@openagentid/mcp 0.1.0

package/dist/index.cjs

@@ -0,0 +1,524 @@
+'use strict';
+
+// src/errors.ts
+var McpErrorCode = {
+  /** -32600 — request was malformed at the JSON-RPC layer. */
+  InvalidRequest: -32600,
+  /** -32601 — the requested method/tool was not found. */
+  MethodNotFound: -32601,
+  /** -32602 — params failed validation. */
+  InvalidParams: -32602,
+  /** -32603 — internal server error. */
+  InternalError: -32603,
+  /** -32000 — generic server error (used for auth failures by default). */
+  ServerError: -32e3,
+  /** -32001 — identity verification failed. */
+  AuthenticationFailed: -32001,
+  /** -32002 — caller does not hold the required scope. */
+  AuthorizationDenied: -32002,
+  /** -32003 — skills policy rejected the call. */
+  SkillsPolicyDenied: -32003
+};
+var OpenAgentMcpError = class extends Error {
+  code;
+  data;
+  constructor(message, code, data) {
+    super(message);
+    this.name = "OpenAgentMcpError";
+    this.code = code;
+    if (data !== void 0) {
+      this.data = data;
+    }
+  }
+  /**
+   * Convert to a plain JSON-RPC error payload that the MCP SDK can
+   * serialize over the wire.
+   */
+  toJsonRpcError() {
+    if (this.data !== void 0) {
+      return { code: this.code, message: this.message, data: this.data };
+    }
+    return { code: this.code, message: this.message };
+  }
+};
+var MissingIdentityError = class extends OpenAgentMcpError {
+  constructor(toolName) {
+    super(
+      `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,
+      McpErrorCode.AuthenticationFailed,
+      { toolName }
+    );
+    this.name = "MissingIdentityError";
+  }
+};
+var IdentityVerificationError = class extends OpenAgentMcpError {
+  constructor(toolName, cause) {
+    super(
+      `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,
+      McpErrorCode.AuthenticationFailed,
+      { toolName, cause: formatCause(cause) }
+    );
+    this.name = "IdentityVerificationError";
+  }
+};
+var AuthorizationDeniedError = class extends OpenAgentMcpError {
+  constructor(toolName, requiredScopes, heldScopes) {
+    super(
+      `Tool '${toolName}' requires scopes [${requiredScopes.join(", ")}], caller holds [${heldScopes.join(", ")}]`,
+      McpErrorCode.AuthorizationDenied,
+      {
+        toolName,
+        requiredScopes: [...requiredScopes],
+        heldScopes: [...heldScopes]
+      }
+    );
+    this.name = "AuthorizationDeniedError";
+  }
+};
+var SkillsPolicyDeniedError = class extends OpenAgentMcpError {
+  constructor(toolName, reason) {
+    super(
+      `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ""}`,
+      McpErrorCode.SkillsPolicyDenied,
+      reason !== void 0 ? { toolName, reason } : { toolName }
+    );
+    this.name = "SkillsPolicyDeniedError";
+  }
+};
+function formatCause(cause) {
+  if (cause instanceof Error) {
+    return cause.message;
+  }
+  if (typeof cause === "string") {
+    return cause;
+  }
+  return "unknown error";
+}
+
+// src/types.ts
+var defaultScopeFormat = (toolName) => `mcp:${toolName}:invoke`;
+var defaultRequireScopes = (toolName) => [defaultScopeFormat(toolName)];
+
+// src/server.ts
+var TOOL_REGISTRATION_METHODS = ["tool", "registerTool"];
+function withOpenAgent(server, config) {
+  validateConfig(config);
+  const middleware = new ToolMiddleware(config);
+  return new Proxy(server, {
+    get(target, property, receiver) {
+      const value = Reflect.get(target, property, receiver);
+      if (typeof value !== "function") {
+        return value;
+      }
+      if (typeof property === "string" && TOOL_REGISTRATION_METHODS.includes(property)) {
+        return wrapRegistrationMethod(
+          value,
+          target,
+          middleware
+        );
+      }
+      return value.bind(target);
+    }
+  });
+}
+function validateConfig(config) {
+  if (config === null || typeof config !== "object") {
+    throw new TypeError("OpenAgentMcpConfig must be an object");
+  }
+  if (config.agent === void 0 || config.agent === null) {
+    throw new TypeError("OpenAgentMcpConfig.agent is required");
+  }
+  if (config.agent.verifier === void 0 || typeof config.agent.verifier.verify !== "function") {
+    throw new TypeError("OpenAgentMcpConfig.agent.verifier.verify is required");
+  }
+}
+function wrapRegistrationMethod(original, thisArg, middleware) {
+  return function wrapped(...args) {
+    const toolName = extractToolName(args);
+    const callbackIndex = findCallbackIndex(args);
+    if (callbackIndex === -1) {
+      return original.apply(thisArg, args);
+    }
+    const userCallback = args[callbackIndex];
+    const wrappedCallback = middleware.wrap(toolName, userCallback);
+    const newArgs = [...args];
+    newArgs[callbackIndex] = wrappedCallback;
+    return original.apply(thisArg, newArgs);
+  };
+}
+function extractToolName(args) {
+  if (args.length > 0 && typeof args[0] === "string") {
+    return args[0];
+  }
+  return "<unknown>";
+}
+function findCallbackIndex(args) {
+  for (let i = args.length - 1; i >= 0; i -= 1) {
+    if (typeof args[i] === "function") {
+      return i;
+    }
+  }
+  return -1;
+}
+var ToolMiddleware = class {
+  agent;
+  requireScopes;
+  requireIdentity;
+  skillsPolicy;
+  preCall;
+  postCall;
+  onError;
+  constructor(config) {
+    this.agent = config.agent;
+    this.requireScopes = config.requireScopes ?? defaultRequireScopes;
+    this.requireIdentity = config.requireIdentity ?? true;
+    this.skillsPolicy = config.skillsPolicy;
+    this.preCall = config.preCall;
+    this.postCall = config.postCall;
+    this.onError = config.onError;
+  }
+  wrap(toolName, userCallback) {
+    const middleware = this;
+    return async function wrappedCallback(...callbackArgs) {
+      const { args, extra } = splitToolArgs(callbackArgs);
+      const startedAt = nowMs();
+      let identity = null;
+      try {
+        identity = await middleware.runAuthPipeline(toolName, args, extra);
+        if (middleware.preCall !== void 0) {
+          await middleware.preCall({ toolName, args, identity });
+        }
+        const result = await Promise.resolve(
+          userCallback.apply(this, callbackArgs)
+        );
+        const stamped = stampAuditMeta(result, identity);
+        if (middleware.postCall !== void 0) {
+          await middleware.postCall({
+            toolName,
+            args,
+            identity,
+            durationMs: nowMs() - startedAt,
+            result: stamped
+          });
+        }
+        return stamped;
+      } catch (error) {
+        if (middleware.onError !== void 0) {
+          try {
+            await middleware.onError({ toolName, args, identity, error });
+          } catch {
+          }
+        }
+        throw normalizeError(error);
+      }
+    };
+  }
+  async runAuthPipeline(toolName, args, extra) {
+    const identityEnvelope = extractIdentityEnvelope(extra);
+    if (identityEnvelope === null) {
+      if (this.requireIdentity) {
+        throw new MissingIdentityError(toolName);
+      }
+      return ANONYMOUS_IDENTITY;
+    }
+    const requiredScopes = this.requireScopes(toolName, args);
+    let identity;
+    try {
+      identity = await this.agent.verifier.verify(
+        identityEnvelope,
+        requiredScopes
+      );
+    } catch (cause) {
+      throw new IdentityVerificationError(toolName, cause);
+    }
+    enforceScopes(toolName, requiredScopes, identity.scopes);
+    if (this.skillsPolicy !== void 0) {
+      const decision = await Promise.resolve(
+        this.skillsPolicy({ toolName, args, identity })
+      );
+      if (!decision.allow) {
+        throw new SkillsPolicyDeniedError(toolName, decision.reason);
+      }
+    }
+    return identity;
+  }
+};
+function enforceScopes(toolName, required, held) {
+  const missing = required.filter((scope) => !held.includes(scope));
+  if (missing.length > 0) {
+    throw new AuthorizationDeniedError(toolName, required, held);
+  }
+}
+function splitToolArgs(callbackArgs) {
+  if (callbackArgs.length === 0) {
+    return { args: void 0, extra: void 0 };
+  }
+  if (callbackArgs.length === 1) {
+    return { args: void 0, extra: callbackArgs[0] };
+  }
+  return {
+    args: callbackArgs[0],
+    extra: callbackArgs[callbackArgs.length - 1]
+  };
+}
+function extractIdentityEnvelope(extra) {
+  if (extra === null || typeof extra !== "object") {
+    return null;
+  }
+  const meta = extra._meta;
+  if (meta === null || typeof meta !== "object") {
