@decionis/mcp 0.2.0 → 0.3.0

package/dist/index.js

@@ -5,12 +5,12 @@ import {
   external_exports,
   normalizeVerdict,
   sha256Hex
-} from "./chunk-NF5JL6QR.js";
+} from "./chunk-LIVLO4MV.js";
 
 // src/Server.ts
 import { createInterface } from "readline";
 var SUPPORTED_PROTOCOL_VERSIONS = ["2025-11-25", "2025-06-18", "2025-03-26", "2024-11-05"];
-var MCP_SERVER_VERSION = "0.2.0";
+var MCP_SERVER_VERSION = "0.3.0";
 var DEFAULT_PROTOCOL_VERSION = "2025-11-25";
 var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function rpcResult(id, result) {
@@ -633,9 +633,9 @@ async function readBoundedText(response, maxBytes) {
     throw new DecionisResponseTooLargeError();
   }
   if (!response.body || typeof response.body.getReader !== "function") {
-    const text4 = typeof responseLike.text === "function" ? await responseLike.text() : typeof responseLike.json === "function" ? JSON.stringify(await responseLike.json()) : "";
-    if (Buffer.byteLength(text4, "utf8") > maxBytes) throw new DecionisResponseTooLargeError();
-    return text4;
+    const text5 = typeof responseLike.text === "function" ? await responseLike.text() : typeof responseLike.json === "function" ? JSON.stringify(await responseLike.json()) : "";
+    if (Buffer.byteLength(text5, "utf8") > maxBytes) throw new DecionisResponseTooLargeError();
+    return text5;
   }
   const reader = response.body.getReader();
   const chunks = [];
@@ -671,8 +671,8 @@ async function fetchBounded(fetchImpl, input, init, timeoutMs, maxResponseBytes
   });
   const operation = (async () => {
     const response = await fetchImpl(input, { ...init, signal: controller.signal });
-    const text4 = await readBoundedText(response, maxResponseBytes);
-    return { response, text: text4 };
+    const text5 = await readBoundedText(response, maxResponseBytes);
+    return { response, text: text5 };
   })();
   try {
     return await Promise.race([operation, deadline]);
@@ -682,16 +682,16 @@ async function fetchBounded(fetchImpl, input, init, timeoutMs, maxResponseBytes
   }
 }
 async function fetchBoundedJson(fetchImpl, input, init, timeoutMs, maxResponseBytes = DEFAULT_MAX_RESPONSE_BYTES) {
-  const { response, text: text4 } = await fetchBounded(
+  const { response, text: text5 } = await fetchBounded(
     fetchImpl,
     input,
     init,
     timeoutMs,
     maxResponseBytes
   );
-  if (!text4) return { response, body: null };
+  if (!text5) return { response, body: null };
   try {
-    return { response, body: JSON.parse(text4) };
+    return { response, body: JSON.parse(text5) };
   } catch {
     return { response, body: null };
   }
@@ -733,10 +733,16 @@ var authorityVerificationRequirementsSchema = external_exports.object({
     });
   }
 });
+var authorityApprovalTierSchema = external_exports.object({
+  priority: external_exports.number().int().min(1).max(5),
+  principal_ids: external_exports.array(external_exports.string().min(1).max(200)).min(1).max(10)
+}).strict();
 var authorityResolutionPolicySchema = external_exports.object({
   quorum: external_exports.literal(1),
   delegation: external_exports.enum(["DISALLOWED", "REQUIREMENT_REFRESH"]),
-  fallback_role_ids: external_exports.array(external_exports.string().regex(/^[A-Z][A-Z0-9_]{1,63}$/)).max(10).default([])
+  fallback_role_ids: external_exports.array(external_exports.string().regex(/^[A-Z][A-Z0-9_]{1,63}$/)).max(10).default([]),
+  /** An approval chain: one valid proof from every tier satisfies the requirement. */
+  tiers: external_exports.array(authorityApprovalTierSchema).min(1).max(5).optional()
 }).strict().superRefine((policy, context) => {
   if (new Set(policy.fallback_role_ids).size !== policy.fallback_role_ids.length) {
     context.addIssue({
