@openagentid/mcp 0.1.0

package/dist/client.js

@@ -0,0 +1,88 @@
+// src/client.ts
+function withOpenAgentClient(client, config) {
+  if (config === null || typeof config !== "object") {
+    throw new TypeError("OpenAgentClientConfig must be an object");
+  }
+  if (config.agent === void 0 || config.agent === null) {
+    throw new TypeError("OpenAgentClientConfig.agent is required");
+  }
+  if (typeof config.agent.signRequest !== "function") {
+    throw new TypeError("OpenAgentClientConfig.agent.signRequest is required");
+  }
+  const interceptor = new ClientInterceptor(config);
+  return new Proxy(client, {
+    get(target, property, receiver) {
+      const value = Reflect.get(target, property, receiver);
+      if (typeof value !== "function") {
+        return value;
+      }
+      if (property === "callTool") {
+        return interceptor.wrapCallTool(
+          value,
+          target
+        );
+      }
+      return value.bind(target);
+    }
+  });
+}
+var ClientInterceptor = class {
+  agent;
+  audience;
+  beforeCall;
+  constructor(config) {
+    this.agent = config.agent;
+    this.audience = config.audience;
+    this.beforeCall = config.beforeCall;
+  }
+  wrapCallTool(original, thisArg) {
+    const interceptor = this;
+    return async function wrappedCallTool(params, ...rest) {
+      const signed = await interceptor.signParams(params);
+      let toSend = signed;
+      if (interceptor.beforeCall !== void 0) {
+        const replacement = await Promise.resolve(
+          interceptor.beforeCall(signed)
+        );
+        if (replacement !== void 0) {
+          toSend = {
+            ...replacement,
+            _meta: replacement._meta ?? signed._meta
+          };
+        }
+      }
+      return original.call(thisArg, toSend, ...rest);
+    };
+  }
+  async signParams(params) {
+    const identity = await this.agent.signRequest(params.name, this.audience);
+    const existingMeta = params._meta ?? {};
+    const existingOpenAgent = typeof existingMeta["openagent"] === "object" && existingMeta["openagent"] !== null ? existingMeta["openagent"] : {};
+    return {
+      ...params,
+      _meta: {
+        ...existingMeta,
+        openagent: {
+          ...existingOpenAgent,
+          identity
+        }
+      }
+    };
+  }
+};
+function buildIdentityMeta(identity) {
+  return {
+    openagent: {
+      identity: {
+        did: identity.did,
+        proof: identity.proof,
+        ...identity.nonce !== void 0 ? { nonce: identity.nonce } : {},
+        ...identity.context !== void 0 ? { context: identity.context } : {}
+      }
+    }
+  };
+}
+
+export { buildIdentityMeta, withOpenAgentClient };
+//# sourceMappingURL=client.js.map
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"names":[],"mappings":";AAqEO,SAAS,mBAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,KAAA,CAAM,WAAA,KAAgB,UAAA,EAAY;AAClD,IAAA,MAAM,IAAI,UAAU,qDAAqD,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,WAAA,GAAc,IAAI,iBAAA,CAAkB,MAAM,CAAA;AAEhD,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,QAAA,OAAO,WAAA,CAAY,YAAA;AAAA,UACjB,KAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACL,KAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAAA,EAC3B;AAAA,EAEA,YAAA,CACE,UACA,OAAA,EAC2B;AAC3B,IAAA,MAAM,WAAA,GAAc,IAAA;AACpB,IAAA,OAAO,eAAe,eAAA,CAEpB,MAAA,EAAA,GAKG,IAAA,EACe;AAClB,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,UAAA,CAAW,MAAM,CAAA;AAClD,MAAA,IAAI,MAAA,GAIA,MAAA;AACJ,MAAA,IAAI,WAAA,CAAY,eAAe,MAAA,EAAW;AACxC,QAAA,MAAM,WAAA,GAAc,MAAM,OAAA,CAAQ,OAAA;AAAA,UAChC,WAAA,CAAY,WAAW,MAAM;AAAA,SAC/B;AACA,QAAA,IAAI,gBAAgB,MAAA,EAAW;AAE7B,UAAA,MAAA,GAAS;AAAA,YACP,GAAG,WAAA;AAAA,YACH,KAAA,EAAO,WAAA,CAAY,KAAA,IAAS,MAAA,CAAO;AAAA,WACrC;AAAA,QACF;AAAA,MACF;AACA,MAAA,OAAO,QAAA,CAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,GAAG,IAAI,CAAA;AAAA,IAC/C,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAA,EAQtB;AACD,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,YAAY,MAAA,CAAO,IAAA,EAAM,KAAK,QAAQ,CAAA;AACxE,