@decionis/mcp 0.2.0 → 0.4.0

package/dist/{chunk-7QNV7MXC.js → chunk-GCE6PUYD.js}

@@ -3,7 +3,7 @@ import {
   LocalDecionisGateway,
   PolicyFileRepository,
   normalizeVerdict
-} from "./chunk-NF5JL6QR.js";
+} from "./chunk-5Q6BCK32.js";
 
 // src/agent/AgentContracts.ts
 var AgentHookInputError = class extends Error {
@@ -498,4 +498,4 @@ export {
   AgentHostRegistry,
   AgentHookCommand
 };
-//# sourceMappingURL=chunk-7QNV7MXC.js.map
+//# sourceMappingURL=chunk-GCE6PUYD.js.map

package/dist/index.js

@@ -5,12 +5,12 @@ import {
   external_exports,
   normalizeVerdict,
   sha256Hex
-} from "./chunk-NF5JL6QR.js";
+} from "./chunk-5Q6BCK32.js";
 
 // src/Server.ts
 import { createInterface } from "readline";
 var SUPPORTED_PROTOCOL_VERSIONS = ["2025-11-25", "2025-06-18", "2025-03-26", "2024-11-05"];
-var MCP_SERVER_VERSION = "0.2.0";
+var MCP_SERVER_VERSION = "0.4.0";
 var DEFAULT_PROTOCOL_VERSION = "2025-11-25";
 var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 function rpcResult(id, result) {
@@ -606,7 +606,7 @@ function createDecionisTools(gateway2, additionalTools = [], options = {}) {
 // src/kubernetes/KubernetesActionPlanner.ts
 import { randomUUID } from "crypto";
 
-// ../../packages/sdk-node/dist/index.js
+// ../../../Decionis/packages/sdk-node/dist/index.js
 import { createHash as createHash2 } from "crypto";
 import { createHash as createHash3 } from "crypto";
 var DEFAULT_SKEW_MS = 6 * 60 * 60 * 1e3;
@@ -633,9 +633,9 @@ async function readBoundedText(response, maxBytes) {
     throw new DecionisResponseTooLargeError();
   }
   if (!response.body || typeof response.body.getReader !== "function") {
-    const text4 = typeof responseLike.text === "function" ? await responseLike.text() : typeof responseLike.json === "function" ? JSON.stringify(await responseLike.json()) : "";
-    if (Buffer.byteLength(text4, "utf8") > maxBytes) throw new DecionisResponseTooLargeError();
-    return text4;
+    const text5 = typeof responseLike.text === "function" ? await responseLike.text() : typeof responseLike.json === "function" ? JSON.stringify(await responseLike.json()) : "";
+    if (Buffer.byteLength(text5, "utf8") > maxBytes) throw new DecionisResponseTooLargeError();
+    return text5;
   }
   const reader = response.body.getReader();
   const chunks = [];
@@ -671,8 +671,8 @@ async function fetchBounded(fetchImpl, input, init, timeoutMs, maxResponseBytes
   });
   const operation = (async () => {
     const response = await fetchImpl(input, { ...init, signal: controller.signal });
-    const text4 = await readBoundedText(response, maxResponseBytes);
-    return { response, text: text4 };
+    const text5 = await readBoundedText(response, maxResponseBytes);
+    return { response, text: text5 };
   })();
   try {
     return await Promise.race([operation, deadline]);
@@ -682,16 +682,16 @@ async function fetchBounded(fetchImpl, input, init, timeoutMs, maxResponseBytes
   }
 }
 async function fetchBoundedJson(fetchImpl, input, init, timeoutMs, maxResponseBytes = DEFAULT_MAX_RESPONSE_BYTES) {
-  const { response, text: text4 } = await fetchBounded(
+  const { response, text: text5 } = await fetchBounded(
     fetchImpl,
     input,
     init,
     timeoutMs,
     maxResponseBytes
   );
-  if (!text4) return { response, body: null };
+  if (!text5) return { response, body: null };
   try {
-    return { response, body: JSON.parse(text4) };
+    return { response, body: JSON.parse(text5) };
   } catch {
     return { response, body: null };
   }
@@ -2310,7 +2310,7 @@ var KubectlCommandRunner = class {
 // src/kubernetes/KubernetesOperations.ts
 import { createHash as createHash4 } from "crypto";
 
