@creezio/mcp-facade 0.22.0

package/dist-cjs/admin/tool-policy-guard.js

@@ -0,0 +1,193 @@
+"use strict";
+/**
+ * Garde d'enforcement réutilisable des policies MCP admin (M1).
+ *
+ * Trois surfaces, pour trois points d'entrée :
+ *   - `checkToolPolicy`          : décision brute (enabled/rôles/scopes) —
+ *                                  utilisable par n'importe quel enforcement
+ *                                  marque (ex. TF3 `registerMcpTool`) ;
+ *   - `createToolPolicyAuthorize`: `McpAuthorizeToolCallFn` composable avec
+ *                                  `composeToolPolicies` / `denyCrossLayerToolCall`
+ *                                  pour la façade (`createBrandMcpFacade`) ;
+ *   - `registerGuardedMcpTool`   : wrapper serveur MCP SDK — annotations +
+ *                                  policy + audit + scopes marque injectés.
+ *
+ * Aucune donnée marque : la résolution du rôle (`resolveRole`) et la logique
+ * scopes marque (`scopeAllows`) sont injectées. Les policies vivent dans la
+ * table `mcp_tool_policies` (adapters `configureMcpAdmin`) — mêmes lignes que
+ * la page /admin/mcp.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getStoredMcpToolPolicy = getStoredMcpToolPolicy;
+exports.checkToolPolicy = checkToolPolicy;
+exports.createToolPolicyAuthorize = createToolPolicyAuthorize;
+exports.registerGuardedMcpTool = registerGuardedMcpTool;
+const adapters_js_1 = require("./adapters.js");
+const mcp_admin_js_1 = require("./mcp-admin.js");
+function splitList(raw) {
+    return String(raw || "")
+        .split(/[\s,]+/)
+        .filter(Boolean);
+}
+function grantedScopeSet(scopes) {
+    if (Array.isArray(scopes))
+        return new Set(scopes.map(String).filter(Boolean));
+    return new Set(splitList(String(scopes)));
+}
+/** Policy stockée, lue directement (indépendante du registre tools marque). */
+function getStoredMcpToolPolicy(name) {
+    (0, mcp_admin_js_1.ensureMcpAdminSchema)();
+    const row = (0, adapters_js_1.getMcpAdminAdapters)()
+        .getDb()
+        .prepare(`SELECT enabled, allowed_roles, allowed_scopes
+       FROM mcp_tool_policies WHERE tool_name = ?`)
+        .get(name);
+    if (!row)
+        return null;
+    return {
+        enabled: row.enabled !== 0,
+        allowedRoles: splitList(row.allowed_roles),
+        allowedScopes: splitList(row.allowed_scopes),
+    };
+}
+/**
+ * Décision d'enforcement d'un tool pour un acteur.
+ * Retourne la raison du deny, ou `null` si autorisé.
+ *
+ * Sémantique (parité TempoFlow) :
+ *  - policy absente ou `enabled=false` → "tool_disabled" ;
+ *  - rôle (resolveRole(userId) sinon defaultRole) hors allowedRoles → "role_forbidden" ;
+ *  - scopes fournis, aucun full-access ni allowedScope accordé → "policy_scope_forbidden"
+ *    (allowedScopes vide = aucune restriction de scope configurée).