+    return null;
+  }
+  const openAgent = meta.openagent;
+  if (openAgent === null || typeof openAgent !== "object") {
+    return null;
+  }
+  const identity = openAgent.identity;
+  if (identity === null || typeof identity !== "object") {
+    return null;
+  }
+  const candidate = identity;
+  if (typeof candidate["did"] !== "string" || typeof candidate["proof"] !== "string") {
+    return null;
+  }
+  const envelope = {
+    did: candidate["did"],
+    proof: candidate["proof"]
+  };
+  if (typeof candidate["nonce"] === "string") {
+    envelope.nonce = candidate["nonce"];
+  }
+  if (typeof candidate["context"] === "object" && candidate["context"] !== null) {
+    envelope.context = candidate["context"];
+  }
+  return envelope;
+}
+function stampAuditMeta(result, identity) {
+  if (result === null || typeof result !== "object") {
+    return result;
+  }
+  const auditMeta = {
+    audit_id: identity.auditId,
+    verified_did: identity.did,
+    scopes: identity.scopes
+  };
+  const existingMeta = typeof result._meta === "object" && result._meta !== null ? result._meta : {};
+  return {
+    ...result,
+    _meta: {
+      ...existingMeta,
+      openagent: auditMeta
+    }
+  };
+}
+function normalizeError(error) {
+  if (error instanceof OpenAgentMcpError) {
+    const jsonRpc = error.toJsonRpcError();
+    Object.assign(error, { code: jsonRpc.code, data: jsonRpc.data });
+  }
+  return error;
+}
+function nowMs() {
+  if (typeof performance !== "undefined" && typeof performance.now === "function") {
+    return performance.now();
+  }
+  return Date.now();
+}
+var ANONYMOUS_IDENTITY = {
+  did: "did:oas:anonymous",
+  scopes: [],
+  auditId: "anonymous",
+  claims: {}
+};
+
+// src/client.ts
+function withOpenAgentClient(client, config) {
+  if (config === null || typeof config !== "object") {
+    throw new TypeError("OpenAgentClientConfig must be an object");
+  }
+  if (config.agent === void 0 || config.agent === null) {
+    throw new TypeError("OpenAgentClientConfig.agent is required");
+  }
+  if (typeof config.agent.signRequest !== "function") {
+    throw new TypeError("OpenAgentClientConfig.agent.signRequest is required");
+  }
+  const interceptor = new ClientInterceptor(config);
+  return new Proxy(client, {
+    get(target, property, receiver) {
+      const value = Reflect.get(target, property, receiver);
+      if (typeof value !== "function") {
+        return value;
+      }
+      if (property === "callTool") {
+        return interceptor.wrapCallTool(
+          value,
+          target
+        );
+      }
+      return value.bind(target);
+    }
+  });
+}
+var ClientInterceptor = class {
+  agent;
+  audience;
+  beforeCall;
+  constructor(config) {
+    this.agent = config.agent;
+    this.audience = config.audience;
+    this.beforeCall = config.beforeCall;
+  }
+  wrapCallTool(original, thisArg) {
+    const interceptor = this;
+    return async function wrappedCallTool(params, ...rest) {
+      const signed = await interceptor.signParams(params);
+      let toSend = signed;
+      if (interceptor.beforeCall !== void 0) {
+        const replacement = await Promise.resolve(
+          interceptor.beforeCall(signed)
+        );
+        if (replacement !== void 0) {
+          toSend = {
+            ...replacement,
+            _meta: replacement._meta ?? signed._meta
+          };
+        }
+      }
+      return original.call(thisArg, toSend, ...rest);
+    };
+  }
+  async signParams(params) {
+    const identity = await this.agent.signRequest(params.name, this.audience);
+    const existingMeta = params._meta ?? {};
+    const existingOpenAgent = typeof existingMeta["openagent"] === "object" && existingMeta["openagent"] !== null ? existingMeta["openagent"] : {};
+    return {
+      ...params,
+      _meta: {
+        ...existingMeta,
+        openagent: {
+          ...existingOpenAgent,
+          identity
+        }
+      }
+    };
+  }
+};
+function buildIdentityMeta(identity) {
+  return {
+    openagent: {
+      identity: {
+        did: identity.did,
+        proof: identity.proof,
+        ...identity.nonce !== void 0 ? { nonce: identity.nonce } : {},
+        ...identity.context !== void 0 ? { context: identity.context } : {}
+      }
+    }
+  };
+}
+
+// src/skills.ts
+var DEFAULT_SKILL_TOOL_NAMES = [
+  "invoke_skill",
+  "run_skill",
+  "execute_skill",
+  "skill.invoke",
+  "skill.run"
+];
+var InMemorySkillsPolicyStore = class _InMemorySkillsPolicyStore {
+  rules;
+  constructor(rules = []) {
+    this.rules = new Map(rules.map((rule) => [rule.skillName, rule]));
+  }
+  lookup(skillName) {
+    return this.rules.get(skillName) ?? null;
+  }
+  /** Returns a NEW store with the given rule applied (immutable update). */
+  withRule(rule) {
+    const next = new Map(this.rules);
+    next.set(rule.skillName, rule);
+    return new _InMemorySkillsPolicyStore([...next.values()]);
+  }
+};
+function createSkillsPolicy(options) {
+  const isSkillTool = options.isSkillTool ?? ((toolName) => DEFAULT_SKILL_TOOL_NAMES.includes(toolName));
+  const extractSkillName = options.extractSkillName ?? defaultExtractSkillName;
+  const defaultDecision = options.defaultDecision ?? {
+    allow: true
+  };
+  return async ({
+    toolName,
+    args,
+    identity
+  }) => {
+    if (!isSkillTool(toolName)) {
+      return defaultDecision;
+    }
+    const skillName = extractSkillName(args);
+    if (skillName === null) {
+      return {
+        allow: false,
+        reason: `Skill tool '${toolName}' invoked without a skill name`
+      };
+    }
+    const rule = await Promise.resolve(options.store.lookup(skillName));
+    if (rule === null) {
+      return {
+        allow: false,
+        reason: `No policy entry for skill '${skillName}'`
+      };
+    }
+    if (rule.dids === null) {
+      return { allow: true };
+    }
+    if (rule.dids.includes(identity.did)) {
+      return { allow: true };
+    }
+    return {
+      allow: false,
+      reason: rule.reason ?? `DID '${identity.did}' is not authorized for skill '${skillName}'`
+    };
+  };
+}
+function defaultExtractSkillName(args) {
+  if (args === null || typeof args !== "object") {
+    return null;
+  }
+  const record = args;
+  const skill = record["skill"];
+  if (typeof skill === "string" && skill.length > 0) {
+    return skill;
+  }
+  const skillName = record["skillName"];
+  if (typeof skillName === "string" && skillName.length > 0) {
+    return skillName;
+  }
+  return null;
+}
+function combineSkillsPolicies(first, second) {
+  return async (input) => {
+    const a = await Promise.resolve(first(input));
+    if (!a.allow) {
+      return a;
+    }
+    return Promise.resolve(second(input));
+  };
+}
+
+exports.ANONYMOUS_IDENTITY = ANONYMOUS_IDENTITY;
+exports.AuthorizationDeniedError = AuthorizationDeniedError;
+exports.DEFAULT_SKILL_TOOL_NAMES = DEFAULT_SKILL_TOOL_NAMES;
+exports.IdentityVerificationError = IdentityVerificationError;
+exports.InMemorySkillsPolicyStore = InMemorySkillsPolicyStore;
+exports.McpErrorCode = McpErrorCode;
+exports.MissingIdentityError = MissingIdentityError;
+exports.OpenAgentMcpError = OpenAgentMcpError;
+exports.SkillsPolicyDeniedError = SkillsPolicyDeniedError;
+exports.buildIdentityMeta = buildIdentityMeta;
+exports.combineSkillsPolicies = combineSkillsPolicies;
+exports.createSkillsPolicy = createSkillsPolicy;
+exports.defaultRequireScopes = defaultRequireScopes;
+exports.defaultScopeFormat = defaultScopeFormat;
+exports.withOpenAgent = withOpenAgent;
