npm - @openagentid/mcp - Versions diffs - 0.1.1 → 0.2.0 - Mend

@openagentid/mcp 0.1.1 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (25) hide show

package/dist/index.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/errors.ts","../src/types.ts","../src/server.ts","../src/client.ts","../src/skills.ts"],"names":[],"mappings":";;;AAUO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,WAAA,EAAa,KAAA;AAAA;AAAA,EAEb,oBAAA,EAAsB,MAAA;AAAA;AAAA,EAEtB,mBAAA,EAAqB,MAAA;AAAA;AAAA,EAErB,kBAAA,EAAoB;AACtB;AASO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3B,IAAA;AAAA,EACA,IAAA;AAAA,EAEhB,WAAA,CACE,OAAA,EACA,IAAA,EACA,IAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,cAAA,GAIE;AACA,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,IACnE;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,EAClD;AACF;AAGO,IAAM,oBAAA,GAAN,cAAmC,iBAAA,CAAkB;AAAA,EAC1D,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA;AAAA,MACE,SAAS,QAAQ,CAAA,4DAAA,CAAA;AAAA,MACjB,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA;AAAS,KACb;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAGO,IAAM,yBAAA,GAAN,cAAwC,iBAAA,CAAkB;AAAA,EAC/D,WAAA,CAAY,UAAkB,KAAA,EAAgB;AAC5C,IAAA,KAAA;AAAA,MACE,CAAA,uCAAA,EAA0C,QAAQ,CAAA,GAAA,EAAM,WAAA,CAAY,KAAK,CAAC,CAAA,CAAA;AAAA,MAC1E,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA,EAAU,KAAA,EAAO,WAAA,CAAY,KAAK,CAAA;AAAE,KACxC;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAGO,IAAM,wBAAA,GAAN,cAAuC,iBAAA,CAAkB;AAAA,EAC9D,WAAA,CACE,QAAA,EACA,cAAA,EACA,UAAA,EACA;AACA,IAAA,KAAA;AAAA,MACE,CAAA,MAAA,EAAS,QAAQ,CAAA,mBAAA,EAAsB,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACzG,YAAA,CAAa,mBAAA;AAAA,MACb;AAAA,QACE,QAAA;AAAA,QACA,cAAA,EAAgB,CAAC,GAAG,cAAc,CAAA;AAAA,QAClC,UAAA,EAAY,CAAC,GAAG,UAAU;AAAA;AAC5B,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAGO,IAAM,uBAAA,GAAN,cAAsC,iBAAA,CAAkB;AAAA,EAC7D,WAAA,CAAY,UAAkB,MAAA,EAA4B;AACxD,IAAA,KAAA;AAAA,MACE,8BAA8B,QAAQ,CAAA,CAAA,EAAI,SAAS,CAAA,EAAA,EAAK,MAAM,KAAK,EAAE,CAAA,CAAA;AAAA,MACrE,YAAA,CAAa,kBAAA;AAAA,MACb,WAAW,MAAA,GAAY,EAAE,UAAU,MAAA,EAAO,GAAI,EAAE,QAAA;AAAS,KAC3D;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,KAAA,CAAM,OAAA;AAAA,EACf;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,eAAA;AACT;;;AC6DO,IAAM,kBAAA,GAAqB,CAAC,QAAA,KACjC,CAAA,IAAA,EAAO,QAAQ,CAAA,OAAA;AAMV,IAAM,uBAAuB,CAAC,QAAA,KACnC,CAAC,kBAAA,CAAmB,QAAQ,CAAC;;;ACvI/B,IAAM,yBAAA,GAA4B,CAAC,MAAA,EAAQ,cAAc,CAAA;AAwBlD,SAAS,aAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,cAAA,CAAe,MAAM,CAAA;AACrB,EAAA,MAAM,UAAA,GAAa,IAAI,cAAA,CAAe,MAAM,CAAA;AAE5C,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IACE,OAAO,QAAA,KAAa,QAAA,IACpB,yBAAA,CAA0B,QAAA,CAAS,QAAkC,CAAA,EACrE;AACA,QAAA,OAAO,sBAAA;AAAA,UACL,KAAA;AAAA,UACA,MAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,SAAS,eAAe,MAAA,EAAkC;AACxD,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,sCAAsC,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,sCAAsC,CAAA;AAAA,EAC5D;AACA,EAAA,IACE,MAAA,CAAO,MAAM,QAAA,KAAa,MAAA,IAC1B,OAAO,MAAA,CAAO,KAAA,CAAM,QAAA,CAAS,MAAA,KAAW,UAAA,EACxC;AACA,IAAA,MAAM,IAAI,UAAU,sDAAsD,CAAA;AAAA,EAC5E;AACF;AASA,SAAS,sBAAA,CACP,QAAA,EACA,OAAA,EACA,UAAA,EACiC;AACjC,EAAA,OAAO,SAAS,WAA0B,IAAA,EAA0B;AAClE,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,aAAA,GAAgB,kBAAkB,IAAI,CAAA;AAC5C,IAAA,IAAI,kBAAkB,EAAA,EAAI;AAGxB,MAAA,OAAO,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS,IAAI,CAAA;AAAA,IACrC;AACA,IAAA,MAAM,YAAA,GAAe,KAAK,aAAa,CAAA;AAGvC,IAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,IAAA,CAAK,QAAA,EAAU,YAAY,CAAA;AAC9D,IAAA,MAAM,OAAA,GAAU,CAAC,GAAG,IAAI,CAAA;AACxB,IAAA,OAAA,CAAQ,aAAa,CAAA,GAAI,eAAA;AACzB,IAAA,OAAO,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS,OAAO,CAAA;AAAA,EACxC,CAAA;AACF;AAEA,SAAS,gBAAgB,IAAA,EAAsC;AAC7D,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,OAAO,IAAA,CAAK,CAAC,MAAM,QAAA,EAAU;AAClD,IAAA,OAAO,KAAK,CAAC,CAAA;AAAA,EACf;AAGA,EAAA,OAAO,WAAA;AACT;AAEA,SAAS,kBAAkB,IAAA,EAAsC;AAI/D,EAAA,KAAA,IAAS,IAAI,IAAA,CAAK,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAC5C,IAAA,IAAI,OAAO,IAAA,CAAK,CAAC,CAAA,KAAM,UAAA,EAAY;AACjC,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,EAAA;AACT;AAKA,IAAM,iBAAN,MAAqB;AAAA,EACF,KAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,MAAA,EAA4B;AACtC,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,aAAA,GAAgB,OAAO,aAAA,IAAiB,oBAAA;AAC7C,IAAA,IAAA,CAAK,eAAA,GAAkB,OAAO,eAAA,IAAmB,IAAA;AACjD,IAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA;AAC3B,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AACtB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AAAA,EACxB;AAAA,EAEA,IAAA,CACE,UACA,YAAA,EAC0C;AAC1C,IAAA,MAAM,UAAA,GAAa,IAAA;AACnB,IAAA,OAAO,eAAe,mBAEjB,YAAA,EACe;AAMlB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,cAAc,YAAY,CAAA;AAClD,MAAA,MAAM,YAAY,KAAA,EAAM;AACxB,MAAA,IAAI,QAAA,GAAoC,IAAA;AAExC,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,UAAA,CAAW,eAAA,CAAgB,QAAA,EAAU,MAAM,KAAK,CAAA;AAEjE,QAAA,IAAI,UAAA,CAAW,YAAY,KAAA,CAAA,EAAW;AACpC,UAAA,MAAM,WAAW,OAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU,CAAA;AAAA,QACvD;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAA;AAAA,UAC3B,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,YAAY;AAAA,SACvC;AAEA,QAAA,MAAM,OAAA,GAAU,cAAA,CAAe,MAAA,EAAQ,QAAQ,CAAA;AAE/C,QAAA,IAAI,UAAA,CAAW,aAAa,KAAA,CAAA,EAAW;AACrC,UAAA,MAAM,WAAW,QAAA,CAAS;AAAA,YACxB,QAAA;AAAA,YACA,IAAA;AAAA,YACA,QAAA;AAAA,YACA,UAAA,EAAY,OAAM,GAAI,SAAA;AAAA,YACtB,MAAA,EAAQ;AAAA,WACT,CAAA;AAAA,QACH;AACA,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,KAAA,EAAgB;AACvB,QAAA,IAAI,UAAA,CAAW,YAAY,MAAA,EAAW;AAGpC,UAAA,IAAI;AACF,YAAA,MAAM,WAAW,OAAA,CAAQ,EAAE,UAAU,IAAA,EAAM,QAAA,EAAU,OAAO,CAAA;AAAA,UAC9D,CAAA,CAAA,MAAQ;AAAA,UAER;AAAA,QACF;AACA,QAAA,MAAM,eAAe,KAAK,CAAA;AAAA,MAC5B;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,eAAA,CACZ,QAAA,EACA,IAAA,EACA,KAAA,EAC2B;AAC3B,IAAA,MAAM,gBAAA,GAAmB,wBAAwB,KAAK,CAAA;AACtD,IAAA,IAAI,qBAAqB,IAAA,EAAM;AAC7B,MAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,QAAA,MAAM,IAAI,qBAAqB,QAAQ,CAAA;AAAA,MACzC;AAGA,MAAA,OAAO,kBAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,aAAA,CAAc,QAAA,EAAU,IAAI,CAAA;AACxD,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,MAAA;AAAA,QACnC,gBAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF,SAAS,KAAA,EAAgB;AACvB,MAAA,MAAM,IAAI,yBAAA,CAA0B,QAAA,EAAU,KAAK,CAAA;AAAA,IACrD;AAEA,IAAA,aAAA,CAAc,QAAA,EAAU,cAAA,EAAgB,QAAA,CAAS,MAAM,CAAA;AAEvD,IAAA,IAAI,IAAA,CAAK,iBAAiB,MAAA,EAAW;AACnC,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA;AAAA,QAC7B,KAAK,YAAA,CAAa,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU;AAAA,OAChD;AACA,MAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACnB,QAAA,MAAM,IAAI,uBAAA,CAAwB,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA,MAC7D;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT;AACF,CAAA;AAEA,SAAS,aAAA,CACP,QAAA,EACA,QAAA,EACA,IAAA,EACM;AACN,EAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,UAAU,CAAC,IAAA,CAAK,QAAA,CAAS,KAAK,CAAC,CAAA;AAChE,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,wBAAA,CAAyB,QAAA,EAAU,QAAA,EAAU,IAAI,CAAA;AAAA,EAC7D;AACF;AAEA,SAAS,cAAc,YAAA,EAGrB;AACA,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAW,KAAA,EAAO,MAAA,EAAU;AAAA,EAC7C;AACA,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAE7B,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAW,KAAA,EAAO,YAAA,CAAa,CAAC,CAAA,EAAE;AAAA,EACnD;AACA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,aAAa,CAAC,CAAA;AAAA,IACpB,KAAA,EAAO,YAAA,CAAa,YAAA,CAAa,MAAA,GAAS,CAAC;AAAA,GAC7C;AACF;AAEA,SAAS,wBACP,KAAA,EACiC;AACjC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAQ,KAAA,CAA8B,KAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,YAAa,IAAA,CAAiC,SAAA;AACpD,EAAA,IAAI,SAAA,KAAc,IAAA,IAAQ,OAAO,SAAA,KAAc,QAAA,EAAU;AACvD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,WAAY,SAAA,CAAqC,QAAA;AACvD,EAAA,IAAI,QAAA,KAAa,IAAA,IAAQ,OAAO,QAAA,KAAa,QAAA,EAAU;AACrD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,QAAA;AAClB,EAAA,IACE,OAAO,UAAU,KAAK,CAAA,KAAM,YAC5B,OAAO,SAAA,CAAU,OAAO,CAAA,KAAM,QAAA,EAC9B;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,QAAA,GAAqC;AAAA,IACzC,GAAA,EAAK,UAAU,KAAK,CAAA;AAAA,IACpB,KAAA,EAAO,UAAU,OAAO;AAAA,GAC1B;AACA,EAAA,IAAI,OAAO,SAAA,CAAU,OAAO,CAAA,KAAM,QAAA,EAAU;AAC1C,IAAA,QAAA,CAAS,KAAA,GAAQ,UAAU,OAAO,CAAA;AAAA,EACpC;AACA,EAAA,IACE,OAAO,UAAU,SAAS,CAAA,KAAM,YAChC,SAAA,CAAU,SAAS,MAAM,IAAA,EACzB;AACA,IAAA,QAAA,CAAS,OAAA,GAAU,UAAU,SAAS,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAiB,QAAA,EAAqC;AAC5E,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAA+B;AAAA,IACnC,UAAU,QAAA,CAAS,OAAA;AAAA,IACnB,cAAc,QAAA,CAAS,GAAA;AAAA,IACvB,QAAQ,QAAA,CAAS;AAAA,GACnB;AACA,EAAA,MAAM,YAAA,GACJ,OAAQ,MAAA,CAA+B,KAAA,KAAU,QAAA,IAChD,OAA+B,KAAA,KAAU,IAAA,GACpC,MAAA,CAA8C,KAAA,GAChD,EAAC;AACP,EAAA,OAAO;AAAA,IACL,GAAI,MAAA;AAAA,IACJ,KAAA,EAAO;AAAA,MACL,GAAG,YAAA;AAAA,MACH,SAAA,EAAW;AAAA;AACb,GACF;AACF;AAEA,SAAS,eAAe,KAAA,EAAyB;AAC/C,EAAA,IAAI,iBAAiB,iBAAA,EAAmB;AAGtC,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,EAAe;AACrC,IAAA,MAAA,CAAO,MAAA,CAAO,OAAO,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,KAAA,GAAgB;AACvB,EAAA,IACE,OAAO,WAAA,KAAgB,WAAA,IACvB,OAAO,WAAA,CAAY,QAAQ,UAAA,EAC3B;AACA,IAAA,OAAO,YAAY,GAAA,EAAI;AAAA,EACzB;AACA,EAAA,OAAO,KAAK,GAAA,EAAI;AAClB;AAEA,IAAM,kBAAA,GAAuC;AAAA,EAC3C,GAAA,EAAK,mBAAA;AAAA,EACL,QAAQ,EAAC;AAAA,EACT,OAAA,EAAS,WAAA;AAAA,EACT,QAAQ;AACV;;;ACjWO,SAAS,mBAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,KAAA,CAAM,WAAA,KAAgB,UAAA,EAAY;AAClD,IAAA,MAAM,IAAI,UAAU,qDAAqD,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,WAAA,GAAc,IAAI,iBAAA,CAAkB,MAAM,CAAA;AAEhD,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,QAAA,OAAO,WAAA,CAAY,YAAA;AAAA,UACjB,KAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACL,KAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAAA,EAC3B;AAAA,EAEA,YAAA,CACE,UACA,OAAA,EAC2B;AAC3B,IAAA,MAAM,WAAA,GAAc,IAAA;AACpB,IAAA,OAAO,eAAe,eAAA,CAEpB,MAAA,EAAA,GAKG,IAAA,EACe;AAClB,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,UAAA,CAAW,MAAM,CAAA;AAClD,MAAA,IAAI,MAAA,GAIA,MAAA;AACJ,MAAA,IAAI,WAAA,CAAY,eAAe,MAAA,EAAW;AACxC,QAAA,MAAM,WAAA,GAAc,MAAM,OAAA,CAAQ,OAAA;AAAA,UAChC,WAAA,CAAY,WAAW,MAAM;AAAA,SAC/B;AACA,QAAA,IAAI,gBAAgB,MAAA,EAAW;AAE7B,UAAA,MAAA,GAAS;AAAA,YACP,GAAG,WAAA;AAAA,YACH,KAAA,EAAO,WAAA,CAAY,KAAA,IAAS,MAAA,CAAO;AAAA,WACrC;AAAA,QACF;AAAA,MACF;AACA,MAAA,OAAO,QAAA,CAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,GAAG,IAAI,CAAA;AAAA,IAC/C,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAA,EAQtB;AACD,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,YAAY,MAAA,CAAO,IAAA,EAAM,KAAK,QAAQ,CAAA;AACxE,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,KAAA,IAAS,EAAC;AACtC,IAAA,MAAM,iBAAA,GACJ,OAAO,YAAA,CAAa,WAAW,CAAA,KAAM,QAAA,IACrC,YAAA,CAAa,WAAW,CAAA,KAAM,IAAA,GACzB,YAAA,CAAa,WAAW,IACzB,EAAC;AACP,IAAA,OAAO;AAAA,MACL,GAAG,MAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,YAAA;AAAA,QACH,SAAA,EAAW;AAAA,UACT,GAAG,iBAAA;AAAA,UACH;AAAA;AACF;AACF,KACF;AAAA,EACF;AACF,CAAA;AAOO,SAAS,kBAAkB,QAAA,EAKN;AAC1B,EAAA,OAAO;AAAA,IACL,SAAA,EAAW;AAAA,MACT,QAAA,EAAU;AAAA,QACR,KAAK,QAAA,CAAS,GAAA;AAAA,QACd,OAAO,QAAA,CAAS,KAAA;AAAA,QAChB,GAAI,SAAS,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,GAAI,EAAC;AAAA,QAChE,GAAI,SAAS,OAAA,KAAY,MAAA,GACrB,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAQ,GAC5B;AAAC;AACP;AACF,GACF;AACF;;;ACtLO,IAAM,wBAAA,GAAkD;AAAA,EAC7D,cAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF;AA2BO,IAAM,yBAAA,GAAN,MAAM,0BAAA,CAAuD;AAAA,EACjD,KAAA;AAAA,EAEjB,WAAA,CAAY,KAAA,GAAmC,EAAC,EAAG;AACjD,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAI,GAAA,CAAI,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS,CAAC,IAAA,CAAK,SAAA,EAAW,IAAI,CAAC,CAAC,CAAA;AAAA,EAClE;AAAA,EAEA,OAAO,SAAA,EAAsC;AAC3C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,SAAS,CAAA,IAAK,IAAA;AAAA,EACtC;AAAA;AAAA,EAGA,SAAS,IAAA,EAA6C;AACpD,IAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AAC/B,IAAA,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,SAAA,EAAW,IAAI,CAAA;AAC7B,IAAA,OAAO,IAAI,0BAAA,CAA0B,CAAC,GAAG,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,EACzD;AACF;AA8BO,SAAS,mBACd,OAAA,EACkB;AAClB,EAAA,MAAM,cACJ,OAAA,CAAQ,WAAA,KACP,CAAC,QAAA,KAAqB,wBAAA,CAAyB,SAAS,QAAQ,CAAA,CAAA;AACnE,EAAA,MAAM,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,uBAAA;AAC9B,EAAA,MAAM,eAAA,GAAwC,QAAQ,eAAA,IAAmB;AAAA,IACvE,KAAA,EAAO;AAAA,GACT;AAEA,EAAA,OAAO,OAAO;AAAA,IACZ,QAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF,KAAqC;AACnC,IAAA,IAAI,CAAC,WAAA,CAAY,QAAQ,CAAA,EAAG;AAC1B,MAAA,OAAO,eAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,iBAAiB,IAAI,CAAA;AACvC,IAAA,IAAI,cAAc,IAAA,EAAM;AACtB,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,MAAA,EAAQ,eAAe,QAAQ,CAAA,8BAAA;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,OAAA,CAAQ,QAAQ,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAClE,IAAA,IAAI,SAAS,IAAA,EAAM;AACjB,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,MAAA,EAAQ,8BAA8B,SAAS,CAAA,CAAA;AAAA,OACjD;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,CAAK,SAAS,IAAA,EAAM;AACtB,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB;AAEA,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AACpC,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,QACE,IAAA,CAAK,MAAA,IACL,QAAQ,QAAA,CAAS,GAAG,kCAAkC,SAAS,CAAA,CAAA;AAAA,KACnE;AAAA,EACF,CAAA;AACF;AAEA,SAAS,wBAAwB,IAAA,EAA8B;AAC7D,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAA,GAAS,IAAA;AACf,EAAA,MAAM,KAAA,GAAQ,OAAO,OAAO,CAAA;AAC5B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,SAAS,CAAA,EAAG;AACjD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAO,WAAW,CAAA;AACpC,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,CAAU,SAAS,CAAA,EAAG;AACzD,IAAA,OAAO,SAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,qBAAA,CACd,OACA,MAAA,EACkB;AAClB,EAAA,OAAO,OAAO,KAAA,KAAyC;AACrD,IAAA,MAAM,IAAI,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA;AAC5C,IAAA,IAAI,CAAC,EAAE,KAAA,EAAO;AACZ,MAAA,OAAO,CAAA;AAAA,IACT;AACA,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EACtC,CAAA;AACF","file":"index.cjs","sourcesContent":["/*\n Error types for @openagentid/mcp.\n \n These map onto MCP JSON-RPC error codes so callers see consistent\n * failure modes regardless of which middleware step rejected the call.\n \n Reference: https://www.jsonrpc.org/specification#error_object\n /\n\n/* Standard JSON-RPC + MCP error codes used by the middleware. /\nexport const McpErrorCode = {\n /* -32600 — request was malformed at the JSON-RPC layer. /\n InvalidRequest: -32600,\n /* -32601 — the requested method/tool was not found. /\n MethodNotFound: -32601,\n /* -32602 — params failed validation. /\n InvalidParams: -32602,\n /* -32603 — internal server error. /\n InternalError: -32603,\n /* -32000 — generic server error (used for auth failures by default). /\n ServerError: -32000,\n /* -32001 — identity verification failed. /\n AuthenticationFailed: -32001,\n /* -32002 — caller does not hold the required scope. /\n AuthorizationDenied: -32002,\n /* -32003 — skills policy rejected the call. /\n SkillsPolicyDenied: -32003,\n} as const;\n\nexport type McpErrorCodeValue =\n (typeof McpErrorCode)[keyof typeof McpErrorCode];\n\n/\n Base class for all middleware errors. Subclasses set a default\n * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.