@defai.digital/contracts 13.0.3

package/dist/mcp/v1/prompts/schema.js

@@ -0,0 +1,138 @@
+/**
+ * MCP Prompt Contracts
+ *
+ * Zod schemas for MCP prompts (user-controlled templates).
+ */
+import { z } from 'zod';
+// ============================================================================
+// Prompt Argument Schema
+// ============================================================================
+/**
+ * Prompt argument definition
+ */
+export const PromptArgumentSchema = z.object({
+    /** Argument name */
+    name: z.string().min(1),
+    /** Description of the argument */
+    description: z.string().optional(),
+    /** Whether the argument is required */
+    required: z.boolean().optional(),
+});
+// ============================================================================
+// Prompt Definition Schema
+// ============================================================================
+/**
+ * MCP Prompt definition
+ */
+export const McpPromptSchema = z.object({
+    /** Unique prompt name */
+    name: z.string().min(1),
+    /** Description of what the prompt does */
+    description: z.string().optional(),
+    /** Arguments the prompt accepts */
+    arguments: z.array(PromptArgumentSchema).optional(),
+});
+// ============================================================================
+// Prompt Message Schema
+// ============================================================================
+/**
+ * Message role
+ */
+export const PromptRoleSchema = z.enum(['user', 'assistant']);
+/**
+ * Message content
+ */
+export const PromptContentSchema = z.object({
+    type: z.literal('text'),
+    text: z.string(),
+});
+/**
+ * Prompt message
+ */
+export const PromptMessageSchema = z.object({
+    role: PromptRoleSchema,
+    content: PromptContentSchema,
+});
+// ============================================================================
+// Prompt List Response
+// ============================================================================
+/**
+ * Response for prompts/list method
+ */
+export const PromptListResponseSchema = z.object({
+    prompts: z.array(McpPromptSchema),
+});
+// ============================================================================
+// Get Prompt Response
+// ============================================================================
+/**
+ * Response for prompts/get method
+ */
+export const GetPromptResponseSchema = z.object({
+    description: z.string().optional(),
+    messages: z.array(PromptMessageSchema),
+});
+// ============================================================================
+// Prompt Error Codes
+// ============================================================================
+/**
+ * Prompt-specific error codes
+ */
+export const PromptErrorCode = {
+    PROMPT_NOT_FOUND: 'PROMPT_NOT_FOUND',
+    MISSING_REQUIRED_ARGUMENT: 'MISSING_REQUIRED_ARGUMENT',
+    INVALID_ARGUMENT: 'INVALID_ARGUMENT',
+};
+// ============================================================================
+// Validation Functions
+// ============================================================================
+/**
+ * Validates prompt definition
+ */
+export function validatePrompt(data) {
+    return McpPromptSchema.parse(data);
+}
+/**
+ * Validates prompt list response
+ */
+export function validatePromptListResponse(data) {
+    return PromptListResponseSchema.parse(data);
+}
+/**
+ * Validates get prompt response
+ */
+export function validateGetPromptResponse(data) {
+    return GetPromptResponseSchema.parse(data);
+}
+// ============================================================================
+// Helper Functions
+// ============================================================================
+/**
+ * Creates a prompt definition
+ */
+export function createPrompt(name, description, args) {
+    return {
+        name,
+        description,
+        arguments: args,
+    };
+}
+/**
+ * Creates a prompt message
+ */
+export function createPromptMessage(role, text) {
+    return {
+        role,
+        content: { type: 'text', text },
+    };
+}
+/**
+ * Creates a get prompt response
+ */
+export function createGetPromptResponse(messages, description) {
+    return {
+        description,
+        messages,
+    };
+}
+//# sourceMappingURL=schema.js.map

package/dist/mcp/v1/prompts/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../src/mcp/v1/prompts/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,oBAAoB;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,kCAAkC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,uCAAuC;IACvC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,yBAAyB;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,0CAA0C;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,mCAAmC;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAIH,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAI9D;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAC;AAIH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CAClC,CAAC,CAAC;AAIH,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACvC,CAAC,CAAC;AAIH,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,gBAAgB,EAAE,kBAAkB;IACpC,yBAAyB,EAAE,2BAA2B;IACtD,gBAAgB,EAAE,kBAAkB;CAC5B,CAAC;AAIX,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,OAAO,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACtD,OAAO,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAa;IACrD,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,WAAoB,EACpB,IAAuB;IAEvB,OAAO;QACL,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAgB,EAChB,IAAY;IAEZ,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAyB,EACzB,WAAoB;IAEpB,OAAO;QACL,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/mcp/v1/rate-limit.schema.d.ts

