@heddleagent/execution-host-client 6.0.0-next.0

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from './contracts/index.js';
+export * from './authority/index.js';
+export * from './conversation/index.js';
+export * from './mcp/index.js';
+export * from './http-sse/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export * from './contracts/index.js';
+export * from './authority/index.js';
+export * from './conversation/index.js';
+export * from './mcp/index.js';
+export * from './http-sse/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC","sourcesContent":["export * from './contracts/index.js';\nexport * from './authority/index.js';\nexport * from './conversation/index.js';\nexport * from './mcp/index.js';\nexport * from './http-sse/index.js';\n"]}

package/dist/mcp/errors.d.ts

@@ -0,0 +1,11 @@
+export declare class McpCapabilityVerificationError extends Error {
+    readonly name = "McpCapabilityVerificationError";
+    constructor();
+}
+export type McpCapabilityUnavailableCategory = 'network' | 'jwks';
+export declare class McpCapabilityUnavailableError extends Error {
+    readonly category: McpCapabilityUnavailableCategory;
+    readonly name = "McpCapabilityUnavailableError";
+    constructor(category: McpCapabilityUnavailableCategory);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/mcp/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/mcp/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,IAAI,oCAAoC;;CAKlD;AAED,MAAM,MAAM,gCAAgC,GAAG,SAAS,GAAG,MAAM,CAAC;AAElE,qBAAa,6BAA8B,SAAQ,KAAK;IAG1C,QAAQ,CAAC,QAAQ,EAAE,gCAAgC;IAF/D,QAAQ,CAAC,IAAI,mCAAmC;gBAE3B,QAAQ,EAAE,gCAAgC;CAGhE"}

package/dist/mcp/errors.js

@@ -0,0 +1,15 @@
+export class McpCapabilityVerificationError extends Error {
+    name = 'McpCapabilityVerificationError';
+    constructor() {
+        super('MCP capability verification failed.');
+    }
+}
+export class McpCapabilityUnavailableError extends Error {
+    category;
+    name = 'McpCapabilityUnavailableError';
+    constructor(category) {
+        super('MCP capability verification is temporarily unavailable.');
+        this.category = category;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/mcp/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/mcp/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,IAAI,GAAG,gCAAgC,CAAC;IAEjD;QACE,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC/C,CAAC;CACF;AAID,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAGjC;IAFZ,IAAI,GAAG,+BAA+B,CAAC;IAEhD,YAAqB,QAA0C;QAC7D,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAD9C,aAAQ,GAAR,QAAQ,CAAkC;IAE/D,CAAC;CACF","sourcesContent":["export class McpCapabilityVerificationError extends Error {\n  readonly name = 'McpCapabilityVerificationError';\n\n  constructor() {\n    super('MCP capability verification failed.');\n  }\n}\n\nexport type McpCapabilityUnavailableCategory = 'network' | 'jwks';\n\nexport class McpCapabilityUnavailableError extends Error {\n  readonly name = 'McpCapabilityUnavailableError';\n\n  constructor(readonly category: McpCapabilityUnavailableCategory) {\n    super('MCP capability verification is temporarily unavailable.');\n  }\n}\n"]}

package/dist/mcp/index.d.ts

@@ -0,0 +1,5 @@
+export { JwtMcpCapabilityVerifier, assertMcpCapabilityActive, } from './jwt-capability-verifier.js';
+export { McpCapabilityUnavailableError, McpCapabilityVerificationError, } from './errors.js';
+export type { McpCapabilityUnavailableCategory } from './errors.js';
+export type { JwtMcpCapabilityVerifierConfig, JwtMcpCapabilityVerifierOptions, McpCapabilityVerifier, McpInvocationScope, VerifiedMcpCapability, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AACpE,YAAY,EACV,8BAA8B,EAC9B,+BAA+B,EAC/B,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/mcp/index.js

@@ -0,0 +1,3 @@
+export { JwtMcpCapabilityVerifier, assertMcpCapabilityActive, } from './jwt-capability-verifier.js';
+export { McpCapabilityUnavailableError, McpCapabilityVerificationError, } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,aAAa,CAAC","sourcesContent":["export {\n  JwtMcpCapabilityVerifier,\n  assertMcpCapabilityActive,\n} from './jwt-capability-verifier.js';\nexport {\n  McpCapabilityUnavailableError,\n  McpCapabilityVerificationError,\n} from './errors.js';\nexport type { McpCapabilityUnavailableCategory } from './errors.js';\nexport type {\n  JwtMcpCapabilityVerifierConfig,\n  JwtMcpCapabilityVerifierOptions,\n  McpCapabilityVerifier,\n  McpInvocationScope,\n  VerifiedMcpCapability,\n} from './types.js';\n"]}

