@creezio/mcp-facade 0.22.0

package/dist/hono-proxy.js

@@ -0,0 +1,185 @@
+/**
+ * Proxy façade Electron → Hono `/mcp` (D1/C2 → M9 SoT kit).
+ *
+ * Parle le transport Streamable HTTP JSON (même shape que test-mcp-oauth).
+ * Si l'upstream est absent ou en erreur et `fallbackLocal`, délègue à la
+ * façade locale (brand mounts) — zéro perte offline / tests.
+ */
+import { resolveMcpFacadeRole, } from "./runtime.js";
+async function mcpJsonRpc(baseUrl, apiKey, body) {
+    const headers = {
+        "Content-Type": "application/json",
+        Accept: "application/json, text/event-stream",
+    };
+    if (apiKey)
+        headers.Authorization = `Bearer ${apiKey}`;
+    const res = await fetch(`${baseUrl.replace(/\/$/, "")}/mcp`, {
+        method: "POST",
+        headers,
+        body: JSON.stringify(body),
+    });
+    const text = await res.text();
+    let json = null;
+    try {
+        if (text.startsWith("event:") || text.startsWith("data:")) {
+            const dataLine = text.split("\n").find((l) => l.startsWith("data:"));
+            json = dataLine ? JSON.parse(dataLine.slice(5)) : null;
+        }
+        else {
+            json = JSON.parse(text);
+        }
+    }
+    catch {
+        json = null;
+    }
+    return { status: res.status, json, text };
+}
+function spaceForToolName(name) {
+    if (name.startsWith("creezio.") || name.startsWith("core."))
+        return "core";
+    if (name.startsWith("plugin."))
+        return "plugin";
+    return "module";
+}
+function ownerFromName(name) {
+    const m = /^module\.([^.]+)\./.exec(name);
+    return m?.[1];
+}
+async function honoListTools(baseUrl, apiKey, clientName, clientVersion) {
+    await mcpJsonRpc(baseUrl, apiKey, {
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+            protocolVersion: "2025-06-18",
+            capabilities: {},
+            clientInfo: { name: clientName, version: clientVersion },
+        },
+    });
+    const listed = await mcpJsonRpc(baseUrl, apiKey, {
+        jsonrpc: "2.0",
+        id: 2,
+        method: "tools/list",
+        params: {},
+    });
+    if (listed.status >= 400 || !listed.json?.result?.tools) {
+        throw new Error(`hono_mcp_list_failed: status=${listed.status} ${listed.text.slice(0, 200)}`);
+    }
+    return listed.json.result.tools.map((t) => ({
+        name: t.name,
+        description: t.description || t.name,
+        space: spaceForToolName(t.name),
+        ...(ownerFromName(t.name) ? { ownerId: ownerFromName(t.name) } : {}),
+    }));
+}
+async function honoCallTool(baseUrl, apiKey, name, args, clientName, clientVersion) {
+    await mcpJsonRpc(baseUrl, apiKey, {
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+            protocolVersion: "2025-06-18",
+            capabilities: {},
+            clientInfo: { name: clientName, version: clientVersion },
+        },
+    });
+    const call = await mcpJsonRpc(baseUrl, apiKey, {
+        jsonrpc: "2.0",
+        id: 2,
+        method: "tools/call",
+        params: { name, arguments: args },
+    });
+    if (call.status >= 400) {
+        return {
+            ok: false,
+            error: `hono_http_${call.status}`,
+            content: { text: call.text.slice(0, 500) },
+        };
+    }
+    if (call.json?.error) {
+        return {
+            ok: false,
+            error: call.json.error.message || "hono_rpc_error",
+        };
+    }
+    const raw = call.json?.result?.content?.[0]?.text;
+    let content = raw;
+    if (typeof raw === "string") {
+        try {
+            content = JSON.parse(raw);
+        }
+        catch {
+            content = { text: raw };
+        }
+    }
+    const isErr = Boolean(call.json?.result?.isError);
+    return { ok: !isErr, content, ...(isErr ? { error: "hono_tool_error" } : {}) };
+}
+function groupBySpace(defs) {
+    const out = { core: [], module: [], plugin: [] };
+    for (const d of defs) {
+        const space = d.space || "module";
+        if (space === "core" || space === "plugin" || space === "module") {
+            out[space].push(d);
+        }
+        else {
+            out.module.push(d);
+        }
+    }
+    return out;
+}
+/**
+ * Enrobe une façade locale : dès qu'un upstream Hono est disponible
+ * (mode hono-proxy / hono-preferred), list/call passent par `/mcp`.