@@ -0,0 +1,175 @@
+/**
+ * MCP Tool Rate Limiting Contract
+ *
+ * Defines rate limiting schemas for MCP tools to prevent resource exhaustion
+ * from runaway agent loops or excessive tool calls.
+ *
+ * Invariants:
+ * - INV-RL-001: Rate limits are enforced per tool
+ * - INV-RL-002: Exceeded limits return RATE_LIMITED error with retryAfter
+ * - INV-RL-003: Limits are configurable without code changes
+ * - INV-RL-004: Read tools have higher limits than mutation tools
+ */
+import { z } from 'zod';
+/**
+ * Tool category for rate limiting purposes
+ * Different categories have different default limits
+ */
+export declare const ToolCategorySchema: z.ZodEnum<["execution", "mutation", "read"]>;
+export type ToolCategory = z.infer<typeof ToolCategorySchema>;
+/**
+ * Rate limit configuration for a single tool
+ */
+export declare const RateLimitConfigSchema: z.ZodObject<{
+    /** Requests per minute allowed */
+    rpm: z.ZodDefault<z.ZodNumber>;
+    /** Burst size (max requests in short window) */
+    burst: z.ZodDefault<z.ZodNumber>;
+    /** Whether rate limiting is enabled for this tool */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    rpm: number;
+    burst: number;
+}, {
+    enabled?: boolean | undefined;
+    rpm?: number | undefined;
+    burst?: number | undefined;
+}>;
+export type RateLimitConfig = z.infer<typeof RateLimitConfigSchema>;
+/**
+ * Rate limit state for tracking usage
+ */
+export declare const RateLimitStateSchema: z.ZodObject<{
+    /** Tool name */
+    toolName: z.ZodString;
+    /** Current request count in window */
+    requestCount: z.ZodNumber;
+    /** Window start timestamp (ISO string) */
+    windowStart: z.ZodString;
+    /** Tokens available for burst */
+    burstTokens: z.ZodNumber;
+    /** Last request timestamp */
+    lastRequest: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    toolName: string;
+    requestCount: number;
+    windowStart: string;
+    burstTokens: number;
+    lastRequest?: string | undefined;
+}, {
+    toolName: string;
+    requestCount: number;
+    windowStart: string;
+    burstTokens: number;
+    lastRequest?: string | undefined;
+}>;
+export type RateLimitState = z.infer<typeof RateLimitStateSchema>;
+/**
+ * Rate limit check result
+ */
+export declare const RateLimitResultSchema: z.ZodObject<{
+    /** Whether the request is allowed */
+    allowed: z.ZodBoolean;
+    /** Remaining requests in current window */
+    remaining: z.ZodNumber;
+    /** Seconds until rate limit resets */
+    resetIn: z.ZodNumber;
+    /** Seconds to wait before retrying (if not allowed) */
+    retryAfter: z.ZodOptional<z.ZodNumber>;
+    /** Current limit configuration */
+    limit: z.ZodObject<{
+        /** Requests per minute allowed */
+        rpm: z.ZodDefault<z.ZodNumber>;
+        /** Burst size (max requests in short window) */
+        burst: z.ZodDefault<z.ZodNumber>;
+        /** Whether rate limiting is enabled for this tool */
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        rpm: number;
+        burst: number;
+    }, {
+        enabled?: boolean | undefined;
+        rpm?: number | undefined;
+        burst?: number | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    limit: {
+        enabled: boolean;
+        rpm: number;
+        burst: number;
+    };
+    allowed: boolean;
+    remaining: number;
+    resetIn: number;
+    retryAfter?: number | undefined;
+}, {
+    limit: {
+        enabled?: boolean | undefined;
+        rpm?: number | undefined;
+        burst?: number | undefined;
+    };
+    allowed: boolean;
+    remaining: number;
+    resetIn: number;
+    retryAfter?: number | undefined;
+}>;
+export type RateLimitResult = z.infer<typeof RateLimitResultSchema>;
+/**
+ * Rate limit error response
+ * INV-RL-002: Exceeded limits return RATE_LIMITED error with retryAfter
+ */
+export declare const RateLimitErrorSchema: z.ZodObject<{
+    code: z.ZodLiteral<"RATE_LIMITED">;
+    message: z.ZodString;
+    toolName: z.ZodString;
+    retryAfter: z.ZodNumber;
+    limit: z.ZodNumber;
+    windowSeconds: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    code: "RATE_LIMITED";
+    message: string;
+    toolName: string;
+    limit: number;
+    retryAfter: number;
+    windowSeconds: number;
+}, {
+    code: "RATE_LIMITED";
+    message: string;
+    toolName: string;
+    limit: number;
+    retryAfter: number;
+    windowSeconds: number;
+}>;
+export type RateLimitError = z.infer<typeof RateLimitErrorSchema>;
+/**
+ * Default rate limits by tool category
+ * INV-RL-004: Read tools have higher limits than mutation tools
+ */
+export declare const DEFAULT_RATE_LIMITS: Record<ToolCategory, RateLimitConfig>;
+/**
+ * Tool to category mapping
+ */
+export declare const TOOL_CATEGORIES: Record<string, ToolCategory>;
+/**
+ * Gets the category for a tool
+ */
+export declare function getToolCategory(toolName: string): ToolCategory;
+/**
+ * Gets the default rate limit for a tool based on its category
+ */
+export declare function getDefaultRateLimit(toolName: string): RateLimitConfig;
+/**
+ * Creates a rate limit error response
+ */
+export declare function createRateLimitError(toolName: string, retryAfter: number, limit: number): RateLimitError;
+/**
+ * Validates rate limit config
+ */
+export declare function validateRateLimitConfig(data: unknown): RateLimitConfig;
+/**
+ * Safely validates rate limit config
+ */
+export declare function safeValidateRateLimitConfig(data: unknown): z.SafeParseReturnType<unknown, RateLimitConfig>;
+//# sourceMappingURL=rate-limit.schema.d.ts.map

