@moltzap/client 2026.1002.0 → 2026.1004.0

package/dist/{client-runtime.js → endpoint/harness-endpoint/index.js}

@@ -1,44 +1,21 @@
 /** @file Scoped MCP implementation of the public semantic HarnessEndpoint. */
 import { Client, fromJsonSchema, ProtocolError, StreamableHTTPClientTransport, } from "@modelcontextprotocol/client";
-import { Data, Effect, Queue, Ref, Stream, Take } from "effect";
-import packageJson from "../package.json" with { type: "json" };
-import { CollectiveError, ConnectError, DeliveryAcknowledgeError, ListenError, SendError, } from "./contract.js";
-import { decodeHarnessEventsExtensionDeclaration, decodeHarnessMessageReadyEvent, decodeHarnessSendErrorData, decodeHarnessSendResult, HARNESS_ACKNOWLEDGE_DELIVERY_TOOL, HARNESS_EVENTS_EXTENSION, HARNESS_MESSAGE_READY_FILTER, HARNESS_MESSAGE_READY_NOTIFICATION, HARNESS_SEND_TOOL, } from "./harness-mcp-contract.js";
+import { Data, Effect, Ref, Stream } from "effect";
+import { decodeHarnessReadInboxResult, decodeHarnessSendErrorData, decodeHarnessSendResult, } from "../../delivery/operations.js";
+import { CollectiveError, } from "../../transport/collectives/forms.js";
+import { DeliveryAcknowledgeError, deliveryAcknowledgeFailureReasons, ListenError, SendError, sendFailureReasons, } from "../../transport/messaging/errors.js";
+import { packageVersion } from "../implementation.js";
+import { HARNESS_ACKNOWLEDGE_DELIVERY_TOOL, HARNESS_READ_INBOX_TOOL, HARNESS_SEND_META_KEY, HARNESS_SEND_TOOL, INBOX_PENDING_EVENT, } from "../mcp/schemas.js";
+import { ConnectError, } from "./capability.js";
+import { inboxWakeups } from "./events.js";
 /* eslint-disable agent-code-guard/promise-type, @typescript-eslint/no-invalid-void-type -- The official MCP client lifecycle is Promise-native and is converted to Effect at this private edge. */
 const MODERN_PROTOCOL_VERSION = "2026-07-28";
 const CLIENT_IMPLEMENTATION = {
     name: "moltzap-harness-endpoint",
-    version: packageJson.version,
+    version: packageVersion,
 };
 class CloseError extends Data.TaggedError("CloseError") {
 }
-const MESSAGE_READY_FILTER = {
-    [HARNESS_MESSAGE_READY_FILTER]: true,
-};
-const unknownNotificationParams = fromJsonSchema({});
-const sendReasons = [
-    "invalid-address",
-    "unknown-agent",
-    "membership-invalid",
-    "content-invalid",
-    "not-registered",
-    "version-mismatch",
-    "certification-unavailable",
-    "persistence-failed",
-    "network-unavailable",
-];
-const acknowledgeReasons = [
-    "unknown-delivery",
-    "delivery-conflict",
-    "persistence-failed",
-    "transport-failed",
-];
-const listenReasons = [
-    "already-listening",
-    "incompatible-daemon",
-    "decode-failed",
-    "transport-failed",
-];
 /**
  * Acquire one real MCP-backed endpoint and its scoped connection.
  * @param endpoint Loopback MCP URL for the configured endpoint daemon.
@@ -50,33 +27,33 @@ export function acquireHarnessEndpoint(endpoint) {
 function closeClient(client) {
     return closeQuietly(() => client.close());
 }
-function closeSubscription(subscription) {
-    return closeQuietly(() => subscription.close());
-}
 function closeQuietly(close) {
     return Effect.tryPromise({ try: close, catch: () => new CloseError() }).pipe(Effect.ignore);
 }
 /**
  * Rebuild the typed error of a refused send from its JSON-RPC error data: a
  * collective failure with its id and detail, or a closed send reason.
+ * @param cause Upstream rejection at the MCP tool boundary.
+ * @returns A closed send failure without transport details.
  */
 function sendFailure(cause) {
     const data = ProtocolError.isInstance(cause) ? cause.data : cause;
     return decodeHarnessSendErrorData(data).pipe(Effect.map((decoded) => "failure" in decoded
         ? new CollectiveError({ id: decoded.id, failure: decoded.failure })
         : new SendError({
-            reason: isReason(decoded.reason, sendReasons)
+            reason: isReason(decoded.reason, sendFailureReasons)
                 ? decoded.reason
                 : "network-unavailable",
+            ...("detail" in decoded && decoded.detail !== undefined
+                ? { detail: decoded.detail }
+                : {}),
         })), Effect.orElseSucceed(() => new SendError({ reason: "network-unavailable" })), Effect.runSync);
 }
 function acknowledgeReason(cause) {
     const reason = operationReason(cause);
-    return isReason(reason, acknowledgeReasons) ? reason : "transport-failed";
-}
-function listenReason(cause) {
-    const reason = operationReason(cause);
-    return isReason(reason, listenReasons) ? reason : "transport-failed";
+    return isReason(reason, deliveryAcknowledgeFailureReasons)
+        ? reason
+        : "transport-failed";
 }
 function operationReason(cause) {
     if (hasReasonPayload(cause)) {
@@ -94,14 +71,24 @@ function isReason(value, allowed) {
     return allowed.some((candidate) => candidate === value);
