@mcp-index/sdk 0.18.1 → 0.19.1

package/dist/src/lock/check.js

@@ -0,0 +1,274 @@
+/**
+ * The lock check (section 9): a pure decision over one complete listing, and a
+ * per-connection CallGate that allows `tools/call` only for names shown on the
+ * latest checked listing.
+ *
+ * Lock mode has no first-use pin, no auto-accept and no re-pin. Nothing here
+ * writes to a lock; the lock changes only through LockStore.approve/revoke.
+ */
+import { compareCodePoints, hasTopMeta, instructionsDigest, metaDigest, toolDigest } from "./digest.js";
+import { LockError, POSTURES, identityKey } from "./lock.js";
+export const LOCK_REFUSAL_CODE = -32011;
+export const LOCK_REFUSAL_MESSAGE = "Tool withheld by lock";
+export function isPosture(value) {
+    return typeof value === "string" && POSTURES.includes(value);
+}
+function nameOf(tool) {
+    if (tool === null || typeof tool !== "object" || Array.isArray(tool))
+        return null;
+    const name = Object.getOwnPropertyDescriptor(tool, "name")?.value;
+    return typeof name === "string" ? name : null;
+}
+function freezeAll(value) {
+    return Object.freeze(value);
+}
+/**
+ * Check one complete listing against a lock, or against a whole-lock failure.
+ * `listing.tools` is the raw array as received; nothing is fetched again.
+ */
+export function checkListing(lock, identity, listing, posture) {
+    if (!isPosture(posture))
+        throw new Error(`unknown posture ${String(posture)}`);
+    const guard = posture !== "monitor";
+    const raw = listing.tools;
+    if (!Array.isArray(raw))
+        throw new TypeError("listing has no tools array");
+    const served = listing.instructions;
+    const hasInstructions = served !== undefined && served !== null;
+    const shown = [];
+    const shownIndexes = [];
+    const withheld = new Map();
+    const flagged = new Map();
+    const callable = new Set();
+    const meta = new Map();
+    const stripMeta = new Set();
+    const tools = [];
+    if (lock instanceof LockError) {
+        for (const tool of raw) {
+            const name = nameOf(tool);
+            if (name === null)
+                continue;
+            withheld.set(name, lock.reason);
+            tools.push(freezeAll({ name, served: toolDigest(tool), approved: null, decision: "withheld", reason: lock.reason, meta: null }));
+        }
+        return freezeAll({
+            posture,
+            shown,
+            withheld,
+            flagged,
+            removed: [],
+            instructions: null,
+            stripInstructions: hasInstructions,
+            lockError: lock.reason,
+            callable,
+            shownIndexes,
+            meta: new Map(),
+            stripMeta: new Set(),
+            tools,
+            served: raw.length,
+        });
+    }
+    const shard = lock.shards.get(identityKey(identity)) ?? null;
+    const counts = new Map();
+    for (const tool of raw) {
+        const name = nameOf(tool);
+        if (name !== null)
+            counts.set(name, (counts.get(name) ?? 0) + 1);
+    }
+    raw.forEach((tool, index) => {
+        const name = nameOf(tool);
+        if (name === null)
+            return; // never shown, never callable
+        const digest = toolDigest(tool);
+        const entry = shard?.tools.get(name) ?? null;
+        let reason;
+        if (shard === null)
+            reason = "unlocked-server";
+        else if ((counts.get(name) ?? 0) > 1)
+            reason = "duplicate-name";
+        else if (digest === null)
+            reason = "no-digest";
+        else if (entry === null)
+            reason = "new-tool";
+        else if (entry.digest !== digest)
+            reason = "upstream-changed";
+        else
+            reason = null;
+        const approved = entry?.digest ?? null;
+        if (reason !== null && guard) {
+            withheld.set(name, reason);
+            tools.push(freezeAll({ name, served: digest, approved, decision: "withheld", reason, meta: null }));