+exports.withOpenAgentClient = withOpenAgentClient;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/types.ts","../src/server.ts","../src/client.ts","../src/skills.ts"],"names":[],"mappings":";;;AAUO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,WAAA,EAAa,KAAA;AAAA;AAAA,EAEb,oBAAA,EAAsB,MAAA;AAAA;AAAA,EAEtB,mBAAA,EAAqB,MAAA;AAAA;AAAA,EAErB,kBAAA,EAAoB;AACtB;AASO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3B,IAAA;AAAA,EACA,IAAA;AAAA,EAEhB,WAAA,CACE,OAAA,EACA,IAAA,EACA,IAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,cAAA,GAIE;AACA,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,IACnE;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,EAClD;AACF;AAGO,IAAM,oBAAA,GAAN,cAAmC,iBAAA,CAAkB;AAAA,EAC1D,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA;AAAA,MACE,SAAS,QAAQ,CAAA,4DAAA,CAAA;AAAA,MACjB,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA;AAAS,KACb;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAGO,IAAM,yBAAA,GAAN,cAAwC,iBAAA,CAAkB;AAAA,EAC/D,WAAA,CAAY,UAAkB,KAAA,EAAgB;AAC5C,IAAA,KAAA;AAAA,MACE,CAAA,uCAAA,EAA0C,QAAQ,CAAA,GAAA,EAAM,WAAA,CAAY,KAAK,CAAC,CAAA,CAAA;AAAA,MAC1E,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA,EAAU,KAAA,EAAO,WAAA,CAAY,KAAK,CAAA;AAAE,KACxC;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAGO,IAAM,wBAAA,GAAN,cAAuC,iBAAA,CAAkB;AAAA,EAC9D,WAAA,CACE,QAAA,EACA,cAAA,EACA,UAAA,EACA;AACA,IAAA,KAAA;AAAA,MACE,CAAA,MAAA,EAAS,QAAQ,CAAA,mBAAA,EAAsB,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACzG,YAAA,CAAa,mBAAA;AAAA,MACb;AAAA,QACE,QAAA;AAAA,QACA,cAAA,EAAgB,CAAC,GAAG,cAAc,CAAA;AAAA,QAClC,UAAA,EAAY,CAAC,GAAG,UAAU;AAAA;AAC5B,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAGO,IAAM,uBAAA,GAAN,cAAsC,iBAAA,CAAkB;AAAA,EAC7D,WAAA,CAAY,UAAkB,MAAA,EAA4B;AACxD,IAAA,KAAA;AAAA,MACE,8BAA8B,QAAQ,CAAA,CAAA,EAAI,SAAS,CAAA,EAAA,EAAK,MAAM,KAAK,EAAE,CAAA,CAAA;AAAA,MACrE,YAAA,CAAa,kBAAA;AAAA,MACb,WAAW,MAAA,GAAY,EAAE,UAAU,MAAA,EAAO,GAAI,EAAE,QAAA;AAAS,KAC3D;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,KAAA,CAAM,OAAA;AAAA,EACf;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,eAAA;AACT;;;AC6DO,IAAM,kBAAA,GAAqB,CAAC,QAAA,KACjC,CAAA,IAAA,EAAO,QAAQ,CAAA,OAAA;AAMV,IAAM,uBAAuB,CAAC,QAAA,KACnC,CAAC,kBAAA,CAAmB,QAAQ,CAAC;;;ACvI/B,IAAM,yBAAA,GAA4B,CAAC,MAAA,EAAQ,cAAc,CAAA;AAwBlD,SAAS,aAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,cAAA,CAAe,MAAM,CAAA;AACrB,EAAA,MAAM,UAAA,GAAa,IAAI,cAAA,CAAe,MAAM,CAAA;AAE5C,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IACE,OAAO,QAAA,KAAa,QAAA,IACpB,yBAAA,CAA0B,QAAA,CAAS,QAAkC,CAAA,EACrE;AACA,QAAA,OAAO,sBAAA;AAAA,UACL,KAAA;AAAA,UACA,MAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,SAAS,eAAe,MAAA,EAAkC;AACxD,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,sCAAsC,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,sCAAsC,CAAA;AAAA,EAC5D;AACA,EAAA,IACE,MAAA,CAAO,MAAM,QAAA,KAAa,MAAA,IAC1B,OAAO,MAAA,CAAO,KAAA,CAAM,QAAA,CAAS,MAAA,KAAW,UAAA,EACxC;AACA,IAAA,MAAM,IAAI,UAAU,sDAAsD,CAAA;AAAA,EAC5E;AACF;AASA,SAAS,sBAAA,CACP,QAAA,EACA,OAAA,EACA,UAAA,EACiC;AACjC,EAAA,OAAO,SAAS,WAA0B,IAAA,EAA0B;AAClE,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,aAAA,GAAgB,kBAAkB,IAAI,CAAA;AAC5C,IAAA,IAAI,kBAAkB,EAAA,EAAI;AAGxB,MAAA,OAAO,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS,IAAI,CAAA;AAAA,IACrC;AACA,IAAA,MAAM,YAAA,GAAe,KAAK,aAAa,CAAA;AAGvC,IAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,IAAA,CAAK,QAAA,EAAU,YAAY,CAAA;AAC9D,IAAA,MAAM,OAAA,GAAU,CAAC,GAAG,IAAI,CAAA;AACxB,IAAA,OAAA,CAAQ,aAAa,CAAA,GAAI,eAAA;AACzB,IAAA,OAAO,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS,OAAO,CAAA;AAAA,EACxC,CAAA;AACF;AAEA,SAAS,gBAAgB,IAAA,EAAsC;AAC7D,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,OAAO,IAAA,CAAK,CAAC,MAAM,QAAA,EAAU;AAClD,IAAA,OAAO,KAAK,CAAC,CAAA;AAAA,EACf;AAGA,EAAA,OAAO,WAAA;AACT;AAEA,SAAS,kBAAkB,IAAA,EAAsC;AAI/D,EAAA,KAAA,IAAS,IAAI,IAAA,CAAK,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAC5C,IAAA,IAAI,OAAO,IAAA,CAAK,CAAC,CAAA,KAAM,UAAA,EAAY;AACjC,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,EAAA;AACT;AAKA,IAAM,iBAAN,MAAqB;AAAA,EACF,KAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA4B;AACtC,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,aAAA,GAAgB,OAAO,aAAA,IAAiB,oBAAA;AAC7C,IAAA,IAAA,CAAK,eAAA,GAAkB,OAAO,eAAA,IAAmB,IAAA;AACjD,IAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA;AAC3B,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AACtB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AAAA,EACxB;AAAA,EAEA,IAAA,CACE,UACA,YAAA,EAC0C;AAC1C,IAAA,MAAM,UAAA,GAAa,IAAA;AACnB,IAAA,OAAO,eAAe,mBAEjB,YAAA,EACe;AAMlB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,cAAc,YAAY,CAAA;AAClD,MAAA,MAAM,YAAY,KAAA,EAAM;AACxB,MAAA,IAAI,QAAA,GAAoC,IAAA;AAExC,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,UAAA,CAAW,eAAA,CAAgB,QAAA,EAAU,MAAM,KAAK,CAAA;AAEjE,QAAA,IAAI,UAAA,CAAW,YAAY,KAAA,CAAA,EAAW;AACpC,UAAA,MAAM,WAAW,OAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU,CAAA;AAAA,QACvD;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAA;AAAA,UAC3B,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,YAAY;AAAA,SACvC;AAEA,QAAA,MAAM,OAAA,GAAU,cAAA,CAAe,MAAA,EAAQ,QAAQ,CAAA;AAE/C,QAAA,IAAI,UAAA,CAAW,aAAa,KAAA,CAAA,EAAW;AACrC,UAAA,MAAM,WAAW,QAAA,CAAS;AAAA,YACxB,QAAA;AAAA,YACA,IAAA;AAAA,YACA,QAAA;AAAA,YACA,UAAA,EAAY,OAAM,GAAI,SAAA;AAAA,YACtB,MAAA,EAAQ;AAAA,WACT,CAAA;AAAA,QACH;AACA,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,KAAA,EAAgB;AACvB,QAAA,IAAI,UAAA,CAAW,YAAY,MAAA,EAAW;AAGpC,UAAA,IAAI;AACF,YAAA,MAAM,WAAW,OAAA,CAAQ,EAAE,UAAU,IAAA,EAAM,QAAA,EAAU,OAAO,CAAA;AAAA,UAC9D,CAAA,CAAA,MAAQ;AAAA,UAER;AAAA,QACF;AACA,QAAA,MAAM,eAAe,KAAK,CAAA;AAAA,MAC5B;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,eAAA,CACZ,QAAA,EACA,IAAA,EACA,KAAA,EAC2B;AAC3B,IAAA,MAAM,gBAAA,GAAmB,wBAAwB,KAAK,CAAA;AACtD,IAAA,IAAI,qBAAqB,IAAA,EAAM;AAC7B,MAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,QAAA,MAAM,IAAI,qBAAqB,QAAQ,CAAA;AAAA,MACzC;AAGA,MAAA,OAAO,kBAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,aAAA,CAAc,QAAA,EAAU,IAAI,CAAA;AACxD,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,MAAA;AAAA,QACnC,gBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF,SAAS,KAAA,EAAgB;AACvB,MAAA,MAAM,IAAI,yBAAA,CAA0B,QAAA,EAAU,KAAK,CAAA;AAAA,IACrD;AAEA,IAAA,aAAA,CAAc,QAAA,EAAU,cAAA,EAAgB,QAAA,CAAS,MAAM,CAAA;AAEvD,IAAA,IAAI,IAAA,CAAK,iBAAiB,MAAA,EAAW;AACnC,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA;AAAA,QAC7B,KAAK,YAAA,CAAa,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU;AAAA,OAChD;AACA,MAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACnB,QAAA,MAAM,IAAI,uBAAA,CAAwB,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA,MAC7D;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT;AACF,CAAA;AAEA,SAAS,aAAA,CACP,QAAA,EACA,QAAA,EACA,IAAA,EACM;AACN,EAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,UAAU,CAAC,IAAA,CAAK,QAAA,CAAS,KAAK,CAAC,CAAA;AAChE,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,wBAAA,CAAyB,QAAA,EAAU,QAAA,EAAU,IAAI,CAAA;AAAA,EAC7D;AACF;AAEA,SAAS,cAAc,YAAA,EAGrB;AACA,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAW,KAAA,EAAO,MAAA,EAAU;AAAA,EAC7C;AACA,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAE7B,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAW,KAAA,EAAO,YAAA,CAAa,CAAC,CAAA,EAAE;AAAA,EACnD;AACA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,aAAa,CAAC,CAAA;AAAA,IACpB,KAAA,EAAO,YAAA,CAAa,YAAA,CAAa,MAAA,GAAS,CAAC;AAAA,GAC7C;AACF;AAEA,SAAS,wBACP,KAAA,EACiC;AACjC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAQ,KAAA,CAA8B,KAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,YAAa,IAAA,CAAiC,SAAA;AACpD,EAAA,IAAI,SAAA,KAAc,IAAA,IAAQ,OAAO,SAAA,KAAc,QAAA,EAAU;AACvD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,WAAY,SAAA,CAAqC,QAAA;AACvD,EAAA,IAAI,QAAA,KAAa,IAAA,IAAQ,OAAO,QAAA,KAAa,QAAA,EAAU;AACrD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,QAAA;AAClB,EAAA,IACE,OAAO,UAAU,KAAK,CAAA,KAAM,YAC5B,OAAO,SAAA,CAAU,OAAO,CAAA,KAAM,QAAA,EAC9B;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,QAAA,GAAqC;AAAA,IACzC,GAAA,EAAK,UAAU,KAAK,CAAA;AAAA,IACpB,KAAA,EAAO,UAAU,OAAO;AAAA,GAC1B;AACA,EAAA,IAAI,OAAO,SAAA,CAAU,OAAO,CAAA,KAAM,QAAA,EAAU;AAC1C,IAAA,QAAA,CAAS,KAAA,GAAQ,UAAU,OAAO,CAAA;AAAA,EACpC;AACA,EAAA,IACE,OAAO,UAAU,SAAS,CAAA,KAAM,YAChC,SAAA,CAAU,SAAS,MAAM,IAAA,EACzB;AACA,IAAA,QAAA,CAAS,OAAA,GAAU,UAAU,SAAS,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAiB,QAAA,EAAqC;AAC5E,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAA+B;AAAA,IACnC,UAAU,QAAA,CAAS,OAAA;AAAA,IACnB,cAAc,QAAA,CAAS,GAAA;AAAA,IACvB,QAAQ,QAAA,CAAS;AAAA,GACnB;AACA,EAAA,MAAM,YAAA,GACJ,OAAQ,MAAA,CAA+B,KAAA,KAAU,QAAA,IAChD,OAA+B,KAAA,KAAU,IAAA,GACpC,MAAA,CAA8C,KAAA,GAChD,EAAC;AACP,EAAA,OAAO;AAAA,IACL,GAAI,MAAA;AAAA,IACJ,KAAA,EAAO;AAAA,MACL,GAAG,YAAA;AAAA,MACH,SAAA,EAAW;AAAA;AACb,GACF;AACF;AAEA,SAAS,eAAe,KAAA,EAAyB;AAC/C,EAAA,IAAI,iBAAiB,iBAAA,EAAmB;AAGtC,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,EAAe;AACrC,IAAA,MAAA,CAAO,MAAA,CAAO,OAAO,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,KAAA,GAAgB;AACvB,EAAA,IACE,OAAO,WAAA,KAAgB,WAAA,IACvB,OAAO,WAAA,CAAY,QAAQ,UAAA,EAC3B;AACA,IAAA,OAAO,YAAY,GAAA,EAAI;AAAA,EACzB;AACA,EAAA,OAAO,KAAK,GAAA,EAAI;AAClB;AAEA,IAAM,kBAAA,GAAuC;AAAA,EAC3C,GAAA,EAAK,mBAAA;AAAA,EACL,QAAQ,EAAC;AAAA,EACT,OAAA,EAAS,WAAA;AAAA,EACT,QAAQ;AACV;;;ACjWO,SAAS,mBAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,KAAA,CAAM,WAAA,KAAgB,UAAA,EAAY;AAClD,IAAA,MAAM,IAAI,UAAU,qDAAqD,