@deeprelay/mcp 0.0.1 → 0.1.1

package/dist/index.js

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SERVER_NAME = void 0;
+exports.createServer = createServer;
+exports.buildServer = buildServer;
+exports.main = main;
+// Entry point for the deeprelay MCP server (Phase 104, D-15). Authored fresh
+// (D-12).
+//
+// The server speaks MCP over stdio: the client spawns this file and exchanges
+// JSON-RPC on stdin/stdout. stdout is therefore a protocol channel. Every
+// human-facing line goes to stderr, or it corrupts the framing (T-104-36).
+//
+// Boot order:
+//   1. validate configuration (offline: key presence and base URL only)
+//   2. build the server and register every tool through the one door
+//   3. connect the stdio transport
+//   4. start the crypto-deposit availability probe in the background (D-03)
+//
+// Steps 1-3 make no network call, so a misconfigured server fails with a
+// readable message and a transient network blip can never stop it booting.
+// Step 4 is fire-and-forget and never throws.
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const auth_js_1 = require("./auth.js");
+const crypto_deposit_gate_js_1 = require("./tools/crypto-deposit-gate.js");
+const index_js_1 = require("./tools/index.js");
+const version_js_1 = require("./version.js");
+/** Server name as MCP clients see it. */
+exports.SERVER_NAME = "deeprelay";
+/** A bare server with no tools. Tests use it to register a partial surface. */
+function createServer() {
+    return new mcp_js_1.McpServer({ name: exports.SERVER_NAME, version: (0, version_js_1.readVersion)() });
+}
+/**
+ * The server a client talks to: every roster tool registered. Offline and
+ * instant; throws only if the registry has drifted from the roster.
+ */
+function buildServer() {
+    const server = createServer();
+    const roster = (0, index_js_1.registerAllTools)(server);
+    return { server, roster };
+}
+/** Validate → build → connect → schedule the D-03 probe. */
+async function main() {
+    // Throws StartupConfigError when DEEPRELAY_API_KEY is missing or the base
+    // URL is malformed. No request is made.
+    (0, auth_js_1.buildConfiguration)();
+    const { server, roster } = buildServer();
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+    void (0, crypto_deposit_gate_js_1.probeCryptoDeposits)({ roster });
+}
+if (require.main === module) {
+    main().catch((err) => {
+        process.stderr.write(`${(0, auth_js_1.describeStartupError)(err)}\n`);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AA6BA,oCAEC;AAWD,kCAIC;AAGD,oBAUC;AA1DD,6EAA6E;AAC7E,UAAU;AACV,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,cAAc;AACd,wEAAwE;AACxE,qEAAqE;AACrE,mCAAmC;AACnC,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,8CAA8C;AAC9C,oEAAoE;AACpE,wEAAiF;AAEjF,uCAAqE;AACrE,2EAAqE;AACrE,+CAA2E;AAC3E,6CAA2C;AAE3C,yCAAyC;AAC5B,QAAA,WAAW,GAAG,WAAW,CAAC;AAEvC,+EAA+E;AAC/E,SAAgB,YAAY;IAC1B,OAAO,IAAI,kBAAS,CAAC,EAAE,IAAI,EAAE,mBAAW,EAAE,OAAO,EAAE,IAAA,wBAAW,GAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAOD;;;GAGG;AACH,SAAgB,WAAW;IACzB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAA,2BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,4DAA4D;AACrD,KAAK,UAAU,IAAI;IACxB,0EAA0E;IAC1E,wCAAwC;IACxC,IAAA,4BAAkB,GAAE,CAAC;IAErB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,KAAK,IAAA,4CAAmB,EAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAA,8BAAoB,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/roster.d.ts

