@decionis/agent-safe-pipeline 0.4.1 → 0.5.0

package/dist/profile/BuiltInApiProfiles.js

@@ -9,7 +9,7 @@ export const BUILT_IN_API_PROFILES = [
         profile: "agent-safe.profile.api/1",
         id: "businesscentral/api/v2",
         platform: "business-central",
-        title: "Business Central API v2.0: the postings and master-data writes an agent can make",
+        title: "Business Central API v2.0: the postings and master-data writes an agent can make, and the customer reads it can be scoped to",
         prefixes: ["/v2.0/{tenantId}/{environment}/api/v2.0", "/v2.0/{environment}/api/v2.0", ""],
         operations: [
             {
@@ -78,6 +78,10 @@ export const BUILT_IN_API_PROFILES = [
                     external_document_number: "/body/externalDocumentNumber",
                 },
                 policy_projection: null,
+                subject: {
+                    request: "/body/customerNumber",
+                    response: "/body/customerNumber",
+                },
             },
             {
                 id: "purchaseInvoices.post",
@@ -148,6 +152,200 @@ export const BUILT_IN_API_PROFILES = [
                     blocked: "/body/blocked",
                 },
                 policy_projection: null,
+                subject: {
+                    response: "/body/number",
+                },
+                precondition: {
+                    read: "customers.get",
+                    version: "/body/@odata.etag",
+                    state: "/body/blocked",
+                },
+            },
+            {
+                id: "customers.list",
+                method: "GET",
+                path: "/companies({companyId})/customers",
+                action: "customer.read",
+                summary: "List customers.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/value/*/number",
+                    query: {
+                        name: "$filter",
+                        template: "number eq '{subject}'",
+                    },
+                    parameters: ["$select", "$top", "$skip", "$orderby", "$expand", "$skiptoken"],
+                    envelope: ["@odata.context", "@odata.nextLink"],
+                },
+            },
+            {
+                id: "customers.get",
+                method: "GET",
+                path: "/companies({companyId})/customers({customerId})",
+                action: "customer.read",
+                summary: "Read one customer.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/number",
+                    parameters: ["$select", "$expand"],
+                },
+            },
+            {
+                id: "salesInvoices.list",
+                method: "GET",
+                path: "/companies({companyId})/salesInvoices",
+                action: "sales.read",
+                summary: "List sales invoices.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/value/*/customerNumber",
+                    query: {
+                        name: "$filter",
+                        template: "customerNumber eq '{subject}'",
+                    },
+                    parameters: ["$select", "$top", "$skip", "$orderby", "$expand", "$skiptoken"],
+                    envelope: ["@odata.context", "@odata.nextLink"],
+                },
+            },
+            {
+                id: "salesInvoices.get",
+                method: "GET",
+                path: "/companies({companyId})/salesInvoices({salesInvoiceId})",
+                action: "sales.read",
+                summary: "Read one sales invoice.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/customerNumber",
+                    parameters: ["$select", "$expand"],
+                },
+            },
+            {
+                id: "salesOrders.list",
+                method: "GET",
+                path: "/companies({companyId})/salesOrders",
+                action: "sales.read",
+                summary: "List sales orders.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/value/*/customerNumber",
+                    query: {
+                        name: "$filter",
+                        template: "customerNumber eq '{subject}'",
+                    },
+                    parameters: ["$select", "$top", "$skip", "$orderby", "$expand", "$skiptoken"],
+                    envelope: ["@odata.context", "@odata.nextLink"],
+                },
+            },
+            {
+                id: "salesOrders.get",
+                method: "GET",
+                path: "/companies({companyId})/salesOrders({salesOrderId})",
+                action: "sales.read",
+                summary: "Read one sales order.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/customerNumber",
+                    parameters: ["$select", "$expand"],
+                },
+            },
+            {
+                id: "salesQuotes.list",
+                method: "GET",
+                path: "/companies({companyId})/salesQuotes",
+                action: "sales.read",
+                summary: "List sales quotes.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/value/*/customerNumber",
+                    query: {
+                        name: "$filter",
+                        template: "customerNumber eq '{subject}'",
+                    },
+                    parameters: ["$select", "$top", "$skip", "$orderby", "$expand", "$skiptoken"],