+ */
+function checkToolPolicy(name, actor, opts = {}) {
+    const getPolicy = opts.getPolicy || getStoredMcpToolPolicy;
+    const policy = getPolicy(name);
+    if (!policy?.enabled)
+        return "tool_disabled";
+    const role = (actor.userId ? opts.resolveRole?.(actor.userId) : null) ||
+        opts.defaultRole ||
+        "collaborator";
+    if (!policy.allowedRoles.includes(role))
+        return "role_forbidden";
+    if (actor.scopes != null && policy.allowedScopes.length > 0) {
+        const granted = grantedScopeSet(actor.scopes);
+        const fullAccess = opts.fullAccessScopes || ["crm", "full"];
+        if (!fullAccess.some((scope) => granted.has(scope)) &&
+            !policy.allowedScopes.some((scope) => granted.has(scope))) {
+            return "policy_scope_forbidden";
+        }
+    }
+    return null;
+}
+function defaultResolveActor(ctx) {
+    const claims = ctx.claims || {};
+    const claimUserId = typeof claims.userId === "string" && claims.userId ? claims.userId : null;
+    const subject = ctx.subject && ctx.subject !== "anonymous" && ctx.subject !== "opaque-token"
+        ? ctx.subject
+        : null;
+    let scopes = null;
+    if (typeof claims.scope === "string")
+        scopes = claims.scope;
+    else if (Array.isArray(claims.scopes))
+        scopes = claims.scopes.map(String);
+    else if (typeof claims.scopes === "string")
+        scopes = claims.scopes;
+    return { userId: claimUserId ?? subject, scopes };
+}
+/**
+ * `McpAuthorizeToolCallFn` (composable via `composeToolPolicies`) qui applique
+ * les policies admin. Opt-in non cassant : si aucun `getPolicy` custom n'est
+ * fourni ET que `configureMcpAdmin` n'a pas été câblé, la garde autorise tout
+ * (comportement identique à une façade sans admin MCP).
+ */
+function createToolPolicyAuthorize(opts = {}) {
+    const resolveActor = opts.resolveActor || defaultResolveActor;
+    const audit = opts.audit || mcp_admin_js_1.auditMcpAdmin;
+    return (ctx) => {
+        if (!opts.getPolicy && !(0, adapters_js_1.isMcpAdminConfigured)()) {
+            return { allow: true };
+        }
+        const actor = resolveActor(ctx);
+        // Les policies sont stockées sous le nom canonique OU le nom public
+        // (alias legacy) selon la surface seedée — on tente les deux.
+        const getPolicy = opts.getPolicy || getStoredMcpToolPolicy;
+        let denial = checkToolPolicy(ctx.canonicalName, actor, opts);
+        if (denial === "tool_disabled" &&
+            ctx.name !== ctx.canonicalName &&
+            getPolicy(ctx.name)) {
+            denial = checkToolPolicy(ctx.name, actor, opts);
+        }
+        if (denial) {
+            try {
+                audit("tool_call", {
+                    actor: actor.userId || null,
+                    toolName: ctx.name,
+                    outcome: "denied",
+                    detail: { reason: denial },
+                });
+            }
+            catch {
+                /* audit best-effort côté façade */
+            }
+            return { allow: false, reason: denial };
+        }
+        return { allow: true };
+    };
+}
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function errorResult(payload) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(payload) }],
+        isError: true,
+    };
+}
+/**
+ * Enregistre un tool sur le serveur MCP SDK avec annotations + policy admin
+ * + audit + vérification scopes marque — SoT de l'enforcement TF-like
+ * (`registerMcpTool` des marques délègue ici, le registre métier reste marque).
