@indexnetwork/protocol 14.3.2-rc.477.1 → 16.1.1-rc.478.1

package/dist/maintenance/maintenance.graph.js

@@ -21,167 +21,16 @@ const FRESHNESS_WINDOW_MS = 12 * 60 * 60 * 1000; // 12 hours
  */
 export class MaintenanceGraphFactory {
     constructor(database, cache, queue) {
-        this.database = database;
-        this.cache = cache;
-        this.queue = queue;
+        this.deps = { database, cache, queue };
     }
     /** Compile and return the maintenance graph. */
     createGraph() {
-        const loadCurrentRadarNode = async (state) => {
-            if (!state.userId) {
-                return { error: 'userId is required' };
-            }
-            try {
-                const raw = await this.database.getOpportunitiesForUser(state.userId, { limit: 150 });
-                const actionable = raw.filter((opp) => isActionableForViewer(opp.actors, opp.status, state.userId));
-                const expired = raw.filter((opp) => opp.status === 'expired' && canUserSeeOpportunity(opp.actors, opp.status, state.userId));
-                const activeIntents = await this.database.getActiveIntents(state.userId);
-                // Read last rediscovery timestamp from cache
-                let lastRediscoveryAt = null;
-                try {
-                    const cached = await this.cache.get(`rediscovery:lastRun:${state.userId}`);
-                    if (typeof cached?.triggeredAt === 'string') {
-                        const parsed = Date.parse(cached.triggeredAt);
-                        if (Number.isFinite(parsed)) {
-                            lastRediscoveryAt = parsed;
-                        }
-                    }
-                }
-                catch {
-                    // Cache unavailable — treat as no data
-                }
-                return {
-                    currentOpportunities: actionable,
-                    expiredCount: expired.length,
-                    activeIntents: activeIntents ?? [],
-                    lastRediscoveryAt,
-                };
-            }
-            catch (e) {
-                logger.error('MaintenanceGraph loadCurrentRadar failed', { error: e });
-                return { error: 'Failed to load current radar' };
-            }
-        };
-        const scoreRadarHealthNode = async (state) => {
-            if (state.error)
-                return {};
-            try {
-                const opps = state.currentOpportunities ?? [];
-                let connectionCount = 0;
-                let connectorFlowCount = 0;
-                for (const opp of opps) {
-                    const category = classifyOpportunity(opp, state.userId);
-                    if (category === 'connection')
-                        connectionCount++;
-                    else if (category === 'connector-flow')
-                        connectorFlowCount++;
-                }
-                const healthResult = computeRadarHealth({
-                    connectionCount,
-                    connectorFlowCount,
-                    expiredCount: state.expiredCount,
-                    totalActionable: opps.length,
-                    lastRediscoveryAt: state.lastRediscoveryAt,
-                    freshnessWindowMs: FRESHNESS_WINDOW_MS,
-                });
-                logger.verbose('Radar health scored', {
-                    userId: state.userId,
-                    score: healthResult.score,
-                    shouldMaintain: healthResult.shouldMaintain,
-                    connectorFlowCount,
-                });
-                return { healthResult, connectorFlowCount };
-            }
-            catch (e) {
-                logger.error('MaintenanceGraph scoreRadarHealth failed', { error: e });
-                return { error: 'Failed to score radar health' };
-            }
-        };
-        const shouldRediscover = (state) => {
-            if (state.error)
-                return 'introducerDiscovery';
-            if (state.healthResult?.shouldMaintain && state.activeIntents.length > 0) {
-                return 'rediscover';
-            }
-            return 'introducerDiscovery';
-        };
-        const rediscoverNode = async (state) => {
-            try {
-                const bucket = Math.floor(Date.now() / (6 * 60 * 60 * 1000));