+                    envelope: ["@odata.context", "@odata.nextLink"],
+                },
+            },
+            {
+                id: "salesQuotes.get",
+                method: "GET",
+                path: "/companies({companyId})/salesQuotes({salesQuoteId})",
+                action: "sales.read",
+                summary: "Read one sales quote.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/customerNumber",
+                    parameters: ["$select", "$expand"],
+                },
+            },
+            {
+                id: "salesCreditMemos.list",
+                method: "GET",
+                path: "/companies({companyId})/salesCreditMemos",
+                action: "sales.read",
+                summary: "List sales credit memos.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/value/*/customerNumber",
+                    query: {
+                        name: "$filter",
+                        template: "customerNumber eq '{subject}'",
+                    },
+                    parameters: ["$select", "$top", "$skip", "$orderby", "$expand", "$skiptoken"],
+                    envelope: ["@odata.context", "@odata.nextLink"],
+                },
+            },
+            {
+                id: "salesCreditMemos.get",
+                method: "GET",
+                path: "/companies({companyId})/salesCreditMemos({salesCreditMemoId})",
+                action: "sales.read",
+                summary: "Read one sales credit memo.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/customerNumber",
+                    parameters: ["$select", "$expand"],
+                },
+            },
+            {
+                id: "customerLedgerEntries.list",
+                method: "GET",
+                path: "/companies({companyId})/customerLedgerEntries",
+                action: "ledger.read",
+                summary: "List customer ledger entries.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/value/*/customerNumber",
+                    query: {
+                        name: "$filter",
+                        template: "customerNumber eq '{subject}'",
+                    },
+                    parameters: ["$select", "$top", "$skip", "$orderby", "$expand", "$skiptoken"],
+                    envelope: ["@odata.context", "@odata.nextLink"],
+                },
+            },
+            {
+                id: "customerLedgerEntries.get",
+                method: "GET",
+                path: "/companies({companyId})/customerLedgerEntries({entryId})",
+                action: "ledger.read",
+                summary: "Read one customer ledger entry.",
+                facts: {},
+                policy_projection: null,
+                subject: {
+                    response: "/body/customerNumber",
+                    parameters: ["$select", "$expand"],
+                },
             },
         ],
     },

package/dist/profile/BuiltInApiProfiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"BuiltInApiProfiles.js","sourceRoot":"","sources":["../../src/profile/BuiltInApiProfiles.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAoC;IACpE;QACE,OAAO,EAAE,0BAA0B;QACnC,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,kBAAkB;QAC5B,KAAK,EAAE,kFAAkF;QACzF,QAAQ,EAAE,CAAC,yCAAyC,EAAE,8BAA8B,EAAE,EAAE,CAAC;QACzF,UAAU,EAAE;YACV;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,4EAA4E;gBAClF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,sBAAsB;iBACpC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,2BAA2B;gBAC/B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,mFAAmF;gBACzF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,mDAAmD;gBAC5D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,sBAAsB;iBACpC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,sBAAsB;gBAC1B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,8EAA8E;gBACpF,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,8DAA8D;gBACvE,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,sBAAsB;iBACpC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,4BAA4B;gBAChC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kFAAkF;gBACxF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,8CAA8C;gBACvD,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,eAAe,EAAE,sBAAsB;oBACvC,aAAa,EAAE,oBAAoB;oBACnC,wBAAwB,EAAE,8BAA8B;iBACzD;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kFAAkF;gBACxF,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,iDAAiD;gBAC1D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kEAAkE;gBACxE,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,+BAA+B;gBACxC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,UAAU,EAAE,iBAAiB;iBAC9B;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,2EAA2E;gBACjF,MAAM,EAAE,gBAAgB;gBACxB,OAAO,EAAE,iDAAiD;gBAC1D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,UAAU,EAAE,iBAAiB;oBAC7B,aAAa,EAAE,oBAAoB;oBACnC,cAAc,EAAE,cAAc;oBAC9B,YAAY,EAAE,mBAAmB;oBACjC,eAAe,EAAE,sBAAsB;iBACxC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,6CAA6C;gBACnD,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,gCAAgC;gBACzC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,SAAS,EAAE,gBAAgB;iBAC5B;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,iDAAiD;gBACvD,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,oDAAoD;gBAC7D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