package/dist/mcp/jwt-capability-verifier.d.ts

@@ -0,0 +1,12 @@
+import type { JwtMcpCapabilityVerifierConfig, JwtMcpCapabilityVerifierOptions, McpCapabilityVerifier, VerifiedMcpCapability } from './types.js';
+/**
+ * Independently verifies an adopter-signed capability at the adopter's MCP
+ * edge. Execution Host verification is defense in depth, not forwarded trust.
+ */
+export declare class JwtMcpCapabilityVerifier<TToolName extends string> implements McpCapabilityVerifier<TToolName> {
+    #private;
+    constructor(config: JwtMcpCapabilityVerifierConfig<TToolName>, options?: JwtMcpCapabilityVerifierOptions);
+    verify(assertion: string): Promise<VerifiedMcpCapability<TToolName>>;
+}
+export declare function assertMcpCapabilityActive(capability: VerifiedMcpCapability, now?: Date): void;
+//# sourceMappingURL=jwt-capability-verifier.d.ts.map

package/dist/mcp/jwt-capability-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-capability-verifier.d.ts","sourceRoot":"","sources":["../../src/mcp/jwt-capability-verifier.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EACV,8BAA8B,EAC9B,+BAA+B,EAC/B,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAqBpB;;;GAGG;AACH,qBAAa,wBAAwB,CAAC,SAAS,SAAS,MAAM,CAC9D,YAAW,qBAAqB,CAAC,SAAS,CAAC;;gBAOvC,MAAM,EAAE,8BAA8B,CAAC,SAAS,CAAC,EACjD,OAAO,GAAE,+BAAoC;IAoBzC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;CA8E3E;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,qBAAqB,EACjC,GAAG,OAAa,GACf,IAAI,CAKN"}

