@oobe-protocol-labs/sap-mcp-server 0.1.0

package/dist/remote/server.js

@@ -0,0 +1,412 @@
+#!/usr/bin/env node
+/**
+ * @name RemoteMCPServer
+ * @description Streamable HTTP entrypoint for remote SAP MCP deployments.
+ */
+import { randomUUID } from 'crypto';
+import * as http from 'http';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { loadConfig } from '../config/env.js';
+import { logger, initLogger } from '../core/logger.js';
+import { createSapMcpServer } from '../server/create-server.js';
+import { AuthManager } from './auth/index.js';
+import { McpMonetizationGate } from '../payments/index.js';
+/**
+ * @name parseApiKeys
+ * @description Parses comma-separated `apiKey=userId` entries from environment configuration.
+ */
+export function parseApiKeys(raw) {
+    const keys = new Map();
+    if (!raw) {
+        return keys;
+    }
+    for (const pair of raw.split(',')) {
+        const [key, userId] = pair.split('=');
+        if (key?.trim() && userId?.trim()) {
+            keys.set(key.trim(), userId.trim());
+        }
+    }
+    return keys;
+}
+/**
+ * @name defaultRemoteConfig
+ * @description Builds remote-server configuration from SAP config plus remote-specific environment values.
+ */
+export function defaultRemoteConfig(appConfig) {
+    const rawAuthType = process.env.SAP_MCP_AUTH_TYPE;
+    const authType = rawAuthType === 'none' || rawAuthType === 'jwt' ? rawAuthType : 'api_key';
+    const secret = process.env.SAP_MCP_AUTH_SECRET?.trim() ?? '';
+    const port = Number.parseInt(process.env.SAP_MCP_PORT ?? String(appConfig.httpPort || 3000), 10);
+    const host = process.env.SAP_MCP_HOST ?? appConfig.httpHost ?? '0.0.0.0';
+    if (authType === 'none') {
+        return {
+            port,
+            host,
+            corsOrigins: appConfig.httpCorsOrigins,
+            auth: {
+                type: 'none',
+            },
+        };
+    }
+    if (authType === 'jwt') {
+        return {
+            port,
+            host,
+            corsOrigins: appConfig.httpCorsOrigins,
+            auth: {
+                type: 'jwt',
+                secret,
+                issuer: 'sap-mcp-remote',
+            },
+        };
+    }
+    const keys = parseApiKeys(process.env.SAP_MCP_API_KEYS);
+    if (secret) {
+        keys.set(secret, 'default');
+    }
+    return {
+        port,
+        host,
+        corsOrigins: appConfig.httpCorsOrigins,
+        auth: {
+            type: 'api_key',
+            keys,
+        },
+    };
+}
+/**
+ * @name writeJson
+ * @description Writes a JSON response with optional additional headers.
+ */
+function writeJson(res, status, body, headers = {}) {
+    res.writeHead(status, {
+        'Content-Type': 'application/json',
+        ...headers,
+    });
+    res.end(JSON.stringify(body));
+}
+/**
+ * @name buildPublicBaseUrl
+ * @description Resolves the external base URL used in public discovery responses.
+ */
+function buildPublicBaseUrl(req, config) {
+    if (process.env.SAP_MCP_PUBLIC_URL) {
+        return process.env.SAP_MCP_PUBLIC_URL.replace(/\/$/, '');
+    }
+    const host = req.headers.host || `${config.host}:${config.port}`;
+    const forwardedProto = req.headers['x-forwarded-proto'];
+    const proto = Array.isArray(forwardedProto) ? forwardedProto[0] : forwardedProto || 'http';
+    return `${proto}://${host}`;
+}
+/**
+ * @name buildA2AAgentCard
+ * @description Builds the public A2A-compatible agent-card document for remote discovery.
+ */
+export function buildA2AAgentCard(req, config) {
+    const baseUrl = buildPublicBaseUrl(req, config);
+    const authRequired = config.auth.type !== 'none';
+    return {
+        name: 'SAP MCP Server',
+        description: authRequired
+            ? 'Authenticated SAP Protocol and Solana agent gateway exposed through native MCP Streamable HTTP.'