 }
 function callSend(client, ...[input, options]) {
-    const failureDelivery = options?.failureDelivery;
     return Effect.tryPromise({
         try: (signal) => client.callTool({
             name: HARNESS_SEND_TOOL,
-            arguments: {
-                input,
-                ...(failureDelivery === undefined ? {} : { failureDelivery }),
-            },
+            arguments: { input },
+            ...(options === undefined
+                ? {}
+                : {
+                    _meta: {
+                        [HARNESS_SEND_META_KEY]: {
+                            ...(options.idempotencyKey === undefined
+                                ? {}
+                                : { idempotencyKey: options.idempotencyKey }),
+                            ...(options.failureDelivery === undefined
+                                ? {}
+                                : { failureDelivery: options.failureDelivery }),
+                        },
+                    },
+                }),
         }, { signal }),
         catch: sendFailure,
     }).pipe(Effect.flatMap((result) => result.isError === true
@@ -119,13 +106,34 @@ function callAcknowledgeDelivery(client, deliveryToken) {
         ? Effect.fail(new DeliveryAcknowledgeError({ reason: "transport-failed" }))
         : Effect.void));
 }
-function hasExactEventsExtension(client) {
-    const experimental = client.getServerCapabilities()?.experimental;
-    const extension = experimental?.[HARNESS_EVENTS_EXTENSION];
-    return Effect.runSync(decodeHarnessEventsExtensionDeclaration(extension).pipe(Effect.match({
-        onFailure: () => false,
-        onSuccess: () => true,
-    })));
+const eventsListOutput = fromJsonSchema({
+    type: "object",
+    required: ["events"],
+    properties: {
+        events: {
+            type: "array",
+            items: {
+                type: "object",
+                required: ["name", "delivery"],
+                properties: {
+                    name: { type: "string" },
+                    delivery: { type: "array", items: { type: "string" } },
+                },
+            },
+        },
+    },
+});
+function supportsInboxEvents(client) {
+    return Effect.tryPromise({
+        try: (signal) => client.request({ method: "events/list", params: {} }, eventsListOutput, {
+            signal,
+        }),
+        catch: (cause) => new ConnectError({
+            reason: ProtocolError.isInstance(cause) && cause.code === -32601
+                ? "incompatible-daemon"
+                : "transport-failed",
+        }),
+    }).pipe(Effect.map((catalog) => catalog.events.some((event) => event.name === INBOX_PENDING_EVENT && event.delivery.includes("push"))));
 }
 function acquireConnection(client, endpoint) {
     return Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
@@ -138,56 +146,55 @@ function connect(client, endpoint) {
     return Effect.tryPromise({
         try: (signal) => client.connect(new StreamableHTTPClientTransport(endpoint), { signal }),
         catch: () => new ConnectError({ reason: "transport-failed" }),
-    }).pipe(Effect.flatMap(() => hasExactEventsExtension(client)
+    }).pipe(Effect.flatMap(() => supportsInboxEvents(client).pipe(Effect.flatMap((supported) => supported
         ? Effect.succeed(client)
-        : Effect.fail(new ConnectError({ reason: "incompatible-daemon" }))), Effect.onError(() => closeClient(client)));
-}
-function acquireSubscription(client) {
-    return Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
-        const subscription = yield* restore(listen(client));
-        yield* Effect.addFinalizer(() => closeSubscription(subscription));
-        return subscription;
-    }));
-}
-function listen(client) {
-    return Effect.tryPromise({
-        try: (signal) => client.listen(MESSAGE_READY_FILTER, { signal }),
-        catch: (cause) => new ListenError({ reason: listenReason(cause) }),
-    });
-}
-function observeSubscription(subscription, queue) {
-    return Effect.tryPromise({
-        try: () => subscription.closed,
+        : Effect.fail(new ConnectError({ reason: "incompatible-daemon" }))))), Effect.onError(() => closeClient(client)));
+}
+const decodeInbox = (result) => result.isError === true
+    ? Effect.fail(new ListenError({ reason: "transport-failed" }))
+    : decodeHarnessReadInboxResult(result.structuredContent).pipe(Effect.catchTag("ParseError", () => Effect.fail(new ListenError({ reason: "decode-failed" }))));
+const unseenDeliveries = (client, seen, items) => {
+    const deliveries = [];
+    for (const entry of items) {
+        if (seen.has(entry.deliveryToken)) {
+            continue;
+        }
+        seen.add(entry.deliveryToken);
+        const acknowledge = callAcknowledgeDelivery(client, entry.deliveryToken);
+        deliveries.push({ item: entry.item, acknowledge });
+    }
+    return deliveries;
