@decionis/mcp 0.1.1 → 0.1.2

package/dist/AgentHookCli.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   AgentHookCommand
-} from "./chunk-5YBOX3WO.js";
-import "./chunk-56VFPJNL.js";
+} from "./chunk-2C62WFX2.js";
+import "./chunk-KY5AVRL6.js";
 
 // src/AgentHookCli.ts
 void AgentHookCommand.run(process.argv.slice(2)).then((exitCode) => {

package/dist/ManagedAgentHookCli.js

@@ -36770,7 +36770,7 @@ var MCP_PROTOCOL_VERSIONS = [
   "2025-03-26",
   "2024-11-05"
 ];
-var MCP_DEFAULT_PROTOCOL_VERSION = "2025-06-18";
+var MCP_DEFAULT_PROTOCOL_VERSION = "2025-11-25";
 var DEFAULT_PUBLIC_BASE_URL = "https://protocol.decionis.com";
 var MCP_HTTP_PATHS = ["/mcp", "/v1/protocol/mcp"];
 
@@ -36974,7 +36974,7 @@ var McpAuthGuard = class {
     return auth?.kind === "org_api_key";
   }
   static findTargetOrgIdForTool(name, args) {
-    if (name === "decionis.evaluate_decision" || name === "evaluate_decision" || name === "decionis.agentic_checkout_authorize" || name === "agentic_checkout_authorize" || name === "decionis.evaluate_webex_agent_intent" || name === "evaluate_webex_agent_intent" || name === "decionis.get_decision_dossier" || name === "get_decision_dossier" || name === "decionis.list_enforcement_rollouts" || name === "list_enforcement_rollouts" || name === "decionis.upsert_enforcement_rollout" || name === "upsert_enforcement_rollout" || name === "decionis.resolve_vertical_pack" || name === "resolve_vertical_pack" || name === "decionis.run_shadow_decisioning" || name === "run_shadow_decisioning") {
+    if (name === "decionis.evaluate_decision" || name === "evaluate_decision" || name === "decionis.agentic_checkout_authorize" || name === "agentic_checkout_authorize" || name === "decionis.evaluate_webex_agent_intent" || name === "evaluate_webex_agent_intent" || name === "decionis.get_decision_dossier" || name === "get_decision_dossier" || name === "decionis.get_decision_chain" || name === "get_decision_chain" || name === "decionis.list_enforcement_rollouts" || name === "list_enforcement_rollouts" || name === "decionis.upsert_enforcement_rollout" || name === "upsert_enforcement_rollout" || name === "decionis.resolve_vertical_pack" || name === "resolve_vertical_pack" || name === "decionis.run_shadow_decisioning" || name === "run_shadow_decisioning") {
       return asString(args.org_id);
     }
     return null;
@@ -36983,7 +36983,7 @@ var McpAuthGuard = class {
     if (name === "decionis.evaluate_decision" || name === "evaluate_decision" || name === "decionis.agentic_checkout_authorize" || name === "agentic_checkout_authorize" || name === "decionis.evaluate_webex_agent_intent" || name === "evaluate_webex_agent_intent" || name === "decionis.run_shadow_decisioning" || name === "run_shadow_decisioning") {
       return ["decision:run", "decision:*", "org:*"];
     }
-    if (name === "decionis.get_decision_dossier" || name === "get_decision_dossier" || name === "decionis.list_enforcement_rollouts" || name === "list_enforcement_rollouts" || name === "decionis.resolve_vertical_pack" || name === "resolve_vertical_pack") {
+    if (name === "decionis.get_decision_dossier" || name === "get_decision_dossier" || name === "decionis.get_decision_chain" || name === "get_decision_chain" || name === "decionis.list_enforcement_rollouts" || name === "list_enforcement_rollouts" || name === "decionis.resolve_vertical_pack" || name === "resolve_vertical_pack") {
       return ["decision:read", "org:read", "decision:*", "org:*"];
     }
     if (name === "decionis.upsert_enforcement_rollout" || name === "upsert_enforcement_rollout") {
@@ -38205,7 +38205,7 @@ var McpTools = class {
     return cart && typeof cart.amount === "number" ? cart.amount : void 0;
   }
   static buildTools(app) {
-    return [
+    const tools = [
       {
         name: "decionis.evaluate_decision",
         aliases: ["evaluate_decision"],
@@ -38710,6 +38710,29 @@ var McpTools = class {
         }
       }
     ];
+    const readOnlyTools = /* @__PURE__ */ new Set([
+      "decionis.get_decision_dossier",
+      "decionis.get_decision_chain",
+      "decionis.list_enforcement_rollouts",
+      "decionis.list_marketplace_targets",
+      "decionis.get_marketplace_target",
+      "decionis.list_marketplace_readiness",
+      "decionis.list_vertical_packs",
+      "decionis.resolve_vertical_pack"
+    ]);
+    const idempotentWriteTools = /* @__PURE__ */ new Set(["decionis.upsert_enforcement_rollout"]);
+    return tools.map((tool) => {
+      const readOnly = readOnlyTools.has(tool.name);
+      return {
+        ...tool,
+        annotations: {
+          readOnlyHint: readOnly,
+          destructiveHint: false,
+          idempotentHint: readOnly || idempotentWriteTools.has(tool.name),
+          openWorldHint: false
+        }
+      };
+    });
   }
   static buildTextToolResult(value, options) {
     const text = toPrettyText(value);
@@ -38763,6 +38786,37 @@ function findTool(tools, name) {
 }
 