package/dist/mcp/v1/rate-limit.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.schema.d.ts","sourceRoot":"","sources":["../../../src/mcp/v1/rate-limit.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,kBAAkB,8CAI7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,qBAAqB;IAChC,kCAAkC;;IAGlC,gDAAgD;;IAGhD,qDAAqD;;;;;;;;;;EAErD,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,oBAAoB;IAC/B,gBAAgB;;IAGhB,sCAAsC;;IAGtC,0CAA0C;;IAG1C,iCAAiC;;IAGjC,6BAA6B;;;;;;;;;;;;;;EAE7B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,qBAAqB;IAChC,qCAAqC;;IAGrC,2CAA2C;;IAG3C,sCAAsC;;IAGtC,uDAAuD;;IAGvD,kCAAkC;;QAlDlC,kCAAkC;;QAGlC,gDAAgD;;QAGhD,qDAAqD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8CrD,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,CAIrE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAuCxD,CAAC;AAEF;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAE9D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAGrE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ,cAAc,CAShB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAEtE;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,OAAO,GACZ,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAEjD"}

package/dist/mcp/v1/rate-limit.schema.js

@@ -0,0 +1,164 @@
+/**
+ * MCP Tool Rate Limiting Contract
+ *
+ * Defines rate limiting schemas for MCP tools to prevent resource exhaustion
+ * from runaway agent loops or excessive tool calls.
+ *
+ * Invariants:
+ * - INV-RL-001: Rate limits are enforced per tool
+ * - INV-RL-002: Exceeded limits return RATE_LIMITED error with retryAfter
+ * - INV-RL-003: Limits are configurable without code changes
+ * - INV-RL-004: Read tools have higher limits than mutation tools
+ */
+import { z } from 'zod';
+/**
+ * Tool category for rate limiting purposes
+ * Different categories have different default limits
+ */
+export const ToolCategorySchema = z.enum([
+    'execution', // agent_run, workflow_run - most restricted
+    'mutation', // memory_store, session_create - moderate
+    'read', // memory_retrieve, agent_list - least restricted
+]);
+/**
+ * Rate limit configuration for a single tool
+ */
+export const RateLimitConfigSchema = z.object({
+    /** Requests per minute allowed */
+    rpm: z.number().int().min(1).max(10000).default(100),
+    /** Burst size (max requests in short window) */
+    burst: z.number().int().min(1).max(1000).default(10),
+    /** Whether rate limiting is enabled for this tool */
+    enabled: z.boolean().default(true),
+});
+/**
+ * Rate limit state for tracking usage
+ */
+export const RateLimitStateSchema = z.object({
+    /** Tool name */
+    toolName: z.string(),
+    /** Current request count in window */
+    requestCount: z.number().int().min(0),
+    /** Window start timestamp (ISO string) */
+    windowStart: z.string().datetime(),
+    /** Tokens available for burst */
+    burstTokens: z.number().int().min(0),
+    /** Last request timestamp */
+    lastRequest: z.string().datetime().optional(),
+});
+/**
+ * Rate limit check result
+ */
+export const RateLimitResultSchema = z.object({
+    /** Whether the request is allowed */
+    allowed: z.boolean(),
+    /** Remaining requests in current window */
