@oobe-protocol-labs/sap-mcp-server 0.1.0

package/dist/policy/policy-types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Policy type definitions
+ */
+import type { SapPermission, SapRiskLevel } from '../core/types.js';
+/**
+ * Policy definition
+ */
+export interface Policy {
+    id: string;
+    name: string;
+    description: string;
+    rules: PolicyRule[];
+    enabled: boolean;
+}
+/**
+ * Policy rule
+ */
+export interface PolicyRule {
+    id: string;
+    condition: string;
+    action: 'allow' | 'deny' | 'require_approval';
+    tools?: string[];
+    permissions?: SapPermission[];
+    maxAmountSol?: number;
+    riskLevel?: SapRiskLevel;
+}
+/**
+ * Policy evaluation result
+ */
+export interface PolicyResult {
+    allowed: boolean;
+    reason?: string;
+    requiresApproval?: boolean;
+    riskLevel?: SapRiskLevel;
+}
+/**
+ * Policy context
+ */
+export interface PolicyContext {
+    toolName: string;
+    permission: SapPermission;
+    amountSol?: number;
+    riskLevel?: SapRiskLevel;
+    sessionId?: string;
+}
+//# sourceMappingURL=policy-types.d.ts.map

package/dist/policy/policy-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-types.d.ts","sourceRoot":"","sources":["../../src/policy/policy-types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAC9C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,YAAY,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,aAAa,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/policy/policy-types.js

@@ -0,0 +1,5 @@
+/**
+ * Policy type definitions
+ */
+export {};
+//# sourceMappingURL=policy-types.js.map

package/dist/policy/policy-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-types.js","sourceRoot":"","sources":["../../src/policy/policy-types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/policy/risk-level.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Risk level calculation
+ */
+import type { SapRiskLevel } from '../core/types.js';
+/**
+ * Calculate risk level for a transaction
+ */
+export declare function calculateRiskLevel(params: {
+    amountSol: number;
+    isWriteOperation: boolean;
+    isKnownOperation: boolean;
+    toolName: string;
+}): SapRiskLevel;
+/**
+ * Check if risk level requires approval
+ */
+export declare function requiresApproval(riskLevel: SapRiskLevel): boolean;
+//# sourceMappingURL=risk-level.d.ts.map

package/dist/policy/risk-level.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-level.d.ts","sourceRoot":"","sources":["../../src/policy/risk-level.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,YAAY,CAgCf;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,CAEjE"}

package/dist/policy/risk-level.js

@@ -0,0 +1,46 @@
+/**
+ * Risk level calculation
+ */
+/**
+ * Calculate risk level for a transaction
+ */
+export function calculateRiskLevel(params) {
+    const { amountSol, isWriteOperation, isKnownOperation } = params;
+    // Base risk from amount
+    let risk = 'safe';
+    if (amountSol === 0) {
+        risk = 'safe';
+    }
+    else if (amountSol < 0.1) {
+        risk = 'low';
+    }
+    else if (amountSol < 1.0) {
+        risk = 'medium';
+    }
+    else if (amountSol < 10.0) {
+        risk = 'high';
+    }
+    else {
+        risk = 'critical';
+    }
+    // Increase risk for write operations
+    if (isWriteOperation && risk === 'safe') {
+        risk = 'low';
+    }
+    // Decrease risk for known operations
+    if (isKnownOperation && risk !== 'safe') {
+        const levels = ['safe', 'low', 'medium', 'high', 'critical'];
+        const currentIndex = levels.indexOf(risk);
+        if (currentIndex > 0) {
+            risk = levels[currentIndex - 1];
+        }
+    }
+    return risk;
+}
+/**
+ * Check if risk level requires approval
+ */
+export function requiresApproval(riskLevel) {
+    return riskLevel === 'high' || riskLevel === 'critical';
+}
+//# sourceMappingURL=risk-level.js.map

package/dist/policy/risk-level.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-level.js","sourceRoot":"","sources":["../../src/policy/risk-level.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAKlC;IACC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAEjE,wBAAwB;IACxB,IAAI,IAAI,GAAiB,MAAM,CAAC;IAChC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;SAAM,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;SAAM,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QAC3B,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,IAAI,SAAS,GAAG,IAAI,EAAE,CAAC;QAC5B,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,UAAU,CAAC;IACpB,CAAC;IAED,qCAAqC;IACrC,IAAI,gBAAgB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IAED,qCAAqC;IACrC,IAAI,gBAAgB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,MAAM,GAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAuB;IACtD,OAAO,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,UAAU,CAAC;AAC1D,CAAC"}

