@hs-x/mcp 0.3.6 → 0.4.0

package/README.md

@@ -1,8 +1,8 @@
 # @hs-x/mcp
 
 The public HS-X MCP server, for developer-side coding agents. It exposes the
-same project substrate the `hs-x` CLI runs on — status, validation, the dev
-loop, and docs — over a transport-independent JSON-RPC handler (`callMcpTool()`)
+same safe project substrate the `hs-x` CLI runs on — status, validation,
+existing-session inspection, and docs — over a transport-independent JSON-RPC handler (`callMcpTool()`)
 plus a stdio entrypoint.
 
 ## Tools
@@ -11,22 +11,59 @@ plus a stdio entrypoint.
 | --- | --- |
 | `hsx.status` | Local project status, via the same substrate as `hs-x status` |
 | `hsx.check` | Runs `hs-x check` and returns structured diagnostics |
-| `hsx.dev.capabilities` | Lists the workers and capabilities (tools, triggers, card backends, syncs) a local project declares |
-| `hsx.dev.invoke` | Invokes one capability through the **production** runtime router — same validation, context, handler, and result envelope a deployed Worker runs; fixture defaults fill the payload |
-| `hsx.dev.invoke_last` | Replays the last recorded invocation (`.hs-x/last-invocation.json`) — the failure-replay loop |
-| `hsx.dev.session.start` / `.status` / `.stop` | Manages a background dev server for the project (one session per project) |
+| `hsx.dev.session.status` / `.stop` | Inspects or safely stops an existing, identity-verified project dev session |
 | `hsx.dev.logs` | The merged log surface: tails the dev-session log and, when the project has a deployed app binding, folds in HubSpot app-log rows — the same timeline as `hs-x logs` |
-| `hsx.secrets.hubspot_oauth.set` | Stores a HubSpot app OAuth client secret for one account/project/environment/app |
+| `hsx.secrets.hubspot_oauth.set` | Stores a HubSpot app OAuth client secret for one account/project/environment/app after explicit `confirm: true` |
 | `hsx.docs.search` / `hsx.docs.fetch` | Searches the HS-X docs and fetches a page as clean markdown |
 
 Most tools take a `root` argument pointing at the local project directory.
 
+Every advertised input schema is closed at the top level
+(`additionalProperties: false`). Required values and stable bounds are declared
+in `tools/list` and enforced by the dispatcher before a tool performs project,
+process, filesystem, or network work.
+
+For `tools/call`, malformed JSON-RPC envelopes and unknown tool names remain
+JSON-RPC errors. Once a known tool has been selected, invalid arguments and
+execution failures are returned as MCP tool results with `isError: true` and a
+text error payload. Clients should check `isError` before consuming the text
+content. Direct callers of `callMcpTool()` receive the same failures as rejected
+promises.
+
+## Security gates
+
+Project-code execution tools are not advertised by the local MCP server. The
+former environment-variable opt-in was removed because it executed project code
+inside the credential-bearing MCP process. Use the CLI directly for local
+invocation and dev-server startup until HS-X has a separately deployed,
+credential-isolated sandbox service.
+
+`hsx.secrets.hubspot_oauth.set` sends credentials only to the exact public HTTPS
+origin configured by the server's `HSX_CONTROL_PLANE_URL` (default
+`https://api.hs-x.dev`). Tool calls cannot override that destination. Origins
+with credentials, paths, queries, fragments, loopback, or private IP addresses
+are rejected. The production HTTPS connection is pinned to an address from that
+validated DNS result while TLS still verifies the configured hostname; redirects
+are not followed and responses are bounded to 64 KiB. The call must also include
+`confirm: true`; missing or false confirmation is rejected before the server
+reads its bearer credential, resolves the destination, or starts transport.
+Credential responses must be valid UTF-8 JSON. Docs responses are also read as
+bounded streams: 1 MiB for the catalog and 2 MiB for a page, both with fatal
+UTF-8 decoding so a bad upstream cannot grow the MCP process without bound.
+
 ## Running it
 
 The stdio entrypoint speaks MCP over stdin/stdout, so any MCP-capable agent can
 launch it as a subprocess. For embedding, call `callMcpTool(name, args)`
 directly against the same dispatcher.
 
+Requests use newline-delimited JSON-RPC and each line is limited to 1 MiB of
+UTF-8 bytes. The transport reports an invalid-request error as soon as a line
+crosses that limit, drops its buffered prefix, discards through the next
+newline, and then continues serving later requests. This keeps an unterminated
+or multi-byte oversized line from growing the server's input buffer without
+bound.
+
 ## Part of HS-X
 
 HS-X is a leaveable, type-safe HubSpot app framework on Cloudflare Workers.