\n /\nexport class OpenAgentMcpError extends Error {\n public readonly code: McpErrorCodeValue;\n public readonly data?: Record<string, unknown>;\n\n constructor(\n message: string,\n code: McpErrorCodeValue,\n data?: Record<string, unknown>,\n ) {\n super(message);\n this.name = 'OpenAgentMcpError';\n this.code = code;\n if (data !== undefined) {\n this.data = data;\n }\n }\n\n /\n Convert to a plain JSON-RPC error payload that the MCP SDK can\n * serialize over the wire.\n /\n toJsonRpcError(): {\n code: McpErrorCodeValue;\n message: string;\n data?: Record<string, unknown>;\n } {\n if (this.data !== undefined) {\n return { code: this.code, message: this.message, data: this.data };\n }\n return { code: this.code, message: this.message };\n }\n}\n\n/* Caller did not present an OpenAgent identity envelope. /\nexport class MissingIdentityError extends OpenAgentMcpError {\n constructor(toolName: string) {\n super(\n `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,\n McpErrorCode.AuthenticationFailed,\n { toolName },\n );\n this.name = 'MissingIdentityError';\n }\n}\n\n/* Identity envelope was present but the verifier rejected it. /\nexport class IdentityVerificationError extends OpenAgentMcpError {\n constructor(toolName: string, cause: unknown) {\n super(\n `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,\n McpErrorCode.AuthenticationFailed,\n { toolName, cause: formatCause(cause) },\n );\n this.name = 'IdentityVerificationError';\n }\n}\n\n/* Caller's verified identity does not hold the required scopes. /\nexport class AuthorizationDeniedError extends OpenAgentMcpError {\n constructor(\n toolName: string,\n requiredScopes: ReadonlyArray<string>,\n heldScopes: ReadonlyArray<string>,\n ) {\n super(\n `Tool '${toolName}' requires scopes [${requiredScopes.join(', ')}], caller holds [${heldScopes.join(', ')}]`,\n McpErrorCode.AuthorizationDenied,\n {\n toolName,\n requiredScopes: [...requiredScopes],\n heldScopes: [...heldScopes],\n },\n );\n this.name = 'AuthorizationDeniedError';\n }\n}\n\n/* Skills policy hook returned `allow: false`. /\nexport class SkillsPolicyDeniedError extends OpenAgentMcpError {\n constructor(toolName: string, reason: string \| undefined) {\n super(\n `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ''}`,\n McpErrorCode.SkillsPolicyDenied,\n reason !== undefined ? { toolName, reason } : { toolName },\n );\n this.name = 'SkillsPolicyDeniedError';\n }\n}\n\nfunction formatCause(cause: unknown): string {\n if (cause instanceof Error) {\n return cause.message;\n }\n if (typeof cause === 'string') {\n return cause;\n }\n return 'unknown error';\n}\n","/\n Public types for @openagentid/mcp.\n \n These interfaces describe the contract the middleware expects from an\n * OpenAgent {@link Agent} instance and the surrounding configuration. They are\n * defined locally so the package can be installed without `@openagentid/sdk` in\n * tests, in CI, and in environments where the host application brings its own\n * verifier implementation.\n \n The real `@openagentid/sdk` exports types that are structurally compatible\n * with these — there is no runtime dependency.\n /\n\n/\n A decentralized identifier following the `did:oas:` method or any other\n DID method understood by the configured verifier.\n /\nexport type Did = string;\n\n/\n The four pieces of metadata an MCP request carries about the calling\n * agent. Populated by the {@link createClientInterceptor} on the call site\n * and consumed by the server middleware.\n /\nexport interface OpenAgentRequestIdentity {\n /* Caller's DID — typically `did:oas:...`. /\n did: Did;\n /\n A signed challenge response or capability token (Arsenal ACT) the\n * server can verify offline. Format is opaque to the middleware.\n /\n proof: string;\n /\n Optional bearer-style nonce. Servers may require it for replay\n * protection. Verifiers MUST treat the value as untrusted until\n * verification succeeds.