package/dist/policy/spending-limits.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Spending limits enforcement
+ */
+import type { SapMcpConfig } from '../core/types.js';
+/**
+ * Check if amount is within spending limits
+ */
+export declare function checkSpendingLimit(config: SapMcpConfig, amountSol: number): {
+    allowed: boolean;
+    reason?: string;
+    requiresApproval?: boolean;
+};
+/**
+ * Calculate risk level based on amount
+ */
+export declare function calculateRiskLevel(amountSol: number): 'safe' | 'low' | 'medium' | 'high' | 'critical';
+//# sourceMappingURL=spending-limits.d.ts.map

package/dist/policy/spending-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-limits.d.ts","sourceRoot":"","sources":["../../src/policy/spending-limits.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,SAAS,EAAE,MAAM,GAChB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,CAoBnE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAMrG"}

package/dist/policy/spending-limits.js

@@ -0,0 +1,40 @@
+/**
+ * Spending limits enforcement
+ */
+/**
+ * Check if amount is within spending limits
+ */
+export function checkSpendingLimit(config, amountSol) {
+    // Check max transaction limit
+    const maxTxValueSol = config.maxTxValueSol;
+    if (amountSol > maxTxValueSol) {
+        return {
+            allowed: false,
+            reason: `Amount ${amountSol} SOL exceeds maximum transaction limit ${maxTxValueSol} SOL`,
+        };
+    }
+    // Check if approval is required
+    if (amountSol > config.requireApprovalAboveSol) {
+        return {
+            allowed: false,
+            requiresApproval: true,
+            reason: `Amount ${amountSol} SOL requires approval (threshold: ${config.requireApprovalAboveSol} SOL)`,
+        };
+    }
+    return { allowed: true };
+}
+/**
+ * Calculate risk level based on amount
+ */
+export function calculateRiskLevel(amountSol) {
+    if (amountSol === 0)
+        return 'safe';
+    if (amountSol < 0.1)
+        return 'low';
+    if (amountSol < 1.0)
+        return 'medium';
+    if (amountSol < 10.0)
+        return 'high';
+    return 'critical';
+}
+//# sourceMappingURL=spending-limits.js.map

package/dist/policy/spending-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spending-limits.js","sourceRoot":"","sources":["../../src/policy/spending-limits.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAoB,EACpB,SAAiB;IAEjB,8BAA8B;IAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,UAAU,SAAS,0CAA0C,aAAa,MAAM;SACzF,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,IAAI,SAAS,GAAG,MAAM,CAAC,uBAAuB,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,IAAI;YACtB,MAAM,EAAE,UAAU,SAAS,sCAAsC,MAAM,CAAC,uBAAuB,OAAO;SACvG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,SAAS,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,SAAS,GAAG,GAAG;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,SAAS,GAAG,IAAI;QAAE,OAAO,MAAM,CAAC;IACpC,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/prompts/context/sap-agent-context.prompt.d.ts

@@ -0,0 +1,64 @@
+/**
+ * SAP MCP Agent Context Prompt
+ *
+ * Provides complete context about the current SAP MCP configuration,
+ * active profile, wallet, and available capabilities.
+ *
+ * Agents should call this prompt before executing any SAP-related operations
+ * to understand their operating context and constraints.
+ *
+ * @module prompts/context/sap-agent-context
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { SapMcpContext } from '../../core/types.js';
+/**
+ * Registers the agent context prompt.
+ *
+ * This prompt provides a comprehensive, human-readable overview of the
+ * current SAP MCP configuration, including:
+ * - Active profile and agent identity
+ * - Operating mode and connection settings
+ * - Redacted signer status
+ * - Security limits and policy settings
+ * - Feature flags and logging configuration
+ * - Available profiles and management commands
+ *
+ * Agents should call this prompt at the start of a session or before
+ * performing any SAP operations to ensure they have accurate context.
+ *
+ * @param server - MCP server instance
+ * @param context - SAP MCP execution context
+ *
+ * @example
+ * ```typescript
+ * // Agent calls the prompt
+ * const result = await mcp.getPrompt('sap-agent-context', {
+ *   includeWallet: 'true',
+ *   includeProfiles: 'true',
+ * });
+ * ```
+ *
+ * @example
+ * ```markdown
+ * // Output includes:
+ * ## 🎯 SAP MCP Agent Context
+ *
+ * ### 📋 Active Profile
+ * - Name: citizen-support-agent
+ * - Agent Pubkey: HZreoFG...
+ *
+ * ### 🔐 Operating Mode
+ * - Mode: local-dev-keypair
+ * - RPC URL: https://api.devnet.solana.com
+ *
+ * ### 💳 Wallet Configuration
+ * - Managed by profile: yes
+ * - Secret material: never exposed through MCP
+ *
+ * ### 🛡️ Security Limits
+ * - Max TX Value: 1.0 SOL
+ * - Daily Limit: 10.0 SOL
+ * ```
+ */
+export declare function sapAgentContextPrompt(server: Server, _context: SapMcpContext): void;
+//# sourceMappingURL=sap-agent-context.prompt.d.ts.map

