@axiom-lattice/gateway 4.2.0 → 4.2.1

package/dist/kbProvider-2D6DZ34N.mjs

@@ -0,0 +1,50 @@
+import "./chunk-NFEGQTCC.mjs";
+
+// src/services/open/providers/kbProvider.ts
+import { z } from "zod";
+function createKbProvider(collectionService) {
+  return {
+    domain: "kb",
+    label: "Knowledge Base",
+    source: "builtin",
+    scopeKind: "tenant",
+    actions: [
+      {
+        name: "search",
+        label: "Search collections",
+        description: "Search a knowledge base collection. Returns matched entries with content, metadata and similarity score.",
+        schema: {
+          collection: z.string().min(1),
+          query: z.string().min(1),
+          limit: z.number().int().min(1).max(50).optional()
+        },
+        annotations: { readOnlyHint: true, destructiveHint: false }
+      }
+    ],
+    execute: async (action, args, ctx) => {
+      if (action !== "search") {
+        return {
+          content: [{ type: "text", text: `Unknown kb action: ${action}` }],
+          isError: true
+        };
+      }
+      const { collection, query, limit } = args;
+      const req = {
+        user: { tenantId: ctx.tenantId },
+        headers: {}
+      };
+      const entries = await collectionService.searchEntries(
+        req,
+        collection,
+        { query, top_k: limit ?? 5 }
+      );
+      return {
+        content: [{ type: "text", text: JSON.stringify(entries, null, 2) }]
+      };
+    }
+  };
+}
+export {
+  createKbProvider
+};
+//# sourceMappingURL=kbProvider-2D6DZ34N.mjs.map

package/dist/kbProvider-2D6DZ34N.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/open/providers/kbProvider.ts"],"sourcesContent":["/**\n * Built-in kb provider for the Open surface: knowledge-base search.\n *\n * Delegates to CollectionService (business code, zero changes) with a\n * synthesized minimal request — collection_service's getTenantId reads\n * user.tenantId, and the Open context always carries the credential-derived\n * tenant (never a caller-supplied header).\n */\n\nimport { z } from \"zod\";\nimport type { FastifyRequest } from \"fastify\";\nimport type {\n  OpenExecutionContext,\n  OpenExecutionResult,\n} from \"@axiom-lattice/protocols\";\nimport { CollectionService } from \"../../../services/collection_service\";\nimport type { OpenProviderDeclaration } from \"../openLattice\";\n\nexport function createKbProvider(\n  collectionService: CollectionService,\n): OpenProviderDeclaration {\n  return {\n    domain: \"kb\",\n    label: \"Knowledge Base\",\n    source: \"builtin\",\n    scopeKind: \"tenant\",\n    actions: [\n      {\n        name: \"search\",\n        label: \"Search collections\",\n        description:\n          \"Search a knowledge base collection. Returns matched entries with content, metadata and similarity score.\",\n        schema: {\n          collection: z.string().min(1),\n          query: z.string().min(1),\n          limit: z.number().int().min(1).max(50).optional(),\n        },\n        annotations: { readOnlyHint: true, destructiveHint: false },\n      },\n    ],\n    execute: async (\n      action: string,\n      args: unknown,\n      ctx: OpenExecutionContext,\n    ): Promise<OpenExecutionResult> => {\n      if (action !== \"search\") {\n        return {\n          content: [{ type: \"text\", text: `Unknown kb action: ${action}` }],\n          isError: true,\n        };\n      }\n      const { collection, query, limit } = args as {\n        collection: string;\n        query: string;\n        limit?: number;\n      };\n      const req = {\n        user: { tenantId: ctx.tenantId },\n        headers: {},\n      } as unknown as FastifyRequest;\n      const entries = await collectionService.searchEntries(\n        req,\n        collection,\n        { query, top_k: limit ?? 5 },\n      );\n      return {\n        content: [{ type: \"text\", text: JSON.stringify(entries, null, 2) }],\n      };\n    },\n  };\n}\n"],"mappings":";;;AASA,SAAS,SAAS;AASX,SAAS,iBACd,mBACyB;AACzB,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,SAAS;AAAA,MACP;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,aACE;AAAA,QACF,QAAQ;AAAA,UACN,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,UAC5B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,UACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,QAClD;AAAA,QACA,aAAa,EAAE,cAAc,MAAM,iBAAiB,MAAM;AAAA,MAC5D;AAAA,IACF;AAAA,IACA,SAAS,OACP,QACA,MACA,QACiC;AACjC,UAAI,WAAW,UAAU;AACvB,eAAO;AAAA,UACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,sBAAsB,MAAM,GAAG,CAAC;AAAA,UAChE,SAAS;AAAA,QACX;AAAA,MACF;AACA,YAAM,EAAE,YAAY,OAAO,MAAM,IAAI;AAKrC,YAAM,MAAM;AAAA,QACV,MAAM,EAAE,UAAU,IAAI,SAAS;AAAA,QAC/B,SAAS,CAAC;AAAA,MACZ;AACA,YAAM,UAAU,MAAM,kBAAkB;AAAA,QACtC;AAAA,QACA;AAAA,QACA,EAAE,OAAO,OAAO,SAAS,EAAE;AAAA,MAC7B;AACA,aAAO;AAAA,QACL,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,UAAU,SAAS,MAAM,CAAC,EAAE,CAAC;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{mcp-configs-IIKQM5GM.mjs → mcp-configs-WCY5EXCW.mjs}

@@ -12,6 +12,7 @@ import {
   testMcpServerTools,
   updateMcpServerConfig
 } from "./chunk-QKPZWWHH.mjs";
+import "./chunk-NFEGQTCC.mjs";
 export {
   connectMcpServer,
   convertToConnection,
@@ -26,4 +27,4 @@ export {
   testMcpServerTools,
   updateMcpServerConfig
 };
-//# sourceMappingURL=mcp-configs-IIKQM5GM.mjs.map
+//# sourceMappingURL=mcp-configs-WCY5EXCW.mjs.map

package/dist/mcp-configs-WCY5EXCW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{mcpTransportRegistry-XMJ5Y2RG.mjs → mcpTransportRegistry-VXUVJKBC.mjs}

@@ -4,10 +4,11 @@ import {
   getSession,
   registerSession
 } from "./chunk-K32XEQLH.mjs";
+import "./chunk-NFEGQTCC.mjs";
 export {
   clearSessions,
   deleteSession,
   getSession,
   registerSession
 };
-//# sourceMappingURL=mcpTransportRegistry-XMJ5Y2RG.mjs.map
+//# sourceMappingURL=mcpTransportRegistry-VXUVJKBC.mjs.map

package/dist/mcpTransportRegistry-VXUVJKBC.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/open-HH7RKGML.mjs