@@ -0,0 +1,36 @@
+export declare const TOOL_PREFIX = "deeprelay_";
+/** Free, non-mutating reads. No confirmation. Every route is a GET. */
+export declare const READ_TOOLS: readonly ["deeprelay_auth_status", "deeprelay_health", "deeprelay_models_list", "deeprelay_models_get", "deeprelay_inference_preflight", "deeprelay_usage_get", "deeprelay_balance_get", "deeprelay_spending_limit_get", "deeprelay_subscription_get", "deeprelay_deposits_list", "deeprelay_deposits_get", "deeprelay_referrals_get", "deeprelay_webhooks_list", "deeprelay_webhooks_get", "deeprelay_videos_list", "deeprelay_videos_get", "deeprelay_videos_content"];
+/**
+ * Mutations that do not charge the account directly. Each one asks for
+ * confirmation once. Payment-link tools are here with no quote (D-09), because
+ * nothing is charged until the user acts on the link.
+ */
+export declare const WRITE_TOOLS: readonly ["deeprelay_webhooks_create", "deeprelay_webhooks_delete", "deeprelay_spending_limit_update", "deeprelay_spending_limit_clear", "deeprelay_subscription_checkout", "deeprelay_billing_portal", "deeprelay_deposits_create_crypto", "deeprelay_videos_cancel"];
+/** Billable inference. Each call goes quote → session budget → confirm (D-06..D-08, D-10). */
+export declare const SPEND_TOOLS: readonly ["deeprelay_chat_completion", "deeprelay_embeddings_create", "deeprelay_images_generate", "deeprelay_videos_create"];
+export declare const ALL_TOOLS: readonly ["deeprelay_auth_status", "deeprelay_health", "deeprelay_models_list", "deeprelay_models_get", "deeprelay_inference_preflight", "deeprelay_usage_get", "deeprelay_balance_get", "deeprelay_spending_limit_get", "deeprelay_subscription_get", "deeprelay_deposits_list", "deeprelay_deposits_get", "deeprelay_referrals_get", "deeprelay_webhooks_list", "deeprelay_webhooks_get", "deeprelay_videos_list", "deeprelay_videos_get", "deeprelay_videos_content", "deeprelay_webhooks_create", "deeprelay_webhooks_delete", "deeprelay_spending_limit_update", "deeprelay_spending_limit_clear", "deeprelay_subscription_checkout", "deeprelay_billing_portal", "deeprelay_deposits_create_crypto", "deeprelay_videos_cancel", "deeprelay_chat_completion", "deeprelay_embeddings_create", "deeprelay_images_generate", "deeprelay_videos_create"];
+export type ReadToolName = (typeof READ_TOOLS)[number];
+export type WriteToolName = (typeof WRITE_TOOLS)[number];
+export type SpendToolName = (typeof SPEND_TOOLS)[number];
+export type ToolName = (typeof ALL_TOOLS)[number];
+export type HttpMethod = "GET" | "POST" | "PUT" | "DELETE";
+export interface ToolRoute {
+    method: HttpMethod;
+    /** Path relative to the /v1 base, exactly as keyed in openapi/v1.yaml. */
+    path: string;
+    /**
+     * Additional unpaused paths the tool reads besides its primary route. Only
+     * deeprelay_auth_status uses this: it confirms the key via the spending
+     * limit, then reports the balance.
+     */
+    secondaryPaths?: readonly string[];
+}
+/** Each tool mapped to its one unpaused route (D-05). */
+export declare const TOOL_ROUTES: Record<ToolName, ToolRoute>;
+/**
+ * Unpaused spec paths that are deliberately NOT tools, each with its reason (D-05).
+ * Once Phase 103 pauses /operations/{id}, it drops out of the unpaused set and
+ * its entry here can go.
+ */
+export declare const EXCLUDED_PATHS: Readonly<Record<string, string>>;