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,WAAA,GAAc,IAAI,iBAAA,CAAkB,MAAM,CAAA;AAEhD,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,QAAA,OAAO,WAAA,CAAY,YAAA;AAAA,UACjB,KAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACL,KAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAAA,EAC3B;AAAA,EAEA,YAAA,CACE,UACA,OAAA,EAC2B;AAC3B,IAAA,MAAM,WAAA,GAAc,IAAA;AACpB,IAAA,OAAO,eAAe,eAAA,CAEpB,MAAA,EAAA,GAKG,IAAA,EACe;AAClB,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,UAAA,CAAW,MAAM,CAAA;AAClD,MAAA,IAAI,MAAA,GAIA,MAAA;AACJ,MAAA,IAAI,WAAA,CAAY,eAAe,MAAA,EAAW;AACxC,QAAA,MAAM,WAAA,GAAc,MAAM,OAAA,CAAQ,OAAA;AAAA,UAChC,WAAA,CAAY,WAAW,MAAM;AAAA,SAC/B;AACA,QAAA,IAAI,gBAAgB,MAAA,EAAW;AAE7B,UAAA,MAAA,GAAS;AAAA,YACP,GAAG,WAAA;AAAA,YACH,KAAA,EAAO,WAAA,CAAY,KAAA,IAAS,MAAA,CAAO;AAAA,WACrC;AAAA,QACF;AAAA,MACF;AACA,MAAA,OAAO,QAAA,CAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,GAAG,IAAI,CAAA;AAAA,IAC/C,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAA,EAQtB;AACD,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,YAAY,MAAA,CAAO,IAAA,EAAM,KAAK,QAAQ,CAAA;AACxE,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,KAAA,IAAS,EAAC;AACtC,IAAA,MAAM,iBAAA,GACJ,OAAO,YAAA,CAAa,WAAW,CAAA,KAAM,QAAA,IACrC,YAAA,CAAa,WAAW,CAAA,KAAM,IAAA,GACzB,YAAA,CAAa,WAAW,IACzB,EAAC;AACP,IAAA,OAAO;AAAA,MACL,GAAG,MAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,YAAA;AAAA,QACH,SAAA,EAAW;AAAA,UACT,GAAG,iBAAA;AAAA,UACH;AAAA;AACF;AACF,KACF;AAAA,EACF;AACF,CAAA;AAOO,SAAS,kBAAkB,QAAA,EAKN;AAC1B,EAAA,OAAO;AAAA,IACL,SAAA,EAAW;AAAA,MACT,QAAA,EAAU;AAAA,QACR,KAAK,QAAA,CAAS,GAAA;AAAA,QACd,OAAO,QAAA,CAAS,KAAA;AAAA,QAChB,GAAI,SAAS,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,GAAI,EAAC;AAAA,QAChE,GAAI,SAAS,OAAA,KAAY,MAAA,GACrB,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAQ,GAC5B;AAAC;AACP;AACF,GACF;AACF;;;ACtLO,IAAM,wBAAA,GAAkD;AAAA,EAC7D,cAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF;AA2BO,IAAM,yBAAA,GAAN,MAAM,0BAAA,CAAuD;AAAA,EACjD,KAAA;AAAA,EAEjB,WAAA,CAAY,KAAA,GAAmC,EAAC,EAAG;AACjD,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAI,GAAA,CAAI,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS,CAAC,IAAA,CAAK,SAAA,EAAW,IAAI,CAAC,CAAC,CAAA;AAAA,EAClE;AAAA,EAEA,OAAO,SAAA,EAAsC;AAC3C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,SAAS,CAAA,IAAK,IAAA;AAAA,EACtC;AAAA;AAAA,EAGA,SAAS,IAAA,EAA6C;AACpD,IAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AAC/B,IAAA,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,SAAA,EAAW,IAAI,CAAA;AAC7B,IAAA,OAAO,IAAI,0BAAA,CAA0B,CAAC,GAAG,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,EACzD;AACF;AA8BO,SAAS,mBACd,OAAA,EACkB;AAClB,EAAA,MAAM,cACJ,OAAA,CAAQ,WAAA,KACP,CAAC,QAAA,KAAqB,wBAAA,CAAyB,SAAS,QAAQ,CAAA,CAAA;AACnE,EAAA,MAAM,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,uBAAA;AAC9B,EAAA,MAAM,eAAA,GAAwC,QAAQ,eAAA,IAAmB;AAAA,IACvE,KAAA,EAAO;AAAA,GACT;AAEA,EAAA,OAAO,OAAO;AAAA,IACZ,QAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF,KAAqC;AACnC,IAAA,IAAI,CAAC,WAAA,CAAY,QAAQ,CAAA,EAAG;AAC1B,MAAA,OAAO,eAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,iBAAiB,IAAI,CAAA;AACvC,IAAA,IAAI,cAAc,IAAA,EAAM;AACtB,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,MAAA,EAAQ,eAAe,QAAQ,CAAA,8BAAA;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,OAAA,CAAQ,QAAQ,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAClE,IAAA,IAAI,SAAS,IAAA,EAAM;AACjB,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,MAAA,EAAQ,8BAA8B,SAAS,CAAA,CAAA;AAAA,OACjD;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,CAAK,SAAS,IAAA,EAAM;AACtB,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB;AAEA,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AACpC,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,QACE,IAAA,CAAK,MAAA,IACL,QAAQ,QAAA,CAAS,GAAG,kCAAkC,SAAS,CAAA,CAAA;AAAA,KACnE;AAAA,EACF,CAAA;AACF;AAEA,SAAS,wBAAwB,IAAA,EAA8B;AAC7D,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAA,GAAS,IAAA;AACf,EAAA,MAAM,KAAA,GAAQ,OAAO,OAAO,CAAA;AAC5B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,SAAS,CAAA,EAAG;AACjD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAO,WAAW,CAAA;AACpC,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,CAAU,SAAS,CAAA,EAAG;AACzD,IAAA,OAAO,SAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,qBAAA,CACd,OACA,MAAA,EACkB;AAClB,EAAA,OAAO,OAAO,KAAA,KAAyC;AACrD,IAAA,MAAM,IAAI,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA;AAC5C,IAAA,IAAI,CAAC,EAAE,KAAA,EAAO;AACZ,MAAA,OAAO,CAAA;AAAA,IACT;AACA,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EACtC,CAAA;AACF","file":"index.cjs","sourcesContent":["/**\n * Error types for @openagentid/mcp.\n *\n * These map onto MCP JSON-RPC error codes so callers see consistent\n * failure modes regardless of which middleware step rejected the call.\n *\n * Reference: https://www.jsonrpc.org/specification#error_object\n */\n\n/** Standard JSON-RPC + MCP error codes used by the middleware. */\nexport const McpErrorCode = {\n  /** -32600 — request was malformed at the JSON-RPC layer. */\n  InvalidRequest: -32600,\n  /** -32601 — the requested method/tool was not found. */\n  MethodNotFound: -32601,\n  /** -32602 — params failed validation. */\n  InvalidParams: -32602,\n  /** -32603 — internal server error. */\n  InternalError: -32603,\n  /** -32000 — generic server error (used for auth failures by default). */\n  ServerError: -32000,\n  /** -32001 — identity verification failed. */\n  AuthenticationFailed: -32001,\n  /** -32002 — caller does not hold the required scope. */\n  AuthorizationDenied: -32002,\n  /** -32003 — skills policy rejected the call. */\n  SkillsPolicyDenied: -32003,\n} as const;\n\nexport type McpErrorCodeValue =\n  (typeof McpErrorCode)[keyof typeof McpErrorCode];\n\n/**\n * Base class for all middleware errors. Subclasses set a default\n * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.\n */\nexport class OpenAgentMcpError extends Error {\n  public readonly code: McpErrorCodeValue;\n  public readonly data?: Record<string, unknown>;\n\n  constructor(\n    message: string,\n    code: McpErrorCodeValue,\n    data?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'OpenAgentMcpError';\n    this.code = code;\n    if (data !== undefined) {\n      this.data = data;\n    }\n  }\n\n  /**\n   * Convert to a plain JSON-RPC error payload that the MCP SDK can\n   * serialize over the wire.\n   */\n  toJsonRpcError(): {\n    code: McpErrorCodeValue;\n    message: string;\n    data?: Record<string, unknown>;\n  } {\n    if (this.data !== undefined) {\n      return { code: this.code, message: this.message, data: this.data };\n    }\n    return { code: this.code, message: this.message };\n  }\n}\n\n/** Caller did not present an OpenAgent identity envelope. */\nexport class MissingIdentityError extends OpenAgentMcpError {\n  constructor(toolName: string) {\n    super(\n      `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,\n      McpErrorCode.AuthenticationFailed,\n      { toolName },\n    );\n    this.name = 'MissingIdentityError';\n  }\n}\n\n/** Identity envelope was present but the verifier rejected it. */\nexport class IdentityVerificationError extends OpenAgentMcpError {\n  constructor(toolName: string, cause: unknown) {\n    super(\n      `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,\n      McpErrorCode.AuthenticationFailed,\n      { toolName, cause: formatCause(cause) },\n    );\n    this.name = 'IdentityVerificationError';\n  }\n}\n\n/** Caller's verified identity does not hold the required scopes. */\nexport class AuthorizationDeniedError extends OpenAgentMcpError {\n  constructor(\n    toolName: string,\n    requiredScopes: ReadonlyArray<string>,\n    heldScopes: ReadonlyArray<string>,\n  ) {\n    super(\n      `Tool '${toolName}' requires scopes [${requiredScopes.join(', ')}], caller holds [${heldScopes.join(', ')}]`,\n      McpErrorCode.AuthorizationDenied,\n      {\n        toolName,\n        requiredScopes: [...requiredScopes],\n        heldScopes: [...heldScopes],\n      },\n    );\n    this.name = 'AuthorizationDeniedError';\n  }\n}\n\n/** Skills policy hook returned `allow: false`. */\nexport class SkillsPolicyDeniedError extends OpenAgentMcpError {\n  constructor(toolName: string, reason: string | undefined) {\n    super(\n      `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ''}`,\n      McpErrorCode.SkillsPolicyDenied,\n      reason !