+ */
+function registerGuardedMcpTool(server, ctx, def, config, 
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+handler, opts = {}) {
+    const auditFn = opts.audit || mcp_admin_js_1.auditMcpAdmin;
+    server.registerTool(def.name, {
+        ...config,
+        ...(def.annotations ? { annotations: def.annotations } : {}),
+    }, 
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    async (input) => {
+        const audit = (outcome, detail) => auditFn("tool_call", {
+            actor: ctx.userId ?? null,
+            clientId: ctx.clientId ?? null,
+            toolName: def.name,
+            outcome,
+            detail,
+        });
+        const denial = checkToolPolicy(def.name, { userId: ctx.userId, scopes: ctx.scopes ?? "" }, opts);
+        if (denial) {
+            audit("denied", { reason: denial });
+            return errorResult({ error: denial, tool: def.name });
+        }
+        if (opts.scopeAllows && !opts.scopeAllows(ctx, def)) {
+            audit("denied", { reason: "insufficient_scope" });
+            return errorResult({
+                error: "insufficient_scope",
+                tool: def.name,
+                required_scope: def.requiredScope,
+            });
+        }
+        try {
+            const result = await handler(input);
+            audit(result?.isError ? "error" : "ok");
+            return result;
+        }
+        catch (error) {
+            audit("error", {
+                message: error instanceof Error ? error.message.slice(0, 300) : "Erreur tool",
+            });
+            throw error;
+        }
+    });
+}
+//# sourceMappingURL=tool-policy-guard.js.map

package/dist-cjs/admin/tool-policy-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy-guard.js","sourceRoot":"","sources":["../../src/admin/tool-policy-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAyDH,wDAiBC;AAYD,0CAwBC;AAiCD,8DAoCC;AAkDD,wDAwDC;AAvRD,+CAA0E;AAC1E,iDAAqE;AAsCrE,SAAS,SAAS,CAAC,GAA8B;IAC/C,OAAO,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,QAAQ,CAAC;SACf,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,MAAkC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,SAAgB,sBAAsB,CAAC,IAAY;IACjD,IAAA,mCAAoB,GAAE,CAAC;IACvB,MAAM,GAAG,GAAG,IAAA,iCAAmB,GAAE;SAC9B,KAAK,EAAE;SACP,OAAO,CACN;kDAC4C,CAC7C;SACA,GAAG,CAAC,IAAI,CAEE,CAAC;IACd,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QAC1B,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1C,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAC7B,IAAY,EACZ,KAAsB,EACtB,OAA+B,EAAE;IAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,sBAAsB,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,eAAe,CAAC;IAC7C,MAAM,IAAI,GACR,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,IAAI,CAAC,WAAW;QAChB,cAAc,CAAC;IACjB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5D,IACE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EACzD,CAAC;YACD,OAAO,wBAAwB,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,SAAS,mBAAmB,CAAC,GAAwB;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,MAAM,WAAW,GACf,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,WAAW,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc;QAC1E,CAAC,CAAC,GAAG,CAAC,OAAO;QACb,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,MAAM,GAAsC,IAAI,CAAC;IACrD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;SACvD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;SACrE,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,OAAO,EAAE,MAAM,EAAE,WAAW,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CACvC,OAAyC,EAAE;IAE3C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,4BAAa,CAAC;IAC1C,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAA,kCAAoB,GAAE,EAAE,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,sBAAsB,CAAC;QAC3D,IAAI,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,IACE,MAAM,KAAK,eAAe;YAC1B,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,aAAa;YAC9B,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EACnB,CAAC;YACD,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,KAAK,CAAC,WAAW,EAAE;oBACjB,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;oBAC3B,QAAQ,EAAE,GAAG,CAAC,IAAI;oBAClB,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC;AAqCD,8DAA8D;AAC9D,SAAS,WAAW,CAAC,OAAgC;IACnD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CACpC,MAA4B,EAC5B,GAA0B,EAC1B,GAA6B,EAC7B,MAA+B;AAC/B,8DAA8D;AAC9D,OAA4B,EAC5B,OAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,4BAAa,CAAC;IAC5C,MAAM,CAAC,YAAY,CACjB,GAAG,CAAC,IAAI,EACR;QACE,GAAG,MAAM;QACT,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D;IACD,8DAA8D;IAC9D,KAAK,EAAE,KAAU,EAAE,EAAE;QACnB,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,MAAgB,EAAE,EAAE,CAClD,OAAO,CAAC,WAAW,EAAE;YACnB,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;YAC9B,QAAQ,EAAE,GAAG,CAAC,IAAI;YAClB,OAAO;YACP,MAAM;SACP,CAAC,CAAC;QACL,MAAM,MAAM,GAAG,eAAe,CAC5B,GAAG,CAAC,IAAI,EACR,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,EAChD,IAAI,CACL,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpC,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAClD,OAAO,WAAW,CAAC;gBACjB,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,cAAc,EAAE,GAAG,CAAC,aAAa;aAClC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,OAAO,EAAE;gBACb,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;aACvE,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist-cjs/admin/types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Types admin MCP (port TempoFlow — N6).