\n /\n nonce?: string;\n /\n Free-form context the verifier may use (issuer DID, audience, scopes\n * the caller claims). Always validated against the verifier's policy.\n /\n context?: Record<string, unknown>;\n}\n\n/\n The result of running the auth pipeline against an incoming MCP request.\n * Available to post-call hooks and audit log emitters.\n /\nexport interface VerifiedIdentity {\n did: Did;\n scopes: ReadonlyArray<string>;\n /* Audit identifier echoed back to the caller in result `_meta`. /\n auditId: string;\n /* Verifier-issued claims about the caller. /\n claims: Readonly<Record<string, unknown>>;\n}\n\n/\n The verifier interface — implemented by `@openagentid/sdk` (production) and\n * by the in-memory test agent shipped here.\n \n Implementations MUST be deterministic for a given input and MUST NOT\n * mutate the request identity object.\n /\nexport interface IdentityVerifier {\n verify(\n identity: OpenAgentRequestIdentity,\n requiredScopes: ReadonlyArray<string>,\n ): Promise<VerifiedIdentity>;\n}\n\n/\n Minimal Agent surface — only the parts of the OpenAgent SDK Agent that\n * the MCP middleware actually needs.\n /\nexport interface Agent {\n did: Did;\n verifier: IdentityVerifier;\n /\n Sign an outbound MCP call so the receiving server can verify the\n * caller. Returns the identity envelope to attach as `_meta.openagent`.\n /\n signRequest(\n toolName: string,\n audience?: Did,\n ): Promise<OpenAgentRequestIdentity>;\n}\n\n/\n Result envelope returned by an authenticated tool call. The `auditId` is\n * pushed into `_meta.openagent.audit_id` on the response, so callers can\n * correlate logs end-to-end.\n /\nexport interface AuditedResultMeta {\n audit_id: string;\n verified_did: Did;\n scopes: ReadonlyArray<string>;\n}\n\n/* Per-tool scope deriver. /\nexport type ScopeDeriver = (\n toolName: string,\n args: unknown,\n) => ReadonlyArray<string>;\n\n/\n Hook signature for the skills policy. The hook receives the tool name,\n * the arguments, and the verified identity, and decides whether the call\n * should be allowed.\n /\nexport type SkillsPolicyHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity;\n}) => Promise<SkillsPolicyDecision> \| SkillsPolicyDecision;\n\nexport interface SkillsPolicyDecision {\n allow: boolean;\n reason?: string;\n}\n\n/\n Hook fired before a tool body executes — after the identity has been\n * verified and the skills policy has approved the call.\n /\nexport type PreCallHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity;\n}) => Promise<void> \| void;\n\n/\n Hook fired after a tool body executes successfully. Use it for audit\n * logging, metrics, and trace propagation. Throwing from this hook does\n * NOT roll back the tool call.\n /\nexport type PostCallHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity;\n durationMs: number;\n result: unknown;\n}) => Promise<void> \| void;\n\n/\n Hook fired when the tool body or any earlier middleware step throws.\n * The middleware re-throws the error after running this hook so MCP\n * clients still observe the original failure mode.\n /\nexport type ErrorHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity \| null;\n error: unknown;\n}) => Promise<void> \| void;\n\n/\n Configuration for {@link withOpenAgent}.\n /\nexport interface OpenAgentMcpConfig {\n /* The agent that owns this MCP server (used for outbound signing). /\n agent: Agent;\n /\n Per-tool required scope set. Defaults to\n * `(toolName) => [`mcp:${toolName}:invoke`]`.\n /\n requireScopes?: ScopeDeriver;\n /\n If true (default), tool calls without an `_meta.openagent.identity`\n * envelope are rejected. Set to false to opt-in to permissive mode for\n * local development — the middleware will still run hooks but skip\n * verification.