@beingmartinbmc/ojas 0.2.0

package/dist/mcp/registry.js

@@ -0,0 +1,258 @@
+"use strict";
+/**
+ * Multi-agent registry for the Ojas MCP server.
+ *
+ * Each registered agent gets its own `Ojas` instance plus a stored
+ * `HealthContract`, recent-history caches, and operational flags
+ * (e.g. safe mode). The MCP server proxies tool calls to the
+ * registry, which routes by `agent_id`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentRegistry = void 0;
+const index_1 = require("../index");
+const types_1 = require("../persistence/types");
+const id_1 = require("../util/id");
+const envelope_1 = require("./envelope");
+const contracts_1 = require("./contracts");
+const RECENT_EVENT_LIMIT = 100;
+function nowIso() {
+    return new Date().toISOString();
+}
+function newContractId(agentId) {
+    return (0, id_1.newId)(`contract_${agentId}`);
+}
+function buildContract(input) {
+    const thresholds = {
+        ...contracts_1.DEFAULT_HEALTH_THRESHOLDS,
+        ...input.health_thresholds,
+    };
+    return {
+        agent_id: input.agent_id,
+        agent_name: input.agent_name,
+        agent_type: input.agent_type,
+        risk_level: input.risk_level ?? 'medium',
+        description: input.description,
+        allowed_tools: input.allowed_tools,
+        health_thresholds: thresholds,
+        recovery_policy: { ...contracts_1.DEFAULT_RECOVERY_POLICY, ...input.recovery_policy },
+        created_at: nowIso(),
+        health_contract_id: newContractId(input.agent_id),
+    };
+}
+class AgentRegistry {
+    agents = new Map();
+    maxAgents;
+    autoRegister;
+    allowedAgentIds;
+    allowReplaceExisting;
+    persistenceStore;
+    constructor(opts = {}) {
+        this.maxAgents = opts.maxAgents ?? 256;
+        this.autoRegister = opts.autoRegister ?? true;
+        this.allowedAgentIds = opts.allowedAgentIds ? new Set(opts.allowedAgentIds) : undefined;
+        this.allowReplaceExisting = opts.allowReplaceExisting ?? false;
+        this.persistenceStore = opts.persistenceStore;
+        for (const snapshot of this.persistenceStore?.loadSessions() ?? []) {
+            this.hydrate(snapshot);
+        }
+    }
+    getSessionMap(agentId) {
+        return this.agents.get(agentId);
+    }
+    putEntry(entry) {
+        const existing = this.agents.get(entry.agent_id) ?? new Map();
+        existing.set(entry.session_id, entry);
+        this.agents.set(entry.agent_id, existing);
+    }
+    buildEntry(contract, sessionId) {
+        return {
+            agent_id: contract.agent_id,
+            session_id: sessionId,
+            ojas: new index_1.Ojas({ agentId: contract.agent_id }),
+            contract,
+            safe_mode: false,
+            safe_mode_restrictions: [],
+            tool_health: new Map(),
+            recent_events: [],
+            last_health_score: 100,
+        };
+    }
+    hydrate(snapshot) {
+        const entry = {
+            agent_id: snapshot.agent_id,
+            session_id: snapshot.session_id || types_1.DEFAULT_SESSION_ID,
+            ojas: new index_1.Ojas({ agentId: snapshot.agent_id }),
+            contract: snapshot.contract,
+            safe_mode: snapshot.safe_mode,
+            safe_mode_reason: snapshot.safe_mode_reason,
+            safe_mode_restrictions: [...snapshot.safe_mode_restrictions],
+            tool_health: new Map(snapshot.tool_health.map((h) => [h.tool_name, { ...h }])),
+            recent_events: snapshot.recent_events.map((e) => ({ ...e })),
+            last_health_score: snapshot.last_health_score,