package/dist/mcp/jwt-capability-verifier.js

@@ -0,0 +1,136 @@
+import { createRemoteJWKSet, errors, jwtVerify, } from 'jose';
+import { z } from 'zod';
+import { JwtAudienceSchema, JwtIssuerSchema, MCP_CAPABILITY_TYPE, McpAllowedToolsSchema, McpCapabilityClaimsSchema, McpServerIdSchema, OpaqueIdSchema, isSafeWebUrl, } from '../contracts/index.js';
+import { McpCapabilityUnavailableError, McpCapabilityVerificationError, } from './errors.js';
+const CapabilityAssertionSchema = z.string().min(32).max(4_096);
+const ConfigSchema = z.object({
+    issuer: JwtIssuerSchema,
+    audience: JwtAudienceSchema,
+    jwksUrl: z.instanceof(URL).refine(isSafeWebUrl, 'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment'),
+    trustedAdopterId: OpaqueIdSchema,
+    serverId: McpServerIdSchema,
+    supportedTools: McpAllowedToolsSchema,
+    maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),
+    clockToleranceSeconds: z.number().int().min(0).max(60).default(5),
+}).strict();
+/**
+ * Independently verifies an adopter-signed capability at the adopter's MCP
+ * edge. Execution Host verification is defense in depth, not forwarded trust.
+ */
+export class JwtMcpCapabilityVerifier {
+    #config;
+    #supportedTools;
+    #keyResolver;
+    #now;
+    constructor(config, options = {}) {
+        const parsed = ConfigSchema.parse(config);
+        this.#config = Object.freeze({
+            ...parsed,
+            jwksUrl: new URL(parsed.jwksUrl),
+            supportedTools: Object.freeze([...parsed.supportedTools]),
+        });
+        this.#supportedTools = new Set(this.#config.supportedTools);
+        this.#keyResolver = options.keyResolver ?? createRemoteJWKSet(this.#config.jwksUrl, {
+            cacheMaxAge: 10 * 60_000,
+            cooldownDuration: 30_000,
+            timeoutDuration: 3_000,
+        });
+        this.#now = options.now ?? (() => new Date());
+    }
+    async verify(assertion) {
+        try {
+            const compactJwt = CapabilityAssertionSchema.parse(assertion);
+            const { payload } = await jwtVerify(compactJwt, this.#keyResolver, {
+                algorithms: ['ES256'],
+                audience: this.#config.audience,
+                clockTolerance: this.#config.clockToleranceSeconds,
+                currentDate: this.#now(),
+                issuer: this.#config.issuer,
+                maxTokenAge: this.#config.maxCapabilityAgeSeconds,
+                requiredClaims: ['exp', 'iat', 'jti', 'sub'],
+                typ: MCP_CAPABILITY_TYPE,
+            });
+            const claims = McpCapabilityClaimsSchema.parse(payload);
+            this.#assertDeploymentBinding(claims);
+            this.#assertBoundedLifetime(claims);
+            this.#assertSupportedTools(claims.allowedTools);
+            return freezeVerifiedCapability({
+                capabilityId: claims.jti,
+                serverId: claims.serverId,
+                allowedTools: claims.allowedTools,
+                scope: {
+                    adopterId: claims.adopterId,
+                    tenantId: claims.tenantId,
+                    subjectId: claims.sub,
+                    productSessionId: claims.productSessionId,
+                    runtimeSessionId: claims.runtimeSessionId,
+                    invocationId: claims.invocationId,
+                    workflow: claims.workflow,
+                },
+                issuedAt: new Date(claims.iat * 1_000).toISOString(),
+                expiresAt: new Date(claims.exp * 1_000).toISOString(),
+            });
+        }
+        catch (error) {
+            if (error instanceof McpCapabilityVerificationError
+                || error instanceof McpCapabilityUnavailableError) {
+                throw error;
+            }
+            const unavailableCategory = resolveUnavailableCategory(error);
+            if (unavailableCategory) {
+                throw new McpCapabilityUnavailableError(unavailableCategory);
+            }
+            throw new McpCapabilityVerificationError();
+        }
+    }
+    #assertDeploymentBinding(claims) {
+        if (claims.adopterId !== this.#config.trustedAdopterId
+            || claims.serverId !== this.#config.serverId
+            || claims.jti === claims.invocationId) {
+            throw new McpCapabilityVerificationError();
+        }
+    }
+    #assertBoundedLifetime(claims) {
+        const lifetimeSeconds = claims.exp - claims.iat;
+        if (lifetimeSeconds <= 0
+            || lifetimeSeconds > this.#config.maxCapabilityAgeSeconds) {
+            throw new McpCapabilityVerificationError();
+        }
+    }
+    #assertSupportedTools(tools) {
+        if (!tools.every((tool) => this.#supportedTools.has(tool))) {
+            throw new McpCapabilityVerificationError();
+        }
+    }
+}
+export function assertMcpCapabilityActive(capability, now = new Date()) {
+    const expiresAt = Date.parse(capability.expiresAt);
+    if (!Number.isFinite(expiresAt) || now.getTime() >= expiresAt) {
+        throw new McpCapabilityVerificationError();
+    }
+}
+function freezeVerifiedCapability(capability) {
+    return Object.freeze({
+        ...capability,
+        allowedTools: Object.freeze([...capability.allowedTools]),
+        scope: Object.freeze({ ...capability.scope }),
+    });
+}
+const UNAVAILABLE_JOSE_CODES = new Set([
+    'ERR_JOSE_GENERIC',
+    'ERR_JWK_INVALID',
+    'ERR_JWKS_INVALID',
+    'ERR_JWKS_MULTIPLE_MATCHING_KEYS',
+    'ERR_JWKS_TIMEOUT',
+]);
+function resolveUnavailableCategory(error) {
+    if (error instanceof TypeError) {
+        return 'network';
+    }
+    if (error instanceof errors.JOSEError
+        && UNAVAILABLE_JOSE_CODES.has(error.code)) {
+        return 'jwks';
+    }
+    return undefined;
+}
+//# sourceMappingURL=jwt-capability-verifier.js.map