+};
+/**
+ * Prune completed snapshots so acknowledged history cannot accumulate in a live listener.
+ * @param client Scoped connection to the owning daemon.
+ * @param seen Tokens already offered by this listener, retained through pending reads.
+ * @returns New deliveries from one complete bounded inbox snapshot.
+ */
+function pendingInbox(client, seen) {
+    const retained = new Set();
+    const page = (cursor) => Stream.unwrap(Effect.tryPromise({
+        try: (signal) => client.callTool({
+            name: HARNESS_READ_INBOX_TOOL,
+            arguments: cursor === undefined ? {} : { cursor },
+        }, { signal }),
         catch: () => new ListenError({ reason: "transport-failed" }),
-    }).pipe(Effect.matchEffect({
-        onFailure: (error) => Queue.offer(queue, Take.fail(error)),
-        onSuccess: (closure) => Queue.offer(queue, closure === "local"
-            ? Take.end
-            : Take.fail(new ListenError({ reason: "transport-failed" }))),
-    }), Effect.asVoid);
-}
-function enqueueDelivery(client, queue, params) {
-    return readDelivery(client, params).pipe(Effect.matchEffect({
-        onFailure: (error) => Queue.offer(queue, Take.fail(error)),
-        onSuccess: (delivery) => Queue.offer(queue, Take.of(delivery)),
-    }), Effect.asVoid);
-}
-function readDelivery(client, params) {
-    return decodeHarnessMessageReadyEvent(notificationPayload(params)).pipe(Effect.catchTag("ParseError", () => Effect.fail(new ListenError({ reason: "decode-failed" }))), Effect.map((event) => ({
-        item: event.item,
-        acknowledge: callAcknowledgeDelivery(client, event.deliveryToken),
+    }).pipe(Effect.flatMap(decodeInbox), Effect.map((result) => {
+        for (const entry of result.items) {
+            retained.add(entry.deliveryToken);
+        }
+        const current = Stream.fromIterable(unseenDeliveries(client, seen, result.items));
+        return result.nextCursor === undefined
+            ? current
+            : Stream.concat(current, Stream.suspend(() => page(result.nextCursor)));
+    })));
+    return Stream.concat(page(), Stream.execute(Effect.sync(() => {
+        for (const token of seen) {
+            if (!retained.has(token)) {
+                seen.delete(token);
+            }
+        }
     })));
-}
-function notificationPayload(params) {
-    if (typeof params !== "object" || params === null || Array.isArray(params)) {
-        return params;
-    }
-    const payload = { ...params };
-    Reflect.deleteProperty(payload, "_meta");
-    return payload;
-}
-function registerMessageHandler(client, queue) {
-    client.setNotificationHandler(HARNESS_MESSAGE_READY_NOTIFICATION, { params: unknownNotificationParams }, (params) => Effect.runPromise(enqueueDelivery(client, queue, params)));
 }
 function acquireListenerSlot(active) {
     return Effect.uninterruptible(Effect.gen(function* () {
@@ -198,25 +205,16 @@ function acquireListenerSlot(active) {
         return acquired;
     }).pipe(Effect.asVoid));
 }
-function messages(client, listenerActive) {
+function messages(client, listenerActive, endpoint) {
     return Stream.unwrapScoped(Effect.gen(function* () {
         yield* acquireListenerSlot(listenerActive);
-        const queue = yield* Queue.unbounded();
-        yield* Effect.addFinalizer(() => Queue.shutdown(queue));
-        registerMessageHandler(client, queue);
-        yield* Effect.addFinalizer(() => Effect.sync(() => {
-            client.removeNotificationHandler(HARNESS_MESSAGE_READY_NOTIFICATION);
-        }));
-        const subscription = yield* acquireSubscription(client);
-        yield* Effect.forkScoped(observeSubscription(subscription, queue));
-        return Stream.fromQueue(queue).pipe(Stream.flattenTake);
+        const seen = new Set();
+        return inboxWakeups(endpoint).pipe(Stream.flatMap(() => pendingInbox(client, seen)));
     }));
 }
 function makeMcpClient() {
     return new Client(CLIENT_IMPLEMENTATION, {
-        capabilities: {
-            experimental: { [HARNESS_EVENTS_EXTENSION]: {} },
-        },
+        capabilities: {},
         versionNegotiation: { mode: { pin: MODERN_PROTOCOL_VERSION } },
     });
 }
@@ -227,9 +225,11 @@ function acquireEndpoint(endpoint) {
         const listenerActive = yield* Ref.make(false);
         return {
             send: (input, options) => callSend(client, input, options),
-            messages: messages(client, listenerActive),
+            messages: messages(client, listenerActive, endpoint),
         };
     });
 }
 /* eslint-enable agent-code-guard/promise-type, @typescript-eslint/no-invalid-void-type -- Restore strict defaults after the Promise-native MCP edge. */
-//# sourceMappingURL=client-runtime.js.map
+/** The capability this module acquires, and its connect and delivery types. */
+export { ConnectError, } from "./capability.js";
+//# sourceMappingURL=index.js.map