package/dist/roster.js

@@ -0,0 +1,130 @@
+"use strict";
+// The canonical deeprelay MCP tool roster (Phase 104, D-01/D-05).
+//
+// This is the one place the roster is written down. Each later module (the
+// tier files, the registration door, the docs-count checks) reads its names from
+// here instead of re-listing them. The file holds constants and types only: no
+// handlers and no I/O.
+//
+// Rules this file encodes:
+//   * D-01: every tool name starts with `deeprelay_`. No GPU-era name survives.
+//   * D-02: all four live inference modalities ship: chat, embeddings, image
+//     and async video.
+//   * D-04: there is no operations tool. `GET /operations/{id}` has no
+//     serverless producer of operation ids and is paused by Phase 103 D-08.
+//   * D-05: the roster is the SDK and nothing more. Every tool maps to exactly
+//     one unpaused path in openapi/v1.yaml, and every unpaused path is either
+//     some tool's route or is listed in EXCLUDED_PATHS with a reason.
+//     test/roster-audit.test.ts checks this against the live spec.
+//   * D-10: three tiers, enforced by the server. READ tools are free. WRITE tools
+//     ask for confirmation once. SPEND tools go quote → budget → confirm.
+//
+// Tier/method invariant (the harness sentinel depends on it): every READ route
+// is a GET, and every WRITE or SPEND route is not a GET. So a stub API can flag
+// any non-GET that arrives without a confirmation as a guardrail breach.
+//
+// `deeprelay_videos_cancel` is in the WRITE tier. `POST /videos/{id}/cancel` is
+// a mutation, and D-10 says every mutation asks for confirmation.
+// `deeprelay_spending_limit_clear` is tool 29 (Plan 104-12): the shipping pin,
+// @deeprelay/sdk@0.2.0, exposes BillingApi.deleteSpendingLimit
+// (DELETE /billing/spending-limit). It is a WRITE because it removes a safety
+// cap: it confirms once, and requires the org-admin role server-side.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXCLUDED_PATHS = exports.TOOL_ROUTES = exports.ALL_TOOLS = exports.SPEND_TOOLS = exports.WRITE_TOOLS = exports.READ_TOOLS = exports.TOOL_PREFIX = void 0;
+exports.TOOL_PREFIX = "deeprelay_";
+/** Free, non-mutating reads. No confirmation. Every route is a GET. */
+exports.READ_TOOLS = [
+    "deeprelay_auth_status",
+    "deeprelay_health",
+    "deeprelay_models_list",
+    "deeprelay_models_get",
+    "deeprelay_inference_preflight",
+    "deeprelay_usage_get",
+    "deeprelay_balance_get",
+    "deeprelay_spending_limit_get",
+    "deeprelay_subscription_get",
+    "deeprelay_deposits_list",
+    "deeprelay_deposits_get",
+    "deeprelay_referrals_get",
+    "deeprelay_webhooks_list",
+    "deeprelay_webhooks_get",
+    "deeprelay_videos_list",
+    "deeprelay_videos_get",
+    "deeprelay_videos_content",
+];
+/**
+ * Mutations that do not charge the account directly. Each one asks for
+ * confirmation once. Payment-link tools are here with no quote (D-09), because
+ * nothing is charged until the user acts on the link.
+ */
+exports.WRITE_TOOLS = [
+    "deeprelay_webhooks_create",
+    "deeprelay_webhooks_delete",
+    "deeprelay_spending_limit_update",
+    "deeprelay_spending_limit_clear",
+    "deeprelay_subscription_checkout",
+    "deeprelay_billing_portal",
+    "deeprelay_deposits_create_crypto",
+    "deeprelay_videos_cancel",
+];
+/** Billable inference. Each call goes quote → session budget → confirm (D-06..D-08, D-10). */
+exports.SPEND_TOOLS = [
+    "deeprelay_chat_completion",
+    "deeprelay_embeddings_create",
+    "deeprelay_images_generate",
+    "deeprelay_videos_create",
+];
+exports.ALL_TOOLS = [...exports.READ_TOOLS, ...exports.WRITE_TOOLS, ...exports.SPEND_TOOLS];
+/** Each tool mapped to its one unpaused route (D-05). */
+exports.TOOL_ROUTES = {
+    // READ
+    deeprelay_auth_status: {
+        method: "GET",
+        path: "/billing/spending-limit",
+        secondaryPaths: ["/billing/balance"],
+    },
+    deeprelay_health: { method: "GET", path: "/health" },
+    deeprelay_models_list: { method: "GET", path: "/models" },
+    deeprelay_models_get: { method: "GET", path: "/models/{id}" },
+    deeprelay_inference_preflight: { method: "GET", path: "/inference/preflight" },
+    deeprelay_usage_get: { method: "GET", path: "/usage" },
+    deeprelay_balance_get: { method: "GET", path: "/billing/balance" },
+    deeprelay_spending_limit_get: { method: "GET", path: "/billing/spending-limit" },
+    deeprelay_subscription_get: { method: "GET", path: "/billing/subscription" },
+    deeprelay_deposits_list: { method: "GET", path: "/billing/deposits" },
+    deeprelay_deposits_get: { method: "GET", path: "/billing/deposits/{id}" },
+    deeprelay_referrals_get: { method: "GET", path: "/referrals" },
+    deeprelay_webhooks_list: { method: "GET", path: "/webhook-endpoints" },
+    deeprelay_webhooks_get: { method: "GET", path: "/webhook-endpoints/{id}" },
+    deeprelay_videos_list: { method: "GET", path: "/videos" },
+    deeprelay_videos_get: { method: "GET", path: "/videos/{id}" },
+    deeprelay_videos_content: { method: "GET", path: "/videos/{id}/content" },
+    // WRITE
+    deeprelay_webhooks_create: { method: "POST", path: "/webhook-endpoints" },
+    deeprelay_webhooks_delete: { method: "DELETE", path: "/webhook-endpoints/{id}" },
+    deeprelay_spending_limit_update: { method: "PUT", path: "/billing/spending-limit" },
+    deeprelay_spending_limit_clear: { method: "DELETE", path: "/billing/spending-limit" },
+    deeprelay_subscription_checkout: { method: "POST", path: "/billing/subscription/checkout" },
+    deeprelay_billing_portal: { method: "POST", path: "/billing/subscription/portal" },
+    deeprelay_deposits_create_crypto: { method: "POST", path: "/billing/deposits/crypto" },
+    deeprelay_videos_cancel: { method: "POST", path: "/videos/{id}/cancel" },
+    // SPEND
+    deeprelay_chat_completion: { method: "POST", path: "/chat/completions" },
+    deeprelay_embeddings_create: { method: "POST", path: "/embeddings" },
+    deeprelay_images_generate: { method: "POST", path: "/images/generations" },
+    deeprelay_videos_create: { method: "POST", path: "/videos" },
+};
+/**
+ * Unpaused spec paths that are deliberately NOT tools, each with its reason (D-05).
+ * Once Phase 103 pauses /operations/{id}, it drops out of the unpaused set and
+ * its entry here can go.
+ */
+exports.EXCLUDED_PATHS = {
+    "/openapi.json": "spec download, not an agent capability (D-05)",
+    // /operations/{id} was listed here while it was still an UNPAUSED path with
+    // no tool. Phase 103 D-08 landed the x-gpu-supply-paused marker, so it is no
+    // longer unpaused and an exclusion entry for it would now fail the audit's
+    // "excluded path must be a real unpaused path" assertion. There is still no
+    // operations tool (D-04) — the path simply left the audit's domain.
+};
+//# sourceMappingURL=roster.js.map