package/dist/mcp/jwt-capability-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-capability-verifier.js","sourceRoot":"","sources":["../../src/mcp/jwt-capability-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,MAAM,EACN,SAAS,GACV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AAQrB,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/B,YAAY,EACZ,gFAAgF,CACjF;IACD,gBAAgB,EAAE,cAAc;IAChC,QAAQ,EAAE,iBAAiB;IAC3B,cAAc,EAAE,qBAAqB;IACrC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAMZ;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAE1B,OAAO,CAAyB;IAChC,eAAe,CAAsB;IACrC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAAiD,EACjD,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;YAChC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAC3D,IAAI,CAAC,OAAO,CAAC,OAAO,EACpB;YACE,WAAW,EAAE,EAAE,GAAG,MAAM;YACxB,gBAAgB,EAAE,MAAM;YACxB,eAAe,EAAE,KAAK;SACvB,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;gBACjE,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB;gBAClD,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBACjD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,mBAAmB;aACzB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAEhD,OAAO,wBAAwB,CAAC;gBAC9B,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAA2B;gBAChD,KAAK,EAAE;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;oBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;gBACD,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,8BAA8B;mBAC5C,KAAK,YAAY,6BAA6B,EACjD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,IAAI,6BAA6B,CAAC,mBAAmB,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,wBAAwB,CACtB,MAAiD;QAEjD,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ;eACzC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,YAAY,EACrC,CAAC;YACD,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,sBAAsB,CACpB,MAAiD;QAEjD,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAChD,IACE,eAAe,IAAI,CAAC;eACjB,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EACzD,CAAC;YACD,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,qBAAqB,CAAC,KAAwB;QAC5C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CACvC,UAAiC,EACjC,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,8BAA8B,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAA4C;IAE5C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,UAAU;QACb,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACzD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,kBAAkB;IAClB,iBAAiB;IACjB,kBAAkB;IAClB,iCAAiC;IACjC,kBAAkB;CACnB,CAAC,CAAC;AAEH,SAAS,0BAA0B,CACjC,KAAc;IAEd,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,KAAK,YAAY,MAAM,CAAC,SAAS;WAC9B,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import {\n  createRemoteJWKSet,\n  errors,\n  jwtVerify,\n} from 'jose';\nimport { z } from 'zod';\nimport {\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  MCP_CAPABILITY_TYPE,\n  McpAllowedToolsSchema,\n  McpCapabilityClaimsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport {\n  McpCapabilityUnavailableError,\n  McpCapabilityVerificationError,\n} from './errors.js';\nimport type {\n  JwtMcpCapabilityVerifierConfig,\n  JwtMcpCapabilityVerifierOptions,\n  McpCapabilityVerifier,\n  VerifiedMcpCapability,\n} from './types.js';\n\nconst CapabilityAssertionSchema = z.string().min(32).max(4_096);\nconst ConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  audience: JwtAudienceSchema,\n  jwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  trustedAdopterId: OpaqueIdSchema,\n  serverId: McpServerIdSchema,\n  supportedTools: McpAllowedToolsSchema,\n  maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),\n  clockToleranceSeconds: z.number().int().min(0).max(60).default(5),\n}).strict();\n\ntype ParsedConfig = Omit<z.infer<typeof ConfigSchema>, 'supportedTools'> & {\n  supportedTools: readonly string[];\n};\n\n/**\n * Independently verifies an adopter-signed capability at the adopter's MCP\n * edge. Execution Host verification is defense in depth, not forwarded trust.\n */\nexport class JwtMcpCapabilityVerifier<TToolName extends string>\nimplements McpCapabilityVerifier<TToolName> {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #supportedTools: ReadonlySet<string>;\n  readonly #keyResolver: NonNullable<JwtMcpCapabilityVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtMcpCapabilityVerifierConfig<TToolName>,\n    options: JwtMcpCapabilityVerifierOptions = {},\n  ) {\n    const parsed = ConfigSchema.parse(config);\n    this.#config = Object.freeze({\n      ...parsed,\n      jwksUrl: new URL(parsed.jwksUrl),\n      supportedTools: Object.freeze([...parsed.supportedTools]),\n    });\n    this.#supportedTools = new Set(this.#config.supportedTools);\n    this.#keyResolver = options.keyResolver ?? createRemoteJWKSet(\n      this.#config.jwksUrl,\n      {\n        cacheMaxAge: 10 * 60_000,\n        cooldownDuration: 30_000,\n        timeoutDuration: 3_000,\n      },\n    );\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(assertion: string): Promise<VerifiedMcpCapability<TToolName>> {\n    try {\n      const compactJwt = CapabilityAssertionSchema.parse(assertion);\n      const { payload } = await jwtVerify(compactJwt, this.#keyResolver, {\n        algorithms: ['ES256'],\n        audience: this.#config.audience,\n        clockTolerance: this.#config.clockToleranceSeconds,\n        currentDate: this.#now(),\n        issuer: this.#config.issuer,\n        maxTokenAge: this.#config.maxCapabilityAgeSeconds,\n        requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n        typ: MCP_CAPABILITY_TYPE,\n      });\n      const claims = McpCapabilityClaimsSchema.parse(payload);\n      this.#assertDeploymentBinding(claims);\n      this.#assertBoundedLifetime(claims);\n      this.#assertSupportedTools(claims.allowedTools);\n\n      return freezeVerifiedCapability({\n        capabilityId: claims.jti,\n        serverId: claims.serverId,\n        allowedTools: claims.allowedTools as TToolName[],\n        scope: {\n          adopterId: claims.adopterId,\n          tenantId: claims.tenantId,\n          subjectId: claims.sub,\n          productSessionId: claims.productSessionId,\n          runtimeSessionId: claims.runtimeSessionId,\n          invocationId: claims.invocationId,\n          workflow: claims.workflow,\n        },\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof McpCapabilityVerificationError\n        || error instanceof McpCapabilityUnavailableError\n      ) {\n        throw error;\n      }\n      const unavailableCategory = resolveUnavailableCategory(error);\n      if (unavailableCategory) {\n        throw new McpCapabilityUnavailableError(unavailableCategory);\n      }\n      throw new McpCapabilityVerificationError();\n    }\n  }\n\n  #assertDeploymentBinding(\n    claims: z.infer<typeof McpCapabilityClaimsSchema>,\n  ): void {\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.serverId !== this.#config.serverId\n      || claims.jti === claims.invocationId\n    ) {\n      throw new McpCapabilityVerificationError();\n    }\n  }\n\n  #assertBoundedLifetime(\n    claims: z.infer<typeof McpCapabilityClaimsSchema>,\n  ): void {\n    const lifetimeSeconds = claims.exp - claims.iat;\n    if (\n      lifetimeSeconds <= 0\n      || lifetimeSeconds > this.#config.maxCapabilityAgeSeconds\n    ) {\n      throw new McpCapabilityVerificationError();\n    }\n  }\n\n  #assertSupportedTools(tools: readonly string[]): void {\n    if (!tools.every((tool) => this.#supportedTools.has(tool))) {\n      throw new McpCapabilityVerificationError();\n    }\n  }\n}\n\nexport function assertMcpCapabilityActive(\n  capability: VerifiedMcpCapability,\n  now = new Date(),\n): void {\n  const expiresAt = Date.parse(capability.expiresAt);\n  if (!Number.isFinite(expiresAt) || now.getTime() >= expiresAt) {\n    throw new McpCapabilityVerificationError();\n  }\n}\n\nfunction freezeVerifiedCapability<TToolName extends string>(\n  capability: VerifiedMcpCapability<TToolName>,\n): VerifiedMcpCapability<TToolName> {\n  return Object.freeze({\n    ...capability,\n    allowedTools: Object.freeze([...capability.allowedTools]),\n    scope: Object.freeze({ ...capability.scope }),\n  });\n}\n\nconst UNAVAILABLE_JOSE_CODES = new Set([\n  'ERR_JOSE_GENERIC',\n  'ERR_JWK_INVALID',\n  'ERR_JWKS_INVALID',\n  'ERR_JWKS_MULTIPLE_MATCHING_KEYS',\n  'ERR_JWKS_TIMEOUT',\n]);\n\nfunction resolveUnavailableCategory(\n  error: unknown,\n): 'network' | 'jwks' | undefined {\n  if (error instanceof TypeError) {\n    return 'network';\n  }\n  if (\n    error instanceof errors.JOSEError\n    && UNAVAILABLE_JOSE_CODES.has(error.code)\n  ) {\n    return 'jwks';\n  }\n  return undefined;\n}\n"]}

