@indexnetwork/protocol 6.15.0-rc.407.1 → 8.0.2-rc.418.1

package/dist/contacts/application/contact.tools.js

@@ -30,7 +30,7 @@ export function createContactTools(defineTool, deps) {
     const import_contacts = contactsEnabled ? defineTool({
         name: 'import_contacts',
         description: "Bulk-imports contacts into the authenticated user's personal network (personal network). Contacts become members of the user's " +
-            "personal network with 'contact' permission, making them available for opportunity discovery.\n\n" +
+            "personal network with 'contact' permission, making their approved signals eligible for background matching.\n\n" +
             "**What happens:** Each contact is matched by email. If the email belongs to an existing user, they're linked directly. " +
             "If not, a 'ghost user' is created — a placeholder account enriched with public profile data (from LinkedIn, GitHub, etc.) " +
             "that participates in opportunity matching even before the person joins the platform.\n\n" +
@@ -67,9 +67,9 @@ export function createContactTools(defineTool, deps) {
             "(via import_contacts, add_contact, or import_gmail_contacts) stored as members of their personal network.\n\n" +
             "**When to use:** To see who's in the user's network, find a contact's userId for other operations, " +
             "or check if a specific person is already a contact.\n\n" +
-            "**Returns:** Array of contacts, each with: userId (use with read_user_contexts or discover_opportunities), " +
-            "name, email, avatar URL, and isGhost (true = no account yet, profile enriched from public data). " +
-            "Use the userId with read_user_contexts(userId) to get the full profile, or with discover_opportunities(targetUserId) to connect.",
+            "**Returns:** Array of contacts, each with userId (use with read_user_contexts), name, email, avatar URL, and isGhost " +
+            "(true = no account yet, profile enriched from public data). Use read_user_contexts(userId) to get the full profile. " +
+            "Approved signals are matched in the background; list_opportunities only reviews persisted results.",
         querySchema: z.object({
             limit: z.number().optional().describe('Maximum number of contacts to return. Omit to return all contacts. Use for large networks to paginate results.'),
         }),
@@ -102,10 +102,10 @@ export function createContactTools(defineTool, deps) {
             "For bulk imports, use import_contacts instead.\n\n" +
             "**What happens:** Looks up the email. If an account exists, links that user as a contact. " +
             "If not, creates a ghost user (placeholder enriched with public profile data) and adds them. " +
-            "The contact can then appear in opportunity discovery within the user's personal network.\n\n" +
+            "Their approved signals can then become eligible for background matching within the user's personal network.\n\n" +
             "**When to use:** When the user wants to add a specific person (e.g. 'add john@example.com to my network').\n\n" +
             "**Returns:** Confirmation with the contact's userId and whether a new ghost user was created (isNewGhost). " +
-            "Use the userId with discover_opportunities(targetUserId) to find connection opportunities.",
+            "Background matching may create persisted opportunities from approved signals; list_opportunities only reviews those results.",
         querySchema: z.object({
             email: z.string().describe('Email address of the person to add. Used as unique identifier — if already a contact, the operation is idempotent.'),