-// ../../packages/dossier-verify/dist/chunk-DF26DHVV.js
+// ../../../Decionis/packages/dossier-verify/dist/chunk-WNX2CYWD.js
 import { createHash, createPublicKey, verify as verifyEd25519 } from "crypto";
 import { lookup } from "dns/promises";
 import { request as httpsRequest } from "https";
@@ -6951,10 +6951,10 @@ function validEd25519Signature(value) {
 }
 function normalizedPublicJwksUrl(value) {
   if (value === void 0) return void 0;
-  const text4 = boundedString(value, 2048);
-  if (!text4) return null;
+  const text22 = boundedString(value, 2048);
+  if (!text22) return null;
   try {
-    const url = new URL(text4);
+    const url = new URL(text22);
     if (url.protocol !== "https:" || url.username || url.password) return null;
     return url.toString();
   } catch {
@@ -7320,6 +7320,8 @@ function extractDossierPayload(body) {
     const candidate = asRecord2(record2[key]);
     if (asRecord2(candidate.integrity).proof_bundle !== void 0) return candidate;
   }
+  const payload = asRecord2(asRecord2(record2.dossier).dossier_payload);
+  if (asRecord2(payload.integrity).proof_bundle !== void 0) return payload;
   return record2;
 }
 function resolveJwksUrl(payload, dossierUrl) {
@@ -7410,22 +7412,22 @@ async function assertSafeRemoteUrl(urlText) {
   if (url.username || url.password) {
     throw new Error(`Verification URL must not contain credentials: ${urlText}`);
   }
-  const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
-  if (hostname === "localhost" || hostname.endsWith(".localhost") || hostname.endsWith(".local") || isIP(hostname) !== 0 && isForbiddenIp(hostname)) {
+  const hostname2 = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (hostname2 === "localhost" || hostname2.endsWith(".localhost") || hostname2.endsWith(".local") || isIP(hostname2) !== 0 && isForbiddenIp(hostname2)) {
     throw new Error(`Verification URL resolves to a non-public destination: ${urlText}`);
   }
   return url;
 }
 async function pinnedHttpsFetch(url, signal) {
-  const hostname = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  const hostname2 = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
   let addresses;
-  if (isIP(hostname) !== 0) {
-    addresses = [{ address: hostname, family: isIP(hostname) }];
+  if (isIP(hostname2) !== 0) {
+    addresses = [{ address: hostname2, family: isIP(hostname2) }];
   } else {
     try {
-      addresses = await lookup(hostname, { all: true, verbatim: true });
+      addresses = await lookup(hostname2, { all: true, verbatim: true });
     } catch {
-      throw new Error(`Unable to resolve verification host: ${hostname}`);
+      throw new Error(`Unable to resolve verification host: ${hostname2}`);
     }
   }
   if (addresses.length === 0 || addresses.some(({ address }) => isForbiddenIp(address))) {
@@ -7441,7 +7443,7 @@ async function pinnedHttpsFetch(url, signal) {
         port: url.port || 443,
         path: `${url.pathname}${url.search}`,
         method: "GET",
-        servername: isIP(hostname) === 0 ? hostname : void 0,
+        servername: isIP(hostname2) === 0 ? hostname2 : void 0,
         headers: { accept: "application/json", host: url.host },
         signal
       },
@@ -7577,6 +7579,58 @@ async function verifyDossierFromUrls(input) {
     payload
   };
 }
+var AGENT_SAFE_INTENT_PROTOCOL = "agent-safe.intent/1";
+var MAX_BYTES = 100 * 1024;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var INSTANT = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/;
+var ACTION_TYPE = /^[a-z][a-z0-9._:-]*$/;
+var DIGEST = /^sha256:[0-9a-f]{64}$/;
+function isPlainObject3(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+var text2 = (min, max) => (value) => typeof value === "string" && value.length >= min && value.length <= max;
