catalog filtering,\n * and session lifecycle all live in services/open/*. The transport writes\n * the response itself, so the reply is hijacked (same precedent as the\n * Project Room SSE route).\n */\n\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport { isInitializeRequest } from \"@modelcontextprotocol/sdk/types.js\";\nimport { resolveSpikeCredential } from \"../services/open/openCredentials\";\nimport { buildSessionServer } from \"../services/open/openMcpServer\";\nimport { getSession, deleteSession } from \"../services/open/mcpTransportRegistry\";\n\nfunction extractBearer(request: FastifyRequest): string | undefined {\n  const header = request.headers.authorization;\n  if (!header?.startsWith(\"Bearer \")) return undefined;\n  return header.slice(\"Bearer \".length).trim() || undefined;\n}\n\nfunction readSessionId(request: FastifyRequest): string | undefined {\n  const raw = request.headers[\"mcp-session-id\"];\n  const value = Array.isArray(raw) ? raw[0] : raw;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nexport function registerOpenRoutes(app: FastifyInstance): void {\n  app.post(\"/open/mcp\", async (request: FastifyRequest, reply: FastifyReply) => {\n    const credential = resolveSpikeCredential(extractBearer(request));\n    if (!credential) {\n      return reply.status(401).send({ error: \"AUTH_FAILED\" });\n    }\n\n    const body: unknown = request.body;\n    const sessionId = readSessionId(request);\n\n    // Existing session: reuse its server/transport. Bearer must match the\n    // session's credential — a session is not usable by another key.\n    if (sessionId) {\n      const session = await getSession(sessionId);\n      if (\n        !session ||\n        session.credential.credentialId !== credential.credentialId\n      ) {\n        return reply.status(404).send({ error: \"SESSION_NOT_FOUND\" });\n      }\n      reply.hijack();\n      await session.transport.handleRequest(request.raw, reply.raw, body);\n      return;\n    }\n\n    // New session: only initialize may create one. Registration into the\n    // session registry happens inside sessionIdGenerator (see openMcpServer).\n    if (!isInitializeRequest(body)) {\n      return reply.status(400).send({ error: \"SESSION_REQUIRED\" });\n    }\n\n    const built = await buildSessionServer(credential);\n    reply.hijack();\n    await built.transport.handleRequest(request.raw, reply.raw, body);\n  });\n\n  app.delete(\n    \"/open/mcp\",\n    async (request: FastifyRequest, reply: FastifyReply) => {\n      const sessionId = readSessionId(request);\n      if (!sessionId) {\n        return reply.status(400).send({ error: \"SESSION_REQUIRED\" });\n      }\n      await deleteSession(sessionId);\n      return reply.status(204).send();\n    },\n  );\n}\n","/**\n * Spike-stage credential resolution for the Open MCP surface.\n *\n * Stage 1 replaces the fake map with the unified ApiKeyStore lookup;\n * the returned shape (OpenContext precursor) is the stable contract.\n */\n\nexport interface SpikeGrant {\n  /** Capability domain; spike supports \"kb\" and \"sandbox\". */\n  domain: string;\n}\n\nexport interface SpikeCredential {\n  credentialId: string;\n  kind: \"api_key\";\n  tenantId: string;\n  projectId: string;\n  grants: SpikeGrant[];\n}\n\nconst SPIKE_CREDENTIALS = new Map<string, SpikeCredential>([\n  [\n    \"spike_all\",\n    {\n      credentialId: \"spike_all\",\n      kind: \"api_key\",\n      tenantId: \"spike-tenant\",\n      projectId: \"spike-project\",\n      grants: [{ domain: \"kb\" }, { domain: \"sandbox\" }],\n    },\n  ],\n  [\n    \"spike_kb\",\n    {\n      credentialId: \"spike_kb\",\n      kind: \"api_key\",\n      tenantId: \"spike-tenant\",\n      projectId: \"spike-project\",\n      grants: [{ domain: \"kb\" }],\n    },\n  ],\n]);\n\n/** Resolve a Bearer token value to a spike credential, or null. */\nexport function resolveSpikeCredential(\n  token: string | undefined,\n): SpikeCredential | null {\n  if (!token) return null;\n  return SPIKE_CREDENTIALS.get(token) ?? null;\n}\n","/**\n * Builds a per-session MCP server instance whose tool list is the\n * credential-filtered catalog. Per-session instances are what make\n * grant-filtered tools/list possible on the official SDK.\n *\n * Session registration happens inside sessionIdGenerator — the SDK invokes\n * it exactly once while handling initialize, which guarantees the registry\n * key equals the transport-generated id that the response header carries.\n */\n\nimport { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { StreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/streamableHttp.js\";\nimport { randomUUID } from \"crypto\";\nimport { registerSession } from \"./mcpTransportRegistry\";\nimport {\n  filterCatalogByGrants,\n  type OpenToolDescriptor,\n} from \"./mcpCatalog\";\n\nexport const OPEN_MCP_SERVER_INFO = {\n  name: \"axiom-open\",\n  version: \"0.1.0\",\n} as const;\n\nfunction registerTools(server: McpServer, tools: OpenToolDescriptor[]): void {\n  for (const tool of tools) {\n    server.registerTool(\n      tool.toolName,\n      {\n        description: tool.description,\n        inputSchema: tool.schema,\n        annotations: {\n          readOnlyHint: tool.annotations.readOnlyHint,\n          destructiveHint: tool.annotations.destructiveHint,\n        },\n      },\n      async (args: unknown) => ({ content: await tool.execute(args) }),\n    );\n  }\n}\n\nexport interface BuiltSession {\n  server: McpServer;\n  transport: StreamableHTTPServerTransport;\n  tools: OpenToolDescriptor[];\n}\n\nexport async function buildSessionServer(credential: {\n  credentialId: string;\n  kind: string;\n  grants: Array<{ domain: string }>;\n}): Promise<BuiltSession> {\n  const tools = filterCatalogByGrants(credential);\n  const server = new McpServer(OPEN_MCP_SERVER_INFO);\n  registerTools(server, tools);\n  // Referenced by the sessionIdGenerator closure below; the SDK invokes that\n  // closure only while handling initialize — after this assignment completes.\n  const transport = new StreamableHTTPServerTransport({\n    sessionIdGenerator: () => {\n      const sessionId = randomUUID();\n      void registerSession(\n        sessionId,\n        { credentialId: credential.credentialId, kind: credential.kind },\n        { server, transport },\n      );\n      return sessionId;\n    },\n    enableJsonResponse: true,\n    onsessionclosed: (closedId: string) => {\n      void import(\"./mcpTransportRegistry\").then(({ deleteSession }) =>\n        deleteSession(closedId),\n      );\n    },\n  });\n  // Without connect the transport has no onmessage handler: the initialize\n  // request would be swallowed and handleRequest would never resolve.\n  await server.connect(transport);\n  return { server, transport, tools };\n}\n","/**\n * Spike tool catalog: a hardcoded stand-in for the future OpenLattice registry.\n * Stage 1 replaces this with registry-derived actions; the OpenToolDescriptor\n * shape (toolName + zod schema + annotations) is the stable contract.