package/dist/config.d.ts

@@ -7,4 +7,10 @@ export interface McpConfig {
     readonly docsUrl: URL;
 }
 export declare function loadMcpConfig(env?: NodeJS.ProcessEnv): McpConfig;
+/**
+ * Credential-bearing MCP calls are pinned to one administrator-configured
+ * public HTTPS origin. Tool arguments can never widen this destination.
+ */
+export declare function validateControlPlaneOrigin(input: URL): URL;
+export declare function isPrivateOrLoopbackHostname(rawHostname: string): boolean;
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEjE,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;CACvB;AAuCD,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,CAE7E"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEjE,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;CACvB;AAuCD,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,CAG7E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG,CAc1D;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAOxE"}

package/dist/config.js

@@ -1,3 +1,4 @@
+import { isIP } from 'node:net';
 import { Config, ConfigProvider, Effect, Option } from 'effect';
 const DEFAULT_MCP_CONTROL_PLANE_URL = 'https://api.hs-x.dev';
 const DEFAULT_MCP_DOCS_URL = 'https://hs-x.dev';
@@ -23,7 +24,72 @@ function mcpConfigProvider(env = process.env) {
     return ConfigProvider.fromMap(values, { pathDelim: '_', seqDelim: ',' });
 }
 export function loadMcpConfig(env = process.env) {
-    return Effect.runSync(Effect.withConfigProvider(mcpConfigProvider(env))(mcpConfig));
+    const config = Effect.runSync(Effect.withConfigProvider(mcpConfigProvider(env))(mcpConfig));
+    return { ...config, controlPlaneUrl: validateControlPlaneOrigin(config.controlPlaneUrl) };
+}
+/**
+ * Credential-bearing MCP calls are pinned to one administrator-configured
+ * public HTTPS origin. Tool arguments can never widen this destination.
+ */
+export function validateControlPlaneOrigin(input) {
+    if (input.protocol !== 'https:') {
+        throw new Error('HSX_CONTROL_PLANE_URL must use HTTPS.');
+    }
+    if (input.username || input.password) {
+        throw new Error('HSX_CONTROL_PLANE_URL must not contain user information.');
+    }
+    if (input.pathname !== '/' || input.search || input.hash) {
+        throw new Error('HSX_CONTROL_PLANE_URL must be an origin without a path, query, or fragment.');
+    }
+    if (isPrivateOrLoopbackHostname(input.hostname)) {
+        throw new Error('HSX_CONTROL_PLANE_URL must not target a private or loopback host.');
+    }
+    return new URL(input.origin);
+}
+export function isPrivateOrLoopbackHostname(rawHostname) {
+    const hostname = rawHostname.replace(/^\[|\]$/g, '').toLowerCase();
+    if (hostname === 'localhost' || hostname.endsWith('.localhost'))
+        return true;
+    const kind = isIP(hostname);
+    if (kind === 4)
+        return isPrivateIpv4(hostname);
+    if (kind === 6)
+        return isPrivateIpv6(hostname);
+    return false;
+}
+function isPrivateIpv4(address) {
+    const octets = address.split('.').map(Number);
+    const [a = 0, b = 0] = octets;
+    return (a === 0 ||
+        a === 10 ||
+        a === 127 ||
+        (a === 100 && b >= 64 && b <= 127) ||
+        (a === 169 && b === 254) ||
+        (a === 172 && b >= 16 && b <= 31) ||
+        (a === 192 && b === 168));
+}
+function isPrivateIpv6(address) {
+    if (address === '::' || address === '::1')
+        return true;
+    const first = Number.parseInt(address.split(':', 1)[0] ?? '', 16);
+    if ((first & 0xfe00) === 0xfc00)
+        return true; // fc00::/7 unique local
+    if ((first & 0xffc0) === 0xfe80)
+        return true; // fe80::/10 link-local
+    if ((first & 0xff00) === 0xff00)
+        return true; // multicast
+    if (address.startsWith('::ffff:')) {
+        const suffix = address.slice('::ffff:'.length);
+        if (isIP(suffix) === 4)
+            return isPrivateIpv4(suffix);
+        const [highRaw, lowRaw] = suffix.split(':');
+        const high = Number.parseInt(highRaw ?? '', 16);
+        const low = Number.parseInt(lowRaw ?? '', 16);
+        if (Number.isFinite(high) && Number.isFinite(low)) {
+            return isPrivateIpv4(`${high >> 8}.${high & 0xff}.${low >> 8}.${low & 0xff}`);
+        }
+    }
+    return false;
 }
 function splitAllowedRoots(value) {
     return value