+ */
+export function wrapMcpFacadeWithHonoProxy(opts) {
+    const mode = opts.mode ?? "hono-preferred";
+    const fallbackLocal = opts.fallbackLocal ?? mode !== "hono-proxy";
+    const local = opts.local;
+    const clientName = opts.clientName ?? "creezio-mcp-proxy";
+    const clientVersion = opts.clientVersion ?? "m9";
+    async function viaHono(run, localRun) {
+        const base = opts.upstream.getBaseUrl();
+        const role = resolveMcpFacadeRole(mode, base);
+        if (role !== "hono-proxy" || !base) {
+            return localRun();
+        }
+        try {
+            return await run(base, opts.upstream.getApiKey());
+        }
+        catch (err) {
+            if (!fallbackLocal)
+                throw err;
+            return localRun();
+        }
+    }
+    return {
+        setDiscoverTools: (fn) => local.setDiscoverTools(fn),
+        setDiscoverToolsBySpace: (fn) => local.setDiscoverToolsBySpace(fn),
+        registerTool: (t) => local.registerTool(t),
+        registerAlias: (a, c) => local.registerAlias(a, c),
+        unregisterTool: (n) => local.unregisterTool(n),
+        listAliases: () => local.listAliases(),
+        resolveToolName: (n) => local.resolveToolName(n),
+        async listTools(listOpts) {
+            return viaHono(async (base, key) => {
+                const tools = await honoListTools(base, key, clientName, clientVersion);
+                return { tools };
+            }, () => local.listTools(listOpts));
+        },
+        async listToolsBySpace(listOpts) {
+            return viaHono(async (base, key) => groupBySpace(await honoListTools(base, key, clientName, clientVersion)), () => local.listToolsBySpace(listOpts));
+        },
+        async callTool(name, args = {}, callOpts) {
+            return viaHono((base, key) => honoCallTool(base, key, name, args, clientName, clientVersion), () => local.callTool(name, args, callOpts));
+        },
+    };
+}
+/** Helpers testables sans façade complète. */
+export const __mcpHonoProxyTest = {
+    honoListTools,
+    honoCallTool,
+    groupBySpace,
+    mcpJsonRpc,
+};
+//# sourceMappingURL=hono-proxy.js.map

package/dist/hono-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono-proxy.js","sourceRoot":"","sources":["../src/hono-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,oBAAoB,GAGrB,MAAM,cAAc,CAAC;AA6BtB,KAAK,UAAU,UAAU,CACvB,OAAe,EACf,MAAqB,EACrB,IAA6B;IAE7B,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,qCAAqC;KAC9C,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAqB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACrE,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAe,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,MAAqB,EACrB,UAAkB,EAClB,aAAqB;IAErB,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE;QAChC,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE;YACN,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE;SACzD;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE;QAC/C,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI;QACpC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/B,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,MAAqB,EACrB,IAAY,EACZ,IAA6B,EAC7B,UAAkB,EAClB,aAAqB;IAErB,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE;QAChC,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE;YACN,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE;SACzD;KACF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE;QAC7C,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;KAClC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,aAAa,IAAI,CAAC,MAAM,EAAE;YACjC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;SAC3C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,gBAAgB;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAClD,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,IAAyB;IAC7C,MAAM,GAAG,GAAoB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC;QAClC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAuC;IAEvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,YAAY,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IAEjD,KAAK,UAAU,OAAO,CACpB,GAAqD,EACrD,QAA0B;QAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC9B,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,gBAAgB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpD,uBAAuB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAClE,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1C,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAClD,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9C,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;QACtC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QAEhD,KAAK,CAAC,SAAS,CAAC,QAAQ;YACtB,OAAO,OAAO,CACZ,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;gBAClB,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,IAAI,EACJ,GAAG,EACH,UAAU,EACV,aAAa,CACd,CAAC;gBACF,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,CAAC,EACD,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAChC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,QAAQ;YAC7B,OAAO,OAAO,CACZ,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAClB,YAAY,CACV,MAAM,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,CAC1D,EACH,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CACvC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ;YACtC,OAAO,OAAO,CACZ,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACZ,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,EAChE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,UAAU;CACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @creezio/mcp-facade — MCP d'app unique (H1.2 / discovery H2.3 / proxy H4 / M9).