\n */\n\nimport { z } from \"zod\";\n\nexport interface OpenToolDescriptor {\n  /** MCP tool name, \"{domain}_{action}\" — must match ^[a-zA-Z0-9_-]{1,128}$. */\n  toolName: string;\n  /** Owning capability domain; catalog entries are filtered by this. */\n  domain: string;\n  description: string;\n  /** Zod raw shape — the SDK v1 registerTool inputSchema contract. */\n  schema: z.ZodRawShape;\n  annotations: { readOnlyHint: boolean; destructiveHint: boolean };\n  /** Spike executor; Stage 1 delegates to OpenLattice provider executors. */\n  execute: (args: unknown) => Promise<Array<{ type: \"text\"; text: string }>>;\n}\n\nfunction textResult(text: string): Array<{ type: \"text\"; text: string }> {\n  return [{ type: \"text\", text }];\n}\n\nexport const SPIKE_TOOL_CATALOG: OpenToolDescriptor[] = [\n  {\n    toolName: \"kb_search\",\n    domain: \"kb\",\n    description: \"Spike: pretend knowledge-base search.\",\n    schema: {\n      query: z.string(),\n      limit: z.number().int().optional(),\n    },\n    annotations: { readOnlyHint: true, destructiveHint: false },\n    execute: async (args) => {\n      const { query } = args as { query: string };\n      return textResult(`kb_search spike result for: ${query}`);\n    },\n  },\n  {\n    toolName: \"echo\",\n    domain: \"sandbox\",\n    description: \"Spike: echoes the message back.\",\n    schema: { message: z.string() },\n    annotations: { readOnlyHint: true, destructiveHint: false },\n    execute: async (args) => {\n      const { message } = args as { message: string };\n      return textResult(`echo: ${message}`);\n    },\n  },\n];\n\n/** default-deny: a tool is visible only when some grant covers its domain. */\nexport function filterCatalogByGrants(credential: {\n  grants: Array<{ domain: string }>;\n}): OpenToolDescriptor[] {\n  const domains = new Set(credential.grants.map((g) => g.domain));\n  return SPIKE_TOOL_CATALOG.filter((tool) => domains.has(tool.domain));\n}\n"],"mappings":";;;;;;;AAUA,SAAS,2BAA2B;;;ACUpC,IAAM,oBAAoB,oBAAI,IAA6B;AAAA,EACzD;AAAA,IACE;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ,CAAC,EAAE,QAAQ,KAAK,GAAG,EAAE,QAAQ,UAAU,CAAC;AAAA,IAClD;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,cAAc;AAAA,MACd,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ,CAAC,EAAE,QAAQ,KAAK,CAAC;AAAA,IAC3B;AAAA,EACF;AACF,CAAC;AAGM,SAAS,uBACd,OACwB;AACxB,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,kBAAkB,IAAI,KAAK,KAAK;AACzC;;;ACvCA,SAAS,iBAAiB;AAC1B,SAAS,qCAAqC;AAC9C,SAAS,kBAAkB;;;ACN3B,SAAS,SAAS;AAelB,SAAS,WAAW,MAAqD;AACvE,SAAO,CAAC,EAAE,MAAM,QAAQ,KAAK,CAAC;AAChC;AAEO,IAAM,qBAA2C;AAAA,EACtD;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,aAAa;AAAA,IACb,QAAQ;AAAA,MACN,OAAO,EAAE,OAAO;AAAA,MAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IACnC;AAAA,IACA,aAAa,EAAE,cAAc,MAAM,iBAAiB,MAAM;AAAA,IAC1D,SAAS,OAAO,SAAS;AACvB,YAAM,EAAE,MAAM,IAAI;AAClB,aAAO,WAAW,+BAA+B,KAAK,EAAE;AAAA,IAC1D;AAAA,EACF;AAAA,EACA;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,aAAa;AAAA,IACb,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE;AAAA,IAC9B,aAAa,EAAE,cAAc,MAAM,iBAAiB,MAAM;AAAA,IAC1D,SAAS,OAAO,SAAS;AACvB,YAAM,EAAE,QAAQ,IAAI;AACpB,aAAO,WAAW,SAAS,OAAO,EAAE;AAAA,IACtC;AAAA,EACF;AACF;AAGO,SAAS,sBAAsB,YAEb;AACvB,QAAM,UAAU,IAAI,IAAI,WAAW,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;AAC9D,SAAO,mBAAmB,OAAO,CAAC,SAAS,QAAQ,IAAI,KAAK,MAAM,CAAC;AACrE;;;ADxCO,IAAM,uBAAuB;AAAA,EAClC,MAAM;AAAA,EACN,SAAS;AACX;AAEA,SAAS,cAAc,QAAmB,OAAmC;AAC3E,aAAW,QAAQ,OAAO;AACxB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,QACE,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,aAAa;AAAA,UACX,cAAc,KAAK,YAAY;AAAA,UAC/B,iBAAiB,KAAK,YAAY;AAAA,QACpC;AAAA,MACF;AAAA,MACA,OAAO,UAAmB,EAAE,SAAS,MAAM,KAAK,QAAQ,IAAI,EAAE;AAAA,IAChE;AAAA,EACF;AACF;AAQA,eAAsB,mBAAmB,YAIf;AACxB,QAAM,QAAQ,sBAAsB,UAAU;AAC9C,QAAM,SAAS,IAAI,UAAU,oBAAoB;AACjD,gBAAc,QAAQ,KAAK;AAG3B,QAAM,YAAY,IAAI,8BAA8B;AAAA,IAClD,oBAAoB,MAAM;AACxB,YAAM,YAAY,WAAW;AAC7B,WAAK;AAAA,QACH;AAAA,QACA,EAAE,cAAc,WAAW,cAAc,MAAM,WAAW,KAAK;AAAA,QAC/D,EAAE,QAAQ,UAAU;AAAA,MACtB;AACA,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB;AAAA,IACpB,iBAAiB,CAAC,aAAqB;AACrC,WAAK,OAAO,qCAAwB,EAAE;AAAA,QAAK,CAAC,EAAE,eAAAA,eAAc,MAC1DA,eAAc,QAAQ;AAAA,MACxB;AAAA,IACF;AAAA,EACF,CAAC;AAGD,QAAM,OAAO,QAAQ,SAAS;AAC9B,SAAO,EAAE,QAAQ,WAAW,MAAM;AACpC;;;AF/DA,SAAS,cAAc,SAA6C;AAClE,QAAM,SAAS,QAAQ,QAAQ;AAC/B,MAAI,CAAC,QAAQ,WAAW,SAAS,EAAG,QAAO;AAC3C,SAAO,OAAO,MAAM,UAAU,MAAM,EAAE,KAAK,KAAK;AAClD;AAEA,SAAS,cAAc,SAA6C;AAClE,QAAM,MAAM,QAAQ,QAAQ,gBAAgB;AAC5C,QAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AAC5C,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAEO,SAAS,mBAAmB,KAA4B;AAC7D,MAAI,KAAK,aAAa,OAAO,SAAyB,UAAwB;AAC5E,UAAM,aAAa,uBAAuB,cAAc,OAAO,CAAC;AAChE,QAAI,CAAC,YAAY;AACf,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,cAAc,CAAC;AAAA,IACxD;AAEA,UAAM,OAAgB,QAAQ;AAC9B,UAAM,YAAY,cAAc,OAAO;AAIvC,QAAI,WAAW;AACb,YAAM,UAAU,MAAM,WAAW,SAAS;AAC1C,UACE,CAAC,WACD,QAAQ,WAAW,iBAAiB,WAAW,cAC/C;AACA,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MAC9D;AACA,YAAM,OAAO;AACb,YAAM,QAAQ,UAAU,cAAc,QAAQ,KAAK,MAAM,KAAK,IAAI;AAClE;AAAA,IACF;AAIA,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAAA,IAC7D;AAEA,UAAM,QAAQ,MAAM,mBAAmB,UAAU;AACjD,UAAM,OAAO;AACb,UAAM,MAAM,UAAU,cAAc,QAAQ,KAAK,MAAM,KAAK,IAAI;AAAA,EAClE,CAAC;AAED,MAAI;AAAA,IACF;AAAA,IACA,OAAO,SAAyB,UAAwB;AACtD,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,WAAW;AACd,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAAA,MAC7D;AACA,YAAM,cAAc,SAAS;AAC7B,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK;AAAA,IAChC;AAAA,EACF;AACF;","names":["deleteSession"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/gateway",
-  "version": "4.1.7",
+  "version": "4.2.0",
   "main": "dist/index.js",
   "files": [
     "dist"
@@ -32,6 +32,7 @@
     "@langchain/core": "1.1.30",
     "@langchain/langgraph": "1.0.4",
     "@larksuiteoapi/node-sdk": "^1.47.0",
+    "@modelcontextprotocol/sdk": "1.25.3",
     "@supabase/supabase-js": "^2.49.1",
     "bcryptjs": "^3.0.3",
     "dotenv": "^16.6.1",
@@ -46,11 +47,11 @@
     "tar": "^7.5.22",
     "uuid": "^9.0.1",
     "zod": "3.25.76",
-    "@axiom-lattice/cli-a2a": "0.2.4",
-    "@axiom-lattice/core": "4.2.6",
-    "@axiom-lattice/pg-stores": "3.1.6",
-    "@axiom-lattice/protocols": "4.1.4",
-    "@axiom-lattice/queue-redis": "1.1.4"
+    "@axiom-lattice/cli-a2a": "0.2.6",
+    "@axiom-lattice/core": "4.2.8",
+    "@axiom-lattice/pg-stores": "3.1.8",
+    "@axiom-lattice/protocols": "4.2.0",
+    "@axiom-lattice/queue-redis": "1.1.6"
   },
   "devDependencies": {
     "@types/bcrypt": "^6.0.0",
@@ -70,10 +71,12 @@
     "ts-node": "^10.9.2",
     "tsconfig-paths": "^4.2.0",
     "tsup": "^8.5.0",
-    "typescript": "^5.8.2"
+    "typescript": "^5.8.2",
+    "@axiom-lattice/react-sdk": "4.0.0"
   },
   "scripts": {
-    "build": "tsup src/index.ts --format cjs,esm --dts --clean --sourcemap",
+    "build": "tsup src/index.ts --format cjs,esm --dts --clean --sourcemap && pnpm copy:embed-assets",
+    "copy:embed-assets": "node scripts/copy-embed-assets.mjs",
     "start": "node dist/index.js",
     "dev": "tsup src/index.ts --format cjs,esm --dts --watch --sourcemap",
     "lint": "eslint src",