@luveo-tech/vark-mcp 0.1.1 → 0.2.0-beta.2

package/dist/bridge.d.ts

@@ -12,6 +12,12 @@
  *  - a CTP signature so the descriptor can be sent to the model in far fewer
  *    tokens than the original JSON Schema.
  *
+ * Every wrapped tool pins a SHA-256 hash of `{ name, description,
+ * inputSchema }`. The pin is enforced two ways: `check()`/`execute()`
+ * detect in-place mutation of the captured descriptor, and
+ * `reconcile()` detects a server that re-lists a *changed* descriptor
+ * (schema rug pull) — see {@link VarkMCPAdapter.reconcile}.
+ *
  * ```ts
  * const adapter = new VarkMCPAdapter({ executor: async (tool, args) => client.callTool(tool.name, args) });
  * const tools = adapter.wrapTools(mcpTools, { network: { allowedHosts: ['api.example.com'] } });
@@ -24,18 +30,25 @@ import type { CapabilityConfig, CompressionReport, ExecutionOptions, ExecutionCo
 export interface MCPToolLike {
     name: string;
     description?: string;
-    inputSchema?: Record<string, any>;
+    inputSchema?: Record<string, unknown>;
     /** OpenAI-style alias for `inputSchema`. */
-    schema?: Record<string, any>;
+    schema?: Record<string, unknown>;
     [key: string]: unknown;
 }
 /** Performs the real `tools/call` round trip against the MCP server. */
-export type MCPExecutor = (tool: MCPToolLike, args: any, context: ExecutionContext) => Promise<unknown>;
+export type MCPExecutor = (tool: MCPToolLike, args: Record<string, unknown>, context: ExecutionContext) => Promise<unknown>;
 /** A raw MCP tool after vark has wrapped it. */
 export interface WrappedMCPTool {
     name: string;
     description: string;
-    inputSchema: Record<string, any>;
+    inputSchema: Record<string, unknown>;
+    /**
+     * SHA-256 pin of `{ name, description, inputSchema }` taken at wrap time.
+     * Every `check()`/`execute()` recomputes it — a mismatch means the
+     * descriptor was mutated after wrapping (MCP rug pull) and the call is
+     * refused with `DESCRIPTOR_PIN_VIOLATION`.
+     */
+    descriptorHash: string;
     /** Effective grants (defaults merged with the per-wrap defaults). */
     capabilities: CapabilityConfig;
     /** CTP signature for this tool. */
@@ -47,6 +60,8 @@ export interface WrappedMCPTool {
     /** Guarded execution — runs the payload through vark, then the MCP server. */
     execute: (args?: unknown, options?: ExecutionOptions) => Promise<ToolExecutionResult>;
 }
+/** Canonical descriptor fingerprint for rug-pull detection. */
+export declare function hashDescriptor(tool: Pick<MCPToolLike, 'name' | 'description' | 'inputSchema' | 'schema'>): string;
 export interface VarkMCPAdapterOptions {
     config?: VarkConfig;
     executor?: MCPExecutor;
@@ -69,15 +84,34 @@ export declare class VarkMCPAdapter {
      * @param defaultCapabilities grants applied to every wrapped tool
      * @param executor          per-call override for the MCP server round trip
      */
-    wrapTools(mcpTools: any[], defaultCapabilities?: CapabilityConfig, executor?: MCPExecutor): WrappedMCPTool[];
+    wrapTools(mcpTools: unknown[], defaultCapabilities?: CapabilityConfig, executor?: MCPExecutor): WrappedMCPTool[];
     get(name: string): WrappedMCPTool | undefined;
     list(): WrappedMCPTool[];
+    /**
+     * Verify a freshly fetched `tools/list` against the wrap-time pins.
+     *
+     * The in-place pin check inside `check()`/`execute()` only sees mutations
+     * of the descriptor object captured at wrap time; a server that returns
+     * *new* objects on its next listing (the real schema rug pull) is only
+     * visible when the host feeds that listing back in. Call `reconcile()`
+     * whenever the server re-lists (`notifications/list_changed`, reconnects,
+     * polling): any wrapped tool whose `{ name, description, inputSchema }`
+     * no longer matches its pin is **permanently refused** with
+     * `DESCRIPTOR_PIN_VIOLATION` (audited once) until `clear()` and a fresh
+     * `wrapTools()` re-establish trust.