+            : 'Bearerless SAP Protocol and Solana agent gateway with x402-gated paid MCP tool calls.',
+        url: `${baseUrl}/mcp`,
+        version: '0.1.0',
+        protocol: {
+            primary: 'mcp',
+            transport: 'streamable-http',
+            endpoint: `${baseUrl}/mcp`,
+        },
+        capabilities: {
+            streaming: true,
+            tools: true,
+            resources: true,
+            prompts: true,
+            authenticated: authRequired,
+        },
+        authentication: {
+            schemes: authRequired ? ['Bearer'] : ['none', 'x402'],
+            required: authRequired,
+        },
+        defaultInputModes: ['application/json'],
+        defaultOutputModes: ['application/json', 'text/event-stream'],
+        skills: [
+            {
+                id: 'sap-protocol',
+                name: 'SAP Protocol Operations',
+                description: 'Agent registry, identity, memory, reputation, execution proof, payments, and settlement tools.',
+                tags: ['sap', 'solana', 'mcp'],
+            },
+            {
+                id: 'sap-discovery',
+                name: 'SAP Discovery And Directory',
+                description: 'Network overview, global agent enumeration, protocol indexes, capability indexes, and tool category discovery.',
+                tags: ['sap', 'discovery', 'agents', 'indexing'],
+            },
+            {
+                id: 'sap-payments',
+                name: 'SAP Payments And Escrow',
+                description: 'x402 payment context, subscriptions, escrow v1/v2, settlement batches, disputes, and stake-backed trust flows.',
+                tags: ['sap', 'x402', 'payments', 'escrow'],
+            },
+            {
+                id: 'sap-memory',
+                name: 'SAP Memory And Ledger',
+                description: 'Encrypted vaults, sessions, inscriptions, compact memory, session ledgers, epoch pages, and durable memory reads.',
+                tags: ['sap', 'memory', 'vault', 'ledger'],
+            },
+            {
+                id: 'sap-sns',
+                name: 'SAP SNS Domains',
+                description: 'SNS domain availability, resolution, records, ownership, unsigned transaction builders, and agent domain registration.',
+                tags: ['sap', 'sns', 'domains', 'identity'],
+            },
+            {
+                id: 'solana-tools',
+                name: 'Solana Tooling',
+                description: 'Solana RPC, token, NFT, DeFi, and AgentKit plugin tools.',
+                tags: ['solana', 'rpc', 'defi', 'nft'],
+            },
+        ],
+        setup: {
+            wizard: buildWizardInstallDescriptor(req, config),
+        },
+    };
+}
+/**
+ * @name buildWizardInstallDescriptor
+ * @description Builds the public wizard installation descriptor used by agents when local SAP MCP config is missing.
+ */
+export function buildWizardInstallDescriptor(req, config) {
+    const baseUrl = buildPublicBaseUrl(req, config);
+    return {
+        name: 'SAP MCP Wizard',
+        version: '0.1.0',
+        packageName: '@oobe-protocol-labs/sap-mcp-server',
+        hostedMcpUrl: `${baseUrl}/mcp`,
+        configDirectory: '~/.config/mcp-sap',
+        requiredFor: [
+            'creating a user SAP MCP profile',
+            'configuring a dedicated wallet or external signer',
+            'signing x402/pay.sh payment payloads',
+            'signing value-moving SAP or Solana tool transactions',
+            'injecting hosted or local MCP config into Claude, Hermes, OpenClaw, or Codex',
+        ],
+        endpoints: {
+            descriptor: `${baseUrl}/.well-known/sap-mcp-wizard.json`,
+            installScript: `${baseUrl}/wizard/install.sh`,
+            mcp: `${baseUrl}/mcp`,
+        },
+        commands: {
+            runWizard: 'npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config wizard',
+            showConfig: 'npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config show',
+            showProfile: 'npm exec --yes --package @oobe-protocol-labs/sap-mcp-server -- sap-mcp-config profile-info',
+        },
+        security: {
+            keypairBytesExposed: false,
+            modifiesSolanaCliKeypair: false,
+            signerLocation: 'user-machine-or-external-signer',
+        },
+    };
+}
+/**
+ * @name buildWizardInstallScript
+ * @description Builds a small shell launcher that downloads the npm package and starts the wizard.