+    remaining: z.number().int().min(0),
+    /** Seconds until rate limit resets */
+    resetIn: z.number().int().min(0),
+    /** Seconds to wait before retrying (if not allowed) */
+    retryAfter: z.number().int().min(0).optional(),
+    /** Current limit configuration */
+    limit: RateLimitConfigSchema,
+});
+/**
+ * Rate limit error response
+ * INV-RL-002: Exceeded limits return RATE_LIMITED error with retryAfter
+ */
+export const RateLimitErrorSchema = z.object({
+    code: z.literal('RATE_LIMITED'),
+    message: z.string(),
+    toolName: z.string(),
+    retryAfter: z.number().int().min(0),
+    limit: z.number().int(),
+    windowSeconds: z.number().int(),
+});
+/**
+ * Default rate limits by tool category
+ * INV-RL-004: Read tools have higher limits than mutation tools
+ */
+export const DEFAULT_RATE_LIMITS = {
+    execution: { rpm: 30, burst: 5, enabled: true },
+    mutation: { rpm: 100, burst: 20, enabled: true },
+    read: { rpm: 200, burst: 50, enabled: true },
+};
+/**
+ * Tool to category mapping
+ */
+export const TOOL_CATEGORIES = {
+    // Execution tools - most restricted
+    agent_run: 'execution',
+    workflow_run: 'execution',
+    // Mutation tools - moderate limits
+    memory_store: 'mutation',
+    memory_delete: 'mutation',
+    session_create: 'mutation',
+    session_complete: 'mutation',
+    session_join: 'mutation',
+    session_leave: 'mutation',
+    session_fail: 'mutation',
+    agent_register: 'mutation',
+    agent_remove: 'mutation',
+    config_set: 'mutation',
+    guard_apply: 'mutation',
+    // Read tools - highest limits
+    memory_retrieve: 'read',
+    memory_search: 'read',
+    memory_list: 'read',
+    agent_list: 'read',
+    agent_get: 'read',
+    session_status: 'read',
+    session_list: 'read',
+    workflow_list: 'read',
+    workflow_describe: 'read',
+    trace_list: 'read',
+    trace_get: 'read',
+    trace_analyze: 'read',
+    guard_check: 'read',
+    guard_list: 'read',
+    config_get: 'read',
+    config_show: 'read',
+    ability_list: 'read',
+    ability_inject: 'read',
+    review_analyze: 'read',
+    review_list: 'read',
+};
+/**
+ * Gets the category for a tool
+ */
+export function getToolCategory(toolName) {
+    return TOOL_CATEGORIES[toolName] ?? 'read';
+}
+/**
+ * Gets the default rate limit for a tool based on its category
+ */
+export function getDefaultRateLimit(toolName) {
+    const category = getToolCategory(toolName);
+    return { ...DEFAULT_RATE_LIMITS[category] };
+}
+/**
+ * Creates a rate limit error response
+ */
+export function createRateLimitError(toolName, retryAfter, limit) {
+    return {
+        code: 'RATE_LIMITED',
+        message: `Rate limit exceeded for tool "${toolName}". Retry after ${retryAfter} seconds.`,
+        toolName,
+        retryAfter,
+        limit,
+        windowSeconds: 60,
+    };
+}
+/**
+ * Validates rate limit config
+ */
+export function validateRateLimitConfig(data) {
+    return RateLimitConfigSchema.parse(data);
+}
+/**
+ * Safely validates rate limit config
+ */
+export function safeValidateRateLimitConfig(data) {
+    return RateLimitConfigSchema.safeParse(data);
+}
+//# sourceMappingURL=rate-limit.schema.js.map