+     *
+     * @returns descriptors that failed verification — empty array = all pinned
+     */
+    reconcile(descriptors: unknown): Array<{
+        name: string;
+        reason: string;
+    }>;
     /** Payload-only inspection (circuit breaker) for a raw argument object. */
     inspect(args: unknown): InspectionResult;
-    /** Unwrap every tool registered through this adapter. */
+    /** Unwrap every tool registered through this adapter (also clears recorded pin violations). */
     clear(): void;
 }
 /** Functional shorthand for `new VarkMCPAdapter(options).wrapTools(...)`. */
-export declare function wrapMCPTools(mcpTools: any[], defaultCapabilities?: CapabilityConfig, options?: VarkMCPAdapterOptions): WrappedMCPTool[];
+export declare function wrapMCPTools(mcpTools: unknown[], defaultCapabilities?: CapabilityConfig, options?: VarkMCPAdapterOptions): WrappedMCPTool[];
 export type { CompressionReport, ExecutionOptions, ExecutionContext, GuardResult, InspectionResult };
 //# sourceMappingURL=bridge.d.ts.map

package/dist/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACX,MAAM,kBAAkB,CAAC;AAG1B,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,CACxB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,GAAG,EACT,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,qEAAqE;IACrE,YAAY,EAAE,gBAAgB,CAAC;IAC/B,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,WAAW,EAAE,iBAAiB,CAAC;IAC/B,4CAA4C;IAC5C,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,WAAW,CAAC;IACnE,8EAA8E;IAC9E,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB;;;;OAIG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAUD,qBAAa,cAAc;;IACzB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;gBAKlB,OAAO,GAAE,qBAA0B;IAK/C;;;;;;OAMG;IACH,SAAS,CACP,QAAQ,EAAE,GAAG,EAAE,EACf,mBAAmB,CAAC,EAAE,gBAAgB,EACtC,QAAQ,CAAC,EAAE,WAAW,GACrB,cAAc,EAAE;IAgDnB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,IAAI,IAAI,cAAc,EAAE;IAIxB,2EAA2E;IAC3E,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB;IAIxC,yDAAyD;IACzD,KAAK,IAAI,IAAI;CAId;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,GAAG,EAAE,EACf,mBAAmB,CAAC,EAAE,gBAAgB,EACtC,OAAO,GAAE,qBAA0B,GAClC,cAAc,EAAE,CAElB;AAED,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACX,MAAM,kBAAkB,CAAC;AAG1B,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,CACxB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,YAAY,EAAE,gBAAgB,CAAC;IAC/B,mCAAmC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,WAAW,EAAE,iBAAiB,CAAC;IAC/B,4CAA4C;IAC5C,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,WAAW,CAAC;IACnE,8EAA8E;IAC9E,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACvF;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,CAAC,GAAG,MAAM,CAOjH;AAqBD,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB;;;;OAIG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAUD,qBAAa,cAAc;;IACzB,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;gBAOlB,OAAO,GAAE,qBAA0B;IA2B/C;;;;;;OAMG;IACH,SAAS,CACP,QAAQ,EAAE,OAAO,EAAE,EACnB,mBAAmB,CAAC,EAAE,gBAAgB,EACtC,QAAQ,CAAC,EAAE,WAAW,GACrB,cAAc,EAAE;IA8DnB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,IAAI,IAAI,cAAc,EAAE;IAIxB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,WAAW,EAAE,OAAO,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAmBxE,2EAA2E;IAC3E,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB;IAIxC,+FAA+F;IAC/F,KAAK,IAAI,IAAI;CAKd;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,OAAO,EAAE,EACnB,mBAAmB,CAAC,EAAE,gBAAgB,EACtC,OAAO,GAAE,qBAA0B,GAClC,cAAc,EAAE,CAElB;AAED,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/bridge.js

@@ -12,6 +12,12 @@
  *  - a CTP signature so the descriptor can be sent to the model in far fewer
  *    tokens than the original JSON Schema.
  *
+ * Every wrapped tool pins a SHA-256 hash of `{ name, description,
+ * inputSchema }`. The pin is enforced two ways: `check()`/`execute()`
+ * detect in-place mutation of the captured descriptor, and
+ * `reconcile()` detects a server that re-lists a *changed* descriptor
+ * (schema rug pull) — see {@link VarkMCPAdapter.reconcile}.