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,KAAA,IAAS,EAAC;AACtC,IAAA,MAAM,iBAAA,GACJ,OAAO,YAAA,CAAa,WAAW,CAAA,KAAM,QAAA,IACrC,YAAA,CAAa,WAAW,CAAA,KAAM,IAAA,GACzB,YAAA,CAAa,WAAW,IACzB,EAAC;AACP,IAAA,OAAO;AAAA,MACL,GAAG,MAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,YAAA;AAAA,QACH,SAAA,EAAW;AAAA,UACT,GAAG,iBAAA;AAAA,UACH;AAAA;AACF;AACF,KACF;AAAA,EACF;AACF,CAAA;AAOO,SAAS,kBAAkB,QAAA,EAKN;AAC1B,EAAA,OAAO;AAAA,IACL,SAAA,EAAW;AAAA,MACT,QAAA,EAAU;AAAA,QACR,KAAK,QAAA,CAAS,GAAA;AAAA,QACd,OAAO,QAAA,CAAS,KAAA;AAAA,QAChB,GAAI,SAAS,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,GAAI,EAAC;AAAA,QAChE,GAAI,SAAS,OAAA,KAAY,MAAA,GACrB,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAQ,GAC5B;AAAC;AACP;AACF,GACF;AACF","file":"client.js","sourcesContent":["/**\n * Client-side interceptor for @openagentid/mcp.\n *\n * Adds an OpenAgent identity envelope (`_meta.openagent.identity`) to\n * outbound MCP `tools/call` requests so an authenticated server can\n * verify the caller. The interceptor wraps the MCP client's `callTool`\n * method via a JavaScript Proxy — the rest of the client surface (list\n * tools, list resources, prompts) is forwarded unchanged.\n *\n * Usage:\n *\n * ```ts\n * import { Client } from '@modelcontextprotocol/sdk/client/index.js';\n * import { withOpenAgentClient } from '@openagentid/mcp/client';\n *\n * const client = new Client({ name: 'my-agent', version: '0.1.0' });\n * const authedClient = withOpenAgentClient(client, { agent });\n *\n * await authedClient.callTool({ name: 'search_web', arguments: { q: 'mcp' } });\n * ```\n */\n\nimport { Agent } from './types.js';\n\n/**\n * Minimal MCP client surface used by the interceptor. Like the server\n * adapter, we describe just the methods we need to keep peer-dep\n * compatibility broad.\n */\nexport interface McpClientLike {\n  callTool(\n    params: {\n      name: string;\n      arguments?: Record<string, unknown>;\n      _meta?: Record<string, unknown>;\n    },\n    ...rest: unknown[]\n  ): Promise<unknown>;\n}\n\nexport interface OpenAgentClientConfig {\n  /** The agent doing the calling — used to sign each request. */\n  agent: Agent;\n  /**\n   * Optional audience DID. When set, it is passed to\n   * {@link Agent.signRequest} so the proof can be bound to a specific\n   * server. Most production deployments should set this.\n   */\n  audience?: string;\n  /**\n   * Optional hook fired before every outbound call. Use it for client-\n   * side metrics or to mutate the params (e.g., add tracing headers).\n   * Returning a value replaces the params.\n   */\n  beforeCall?: (params: {\n    name: string;\n    arguments?: Record<string, unknown>;\n    _meta?: Record<string, unknown>;\n  }) => Promise<\n    | { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n    | void\n  > | { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n    | void;\n}\n\n/**\n * Wrap an MCP client so every outbound `callTool` carries an OpenAgent\n * identity envelope.\n */\nexport function withOpenAgentClient<T extends McpClientLike>(\n  client: T,\n  config: OpenAgentClientConfig,\n): T {\n  if (config === null || typeof config !== 'object') {\n    throw new TypeError('OpenAgentClientConfig must be an object');\n  }\n  if (config.agent === undefined || config.agent === null) {\n    throw new TypeError('OpenAgentClientConfig.agent is required');\n  }\n  if (typeof config.agent.signRequest !== 'function') {\n    throw new TypeError('OpenAgentClientConfig.agent.signRequest is required');\n  }\n\n  const interceptor = new ClientInterceptor(config);\n\n  return new Proxy(client, {\n    get(target, property, receiver) {\n      const value = Reflect.get(target, property, receiver);\n      if (typeof value !