+ * Le registre métier des tools reste injecté par la marque.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist-cjs/admin/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/admin/types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist-cjs/brand-facade.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBrandMcpFacade = createBrandMcpFacade;
+const facade_js_1 = require("./facade.js");
+const policy_js_1 = require("./policy.js");
+const adapters_js_1 = require("./admin/adapters.js");
+const mcp_admin_js_1 = require("./admin/mcp-admin.js");
+const tool_policy_guard_js_1 = require("./admin/tool-policy-guard.js");
+const module_ops_tools_js_1 = require("./module-ops-tools.js");
+/**
+ * Une seule factory listTools/callTool pour Electron / Hono / assistant.
+ */
+function createBrandMcpFacade(options) {
+    const { api, aliases, discoverModuleTools, discoverPluginTools, extraAliases, publicSurface = "legacy-preferred", toolPolicyGuard, ...rest } = options;
+    let facade;
+    let authorizeToolCall = rest.authorizeToolCall;
+    if (toolPolicyGuard) {
+        const guardOpts = typeof toolPolicyGuard === "object" ? toolPolicyGuard : {};
+        const policyAuthorize = (0, tool_policy_guard_js_1.createToolPolicyAuthorize)(guardOpts);
+        // Seed permissif des tools exposés par la façade (INSERT OR IGNORE) —
+        // lazy à la première décision : la DB admin n'est pas forcément prête
+        // à la création de la façade.
+        let policySeeded = false;
+        const ensurePolicySeed = async () => {
+            if (policySeeded || guardOpts.getPolicy || !(0, adapters_js_1.isMcpAdminConfigured)()) {
+                return;
+            }
+            policySeeded = true;
+            try {
+                const { tools } = await facade.listTools();
+                (0, mcp_admin_js_1.seedMcpToolPolicies)(tools.map((tool) => ({
+                    name: tool.name,
+                    defaultRoles: tool.defaultRoles,
+                    requiredScope: tool.requiredScope,
+                    mcpPublishDefault: tool.mcpPublishDefault,
+                })));
+            }
+            catch {
+                policySeeded = false; // DB pas prête — retentera au prochain call
+            }
+        };
+        const guardedAuthorize = async (ctx) => {
+            await ensurePolicySeed();
+            return policyAuthorize(ctx);
+        };
+        authorizeToolCall = authorizeToolCall
+            ? (0, policy_js_1.composeToolPolicies)(authorizeToolCall, guardedAuthorize)
+            : guardedAuthorize;
+    }
+    facade = (0, facade_js_1.createMcpFacade)({
+        allowUnauthenticated: true,
+        enforceNamespaces: true,
+        publicSurface,
+        // defaultCrossLayerDeny=true : la façade compose elle-même
+        // denyCrossLayerToolCall AVANT authorizeToolCall (premier deny gagne).