@@ -745,6 +751,24 @@ var authorityResolutionPolicySchema = external_exports.object({
       message: "fallback role ids must be unique"
     });
   }
+  if (policy.tiers) {
+    const priorities = policy.tiers.map((tier) => tier.priority);
+    if (priorities.some((priority, index) => index > 0 && priority <= priorities[index - 1])) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["tiers"],
+        message: "tier priorities must be unique and ascending"
+      });
+    }
+    const principals = policy.tiers.flatMap((tier) => tier.principal_ids);
+    if (new Set(principals).size !== principals.length) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["tiers"],
+        message: "a principal belongs to one tier only"
+      });
+    }
+  }
 });
 var originatorSchema = external_exports.object({
   organization_id: external_exports.string().min(1).max(200),
@@ -810,6 +834,13 @@ var decionisAuthorityRequirementSchema = external_exports.object({
       message: "fallback roles must not repeat the primary role"
     });
   }
+  if (requirement.resolution.tiers && requirement.selector.kind !== "ROLE") {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["resolution", "tiers"],
+      message: "an approval chain names its members' trusted role through a ROLE selector"
+    });
+  }
   if (requirement.orchestration?.mode === "MANAGED" && requirement.selector.kind === "PRINCIPAL" && requirement.selector.role_id === void 0) {
     context.addIssue({
       code: external_exports.ZodIssueCode.custom,
@@ -992,13 +1023,25 @@ function expectedManagedEscalationOutcome(status) {
   if (["EXPIRED", "REJECTED", "BLOCKED", "CANCELLED"].includes(status)) return "BLOCK";
   return "ESCALATE_PENDING";
 }
+var managedApprovalTierSchema = external_exports.object({
+  tier: external_exports.number().int().min(1).max(5),
+  tier_count: external_exports.number().int().min(1).max(5),
+  principal_id: external_exports.string().min(1).max(200)
+}).strict();
+var managedApprovalChainSchema = external_exports.object({
+  chain_id: external_exports.string().max(200),
+  tier_count: external_exports.number().int().min(1).max(5),
+  tiers_approved: external_exports.number().int().min(0).max(5)
+}).strict();
 var managedEscalationReferenceSchema = external_exports.object({
   outcome: managedEscalationOutcomeSchema,
   escalation_id: external_exports.string().min(8).max(200),
   intent_id: external_exports.string().min(1).max(200),
   status: managedEscalationStatusSchema,
   expires_at: external_exports.string().datetime(),
-  reason_codes: external_exports.array(external_exports.string().min(1).max(200)).max(50)
+  reason_codes: external_exports.array(external_exports.string().min(1).max(200)).max(50),
+  approval_tier: managedApprovalTierSchema.nullable().optional().default(null),
+  approval_chain: managedApprovalChainSchema.nullable().optional().default(null)
 }).strict().superRefine((reference, context) => {
   if (reference.outcome !== expectedManagedEscalationOutcome(reference.status)) {
     context.addIssue({
@@ -1049,6 +1092,8 @@ var managedEscalationViewSchema = external_exports.object({
   outcome: managedEscalationOutcomeSchema,
   expires_at: external_exports.string().datetime(),
   reason_codes: external_exports.array(external_exports.string().min(1).max(200)).max(50),
+  approval_tier: managedApprovalTierSchema.nullable().optional().default(null),
+  approval_chain: managedApprovalChainSchema.nullable().optional().default(null),
   decision: authorityDecisionSchema.nullable()
 }).strict().superRefine((view, context) => {
   if (view.outcome !== expectedManagedEscalationOutcome(view.status)) {
@@ -1334,6 +1379,7 @@ var DecionisExecutionClient = class {
         claim_token: claimToken,
         claim_validated_at: claimValidatedAt,
