@descryy/mcp 0.5.0 → 0.7.0

package/dist/action-handshake.d.ts

@@ -1,66 +1,8 @@
-/**
- * The two-call action-tool handshake — `ai-tool-contract.md` §7, DEC-278's
- * `action` class.
- *
- * G5, the action gate, does not run in MCP mode: no pipeline sits between an
- * external model and this server, so there is no control flow to hold the
- * gate. The handshake is what replaces it. An unconfirmed call to an
- * `action`-class tool performs nothing and returns a token plus a
- * plain-English description of what confirming would do; only a second call
- * presenting that exact token performs anything, and it performs the
- * arguments frozen when the token was minted — never whatever the second
- * call happens to supply. **The gate holds without the client's
- * cooperation, because the server owns both the decision and the state.**
- *
- * ## Generic by construction
- *
- * A tool takes part by declaring `class: "action"` and providing
- * `describeAction`, nothing else — the mint/redeem/expiry/single-use
- * machinery below is shared by every present and future action tool rather
- * than reimplemented per tool. `describeAction` returning `undefined` means
- * *this particular call* has nothing to confirm — `questions` called with no
- * `answer` is a pure read of the open-question queue, and gating that behind
- * a token would make the tool unable to answer the first question asked of
- * it (the same failure §4 names for over-gating `stateful-read`).
- *
- * ## The seam with the server's dispatch loop
- *
- * `resolveActionDispatch` decides *before* the caller's budget timer starts:
- * a mint has no real work to time out on (no I/O, no `tool.run`), so it must
- * not be raced against `tools.md` §6's budget the way a real call is. The
- * caller (`server.ts`) checks `decision.kind` — `"handshake"` renders via
- * `render.ts`'s `renderHandshake` immediately; `"run"` proceeds exactly as
- * an ungated call would, using `decision.args` (the original arguments for
- * a `read`/`stateful-read` tool or a pass-through `action` call, or the
- * arguments captured at mint time for a redeemed one).
- *
- * ## Token design, decided here because nothing upstream decides it
- *
- * - **Binds to call 1's exact arguments.** The token is not a bare
- *   capability — it is minted together with a stored copy of the arguments
- *   that produced its `willDo`. Redeeming it runs *that* stored copy,
- *   ignoring whatever the redeeming call supplies alongside the token. A
- *   client cannot describe one action and, on confirmation, have a
- *   different one performed.
- * - **Single-use.** A token is deleted from the store the moment it is
- *   looked up for redemption, whether or not that redemption goes on to
- *   succeed — replay is not a retry, and a caller that wants to do the same
- *   thing twice must be told about it twice.
- * - **Five-minute expiry.** A starting value, not a measurement (no
- *   confirmation flow has run yet to measure a real gap between mint and
- *   confirm) — long enough for a human or a model to read `willDo` and
- *   decide, short enough that a token is not a standing credential.
- * - **Unknown, expired or wrong-tool token → `ToolInputError`, never a
- *   silent no-op.** This is an argument the caller can fix (ask again,
- *   without `confirmToken`, for a fresh one) so it takes the same path as
- *   any other bad argument — a tool result the caller can read and act on,
- *   not a protocol error and not a quiet success that performed nothing.
- * - **Session-scoped.** One MCP server process serves exactly one `Session`
- *   (`McpServerOptions` takes a single session, not a pool), so the store is
- *   keyed on the `Session` instance via a `WeakMap` rather than kept as
- *   module-global mutable state — the scoping a second session would need is
- *   already correct without anything having to change if one is ever added.
- */
+/** Two-call action-tool handshake, §7/DEC-278. G5 doesn't run in MCP mode, so this replaces it —
+ *  the server owns both decision and state, holding the gate without client cooperation. A tool
+ *  opts in via `class: "action"` + `describeAction`. Token binds to call 1's exact args
+ *  (redemption ignores anything else supplied), is single-use, expires in 5 minutes (a starting
+ *  value), and any bad token throws `ToolInputError` rather than a silent no-op. */
 import { type ToolContext, type ToolDefinition } from "./tools/kit.ts";
 export type ActionDispatch = {
     readonly kind: "run";
@@ -70,17 +12,8 @@ export type ActionDispatch = {
     readonly token: string;
     readonly willDo: string;
 };
-/**
- * Decides what a call to `tool` should do, before any budget timer starts.
- *
- * `read` and `stateful-read` tools, and an `action` tool whose
- * `describeAction` says this call has nothing to confirm, resolve to
- * `{ kind: "run", args }` with `args` unchanged. An unconfirmed call to a
- * gated `action` tool resolves to `{ kind: "handshake", token, willDo }` —
- * the caller must render this directly and must not call `tool.run`. A
- * confirmed call (an `args.confirmToken` that redeems) resolves to `{ kind:
- * "run", args }` with `args` replaced by the arguments captured at mint
- * time.
- */
+/** Decides what a call should do, before any budget timer starts. `read`/`stateful-read` and an
+ *  ungated `action` call resolve to `{ kind: "run", args }`; an unconfirmed gated call resolves to
+ *  `{ kind: "handshake", token, willDo }`; a redeemed one runs the args captured at mint time. */
 export declare function resolveActionDispatch(tool: ToolDefinition, args: Record<string, unknown>, ctx: ToolContext): Promise<ActionDispatch>;
 //# sourceMappingURL=action-handshake.d.ts.map