package/dist/prompts/context/sap-agent-context.prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sap-agent-context.prompt.d.ts","sourceRoot":"","sources":["../../../src/prompts/context/sap-agent-context.prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAwBzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAoGnF"}

package/dist/prompts/context/sap-agent-context.prompt.js

@@ -0,0 +1,336 @@
+/**
+ * SAP MCP Agent Context Prompt
+ *
+ * Provides complete context about the current SAP MCP configuration,
+ * active profile, wallet, and available capabilities.
+ *
+ * Agents should call this prompt before executing any SAP-related operations
+ * to understand their operating context and constraints.
+ *
+ * @module prompts/context/sap-agent-context
+ */
+import { registerPrompt } from '../../adapters/mcp/sdk-compat.js';
+import { logger } from '../../core/logger.js';
+import { getActiveProfile, loadProfileConfig, getCurrentProfileInfo, listProfiles, getProfileConfigPath } from '../../config/profiles.js';
+import { getPreferredConfigDir } from '../../config/paths.js';
+const HOSTED_MCP_URL = 'https://mcp.sap.oobeprotocol.ai/mcp';
+const WIZARD_DESCRIPTOR_URL = 'https://mcp.sap.oobeprotocol.ai/.well-known/sap-mcp-wizard.json';
+const WIZARD_INSTALL_SCRIPT_URL = 'https://mcp.sap.oobeprotocol.ai/wizard/install.sh';
+const WIZARD_NPM_COMMAND = 'npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config wizard';
+/**
+ * Registers the agent context prompt.
+ *
+ * This prompt provides a comprehensive, human-readable overview of the
+ * current SAP MCP configuration, including:
+ * - Active profile and agent identity
+ * - Operating mode and connection settings
+ * - Redacted signer status
+ * - Security limits and policy settings
+ * - Feature flags and logging configuration
+ * - Available profiles and management commands
+ *
+ * Agents should call this prompt at the start of a session or before
+ * performing any SAP operations to ensure they have accurate context.
+ *
+ * @param server - MCP server instance
+ * @param context - SAP MCP execution context
+ *
+ * @example
+ * ```typescript
+ * // Agent calls the prompt
+ * const result = await mcp.getPrompt('sap-agent-context', {
+ *   includeWallet: 'true',
+ *   includeProfiles: 'true',
+ * });
+ * ```
+ *
+ * @example
+ * ```markdown
+ * // Output includes:
+ * ## 🎯 SAP MCP Agent Context
+ *
+ * ### 📋 Active Profile
+ * - Name: citizen-support-agent
+ * - Agent Pubkey: HZreoFG...
+ *
+ * ### 🔐 Operating Mode
+ * - Mode: local-dev-keypair
+ * - RPC URL: https://api.devnet.solana.com
+ *
+ * ### 💳 Wallet Configuration
+ * - Managed by profile: yes
+ * - Secret material: never exposed through MCP
+ *
+ * ### 🛡️ Security Limits
+ * - Max TX Value: 1.0 SOL
+ * - Daily Limit: 10.0 SOL
+ * ```
+ */
+export function sapAgentContextPrompt(server, _context) {
+    registerPrompt(server, 'sap-agent-context', {}, {
+        description: 'Get complete context about the current SAP MCP configuration, active profile, redacted signer status, and available capabilities. Use this before any SAP operations.',
+        arguments: [
+            {
+                name: 'includeWallet',
+                description: 'Include redacted signer status only; keypair paths and bytes are never exposed (default: false)',
+                required: false,
+            },
+            {
+                name: 'includeProfiles',
+                description: 'Include list of all available profiles (default: true)',
+                required: false,
+            },
+        ],
+    }, async (args) => {
+        try {