,kBAAkB;oBAC/B,OAAO,EAAE,eAAe;iBACzB;gBACD,iBAAiB,EAAE,IAAI;aACxB;SACF;KACF;IACD;QACE,OAAO,EAAE,0BAA0B;QACnC,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,iEAAiE;QACxE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACd,UAAU,EAAE;YACV;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0CAA0C;gBAChD,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,0DAA0D;gBACnE,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;iBAC3C;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,kBAAkB;oBACjC,gBAAgB,EAAE,kBAAkB;oBACpC,YAAY,EAAE,2BAA2B;oBACzC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,sDAAsD;gBAC/D,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;oBAC1C,YAAY,EAAE,2DAA2D;oBACzE,oBAAoB,EAClB,uGAAuG;iBAC1G;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,oBAAoB;oBACnC,gBAAgB,EAAE,oBAAoB;oBACtC,YAAY,EAAE,UAAU;oBACxB,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,qBAAqB;gBAC9B,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;oBAC1C,YAAY,EAAE,qDAAqD;iBACpE;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,gBAAgB;oBAC/B,gBAAgB,EAAE,gBAAgB;oBAClC,YAAY,EAAE,yBAAyB;oBACvC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,aAAa;gBACjB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,uCAAuC;gBAC7C,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,0CAA0C;gBACnD,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;oBAC1C,YAAY,EAAE,uDAAuD;iBACtE;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE;oBACL,KAAK,EAAE,MAAM;iBACd;gBACD,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,sCAAsC;gBAC/C,KAAK,EAAE;oBACL,GAAG,EAAE,WAAW;oBAChB,YAAY,EAAE,qCAAqC;oBACnD,cAAc,EAAE,uCAAuC;oBACvD,UAAU,EAAE,kCAAkC;iBAC/C;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,kBAAkB;oBACjC,gBAAgB,EAAE,kBAAkB;oBACpC,YAAY,EAAE,2BAA2B;oBACzC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,gCAAgC;gBACzC,KAAK,EAAE;oBACL,GAAG,EAAE,WAAW;oBAChB,YAAY,EAAE,qCAAqC;oBACnD,cAAc,EAAE,uCAAuC;iBACxD;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,cAAc;oBAC7B,gBAAgB,EAAE,cAAc;oBAChC,YAAY,EAAE,uBAAuB;oBACrC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,wCAAwC;gBACjD,KAAK,EAAE;oBACL,GAAG,EAAE,YAAY;oBACjB,QAAQ,EAAE,uBAAuB;oBACjC,aAAa,EAAE,qBAAqB;iBACrC;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,oBAAoB;oBACnC,gBAAgB,EAAE,oBAAoB;oBACtC,YAAY,EAAE,6BAA6B;oBAC3C,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,cAAc;gBAClB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,4DAA4D;gBACrE,KAAK,EAAE;oBACL,SAAS,EAAE,iBAAiB;iBAC7B;gBACD,iBAAiB,EAAE,IAAI;aACxB;SACF;KACF;CACF,CAAC"}
+{"version":3,"file":"BuiltInApiProfiles.js","sourceRoot":"","sources":["../../src/profile/BuiltInApiProfiles.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAoC;IACpE;QACE,OAAO,EAAE,0BAA0B;QACnC,EAAE,EAAE,wBAAwB;QAC5B,QAAQ,EAAE,kBAAkB;QAC5B,KAAK,EACH,8HAA8H;QAChI,QAAQ,EAAE,CAAC,yCAAyC,EAAE,8BAA8B,EAAE,EAAE,CAAC;QACzF,UAAU,EAAE;YACV;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,4EAA4E;gBAClF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,sBAAsB;iBACpC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,2BAA2B;gBAC/B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,mFAAmF;gBACzF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,mDAAmD;gBAC5D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,sBAAsB;iBACpC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,sBAAsB;gBAC1B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,8EAA8E;gBACpF,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,8DAA8D;gBACvE,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,sBAAsB;iBACpC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,4BAA4B;gBAChC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kFAAkF;gBACxF,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,8CAA8C;gBACvD,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,oBAAoB;iBAClC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,eAAe,EAAE,sBAAsB;oBACvC,aAAa,EAAE,oBAAoB;oBACnC,wBAAwB,EAAE,8BAA8B;iBACzD;gBACD,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,OAAO,EAAE,sBAAsB;oBAC/B,QAAQ,EAAE,sBAAsB;iBACjC;aACF;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kFAAkF;gBACxF,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,iDAAiD;gBAC1D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,yBAAyB;iBACvC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kEAAkE;gBACxE,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,+BAA+B;gBACxC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,UAAU,EAAE,iBAAiB;iBAC9B;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,2EAA2E;gBACjF,MAAM,EAAE,gBAAgB;gBACxB,OAAO,EAAE,iDAAiD;gBAC1D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,UAAU,EAAE,iBAAiB;oBAC7B,aAAa,EAAE,oBAAoB;oBACnC,cAAc,EAAE,cAAc;oBAC9B,YAAY,EAAE,mBAAmB;oBACjC,eAAe,EAAE,sBAAsB;iBACxC;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,6CAA6C;gBACnD,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,gCAAgC;gBACzC,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,SAAS,EAAE,gBAAgB;iBAC5B;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,iDAAiD;gBACvD,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,oDAAoD;gBAC7D,KAAK,EAAE;oBACL,UAAU,EAAE,iBAAiB;oBAC7B,WAAW,EAAE,mBAAmB;oBAChC,WAAW,EAAE,kBAAkB;oBAC/B,OAAO,EAAE,eAAe;iBACzB;gBACD,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,cAAc;iBACzB;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,mBAAmB;oBAC5B,KAAK,EAAE,eAAe;iBACvB;aACF;YACD;gBACE,EAAE,EAAE,gBAAgB;gBACpB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,mCAAmC;gBACzC,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,iBAAiB;gBAC1B,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,sBAAsB;oBAChC,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,uBAAuB;qBAClC;oBACD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;oBAC7E,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;iBAChD;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,iDAAiD;gBACvD,MAAM,EAAE,eAAe;gBACvB,OAAO,EAAE,oBAAoB;gBAC7B,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,cAAc;oBACxB,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;iBACnC;aACF;YACD;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,uCAAuC;gBAC7C,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,sBAAsB;gBAC/B,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,8BAA8B;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,+BAA+B;qBAC1C;oBACD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;oBAC7E,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;iBAChD;aACF;YACD;gBACE,EAAE,EAAE,mBAAmB;gBACvB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,yDAAyD;gBAC/D,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,yBAAyB;gBAClC,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,sBAAsB;oBAChC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;iBACnC;aACF;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,oBAAoB;gBAC7B,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,8BAA8B;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,+BAA+B;qBAC1C;oBACD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;oBAC7E,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;iBAChD;aACF;YACD;gBACE,EAAE,EAAE,iBAAiB;gBACrB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qDAAqD;gBAC3D,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,sBAAsB;oBAChC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;iBACnC;aACF;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,oBAAoB;gBAC7B,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,8BAA8B;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,+BAA+B;qBAC1C;oBACD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;oBAC7E,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;iBAChD;aACF;YACD;gBACE,EAAE,EAAE,iBAAiB;gBACrB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qDAAqD;gBAC3D,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,uBAAuB;gBAChC,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,sBAAsB;oBAChC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;iBACnC;aACF;YACD;gBACE,EAAE,EAAE,uBAAuB;gBAC3B,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,0CAA0C;gBAChD,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,0BAA0B;gBACnC,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,8BAA8B;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,+BAA+B;qBAC1C;oBACD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;oBAC7E,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;iBAChD;aACF;YACD;gBACE,EAAE,EAAE,sBAAsB;gBAC1B,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,+DAA+D;gBACrE,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,6BAA6B;gBACtC,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,sBAAsB;oBAChC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;iBACnC;aACF;YACD;gBACE,EAAE,EAAE,4BAA4B;gBAChC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,+CAA+C;gBACrD,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,+BAA+B;gBACxC,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,8BAA8B;oBACxC,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,+BAA+B;qBAC1C;oBACD,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;oBAC7E,QAAQ,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;iBAChD;aACF;YACD;gBACE,EAAE,EAAE,2BAA2B;gBAC/B,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,0DAA0D;gBAChE,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,iCAAiC;gBAC1C,KAAK,EAAE,EAAE;gBACT,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE;oBACP,QAAQ,EAAE,sBAAsB;oBAChC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;iBACnC;aACF;SACF;KACF;IACD;QACE,OAAO,EAAE,0BAA0B;QACnC,EAAE,EAAE,gBAAgB;QACpB,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,iEAAiE;QACxE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACd,UAAU,EAAE;YACV;gBACE,EAAE,EAAE,oBAAoB;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,0CAA0C;gBAChD,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,0DAA0D;gBACnE,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;iBAC3C;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,kBAAkB;oBACjC,gBAAgB,EAAE,kBAAkB;oBACpC,YAAY,EAAE,2BAA2B;oBACzC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,sDAAsD;gBAC/D,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;oBAC1C,YAAY,EAAE,2DAA2D;oBACzE,oBAAoB,EAClB,uGAAuG;iBAC1G;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,oBAAoB;oBACnC,gBAAgB,EAAE,oBAAoB;oBACtC,YAAY,EAAE,UAAU;oBACxB,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,qBAAqB;gBAC9B,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;oBAC1C,YAAY,EAAE,qDAAqD;iBACpE;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,gBAAgB;oBAC/B,gBAAgB,EAAE,gBAAgB;oBAClC,YAAY,EAAE,yBAAyB;oBACvC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,aAAa;gBACjB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,uCAAuC;gBAC7C,