package/dist/endpoint/harness-endpoint/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/endpoint/harness-endpoint/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EACL,MAAM,EACN,cAAc,EAEd,aAAa,EACb,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAc,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/D,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,eAAe,GAEhB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,iCAAiC,EACjC,WAAW,EACX,SAAS,EACT,kBAAkB,GACnB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,GAGb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,mMAAmM;AAEnM,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAC7C,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,0BAA0B;IAChC,OAAO,EAAE,cAAc;CACf,CAAC;AACX,MAAM,UAAW,SAAQ,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;CAAG;AAE1D;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAa;IAEb,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAA0B;IAC9C,OAAO,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,MAAM,CACd,CAAC;AACJ,CAAC;AAMD;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,IAAI,GAAY,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,SAAS,IAAI,OAAO;QAClB,CAAC,CAAC,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACnE,CAAC,CAAC,IAAI,SAAS,CAAC;YACZ,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC;gBAClD,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,qBAAqB;YACzB,GAAG,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBACrD,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;gBAC5B,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACP,EACD,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CACvD,EACD,MAAM,CAAC,OAAO,CACf,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;QACxD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,kBAAkB,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,MAAM,YAAY,GAAY,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC;QAC3D,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CACf,KAAc,EACd,OAA0B;IAE1B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ,CACf,MAAc,EACd,GAAG,CAAC,KAAK,EAAE,OAAO,CAAsC;IAExD,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CACd,MAAM,CAAC,QAAQ,CACb;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,EAAE,KAAK,EAAE;YACpB,GAAG,CAAC,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,KAAK,EAAE;wBACL,CAAC,qBAAqB,CAAC,EAAE;4BACvB,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gCACtC,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;4BAC/C,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;gCACvC,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;yBAClD;qBACF;iBACF,CAAC;SACP,EACD,EAAE,MAAM,EAAE,CACX;QACH,KAAK,EAAE,WAAW;KACnB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,OAAO,KAAK,IAAI;QACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CACjC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAC9D,CACF,CACN,CACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAc,EACd,aAA4B;IAE5B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CACd,MAAM,CAAC,QAAQ,CACb;YACE,IAAI,EAAE,iCAAiC;YACvC,SAAS,EAAE,EAAE,aAAa,EAAE;SAC7B,EACD,EAAE,MAAM,EAAE,CACX;QACH,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,OAAO,KAAK,IAAI;QACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,wBAAwB,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAC7D;QACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,cAAc,CAEpC;IACD,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC9B,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACvD;aACF;SACF;KACF;CACuB,CAAC,CAAC;AAE5B,SAAS,mBAAmB,CAC1B,MAAc;IAEd,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CACd,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE;YACtE,MAAM;SACP,CAAC;QACJ,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,YAAY,CAAC;YACf,MAAM,EACJ,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK;gBACtD,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,kBAAkB;SACzB,CAAC;KACL,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,OAAO,CAAC,MAAM,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxE,CACF,CACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,QAAa;IAEb,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,MAAc,EACd,QAAa;IAEb,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CACd,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QACzE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KAC9D,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,SAAS;QACP,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC,CACrE,CACF,CACF,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,MAA+C,EAAE,EAAE,CACtE,MAAM,CAAC,OAAO,KAAK,IAAI;IACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CACjC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAC1D,CACF,CAAC;AAER,MAAM,gBAAgB,GAAG,CACvB,MAAc,EACd,IAAwB,EACxB,KAEU,EACS,EAAE;IACrB,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACzE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAS,YAAY,CACnB,MAAc,EACd,IAAwB;IAExB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,MAAe,EAA+C,EAAE,CAC5E,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CACd,MAAM,CAAC,QAAQ,CACb;YACE,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE;SAClD,EACD,EAAE,MAAM,EAAE,CACX;QACH,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;KAC7D,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CACjC,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAC7C,CAAC;QACF,OAAO,MAAM,CAAC,UAAU,KAAK,SAAS;YACpC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC,MAAM,CACX,OAAO,EACP,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAC9C,CAAC;IACR,CAAC,CAAC,CACH,CACF,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAClB,IAAI,EAAE,EACN,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAwB;IAExB,OAAO,MAAM,CAAC,eAAe,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtD,QAAQ;YACN,CAAC,CAAE,CAAC,KAAK,EAAE,IAAI,CAA+B;YAC9C,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,CAA+B,CAChD,CAAC,IAAI,CACJ,MAAM,CAAC,YAAY,CACjB,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,EAC9B,GAAG,EAAE,CAAC,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CACvD,CACF,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,MAAc,EACd,cAAgC,EAChC,QAAa;IAEb,OAAO,MAAM,CAAC,YAAY,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAiB,CAAC;QACtC,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAChC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,MAAM,CAAC,qBAAqB,EAAE;QACvC,YAAY,EAAE,EAAE;QAChB,kBAAkB,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,EAAE;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,QAAa;IAEb,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,KAAK,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;YAC1D,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC;SAC3B,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wJAAwJ;AAExJ,+EAA+E;AAC/E,OAAO,EACL,YAAY,GAGb,MAAM,iBAAiB,CAAC"}