+var pattern = (expression) => (value) => typeof value === "string" && expression.test(value);
+var ACTOR = {
+  required: { id: text2(1, 200), type: text2(1, 200) },
+  optional: { runtime: text2(1, 200), trust_level: text2(1, 80) },
+  closed: true
+};
+var ACTION = {
+  required: {
+    type: (value) => text2(1, 120)(value) && ACTION_TYPE.test(value),
+    resource: text2(1, 500),
+    parameters: isPlainObject3
+  },
+  optional: {},
+  closed: true
+};
+var CONTEXT = {
+  required: { idempotency_key: text2(1, 180) },
+  optional: {},
+  closed: false
+};
+var DOWNSTREAM_TARGET = {
+  required: { system: text2(1, 200), operation: text2(1, 200) },
+  optional: { environment: text2(1, 200), endpoint: text2(1, 500) },
+  closed: true
+};
+var BINDING = {
+  required: {
+    protocol_version: (value) => value === AGENT_SAFE_INTENT_PROTOCOL,
+    tenant_id: pattern(UUID),
+    intent_id: pattern(UUID),
+    captured_at: pattern(INSTANT),
+    expires_at: pattern(INSTANT),
+    actor: isPlainObject3,
+    action: isPlainObject3,
+    context: isPlainObject3,
+    downstream_target: isPlainObject3
+  },
+  optional: { expected_effect_digest: pattern(DIGEST) },
+  closed: true
+};
 
 // src/kubernetes/KubernetesOperations.ts
 var KubernetesOperations = class _KubernetesOperations {
@@ -7951,7 +8005,7 @@ function createKubernetesAuthorityClient(input) {
 }
 
 // src/kubernetes/KubernetesMcpTools.ts
-var text2 = (value) => [
+var text3 = (value) => [
   { type: "text", text: typeof value === "string" ? value : JSON.stringify(value, null, 2) }
 ];
 var KubernetesMcpTools = class _KubernetesMcpTools {
@@ -7984,7 +8038,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.plan(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8004,7 +8058,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.requestAuthority(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8024,7 +8078,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.apply(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8053,7 +8107,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.scale({
               namespace: _KubernetesMcpTools.requiredDnsName(args.namespace, "namespace"),
               name: _KubernetesMcpTools.requiredDnsName(args.name, "name"),
@@ -8074,7 +8128,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.rollback(
               _KubernetesMcpTools.requiredString(args.manifest_path, "manifest_path"),
               _KubernetesMcpTools.optionalNamespace(args.namespace)
@@ -8102,7 +8156,7 @@ var KubernetesMcpTools = class _KubernetesMcpTools {
           openWorldHint: true
         },
         handler: async (args) => ({
-          content: text2(
+          content: text3(
             await this.operations.verifyDossier(
               _KubernetesMcpTools.requiredString(args.dossier_url, "dossier_url"),
               _KubernetesMcpTools.requiredString(args.jwks_url, "jwks_url")
@@ -8180,17 +8234,94 @@ function boundedInteger(input, fallback, minimum, maximum) {
   return value;
 }
 
+// src/ShieldCredentialStore.ts
+import { mkdirSync, readFileSync, writeFileSync, chmodSync } from "fs";
+import { homedir, hostname } from "os";
+import { dirname, join } from "path";
+import { randomUUID as randomUUID2 } from "crypto";
+var SHIELD_MCP_APP_ID = "decionis-mcp";
+var DEFAULT_SHIELD_API_URL = "https://api.shield.decionis.com";
+function defaultCredentialPath() {
+  return process.env.DECIONIS_SHIELD_CREDENTIAL_FILE?.trim() || join(homedir(), ".decionis", "shield-credential.json");
+}
+var ShieldCredentialStore = class {
+  constructor(path = defaultCredentialPath()) {
+    this.path = path;
+  }