 // ../protocol/src/mcp/McpRoutes.ts
+async function recordTelemetry(app, sink, event) {
+  if (!sink) return;
+  try {
+    await sink.record(event);
+  } catch (err) {
+    app.log.warn({ err, event: event.event }, "MCP telemetry write failed");
+  }
+}
+function canonicalAuthorizationOutcome(value) {
+  const record = asRecord(value);
+  const raw = asString(record?.outcome) ?? asString(record?.decision) ?? asString(record?.verdict);
+  if (!raw) return null;
+  switch (raw.trim().toUpperCase()) {
+    case "ALLOW":
+    case "APPROVE":
+    case "AUTO_APPROVE":
+      return "ALLOW";
+    case "BLOCK":
+    case "REJECT":
+    case "AUTO_REJECT":
+      return "BLOCK";
+    case "ESCALATE":
+      return "ESCALATE";
+    case "REVIEW":
+    case "RESTRAIN":
+    case "REQUIRE_REVIEW":
+      return "REVIEW";
+    default:
+      return null;
+  }
+}
 function buildInitializeResult(serviceName, serviceVersion) {
   return {
     protocolVersion: MCP_DEFAULT_PROTOCOL_VERSION,
@@ -38776,7 +38830,7 @@ function buildInitializeResult(serviceName, serviceVersion) {
       title: "Decionis Protocol MCP",
       version: serviceVersion
     },
-    instructions: "Use Decionis Protocol as the deterministic execution-governance MCP server. Encode policy with evaluate_decision, stage enforcement with upsert_enforcement_rollout, and verify evidence through Decision Dossiers and audit-linked resources."
+    instructions: "Use Decionis Protocol to evaluate a proposed action before execution and inspect its signed governance evidence. Evaluation tools record Decionis decisions but never perform the downstream mutation. Use read-only dossier, chain, marketplace, and vertical tools for inspection."
   };
 }
 async function handleJsonRpcRequest(app, requestBody, options) {
@@ -38814,6 +38868,16 @@ async function handleJsonRpcRequest(app, requestBody, options) {
     }
     const requestedVersion = asString(params.protocolVersion);
     const negotiatedVersion = requestedVersion && MCP_PROTOCOL_VERSIONS.includes(requestedVersion) ? requestedVersion : MCP_DEFAULT_PROTOCOL_VERSION;
+    const clientInfo = asRecord(params.clientInfo);
+    await recordTelemetry(app, options.telemetry, {
+      event: "connection_succeeded",
+      connectionId: options.connectionId,
+      clientName: asString(clientInfo?.name),
+      clientVersion: asString(clientInfo?.version),
+      protocolVersion: negotiatedVersion,
+      authMode: options.auth?.kind ?? "none",
+      statusCode: 200
+    });
     return {
       statusCode: 200,
       payload: jsonRpcSuccess(id, {
@@ -38829,6 +38893,12 @@ async function handleJsonRpcRequest(app, requestBody, options) {
     case "ping":
       return { statusCode: 200, payload: jsonRpcSuccess(id, {}) };
     case "tools/list":
+      await recordTelemetry(app, options.telemetry, {
+        event: "tools_listed",
+        connectionId: options.connectionId,
+        authMode: options.auth?.kind ?? "none",
+        statusCode: 200
+      });
       return {
         statusCode: 200,
         payload: jsonRpcSuccess(id, {
@@ -38837,7 +38907,8 @@ async function handleJsonRpcRequest(app, requestBody, options) {
             title: tool.title,
             description: tool.description,
             inputSchema: tool.inputSchema,
-            ...tool.outputSchema ? { outputSchema: tool.outputSchema } : {}
+            ...tool.outputSchema ? { outputSchema: tool.outputSchema } : {},
+            annotations: tool.annotations
           }))
         })
       };
@@ -38856,15 +38927,61 @@ async function handleJsonRpcRequest(app, requestBody, options) {
           payload: jsonRpcError(id, -32601, `Unknown tool '${name}'`)
         };
       }
+      const toolStartedAt = process.hrtime.bigint();
+      await recordTelemetry(app, options.telemetry, {
+        event: "tool_called",
+        connectionId: options.connectionId,
+        toolName: tool.name,
+        authMode: options.auth?.kind ?? "none"
+      });