+            return;
+        }
+        if (reason !== null)
+            flagged.set(name, reason);
+        let flag = null;
+        if (hasTopMeta(tool)) {
+            const approvedMeta = entry?.metaDigest;
+            if (approvedMeta === undefined)
+                flag = "meta-unapproved";
+            else if (metaDigest(tool) !== approvedMeta)
+                flag = "meta-changed";
+            meta.set(name, freezeAll({ relay: flag === null || !guard, flag }));
+            if (flag !== null && guard)
+                stripMeta.add(index);
+        }
+        shown.push(name);
+        shownIndexes.push(index);
+        callable.add(name);
+        tools.push(freezeAll({ name, served: digest, approved, decision: "shown", reason, meta: flag }));
+    });
+    const removed = shard === null ? [] : [...shard.tools.keys()].filter((n) => !counts.has(n)).sort(compareCodePoints);
+    let instructions = null;
+    let stripInstructions = false;
+    if (hasInstructions) {
+        const locked = shard?.instructions ?? null;
+        const digest = typeof served === "string" ? instructionsDigest(served) : null;
+        if (locked === null || digest !== locked) {
+            instructions = "instructions-changed";
+            stripInstructions = guard;
+        }
+    }
+    return freezeAll({
+        posture,
+        shown,
+        withheld,
+        flagged,
+        removed,
+        instructions,
+        stripInstructions,
+        lockError: null,
+        callable,
+        shownIndexes,
+        meta,
+        stripMeta,
+        tools,
+        served: raw.length,
+    });
+}
+/** Decide instructions alone, for a host that sees them before any listing (initialize). */
+export function checkInstructions(lock, identity, instructions, posture) {
+    if (instructions === undefined || instructions === null)
+        return { reason: null, strip: false };
+    const d = checkListing(lock, identity, { tools: [], instructions }, posture);
+    if (d.lockError !== null)
+        return { reason: d.lockError, strip: true };
+    return { reason: d.instructions, strip: d.stripInstructions };
+}
+/** 'allow', or the reason sent in data.reason of a -32011 error. */
+export function checkCall(decision, name) {
+    if (decision === null)
+        return "no-listing";
+    if (decision.lockError !== null)
+        return decision.lockError;
+    if (decision.callable.has(name))
+        return "allow";
+    return decision.withheld.get(name) ?? "not-listed";
+}
+export function refusalError(name, reason) {
+    const data = name === null ? { reason } : { reason, tool: name };
+    return { code: LOCK_REFUSAL_CODE, message: LOCK_REFUSAL_MESSAGE, data };
+}
+/** Error thrown to callers who check through CallGate.enforce. */
+export class LockRefusal extends Error {
+    code = LOCK_REFUSAL_CODE;
+    reason;
+    tool;
+    constructor(tool, reason) {
+        super(LOCK_REFUSAL_MESSAGE);
+        this.name = "LockRefusal";
+        this.tool = tool;
+        this.reason = reason;
+    }
+    toJsonRpcError() {
+        return refusalError(this.tool, this.reason);
+    }
+}
+/** Default age after which a call first reloads the snapshot (section 9.8), as in the Python host. */
+export const DEFAULT_MAX_STALENESS_MS = 60_000;
+/**
+ * Per-connection allow-list. `record` replaces the decision only when a
+ * complete listing has been checked. A list_changed notification does not
+ * touch it. While a listing is in progress (section 9.2.1: `beginListing`
+ * until `record` or `markUnreachable`) every call is refused with
+ * `no-listing`, so nothing is called on the strength of a listing that is
+ * being replaced.
+ *
+ * Order of reasons (section 9.5): `no-listing` while a listing is in
+ * progress or before any listing has ended; then the whole-lock error of the
+ * latest completed listing, which a later failed listing does not clear;
+ * then `unreachable` after a failed listing; then `lock-stale`; then the
+ * per-name answer.