+ */
+export type { DiscoverToolsBySpaceFn, DiscoverToolsFn, McpAuthResult, McpAuthorizeContext, McpAuthorizeToolCallFn, McpBearerActor, McpCallToolOpts, McpFacadeOptions, McpListToolsResult, McpPublicSurfaceMode, McpRegisteredTool, McpResolveBearerActorFn, McpToolCallActor, McpToolCallResult, McpToolDefinition, McpToolHandler, McpToolPolicyDecision, McpToolsBySpace, McpToolSpace, } from "./types.js";
+export type { McpFacade } from "./facade.js";
+export { createMcpFacade } from "./facade.js";
+export { signMcpJwt, verifyMcpBearer } from "./jwt.js";
+export { assertNamespacedToolName, isLegacyAliasName, parseNamespacedToolName, } from "./namespace.js";
+export type { ParsedToolName } from "./namespace.js";
+export type { DecidePluginAccessFn, PluginAclActorResolver, PluginAclPolicyResolver, } from "./policy.js";
+export { composeToolPolicies, createDenyUnauthorizedPluginToolPolicy, denyCrossLayerToolCall, } from "./policy.js";
+export type { CreezioCoreMcpToolName, CreateCoreMcpToolsOptions, } from "./core-tools.js";
+export { CREEZIO_CORE_MCP_TOOL_NAMES, createCoreMcpTools, } from "./core-tools.js";
+export type { McpFacadeMode, McpFacadeRole, McpProductExecutor, McpUpstreamRef, } from "./runtime.js";
+export { MCP_PRODUCT_EXECUTOR, resolveMcpFacadeRole, } from "./runtime.js";
+export type { WrapMcpFacadeWithHonoProxyOptions } from "./hono-proxy.js";
+export { __mcpHonoProxyTest, wrapMcpFacadeWithHonoProxy, } from "./hono-proxy.js";
+export type { BindFacadeToolsToHonoOptions, HonoMcpSdkResult, HonoMcpToolRegisterFn, } from "./hono-bind.js";
+export { bindFacadeToolsToHono, mcpFacadeResultToSdk, } from "./hono-bind.js";
+export type { CreateBrandMcpFacadeOptions } from "./brand-facade.js";
+export { createBrandMcpFacade } from "./brand-facade.js";
+export type { BrandModuleOpsSource, GenerateModuleToolsInvoke, GenerateModuleToolsOptions, } from "./module-ops-tools.js";
+export { discoverModuleToolsFromBrandModules, discoverModuleToolsFromKernel, generateModuleToolsFromListedOps, generateModuleToolsFromMountedOps, generateModuleToolsFromOperations, } from "./module-ops-tools.js";
+export type { CreateMcpHonoAppOptions, McpApiKeyRecord, McpConnectedServer, McpOAuthAdapters, McpOAuthRoutesConfig, McpOAuthSession, McpOAuthSessionBridge, McpOAuthSessionUser, McpOAuthSqliteDatabase, McpServerAuthContext, McpStreamableTransport, ConsumedCode, CreateCodeInput, McpAccessToken, McpOAuthClient, RegisterClientInput, RotatedRefresh, McpRateLimitResult, } from "./oauth/index.js";
+export { ACCESS_TOKEN_TTL_S, REFRESH_TOKEN_TTL_S, MCP_SCOPE, MCP_SCOPE_LEGACY, MCP_SCOPE_READ, MCP_SCOPE_WRITE, MCP_SCOPES, McpPublicUrlRequiredError, canonicalizeMcpUrl, checkMcpRateLimit, configureMcpOAuth, consumeAuthCode, createAuthCode, createMcpHonoApp, createMcpOAuthRoutes, createRefreshToken, getClient, getMcpOAuthAdapters, isMcpPublicUrlRequiredError, mcpBaseUrl, mcpCorsAllowlist, mcpOauthReady, mcpResourceUrl, normalizeMcpScopes, peekAuthCode, pruneExpiredCodes, rateLimitHeaders, registerClient, resetMcpOAuthAdaptersForTests, resetMcpRateLimits, resolveMcpCorsOrigin, resolveMcpPublicUrl, resourceAcceptable, rotateRefreshToken, signAccessToken, touchOAuthClientLastUsed, verifyAccessToken, verifyClientSecret, verifyPkceS256, } from "./oauth/index.js";