+            const parsedArgs = args || {};
+            const includeWallet = parsedArgs.includeWallet === 'true';
+            const includeProfiles = parsedArgs.includeProfiles !== 'false';
+            const activeProfile = getActiveProfile();
+            const config = loadProfileConfig(activeProfile);
+            const profileInfo = getCurrentProfileInfo();
+            const configDir = getPreferredConfigDir();
+            const allProfiles = includeProfiles ? listProfiles() : [];
+            // Handle missing configuration
+            if (!config) {
+                logger.warn('Agent context requested but config not found', { profile: activeProfile });
+                return {
+                    description: 'SAP MCP configuration not found',
+                    messages: [
+                        {
+                            role: 'user',
+                            content: {
+                                type: 'text',
+                                text: buildMissingConfigMessage(activeProfile, configDir),
+                            },
+                        },
+                    ],
+                };
+            }
+            // Build comprehensive context message
+            const contextText = buildContextMessage({
+                activeProfile,
+                config: config,
+                profileInfo,
+                configDir,
+                includeWallet,
+                includeProfiles,
+                allProfiles,
+            });
+            logger.debug('Agent context prompt generated', {
+                profile: activeProfile,
+                includeWallet,
+                includeProfiles,
+                profileCount: allProfiles.length,
+            });
+            return {
+                description: 'Complete SAP MCP agent context',
+                messages: [
+                    {
+                        role: 'user',
+                        content: {
+                            type: 'text',
+                            text: contextText,
+                        },
+                    },
+                ],
+            };
+        }
+        catch (error) {
+            logger.error('Failed to generate agent context prompt', { error });
+            return {
+                description: 'Error generating agent context',
+                messages: [
+                    {
+                        role: 'user',
+                        content: {
+                            type: 'text',
+                            text: buildErrorMessage(error),
+                        },
+                    },
+                ],
+            };
+        }
+    });
+    logger.info('Agent context prompt registered');
+}
+/**
+ * Builds context message for successful config load.
+ */
+function buildContextMessage(options) {
+    const { activeProfile, config, includeWallet, includeProfiles, allProfiles } = options;
+    let contextText = `## 🎯 SAP MCP Agent Context
+
+### 📋 Active Profile
+- **Name:** \`${activeProfile}\`
+- **Config Path:** \`${getProfileConfigPath(activeProfile)}\`
+- **Agent Pubkey:** \`${config.agentPubkey || 'Not configured'}\`
+
+### 🗣️ Response Language
+- Answer in the same natural language as the user's latest request.
+- If the user asks in English, answer in English even when previous context or tool data contains Italian.
+- Keep SAP/Solana tool names, protocol IDs, addresses, and error strings unchanged.
+
+### 🔐 Operating Mode
+- **Mode:** \`${config.mode}\`
+- **RPC URL:** \`${config.rpcUrl}\`
+- **Commitment:** \`${config.commitment}\`