+ */
+export class CallGate {
+    #decision = null;
+    #snapshotAt = 0;
+    #snapshotId = null;
+    #unreachable = false;
+    #collecting = false;
+    #maxStalenessMs;
+    #now;
+    constructor(options = {}) {
+        const max = options.maxStalenessMs ?? DEFAULT_MAX_STALENESS_MS;
+        if (!(max >= 0))
+            throw new Error("maxStalenessMs must be >= 0");
+        this.#maxStalenessMs = max;
+        this.#now = options.now ?? Date.now;
+    }
+    get decision() {
+        return this.#decision;
+    }
+    get snapshotId() {
+        return this.#snapshotId;
+    }
+    /** A listing started: the host asked for its first page. */
+    beginListing() {
+        this.#collecting = true;
+    }
+    /** The listing in progress ended without a decision and without failing. */
+    endListing() {
+        this.#collecting = false;
+    }
+    get listingInProgress() {
+        return this.#collecting;
+    }
+    /** Install the decision for the latest complete listing. */
+    record(decision, snapshot) {
+        this.#decision = decision;
+        this.#snapshotId = snapshot.snapshotId;
+        this.#snapshotAt = snapshot.loadedAt;
+        this.#unreachable = false;
+        this.#collecting = false;
+    }
+    /** The latest listing failed; refuse every call with `unreachable` until one completes. */
+    markUnreachable() {
+        this.#unreachable = true;
+        this.#collecting = false;
+    }
+    get unreachable() {
+        return this.#unreachable;
+    }
+    isStale() {
+        if (this.#decision === null)
+            return false;
+        return this.#now() - this.#snapshotAt > this.#maxStalenessMs;
+    }
+    check(name) {
+        const decision = this.#decision;
+        if (this.#collecting || (decision === null && !this.#unreachable))
+            return "no-listing";
+        if (decision !== null && decision.lockError !== null)
+            return decision.lockError;
+        if (this.#unreachable || decision === null)
+            return "unreachable";
+        if (this.isStale())
+            return "lock-stale";
+        return checkCall(decision, name);
+    }
+    enforce(name) {
+        const verdict = this.check(name);
+        if (verdict !== "allow")
+            throw new LockRefusal(name, verdict);
+    }
+}
+//# sourceMappingURL=check.js.map

package/dist/src/lock/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/lock/check.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AA2D5D,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,QAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,MAAM,CAAC,IAAa;IAC3B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC;IAClE,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,SAAS,CAAmB,KAAQ;IAC3C,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAsB,EAAE,QAAkB,EAAE,OAAgB,EAAE,OAAgB;IACzG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IACpC,MAAM,eAAe,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC;IAEhE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,IAAI,IAAI,YAAY,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAC5B,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnI,CAAC;QACD,OAAO,SAAS,CAAC;YACf,OAAO;YACP,KAAK;YACL,QAAQ;YACR,OAAO;YACP,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,iBAAiB,EAAE,eAAe;YAClC,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,QAAQ;YACR,YAAY;YACZ,IAAI,EAAE,IAAI,GAAG,EAAE;YACf,SAAS,EAAE,IAAI,GAAG,EAAE;YACpB,KAAK;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,8BAA8B;QACzD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;QAC7C,IAAI,MAAyB,CAAC;QAC9B,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,GAAG,iBAAiB,CAAC;aAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,gBAAgB,CAAC;aAC3D,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,GAAG,WAAW,CAAC;aAC1C,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,GAAG,UAAU,CAAC;aACxC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,GAAG,kBAAkB,CAAC;;YACzD,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;YAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,GAAsB,IAAI,CAAC;QACnC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,YAAY,GAAG,KAAK,EAAE,UAAU,CAAC;YACvC,IAAI,YAAY,KAAK,SAAS;gBAAE,IAAI,GAAG,iBAAiB,CAAC;iBACpD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,YAAY;gBAAE,IAAI,GAAG,cAAc,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK;gBAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpH,IAAI,YAAY,GAAkC,IAAI,CAAC;IACvD,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACzC,YAAY,GAAG,sBAAsB,CAAC;YACtC,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;QACf,OAAO;QACP,KAAK;QACL,QAAQ;QACR,OAAO;QACP,OAAO;QACP,YAAY;QACZ,iBAAiB;QACjB,SAAS,EAAE,IAAI;QACf,QAAQ;QACR,YAAY;QACZ,IAAI;QACJ,SAAS;QACT,KAAK;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAC/B,IAAsB,EACtB,QAAkB,EAClB,YAAqB,EACrB,OAAgB;IAEhB,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC/F,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;AAChE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,SAAS,CAAC,QAAyB,EAAE,IAAY;IAC/D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAC3C,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC3D,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAChD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC;AACrD,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,IAAmB,EAAE,MAAkB;IAClE,MAAM,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,kEAAkE;AAClE,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,GAAG,iBAAiB,CAAC;IACzB,MAAM,CAAa;IACnB,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,MAAkB;QAC1C,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IACD,cAAc;QACZ,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,sGAAsG;AACtG,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAY/C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,QAAQ;IACnB,SAAS,GAAoB,IAAI,CAAC;IAClC,WAAW,GAAG,CAAC,CAAC;IAChB,WAAW,GAAkB,IAAI,CAAC;IAClC,YAAY,GAAG,KAAK,CAAC;IACrB,WAAW,GAAG,KAAK,CAAC;IACX,eAAe,CAAS;IACxB,IAAI,CAAe;IAE5B,YAAY,UAA2B,EAAE;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QAC/D,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAChE,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACtC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,4DAA4D;IAC5D,YAAY;QACV,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,4EAA4E;IAC5E,UAAU;QACR,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,4DAA4D;IAC5D,MAAM,CAAC,QAAkB,EAAE,QAAoE;QAC7F,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,2FAA2F;IAC3F,eAAe;QACb,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1C,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,IAAY;QAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,YAAY,CAAC;QACvF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,SAAS,CAAC;QAChF,IAAI,IAAI,CAAC,YAAY,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QACjE,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,YAAY,CAAC;QACxC,OAAO,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;CACF"}

package/dist/src/lock/digest.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Tool Definition Digest, Tool Set Digest and instructions digest (lock draft 1,
+ * section 2), over RFC 8785 (JCS) canonical JSON.