== 'function') {\n        return value;\n      }\n      if (property === 'callTool') {\n        return interceptor.wrapCallTool(\n          value as McpClientLike['callTool'],\n          target,\n        );\n      }\n      return value.bind(target);\n    },\n  }) as T;\n}\n\nclass ClientInterceptor {\n  private readonly agent: Agent;\n  private readonly audience: string | undefined;\n  private readonly beforeCall: OpenAgentClientConfig['beforeCall'];\n\n  constructor(config: OpenAgentClientConfig) {\n    this.agent = config.agent;\n    this.audience = config.audience;\n    this.beforeCall = config.beforeCall;\n  }\n\n  wrapCallTool(\n    original: McpClientLike['callTool'],\n    thisArg: unknown,\n  ): McpClientLike['callTool'] {\n    const interceptor = this;\n    return async function wrappedCallTool(\n      this: unknown,\n      params: {\n        name: string;\n        arguments?: Record<string, unknown>;\n        _meta?: Record<string, unknown>;\n      },\n      ...rest: unknown[]\n    ): Promise<unknown> {\n      const signed = await interceptor.signParams(params);\n      let toSend: {\n        name: string;\n        arguments?: Record<string, unknown>;\n        _meta: Record<string, unknown>;\n      } = signed;\n      if (interceptor.beforeCall !== undefined) {\n        const replacement = await Promise.resolve(\n          interceptor.beforeCall(signed),\n        );\n        if (replacement !== undefined) {\n          // Re-attach the signed _meta if the hook stripped it.\n          toSend = {\n            ...replacement,\n            _meta: replacement._meta ?? signed._meta,\n          };\n        }\n      }\n      return original.call(thisArg, toSend, ...rest);\n    };\n  }\n\n  private async signParams(params: {\n    name: string;\n    arguments?: Record<string, unknown>;\n    _meta?: Record<string, unknown>;\n  }): Promise<{\n    name: string;\n    arguments?: Record<string, unknown>;\n    _meta: Record<string, unknown>;\n  }> {\n    const identity = await this.agent.signRequest(params.name, this.audience);\n    const existingMeta = params._meta ?? {};\n    const existingOpenAgent =\n      typeof existingMeta['openagent'] === 'object' &&\n      existingMeta['openagent'] !== null\n        ? (existingMeta['openagent'] as Record<string, unknown>)\n        : {};\n    return {\n      ...params,\n      _meta: {\n        ...existingMeta,\n        openagent: {\n          ...existingOpenAgent,\n          identity,\n        },\n      },\n    };\n  }\n}\n\n/**\n * Helper for tests and tools that want to construct the identity\n * envelope manually without going through a full Agent. Returns a `_meta`\n * object that can be merged into a CallToolRequest's params.\n */\nexport function buildIdentityMeta(identity: {\n  did: string;\n  proof: string;\n  nonce?: string;\n  context?: Record<string, unknown>;\n}): Record<string, unknown> {\n  return {\n    openagent: {\n      identity: {\n        did: identity.did,\n        proof: identity.proof,\n        ...(identity.nonce !== undefined ? { nonce: identity.nonce } : {}),\n        ...(identity.context !== undefined\n          ? { context: identity.context }\n          : {}),\n      },\n    },\n  };\n}\n"]}

package/dist/errors.cjs

@@ -0,0 +1,105 @@
+'use strict';
+
+// src/errors.ts
+var McpErrorCode = {
+  /** -32600 — request was malformed at the JSON-RPC layer. */
+  InvalidRequest: -32600,
+  /** -32601 — the requested method/tool was not found. */
+  MethodNotFound: -32601,
+  /** -32602 — params failed validation. */
+  InvalidParams: -32602,
+  /** -32603 — internal server error. */
+  InternalError: -32603,
+  /** -32000 — generic server error (used for auth failures by default). */
+  ServerError: -32e3,
+  /** -32001 — identity verification failed. */
+  AuthenticationFailed: -32001,
+  /** -32002 — caller does not hold the required scope. */
+  AuthorizationDenied: -32002,
+  /** -32003 — skills policy rejected the call. */
+  SkillsPolicyDenied: -32003
+};
+var OpenAgentMcpError = class extends Error {
+  code;
+  data;
+  constructor(message, code, data) {
+    super(message);
+    this.name = "OpenAgentMcpError";
+    this.code = code;
+    if (data !== void 0) {
+      this.data = data;
+    }
+  }
+  /**
+   * Convert to a plain JSON-RPC error payload that the MCP SDK can
+   * serialize over the wire.