package/dist/roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.js","sourceRoot":"","sources":["../src/roster.ts"],"names":[],"mappings":";AAAA,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,iFAAiF;AACjF,+EAA+E;AAC/E,uBAAuB;AACvB,EAAE;AACF,2BAA2B;AAC3B,gFAAgF;AAChF,6EAA6E;AAC7E,uBAAuB;AACvB,uEAAuE;AACvE,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,mEAAmE;AACnE,kFAAkF;AAClF,0EAA0E;AAC1E,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,yEAAyE;AACzE,EAAE;AACF,gFAAgF;AAChF,kEAAkE;AAClE,+EAA+E;AAC/E,+DAA+D;AAC/D,8EAA8E;AAC9E,sEAAsE;;;AAEzD,QAAA,WAAW,GAAG,YAAY,CAAC;AAExC,uEAAuE;AAC1D,QAAA,UAAU,GAAG;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,uBAAuB;IACvB,sBAAsB;IACtB,+BAA+B;IAC/B,qBAAqB;IACrB,uBAAuB;IACvB,8BAA8B;IAC9B,4BAA4B;IAC5B,yBAAyB;IACzB,wBAAwB;IACxB,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,uBAAuB;IACvB,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAEX;;;;GAIG;AACU,QAAA,WAAW,GAAG;IACzB,2BAA2B;IAC3B,2BAA2B;IAC3B,iCAAiC;IACjC,gCAAgC;IAChC,iCAAiC;IACjC,0BAA0B;IAC1B,kCAAkC;IAClC,yBAAyB;CACjB,CAAC;AAEX,8FAA8F;AACjF,QAAA,WAAW,GAAG;IACzB,2BAA2B;IAC3B,6BAA6B;IAC7B,2BAA2B;IAC3B,yBAAyB;CACjB,CAAC;AAEE,QAAA,SAAS,GAAG,CAAC,GAAG,kBAAU,EAAE,GAAG,mBAAW,EAAE,GAAG,mBAAW,CAAU,CAAC;AAqBlF,yDAAyD;AAC5C,QAAA,WAAW,GAAgC;IACtD,OAAO;IACP,qBAAqB,EAAE;QACrB,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,yBAAyB;QAC/B,cAAc,EAAE,CAAC,kBAAkB,CAAC;KACrC;IACD,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;IACpD,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;IACzD,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE;IAC7D,6BAA6B,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC9E,mBAAmB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtD,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAClE,4BAA4B,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAChF,0BAA0B,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC5E,uBAAuB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACrE,sBAAsB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACzE,uBAAuB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE;IAC9D,uBAAuB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACtE,sBAAsB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAC1E,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;IACzD,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE;IAC7D,wBAAwB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACzE,QAAQ;IACR,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACzE,yBAAyB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;IAChF,+BAA+B,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACnF,8BAA8B,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE;IACrF,+BAA+B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE;IAC3F,wBAAwB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE;IAClF,gCAAgC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE;IACtF,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACxE,QAAQ;IACR,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACxE,2BAA2B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;IACpE,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC1E,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE;CAC7D,CAAC;AAEF;;;;GAIG;AACU,QAAA,cAAc,GAAqC;IAC9D,eAAe,EAAE,+CAA+C;IAChE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;CACrE,CAAC"}