+- **Program ID:** \`${config.programId}\`
+
+`;
+    if (includeWallet) {
+        contextText += `### 💳 Signer Configuration
+- **Managed By Profile:** ${config.walletPath ? 'Yes' : 'No'}
+- **Type:** ${config.mode === 'local-dev-keypair' ? 'Keypair File' : config.mode}
+- **Secret Material:** Never exposed through MCP context
+- **Instruction:** Do not read wallet/keypair files; use MCP signing tools only
+
+`;
+    }
+    contextText += `### 🛡️ Security Limits
+- **Max TX Value:** ${config.maxTxValueSol} SOL
+- **Daily Limit:** ${config.dailyLimitSol} SOL
+- **Approval Required:** Above ${config.requireApprovalAboveSol} SOL
+- **Policy Mode:** ${config.policy?.mode || 'local-only'}
+
+### 🧰 Hosted Wizard Recovery
+- If this agent cannot see \`${options.configDir}\`, \`~/.config/mcp-sap\`, or the current OS profile config, do not guess wallet paths and do not read keypair files.
+- Ask the user to install/run the SAP MCP wizard from \`${WIZARD_DESCRIPTOR_URL}\` or \`${WIZARD_INSTALL_SCRIPT_URL}\`.
+- Hosted MCP URL: \`${HOSTED_MCP_URL}\`
+- Wizard command: \`${WIZARD_NPM_COMMAND}\`
+- The wizard creates the user SAP profile, dedicated wallet path or external signer, policy limits, and optional MCP client injection.
+
+### ⚙️ Features
+- **HTTP API:** ${config.enableHttp ? `Enabled (port ${config.httpPort})` : 'Disabled'}
+- **Metrics:** ${config.enableMetrics ? 'Enabled' : 'Disabled'}
+- **Bento Guard:** ${config.bento?.enabled ? 'Enabled' : 'Disabled'}
+- **Logging:** ${config.logLevel} (${config.logFormat})
+
+### 🧭 SAP Tool Selection
+- Use \`sap_profile_current\`, \`sap_profile_list\`, and \`sap_network_stats\` before operational work.
+- Use \`sap_get_network_overview\` for live ecosystem counters.
+- Use \`sap_list_all_agents\` when the user asks for every current SAP ecosystem agent. It enumerates on-chain \`AgentAccount\` PDAs and can include protocol index summaries.
+- Use \`sap_discover_agents\` or \`sap_list_agents\` only when the user provides a \`protocol\`, \`capability\`, or \`capabilities\` filter.
+- Use \`sap_fetch_protocol_index\` when a specific protocol ID is known and the user wants protocol-index membership.
+- Never claim that global enumeration is impossible without first trying \`sap_list_all_agents\`.
+
+### 🔗 Solana Protocol Tool Routing
+Some MCP clients display tool names as \`mcp_sap_<tool>\`; inside this server the callable names omit that client prefix.
+
+| Need | Preferred Tools |
+| --- | --- |
+| SOL/SPL balances and transfers | \`sol_get_balance\`, \`spl-token_getBalance\`, \`spl-token_getTokenAccounts\`, \`spl-token_transfer\`, \`spl-token_transferSol\` |
+| Jupiter swaps and quotes | \`jupiter_getQuote\`, \`jupiter_swap\`, \`jupiter_swapInstructions\`, \`jupiter_smartSwap\`, \`jupiter_getOrder\`, \`jupiter_executeOrder\` |
+| Jupiter token intelligence | \`jupiter_searchTokens\`, \`jupiter_getTokenInfo\`, \`jupiter_getTokenList\`, \`jupiter_shield\`, \`jupiter_getHoldings\` |
+| DEX, perps, liquidity | \`drift_*\`, \`adrena_*\`, \`orca_*\`, \`raydium-pools_*\`, \`meteora_*\`, \`openbook_*\`, \`manifest_*\` |
+| Price and market data | \`pyth_getPrice\`, \`pyth_getPriceHistory\`, \`pyth_listPriceFeeds\`, \`coingecko_getTokenPrice\`, \`coingecko_getTokenInfo\` |
+| NFTs and domains | \`metaplex-nft_*\`, \`3land_*\`, \`sap_sns_*\`, \`sns_*\`, \`alldomains_*\` |
+| Bridges, staking, actions | \`bridging_*\`, \`staking_*\`, \`jito_*\`, \`blinks_*\`, \`lulo_*\` |
+
+### ⚠️ SNS Domain Registration — Critical Tool Selection
+- **DO NOT use \`sns_registerDomain\`** (AgentKit) — it returns \`{ status: 'instruction_ready' }\` without building a real transaction. It cannot register domains.