+ */
+export function buildWizardInstallScript(req, config) {
+    const descriptor = buildWizardInstallDescriptor(req, config);
+    return [
+        '#!/usr/bin/env sh',
+        'set -eu',
+        '',
+        'echo "SAP MCP Wizard"',
+        `echo "Hosted MCP: ${descriptor.hostedMcpUrl}"`,
+        `echo "Config dir:  ${descriptor.configDirectory}"`,
+        'echo ""',
+        'if ! command -v node >/dev/null 2>&1; then',
+        '  echo "Node.js 18+ is required before running the SAP MCP wizard." >&2',
+        '  exit 1',
+        'fi',
+        '',
+        descriptor.commands.runWizard,
+        '',
+    ].join('\n');
+}
+/**
+ * @name RemoteMCPServer
+ * @description Remote MCP server backed by the official Streamable HTTP transport.
+ */
+export class RemoteMCPServer {
+    config;
+    appConfig;
+    authManager;
+    transport;
+    httpServer;
+    constructor(config) {
+        this.appConfig = loadConfig();
+        initLogger({
+            level: this.appConfig.logLevel,
+            format: this.appConfig.logFormat || 'pretty',
+            file: this.appConfig.logFile,
+        });
+        this.config = config ?? defaultRemoteConfig(this.appConfig);
+        this.authManager = new AuthManager(this.config.auth);
+    }
+    /**
+     * @name start
+     * @description Starts the remote MCP endpoint, health check, and A2A discovery routes.
+     */
+    async start() {
+        this.validateAuthConfig();
+        const server = await createSapMcpServer(this.appConfig);
+        this.transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+        });
+        await server.connect(this.transport);
+        const monetizationGate = await McpMonetizationGate.create(this.appConfig);
+        this.httpServer = http.createServer(async (req, res) => {
+            if (this.applyCors(req, res)) {
+                return;
+            }
+            const url = new URL(req.url || '/', `http://${req.headers.host || 'localhost'}`);
+            if (req.method === 'GET' && url.pathname === '/health') {
+                writeJson(res, 200, {
+                    status: 'ok',
+                    service: 'sap-mcp-remote',
+                    transport: 'streamable-http',
+                    timestamp: new Date().toISOString(),
+                });
+                return;
+            }
+            if (req.method === 'GET' && ['/.well-known/agent-card.json', '/a2a/agent-card'].includes(url.pathname)) {
+                writeJson(res, 200, buildA2AAgentCard(req, this.config));
+                return;
+            }
+            if (req.method === 'GET' && ['/.well-known/sap-mcp-wizard.json', '/wizard', '/wizard.json'].includes(url.pathname)) {
+                writeJson(res, 200, buildWizardInstallDescriptor(req, this.config));
+                return;
+            }
+            if (req.method === 'GET' && url.pathname === '/wizard/install.sh') {
+                res.writeHead(200, {
+                    'Content-Type': 'text/x-shellscript; charset=utf-8',
+                    'Cache-Control': 'public, max-age=300',
+                });
+                res.end(buildWizardInstallScript(req, this.config));
+                return;
+            }
+            if (url.pathname !== '/mcp') {
+                writeJson(res, 404, { error: 'Not Found' });
+                return;
+            }
+            const auth = this.authManager.validateFromHeaders(req.headers);
+            if (!auth.success) {
+                writeJson(res, 401, { error: auth.error || 'Unauthorized' }, {
+                    'WWW-Authenticate': 'Bearer',
+                });
+                return;
+            }
+            try {
+                if (monetizationGate) {
+                    await monetizationGate.handle(req, res, async (mcpReq, mcpRes) => {
+                        await this.transport?.handleRequest(mcpReq, mcpRes);
+                    });
+                }
+                else {
+                    await this.transport?.handleRequest(req, res);
+                }
+            }
+            catch (error) {
+                logger.error('Remote MCP request failed', { error });
+                if (!res.headersSent) {
+                    writeJson(res, 500, {
+                        jsonrpc: '2.0',
+                        error: {
+                            code: -32603,
+                            message: 'Internal server error',
+                        },
+                        id: null,
+                    });
+                }
+            }
+        });
+        await new Promise((resolve, reject) => {
+            this.httpServer?.once('error', reject);
+            this.httpServer?.listen(this.config.port, this.config.host, resolve);
+        });
+        logger.info('SAP MCP Remote Server started', {
+            endpoint: `http://${this.config.host}:${this.config.port}/mcp`,
+            health: `http://${this.config.host}:${this.config.port}/health`,
+            a2aAgentCard: `http://${this.config.host}:${this.config.port}/.well-known/agent-card.json`,
+            wizardDescriptor: `http://${this.config.host}:${this.config.port}/.well-known/sap-mcp-wizard.json`,
+            transport: 'streamable-http',
+            authType: this.config.auth.type,
+        });
+    }
+    /**
+     * @name stop
+     * @description Gracefully closes the MCP transport and HTTP listener.