== undefined ? { toolName, reason } : { toolName },\n    );\n    this.name = 'SkillsPolicyDeniedError';\n  }\n}\n\nfunction formatCause(cause: unknown): string {\n  if (cause instanceof Error) {\n    return cause.message;\n  }\n  if (typeof cause === 'string') {\n    return cause;\n  }\n  return 'unknown error';\n}\n","/**\n * Public types for @openagentid/mcp.\n *\n * These interfaces describe the contract the middleware expects from an\n * OpenAgent {@link Agent} instance and the surrounding configuration. They are\n * defined locally so the package can be installed without `@openagentid/sdk` in\n * tests, in CI, and in environments where the host application brings its own\n * verifier implementation.\n *\n * The real `@openagentid/sdk` exports types that are structurally compatible\n * with these — there is no runtime dependency.\n */\n\n/**\n * A decentralized identifier following the `did:oas:*` method or any other\n * DID method understood by the configured verifier.\n */\nexport type Did = string;\n\n/**\n * The four pieces of metadata an MCP request carries about the calling\n * agent. Populated by the {@link createClientInterceptor} on the call site\n * and consumed by the server middleware.\n */\nexport interface OpenAgentRequestIdentity {\n  /** Caller's DID — typically `did:oas:...`. */\n  did: Did;\n  /**\n   * A signed challenge response or capability token (Arsenal ACT) the\n   * server can verify offline. Format is opaque to the middleware.\n   */\n  proof: string;\n  /**\n   * Optional bearer-style nonce. Servers may require it for replay\n   * protection. Verifiers MUST treat the value as untrusted until\n   * verification succeeds.\n   */\n  nonce?: string;\n  /**\n   * Free-form context the verifier may use (issuer DID, audience, scopes\n   * the caller claims). Always validated against the verifier's policy.\n   */\n  context?: Record<string, unknown>;\n}\n\n/**\n * The result of running the auth pipeline against an incoming MCP request.\n * Available to post-call hooks and audit log emitters.\n */\nexport interface VerifiedIdentity {\n  did: Did;\n  scopes: ReadonlyArray<string>;\n  /** Audit identifier echoed back to the caller in result `_meta`. */\n  auditId: string;\n  /** Verifier-issued claims about the caller. */\n  claims: Readonly<Record<string, unknown>>;\n}\n\n/**\n * The verifier interface — implemented by `@openagentid/sdk` (production) and\n * by the in-memory test agent shipped here.\n *\n * Implementations MUST be deterministic for a given input and MUST NOT\n * mutate the request identity object.\n */\nexport interface IdentityVerifier {\n  verify(\n    identity: OpenAgentRequestIdentity,\n    requiredScopes: ReadonlyArray<string>,\n  ): Promise<VerifiedIdentity>;\n}\n\n/**\n * Minimal Agent surface — only the parts of the OpenAgent SDK Agent that\n * the MCP middleware actually needs.\n */\nexport interface Agent {\n  did: Did;\n  verifier: IdentityVerifier;\n  /**\n   * Sign an outbound MCP call so the receiving server can verify the\n   * caller. Returns the identity envelope to attach as `_meta.openagent`.\n   */\n  signRequest(\n    toolName: string,\n    audience?: Did,\n  ): Promise<OpenAgentRequestIdentity>;\n}\n\n/**\n * Result envelope returned by an authenticated tool call. The `auditId` is\n * pushed into `_meta.openagent.audit_id` on the response, so callers can\n * correlate logs end-to-end.\n */\nexport interface AuditedResultMeta {\n  audit_id: string;\n  verified_did: Did;\n  scopes: ReadonlyArray<string>;\n}\n\n/** Per-tool scope deriver. */\nexport type ScopeDeriver = (\n  toolName: string,\n  args: unknown,\n) => ReadonlyArray<string>;\n\n/**\n * Hook signature for the skills policy. The hook receives the tool name,\n * the arguments, and the verified identity, and decides whether the call\n * should be allowed.\n */\nexport type SkillsPolicyHook = (input: {\n  toolName: string;\n  args: unknown;\n  identity: VerifiedIdentity;\n}) => Promise<SkillsPolicyDecision> | SkillsPolicyDecision;\n\nexport interface SkillsPolicyDecision {\n  allow: boolean;\n  reason?: string;\n}\n\n/**\n * Hook fired before a tool body executes — after the identity has been\n * verified and the skills policy has approved the call.\n */\nexport type PreCallHook = (input: {\n  toolName: string;\n  args: unknown;\n  identity: VerifiedIdentity;\n}) => Promise<void> | void;\n\n/**\n * Hook fired after a tool body executes successfully. Use it for audit\n * logging, metrics, and trace propagation. Throwing from this hook does\n * NOT roll back the tool call.\n */\nexport type PostCallHook = (input: {\n  toolName: string;\n  args: unknown;\n  identity: VerifiedIdentity;\n  durationMs: number;\n  result: unknown;\n}) => Promise<void> | void;\n\n/**\n * Hook fired when the tool body or any earlier middleware step throws.\n * The middleware re-throws the error after running this hook so MCP\n * clients still observe the original failure mode.\n */\nexport type ErrorHook = (input: {\n  toolName: string;\n  args: unknown;\n  identity: VerifiedIdentity | null;\n  error: unknown;\n}) => Promise<void> | void;\n\n/**\n * Configuration for {@link withOpenAgent}.\n */\nexport interface OpenAgentMcpConfig {\n  /** The agent that owns this MCP server (used for outbound signing). */\n  agent: Agent;\n  /**\n   * Per-tool required scope set. Defaults to\n   * `(toolName) => [`mcp:${toolName}:invoke`]`.\n   */\n  requireScopes?: ScopeDeriver;\n  /**\n   * If true (default), tool calls without an `_meta.openagent.identity`\n   * envelope are rejected. Set to false to opt-in to permissive mode for\n   * local development — the middleware will still run hooks but skip\n   * verification.\n   */\n  requireIdentity?: boolean;\n  /** Optional skills policy hook. */\n  skillsPolicy?: SkillsPolicyHook;\n  /** Optional pre-call hook. */\n  preCall?: PreCallHook;\n  /** Optional post-call hook for audit/log emission. */\n  postCall?: PostCallHook;\n  /** Optional error hook. */\n  onError?: ErrorHook;\n  /**\n   * Override the default `mcp:<tool>:invoke` scope format. Receives the\n   * tool name and returns the canonical scope string.\n   */\n  scopeFormat?: (toolName: string) => string;\n}\n\n/**\n * Default scope format used when {@link OpenAgentMcpConfig.scopeFormat} is\n * not supplied.\n */\nexport const defaultScopeFormat = (toolName: string): string =>\n  `mcp:${toolName}:invoke`;\n\n/**\n * Default scope deriver used when {@link OpenAgentMcpConfig.requireScopes}\n * is not supplied.\n */\nexport const defaultRequireScopes = (toolName: string): ReadonlyArray<string> =>\n  [defaultScopeFormat(toolName)];\n","/**\n * Server-side middleware for @openagentid/mcp.\n *\n * Wraps an MCP {@link McpServer} (from `@modelcontextprotocol/sdk`) so that\n * every tool registration runs through an OpenAgent authentication\n * pipeline:\n *\n *   1. Extract the identity envelope from `extra._meta.openagent.identity`.\n *   2. Verify it via the configured {@link IdentityVerifier} and check\n *      that the caller holds the scopes returned by `requireScopes`.\n *   3. Run the optional skills policy hook.\n *   4. Run the optional pre-call hook.\n *   5. Invoke the user's tool callback.\n *   6. Run the optional post-call hook with the result + duration.\n *   7. Stamp `audit_id` + `verified_did` into the result `_meta.openagent`.\n *   8. On error, run the optional onError hook and re-throw.\n *\n * Implementation note — version pinning:\n *   The middleware is built against `@modelcontextprotocol/sdk@^1.27.0`.\n *   The TypeScript SDK changed its tool registration API between 1.17 and\n *   1.27 (`tool(name, cb, ...)` → `registerTool(name, config, cb)`); both\n *   call sites are intercepted here so any 1.x server still works.\n *\n *   We deliberately do NOT touch the private `_registeredTools` map. The\n *   middleware uses a JavaScript {@link Proxy} so callbacks are wrapped\n *   exactly once at registration time, before the SDK's internal\n *   request handler ever sees them.\n */\n\nimport {\n  AuthorizationDeniedError,\n  IdentityVerificationError,\n  MissingIdentityError,\n  OpenAgentMcpError,\n  SkillsPolicyDeniedError,\n} from './errors.js';\nimport {\n  Agent,\n  AuditedResultMeta,\n  ErrorHook,\n  OpenAgentMcpConfig,\n  OpenAgentRequestIdentity,\n  PostCallHook,\n  PreCallHook,\n  ScopeDeriver,\n  SkillsPolicyHook,\n  VerifiedIdentity,\n  defaultRequireScopes,\n} from './types.js';\n\n/**\n * Minimal McpServer surface used by the middleware. We avoid importing\n * concrete types from `@modelcontextprotocol/sdk` because peer-dep\n * versions vary across host applications and the SDK's own type exports\n * are subject to change. The shape below is the intersection of every\n * `1.x` McpServer release.