         claim_lease_expires_at: claimLeaseExpiresAt,
+        ...typeof body.claim_attestation === "string" && body.claim_attestation.length > 0 ? { claim_attestation: body.claim_attestation } : {},
         ...body.evidence && typeof body.evidence === "object" ? { evidence: body.evidence } : {}
       };
       if (executionAuthorityProtocolSemantics(redemption) === "UNSUPPORTED") {
@@ -2310,7 +2356,7 @@ var KubectlCommandRunner = class {
 // src/kubernetes/KubernetesOperations.ts
 import { createHash as createHash4 } from "crypto";
 
-// ../../packages/dossier-verify/dist/chunk-DF26DHVV.js
+// ../../packages/dossier-verify/dist/chunk-WNX2CYWD.js
 import { createHash, createPublicKey, verify as verifyEd25519 } from "crypto";
 import { lookup } from "dns/promises";
 import { request as httpsRequest } from "https";
@@ -6951,10 +6997,10 @@ function validEd25519Signature(value) {
 }
 function normalizedPublicJwksUrl(value) {
   if (value === void 0) return void 0;
-  const text4 = boundedString(value, 2048);
-  if (!text4) return null;
+  const text22 = boundedString(value, 2048);
+  if (!text22) return null;
   try {
-    const url = new URL(text4);
+    const url = new URL(text22);
     if (url.protocol !== "https:" || url.username || url.password) return null;
     return url.toString();
   } catch {
@@ -7320,6 +7366,8 @@ function extractDossierPayload(body) {
     const candidate = asRecord2(record2[key]);
     if (asRecord2(candidate.integrity).proof_bundle !== void 0) return candidate;
   }
+  const payload = asRecord2(asRecord2(record2.dossier).dossier_payload);
+  if (asRecord2(payload.integrity).proof_bundle !== void 0) return payload;
   return record2;
 }
 function resolveJwksUrl(payload, dossierUrl) {
@@ -7410,22 +7458,22 @@ async function assertSafeRemoteUrl(urlText) {
   if (url.username || url.password) {
     throw new Error(`Verification URL must not contain credentials: ${urlText}`);
   }
-  const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
-  if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".local") || isIP(hostname) !== 0 && isForbiddenIp(hostname)) {
+  const hostname2 = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (hostname2 === "localhost" || hostname2.endsWith(".localhost") || hostname2.endsWith(".local") || isIP(hostname2) !== 0 && isForbiddenIp(hostname2)) {
     throw new Error(`Verification URL resolves to a non-public destination: ${urlText}`);
   }
   return url;
 }
 async function pinnedHttpsFetch(url, signal) {
-  const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  const hostname2 = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
   let addresses;
-  if (isIP(hostname) !== 0) {
-    addresses = [{ address: hostname, family: isIP(hostname) }];
+  if (isIP(hostname2) !== 0) {
+    addresses = [{ address: hostname2, family: isIP(hostname2) }];
   } else {
     try {
-      addresses = await lookup(hostname, { all: true, verbatim: true });
+      addresses = await lookup(hostname2, { all: true, verbatim: true });
     } catch {
-      throw new Error(`Unable to resolve verification host: ${hostname}`);
+      throw new Error(`Unable to resolve verification host: ${hostname2}`);
     }
   }
   if (addresses.length === 0 || addresses.some(({ address }) => isForbiddenIp(address))) {
@@ -7441,7 +7489,7 @@ async function pinnedHttpsFetch(url, signal) {
         port: url.port || 443,
         path: `${url.pathname}${url.search}`,
         method: "GET",
-        servername: isIP(hostname) === 0 ? hostname : void 0,
+        servername: isIP(hostname2) === 0 ? hostname2 : void 0,
         headers: { accept: "application/json", host: url.host },
         signal
       },
@@ -7577,6 +7625,58 @@ async function verifyDossierFromUrls(input) {
     payload
   };