-                const results = await Promise.allSettled(state.activeIntents.map((intent) => this.queue.addJob({ intentId: intent.id, userId: state.userId }, { priority: 10, jobId: `rediscovery-${state.userId}-${intent.id}-${bucket}` })));
-                for (const r of results) {
-                    if (r.status === 'rejected') {
-                        const errMsg = r.reason instanceof Error ? r.reason.message : String(r.reason);
-                        logger.error('Rediscovery job enqueue failed', { error: errMsg });
-                    }
-                }
-                const enqueued = results.filter((r) => r.status === 'fulfilled').length;
-                // Record last run timestamp
-                if (enqueued > 0) {
-                    try {
-                        await this.cache.set(`rediscovery:lastRun:${state.userId}`, { triggeredAt: new Date().toISOString() }, { ttl: 24 * 60 * 60 });
-                    }
-                    catch {
-                        // Cache write failure is non-fatal
-                    }
-                }
-                return { rediscoveryJobsEnqueued: enqueued };
-            }
-            catch (e) {
-                logger.error('MaintenanceGraph rediscover failed', { error: e });
-                return { error: 'Failed to enqueue rediscovery jobs' };
-            }
-        };
-        const introducerDiscoveryNode = async (state) => {
-            if (!isIntroducerDiscoveryEnabled()) {
-                logger.info('Introducer discovery skipped — disabled by configuration', {
-                    userId: state.userId,
-                });
-                return {};
-            }
-            try {
-                const connectorFlowTarget = RADAR_SOFT_TARGETS.connectorFlow;
-                if (!shouldRunIntroducerDiscovery(state.connectorFlowCount, connectorFlowTarget)) {
-                    logger.verbose('Introducer discovery skipped — connector-flow target met', {
-                        userId: state.userId,
-                        connectorFlowCount: state.connectorFlowCount,
-                        connectorFlowTarget,
-                    });
-                    return {};
-                }
-                // Cast database/queue to introducer discovery interfaces (they are compatible)
-                const result = await runIntroducerDiscovery(this.database, this.queue, state.userId);
-                logger.info('Introducer discovery complete', {
-                    userId: state.userId,
-                    contactsEvaluated: result.contactsEvaluated,
-                    jobsEnqueued: result.jobsEnqueued,
-                    skippedReason: result.skippedReason,
-                });
-                return { introducerDiscoveryJobsEnqueued: result.jobsEnqueued };
-            }
-            catch (e) {
-                logger.error('MaintenanceGraph introducerDiscovery failed', { error: e });
-                // Non-fatal: do not set error, just log and continue
-                return {};
-            }
-        };
-        const logMaintenanceNode = async (state) => {
-            logger.info('Maintenance complete', {
-                userId: state.userId,
-                score: state.healthResult?.score,
-                shouldMaintain: state.healthResult?.shouldMaintain,
-                rediscoveryJobs: state.rediscoveryJobsEnqueued,
-                introducerDiscoveryJobs: state.introducerDiscoveryJobsEnqueued,
-                activeIntents: state.activeIntents.length,
-                connectorFlowCount: state.connectorFlowCount,
-            });
-            return {};
-        };
+        const deps = this.deps;
         const graph = new StateGraph(MaintenanceGraphState)
-            .addNode('loadCurrentRadar', loadCurrentRadarNode)
+            .addNode('loadCurrentRadar', (state) => loadCurrentRadarNode(state, deps))
             .addNode('scoreRadarHealth', scoreRadarHealthNode)
-            .addNode('rediscover', rediscoverNode)
-            .addNode('introducerDiscovery', introducerDiscoveryNode)
+            .addNode('rediscover', (state) => rediscoverNode(state, deps))
+            .addNode('introducerDiscovery', (state) => introducerDiscoveryNode(state, deps))