\n */\nexport interface McpServerLike {\n  tool(...args: unknown[]): unknown;\n  registerTool(...args: unknown[]): unknown;\n}\n\n/**\n * Names of methods on the underlying server that take a tool callback as\n * one of their arguments. Both APIs are intercepted; if the SDK adds new\n * registration methods, append to this list.\n */\nconst TOOL_REGISTRATION_METHODS = ['tool', 'registerTool'] as const;\n\ntype ToolRegistrationMethod = (typeof TOOL_REGISTRATION_METHODS)[number];\n\n/**\n * Wrap an MCP server so every tool call is authenticated against an\n * OpenAgent identity.\n *\n * @example\n * ```ts\n * import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\n * import { withOpenAgent } from '@openagentid/mcp';\n * import { agent } from './my-agent.js';\n *\n * const server = new McpServer({ name: 'my-tools', version: '0.1.0' });\n * const authedServer = withOpenAgent(server, { agent });\n *\n * authedServer.tool('search_web', searchHandler);\n * ```\n *\n * The returned proxy is type-compatible with the underlying server, so\n * existing code that calls `tool()`, `registerTool()`, `connect()`, etc.\n * keeps working without changes.\n */\nexport function withOpenAgent<T extends McpServerLike>(\n  server: T,\n  config: OpenAgentMcpConfig,\n): T {\n  validateConfig(config);\n  const middleware = new ToolMiddleware(config);\n\n  return new Proxy(server, {\n    get(target, property, receiver) {\n      const value = Reflect.get(target, property, receiver);\n      if (typeof value !== 'function') {\n        return value;\n      }\n      if (\n        typeof property === 'string' &&\n        TOOL_REGISTRATION_METHODS.includes(property as ToolRegistrationMethod)\n      ) {\n        return wrapRegistrationMethod(\n          value as (...args: unknown[]) => unknown,\n          target,\n          middleware,\n        );\n      }\n      // Bind methods so `this` stays correct when destructured.\n      return value.bind(target);\n    },\n  }) as T;\n}\n\nfunction validateConfig(config: OpenAgentMcpConfig): void {\n  if (config === null || typeof config !== 'object') {\n    throw new TypeError('OpenAgentMcpConfig must be an object');\n  }\n  if (config.agent === undefined || config.agent === null) {\n    throw new TypeError('OpenAgentMcpConfig.agent is required');\n  }\n  if (\n    config.agent.verifier === undefined ||\n    typeof config.agent.verifier.verify !== 'function'\n  ) {\n    throw new TypeError('OpenAgentMcpConfig.agent.verifier.verify is required');\n  }\n}\n\n/**\n * Wrap a single registration method so the user-supplied callback gets\n * replaced by an auth-wrapped one. The MCP SDK accepts the callback in\n * different positional slots depending on overload — we walk the args\n * list and replace the FIRST function we find. This is the same approach\n * the SDK itself uses internally.\n */\nfunction wrapRegistrationMethod(\n  original: (...args: unknown[]) => unknown,\n  thisArg: unknown,\n  middleware: ToolMiddleware,\n): (...args: unknown[]) => unknown {\n  return function wrapped(this: unknown, ...args: unknown[]): unknown {\n    const toolName = extractToolName(args);\n    const callbackIndex = findCallbackIndex(args);\n    if (callbackIndex === -1) {\n      // No callback in the args — defensive: forward as-is so we don't\n      // mask SDK-level errors that the host would otherwise see.\n      return original.apply(thisArg, args);\n    }\n    const userCallback = args[callbackIndex] as (\n      ...callbackArgs: unknown[]\n    ) => unknown;\n    const wrappedCallback = middleware.wrap(toolName, userCallback);\n    const newArgs = [...args];\n    newArgs[callbackIndex] = wrappedCallback;\n    return original.apply(thisArg, newArgs);\n  };\n}\n\nfunction extractToolName(args: ReadonlyArray<unknown>): string {\n  if (args.length > 0 && typeof args[0] === 'string') {\n    return args[0];\n  }\n  // registerTool's first arg is also a string in 1.27, so this should\n  // never trigger — kept as a safety net.\n  return '<unknown>';\n}\n\nfunction findCallbackIndex(args: ReadonlyArray<unknown>): number {\n  // Walk the args from the end so we find the LAST function — that's\n  // the tool body in every overload of both `tool()` and\n  // `registerTool()`.\n  for (let i = args.length - 1; i >= 0; i -= 1) {\n    if (typeof args[i] === 'function') {\n      return i;\n    }\n  }\n  return -1;\n}\n\n/**\n * Holds the middleware configuration and wraps individual tool callbacks.\n */\nclass ToolMiddleware {\n  private readonly agent: Agent;\n  private readonly requireScopes: ScopeDeriver;\n  private readonly requireIdentity: boolean;\n  private readonly skillsPolicy: SkillsPolicyHook | undefined;\n  private readonly preCall: PreCallHook | undefined;\n  private readonly postCall: PostCallHook | undefined;\n  private readonly onError: ErrorHook | undefined;\n\n  constructor(config: OpenAgentMcpConfig) {\n    this.agent = config.agent;\n    this.requireScopes = config.requireScopes ?? defaultRequireScopes;\n    this.requireIdentity = config.requireIdentity ?? true;\n    this.skillsPolicy = config.skillsPolicy;\n    this.preCall = config.preCall;\n    this.postCall = config.postCall;\n    this.onError = config.onError;\n  }\n\n  wrap(\n    toolName: string,\n    userCallback: (...args: unknown[]) => unknown,\n  ): (...args: unknown[]) => Promise<unknown> {\n    const middleware = this;\n    return async function wrappedCallback(\n      this: unknown,\n      ...callbackArgs: unknown[]\n    ): Promise<unknown> {\n      // The MCP SDK invokes tool callbacks in two shapes depending on\n      // whether the tool has an input schema:\n      //   (extra)                — no schema\n      //   (args, extra)          — with schema\n      // The `extra` is always the LAST arg.\n      const { args, extra } = splitToolArgs(callbackArgs);\n      const startedAt = nowMs();\n      let identity: VerifiedIdentity | null = null;\n\n      try {\n        identity = await middleware.runAuthPipeline(toolName, args, extra);\n\n        if (middleware.preCall !== undefined) {\n          await middleware.preCall({ toolName, args, identity });\n        }\n\n        const result = await Promise.resolve(\n          userCallback.apply(this, callbackArgs),\n        );\n\n        const stamped = stampAuditMeta(result, identity);\n\n        if (middleware.postCall !== undefined) {\n          await middleware.postCall({\n            toolName,\n            args,\n            identity,\n            durationMs: nowMs() - startedAt,\n            result: stamped,\n          });\n        }\n        return stamped;\n      } catch (error: unknown) {\n        if (middleware.onError !== undefined) {\n          // The error hook MUST NOT throw — if it does, swallow so the\n          // original error propagates to the caller intact.\n          try {\n            await middleware.onError({ toolName, args, identity, error });\n          } catch {\n            /* intentionally ignored */\n          }\n        }\n        throw normalizeError(error);\n      }\n    };\n  }\n\n  private async runAuthPipeline(\n    toolName: string,\n    args: unknown,\n    extra: unknown,\n  ): Promise<VerifiedIdentity> {\n    const identityEnvelope = extractIdentityEnvelope(extra);\n    if (identityEnvelope === null) {\n      if (this.requireIdentity) {\n        throw new MissingIdentityError(toolName);\n      }\n      // Permissive mode: synthesize an \"anonymous\" identity so hooks\n      // still run with a stable shape.\n      return ANONYMOUS_IDENTITY;\n    }\n\n    const requiredScopes = this.requireScopes(toolName, args);\n    let identity: VerifiedIdentity;\n    try {\n      identity = await this.agent.verifier.verify(\n        identityEnvelope,\n        requiredScopes,\n      );\n    } catch (cause: unknown) {\n      throw new IdentityVerificationError(toolName, cause);\n    }\n\n    enforceScopes(toolName, requiredScopes, identity.scopes);\n\n    if (this.skillsPolicy !