+ *
+ * The input is what JSON.parse returned for the raw message, never an SDK model.
+ * The serializer walks own keys with Object.keys and writes the output string
+ * directly, so a member named `__proto__` (which JSON.parse creates as an own
+ * property) is covered like any other. Nothing here copies through object
+ * spread or plain-object assignment, either of which would turn `__proto__`
+ * into a prototype change and drop it from the digest.
+ *
+ * Separate from ../canonical.ts on purpose: that file is the legacy pin hash
+ * (NFC, ensure_ascii, Python float repr). This one is plain RFC 8785 and does
+ * not normalize Unicode.
+ */
+export declare const DIGEST_PREFIX = "sha256:";
+/** Numbers at or above this magnitude get no digest (checked on the parsed value). */
+export declare const NUMBER_LIMIT: number;
+export declare class CanonicalizationError extends Error {
+    constructor(message: string);
+}
+export declare function hasLoneSurrogate(text: string): boolean;
+/** RFC 8785 text of a JSON value. Throws CanonicalizationError. */
+export declare function canonicalize(value: unknown): string;
+export declare function sha256Hex(data: string | Uint8Array): string;
+/** Digest of one raw Tool object, or null when it has no digest (section 2.1). */
+export declare function toolDigest(tool: unknown): string | null;
+/** Contract file bytes for a tool: sha256 of these is the tool digest. */
+export declare function canonicalBody(tool: unknown): Buffer | null;
+/**
+ * Meta digest (section 2.3, draft 1c): sha256 of the RFC 8785 text of a
+ * tool's top-level `_meta`, under the rules of the tool digest with `_meta`
+ * at depth 1, as it sits in the tool. Null when the tool has no `_meta`, when
+ * `_meta` is not an object, or when the rules exclude it.
+ */
+export declare function metaDigest(tool: unknown): string | null;
+/** True when the tool object has a top-level `_meta` member of its own. */
+export declare function hasTopMeta(tool: unknown): boolean;
+/** Digest of the server's instructions string (section 2.2), or null. */
+export declare function instructionsDigest(instructions: unknown): string | null;
+/** Compare by Unicode code point, as Python compares str. */
+export declare function compareCodePoints(a: string, b: string): number;
+/**
+ * Digest over every tool's digest, sorted by (name, digest) as Python sorts
+ * tuples. Null if any tool has no digest.
+ */
+export declare function toolSetDigest(tools: readonly unknown[]): string | null;
+//# sourceMappingURL=digest.d.ts.map

package/dist/src/lock/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../../src/lock/digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,eAAO,MAAM,aAAa,YAAY,CAAC;AAEvC,sFAAsF;AACtF,eAAO,MAAM,YAAY,QAAU,CAAC;AAOpC,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAsFD,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAK3D;AAsBD,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGvD;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAG1D;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CASvD;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEjD;AAED,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGvE;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAW9D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,GAAG,IAAI,CAatE"}

package/dist/src/lock/digest.js

@@ -0,0 +1,234 @@
+/**
+ * Tool Definition Digest, Tool Set Digest and instructions digest (lock draft 1,
+ * section 2), over RFC 8785 (JCS) canonical JSON.
+ *
+ * The input is what JSON.parse returned for the raw message, never an SDK model.
