@multiagentcoordinationprotocol/mcp 0.2.0 → 0.3.0

package/dist/gate/jcs.js

@@ -0,0 +1,56 @@
+"use strict";
+/**
+ * RFC 8785 JSON Canonicalization Scheme (JCS) for the gate's context_id.
+ *
+ * JCS is defined on top of ECMAScript's own JSON serialization: strings and
+ * numbers are emitted exactly as `JSON.stringify` emits them (RFC 8785 §3.2.2),
+ * and object members are sorted by their names' UTF-16 code units (§3.2.3),
+ * which is what the default `Array.prototype.sort` comparison does.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CanonicalizationError = void 0;
+exports.canonicalize = canonicalize;
+exports.hasUnsafeInteger = hasUnsafeInteger;
+class CanonicalizationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CanonicalizationError';
+    }
+}
+exports.CanonicalizationError = CanonicalizationError;
+function canonicalize(value) {
+    if (value === null || typeof value === 'boolean')
+        return JSON.stringify(value);
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new CanonicalizationError(`cannot canonicalize non-finite number ${value}`);
+        return JSON.stringify(value);
+    }
+    if (typeof value === 'string')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalize).join(',')}]`;
+    if (typeof value === 'object') {
+        const obj = value;
+        const members = Object.keys(obj)
+            .filter((key) => obj[key] !== undefined)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalize(obj[key])}`);
+        return `{${members.join(',')}}`;
+    }
+    throw new CanonicalizationError(`cannot canonicalize a value of type ${typeof value}`);
+}
+/**
+ * Whether `value` holds, at any depth, an integral number outside ±(2^53−1).
+ * Such a number has no canonical form: JSON.parse may already have rounded it,
+ * so an approver would sign off on a value other than the one forwarded.
+ */
+function hasUnsafeInteger(value) {
+    if (typeof value === 'number')
+        return Number.isInteger(value) && !Number.isSafeInteger(value);
+    if (Array.isArray(value))
+        return value.some(hasUnsafeInteger);
+    if (value !== null && typeof value === 'object')
+        return Object.values(value).some(hasUnsafeInteger);
+    return false;
+}

package/dist/gate/proxy.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `macp-mcp gate`: an MCP server that proxies an upstream MCP server's tools
+ * and puts the calls a gate policy names behind a MACP session.
+ *
+ * Tool definitions pass through verbatim. A call no rule matches is forwarded
+ * untouched. A call a rule matches opens a session first (see
+ * {@link GateApprover}) and reaches the upstream only if that session commits
+ * `approve`; the forwarded result then carries the commitment under
+ * `_meta["io.multiagentcoordinationprotocol/commitment"]`, alongside any
+ * `_meta` keys the upstream set. A refused call is a tool error and the
+ * upstream never sees it.
+ */
+import type { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { type CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import type { GateApprover } from './approval';
+import { type GateCommitment } from './approval';
+import { type GateConfig } from './config';
+export declare const GATE_META_KEY = "io.multiagentcoordinationprotocol/commitment";
+export declare const GATE_SERVER_NAME: string;
+/** The part of an MCP `Client` connected to the upstream that the gate uses. */
+export type Upstream = Pick<Client, 'request'>;
+/** What the gate needs from its session runner (lets tests pass a fake). */
+export type Approver = Pick<GateApprover, 'decide'>;
+export declare function withCommitment(result: CallToolResult, commitment: GateCommitment): CallToolResult;
+export declare function buildGateServer(options: {
+    config: GateConfig;
+    upstream: Upstream;
+    approver: Approver;
+}): Server;