== undefined) {\n      const decision = await Promise.resolve(\n        this.skillsPolicy({ toolName, args, identity }),\n      );\n      if (!decision.allow) {\n        throw new SkillsPolicyDeniedError(toolName, decision.reason);\n      }\n    }\n\n    return identity;\n  }\n}\n\nfunction enforceScopes(\n  toolName: string,\n  required: ReadonlyArray<string>,\n  held: ReadonlyArray<string>,\n): void {\n  const missing = required.filter((scope) => !held.includes(scope));\n  if (missing.length > 0) {\n    throw new AuthorizationDeniedError(toolName, required, held);\n  }\n}\n\nfunction splitToolArgs(callbackArgs: ReadonlyArray<unknown>): {\n  args: unknown;\n  extra: unknown;\n} {\n  if (callbackArgs.length === 0) {\n    return { args: undefined, extra: undefined };\n  }\n  if (callbackArgs.length === 1) {\n    // Single argument is the `extra` object.\n    return { args: undefined, extra: callbackArgs[0] };\n  }\n  return {\n    args: callbackArgs[0],\n    extra: callbackArgs[callbackArgs.length - 1],\n  };\n}\n\nfunction extractIdentityEnvelope(\n  extra: unknown,\n): OpenAgentRequestIdentity | null {\n  if (extra === null || typeof extra !== 'object') {\n    return null;\n  }\n  const meta = (extra as { _meta?: unknown })._meta;\n  if (meta === null || typeof meta !== 'object') {\n    return null;\n  }\n  const openAgent = (meta as { openagent?: unknown }).openagent;\n  if (openAgent === null || typeof openAgent !== 'object') {\n    return null;\n  }\n  const identity = (openAgent as { identity?: unknown }).identity;\n  if (identity === null || typeof identity !== 'object') {\n    return null;\n  }\n  const candidate = identity as Record<string, unknown>;\n  if (\n    typeof candidate['did'] !== 'string' ||\n    typeof candidate['proof'] !== 'string'\n  ) {\n    return null;\n  }\n  const envelope: OpenAgentRequestIdentity = {\n    did: candidate['did'],\n    proof: candidate['proof'],\n  };\n  if (typeof candidate['nonce'] === 'string') {\n    envelope.nonce = candidate['nonce'];\n  }\n  if (\n    typeof candidate['context'] === 'object' &&\n    candidate['context'] !== null\n  ) {\n    envelope.context = candidate['context'] as Record<string, unknown>;\n  }\n  return envelope;\n}\n\nfunction stampAuditMeta(result: unknown, identity: VerifiedIdentity): unknown {\n  if (result === null || typeof result !== 'object') {\n    return result;\n  }\n  const auditMeta: AuditedResultMeta = {\n    audit_id: identity.auditId,\n    verified_did: identity.did,\n    scopes: identity.scopes,\n  };\n  const existingMeta =\n    typeof (result as { _meta?: unknown })._meta === 'object' &&\n    (result as { _meta?: unknown })._meta !== null\n      ? ((result as { _meta: Record<string, unknown> })._meta)\n      : {};\n  return {\n    ...(result as Record<string, unknown>),\n    _meta: {\n      ...existingMeta,\n      openagent: auditMeta,\n    },\n  };\n}\n\nfunction normalizeError(error: unknown): unknown {\n  if (error instanceof OpenAgentMcpError) {\n    // Surface the JSON-RPC code on the error so the SDK's error\n    // serializer picks it up.\n    const jsonRpc = error.toJsonRpcError();\n    Object.assign(error, { code: jsonRpc.code, data: jsonRpc.data });\n  }\n  return error;\n}\n\nfunction nowMs(): number {\n  if (\n    typeof performance !== 'undefined' &&\n    typeof performance.now === 'function'\n  ) {\n    return performance.now();\n  }\n  return Date.now();\n}\n\nconst ANONYMOUS_IDENTITY: VerifiedIdentity = {\n  did: 'did:oas:anonymous',\n  scopes: [],\n  auditId: 'anonymous',\n  claims: {},\n};\n\nexport { ANONYMOUS_IDENTITY };\n","/**\n * Client-side interceptor for @openagentid/mcp.\n *\n * Adds an OpenAgent identity envelope (`_meta.openagent.identity`) to\n * outbound MCP `tools/call` requests so an authenticated server can\n * verify the caller. The interceptor wraps the MCP client's `callTool`\n * method via a JavaScript Proxy — the rest of the client surface (list\n * tools, list resources, prompts) is forwarded unchanged.\n *\n * Usage:\n *\n * ```ts\n * import { Client } from '@modelcontextprotocol/sdk/client/index.js';\n * import { withOpenAgentClient } from '@openagentid/mcp/client';\n *\n * const client = new Client({ name: 'my-agent', version: '0.1.0' });\n * const authedClient = withOpenAgentClient(client, { agent });\n *\n * await authedClient.callTool({ name: 'search_web', arguments: { q: 'mcp' } });\n * ```\n */\n\nimport { Agent } from './types.js';\n\n/**\n * Minimal MCP client surface used by the interceptor. Like the server\n * adapter, we describe just the methods we need to keep peer-dep\n * compatibility broad.\n */\nexport interface McpClientLike {\n  callTool(\n    params: {\n      name: string;\n      arguments?: Record<string, unknown>;\n      _meta?: Record<string, unknown>;\n    },\n    ...rest: unknown[]\n  ): Promise<unknown>;\n}\n\nexport interface OpenAgentClientConfig {\n  /** The agent doing the calling — used to sign each request. */\n  agent: Agent;\n  /**\n   * Optional audience DID. When set, it is passed to\n   * {@link Agent.signRequest} so the proof can be bound to a specific\n   * server. Most production deployments should set this.\n   */\n  audience?: string;\n  /**\n   * Optional hook fired before every outbound call. Use it for client-\n   * side metrics or to mutate the params (e.g., add tracing headers).\n   * Returning a value replaces the params.\n   */\n  beforeCall?: (params: {\n    name: string;\n    arguments?: Record<string, unknown>;\n    _meta?: Record<string, unknown>;\n  }) => Promise<\n    | { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n    | void\n  > | { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n    | void;\n}\n\n/**\n * Wrap an MCP client so every outbound `callTool` carries an OpenAgent\n * identity envelope.\n */\nexport function withOpenAgentClient<T extends McpClientLike>(\n  client: T,\n  config: OpenAgentClientConfig,\n): T {\n  if (config === null || typeof config !== 'object') {\n    throw new TypeError('OpenAgentClientConfig must be an object');\n  }\n  if (config.agent === undefined || config.agent === null) {\n    throw new TypeError('OpenAgentClientConfig.agent is required');\n  }\n  if (typeof config.agent.signRequest !== 'function') {\n    throw new TypeError('OpenAgentClientConfig.agent.signRequest is required');\n  }\n\n  const interceptor = new ClientInterceptor(config);\n\n  return new Proxy(client, {\n    get(target, property, receiver) {\n      const value = Reflect.get(target, property, receiver);\n      if (typeof value !== 'function') {\n        return value;\n      }\n      if (property === 'callTool') {\n        return interceptor.wrapCallTool(\n          value as McpClientLike['callTool'],\n          target,\n        );\n      }\n      return value.bind(target);\n    },\n  }) as T;\n}\n\nclass ClientInterceptor {\n  private readonly agent: Agent;\n  private readonly audience: string | undefined;\n  private readonly beforeCall: OpenAgentClientConfig['beforeCall'];\n\n  constructor(config: OpenAgentClientConfig) {\n    this.agent = config.agent;\n    this.audience = config.audience;\n    this.beforeCall = config.beforeCall;\n  }\n\n  wrapCallTool(\n    original: McpClientLike['callTool'],\n    thisArg: unknown,\n  ): McpClientLike['callTool'] {\n    const interceptor = this;\n    return async function wrappedCallTool(\n      this: unknown,\n      params: {\n        name: string;\n        arguments?: Record<string, unknown>;\n        _meta?: Record<string, unknown>;\n      },\n      ...rest: unknown[]\n    ): Promise<unknown> {\n      const signed = await interceptor.signParams(params);\n      let toSend: {\n        name: string;\n        arguments?: Record<string, unknown>;\n        _meta: Record<string, unknown>;\n      } = signed;\n      if (interceptor.beforeCall !== undefined) {\n        const replacement = await Promise.resolve(\n          interceptor.beforeCall(signed),\n        );\n        if (replacement !== undefined) {\n          // Re-attach the signed _meta if the hook stripped it.\n          toSend = {\n            ...replacement,\n            _meta: replacement._meta ?? signed._meta,\n          };\n        }\n      }\n      return original.call(thisArg, toSend, ...rest);\n    };\n  }\n\n  private async signParams(params: {\n    name: string;\n    arguments?: Record<string, unknown>;\n    _meta?: Record<string, unknown>;\n  }): Promise<{\n    name: string;\n    arguments?: Record<string, unknown>;\n    _meta: Record<string, unknown>;\n  }> {\n    const identity = await this.agent.signRequest(params.name, this.audience);\n    const existingMeta = params._meta ?? {};\n    const existingOpenAgent =\n      typeof existingMeta['openagent'] === 'object' &&\n      existingMeta['openagent'] !