             name: z.string().optional().describe('Full name of the contact. Optional — if omitted, the email prefix is used as name. Provide when known for better profile enrichment.'),
@@ -131,10 +131,10 @@ export function createContactTools(defineTool, deps) {
     const remove_contact = defineTool({
         name: 'remove_contact',
         description: "Removes a contact from the authenticated user's personal network. The contact relationship is deleted — " +
-            "the person is no longer a member of the user's personal network and won't appear in personal-network-scoped discovery.\n\n" +
+            "the person is no longer a member of the user's personal network and their signals are no longer eligible for matching there.\n\n" +
             "**When to use:** When the user wants to remove someone from their network (e.g. 'remove John from my contacts').\n\n" +
             "**Note:** This only removes the contact relationship. If the contact is a real user (not a ghost), " +
-            "they still exist on the platform and may appear in shared network discovery.\n\n" +
+            "they still exist on the platform and their approved signals may remain eligible in shared networks.\n\n" +
             "**Returns:** Confirmation that the contact was removed.",
         querySchema: z.object({
             contactUserId: z.string().describe('The userId of the contact to remove. Get this from list_contacts results.'),
@@ -154,7 +154,7 @@ export function createContactTools(defineTool, deps) {
         name: 'search_contacts',
         description: "Searches the authenticated user's personal network by name or email (case-insensitive substring). " +
             "Use when the user refers to a contact by partial name or email and you need their userId for another tool " +
-            "(e.g. read_user_contexts, discover_opportunities).\n\n" +
+            "(e.g. read_user_contexts).\n\n" +
             "**When to use:** Before list_contacts when the network is large — returns only matching contacts, bounded by limit.\n\n" +
             "**Returns:** Array of matching contacts: userId, name, email, avatar, isGhost.",
         querySchema: z.object({

package/dist/index.d.ts

@@ -21,7 +21,6 @@ export type { Embedder, VectorStoreOption, VectorSearchResult, HydeCandidate, Hy
 export type { IntegrationAdapter, IntegrationConnection, IntegrationSession, IntegrationSessionOptions, ToolActionResponse } from "./shared/interfaces/integration.interface.js";
 export type { IntentGraphQueue } from "./shared/interfaces/queue.interface.js";
 export type { Scraper } from "./shared/interfaces/scraper.interface.js";
-export type { DiscoveryRunInput, DiscoveryRunRecord } from "./shared/interfaces/discovery-run.interface.js";
 export type { EnrichmentRunInput, EnrichmentRunRecord } from "./shared/interfaces/enrichment-run.interface.js";
 export type { NegotiationTimeoutQueue, AskUserExpiryPayload } from "./shared/interfaces/negotiation-events.interface.js";
 export type { AgentDispatcher, AgentDispatchResult, NegotiationTurnPayload } from "./shared/interfaces/agent-dispatcher.interface.js";
@@ -29,7 +28,8 @@ export { SYSTEM_AGENT_IDS } from './shared/interfaces/agent.interface.js';
 export { ChatContextDigestSchema, type ChatContextDigest } from "./shared/schemas/chat-context.schema.js";
 export { type Question, type UnderspecificationType, type QuestionStrategy, type QuestionGenerationResult, type QuestionPurpose, type NegotiationQuestionPurpose, type NegotiationQuestionCandidate, type NegotiationQuestionProvenance, NegotiationQuestionCandidateSchema, NegotiationQuestionProvenanceSchema, type QuestionPoolPush, type QuestionRecoverySnapshot, type QuestionVoidedReason, type QuestionPoolPushRequestStatus, type QuestionPoolPushRequestReason, } from "./shared/schemas/question.schema.js";