package/dist/action-handshake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-handshake.d.ts","sourceRoot":"","sources":["../src/action-handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAIH,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAiCvF,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,cAAc,CAAC,CAazB"}
+{"version":3,"file":"action-handshake.d.ts","sourceRoot":"","sources":["../src/action-handshake.ts"],"names":[],"mappings":"AAAA;;;;oFAIoF;AAIpF,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAiCvF,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF;;kGAEkG;AAClG,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,cAAc,CAAC,CAazB"}

package/dist/action-handshake.js

@@ -1,66 +1,8 @@
-/**
- * The two-call action-tool handshake — `ai-tool-contract.md` §7, DEC-278's
- * `action` class.
- *
- * G5, the action gate, does not run in MCP mode: no pipeline sits between an
- * external model and this server, so there is no control flow to hold the
- * gate. The handshake is what replaces it. An unconfirmed call to an
- * `action`-class tool performs nothing and returns a token plus a
- * plain-English description of what confirming would do; only a second call
- * presenting that exact token performs anything, and it performs the
- * arguments frozen when the token was minted — never whatever the second
- * call happens to supply. **The gate holds without the client's
- * cooperation, because the server owns both the decision and the state.**
- *
- * ## Generic by construction
- *
- * A tool takes part by declaring `class: "action"` and providing
- * `describeAction`, nothing else — the mint/redeem/expiry/single-use
- * machinery below is shared by every present and future action tool rather
- * than reimplemented per tool. `describeAction` returning `undefined` means
- * *this particular call* has nothing to confirm — `questions` called with no
- * `answer` is a pure read of the open-question queue, and gating that behind
- * a token would make the tool unable to answer the first question asked of
- * it (the same failure §4 names for over-gating `stateful-read`).
- *
- * ## The seam with the server's dispatch loop
- *
- * `resolveActionDispatch` decides *before* the caller's budget timer starts:
- * a mint has no real work to time out on (no I/O, no `tool.run`), so it must
- * not be raced against `tools.md` §6's budget the way a real call is. The
- * caller (`server.ts`) checks `decision.kind` — `"handshake"` renders via
- * `render.ts`'s `renderHandshake` immediately; `"run"` proceeds exactly as
- * an ungated call would, using `decision.args` (the original arguments for
- * a `read`/`stateful-read` tool or a pass-through `action` call, or the
- * arguments captured at mint time for a redeemed one).
- *
- * ## Token design, decided here because nothing upstream decides it
- *
- * - **Binds to call 1's exact arguments.** The token is not a bare
- *   capability — it is minted together with a stored copy of the arguments
- *   that produced its `willDo`. Redeeming it runs *that* stored copy,
- *   ignoring whatever the redeeming call supplies alongside the token. A
- *   client cannot describe one action and, on confirmation, have a
- *   different one performed.
- * - **Single-use.** A token is deleted from the store the moment it is
- *   looked up for redemption, whether or not that redemption goes on to
- *   succeed — replay is not a retry, and a caller that wants to do the same
- *   thing twice must be told about it twice.