package/dist/tools/crypto-deposit-gate.d.ts

@@ -0,0 +1,21 @@
+import type { RegisteredRoster } from "./index.js";
+import type { Env } from "./types.js";
+export declare const CRYPTO_DEPOSIT_TOOL: "deeprelay_deposits_create_crypto";
+/** The one line written when the probe fails for a reason other than 404. */
+export declare const PROBE_FAILURE_LINE: string;
+/** Where the probe may write its single diagnostic line. Never stdout (JSON-RPC). */
+export interface ProbeStderr {
+    write(chunk: string): unknown;
+}
+export interface ProbeOptions {
+    roster: RegisteredRoster;
+    env?: Env;
+    stderr?: ProbeStderr;
+}
+/**
+ * Enable deeprelay_deposits_create_crypto if and only if GET /billing/deposits
+ * succeeds for this key. Resolves in every case; never rejects.
+ */
+export declare function probeCryptoDeposits(options: ProbeOptions): Promise<void>;
+/** Enable the crypto-deposit tool if it is still hidden. Idempotent. */
+export declare function enableOnDepositsRead(roster: RegisteredRoster): void;

package/dist/tools/crypto-deposit-gate.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROBE_FAILURE_LINE = exports.CRYPTO_DEPOSIT_TOOL = void 0;
+exports.probeCryptoDeposits = probeCryptoDeposits;
+exports.enableOnDepositsRead = enableOnDepositsRead;
+// The crypto-deposit advertisement probe (Phase 104, D-03). Authored fresh
+// (D-12).
+//
+// deeprelay_deposits_create_crypto is the one tool whose availability depends
+// on the account: crypto deposits are enabled per account, and on an account
+// without them the API answers 404. Advertising a tool the API will refuse
+// wastes the agent's turn, so the registry registers it disabled at boot and
+// this module turns it on once the account is shown to have the feature.
+//
+// Mechanism (recorded for verify-phase in 104-08-PLAN.md):
+//
+//   * Boot is offline (D-15). The tool is registered and disabled before the
+//     transport connects, and disabling it then sends nothing, because the
+//     pinned SDK only emits tools/list_changed once connected.
+//   * After connect, main() starts one probe in the background: a single
+//     GET /billing/deposits through the SDK.
+//       2xx          → enable the tool (the SDK emits tools/list_changed)
+//       404          → leave it hidden, say nothing (the normal "not enabled")
+//       anything else → leave it hidden, write one fixed stderr line
+//     The probe never throws and never blocks boot.
+//   * Defense in depth: when a later deeprelay_deposits_list / _get read shows
+//     crypto deposits enabled, the registry calls enableOnDepositsRead, so a
+//     probe that failed on a transient error does not hide the tool for the
+//     whole session.
+//
+// This is NOT a general gate. The GPU-era provisioning gate was deleted
+// outright (D-13) and has no successor; this module only ever touches the one
+// tool named below.
+const sdk_1 = require("@deeprelay/sdk");
+const auth_js_1 = require("../auth.js");
+const errors_js_1 = require("../errors.js");
+exports.CRYPTO_DEPOSIT_TOOL = "deeprelay_deposits_create_crypto";
+/** The one line written when the probe fails for a reason other than 404. */
+exports.PROBE_FAILURE_LINE = `deeprelay: crypto-deposit availability probe failed; ${exports.CRYPTO_DEPOSIT_TOOL} stays hidden\n`;
+/**
+ * Enable deeprelay_deposits_create_crypto if and only if GET /billing/deposits
+ * succeeds for this key. Resolves in every case; never rejects.
+ */
+async function probeCryptoDeposits(options) {
+    const { roster, env = process.env, stderr = process.stderr } = options;
+    try {
+        const tool = roster.get(exports.CRYPTO_DEPOSIT_TOOL);
+        if (tool === undefined || tool.enabled) {
+            return;
+        }
+        let config;
+        try {
+            config = (0, auth_js_1.buildConfiguration)(env);
+        }
+        catch {
+            // No key or a bad base URL: main() already refuses to boot on these, so
+            // reaching here means a test or embedder built the server without config.
+            // Nothing to probe with; stay hidden and quiet.
+            return;
+        }
+        try {
+            await new sdk_1.BillingApi(config).listDeposits();
+        }
+        catch (err) {
+            if ((0, errors_js_1.httpStatusOf)(err) === 404) {
+                return;
+            }
+            stderr.write((0, errors_js_1.redactSecrets)(exports.PROBE_FAILURE_LINE, env));
+            return;
+        }
+        tool.enable();
+    }
+    catch {
+        // Belt and braces: the probe runs fire-and-forget after connect, so an
+        // unexpected throw here must not become an unhandled rejection.
+        try {
+            stderr.write((0, errors_js_1.redactSecrets)(exports.PROBE_FAILURE_LINE, env));
+        }
+        catch {
+            // stderr itself is gone; nothing left to report to.
+        }
+    }
+}
+/** Enable the crypto-deposit tool if it is still hidden. Idempotent. */
+function enableOnDepositsRead(roster) {
+    const tool = roster.get(exports.CRYPTO_DEPOSIT_TOOL);
+    if (tool !== undefined && !tool.enabled) {
+        tool.enable();
+    }
+}
+//# sourceMappingURL=crypto-deposit-gate.js.map

