@lucern/sdk 0.3.0-alpha.2 → 0.3.0-alpha.4

package/dist/contracts/mcpTools.js

@@ -1,9 +1,14 @@
 import * as tool_contracts_star from '@lucern/contracts/tool-contracts';
+import { LUCERN_OPERATION_MANIFEST } from '@lucern/contracts/function-registry/manifest';
 
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 var __copyProps = (to, from, except, desc) => {
   if (from && typeof from === "object" || typeof from === "function") {
     for (let key of __getOwnPropNames(from))
@@ -16,6 +21,15 @@ var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "defau
 
 // src/contracts/mcpTools.ts
 var mcpTools_exports = {};
+__export(mcpTools_exports, {
+  MCP_ALWAYS_ALLOWED_TOOL_NAMES: () => MCP_ALWAYS_ALLOWED_TOOL_NAMES,
+  buildMcpToolContracts: () => buildMcpToolContracts,
+  buildMcpToolManifest: () => buildMcpToolManifest,
+  getMcpToolExposure: () => getMcpToolExposure,
+  isMcpToolAllowed: () => isMcpToolAllowed,
+  mcpContractToInputSchema: () => mcpContractToInputSchema,
+  mcpContractToManifestEntry: () => mcpContractToManifestEntry
+});
 
 // src/contracts/tool-contracts.ts
 var tool_contracts_exports = {};
@@ -23,5 +37,93 @@ __reExport(tool_contracts_exports, tool_contracts_star);
 
 // src/contracts/mcpTools.ts
 __reExport(mcpTools_exports, tool_contracts_exports);
+var OPERATION_MANIFEST = LUCERN_OPERATION_MANIFEST;
+var MCP_ALWAYS_ALLOWED_TOOL_NAMES = ["identity_whoami"];
+function getMcpToolExposure(toolName) {
+  return OPERATION_MANIFEST[toolName]?.surfaces.mcp ?? "none";
+}
+function decorateMcpToolContract(toolName, contract) {
+  const exposure = getMcpToolExposure(toolName);
+  if (exposure === "none") {
+    return null;
+  }
+  return exposure === "internal" || contract.internal ? { ...contract, internal: true } : contract;
+}
+function buildMcpToolContracts(options = {}) {
+  const merged = {
+    ...tool_contracts_exports.MCP_TOOL_CONTRACTS,
+    ...options.extensions ?? {}
+  };
+  return Object.fromEntries(
+    Object.entries(merged).flatMap(([toolName, contract]) => {
+      const decorated = decorateMcpToolContract(toolName, contract);
+      return decorated ? [[toolName, decorated]] : [];
+    })
+  );
+}
+function mcpContractToInputSchema(contract) {
+  const properties = {};
+  for (const [paramName, paramDef] of Object.entries(contract.parameters)) {
+    const prop = {
+      type: paramDef.type,
+      description: paramDef.description
+    };
+    if (paramDef.enum) {
+      prop.enum = paramDef.enum;
+    }
+    properties[paramName] = prop;
+  }
+  return {
+    type: "object",
+    properties,
+    required: contract.required
+  };
+}
+function mcpContractToManifestEntry(name, contract) {
+  return {
+    name,
+    description: contract.description,
+    inputSchema: mcpContractToInputSchema(contract),
+    internal: Boolean(contract.internal),
+    ownerModule: contract.ownerModule,
+    ontologyPrimitive: contract.ontologyPrimitive,
+    tier: contract.tier
+  };
+}
+function isMcpToolAllowed(toolName, options = {}) {
+  const contracts = options.contracts ?? buildMcpToolContracts();
+  const contract = contracts[toolName];
+  const alwaysAllowed = /* @__PURE__ */ new Set([
+    ...MCP_ALWAYS_ALLOWED_TOOL_NAMES,
+    ...options.alwaysAllowedTools ?? []
+  ]);
+  if (alwaysAllowed.has(toolName)) {
+    return true;
+  }
+  if (options.sessionType === "user" && contract?.internal) {
+    return false;
+  }
+  if (options.permittedTools !== void 0 && options.permittedTools !== null) {
+    return options.permittedTools.some((tool) => tool.toolName === toolName);
+  }
+  if (options.allowedTools === null || options.allowedTools === void 0) {
+    return true;
+  }
+  return options.allowedTools.includes(toolName);
+}
+function buildMcpToolManifest(args = {}) {
+  const contracts = args.contracts ?? buildMcpToolContracts();
+  return Object.entries(contracts).filter(([name, contract]) => {
+    if (args.visibility?.sessionType === "user" && contract.internal) {
+      return false;
+    }
+    return isMcpToolAllowed(name, {
+      ...args.visibility,
+      contracts
+    });
+  }).map(([name, contract]) => mcpContractToManifestEntry(name, contract));
+}
+
+export { MCP_ALWAYS_ALLOWED_TOOL_NAMES, buildMcpToolContracts, buildMcpToolManifest, getMcpToolExposure, isMcpToolAllowed, mcpContractToInputSchema, mcpContractToManifestEntry };
 //# sourceMappingURL=mcpTools.js.map
 //# sourceMappingURL=mcpTools.js.map