package/dist/endpoint/implementation.d.ts

@@ -0,0 +1,4 @@
+/** @file The package version both loopback MCP peers report as their implementation version. */
+/** The `@moltzap/client` package version, reported in MCP implementation info. */
+export declare const packageVersion: string;
+//# sourceMappingURL=implementation.d.ts.map

package/dist/endpoint/implementation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation.d.ts","sourceRoot":"","sources":["../../src/endpoint/implementation.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAIhG,kFAAkF;AAClF,eAAO,MAAM,cAAc,EAAE,MAA4B,CAAC"}

package/dist/endpoint/implementation.js

@@ -0,0 +1,5 @@
+/** @file The package version both loopback MCP peers report as their implementation version. */
+import packageJson from "../../package.json" with { type: "json" };
+/** The `@moltzap/client` package version, reported in MCP implementation info. */
+export const packageVersion = packageJson.version;
+//# sourceMappingURL=implementation.js.map

package/dist/endpoint/implementation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation.js","sourceRoot":"","sources":["../../src/endpoint/implementation.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAEhG,OAAO,WAAW,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEnE,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAW,WAAW,CAAC,OAAO,CAAC"}

package/dist/endpoint/mcp/auth.d.ts

@@ -0,0 +1,31 @@
+/** @file Optional credential separation for tunneled runtime and owner requests. */
+import { Redacted } from "effect";
+/** File-loaded credentials never enter a model-visible MCP representation. */
+export interface HarnessMcpCredentials {
+    readonly runtime: Redacted.Redacted;
+    readonly owner: Redacted.Redacted;
+}
+/** Trusted-local compatibility or an explicitly authenticated authority. */
+export type HarnessMcpRole = "local" | "runtime" | "owner";
+/**
+ * Compare fixed-size digests without disclosing credential bytes or lengths.
+ * @param supplied Presented bearer value.
+ * @param expected File-loaded private credential.
+ * @returns Whether both values denote the same authority.
+ */
+export declare const credentialMatches: (supplied: string, expected: Redacted.Redacted) => boolean;
+/**
+ * Authenticate before SDK or extension dispatch, including discovery and errors.
+ * @param request Incoming request on the guarded loopback listener.
+ * @param credentials Explicit tunneled-mode authority, absent in trusted-local mode.
+ * @returns The authorized role, or no authority for an invalid request.
+ */
+export declare const authenticateHarnessRequest: (request: Request, credentials?: HarnessMcpCredentials) => HarnessMcpRole | undefined;
+/**
+ * Keep raw protocol history and administrative authority outside the runtime.
+ * @param role Authenticated authority, supplied by the server wrapper.
+ * @param name Tool selected in the model's request.
+ * @returns Whether this role can invoke the selected tool.
+ */
+export declare const mayInvokeHarnessTool: (role: HarnessMcpRole, name: string) => boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/endpoint/mcp/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/endpoint/mcp/auth.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAGlC,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACnC;AAED,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAK3D;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,aAClB,MAAM,YACN,QAAQ,CAAC,QAAQ,KAC1B,OACkE,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,YAC5B,OAAO,gBACF,qBAAqB,KAClC,cAAc,GAAG,SAenB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,SACzB,cAAc,QACd,MAAM,KACX,OAE6D,CAAC"}

package/dist/endpoint/mcp/auth.js

@@ -0,0 +1,42 @@
+/** @file Optional credential separation for tunneled runtime and owner requests. */
+import { Redacted } from "effect";
+import { createHash, timingSafeEqual } from "node:crypto";
+const digest = (value) => createHash("sha256").update(value).digest();
+/**
+ * Compare fixed-size digests without disclosing credential bytes or lengths.
+ * @param supplied Presented bearer value.
+ * @param expected File-loaded private credential.
+ * @returns Whether both values denote the same authority.
+ */
+export const credentialMatches = (supplied, expected) => timingSafeEqual(digest(supplied), digest(Redacted.value(expected)));
+/**
+ * Authenticate before SDK or extension dispatch, including discovery and errors.
+ * @param request Incoming request on the guarded loopback listener.
+ * @param credentials Explicit tunneled-mode authority, absent in trusted-local mode.
+ * @returns The authorized role, or no authority for an invalid request.
+ */
+export const authenticateHarnessRequest = (request, credentials) => {
+    if (credentials === undefined) {
+        return "local";
+    }
+    const authorization = request.headers.get("authorization");
+    if (authorization === null || !authorization.startsWith("Bearer ")) {
+        return undefined;
+    }
+    const supplied = authorization.slice("Bearer ".length);
+    if (credentialMatches(supplied, credentials.owner)) {
+        return "owner";
+    }
+    return credentialMatches(supplied, credentials.runtime)
+        ? "runtime"
+        : undefined;
+};
+/**
+ * Keep raw protocol history and administrative authority outside the runtime.
+ * @param role Authenticated authority, supplied by the server wrapper.
+ * @param name Tool selected in the model's request.
+ * @returns Whether this role can invoke the selected tool.
+ */
+export const mayInvokeHarnessTool = (role, name) => role !== "runtime" ||
+    ["send_message", "read_event", "search_agents"].includes(name);
+//# sourceMappingURL=auth.js.map

package/dist/endpoint/mcp/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/endpoint/mcp/auth.ts"],"names":[],"mappings":"AAAA,oFAAoF;AAEpF,OAAO,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAW1D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAc,EAAE,CAC3C,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,QAAgB,EAChB,QAA2B,EAClB,EAAE,CACX,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAAgB,EAChB,WAAmC,EACP,EAAE;IAC9B,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC;QACrD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,IAAoB,EACpB,IAAY,EACH,EAAE,CACX,IAAI,KAAK,SAAS;IAClB,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC"}