@@ -0,0 +1,260 @@
+import {
+  deleteSession,
+  getSession,
+  registerSession
+} from "./chunk-K32XEQLH.mjs";
+import {
+  OpenAuditService,
+  OpenCredentialService
+} from "./chunk-52SUWMOX.mjs";
+import {
+  ActionNotFoundError,
+  GrantDeniedError,
+  ValidationError,
+  openLattice
+} from "./chunk-GF4GGTWJ.mjs";
+import "./chunk-WKNZ7GBC.mjs";
+import "./chunk-NFEGQTCC.mjs";
+
+// src/routes/open.ts
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+import { getStoreLattice } from "@axiom-lattice/core";
+
+// src/services/open/openRateLimiter.ts
+var OpenRateLimiter = class {
+  constructor(options = {}) {
+    this.buckets = /* @__PURE__ */ new Map();
+    this.defaultPerMinute = options.defaultPerMinute ?? 60;
+    this.agentPerMinute = options.agentPerMinute ?? 10;
+  }
+  bucketClass(domain) {
+    return domain === "agent" ? "agent" : "default";
+  }
+  limitFor(domain) {
+    return domain === "agent" ? this.agentPerMinute : this.defaultPerMinute;
+  }
+  /** Consume one token; denied calls report how long to wait. */
+  check(credentialId, domain) {
+    const limit = this.limitFor(domain);
+    const key = `${this.bucketClass(domain)}:${credentialId}`;
+    const now = Date.now();
+    const bucket = this.buckets.get(key) ?? { tokens: limit, updatedAt: now };
+    const refillPerMs = limit / 6e4;
+    const elapsed = now - bucket.updatedAt;
+    bucket.tokens = Math.min(limit, bucket.tokens + elapsed * refillPerMs);
+    bucket.updatedAt = now;
+    if (bucket.tokens >= 1) {
+      bucket.tokens -= 1;
+      this.buckets.set(key, bucket);
+      return { allowed: true };
+    }
+    this.buckets.set(key, bucket);
+    const deficit = 1 - bucket.tokens;
+    return { allowed: false, retryAfterMs: Math.ceil(deficit / refillPerMs) };
+  }
+  /** Test helper. */
+  reset() {
+    this.buckets.clear();
+  }
+};
+
+// src/services/open/openMcpServer.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { randomUUID } from "crypto";
+var OPEN_MCP_SERVER_INFO = {
+  name: "axiom-open",
+  version: "0.1.0"
+};
+async function buildSessionServer(options) {
+  const { credential, grants, catalog, invoke } = options;
+  const server = new McpServer(OPEN_MCP_SERVER_INFO);
+  for (const tool of catalog) {
+    server.registerTool(
+      tool.toolName,
+      {
+        description: tool.description,
+        inputSchema: tool.schema,
+        annotations: {
+          readOnlyHint: tool.annotations.readOnlyHint,
+          destructiveHint: tool.annotations.destructiveHint
+        }
+      },
+      async (args) => {
+        const result = await invoke(tool.toolName, args);
+        return { content: result.content, isError: result.isError };
+      }
+    );
+  }
+  const transport = new StreamableHTTPServerTransport({
+    sessionIdGenerator: () => {
+      const sessionId = randomUUID();
+      void registerSession(
+        sessionId,
+        { credentialId: credential.credentialId, kind: credential.kind },
+        { server, transport }
+      );
+      return sessionId;
+    },
+    enableJsonResponse: true,
+    onsessionclosed: (closedId) => {
+      void import("./mcpTransportRegistry-VXUVJKBC.mjs").then(
+        ({ deleteSession: deleteSession2 }) => deleteSession2(closedId)
+      );
+    }
+  });
+  await server.connect(transport);
+  return { server, transport, tools: catalog };
+}
+
+// src/routes/open.ts
+function extractBearer(request) {
+  const header = request.headers.authorization;
+  if (!header?.startsWith("Bearer ")) return void 0;
+  return header.slice("Bearer ".length).trim() || void 0;
+}
+function readSessionId(request) {
+  const raw = request.headers["mcp-session-id"];
+  const value = Array.isArray(raw) ? raw[0] : raw;
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+var RPC_ERROR = {
+  GRANT_DENIED: -32001,
+  ACTION_NOT_FOUND: -32002,
+  VALIDATION_FAILED: -32003,
+  EXECUTION_ERROR: -32004,
+  RATE_LIMITED: -32005
+};
+function registerOpenRoutes(app, deps = {}) {
+  const openAuth = deps.openAuth ?? new OpenCredentialService(
+    getStoreLattice("default", "a2aApiKey").store,
+    getStoreLattice("default", "project").store
+  );
+  const grantsSource = deps.grantsSource ?? ((ctx) => ctx.grants);
+  const audit = deps.audit ?? (() => {
+    try {
+      const store = getStoreLattice("default", "openAudit").store;
+      return new OpenAuditService(store);
+    } catch {
+      return void 0;
+    }
+  })();
+  const rateLimiter = deps.rateLimiter ?? new OpenRateLimiter();
+  app.post("/open/mcp", async (request, reply) => {
+    const context = await openAuth.resolve(extractBearer(request));
+    if (!context) {
+      return reply.status(401).send({ error: "AUTH_FAILED" });
+    }
+    const body = request.body;
+    const sessionId = readSessionId(request);
+    if (sessionId) {
+      const session = await getSession(sessionId);
+      if (!session || session.credential.credentialId !== context.credentialId) {
+        return reply.status(404).send({ error: "SESSION_NOT_FOUND" });
+      }
+      reply.hijack();
+      await session.transport.handleRequest(request.raw, reply.raw, body);
+      return;
+    }
+    if (!isInitializeRequest(body)) {
+      return reply.status(400).send({ error: "SESSION_REQUIRED" });
+    }
+    const grants = grantsSource(context);
+    const catalog = await openLattice.catalogFor(grants, { tenantId: context.tenantId });
+    const built = await buildSessionServer({
+      credential: { credentialId: context.credentialId, kind: context.kind },
+      grants,
+      catalog,
+      invoke: async (toolName, args) => {
+        const startedAt = Date.now();
+        const sep = toolName.indexOf("_");
+        const auditDomain = sep > 0 ? toolName.slice(0, sep) : toolName;
+        const auditAction = sep > 0 ? toolName.slice(sep + 1) : "";
+        const decision = rateLimiter.check(context.credentialId, auditDomain);
+        if (!decision.allowed) {
+          await audit?.record({
+            tenantId: context.tenantId,
+            credentialId: context.credentialId,
+            credentialKind: context.kind,
+            projectId: context.projectId,
+            domain: auditDomain,
+            action: auditAction,
+            args,
+            status: "error",
+            errorCode: "RATE_LIMITED",
+            durationMs: Date.now() - startedAt
+          });
+          throw Object.assign(
+            new Error(
+              `RATE_LIMITED: retry after ${decision.retryAfterMs ?? 1e3}ms`
+            ),
+            { rpcCode: RPC_ERROR.RATE_LIMITED }
+          );
+        }
+        try {
+          const result = await openLattice.invoke(
+            grants,
+            {
+              tenantId: context.tenantId,
+              projectId: context.projectId,
+              workspaceId: context.workspaceId,
+              runConfig: {
+                sandboxName: context.sandboxName,
+                credentialId: context.credentialId
+              }
+            },
+            toolName,
+            args
+          );
+          await audit?.record({
+            tenantId: context.tenantId,
+            credentialId: context.credentialId,
+            credentialKind: context.kind,
+            projectId: context.projectId,
+            domain: auditDomain,
+            action: auditAction,
+            args,
+            status: "ok",
+            durationMs: Date.now() - startedAt
+          });
+          return result;
+        } catch (err) {
+          const code = err instanceof GrantDeniedError ? RPC_ERROR.GRANT_DENIED : err instanceof ActionNotFoundError ? RPC_ERROR.ACTION_NOT_FOUND : err instanceof ValidationError ? RPC_ERROR.VALIDATION_FAILED : RPC_ERROR.EXECUTION_ERROR;
+          await audit?.record({
+            tenantId: context.tenantId,
+            credentialId: context.credentialId,
+            credentialKind: context.kind,
+            projectId: context.projectId,
+            domain: auditDomain,
+            action: auditAction,
+            args,
+            status: "error",
+            errorCode: err instanceof GrantDeniedError ? "GRANT_DENIED" : err instanceof ActionNotFoundError ? "ACTION_NOT_FOUND" : err instanceof ValidationError ? "VALIDATION_FAILED" : "EXECUTION_ERROR",
+            durationMs: Date.now() - startedAt
+          });
+          throw Object.assign(
+            new Error(err instanceof Error ? err.message : String(err)),
+            { rpcCode: code }
+          );
+        }
+      }
+    });
+    reply.hijack();
+    await built.transport.handleRequest(request.raw, reply.raw, body);
+  });
+  app.delete(
+    "/open/mcp",
+    async (request, reply) => {
+      const sessionId = readSessionId(request);
+      if (!sessionId) {
+        return reply.status(400).send({ error: "SESSION_REQUIRED" });
+      }
+      await deleteSession(sessionId);
+      return reply.status(204).send();
+    }
+  );
+}
+export {
+  registerOpenRoutes
+};
+//# sourceMappingURL=open-HH7RKGML.mjs.map