+  /** The credential to use now: the environment first, then the paired file. */
+  resolve() {
+    const envKey = process.env.DECIONIS_SHIELD_API_KEY?.trim();
+    const envApp = process.env.DECIONIS_SHIELD_APP_ID?.trim();
+    const baseUrl = (process.env.DECIONIS_SHIELD_API_URL?.trim() || DEFAULT_SHIELD_API_URL).replace(
+      /\/+$/,
+      ""
+    );
+    if (envKey && envApp) {
+      return { apiKey: envKey, appId: envApp, baseUrl, agentId: envApp };
+    }
+    const stored = this.read();
+    if (!stored) return null;
+    return { ...stored, baseUrl: process.env.DECIONIS_SHIELD_API_URL?.trim() || stored.baseUrl };
+  }
+  read() {
+    try {
+      const raw = JSON.parse(readFileSync(this.path, "utf8"));
+      if (typeof raw.apiKey !== "string" || typeof raw.appId !== "string") return null;
+      return {
+        apiKey: raw.apiKey,
+        appId: raw.appId,
+        baseUrl: typeof raw.baseUrl === "string" ? raw.baseUrl : DEFAULT_SHIELD_API_URL,
+        integrationId: typeof raw.integrationId === "string" ? raw.integrationId : void 0,
+        displayName: typeof raw.displayName === "string" ? raw.displayName : void 0,
+        agentId: typeof raw.agentId === "string" ? raw.agentId : randomUUID2(),
+        pairedAt: typeof raw.pairedAt === "string" ? raw.pairedAt : void 0
+      };
+    } catch {
+      return null;
+    }
+  }
+  /** The install's stable id: the stored one, else a new one written at first pairing. */
+  agentId() {
+    return this.read()?.agentId ?? randomUUID2();
+  }
+  write(credential) {
+    mkdirSync(dirname(this.path), { recursive: true, mode: 448 });
+    writeFileSync(this.path, `${JSON.stringify(credential, null, 2)}
+`, { mode: 384 });
+    try {
+      chmodSync(this.path, 384);
+    } catch {
+    }
+  }
+  location() {
+    return this.path;
+  }
+};
+function defaultAgentDisplayName(clientName) {
+  const host = hostname().split(".")[0] || "this computer";
+  return clientName ? `${clientName} on ${host}` : `Decionis MCP on ${host}`;
+}
+
 // src/ShieldClient.ts
 var ShieldClient = class {
-  baseUrl;
-  apiKey;
-  appId;
   fetchImpl;
+  credentials;
   constructor(options = {}) {
-    this.baseUrl = (options.baseUrl ?? process.env.DECIONIS_SHIELD_API_URL ?? "https://api.decionis.com").replace(/\/+$/, "");
-    this.apiKey = options.apiKey ?? process.env.DECIONIS_SHIELD_API_KEY ?? "";
-    this.appId = options.appId ?? process.env.DECIONIS_SHIELD_APP_ID ?? "";
     this.fetchImpl = options.fetch ?? fetch;
+    if (options.credentials) {
+      this.credentials = options.credentials;
+    } else if (options.apiKey !== void 0 || options.appId !== void 0 || options.baseUrl) {
+      const fixed = options.apiKey && options.appId ? {
+        apiKey: options.apiKey,
+        appId: options.appId,
+        baseUrl: (options.baseUrl ?? DEFAULT_SHIELD_API_URL).replace(/\/+$/, ""),
+        agentId: options.appId
+      } : null;
+      this.credentials = () => fixed;
+    } else {
+      const store = new ShieldCredentialStore();
+      this.credentials = () => store.resolve();
+    }
   }
   authorize(request) {
     return this.json("/v1/shield/authorize", "POST", request);
@@ -8205,19 +8336,20 @@ var ShieldClient = class {
     return this.json(`/v1/shield/decisions/${encodeURIComponent(decisionId)}`, "GET");
   }
   async json(path, method, body) {
-    if (!this.apiKey || !this.appId) {
+    const credential = this.credentials();
+    if (!credential || !credential.apiKey || !credential.appId) {
       throw new ShieldClientError(
         "SHIELD_MCP_CONFIGURATION_REQUIRED",
-        "Configure DECIONIS_SHIELD_API_KEY and DECIONIS_SHIELD_APP_ID. Do not execute the transaction."