\n /\n requireIdentity?: boolean;\n /* Optional skills policy hook. /\n skillsPolicy?: SkillsPolicyHook;\n /* Optional pre-call hook. /\n preCall?: PreCallHook;\n /* Optional post-call hook for audit/log emission. /\n postCall?: PostCallHook;\n /* Optional error hook. /\n onError?: ErrorHook;\n /\n Override the default `mcp:<tool>:invoke` scope format. Receives the\n * tool name and returns the canonical scope string.\n /\n scopeFormat?: (toolName: string) => string;\n}\n\n/\n Default scope format used when {@link OpenAgentMcpConfig.scopeFormat} is\n * not supplied.\n /\nexport const defaultScopeFormat = (toolName: string): string =>\n `mcp:${toolName}:invoke`;\n\n/\n Default scope deriver used when {@link OpenAgentMcpConfig.requireScopes}\n * is not supplied.\n /\nexport const defaultRequireScopes = (toolName: string): ReadonlyArray<string> =>\n [defaultScopeFormat(toolName)];\n","/\n Server-side middleware for @openagentid/mcp.\n \n Wraps an MCP {@link McpServer} (from `@modelcontextprotocol/sdk`) so that\n * every tool registration runs through an OpenAgent authentication\n * pipeline:\n \n 1. Extract the identity envelope from `extra._meta.openagent.identity`.\n * 2. Verify it via the configured {@link IdentityVerifier} and check\n * that the caller holds the scopes returned by `requireScopes`.\n * 3. Run the optional skills policy hook.\n * 4. Run the optional pre-call hook.\n * 5. Invoke the user's tool callback.\n * 6. Run the optional post-call hook with the result + duration.\n * 7. Stamp `audit_id` + `verified_did` into the result `_meta.openagent`.\n * 8. On error, run the optional onError hook and re-throw.\n \n Implementation note — version pinning:\n * The middleware is built against `@modelcontextprotocol/sdk@^1.27.0`.\n * The TypeScript SDK changed its tool registration API between 1.17 and\n * 1.27 (`tool(name, cb, ...)` → `registerTool(name, config, cb)`); both\n * call sites are intercepted here so any 1.x server still works.\n \n We deliberately do NOT touch the private `_registeredTools` map. The\n * middleware uses a JavaScript {@link Proxy} so callbacks are wrapped\n * exactly once at registration time, before the SDK's internal\n * request handler ever sees them.\n /\n\nimport {\n AuthorizationDeniedError,\n IdentityVerificationError,\n MissingIdentityError,\n OpenAgentMcpError,\n SkillsPolicyDeniedError,\n} from './errors.js';\nimport {\n Agent,\n AuditedResultMeta,\n ErrorHook,\n OpenAgentMcpConfig,\n OpenAgentRequestIdentity,\n PostCallHook,\n PreCallHook,\n ScopeDeriver,\n SkillsPolicyHook,\n VerifiedIdentity,\n defaultRequireScopes,\n} from './types.js';\n\n/\n Minimal McpServer surface used by the middleware. We avoid importing\n * concrete types from `@modelcontextprotocol/sdk` because peer-dep\n * versions vary across host applications and the SDK's own type exports\n * are subject to change. The shape below is the intersection of every\n * `1.x` McpServer release.\n /\nexport interface McpServerLike {\n tool(...args: unknown[]): unknown;\n registerTool(...args: unknown[]): unknown;\n}\n\n/\n Names of methods on the underlying server that take a tool callback as\n * one of their arguments. Both APIs are intercepted; if the SDK adds new\n * registration methods, append to this list.\n /\nconst TOOL_REGISTRATION_METHODS = ['tool', 'registerTool'] as const;\n\ntype ToolRegistrationMethod = (typeof TOOL_REGISTRATION_METHODS)[number];\n\n/\n Wrap an MCP server so every tool call is authenticated against an\n * OpenAgent identity.\n \n @example\n * ```ts\n * import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\n * import { withOpenAgent } from '@openagentid/mcp';\n * import { agent } from './my-agent.js';\n \n const server = new McpServer({ name: 'my-tools', version: '0.1.0' });\n * const authedServer = withOpenAgent(server, { agent });\n \n authedServer.tool('search_web', searchHandler);\n * ```\n \n The returned proxy is type-compatible with the underlying server, so\n * existing code that calls `tool()`, `registerTool()`, `connect()`, etc.