@keelcodes/mcp 0.1.0

package/dist/pim.js

@@ -0,0 +1,108 @@
+import { trustLevelOf, validatePim } from '@keelcodes/manifest';
+import { jsonResult } from './tools.js';
+/**
+ * ERC-8313 Protocol Interaction Manifest tools.
+ *
+ * A manifest is an *untrusted input*: it arrives as JSON from a dApp, a
+ * registry or a peer agent. These tools let a model validate and summarise one
+ * before it is ever acted on. Both are read-only and therefore ungated —
+ * refusing to validate a manifest would only push the model to guess at its
+ * shape, which is exactly the failure mode the PIM standard exists to remove.
+ *
+ * `pim` is passed inline as a parsed object (not a path): this package
+ * deliberately has no `@types/node` dependency, so it never touches the
+ * filesystem. A host that wants path input reads the file itself.
+ */
+export function createPimTools() {
+    const validate = {
+        name: 'pim_validate',
+        title: 'Validate an ERC-8313 manifest',
+        description: 'Validate a Protocol Interaction Manifest (ERC-8313) against the nine mandatory sections and their rules. Returns { valid, errors, warnings }. Read-only and never gated.',
+        inputSchema: PIM_SCHEMA,
+        run: (args) => {
+            const pim = requirePim(args);
+            return jsonResult(validatePim(pim, executionContext(args)));
+        },
+    };
+    const inspect = {
+        name: 'pim_inspect',
+        title: 'Inspect an ERC-8313 manifest',
+        description: 'Summarise a Protocol Interaction Manifest: protocol identity, chains, intents, contracts and the assigned trust level (ERC-8313 Levels 0-3). Read-only and never gated.',
+        inputSchema: PIM_SCHEMA,
+        run: async (args) => {
+            const pim = requirePim(args);
+            const result = validatePim(pim, executionContext(args));
+            const trust = await trustLevelOf(pim);
+            const metadata = pim.metadata;
+            return jsonResult({
+                valid: result.valid,
+                protocol: metadata.protocol,
+                category: metadata.category,
+                pimVersion: metadata.pimVersion,
+                chainId: metadata.chainId,
+                contracts: describeContracts(pim),
+                intents: describeIntents(pim),
+                trustLevel: {
+                    level: trust.level,
+                    name: trust.name,
+                    verified: trust.verified,
+                    reason: trust.reason,
+                    ...(trust.signer !== undefined ? { signer: trust.signer } : {}),
+                    ...(trust.signerLabel !== undefined ? { signerLabel: trust.signerLabel } : {}),
+                },
+                errors: result.errors,
+                warnings: result.warnings,
+            });
+        },
+    };
+    return [validate, inspect];
+}
+const PIM_SCHEMA = {
+    type: 'object',
+    properties: {
+        pim: { type: 'object', description: 'A parsed ERC-8313 Protocol Interaction Manifest.' },
+        chainId: {
+            type: 'number',
+            description: 'Optional network id; a manifest whose metadata.chainId excludes it fails validation.',
+        },
+        now: {
+            type: 'number',
+            description: 'Optional unix time in seconds; enables the validFrom/validUntil checks.',
+        },
+    },
+    required: ['pim'],
+    additionalProperties: false,
+};
+function describeContracts(pim) {
+    return Object.entries(pim.contracts ?? {}).map(([name, contract]) => ({
+        name,
+        role: contract.role,
+        ...(contract.address !== undefined ? { address: contract.address } : {}),
+        ...(contract.lookup !== undefined ? { lookup: contract.lookup } : {}),
+    }));
+}
+function describeIntents(pim) {
+    return Object.entries(pim.intents ?? {}).map(([name, intent]) => ({
+        name,
+        description: intent.description,
+        requiredInputs: intent.requiredInputs,
+    }));
+}
+function executionContext(args) {
+    const options = {};
+    if (typeof args.now === 'number')
+        options.now = args.now;
+    if (typeof args.chainId === 'number')
+        options.chainId = args.chainId;
+    return options;
+}
+function requirePim(args) {
+    const pim = args.pim;
+    if (!isObject(pim))
+        throw new Error('"pim" is required and must be a parsed PIM object');
+    return pim;
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=pim.js.map