package/dist/mcp/node/index.d.ts

@@ -0,0 +1,4 @@
+export { NodeStreamableHttpMcpService } from './streamable-http-mcp-service.js';
+export { defineNodeMcpJsonTool, NodeMcpJsonToolset, NodeMcpJsonToolsetConfigurationError, } from './json-toolset.js';
+export type { AnyNodeMcpJsonToolDefinition, NodeMcpJsonToolDefinition, NodeMcpJsonToolExecutionContext, NodeMcpJsonToolsetConfig, NodeMcpToolRegistrationContext, NodeMcpToolset, NodeStreamableHttpMcpServiceConfig, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/mcp/node/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,oCAAoC,GACrC,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,4BAA4B,EAC5B,yBAAyB,EACzB,+BAA+B,EAC/B,wBAAwB,EACxB,8BAA8B,EAC9B,cAAc,EACd,kCAAkC,GACnC,MAAM,YAAY,CAAC"}

package/dist/mcp/node/index.js

@@ -0,0 +1,3 @@
+export { NodeStreamableHttpMcpService } from './streamable-http-mcp-service.js';
+export { defineNodeMcpJsonTool, NodeMcpJsonToolset, NodeMcpJsonToolsetConfigurationError, } from './json-toolset.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/node/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/node/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,oCAAoC,GACrC,MAAM,mBAAmB,CAAC","sourcesContent":["export { NodeStreamableHttpMcpService } from './streamable-http-mcp-service.js';\nexport {\n  defineNodeMcpJsonTool,\n  NodeMcpJsonToolset,\n  NodeMcpJsonToolsetConfigurationError,\n} from './json-toolset.js';\nexport type {\n  AnyNodeMcpJsonToolDefinition,\n  NodeMcpJsonToolDefinition,\n  NodeMcpJsonToolExecutionContext,\n  NodeMcpJsonToolsetConfig,\n  NodeMcpToolRegistrationContext,\n  NodeMcpToolset,\n  NodeStreamableHttpMcpServiceConfig,\n} from './types.js';\n"]}