+- **DO NOT use \`sap_sns_build_register_domain_transaction\`** — it has an SDK bug that causes "The domain name is malformed" error.
+- **USE \`sap_sns_register_agent_domain\`** — this is the only working SNS domain registration tool. It builds, signs, and submits the transaction with USDC payment in one call.
+- SNS domain registration fees are paid in **USDC** (not SOL). SOL is only for rent-exempt and gas. The wallet must have both USDC and SOL.
+- For availability checks, use \`sap_sns_check_domain\` or \`sap_sns_batch_check_domains\`.
+
+For transactions, preview first with \`sap_preview_transaction\`; sign only with \`sap_sign_transaction\` after policy checks and user approval when required.
+
+`;
+    if (includeProfiles && allProfiles.length > 0) {
+        contextText += `### 📂 Available Profiles
+| Profile | Active | Mode | Agent Pubkey |
+|---------|--------|------|--------------|
+`;
+        for (const profile of allProfiles) {
+            const activeMarker = profile.name === activeProfile ? '●' : '○';
+            contextText += `| ${activeMarker} ${profile.name} | ${profile.name === activeProfile ? 'Yes' : 'No'} | ${profile.mode || 'unknown'} | ${profile.agentPubkey || 'N/A'} |
+`;
+        }
+        contextText += `
+**Profile Commands:**
+\`\`\`bash
+# Switch profile
+npx sap-mcp-config profile <name>
+
+# Create new profile
+npx sap-mcp-config create-profile <name>
+
+# List all profiles
+npx sap-mcp-config profiles
+
+# Show current profile info
+npx sap-mcp-config profile-info
+\`\`\`
+
+`;
+    }
+    contextText += `### 🚀 Quick Commands
+\`\`\`bash
+# Start server
+npx sap-mcp-server
+
+# Check config
+npx sap-mcp-config info
+
+# Check pubkey
+npx sap-mcp-config pubkey
+
+# Modify settings
+npx sap-mcp-config set <field> <value>
+\`\`\`
+
+---
+
+**Ready for SAP operations!** ✅
+`;
+    return contextText;
+}
+/**
+ * Builds error message for missing configuration.
+ */
+function buildMissingConfigMessage(activeProfile, configDir) {
+    return `⚠️ **SAP MCP Configuration Not Found**
+
+The configuration for profile "${activeProfile}" does not exist.
+
+**Quick Setup:**
+\`\`\`bash
+${WIZARD_NPM_COMMAND}
+\`\`\`
+
+**Hosted Wizard Endpoint:**
+- Descriptor: ${WIZARD_DESCRIPTOR_URL}
+- Install script: ${WIZARD_INSTALL_SCRIPT_URL}
+- Hosted MCP URL: ${HOSTED_MCP_URL}
+
+This will guide you through:
+1. Choosing/creating a profile name (e.g., citizen-support-agent)
+2. Selecting server mode (readonly, local-dev-keypair, etc.)
+3. Configuring Solana RPC endpoint
+4. Creating or linking a dedicated wallet without exposing keypair bytes to agents
+5. Setting security limits
+
+If this agent cannot access the user's OS config directory, tell the user to run the wizard locally. Do not ask for keypair bytes, do not inspect \`~/.config/solana/id.json\`, and do not invent a wallet path.
+
+**Current Profile:** ${activeProfile}
+**Config Directory:** ${configDir}
+`;
+}
+/**
+ * Builds error message for prompt failures.
+ */
+function buildErrorMessage(error) {
+    const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+    return `⚠️ **Error Loading SAP MCP Context**
+
+${errorMessage}
+
+**Troubleshooting:**
+1. Check if configuration exists: \`npx sap-mcp-config info\`
+2. Verify profile: \`npx sap-mcp-config profile-info\`
+3. Re-run wizard if needed: \`${WIZARD_NPM_COMMAND}\`
+4. If the agent cannot see local OS config, use \`${WIZARD_DESCRIPTOR_URL}\` or \`${WIZARD_INSTALL_SCRIPT_URL}\`
+`;
+}
+//# sourceMappingURL=sap-agent-context.prompt.js.map