package/dist/gate/proxy.js

@@ -0,0 +1,71 @@
+"use strict";
+/**
+ * `macp-mcp gate`: an MCP server that proxies an upstream MCP server's tools
+ * and puts the calls a gate policy names behind a MACP session.
+ *
+ * Tool definitions pass through verbatim. A call no rule matches is forwarded
+ * untouched. A call a rule matches opens a session first (see
+ * {@link GateApprover}) and reaches the upstream only if that session commits
+ * `approve`; the forwarded result then carries the commitment under
+ * `_meta["io.multiagentcoordinationprotocol/commitment"]`, alongside any
+ * `_meta` keys the upstream set. A refused call is a tool error and the
+ * upstream never sees it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GATE_SERVER_NAME = exports.GATE_META_KEY = void 0;
+exports.withCommitment = withCommitment;
+exports.buildGateServer = buildGateServer;
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const server_1 = require("../server");
+const version_1 = require("../version");
+const approval_1 = require("./approval");
+const config_1 = require("./config");
+const context_id_1 = require("./context-id");
+const contract_1 = require("./contract");
+const jcs_1 = require("./jcs");
+exports.GATE_META_KEY = 'io.multiagentcoordinationprotocol/commitment';
+exports.GATE_SERVER_NAME = contract_1.GATE_SERVER.name;
+function refusalResult(text) {
+    return { content: [{ type: 'text', text }], isError: true };
+}
+function withCommitment(result, commitment) {
+    return { ...result, _meta: { ...(result._meta ?? {}), [exports.GATE_META_KEY]: { ...commitment } } };
+}
+function buildGateServer(options) {
+    const { config, upstream, approver } = options;
+    const server = new index_js_1.Server({ name: exports.GATE_SERVER_NAME, title: 'MACP tool-call gate', version: version_1.VERSION }, { capabilities: { tools: {} }, instructions: contract_1.GATE_SERVER.instructions });
+    server.setRequestHandler(types_js_1.ListToolsRequestSchema, (request) => upstream.request({ method: 'tools/list', params: request.params }, types_js_1.ListToolsResultSchema));
+    server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
+        const forward = () => upstream.request({ method: 'tools/call', params: request.params }, types_js_1.CallToolResultSchema);
+        const { name } = request.params;
+        const rule = (0, config_1.matchRule)(config, name);
+        if (!rule)
+            return forward();
+        const args = (request.params.arguments ?? {});
+        let commitment;
+        try {
+            // A number JSON.parse may already have rounded has no canonical form; refuse before any session opens.
+            if ((0, jcs_1.hasUnsafeInteger)(args))
+                throw (0, approval_1.refusal)('unsafe_integer', { tool: name });
+            const preimage = (0, context_id_1.gatePreimage)(config.server, name, args);
+            commitment = await approver.decide(rule, {
+                server: config.server,
+                tool: name,
+                preimage,
+                contextId: (0, context_id_1.contextIdOf)(preimage),
+            });
+        }
+        catch (err) {
+            if (err instanceof approval_1.GateRefusal)
+                return refusalResult(`${err.code}: ${err.message}`);
+            return refusalResult((0, server_1.errorText)(err) ?? `Error gating tool ${name}: ${err?.message ?? String(err)}`);
+        }
+        if (commitment.outcome !== 'approve') {
+            const refusal = (0, approval_1.denied)(commitment, name);
+            return refusalResult(`${refusal.code}: ${refusal.message}`);
+        }
+        return withCommitment(await forward(), commitment);
+    });
+    return server;
+}

package/dist/index.d.ts

@@ -6,3 +6,13 @@ export type { Contract, ToolContract, ToolAnnotations } from './contract';
 export type * from './results';
 export { buildServer, errorText, type BuildServerOptions } from './server';
 export { VERSION } from './version';
+export { GateApprover, GateRefusal, GATE_ACTION_APPROVE, GATE_ACTION_DENY, GATE_GRACE_MS, GATE_PROPOSAL_ID, settle, } from './gate/approval';
+export type { GateCommitment, GateOutcome, GatedCall } from './gate/approval';
+export { GATE_DEFAULT_TTL_MS, loadGateConfig, matchRule, parseGateConfig, requiredApprovals } from './gate/config';
+export type { GateConfig, GateMode, GateRule } from './gate/config';
+export { contextIdOf, gateContextId, gatePreimage } from './gate/context-id';
+export { GATE_CONTRACT_DIR, loadGateSchema } from './gate/contract';
+export { canonicalize, CanonicalizationError } from './gate/jcs';
+export { GATE_META_KEY, GATE_SERVER_NAME, buildGateServer, withCommitment } from './gate/proxy';
+export type { Approver, Upstream } from './gate/proxy';
+export { parseGateArgs, runGate, upstreamEnv } from './gate/cli';