package/dist/open-HH7RKGML.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/open.ts","../src/services/open/openRateLimiter.ts","../src/services/open/openMcpServer.ts"],"sourcesContent":["/**\n * Open API surface routes: POST/DELETE /open/mcp.\n *\n * The route is a thin shell — credential resolution (OpenAuthService),\n * catalog filtering and invocation (OpenLattice), and session lifecycle\n * (mcpTransportRegistry) live in services/open/*. The transport writes the\n * response itself, so the reply is hijacked (same precedent as the Project\n * Room SSE route).\n */\n\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport { isInitializeRequest } from \"@modelcontextprotocol/sdk/types.js\";\nimport { getStoreLattice } from \"@axiom-lattice/core\";\nimport type { A2AApiKeyStore, OpenAuditStore, OpenGrant, ProjectStore } from \"@axiom-lattice/protocols\";\nimport { OpenCredentialService } from \"../services/open/openCredentialService\";\nimport { OpenAuditService } from \"../services/open/openAuditService\";\nimport { OpenRateLimiter } from \"../services/open/openRateLimiter\";\nimport type { OpenCredential } from \"../services/open/openCredentialService\";\nimport {\n  openLattice,\n  ActionNotFoundError,\n  GrantDeniedError,\n  ValidationError,\n} from \"../services/open/openLattice\";\nimport { buildSessionServer } from \"../services/open/openMcpServer\";\nimport { getSession, deleteSession } from \"../services/open/mcpTransportRegistry\";\n\nexport interface OpenRouteDeps {\n  openAuth?: OpenCredentialService;\n  grantsSource?: (ctx: OpenCredential) => OpenGrant[];\n  audit?: OpenAuditService;\n  rateLimiter?: OpenRateLimiter;\n}\n\nfunction extractBearer(request: FastifyRequest): string | undefined {\n  const header = request.headers.authorization;\n  if (!header?.startsWith(\"Bearer \")) return undefined;\n  return header.slice(\"Bearer \".length).trim() || undefined;\n}\n\nfunction readSessionId(request: FastifyRequest): string | undefined {\n  const raw = request.headers[\"mcp-session-id\"];\n  const value = Array.isArray(raw) ? raw[0] : raw;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\n/** JSON-RPC error codes used on the Open surface. */\nconst RPC_ERROR = {\n  GRANT_DENIED: -32001,\n  ACTION_NOT_FOUND: -32002,\n  VALIDATION_FAILED: -32003,\n  EXECUTION_ERROR: -32004,\n  RATE_LIMITED: -32005,\n} as const;\n\nexport function registerOpenRoutes(\n  app: FastifyInstance,\n  deps: OpenRouteDeps = {},\n): void {\n  const openAuth =\n    deps.openAuth ??\n    new OpenCredentialService(\n      getStoreLattice(\"default\", \"a2aApiKey\").store as A2AApiKeyStore,\n      getStoreLattice(\"default\", \"project\").store as ProjectStore,\n    );\n  const grantsSource =\n    deps.grantsSource ?? ((ctx: OpenCredential) => ctx.grants);\n  const audit =\n    deps.audit ??\n    (() => {\n      try {\n        const store = getStoreLattice(\"default\", \"openAudit\").store as OpenAuditStore;\n        return new OpenAuditService(store);\n      } catch {\n        return undefined;\n      }\n    })();\n\n  const rateLimiter = deps.rateLimiter ?? new OpenRateLimiter();\n\n  app.post(\"/open/mcp\", async (request: FastifyRequest, reply: FastifyReply) => {\n    const context = await openAuth.resolve(extractBearer(request));\n    if (!context) {\n      return reply.status(401).send({ error: \"AUTH_FAILED\" });\n    }\n\n    const body: unknown = request.body;\n    const sessionId = readSessionId(request);\n\n    // Existing session: reuse its server/transport. Bearer must match the\n    // session's credential — a session is not usable by another key.\n    if (sessionId) {\n      const session = await getSession(sessionId);\n      if (\n        !session ||\n        session.credential.credentialId !== context.credentialId\n      ) {\n        return reply.status(404).send({ error: \"SESSION_NOT_FOUND\" });\n      }\n      reply.hijack();\n      await session.transport.handleRequest(request.raw, reply.raw, body);\n      return;\n    }\n\n    // New session: only initialize may create one. Registration into the\n    // session registry happens inside sessionIdGenerator (see openMcpServer).\n    if (!isInitializeRequest(body)) {\n      return reply.status(400).send({ error: \"SESSION_REQUIRED\" });\n    }\n\n    const grants = grantsSource(context);\n    const catalog = await openLattice.catalogFor(grants, { tenantId: context.tenantId });\n    const built = await buildSessionServer({\n      credential: { credentialId: context.credentialId, kind: context.kind },\n      grants,\n      catalog,\n      invoke: async (toolName, args) => {\n        const startedAt = Date.now();\n        const sep = toolName.indexOf(\"_\");\n        const auditDomain = sep > 0 ? toolName.slice(0, sep) : toolName;\n        const auditAction = sep > 0 ? toolName.slice(sep + 1) : \"\";\n\n        const decision = rateLimiter.check(context.credentialId, auditDomain);\n        if (!decision.allowed) {\n          await audit?.record({\n            tenantId: context.tenantId,\n            credentialId: context.credentialId,\n            credentialKind: context.kind,\n            projectId: context.projectId,\n            domain: auditDomain,\n            action: auditAction,\n            args,\n            status: \"error\",\n            errorCode: \"RATE_LIMITED\",\n            durationMs: Date.now() - startedAt,\n          });\n          throw Object.assign(\n            new Error(\n              `RATE_LIMITED: retry after ${decision.retryAfterMs ?? 