             .addNode('logMaintenance', logMaintenanceNode)
             .addEdge(START, 'loadCurrentRadar')
             .addConditionalEdges('loadCurrentRadar', (state) => (state.error ? 'end' : 'scoreRadarHealth'), {
@@ -198,3 +47,153 @@ export class MaintenanceGraphFactory {
         return graph.compile();
     }
 }
+export async function loadCurrentRadarNode(state, deps) {
+    if (!state.userId) {
+        return { error: 'userId is required' };
+    }
+    try {
+        const raw = await deps.database.getOpportunitiesForUser(state.userId, { limit: 150 });
+        const actionable = raw.filter((opp) => isActionableForViewer(opp.actors, opp.status, state.userId));
+        const expired = raw.filter((opp) => opp.status === 'expired' && canUserSeeOpportunity(opp.actors, opp.status, state.userId));
+        const activeIntents = await deps.database.getActiveIntents(state.userId);
+        // Read last rediscovery timestamp from cache
+        let lastRediscoveryAt = null;
+        try {
+            const cached = await deps.cache.get(`rediscovery:lastRun:${state.userId}`);
+            if (typeof cached?.triggeredAt === 'string') {
+                const parsed = Date.parse(cached.triggeredAt);
+                if (Number.isFinite(parsed)) {
+                    lastRediscoveryAt = parsed;
+                }
+            }
+        }
+        catch {
+            // Cache unavailable — treat as no data
+        }
+        return {
+            currentOpportunities: actionable,
+            expiredCount: expired.length,
+            activeIntents: activeIntents ?? [],
+            lastRediscoveryAt,
+        };
+    }
+    catch (e) {
+        logger.error('MaintenanceGraph loadCurrentRadar failed', { error: e });
+        return { error: 'Failed to load current radar' };
+    }
+}
+export async function scoreRadarHealthNode(state) {
+    if (state.error)
+        return {};
+    try {
+        const opps = state.currentOpportunities ?? [];
+        let connectionCount = 0;
+        let connectorFlowCount = 0;
+        for (const opp of opps) {
+            const category = classifyOpportunity(opp, state.userId);
+            if (category === 'connection')
+                connectionCount++;
+            else if (category === 'connector-flow')
+                connectorFlowCount++;
+        }
+        const healthResult = computeRadarHealth({
+            connectionCount,
+            connectorFlowCount,
+            expiredCount: state.expiredCount,
+            totalActionable: opps.length,
+            lastRediscoveryAt: state.lastRediscoveryAt,
+            freshnessWindowMs: FRESHNESS_WINDOW_MS,
+        });
+        logger.verbose('Radar health scored', {
+            userId: state.userId,
+            score: healthResult.score,
+            shouldMaintain: healthResult.shouldMaintain,
+            connectorFlowCount,
+        });
+        return { healthResult, connectorFlowCount };
+    }
+    catch (e) {
+        logger.error('MaintenanceGraph scoreRadarHealth failed', { error: e });
+        return { error: 'Failed to score radar health' };
+    }
+}
+export function shouldRediscover(state) {
+    if (state.error)
+        return 'introducerDiscovery';
+    if (state.healthResult?.shouldMaintain && state.activeIntents.length > 0) {
+        return 'rediscover';
+    }
+    return 'introducerDiscovery';
+}
+export async function rediscoverNode(state, deps) {
+    try {
+        const bucket = Math.floor(Date.now() / (6 * 60 * 60 * 1000));
+        const results = await Promise.allSettled(state.activeIntents.map((intent) => deps.queue.addJob({ intentId: intent.id, userId: state.userId }, { priority: 10, jobId: `rediscovery-${state.userId}-${intent.id}-${bucket}` })));
+        for (const r of results) {
+            if (r.status === 'rejected') {
+                const errMsg = r.reason instanceof Error ? r.reason.message : String(r.reason);
+                logger.error('Rediscovery job enqueue failed', { error: errMsg });
+            }
+        }
+        const enqueued = results.filter((r) => r.status === 'fulfilled').length;
+        // Record last run timestamp
+        if (enqueued > 0) {
+            try {