- * - **Five-minute expiry.** A starting value, not a measurement (no
- *   confirmation flow has run yet to measure a real gap between mint and
- *   confirm) — long enough for a human or a model to read `willDo` and
- *   decide, short enough that a token is not a standing credential.
- * - **Unknown, expired or wrong-tool token → `ToolInputError`, never a
- *   silent no-op.** This is an argument the caller can fix (ask again,
- *   without `confirmToken`, for a fresh one) so it takes the same path as
- *   any other bad argument — a tool result the caller can read and act on,
- *   not a protocol error and not a quiet success that performed nothing.
- * - **Session-scoped.** One MCP server process serves exactly one `Session`
- *   (`McpServerOptions` takes a single session, not a pool), so the store is
- *   keyed on the `Session` instance via a `WeakMap` rather than kept as
- *   module-global mutable state — the scoping a second session would need is
- *   already correct without anything having to change if one is ever added.
- */
+/** Two-call action-tool handshake, §7/DEC-278. G5 doesn't run in MCP mode, so this replaces it —
+ *  the server owns both decision and state, holding the gate without client cooperation. A tool
+ *  opts in via `class: "action"` + `describeAction`. Token binds to call 1's exact args
+ *  (redemption ignores anything else supplied), is single-use, expires in 5 minutes (a starting
+ *  value), and any bad token throws `ToolInputError` rather than a silent no-op. */
 import { randomBytes } from "node:crypto";
 import { ToolInputError } from "./tools/kit.js";
 const TOKEN_TTL_MS = 5 * 60 * 1000;
@@ -83,18 +25,9 @@ function prune(store) {
 function mintToken() {
     return `act_${randomBytes(9).toString("base64url")}`;
 }
-/**
- * Decides what a call to `tool` should do, before any budget timer starts.
- *
- * `read` and `stateful-read` tools, and an `action` tool whose
- * `describeAction` says this call has nothing to confirm, resolve to
- * `{ kind: "run", args }` with `args` unchanged. An unconfirmed call to a
- * gated `action` tool resolves to `{ kind: "handshake", token, willDo }` —
- * the caller must render this directly and must not call `tool.run`. A
- * confirmed call (an `args.confirmToken` that redeems) resolves to `{ kind:
- * "run", args }` with `args` replaced by the arguments captured at mint
- * time.
- */
+/** Decides what a call should do, before any budget timer starts. `read`/`stateful-read` and an
+ *  ungated `action` call resolve to `{ kind: "run", args }`; an unconfirmed gated call resolves to
+ *  `{ kind: "handshake", token, willDo }`; a redeemed one runs the args captured at mint time. */
 export async function resolveActionDispatch(tool, args, ctx) {
     if (tool.class !== "action")
         return { kind: "run", args };
@@ -109,10 +42,7 @@ export async function resolveActionDispatch(tool, args, ctx) {
 }
 async function mintOrPassThrough(tool, args, ctx) {
     if (tool.describeAction === undefined) {
-        // A bug in the tool registry, not a caller mistake: an author declared
-        // `class: "action"` without saying how to describe it. Thrown, not
-        // returned as a refusal — there is no argument the caller could change
-        // to fix this.
+        // Registry bug, not a caller mistake: `class: "action"` declared with no describeAction.
         throw new Error(`${tool.name} declares class "action" but has no describeAction`);
     }
     const willDo = await tool.describeAction(args, ctx);