+     */
+    async stop() {
+        await this.transport?.close();
+        if (!this.httpServer) {
+            return;
+        }
+        await new Promise((resolve) => {
+            this.httpServer?.close(() => resolve());
+            setTimeout(() => {
+                this.httpServer?.closeAllConnections();
+                resolve();
+            }, 5_000);
+        });
+    }
+    /**
+     * @name validateAuthConfig
+     * @description Fails startup when configured remote authentication is incomplete.
+     */
+    validateAuthConfig() {
+        if (this.config.auth.type === 'none') {
+            return;
+        }
+        if (this.config.auth.type === 'api_key' && this.config.auth.keys.size === 0) {
+            throw new Error('Remote MCP API-key auth requires SAP_MCP_API_KEYS or SAP_MCP_AUTH_SECRET');
+        }
+        if (this.config.auth.type === 'jwt' && !this.config.auth.secret) {
+            throw new Error('Remote MCP JWT auth requires SAP_MCP_AUTH_SECRET');
+        }
+    }
+    /**
+     * @name applyCors
+     * @description Applies configured CORS headers and handles preflight requests.
+     */
+    applyCors(req, res) {
+        const configuredOrigins = this.config.corsOrigins?.filter(Boolean) ?? [];
+        const origin = req.headers.origin;
+        if (typeof origin === 'string' && configuredOrigins.includes(origin)) {
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Vary', 'Origin');
+        }
+        res.setHeader('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS');
+        res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Accept, Authorization, mcp-session-id, mcp-protocol-version, PAYMENT-SIGNATURE, X-PAYMENT');
+        res.setHeader('Access-Control-Expose-Headers', 'mcp-session-id, PAYMENT-REQUIRED, PAYMENT-RESPONSE, X-PAYMENT-RESPONSE');
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204);
+            res.end();
+            return true;
+        }
+        return false;
+    }
+}
+if (process.argv[1]?.endsWith('server.js') || process.argv[1]?.endsWith('server.ts')) {
+    const server = new RemoteMCPServer();
+    server.start().catch((error) => {
+        logger.error('Failed to start remote MCP server', { error });
+        process.exit(1);
+    });
+    process.on('SIGINT', () => {
+        void server.stop().then(() => process.exit(0));
+    });
+    process.on('SIGTERM', () => {
+        void server.stop().then(() => process.exit(0));
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/remote/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/remote/server.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAyB,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AA+E3D;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAuB;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAClD,MAAM,QAAQ,GAAG,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE7D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAC1B,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC,EAC9D,EAAE,CACH,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC;IAEzE,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,WAAW,EAAE,SAAS,CAAC,eAAe;YACtC,IAAI,EAAE;gBACJ,IAAI,EAAE,MAAM;aACb;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,IAAI;YACJ,WAAW,EAAE,SAAS,CAAC,eAAe;YACtC,IAAI,EAAE;gBACJ,IAAI,EAAE,KAAK;gBACX,MAAM;gBACN,MAAM,EAAE,gBAAgB;aACzB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,WAAW,EAAE,SAAS,CAAC,eAAe;QACtC,IAAI,EAAE;YACJ,IAAI,EAAE,SAAS;YACf,IAAI;SACL;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAChB,GAAwB,EACxB,MAAc,EACd,IAAa,EACb,UAAoC,EAAE;IAEtC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAyB,EAAE,MAAuB;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC;IAC3F,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyB,EACzB,MAAuB;IAEvB,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;IACjD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,YAAY;YACvB,CAAC,CAAC,iGAAiG;YACnG,CAAC,CAAC,uFAAuF;QAC3F,GAAG,EAAE,GAAG,OAAO,MAAM;QACrB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE;YACR,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,GAAG,OAAO,MAAM;SAC3B;QACD,YAAY,EAAE;YACZ,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,YAAY;SAC5B;QACD,cAAc,EAAE;YACd,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC;YACrD,QAAQ,EAAE,YAAY;SACvB;QACD,iBAAiB,EAAE,CAAC,kBAAkB,CAAC;QACvC,kBAAkB,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;QAC7D,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,yBAAyB;gBAC/B,WAAW,EAAE,gGAAgG;gBAC7G,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC;aAC/B;YACD;gBACE,EAAE,EAAE,eAAe;gBACnB