package/dist/mcp/node/json-toolset.d.ts

@@ -0,0 +1,23 @@
+import type { NodeMcpJsonToolDefinition, NodeMcpJsonToolsetConfig, NodeMcpToolRegistrationContext, NodeMcpToolset } from './types.js';
+export declare class NodeMcpJsonToolsetConfigurationError extends Error {
+    readonly name = "NodeMcpJsonToolsetConfigurationError";
+}
+/** Preserves a definition's inferred input type without adding runtime work. */
+export declare function defineNodeMcpJsonTool<TTool extends string, TInput extends Record<string, unknown>>(definition: NodeMcpJsonToolDefinition<TTool, TInput>): NodeMcpJsonToolDefinition<TTool, TInput>;
+/**
+ * Capability-aware declarative tool registry for the common JSON-tool path.
+ *
+ * The signed capability is the only source of exposed tool names. Every call
+ * checks authority before and after product work and converts unknown failures
+ * into the definition's static public message.
+ */
+export declare class NodeMcpJsonToolset<TTool extends string> implements NodeMcpToolset<TTool> {
+    #private;
+    readonly serverInfo: Readonly<{
+        name: string;
+        version: string;
+    }>;
+    constructor(config: NodeMcpJsonToolsetConfig<TTool>);
+    registerAllowedTools(context: NodeMcpToolRegistrationContext<TTool>): void;
+}
+//# sourceMappingURL=json-toolset.d.ts.map

package/dist/mcp/node/json-toolset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-toolset.d.ts","sourceRoot":"","sources":["../../../src/mcp/node/json-toolset.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAEV,yBAAyB,EACzB,wBAAwB,EACxB,8BAA8B,EAC9B,cAAc,EACf,MAAM,YAAY,CAAC;AAQpB,qBAAa,oCAAqC,SAAQ,KAAK;IAC7D,QAAQ,CAAC,IAAI,0CAA0C;CACxD;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,CACnC,KAAK,SAAS,MAAM,EACpB,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEtC,UAAU,EAAE,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,GACnD,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAE1C;AAED;;;;;;GAMG;AACH,qBAAa,kBAAkB,CAAC,KAAK,SAAS,MAAM,CACpD,YAAW,cAAc,CAAC,KAAK,CAAC;;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;gBAIrD,MAAM,EAAE,wBAAwB,CAAC,KAAK,CAAC;IAsBnD,oBAAoB,CAClB,OAAO,EAAE,8BAA8B,CAAC,KAAK,CAAC,GAC7C,IAAI;CAgER"}

package/dist/mcp/node/json-toolset.js

@@ -0,0 +1,94 @@
+import { z } from 'zod';
+import { assertMcpCapabilityActive, McpCapabilityVerificationError, } from '../index.js';
+const ToolDefinitionSchema = z.object({
+    name: z.string().min(1).max(64).regex(/^[A-Za-z][A-Za-z0-9_]*$/),
+    description: z.string().trim().min(1).max(4_096),
+    failureMessage: z.string().trim().min(1).max(1_600),
+}).passthrough();
+export class NodeMcpJsonToolsetConfigurationError extends Error {
+    name = 'NodeMcpJsonToolsetConfigurationError';
+}
+/** Preserves a definition's inferred input type without adding runtime work. */
+export function defineNodeMcpJsonTool(definition) {
+    return definition;
+}
+/**
+ * Capability-aware declarative tool registry for the common JSON-tool path.
+ *
+ * The signed capability is the only source of exposed tool names. Every call
+ * checks authority before and after product work and converts unknown failures
+ * into the definition's static public message.
+ */
+export class NodeMcpJsonToolset {
+    serverInfo;
+    #tools;
+    #now;
+    constructor(config) {
+        this.serverInfo = Object.freeze({
+            name: z.string().trim().min(1).max(128).parse(config.serverInfo.name),
+            version: z.string().trim().min(1).max(128).parse(config.serverInfo.version),
+        });
+        const definitions = config.tools.map((definition) => {
+            ToolDefinitionSchema.parse(definition);
+            return definition;
+        });
+        const names = definitions.map(({ name }) => name);
+        if (new Set(names).size !== names.length) {
+            throw new NodeMcpJsonToolsetConfigurationError('Node MCP JSON tool names must be unique.');
+        }
+        this.#tools = new Map(definitions.map((definition) => [
+            definition.name,
+            definition,
+        ]));
+        this.#now = config.now ?? (() => new Date());
+    }
+    registerAllowedTools(context) {
+        context.capability.allowedTools.forEach((toolName) => {
+            const definition = this.#tools.get(toolName);
+            if (!definition) {
+                throw new NodeMcpJsonToolsetConfigurationError('The signed MCP capability names an unconfigured product tool.');
+            }
+            context.server.registerTool(definition.name, {
+                ...(definition.title ? { title: definition.title } : {}),
+                description: definition.description,
+                inputSchema: definition.inputSchema,
+                ...(definition.annotations
+                    ? { annotations: definition.annotations }
+                    : {}),
+            }, async (input, extra) => await this.#execute(definition, input, context, extra.signal));
+        });
+    }
+    async #execute(definition, input, context, operationSignal) {
+        const signal = AbortSignal.any([
+            context.requestSignal,
+            operationSignal,
+        ]);
+        try {
+            signal.throwIfAborted();
+            assertMcpCapabilityActive(context.capability, this.#now());
+            const result = await definition.execute(input, {
+                capability: context.capability,
+                signal,
+            });
+            signal.throwIfAborted();
+            assertMcpCapabilityActive(context.capability, this.#now());
+            const text = JSON.stringify(result);
+            if (text === undefined) {
+                throw new TypeError('MCP JSON tools must return a serializable value.');
+            }
+            return { content: [{ type: 'text', text }] };
+        }
+        catch (error) {
+            const message = signal.aborted
+                ? 'Product tool execution was cancelled.'
+                : error instanceof McpCapabilityVerificationError
+                    ? 'Product tool authority expired.'
+                    : definition.failureMessage;
+            return {
+                isError: true,
+                content: [{ type: 'text', text: message }],
+            };
+        }
+    }
+}
+//# sourceMappingURL=json-toolset.js.map