 export type { PendingQuestionSummary } from "./shared/schemas/pending-question.schema.js";
-export type { McpAuthInput } from "./shared/schemas/mcp-auth.schema.js";
+export { McpAuthInputSchema, McpApiKeyMetadataSchema, McpResolvedIdentitySchema, } from "./shared/schemas/mcp-auth.schema.js";
+export type { McpAuthInput, McpApiKeyMetadata, McpResolvedIdentity, } from "./shared/schemas/mcp-auth.schema.js";
 export type { DiscoverySummary, DiscoveryNegotiation, DiscoveryTurn, DiscoveryOutcome, DiscoveryQuestionInput, NegotiationRole } from "./shared/schemas/discovery-question.schema.js";
 export type { NetworkAssignmentMetadata } from "./shared/schemas/network-assignment.schema.js";
 export { DEFAULT_NETWORK_ASSIGNMENT_THRESHOLD, resolveAssignmentNetworkScope, buildNetworkAssignmentDecision } from "./shared/assignment/network-assignment.policy.js";
@@ -53,6 +53,8 @@ export { NegotiationGraphFactory, negotiateCandidates } from "./capabilities/neg
 export { OpportunityGraphFactory } from "./capabilities/opportunities.facade.js";
 export { hasUnsupportedOpportunityClaim } from "./capabilities/opportunities.facade.js";
 export type { StampNewbornOpportunitiesFn } from "./capabilities/opportunities.facade.js";
+export { opportunityOwnerActionForStatus, bindOwnerApprovalProvenance } from "./capabilities/opportunities.facade.js";
+export type { OpportunityOwnerAction, OpportunityOwnerApprovalAttestation, OpportunityOwnerApprovalAuthority, OpportunityOwnerApprovalBinding, OpportunityOwnerApprovalChallenge, OpportunityOwnerApprovalDenialReason, OpportunityOwnerApprovalVerdict, OpportunityOwnerInteractionProvenance, OpportunityOwnerInteractionSurface, } from "./capabilities/opportunities.facade.js";
 export { EnrichmentGraphFactory } from "./capabilities/participant-context.facade.js";
 export { PremiseGraphFactory } from "./capabilities/participant-context.facade.js";
 export { UserContextGenerator } from "./capabilities/participant-context.facade.js";
@@ -104,6 +106,7 @@ export { canUserSeeOpportunity, isActionableForViewer, validateOpportunityActors
 export { getPrimaryActionLabel } from "./capabilities/opportunities.facade.js";
 export { computeFeedHealth } from "./capabilities/opportunities.facade.js";
 export type { FeedHealthInput } from "./capabilities/opportunities.facade.js";
+export { isIntroducerDiscoveryEnabled } from "./capabilities/opportunities.facade.js";
 export { selectContactsForDiscovery, shouldRunIntroducerDiscovery, runIntroducerDiscovery, MAX_CONTACTS_PER_CYCLE, MAX_CANDIDATES_PER_CONTACT, INTRODUCER_DISCOVERY_SOURCE } from "./capabilities/opportunities.facade.js";
 export type { IntroducerDiscoveryDatabase, IntroducerDiscoveryQueue, ContactWithIntents } from "./capabilities/opportunities.facade.js";
 export { persistOpportunities } from "./capabilities/opportunities.facade.js";
@@ -137,6 +140,10 @@ export { AMBIENT_PARK_WINDOW_MS } from './capabilities/negotiation.facade.js';
 export { normalizeTelegramHandle } from './shared/utils/telegram-handle.js';
 export { createMcpServer, buildMcpOnboardingMessage, ONBOARDING_ALLOWED } from "./mcp/mcp.server.js";
 export type { ScopedDepsFactory } from "./mcp/mcp.server.js";
+export { MCP_AGENT_ADMIN_TOOLS, CANONICAL_MCP_CAPABILITY_POLICY_OPTIONS, CANONICAL_MCP_TOOL_ACCESS_RULES, MCP_INFORMATIONAL_TOOLS, MCP_PERMISSION_ACTIONS, McpCapabilityPolicy, McpCapabilitySubjectSchema, McpPermissionActionSchema, McpPolicyAgentSnapshotSchema, McpPrincipalProfileSchema, McpToolPermissionRequirementSchema, McpToolAccessRuleSchema, buildMcpAuthorizationDenialEvent, defineMcpToolAccessRules, defineMcpToolPermissionMap, resolveMcpActivityCaller, resolveMcpCapabilitySubject, } from "./mcp/mcp.authorization-policy.js";