,IAAI,EAAE,6BAA6B;gBACnC,WAAW,EAAE,gHAAgH;gBAC7H,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC;aACjD;YACD;gBACE,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,yBAAyB;gBAC/B,WAAW,EAAE,gHAAgH;gBAC7H,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;aAC5C;YACD;gBACE,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,mHAAmH;gBAChI,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;aAC3C;YACD;gBACE,EAAE,EAAE,SAAS;gBACb,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,wHAAwH;gBACrI,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC;aAC5C;YACD;gBACE,EAAE,EAAE,cAAc;gBAClB,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,0DAA0D;gBACvE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC;aACvC;SACF;QACD,KAAK,EAAE;YACL,MAAM,EAAE,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC;SAClD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAyB,EACzB,MAAuB;IAEvB,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oCAAoC;QACjD,YAAY,EAAE,GAAG,OAAO,MAAM;QAC9B,eAAe,EAAE,mBAAmB;QACpC,WAAW,EAAE;YACX,iCAAiC;YACjC,mDAAmD;YACnD,sCAAsC;YACtC,sDAAsD;YACtD,8EAA8E;SAC/E;QACD,SAAS,EAAE;YACT,UAAU,EAAE,GAAG,OAAO,kCAAkC;YACxD,aAAa,EAAE,GAAG,OAAO,oBAAoB;YAC7C,GAAG,EAAE,GAAG,OAAO,MAAM;SACtB;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,sFAAsF;YACjG,UAAU,EAAE,oFAAoF;YAChG,WAAW,EAAE,4FAA4F;SAC1G;QACD,QAAQ,EAAE;YACR,mBAAmB,EAAE,KAAK;YAC1B,wBAAwB,EAAE,KAAK;YAC/B,cAAc,EAAE,iCAAiC;SAClD;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAyB,EACzB,MAAuB;IAEvB,MAAM,UAAU,GAAG,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO;QACL,mBAAmB;QACnB,SAAS;QACT,EAAE;QACF,uBAAuB;QACvB,qBAAqB,UAAU,CAAC,YAAY,GAAG;QAC/C,sBAAsB,UAAU,CAAC,eAAe,GAAG;QACnD,SAAS;QACT,4CAA4C;QAC5C,yEAAyE;QACzE,UAAU;QACV,IAAI;QACJ,EAAE;QACF,UAAU,CAAC,QAAQ,CAAC,SAAS;QAC7B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAAkB;IACxB,SAAS,CAAe;IACxB,WAAW,CAAc;IAClC,SAAS,CAAiC;IAC1C,UAAU,CAAe;IAEjC,YAAmB,MAAwB;QACzC,IAAI,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QAC9B,UAAU,CAAC;YACT,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;YAC9B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,QAAQ;YAC5C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,6BAA6B,CAAC;YACjD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE1E,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACrD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YAEjF,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACvD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,gBAAgB;oBACzB,SAAS,EAAE,iBAAiB;oBAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,8BAA8B,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvG,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,kCAAkC,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnH,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;gBAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAE,mCAAmC;oBACnD,eAAe,EAAE,qBAAqB;iBACvC,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC5B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc,EAAE,EAAE;oBAC3D,kBAAkB,EAAE,QAAQ;iBAC7B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,gBAAgB,EAAE,CAAC;oBACrB,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;wBAC/D,MAAM,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACtD,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACrD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;wBAClB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,uBAAuB;yBACjC;wBACD,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;YAC3C,QAAQ,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM;YAC9D,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS;YAC/D,YAAY,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,8BAA8B;YAC1F,gBAAgB,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,kCAAkC;YAClG,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,IAAI;QACf,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAC;gBACvC,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,KAAK,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACK,kBAAkB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,SAAS,CAAC,GAAyB,EAAE,GAAwB;QACnE,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;QAC5E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,yGAAyG,CAAC,CAAC;QACzJ,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,wEAAwE,CAAC,CAAC;QAEzH,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACtC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/resources/current/sap-current-config.resource.d.ts

@@ -0,0 +1,30 @@
+/**
+ * SAP MCP Current Config Resource
+ *
+ * Exposes the current active configuration via MCP resources.