package/dist/action-handshake.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-handshake.js","sourceRoot":"","sources":["../src/action-handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAyC,MAAM,gBAAgB,CAAC;AAGvF,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAQnC,MAAM,eAAe,GAAG,IAAI,OAAO,EAAuC,CAAC;AAE3E,SAAS,QAAQ,CAAC,OAAgB;IAChC,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QAClB,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAiC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG;YAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACvD,CAAC;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAoB,EACpB,IAA6B,EAC7B,GAAgB;IAEhB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,cAAc,CAAC,iCAAiC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAoB,EACpB,IAA6B,EAC7B,GAAgB;IAEhB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,eAAe;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAEtF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,YAAoB,EAAE,GAAgB;IAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,sEAAsE;IACtE,6CAA6C;IAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,cAAc,CACtB,uDAAuD,IAAI,CAAC,IAAI,8CAA8C,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CACtB,gCAAgC,IAAI,CAAC,IAAI,8CAA8C,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CAAC,qCAAqC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"action-handshake.js","sourceRoot":"","sources":["../src/action-handshake.ts"],"names":[],"mappings":"AAAA;;;;oFAIoF;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAyC,MAAM,gBAAgB,CAAC;AAGvF,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAQnC,MAAM,eAAe,GAAG,IAAI,OAAO,EAAuC,CAAC;AAE3E,SAAS,QAAQ,CAAC,OAAgB;IAChC,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QAClB,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAiC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG;YAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACvD,CAAC;AAMD;;kGAEkG;AAClG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAoB,EACpB,IAA6B,EAC7B,GAAgB;IAEhB,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,cAAc,CAAC,iCAAiC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAoB,EACpB,IAA6B,EAC7B,GAAgB;IAEhB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,yFAAyF;QACzF,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;IAEtF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAoB,EAAE,YAAoB,EAAE,GAAgB;IAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,sEAAsE;IACtE,6CAA6C;IAC7C,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,cAAc,CACtB,uDAAuD,IAAI,CAAC,IAAI,8CAA8C,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CACtB,gCAAgC,IAAI,CAAC,IAAI,8CAA8C,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CAAC,qCAAqC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC"}

package/dist/bin/descry-mcp.d.ts

@@ -1,18 +1,7 @@
 #!/usr/bin/env node
-/**
- * The executable an MCP host launches.
- *
- * Takes the repository path as its only argument, defaulting to the working
- * directory — which is what a host passes when it starts the server inside a
- * project. Everything else comes from `.descry/config.json`.
- *
- * ## Nothing may print before the transport is installed
- *
- * `serveStdio` redirects every console channel to stderr on its first line. Any
- * output *before* that call goes to real stdout and corrupts the very first
- * frame — the handshake — which is the worst place to fail, because the host
- * reports it as "server did not start" with no further detail. So this file
- * writes nothing itself and does its argument handling before opening anything.
- */
+/** The executable an MCP host launches. Takes the repo path (default cwd); everything else comes
+ *  from `.descry/config.json`. `serveStdio` redirects console to stderr on its first line, so this
+ *  file writes nothing before opening anything — earlier output corrupts the handshake frame, the
+ *  worst place to fail (host just reports "server did not start"). */
 export {};
 //# sourceMappingURL=descry-mcp.d.ts.map

package/dist/bin/descry-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"descry-mcp.d.ts","sourceRoot":"","sources":["../../src/bin/descry-mcp.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"descry-mcp.d.ts","sourceRoot":"","sources":["../../src/bin/descry-mcp.ts"],"names":[],"mappings":";AACA;;;sEAGsE"}