+   */
+  toJsonRpcError() {
+    if (this.data !== void 0) {
+      return { code: this.code, message: this.message, data: this.data };
+    }
+    return { code: this.code, message: this.message };
+  }
+};
+var MissingIdentityError = class extends OpenAgentMcpError {
+  constructor(toolName) {
+    super(
+      `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,
+      McpErrorCode.AuthenticationFailed,
+      { toolName }
+    );
+    this.name = "MissingIdentityError";
+  }
+};
+var IdentityVerificationError = class extends OpenAgentMcpError {
+  constructor(toolName, cause) {
+    super(
+      `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,
+      McpErrorCode.AuthenticationFailed,
+      { toolName, cause: formatCause(cause) }
+    );
+    this.name = "IdentityVerificationError";
+  }
+};
+var AuthorizationDeniedError = class extends OpenAgentMcpError {
+  constructor(toolName, requiredScopes, heldScopes) {
+    super(
+      `Tool '${toolName}' requires scopes [${requiredScopes.join(", ")}], caller holds [${heldScopes.join(", ")}]`,
+      McpErrorCode.AuthorizationDenied,
+      {
+        toolName,
+        requiredScopes: [...requiredScopes],
+        heldScopes: [...heldScopes]
+      }
+    );
+    this.name = "AuthorizationDeniedError";
+  }
+};
+var SkillsPolicyDeniedError = class extends OpenAgentMcpError {
+  constructor(toolName, reason) {
+    super(
+      `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ""}`,
+      McpErrorCode.SkillsPolicyDenied,
+      reason !== void 0 ? { toolName, reason } : { toolName }
+    );
+    this.name = "SkillsPolicyDeniedError";
+  }
+};
+function formatCause(cause) {
+  if (cause instanceof Error) {
+    return cause.message;
+  }
+  if (typeof cause === "string") {
+    return cause;
+  }
+  return "unknown error";
+}
+
+exports.AuthorizationDeniedError = AuthorizationDeniedError;
+exports.IdentityVerificationError = IdentityVerificationError;
+exports.McpErrorCode = McpErrorCode;
+exports.MissingIdentityError = MissingIdentityError;
+exports.OpenAgentMcpError = OpenAgentMcpError;
+exports.SkillsPolicyDeniedError = SkillsPolicyDeniedError;
+//# sourceMappingURL=errors.cjs.map
+//# sourceMappingURL=errors.cjs.map

package/dist/errors.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts"],"names":[],"mappings":";;;AAUO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,WAAA,EAAa,KAAA;AAAA;AAAA,EAEb,oBAAA,EAAsB,MAAA;AAAA;AAAA,EAEtB,mBAAA,EAAqB,MAAA;AAAA;AAAA,EAErB,kBAAA,EAAoB;AACtB;AASO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3B,IAAA;AAAA,EACA,IAAA;AAAA,EAEhB,WAAA,CACE,OAAA,EACA,IAAA,EACA,IAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,cAAA,GAIE;AACA,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,IACnE;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,EAClD;AACF;AAGO,IAAM,oBAAA,GAAN,cAAmC,iBAAA,CAAkB;AAAA,EAC1D,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA;AAAA,MACE,SAAS,QAAQ,CAAA,4DAAA,CAAA;AAAA,MACjB,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA;AAAS,KACb;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAGO,IAAM,yBAAA,GAAN,cAAwC,iBAAA,CAAkB;AAAA,EAC/D,WAAA,CAAY,UAAkB,KAAA,EAAgB;AAC5C,IAAA,KAAA;AAAA,MACE,CAAA,uCAAA,EAA0C,QAAQ,CAAA,GAAA,EAAM,WAAA,CAAY,KAAK,CAAC,CAAA,CAAA;AAAA,MAC1E,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA,EAAU,KAAA,EAAO,WAAA,CAAY,KAAK,CAAA;AAAE,KACxC;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAGO,IAAM,wBAAA,GAAN,cAAuC,iBAAA,CAAkB;AAAA,EAC9D,WAAA,CACE,QAAA,EACA,cAAA,EACA,UAAA,EACA;AACA,IAAA,KAAA;AAAA,MACE,CAAA,MAAA,EAAS,QAAQ,CAAA,mBAAA,EAAsB,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACzG,YAAA,CAAa,mBAAA;AAAA,MACb;AAAA,QACE,QAAA;AAAA,QACA,cAAA,EAAgB,CAAC,GAAG,cAAc,CAAA;AAAA,QAClC,UAAA,EAAY,CAAC,GAAG,UAAU;AAAA;AAC5B,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAGO,IAAM,uBAAA,GAAN,cAAsC,iBAAA,CAAkB;AAAA,EAC7D,WAAA,CAAY,UAAkB,MAAA,EAA4B;AACxD,IAAA,KAAA;AAAA,MACE,8BAA8B,QAAQ,CAAA,CAAA,EAAI,SAAS,CAAA,EAAA,EAAK,MAAM,KAAK,EAAE,CAAA,CAAA;AAAA,MACrE,YAAA,CAAa,kBAAA;AAAA,MACb,WAAW,MAAA,GAAY,EAAE,UAAU,MAAA,EAAO,GAAI,EAAE,QAAA;AAAS,KAC3D;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,KAAA,CAAM,OAAA;AAAA,EACf;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,eAAA;AACT","file":"errors.cjs","sourcesContent":["/**\n * Error types for @openagentid/mcp.\n *\n * These map onto MCP JSON-RPC error codes so callers see consistent\n * failure modes regardless of which middleware step rejected the call.