package/dist/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.VERSION = exports.errorText = exports.buildServer = exports.loadContract = exports.CONTRACT_PATH = exports.REPLAY_MAX_MS = exports.COMMITMENT_HASH_LABEL = exports.stateName = exports.defaultClientFactory = exports.ToolArgumentError = exports.MacpBridge = void 0;
+exports.upstreamEnv = exports.runGate = exports.parseGateArgs = exports.withCommitment = exports.buildGateServer = exports.GATE_SERVER_NAME = exports.GATE_META_KEY = exports.CanonicalizationError = exports.canonicalize = exports.loadGateSchema = exports.GATE_CONTRACT_DIR = exports.gatePreimage = exports.gateContextId = exports.contextIdOf = exports.requiredApprovals = exports.parseGateConfig = exports.matchRule = exports.loadGateConfig = exports.GATE_DEFAULT_TTL_MS = exports.settle = exports.GATE_PROPOSAL_ID = exports.GATE_GRACE_MS = exports.GATE_ACTION_DENY = exports.GATE_ACTION_APPROVE = exports.GateRefusal = exports.GateApprover = exports.VERSION = exports.errorText = exports.buildServer = exports.loadContract = exports.CONTRACT_PATH = exports.REPLAY_MAX_MS = exports.COMMITMENT_HASH_LABEL = exports.stateName = exports.defaultClientFactory = exports.ToolArgumentError = exports.MacpBridge = void 0;
 var bridge_1 = require("./bridge");
 Object.defineProperty(exports, "MacpBridge", { enumerable: true, get: function () { return bridge_1.MacpBridge; } });
 Object.defineProperty(exports, "ToolArgumentError", { enumerable: true, get: function () { return bridge_1.ToolArgumentError; } });
@@ -31,3 +31,36 @@ Object.defineProperty(exports, "buildServer", { enumerable: true, get: function
 Object.defineProperty(exports, "errorText", { enumerable: true, get: function () { return server_1.errorText; } });
 var version_1 = require("./version");
 Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () { return version_1.VERSION; } });
+var approval_1 = require("./gate/approval");
+Object.defineProperty(exports, "GateApprover", { enumerable: true, get: function () { return approval_1.GateApprover; } });
+Object.defineProperty(exports, "GateRefusal", { enumerable: true, get: function () { return approval_1.GateRefusal; } });
+Object.defineProperty(exports, "GATE_ACTION_APPROVE", { enumerable: true, get: function () { return approval_1.GATE_ACTION_APPROVE; } });
+Object.defineProperty(exports, "GATE_ACTION_DENY", { enumerable: true, get: function () { return approval_1.GATE_ACTION_DENY; } });
+Object.defineProperty(exports, "GATE_GRACE_MS", { enumerable: true, get: function () { return approval_1.GATE_GRACE_MS; } });
+Object.defineProperty(exports, "GATE_PROPOSAL_ID", { enumerable: true, get: function () { return approval_1.GATE_PROPOSAL_ID; } });
+Object.defineProperty(exports, "settle", { enumerable: true, get: function () { return approval_1.settle; } });
+var config_1 = require("./gate/config");
+Object.defineProperty(exports, "GATE_DEFAULT_TTL_MS", { enumerable: true, get: function () { return config_1.GATE_DEFAULT_TTL_MS; } });
+Object.defineProperty(exports, "loadGateConfig", { enumerable: true, get: function () { return config_1.loadGateConfig; } });
+Object.defineProperty(exports, "matchRule", { enumerable: true, get: function () { return config_1.matchRule; } });
+Object.defineProperty(exports, "parseGateConfig", { enumerable: true, get: function () { return config_1.parseGateConfig; } });
+Object.defineProperty(exports, "requiredApprovals", { enumerable: true, get: function () { return config_1.requiredApprovals; } });
+var context_id_1 = require("./gate/context-id");
+Object.defineProperty(exports, "contextIdOf", { enumerable: true, get: function () { return context_id_1.contextIdOf; } });
+Object.defineProperty(exports, "gateContextId", { enumerable: true, get: function () { return context_id_1.gateContextId; } });
+Object.defineProperty(exports, "gatePreimage", { enumerable: true, get: function () { return context_id_1.gatePreimage; } });
+var contract_2 = require("./gate/contract");
+Object.defineProperty(exports, "GATE_CONTRACT_DIR", { enumerable: true, get: function () { return contract_2.GATE_CONTRACT_DIR; } });
+Object.defineProperty(exports, "loadGateSchema", { enumerable: true, get: function () { return contract_2.loadGateSchema; } });
+var jcs_1 = require("./gate/jcs");
+Object.defineProperty(exports, "canonicalize", { enumerable: true, get: function () { return jcs_1.canonicalize; } });
+Object.defineProperty(exports, "CanonicalizationError", { enumerable: true, get: function () { return jcs_1.CanonicalizationError; } });
+var proxy_1 = require("./gate/proxy");
+Object.defineProperty(exports, "GATE_META_KEY", { enumerable: true, get: function () { return proxy_1.GATE_META_KEY; } });
+Object.defineProperty(exports, "GATE_SERVER_NAME", { enumerable: true, get: function () { return proxy_1.GATE_SERVER_NAME; } });
+Object.defineProperty(exports, "buildGateServer", { enumerable: true, get: function () { return proxy_1.buildGateServer; } });
+Object.defineProperty(exports, "withCommitment", { enumerable: true, get: function () { return proxy_1.withCommitment; } });
+var cli_1 = require("./gate/cli");
+Object.defineProperty(exports, "parseGateArgs", { enumerable: true, get: function () { return cli_1.parseGateArgs; } });
+Object.defineProperty(exports, "runGate", { enumerable: true, get: function () { return cli_1.runGate; } });
+Object.defineProperty(exports, "upstreamEnv", { enumerable: true, get: function () { return cli_1.upstreamEnv; } });

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "0.2.0";
+export declare const VERSION = "0.3.0";

package/dist/version.js

@@ -2,5 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
 // x-release-please-start-version
-exports.VERSION = '0.2.0';
+exports.VERSION = '0.3.0';
 // x-release-please-end

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@multiagentcoordinationprotocol/mcp",
-  "version": "0.2.0",
-  "description": "MCP server that exposes MACP Decision sessions as tools (TypeScript twin of macp-mcp)",
+  "version": "0.3.0",
+  "description": "MCP server that exposes MACP Decision sessions as tools and gates upstream MCP tool calls behind MACP sessions (TypeScript twin of macp-mcp)",
   "license": "Apache-2.0",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -15,11 +15,13 @@
       "default": "./dist/index.js"
     },
     "./contract/tools.json": "./contract/tools.json",
-    "./package.json": "./package.json"
+    "./package.json": "./package.json",
+    "./contract/gate/*": "./contract/gate/*"
   },
   "files": [
     "dist",
     "contract/tools.json",
+    "contract/gate",
     "CHANGELOG.md"
   ],
   "scripts": {