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,0CAA0C;gBACnD,KAAK,EAAE;oBACL,iBAAiB,EAAE,uBAAuB;oBAC1C,YAAY,EAAE,uDAAuD;iBACtE;gBACD,iBAAiB,EAAE,IAAI;aACxB;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE;oBACL,KAAK,EAAE,MAAM;iBACd;gBACD,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,sCAAsC;gBAC/C,KAAK,EAAE;oBACL,GAAG,EAAE,WAAW;oBAChB,YAAY,EAAE,qCAAqC;oBACnD,cAAc,EAAE,uCAAuC;oBACvD,UAAU,EAAE,kCAAkC;iBAC/C;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,kBAAkB;oBACjC,gBAAgB,EAAE,kBAAkB;oBACpC,YAAY,EAAE,2BAA2B;oBACzC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,cAAc;gBACtB,OAAO,EAAE,gCAAgC;gBACzC,KAAK,EAAE;oBACL,GAAG,EAAE,WAAW;oBAChB,YAAY,EAAE,qCAAqC;oBACnD,cAAc,EAAE,uCAAuC;iBACxD;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,cAAc;oBAC7B,gBAAgB,EAAE,cAAc;oBAChC,YAAY,EAAE,uBAAuB;oBACrC,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,kBAAkB;gBAC1B,OAAO,EAAE,wCAAwC;gBACjD,KAAK,EAAE;oBACL,GAAG,EAAE,YAAY;oBACjB,QAAQ,EAAE,uBAAuB;oBACjC,aAAa,EAAE,qBAAqB;iBACrC;gBACD,iBAAiB,EAAE;oBACjB,aAAa,EAAE,oBAAoB;oBACnC,gBAAgB,EAAE,oBAAoB;oBACtC,YAAY,EAAE,6BAA6B;oBAC3C,OAAO,EAAE,IAAI;iBACd;aACF;YACD;gBACE,EAAE,EAAE,cAAc;gBAClB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,4DAA4D;gBACrE,KAAK,EAAE;oBACL,SAAS,EAAE,iBAAiB;iBAC7B;gBACD,iBAAiB,EAAE,IAAI;aACxB;SACF;KACF;CACF,CAAC"}

package/dist/profile/McpToolProfile.d.ts

@@ -0,0 +1,129 @@
+import { z } from "zod";
+import { type JsonObject } from "../intent/JsonValue.js";
+/**
+ * `agent-safe.profile.mcp/1`: an MCP server's consequential tools described as
+ * data. Each tool names the action it becomes, the target it acts on (a
+ * template over its arguments), the argument that names its subject (the
+ * customer it is for), the arguments that decide what it does, and the
+ * arguments it accepts. A guard reads the file in place of a binding written
+ * in code, so governing a tool is a reviewable file, not code reached by name.
+ */
+export declare const MCP_PROFILE_CONTRACT = "agent-safe.profile.mcp/1";
+export declare const MCP_PROFILE_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/profiles/mcp/v1/schema.json";
+/** The most arguments a tool declares, and the most placeholders its target holds. */
+export declare const MAX_TOOL_ARGUMENTS = 64;
+export declare const MAX_TARGET_PLACEHOLDERS = 16;
+/** The types an argument may be declared as; a scalar one may fill a target or name a subject. */
+export declare const MCP_ARGUMENT_TYPES: readonly ["string", "number", "integer", "boolean", "array", "object"];
+export type McpArgumentType = (typeof MCP_ARGUMENT_TYPES)[number];
+export declare const McpArgumentSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        string: "string";
+        number: "number";
+        boolean: "boolean";
+        object: "object";
+        array: "array";
+        integer: "integer";
+    }>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    maxLength: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const McpToolSchema: z.ZodObject<{
+    tool: z.ZodString;
+    action: z.ZodString;
+    operation: z.ZodString;
+    summary: z.ZodString;
+    target: z.ZodString;
+    subject: z.ZodOptional<z.ZodString>;
+    consequential: z.ZodArray<z.ZodString>;
+    arguments: z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodEnum<{
+            string: "string";
+            number: "number";
+            boolean: "boolean";
+            object: "object";
+            array: "array";
+            integer: "integer";
+        }>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        maxLength: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const McpProfileDefinitionSchema: z.ZodObject<{
+    profile: z.ZodLiteral<"agent-safe.profile.mcp/1">;
+    id: z.ZodString;
+    title: z.ZodString;
+    system: z.ZodString;
+    environment: z.ZodOptional<z.ZodString>;
+    tools: z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        action: z.ZodString;
+        operation: z.ZodString;
+        summary: z.ZodString;
+        target: z.ZodString;
+        subject: z.ZodOptional<z.ZodString>;
+        consequential: z.ZodArray<z.ZodString>;
+        arguments: z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                number: "number";
+                boolean: "boolean";
+                object: "object";
+                array: "array";
+                integer: "integer";
+            }>;
+            required: z.ZodOptional<z.ZodBoolean>;
+            maxLength: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type McpArgumentDefinition = z.infer<typeof McpArgumentSchema>;
+export type McpToolDefinition = z.infer<typeof McpToolSchema>;
+export type McpProfileDefinition = z.infer<typeof McpProfileDefinitionSchema>;
+/** A subject check's answer for a tool call: `MATCH`, or why it is refused. */
+export type McpSubjectCheck = "MATCH" | "SUBJECT_ABSENT" | "SUBJECT_MISMATCH";
+export declare class McpProfileError extends Error {
+    readonly code: "MCP_PROFILE_INVALID";
+    readonly detail: string;
+    constructor(code: "MCP_PROFILE_INVALID", detail: string);
+}
+/**
+ * One MCP tool profile, validated. Every rule a schema cannot state is held
+ * here, at parse: a tool named twice, two tools on one action, a target that
+ * names an argument a call
+ * could leave out, a subject that is not a required identifier, a
+ * consequential argument the tool does not accept.