+ *
  * ```ts
  * const adapter = new VarkMCPAdapter({ executor: async (tool, args) => client.callTool(tool.name, args) });
  * const tools = adapter.wrapTools(mcpTools, { network: { allowedHosts: ['api.example.com'] } });
@@ -19,7 +25,32 @@
  * ```
  */
 import { VarkRuntime } from '@luveo-tech/vark';
-import { VarkError } from '@luveo-tech/vark';
+import { createHash } from 'node:crypto';
+import { VarkError, stableStringify, DEFAULT_SESSION } from '@luveo-tech/vark';
+/** Canonical descriptor fingerprint for rug-pull detection. */
+export function hashDescriptor(tool) {
+    const canonical = stableStringify({
+        name: tool.name,
+        description: tool.description ?? '',
+        inputSchema: tool.inputSchema ?? tool.schema ?? {},
+    });
+    return createHash('sha256').update(canonical).digest('hex');
+}
+/**
+ * Recompute the live descriptor hash and compare it to the wrap-time pin.
+ * Returns a refusal when the server (or anyone holding the original object)
+ * mutated the descriptor after wrapping.
+ */
+function checkDescriptorPin(entry, live) {
+    if (hashDescriptor(live) === entry.descriptorHash)
+        return undefined;
+    return {
+        safe: false,
+        blockedBy: 'DESCRIPTOR_PIN_VIOLATION',
+        reason: `MCP descriptor for "${entry.name}" changed since wrap ` +
+            `(pinned ${entry.descriptorHash.slice(0, 12)}…) — possible rug pull, refusing`,
+    };
+}
 function normalizeTool(raw) {
     if (!raw || typeof raw !== 'object')
         throw new TypeError('MCP tool descriptor must be an object');
@@ -34,10 +65,33 @@ export class VarkMCPAdapter {
     runtime;
     #executor;
     #tools = new Map();
+    /** Recorded pin violations from `reconcile()` — permanent until re-wrap. */
+    #violations = new Map();
     constructor(options = {}) {
         this.runtime = options.runtime ?? new VarkRuntime(options.config ?? {});
         this.#executor = options.executor;
     }
+    /** Audit a pin refusal and build the failed execution result. */
+    #refuse(entry, reason, args, options) {
+        const sessionId = options?.sessionId ?? this.runtime.session ?? DEFAULT_SESSION;
+        // Audited here because the guard pipeline is never reached.
+        this.runtime.audit.append({
+            sessionId,
+            tool: entry.name,
+            decision: 'DESCRIPTOR_PIN_VIOLATION',
+            blockedBy: 'DESCRIPTOR_PIN_VIOLATION',
+            reason,
+            sanitizedInputs: args,
+            executionTimeMs: 0,
+        });
+        return {
+            success: false,
+            blockedBy: 'DESCRIPTOR_PIN_VIOLATION',
+            error: reason,
+            executionTimeMs: 0,
+            sessionId,
+        };
+    }
     /**
      * Wrap raw Anthropic MCP tools with vark protection.
      *
@@ -71,11 +125,29 @@ export class VarkMCPAdapter {
                 name: tool.name,
                 description: tool.description ?? '',
                 inputSchema,
+                descriptorHash: hashDescriptor(tool),
                 capabilities: guard.capabilities,
                 compact: guard.compact,
                 compression: guard.compression,
-                check: (args, options) => this.runtime.check(tool.name, args, options),
-                execute: (args, options) => guard.execute(args, options),
+                check: (args, options) => {
+                    const recorded = this.#violations.get(entry.name);
+                    if (recorded) {
+                        return { safe: false, blockedBy: 'DESCRIPTOR_PIN_VIOLATION', reason: recorded };
+                    }
+                    const pin = checkDescriptorPin(entry, tool);
+                    if (pin)
+                        return pin;
+                    return this.runtime.check(tool.name, args, options);
+                },
+                execute: async (args, options) => {
+                    const recorded = this.#violations.get(entry.name);
+                    if (recorded)
+                        return this.#refuse(entry, recorded, args, options);
+                    const pin = checkDescriptorPin(entry, tool);
+                    if (pin)
+                        return this.#refuse(entry, pin.reason ?? 'MCP descriptor changed since wrap', args, options);
+                    return guard.execute(args, options);
+                },
             };
             this.#tools.set(entry.name, entry);
             wrapped.push(entry);
@@ -88,15 +160,53 @@ export class VarkMCPAdapter {
     list() {
         return [...this.#tools.values()];
     }
+    /**
+     * Verify a freshly fetched `tools/list` against the wrap-time pins.