+ * The serializer walks own keys with Object.keys and writes the output string
+ * directly, so a member named `__proto__` (which JSON.parse creates as an own
+ * property) is covered like any other. Nothing here copies through object
+ * spread or plain-object assignment, either of which would turn `__proto__`
+ * into a prototype change and drop it from the digest.
+ *
+ * Separate from ../canonical.ts on purpose: that file is the legacy pin hash
+ * (NFC, ensure_ascii, Python float repr). This one is plain RFC 8785 and does
+ * not normalize Unicode.
+ */
+import { createHash } from "node:crypto";
+export const DIGEST_PREFIX = "sha256:";
+/** Numbers at or above this magnitude get no digest (checked on the parsed value). */
+export const NUMBER_LIMIT = 2 ** 53;
+/** Nesting deeper than this gets no digest rather than a stack overflow. */
+const MAX_DEPTH = 512;
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+export class CanonicalizationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CanonicalizationError";
+    }
+}
+export function hasLoneSurrogate(text) {
+    return LONE_SURROGATE.test(text);
+}
+function isObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function own(obj, key) {
+    return Object.getOwnPropertyDescriptor(obj, key)?.value;
+}
+/** True when every number is finite with magnitude below 2^53. */
+function numbersInRange(value, depth) {
+    if (depth > MAX_DEPTH)
+        return false;
+    if (typeof value === "number")
+        return Number.isFinite(value) && Math.abs(value) < NUMBER_LIMIT;
+    if (Array.isArray(value))
+        return value.every((v) => numbersInRange(v, depth + 1));
+    if (isObject(value)) {
+        for (const key of Object.keys(value)) {
+            if (!numbersInRange(own(value, key), depth + 1))
+                return false;
+        }
+    }
+    return true;
+}
+/** False when any member name or string holds an unpaired UTF-16 surrogate. */
+function wellFormed(value, depth) {
+    if (depth > MAX_DEPTH)
+        return false;
+    if (typeof value === "string")
+        return !hasLoneSurrogate(value);
+    if (Array.isArray(value))
+        return value.every((v) => wellFormed(v, depth + 1));
+    if (isObject(value)) {
+        for (const key of Object.keys(value)) {
+            if (hasLoneSurrogate(key) || !wellFormed(own(value, key), depth + 1))
+                return false;
+        }
+    }
+    return true;
+}
+function serializeString(text) {
+    if (hasLoneSurrogate(text))
+        throw new CanonicalizationError("unpaired surrogate");
+    // For well-formed strings JSON.stringify escapes exactly what RFC 8785 asks:
+    // quote, backslash, and controls below U+0020 (short forms for \b \f \n \r \t,
+    // lower-case \u00xx otherwise). Everything else is written as is.
+    return JSON.stringify(text);
+}
+function serializeNumber(n) {
+    if (!Number.isFinite(n))
+        throw new CanonicalizationError("non-finite number");
+    // ECMAScript Number::toString is the RFC 8785 number form; -0 prints as 0.
+    return String(n);
+}
+/** Key order is UTF-16 code unit order, which is what `<` on JS strings compares. */
+function compareCodeUnits(a, b) {
+    return a < b ? -1 : a > b ? 1 : 0;
+}
+function serialize(value, depth, skipTopMeta) {
+    if (depth > MAX_DEPTH)
+        throw new CanonicalizationError("nesting too deep");
+    if (value === null)
+        return "null";
+    if (value === true)
+        return "true";
+    if (value === false)
+        return "false";
+    if (typeof value === "number")
+        return serializeNumber(value);
+    if (typeof value === "string")
+        return serializeString(value);
+    if (Array.isArray(value)) {
+        let out = "[";
+        for (let i = 0; i < value.length; i++) {
+            if (i > 0)
+                out += ",";
+            out += serialize(value[i], depth + 1, false);
+        }
+        return out + "]";
+    }
+    if (isObject(value)) {
+        const keys = Object.keys(value)
+            .filter((k) => !(skipTopMeta && k === "_meta"))