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAWhE,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAC7D,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEhD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CACrB;IACD,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxF,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,6BAA6B,CAAC,CAAC,EAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CACrB;IACD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,EACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CACrB;CACF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9C,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;QAC9C,CAAC,CAAC,EAAE;IACN,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,eAAe,EAAE,MAAM,CAAC,eAAe;IACvC,OAAO,EAAE,MAAM,CAAC,OAAO;CACxB,CAAC,CAAC,CACJ,CAAC;AAEF,SAAS,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAWhE,MAAM,6BAA6B,GAAG,sBAAsB,CAAC;AAC7D,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEhD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CACrB;IACD,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxF,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,6BAA6B,CAAC,CAAC,EAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CACrB;IACD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,EACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CACrB;CACF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC9C,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC;QAC9C,CAAC,CAAC,EAAE;IACN,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,eAAe,EAAE,MAAM,CAAC,eAAe;IACvC,OAAO,EAAE,MAAM,CAAC,OAAO;CACxB,CAAC,CAAC,CACJ,CAAC;AAEF,SAAS,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5F,OAAO,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,0BAA0B,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAU;IACnD,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,WAAmB;IAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC9B,OAAO,CACL,CAAC,KAAK,CAAC;QACP,CAAC,KAAK,EAAE;QACR,CAAC,KAAK,GAAG;QACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;QAClC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACtE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,uBAAuB;IACrE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,YAAY;IAC1D,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,aAAa,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/index.d.ts

@@ -2,10 +2,10 @@ import type { McpConfig } from './config.js';
 export declare const MCP_VERSION: string;
 export declare const MCP_PROTOCOL_VERSION = "2024-11-05";
 export interface JsonRpcRequest {
-    readonly jsonrpc?: '2.0';
-    readonly id?: string | number | null;
-    readonly method?: string;
-    readonly params?: unknown;
+    readonly jsonrpc: '2.0';
+    readonly id?: string | number;
+    readonly method: string;
+    readonly params?: Record<string, unknown>;
 }
 export interface JsonRpcSuccess {
     readonly jsonrpc: '2.0';
@@ -24,22 +24,63 @@ export type JsonRpcResponse = JsonRpcSuccess | JsonRpcFailure;
 export interface McpRequestContext {
     readonly cwd: string;
     readonly config?: McpConfig;
+    /** Test/embedding seam for HTTP. Stdio leaves this unset. */
+    readonly fetch?: typeof fetch;
+    /** Test/embedding seam for public-address validation before secret transfer. */
+    readonly lookup?: ControlPlaneLookup;
+    /** Test seam for the production DNS-pinned credential request. */
+    readonly credentialRequest?: CredentialRequest;
+}
+export type ControlPlaneLookup = (hostname: string) => Promise<readonly {
+    readonly address: string;
+    readonly family: number;
+}[]>;
+export interface CredentialRequestInput {
+    readonly url: URL;
+    readonly addresses: readonly {
+        readonly address: string;
+        readonly family: number;
+    }[];
+    readonly authorization: string;
+    readonly body: string;
 }
+export type CredentialRequest = (input: CredentialRequestInput) => Promise<{
+    readonly status: number;
+    readonly body: unknown;
+}>;
 export interface McpTool {
     readonly name: string;
     readonly description: string;
     readonly inputSchema: {
         readonly type: 'object';
-        readonly properties: Record<string, unknown>;
+        readonly properties: Readonly<Record<string, McpJsonSchema>>;
+        readonly required?: readonly string[];
+        readonly additionalProperties: false;
     };
 }
+interface McpJsonSchema {
+    readonly type: 'string' | 'number' | 'integer' | 'boolean' | 'object';
+    readonly description?: string;
+    readonly minLength?: number;
+    readonly maxLength?: number;
+    readonly minimum?: number;
+    readonly maximum?: number;
+    readonly enum?: readonly (string | number)[];
+    readonly pattern?: string;
+    readonly properties?: Readonly<Record<string, McpJsonSchema>>;
+    readonly required?: readonly string[];
+    readonly additionalProperties?: boolean;
+    readonly default?: string | number;
+}
 export interface McpToolResult {
     readonly content: readonly {
         readonly type: 'text';
         readonly text: string;
     }[];
+    readonly isError?: boolean;
 }
 export declare function listMcpTools(): readonly McpTool[];
-export declare function handleMcpRequest(request: JsonRpcRequest, context: McpRequestContext): Promise<JsonRpcResponse | undefined>;
+export declare function handleMcpRequest(input: unknown, context: McpRequestContext): Promise<JsonRpcResponse | undefined>;
 export declare function callMcpTool(name: string, args: Record<string, unknown>, context: McpRequestContext): Promise<McpToolResult>;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA4B7C,eAAO,MAAM,WAAW,QAA0B,CAAC;AACnD,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,cAAc,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,EAAE,CAAC;CACL;AAuJD,wBAAgB,YAAY,IAAI,SAAS,OAAO,EAAE,CAEjD;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAsBtC;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,aAAa,CAAC,CAwUxB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA4B7C,eAAO,MAAM,WAAW,QAA0B,CAAC;AACnD,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,cAAc,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CAChD;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAAC;AAE/E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,KAAK,EAAE,sBAAsB,KAC1B,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAElE,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxB,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;QAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACtC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC;KACtC,CAAC;CACH;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,EAAE,CAAC;IACJ,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAkJD,wBAAgB,YAAY,IAAI,SAAS,OAAO,EAAE,CAEjD;AAoDD,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAyBtC;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,aAAa,CAAC,CA8axB"}