@joe-broadhead/messaging 0.0.0-stage → 0.7.0

package/dist/third-party-notices.md

@@ -0,0 +1,239 @@
+# Third-party notices
+
+The files in dist/ include code from these packages, under their own licences.
+
+## @modelcontextprotocol/sdk 1.32.2 (MIT)
+
+```
+MIT License
+
+Copyright (c) 2024 Anthropic, PBC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## ajv 8.20.0 (MIT)
+
+```
+The MIT License (MIT)
+
+Copyright (c) 2015-2021 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## ajv-formats 3.0.1 (MIT)
+
+```
+MIT License
+
+Copyright (c) 2020 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## fast-deep-equal 3.1.3 (MIT)
+
+```
+MIT License
+
+Copyright (c) 2017 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## fast-uri 3.1.9 (BSD-3-Clause)
+
+```
+Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae
+Copyright (c) 2021-present The Fastify team <https://github.com/fastify/fastify#team>
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * The names of any contributors may not be used to endorse or promote
+      products derived from this software without specific prior written
+      permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS AND CONTRIBUTORS BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+                                  *   *   *
+
+The complete list of contributors can be found at:
+- https://github.com/garycourt/uri-js/graphs/contributors
+```
+
+## json-schema-traverse 1.0.0 (MIT)
+
+```
+MIT License
+
+Copyright (c) 2017 Evgeny Poberezkin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## ws 8.22.0 (MIT)
+
+```
+Copyright (c) 2011 Einar Otto Stangvik <einaros@gmail.com>
+Copyright (c) 2013 Arnout Kazemier and contributors
+Copyright (c) 2016 Luigi Pinca and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+```
+
+## zod 4.6.7 (MIT)
+
+```
+MIT License
+
+Copyright (c) 2025 Colin McDonnell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## zod-to-json-schema 3.25.2 (ISC)
+
+```
+ISC License
+
+Copyright (c) 2020, Stefan Terdell
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+```

package/dist/third-party.json

@@ -0,0 +1,88 @@
+{
+  "exports": {
+    "./bin/messaging-mcp.js": [
+      "@modelcontextprotocol/sdk",
+      "ajv",
+      "ajv-formats",
+      "fast-deep-equal",
+      "fast-uri",
+      "json-schema-traverse",
+      "zod",
+      "zod-to-json-schema"
+    ],
+    "./bin/messaging-relay.js": [
+      "ws",
+      "zod"
+    ],
+    "./bin/messaging.js": [
+      "zod"
+    ],
+    "./bin/messagingd.js": [
+      "ws",
+      "zod"
+    ],
+    "./core": [
+      "zod"
+    ],
+    "./core/testing": [
+      "zod"
+    ],
+    "./ipc": [
+      "zod"
+    ],
+    "./ipc/testing": [
+      "zod"
+    ],
+    "./testing/jelly-id": [],
+    "./zod": [
+      "zod"
+    ]
+  },
+  "packages": {
+    "@modelcontextprotocol/sdk": {
+      "version": "1.32.2",
+      "license": "MIT",
+      "text": "MIT License\n\nCopyright (c) 2024 Anthropic, PBC\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."
+    },
+    "ajv": {
+      "version": "8.20.0",
+      "license": "MIT",
+      "text": "The MIT License (MIT)\n\nCopyright (c) 2015-2021 Evgeny Poberezkin\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."
+    },
+    "ajv-formats": {
+      "version": "3.0.1",
+      "license": "MIT",
+      "text": "MIT License\n\nCopyright (c) 2020 Evgeny Poberezkin\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."
+    },
+    "fast-deep-equal": {
+      "version": "3.1.3",
+      "license": "MIT",
+      "text": "MIT License\n\nCopyright (c) 2017 Evgeny Poberezkin\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."
+    },
+    "fast-uri": {
+      "version": "3.1.9",
+      "license": "BSD-3-Clause",
+      "text": "Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae\nCopyright (c) 2021-present The Fastify team <https://github.com/fastify/fastify#team>\nAll rights reserved.\n\nRedistribution and use in source and binary forms, with or without\nmodification, are permitted provided that the following conditions are met:\n    * Redistributions of source code must retain the above copyright\n      notice, this list of conditions and the following disclaimer.\n    * Redistributions in binary form must reproduce the above copyright\n      notice, this list of conditions and the following disclaimer in the\n      documentation and/or other materials provided with the distribution.\n    * The names of any contributors may not be used to endorse or promote\n      products derived from this software without specific prior written\n      permission.\n\nTHIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\nANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\nWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\nDISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS AND CONTRIBUTORS BE LIABLE FOR ANY\nDIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\nLOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND\nON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\nSOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n\n                                  *   *   *\n\nThe complete list of contributors can be found at:\n- https://github.com/garycourt/uri-js/graphs/contributors"
+    },
+    "json-schema-traverse": {
+      "version": "1.0.0",
+      "license": "MIT",
+      "text": "MIT License\n\nCopyright (c) 2017 Evgeny Poberezkin\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."
+    },
+    "ws": {
+      "version": "8.22.0",
+      "license": "MIT",
+      "text": "Copyright (c) 2011 Einar Otto Stangvik <einaros@gmail.com>\nCopyright (c) 2013 Arnout Kazemier and contributors\nCopyright (c) 2016 Luigi Pinca and contributors\n\nPermission is hereby granted, free of charge, to any person obtaining a copy of\nthis software and associated documentation files (the \"Software\"), to deal in\nthe Software without restriction, including without limitation the rights to\nuse, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of\nthe Software, and to permit persons to whom the Software is furnished to do so,\nsubject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS\nFOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR\nCOPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER\nIN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN\nCONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE."
+    },
+    "zod": {
+      "version": "4.6.7",
+      "license": "MIT",
+      "text": "MIT License\n\nCopyright (c) 2025 Colin McDonnell\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."
+    },
+    "zod-to-json-schema": {
+      "version": "3.25.2",
+      "license": "ISC",
+      "text": "ISC License\n\nCopyright (c) 2020, Stefan Terdell\n\nPermission to use, copy, modify, and/or distribute this software for any\npurpose with or without fee is hereby granted, provided that the above\ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE."
+    }
+  }
+}