+            .sort(compareCodeUnits);
+        let out = "{";
+        let first = true;
+        for (const key of keys) {
+            if (!first)
+                out += ",";
+            first = false;
+            out += serializeString(key) + ":" + serialize(own(value, key), depth + 1, false);
+        }
+        return out + "}";
+    }
+    throw new CanonicalizationError(`not a JSON value: ${typeof value}`);
+}
+/** RFC 8785 text of a JSON value. Throws CanonicalizationError. */
+export function canonicalize(value) {
+    return serialize(value, 0, false);
+}
+export function sha256Hex(data) {
+    const hash = createHash("sha256");
+    if (typeof data === "string")
+        hash.update(data, "utf8");
+    else
+        hash.update(data);
+    return hash.digest("hex");
+}
+function digestOf(text) {
+    return DIGEST_PREFIX + sha256Hex(text);
+}
+/** RFC 8785 text of the tool minus its top-level `_meta`, or null when it has no digest. */
+function canonicalToolText(tool) {
+    if (!isObject(tool))
+        return null;
+    for (const key of Object.keys(tool)) {
+        if (key === "_meta")
+            continue;
+        if (hasLoneSurrogate(key))
+            return null;
+        const v = own(tool, key);
+        if (!wellFormed(v, 1) || !numbersInRange(v, 1))
+            return null;
+    }
+    try {
+        return serialize(tool, 0, true);
+    }
+    catch {
+        return null;
+    }
+}
+/** Digest of one raw Tool object, or null when it has no digest (section 2.1). */
+export function toolDigest(tool) {
+    const text = canonicalToolText(tool);
+    return text === null ? null : digestOf(text);
+}
+/** Contract file bytes for a tool: sha256 of these is the tool digest. */
+export function canonicalBody(tool) {
+    const text = canonicalToolText(tool);
+    return text === null ? null : Buffer.from(text, "utf8");
+}
+/**
+ * Meta digest (section 2.3, draft 1c): sha256 of the RFC 8785 text of a
+ * tool's top-level `_meta`, under the rules of the tool digest with `_meta`
+ * at depth 1, as it sits in the tool. Null when the tool has no `_meta`, when
+ * `_meta` is not an object, or when the rules exclude it.
+ */
+export function metaDigest(tool) {
+    if (!isObject(tool) || !Object.prototype.hasOwnProperty.call(tool, "_meta"))
+        return null;
+    const meta = own(tool, "_meta");
+    if (!isObject(meta) || !wellFormed(meta, 1) || !numbersInRange(meta, 1))
+        return null;
+    try {
+        return digestOf(serialize(meta, 1, false));
+    }
+    catch {
+        return null;
+    }
+}
+/** True when the tool object has a top-level `_meta` member of its own. */
+export function hasTopMeta(tool) {
+    return isObject(tool) && Object.prototype.hasOwnProperty.call(tool, "_meta");
+}
+/** Digest of the server's instructions string (section 2.2), or null. */
+export function instructionsDigest(instructions) {
+    if (typeof instructions !== "string" || hasLoneSurrogate(instructions))
+        return null;
+    return digestOf(serializeString(instructions));
+}
+/** Compare by Unicode code point, as Python compares str. */
+export function compareCodePoints(a, b) {
+    const ia = a[Symbol.iterator]();
+    const ib = b[Symbol.iterator]();
+    for (;;) {
+        const x = ia.next();
+        const y = ib.next();
+        if (x.done || y.done)
+            return x.done && y.done ? 0 : x.done ? -1 : 1;
+        const cx = x.value.codePointAt(0);
+        const cy = y.value.codePointAt(0);
+        if (cx !== cy)
+            return cx < cy ? -1 : 1;
+    }
+}
+/**
+ * Digest over every tool's digest, sorted by (name, digest) as Python sorts
+ * tuples. Null if any tool has no digest.
+ */
+export function toolSetDigest(tools) {
+    const pairs = [];
+    for (const tool of tools) {
+        const digest = toolDigest(tool);
+        if (digest === null)
+            return null;
+        const name = isObject(tool) ? own(tool, "name") : undefined;
+        // The name only sets the order. One that is not a string sorts as "", as
+        // in the Python reference (sep_digest.tool_set_digest).