+ */
+export declare class McpToolProfile {
+    readonly definition: McpProfileDefinition;
+    private readonly byName;
+    private readonly schemas;
+    private constructor();
+    /** Validates a definition (closed schema, the rules above) and compiles it. */
+    static parse(value: unknown): McpToolProfile;
+    get id(): string;
+    /** Every tool the profile governs, in profile order. */
+    tools(): readonly string[];
+    tool(name: string): McpToolDefinition | null;
+    /**
+     * The arguments a tool accepts, as a closed validator: each declared one of
+     * its type, a required one present, any other refused. A number is finite;
+     * an integer is whole; an array or object holds JSON.
+     */
+    argumentsSchema(name: string): z.ZodType<JsonObject>;
+    /**
+     * The subject a call names, when its tool names a subject argument: a
+     * string or a finite number, as a string, of 1 to 200 characters; null when
+     * the argument holds neither. Undefined when the tool names no subject.
+     */
+    static subjectOf(tool: McpToolDefinition, args: JsonObject): string | null | undefined;
+    /** A call's subject against the session's, as `agent-safe.profile.api/1` checks a read's. */
+    static checkSubject(tool: McpToolDefinition, args: JsonObject, subject: string): McpSubjectCheck;
+    private static validator;
+    private static rules;
+    /** A target's placeholder names, by one linear scan; null when a brace is unbalanced or empty. */
+    private static placeholders;
+}
+/** The published JSON Schema of an MCP tool profile, generated from the validator above. */
+export declare function mcpProfileJsonSchema(): Record<string, unknown>;
+//# sourceMappingURL=McpToolProfile.d.ts.map

package/dist/profile/McpToolProfile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpToolProfile.d.ts","sourceRoot":"","sources":["../../src/profile/McpToolProfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAmB,KAAK,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAE/D,eAAO,MAAM,qBAAqB,iGAC8D,CAAC;AAEjG,sFAAsF;AACtF,eAAO,MAAM,kBAAkB,KAAK,CAAC;AACrC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,wEAOrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMlE,eAAO,MAAM,iBAAiB;;;;;;;;;;;kBAM5B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;kBAuBxB,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYrC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,gBAAgB,GAAG,kBAAkB,CAAC;AAE9E,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,qBAAqB;aAC3B,MAAM,EAAE,MAAM;gBADd,IAAI,EAAE,qBAAqB,EAC3B,MAAM,EAAE,MAAM;CAKjC;AAOD;;;;;;GAMG;AACH,qBAAa,cAAc;aAIW,UAAU,EAAE,oBAAoB;IAHpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4C;IAEpE,OAAO;IAiBP,+EAA+E;WACjE,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc;IAanD,IAAW,EAAE,IAAI,MAAM,CAEtB;IAED,wDAAwD;IACjD,KAAK,IAAI,SAAS,MAAM,EAAE;IAI1B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAInD;;;;OAIG;IACI,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAe3D;;;;OAIG;WACW,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS;IAc7F,6FAA6F;WAC/E,YAAY,CACxB,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,GACd,eAAe;IAOlB,OAAO,CAAC,MAAM,CAAC,SAAS;IAiBxB,OAAO,CAAC,MAAM,CAAC,KAAK;IAiCpB,kGAAkG;IAClG,OAAO,CAAC,MAAM,CAAC,YAAY;CAgB5B;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa9D"}

package/dist/profile/McpToolProfile.js

@@ -0,0 +1,270 @@
+import { z } from "zod";
+import { JsonValueSchema } from "../intent/JsonValue.js";
+/**
+ * `agent-safe.profile.mcp/1`: an MCP server's consequential tools described as
+ * data. Each tool names the action it becomes, the target it acts on (a
+ * template over its arguments), the argument that names its subject (the
+ * customer it is for), the arguments that decide what it does, and the
+ * arguments it accepts. A guard reads the file in place of a binding written
+ * in code, so governing a tool is a reviewable file, not code reached by name.