+            last_health_report: snapshot.last_health_report,
+        };
+        entry.ojas.importState(snapshot.ojas);
+        this.putEntry(entry);
+    }
+    snapshot(entry) {
+        return {
+            agent_id: entry.agent_id,
+            session_id: entry.session_id,
+            contract: structuredClone(entry.contract),
+            safe_mode: entry.safe_mode,
+            safe_mode_reason: entry.safe_mode_reason,
+            safe_mode_restrictions: [...entry.safe_mode_restrictions],
+            tool_health: Array.from(entry.tool_health.values()).map((h) => ({ ...h })),
+            recent_events: entry.recent_events.map((e) => ({ ...e })),
+            last_health_score: entry.last_health_score,
+            last_health_report: entry.last_health_report ? structuredClone(entry.last_health_report) : undefined,
+            ojas: entry.ojas.exportState(),
+        };
+    }
+    persist(entry) {
+        this.persistenceStore?.saveSession(this.snapshot(entry));
+    }
+    assertAgentAllowed(agentId) {
+        if (this.allowedAgentIds && !this.allowedAgentIds.has(agentId)) {
+            throw new envelope_1.OjasError('policy_violation', `Agent '${agentId}' is not allowed by this Ojas registry.`);
+        }
+    }
+    /** Register an agent. Existing registrations are protected unless replace_existing=true. */
+    register(input) {
+        this.assertAgentAllowed(input.agent_id);
+        if (this.agents.has(input.agent_id)) {
+            if (!input.replace_existing) {
+                throw new envelope_1.OjasError('policy_violation', `Agent '${input.agent_id}' is already registered. Pass replace_existing=true to replace it.`);
+            }
+            if (!this.allowReplaceExisting) {
+                // The caller asked for replacement, but the registry is configured
+                // to forbid it. This is the production-safe default — replacing an
+                // agent destroys its accumulated health state, and a remote MCP
+                // caller should not be able to do that without operator consent.
+                throw new envelope_1.OjasError('policy_violation', `Agent '${input.agent_id}' replacement is disabled on this registry. ` +
+                    `Enable it explicitly by constructing the registry with allowReplaceExisting=true, ` +
+                    `or set OJAS_ALLOW_REPLACE_EXISTING=1 on the MCP server.`);
+            }
+            for (const entry of this.agents.get(input.agent_id)?.values() ?? []) {
+                this.persistenceStore?.deleteSession(entry.agent_id, entry.session_id);
+            }
+            this.agents.delete(input.agent_id);
+        }
+        if (!this.agents.has(input.agent_id) && this.agents.size >= this.maxAgents) {
+            throw new envelope_1.OjasError('policy_violation', `Ojas registry maxAgents limit (${this.maxAgents}) exceeded.`);
+        }
+        const contract = buildContract(input);
+        const entry = this.buildEntry(contract, types_1.DEFAULT_SESSION_ID);
+        this.putEntry(entry);
+        this.persist(entry);
+        return entry;
+    }
+    /** Look up an existing agent (returns undefined if not registered). */
+    get(agentId, sessionId = types_1.DEFAULT_SESSION_ID) {
+        return this.getSessionMap(agentId)?.get(sessionId);
+    }
+    /**
+     * Look up an agent, auto-registering with conservative defaults if
+     * missing. Throws when auto-registration is disabled — production
+     * deployments should disable it and require an explicit register call.