1000}ms`,\n            ),\n            { rpcCode: RPC_ERROR.RATE_LIMITED },\n          );\n        }\n\n        try {\n          const result = await openLattice.invoke(\n            grants,\n            {\n              tenantId: context.tenantId,\n              projectId: context.projectId,\n              workspaceId: context.workspaceId,\n              runConfig: {\n                sandboxName: context.sandboxName,\n                credentialId: context.credentialId,\n              },\n            },\n            toolName,\n            args,\n          );\n          await audit?.record({\n            tenantId: context.tenantId,\n            credentialId: context.credentialId,\n            credentialKind: context.kind,\n            projectId: context.projectId,\n            domain: auditDomain,\n            action: auditAction,\n            args,\n            status: \"ok\",\n            durationMs: Date.now() - startedAt,\n          });\n          return result;\n        } catch (err) {\n          const code =\n            err instanceof GrantDeniedError\n              ? RPC_ERROR.GRANT_DENIED\n              : err instanceof ActionNotFoundError\n                ? RPC_ERROR.ACTION_NOT_FOUND\n                : err instanceof ValidationError\n                  ? RPC_ERROR.VALIDATION_FAILED\n                  : RPC_ERROR.EXECUTION_ERROR;\n          await audit?.record({\n            tenantId: context.tenantId,\n            credentialId: context.credentialId,\n            credentialKind: context.kind,\n            projectId: context.projectId,\n            domain: auditDomain,\n            action: auditAction,\n            args,\n            status: \"error\",\n            errorCode:\n              err instanceof GrantDeniedError\n                ? \"GRANT_DENIED\"\n                : err instanceof ActionNotFoundError\n                  ? \"ACTION_NOT_FOUND\"\n                  : err instanceof ValidationError\n                    ? \"VALIDATION_FAILED\"\n                    : \"EXECUTION_ERROR\",\n            durationMs: Date.now() - startedAt,\n          });\n          throw Object.assign(\n            new Error(err instanceof Error ? err.message : String(err)),\n            { rpcCode: code },\n          );\n        }\n      },\n    });\n    reply.hijack();\n    await built.transport.handleRequest(request.raw, reply.raw, body);\n  });\n\n  app.delete(\n    \"/open/mcp\",\n    async (request: FastifyRequest, reply: FastifyReply) => {\n      const sessionId = readSessionId(request);\n      if (!sessionId) {\n        return reply.status(400).send({ error: \"SESSION_REQUIRED\" });\n      }\n      await deleteSession(sessionId);\n      return reply.status(204).send();\n    },\n  );\n}\n","/**\n * In-memory per-credential rate limiter (token bucket). The agent domain gets\n * a stricter bucket because each call consumes LLM budget.\n *\n * Process-local by design (V1 single-gateway); a distributed limiter is V2.\n */\n\nexport interface RateLimitDecision {\n  allowed: boolean;\n  retryAfterMs?: number;\n}\n\ninterface Bucket {\n  tokens: number;\n  updatedAt: number;\n}\n\nexport interface OpenRateLimiterOptions {\n  /** Default requests per minute per credential. */\n  defaultPerMinute?: number;\n  /** Stricter limit for the agent domain. */\n  agentPerMinute?: number;\n}\n\nexport class OpenRateLimiter {\n  private readonly buckets = new Map<string, Bucket>();\n  private readonly defaultPerMinute: number;\n  private readonly agentPerMinute: number;\n\n  constructor(options: OpenRateLimiterOptions = {}) {\n    this.defaultPerMinute = options.defaultPerMinute ?? 60;\n    this.agentPerMinute = options.agentPerMinute ?? 10;\n  }\n\n  private bucketClass(domain: string): string {\n    return domain === \"agent\" ? \"agent\" : \"default\";\n  }\n\n  private limitFor(domain: string): number {\n    return domain === \"agent\" ? this.agentPerMinute : this.defaultPerMinute;\n  }\n\n  /** Consume one token; denied calls report how long to wait. */\n  check(credentialId: string, domain: string): RateLimitDecision {\n    const limit = this.limitFor(domain);\n    const key = `${this.bucketClass(domain)}:${credentialId}`;\n    const now = Date.now();\n    const bucket = this.buckets.get(key) ?? { tokens: limit, updatedAt: now };\n\n    const refillPerMs = limit / 60_000;\n    const elapsed = now - bucket.updatedAt;\n    bucket.tokens = Math.min(limit, bucket.tokens + elapsed * refillPerMs);\n    bucket.updatedAt = now;\n\n    if (bucket.tokens >= 1) {\n      bucket.tokens -= 1;\n      this.buckets.set(key, bucket);\n      return { allowed: true };\n    }\n\n    this.buckets.set(key, bucket);\n    const deficit = 1 - bucket.tokens;\n    return { allowed: false, retryAfterMs: Math.ceil(deficit / refillPerMs) };\n  }\n\n  /** Test helper. */\n  reset(): void {\n    this.buckets.clear();\n  }\n}\n","/**\n * Builds a per-session MCP server instance whose tool list is the\n * credential-filtered OpenLattice catalog. Per-session instances are what\n * make grant-filtered tools/list possible on the official SDK.\n *\n * Session registration happens inside sessionIdGenerator — the SDK invokes\n * it exactly once while handling initialize, which guarantees the registry\n * key equals the transport-generated id that the response header carries.\n *\n * Every tool executor routes through the OpenLattice invoke kernel, so\n * authorization is re-checked on each invocation (default-deny, live grants).\n */\n\nimport { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport { StreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/streamableHttp.js\";\nimport { randomUUID } from \"crypto\";\nimport type { OpenGrant } from \"@axiom-lattice/protocols\";\nimport type { OpenToolDescriptor } from \"./openLattice\";\nimport { registerSession } from \"./mcpTransportRegistry\";\n\nexport const OPEN_MCP_SERVER_INFO = {\n  name: \"axiom-open\",\n  version: \"0.1.0\",\n} as const;\n\nexport interface BuiltSession {\n  server: McpServer;\n  transport: StreamableHTTPServerTransport;\n  tools: OpenToolDescriptor[];\n}\n\nexport async function buildSessionServer(options: {\n  credential: { credentialId: string; kind: string };\n  grants: OpenGrant[];\n  catalog: OpenToolDescriptor[];\n  invoke: (\n    toolName: string,\n    args: unknown,\n  ) => Promise<{\n    content: Array<{ type: \"text\"; text: string }>;\n    isError?: boolean;\n  }>;\n}): Promise<BuiltSession> {\n  const { credential, grants, catalog, invoke } = options;\n  const server = new McpServer(OPEN_MCP_SERVER_INFO);\n  for (const tool of catalog) {\n    server.registerTool(\n      tool.toolName,\n      {\n        description: tool.description,\n        inputSchema: tool.schema,\n        annotations: {\n          readOnlyHint: tool.annotations.readOnlyHint,\n          destructiveHint: tool.annotations.destructiveHint,\n        },\n      },\n      async (args: unknown) => {\n        const result = await invoke(tool.toolName, args);\n        return { content: result.content, isError: result.isError };\n      },\n    );\n  }\n  const transport = new StreamableHTTPServerTransport({\n    sessionIdGenerator: () => {\n      const sessionId = randomUUID();\n      void registerSession(\n        sessionId,\n        { credentialId: credential.credentialId, kind: credential.kind },\n        { server, transport },\n      );\n      return sessionId;\n    },\n    enableJsonResponse: true,\n    onsessionclosed: (closedId: string) => {\n      void import(\"./mcpTransportRegistry\").then(({ deleteSession }) =>\n        deleteSession(closedId),\n      );\n    },\n  });\n  // Required: without connect the transport has no onmessage handler, the\n  // initialize request is swallowed and handleRequest never resolves (hang).