package/dist/bin/descry-mcp.js

@@ -1,19 +1,8 @@
 #!/usr/bin/env node
-/**
- * The executable an MCP host launches.
- *
- * Takes the repository path as its only argument, defaulting to the working
- * directory — which is what a host passes when it starts the server inside a
- * project. Everything else comes from `.descry/config.json`.
- *
- * ## Nothing may print before the transport is installed
- *
- * `serveStdio` redirects every console channel to stderr on its first line. Any
- * output *before* that call goes to real stdout and corrupts the very first
- * frame — the handshake — which is the worst place to fail, because the host
- * reports it as "server did not start" with no further detail. So this file
- * writes nothing itself and does its argument handling before opening anything.
- */
+/** The executable an MCP host launches. Takes the repo path (default cwd); everything else comes
+ *  from `.descry/config.json`. `serveStdio` redirects console to stderr on its first line, so this
+ *  file writes nothing before opening anything — earlier output corrupts the handshake frame, the
+ *  worst place to fail (host just reports "server did not start"). */
 import process from "node:process";
 import { createRequire } from "node:module";
 import { resolve } from "node:path";
@@ -21,17 +10,9 @@ import { createMcpServer, isOutOfBand } from "../server.js";
 import { Session } from "../session.js";
 import { serveStdio } from "../transport.js";
 import { createPlaywrightBrowserDriver } from "../browser/playwright-driver.js";
-/**
- * The version this build actually is, read from the installed package rather
- * than written here.
- *
- * It was the literal `"0.0.0"` for every release, so every host reported the
- * same version no matter which package it was running — and that is not a
- * cosmetic gap. `@descryy/mcp` 0.1.2 went to npm from a branch that never
- * reached `main`, carrying a tool `main` did not have, and nothing any host
- * could see said so: `tools/list` showed seventeen tools and `serverInfo` said
- * 0.0.0. A server that cannot say what it is cannot be caught drifting.
- */
+/** Read from the installed package, not hardcoded. It used to be literal `"0.0.0"` for every
+ *  release, so no host could tell that 0.1.2 shipped from an off-main branch with an extra tool —
+ *  a server that can't say what it is can't be caught drifting. */
 const VERSION = (() => {
     try {
         const pkg = createRequire(import.meta.url)("../../package.json");
@@ -58,15 +39,9 @@ async function main() {
     }
     const repoPath = resolve(args[0] ?? process.cwd());
     const session = await Session.open({ repoPath });
-    // The nine browser_* tools ask `session.browserBackend()` for a driver
-    // factory and get `BROWSER_BACKEND_NOT_INSTALLED` unless one is installed
-    // here — `Session` itself never defaults `#browserDriverFactory` away from
-    // null. Without this line the tools refuse unconditionally in every real
-    // MCP host regardless of what is installed: declaring the dependency in
-    // package.json makes `@descryy/runtime-browser` resolvable, not reachable.
-    // `createPlaywrightBrowserDriver` itself still turns a missing package, a
-    // failed import or a missing Chromium binary into a named refusal rather
-    // than a crash — this wiring does not change that.
+    // Session never defaults this driver factory away from null; without this line every browser_*
+    // tool refuses unconditionally regardless of what's installed. createPlaywrightBrowserDriver
+    // still turns a missing package/binary into a named refusal, not a crash.
     session.useBrowserDriverFactory((options) => createPlaywrightBrowserDriver(options));
     const server = createMcpServer({ session, name: "descry", version: VERSION });
     try {
@@ -77,13 +52,8 @@ async function main() {
         return 0;
     }
     finally {
-        // The SQLite handle and anything else with a lifetime. Held open past the
-        // end of stdin, a WAL journal outlives the process that owned it.
-        //
-        // `dispose`, not `close`, because end-of-stdin is how an MCP host says
-        // "disconnect" — and §4 requires that signal to reap every browser this
-        // connection owns. A leaked SQLite handle costs a file descriptor; a
-        // leaked Chromium keeps running on the developer's machine.
+        // `dispose`, not `close`: end-of-stdin is "disconnect," and §4 requires reaping every browser
+        // this connection owns — a leaked Chromium keeps running on the developer's machine.
         await session.dispose();
     }
 }

package/dist/bin/descry-mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"descry-mcp.js","sourceRoot":"","sources":["../../src/bin/descry-mcp.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAEhF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,GAAW,CAAC,GAAW,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAA0B,CAAC;QAC1F,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,+DAA+D;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,KAAK,GAAG;;;;;;CAMb,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjD,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,mDAAmD;IACnD,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAE9E,IAAI,CAAC;QACH,MAAM,UAAU,CACd,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACxE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QACrD,qEAAqE;QACrE,6DAA6D;QAC7D,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,kEAAkE;QAClE,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACzF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}
+{"version":3,"file":"descry-mcp.js","sourceRoot":"","sources":["../../src/bin/descry-mcp.ts"],"names":[],"mappings":";AACA;;;sEAGsE;AAEtE,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAEhF;;mEAEmE;AACnE,MAAM,OAAO,GAAW,CAAC,GAAW,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAA0B,CAAC;QAC1F,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,+DAA+D;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,KAAK,GAAG;;;;;;CAMb,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjD,+FAA+F;IAC/F,6FAA6F;IAC7F,0EAA0E;IAC1E,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAE9E,IAAI,CAAC;QACH,MAAM,UAAU,CACd,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EACxE,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QACrD,qEAAqE;QACrE,6DAA6D;QAC7D,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,8FAA8F;QAC9F,qFAAqF;QACrF,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACzF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}