+ * Agents can read this to understand their operating context.
+ *
+ * @module resources/current/sap-current-config
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { SapMcpContext } from '../../core/types.js';
+/**
+ * Registers the current config resource template.
+ *
+ * Provides agents with read-only access to the active configuration,
+ * including profile, connection, security settings, and feature flags.
+ * Wallet paths and all sensitive data (private keys, seeds, secret bytes, API keys)
+ * are intentionally excluded from MCP context.
+ *
+ * @param server - MCP server instance
+ * @param context - SAP MCP execution context
+ *
+ * @example
+ * ```typescript
+ * // Agent reads current config
+ * const result = await mcp.readResource('sap://config/current');
+ * // Returns: SanitizedConfig or ConfigError
+ * ```
+ */
+export declare function sapCurrentConfigResource(server: Server, context: SapMcpContext): void;
+//# sourceMappingURL=sap-current-config.resource.d.ts.map

package/dist/resources/current/sap-current-config.resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sap-current-config.resource.d.ts","sourceRoot":"","sources":["../../../src/resources/current/sap-current-config.resource.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAoHzD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAgHrF"}

package/dist/resources/current/sap-current-config.resource.js

@@ -0,0 +1,142 @@
+/**
+ * SAP MCP Current Config Resource
+ *
+ * Exposes the current active configuration via MCP resources.
+ * Agents can read this to understand their operating context.
+ *
+ * @module resources/current/sap-current-config
+ */
+import { registerResourceTemplate } from '../../adapters/mcp/sdk-compat.js';
+import { logger } from '../../core/logger.js';
+import { getActiveProfile, getProfileConfigPath, loadProfileConfig } from '../../config/profiles.js';
+import { fullConfigSchema } from '../../config/secure-config.js';
+import { existsSync, readFileSync } from 'fs';
+/**
+ * Loads the profile config used for display-only metadata such as agentPubkey.
+ */
+function loadDisplayConfig(profileName, configPath) {
+    if (process.env.SAP_MCP_CONFIG_PATH && existsSync(configPath)) {
+        const parsed = JSON.parse(readFileSync(configPath, 'utf-8'));
+        return fullConfigSchema.parse(parsed);
+    }
+    return loadProfileConfig(profileName);
+}
+/**
+ * Registers the current config resource template.
+ *
+ * Provides agents with read-only access to the active configuration,
+ * including profile, connection, security settings, and feature flags.
+ * Wallet paths and all sensitive data (private keys, seeds, secret bytes, API keys)
+ * are intentionally excluded from MCP context.