+     */
+    getOrAutoRegister(agentId, fallbackRisk = 'medium') {
+        this.assertAgentAllowed(agentId);
+        const existing = this.get(agentId);
+        if (existing)
+            return existing;
+        if (!this.autoRegister) {
+            throw new envelope_1.OjasError('not_found', `Agent '${agentId}' is not registered and auto-registration is disabled. ` +
+                `Call ojas_register_agent first, or enable auto-registration for this server.`);
+        }
+        return this.register({
+            agent_id: agentId,
+            agent_name: agentId,
+            agent_type: 'unspecified',
+            risk_level: fallbackRisk,
+            description: 'Auto-registered on first contact.',
+        });
+    }
+    getOrAutoRegisterSession(agentId, sessionId, fallbackRisk = 'medium') {
+        const normalizedSessionId = sessionId && sessionId.length > 0 ? sessionId : types_1.DEFAULT_SESSION_ID;
+        if (normalizedSessionId === types_1.DEFAULT_SESSION_ID) {
+            return this.getOrAutoRegister(agentId, fallbackRisk);
+        }
+        this.assertAgentAllowed(agentId);
+        const existing = this.get(agentId, normalizedSessionId);
+        if (existing)
+            return existing;
+        const defaultEntry = this.getOrAutoRegister(agentId, fallbackRisk);
+        const entry = this.buildEntry(structuredClone(defaultEntry.contract), normalizedSessionId);
+        this.putEntry(entry);
+        this.persist(entry);
+        return entry;
+    }
+    list() {
+        return [...this.agents.values()].flatMap((sessions) => [...sessions.values()]);
+    }
+    /** Add an event to the agent's recent-events ring buffer. */
+    recordEvent(entry, eventType, description) {
+        const event = {
+            id: (0, id_1.newId)('evt'),
+            timestamp: nowIso(),
+            event_type: eventType,
+            description,
+        };
+        entry.recent_events.push(event);
+        if (entry.recent_events.length > RECENT_EVENT_LIMIT) {
+            entry.recent_events = entry.recent_events.slice(-RECENT_EVENT_LIMIT);
+        }
+        this.persist(entry);
+        return event;
+    }
+    /** Update tool-health stats for an agent. */
+    recordToolOutcome(entry, toolName, outcome) {
+        let stats = entry.tool_health.get(toolName);
+        if (!stats) {
+            stats = {
+                tool_name: toolName,
+                total_calls: 0,
+                successes: 0,
+                failures: 0,
+                timeouts: 0,
+                latency_sum_ms: 0,
+                last_seen_at: nowIso(),
+            };
+            entry.tool_health.set(toolName, stats);
+        }
+        stats.total_calls += 1;
+        stats.latency_sum_ms += outcome.latencyMs;
+        if (outcome.success) {
+            stats.successes += 1;
+        }
+        else {
+            stats.failures += 1;
+        }
+        if (outcome.timeout)
+            stats.timeouts += 1;
+        stats.last_seen_at = nowIso();
+        this.persist(entry);
+        return stats;
+    }
+    /**
+     * Replace the agent's stored health snapshot and return the score delta
+     * (new − previous) so the caller can include it in the envelope.
+     */
+    updateHealthSnapshot(entry, report) {
+        const previous = entry.last_health_score;
+        const next = Math.round(report.overall.value * 100);
+        entry.last_health_score = next;
+        entry.last_health_report = report;
+        this.persist(entry);
+        return next - previous;
+    }
+    setSafeMode(entry, on, reason, restrictions = []) {
+        entry.safe_mode = on;
+        entry.safe_mode_reason = on ? reason : undefined;
+        entry.safe_mode_restrictions = on ? restrictions : [];
+        this.persist(entry);
+    }
+}
+exports.AgentRegistry = AgentRegistry;
+//# sourceMappingURL=registry.js.map

package/dist/mcp/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/mcp/registry.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,oCAAgC;AAGhC,gDAA0D;AAC1D,mCAAmC;AACnC,yCAAuC;AACvC,2CAQqB;AAoCrB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,IAAA,UAAK,EAAC,YAAY,OAAO,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,UAAU,GAAwC;QACtD,GAAG,qCAAyB;QAC5B,GAAG,KAAK,CAAC,iBAAiB;KAC3B,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ;QACxC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,iBAAiB,EAAE,UAAU;QAC7B,eAAe,EAAE,EAAE,GAAG,mCAAuB,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE;QACzE,UAAU,EAAE,MAAM,EAAE;QACpB,kBAAkB,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;KAClD,CAAC;AACJ,CAAC;AA2BD,MAAa,aAAa;IAChB,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC3C,SAAS,CAAS;IAClB,YAAY,CAAU;IACtB,eAAe,CAAe;IAC9B,oBAAoB,CAAU;IAC9B,gBAAgB,CAAoB;IAErD,YAAY,OAA6B