+/** Host-only tools typiques (hors factory marque) — desktop / introspection. */
+export declare const CREEZIO_PLATFORM_HOST_MCP_TOOL_NAMES: readonly ["open_external_tab", "list_tools_by_space"];
+export type { CreateOpenExternalTabHostMcpToolsOptions, OpenExternalTabHostMcpRegisterFn, OpenExternalTabHostMcpToolConfig, OpenExternalTabResolveResult, OpenExternalTabResolved, OpenExternalTabUser, } from "./open-external-tab-host-tools.js";
+export { CREEZIO_OPEN_EXTERNAL_TAB_MCP_TOOL_NAME, createOpenExternalTabHostMcpTools, } from "./open-external-tab-host-tools.js";
+export { configureMcpAdmin, getMcpAdminAdapters, isMcpAdminConfigured, resetMcpAdminAdaptersForTests, ensureMcpAdminSchema, seedMcpToolPolicies, listMcpToolPolicies, getMcpToolPolicy, disabledMcpToolPolicyNames, filterListedToolsByEnabledPolicy, updateMcpToolPolicy, listMcpClients, setMcpClientEnabled, revokeMcpClient, rotateMcpClientSecret, clientCanAuthenticate, touchMcpClient, mcpAdminStatus, mcpDiagnostics, mcpMetrics, auditMcpAdmin, listMcpAuditLogs, pruneMcpAuditLogs, exportMcpDiagnostics, createMcpAdminRoutes, checkToolPolicy, createToolPolicyAuthorize, getStoredMcpToolPolicy, registerGuardedMcpTool, } from "./admin/index.js";
+export type { McpAdminAdapters, McpAdminSqliteDatabase, McpAdminSqliteStatement, McpRequestLogEntry, McpToolDefinition as McpAdminToolDefinition, McpToolPolicy, McpAdminClient, CreateMcpAdminRoutesOptions, CreateToolPolicyAuthorizeOptions, GuardedMcpServerLike, GuardedMcpToolContext, GuardedMcpToolDefinition, RegisterGuardedMcpToolOptions, ToolPolicyActor, ToolPolicyDenialReason, ToolPolicyGuardOptions, ToolPolicyView, } from "./admin/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,YAAY,EACV,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,sCAAsC,EACtC,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AAIzB,YAAY,EACV,4BAA4B,EAC5B,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAIxB,YAAY,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,gCAAgC,EAChC,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,2BAA2B,EAC3B,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,6BAA6B,EAC7B,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,eAAO,MAAM,oCAAoC,uDAGvC,CAAC;AAIX,YAAY,EACV,wCAAwC,EACxC,gCAAgC,EAChC,gCAAgC,EAChC,4BAA4B,EAC5B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,uCAAuC,EACvC,iCAAiC,GAClC,MAAM,mCAAmC,CAAC;AAI3C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,6BAA6B,EAC7B,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,0BAA0B,EAC1B,gCAAgC,EAChC,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,IAAI,sBAAsB,EAC3C,aAAa,EACb,cAAc,EACd,2BAA2B,EAC3B,gCAAgC,EAChC,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,GACf,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,23 @@
+/**
+ * @creezio/mcp-facade — MCP d'app unique (H1.2 / discovery H2.3 / proxy H4 / M9).