\n *\n * Reference: https://www.jsonrpc.org/specification#error_object\n */\n\n/** Standard JSON-RPC + MCP error codes used by the middleware. */\nexport const McpErrorCode = {\n  /** -32600 — request was malformed at the JSON-RPC layer. */\n  InvalidRequest: -32600,\n  /** -32601 — the requested method/tool was not found. */\n  MethodNotFound: -32601,\n  /** -32602 — params failed validation. */\n  InvalidParams: -32602,\n  /** -32603 — internal server error. */\n  InternalError: -32603,\n  /** -32000 — generic server error (used for auth failures by default). */\n  ServerError: -32000,\n  /** -32001 — identity verification failed. */\n  AuthenticationFailed: -32001,\n  /** -32002 — caller does not hold the required scope. */\n  AuthorizationDenied: -32002,\n  /** -32003 — skills policy rejected the call. */\n  SkillsPolicyDenied: -32003,\n} as const;\n\nexport type McpErrorCodeValue =\n  (typeof McpErrorCode)[keyof typeof McpErrorCode];\n\n/**\n * Base class for all middleware errors. Subclasses set a default\n * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.\n */\nexport class OpenAgentMcpError extends Error {\n  public readonly code: McpErrorCodeValue;\n  public readonly data?: Record<string, unknown>;\n\n  constructor(\n    message: string,\n    code: McpErrorCodeValue,\n    data?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'OpenAgentMcpError';\n    this.code = code;\n    if (data !== undefined) {\n      this.data = data;\n    }\n  }\n\n  /**\n   * Convert to a plain JSON-RPC error payload that the MCP SDK can\n   * serialize over the wire.\n   */\n  toJsonRpcError(): {\n    code: McpErrorCodeValue;\n    message: string;\n    data?: Record<string, unknown>;\n  } {\n    if (this.data !== undefined) {\n      return { code: this.code, message: this.message, data: this.data };\n    }\n    return { code: this.code, message: this.message };\n  }\n}\n\n/** Caller did not present an OpenAgent identity envelope. */\nexport class MissingIdentityError extends OpenAgentMcpError {\n  constructor(toolName: string) {\n    super(\n      `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,\n      McpErrorCode.AuthenticationFailed,\n      { toolName },\n    );\n    this.name = 'MissingIdentityError';\n  }\n}\n\n/** Identity envelope was present but the verifier rejected it. */\nexport class IdentityVerificationError extends OpenAgentMcpError {\n  constructor(toolName: string, cause: unknown) {\n    super(\n      `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,\n      McpErrorCode.AuthenticationFailed,\n      { toolName, cause: formatCause(cause) },\n    );\n    this.name = 'IdentityVerificationError';\n  }\n}\n\n/** Caller's verified identity does not hold the required scopes. */\nexport class AuthorizationDeniedError extends OpenAgentMcpError {\n  constructor(\n    toolName: string,\n    requiredScopes: ReadonlyArray<string>,\n    heldScopes: ReadonlyArray<string>,\n  ) {\n    super(\n      `Tool '${toolName}' requires scopes [${requiredScopes.join(', ')}], caller holds [${heldScopes.join(', ')}]`,\n      McpErrorCode.AuthorizationDenied,\n      {\n        toolName,\n        requiredScopes: [...requiredScopes],\n        heldScopes: [...heldScopes],\n      },\n    );\n    this.name = 'AuthorizationDeniedError';\n  }\n}\n\n/** Skills policy hook returned `allow: false`. */\nexport class SkillsPolicyDeniedError extends OpenAgentMcpError {\n  constructor(toolName: string, reason: string | undefined) {\n    super(\n      `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ''}`,\n      McpErrorCode.SkillsPolicyDenied,\n      reason !== undefined ? { toolName, reason } : { toolName },\n    );\n    this.name = 'SkillsPolicyDeniedError';\n  }\n}\n\nfunction formatCause(cause: unknown): string {\n  if (cause instanceof Error) {\n    return cause.message;\n  }\n  if (typeof cause === 'string') {\n    return cause;\n  }\n  return 'unknown error';\n}\n"]}

package/dist/errors.d.cts

@@ -0,0 +1,64 @@
+/**
+ * Error types for @openagentid/mcp.
+ *
+ * These map onto MCP JSON-RPC error codes so callers see consistent
+ * failure modes regardless of which middleware step rejected the call.
+ *
+ * Reference: https://www.jsonrpc.org/specification#error_object
+ */
+/** Standard JSON-RPC + MCP error codes used by the middleware. */
+declare const McpErrorCode: {
+    /** -32600 — request was malformed at the JSON-RPC layer. */
+    readonly InvalidRequest: -32600;
+    /** -32601 — the requested method/tool was not found. */
+    readonly MethodNotFound: -32601;
+    /** -32602 — params failed validation. */
+    readonly InvalidParams: -32602;
+    /** -32603 — internal server error. */
+    readonly InternalError: -32603;
+    /** -32000 — generic server error (used for auth failures by default). */
+    readonly ServerError: -32000;
+    /** -32001 — identity verification failed. */
+    readonly AuthenticationFailed: -32001;
+    /** -32002 — caller does not hold the required scope. */
+    readonly AuthorizationDenied: -32002;
+    /** -32003 — skills policy rejected the call. */
+    readonly SkillsPolicyDenied: -32003;
+};
+type McpErrorCodeValue = (typeof McpErrorCode)[keyof typeof McpErrorCode];
+/**
+ * Base class for all middleware errors. Subclasses set a default
+ * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.
