@oobe-protocol-labs/sap-mcp-server 0.9.2 → 0.9.3

package/dist/premium/event-store.js

@@ -0,0 +1,130 @@
+/**
+ * @name premium/event-store
+ * @description In-memory event store for premium event replay and idempotency.
+ *
+ * Every event delivered through the stream broker or webhook engine is recorded
+ * here. The store supports:
+ *   - append with `eventId` deduplication (idempotency)
+ *   - query by session, event type, or time window
+ *   - automatic eviction of events past their replay window
+ *
+ * @flow
+ *   1. `stream-broker.ts` / `webhook-engine.ts` deliver an event →
+ *      `appendEvent()` stores it (dedup by `eventId`).
+ *   2. `stream-broker.ts` reconnects a client → `getEvents()` replays past
+ *      events within the replay window.
+ *   3. Pruning runs on every append/query to evict events past their
+ *      `replayWindowSeconds` per capability.
+ *
+ * @module premium/event-store
+ */
+/**
+ * @description In-memory event records keyed by `eventId` for O(1) dedup.
+ */
+const eventMap = new Map();
+/**
+ * @description Hard cap on stored events to prevent unbounded memory growth.
+ *
+ * Default: 500_000 (tuned for a 312GB RAM production server).
+ * Each event is ~1KB, so 500K events ≈ 500MB.
+ * Override via `SAP_MCP_PREMIUM_MAX_EVENTS` env var.
+ */
+const MAX_STORED_EVENTS = (() => {
+    const raw = process.env.SAP_MCP_PREMIUM_MAX_EVENTS;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? Math.trunc(parsed) : 500_000;
+})();
+/**
+ * @name appendEvent
+ * @description Append a premium event to the store with idempotency.
+ *
+ * If an event with the same `eventId` already exists, it is not duplicated.
+ * The store is pruned after each append.
+ *
+ * @param record - The event record to append.
+ * @returns True if the event was newly inserted, false if it was a duplicate.
+ *
+ * @usedBy `stream-broker.ts`, `webhook-engine.ts`
+ */
+export function appendEvent(record) {
+    if (eventMap.has(record.eventId))
+        return false;
+    eventMap.set(record.eventId, record);
+    pruneOldEvents();
+    return true;
+}
+/**
+ * @name getEvents
+ * @description Query events from the store with optional filters.
+ *
+ * @param query - Filter criteria (sessionId, eventType, since, limit).
+ * @returns Array of matching event records, ordered by `deliveredAt` ascending.
+ *
+ * @usedBy `stream-broker.ts` (replay), `premium-tools.ts` (audit)
+ */
+export function getEvents(query = {}) {
+    const limit = query.limit ?? 1_000;
+    const sinceMs = query.since ? new Date(query.since).getTime() : 0;
+    const results = [];
+    for (const record of eventMap.values()) {
+        if (query.sessionId && record.sessionId !== query.sessionId)
+            continue;
+        if (query.eventType && record.eventType !== query.eventType)
+            continue;
+        if (sinceMs > 0 && new Date(record.deliveredAt).getTime() < sinceMs)
+            continue;
+        results.push(record);
+        if (results.length >= limit)
+            break;
+    }
+    return results.sort((a, b) => new Date(a.deliveredAt).getTime() - new Date(b.deliveredAt).getTime());
+}
+/**
+ * @name getEventCount
+ * @description Return the total number of stored events.
+ *
+ * @usedBy `metrics.ts`
+ */
+export function getEventCount() {
+    return eventMap.size;
+}
+/**
+ * @name pruneOldEvents
+ * @description Evict events older than 24 hours or when the store exceeds
+ * `MAX_STORED_EVENTS`. The oldest events are evicted first.
+ *
+ * @internal
+ */
+function pruneOldEvents() {
+    if (eventMap.size <= MAX_STORED_EVENTS) {
+        // Also evict events older than 24 hours.
+        const cutoff = Date.now() - 24 * 60 * 60 * 1000;
+        for (const [eventId, record] of eventMap.entries()) {
+            if (new Date(record.deliveredAt).getTime() < cutoff) {
+                eventMap.delete(eventId);
+            }
+        }
+        return;
+    }
+    // Over cap: evict oldest entries by insertion order.