+ *
+ * @param server - MCP server instance
+ * @param context - SAP MCP execution context
+ *
+ * @example
+ * ```typescript
+ * // Agent reads current config
+ * const result = await mcp.readResource('sap://config/current');
+ * // Returns: SanitizedConfig or ConfigError
+ * ```
+ */
+export function sapCurrentConfigResource(server, context) {
+    registerResourceTemplate(server, 'sap://config/current', {}, {
+        name: 'Current SAP MCP Configuration',
+        description: 'The active configuration for this SAP MCP server instance, including profile, wallet, and security settings.',
+        mimeType: 'application/json',
+    }, async (uri, _args) => {
+        try {
+            const activeProfile = process.env.SAP_MCP_PROFILE || getActiveProfile();
+            const configPath = process.env.SAP_MCP_CONFIG_PATH || getProfileConfigPath(activeProfile);
+            const config = loadDisplayConfig(activeProfile, configPath);
+            // Handle missing configuration
+            if (!config) {
+                const errorResponse = {
+                    error: 'Configuration not found',
+                    profile: activeProfile,
+                    message: 'Run "npx sap-mcp-config wizard" to create initial configuration',
+                };
+                return {
+                    contents: [{
+                            uri,
+                            mimeType: 'application/json',
+                            text: JSON.stringify(errorResponse, null, 2),
+                        }],
+                };
+            }
+            // Build sanitized config (exclude sensitive data)
+            const sanitizedConfig = {
+                profile: {
+                    name: activeProfile,
+                    configPath,
+                    isActive: true,
+                },
+                agent: {
+                    pubkey: config.agentPubkey || 'Not configured',
+                    mode: context.config.mode,
+                    signerPublicKey: context.signer?.publicKey.toBase58(),
+                    identityMatchesSigner: config.agentPubkey && context.signer
+                        ? config.agentPubkey === context.signer.publicKey.toBase58()
+                        : null,
+                },
+                connection: {
+                    rpcUrl: context.config.rpcUrl,
+                    commitment: context.config.commitment,
+                    programId: context.config.programId,
+                },
+                wallet: {
+                    managedByProfile: Boolean(context.config.walletPath),
+                    exists: context.config.walletPath ? existsSync(context.config.walletPath) : false,
+                    type: context.config.mode === 'local-dev-keypair' ? 'keypair-file' : context.config.mode,
+                    secretMaterial: 'never-exposed',
+                },
+                security: {
+                    maxTxValueSol: context.config.maxTxValueSol,
+                    dailyLimitSol: context.config.dailyLimitSol ?? config.dailyLimitSol,
+                    requireApprovalAboveSol: context.config.requireApprovalAboveSol,
+                    policyMode: context.config.policy?.mode || 'local-only',
+                    policyRuntime: context.policyEngine.getRuntimeStatus(),
+                },
+                features: {
+                    httpEnabled: context.config.enableHttp,
+                    httpPort: context.config.httpPort,
+                    metricsEnabled: config.enableMetrics,
+                    bentoEnabled: context.config.bento?.enabled ?? false,
+                },
+                logging: {
+                    level: context.config.logLevel,
+                    format: config.logFormat,
+                },
+            };
+            logger.debug('Current config resource read', {
+                profile: activeProfile,
+                mode: config.mode,
+                pubkey: config.agentPubkey ? '[REDACTED]' : 'Not configured'
+            });
+            return {
+                contents: [{
+                        uri,
+                        mimeType: 'application/json',
+                        text: JSON.stringify(sanitizedConfig, null, 2),
+                    }],
+            };
+        }
+        catch (error) {
+            logger.error('Failed to read current config resource', { error });
+            const errorResponse = {
+                error: 'Failed to load configuration',
+                profile: getActiveProfile(),
+                message: error instanceof Error ? error.message : 'Unknown error',
+            };
+            return {
+                contents: [{
+                        uri,
+                        mimeType: 'application/json',
+                        text: JSON.stringify(errorResponse, null, 2),
+                    }],
+            };
+        }
+    });
+    logger.info('Current config resource registered');
+}
+//# sourceMappingURL=sap-current-config.resource.js.map