+export { ActivityQuestionCountsSchema, ActivityQuestionDomainSchema, ActivitySummaryDomainSchema, ActivitySummaryResponseSchema, McpActivityCallerSchema, QUESTION_MODE_TO_DOMAIN, READ_ACTIVITY_SUMMARY_TOOL_NAME, activitySummaryNetworkId, projectActivitySummary, resolveActivitySummaryDomains, } from "./shared/agent/activity-projection.js";
+export type { ActivityQuestionCounts, ActivityQuestionDomain, ActivitySummaryDomain, McpActivityCaller, ProjectedActivitySummary, } from "./shared/agent/activity-projection.js";
+export type { McpAuthorizationDenialEvent, McpAuthorizationObserver, McpCapabilityDecision, McpCapabilityDecisionReason, McpCapabilityPolicyOptions, McpCapabilitySubject, McpPermissionAction, McpPolicyAgentSnapshot, McpPrincipalProfile, McpToolPermissionMap, McpToolPermissionRequirement, McpToolAccessRule, McpToolAccessRuleMap, ResolveMcpCapabilitySubjectInput, } from "./mcp/mcp.authorization-policy.js";
 export type { UserNegotiationContext, NegotiationTurn, NegotiationOutcome, SeedAssessment } from "./shared/schemas/negotiation-state.schema.js";
 export type { NegotiationAction, NegotiationSeat, NegotiationProtocolVersion } from "./shared/schemas/negotiation-state.schema.js";
 export type { NegotiationGraphLike } from "./capabilities/negotiation.facade.js";

package/dist/index.js

@@ -25,6 +25,7 @@ export { SYSTEM_AGENT_IDS } from './shared/interfaces/agent.interface.js';
 // ─── Shared schemas ───────────────────────────────────────────────────────────
 export { ChatContextDigestSchema } from "./shared/schemas/chat-context.schema.js";
 export { NegotiationQuestionCandidateSchema, NegotiationQuestionProvenanceSchema, } from "./shared/schemas/question.schema.js";
+export { McpAuthInputSchema, McpApiKeyMetadataSchema, McpResolvedIdentitySchema, } from "./shared/schemas/mcp-auth.schema.js";
 export { DEFAULT_NETWORK_ASSIGNMENT_THRESHOLD, resolveAssignmentNetworkScope, buildNetworkAssignmentDecision } from "./shared/assignment/network-assignment.policy.js";
 export { buildCandidateEvidence } from "./capabilities/opportunities.facade.js";
 // ─── Graph factories ──────────────────────────────────────────────────────────
@@ -45,6 +46,7 @@ export { MaintenanceGraphFactory } from "./capabilities/interaction-composition.
 export { NegotiationGraphFactory, negotiateCandidates } from "./capabilities/negotiation.facade.js";
 export { OpportunityGraphFactory } from "./capabilities/opportunities.facade.js";
 export { hasUnsupportedOpportunityClaim } from "./capabilities/opportunities.facade.js";
+export { opportunityOwnerActionForStatus, bindOwnerApprovalProvenance } from "./capabilities/opportunities.facade.js";
 export { EnrichmentGraphFactory } from "./capabilities/participant-context.facade.js";
 export { PremiseGraphFactory } from "./capabilities/participant-context.facade.js";
 // ─── Agents ───────────────────────────────────────────────────────────────────
@@ -86,6 +88,7 @@ export { OpportunityPresenter, gatherPresenterContext } from "./capabilities/opp
 export { canUserSeeOpportunity, isActionableForViewer, validateOpportunityActors, classifyOpportunity, selectByComposition, FEED_SOFT_TARGETS } from "./capabilities/opportunities.facade.js";
 export { getPrimaryActionLabel } from "./capabilities/opportunities.facade.js";
 export { computeFeedHealth } from "./capabilities/opportunities.facade.js";
+export { isIntroducerDiscoveryEnabled } from "./capabilities/opportunities.facade.js";
 export { selectContactsForDiscovery, shouldRunIntroducerDiscovery, runIntroducerDiscovery, MAX_CONTACTS_PER_CYCLE, MAX_CANDIDATES_PER_CONTACT, INTRODUCER_DISCOVERY_SOURCE } from "./capabilities/opportunities.facade.js";
 export { persistOpportunities } from "./capabilities/opportunities.facade.js";
 export { presentOpportunity } from "./capabilities/opportunities.facade.js";
@@ -111,6 +114,8 @@ export { AMBIENT_PARK_WINDOW_MS } from './capabilities/negotiation.facade.js';