+                await deps.cache.set(`rediscovery:lastRun:${state.userId}`, { triggeredAt: new Date().toISOString() }, { ttl: 24 * 60 * 60 });
+            }
+            catch {
+                // Cache write failure is non-fatal
+            }
+        }
+        return { rediscoveryJobsEnqueued: enqueued };
+    }
+    catch (e) {
+        logger.error('MaintenanceGraph rediscover failed', { error: e });
+        return { error: 'Failed to enqueue rediscovery jobs' };
+    }
+}
+export async function introducerDiscoveryNode(state, deps) {
+    if (!isIntroducerDiscoveryEnabled()) {
+        logger.info('Introducer discovery skipped — disabled by configuration', {
+            userId: state.userId,
+        });
+        return {};
+    }
+    try {
+        const connectorFlowTarget = RADAR_SOFT_TARGETS.connectorFlow;
+        if (!shouldRunIntroducerDiscovery(state.connectorFlowCount, connectorFlowTarget)) {
+            logger.verbose('Introducer discovery skipped — connector-flow target met', {
+                userId: state.userId,
+                connectorFlowCount: state.connectorFlowCount,
+                connectorFlowTarget,
+            });
+            return {};
+        }
+        // Cast database/queue to introducer discovery interfaces (they are compatible)
+        const result = await runIntroducerDiscovery(deps.database, deps.queue, state.userId);
+        logger.info('Introducer discovery complete', {
+            userId: state.userId,
+            contactsEvaluated: result.contactsEvaluated,
+            jobsEnqueued: result.jobsEnqueued,
+            skippedReason: result.skippedReason,
+        });
+        return { introducerDiscoveryJobsEnqueued: result.jobsEnqueued };
+    }
+    catch (e) {
+        logger.error('MaintenanceGraph introducerDiscovery failed', { error: e });
+        // Non-fatal: do not set error, just log and continue
+        return {};
+    }
+}
+export async function logMaintenanceNode(state) {
+    logger.info('Maintenance complete', {
+        userId: state.userId,
+        score: state.healthResult?.score,
+        shouldMaintain: state.healthResult?.shouldMaintain,
+        rediscoveryJobs: state.rediscoveryJobsEnqueued,
+        introducerDiscoveryJobs: state.introducerDiscoveryJobsEnqueued,
+        activeIntents: state.activeIntents.length,
+        connectorFlowCount: state.connectorFlowCount,
+    });
+    return {};
+}

package/dist/mcp/mcp.authorization-policy.d.ts

@@ -13,10 +13,10 @@ export declare const McpToolPermissionRequirementSchema: z.ZodObject<{
      */
     reach: z.ZodDefault<z.ZodEnum<["principal", "network"]>>;
 }, "strict", z.ZodTypeAny, {
-    action: "manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks";
+    action: "manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks";
     reach: "network" | "principal";
 }, {
-    action: "manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks";
+    action: "manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks";
     reach?: "network" | "principal" | undefined;
 }>;
 export type McpToolPermissionRequirement = z.infer<typeof McpToolPermissionRequirementSchema>;
@@ -38,19 +38,19 @@ export declare const McpToolAccessRuleSchema: z.ZodEffects<z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     reach: "network" | "principal";
     access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
-    actions?: ("manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
 }, {
     reach: "network" | "principal";
     access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
-    actions?: ("manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
 }>, {
     reach: "network" | "principal";
     access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
-    actions?: ("manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
 }, {
     reach: "network" | "principal";
     access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
-    actions?: ("manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
 }>;
 export type McpToolAccessRule = z.infer<typeof McpToolAccessRuleSchema>;
 export type McpToolAccessRuleMap = ReadonlyMap<string, McpToolAccessRule>;
@@ -63,7 +63,7 @@ export declare function defineMcpToolAccessRules(rules: Readonly<Record<string,
  * retain domain ownership, membership, exact-scope, and approval checks.