 }
+var AGENT_SAFE_INTENT_PROTOCOL = "agent-safe.intent/1";
+var MAX_BYTES = 100 * 1024;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var INSTANT = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/;
+var ACTION_TYPE = /^[a-z][a-z0-9._:-]*$/;
+var DIGEST = /^sha256:[0-9a-f]{64}$/;
+function isPlainObject3(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+var text2 = (min, max) => (value) => typeof value === "string" && value.length >= min && value.length <= max;
+var pattern = (expression) => (value) => typeof value === "string" && expression.test(value);
+var ACTOR = {
+  required: { id: text2(1, 200), type: text2(1, 200) },
+  optional: { runtime: text2(1, 200), trust_level: text2(1, 80) },
+  closed: true
+};
+var ACTION = {
+  required: {
+    type: (value) => text2(1, 120)(value) && ACTION_TYPE.test(value),
+    resource: text2(1, 500),
+    parameters: isPlainObject3
+  },
+  optional: {},
+  closed: true
+};
+var CONTEXT = {
+  required: { idempotency_key: text2(1, 180) },
+  optional: {},
+  closed: false
+};
+var DOWNSTREAM_TARGET = {
+  required: { system: text2(1, 200), operation: text2(1, 200) },
+  optional: { environment: text2(1, 200), endpoint: text2(1, 500) },
+  closed: true
+};
+var BINDING = {
+  required: {
+    protocol_version: (value) => value === AGENT_SAFE_INTENT_PROTOCOL,
+    tenant_id: pattern(UUID),
+    intent_id: pattern(UUID),
+    captured_at: pattern(INSTANT),
+    expires_at: pattern(INSTANT),
+    actor: isPlainObject3,
+    action: isPlainObject3,
+    context: isPlainObject3,
+    downstream_target: isPlainObject3
+  },
+  optional: { expected_effect_digest: pattern(DIGEST) },
+  closed: true
+};
 
 // src/kubernetes/KubernetesOperations.ts
 var KubernetesOperations = class _KubernetesOperations {
@@ -7951,7 +8051,7 @@ function createKubernetesAuthorityClient(input) {
 }
 
 // src/kubernetes/KubernetesMcpTools.ts
-var text2 = (value) => [
+var text3 = (value) => [
   { type: "text", text: typeof value === "string" ? value : JSON.stringify(value, null, 2) }
 ];
 var KubernetesMcpTools = class _KubernetesMcpTools {
@@ -7984,7 +8084,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.plan(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8004,7 +8104,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.requestAuthority(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8024,7 +8124,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.apply(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8053,7 +8153,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.scale({
               namespace: _KubernetesMcpTools.requiredDnsName(args.namespace, "namespace"),
               name: _KubernetesMcpTools.requiredDnsName(args.name, "name"),
@@ -8074,7 +8174,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.rollback(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8102,7 +8202,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.verifyDossier(
               _KubernetesMcpTools.requiredString(args.dossier_url, "dossier_url"),
               _KubernetesMcpTools.requiredString(args.jwks_url, "jwks_url")
@@ -8180,17 +8280,94 @@ function boundedInteger(input, fallback, minimum, maximum) {
   return value;
 }
 
+// src/ShieldCredentialStore.ts
+import { mkdirSync, readFileSync, writeFileSync, chmodSync } from "fs";
+import { homedir, hostname } from "os";
+import { dirname, join } from "path";
+import { randomUUID as randomUUID2 } from "crypto";
+var SHIELD_MCP_APP_ID = "decionis-mcp";
+var DEFAULT_SHIELD_API_URL = "https://api.shield.decionis.com";
+function defaultCredentialPath() {
+  return process.env.DECIONIS_SHIELD_CREDENTIAL_FILE?.trim() || join(homedir(), ".decionis", "shield-credential.json");
+}
+var ShieldCredentialStore = class {