package/dist/prompts/context/sap-agent-context.prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sap-agent-context.prompt.js","sourceRoot":"","sources":["../../../src/prompts/context/sap-agent-context.prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC1I,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,qBAAqB,GAAG,iEAAiE,CAAC;AAChG,MAAM,yBAAyB,GAAG,mDAAmD,CAAC;AACtF,MAAM,kBAAkB,GAAG,sFAAsF,CAAC;AAiBlH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,QAAuB;IAC3E,cAAc,CACZ,MAAM,EACN,mBAAmB,EACnB,EAAE,EACF;QACM,WAAW,EAAE,uKAAuK;QACxL,SAAS,EAAE;YACT;gBACE,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,iGAAiG;gBAC9G,QAAQ,EAAE,KAAK;aAChB;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,wDAAwD;gBACrE,QAAQ,EAAE,KAAK;aAChB;SACF;KACF,EACD,KAAK,EAAE,IAAgB,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,UAAU,GAAI,IAAyB,IAAI,EAAE,CAAC;YACpD,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,KAAK,MAAM,CAAC;YAC1D,MAAM,eAAe,GAAG,UAAU,CAAC,eAAe,KAAK,OAAO,CAAC;YAE/D,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;YAC1C,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAE1D,+BAA+B;YAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;gBAExF,OAAO;oBACL,WAAW,EAAE,iCAAiC;oBAC9C,QAAQ,EAAE;wBACR;4BACE,IAAI,EAAE,MAAe;4BACrB,OAAO,EAAE;gCACP,IAAI,EAAE,MAAe;gCACrB,IAAI,EAAE,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC;6BAC1D;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,sCAAsC;YACtC,MAAM,WAAW,GAAG,mBAAmB,CAAC;gBACtC,aAAa;gBACb,MAAM,EAAE,MAAoC;gBAC5C,WAAW;gBACX,SAAS;gBACT,aAAa;gBACb,eAAe;gBACf,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,OAAO,EAAE,aAAa;gBACtB,aAAa;gBACb,eAAe;gBACf,YAAY,EAAE,WAAW,CAAC,MAAM;aACjC,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW,EAAE,gCAAgC;gBAC7C,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAe;wBACrB,OAAO,EAAE;4BACP,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,WAAW;yBAClB;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAEnE,OAAO;gBACL,WAAW,EAAE,gCAAgC;gBAC7C,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAe;wBACrB,OAAO,EAAE;4BACP,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC;yBAC/B;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAQ5B;IACC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEvF,IAAI,WAAW,GAAG;;;gBAGJ,aAAa;uBACN,oBAAoB,CAAC,aAAa,CAAC;wBAClC,MAAM,CAAC,WAAW,IAAI,gBAAgB;;;;;;;;gBAQ9C,MAAM,CAAC,IAAI;mBACR,MAAM,CAAC,MAAM;sBACV,MAAM,CAAC,UAAU;sBACjB,MAAM,CAAC,SAAS;;CAErC,CAAC;IAEA,IAAI,aAAa,EAAE,CAAC;QAClB,WAAW,IAAI;4BACS,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;cAC9C,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;;;;CAI/E,CAAC;IACA,CAAC;IAED,WAAW,IAAI;sBACK,MAAM,CAAC,aAAa;qBACrB,MAAM,CAAC,aAAa;iCACR,MAAM,CAAC,uBAAuB;qBAC1C,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,YAAY;;;+BAGzB,OAAO,CAAC,SAAS;0DACU,qBAAqB,WAAW,yBAAyB;sBAC7F,cAAc;sBACd,kBAAkB;;;;kBAItB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,UAAU;iBACrE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;qBACzC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;iBAClD,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCpD,CAAC;IAEA,IAAI,eAAe,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,WAAW,IAAI;;;CAGlB,CAAC;QACE,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAChE,WAAW,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,IAAI,SAAS,MAAM,OAAO,CAAC,WAAW,IAAI,KAAK;CACzK,CAAC;QACE,CAAC;QAED,WAAW,IAAI;;;;;;;;;;;;;;;;CAgBlB,CAAC;IACA,CAAC;IAED,WAAW,IAAI;;;;;;;;;;;;;;;;;;CAkBhB,CAAC;IAEA,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,aAAqB,EAAE,SAAiB;IACzE,OAAO;;iCAEwB,aAAa;;;;EAI5C,kBAAkB;;;;gBAIJ,qBAAqB;oBACjB,yBAAyB;oBACzB,cAAc;;;;;;;;;;;uBAWX,aAAa;wBACZ,SAAS;CAChC,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IAE9E,OAAO;;EAEP,YAAY;;;;;gCAKkB,kBAAkB;oDACE,qBAAqB,WAAW,yBAAyB;CAC5G,CAAC;AACF,CAAC"}

package/dist/prompts/developer/debug-sap-error.prompt.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Debug SAP Error Prompt
+ *
+ * Provides structured debugging workflow for SAP-related errors.
+ * NO STUBS — Real implementation with error analysis.
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { SapMcpContext } from '../../core/types.js';
+/**
+ * Executes the debug sap error prompt operation.
+ */
+export declare function debugSapErrorPrompt(server: Server, _context: SapMcpContext): void;
+//# sourceMappingURL=debug-sap-error.prompt.d.ts.map

package/dist/prompts/developer/debug-sap-error.prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-sap-error.prompt.d.ts","sourceRoot":"","sources":["../../../src/prompts/developer/debug-sap-error.prompt.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,QAmJ1E"}