+ */
+export { createMcpFacade } from "./facade.js";
+export { signMcpJwt, verifyMcpBearer } from "./jwt.js";
+export { assertNamespacedToolName, isLegacyAliasName, parseNamespacedToolName, } from "./namespace.js";
+export { composeToolPolicies, createDenyUnauthorizedPluginToolPolicy, denyCrossLayerToolCall, } from "./policy.js";
+export { CREEZIO_CORE_MCP_TOOL_NAMES, createCoreMcpTools, } from "./core-tools.js";
+export { MCP_PRODUCT_EXECUTOR, resolveMcpFacadeRole, } from "./runtime.js";
+export { __mcpHonoProxyTest, wrapMcpFacadeWithHonoProxy, } from "./hono-proxy.js";
+export { bindFacadeToolsToHono, mcpFacadeResultToSdk, } from "./hono-bind.js";
+export { createBrandMcpFacade } from "./brand-facade.js";
+export { discoverModuleToolsFromBrandModules, discoverModuleToolsFromKernel, generateModuleToolsFromListedOps, generateModuleToolsFromMountedOps, generateModuleToolsFromOperations, } from "./module-ops-tools.js";
+export { ACCESS_TOKEN_TTL_S, REFRESH_TOKEN_TTL_S, MCP_SCOPE, MCP_SCOPE_LEGACY, MCP_SCOPE_READ, MCP_SCOPE_WRITE, MCP_SCOPES, McpPublicUrlRequiredError, canonicalizeMcpUrl, checkMcpRateLimit, configureMcpOAuth, consumeAuthCode, createAuthCode, createMcpHonoApp, createMcpOAuthRoutes, createRefreshToken, getClient, getMcpOAuthAdapters, isMcpPublicUrlRequiredError, mcpBaseUrl, mcpCorsAllowlist, mcpOauthReady, mcpResourceUrl, normalizeMcpScopes, peekAuthCode, pruneExpiredCodes, rateLimitHeaders, registerClient, resetMcpOAuthAdaptersForTests, resetMcpRateLimits, resolveMcpCorsOrigin, resolveMcpPublicUrl, resourceAcceptable, rotateRefreshToken, signAccessToken, touchOAuthClientLastUsed, verifyAccessToken, verifyClientSecret, verifyPkceS256, } from "./oauth/index.js";
+/** Host-only tools typiques (hors factory marque) — desktop / introspection. */
+export const CREEZIO_PLATFORM_HOST_MCP_TOOL_NAMES = [
+    "open_external_tab",
+    "list_tools_by_space",
+];
+export { CREEZIO_OPEN_EXTERNAL_TAB_MCP_TOOL_NAME, createOpenExternalTabHostMcpTools, } from "./open-external-tab-host-tools.js";
+/* ── N6 : MCP admin (port TempoFlow) ── */
+export { configureMcpAdmin, getMcpAdminAdapters, isMcpAdminConfigured, resetMcpAdminAdaptersForTests, ensureMcpAdminSchema, seedMcpToolPolicies, listMcpToolPolicies, getMcpToolPolicy, disabledMcpToolPolicyNames, filterListedToolsByEnabledPolicy, updateMcpToolPolicy, listMcpClients, setMcpClientEnabled, revokeMcpClient, rotateMcpClientSecret, clientCanAuthenticate, touchMcpClient, mcpAdminStatus, mcpDiagnostics, mcpMetrics, auditMcpAdmin, listMcpAuditLogs, pruneMcpAuditLogs, exportMcpDiagnostics, createMcpAdminRoutes, checkToolPolicy, createToolPolicyAuthorize, getStoredMcpToolPolicy, registerGuardedMcpTool, } from "./admin/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAyBH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EACL,wBAAwB,EACxB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAOxB,OAAO,EACL,mBAAmB,EACnB,sCAAsC,EACtC,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAQzB,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AASzB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAOzD,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,gCAAgC,EAChC,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAuB/B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,yBAAyB,EACzB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,2BAA2B,EAC3B,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,6BAA6B,EAC7B,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,mBAAmB;IACnB,qBAAqB;CACb,CAAC;AAYX,OAAO,EACL,uCAAuC,EACvC,iCAAiC,GAClC,MAAM,mCAAmC,CAAC;AAE3C,2CAA2C;AAE3C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,6BAA6B,EAC7B,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,0BAA0B,EAC1B,gCAAgC,EAChC,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,cAAc,EACd,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC"}

package/dist/jwt.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Vérification JWT HS256 minimale (sans dépendance jsonwebtoken).
+ * Alignée sur le secret local-config `mcpJwtSecret` / MCP_JWT_SECRET.
+ */
+import type { McpAuthResult } from "./types.js";
+/**
+ * Accepte :
+ * - bearer === secret (token opaque sandbox) ;
+ * - JWT HS256 signé avec le secret (payload.sub optionnel).