 export { normalizeTelegramHandle } from './shared/utils/telegram-handle.js';
 // ─── MCP ──────────────────────────────────────────────────────────────────────
 export { createMcpServer, buildMcpOnboardingMessage, ONBOARDING_ALLOWED } from "./mcp/mcp.server.js";
+export { MCP_AGENT_ADMIN_TOOLS, CANONICAL_MCP_CAPABILITY_POLICY_OPTIONS, CANONICAL_MCP_TOOL_ACCESS_RULES, MCP_INFORMATIONAL_TOOLS, MCP_PERMISSION_ACTIONS, McpCapabilityPolicy, McpCapabilitySubjectSchema, McpPermissionActionSchema, McpPolicyAgentSnapshotSchema, McpPrincipalProfileSchema, McpToolPermissionRequirementSchema, McpToolAccessRuleSchema, buildMcpAuthorizationDenialEvent, defineMcpToolAccessRules, defineMcpToolPermissionMap, resolveMcpActivityCaller, resolveMcpCapabilitySubject, } from "./mcp/mcp.authorization-policy.js";
+export { ActivityQuestionCountsSchema, ActivityQuestionDomainSchema, ActivitySummaryDomainSchema, ActivitySummaryResponseSchema, McpActivityCallerSchema, QUESTION_MODE_TO_DOMAIN, READ_ACTIVITY_SUMMARY_TOOL_NAME, activitySummaryNetworkId, projectActivitySummary, resolveActivitySummaryDomains, } from "./shared/agent/activity-projection.js";
 // ─── Negotiation seat rules (v2 client-advocate protocol) ───────────────────
 export { allowedActionsFor, isTerminalAction, isRejectLikeAction, readProtocolVersion, resolveSeat, seatViolationMessage } from "./capabilities/negotiation.facade.js";
 export { assessConsultationEligibility, consultationPromptFor, negotiationConsultationPolicyMode } from "./capabilities/negotiation.facade.js";

package/dist/maintenance/maintenance.graph.js

@@ -11,6 +11,7 @@ import { MaintenanceGraphState } from './maintenance.state.js';
 import { computeFeedHealth } from '../opportunity/feed/feed.health.js';
 import { canUserSeeOpportunity, classifyOpportunity, isActionableForViewer, FEED_SOFT_TARGETS } from '../opportunity/opportunity.utils.js';
 import { shouldRunIntroducerDiscovery, runIntroducerDiscovery } from '../opportunity/opportunity.introducer.js';
+import { isIntroducerDiscoveryEnabled } from '../opportunity/application/opportunity.introducer-feature.js';
 import { protocolLogger } from '../shared/observability/protocol.logger.js';
 const logger = protocolLogger('MaintenanceGraph');
 const FRESHNESS_WINDOW_MS = 12 * 60 * 60 * 1000; // 12 hours
@@ -132,6 +133,12 @@ export class MaintenanceGraphFactory {
             }
         };
         const introducerDiscoveryNode = async (state) => {
+            if (!isIntroducerDiscoveryEnabled()) {
+                logger.info('Introducer discovery skipped — disabled by configuration', {
+                    userId: state.userId,
+                });
+                return {};
+            }
             try {
                 const connectorFlowTarget = FEED_SOFT_TARGETS.connectorFlow;
                 if (!shouldRunIntroducerDiscovery(state.connectorFlowCount, connectorFlowTarget)) {

package/dist/mcp/mcp.authorization-policy.d.ts

@@ -0,0 +1,250 @@
+import { z } from 'zod';
+import type { McpResolvedIdentity } from '../shared/schemas/mcp-auth.schema.js';
+import type { McpActivityCaller } from '../shared/agent/activity-projection.js';
+/** Canonical MCP permission actions. */
+export declare const MCP_PERMISSION_ACTIONS: readonly ["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"];
+export declare const McpPermissionActionSchema: z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>;
+export type McpPermissionAction = z.infer<typeof McpPermissionActionSchema>;
+export declare const McpToolPermissionRequirementSchema: z.ZodObject<{
+    action: z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>;
+    /**
+     * Capability reach only. Entity ownership, membership, approval, and exact
+     * scope checks remain in the capability handler.