+    const toEvict = eventMap.size - MAX_STORED_EVENTS;
+    let evicted = 0;
+    for (const eventId of eventMap.keys()) {
+        if (evicted >= toEvict)
+            break;
+        eventMap.delete(eventId);
+        evicted++;
+    }
+}
+/**
+ * @name clearAllEvents
+ * @description Clear all events from the store.
+ *
+ * Used in tests and during graceful server shutdown.
+ *
+ * @internal
+ */
+export function clearAllEvents() {
+    eventMap.clear();
+}
+//# sourceMappingURL=event-store.js.map

package/dist/premium/event-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-store.js","sourceRoot":"","sources":["../../src/premium/event-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH;;GAEG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC,CAAC,EAAE,CAAC;AAEL;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,MAA0B;IACpD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,cAAc,EAAE,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,QAA2B,EAAE;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAElE,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,SAAS;QACtE,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,SAAS;QACtE,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO;YAAE,SAAS;QAC9E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM;IACrC,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACvG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc;IACrB,IAAI,QAAQ,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACvC,yCAAyC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAChD,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;gBACpD,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,qDAAqD;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,IAAI,OAAO;YAAE,MAAM;QAC9B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/premium/index.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @name premium/index
+ * @description Barrel export for the SAP MCP Premium plugin subsystem.
+ *
+ * Re-exports every public module in the premium layer so external consumers
+ * (MCP tools, remote server, tests) can import from a single entry point:
+ *
+ * ```ts
+ * import {
+ *   listPremiumPlugins,
+ *   createPremiumSessionPlan,
+ *   activatePremiumSession,
+ *   startStream,
+ *   streamEvents,
+ *   registerWebhook,
+ *   getPremiumMetrics,
+ *   validatePremiumPluginManifest,
+ *   type PremiumPluginManifest,
+ * } from '../premium/index.js';
+ * ```
+ *
+ * @flow
+ *   Import order matters only for readability, not for runtime:
+ *   1. `builtin-plugins`       — Built-in plugin definitions and discovery helpers.
+ *   2. `manifest-builder`      — Template generation for custom plugin authors.
+ *   3. `private-manifest-loader` — Filesystem loader for enterprise manifests.
+ *   4. `plugin-validator`      — Manifest validation against strict schema rules.
+ *   5. `session-manager`       — In-memory session plan lifecycle.
+ *   6. `activation-manager`    — x402/pay.sh receipt binding and session activation.
+ *   7. `event-store`           — Replay and idempotency store for delivered events.
+ *   8. `provider-bridge`       — Dynamic loader for private provider adapters.
+ *   9. `stream-broker`         — SSE stream delivery for premium real-time events.
+ *  10. `webhook-engine`        — Signed webhook delivery for premium event callbacks.
+ *  11. `metrics`               — Premium subsystem metrics snapshot.
+ *  12. `types`                 — All TypeScript type declarations.
+ *
+ * @module premium/index
+ */
+export * from './builtin-plugins.js';
+export * from './trading-capabilities.js';
+export * from './meme-radar-capabilities.js';
+export * from './tech-fundamentals-capabilities.js';
+export * from './manifest-builder.js';
+export * from './private-manifest-loader.js';
+export * from './plugin-validator.js';
+export * from './session-manager.js';
+export * from './activation-manager.js';
+export * from './event-store.js';
+export * from './provider-bridge.js';
+export * from './stream-broker.js';
+export * from './webhook-engine.js';
+export * from './metrics.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/premium/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/premium/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/premium/index.js

@@ -0,0 +1,54 @@
+/**
+ * @name premium/index
+ * @description Barrel export for the SAP MCP Premium plugin subsystem.
+ *
+ * Re-exports every public module in the premium layer so external consumers
+ * (MCP tools, remote server, tests) can import from a single entry point:
+ *
+ * ```ts
+ * import {
+ *   listPremiumPlugins,
+ *   createPremiumSessionPlan,
+ *   activatePremiumSession,
+ *   startStream,
+ *   streamEvents,
+ *   registerWebhook,
+ *   getPremiumMetrics,
+ *   validatePremiumPluginManifest,
+ *   type PremiumPluginManifest,
+ * } from '../premium/index.js';
+ * ```
+ *
+ * @flow
+ *   Import order matters only for readability, not for runtime:
+ *   1. `builtin-plugins`       — Built-in plugin definitions and discovery helpers.