+  constructor(path = defaultCredentialPath()) {
+    this.path = path;
+  }
+  /** The credential to use now: the environment first, then the paired file. */
+  resolve() {
+    const envKey = process.env.DECIONIS_SHIELD_API_KEY?.trim();
+    const envApp = process.env.DECIONIS_SHIELD_APP_ID?.trim();
+    const baseUrl = (process.env.DECIONIS_SHIELD_API_URL?.trim() || DEFAULT_SHIELD_API_URL).replace(
+      /\/+$/,
+      ""
+    );
+    if (envKey && envApp) {
+      return { apiKey: envKey, appId: envApp, baseUrl, agentId: envApp };
+    }
+    const stored = this.read();
+    if (!stored) return null;
+    return { ...stored, baseUrl: process.env.DECIONIS_SHIELD_API_URL?.trim() || stored.baseUrl };
+  }
+  read() {
+    try {
+      const raw = JSON.parse(readFileSync(this.path, "utf8"));
+      if (typeof raw.apiKey !== "string" || typeof raw.appId !== "string") return null;
+      return {
+        apiKey: raw.apiKey,
+        appId: raw.appId,
+        baseUrl: typeof raw.baseUrl === "string" ? raw.baseUrl : DEFAULT_SHIELD_API_URL,
+        integrationId: typeof raw.integrationId === "string" ? raw.integrationId : void 0,
+        displayName: typeof raw.displayName === "string" ? raw.displayName : void 0,
+        agentId: typeof raw.agentId === "string" ? raw.agentId : randomUUID2(),
+        pairedAt: typeof raw.pairedAt === "string" ? raw.pairedAt : void 0
+      };
+    } catch {
+      return null;
+    }
+  }
+  /** The install's stable id: the stored one, else a new one written at first pairing. */
+  agentId() {
+    return this.read()?.agentId ?? randomUUID2();
+  }
+  write(credential) {
+    mkdirSync(dirname(this.path), { recursive: true, mode: 448 });
+    writeFileSync(this.path, `${JSON.stringify(credential, null, 2)}
+`, { mode: 384 });
+    try {
+      chmodSync(this.path, 384);
+    } catch {
+    }
+  }
+  location() {
+    return this.path;
+  }
+};
+function defaultAgentDisplayName(clientName) {
+  const host = hostname().split(".")[0] || "this computer";
+  return clientName ? `${clientName} on ${host}` : `Decionis MCP on ${host}`;
+}
+
 // src/ShieldClient.ts
 var ShieldClient = class {
-  baseUrl;
-  apiKey;
-  appId;
   fetchImpl;
+  credentials;
   constructor(options = {}) {
-    this.baseUrl = (options.baseUrl ?? process.env.DECIONIS_SHIELD_API_URL ?? "https://api.decionis.com").replace(/\/+$/, "");
-    this.apiKey = options.apiKey ?? process.env.DECIONIS_SHIELD_API_KEY ?? "";
-    this.appId = options.appId ?? process.env.DECIONIS_SHIELD_APP_ID ?? "";
     this.fetchImpl = options.fetch ?? fetch;
+    if (options.credentials) {
+      this.credentials = options.credentials;
+    } else if (options.apiKey !== void 0 || options.appId !== void 0 || options.baseUrl) {
+      const fixed = options.apiKey && options.appId ? {
+        apiKey: options.apiKey,
+        appId: options.appId,
+        baseUrl: (options.baseUrl ?? DEFAULT_SHIELD_API_URL).replace(/\/+$/, ""),
+        agentId: options.appId
+      } : null;
+      this.credentials = () => fixed;
+    } else {
+      const store = new ShieldCredentialStore();
+      this.credentials = () => store.resolve();
+    }
   }
   authorize(request) {
     return this.json("/v1/shield/authorize", "POST", request);
@@ -8205,19 +8382,20 @@ var ShieldClient = class {
     return this.json(`/v1/shield/decisions/${encodeURIComponent(decisionId)}`, "GET");
   }
   async json(path, method, body) {
-    if (!this.apiKey || !this.appId) {
+    const credential = this.credentials();
+    if (!credential || !credential.apiKey || !credential.appId) {
       throw new ShieldClientError(
         "SHIELD_MCP_CONFIGURATION_REQUIRED",
-        "Configure DECIONIS_SHIELD_API_KEY and DECIONIS_SHIELD_APP_ID. Do not execute the transaction."