package/dist/pim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pim.js","sourceRoot":"","sources":["../src/pim.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAY,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAgD,MAAM,YAAY,CAAC;AAEtF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,QAAQ,GAAY;QACxB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,0KAA0K;QAC5K,WAAW,EAAE,UAAU;QACvB,GAAG,EAAE,CAAC,IAAc,EAAE,EAAE;YACtB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;IAEF,MAAM,OAAO,GAAY;QACvB,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,yKAAyK;QAC3K,WAAW,EAAE,UAAU;QACvB,GAAG,EAAE,KAAK,EAAE,IAAc,EAAE,EAAE;YAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAQ,CAAC;YACpC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC9B,OAAO,UAAU,CAAC;gBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,SAAS,EAAE,iBAAiB,CAAC,GAAG,CAAC;gBACjC,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;gBAC7B,UAAU,EAAE;oBACV,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/D,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/E;gBACD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;QACxF,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,sFAAsF;SACpG;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,yEAAyE;SACvF;KACF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,SAAS,iBAAiB,CAAC,GAAQ;IACjC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI;QACJ,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,GAAQ;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI;QACJ,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACzD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IACrE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The MCP wire types this server speaks, plus the JSON-RPC 2.0 envelope they
+ * ride on.
+ *
+ * Modelled on the Model Context Protocol revision `2025-06-18`
+ * (https://modelcontextprotocol.io/specification/2025-06-18) — specifically the
+ * `initialize`, `tools/list` and `tools/call` messages. Only the server side is
+ * implemented, and only the parts a tool server needs.
+ */
+/** MCP revisions this server can speak, newest first. */
+export declare const MCP_SUPPORTED_VERSIONS: readonly ["2025-06-18", "2025-03-26", "2024-11-05"];
+/** The revision advertised when a client asks for one we do not know. */
+export declare const MCP_PROTOCOL_VERSION: "2025-06-18";
+export declare const MCP_METHODS: {
+    readonly INITIALIZE: "initialize";
+    readonly INITIALIZED: "notifications/initialized";
+    readonly PING: "ping";
+    readonly TOOLS_LIST: "tools/list";
+    readonly TOOLS_CALL: "tools/call";
+};
+/** JSON-RPC 2.0 error codes (https://www.jsonrpc.org/specification#error_object). */
+export declare const JSONRPC_ERROR: {
+    readonly PARSE_ERROR: -32700;
+    readonly INVALID_REQUEST: -32600;
+    readonly METHOD_NOT_FOUND: -32601;
+    readonly INVALID_PARAMS: -32602;
+    readonly INTERNAL_ERROR: -32603;
+};
+export type JsonRpcId = string | number | null;
+export interface JsonRpcRequest {
+    jsonrpc: '2.0';
+    /** Absent on notifications, which must not be answered. */
+    id?: JsonRpcId;
+    method: string;
+    params?: unknown;
+}
+export interface JsonRpcSuccess {
+    jsonrpc: '2.0';
+    id: JsonRpcId;
+    result: unknown;
+}
+export interface JsonRpcErrorBody {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+export interface JsonRpcFailure {
+    jsonrpc: '2.0';
+    id: JsonRpcId;
+    error: JsonRpcErrorBody;
+}
+export type JsonRpcResponse = JsonRpcSuccess | JsonRpcFailure;
+export declare function rpcError(id: JsonRpcId, code: number, message: string, data?: unknown): JsonRpcFailure;
+export interface McpServerInfo {
+    name: string;
+    version: string;
+}
+export interface McpInitializeResult {
+    protocolVersion: string;
+    capabilities: {
+        tools: {
+            listChanged: boolean;
+        };
+    };
+    serverInfo: McpServerInfo;
+    instructions?: string;
+}
+/** A text item in a tool result. The only content type this server emits. */
+export interface McpTextContent {
+    type: 'text';
+    text: string;
+}
+/**
+ * A tool result. `isError: true` marks a *tool* failure (including a policy
+ * denial), which the model sees as output and can react to — as opposed to a
+ * JSON-RPC error, which aborts the call.
+ */
+export interface McpToolResult {
+    content: McpTextContent[];
+    isError?: boolean;
+    /** Machine-readable payload mirroring `content`, when there is one. */
+    structuredContent?: unknown;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yDAAyD;AACzD,eAAO,MAAM,sBAAsB,qDAAsD,CAAC;AAE1F,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,cAA4B,CAAC;AAE9D,eAAO,MAAM,WAAW;;;;;;CAMd,CAAC;AAEX,qFAAqF;AACrF,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,2DAA2D;IAC3D,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,SAAS,CAAC;IACd,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,cAAc,CAAC;AAE9D,wBAAgB,QAAQ,CACtB,EAAE,EAAE,SAAS,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,OAAO,GACb,cAAc,CAEhB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE;QAAE,KAAK,EAAE;YAAE,WAAW,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;IAClD,UAAU,EAAE,aAAa,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B"}