+     */
+    reach: z.ZodDefault<z.ZodEnum<["principal", "network"]>>;
+}, "strict", z.ZodTypeAny, {
+    action: "manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks";
+    reach: "network" | "principal";
+}, {
+    action: "manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks";
+    reach?: "network" | "principal" | undefined;
+}>;
+export type McpToolPermissionRequirement = z.infer<typeof McpToolPermissionRequirementSchema>;
+export type McpToolPermissionMap = ReadonlyMap<string, McpToolPermissionRequirement>;
+/**
+ * Runtime-validates a capability-owned tool-to-permission mapping.
+ */
+export declare function defineMcpToolPermissionMap(mapping: Readonly<Record<string, McpToolPermissionRequirement>>): McpToolPermissionMap;
+export declare const McpToolAccessRuleSchema: z.ZodEffects<z.ZodObject<{
+    access: z.ZodEnum<["permission", "authenticated", "human_only", "agent_admin", "informational", "delivery_only", "removed"]>;
+    actions: z.ZodOptional<z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">>;
+    reach: z.ZodEnum<["principal", "network"]>;
+}, "strict", z.ZodTypeAny, {
+    reach: "network" | "principal";
+    access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+}, {
+    reach: "network" | "principal";
+    access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+}>, {
+    reach: "network" | "principal";
+    access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+}, {
+    reach: "network" | "principal";
+    access: "removed" | "permission" | "authenticated" | "human_only" | "agent_admin" | "informational" | "delivery_only";
+    actions?: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[] | undefined;
+}>;
+export type McpToolAccessRule = z.infer<typeof McpToolAccessRuleSchema>;
+export type McpToolAccessRuleMap = ReadonlyMap<string, McpToolAccessRule>;
+/** Runtime-validates a complete static MCP tool access matrix. */
+export declare function defineMcpToolAccessRules(rules: Readonly<Record<string, McpToolAccessRule>>): McpToolAccessRuleMap;
+/**
+ * Canonical MCP tool authorization matrix.
+ *
+ * Every tool registered by `createToolRegistry` is classified. Tool handlers
+ * retain domain ownership, membership, exact-scope, and approval checks.
+ */
+export declare const CANONICAL_MCP_TOOL_ACCESS_RULES: McpToolAccessRuleMap;
+/** Tools visible while a session-authenticated human completes onboarding. */
+export declare const ONBOARDING_ALLOWED: ReadonlySet<string>;
+/** Agent administration inventory. */
+export declare const MCP_AGENT_ADMIN_TOOLS: ReadonlySet<string>;
+/** Informational inventory retained as a convenience export. */
+export declare const MCP_INFORMATIONAL_TOOLS: ReadonlySet<string>;
+export declare const McpPolicyAgentSnapshotSchema: z.ZodObject<{
+    id: z.ZodString;
+    ownerId: z.ZodString;
+    type: z.ZodEnum<["personal", "external", "system"]>;
+    status: z.ZodEnum<["active", "inactive"]>;
+    permissions: z.ZodArray<z.ZodObject<{
+        agentId: z.ZodString;
+        userId: z.ZodString;
+        scope: z.ZodEnum<["global", "node", "network"]>;
+        scopeId: z.ZodNullable<z.ZodString>;
+        actions: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        userId: string;
+        scope: "network" | "global" | "node";
+        scopeId: string | null;
+        agentId: string;
+        actions: string[];
+    }, {
+        userId: string;
+        scope: "network" | "global" | "node";
+        scopeId: string | null;
+        agentId: string;
+        actions: string[];
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    type: "system" | "personal" | "external";
+    status: "active" | "inactive";