+        "Shield is not paired. Ask the user for the six-character code from the Shield app (AI spending allowance \u2192 Bind your own agent) and call shield.pair with it \u2014 or configure DECIONIS_SHIELD_API_KEY and DECIONIS_SHIELD_APP_ID. Do not execute the transaction."
       );
     }
-    const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+    const response = await this.fetchImpl(`${credential.baseUrl}${path}`, {
       method,
       headers: {
         accept: "application/json",
-        authorization: `Bearer ${this.apiKey}`,
+        authorization: `Bearer ${credential.apiKey}`,
         "content-type": "application/json",
-        "x-shield-app-id": this.appId,
+        "x-shield-app-id": credential.appId,
         "x-shield-environment": "production"
       },
       ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {}
@@ -8245,7 +8423,7 @@ function asRecord3(value) {
 }
 
 // src/ShieldTools.ts
-var text3 = (value) => [
+var text4 = (value) => [
   { type: "text", text: typeof value === "string" ? value : JSON.stringify(value, null, 2) }
 ];
 var purchaseProperties = {
@@ -8284,11 +8462,94 @@ var networkRead = {
   idempotentHint: true,
   openWorldHint: true
 };
+function createShieldPairTool(options = {}) {
+  const store = options.store ?? new ShieldCredentialStore();
+  const fetchImpl = options.fetch ?? fetch;
+  const baseUrl = () => (options.baseUrl?.() ?? process.env.DECIONIS_SHIELD_API_URL?.trim() ?? "").replace(/\/+$/, "") || "https://api.shield.decionis.com";
+  return {
+    name: "shield.pair",
+    title: "Pair with the user's Shield",
+    description: "Bind this assistant to the user's Decionis Shield with the six-character pairing code shown in the Shield app (AI spending allowance \u2192 Bind your own agent). Ask the user for the code; never guess one. After pairing, shield.request_purchase and the other shield.* tools ask the user's own spending rules.",
+    inputSchema: {
+      type: "object",
+      required: ["code"],
+      properties: {
+        code: { type: "string", pattern: "^[A-Za-z0-9]{6,8}$", description: "The code from the Shield app." },
+        displayName: {
+          type: "string",
+          maxLength: 120,
+          description: "How the Shield app should list this assistant (default: the client and this computer)."
+        }
+      },
+      additionalProperties: false
+    },
+    annotations: networkMutation,
+    handler: async (args) => {
+      const code = typeof args.code === "string" ? args.code.trim().toUpperCase() : "";
+      if (!/^[A-Z0-9]{6,8}$/.test(code)) {
+        return { content: text4("A pairing code is 6 to 8 letters and digits. Ask the user for the code shown in the Shield app."), isError: true };
+      }
+      const displayName = typeof args.displayName === "string" && args.displayName.trim() ? args.displayName.trim().slice(0, 120) : defaultAgentDisplayName(options.clientName?.());
+      const agentId = store.agentId();
+      let response;
+      try {
+        response = await fetchImpl(`${baseUrl()}/v1/consumer/pairing/claim`, {
+          method: "POST",
+          headers: {
+            accept: "application/json",
+            "content-type": "application/json",
+            "x-shield-surface": "mcp"
+          },
+          body: JSON.stringify({
+            code,
+            agent: { app_id: SHIELD_MCP_APP_ID, agent_id: agentId, display_name: displayName }
+          })
+        });
+      } catch (error) {
+        return {
+          content: text4({
+            error: "SHIELD_PAIRING_UNREACHABLE",
+            message: `Could not reach Shield: ${error instanceof Error ? error.message : String(error)}. Nothing was paired.`
+          }),
+          isError: true
+        };
+      }
+      const payload = await response.json().catch(() => null);