package/dist/contracts/mcpTools.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/contracts/mcpTools.ts","../../src/contracts/tool-contracts.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,IAAA,gBAAA,GAAA,EAAA;;;ACAA,IAAA,sBAAA,GAAA,EAAA;AAAA,UAAA,CAAA,sBAAA,EAAA,mBAAA,CAAA;;;ADAA,UAAA,CAAA,gBAAA,EAAc,sBAAA,CAAA","file":"mcpTools.js","sourcesContent":["export * from \"./tool-contracts\";\n","export * from \"@lucern/contracts/tool-contracts\";\n\n"]}
+{"version":3,"sources":["../../src/contracts/mcpTools.ts","../../src/contracts/tool-contracts.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA,IAAA,gBAAA,GAAA,EAAA;AAAA,QAAA,CAAA,gBAAA,EAAA;AAAA,EAAA,6BAAA,EAAA,MAAA,6BAAA;AAAA,EAAA,qBAAA,EAAA,MAAA,qBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,kBAAA,EAAA,MAAA,kBAAA;AAAA,EAAA,gBAAA,EAAA,MAAA,gBAAA;AAAA,EAAA,wBAAA,EAAA,MAAA,wBAAA;AAAA,EAAA,0BAAA,EAAA,MAAA;AAAA,CAAA,CAAA;;;ACAA,IAAA,sBAAA,GAAA,EAAA;AAAA,UAAA,CAAA,sBAAA,EAAA,mBAAA,CAAA;;;ADAA,UAAA,CAAA,gBAAA,EAAc,sBAAA,CAAA;AAWd,IAAM,kBAAA,GAAqB,yBAAA;AAKpB,IAAM,6BAAA,GAAgC,CAAC,iBAAiB;AAwCxD,SAAS,mBACd,QAAA,EACgC;AAChC,EAAA,OAAO,kBAAA,CAAmB,QAAQ,CAAA,EAAG,QAAA,CAAS,GAAA,IAAO,MAAA;AACvD;AAEA,SAAS,uBAAA,CACP,UACA,QAAA,EACwB;AACxB,EAAA,MAAM,QAAA,GAAW,mBAAmB,QAAQ,CAAA;AAC5C,EAAA,IAAI,aAAa,MAAA,EAAQ;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,QAAA,KAAa,cAAc,QAAA,CAAS,QAAA,GACvC,EAAE,GAAG,QAAA,EAAU,QAAA,EAAU,IAAA,EAAK,GAC9B,QAAA;AACN;AAEO,SAAS,qBAAA,CACd,OAAA,GAAwC,EAAC,EACrB;AACpB,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,GAAG,sBAAA,CAAA,kBAAA;AAAA,IACH,GAAI,OAAA,CAAQ,UAAA,IAAc;AAAC,GAC7B;AAEA,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,MAAA,CAAO,QAAQ,MAAM,CAAA,CAAE,QAAQ,CAAC,CAAC,QAAA,EAAU,QAAQ,CAAA,KAAM;AACvD,MAAA,MAAM,SAAA,GAAY,uBAAA,CAAwB,QAAA,EAAU,QAAQ,CAAA;AAC5D,MAAA,OAAO,YAAY,CAAC,CAAC,UAAU,SAAS,CAAC,IAAI,EAAC;AAAA,IAChD,CAAC;AAAA,GACH;AACF;AAEO,SAAS,yBACd,QAAA,EACoB;AACpB,EAAA,MAAM,aAAsC,EAAC;AAE7C,EAAA,KAAA,MAAW,CAAC,WAAW,QAAQ,CAAA,IAAK,OAAO,OAAA,CAAQ,QAAA,CAAS,UAAU,CAAA,EAAG;AACvE,IAAA,MAAM,IAAA,GAAgC;AAAA,MACpC,MAAM,QAAA,CAAS,IAAA;AAAA,MACf,aAAa,QAAA,CAAS;AAAA,KACxB;AACA,IAAA,IAAI,SAAS,IAAA,EAAM;AACjB,MAAA,IAAA,CAAK,OAAO,QAAA,CAAS,IAAA;AAAA,IACvB;AACA,IAAA,UAAA,CAAW,SAAS,CAAA,GAAI,IAAA;AAAA,EAC1B;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,QAAA;AAAA,IACN,UAAA;AAAA,IACA,UAAU,QAAA,CAAS;AAAA,GACrB;AACF;AAEO,SAAS,0BAAA,CACd,MACA,QAAA,EACsB;AACtB,EAAA,OAAO;AAAA,IACL,IAAA;AAAA,IACA,aAAa,QAAA,CAAS,WAAA;AAAA,IACtB,WAAA,EAAa,yBAAyB,QAAQ,CAAA;AAAA,IAC9C,QAAA,EAAU,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA;AAAA,IACnC,aAAa,QAAA,CAAS,WAAA;AAAA,IACtB,mBAAmB,QAAA,CAAS,iBAAA;AAAA,IAC5B,MAAM,QAAA,CAAS;AAAA,GACjB;AACF;AAEO,SAAS,gBAAA,CACd,QAAA,EACA,OAAA,GAAoC,EAAC,EAC5B;AACT,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,SAAA,IAAa,qBAAA,EAAsB;AAC7D,EAAA,MAAM,QAAA,GAAW,UAAU,QAAQ,CAAA;AACnC,EAAA,MAAM,aAAA,uBAAoB,GAAA,CAAI;AAAA,IAC5B,GAAG,6BAAA;AAAA,IACH,GAAI,OAAA,CAAQ,kBAAA,IAAsB;AAAC,GACpC,CAAA;AAED,EAAA,IAAI,aAAA,CAAc,GAAA,CAAI,QAAQ,CAAA,EAAG;AAC/B,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAA,CAAQ,WAAA,KAAgB,MAAA,IAAU,QAAA,EAAU,QAAA,EAAU;AACxD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,IAAI,OAAA,CAAQ,cAAA,KAAmB,MAAA,IAAa,OAAA,CAAQ,mBAAmB,IAAA,EAAM;AAC3E,IAAA,OAAO,QAAQ,cAAA,CAAe,IAAA,CAAK,CAAC,IAAA,KAAS,IAAA,CAAK,aAAa,QAAQ,CAAA;AAAA,EACzE;AAEA,EAAA,IAAI,OAAA,CAAQ,YAAA,KAAiB,IAAA,IAAQ,OAAA,CAAQ,iBAAiB,MAAA,EAAW;AACvE,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAA,CAAQ,YAAA,CAAa,QAAA,CAAS,QAAQ,CAAA;AAC/C;AAEO,SAAS,oBAAA,CAAqB,IAAA,GAGjC,EAAC,EAA2B;AAC9B,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,qBAAA,EAAsB;AAC1D,EAAA,OAAO,MAAA,CAAO,QAAQ,SAAS,CAAA,CAC5B,OAAO,CAAC,CAAC,IAAA,EAAM,QAAQ,CAAA,KAAM;AAC5B,IAAA,IAAI,IAAA,CAAK,UAAA,EAAY,WAAA,KAAgB,MAAA,IAAU,SAAS,QAAA,EAAU;AAChE,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,OAAO,iBAAiB,IAAA,EAAM;AAAA,MAC5B,GAAG,IAAA,CAAK,UAAA;AAAA,MACR;AAAA,KACD,CAAA;AAAA,EACH,CAAC,CAAA,CACA,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,QAAQ,CAAA,KAAM,0BAAA,CAA2B,IAAA,EAAM,QAAQ,CAAC,CAAA;AACzE","file":"mcpTools.js","sourcesContent":["export * from \"./tool-contracts\";\n\nimport { LUCERN_OPERATION_MANIFEST } from \"@lucern/contracts/function-registry/manifest\";\nimport {\n  MCP_TOOL_CONTRACTS,\n  type McpToolContract,\n} from \"./tool-contracts\";\n\ntype OperationManifestEntry =\n  (typeof LUCERN_OPERATION_MANIFEST)[keyof typeof LUCERN_OPERATION_MANIFEST];\n\nconst OPERATION_MANIFEST = LUCERN_OPERATION_MANIFEST as Record<\n  string,\n  OperationManifestEntry | undefined\n>;\n\nexport const MCP_ALWAYS_ALLOWED_TOOL_NAMES = [\"identity_whoami\"] as const;\n\nexport type McpToolInputSchema = {\n  type: \"object\";\n  properties: Record<string, unknown>;\n  required: string[];\n};\n\nexport type McpPermittedTool = {\n  toolName: string;\n  requiredRole?: string;\n  approvalGateId?: string;\n  isCore?: boolean;\n  category?: string;\n};\n\nexport type McpToolManifestEntry = {\n  name: string;\n  description: string;\n  inputSchema: McpToolInputSchema;\n  internal: boolean;\n  ownerModule: string;\n  ontologyPrimitive: McpToolContract[\"ontologyPrimitive\"];\n  tier: McpToolContract[\"tier\"];\n};\n\nexport type McpToolContractMap = Record<string, McpToolContract>;\n\nexport type BuildMcpToolContractsOptions = {\n  extensions?: McpToolContractMap;\n};\n\nexport type McpToolVisibilityOptions = {\n  contracts?: McpToolContractMap;\n  sessionType?: \"agent\" | \"user\";\n  permittedTools?: readonly McpPermittedTool[] | null;\n  allowedTools?: readonly string[] | null;\n  alwaysAllowedTools?: readonly string[];\n};\n\nexport function getMcpToolExposure(\n  toolName: string\n): \"public\" | \"internal\" | \"none\" {\n  return OPERATION_MANIFEST[toolName]?.surfaces.mcp ?? \"none\";\n}\n\nfunction decorateMcpToolContract(\n  toolName: string,\n  contract: McpToolContract\n): McpToolContract | null {\n  const exposure = getMcpToolExposure(toolName);\n  if (exposure === \"none\") {\n    return null;\n  }\n  return exposure === \"internal\" || contract.internal\n    ? { ...contract, internal: true }\n    : contract;\n}\n\nexport function buildMcpToolContracts(\n  options: BuildMcpToolContractsOptions = {}\n): McpToolContractMap {\n  const merged = {\n    ...MCP_TOOL_CONTRACTS,\n    ...