+        "Shield is not paired. Ask the user for the six-character code from the Shield app (AI spending allowance \u2192 Bind your own agent) and call shield.pair with it \u2014 or configure DECIONIS_SHIELD_API_KEY and DECIONIS_SHIELD_APP_ID. Do not execute the transaction."
       );
     }
-    const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+    const response = await this.fetchImpl(`${credential.baseUrl}${path}`, {
       method,
       headers: {
         accept: "application/json",
-        authorization: `Bearer ${this.apiKey}`,
+        authorization: `Bearer ${credential.apiKey}`,
         "content-type": "application/json",
-        "x-shield-app-id": this.appId,
+        "x-shield-app-id": credential.appId,
         "x-shield-environment": "production"
       },
       ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {}
@@ -8245,7 +8377,7 @@ function asRecord3(value) {
 }
 
 // src/ShieldTools.ts
-var text3 = (value) => [
+var text4 = (value) => [
   { type: "text", text: typeof value === "string" ? value : JSON.stringify(value, null, 2) }
 ];
 var purchaseProperties = {
@@ -8284,11 +8416,199 @@ var networkRead = {
   idempotentHint: true,
   openWorldHint: true
 };
+function createShieldPairTool(options = {}) {
+  const store = options.store ?? new ShieldCredentialStore();
+  const fetchImpl = options.fetch ?? fetch;
+  const baseUrl = () => (options.baseUrl?.() ?? process.env.DECIONIS_SHIELD_API_URL?.trim() ?? "").replace(
+    /\/+$/,
+    ""
+  ) || "https://api.shield.decionis.com";
+  const pendingEmail = /* @__PURE__ */ new Map();
+  const post = async (path, body) => fetchImpl(`${baseUrl()}${path}`, {
+    method: "POST",
+    headers: {
+      accept: "application/json",
+      "content-type": "application/json",
+      "x-shield-surface": "mcp"
+    },
+    body: JSON.stringify(body)
+  });
+  const unreachable = (error) => ({
+    content: text4({
+      error: "SHIELD_PAIRING_UNREACHABLE",
+      message: `Could not reach Shield: ${error instanceof Error ? error.message : String(error)}. Nothing was paired.`
+    }),
+    isError: true
+  });
+  const keep = async (response, displayName, agentId, hints) => {
+    const payload = await response.json().catch(() => null);
+    if (response.ok && payload?.upgrade_required === true) {
+      return {
+        content: text4({
+          error: "SHIELD_SOURCE_LIMIT",
+          message: "The user's free Shield already covers its limit of spending sources. They can remove one in the Shield app or upgrade; nothing was paired."
+        }),
+        isError: true
+      };
+    }
+    if (!response.ok || !payload || typeof payload.api_key !== "string" || typeof payload.app_id !== "string") {
+      const code_ = payload && typeof payload.error === "string" ? payload.error : `HTTP ${response.status}`;
+      return {
+        content: text4({ error: code_, message: hints[code_] ?? "Nothing was paired." }),
+        isError: true
+      };
+    }
+    const integration = payload.integration ?? {};
+    const credential = {
+      apiKey: payload.api_key,
+      appId: payload.app_id,
+      baseUrl: baseUrl(),
+      integrationId: typeof integration.integrationId === "string" ? integration.integrationId : void 0,
+      displayName,
+      agentId,
+      pairedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    store.write(credential);
+    const limit = typeof payload.weekly_limit === "number" ? payload.weekly_limit : null;
+    return {
+      content: text4({
+        paired: true,
+        rotated: payload.rotated === true,
+        displayName,
+        weeklyLimit: limit,
+        storedAt: store.location(),
+        next: "The shield.* tools now ask this user's own Shield. Before any purchase, call shield.request_purchase; execute only on ALLOW."