package/dist/tools/crypto-deposit-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-deposit-gate.js","sourceRoot":"","sources":["../../src/tools/crypto-deposit-gate.ts"],"names":[],"mappings":";;;AAwDA,kDAqCC;AAGD,oDAKC;AArGD,2EAA2E;AAC3E,UAAU;AACV,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,2DAA2D;AAC3D,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,+DAA+D;AAC/D,yEAAyE;AACzE,6CAA6C;AAC7C,0EAA0E;AAC1E,+EAA+E;AAC/E,qEAAqE;AACrE,oDAAoD;AACpD,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,qBAAqB;AACrB,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,oBAAoB;AACpB,wCAAgE;AAEhE,wCAAgD;AAChD,4CAA2D;AAI9C,QAAA,mBAAmB,GAAG,kCAA2C,CAAC;AAE/E,6EAA6E;AAChE,QAAA,kBAAkB,GAC7B,wDAAwD,2BAAmB,iBAAiB,CAAC;AAa/F;;;GAGG;AACI,KAAK,UAAU,mBAAmB,CAAC,OAAqB;IAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,2BAAmB,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO;QACT,CAAC;QAED,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,IAAA,4BAAkB,EAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,0EAA0E;YAC1E,gDAAgD;YAChD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,gBAAU,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAA,wBAAY,EAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,IAAA,yBAAa,EAAC,0BAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,gEAAgE;QAChE,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,IAAA,yBAAa,EAAC,0BAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAgB,oBAAoB,CAAC,MAAwB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,2BAAmB,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,16 @@
+import type { McpServer, RegisteredTool } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ElicitationHost } from "../guardrail/types.js";
+import { type ToolName } from "../roster.js";
+/** Every registered tool, by roster name. */
+export type RegisteredRoster = ReadonlyMap<ToolName, RegisteredTool>;
+/**
+ * Adapt the low-level server's elicitation surface to the structural
+ * ElicitationHost the guardrail uses. In the pinned SDK, elicitInput lives on
+ * `server.server`, not on the per-request `extra` a tool callback receives.
+ */
+export declare function elicitationHost(server: McpServer): ElicitationHost;
+/**
+ * Register every roster tool on `server` and return the registered handles by
+ * name. The one door (D-13): a plain three-array walk.
+ */
+export declare function registerAllTools(server: McpServer): RegisteredRoster;