,EAAE;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,oBAAoB,IAAI,KAAK,CAAC;QAC/D,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC9C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;YACnE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,OAAe;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAEO,QAAQ,CAAC,KAAiB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAsB,CAAC;QAClF,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAEO,UAAU,CAAC,QAAwB,EAAE,SAAiB;QAC5D,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,IAAI,YAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC9C,QAAQ;YACR,SAAS,EAAE,KAAK;YAChB,sBAAsB,EAAE,EAAE;YAC1B,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,aAAa,EAAE,EAAE;YACjB,iBAAiB,EAAE,GAAG;SACvB,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,QAAiC;QAC/C,MAAM,KAAK,GAAe;YACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,0BAAkB;YACrD,IAAI,EAAE,IAAI,YAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC9C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,sBAAsB,EAAE,CAAC,GAAG,QAAQ,CAAC,sBAAsB,CAAC;YAC5D,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9E,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAChD,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAEO,QAAQ,CAAC,KAAiB;QAChC,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,sBAAsB,EAAE,CAAC,GAAG,KAAK,CAAC,sBAAsB,CAAC;YACzD,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;YACpG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAiB;QACvB,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,kBAAkB,CAAC,OAAe;QACxC,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,oBAAS,CACjB,kBAAkB,EAClB,UAAU,OAAO,yCAAyC,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,QAAQ,CAAC,KAAyB;QAChC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,MAAM,IAAI,oBAAS,CACjB,kBAAkB,EAClB,UAAU,KAAK,CAAC,QAAQ,oEAAoE,CAC7F,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC/B,mEAAmE;gBACnE,mEAAmE;gBACnE,gEAAgE;gBAChE,iEAAiE;gBACjE,MAAM,IAAI,oBAAS,CACjB,kBAAkB,EAClB,UAAU,KAAK,CAAC,QAAQ,8CAA8C;oBACpE,oFAAoF;oBACpF,yDAAyD,CAC5D,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;gBACpE,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3E,MAAM,IAAI,oBAAS,CACjB,kBAAkB,EAClB,kCAAkC,IAAI,CAAC,SAAS,aAAa,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,0BAAkB,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uEAAuE;IACvE,GAAG,CAAC,OAAe,EAAE,YAAoB,0BAAkB;QACzD,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,OAAe,EAAE,eAA+B,QAAQ;QACxE,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,oBAAS,CACjB,WAAW,EACX,UAAU,OAAO,yDAAyD;gBACxE,8EAA8E,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;YACnB,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,OAAO;YACnB,UAAU,EAAE,aAAa;YACzB,UAAU,EAAE,YAAY;YACxB,WAAW,EAAE,mCAAmC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB,CACtB,OAAe,EACf,SAA6B,EAC7B,eAA+B,QAAQ;QAEvC,MAAM,mBAAmB,GAAG,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAAkB,CAAC;QAC/F,IAAI,mBAAmB,KAAK,0BAAkB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACxD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC3F,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,6DAA6D;IAC7D,WAAW,CAAC,KAAiB,EAAE,SAAiB,EAAE,WAAmB;QACnE,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,IAAA,UAAK,EAAC,KAAK,CAAC;YAChB,SAAS,EAAE,MAAM,EAAE;YACnB,UAAU,EAAE,SAAS;YACrB,WAAW;SACZ,CAAC;QACF,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpD,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6CAA6C;IAC7C,iBAAiB,CACf,KAAiB,EACjB,QAAgB,EAChB,OAAkE;QAElE,IAAI,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;gBACZ,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,CAAC;gBACX,cAAc,EAAE,CAAC;gBACjB,YAAY,EAAE,MAAM,EAAE;aACvB,CAAC;YACF,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,OAAO,CAAC,OAAO;YAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACzC,KAAK,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,KAAiB,EAAE,MAAyB;QAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACpD,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC/B,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,IAAI,GAAG,QAAQ,CAAC;IACzB,CAAC;IAED,WAAW,CAAC,KAAiB,EAAE,EAAW,EAAE,MAAe,EAAE,eAAyB,EAAE;QACtF,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC;QACrB,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;CACF;AA3PD,sCA2PC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+/**
+ * Ojas MCP Server — multi-agent AI Health Infrastructure exposed to
+ * Claude Code, Cursor, Windsurf, and any other MCP-compatible client.
+ *
+ * Each agent_id maps to its own `Ojas` instance plus a `HealthContract`.
+ * If a tool is invoked for an unknown agent_id, Ojas auto-registers it
+ * with conservative defaults so callers don't have to call
+ * `ojas_register_agent` first.