       const args = asRecord(params.arguments) ?? {};
       const authError = authorizeToolInvocation(options.auth, name, args);
       if (authError) {
+        await recordTelemetry(app, options.telemetry, {
+          event: "authorization_outcome",
+          connectionId: options.connectionId,
+          toolName: tool.name,
+          outcome: "DENIED",
+          authMode: options.auth?.kind ?? "none",
+          statusCode: 403,
+          durationMs: durationMs(toolStartedAt)
+        });
+        await recordTelemetry(app, options.telemetry, {
+          event: "tool_failed",
+          connectionId: options.connectionId,
+          toolName: tool.name,
+          outcome: "DENIED",
+          authMode: options.auth?.kind ?? "none",
+          statusCode: 403,
+          durationMs: durationMs(toolStartedAt)
+        });
         return {
           statusCode: 403,
           payload: jsonRpcError(id, authError.code, authError.message)
         };
       }
       const result = await handleToolCall(tool, args);
+      const outcome = canonicalAuthorizationOutcome(result.structuredContent);
+      await recordTelemetry(app, options.telemetry, {
+        event: result.isError ? "tool_failed" : "tool_succeeded",
+        connectionId: options.connectionId,
+        toolName: tool.name,
+        outcome,
+        authMode: options.auth?.kind ?? "none",
+        statusCode: 200,
+        durationMs: durationMs(toolStartedAt)
+      });
+      if (outcome) {
+        await recordTelemetry(app, options.telemetry, {
+          event: "authorization_outcome",
+          connectionId: options.connectionId,
+          toolName: tool.name,
+          outcome,
+          authMode: options.auth?.kind ?? "none",
+          statusCode: 200,
+          durationMs: durationMs(toolStartedAt)
+        });
+      }
       return {
         statusCode: 200,
         payload: jsonRpcSuccess(id, result)
@@ -39048,6 +39165,11 @@ async function handleMcpHttpRequest(app, req, reply, options) {
   const auth = await authenticateMcpRequest(req, authLookup);
   const authDurationMs = durationMs(authStartedAt);
   if (!auth && isAuthenticationRequired(authLookup)) {
+    await recordTelemetry(app, options.telemetry ?? null, {
+      event: "authentication_failed",
+      statusCode: 401,
+      durationMs: authDurationMs
+    });
     const maybeId = asRecord(req.body)?.id;
     const id = typeof maybeId === "string" || typeof maybeId === "number" ? maybeId : null;
     reply.header(
@@ -39057,6 +39179,10 @@ async function handleMcpHttpRequest(app, req, reply, options) {
         stages: { auth_ms: authDurationMs }
       })
     );
+    reply.header(
+      "www-authenticate",
+      `Bearer resource_metadata="${options.publicBaseUrl}/.well-known/oauth-protected-resource", error="invalid_token"`
+    );
     return reply.code(401).send(jsonRpcError(id, -32001, "Unauthorized MCP request"));
   }
   if (Array.isArray(req.body)) {
@@ -39071,7 +39197,35 @@ async function handleMcpHttpRequest(app, req, reply, options) {
   }
   if (isLegacyToolCall(req.body)) {
     const rpcStartedAt2 = process.hrtime.bigint();
+    const connectionId2 = asString(req.headers["mcp-session-id"]);
+    await recordTelemetry(app, options.telemetry ?? null, {
+      event: "tool_called",
+      connectionId: connectionId2,
+      toolName: req.body.tool_name,
+      authMode: auth?.kind ?? "none"
+    });
     const payload = await handleLegacyToolCall(app, auth, req.body);
+    const outcome = canonicalAuthorizationOutcome(payload.output);
+    await recordTelemetry(app, options.telemetry ?? null, {
+      event: payload.is_error || payload.error ? "tool_failed" : "tool_succeeded",
+      connectionId: connectionId2,
+      toolName: req.body.tool_name,
+      outcome,
+      authMode: auth?.kind ?? "none",
+      statusCode: 200,
+      durationMs: durationMs(rpcStartedAt2)
+    });
+    if (outcome) {
+      await recordTelemetry(app, options.telemetry ?? null, {