package/dist/resources/current/sap-current-config.resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sap-current-config.resource.js","sourceRoot":"","sources":["../../../src/resources/current/sap-current-config.resource.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrG,OAAO,EAAE,gBAAgB,EAAmB,MAAM,+BAA+B,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAqG9C;;GAEG;AACH,SAAS,iBAAiB,CAAC,WAAmB,EAAE,UAAkB;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,OAAO,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,iBAAiB,CAAC,WAAW,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,OAAsB;IAC7E,wBAAwB,CACtB,MAAM,EACN,sBAAsB,EACtB,EAAE,EACF;QACE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,8GAA8G;QAC3H,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,GAAW,EAAE,KAA8B,EAAE,EAAE;QACpD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,gBAAgB,EAAE,CAAC;YACxE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YAE5D,+BAA+B;YAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,aAAa,GAAgB;oBACjC,KAAK,EAAE,yBAAyB;oBAChC,OAAO,EAAE,aAAa;oBACtB,OAAO,EAAE,iEAAiE;iBAC3E,CAAC;gBAEF,OAAO;oBACL,QAAQ,EAAE,CAAC;4BACT,GAAG;4BACH,QAAQ,EAAE,kBAAkB;4BAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;yBAC7C,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,kDAAkD;YAClD,MAAM,eAAe,GAAoB;gBACvC,OAAO,EAAE;oBACP,IAAI,EAAE,aAAa;oBACnB,UAAU;oBACV,QAAQ,EAAE,IAAI;iBACf;gBACA,KAAK,EAAE;oBACL,MAAM,EAAE,MAAM,CAAC,WAAW,IAAI,gBAAgB;oBAC9C,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;oBACzB,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE;oBACrD,qBAAqB,EAAE,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM;wBACzD,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;wBAC5D,CAAC,CAAC,IAAI;iBACT;gBACF,UAAU,EAAE;oBACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;oBAC7B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;oBACrC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;iBACpC;gBACD,MAAM,EAAE;oBACN,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;oBACpD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK;oBACjF,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;oBACxF,cAAc,EAAE,eAAe;iBAChC;gBACD,QAAQ,EAAE;oBACR,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa;oBAC1C,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa;oBACnE,uBAAuB,EAAE,OAAO,CAAC,MAAM,CAAC,uBAAuB;oBAC/D,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,YAAY;oBACvD,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,gBAAgB,EAAE;iBACvD;gBACF,QAAQ,EAAE;oBACR,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;oBACtC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACjC,cAAc,EAAE,MAAM,CAAC,aAAa;oBACpC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK;iBACrD;gBACD,OAAO,EAAE;oBACP,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBAC9B,MAAM,EAAE,MAAM,CAAC,SAAS;iBACzB;aACF,CAAC;YAEF,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB;aAC7D,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,CAAC;wBACT,GAAG;wBACH,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC/C,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAElE,MAAM,aAAa,GAAgB;gBACjC,KAAK,EAAE,8BAA8B;gBACrC,OAAO,EAAE,gBAAgB,EAAE;gBAC3B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAClE,CAAC;YAEF,OAAO;gBACL,QAAQ,EAAE,CAAC;wBACT,GAAG;wBACH,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC7C,CAAC;aACH,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AACpD,CAAC"}

package/dist/resources/execution-proof/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Execution proof resources barrel export.
+ */
+export { sapExecutionRecordResource } from './sap-execution-record.resource.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/resources/execution-proof/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/resources/execution-proof/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC"}

package/dist/resources/execution-proof/index.js

@@ -0,0 +1,5 @@
+/**
+ * Execution proof resources barrel export.
+ */
+export { sapExecutionRecordResource } from './sap-execution-record.resource.js';
+//# sourceMappingURL=index.js.map

package/dist/resources/execution-proof/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/resources/execution-proof/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC"}

package/dist/resources/execution-proof/sap-execution-record.resource.d.ts

@@ -0,0 +1,13 @@
+/**
+ * SAP Execution Record Resource
+ *
+ * Proof of execution records and audit trails.
+ * REAL IMPLEMENTATION — Fetches from on-chain PDA
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { SapMcpContext } from '../../core/types.js';
+/**
+ * Executes the sap execution record resource operation.
+ */
+export declare function sapExecutionRecordResource(server: Server, context: SapMcpContext): void;
+//# sourceMappingURL=sap-execution-record.resource.d.ts.map

package/dist/resources/execution-proof/sap-execution-record.resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sap-execution-record.resource.d.ts","sourceRoot":"","sources":["../../../src/resources/execution-proof/sap-execution-record.resource.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,QA4EhF"}