+ *
+ * Every tool returns the standard Ojas envelope:
+ *
+ *     status, agent_id, correlation_id, ojas_score_delta,
+ *     affected_modules, events_created,
+ *     recommended_next_actions, requires_human_review
+ *
+ * — merged with tool-specific fields.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { AgentRegistry } from './registry';
+import type { AgentEntry } from './registry';
+import { AuditLogger } from './audit';
+export declare function createServer(registry: AgentRegistry, audit?: AuditLogger): McpServer;
+export declare function createRegistry(): AgentRegistry;
+export type { AgentEntry };
+//# sourceMappingURL=server.d.ts.map

package/dist/mcp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAItC,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAIpF;AAID,wBAAgB,cAAc,IAAI,aAAa,CAwD9C;AAwBD,YAAY,EAAE,UAAU,EAAE,CAAC"}

package/dist/mcp/server.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * Ojas MCP Server — multi-agent AI Health Infrastructure exposed to
+ * Claude Code, Cursor, Windsurf, and any other MCP-compatible client.
+ *
+ * Each agent_id maps to its own `Ojas` instance plus a `HealthContract`.
+ * If a tool is invoked for an unknown agent_id, Ojas auto-registers it
+ * with conservative defaults so callers don't have to call
+ * `ojas_register_agent` first.
+ *
+ * Every tool returns the standard Ojas envelope:
+ *
+ *     status, agent_id, correlation_id, ojas_score_delta,
+ *     affected_modules, events_created,
+ *     recommended_next_actions, requires_human_review
+ *
+ * — merged with tool-specific fields.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createServer = createServer;
+exports.createRegistry = createRegistry;
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const registry_1 = require("./registry");
+const sqlite_1 = require("../persistence/sqlite");
+const tools_1 = require("./tools");
+const audit_1 = require("./audit");
+// ─── Server factory ──────────────────────────────────────────────────────────
+function createServer(registry, audit) {
+    const server = new mcp_js_1.McpServer({ name: 'ojas', version: '0.2.0' });
+    (0, tools_1.registerAllOjasTools)(server, registry, audit);
+    return server;
+}
+// ─── Entrypoint ───────────────────────────────────────────────────────────────
+function createRegistry() {
+    // Operational knobs read from the environment:
+    //   OJAS_DISABLE_AUTO_REGISTER=1     reject tool calls for unknown agent_ids
+    //   OJAS_MAX_AGENTS=<n>              hard cap on simultaneously-tracked agents
+    //   OJAS_ALLOWED_AGENT_IDS=a,b,c     allowlist; rejects ids outside the set
+    //   OJAS_ALLOW_REPLACE_EXISTING=1    permit register(replace_existing=true)
+    //   OJAS_DB_PATH=/path/to/ojas.sqlite persist registry sessions to SQLite
+    //   OJAS_TRUSTED_SINGLE_TENANT=1     acknowledge the no-auth trust model
+    const disableAuto = process.env.OJAS_DISABLE_AUTO_REGISTER === '1';
+    const maxAgentsEnv = Number(process.env.OJAS_MAX_AGENTS);
+    const allowedAgentIds = process.env.OJAS_ALLOWED_AGENT_IDS
+        ?.split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    const allowReplaceExisting = process.env.OJAS_ALLOW_REPLACE_EXISTING === '1';
+    const trustedSingleTenant = process.env.OJAS_TRUSTED_SINGLE_TENANT === '1';
+    const dbPath = process.env.OJAS_DB_PATH;
+    if (!trustedSingleTenant) {
+        // Loud, one-time stderr warning so operators can't claim they weren't
+        // told. stderr is safe to use here — stdout is reserved for the MCP
+        // protocol so a warning there would corrupt the wire format.
+        //
+        // The wording deliberately frames this as a *trust model* not a
+        // missing feature: stdio MCP has no portable per-call identity, so
+        // the security boundary is the OS / process boundary that launched
+        // this process. Acknowledge the model with OJAS_TRUSTED_SINGLE_TENANT=1.