+    ownerId: string;
+    permissions: {
+        userId: string;
+        scope: "network" | "global" | "node";
+        scopeId: string | null;
+        agentId: string;
+        actions: string[];
+    }[];
+}, {
+    id: string;
+    type: "system" | "personal" | "external";
+    status: "active" | "inactive";
+    ownerId: string;
+    permissions: {
+        userId: string;
+        scope: "network" | "global" | "node";
+        scopeId: string | null;
+        agentId: string;
+        actions: string[];
+    }[];
+}>;
+export type McpPolicyAgentSnapshot = z.infer<typeof McpPolicyAgentSnapshotSchema>;
+export declare const McpPrincipalProfileSchema: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "delivery_agent", "invalid_agent"]>;
+export type McpPrincipalProfile = z.infer<typeof McpPrincipalProfileSchema>;
+export declare const McpCapabilitySubjectSchema: z.ZodObject<{
+    profile: z.ZodEnum<["session_human", "onboarding_human", "enrollment_key", "unregistered_key", "registered_global_agent", "registered_network_agent", "delivery_agent", "invalid_agent"]>;
+    userId: z.ZodString;
+    agentId: z.ZodOptional<z.ZodString>;
+    agentType: z.ZodOptional<z.ZodEnum<["personal", "external", "system"]>>;
+    isOnboarding: z.ZodBoolean;
+    networkScopeId: z.ZodNullable<z.ZodString>;
+    permissions: z.ZodArray<z.ZodEnum<["manage:identity", "manage:premises", "manage:intents", "manage:networks", "manage:opportunities", "manage:negotiations"]>, "many">;
+}, "strict", z.ZodTypeAny, {
+    userId: string;
+    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "delivery_agent" | "invalid_agent";
+    permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
+    networkScopeId: string | null;
+    isOnboarding: boolean;
+    agentId?: string | undefined;
+    agentType?: "system" | "personal" | "external" | undefined;
+}, {
+    userId: string;
+    profile: "session_human" | "onboarding_human" | "enrollment_key" | "unregistered_key" | "registered_global_agent" | "registered_network_agent" | "delivery_agent" | "invalid_agent";
+    permissions: ("manage:negotiations" | "manage:intents" | "manage:opportunities" | "manage:identity" | "manage:premises" | "manage:networks")[];
+    networkScopeId: string | null;
+    isOnboarding: boolean;
+    agentId?: string | undefined;
+    agentType?: "system" | "personal" | "external" | undefined;
+}>;
+export type McpCapabilitySubject = z.infer<typeof McpCapabilitySubjectSchema>;
+export type ResolveMcpCapabilitySubjectInput = {
+    identity: McpResolvedIdentity;
+    isOnboarding: boolean;
+    agent?: McpPolicyAgentSnapshot | null;
+};
+/**
+ * Central capability-loading interpretation of a stored permission row's raw
+ * actions. Canonical actions pass through; retired actions project per
+ * {@link LEGACY_STORED_ACTION_PROJECTION}; every unknown action fails closed
+ * (ignored). Owner/scope matching is applied by the caller BEFORE this runs, so
+ * this function never widens the scope a grant applies to.
+ */
+export declare function projectStoredPermissionActions(actions: readonly string[]): McpPermissionAction[];
+/**
+ * Resolves a request-local, runtime-validated principal profile.
+ */
+export declare function resolveMcpCapabilitySubject(input: ResolveMcpCapabilitySubjectInput): McpCapabilitySubject;
+/**
+ * Maps a resolved capability subject to the typed caller context consumed by
+ * the centralized activity-summary projection. Session and onboarding humans
+ * own the summarized data and receive the full owner view; every other
+ * profile is projected as an agent bounded by its granted permissions and
+ * (for network agents) its bound community.