\n  await server.connect(transport);\n  return { server, transport, tools: catalog };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAWA,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;;;ACYzB,IAAM,kBAAN,MAAsB;AAAA,EAK3B,YAAY,UAAkC,CAAC,GAAG;AAJlD,SAAiB,UAAU,oBAAI,IAAoB;AAKjD,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,iBAAiB,QAAQ,kBAAkB;AAAA,EAClD;AAAA,EAEQ,YAAY,QAAwB;AAC1C,WAAO,WAAW,UAAU,UAAU;AAAA,EACxC;AAAA,EAEQ,SAAS,QAAwB;AACvC,WAAO,WAAW,UAAU,KAAK,iBAAiB,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,cAAsB,QAAmC;AAC7D,UAAM,QAAQ,KAAK,SAAS,MAAM;AAClC,UAAM,MAAM,GAAG,KAAK,YAAY,MAAM,CAAC,IAAI,YAAY;AACvD,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,QAAQ,OAAO,WAAW,IAAI;AAExE,UAAM,cAAc,QAAQ;AAC5B,UAAM,UAAU,MAAM,OAAO;AAC7B,WAAO,SAAS,KAAK,IAAI,OAAO,OAAO,SAAS,UAAU,WAAW;AACrE,WAAO,YAAY;AAEnB,QAAI,OAAO,UAAU,GAAG;AACtB,aAAO,UAAU;AACjB,WAAK,QAAQ,IAAI,KAAK,MAAM;AAC5B,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAEA,SAAK,QAAQ,IAAI,KAAK,MAAM;AAC5B,UAAM,UAAU,IAAI,OAAO;AAC3B,WAAO,EAAE,SAAS,OAAO,cAAc,KAAK,KAAK,UAAU,WAAW,EAAE;AAAA,EAC1E;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,QAAQ,MAAM;AAAA,EACrB;AACF;;;ACxDA,SAAS,iBAAiB;AAC1B,SAAS,qCAAqC;AAC9C,SAAS,kBAAkB;AAKpB,IAAM,uBAAuB;AAAA,EAClC,MAAM;AAAA,EACN,SAAS;AACX;AAQA,eAAsB,mBAAmB,SAWf;AACxB,QAAM,EAAE,YAAY,QAAQ,SAAS,OAAO,IAAI;AAChD,QAAM,SAAS,IAAI,UAAU,oBAAoB;AACjD,aAAW,QAAQ,SAAS;AAC1B,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,QACE,aAAa,KAAK;AAAA,QAClB,aAAa,KAAK;AAAA,QAClB,aAAa;AAAA,UACX,cAAc,KAAK,YAAY;AAAA,UAC/B,iBAAiB,KAAK,YAAY;AAAA,QACpC;AAAA,MACF;AAAA,MACA,OAAO,SAAkB;AACvB,cAAM,SAAS,MAAM,OAAO,KAAK,UAAU,IAAI;AAC/C,eAAO,EAAE,SAAS,OAAO,SAAS,SAAS,OAAO,QAAQ;AAAA,MAC5D;AAAA,IACF;AAAA,EACF;AACA,QAAM,YAAY,IAAI,8BAA8B;AAAA,IAClD,oBAAoB,MAAM;AACxB,YAAM,YAAY,WAAW;AAC7B,WAAK;AAAA,QACH;AAAA,QACA,EAAE,cAAc,WAAW,cAAc,MAAM,WAAW,KAAK;AAAA,QAC/D,EAAE,QAAQ,UAAU;AAAA,MACtB;AACA,aAAO;AAAA,IACT;AAAA,IACA,oBAAoB;AAAA,IACpB,iBAAiB,CAAC,aAAqB;AACrC,WAAK,OAAO,qCAAwB,EAAE;AAAA,QAAK,CAAC,EAAE,eAAAA,eAAc,MAC1DA,eAAc,QAAQ;AAAA,MACxB;AAAA,IACF;AAAA,EACF,CAAC;AAGD,QAAM,OAAO,QAAQ,SAAS;AAC9B,SAAO,EAAE,QAAQ,WAAW,OAAO,QAAQ;AAC7C;;;AFjDA,SAAS,cAAc,SAA6C;AAClE,QAAM,SAAS,QAAQ,QAAQ;AAC/B,MAAI,CAAC,QAAQ,WAAW,SAAS,EAAG,QAAO;AAC3C,SAAO,OAAO,MAAM,UAAU,MAAM,EAAE,KAAK,KAAK;AAClD;AAEA,SAAS,cAAc,SAA6C;AAClE,QAAM,MAAM,QAAQ,QAAQ,gBAAgB;AAC5C,QAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI;AAC5C,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;AAGA,IAAM,YAAY;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,cAAc;AAChB;AAEO,SAAS,mBACd,KACA,OAAsB,CAAC,GACjB;AACN,QAAM,WACJ,KAAK,YACL,IAAI;AAAA,IACF,gBAAgB,WAAW,WAAW,EAAE;AAAA,IACxC,gBAAgB,WAAW,SAAS,EAAE;AAAA,EACxC;AACF,QAAM,eACJ,KAAK,iBAAiB,CAAC,QAAwB,IAAI;AACrD,QAAM,QACJ,KAAK,UACJ,MAAM;AACL,QAAI;AACF,YAAM,QAAQ,gBAAgB,WAAW,WAAW,EAAE;AACtD,aAAO,IAAI,iBAAiB,KAAK;AAAA,IACnC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEL,QAAM,cAAc,KAAK,eAAe,IAAI,gBAAgB;AAE5D,MAAI,KAAK,aAAa,OAAO,SAAyB,UAAwB;AAC5E,UAAM,UAAU,MAAM,SAAS,QAAQ,cAAc,OAAO,CAAC;AAC7D,QAAI,CAAC,SAAS;AACZ,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,cAAc,CAAC;AAAA,IACxD;AAEA,UAAM,OAAgB,QAAQ;AAC9B,UAAM,YAAY,cAAc,OAAO;AAIvC,QAAI,WAAW;AACb,YAAM,UAAU,MAAM,WAAW,SAAS;AAC1C,UACE,CAAC,WACD,QAAQ,WAAW,iBAAiB,QAAQ,cAC5C;AACA,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,oBAAoB,CAAC;AAAA,MAC9D;AACA,YAAM,OAAO;AACb,YAAM,QAAQ,UAAU,cAAc,QAAQ,KAAK,MAAM,KAAK,IAAI;AAClE;AAAA,IACF;AAIA,QAAI,CAAC,oBAAoB,IAAI,GAAG;AAC9B,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAAA,IAC7D;AAEA,UAAM,SAAS,aAAa,OAAO;AACnC,UAAM,UAAU,MAAM,YAAY,WAAW,QAAQ,EAAE,UAAU,QAAQ,SAAS,CAAC;AACnF,UAAM,QAAQ,MAAM,mBAAmB;AAAA,MACrC,YAAY,EAAE,cAAc,QAAQ,cAAc,MAAM,QAAQ,KAAK;AAAA,MACrE;AAAA,MACA;AAAA,MACA,QAAQ,OAAO,UAAU,SAAS;AAChC,cAAM,YAAY,KAAK,IAAI;AAC3B,cAAM,MAAM,SAAS,QAAQ,GAAG;AAChC,cAAM,cAAc,MAAM,IAAI,SAAS,MAAM,GAAG,GAAG,IAAI;AACvD,cAAM,cAAc,MAAM,IAAI,SAAS,MAAM,MAAM,CAAC,IAAI;AAExD,cAAM,WAAW,YAAY,MAAM,QAAQ,cAAc,WAAW;AACpE,YAAI,CAAC,SAAS,SAAS;AACrB,gBAAM,OAAO,OAAO;AAAA,YAClB,UAAU,QAAQ;AAAA,YAClB,cAAc,QAAQ;AAAA,YACtB,gBAAgB,QAAQ;AAAA,YACxB,WAAW,QAAQ;AAAA,YACnB,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,YAAY,KAAK,IAAI,IAAI;AAAA,UAC3B,CAAC;AACD,gBAAM,OAAO;AAAA,YACX,IAAI;AAAA,cACF,6BAA6B,SAAS,gBAAgB,GAAI;AAAA,YAC5D;AAAA,YACA,EAAE,SAAS,UAAU,aAAa;AAAA,UACpC;AAAA,QACF;AAEA,YAAI;AACF,gBAAM,SAAS,MAAM,YAAY;AAAA,YAC/B;AAAA,YACA;AAAA,cACE,UAAU,QAAQ;AAAA,cAClB,WAAW,QAAQ;AAAA,cACnB,aAAa,QAAQ;AAAA,cACrB,WAAW;AAAA,gBACT,aAAa,QAAQ;AAAA,gBACrB,cAAc,QAAQ;AAAA,cACxB;AAAA,YACF;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,gBAAM,OAAO,OAAO;AAAA,YAClB,UAAU,QAAQ;AAAA,YAClB,cAAc,QAAQ;AAAA,YACtB,gBAAgB,QAAQ;AAAA,YACxB,WAAW,QAAQ;AAAA,YACnB,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ;AAAA,YACR,YAAY,KAAK,IAAI,IAAI;AAAA,UAC3B,CAAC;AACD,iBAAO;AAAA,QACT,SAAS,KAAK;AACZ,gBAAM,OACJ,eAAe,mBACX,UAAU,eACV,eAAe,sBACb,UAAU,mBACV,eAAe,kBACb,UAAU,oBACV,UAAU;AACpB,gBAAM,OAAO,OAAO;AAAA,YAClB,UAAU,QAAQ;AAAA,YAClB,cAAc,QAAQ;AAAA,YACtB,gBAAgB,QAAQ;AAAA,YACxB,WAAW,QAAQ;AAAA,YACnB,QAAQ;AAAA,YACR,QAAQ;AAAA,YACR;AAAA,YACA,QAAQ;AAAA,YACR,WACE,eAAe,mBACX,iBACA,eAAe,sBACb,qBACA,eAAe,kBACb,sBACA;AAAA,YACV,YAAY,KAAK,IAAI,IAAI;AAAA,UAC3B,CAAC;AACD,gBAAM,OAAO;AAAA,YACX,IAAI,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,YAC1D,EAAE,SAAS,KAAK;AAAA,UAClB;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AACD,UAAM,OAAO;AACb,UAAM,MAAM,UAAU,cAAc,QAAQ,KAAK,MAAM,KAAK,IAAI;AAAA,EAClE,CAAC;AAED,MAAI;AAAA,IACF;AAAA,IACA,OAAO,SAAyB,UAAwB;AACtD,YAAM,YAAY,cAAc,OAAO;AACvC,UAAI,CAAC,WAAW;AACd,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,OAAO,mBAAmB,CAAC;AAAA,MAC7D;AACA,YAAM,cAAc,SAAS;AAC7B,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK;AAAA,IAChC;AAAA,EACF;AACF;","names":["deleteSession"]}