+        process.stderr.write('WARNING: Ojas MCP is running in stdio trusted-single-tenant mode. ' +
+            'No per-call authentication is performed — the MCP host that launched ' +
+            'this process is trusted as the caller. Do not expose this process to ' +
+            'untrusted clients or network transports. Set OJAS_TRUSTED_SINGLE_TENANT=1 ' +
+            'to acknowledge this model and silence this warning, and read docs/SECURITY.md ' +
+            'before deploying.\n');
+    }
+    const registry = new registry_1.AgentRegistry({
+        autoRegister: !disableAuto,
+        maxAgents: Number.isFinite(maxAgentsEnv) && maxAgentsEnv > 0 ? maxAgentsEnv : undefined,
+        allowedAgentIds: allowedAgentIds && allowedAgentIds.length > 0 ? allowedAgentIds : undefined,
+        allowReplaceExisting,
+        persistenceStore: dbPath ? new sqlite_1.SQLitePersistenceStore(dbPath) : undefined,
+    });
+    const defaultAgentId = process.env.OJAS_AGENT_ID;
+    if (defaultAgentId) {
+        registry.register({
+            agent_id: defaultAgentId,
+            agent_name: defaultAgentId,
+            agent_type: 'mcp-client',
+            risk_level: 'medium',
+            description: 'Pre-registered from OJAS_AGENT_ID env var.',
+        });
+    }
+    return registry;
+}
+async function main() {
+    const registry = createRegistry();
+    const auditEnabled = process.env.OJAS_AUDIT === '1';
+    const audit = new audit_1.AuditLogger(auditEnabled ? process.stderr : null);
+    if (auditEnabled) {
+        process.stderr.write('Ojas MCP audit logging enabled (OJAS_AUDIT=1).\n');
+    }
+    const server = createServer(registry, audit);
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    // stdout is reserved for MCP protocol — all diagnostics go to stderr.
+}
+if (require.main === module) {
+    main().catch((err) => {
+        const msg = err instanceof Error ? `${err.message}\n${err.stack ?? ''}` : String(err);
+        process.stderr.write(`Ojas MCP server failed: ${msg}\n`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;GAgBG;;AAaH,oCAIC;AAID,wCAwDC;AA3ED,oEAAoE;AACpE,wEAAiF;AAEjF,yCAA2C;AAE3C,kDAA+D;AAC/D,mCAA+C;AAC/C,mCAAsC;AAEtC,gFAAgF;AAEhF,SAAgB,YAAY,CAAC,QAAuB,EAAE,KAAmB;IACvE,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,IAAA,4BAAoB,EAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,SAAgB,cAAc;IAC5B,+CAA+C;IAC/C,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;IACnE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB;QACxD,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,CAAC;IAC7E,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAExC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,sEAAsE;QACtE,oEAAoE;QACpE,6DAA6D;QAC7D,EAAE;QACF,gEAAgE;QAChE,mEAAmE;QACnE,mEAAmE;QACnE,yEAAyE;QACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oEAAoE;YAClE,uEAAuE;YACvE,uEAAuE;YACvE,4EAA4E;YAC5E,gFAAgF;YAChF,qBAAqB,CACxB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,wBAAa,CAAC;QACjC,YAAY,EAAE,CAAC,WAAW;QAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACvF,eAAe,EAAE,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC5F,oBAAoB;QACpB,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,+BAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACjD,IAAI,cAAc,EAAE,CAAC;QACnB,QAAQ,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,cAAc;YACxB,UAAU,EAAE,cAAc;YAC1B,UAAU,EAAE,YAAY;YACxB,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,4CAA4C;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,mBAAW,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,sEAAsE;AACxE,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/tools/agent.d.ts

@@ -0,0 +1,4 @@
+import type { AgentRegistry } from '../registry';
+import type { OjasToolRegistrar } from './registrar';
+export declare function registerAgentTools(registerOjasTool: OjasToolRegistrar, registry: AgentRegistry, _audit?: import('../audit').AuditLogger): void;
+//# sourceMappingURL=agent.d.ts.map

package/dist/mcp/tools/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/agent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AASrD,wBAAgB,kBAAkB,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,OAAO,UAAU,EAAE,WAAW,GAAG,IAAI,CAmV9I"}