+ */
+export declare function verifyMcpBearer(bearerToken: string | null | undefined, secret: string | null | undefined, opts?: {
+    allowUnauthenticated?: boolean;
+}): McpAuthResult;
+/** Émet un JWT HS256 court (tests / sandbox). */
+export declare function signMcpJwt(secret: string, payload: {
+    sub?: string;
+    exp?: number;
+    [k: string]: unknown;
+}): string;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAchD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,IAAI,CAAC,EAAE;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,GACxC,aAAa,CAwDf;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAC5D,MAAM,CAUR"}

package/dist/jwt.js

@@ -0,0 +1,84 @@
+/**
+ * Vérification JWT HS256 minimale (sans dépendance jsonwebtoken).
+ * Alignée sur le secret local-config `mcpJwtSecret` / MCP_JWT_SECRET.
+ */
+import crypto from "node:crypto";
+function b64urlToBuf(s) {
+    const pad = "=".repeat((4 - (s.length % 4)) % 4);
+    return Buffer.from(s.replace(/-/g, "+").replace(/_/g, "/") + pad, "base64");
+}
+function timingSafeEqualStr(a, b) {
+    const ba = Buffer.from(a);
+    const bb = Buffer.from(b);
+    if (ba.length !== bb.length)
+        return false;
+    return crypto.timingSafeEqual(ba, bb);
+}
+/**
+ * Accepte :
+ * - bearer === secret (token opaque sandbox) ;
+ * - JWT HS256 signé avec le secret (payload.sub optionnel).
+ */
+export function verifyMcpBearer(bearerToken, secret, opts) {
+    if (!secret) {
+        if (opts?.allowUnauthenticated)
+            return { ok: true, subject: "anonymous" };
+        return { ok: false, error: "mcp_jwt_secret_missing", status: 503 };
+    }
+    if (!bearerToken) {
+        if (opts?.allowUnauthenticated)
+            return { ok: true, subject: "anonymous" };
+        return { ok: false, error: "unauthorized", status: 401 };
+    }
+    const token = bearerToken.replace(/^Bearer\s+/i, "").trim();
+    if (!token) {
+        return { ok: false, error: "unauthorized", status: 401 };
+    }
+    if (timingSafeEqualStr(token, secret)) {
+        return { ok: true, subject: "opaque-token" };
+    }
+    const parts = token.split(".");
+    if (parts.length !== 3) {
+        return { ok: false, error: "invalid_token", status: 401 };
+    }
+    const [h, p, s] = parts;
+    const data = `${h}.${p}`;
+    const expected = crypto
+        .createHmac("sha256", secret)
+        .update(data)
+        .digest("base64url");
+    if (!timingSafeEqualStr(s, expected)) {
+        return { ok: false, error: "invalid_signature", status: 401 };
+    }
+    try {
+        const payload = JSON.parse(b64urlToBuf(p).toString("utf8"));
+        if (typeof payload.exp === "number" && payload.exp * 1000 < Date.now()) {
+            return { ok: false, error: "token_expired", status: 401 };
+        }
+        const orgId = typeof payload.orgId === "string"
+            ? payload.orgId
+            : typeof payload.org_id === "string"
+                ? payload.org_id
+                : undefined;
+        return {
+            ok: true,
+            subject: payload.sub || "jwt",
+            ...(orgId ? { orgId } : {}),
+            claims: payload,
+        };
+    }
+    catch {
+        return { ok: false, error: "invalid_payload", status: 401 };
+    }
+}
+/** Émet un JWT HS256 court (tests / sandbox). */
+export function signMcpJwt(secret, payload) {
+    const header = Buffer.from(JSON.stringify({ alg: "HS256", typ: "JWT" })).toString("base64url");
+    const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+    const sig = crypto
+        .createHmac("sha256", secret)
+        .update(`${header}.${body}`)
+        .digest("base64url");
+    return `${header}.${body}.${sig}`;
+}
+//# sourceMappingURL=jwt.js.map

package/dist/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAsC,EACtC,MAAiC,EACjC,IAAyC;IAEzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,IAAI,EAAE,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,IAAI,EAAE,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAiC,CAAC;IACpD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM;SACpB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAOzD,CAAC;QACF,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GACT,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;YAC/B,CAAC,CAAC,OAAO,CAAC,KAAK;YACf,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK;YAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,OAAkC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,OAA6D;IAE7D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC7C,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM;SACf,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,WAAW,CAAC,CAAC;IACvB,OAAO,GAAG,MAAM,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/dist/module-ops-tools.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Génération des tools MCP depuis les opérations de module (SoT).