package/dist/tools/index.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.elicitationHost = elicitationHost;
+exports.registerAllTools = registerAllTools;
+const zod_1 = require("zod");
+const roster_js_1 = require("../roster.js");
+const crypto_deposit_gate_js_1 = require("./crypto-deposit-gate.js");
+const index_js_1 = require("./readonly/index.js");
+const index_js_2 = require("./spend/index.js");
+const index_js_3 = require("./write/index.js");
+/** The two reads whose success shows the account has crypto deposits. */
+const DEPOSIT_READS = new Set(["deeprelay_deposits_list", "deeprelay_deposits_get"]);
+/**
+ * Adapt the low-level server's elicitation surface to the structural
+ * ElicitationHost the guardrail uses. In the pinned SDK, elicitInput lives on
+ * `server.server`, not on the per-request `extra` a tool callback receives.
+ */
+function elicitationHost(server) {
+    return {
+        getClientCapabilities: () => server.server.getClientCapabilities(),
+        elicitInput: async (params) => {
+            // The guardrail builds a form-mode request with primitive properties; the
+            // SDK's own schema check validates it again at send time.
+            const result = await server.server.elicitInput(params);
+            return { action: result.action, ...(result.content === undefined ? {} : { content: result.content }) };
+        },
+    };
+}
+/** Throw unless the definitions are exactly ALL_TOOLS, each once. */
+function assertRosterMatches(definitions) {
+    const seen = new Map();
+    for (const def of definitions) {
+        seen.set(def.name, (seen.get(def.name) ?? 0) + 1);
+    }
+    const expected = new Set(roster_js_1.ALL_TOOLS);
+    const missing = [...expected].filter((name) => !seen.has(name));
+    const extra = [...seen.keys()].filter((name) => !expected.has(name));
+    const duplicated = [...seen.entries()].filter(([, count]) => count > 1).map(([name]) => name);
+    const wronglyHidden = definitions
+        .filter((def) => def.enabledAtBoot === false && def.name !== crypto_deposit_gate_js_1.CRYPTO_DEPOSIT_TOOL)
+        .map((def) => def.name);
+    const problems = [];
+    if (missing.length > 0)
+        problems.push(`missing: ${missing.join(", ")}`);
+    if (extra.length > 0)
+        problems.push(`not in the roster: ${extra.join(", ")}`);
+    if (duplicated.length > 0)
+        problems.push(`registered twice: ${duplicated.join(", ")}`);
+    if (wronglyHidden.length > 0)
+        problems.push(`hidden at boot without a D-03 reason: ${wronglyHidden.join(", ")}`);
+    if (problems.length > 0) {
+        throw new Error(`deeprelay-mcp tool registry does not match the roster (${problems.join("; ")})`);
+    }
+}
+/** True when a deposit read's payload reports crypto deposits as enabled. */
+function readShowsCryptoEnabled(result) {
+    if (result.isError === true) {
+        return false;
+    }
+    const first = result.content[0];
+    if (first === undefined || first.type !== "text") {
+        return false;
+    }
+    try {
+        const payload = JSON.parse(first.text);
+        return (typeof payload === "object" &&
+            payload !== null &&
+            payload.crypto_deposits_enabled === true);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Register every roster tool on `server` and return the registered handles by
+ * name. The one door (D-13): a plain three-array walk.
+ */
+function registerAllTools(server) {
+    const definitions = [...index_js_1.readonlyTools, ...index_js_3.writeTools, ...index_js_2.spendTools];
+    assertRosterMatches(definitions);
+    const roster = new Map();
+    const host = elicitationHost(server);
+    for (const def of definitions) {
+        const inputSchema = def.tier === "read" ? def.inputSchema : zod_1.z.strictObject(def.inputSchema);
+        const watchesDeposits = DEPOSIT_READS.has(def.name);
+        const registered = server.registerTool(def.name, {
+            title: def.title,
+            description: def.description,
+            inputSchema,
+            annotations: { ...def.annotations },
+        }, async (args) => {
+            const result = await def.handler(args, { elicitation: host });
+            if (watchesDeposits && readShowsCryptoEnabled(result)) {
+                (0, crypto_deposit_gate_js_1.enableOnDepositsRead)(roster);
+            }
+            return result;
+        });
+        // D-03: registered, then hidden until the post-connect probe (or a deposit
+        // read) proves the account has crypto deposits. Offline: the SDK sends no
+        // list_changed before the transport is connected.
+        if (def.enabledAtBoot === false) {
+            registered.disable();
+        }
+        roster.set(def.name, registered);
+    }
+    return roster;
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;AAqDA,0CAUC;AAmDD,4CAsCC;AA1HD,6BAAwB;AAGxB,4CAAwD;AACxD,qEAAqF;AACrF,kDAAoD;AACpD,+CAA8C;AAE9C,+CAA8C;AAO9C,yEAAyE;AACzE,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAE1G;;;;GAIG;AACH,SAAgB,eAAe,CAAC,MAAiB;IAC/C,OAAO;QACL,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE;QAClE,WAAW,EAAE,KAAK,EAAE,MAAyB,EAA0B,EAAE;YACvE,0EAA0E;YAC1E,0DAA0D;YAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAyB,CAAC,CAAC;YAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACzG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,SAAS,mBAAmB,CAAC,WAAsC;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,qBAAS,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9F,MAAM,aAAa,GAAG,WAAW;SAC9B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,4CAAmB,CAAC;SAChF,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE1B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,yCAAyC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,0DAA0D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,MAAkB;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YACf,OAAiD,CAAC,uBAAuB,KAAK,IAAI,CACpF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,MAAiB;IAChD,MAAM,WAAW,GAAqB,CAAC,GAAG,wBAAa,EAAE,GAAG,qBAAU,EAAE,GAAG,qBAAU,CAAC,CAAC;IACvF,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5F,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEpD,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CACpC,GAAG,CAAC,IAAI,EACR;YACE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,WAAW;YACX,WAAW,EAAE,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE;SACpC,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,IAAI,eAAe,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtD,IAAA,6CAAoB,EAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;QAEF,2EAA2E;QAC3E,0EAA0E;QAC1E,kDAAkD;QAClD,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;YAChC,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/readonly/define.d.ts

@@ -0,0 +1,32 @@
+import type { Configuration } from "@deeprelay/sdk";
+import { z, type ZodRawShape } from "zod";
+import type { ReadToolName } from "../../roster.js";
+import type { Env, ToolAnnotations, ToolDefinition } from "../types.js";
+/**
+ * A read refusing on local grounds (not an API failure), in words already
+ * written for the agent. defineTool serializes it through fail() as-is rather
+ * than routing it through the SDK error mapper, which would prefix it as an
+ * "Unexpected error".
+ */
+export declare class ReadRefusal extends Error {
+    constructor(message: string);
+}
+/** Every read tool advertises the same four hints. */
+export declare const READ_ANNOTATIONS: ToolAnnotations;
+export interface ReadToolSpec<Shape extends ZodRawShape> {
+    name: ReadToolName;
+    title: string;
+    /** Agent-shaped: what it answers, when to call it, that it is free. */
+    description: string;
+    inputSchema: Shape;
+    /** What was being attempted, for error messages ("listing models"). */
+    context: string;
+    /**
+     * Build the Configuration even when DEEPRELAY_API_KEY is unset. Only the
+     * unauthenticated liveness probe sets this.
+     */
+    keyless?: boolean;
+    call(args: z.infer<z.ZodObject<Shape>>, config: Configuration, env: Env): Promise<unknown>;
+}
+/** Wrap a typed SDK call into a read-tier ToolDefinition. */
+export declare function defineTool<Shape extends ZodRawShape>(spec: ReadToolSpec<Shape>): ToolDefinition;