+ */
+export const MCP_PROFILE_CONTRACT = "agent-safe.profile.mcp/1";
+export const MCP_PROFILE_SCHEMA_ID = "https://github.com/decionis/agent-safe-pipeline/blob/master/spec/profiles/mcp/v1/schema.json";
+/** The most arguments a tool declares, and the most placeholders its target holds. */
+export const MAX_TOOL_ARGUMENTS = 64;
+export const MAX_TARGET_PLACEHOLDERS = 16;
+/** The types an argument may be declared as; a scalar one may fill a target or name a subject. */
+export const MCP_ARGUMENT_TYPES = [
+    "string",
+    "number",
+    "integer",
+    "boolean",
+    "array",
+    "object",
+];
+/** An argument's name starts with a letter, so no declared name can be `__proto__`. */
+const argumentName = z.string().regex(/^[a-z]\w{0,63}$/i);
+const text = (max) => z.string().trim().min(1).max(max);
+export const McpArgumentSchema = z.strictObject({
+    type: z.enum(MCP_ARGUMENT_TYPES),
+    /** Absent means optional: a call may leave the argument out. */
+    required: z.boolean().optional(),
+    /** The longest a string argument may be; a string only. */
+    maxLength: z.number().int().min(1).max(100_000).optional(),
+});
+export const McpToolSchema = z.strictObject({
+    /** The tool as the server publishes it. */
+    tool: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^[a-z0-9][\w.:/-]*$/i),
+    /** The intent's action type. */
+    action: z
+        .string()
+        .max(120)
+        .regex(/^[a-z][a-z0-9._:-]*$/),
+    /** The operation in the downstream system, for the intent's downstream target. */
+    operation: text(200),
+    summary: text(300),
+    /** `crm:customer:{customerId}`: every placeholder a required scalar argument. */
+    target: z.string().min(1).max(500),
+    /** The argument naming the tool's subject, when the tool acts for one party. */
+    subject: argumentName.optional(),
+    /** The arguments that decide what the tool does, for evidence and an approval screen. */
+    consequential: z.array(argumentName).max(MAX_TOOL_ARGUMENTS),
+    /** Every argument the tool accepts; any other is refused, never dropped. */
+    arguments: z.record(argumentName, McpArgumentSchema),
+});
+export const McpProfileDefinitionSchema = z.strictObject({
+    profile: z.literal(MCP_PROFILE_CONTRACT),
+    /** `<system>/<server>/<version>`, for example `crm/mcp/v1`. */
+    id: z
+        .string()
+        .regex(/^[a-z][a-z0-9]*\/[a-z][a-z0-9]*\/v\d+(\.\d+)?$/)
+        .max(120),
+    title: text(200),
+    /** The system the tools' effects land in: the intent's downstream system. */
+    system: text(200),
+    environment: text(200).optional(),
+    tools: z.array(McpToolSchema).min(1).max(200),
+});
+export class McpProfileError extends Error {
+    code;
+    detail;
+    constructor(code, detail) {
+        super(code);
+        this.code = code;
+        this.detail = detail;
+        this.name = "McpProfileError";
+    }
+}
+const SCALAR = new Set(["string", "number", "integer", "boolean"]);
+const SUBJECT_TYPES = new Set(["string", "number", "integer"]);
+/** The longest subject: an identifier, never a payload. */
+const MAX_SUBJECT_LENGTH = 200;
+/**
+ * One MCP tool profile, validated. Every rule a schema cannot state is held
+ * here, at parse: a tool named twice, two tools on one action, a target that
+ * names an argument a call
+ * could leave out, a subject that is not a required identifier, a
+ * consequential argument the tool does not accept.
+ */
+export class McpToolProfile {
+    definition;
+    byName;
+    schemas = new Map();
+    constructor(definition) {
+        this.definition = definition;
+        const byName = new Map();
+        const actions = new Set();
+        for (const tool of definition.tools) {
+            if (byName.has(tool.tool))
+                throw new McpProfileError("MCP_PROFILE_INVALID", `duplicate tool ${tool.tool}`);
+            // A grant authorizes an action, and the guard dispatches the one tool
+            // registered under it: two tools on one action would be ambiguous.
+            if (actions.has(tool.action))
+                throw new McpProfileError("MCP_PROFILE_INVALID", `tool ${tool.tool} repeats an action`);
+            actions.add(tool.action);
+            McpToolProfile.rules(tool);
+            byName.set(tool.tool, tool);
+        }
+        this.byName = byName;
+    }
+    /** Validates a definition (closed schema, the rules above) and compiles it. */
+    static parse(value) {
+        const parsed = McpProfileDefinitionSchema.safeParse(value);
+        if (!parsed.success)
+            throw new McpProfileError("MCP_PROFILE_INVALID", parsed.error.issues
+                .slice(0, 3)
+                .map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`)
+                .join("; "));
+        return new McpToolProfile(parsed.data);
+    }
+    get id() {
+        return this.definition.id;
+    }
+    /** Every tool the profile governs, in profile order. */
+    tools() {
+        return this.definition.tools.map((tool) => tool.tool);
+    }
+    tool(name) {
+        return this.byName.get(name) ?? null;
+    }
+    /**
+     * The arguments a tool accepts, as a closed validator: each declared one of
+     * its type, a required one present, any other refused. A number is finite;
+     * an integer is whole; an array or object holds JSON.