package/dist/protocol.js

@@ -0,0 +1,32 @@
+/**
+ * The MCP wire types this server speaks, plus the JSON-RPC 2.0 envelope they
+ * ride on.
+ *
+ * Modelled on the Model Context Protocol revision `2025-06-18`
+ * (https://modelcontextprotocol.io/specification/2025-06-18) — specifically the
+ * `initialize`, `tools/list` and `tools/call` messages. Only the server side is
+ * implemented, and only the parts a tool server needs.
+ */
+/** MCP revisions this server can speak, newest first. */
+export const MCP_SUPPORTED_VERSIONS = ['2025-06-18', '2025-03-26', '2024-11-05'];
+/** The revision advertised when a client asks for one we do not know. */
+export const MCP_PROTOCOL_VERSION = MCP_SUPPORTED_VERSIONS[0];
+export const MCP_METHODS = {
+    INITIALIZE: 'initialize',
+    INITIALIZED: 'notifications/initialized',
+    PING: 'ping',
+    TOOLS_LIST: 'tools/list',
+    TOOLS_CALL: 'tools/call',
+};
+/** JSON-RPC 2.0 error codes (https://www.jsonrpc.org/specification#error_object). */
+export const JSONRPC_ERROR = {
+    PARSE_ERROR: -32700,
+    INVALID_REQUEST: -32600,
+    METHOD_NOT_FOUND: -32601,
+    INVALID_PARAMS: -32602,
+    INTERNAL_ERROR: -32603,
+};
+export function rpcError(id, code, message, data) {
+    return { jsonrpc: '2.0', id, error: data === undefined ? { code, message } : { code, message, data } };
+}
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAE1F,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,2BAA2B;IACxC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;IACxB,UAAU,EAAE,YAAY;CAChB,CAAC;AAEX,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW,EAAE,CAAC,KAAK;IACnB,eAAe,EAAE,CAAC,KAAK;IACvB,gBAAgB,EAAE,CAAC,KAAK;IACxB,cAAc,EAAE,CAAC,KAAK;IACtB,cAAc,EAAE,CAAC,KAAK;CACd,CAAC;AAgCX,MAAM,UAAU,QAAQ,CACtB,EAAa,EACb,IAAY,EACZ,OAAe,EACf,IAAc;IAEd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AACzG,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,23 @@
+import { type PolicyGate } from './gate.js';
+import { type JsonRpcRequest, type JsonRpcResponse } from './protocol.js';
+import { ToolRegistry, type McpTool } from './tools.js';
+export interface McpServerOptions {
+    /** Server name reported in `initialize`. */
+    name: string;
+    version: string;
+    tools: readonly McpTool[];
+    /**
+     * The gate every tool action passes through before it runs. Defaults to
+     * {@link DENY_ALL} — a server with no policy must not be able to act.
+     */
+    gate?: PolicyGate;
+    /** Optional guidance returned to the client in `initialize`. */
+    instructions?: string;
+}
+export interface McpServer {
+    readonly tools: ToolRegistry;
+    /** Handles one JSON-RPC message; returns `undefined` for notifications. */
+    handle(request: JsonRpcRequest): Promise<JsonRpcResponse | undefined>;
+}
+export declare function createMcpServer(options: McpServerOptions): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,UAAU,EAAmB,MAAM,WAAW,CAAC;AACvE,OAAO,EAOL,KAAK,cAAc,EACnB,KAAK,eAAe,EAErB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAe,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,WAAW,gBAAgB;IAC/B,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1B;;;OAGG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,2EAA2E;IAC3E,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;CACvE;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,SAAS,CAkGpE"}