package/dist/tools/readonly/define.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.READ_ANNOTATIONS = exports.ReadRefusal = void 0;
+exports.defineTool = defineTool;
+const zod_1 = require("zod");
+const auth_js_1 = require("../../auth.js");
+const errors_js_1 = require("../../errors.js");
+const result_js_1 = require("../result.js");
+/**
+ * A read refusing on local grounds (not an API failure), in words already
+ * written for the agent. defineTool serializes it through fail() as-is rather
+ * than routing it through the SDK error mapper, which would prefix it as an
+ * "Unexpected error".
+ */
+class ReadRefusal extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ReadRefusal";
+    }
+}
+exports.ReadRefusal = ReadRefusal;
+/** Every read tool advertises the same four hints. */
+exports.READ_ANNOTATIONS = Object.freeze({
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true,
+});
+/** Wrap a typed SDK call into a read-tier ToolDefinition. */
+function defineTool(spec) {
+    const schema = zod_1.z.object(spec.inputSchema);
+    return {
+        name: spec.name,
+        tier: "read",
+        title: spec.title,
+        description: spec.description,
+        inputSchema: spec.inputSchema,
+        annotations: { ...exports.READ_ANNOTATIONS },
+        enabledAtBoot: true,
+        async handler(args, ctx) {
+            const env = ctx?.env ?? process.env;
+            let parsed;
+            let config;
+            try {
+                parsed = schema.parse(args ?? {});
+                config = (0, auth_js_1.buildConfiguration)(env, { allowMissingKey: spec.keyless === true });
+            }
+            catch (err) {
+                return (0, result_js_1.fail)((0, errors_js_1.mapSdkError)(err, spec.context, { env }), env);
+            }
+            try {
+                const payload = await spec.call(parsed, config, env);
+                return (0, result_js_1.ok)(payload, { env });
+            }
+            catch (err) {
+                if (err instanceof ReadRefusal) {
+                    return (0, result_js_1.fail)(err, env);
+                }
+                return (0, result_js_1.fail)(await (0, errors_js_1.mapSdkErrorAsync)(err, spec.context, env), env);
+            }
+        },
+    };
+}
+//# sourceMappingURL=define.js.map

package/dist/tools/readonly/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../../src/tools/readonly/define.ts"],"names":[],"mappings":";;;AA6DA,gCA+BC;AA7ED,6BAA0C;AAE1C,2CAAmD;AACnD,+CAAgE;AAEhE,4CAAwC;AAGxC;;;;;GAKG;AACH,MAAa,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AALD,kCAKC;AAED,sDAAsD;AACzC,QAAA,gBAAgB,GAAoB,MAAM,CAAC,MAAM,CAAC;IAC7D,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,KAAK;IACtB,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAkBH,6DAA6D;AAC7D,SAAgB,UAAU,CAA4B,IAAyB;IAC7E,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,EAAE,GAAG,wBAAgB,EAAE;QACpC,aAAa,EAAE,IAAI;QACnB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;YACrB,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;YACpC,IAAI,MAA8B,CAAC;YACnC,IAAI,MAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClC,MAAM,GAAG,IAAA,4BAAkB,EAAC,GAAG,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAA,gBAAI,EAAC,IAAA,uBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;gBACrD,OAAO,IAAA,cAAE,EAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;oBAC/B,OAAO,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO,IAAA,gBAAI,EAAC,MAAM,IAAA,4BAAgB,EAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/readonly/index.d.ts

@@ -0,0 +1,7 @@
+import type { ToolDefinition } from "../types.js";
+export { defineTool, READ_ANNOTATIONS } from "./define.js";
+export { observeVideoJob, VIDEO_TMP_DIR, videoReadTools } from "./video-reads.js";
+/** The in-process session budget (D-06/D-08), in dollars, with pending video holds. */
+export declare function renderSessionBudget(): Record<string, unknown>;
+/** The full read tier. Every name in roster READ_TOOLS appears here exactly once. */
+export declare const readonlyTools: ToolDefinition[];