== null\n        ? (existingMeta['openagent'] as Record<string, unknown>)\n        : {};\n    return {\n      ...params,\n      _meta: {\n        ...existingMeta,\n        openagent: {\n          ...existingOpenAgent,\n          identity,\n        },\n      },\n    };\n  }\n}\n\n/**\n * Helper for tests and tools that want to construct the identity\n * envelope manually without going through a full Agent. Returns a `_meta`\n * object that can be merged into a CallToolRequest's params.\n */\nexport function buildIdentityMeta(identity: {\n  did: string;\n  proof: string;\n  nonce?: string;\n  context?: Record<string, unknown>;\n}): Record<string, unknown> {\n  return {\n    openagent: {\n      identity: {\n        did: identity.did,\n        proof: identity.proof,\n        ...(identity.nonce !== undefined ? { nonce: identity.nonce } : {}),\n        ...(identity.context !== undefined\n          ? { context: identity.context }\n          : {}),\n      },\n    },\n  };\n}\n","/**\n * Skills policy support for @openagentid/mcp.\n *\n * MCP tools and SKILLS.md entries describe the same thing: a capability\n * an agent can invoke. When an MCP server exposes a tool that proxies\n * skill invocation (typically named `invoke_skill` or any name a host\n * application configures), the middleware consults a skills policy\n * before allowing the call. This file provides the helper that picks the\n * right policy for a given call and a small built-in store implementation\n * suitable for tests and reference implementations.\n */\n\nimport { SkillsPolicyDecision, SkillsPolicyHook } from './types.js';\n\n/**\n * Tool name prefixes that the middleware treats as skill-like by default.\n * Host applications can override the matcher entirely via\n * {@link createSkillsPolicy}.\n */\nexport const DEFAULT_SKILL_TOOL_NAMES: ReadonlyArray<string> = [\n  'invoke_skill',\n  'run_skill',\n  'execute_skill',\n  'skill.invoke',\n  'skill.run',\n];\n\n/**\n * A single rule describing whether a `(skillName, did)` pair is allowed.\n * `null` for `dids` means \"any verified caller\". An empty array means\n * \"no caller\".\n */\nexport interface SkillsRule {\n  skillName: string;\n  /** DIDs allowed to invoke this skill, or `null` for any. */\n  dids: ReadonlyArray<string> | null;\n  /** Optional reason emitted when the rule denies a call. */\n  reason?: string;\n}\n\n/**\n * Policy store interface — implementations may be in-memory, file-backed\n * by `SKILLS.md`, or fetched from a remote service.\n */\nexport interface SkillsPolicyStore {\n  lookup(skillName: string): Promise<SkillsRule | null> | SkillsRule | null;\n}\n\n/**\n * Trivial in-memory store useful in tests and as a starting point for\n * production stores.\n */\nexport class InMemorySkillsPolicyStore implements SkillsPolicyStore {\n  private readonly rules: Map<string, SkillsRule>;\n\n  constructor(rules: ReadonlyArray<SkillsRule> = []) {\n    this.rules = new Map(rules.map((rule) => [rule.skillName, rule]));\n  }\n\n  lookup(skillName: string): SkillsRule | null {\n    return this.rules.get(skillName) ?? null;\n  }\n\n  /** Returns a NEW store with the given rule applied (immutable update). */\n  withRule(rule: SkillsRule): InMemorySkillsPolicyStore {\n    const next = new Map(this.rules);\n    next.set(rule.skillName, rule);\n    return new InMemorySkillsPolicyStore([...next.values()]);\n  }\n}\n\nexport interface CreateSkillsPolicyOptions {\n  /** The store backing skill lookups. */\n  store: SkillsPolicyStore;\n  /**\n   * Returns true when a tool call should be checked against the skills\n   * policy. Defaults to matching the tool name against\n   * {@link DEFAULT_SKILL_TOOL_NAMES}.\n   */\n  isSkillTool?: (toolName: string) => boolean;\n  /**\n   * Extracts the skill name from the tool's arguments. Defaults to\n   * reading `args.skill` or `args.skillName`.\n   */\n  extractSkillName?: (args: unknown) => string | null;\n  /**\n   * Default decision when no rule matches. Defaults to `{ allow: true }`\n   * to keep non-skill tools unaffected.\n   */\n  defaultDecision?: SkillsPolicyDecision;\n}\n\n/**\n * Build a {@link SkillsPolicyHook} from a store and matching options.\n *\n * The returned hook always allows tools that are not skill-like; it only\n * consults the store when {@link CreateSkillsPolicyOptions.isSkillTool}\n * returns true.\n */\nexport function createSkillsPolicy(\n  options: CreateSkillsPolicyOptions,\n): SkillsPolicyHook {\n  const isSkillTool =\n    options.isSkillTool ??\n    ((toolName: string) => DEFAULT_SKILL_TOOL_NAMES.includes(toolName));\n  const extractSkillName =\n    options.extractSkillName ?? defaultExtractSkillName;\n  const defaultDecision: SkillsPolicyDecision = options.defaultDecision ?? {\n    allow: true,\n  };\n\n  return async ({\n    toolName,\n    args,\n    identity,\n  }): Promise<SkillsPolicyDecision> => {\n    if (!isSkillTool(toolName)) {\n      return defaultDecision;\n    }\n\n    const skillName = extractSkillName(args);\n    if (skillName === null) {\n      return {\n        allow: false,\n        reason: `Skill tool '${toolName}' invoked without a skill name`,\n      };\n    }\n\n    const rule = await Promise.resolve(options.store.lookup(skillName));\n    if (rule === null) {\n      return {\n        allow: false,\n        reason: `No policy entry for skill '${skillName}'`,\n      };\n    }\n\n    if (rule.dids === null) {\n      return { allow: true };\n    }\n\n    if (rule.dids.includes(identity.did)) {\n      return { allow: true };\n    }\n\n    return {\n      allow: false,\n      reason:\n        rule.reason ??\n        `DID '${identity.did}' is not authorized for skill '${skillName}'`,\n    };\n  };\n}\n\nfunction defaultExtractSkillName(args: unknown): string | null {\n  if (args === null || typeof args !== 'object') {\n    return null;\n  }\n  const record = args as Record<string, unknown>;\n  const skill = record['skill'];\n  if (typeof skill === 'string' && skill.length > 0) {\n    return skill;\n  }\n  const skillName = record['skillName'];\n  if (typeof skillName === 'string' && skillName.length > 0) {\n    return skillName;\n  }\n  return null;\n}\n\n/**\n * Compose two skills policy hooks. The combined hook denies if either\n * underlying hook denies; allow decisions from `first` are forwarded to\n * `second`.\n */\nexport function combineSkillsPolicies(\n  first: SkillsPolicyHook,\n  second: SkillsPolicyHook,\n): SkillsPolicyHook {\n  return async (input): Promise<SkillsPolicyDecision> => {\n    const a = await Promise.resolve(first(input));\n    if (!a.allow) {\n      return a;\n    }\n    return Promise.resolve(second(input));\n  };\n}\n\n/** Re-exported for convenience. */\nexport type {\n  SkillsPolicyHook,\n  SkillsPolicyDecision,\n  VerifiedIdentity,\n} from './types.js';\n"]}

package/dist/index.d.cts

@@ -0,0 +1,5 @@
+export { ANONYMOUS_IDENTITY, McpServerLike, withOpenAgent } from './server.cjs';
+export { McpClientLike, OpenAgentClientConfig, buildIdentityMeta, withOpenAgentClient } from './client.cjs';
+export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, McpErrorCodeValue, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError } from './errors.cjs';
+export { CreateSkillsPolicyOptions, DEFAULT_SKILL_TOOL_NAMES, InMemorySkillsPolicyStore, SkillsPolicyStore, SkillsRule, combineSkillsPolicies, createSkillsPolicy } from './skills.cjs';
+export { Agent, AuditedResultMeta, Did, ErrorHook, IdentityVerifier, OpenAgentMcpConfig, OpenAgentRequestIdentity, PostCallHook, PreCallHook, ScopeDeriver, SkillsPolicyDecision, SkillsPolicyHook, VerifiedIdentity, defaultRequireScopes, defaultScopeFormat } from './types.cjs';

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { ANONYMOUS_IDENTITY, McpServerLike, withOpenAgent } from './server.js';
+export { McpClientLike, OpenAgentClientConfig, buildIdentityMeta, withOpenAgentClient } from './client.js';
+export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, McpErrorCodeValue, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError } from './errors.js';
+export { CreateSkillsPolicyOptions, DEFAULT_SKILL_TOOL_NAMES, InMemorySkillsPolicyStore, SkillsPolicyStore, SkillsRule, combineSkillsPolicies, createSkillsPolicy } from './skills.js';
+export { Agent, AuditedResultMeta, Did, ErrorHook, IdentityVerifier, OpenAgentMcpConfig, OpenAgentRequestIdentity, PostCallHook, PreCallHook, ScopeDeriver, SkillsPolicyDecision, SkillsPolicyHook, VerifiedIdentity, defaultRequireScopes, defaultScopeFormat } from './types.js';