  */
 export declare const CANONICAL_MCP_TOOL_ACCESS_RULES: McpToolAccessRuleMap;
-/** Tools visible while a session-authenticated human completes onboarding. */
+/** Tools visible on the REST Tool API while web/CLI onboarding is incomplete. MCP does not use this allowlist. */
 export declare const ONBOARDING_ALLOWED: ReadonlySet<string>;
 /** Agent administration inventory. */
 export declare const MCP_AGENT_ADMIN_TOOLS: ReadonlySet<string>;
@@ -84,72 +84,68 @@ export declare const McpPolicyAgentSnapshotSchema: z.ZodObject<{
         userId: string;
         scope: "network" | "global" | "node";
         scopeId: string | null;
-        agentId: string;
         actions: string[];
+        agentId: string;
     }, {
         userId: string;
         scope: "network" | "global" | "node";
         scopeId: string | null;
-        agentId: string;
         actions: string[];
+        agentId: string;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     id: string;
     type: "system" | "personal" | "external";
     status: "active" | "inactive";
-    ownerId: string;
     permissions: {
         userId: string;
         scope: "network" | "global" | "node";
         scopeId: string | null;
-        agentId: string;
         actions: string[];
+        agentId: string;
     }[];
+    ownerId: string;
 }, {
     id: string;
     type: "system" | "personal" | "external";
     status: "active" | "inactive";
-    ownerId: string;
     permissions: {
         userId: string;
         scope: "network" | "global" | "node";
         scopeId: string | null;
-        agentId: string;
         actions: string[];
+        agentId: string;
     }[];
+    ownerId: string;
 }>;
 export type McpPolicyAgentSnapshot = z.infer<typeof McpPolicyAgentSnapshotSchema>;
-export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
+export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
 export type McpPrincipalProfile = z.infer<typeof McpPrincipalProfileSchema>;
 export declare const McpCapabilitySubjectSchema: z.ZodObject<{
-    profile: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
+    profile: z.ZodEnum<["session_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "hermes_agent", "delivery_agent", "invalid_agent"]>;
     userId: z.ZodString;
     agentId: z.ZodOptional<z.ZodString>;
     agentType: z.ZodOptional<z.ZodEnum<["personal", "external", "system"]>>;
-    isOnboarding: z.ZodBoolean;
     networkScopeId: z.ZodNullable<z.ZodString>;
     permissions: z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">;
 }, "strict", z.ZodTypeAny, {
     userId: string;
-    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
-    permissions: ("manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks")[];
+    profile: "session_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
+    permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
     networkScopeId: string | null;
-    isOnboarding: boolean;
     agentId?: string | undefined;
     agentType?: "system" | "personal" | "external" | undefined;
 }, {
     userId: string;
-    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
-    permissions: ("manage:intents" | "manage:opportunities" | "manage:negotiations" | "manage:identity" | "manage:premises" | "manage:networks")[];
+    profile: "session_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "hermes_agent" | "delivery_agent" | "invalid_agent";
+    permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
     networkScopeId: string | null;
-    isOnboarding: boolean;
     agentId?: string | undefined;
     agentType?: "system" | "personal" | "external" | undefined;
 }>;
 export type McpCapabilitySubject = z.infer<typeof McpCapabilitySubjectSchema>;
 export type ResolveMcpCapabilitySubjectInput = {
     identity: McpResolvedIdentity;
-    isOnboarding: boolean;
     agent?: McpPolicyAgentSnapshot | null;
 };
 /**
@@ -166,13 +162,13 @@ export declare function projectStoredPermissionActions(actions: readonly string[
 export declare function resolveMcpCapabilitySubject(input: ResolveMcpCapabilitySubjectInput): McpCapabilitySubject;
 /**
  * Maps a resolved capability subject to the typed caller context consumed by
- * the centralized activity-summary projection. Session and onboarding humans
- * own the summarized data and receive the full owner view; every other
- * profile is projected as an agent bounded by its granted permissions and
- * (for network agents) its bound community.
+ * the centralized activity-summary projection. Session humans own the
+ * summarized data and receive the full owner view; every other profile is
+ * projected as an agent bounded by its granted permissions and (for network
+ * agents) its bound community.
  */
 export declare function resolveMcpActivityCaller(subject: McpCapabilitySubject): McpActivityCaller;
-export declare const McpCapabilityDecisionReasonSchema: z.ZodEnum<["session_human", "onboarding", "enrollment", "authenticated", "agent_self_read", "informational", "permission_granted", "delivery", "onboarding_required", "enrollment_required", "unregistered_principal", "invalid_agent", "agent_admin_denied", "human_read_own_agent_denied", "human_only", "permission_missing", "delivery_required", "removed", "tool_unclassified"]>;
+export declare const McpCapabilityDecisionReasonSchema: z.ZodEnum<["session_human", "enrollment", "authenticated", "agent_self_read", "informational", "permission_granted", "delivery", "enrollment_required", "unregistered_principal", "invalid_agent", "agent_admin_denied", "human_read_own_agent_denied", "human_only", "permission_missing", "delivery_required", "removed", "tool_unclassified"]>;
 export type McpCapabilityDecision = {
     allowed: boolean;
     reason: z.infer<typeof McpCapabilityDecisionReasonSchema>;

package/dist/mcp/mcp.authorization-policy.js

@@ -113,7 +113,6 @@ export const CANONICAL_MCP_TOOL_ACCESS_RULES = defineMcpToolAccessRules({
     update_user_context: { access: 'permission', actions: ['manage:identity'], reach: 'principal' },
     get_enrichment_run: { access: 'permission', actions: ['manage:identity'], reach: 'principal' },
     cancel_enrichment_run: { access: 'permission', actions: ['manage:identity'], reach: 'principal' },
-    complete_onboarding: { access: 'human_only', reach: 'principal' },
     // Premises are meta-network; a network-scoped agent retains principal reach.