+        defaultCrossLayerDeny: true,
+        listApiMounts: () => api.listMounts(),
+        ...rest,
+        authorizeToolCall,
+        aliases: { ...aliases, ...(extraAliases || {}) },
+        discoverToolsBySpace: async () => ({
+            module: (0, module_ops_tools_js_1.discoverModuleToolsFromKernel)(api, discoverModuleTools ? await discoverModuleTools(api) : []),
+            plugin: discoverPluginTools
+                ? await discoverPluginTools(api)
+                : [],
+        }),
+    });
+    return facade;
+}
+//# sourceMappingURL=brand-facade.js.map

package/dist-cjs/brand-facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brand-facade.js","sourceRoot":"","sources":["../src/brand-facade.ts"],"names":[],"mappings":";;AA4DA,oDA4EC;AAjID,2CAA8D;AAC9D,2CAAkD;AAClD,qDAA2D;AAC3D,uDAA2D;AAC3D,uEAGsC;AACtC,+DAAsE;AA0CtE;;GAEG;AACH,SAAgB,oBAAoB,CAClC,OAAoC;IAEpC,MAAM,EACJ,GAAG,EACH,OAAO,EACP,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,aAAa,GAAG,kBAAkB,EAClC,eAAe,EACf,GAAG,IAAI,EACR,GAAG,OAAO,CAAC;IAEZ,IAAI,MAAiB,CAAC;IAEtB,IAAI,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC/C,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,SAAS,GACb,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,eAAe,GAAG,IAAA,gDAAyB,EAAC,SAAS,CAAC,CAAC;QAC7D,sEAAsE;QACtE,sEAAsE;QACtE,8BAA8B;QAC9B,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;YAClC,IAAI,YAAY,IAAI,SAAS,CAAC,SAAS,IAAI,CAAC,IAAA,kCAAoB,GAAE,EAAE,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC3C,IAAA,kCAAmB,EACjB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;iBAC1C,CAAC,CAAC,CACJ,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,KAAK,CAAC,CAAC,4CAA4C;YACpE,CAAC;QACH,CAAC,CAAC;QACF,MAAM,gBAAgB,GAA2B,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7D,MAAM,gBAAgB,EAAE,CAAC;YACzB,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC,CAAC;QACF,iBAAiB,GAAG,iBAAiB;YACnC,CAAC,CAAC,IAAA,+BAAmB,EAAC,iBAAiB,EAAE,gBAAgB,CAAC;YAC1D,CAAC,CAAC,gBAAgB,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,IAAA,2BAAe,EAAC;QACvB,oBAAoB,EAAE,IAAI;QAC1B,iBAAiB,EAAE,IAAI;QACvB,aAAa;QACb,2DAA2D;QAC3D,uEAAuE;QACvE,qBAAqB,EAAE,IAAI;QAC3B,aAAa,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE;QACrC,GAAG,IAAI;QACP,iBAAiB;QACjB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE;QAChD,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACjC,MAAM,EAAE,IAAA,mDAA6B,EACnC,GAAG,EACH,mBAAmB,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1D;YACD,MAAM,EAAE,mBAAmB;gBACzB,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC;gBAChC,CAAC,CAAC,EAAE;SACP,CAAC;KACH,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist-cjs/core-tools.js

@@ -0,0 +1,97 @@
+"use strict";
+/**
+ * Tools MCP cœur (`creezio.*`) — SoT kit (H1/H4 → M9).
+ *
+ * Les marques importent les noms / factories ; handlers Hono peuvent
+ * rester brand-specific tant que les noms restent alignés.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CREEZIO_CORE_MCP_TOOL_NAMES = void 0;
+exports.createCoreMcpTools = createCoreMcpTools;
+const platform_core_1 = require("@creezio/platform-core");
+const api_kernel_1 = require("@creezio/api-kernel");
+exports.CREEZIO_CORE_MCP_TOOL_NAMES = [
+    "creezio.health",
+    "creezio.architecture",
+    "creezio.admin.list_mounts",
+    "creezio.admin.list_tools_by_space",
+    "creezio.admin.list_aliases",
+];
+function emptyBySpace() {
+    return { core: [], module: [], plugin: [] };
+}
+/** Factory tools cœur — utilisée par `createMcpFacade`. */
+function createCoreMcpTools(opts = {}) {
+    const architectureVersion = opts.architectureVersion ?? platform_core_1.ARCHITECTURE_VERSION;
+    return [
+        {
+            name: "creezio.health",
+            description: "Ping santé façade MCP / API cœur",
+            space: "core",
+            inputSchema: { type: "object", properties: {} },
+            handler: async () => ({
+                ok: true,
+                content: { ok: true, brandId: opts.brandId ?? null },
+            }),
+        },
+        {
+            name: "creezio.architecture",
+            description: "Version architecture + préfixe API unique",