package/dist/open-audit-UJ3NXCGW.mjs

@@ -0,0 +1,32 @@
+import "./chunk-NFEGQTCC.mjs";
+
+// src/routes/open-audit.ts
+import { getStoreLattice } from "@axiom-lattice/core";
+function registerOpenAuditRoutes(app) {
+  app.get(
+    "/api/open/audit",
+    async (request, reply) => {
+      const tenantId = request.user?.tenantId;
+      if (!tenantId) {
+        return reply.status(401).send({ success: false, error: "Unauthorized" });
+      }
+      const status = request.query.status === "ok" || request.query.status === "error" ? request.query.status : void 0;
+      const store = getStoreLattice("default", "openAudit").store;
+      const records = await store.query({
+        tenantId,
+        credentialId: request.query.credentialId,
+        domain: request.query.domain,
+        status,
+        from: request.query.from,
+        to: request.query.to,
+        limit: request.query.limit ? parseInt(request.query.limit, 10) : void 0,
+        offset: request.query.offset ? parseInt(request.query.offset, 10) : void 0
+      });
+      return reply.status(200).send({ success: true, data: { records } });
+    }
+  );
+}
+export {
+  registerOpenAuditRoutes
+};
+//# sourceMappingURL=open-audit-UJ3NXCGW.mjs.map

package/dist/open-audit-UJ3NXCGW.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/open-audit.ts"],"sourcesContent":["/**\n * Open audit query endpoint (console-session guarded, tenant-scoped).\n */\n\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport { getStoreLattice } from \"@axiom-lattice/core\";\nimport type { OpenAuditStore } from \"@axiom-lattice/protocols\";\n\ninterface RequestWithUser extends FastifyRequest {\n  user?: { id: string; tenantId?: string };\n}\n\ninterface AuditQuerystring {\n  credentialId?: string;\n  domain?: string;\n  status?: string;\n  from?: string;\n  to?: string;\n  limit?: string;\n  offset?: string;\n}\n\nexport function registerOpenAuditRoutes(app: FastifyInstance): void {\n  app.get(\n    \"/api/open/audit\",\n    async (\n      request: FastifyRequest<{ Querystring: AuditQuerystring }>,\n      reply: FastifyReply,\n    ) => {\n      const tenantId = (request as RequestWithUser).user?.tenantId;\n      if (!tenantId) {\n        return reply.status(401).send({ success: false, error: \"Unauthorized\" });\n      }\n      const status =\n        request.query.status === \"ok\" || request.query.status === \"error\"\n          ? request.query.status\n          : undefined;\n      const store = getStoreLattice(\"default\", \"openAudit\").store as OpenAuditStore;\n      const records = await store.query({\n        tenantId,\n        credentialId: request.query.credentialId,\n        domain: request.query.domain,\n        status,\n        from: request.query.from,\n        to: request.query.to,\n        limit: request.query.limit ? parseInt(request.query.limit, 10) : undefined,\n        offset: request.query.offset ? parseInt(request.query.offset, 10) : undefined,\n      });\n      return reply.status(200).send({ success: true, data: { records } });\n    },\n  );\n}\n"],"mappings":";;;AAKA,SAAS,uBAAuB;AAiBzB,SAAS,wBAAwB,KAA4B;AAClE,MAAI;AAAA,IACF;AAAA,IACA,OACE,SACA,UACG;AACH,YAAM,WAAY,QAA4B,MAAM;AACpD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,eAAe,CAAC;AAAA,MACzE;AACA,YAAM,SACJ,QAAQ,MAAM,WAAW,QAAQ,QAAQ,MAAM,WAAW,UACtD,QAAQ,MAAM,SACd;AACN,YAAM,QAAQ,gBAAgB,WAAW,WAAW,EAAE;AACtD,YAAM,UAAU,MAAM,MAAM,MAAM;AAAA,QAChC;AAAA,QACA,cAAc,QAAQ,MAAM;AAAA,QAC5B,QAAQ,QAAQ,MAAM;AAAA,QACtB;AAAA,QACA,MAAM,QAAQ,MAAM;AAAA,QACpB,IAAI,QAAQ,MAAM;AAAA,QAClB,OAAO,QAAQ,MAAM,QAAQ,SAAS,QAAQ,MAAM,OAAO,EAAE,IAAI;AAAA,QACjE,QAAQ,QAAQ,MAAM,SAAS,SAAS,QAAQ,MAAM,QAAQ,EAAE,IAAI;AAAA,MACtE,CAAC;AACD,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,EAAE,QAAQ,EAAE,CAAC;AAAA,IACpE;AAAA,EACF;AACF;","names":[]}

package/dist/open-catalog-WYS2AENM.mjs

@@ -0,0 +1,59 @@
+import {
+  openLattice
+} from "./chunk-GF4GGTWJ.mjs";
+import "./chunk-NFEGQTCC.mjs";
+
+// src/routes/open-catalog.ts
+import { getStoreLattice } from "@axiom-lattice/core";
+
+// src/services/open/openCatalogService.ts
+var OpenCatalogService = class {
+  constructor(assistantStore, lattice = openLattice) {
+    this.assistantStore = assistantStore;
+    this.lattice = lattice;
+  }
+  async buildForTenant(tenantId) {
+    const domains = this.lattice.describeCatalog();
+    const enriched = [];
+    for (const domain of domains) {
+      if (domain.domain === "agent" && domain.itemKind === "instance") {
+        let items = [];
+        try {
+          const assistants = await this.assistantStore.getAllAssistants(tenantId);
+          items = assistants.map((a) => ({
+            id: a.id,
+            toolName: `invoke_${a.id}`,
+            label: a.name || a.id
+          }));
+        } catch {
+          items = [];
+        }
+        enriched.push({ ...domain, items });
+      } else {
+        enriched.push(domain);
+      }
+    }
+    return { domains: enriched };
+  }
+};
+
+// src/routes/open-catalog.ts
+function tenantIdOf(request) {
+  return request.user?.tenantId;
+}
+function registerOpenCatalogRoutes(app) {
+  app.get("/api/open/catalog", async (request, reply) => {
+    const tenantId = tenantIdOf(request);
+    if (!tenantId) {
+      return reply.status(401).send({ success: false, error: "Unauthorized" });
+    }
+    const assistantStore = getStoreLattice("default", "assistant").store;
+    const service = new OpenCatalogService(assistantStore);
+    const catalog = await service.buildForTenant(tenantId);
+    return reply.status(200).send({ success: true, data: catalog });
+  });
+}
+export {
+  registerOpenCatalogRoutes
+};
+//# sourceMappingURL=open-catalog-WYS2AENM.mjs.map