+      })
+    };
+  };
+  return {
+    name: "shield.pair",
+    title: "Pair with the user's Shield",
+    description: "Bind this assistant to the user's Decionis Shield, one of two ways. (1) The six-character pairing code shown in the Shield app (AI spending allowance \u2192 Bind your own agent): pass it as code. (2) The user's email: pass email, and Shield emails them a 6-digit code; ask the user for it, then call again with email and emailCode. Ask the user; never guess a code. After pairing, shield.request_purchase and the other shield.* tools ask the user's own spending rules.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        code: {
+          type: "string",
+          pattern: "^[A-Za-z0-9]{6,8}$",
+          description: "The pairing code from the Shield app."
+        },
+        email: {
+          type: "string",
+          maxLength: 254,
+          description: "The user's Shield email, to be sent a sign-in code."
+        },
+        emailCode: {
+          type: "string",
+          pattern: "^[0-9]{6}$",
+          description: "The 6-digit code Shield emailed to the user."
+        },
+        displayName: {
+          type: "string",
+          maxLength: 120,
+          description: "How the Shield app should list this assistant (default: the client and this computer)."
+        }
+      },
+      additionalProperties: false
+    },
+    annotations: networkMutation,
+    handler: async (args) => {
+      const displayName = typeof args.displayName === "string" && args.displayName.trim() ? args.displayName.trim().slice(0, 120) : defaultAgentDisplayName(options.clientName?.());
+      const agent = {
+        app_id: SHIELD_MCP_APP_ID,
+        agent_id: store.agentId(),
+        display_name: displayName
+      };
+      const email = typeof args.email === "string" ? args.email.trim().toLowerCase() : "";
+      const emailCode = typeof args.emailCode === "string" ? args.emailCode.trim() : "";
+      if (email) {
+        if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+          return {
+            content: text4(
+              "That is not an email address. Ask the user for the email they use with Shield."
+            ),
+            isError: true
+          };
+        }
+        if (!emailCode) {
+          let response3;
+          try {
+            response3 = await post("/v1/consumer/auth/start", { email, scope: "agent" });
+          } catch (error) {
+            return unreachable(error);
+          }
+          const payload = await response3.json().catch(() => null);
+          if (!response3.ok || !payload || typeof payload.challenge_id !== "string") {
+            return {
+              content: text4({
+                error: response3.status === 429 ? "SHIELD_TOO_MANY_CODES" : `HTTP ${response3.status}`,
+                message: response3.status === 429 ? "Shield has sent several codes already. Wait a minute, then try again." : "Shield could not send a code right now. Nothing was paired."
+              }),
+              isError: true
+            };
+          }
+          pendingEmail.set(email, payload.challenge_id);
+          return {
+            content: text4({
+              emailed: true,
+              email,
+              next: `Ask the user for the 6-digit code Shield just emailed to ${email}, then call shield.pair again with email and emailCode.`
+            })
+          };
+        }
+        if (!/^[0-9]{6}$/.test(emailCode)) {
+          return {
+            content: text4(
+              "The emailed code is 6 digits. Ask the user to read it from the Shield email."