package/dist/mcp/node/json-toolset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-toolset.js","sourceRoot":"","sources":["../../../src/mcp/node/json-toolset.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AASrB,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CACpD,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IACpD,IAAI,GAAG,sCAAsC,CAAC;CACxD;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAInC,UAAoD;IAEpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAEpB,UAAU,CAA8C;IACxD,MAAM,CAA0D;IAChE,IAAI,CAAa;IAE1B,YAAY,MAAuC;QACjD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YACrE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;SAC5E,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAClD,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACvC,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,oCAAoC,CAC5C,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;YACpD,UAAU,CAAC,IAAI;YACf,UAAU;SACX,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,oBAAoB,CAClB,OAA8C;QAE9C,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,oCAAoC,CAC5C,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,YAAY,CACzB,UAAU,CAAC,IAAI,EACf;gBACE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,GAAG,CAAC,UAAU,CAAC,WAAW;oBACxB,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;oBACzC,CAAC,CAAC,EAAE,CAAC;aACR,EACD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,QAAQ,CACzC,UAAU,EACV,KAAgC,EAChC,OAAO,EACP,KAAK,CAAC,MAAM,CACb,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,UAA+C,EAC/C,KAA8B,EAC9B,OAA8C,EAC9C,eAA4B;QAE5B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,CAAC,aAAa;YACrB,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,yBAAyB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE;gBAC7C,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,MAAM;aACP,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,yBAAyB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO;gBAC5B,CAAC,CAAC,uCAAuC;gBACzC,CAAC,CAAC,KAAK,YAAY,8BAA8B;oBAC/C,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;CACF","sourcesContent":["import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport {\n  assertMcpCapabilityActive,\n  McpCapabilityVerificationError,\n} from '../index.js';\nimport type {\n  AnyNodeMcpJsonToolDefinition,\n  NodeMcpJsonToolDefinition,\n  NodeMcpJsonToolsetConfig,\n  NodeMcpToolRegistrationContext,\n  NodeMcpToolset,\n} from './types.js';\n\nconst ToolDefinitionSchema = z.object({\n  name: z.string().min(1).max(64).regex(/^[A-Za-z][A-Za-z0-9_]*$/),\n  description: z.string().trim().min(1).max(4_096),\n  failureMessage: z.string().trim().min(1).max(1_600),\n}).passthrough();\n\nexport class NodeMcpJsonToolsetConfigurationError extends Error {\n  readonly name = 'NodeMcpJsonToolsetConfigurationError';\n}\n\n/** Preserves a definition's inferred input type without adding runtime work. */\nexport function defineNodeMcpJsonTool<\n  TTool extends string,\n  TInput extends Record<string, unknown>,\n>(\n  definition: NodeMcpJsonToolDefinition<TTool, TInput>,\n): NodeMcpJsonToolDefinition<TTool, TInput> {\n  return definition;\n}\n\n/**\n * Capability-aware declarative tool registry for the common JSON-tool path.\n *\n * The signed capability is the only source of exposed tool names. Every call\n * checks authority before and after product work and converts unknown failures\n * into the definition's static public message.\n */\nexport class NodeMcpJsonToolset<TTool extends string>\nimplements NodeMcpToolset<TTool> {\n  readonly serverInfo: Readonly<{ name: string; version: string }>;\n  readonly #tools: ReadonlyMap<TTool, AnyNodeMcpJsonToolDefinition<TTool>>;\n  readonly #now: () => Date;\n\n  constructor(config: NodeMcpJsonToolsetConfig<TTool>) {\n    this.serverInfo = Object.freeze({\n      name: z.string().trim().min(1).max(128).parse(config.serverInfo.name),\n      version: z.string().trim().min(1).max(128).parse(config.serverInfo.version),\n    });\n    const definitions = config.tools.map((definition) => {\n      ToolDefinitionSchema.parse(definition);\n      return definition;\n    });\n    const names = definitions.map(({ name }) => name);\n    if (new Set(names).size !== names.length) {\n      throw new NodeMcpJsonToolsetConfigurationError(\n        'Node MCP JSON tool names must be unique.',\n      );\n    }\n    this.#tools = new Map(definitions.map((definition) => [\n      definition.name,\n      definition,\n    ]));\n    this.#now = config.now ?? (() => new Date());\n  }\n\n  registerAllowedTools(\n    context: NodeMcpToolRegistrationContext<TTool>,\n  ): void {\n    context.capability.allowedTools.forEach((toolName) => {\n      const definition = this.#tools.get(toolName);\n      if (!definition) {\n        throw new NodeMcpJsonToolsetConfigurationError(\n          'The signed MCP capability names an unconfigured product tool.',\n        );\n      }\n      context.server.registerTool(\n        definition.name,\n        {\n          ...(definition.title ? { title: definition.title } : {}),\n          description: definition.description,\n          inputSchema: definition.inputSchema,\n          ...(definition.annotations\n            ? { annotations: definition.annotations }\n            : {}),\n        },\n        async (input, extra) => await this.#execute(\n          definition,\n          input as Record<string, unknown>,\n          context,\n          extra.signal,\n        ),\n      );\n    });\n  }\n\n  async #execute(\n    definition: AnyNodeMcpJsonToolDefinition<TTool>,\n    input: Record<string, unknown>,\n    context: NodeMcpToolRegistrationContext<TTool>,\n    operationSignal: AbortSignal,\n  ): Promise<CallToolResult> {\n    const signal = AbortSignal.any([\n      context.requestSignal,\n      operationSignal,\n    ]);\n    try {\n      signal.throwIfAborted();\n      assertMcpCapabilityActive(context.capability, this.#now());\n      const result = await definition.execute(input, {\n        capability: context.capability,\n        signal,\n      });\n      signal.throwIfAborted();\n      assertMcpCapabilityActive(context.capability, this.#now());\n      const text = JSON.stringify(result);\n      if (text === undefined) {\n        throw new TypeError('MCP JSON tools must return a serializable value.');\n      }\n      return { content: [{ type: 'text', text }] };\n    } catch (error) {\n      const message = signal.aborted\n        ? 'Product tool execution was cancelled.'\n        : error instanceof McpCapabilityVerificationError\n          ? 'Product tool authority expired.'\n          : definition.failureMessage;\n      return {\n        isError: true,\n        content: [{ type: 'text', text: message }],\n      };\n    }\n  }\n}\n"]}