(options.extensions ?? {}),\n  };\n\n  return Object.fromEntries(\n    Object.entries(merged).flatMap(([toolName, contract]) => {\n      const decorated = decorateMcpToolContract(toolName, contract);\n      return decorated ? [[toolName, decorated]] : [];\n    })\n  );\n}\n\nexport function mcpContractToInputSchema(\n  contract: McpToolContract\n): McpToolInputSchema {\n  const properties: Record<string, unknown> = {};\n\n  for (const [paramName, paramDef] of Object.entries(contract.parameters)) {\n    const prop: Record<string, unknown> = {\n      type: paramDef.type,\n      description: paramDef.description,\n    };\n    if (paramDef.enum) {\n      prop.enum = paramDef.enum;\n    }\n    properties[paramName] = prop;\n  }\n\n  return {\n    type: \"object\",\n    properties,\n    required: contract.required,\n  };\n}\n\nexport function mcpContractToManifestEntry(\n  name: string,\n  contract: McpToolContract\n): McpToolManifestEntry {\n  return {\n    name,\n    description: contract.description,\n    inputSchema: mcpContractToInputSchema(contract),\n    internal: Boolean(contract.internal),\n    ownerModule: contract.ownerModule,\n    ontologyPrimitive: contract.ontologyPrimitive,\n    tier: contract.tier,\n  };\n}\n\nexport function isMcpToolAllowed(\n  toolName: string,\n  options: McpToolVisibilityOptions = {}\n): boolean {\n  const contracts = options.contracts ?? buildMcpToolContracts();\n  const contract = contracts[toolName];\n  const alwaysAllowed = new Set([\n    ...MCP_ALWAYS_ALLOWED_TOOL_NAMES,\n    ...(options.alwaysAllowedTools ?? []),\n  ]);\n\n  if (alwaysAllowed.has(toolName)) {\n    return true;\n  }\n  if (options.sessionType === \"user\" && contract?.internal) {\n    return false;\n  }\n\n  if (options.permittedTools !== undefined && options.permittedTools !== null) {\n    return options.permittedTools.some((tool) => tool.toolName === toolName);\n  }\n\n  if (options.allowedTools === null || options.allowedTools === undefined) {\n    return true;\n  }\n  return options.allowedTools.includes(toolName);\n}\n\nexport function buildMcpToolManifest(args: {\n  contracts?: McpToolContractMap;\n  visibility?: McpToolVisibilityOptions;\n} = {}): McpToolManifestEntry[] {\n  const contracts = args.contracts ?? buildMcpToolContracts();\n  return Object.entries(contracts)\n    .filter(([name, contract]) => {\n      if (args.visibility?.sessionType === \"user\" && contract.internal) {\n        return false;\n      }\n      return isMcpToolAllowed(name, {\n        ...args.visibility,\n        contracts,\n      });\n    })\n    .map(([name, contract]) => mcpContractToManifestEntry(name, contract));\n}\n","export * from \"@lucern/contracts/tool-contracts\";\n\n"]}