package/dist/endpoint/mcp/event-schemas.d.ts

@@ -0,0 +1,151 @@
+/** @file Shared schema and ports for the experimental MCP Events edge. */
+import { type ProtocolError } from "@modelcontextprotocol/server";
+import { type Effect, JSONSchema, Schema } from "effect";
+/** Maximum complete UTF-8 callback body accepted by the event transport. */
+export declare const maximumEventBytes: number;
+/** Callback failures expose no upstream response or destination details. */
+export declare const callbackReasons: readonly ["connection_refused", "timeout", "tls_error", "http_4xx", "http_5xx", "challenge_failed"];
+/** Owner-visible diagnostics omit callback addresses and signing authority. */
+declare const webhookStatusSchema: Schema.Struct<{
+    mode: Schema.Literal<["none", "push", "webhook"]>;
+    id: Schema.optional<typeof Schema.String>;
+    refreshBefore: Schema.optional<typeof Schema.String>;
+    pendingCount: Schema.optional<Schema.refine<number, typeof Schema.NonNegative>>;
+    stalled: Schema.optional<Schema.NullOr<Schema.Literal<["callback", "terminal"]>>>;
+    lastError: Schema.optional<Schema.NullOr<Schema.Literal<["connection_refused", "timeout", "tls_error", "http_4xx", "http_5xx", "challenge_failed"]>>>;
+}>;
+/** Secret-free diagnostics shared with the owner-only MCP tool. */
+export type WebhookStatus = typeof webhookStatusSchema.Type;
+/** JSON Schema for the owner-only, secret-free event status tool. */
+export declare const webhookStatusJsonSchema: JSONSchema.JsonSchema7Root;
+/** An absent cursor has the draft's explicit null meaning. */
+declare const subscriptionSchema: Schema.Struct<{
+    name: typeof Schema.String;
+    arguments: Schema.Record$<typeof Schema.String, typeof Schema.Never>;
+    cursor: Schema.optionalWith<Schema.NullOr<typeof Schema.String>, {
+        exact: true;
+    }>;
+    maxAgeMs: Schema.optionalWith<Schema.refine<number, typeof Schema.NonNegative>, {
+        exact: true;
+    }>;
+}>;
+/** Delivery policy checks follow SDK shape validation. */
+declare const subscribeSchema: Schema.Struct<{
+    name: typeof Schema.String;
+    arguments: Schema.Record$<typeof Schema.String, typeof Schema.Never>;
+    cursor: Schema.optionalWith<Schema.NullOr<typeof Schema.String>, {
+        exact: true;
+    }>;
+    maxAgeMs: Schema.optionalWith<Schema.refine<number, typeof Schema.NonNegative>, {
+        exact: true;
+    }>;
+    delivery: Schema.Struct<{
+        mode: typeof Schema.String;
+        url: typeof Schema.String;
+        secret: typeof Schema.String;
+    }>;
+    ttlMs: Schema.optionalWith<Schema.NullOr<Schema.refine<number, typeof Schema.NonNegative>>, {
+        exact: true;
+    }>;
+}>;
+/** Cleanup identifies the registration without disclosing its signing secret. */
+declare const unsubscribeSchema: Schema.Struct<{
+    name: typeof Schema.String;
+    arguments: Schema.Record$<typeof Schema.String, typeof Schema.Never>;
+    delivery: Schema.Struct<{
+        url: typeof Schema.String;
+    }>;
+}>;
+/** Validated webhook subscription parameters before authorization and URL checks. */
+export type EventSubscribeInput = typeof subscribeSchema.Type;
+/** Exact subscription key supplied for eager webhook cleanup. */
+export type EventUnsubscribeInput = typeof unsubscribeSchema.Type;
+/** Server grant for one webhook registration. */