package/dist/types/core/address.d.ts

@@ -0,0 +1,16 @@
+import { MachineLabel, PersonId, SessionName } from "./schema/common.js";
+/**
+ * One session: `person/session[@label]`. Group forms (`person/*`, `repo:<name>`, `*`) are not
+ * addresses (spec §3): an address names one session.
+ */
+export type ParsedAddress = {
+    kind: "session";
+    person: PersonId;
+    session: SessionName;
+    label?: MachineLabel;
+};
+/** Parses the address grammar in `schema/common.ts`. Anything else is `invalid_request`. */
+export declare function parseAddress(text: string): ParsedAddress;
+/** The inverse of `parseAddress`. */
+export declare function formatAddress(address: ParsedAddress): string;
+export declare function formatAddress(person: PersonId, session: SessionName, label?: MachineLabel): string;

package/dist/types/core/agent/operations.d.ts

@@ -0,0 +1,129 @@
+import { type ToolAddress, type ToolConsent, type ToolInput, type ToolOutput } from "../agent-tools.js";
+import type * as A2A from "../schema/a2a.js";
+import type { AgentMethod, IpcParams, IpcResult, TaskRecord } from "../schema/ipc.js";
+import { type ToolFramer } from "./text.js";
+/**
+ * The eight agent tools' operations (spec §11, "Agent tools"), on the agent IPC methods and
+ * `conv.read`, shared by every agent-facing client. Pure: the client injects its daemon link, its
+ * fence, what the session may reach, and hooks for what it tracks. A client's tool adapter
+ * validates input and hands in `assert`, which asks its permission for a conversation; every
+ * operation calls it after its own cheap checks and before any side effect or before any peer text
+ * is returned. Failures are `MessagingError`s with plain messages; the client shapes them into
+ * `{error: {code, message, remedy}}`.
+ */
+/** The daemon calls an operation makes: the agent methods only. */
+export interface ToolLink {
+    call<M extends AgentMethod>(method: M, params: IpcParams<M>, signal?: AbortSignal): Promise<IpcResult<M>>;
+}
+/** A call's session: its link, key and own address, and the peer when the call runs in a guarded peer turn. */
+export interface CallSession {
+    link: ToolLink;
+    key: string;
+    /** This session's registered address, `person/session@label`. */
+    address: string;
+    person: string;
+    /** Set in a guarded peer turn: only what concerns this person exists. */
+    peer?: string;
+}
+/** What a client tracks about what its agent saw. Each is called after the daemon call succeeded. */
+export interface OperationsHooks {
+    /** Acknowledge a preview shown to the agent as `handed_to_agent`; never throws. */
+    ack(link: ToolLink, key: string, id: string): Promise<void>;
+    /** The agent was shown this item's preview. */
+    shown(id: string): void;
+    /** The agent read this item in full (`item.read`). */
+    read(id: string): void;
+    /** The agent saw this task as it is now. */
+    sawTask(record: TaskRecord): void;
+}
+/**
+ * What the session's agent may reach through chats (spec §11). `dms`: conversations with persons
+ * (DM lines). `channels`: only these channels (local names); absent, every channel the person is in.
+ */
+export interface ChatAccess {
+    dms: boolean;
+    channels?: ReadonlySet<string>;
+}
+export interface OperationsContext {
+    session(sessionID: string, signal?: AbortSignal): Promise<CallSession>;
+    hooks: OperationsHooks;
+    framer: ToolFramer;
+    /**
+     * How a request from `person` runs here when the daemon has not said (a task record, or an item stored before
+     * consent); `self` is the session's own person. An inbox item's own `consent`, the daemon's decision (spec §6.9),
+     * always wins.
+     */
+    consent(person: string, self: string): ToolConsent;
+    access: ChatAccess;
+}
+/** What a send will do, checked before the permission prompt. */
+export type SendPlan = {
+    kind: "line" | "post";