package/dist/open-catalog-WYS2AENM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/open-catalog.ts","../src/services/open/openCatalogService.ts"],"sourcesContent":["/**\n * Open capability catalog endpoint (console-session guarded): returns the\n * grantable capabilities for the caller's tenant, driving the key picker.\n */\n\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport { getStoreLattice } from \"@axiom-lattice/core\";\nimport type { AssistantStore } from \"@axiom-lattice/protocols\";\nimport { OpenCatalogService } from \"../services/open/openCatalogService\";\n\ninterface RequestWithUser extends FastifyRequest {\n  user?: { id: string; tenantId?: string };\n}\n\nfunction tenantIdOf(request: FastifyRequest): string | undefined {\n  return (request as RequestWithUser).user?.tenantId;\n}\n\nexport function registerOpenCatalogRoutes(app: FastifyInstance): void {\n  app.get(\"/api/open/catalog\", async (request: FastifyRequest, reply: FastifyReply) => {\n    const tenantId = tenantIdOf(request);\n    if (!tenantId) {\n      return reply.status(401).send({ success: false, error: \"Unauthorized\" });\n    }\n    const assistantStore = getStoreLattice(\"default\", \"assistant\")\n      .store as AssistantStore;\n    const service = new OpenCatalogService(assistantStore);\n    const catalog = await service.buildForTenant(tenantId);\n    return reply.status(200).send({ success: true, data: catalog });\n  });\n}\n","/**\n * OpenCatalogService — assembles the tenant-scoped grantable capability\n * catalog for the key-management picker: registry domains (built-in + plugin)\n * plus per-tenant agent instances.\n */\n\nimport type {\n  AssistantStore,\n  OpenCatalog,\n  OpenCatalogDomain,\n} from \"@axiom-lattice/protocols\";\nimport { OpenLattice, openLattice } from \"./openLattice\";\n\nexport class OpenCatalogService {\n  constructor(\n    private readonly assistantStore: AssistantStore,\n    private readonly lattice: OpenLattice = openLattice,\n  ) {}\n\n  async buildForTenant(tenantId: string): Promise<OpenCatalog> {\n    const domains = this.lattice.describeCatalog();\n    const enriched: OpenCatalogDomain[] = [];\n    for (const domain of domains) {\n      if (domain.domain === \"agent\" && domain.itemKind === \"instance\") {\n        let items: OpenCatalogDomain[\"items\"] = [];\n        try {\n          const assistants = await this.assistantStore.getAllAssistants(tenantId);\n          items = assistants.map((a) => ({\n            id: a.id,\n            toolName: `invoke_${a.id}`,\n            label: a.name || a.id,\n          }));\n        } catch {\n          items = [];\n        }\n        enriched.push({ ...domain, items });\n      } else {\n        enriched.push(domain);\n      }\n    }\n    return { domains: enriched };\n  }\n}\n"],"mappings":";;;;;;AAMA,SAAS,uBAAuB;;;ACOzB,IAAM,qBAAN,MAAyB;AAAA,EAC9B,YACmB,gBACA,UAAuB,aACxC;AAFiB;AACA;AAAA,EAChB;AAAA,EAEH,MAAM,eAAe,UAAwC;AAC3D,UAAM,UAAU,KAAK,QAAQ,gBAAgB;AAC7C,UAAM,WAAgC,CAAC;AACvC,eAAW,UAAU,SAAS;AAC5B,UAAI,OAAO,WAAW,WAAW,OAAO,aAAa,YAAY;AAC/D,YAAI,QAAoC,CAAC;AACzC,YAAI;AACF,gBAAM,aAAa,MAAM,KAAK,eAAe,iBAAiB,QAAQ;AACtE,kBAAQ,WAAW,IAAI,CAAC,OAAO;AAAA,YAC7B,IAAI,EAAE;AAAA,YACN,UAAU,UAAU,EAAE,EAAE;AAAA,YACxB,OAAO,EAAE,QAAQ,EAAE;AAAA,UACrB,EAAE;AAAA,QACJ,QAAQ;AACN,kBAAQ,CAAC;AAAA,QACX;AACA,iBAAS,KAAK,EAAE,GAAG,QAAQ,MAAM,CAAC;AAAA,MACpC,OAAO;AACL,iBAAS,KAAK,MAAM;AAAA,MACtB;AAAA,IACF;AACA,WAAO,EAAE,SAAS,SAAS;AAAA,EAC7B;AACF;;;AD5BA,SAAS,WAAW,SAA6C;AAC/D,SAAQ,QAA4B,MAAM;AAC5C;AAEO,SAAS,0BAA0B,KAA4B;AACpE,MAAI,IAAI,qBAAqB,OAAO,SAAyB,UAAwB;AACnF,UAAM,WAAW,WAAW,OAAO;AACnC,QAAI,CAAC,UAAU;AACb,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,eAAe,CAAC;AAAA,IACzE;AACA,UAAM,iBAAiB,gBAAgB,WAAW,WAAW,EAC1D;AACH,UAAM,UAAU,IAAI,mBAAmB,cAAc;AACrD,UAAM,UAAU,MAAM,QAAQ,eAAe,QAAQ;AACrD,WAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,MAAM,QAAQ,CAAC;AAAA,EAChE,CAAC;AACH;","names":[]}

package/dist/open-exposure-FK4G6O6L.mjs

@@ -0,0 +1,67 @@
+import {
+  openLattice
+} from "./chunk-GF4GGTWJ.mjs";
+import {
+  buildAgentCardForAssistant
+} from "./chunk-QUT2DS4R.mjs";
+import "./chunk-NFEGQTCC.mjs";
+
+// src/routes/open-exposure.ts
+import { getStoreLattice } from "@axiom-lattice/core";
+import { effectiveGrants } from "@axiom-lattice/protocols";
+function registerOpenExposureRoutes(app) {
+  app.get(
+    "/api/keys/:id/exposure",
+    async (request, reply) => {
+      const tenantId = request.user?.tenantId;
+      if (!tenantId) {
+        return reply.status(401).send({ success: false, error: "Unauthorized" });
+      }
+      const keyStore = getStoreLattice("default", "a2aApiKey").store;
+      const record = await keyStore.findById(request.params.id);
+      if (!record || record.tenantId !== tenantId) {
+        return reply.status(404).send({ success: false, error: "Key not found" });
+      }
+      const grants = effectiveGrants(record);
+      const forwardedHost = request.headers["x-forwarded-host"];
+      const host = (Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost) ?? (Array.isArray(request.headers.host) ? request.headers.host[0] : request.headers.host) ?? request.hostname;
+      const baseUrl = `${request.protocol}://${host}`;
+      const tools = (await openLattice.catalogFor(grants, { tenantId })).map((t) => ({
+        domain: t.domain,
+        toolName: t.toolName,
+        description: t.description,
+        annotations: t.annotations
+      }));
+      const agentGrant = grants.find((g) => g.domain === "agent");
+      const assistantStore = getStoreLattice("default", "assistant").store;
+      const agents = [];
+      for (const assistantId of agentGrant?.items ?? []) {
+        const assistant = await assistantStore.getAssistantById(
+          tenantId,
+          assistantId
+        );
+        if (!assistant) continue;
+        agents.push({
+          assistantId,
+          cardUrl: `${baseUrl}/api/a2a/agents/${assistantId}/.well-known/agent-card.json`,
+          jsonrpcUrl: `${baseUrl}/api/a2a/agents/${assistantId}/jsonrpc`,
+          card: buildAgentCardForAssistant({ assistant, baseUrl })
+        });
+      }
+      return reply.status(200).send({
+        success: true,
+        data: {
+          tenantId,
+          projectId: record.projectId,
+          grants,
+          mcp: { endpoint: `${baseUrl}/open/mcp`, tools },
+          a2a: { agents }
+        }
+      });
+    }
+  );
+}
+export {
+  registerOpenExposureRoutes
+};
+//# sourceMappingURL=open-exposure-FK4G6O6L.mjs.map