+ * Handler = requête synthétique vers le même mount HTTP — zéro 2e implémentation.
+ */
+import type { ApiKernel, ApiMount, ApiRequest, ApiResponse, ApiSpace, EntitySpec, ListedModuleOperation, ModuleOperation, MountedApiInfo } from "@creezio/api-kernel";
+import type { McpRegisteredTool } from "./types.js";
+export type GenerateModuleToolsInvoke = (req: ApiRequest) => Promise<ApiResponse>;
+export type GenerateModuleToolsOptions = {
+    /** Id HTTP du mount (défaut = moduleId). */
+    mountId?: string;
+    space?: Exclude<ApiSpace, "core">;
+};
+/**
+ * Génère un tool MCP par op — `module.<id>.<op.id>`.
+ * Handler = requête synthétique (method/path/body) vers le même
+ * `ApiMount.handle` via `invokeMount` (typiquement `api.handle`) —
+ * zéro 2ᵉ implémentation métier.
+ */
+export declare function generateModuleToolsFromOperations(moduleId: string, ops: readonly ModuleOperation[], invokeMount: GenerateModuleToolsInvoke, options?: GenerateModuleToolsOptions): McpRegisteredTool[];
+/**
+ * Tools `module.*` générés depuis `api.listOperations()` (space module).
+ * SoT runtime — `BrandModuleDef.mcpTools` n'existe plus.
+ */
+export declare function generateModuleToolsFromListedOps(api: ApiKernel, listed?: readonly ListedModuleOperation[]): McpRegisteredTool[];
+/** Tools générés depuis les mounts déjà enregistrés sur le kernel. */
+export declare function generateModuleToolsFromMountedOps(api: ApiKernel, mounts?: readonly MountedApiInfo[]): McpRegisteredTool[];
+/**
+ * Discovery runtime : uniquement `listOperations()` (space module).
+ * `extraTools` = hook apps (health, JWT) — pas de `mcpTools` manuscrit.
+ */
+export declare function discoverModuleToolsFromKernel(api: ApiKernel, extraTools?: readonly McpRegisteredTool[]): McpRegisteredTool[];
+export type BrandModuleOpsSource = {
+    id: string;
+    entitySpecs?: Record<string, EntitySpec>;
+    apiMounts?: Record<string, ApiMount>;
+};
+/**
+ * Discovery kit-side : SoT = `api.listOperations()` (space module).
+ * Fallback : ops des BrandModuleDef (EntitySpec CRUD + apiMounts) si le
+ * kernel n'a pas encore les mounts. Pas de champ `mcpTools`.
+ */
+export declare function discoverModuleToolsFromBrandModules(modules: readonly BrandModuleOpsSource[], api: ApiKernel): McpRegisteredTool[];
+//# sourceMappingURL=module-ops-tools.d.ts.map

package/dist/module-ops-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-ops-tools.d.ts","sourceRoot":"","sources":["../src/module-ops-tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,QAAQ,EACR,UAAU,EACV,WAAW,EACX,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,eAAe,EACf,cAAc,EACf,MAAM,qBAAqB,CAAC;AAO7B,OAAO,KAAK,EACV,iBAAiB,EAGlB,MAAM,YAAY,CAAC;AA4HpB,MAAM,MAAM,yBAAyB,GAAG,CACtC,GAAG,EAAE,UAAU,KACZ,OAAO,CAAC,WAAW,CAAC,CAAC;AAE1B,MAAM,MAAM,0BAA0B,GAAG;IACvC,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC;AAgFF;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,SAAS,eAAe,EAAE,EAC/B,WAAW,EAAE,yBAAyB,EACtC,OAAO,GAAE,0BAA+B,GACvC,iBAAiB,EAAE,CAkCrB;AAiCD;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,SAAS,EACd,MAAM,CAAC,EAAE,SAAS,qBAAqB,EAAE,GACxC,iBAAiB,EAAE,CAMrB;AAED,sEAAsE;AACtE,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,SAAS,EACd,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,GACjC,iBAAiB,EAAE,CAsBrB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,SAAS,EACd,UAAU,GAAE,SAAS,iBAAiB,EAAO,GAC5C,iBAAiB,EAAE,CAKrB;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;CACtC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,SAAS,oBAAoB,EAAE,EACxC,GAAG,EAAE,SAAS,GACb,iBAAiB,EAAE,CAiCrB"}