+ *   2. `manifest-builder`      — Template generation for custom plugin authors.
+ *   3. `private-manifest-loader` — Filesystem loader for enterprise manifests.
+ *   4. `plugin-validator`      — Manifest validation against strict schema rules.
+ *   5. `session-manager`       — In-memory session plan lifecycle.
+ *   6. `activation-manager`    — x402/pay.sh receipt binding and session activation.
+ *   7. `event-store`           — Replay and idempotency store for delivered events.
+ *   8. `provider-bridge`       — Dynamic loader for private provider adapters.
+ *   9. `stream-broker`         — SSE stream delivery for premium real-time events.
+ *  10. `webhook-engine`        — Signed webhook delivery for premium event callbacks.
+ *  11. `metrics`               — Premium subsystem metrics snapshot.
+ *  12. `types`                 — All TypeScript type declarations.
+ *
+ * @module premium/index
+ */
+export * from './builtin-plugins.js';
+export * from './trading-capabilities.js';
+export * from './meme-radar-capabilities.js';
+export * from './tech-fundamentals-capabilities.js';
+export * from './manifest-builder.js';
+export * from './private-manifest-loader.js';
+export * from './plugin-validator.js';
+export * from './session-manager.js';
+export * from './activation-manager.js';
+export * from './event-store.js';
+export * from './provider-bridge.js';
+export * from './stream-broker.js';
+export * from './webhook-engine.js';
+export * from './metrics.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/premium/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/premium/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,qCAAqC,CAAC;AACpD,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/premium/manifest-builder.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @name premium/manifest-builder
+ * @description Template generator for custom premium plugin manifests.
+ *
+ * Produces a data-only `PremiumPluginManifest` from a simplified request,
+ * filling in sensible defaults for pricing, delivery, and JSON schemas.
+ * The generated template is meant to be customized by plugin authors before
+ * production use — it never writes files, loads code, or embeds secrets.
+ *
+ * @flow
+ *   1. MCP tool `sap_premium_build_manifest_template` receives a request
+ *      with plugin id, capability id, type, and optional overrides.
+ *   2. → `buildPremiumPluginManifestTemplate(request)` generates a full manifest
+ *      with default pricing/delivery/schema based on capability type.
+ *   3. The agent returns the manifest JSON to the caller for review/customization.
+ *   4. The caller can then validate it with `validatePremiumPluginManifest`.
+ *
+ * @module premium/manifest-builder
+ */
+import type { PremiumCapabilityType, PremiumPluginManifest } from './types.js';
+/**
+ * @name PremiumManifestTemplateRequest
+ * @description Simplified request for generating a premium plugin manifest template.
+ *
+ * Only `pluginId`, `capabilityId`, and `capabilityType` are required. All other
+ * fields have sensible defaults and can be overridden by the caller.
+ *
+ * @property pluginId        - Unique plugin id (lowercase, dots/dashes allowed).
+ * @property capabilityId    - Unique capability id within the plugin.
+ * @property capabilityType  - `stream`, `webhook`, or `tool`.
+ * @property title           - Optional human-readable label (defaults applied).
+ * @property description     - Optional agent-facing description (defaults applied).
+ * @property publisher       - Optional publisher name (defaults to 'Custom Publisher').
+ * @property visibility       - Optional visibility (defaults to 'private').
+ * @property unitPriceUsd    - Optional price per unit in USD (defaults to 0.01).
+ * @property providerEnv     - Optional env var names for provider readiness.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_build_manifest_template`.
+ */
+export interface PremiumManifestTemplateRequest {
+    pluginId: string;
+    capabilityId: string;
+    capabilityType: PremiumCapabilityType;
+    title?: string;
+    description?: string;
+    publisher?: string;
+    visibility?: 'public' | 'private' | 'enterprise';
+    unitPriceUsd?: number;
+    providerEnv?: string[];
+}
+/**
+ * @name buildPremiumPluginManifestTemplate
+ * @description Build a data-only premium plugin manifest template from a simplified request.
+ *
+ * It never writes files, loads code, or embeds provider secrets. The generated
+ * manifest uses default schemas, pricing, and delivery contracts that are
+ * sensible starting points but should be customized before production use.