package/dist/mcp/node/streamable-http-mcp-service.d.ts

@@ -0,0 +1,18 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { NodeStreamableHttpMcpServiceConfig } from './types.js';
+/**
+ * Stateless official-SDK Streamable HTTP edge for adopter-owned MCP tools.
+ *
+ * Every request verifies the capability independently and owns fresh SDK
+ * resources. The injected toolset remains the sole owner of model-visible
+ * names, schemas, descriptions, and product operations.
+ */
+export declare class NodeStreamableHttpMcpService<TTool extends string> {
+    #private;
+    constructor(config: NodeStreamableHttpMcpServiceConfig<TTool>);
+    /** Handles one authenticated stateless MCP request at an adopter-owned path. */
+    handle(request: IncomingMessage, response: ServerResponse): Promise<void>;
+    /** Aborts active tools and closes their official SDK resources. */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=streamable-http-mcp-service.d.ts.map

package/dist/mcp/node/streamable-http-mcp-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-http-mcp-service.d.ts","sourceRoot":"","sources":["../../../src/mcp/node/streamable-http-mcp-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAQjE,OAAO,KAAK,EACV,kCAAkC,EACnC,MAAM,YAAY,CAAC;AAqBpB;;;;;;GAMG;AACH,qBAAa,4BAA4B,CAAC,KAAK,SAAS,MAAM;;gBAUhD,MAAM,EAAE,kCAAkC,CAAC,KAAK,CAAC;IAQ7D,gFAAgF;IAC1E,MAAM,CACV,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,IAAI,CAAC;IA+EhB,mEAAmE;IACnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAuDvB"}