     read_premises: { access: 'permission', actions: ['manage:premises'], reach: 'principal' },
     create_premise: { access: 'permission', actions: ['manage:premises'], reach: 'principal' },
@@ -204,7 +203,7 @@ export const CANONICAL_MCP_TOOL_ACCESS_RULES = defineMcpToolAccessRules({
     // unknown before any authorization work. read_activity_summary (above) is
     // the only public activity-reporting name; no legacy alias is retained.
 });
-/** Tools visible while a session-authenticated human completes onboarding. */
+/** Tools visible on the REST Tool API while web/CLI onboarding is incomplete. MCP does not use this allowlist. */
 export const ONBOARDING_ALLOWED = new Set([
     'register_agent',
     'read_docs',
@@ -249,7 +248,6 @@ export const McpPolicyAgentSnapshotSchema = z.object({
 }).strict();
 export const McpPrincipalProfileSchema = z.enum([
     'session_human',
-    'onboarding_human',
     'enrollment_key',
     'unregistered_key',
     'registered_global_agent',
@@ -263,7 +261,6 @@ export const McpCapabilitySubjectSchema = z.object({
     userId: z.string().min(1),
     agentId: z.string().min(1).optional(),
     agentType: z.enum(['personal', 'external', 'system']).optional(),
-    isOnboarding: z.boolean(),
     networkScopeId: z.string().min(1).nullable(),
     permissions: z.array(McpPermissionActionSchema),
 }).strict();
@@ -336,12 +333,11 @@ function resolveAgentPermissions(identity, agent) {
  * Resolves a request-local, runtime-validated principal profile.
  */
 export function resolveMcpCapabilitySubject(input) {
-    const { identity, isOnboarding } = input;
+    const { identity } = input;
     if (identity.isSessionAuth === true) {
         return McpCapabilitySubjectSchema.parse({
-            profile: isOnboarding ? 'onboarding_human' : 'session_human',
+            profile: 'session_human',
             userId: identity.userId,
-            isOnboarding,
             networkScopeId: null,
             permissions: [],
         });
@@ -350,7 +346,6 @@ export function resolveMcpCapabilitySubject(input) {
         return McpCapabilitySubjectSchema.parse({
             profile: identity.enrollmentCapable === true ? 'enrollment_key' : 'unregistered_key',
             userId: identity.userId,
-            isOnboarding,
             networkScopeId: null,
             permissions: [],
         });
@@ -364,7 +359,6 @@ export function resolveMcpCapabilitySubject(input) {
             profile: 'invalid_agent',
             userId: identity.userId,
             agentId: identity.agentId,
-            isOnboarding,
             networkScopeId: identity.networkScopeId ?? null,
             permissions: [],
         });
@@ -382,20 +376,19 @@ export function resolveMcpCapabilitySubject(input) {
         userId: identity.userId,
         agentId: identity.agentId,
         agentType: agent.type,
-        isOnboarding,
         networkScopeId: identity.networkScopeId ?? null,
         permissions: resolveAgentPermissions(identity, agent),
     });
 }
 /**
  * Maps a resolved capability subject to the typed caller context consumed by
- * the centralized activity-summary projection. Session and onboarding humans
- * own the summarized data and receive the full owner view; every other
- * profile is projected as an agent bounded by its granted permissions and
- * (for network agents) its bound community.