+    to: ToolAddress;
+    conversation: string;
+    target: string;
+    text: string;
+    thread?: string;
+    request?: {
+        contact: string;
+    };
+} | {
+    kind: "mail" | "task";
+    to: ToolAddress;
+    conversation: string;
+    params: Omit<IpcParams<"msg.send">, "key" | "idempotencyKey">;
+    delegation?: string;
+};
+export declare class Operations {
+    private readonly ctx;
+    constructor(ctx: OperationsContext);
+    private get framer();
+    private consent;
+    /** Refuses a chat conversation this client may not reach, before any daemon call. */
+    private reachable;
+    contacts(sessionID: string, input: ToolInput<"contacts">, signal?: AbortSignal): Promise<ToolOutput<"contacts">>;
+    /**
+     * Checks a send without side effects: the address, the peer-turn allowance, what may go to whom,
+     * what `replyTo` and `onBehalfOf` name. Returns what the send will do, for the permission prompt.
+     */
+    planSend(sessionID: string, input: ToolInput<"send">, signal?: AbortSignal): Promise<SendPlan>;
+    send(sessionID: string, plan: SendPlan, idempotencyKey: string, signal?: AbortSignal): Promise<ToolOutput<"send">>;
+    /**
+     * What `replyTo` names, for a send to the agent `to`: a message it sent this session (the reply
+     * joins its conversation), or a task this session asked it to run (the text is input for it).
+     */
+    private replyOf;
+    /** The task a send `onBehalfOf` delegates for: this session runs it and it is not finished (spec §6.7). */
+    private delegationParent;
+    /** Lists items; previews put in front of the agent are acknowledged `handed_to_agent` (spec §8.2). */
+    inbox(sessionID: string, input: ToolInput<"inbox">, signal?: AbortSignal): Promise<ToolOutput<"inbox">>;
+    /**
+     * One item: a message or task request this session received (marks it read and sends a read
+     * receipt), a task this session asked for or runs, or something it sent (how far it got).
+     * `assert` gets the item's conversation before anything changes or is shown.
+     */
+    readItem(sessionID: string, id: string, assert: (conversation: string) => Promise<void>, signal?: AbortSignal): Promise<ToolOutput<"read">>;
+    /**
+     * A page of one conversation, oldest first: the chat lines with a person or in a channel, or the
+     * mail and tasks with an agent. Mail previews shown here count as handed to the agent.
+     */
+    readConversation(sessionID: string, input: Pick<ToolInput<"read">, "before" | "after" | "limit"> & {
+        with: string;
+    }, assert: (conversation: string) => Promise<void>, signal?: AbortSignal): Promise<ToolOutput<"read">>;
+    private page;
+    /** Chat lines with persons and in channels. Each conversation in the hits is asserted; `allowed` false drops it. */
+    search(sessionID: string, input: ToolInput<"search">, allowed: (conversation: string) => Promise<boolean>, signal?: AbortSignal): Promise<ToolOutput<"search">>;
+    tasks(sessionID: string, input: ToolInput<"tasks">, signal?: AbortSignal): Promise<ToolOutput<"tasks">>;
+    /**
+     * The task an update or a cancel names, checked locally before any permission prompt: this
+     * session holds `role`, and for an update the task is not finished and `next` is legal.
+     */
+    taskTarget(sessionID: string, id: string, role: "requester" | "executor", next?: A2A.TaskState, signal?: AbortSignal): Promise<{
+        record: TaskRecord;
+        to: ToolAddress;
+    }>;
+    updateTask(sessionID: string, record: TaskRecord, input: ToolInput<"task_update">, signal?: AbortSignal): Promise<ToolOutput<"task_update">>;
+    cancelTask(sessionID: string, record: TaskRecord, reason: string | undefined, signal?: AbortSignal): Promise<ToolOutput<"task_cancel">>;
+    /** A task of this session, in its peer scope; `field` names the input for the error. */
+    private ownTask;
+}