package/dist/contradictions/index.d.ts

@@ -1,11 +1,13 @@
 import { PlatformGatewaySuccess } from '../coreClient.js';
-import { L as LucernClientConfig } from '../client-B6aWUUwp.js';
+import { L as LucernClientConfig } from '../client-DOLqClbU.js';
 import * as v1 from '@lucern/contracts/graph/v1';
 export { v1 as graphContracts };
 import * as sdkMethods_contract from '@lucern/contracts/sdk-methods.contract';
 export { sdkMethods_contract as methodSchemas };
 import * as toolContracts from '@lucern/contracts/tool-contracts';
 export { toolContracts as toolSchemas };
+import '../authContext.js';
+import '../contracts/auth-session.contract.js';
 import '../types.js';
 import '../contracts/workflow-runtime.contract.js';
 import '../contracts/lens-workflow.contract.js';
@@ -13,14 +15,28 @@ import '../contracts/lens-filter.contract.js';
 import '../audiencesClient.js';
 import '../schemaClient.js';
 import '../harnessClient.js';
-import '../identityClient.js';
 import '../adminClient.js';
 import '../controlObjectOwnership.js';
 import '../beliefsClient.js';
 import '../opinion.js';
+import '../authDeviceClient.js';
+import '../mcpClient.js';
+import '@lucern/contracts/mcp-gateway-boundary.contract';
+import '../identityClient.js';
 import '../packsClient.js';
 import '../customTools.js';
 import 'zod';
+import '../toolRegistryClient.js';
+import '../telemetryClient.js';
+import '../jobsClient.js';
+import '../modelRuntimeClient.js';
+import '../graphStateClassifierClient.js';
+import '../boundaryClientSurface.js';
+import '../ontologyLinksClient.js';
+import '../orgGraphSearchClient.js';
+import '../graphRecommendationsClient.js';
+import '../graphAnalysisClient.js';
+import '../embeddingsClient.js';
 import '../policyClient.js';
 import '../ontologyClient.js';
 import '../contextTypes.js';
@@ -30,6 +46,7 @@ import '../auditClient.js';
 import '../contextClient.js';
 import '../decisionsClient.js';
 import '../evidenceClient.js';
+import '../eventingClient.js';
 import '../graphClient.js';
 import '../learningClient.js';
 import '../reportsClient.js';