+ * the centralized activity-summary projection. Session humans own the
+ * summarized data and receive the full owner view; every other profile is
+ * projected as an agent bounded by its granted permissions and (for network
+ * agents) its bound community.
  */
 export function resolveMcpActivityCaller(subject) {
-    const isHuman = subject.profile === 'session_human' || subject.profile === 'onboarding_human';
+    const isHuman = subject.profile === 'session_human';
     return McpActivityCallerSchema.parse({
         kind: isHuman ? 'human' : 'agent',
         permissions: isHuman ? [] : subject.permissions,
@@ -404,14 +397,12 @@ export function resolveMcpActivityCaller(subject) {
 }
 export const McpCapabilityDecisionReasonSchema = z.enum([
     'session_human',
-    'onboarding',
     'enrollment',
     'authenticated',
     'agent_self_read',
     'informational',
     'permission_granted',
     'delivery',
-    'onboarding_required',
     'enrollment_required',
     'unregistered_principal',
     'invalid_agent',
@@ -475,9 +466,6 @@ export class McpCapabilityPolicy {
                 ? { allowed: true, reason: 'enrollment', reach: rule.reach }
                 : { allowed: false, reason: 'enrollment_required', reach: rule.reach };
         }
-        if (subject.isOnboarding && !ONBOARDING_ALLOWED.has(toolName)) {
-            return { allowed: false, reason: 'onboarding_required', reach: rule.reach };
-        }
         if (subject.profile === 'hermes_agent') {
             const requirement = HERMES_AGENT_MCP_TOOL_PERMISSIONS.get(toolName);
             if (!requirement)
@@ -516,27 +504,19 @@ export class McpCapabilityPolicy {
                     ? { allowed: true, reason: 'agent_self_read', reach: rule.reach }
                     : { allowed: false, reason: 'agent_admin_denied', reach: rule.reach };
             }
-            // Session/onboarding humans get every agent_admin tool EXCEPT
-            // read_own_agent, which is reserved for agent principals.
-            if (subject.profile === 'session_human' || subject.profile === 'onboarding_human') {
+            // Session humans get every agent_admin tool EXCEPT read_own_agent,
+            // which is reserved for agent principals.
+            if (subject.profile === 'session_human') {
                 return toolName === 'read_own_agent'
                     ? { allowed: false, reason: 'human_read_own_agent_denied', reach: rule.reach }
-                    : {
-                        allowed: true,
-                        reason: subject.profile === 'onboarding_human' ? 'onboarding' : 'session_human',
-                        reach: rule.reach,
-                    };
+                    : { allowed: true, reason: 'session_human', reach: rule.reach };
             }
             // Every other profile (enrollment/unregistered/invalid) is handled above
             // and never reaches here; fail closed for completeness.
             return { allowed: false, reason: 'agent_admin_denied', reach: rule.reach };
         }
-        if (subject.profile === 'session_human' || subject.profile === 'onboarding_human') {
-            return {
-                allowed: true,
-                reason: subject.profile === 'onboarding_human' ? 'onboarding' : 'session_human',
-                reach: rule.reach,
-            };
+        if (subject.profile === 'session_human') {
+            return { allowed: true, reason: 'session_human', reach: rule.reach };
         }
         if (rule.access === 'human_only') {
             return { allowed: false, reason: 'human_only', reach: rule.reach };

package/dist/mcp/mcp.server.d.ts

@@ -77,9 +77,9 @@ export interface ScopedDepsFactory {
 export declare const applyNetworkScopeToContext: (context: ResolvedToolContext, networkScopeId: string | null | undefined) => void;
 export { ONBOARDING_ALLOWED } from './mcp.authorization-policy.js';
 /**
- * Builds the onboarding gate message for MCP callers.  Condensed from the
- * chat orchestrator's flow (chat.prompt.ts buildOnboarding) into a
- * 6-step tool-error guide suited for non-interactive MCP clients.
+ * Builds the onboarding gate message for REST Tool API callers. Condensed
+ * from the chat onboarding flow into a 6-step tool-error guide. MCP does
+ * not use this gate.
  */
 export declare function buildMcpOnboardingMessage(ctx: ResolvedToolContext): string;
 export declare const MCP_INSTRUCTIONS: string;