+      if (!response.ok || !payload || typeof payload.api_key !== "string" || typeof payload.app_id !== "string") {
+        const code_ = payload && typeof payload.error === "string" ? payload.error : `HTTP ${response.status}`;
+        const hint = code_ === "PAIRING_CODE_INVALID" ? "The code is wrong, expired (ten minutes) or already used. Ask the user for a fresh one from the Shield app." : "Nothing was paired.";
+        return { content: text4({ error: code_, message: hint }), isError: true };
+      }
+      const integration = payload.integration ?? {};
+      const credential = {
+        apiKey: payload.api_key,
+        appId: payload.app_id,
+        baseUrl: baseUrl(),
+        integrationId: typeof integration.integrationId === "string" ? integration.integrationId : void 0,
+        displayName,
+        agentId,
+        pairedAt: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      store.write(credential);
+      const limit = typeof payload.weekly_limit === "number" ? payload.weekly_limit : null;
+      return {
+        content: text4({
+          paired: true,
+          rotated: payload.rotated === true,
+          displayName,
+          weeklyLimit: limit,
+          storedAt: store.location(),
+          next: "The shield.* tools now ask this user's own Shield. Before any purchase, call shield.request_purchase; execute only on ALLOW."
+        })
+      };
+    }
+  };
+}
 function createShieldTools(shield) {
   const authorize = async (args) => {
     if (typeof args.amount !== "number" || typeof args.currency !== "string" || typeof args.purpose !== "string") {
       return {
-        content: text3(
+        content: text4(
           "amount, currency, and purpose are required. Do not execute the transaction."
         ),
         isError: true
@@ -8343,7 +8604,7 @@ function createShieldTools(shield) {
       },
       annotations: networkMutation,
       handler: async (args) => typeof args.decisionId === "string" ? shieldResult(async () => await shield.requestApproval(args.decisionId)) : {
-        content: text3("decisionId is required. Do not execute the transaction."),
+        content: text4("decisionId is required. Do not execute the transaction."),
         isError: true
       }
     },
@@ -8359,7 +8620,7 @@ function createShieldTools(shield) {
       },
       annotations: networkRead,
       handler: async (args) => typeof args.decisionId === "string" ? shieldResult(async () => await shield.decision(args.decisionId)) : {
-        content: text3("decisionId is required. Do not execute the transaction."),
+        content: text4("decisionId is required. Do not execute the transaction."),
         isError: true
       }
     }
@@ -8367,10 +8628,10 @@ function createShieldTools(shield) {
 }
 async function shieldResult(work) {
   try {
-    return { content: text3(await work()) };
+    return { content: text4(await work()) };
   } catch (error) {
     return {
-      content: text3({
+      content: text4({
         error: error instanceof Error ? error.name : "ShieldError",
         message: error instanceof Error ? error.message : String(error),
         safeToExecute: false
@@ -8387,16 +8648,15 @@ if (presenceKey && !process.env.DECIONIS_PRESENCE_SERVICE_TOKEN) {
 }
 var presenceConfigured = presenceKey.length > 0;
 var gateway = new LocalDecionisGateway();
-var shieldConfigured = Boolean(
-  process.env.DECIONIS_SHIELD_API_KEY && process.env.DECIONIS_SHIELD_APP_ID
-);
+var shieldClient = new ShieldClient();
 var handler = createMcpHandler({
   serverInfo: { name: "decionis-mcp", version: MCP_SERVER_VERSION },
   tools: createDecionisTools(
     gateway,
     [
       ...createKubernetesMcpToolsFromEnvironment(),
-      ...shieldConfigured ? createShieldTools(new ShieldClient()) : []
+      createShieldPairTool(),
+      ...createShieldTools(shieldClient)
     ],
     { presenceConfigured }
   )