+     *
+     * The in-place pin check inside `check()`/`execute()` only sees mutations
+     * of the descriptor object captured at wrap time; a server that returns
+     * *new* objects on its next listing (the real schema rug pull) is only
+     * visible when the host feeds that listing back in. Call `reconcile()`
+     * whenever the server re-lists (`notifications/list_changed`, reconnects,
+     * polling): any wrapped tool whose `{ name, description, inputSchema }`
+     * no longer matches its pin is **permanently refused** with
+     * `DESCRIPTOR_PIN_VIOLATION` (audited once) until `clear()` and a fresh
+     * `wrapTools()` re-establish trust.
+     *
+     * @returns descriptors that failed verification — empty array = all pinned
+     */
+    reconcile(descriptors) {
+        const failures = [];
+        for (const raw of Array.isArray(descriptors) ? descriptors : []) {
+            if (!raw || typeof raw !== 'object')
+                continue;
+            const live = raw;
+            if (typeof live.name !== 'string')
+                continue;
+            const entry = this.#tools.get(live.name);
+            if (!entry)
+                continue; // not wrapped through this adapter
+            if (this.#violations.has(entry.name))
+                continue; // already refused — audited once
+            const verdict = checkDescriptorPin(entry, live);
+            if (verdict?.reason) {
+                this.#violations.set(entry.name, verdict.reason);
+                failures.push({ name: entry.name, reason: verdict.reason });
+                this.#refuse(entry, verdict.reason, raw);
+            }
+        }
+        return failures;
+    }
     /** Payload-only inspection (circuit breaker) for a raw argument object. */
     inspect(args) {
         return this.runtime.inspect(args);
     }
-    /** Unwrap every tool registered through this adapter. */
+    /** Unwrap every tool registered through this adapter (also clears recorded pin violations). */
     clear() {
         for (const name of this.#tools.keys())
             this.runtime.unregister(name);
         this.#tools.clear();
+        this.#violations.clear();
     }
 }
 /** Functional shorthand for `new VarkMCPAdapter(options).wrapTools(...)`. */

package/dist/bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAW/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AA+C7C,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,GAAkB,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,cAAc;IACzB,gFAAgF;IACvE,OAAO,CAAc;IAErB,SAAS,CAAe;IACxB,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEpD,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,QAAe,EACf,mBAAsC,EACtC,QAAsB;QAEtB,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC;QAC5C,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAqB,EAAE,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;YAE1E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAe;gBAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,MAAM,EAAE,WAAW;gBACnB,YAAY;gBACZ,GAAG,EAAE,KAAK,EAAE,IAAS,EAAE,OAAyB,EAAE,EAAE;oBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,SAAS,CACjB,iBAAiB,EACjB,aAAa,IAAI,CAAC,IAAI,mEAAmE,CAC1F,CAAC;oBACJ,CAAC;oBACD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACvC,CAAC;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAmB;gBAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,WAAW;gBACX,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,CAAC,IAAc,EAAE,OAA0B,EAAe,EAAE,CACjE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;gBAC9C,OAAO,EAAE,CAAC,IAAc,EAAE,OAA0B,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;aACtF,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,2EAA2E;IAC3E,OAAO,CAAC,IAAa;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,yDAAyD;IACzD,KAAK;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAC1B,QAAe,EACf,mBAAsC,EACtC,UAAiC,EAAE;IAEnC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAWzC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AA2C/E,+DAA+D;AAC/D,MAAM,UAAU,cAAc,CAAC,IAA0E;IACvG,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;KACnD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,KAAqB,EACrB,IAAiB;IAEjB,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,0BAA0B;QACrC,MAAM,EACJ,uBAAuB,KAAK,CAAC,IAAI,uBAAuB;YACxD,WAAW,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkC;KACjF,CAAC;AACJ,CAAC;AAaD,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,GAAkB,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,cAAc;IACzB,gFAAgF;IACvE,OAAO,CAAc;IAErB,SAAS,CAAe;IACxB,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,4EAA4E;IACnE,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,YAAY,UAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED,iEAAiE;IACjE,OAAO,CAAC,KAAqB,EAAE,MAAc,EAAE,IAAc,EAAE,OAA0B;QACvF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC;QAChF,4DAA4D;QAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YACxB,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,0BAA0B;YACpC,SAAS,EAAE,0BAA0B;YACrC,MAAM;YACN,eAAe,EAAE,IAAI;YACrB,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,0BAA0B;YACrC,KAAK,EAAE,MAAM;YACb,eAAe,EAAE,CAAC;YAClB,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CACP,QAAmB,EACnB,mBAAsC,EACtC,QAAsB;QAEtB,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC;QAC5C,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC;YAChE,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAqB,EAAE,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,CAAC;YAE1E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAmC;gBAChE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,MAAM,EAAE,WAAW;gBACnB,YAAY;gBACZ,GAAG,EAAE,KAAK,EAAE,IAA6B,EAAE,OAAyB,EAAE,EAAE;oBACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,SAAS,CACjB,iBAAiB,EACjB,aAAa,IAAI,CAAC,IAAI,mEAAmE,CAC1F,CAAC;oBACJ,CAAC;oBACD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACvC,CAAC;aACF,CAAC,CAAC;YAEH,MAAM,KAAK,GAAmB;gBAC5B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACnC,WAAW;gBACX,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC;gBACpC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,CAAC,IAAc,EAAE,OAA0B,EAAe,EAAE;oBACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClD,IAAI,QAAQ,EAAE,CAAC;wBACb,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,0BAA0B,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAClF,CAAC;oBACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC5C,IAAI,GAAG;wBAAE,OAAO,GAAG,CAAC;oBACpB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,IAAc,EAAE,OAA0B,EAAE,EAAE;oBAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClD,IAAI,QAAQ;wBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBAClE,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC5C,IAAI,GAAG;wBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,IAAI,mCAAmC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBACtG,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtC,CAAC;aACF,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,WAAoB;QAC5B,MAAM,QAAQ,GAA4C,EAAE,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAChE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAC9C,MAAM,IAAI,GAAG,GAAkB,CAAC;YAChC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK;gBAAE,SAAS,CAAC,mCAAmC;YACzD,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,iCAAiC;YACjF,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,2EAA2E;IAC3E,OAAO,CAAC,IAAa;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,+FAA+F;IAC/F,KAAK;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAC1B,QAAmB,EACnB,mBAAsC,EACtC,UAAiC,EAAE;IAEnC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC9E,CAAC"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@
  * `@luveo-tech/vark-mcp` — zero-rewrite bridge between Anthropic Model Context
  * Protocol tool descriptors and the vark guard pipeline.
  */
-export { VarkMCPAdapter, wrapMCPTools } from './bridge.js';
+export { VarkMCPAdapter, wrapMCPTools, hashDescriptor } from './bridge.js';
 export type { MCPExecutor, MCPToolLike, VarkMCPAdapterOptions, WrappedMCPTool, } from './bridge.js';
 export type { ExecutionOptions } from './bridge.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3D,YAAY,EACV,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EACV,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -2,5 +2,5 @@
  * `@luveo-tech/vark-mcp` — zero-rewrite bridge between Anthropic Model Context
  * Protocol tool descriptors and the vark guard pipeline.
  */
-export { VarkMCPAdapter, wrapMCPTools } from './bridge.js';
+export { VarkMCPAdapter, wrapMCPTools, hashDescriptor } from './bridge.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,7 +1,19 @@
 {
   "name": "@luveo-tech/vark-mcp",
-  "version": "0.1.1",
-  "description": "Zero-rewrite bridge that wraps Anthropic Model Context Protocol (MCP) tools with vark protection.",
+  "version": "0.2.0-beta.2",
+  "description": "MCP adapter for @luveo-tech/vark — wrap Anthropic Model Context Protocol tools with vark's zero-trust security gates (no rewrites).",
+  "keywords": [
+    "vark",
+    "mcp",
+    "model-context-protocol",
+    "anthropic",
+    "ai-agents",
+    "llm-security",
+    "agent-security",
+    "tool-calls",
+    "security",
+    "zero-trust"
+  ],
   "type": "module",
   "license": "MIT",
   "main": "./dist/index.js",
@@ -17,7 +29,7 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@luveo-tech/vark": "0.1.1"
+    "@luveo-tech/vark": "0.2.0-beta.2"
   },
   "engines": {
     "node": ">=20"