package/dist/server.js

@@ -0,0 +1,94 @@
+import { DENY_ALL } from './gate.js';
+import { JSONRPC_ERROR, MCP_METHODS, MCP_PROTOCOL_VERSION, MCP_SUPPORTED_VERSIONS, rpcError, } from './protocol.js';
+import { ToolRegistry, errorResult } from './tools.js';
+export function createMcpServer(options) {
+    const tools = new ToolRegistry(options.tools);
+    const gate = options.gate ?? DENY_ALL;
+    function initialize(params) {
+        const requested = isObject(params) && typeof params.protocolVersion === 'string' ? params.protocolVersion : undefined;
+        const protocolVersion = requested !== undefined && MCP_SUPPORTED_VERSIONS.includes(requested)
+            ? requested
+            : MCP_PROTOCOL_VERSION;
+        const result = {
+            protocolVersion,
+            capabilities: { tools: { listChanged: false } },
+            serverInfo: { name: options.name, version: options.version },
+        };
+        if (options.instructions !== undefined)
+            result.instructions = options.instructions;
+        return result;
+    }
+    async function callTool(id, params) {
+        if (!isObject(params) || typeof params.name !== 'string') {
+            return rpcError(id, JSONRPC_ERROR.INVALID_PARAMS, 'tools/call requires a "name" string');
+        }
+        const tool = tools.get(params.name);
+        if (tool === undefined) {
+            return rpcError(id, JSONRPC_ERROR.INVALID_PARAMS, `unknown tool "${params.name}"`);
+        }
+        const args = isObject(params.arguments) ? params.arguments : {};
+        // The gate stands in front of every action. A denial is a *tool* result, not
+        // a protocol error: the model sees why it was refused and can propose
+        // something else, which is the whole point of being policy-aware.
+        let action;
+        try {
+            action = tool.action?.(args);
+        }
+        catch (error) {
+            return { jsonrpc: '2.0', id, result: errorResult(messageOf(error)) };
+        }
+        if (action !== undefined) {
+            const decision = await gate.check(action);
+            if (decision.verdict === 'deny') {
+                return {
+                    jsonrpc: '2.0',
+                    id,
+                    result: errorResult(decision.reason ?? `policy denied ${action.kind}`, {
+                        denied: true,
+                        kind: action.kind,
+                        ...(decision.ruleIndex !== undefined ? { ruleIndex: decision.ruleIndex } : {}),
+                    }),
+                };
+            }
+        }
+        try {
+            return { jsonrpc: '2.0', id, result: await tool.run(args) };
+        }
+        catch (error) {
+            return { jsonrpc: '2.0', id, result: errorResult(messageOf(error)) };
+        }
+    }
+    return {
+        tools,
+        async handle(request) {
+            const id = request.id ?? null;
+            const isNotification = request.id === undefined;
+            switch (request.method) {
+                case MCP_METHODS.INITIALIZE:
+                    return isNotification ? undefined : { jsonrpc: '2.0', id, result: initialize(request.params) };
+                // A notification: the client confirming it is ready. No reply, ever.
+                case MCP_METHODS.INITIALIZED:
+                    return undefined;
+                case MCP_METHODS.PING:
+                    return isNotification ? undefined : { jsonrpc: '2.0', id, result: {} };
+                case MCP_METHODS.TOOLS_LIST:
+                    return isNotification
+                        ? undefined
+                        : { jsonrpc: '2.0', id, result: { tools: tools.descriptors() } };
+                case MCP_METHODS.TOOLS_CALL:
+                    return isNotification ? undefined : callTool(id, request.params);
+                default:
+                    return isNotification
+                        ? undefined
+                        : rpcError(id, JSONRPC_ERROR.METHOD_NOT_FOUND, `unknown method "${request.method}"`);
+            }
+        },
+    };
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAoC,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,QAAQ,GAKT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAC;AAsBrE,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IAEtC,SAAS,UAAU,CAAC,MAAe;QACjC,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACtG,MAAM,eAAe,GACnB,SAAS,KAAK,SAAS,IAAK,sBAA4C,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC1F,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,oBAAoB,CAAC;QAE3B,MAAM,MAAM,GAAwB;YAClC,eAAe;YACf,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAC/C,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;SAC7D,CAAC;QACF,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACnF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,EAAa,EAAE,MAAe;QACpD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzD,OAAO,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,cAAc,EAAE,qCAAqC,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,cAAc,EAAE,iBAAiB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAEhE,6EAA6E;QAC7E,sEAAsE;QACtE,kEAAkE;QAClE,IAAI,MAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAChC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,EAAE;oBACF,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,IAAI,iBAAiB,MAAM,CAAC,IAAI,EAAE,EAAE;wBACrE,MAAM,EAAE,IAAI;wBACZ,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/E,CAAC;iBACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QAEL,KAAK,CAAC,MAAM,CAAC,OAAuB;YAClC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC;YAC9B,MAAM,cAAc,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC;YAEhD,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvB,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAEjG,qEAAqE;gBACrE,KAAK,WAAW,CAAC,WAAW;oBAC1B,OAAO,SAAS,CAAC;gBAEnB,KAAK,WAAW,CAAC,IAAI;oBACnB,OAAO,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAEzE,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,cAAc;wBACnB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;gBAErE,KAAK,WAAW,CAAC,UAAU;oBACzB,OAAO,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAEnE;oBACE,OAAO,cAAc;wBACnB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC,gBAAgB,EAAE,mBAAmB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/stdio.d.ts