+        event: "authorization_outcome",
+        connectionId: connectionId2,
+        toolName: req.body.tool_name,
+        outcome,
+        authMode: auth?.kind ?? "none",
+        statusCode: 200,
+        durationMs: durationMs(rpcStartedAt2)
+      });
+    }
     reply.header(
       "server-timing",
       buildServerTimingHeader({
@@ -39096,13 +39250,21 @@ async function handleMcpHttpRequest(app, req, reply, options) {
     return reply.code(400).send(jsonRpcError(null, -32600, "JSON-RPC request body required"));
   }
   const rpcStartedAt = process.hrtime.bigint();
+  const requestedMethod = asString(requestBody.method);
+  const incomingSession = asString(req.headers["mcp-session-id"]);
+  const connectionId = requestedMethod === "initialize" ? randomUUID2() : incomingSession;
   const result = await handleJsonRpcRequest(app, requestBody, {
     publicBaseUrl: options.publicBaseUrl,
     serviceName: options.serviceName,
     serviceVersion: options.serviceVersion,
     auth,
-    authLookup
+    authLookup,
+    telemetry: options.telemetry ?? null,
+    connectionId
   });
+  if (requestedMethod === "initialize" && result.statusCode === 200) {
+    reply.header("mcp-session-id", connectionId);
+  }
   reply.header(
     "server-timing",
     buildServerTimingHeader({
@@ -39132,8 +39294,21 @@ function registerProtocolMcpRoutes(app, options) {
     endpoint: `${publicBaseUrl}/v1/protocol/mcp`,
     endpoint_aliases: MCP_HTTP_PATHS,
     supported_protocol_versions: [...MCP_PROTOCOL_VERSIONS],
-    auth
+    auth,
+    oauth: {
+      protected_resource_metadata: `${publicBaseUrl}/.well-known/oauth-protected-resource`,
+      authorization_server_metadata: "https://api.decionis.com/.well-known/oauth-authorization-server"
+    }
   };
+  const oauthProtectedResource = {
+    resource: `${publicBaseUrl}/mcp`,
+    authorization_servers: ["https://api.decionis.com"],
+    bearer_methods_supported: ["header"],
+    scopes_supported: ["decision:read", "decision:run", "decision:write"],
+    resource_documentation: "https://decionis.com/docs/protocol-mcp"
+  };
+  app.get("/.well-known/oauth-protected-resource", async () => oauthProtectedResource);
+  app.get("/.well-known/oauth-protected-resource/mcp", async () => oauthProtectedResource);
   for (const path2 of MCP_HTTP_PATHS) {
     app.get(path2, async () => metadata);
     app.delete(path2, async (_req, reply) => reply.code(204).send());
@@ -39143,7 +39318,8 @@ function registerProtocolMcpRoutes(app, options) {
         publicBaseUrl,
         serviceName: options.serviceName,
         serviceVersion: options.serviceVersion,
-        authLookup
+        authLookup,
+        telemetry: options.telemetry ?? null
       })
     );
   }
@@ -53418,7 +53594,8 @@ function buildProtocolApp(options) {
   registerProtocolMcpRoutes(app, {
     serviceName: PROTOCOL_SERVICE,
     serviceVersion: PROTOCOL_VERSION,
-    authLookup: options?.mcpAuthLookup ?? null
+    authLookup: options?.mcpAuthLookup ?? null,
+    telemetry: options?.mcpTelemetry ?? null
   });
   const executionAuthority = createExecutionGatingService(options?.executionGating);
   registerExecutionGatingRoutes(app, {

package/dist/agent/AgentIndex.js

@@ -13,10 +13,10 @@ import {
   CopilotHookAdapter,
   LocalAgentGate,
   RemoteAgentGate
-} from "../chunk-5YBOX3WO.js";
+} from "../chunk-2C62WFX2.js";
 import {
   PolicyFileRepository
-} from "../chunk-56VFPJNL.js";
+} from "../chunk-KY5AVRL6.js";
 export {
   AgentDecisionMapper,
   AgentGateConfigurationError,

package/dist/{chunk-5YBOX3WO.js → chunk-2C62WFX2.js}

@@ -3,7 +3,7 @@ import {
   LocalDecionisGateway,
   PolicyFileRepository,
   normalizeVerdict
-} from "./chunk-56VFPJNL.js";
+} from "./chunk-KY5AVRL6.js";
 
 // src/agent/AgentContracts.ts
 var AgentHookInputError = class extends Error {
@@ -476,4 +476,4 @@ export {
   AgentHostRegistry,
   AgentHookCommand
 };
-//# sourceMappingURL=chunk-5YBOX3WO.js.map
+//# sourceMappingURL=chunk-2C62WFX2.js.map