+     */
+    argumentsSchema(name) {
+        const cached = this.schemas.get(name);
+        if (cached !== undefined)
+            return cached;
+        const tool = this.byName.get(name);
+        if (tool === undefined)
+            throw new McpProfileError("MCP_PROFILE_INVALID", `no tool ${name}`);
+        const shape = {};
+        for (const [argument, declared] of Object.entries(tool.arguments)) {
+            const base = McpToolProfile.validator(declared);
+            shape[argument] = declared.required === true ? base : base.optional();
+        }
+        const schema = z.strictObject(shape);
+        this.schemas.set(name, schema);
+        return schema;
+    }
+    /**
+     * The subject a call names, when its tool names a subject argument: a
+     * string or a finite number, as a string, of 1 to 200 characters; null when
+     * the argument holds neither. Undefined when the tool names no subject.
+     */
+    static subjectOf(tool, args) {
+        if (tool.subject === undefined)
+            return undefined;
+        const value = Object.hasOwn(args, tool.subject)
+            ? args[tool.subject]
+            : undefined;
+        const named = typeof value === "string"
+            ? value
+            : typeof value === "number" && Number.isFinite(value)
+                ? String(value)
+                : null;
+        return named === null || named.length === 0 || named.length > MAX_SUBJECT_LENGTH ? null : named;
+    }
+    /** A call's subject against the session's, as `agent-safe.profile.api/1` checks a read's. */
+    static checkSubject(tool, args, subject) {
+        const named = McpToolProfile.subjectOf(tool, args);
+        if (named === undefined)
+            return "MATCH";
+        if (named === null)
+            return "SUBJECT_ABSENT";
+        return named === subject ? "MATCH" : "SUBJECT_MISMATCH";
+    }
+    static validator(declared) {
+        switch (declared.type) {
+            case "string":
+                return declared.maxLength === undefined ? z.string() : z.string().max(declared.maxLength);
+            case "number":
+                return z.number().finite();
+            case "integer":
+                return z.number().int();
+            case "boolean":
+                return z.boolean();
+            case "array":
+                return z.array(JsonValueSchema);
+            case "object":
+                return z.record(z.string(), JsonValueSchema);
+        }
+    }
+    static rules(tool) {
+        const refuse = (detail) => {
+            throw new McpProfileError("MCP_PROFILE_INVALID", `tool ${tool.tool} ${detail}`);
+        };
+        const declared = Object.entries(tool.arguments);
+        if (declared.length > MAX_TOOL_ARGUMENTS)
+            refuse("declares too many arguments");
+        for (const [name, argument] of declared) {
+            if (argument.maxLength !== undefined && argument.type !== "string")
+                refuse(`bounds the length of ${name}, which is not a string`);
+        }
+        const required = (name, types) => {
+            const argument = tool.arguments[name];
+            return (Object.hasOwn(tool.arguments, name) &&
+                argument !== undefined &&
+                argument.required === true &&
+                types.has(argument.type));
+        };
+        const placeholders = McpToolProfile.placeholders(tool.target);
+        if (placeholders === null)
+            refuse("has a malformed target");
+        for (const name of placeholders ?? []) {
+            if (!required(name, SCALAR))
+                refuse(`fills its target from ${name}, not a required scalar`);
+        }
+        if (tool.subject !== undefined && !required(tool.subject, SUBJECT_TYPES))
+            refuse(`names ${tool.subject} as its subject, not a required string or number`);
+        if (new Set(tool.consequential).size !== tool.consequential.length)
+            refuse("names a consequential argument twice");
+        for (const name of tool.consequential) {
+            if (!Object.hasOwn(tool.arguments, name))
+                refuse(`names ${name} consequential, not accepted`);
+        }
+    }
+    /** A target's placeholder names, by one linear scan; null when a brace is unbalanced or empty. */
+    static placeholders(target) {
+        const names = [];
+        for (let at = 0; at < target.length; at += 1) {
+            const character = target[at];
+            if (character === "}")
+                return null;
+            if (character !== "{")
+                continue;
+            const close = target.indexOf("}", at + 1);
+            if (close === -1)
+                return null;
+            const name = target.slice(at + 1, close);
+            if (name.length === 0 || name.includes("{"))
+                return null;
+            names.push(name);
+            if (names.length > MAX_TARGET_PLACEHOLDERS)
+                return null;
+            at = close;
+        }
+        return names;
+    }
+}
+/** The published JSON Schema of an MCP tool profile, generated from the validator above. */
+export function mcpProfileJsonSchema() {
+    const generated = z.toJSONSchema(McpProfileDefinitionSchema, {
+        target: "draft-2020-12",
+        io: "input",
+    });
+    const schema = { ...generated };
+    delete schema["$schema"];
+    return {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        $id: MCP_PROFILE_SCHEMA_ID,
+        title: MCP_PROFILE_CONTRACT,
+        ...schema,
+    };
+}
+//# sourceMappingURL=McpToolProfile.js.map