@@ -0,0 +1,31 @@
+import type { McpServer } from './server.js';
+/**
+ * The little of a Node readable stream this needs. Kept structural so the
+ * transport is testable with a plain object and carries no `@types/node`
+ * dependency.
+ */
+export interface ReadableLike {
+    setEncoding(encoding: string): unknown;
+    on(event: 'data', listener: (chunk: string) => void): unknown;
+    on(event: 'end', listener: () => void): unknown;
+}
+export interface WritableLike {
+    write(chunk: string): unknown;
+}
+export interface ServeStdioOptions {
+    server: McpServer;
+    input: ReadableLike;
+    output: WritableLike;
+    /** Called for transport-level failures that must not kill the stream. */
+    onError?: (error: unknown) => void;
+}
+/**
+ * Serves MCP over stdio using the newline-delimited JSON-RPC framing the spec
+ * prescribes for local servers: one JSON message per line, no embedded
+ * newlines, responses written back the same way.
+ *
+ * Notifications produce no output, so a client's `notifications/initialized`
+ * is simply consumed.
+ */
+export declare function serveStdio(options: ServeStdioOptions): void;
+//# sourceMappingURL=stdio.d.ts.map

package/dist/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACvC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;IAC9D,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC;CACjD;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,yEAAyE;IACzE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAwB3D"}