+        const key = typeof name === "string" ? name : "";
+        pairs.push([key, digest]);
+    }
+    pairs.sort((a, b) => compareCodePoints(a[0], b[0]) || compareCodePoints(a[1], b[1]));
+    return digestOf(canonicalize(pairs.map((p) => p[1])));
+}
+//# sourceMappingURL=digest.js.map

package/dist/src/lock/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../../src/lock/digest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,CAAC;AAEpC,4EAA4E;AAC5E,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAEhG,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,GAAW;IACpD,OAAO,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;AAC1D,CAAC;AAED,kEAAkE;AAClE,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC;IAC/F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IAClF,6EAA6E;IAC7E,+EAA+E;IAC/E,kEAAkE;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAC9E,2EAA2E;IAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,CAAS,EAAE,CAAS;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,EAAE,WAAoB;IACpE,IAAI,KAAK,GAAG,SAAS;QAAE,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;IAC3E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC;gBAAE,GAAG,IAAI,GAAG,CAAC;YACtB,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC;aAC9C,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1B,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK;gBAAE,GAAG,IAAI,GAAG,CAAC;YACvB,KAAK,GAAG,KAAK,CAAC;YACd,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,GAAG,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,OAAO,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAyB;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,4FAA4F;AAC5F,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS;QAC9B,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,YAAqB;IACtD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,gBAAgB,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAAC,CAAS,EAAE,CAAS;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAChC,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,GAAI,CAAC,CAAC,KAAgB,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACxD,MAAM,EAAE,GAAI,CAAC,CAAC,KAAgB,CAAC,WAAW,CAAC,CAAC,CAAW,CAAC;QACxD,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/src/lock/events.d.ts

@@ -0,0 +1,82 @@
+/**
+ * mcpindex.lock.event/1 records (section 10), handed to a sink the caller
+ * passes in. Nothing here opens a network connection; the only file sink is
+ * one the caller constructs with a path.
+ *
+ * Events carry tool names, digests and reason codes. They never carry call
+ * arguments, call results, descriptions, instructions text or credentials:
+ * builders take only those fields, so there is no object to leak from.
+ */
+import type { Identity, LockErrorReason, Posture, Via } from "./lock.js";
+import type { CallReason, Decision, MetaReason, ToolReason } from "./check.js";
+export declare const EVENT_SCHEMA = "mcpindex.lock.event/1";
+export interface EventServer {
+    readonly h16: string;
+    readonly slug: string;
+}
+interface EventBase {
+    readonly schema: typeof EVENT_SCHEMA;
+    readonly id: string;
+    readonly time: string;
+    readonly host: string;
+    readonly server: EventServer;
+}
+export interface ListingEvent extends EventBase {
+    readonly type: "listing";
+    readonly posture: Posture;
+    readonly lockError: LockErrorReason | null;
+    readonly counts: {
+        readonly served: number;
+        readonly shown: number;
+        readonly withheld: number;
+        readonly removed: number;
+    };
+    readonly tools: ReadonlyArray<{
+        readonly name: string;
+        readonly served: string | null;
+        readonly approved: string | null;
+        readonly decision: "shown" | "withheld";
+        readonly reason: ToolReason | LockErrorReason | null;
+        readonly meta: MetaReason | null;
+    }>;
+    readonly removed: readonly string[];
+    readonly instructions: string | null;
+    /** The snapshot the decision used (optional in the spec, always set here). */
+    readonly snapshotId: string;
+}
+export interface RefusalEvent extends EventBase {
+    readonly type: "refusal";
+    readonly tool: string;
+    readonly reason: CallReason;
+}
+export interface ApprovalEvent extends EventBase {
+    readonly type: "approval";
+    readonly tool: string;
+    readonly digest: string;
+    readonly via: Via;
+    readonly subject: string;
+    readonly ref: string | null;
+}
+export type LockEvent = ListingEvent | RefusalEvent | ApprovalEvent;
+export type LockEventSink = (event: LockEvent) => void;
+export interface EventContext {
+    readonly host: string;
+    readonly identity: Identity;
+    readonly now?: () => Date;
+    readonly newId?: () => string;
+}
+export declare function listingEvent(ctx: EventContext, decision: Decision, snapshotId: string): ListingEvent;
+export declare function refusalEvent(ctx: EventContext, tool: string, reason: CallReason): RefusalEvent;
+export declare function approvalEvent(ctx: EventContext, approval: {
+    tool: string;
+    digest: string;
+    via: Via;
+    subject: string;
+    ref?: string;
+}): ApprovalEvent;
+/** Call the sink and swallow its errors: an event failure never changes a decision. */
+export declare function emit(sink: LockEventSink | undefined, event: LockEvent): void;
+/** Append one JSON line per event to `path`. Only used when a caller builds it. */
+export declare function jsonlFileSink(path: string): LockEventSink;
+export {};
+//# sourceMappingURL=events.d.ts.map