package/dist/types/core/agent/present.d.ts

@@ -0,0 +1,57 @@
+import { type ToolConsent, type ToolOutput, type ToolTask } from "../agent-tools.js";
+import type { ChatLine, ConvEntry, DirectoryEntry, InboxItem, IpcResult, TaskFollowUp, TaskRecord } from "../schema/ipc.js";
+import { type ToolFramer as Framer } from "./text.js";
+/**
+ * Daemon results → agent tool outputs (`AgentTool`, spec §11). Pure. Every string another person
+ * or agent wrote passes through the client's framer. Peer-chosen ids are fenced unless they are
+ * plain identifiers, so no peer text reaches the model unfenced through a tool output.
+ *
+ * Who wrote each text of a task (spec §11, "Authors"): every part, title, status and artifact names
+ * its author, `ours` (this side: the session, its person or its daemon) or `peer`. The peer's is
+ * fenced with `from` naming the peer; ours is shown without a fence, cleaned, so it is never
+ * presented as peer input. Authorship follows the record's role and the field, never a role the
+ * peer could choose: a requester's own request and follow-ups are ours, the executor's status and
+ * artifacts the peer's; an executor's history is all the requester's (the peer's), whatever its
+ * messages' A2A `role` says, and its own status and artifacts are ours.
+ */
+type Contact = ToolOutput<"contacts">["contacts"][number];
+type ContactAgent = NonNullable<Contact["agents"]>[number];
+type InboxOutputItem = ToolOutput<"inbox">["items"][number];
+type ReadItem = Extract<ToolOutput<"read">, {
+    item: unknown;
+}>["item"];
+type PageEntry = Extract<ToolOutput<"read">, {
+    entries: unknown;
+}>["entries"][number];
+type TaskSummary = ToolOutput<"tasks">["tasks"][number];
+export declare const isoOf: (millis: number) => string;
+/** How a request from `person` runs here (spec §11): your own person, a trusted teammate, or a guarded peer turn. */
+export declare function consentOf(person: string, self: string | undefined, trusted: ReadonlySet<string>): ToolConsent;
+export declare function presentAgent(framer: Framer, entry: DirectoryEntry): ContactAgent;
+/**
+ * What an agent session accepts under today's team policy (spec §8.3): a `cli` session takes mail
+ * but not tasks. Nothing is granted or narrowed per person yet.
+ */
+export declare function agentCan(entry: Pick<DirectoryEntry, "client">): Contact["can"];
+export declare function presentInboxItem(framer: Framer, item: InboxItem, consent: ToolConsent): InboxOutputItem;
+/** The agent conversation with a peer: `agent:<person>/<agent>`, or `person:<person>` for the person's own. */
+export declare function conversationOfPeer(peer: {
+    person: string;
+    agent?: string;
+}): string;
+export declare function presentMail(framer: Framer, result: Extract<IpcResult<"item.read">, {
+    kind: "received";
+}>, task?: ToolTask): ReadItem;
+/** A task as a read item: its request, with the whole task. */
+export declare function presentTaskItem(framer: Framer, record: TaskRecord, self: string, consent: ToolConsent | undefined): ReadItem;
+/** Something this session sent: no copy is kept, so only how far it got. */
+export declare function presentSent(result: Extract<IpcResult<"item.read">, {
+    kind: "sent";
+}>, self: string): ReadItem;
+export declare function presentLine(framer: Framer, line: ChatLine, kind: "line" | "post", conversation: string): PageEntry;
+export declare function presentConvEntry(framer: Framer, entry: ConvEntry, self: string): PageEntry;
+export declare function presentTask(framer: Framer, record: TaskRecord, consent?: ToolConsent): TaskSummary;
+/** A follow-up's stage says the executor read it. */
+export declare function followUpRead(stage: TaskFollowUp["stage"]): boolean;
+export declare function presentTaskView(framer: Framer, record: TaskRecord, consent?: ToolConsent): ToolTask;
+export {};