package/dist/open-exposure-FK4G6O6L.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/routes/open-exposure.ts"],"sourcesContent":["/**\n * Key exposure endpoint: what a given API key exposes to external callers —\n * the MCP tools (per grants) and the A2A agent cards (for granted agents).\n * Console-session guarded and tenant-scoped.\n */\n\nimport type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport { getStoreLattice } from \"@axiom-lattice/core\";\nimport type {\n  A2AApiKeyStore,\n  AssistantStore,\n  OpenGrant,\n} from \"@axiom-lattice/protocols\";\nimport { effectiveGrants } from \"@axiom-lattice/protocols\";\nimport { openLattice } from \"../services/open/openLattice\";\nimport { buildAgentCardForAssistant } from \"../services/a2a/A2AAgentCardBuilder\";\n\ninterface RequestWithUser extends FastifyRequest {\n  user?: { id: string; tenantId?: string };\n}\n\nexport function registerOpenExposureRoutes(app: FastifyInstance): void {\n  app.get<{ Params: { id: string } }>(\n    \"/api/keys/:id/exposure\",\n    async (\n      request: FastifyRequest<{ Params: { id: string } }>,\n      reply: FastifyReply,\n    ) => {\n      const tenantId = (request as RequestWithUser).user?.tenantId;\n      if (!tenantId) {\n        return reply.status(401).send({ success: false, error: \"Unauthorized\" });\n      }\n\n      const keyStore = getStoreLattice(\"default\", \"a2aApiKey\")\n        .store as A2AApiKeyStore;\n      const record = await keyStore.findById(request.params.id);\n      if (!record || record.tenantId !== tenantId) {\n        return reply.status(404).send({ success: false, error: \"Key not found\" });\n      }\n\n      const grants: OpenGrant[] = effectiveGrants(record);\n      // Include the port: request.hostname strips it, request.headers.host keeps it.\n      const forwardedHost = request.headers[\"x-forwarded-host\"];\n      const host =\n        (Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost) ??\n        (Array.isArray(request.headers.host) ? request.headers.host[0] : request.headers.host) ??\n        request.hostname;\n      const baseUrl = `${request.protocol}://${host}`;\n\n      // MCP surface: the credential-filtered tool catalog.\n      const tools = (await openLattice.catalogFor(grants, { tenantId })).map((t) => ({\n        domain: t.domain,\n        toolName: t.toolName,\n        description: t.description,\n        annotations: t.annotations,\n      }));\n\n      // A2A surface: one card per granted agent.\n      const agentGrant = grants.find((g) => g.domain === \"agent\");\n      const assistantStore = getStoreLattice(\"default\", \"assistant\")\n        .store as AssistantStore;\n      const agents: Array<{\n        assistantId: string;\n        cardUrl: string;\n        jsonrpcUrl: string;\n        card: unknown;\n      }> = [];\n      for (const assistantId of agentGrant?.items ?? []) {\n        const assistant = await assistantStore.getAssistantById(\n          tenantId,\n          assistantId,\n        );\n        if (!assistant) continue;\n        agents.push({\n          assistantId,\n          cardUrl: `${baseUrl}/api/a2a/agents/${assistantId}/.well-known/agent-card.json`,\n          jsonrpcUrl: `${baseUrl}/api/a2a/agents/${assistantId}/jsonrpc`,\n          card: buildAgentCardForAssistant({ assistant, baseUrl }),\n        });\n      }\n\n      return reply.status(200).send({\n        success: true,\n        data: {\n          tenantId,\n          projectId: record.projectId,\n          grants,\n          mcp: { endpoint: `${baseUrl}/open/mcp`, tools },\n          a2a: { agents },\n        },\n      });\n    },\n  );\n}\n"],"mappings":";;;;;;;;;AAOA,SAAS,uBAAuB;AAMhC,SAAS,uBAAuB;AAQzB,SAAS,2BAA2B,KAA4B;AACrE,MAAI;AAAA,IACF;AAAA,IACA,OACE,SACA,UACG;AACH,YAAM,WAAY,QAA4B,MAAM;AACpD,UAAI,CAAC,UAAU;AACb,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,eAAe,CAAC;AAAA,MACzE;AAEA,YAAM,WAAW,gBAAgB,WAAW,WAAW,EACpD;AACH,YAAM,SAAS,MAAM,SAAS,SAAS,QAAQ,OAAO,EAAE;AACxD,UAAI,CAAC,UAAU,OAAO,aAAa,UAAU;AAC3C,eAAO,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,OAAO,OAAO,gBAAgB,CAAC;AAAA,MAC1E;AAEA,YAAM,SAAsB,gBAAgB,MAAM;AAElD,YAAM,gBAAgB,QAAQ,QAAQ,kBAAkB;AACxD,YAAM,QACH,MAAM,QAAQ,aAAa,IAAI,cAAc,CAAC,IAAI,mBAClD,MAAM,QAAQ,QAAQ,QAAQ,IAAI,IAAI,QAAQ,QAAQ,KAAK,CAAC,IAAI,QAAQ,QAAQ,SACjF,QAAQ;AACV,YAAM,UAAU,GAAG,QAAQ,QAAQ,MAAM,IAAI;AAG7C,YAAM,SAAS,MAAM,YAAY,WAAW,QAAQ,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO;AAAA,QAC7E,QAAQ,EAAE;AAAA,QACV,UAAU,EAAE;AAAA,QACZ,aAAa,EAAE;AAAA,QACf,aAAa,EAAE;AAAA,MACjB,EAAE;AAGF,YAAM,aAAa,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO;AAC1D,YAAM,iBAAiB,gBAAgB,WAAW,WAAW,EAC1D;AACH,YAAM,SAKD,CAAC;AACN,iBAAW,eAAe,YAAY,SAAS,CAAC,GAAG;AACjD,cAAM,YAAY,MAAM,eAAe;AAAA,UACrC;AAAA,UACA;AAAA,QACF;AACA,YAAI,CAAC,UAAW;AAChB,eAAO,KAAK;AAAA,UACV;AAAA,UACA,SAAS,GAAG,OAAO,mBAAmB,WAAW;AAAA,UACjD,YAAY,GAAG,OAAO,mBAAmB,WAAW;AAAA,UACpD,MAAM,2BAA2B,EAAE,WAAW,QAAQ,CAAC;AAAA,QACzD,CAAC;AAAA,MACH;AAEA,aAAO,MAAM,OAAO,GAAG,EAAE,KAAK;AAAA,QAC5B,SAAS;AAAA,QACT,MAAM;AAAA,UACJ;AAAA,UACA,WAAW,OAAO;AAAA,UAClB;AAAA,UACA,KAAK,EAAE,UAAU,GAAG,OAAO,aAAa,MAAM;AAAA,UAC9C,KAAK,EAAE,OAAO;AAAA,QAChB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;","names":[]}