package/dist/stdio.js

@@ -0,0 +1,67 @@
+import { JSONRPC_ERROR, rpcError } from './protocol.js';
+/**
+ * Serves MCP over stdio using the newline-delimited JSON-RPC framing the spec
+ * prescribes for local servers: one JSON message per line, no embedded
+ * newlines, responses written back the same way.
+ *
+ * Notifications produce no output, so a client's `notifications/initialized`
+ * is simply consumed.
+ */
+export function serveStdio(options) {
+    let buffer = '';
+    const write = (response) => {
+        options.output.write(`${JSON.stringify(response)}\n`);
+    };
+    options.input.setEncoding('utf8');
+    options.input.on('data', (chunk) => {
+        buffer += chunk;
+        let newline = buffer.indexOf('\n');
+        while (newline !== -1) {
+            const line = buffer.slice(0, newline).trim();
+            buffer = buffer.slice(newline + 1);
+            if (line.length > 0)
+                void handleLine(line, options, write);
+            newline = buffer.indexOf('\n');
+        }
+    });
+    options.input.on('end', () => {
+        const rest = buffer.trim();
+        buffer = '';
+        if (rest.length > 0)
+            void handleLine(rest, options, write);
+    });
+}
+async function handleLine(line, options, write) {
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch {
+        write(rpcError(null, JSONRPC_ERROR.PARSE_ERROR, 'parse error'));
+        return;
+    }
+    if (!isRequest(parsed)) {
+        write(rpcError(null, JSONRPC_ERROR.INVALID_REQUEST, 'invalid request'));
+        return;
+    }
+    try {
+        const response = await options.server.handle(parsed);
+        if (response !== undefined)
+            write(response);
+    }
+    catch (error) {
+        options.onError?.(error);
+        write(rpcError(parsed.id ?? null, JSONRPC_ERROR.INTERNAL_ERROR, messageOf(error)));
+    }
+}
+function isRequest(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        !Array.isArray(value) &&
+        value.jsonrpc === '2.0' &&
+        typeof value.method === 'string');
+}
+function messageOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=stdio.js.map

package/dist/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,QAAQ,EAA6C,MAAM,eAAe,CAAC;AA0BnG;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,MAAM,KAAK,GAAG,CAAC,QAAyB,EAAQ,EAAE;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,GAAG,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,OAA0B,EAC1B,KAA0C;IAE1C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAA+B,CAAC,OAAO,KAAK,KAAK;QAClD,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,43 @@
+import type { ToolAction } from './gate.js';
+import type { McpToolResult } from './protocol.js';
+/** Arguments as they arrive from a `tools/call`; validated by the tool itself. */
+export type ToolArgs = Record<string, unknown>;
+/** A JSON Schema object describing a tool's arguments. */
+export type JsonSchema = Record<string, unknown>;
+/** One tool a model can discover and invoke. */
+export interface McpTool {
+    name: string;
+    title?: string;
+    description: string;
+    inputSchema: JsonSchema;
+    /**
+     * Derives the action the policy gate must approve before `run` is called.
+     * Omit it for a read-only tool (a summary, a dry-run) — those are never
+     * gated, because refusing a dry-run would only hide the policy from the model.
+     */
+    action?(args: ToolArgs): ToolAction;
+    run(args: ToolArgs): Promise<McpToolResult> | McpToolResult;
+}
+/** The serialisable shape `tools/list` returns. */
+export interface ToolDescriptor {
+    name: string;
+    title?: string;
+    description: string;
+    inputSchema: JsonSchema;
+}
+export declare function textResult(text: string, structuredContent?: unknown): McpToolResult;
+export declare function errorResult(text: string, structuredContent?: unknown): McpToolResult;
+/** JSON replacer that renders `bigint` as a decimal string, never losing precision. */
+export declare function jsonReplacer(_key: string, value: unknown): unknown;
+/** A result whose text is the pretty-printed JSON of `structured`. */
+export declare function jsonResult(structured: unknown): McpToolResult;
+/** An ordered, name-unique set of tools. */
+export declare class ToolRegistry {
+    #private;
+    constructor(tools?: readonly McpTool[]);
+    register(tool: McpTool): void;
+    get(name: string): McpTool | undefined;
+    list(): McpTool[];
+    descriptors(): ToolDescriptor[];
+}
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/C,0DAA0D;AAC1D,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEjD,gDAAgD;AAChD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IACpC,GAAG,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;CAC7D;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;CACzB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,OAAO,GAAG,aAAa,CAInF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,OAAO,GAAG,aAAa,CAIpF;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAElE;AAED,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,UAAU,EAAE,OAAO,GAAG,aAAa,CAE7D;AAED,4CAA4C;AAC5C,qBAAa,YAAY;;gBAGX,KAAK,GAAE,SAAS,OAAO,EAAO;IAI1C,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAO7B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAItC,IAAI,IAAI,OAAO,EAAE;IAIjB,WAAW,IAAI,cAAc,EAAE;CAWhC"}