+            ),
+            isError: true
+          };
+        }
+        let response2;
+        try {
+          response2 = await post("/v1/consumer/auth/verify", {
+            email,
+            code: emailCode,
+            ...pendingEmail.has(email) ? { challenge_id: pendingEmail.get(email) } : {},
+            scope: "agent",
+            agent
+          });
+        } catch (error) {
+          return unreachable(error);
+        }
+        if (response2.ok) pendingEmail.delete(email);
+        return keep(response2, displayName, agent.agent_id, {
+          INVALID_CODE: "The code is wrong or has expired (five minutes). Ask the user for the newest code, or call shield.pair with email again to send a fresh one.",
+          OTP_TOO_MANY_ATTEMPTS: "Too many wrong codes for that email. Call shield.pair with email again to send a fresh one.",
+          CHALLENGE_NOT_FOUND: "No code is waiting for that email. Call shield.pair with email first."
+        });
+      }
+      const code = typeof args.code === "string" ? args.code.trim().toUpperCase() : "";
+      if (!/^[A-Z0-9]{6,8}$/.test(code)) {
+        return {
+          content: text4(
+            "Give either the pairing code shown in the Shield app (6 to 8 letters and digits) or the user's email. Ask the user; never guess."
+          ),
+          isError: true
+        };
+      }
+      let response;
+      try {
+        response = await post("/v1/consumer/pairing/claim", { code, agent });
+      } catch (error) {
+        return unreachable(error);
+      }
+      return keep(response, displayName, agent.agent_id, {
+        PAIRING_CODE_INVALID: "The code is wrong, expired (ten minutes) or already used. Ask the user for a fresh one from the Shield app."
+      });
+    }
+  };
+}
 function createShieldTools(shield) {
   const authorize = async (args) => {
     if (typeof args.amount !== "number" || typeof args.currency !== "string" || typeof args.purpose !== "string") {
       return {
-        content: text3(
+        content: text4(
           "amount, currency, and purpose are required. Do not execute the transaction."
         ),
         isError: true
@@ -8343,7 +8663,7 @@ function createShieldTools(shield) {
       },
       annotations: networkMutation,
       handler: async (args) => typeof args.decisionId === "string" ? shieldResult(async () => await shield.requestApproval(args.decisionId)) : {
-        content: text3("decisionId is required. Do not execute the transaction."),
+        content: text4("decisionId is required. Do not execute the transaction."),
         isError: true
       }
     },
@@ -8359,7 +8679,7 @@ function createShieldTools(shield) {
       },
       annotations: networkRead,
       handler: async (args) => typeof args.decisionId === "string" ? shieldResult(async () => await shield.decision(args.decisionId)) : {
-        content: text3("decisionId is required. Do not execute the transaction."),
+        content: text4("decisionId is required. Do not execute the transaction."),
         isError: true
       }
     }
@@ -8367,10 +8687,10 @@ function createShieldTools(shield) {
 }
 async function shieldResult(work) {
   try {
-    return { content: text3(await work()) };
+    return { content: text4(await work()) };
   } catch (error) {
     return {
-      content: text3({
+      content: text4({
         error: error instanceof Error ? error.name : "ShieldError",
         message: error instanceof Error ? error.message : String(error),
         safeToExecute: false
@@ -8387,16 +8707,15 @@ if (presenceKey && !process.env.DECIONIS_PRESENCE_SERVICE_TOKEN) {
 }
 var presenceConfigured = presenceKey.length > 0;
 var gateway = new LocalDecionisGateway();
-var shieldConfigured = Boolean(
-  process.env.DECIONIS_SHIELD_API_KEY && process.env.DECIONIS_SHIELD_APP_ID
-);
+var shieldClient = new ShieldClient();
 var handler = createMcpHandler({
   serverInfo: { name: "decionis-mcp", version: MCP_SERVER_VERSION },
   tools: createDecionisTools(
     gateway,
     [
       ...createKubernetesMcpToolsFromEnvironment(),
-      ...shieldConfigured ? createShieldTools(new ShieldClient()) : []
+      createShieldPairTool(),
+      ...createShieldTools(shieldClient)
     ],
     { presenceConfigured }
   )