package/dist/types/core/agent/text.d.ts

@@ -0,0 +1,62 @@
+import type { DelegationSummary } from "../schema/delegation.js";
+import type { SendExpect } from "../schema/ipc.js";
+/**
+ * Fixed text and small helpers the agent tools of every client share (spec §11, "Agent tools").
+ * Pure. Peer-derived values here are raw: callers fence or clean them.
+ */
+/**
+ * What a send's `expect` (spec §8.2) means for the agent: fixed text, never peer text. A hint from
+ * the recipient's last presence, not a promise.
+ */
+export declare const EXPECT_TEXT: Readonly<Record<SendExpect, string>>;
+/** What a fenced value is wrapped in; each client brings its own fence. */
+export interface ToolFramer {
+    /** Inline fence for one field: `<tag-nonce attrs>text</tag-nonce>`, cut to `maxChars`. */
+    wrap(text: string, attributes?: Readonly<Record<string, string | number | boolean | undefined>>, maxChars?: number): string;
+    /** One line for outputs that carry fenced fields. */
+    notice(): string;
+}
+/** True for opaque identifiers that are safe to show outside a fence (ULIDs, UUIDs, slugs). */
+export declare function isSafeId(value: string): boolean;
+export interface SessionAddressParts {
+    person: string;
+    session: string;
+    label?: string;
+}
+/** A peer reference reduced to a validated address, or undefined when any part fails its schema. */
+export declare function validatedAddress(peer: {
+    person: string;
+    agent?: string;
+    label: string;
+}): Required<SessionAddressParts> | undefined;
+/**
+ * Whether a chain says more than the item's `from` (spec §6.7): a hop before the sender, or a scope. A
+ * direct request from the sender's own session says nothing more.
+ */
+export declare function delegated(chain: DelegationSummary): boolean;
+/** Who asked whom, root first, as raw peer-derived text: callers fence or clean it. */
+export declare function chainPath(chain: DelegationSummary): string;
+/**
+ * The `delegation` field of a task send's permission prompt. It is shown to the user in the
+ * approval UI, not to the model, so the chain is cleaned (hidden characters made visible, one line)
+ * rather than fenced.
+ */
+export declare function delegationPrompt(chain: DelegationSummary | undefined): string;
+/**
+ * Fence attributes for a message: the sender's address, the envelope id, and the verification the
+ * daemon performed. Inbox items exist only after the daemon verified the envelope signature (spec
+ * §5), so an item without a full message is still `verified="signature"`. A message whose
+ * provenance is missing, malformed or for another envelope is shown as `verified="none"`.
+ */
+export declare function messageAttributes(item: {
+    id: string;
+    kind: string;
+    from: {
+        address: string;
+    };
+    chain?: DelegationSummary;
+}, message?: {
+    metadata?: Readonly<Record<string, unknown>>;
+}): Record<string, string | undefined>;
+/** Drop undefined members so optional IPC params and output keys stay absent. */
+export declare function compact<T extends Record<string, unknown>>(record: T): T;