+ */
+declare class OpenAgentMcpError extends Error {
+    readonly code: McpErrorCodeValue;
+    readonly data?: Record<string, unknown>;
+    constructor(message: string, code: McpErrorCodeValue, data?: Record<string, unknown>);
+    /**
+     * Convert to a plain JSON-RPC error payload that the MCP SDK can
+     * serialize over the wire.
+     */
+    toJsonRpcError(): {
+        code: McpErrorCodeValue;
+        message: string;
+        data?: Record<string, unknown>;
+    };
+}
+/** Caller did not present an OpenAgent identity envelope. */
+declare class MissingIdentityError extends OpenAgentMcpError {
+    constructor(toolName: string);
+}
+/** Identity envelope was present but the verifier rejected it. */
+declare class IdentityVerificationError extends OpenAgentMcpError {
+    constructor(toolName: string, cause: unknown);
+}
+/** Caller's verified identity does not hold the required scopes. */
+declare class AuthorizationDeniedError extends OpenAgentMcpError {
+    constructor(toolName: string, requiredScopes: ReadonlyArray<string>, heldScopes: ReadonlyArray<string>);
+}
+/** Skills policy hook returned `allow: false`. */
+declare class SkillsPolicyDeniedError extends OpenAgentMcpError {
+    constructor(toolName: string, reason: string | undefined);
+}
+
+export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, type McpErrorCodeValue, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError };

package/dist/errors.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Error types for @openagentid/mcp.
+ *
+ * These map onto MCP JSON-RPC error codes so callers see consistent
+ * failure modes regardless of which middleware step rejected the call.
+ *
+ * Reference: https://www.jsonrpc.org/specification#error_object
+ */
+/** Standard JSON-RPC + MCP error codes used by the middleware. */
+declare const McpErrorCode: {
+    /** -32600 — request was malformed at the JSON-RPC layer. */
+    readonly InvalidRequest: -32600;
+    /** -32601 — the requested method/tool was not found. */
+    readonly MethodNotFound: -32601;
+    /** -32602 — params failed validation. */
+    readonly InvalidParams: -32602;
+    /** -32603 — internal server error. */
+    readonly InternalError: -32603;
+    /** -32000 — generic server error (used for auth failures by default). */
+    readonly ServerError: -32000;
+    /** -32001 — identity verification failed. */
+    readonly AuthenticationFailed: -32001;
+    /** -32002 — caller does not hold the required scope. */
+    readonly AuthorizationDenied: -32002;
+    /** -32003 — skills policy rejected the call. */
+    readonly SkillsPolicyDenied: -32003;
+};
+type McpErrorCodeValue = (typeof McpErrorCode)[keyof typeof McpErrorCode];
+/**
+ * Base class for all middleware errors. Subclasses set a default
+ * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.
+ */
+declare class OpenAgentMcpError extends Error {
+    readonly code: McpErrorCodeValue;
+    readonly data?: Record<string, unknown>;
+    constructor(message: string, code: McpErrorCodeValue, data?: Record<string, unknown>);
+    /**
+     * Convert to a plain JSON-RPC error payload that the MCP SDK can
+     * serialize over the wire.
+     */
+    toJsonRpcError(): {
+        code: McpErrorCodeValue;
+        message: string;
+        data?: Record<string, unknown>;
+    };
+}
+/** Caller did not present an OpenAgent identity envelope. */
+declare class MissingIdentityError extends OpenAgentMcpError {
+    constructor(toolName: string);
+}
+/** Identity envelope was present but the verifier rejected it. */
+declare class IdentityVerificationError extends OpenAgentMcpError {
+    constructor(toolName: string, cause: unknown);
+}
+/** Caller's verified identity does not hold the required scopes. */
+declare class AuthorizationDeniedError extends OpenAgentMcpError {
+    constructor(toolName: string, requiredScopes: ReadonlyArray<string>, heldScopes: ReadonlyArray<string>);
+}
+/** Skills policy hook returned `allow: false`. */
+declare class SkillsPolicyDeniedError extends OpenAgentMcpError {
+    constructor(toolName: string, reason: string | undefined);
+}
+
+export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, type McpErrorCodeValue, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError };

package/dist/errors.js

@@ -0,0 +1,98 @@
+// src/errors.ts
+var McpErrorCode = {
+  /** -32600 — request was malformed at the JSON-RPC layer. */
+  InvalidRequest: -32600,
+  /** -32601 — the requested method/tool was not found. */
+  MethodNotFound: -32601,
+  /** -32602 — params failed validation. */
+  InvalidParams: -32602,
+  /** -32603 — internal server error. */
+  InternalError: -32603,
+  /** -32000 — generic server error (used for auth failures by default). */
+  ServerError: -32e3,
+  /** -32001 — identity verification failed. */
+  AuthenticationFailed: -32001,
+  /** -32002 — caller does not hold the required scope. */
+  AuthorizationDenied: -32002,
+  /** -32003 — skills policy rejected the call. */
+  SkillsPolicyDenied: -32003
+};
+var OpenAgentMcpError = class extends Error {
+  code;
+  data;
+  constructor(message, code, data) {
+    super(message);
+    this.name = "OpenAgentMcpError";
+    this.code = code;
+    if (data !== void 0) {
+      this.data = data;
+    }
+  }
+  /**
+   * Convert to a plain JSON-RPC error payload that the MCP SDK can
+   * serialize over the wire.