+ */
+export declare function resolveMcpActivityCaller(subject: McpCapabilitySubject): McpActivityCaller;
+export declare const McpCapabilityDecisionReasonSchema: z.ZodEnum<["session_human", "onboarding", "enrollment", "authenticated", "agent_self_read", "informational", "permission_granted", "delivery", "onboarding_required", "enrollment_required", "unregistered_principal", "invalid_agent", "agent_admin_denied", "human_read_own_agent_denied", "human_only", "permission_missing", "delivery_required", "removed", "tool_unclassified"]>;
+export type McpCapabilityDecision = {
+    allowed: boolean;
+    reason: z.infer<typeof McpCapabilityDecisionReasonSchema>;
+    reach?: 'principal' | 'network';
+    requiredPermissions?: McpPermissionAction[];
+};
+export type McpCapabilityDecisionReason = z.infer<typeof McpCapabilityDecisionReasonSchema>;
+/**
+ * Safe, host-facing description of a single authorization denial. It carries
+ * ONLY the caller profile, the tool, and the policy reason/reach — never a
+ * token, API key, bearer credential, raw header, or tool-argument payload.
+ * `userId`/`agentId`/`networkScopeId` are opaque principal identifiers, not
+ * secrets. Constructed centrally in {@link buildMcpAuthorizationDenialEvent}
+ * so no call site can widen it with sensitive fields.
+ */
+export type McpAuthorizationDenialEvent = {
+    /** Which JSON-RPC boundary produced the denial. */
+    phase: 'tools/call' | 'tools/list';
+    /** The classified tool the caller attempted. */
+    toolName: string;
+    /** The resolved principal profile (never the credential that produced it). */
+    profile: McpPrincipalProfile;
+    /** The policy decision reason. */
+    reason: McpCapabilityDecisionReason;
+    /** Capability reach of the tool rule, when the rule was found. */
+    reach?: 'principal' | 'network';
+    /** The any-of permissions the tool required, when applicable. */
+    requiredPermissions?: McpPermissionAction[];
+    /** Opaque owning-user identifier. */
+    userId: string;
+    /** Opaque agent identifier, present only for agent principals. */
+    agentId?: string;
+    /** Bound network scope for network agents; null otherwise. */
+    networkScopeId: string | null;
+};
+/**
+ * Host-injected authorization observability seam. The protocol emits
+ * structured, secret-free denial events at the host boundary; the host decides
+ * how to record them. Implementations MUST NOT throw affect the decision — the
+ * server calls this defensively and ignores observer failures (fail-closed is
+ * preserved regardless).
+ */
+export interface McpAuthorizationObserver {
+    onCapabilityDenied(event: McpAuthorizationDenialEvent): void;
+}
+/**
+ * Builds a safe denial event from a resolved subject and a denial decision.
+ * Only whitelisted, non-sensitive fields are copied across; the caller's
+ * granted permissions, credentials, headers, and tool arguments are never
+ * included.
+ */
+export declare function buildMcpAuthorizationDenialEvent(input: {
+    phase: 'tools/call' | 'tools/list';
+    toolName: string;
+    subject: McpCapabilitySubject;
+    decision: McpCapabilityDecision;
+}): McpAuthorizationDenialEvent;
+export type McpCapabilityPolicyOptions = {
+    /** Complete static rule map; defaults to the canonical production matrix. */
+    toolRules?: McpToolAccessRuleMap;
+};
+/**
+ * Reusable MCP capability policy. It stores static rules only; caller-specific
+ * subjects and decisions are never retained.
+ */
+export declare class McpCapabilityPolicy {
+    private readonly toolRules;
+    constructor(options?: McpCapabilityPolicyOptions);
+    /**
+     * Decides whether a resolved caller may use one classified tool.
+     */
+    authorize(subject: McpCapabilitySubject, toolName: string): McpCapabilityDecision;
+    /**
+     * Filters a static inventory and returns a fresh, uncached caller list.
+     */
+    visibleToolNames(subject: McpCapabilitySubject, toolNames: readonly string[]): string[];
+    /** Returns the static classification for inventory tests and host composition. */
+    ruleFor(toolName: string): McpToolAccessRule | undefined;
+}
+/** Canonical production options explicitly passed by the host composition. */
+export declare const CANONICAL_MCP_CAPABILITY_POLICY_OPTIONS: McpCapabilityPolicyOptions;