+ *
+ * @param request - Template request with required plugin/capability ids and type.
+ * @returns A complete `PremiumPluginManifest` with one capability.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_build_manifest_template`.
+ */
+export declare function buildPremiumPluginManifestTemplate(request: PremiumManifestTemplateRequest): PremiumPluginManifest;
+//# sourceMappingURL=manifest-builder.d.ts.map

package/dist/premium/manifest-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-builder.d.ts","sourceRoot":"","sources":["../../src/premium/manifest-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EACV,qBAAqB,EAErB,qBAAqB,EAGtB,MAAM,YAAY,CAAC;AAMpB;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,qBAAqB,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAkID;;;;;;;;;;;;GAYG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,8BAA8B,GAAG,qBAAqB,CA4BjH"}

package/dist/premium/manifest-builder.js

@@ -0,0 +1,182 @@
+/**
+ * @name premium/manifest-builder
+ * @description Template generator for custom premium plugin manifests.
+ *
+ * Produces a data-only `PremiumPluginManifest` from a simplified request,
+ * filling in sensible defaults for pricing, delivery, and JSON schemas.
+ * The generated template is meant to be customized by plugin authors before
+ * production use — it never writes files, loads code, or embeds secrets.
+ *
+ * @flow
+ *   1. MCP tool `sap_premium_build_manifest_template` receives a request
+ *      with plugin id, capability id, type, and optional overrides.
+ *   2. → `buildPremiumPluginManifestTemplate(request)` generates a full manifest
+ *      with default pricing/delivery/schema based on capability type.
+ *   3. The agent returns the manifest JSON to the caller for review/customization.
+ *   4. The caller can then validate it with `validatePremiumPluginManifest`.
+ *
+ * @module premium/manifest-builder
+ */
+/* -------------------------------------------------------------------------- */
+/* Default JSON schemas                                                       */
+/* -------------------------------------------------------------------------- */
+/**
+ * @description Default input schema for template-generated capabilities.
+ * Requires a `requestId` for idempotency and allows free-form `filters`.
+ */
+const defaultInputSchema = {
+    type: 'object',
+    required: ['requestId'],
+    properties: {
+        requestId: {
+            type: 'string',
+            description: 'Caller-provided idempotency key binding planning, payment, delivery, and audit output.',
+        },
+        filters: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Narrow capability-specific filters. Keep broad scans out of premium delivery paths.',
+        },
+    },
+    additionalProperties: false,
+};
+/**
+ * @description Default output schema for template-generated capabilities.
+ * Returns a stable event id, ISO timestamp, and a versioned provider payload.
+ * The `payload` field uses `additionalProperties: true` as a placeholder —
+ * plugin authors should replace it with a strict object schema before production.
+ */
+const defaultOutputSchema = {
+    type: 'object',
+    required: ['eventId', 'observedAt', 'payload'],
+    properties: {
+        eventId: {
+            type: 'string',
+            description: 'Stable provider event id suitable for audit binding, replay protection, and de-duplication.',
+        },
+        observedAt: {
+            type: 'string',
+            format: 'date-time',
+            description: 'ISO timestamp when the provider observed or delivered this premium result.',
+        },
+        payload: {
+            type: 'object',
+            additionalProperties: true,
+            description: 'Provider-specific payload. Replace this with a strict object schema before production.',
+        },
+    },
+    additionalProperties: false,
+};
+/* -------------------------------------------------------------------------- */
+/* Default pricing & delivery factories                                       */
+/* -------------------------------------------------------------------------- */
+/**
+ * @name defaultPricing
+ * @description Generate a default `PremiumPricingPolicy` based on capability type.
+ *
+ * Maps each type to its canonical pricing model, unit, and tier:
+ *   - `stream`  → `x402-per-minute`, `minute`, `premium-stream`, 1–120 units.
+ *   - `webhook` → `x402-per-event`, `event`, `premium-webhook`, 10–100 000 units.
+ *   - `tool`    → `x402-session`, `session`, `premium-tool`, 1–120 units.
+ *
+ * @param type          - The capability type to generate pricing for.
+ * @param unitPriceUsd  - Price per unit in USD.