package/dist/mcp/v1/rate-limit.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.schema.js","sourceRoot":"","sources":["../../../src/mcp/v1/rate-limit.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,WAAW,EAAG,4CAA4C;IAC1D,UAAU,EAAI,0CAA0C;IACxD,MAAM,EAAQ,iDAAiD;CAChE,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,kCAAkC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAEpD,gDAAgD;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEpD,qDAAqD;IACrD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,gBAAgB;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpB,sCAAsC;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAErC,0CAA0C;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,iCAAiC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEpC,6BAA6B;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,qCAAqC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IAEpB,2CAA2C;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAElC,sCAAsC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhC,uDAAuD;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE9C,kCAAkC;IAClC,KAAK,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAChC,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA0C;IACxE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;IAC/C,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAChD,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAiC;IAC3D,oCAAoC;IACpC,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,WAAW;IAEzB,mCAAmC;IACnC,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,UAAU;IACzB,cAAc,EAAE,UAAU;IAC1B,gBAAgB,EAAE,UAAU;IAC5B,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,UAAU;IACxB,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,UAAU;IACxB,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;IAEvB,8BAA8B;IAC9B,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,MAAM;IACzB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,MAAM;IACnB,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,MAAM;IAClB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,cAAc,EAAE,MAAM;IACtB,cAAc,EAAE,MAAM;IACtB,WAAW,EAAE,MAAM;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,UAAkB,EAClB,KAAa;IAEb,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,iCAAiC,QAAQ,kBAAkB,UAAU,WAAW;QACzF,QAAQ;QACR,UAAU;QACV,KAAK;QACL,aAAa,EAAE,EAAE;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACnD,OAAO,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAa;IAEb,OAAO,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC"}

package/dist/mcp/v1/resources/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * MCP Resource Contracts Index
+ */
+export { McpResourceSchema, ResourceListResponseSchema, ResourceContentSchema, ResourceReadResponseSchema, ResourceErrorCode, validateResource, validateResourceListResponse, validateResourceReadResponse, createResource, createResourceContent, type McpResource, type ResourceListResponse, type ResourceContent, type ResourceReadResponse, } from './schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/v1/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/mcp/v1/resources/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,4BAA4B,EAC5B,4BAA4B,EAC5B,cAAc,EACd,qBAAqB,EACrB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC"}

package/dist/mcp/v1/resources/index.js

@@ -0,0 +1,5 @@
+/**
+ * MCP Resource Contracts Index
+ */
+export { McpResourceSchema, ResourceListResponseSchema, ResourceContentSchema, ResourceReadResponseSchema, ResourceErrorCode, validateResource, validateResourceListResponse, validateResourceReadResponse, createResource, createResourceContent, } from './schema.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/v1/resources/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/mcp/v1/resources/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,4BAA4B,EAC5B,4BAA4B,EAC5B,cAAc,EACd,qBAAqB,GAKtB,MAAM,aAAa,CAAC"}