package/dist/tools.js

@@ -0,0 +1,51 @@
+export function textResult(text, structuredContent) {
+    return structuredContent === undefined
+        ? { content: [{ type: 'text', text }] }
+        : { content: [{ type: 'text', text }], structuredContent };
+}
+export function errorResult(text, structuredContent) {
+    return structuredContent === undefined
+        ? { content: [{ type: 'text', text }], isError: true }
+        : { content: [{ type: 'text', text }], isError: true, structuredContent };
+}
+/** JSON replacer that renders `bigint` as a decimal string, never losing precision. */
+export function jsonReplacer(_key, value) {
+    return typeof value === 'bigint' ? value.toString() : value;
+}
+/** A result whose text is the pretty-printed JSON of `structured`. */
+export function jsonResult(structured) {
+    return textResult(JSON.stringify(structured, jsonReplacer, 2), structured);
+}
+/** An ordered, name-unique set of tools. */
+export class ToolRegistry {
+    #tools = new Map();
+    constructor(tools = []) {
+        for (const tool of tools)
+            this.register(tool);
+    }
+    register(tool) {
+        if (this.#tools.has(tool.name)) {
+            throw new Error(`tool "${tool.name}" is already registered`);
+        }
+        this.#tools.set(tool.name, tool);
+    }
+    get(name) {
+        return this.#tools.get(name);
+    }
+    list() {
+        return [...this.#tools.values()];
+    }
+    descriptors() {
+        return this.list().map((tool) => {
+            const descriptor = {
+                name: tool.name,
+                description: tool.description,
+                inputSchema: tool.inputSchema,
+            };
+            if (tool.title !== undefined)
+                descriptor.title = tool.title;
+            return descriptor;
+        });
+    }
+}
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAgCA,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,iBAA2B;IAClE,OAAO,iBAAiB,KAAK,SAAS;QACpC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE;QACvC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,iBAA2B;IACnE,OAAO,iBAAiB,KAAK,SAAS;QACpC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;QACtD,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AAC9E,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAc;IACvD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC7E,CAAC;AAED,4CAA4C;AAC5C,MAAM,OAAO,YAAY;IACd,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE7C,YAAY,QAA4B,EAAE;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAAa;QACpB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,yBAAyB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,UAAU,GAAmB;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC;YACF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAC5D,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@keelcodes/mcp",
+  "version": "0.1.0",
+  "description": "Policy-aware MCP server for Keel: expose on-chain agent actions to a model, gated by the authorization policy before anything executes.",
+  "license": "Apache-2.0",
+  "homepage": "https://keel.codes",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/keelcodes/keel.git",
+    "directory": "packages/mcp"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "dependencies": {
+    "@keelcodes/manifest": "0.1.0",
+    "@keelcodes/policy": "0.1.0"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai-agent",
+    "policy",
+    "authorization",
+    "account-abstraction"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist"
+  }
+}