+ * @returns A complete `PremiumPricingPolicy` with `x402` settlement.
+ *
+ * @internal
+ */
+function defaultPricing(type, unitPriceUsd) {
+    const modelByType = {
+        stream: 'x402-per-minute',
+        webhook: 'x402-per-event',
+        tool: 'x402-session',
+    };
+    const unitByType = {
+        stream: 'minute',
+        webhook: 'event',
+        tool: 'session',
+    };
+    const tierByType = {
+        stream: 'premium-stream',
+        webhook: 'premium-webhook',
+        tool: 'premium-tool',
+    };
+    return {
+        tier: tierByType[type],
+        model: modelByType[type],
+        unit: unitByType[type],
+        unitPriceUsd,
+        minUnits: type === 'webhook' ? 10 : 1,
+        maxUnits: type === 'webhook' ? 100_000 : 120,
+        settlement: 'x402',
+    };
+}
+/**
+ * @name defaultDelivery
+ * @description Generate a default `PremiumDeliveryContract` based on capability type.
+ *
+ * Maps each type to its canonical transport, event id pattern, latency, and
+ * replay window:
+ *   - `stream`  → `mcp-streamable-http`, 750ms latency, 300s replay.
+ *   - `webhook` → `webhook-http`, 1500ms latency, 900s replay.
+ *   - `tool`    → `mcp-streamable-http`, 1500ms latency, 300s replay.
+ *
+ * @param type - The capability type to generate delivery for.
+ * @returns A complete `PremiumDeliveryContract`.
+ *
+ * @internal
+ */
+function defaultDelivery(type) {
+    return {
+        transport: type === 'webhook' ? 'webhook-http' : 'mcp-streamable-http',
+        events: type === 'tool' ? ['tool.completed'] : [`${type}.event`],
+        latencyTargetMs: type === 'stream' ? 750 : 1_500,
+        replayWindowSeconds: type === 'webhook' ? 900 : 300,
+    };
+}
+/* -------------------------------------------------------------------------- */
+/* Public API                                                                 */
+/* -------------------------------------------------------------------------- */
+/**
+ * @name buildPremiumPluginManifestTemplate
+ * @description Build a data-only premium plugin manifest template from a simplified request.
+ *
+ * It never writes files, loads code, or embeds provider secrets. The generated
+ * manifest uses default schemas, pricing, and delivery contracts that are
+ * sensible starting points but should be customized before production use.
+ *
+ * @param request - Template request with required plugin/capability ids and type.
+ * @returns A complete `PremiumPluginManifest` with one capability.
+ *
+ * @usedBy `premium-tools.ts` → MCP tool `sap_premium_build_manifest_template`.
+ */
+export function buildPremiumPluginManifestTemplate(request) {
+    // Filter out empty/falsy env var names from the request.
+    const providerEnv = request.providerEnv?.filter(Boolean) ?? [];
+    return {
+        id: request.pluginId,
+        version: '0.1.0',
+        title: request.title ?? 'Custom SAP MCP Premium Plugin',
+        description: request.description
+            ?? 'Custom premium SAP MCP capability contract for paid agent runtime delivery with strict schemas and x402/pay.sh settlement.',
+        publisher: request.publisher ?? 'Custom Publisher',
+        visibility: request.visibility ?? 'private',
+        capabilities: [
+            {
+                id: request.capabilityId,
+                type: request.capabilityType,
+                title: request.title ?? 'Custom premium capability',
+                description: request.description
+                    ?? 'Custom premium capability. Replace this description with a concrete agent use case, delivery boundary, provider dependency, and payment model before production.',
+                status: providerEnv.length > 0 ? 'requires-provider' : 'planned',
+                requiresProvider: providerEnv.length > 0,
+                providerEnv,
+                inputSchema: defaultInputSchema,
+                outputSchema: defaultOutputSchema,
+                pricing: defaultPricing(request.capabilityType, request.unitPriceUsd ?? 0.01),
+                delivery: defaultDelivery(request.capabilityType),
+            },
+        ],
+    };
+}
+//# sourceMappingURL=manifest-builder.js.map