+   */
+  toJsonRpcError() {
+    if (this.data !== void 0) {
+      return { code: this.code, message: this.message, data: this.data };
+    }
+    return { code: this.code, message: this.message };
+  }
+};
+var MissingIdentityError = class extends OpenAgentMcpError {
+  constructor(toolName) {
+    super(
+      `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,
+      McpErrorCode.AuthenticationFailed,
+      { toolName }
+    );
+    this.name = "MissingIdentityError";
+  }
+};
+var IdentityVerificationError = class extends OpenAgentMcpError {
+  constructor(toolName, cause) {
+    super(
+      `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,
+      McpErrorCode.AuthenticationFailed,
+      { toolName, cause: formatCause(cause) }
+    );
+    this.name = "IdentityVerificationError";
+  }
+};
+var AuthorizationDeniedError = class extends OpenAgentMcpError {
+  constructor(toolName, requiredScopes, heldScopes) {
+    super(
+      `Tool '${toolName}' requires scopes [${requiredScopes.join(", ")}], caller holds [${heldScopes.join(", ")}]`,
+      McpErrorCode.AuthorizationDenied,
+      {
+        toolName,
+        requiredScopes: [...requiredScopes],
+        heldScopes: [...heldScopes]
+      }
+    );
+    this.name = "AuthorizationDeniedError";
+  }
+};
+var SkillsPolicyDeniedError = class extends OpenAgentMcpError {
+  constructor(toolName, reason) {
+    super(
+      `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ""}`,
+      McpErrorCode.SkillsPolicyDenied,
+      reason !== void 0 ? { toolName, reason } : { toolName }
+    );
+    this.name = "SkillsPolicyDeniedError";
+  }
+};
+function formatCause(cause) {
+  if (cause instanceof Error) {
+    return cause.message;
+  }
+  if (typeof cause === "string") {
+    return cause;
+  }
+  return "unknown error";
+}
+
+export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError };
+//# sourceMappingURL=errors.js.map
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts"],"names":[],"mappings":";AAUO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,WAAA,EAAa,KAAA;AAAA;AAAA,EAEb,oBAAA,EAAsB,MAAA;AAAA;AAAA,EAEtB,mBAAA,EAAqB,MAAA;AAAA;AAAA,EAErB,kBAAA,EAAoB;AACtB;AASO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3B,IAAA;AAAA,EACA,IAAA;AAAA,EAEhB,WAAA,CACE,OAAA,EACA,IAAA,EACA,IAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,cAAA,GAIE;AACA,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,IACnE;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,EAClD;AACF;AAGO,IAAM,oBAAA,GAAN,cAAmC,iBAAA,CAAkB;AAAA,EAC1D,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA;AAAA,MACE,SAAS,QAAQ,CAAA,4DAAA,CAAA;AAAA,MACjB,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA;AAAS,KACb;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAGO,IAAM,yBAAA,GAAN,cAAwC,iBAAA,CAAkB;AAAA,EAC/D,WAAA,CAAY,UAAkB,KAAA,EAAgB;AAC5C,IAAA,KAAA;AAAA,MACE,CAAA,uCAAA,EAA0C,QAAQ,CAAA,GAAA,EAAM,WAAA,CAAY,KAAK,CAAC,CAAA,CAAA;AAAA,MAC1E,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA,EAAU,KAAA,EAAO,WAAA,CAAY,KAAK,CAAA;AAAE,KACxC;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAGO,IAAM,wBAAA,GAAN,cAAuC,iBAAA,CAAkB;AAAA,EAC9D,WAAA,CACE,QAAA,EACA,cAAA,EACA,UAAA,EACA;AACA,IAAA,KAAA;AAAA,MACE,CAAA,MAAA,EAAS,QAAQ,CAAA,mBAAA,EAAsB,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACzG,YAAA,CAAa,mBAAA;AAAA,MACb;AAAA,QACE,QAAA;AAAA,QACA,cAAA,EAAgB,CAAC,GAAG,cAAc,CAAA;AAAA,QAClC,UAAA,EAAY,CAAC,GAAG,UAAU;AAAA;AAC5B,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAGO,IAAM,uBAAA,GAAN,cAAsC,iBAAA,CAAkB;AAAA,EAC7D,WAAA,CAAY,UAAkB,MAAA,EAA4B;AACxD,IAAA,KAAA;AAAA,MACE,8BAA8B,QAAQ,CAAA,CAAA,EAAI,SAAS,CAAA,EAAA,EAAK,MAAM,KAAK,EAAE,CAAA,CAAA;AAAA,MACrE,YAAA,CAAa,kBAAA;AAAA,MACb,WAAW,MAAA,GAAY,EAAE,UAAU,MAAA,EAAO,GAAI,EAAE,QAAA;AAAS,KAC3D;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,KAAA,CAAM,OAAA;AAAA,EACf;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,eAAA;AACT","file":"errors.js","sourcesContent":["/**\n * Error types for @openagentid/mcp.