+interface EventSubscriptionGrant {
+    readonly id: string;
+    readonly refreshBefore: string;
+    readonly cursor: null;
+    readonly truncated: boolean;
+}
+/** Durable webhook edge, available only for an authenticated runtime principal. */
+export interface HarnessWebhookEvents {
+    readonly hasActiveSubscription: () => boolean;
+    readonly subscribe: (input: EventSubscribeInput, principal: string, authorize?: Effect.Effect<void, ProtocolError>) => Effect.Effect<EventSubscriptionGrant, ProtocolError>;
+    readonly unsubscribe: (input: EventUnsubscribeInput, principal: string) => Effect.Effect<void, ProtocolError>;
+    readonly observe: () => Effect.Effect<void, ProtocolError>;
+    readonly status: Effect.Effect<WebhookStatus, ProtocolError>;
+    readonly revoke: Effect.Effect<void, ProtocolError>;
+    readonly resume: Effect.Effect<void, ProtocolError>;
+}
+/** Native streaming uses the same event and replay grammar as callbacks. */
+export type EventStreamInput = typeof subscriptionSchema.Type;
+/** SDK boundary validation keeps schema constructors private. */
+export declare const eventStreamInput: import("@modelcontextprotocol/server").StandardSchemaWithJSON<{
+    readonly name: string;
+    readonly arguments: {
+        readonly [x: string]: never;
+    };
+    readonly cursor?: string | null | undefined;
+    readonly maxAgeMs?: number | undefined;
+}, {
+    readonly name: string;
+    readonly arguments: {
+        readonly [x: string]: never;
+    };
+    readonly cursor?: string | null | undefined;
+    readonly maxAgeMs?: number | undefined;
+}>;
+/** The event catalog has its own pagination grammar. */
+export declare const eventListInput: import("@modelcontextprotocol/server").StandardSchemaWithJSON<{
+    readonly cursor?: string | undefined;
+}, {
+    readonly cursor?: string | undefined;
+}>;
+/** Callback registration includes the signing authority and lease request. */
+export declare const eventSubscribeInput: import("@modelcontextprotocol/server").StandardSchemaWithJSON<{
+    readonly name: string;
+    readonly arguments: {
+        readonly [x: string]: never;
+    };
+    readonly cursor?: string | null | undefined;
+    readonly maxAgeMs?: number | undefined;
+    readonly delivery: {
+        readonly mode: string;
+        readonly url: string;
+        readonly secret: string;
+    };
+    readonly ttlMs?: number | null | undefined;
+}, {
+    readonly name: string;
+    readonly arguments: {
+        readonly [x: string]: never;
+    };
+    readonly cursor?: string | null | undefined;
+    readonly maxAgeMs?: number | undefined;
+    readonly delivery: {
+        readonly mode: string;
+        readonly url: string;
+        readonly secret: string;
+    };
+    readonly ttlMs?: number | null | undefined;
+}>;
+/** Cleanup uses only the subscription's public key fields. */
+export declare const eventUnsubscribeInput: import("@modelcontextprotocol/server").StandardSchemaWithJSON<{
+    readonly name: string;
+    readonly arguments: {
+        readonly [x: string]: never;
+    };
+    readonly delivery: {
+        readonly url: string;
+    };
+}, {
+    readonly name: string;
+    readonly arguments: {
+        readonly [x: string]: never;
+    };
+    readonly delivery: {
+        readonly url: string;
+    };
+}>;
+export {};
+//# sourceMappingURL=event-schemas.d.ts.map