package/dist/mcp/v1/resources/schema.d.ts

@@ -0,0 +1,169 @@
+/**
+ * MCP Resource Contracts
+ *
+ * Zod schemas for MCP resources (application-controlled, read-only data).
+ *
+ * Invariants:
+ * - INV-MCP-RES-001: Resources are read-only
+ * - INV-MCP-RES-002: URI patterns follow RFC 3986
+ * - INV-MCP-RES-003: Content returned as JSON text
+ */
+import { z } from 'zod';
+/**
+ * MCP Resource definition
+ */
+export declare const McpResourceSchema: z.ZodObject<{
+    /** Unique resource identifier (URI format) */
+    uri: z.ZodString;
+    /** Human-readable name */
+    name: z.ZodString;
+    /** Description of the resource */
+    description: z.ZodOptional<z.ZodString>;
+    /** MIME type of resource content */
+    mimeType: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    uri: string;
+    mimeType: string;
+    description?: string | undefined;
+}, {
+    name: string;
+    uri: string;
+    description?: string | undefined;
+    mimeType?: string | undefined;
+}>;
+export type McpResource = z.infer<typeof McpResourceSchema>;
+/**
+ * Response for resources/list method
+ */
+export declare const ResourceListResponseSchema: z.ZodObject<{
+    resources: z.ZodArray<z.ZodObject<{
+        /** Unique resource identifier (URI format) */
+        uri: z.ZodString;
+        /** Human-readable name */
+        name: z.ZodString;
+        /** Description of the resource */
+        description: z.ZodOptional<z.ZodString>;
+        /** MIME type of resource content */
+        mimeType: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        uri: string;
+        mimeType: string;
+        description?: string | undefined;
+    }, {
+        name: string;
+        uri: string;
+        description?: string | undefined;
+        mimeType?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    resources: {
+        name: string;
+        uri: string;
+        mimeType: string;
+        description?: string | undefined;
+    }[];
+}, {
+    resources: {
+        name: string;
+        uri: string;
+        description?: string | undefined;
+        mimeType?: string | undefined;
+    }[];
+}>;
+export type ResourceListResponse = z.infer<typeof ResourceListResponseSchema>;
+/**
+ * Content item returned when reading a resource
+ */
+export declare const ResourceContentSchema: z.ZodObject<{
+    /** URI of the resource */
+    uri: z.ZodString;
+    /** MIME type of the content */
+    mimeType: z.ZodString;
+    /** Text content (for text-based resources) */
+    text: z.ZodOptional<z.ZodString>;
+    /** Base64-encoded binary content */
+    blob: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    uri: string;
+    mimeType: string;
+    text?: string | undefined;
+    blob?: string | undefined;
+}, {
+    uri: string;
+    mimeType: string;
+    text?: string | undefined;
+    blob?: string | undefined;
+}>;
+export type ResourceContent = z.infer<typeof ResourceContentSchema>;
+/**
+ * Response for resources/read method
+ */
+export declare const ResourceReadResponseSchema: z.ZodObject<{
+    contents: z.ZodArray<z.ZodObject<{
+        /** URI of the resource */
+        uri: z.ZodString;
+        /** MIME type of the content */
+        mimeType: z.ZodString;
+        /** Text content (for text-based resources) */
+        text: z.ZodOptional<z.ZodString>;
+        /** Base64-encoded binary content */
+        blob: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        uri: string;
+        mimeType: string;
+        text?: string | undefined;
+        blob?: string | undefined;
+    }, {
+        uri: string;
+        mimeType: string;
+        text?: string | undefined;
+        blob?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    contents: {
+        uri: string;
+        mimeType: string;
+        text?: string | undefined;
+        blob?: string | undefined;
+    }[];
+}, {
+    contents: {
+        uri: string;
+        mimeType: string;
+        text?: string | undefined;
+        blob?: string | undefined;
+    }[];
+}>;
+export type ResourceReadResponse = z.infer<typeof ResourceReadResponseSchema>;
+/**
+ * Resource-specific error codes
+ */
+export declare const ResourceErrorCode: {
+    readonly RESOURCE_NOT_FOUND: "RESOURCE_NOT_FOUND";
+    readonly INVALID_URI: "INVALID_URI";
+    readonly READ_FAILED: "READ_FAILED";
+};
+export type ResourceErrorCode = (typeof ResourceErrorCode)[keyof typeof ResourceErrorCode];
+/**
+ * Validates resource definition
+ */
+export declare function validateResource(data: unknown): McpResource;
+/**
+ * Validates resource list response
+ */
+export declare function validateResourceListResponse(data: unknown): ResourceListResponse;
+/**
+ * Validates resource read response
+ */
+export declare function validateResourceReadResponse(data: unknown): ResourceReadResponse;
+/**
+ * Creates a resource definition
+ */
+export declare function createResource(uri: string, name: string, description?: string, mimeType?: string): McpResource;
+/**
+ * Creates resource content
+ */
+export declare function createResourceContent(uri: string, content: unknown, mimeType?: string): ResourceContent;
+//# sourceMappingURL=schema.d.ts.map