+            space: "core",
+            inputSchema: { type: "object", properties: {} },
+            handler: async () => ({
+                ok: true,
+                content: {
+                    architectureVersion,
+                    apiPrefix: api_kernel_1.API_V1_PREFIX,
+                    note: "Une seule façade MCP = MCP de l'app (proxy unifié H4)",
+                    toolSpaces: ["core", "module", "plugin"],
+                    publicSurfaceModes: [
+                        "canonical",
+                        "legacy-preferred",
+                        "both",
+                    ],
+                },
+            }),
+        },
+        {
+            name: "creezio.admin.list_mounts",
+            description: "Liste les montages API modules/plugins connus",
+            space: "core",
+            inputSchema: { type: "object", properties: {} },
+            handler: async () => ({
+                ok: true,
+                content: {
+                    mounts: opts.listApiMounts ? opts.listApiMounts() : [],
+                },
+            }),
+        },
+        {
+            name: "creezio.admin.list_tools_by_space",
+            description: "Liste les tools MCP groupés par couche (core / module / plugin)",
+            space: "core",
+            inputSchema: { type: "object", properties: {} },
+            handler: async () => ({
+                ok: true,
+                content: {
+                    bySpace: opts.listToolsBySpaceSync
+                        ? opts.listToolsBySpaceSync()
+                        : emptyBySpace(),
+                },
+            }),
+        },
+        {
+            name: "creezio.admin.list_aliases",
+            description: "Liste les aliases legacy → tools canoniques (anti double exposition)",
+            space: "core",
+            inputSchema: { type: "object", properties: {} },
+            handler: async () => ({
+                ok: true,
+                content: {
+                    aliases: opts.listAliasesSync ? opts.listAliasesSync() : {},
+                },
+            }),
+        },
+    ];
+}
+//# sourceMappingURL=core-tools.js.map

package/dist-cjs/core-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-tools.js","sourceRoot":"","sources":["../src/core-tools.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA8BH,gDA6EC;AAzGD,0DAA8D;AAC9D,oDAAoD;AAGvC,QAAA,2BAA2B,GAAG;IACzC,gBAAgB;IAChB,sBAAsB;IACtB,2BAA2B;IAC3B,mCAAmC;IACnC,4BAA4B;CACpB,CAAC;AAaX,SAAS,YAAY;IACnB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,2DAA2D;AAC3D,SAAgB,kBAAkB,CAChC,OAAkC,EAAE;IAEpC,MAAM,mBAAmB,GACvB,IAAI,CAAC,mBAAmB,IAAI,oCAAoB,CAAC;IACnD,OAAO;QACL;YACE,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,kCAAkC;YAC/C,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE;aACrD,CAAC;SACH;QACD;YACE,IAAI,EAAE,sBAAsB;YAC5B,WAAW,EAAE,2CAA2C;YACxD,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE;oBACP,mBAAmB;oBACnB,SAAS,EAAE,0BAAa;oBACxB,IAAI,EAAE,uDAAuD;oBAC7D,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBACxC,kBAAkB,EAAE;wBAClB,WAAW;wBACX,kBAAkB;wBAClB,MAAM;qBACP;iBACF;aACF,CAAC;SACH;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,WAAW,EAAE,+CAA+C;YAC5D,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE;iBACvD;aACF,CAAC;SACH;QACD;YACE,IAAI,EAAE,mCAAmC;YACzC,WAAW,EACT,iEAAiE;YACnE,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI,CAAC,oBAAoB;wBAChC,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE;wBAC7B,CAAC,CAAC,YAAY,EAAE;iBACnB;aACF,CAAC;SACH;QACD;YACE,IAAI,EAAE,4BAA4B;YAClC,WAAW,EACT,sEAAsE;YACxE,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE;iBAC5D;aACF,CAAC;SACH;KACF,CAAC;AACJ,CAAC"}

package/dist-cjs/dyn-import.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dynImport = void 0;
+exports.dynImport = new Function("specifier", "return import(specifier)");
+//# sourceMappingURL=dyn-import.js.map

package/dist-cjs/dyn-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dyn-import.js","sourceRoot":"","sources":["../src/dyn-import.ts"],"names":[],"mappings":";;;AAWa,QAAA,SAAS,GAAG,IAAI,QAAQ,CACnC,WAAW,EACX,0BAA0B,CACd,CAAC"}