package/dist/endpoint/mcp/event-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schemas.d.ts","sourceRoot":"","sources":["../../../src/endpoint/mcp/event-schemas.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,KAAK,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACzD,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,QAAa,CAAC;AAE5C,4EAA4E;AAC5E,eAAO,MAAM,eAAe,YAC1B,oBAAoB,EACpB,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,kBAAkB,CACV,CAAC;AACX,+EAA+E;AAC/E,QAAA,MAAM,mBAAmB;;;;;;;EASvB,CAAC;AAEH,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC;AAE5D,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,4BAElC,CAAC;AAMH,8DAA8D;AAC9D,QAAA,MAAM,kBAAkB;;;;;;;;;EAKtB,CAAC;AAKH,0DAA0D;AAC1D,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;EAUnB,CAAC;AACH,iFAAiF;AACjF,QAAA,MAAM,iBAAiB;;;;;;EAIrB,CAAC;AAEH,qFAAqF;AACrF,MAAM,MAAM,mBAAmB,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAC9D,iEAAiE;AACjE,MAAM,MAAM,qBAAqB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAClE,iDAAiD;AACjD,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,OAAO,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,KAC3C,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,aAAa,CAAC,CAAC;IAC1D,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,qBAAqB,EAC5B,SAAS,EAAE,MAAM,KACd,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;CACrD;AAQD,4EAA4E;AAC5E,MAAM,MAAM,gBAAgB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAC9D,iEAAiE;AACjE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;EAA+B,CAAC;AAC7D,wDAAwD;AACxD,eAAO,MAAM,cAAc;;;;EAAuB,CAAC;AACnD,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;EAA4B,CAAC;AAC7D,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;EAA8B,CAAC"}