package/dist/premium/manifest-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-builder.js","sourceRoot":"","sources":["../../src/premium/manifest-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AA6CH,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,WAAW,CAAC;IACvB,UAAU,EAAE;QACV,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wFAAwF;SACtG;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,IAAI;YAC1B,WAAW,EAAE,qFAAqF;SACnG;KACF;IACD,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC;IAC9C,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6FAA6F;SAC3G;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,4EAA4E;SAC1F;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,IAAI;YAC1B,WAAW,EAAE,wFAAwF;SACtG;KACF;IACD,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,SAAS,cAAc,CAAC,IAA2B,EAAE,YAAoB;IACvE,MAAM,WAAW,GAAuD;QACtE,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,cAAc;KACrB,CAAC;IACF,MAAM,UAAU,GAAgE;QAC9E,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,SAAS;KAChB,CAAC;IACF,MAAM,UAAU,GAAgE;QAC9E,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAE,cAAc;KACrB,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC;QACxB,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,YAAY;QACZ,QAAQ,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,QAAQ,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;QAC5C,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,eAAe,CAAC,IAA2B;IAClD,OAAO;QACL,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,qBAAqB;QACtE,MAAM,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC;QAChE,eAAe,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK;QAChD,mBAAmB,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;KACpD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kCAAkC,CAAC,OAAuC;IACxF,yDAAyD;IACzD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,QAAQ;QACpB,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,+BAA+B;QACvD,WAAW,EAAE,OAAO,CAAC,WAAW;eAC3B,4HAA4H;QACjI,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;QAClD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,SAAS;QAC3C,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,OAAO,CAAC,YAAY;gBACxB,IAAI,EAAE,OAAO,CAAC,cAAc;gBAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,2BAA2B;gBACnD,WAAW,EAAE,OAAO,CAAC,WAAW;uBAC3B,kKAAkK;gBACvK,MAAM,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;gBAChE,gBAAgB,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;gBACxC,WAAW;gBACX,WAAW,EAAE,kBAAkB;gBAC/B,YAAY,EAAE,mBAAmB;gBACjC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;gBAC7E,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,cAAc,CAAC;aAClD;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/premium/meme-radar-capabilities.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @name premium/meme-radar-capabilities
+ * @description Built-in premium meme radar capabilities for Solana meme token analysis.
+ *
+ * Defines 4 premium meme radar capabilities across 1 plugin:
+ *
+ *   1. `sap-premium-meme-radar` — Meme token intelligence:
+ *      - `meme.newlisting.alert`  — New token listing alerts (webhook)
+ *      - `meme.social.sentiment`  — Social sentiment stream (stream)
+ *      - `meme.rugpull.detector`  — Rugpull risk monitoring (stream)
+ *      - `meme.volume.spike`      — DEX volume anomaly detection (stream)
+ *
+ * These capabilities are contracts only — they become live when the corresponding
+ * provider env vars are configured and a provider adapter is loaded from the
+ * private subrepo.
+ *
+ * @flow
+ *   1. Agent discovers meme radar capabilities via `sap_premium_plugin_catalog`.
+ *   2. Agent creates a session plan for a meme stream or webhook.
+ *   3. Agent activates the session with x402/pay.sh receipt.
+ *   4. Agent connects to `GET /premium/stream/:sessionId` for SSE streams.
+ *   5. Agent registers webhooks for listing alerts via `POST /premium/webhook/register`.
+ *   6. Provider adapter in the private subrepo feeds real meme token data.
+ *
+ * @module premium/meme-radar-capabilities
+ */
+import type { PremiumPluginManifest } from './types.js';
+/**
+ * @name MEME_RADAR_PREMIUM_PLUGINS
+ * @description Built-in premium meme radar plugin manifests.
+ *
+ * One plugin covering 4 meme radar capabilities:
+ *   - `sap-premium-meme-radar` — 1 webhook + 3 stream capabilities
+ *
+ * @usedBy `listPremiumPlugins()` — merged with the existing built-in plugins.
+ */
+export declare const MEME_RADAR_PREMIUM_PLUGINS: PremiumPluginManifest[];
+//# sourceMappingURL=meme-radar-capabilities.d.ts.map

package/dist/premium/meme-radar-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meme-radar-capabilities.d.ts","sourceRoot":"","sources":["../../src/premium/meme-radar-capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAA+B,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAmRrF;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,qBAAqB,EA4C7D,CAAC"}