\n *\n * These map onto MCP JSON-RPC error codes so callers see consistent\n * failure modes regardless of which middleware step rejected the call.\n *\n * Reference: https://www.jsonrpc.org/specification#error_object\n */\n\n/** Standard JSON-RPC + MCP error codes used by the middleware. */\nexport const McpErrorCode = {\n  /** -32600 — request was malformed at the JSON-RPC layer. */\n  InvalidRequest: -32600,\n  /** -32601 — the requested method/tool was not found. */\n  MethodNotFound: -32601,\n  /** -32602 — params failed validation. */\n  InvalidParams: -32602,\n  /** -32603 — internal server error. */\n  InternalError: -32603,\n  /** -32000 — generic server error (used for auth failures by default). */\n  ServerError: -32000,\n  /** -32001 — identity verification failed. */\n  AuthenticationFailed: -32001,\n  /** -32002 — caller does not hold the required scope. */\n  AuthorizationDenied: -32002,\n  /** -32003 — skills policy rejected the call. */\n  SkillsPolicyDenied: -32003,\n} as const;\n\nexport type McpErrorCodeValue =\n  (typeof McpErrorCode)[keyof typeof McpErrorCode];\n\n/**\n * Base class for all middleware errors. Subclasses set a default\n * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.\n */\nexport class OpenAgentMcpError extends Error {\n  public readonly code: McpErrorCodeValue;\n  public readonly data?: Record<string, unknown>;\n\n  constructor(\n    message: string,\n    code: McpErrorCodeValue,\n    data?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'OpenAgentMcpError';\n    this.code = code;\n    if (data !== undefined) {\n      this.data = data;\n    }\n  }\n\n  /**\n   * Convert to a plain JSON-RPC error payload that the MCP SDK can\n   * serialize over the wire.\n   */\n  toJsonRpcError(): {\n    code: McpErrorCodeValue;\n    message: string;\n    data?: Record<string, unknown>;\n  } {\n    if (this.data !== undefined) {\n      return { code: this.code, message: this.message, data: this.data };\n    }\n    return { code: this.code, message: this.message };\n  }\n}\n\n/** Caller did not present an OpenAgent identity envelope. */\nexport class MissingIdentityError extends OpenAgentMcpError {\n  constructor(toolName: string) {\n    super(\n      `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,\n      McpErrorCode.AuthenticationFailed,\n      { toolName },\n    );\n    this.name = 'MissingIdentityError';\n  }\n}\n\n/** Identity envelope was present but the verifier rejected it. */\nexport class IdentityVerificationError extends OpenAgentMcpError {\n  constructor(toolName: string, cause: unknown) {\n    super(\n      `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,\n      McpErrorCode.AuthenticationFailed,\n      { toolName, cause: formatCause(cause) },\n    );\n    this.name = 'IdentityVerificationError';\n  }\n}\n\n/** Caller's verified identity does not hold the required scopes. */\nexport class AuthorizationDeniedError extends OpenAgentMcpError {\n  constructor(\n    toolName: string,\n    requiredScopes: ReadonlyArray<string>,\n    heldScopes: ReadonlyArray<string>,\n  ) {\n    super(\n      `Tool '${toolName}' requires scopes [${requiredScopes.join(', ')}], caller holds [${heldScopes.join(', ')}]`,\n      McpErrorCode.AuthorizationDenied,\n      {\n        toolName,\n        requiredScopes: [...requiredScopes],\n        heldScopes: [...heldScopes],\n      },\n    );\n    this.name = 'AuthorizationDeniedError';\n  }\n}\n\n/** Skills policy hook returned `allow: false`. */\nexport class SkillsPolicyDeniedError extends OpenAgentMcpError {\n  constructor(toolName: string, reason: string | undefined) {\n    super(\n      `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ''}`,\n      McpErrorCode.SkillsPolicyDenied,\n      reason !== undefined ? { toolName, reason } : { toolName },\n    );\n    this.name = 'SkillsPolicyDeniedError';\n  }\n}\n\nfunction formatCause(cause: unknown): string {\n  if (cause instanceof Error) {\n    return cause.message;\n  }\n  if (typeof cause === 'string') {\n    return cause;\n  }\n  return 'unknown error';\n}\n"]}