\n * keeps working without changes.\n /\nexport function withOpenAgent<T extends McpServerLike>(\n server: T,\n config: OpenAgentMcpConfig,\n): T {\n validateConfig(config);\n const middleware = new ToolMiddleware(config);\n\n return new Proxy(server, {\n get(target, property, receiver) {\n const value = Reflect.get(target, property, receiver);\n if (typeof value !== 'function') {\n return value;\n }\n if (\n typeof property === 'string' &&\n TOOL_REGISTRATION_METHODS.includes(property as ToolRegistrationMethod)\n ) {\n return wrapRegistrationMethod(\n value as (...args: unknown[]) => unknown,\n target,\n middleware,\n );\n }\n // Bind methods so `this` stays correct when destructured.\n return value.bind(target);\n },\n }) as T;\n}\n\nfunction validateConfig(config: OpenAgentMcpConfig): void {\n if (config === null \|\| typeof config !== 'object') {\n throw new TypeError('OpenAgentMcpConfig must be an object');\n }\n if (config.agent === undefined \|\| config.agent === null) {\n throw new TypeError('OpenAgentMcpConfig.agent is required');\n }\n if (\n config.agent.verifier === undefined \|\|\n typeof config.agent.verifier.verify !== 'function'\n ) {\n throw new TypeError('OpenAgentMcpConfig.agent.verifier.verify is required');\n }\n}\n\n/\n Wrap a single registration method so the user-supplied callback gets\n * replaced by an auth-wrapped one. The MCP SDK accepts the callback in\n * different positional slots depending on overload — we walk the args\n * list and replace the FIRST function we find. This is the same approach\n * the SDK itself uses internally.\n /\nfunction wrapRegistrationMethod(\n original: (...args: unknown[]) => unknown,\n thisArg: unknown,\n middleware: ToolMiddleware,\n): (...args: unknown[]) => unknown {\n return function wrapped(this: unknown, ...args: unknown[]): unknown {\n const toolName = extractToolName(args);\n const callbackIndex = findCallbackIndex(args);\n if (callbackIndex === -1) {\n // No callback in the args — defensive: forward as-is so we don't\n // mask SDK-level errors that the host would otherwise see.\n return original.apply(thisArg, args);\n }\n const userCallback = args[callbackIndex] as (\n ...callbackArgs: unknown[]\n ) => unknown;\n const wrappedCallback = middleware.wrap(toolName, userCallback);\n const newArgs = [...args];\n newArgs[callbackIndex] = wrappedCallback;\n return original.apply(thisArg, newArgs);\n };\n}\n\nfunction extractToolName(args: ReadonlyArray<unknown>): string {\n if (args.length > 0 && typeof args[0] === 'string') {\n return args[0];\n }\n // registerTool's first arg is also a string in 1.27, so this should\n // never trigger — kept as a safety net.\n return '<unknown>';\n}\n\nfunction findCallbackIndex(args: ReadonlyArray<unknown>): number {\n // Walk the args from the end so we find the LAST function — that's\n // the tool body in every overload of both `tool()` and\n // `registerTool()`.\n for (let i = args.length - 1; i >= 0; i -= 1) {\n if (typeof args[i] === 'function') {\n return i;\n }\n }\n return -1;\n}\n\n/\n Holds the middleware configuration and wraps individual tool callbacks.\n /\nclass ToolMiddleware {\n private readonly agent: Agent;\n private readonly requireScopes: ScopeDeriver;\n private readonly requireIdentity: boolean;\n private readonly skillsPolicy: SkillsPolicyHook \| undefined;\n private readonly preCall: PreCallHook \| undefined;\n private readonly postCall: PostCallHook \| undefined;\n private readonly onError: ErrorHook \| undefined;\n\n constructor(config: OpenAgentMcpConfig) {\n this.agent = config.agent;\n this.requireScopes = config.requireScopes ?? defaultRequireScopes;\n this.requireIdentity = config.requireIdentity ?? true;\n this.skillsPolicy = config.skillsPolicy;\n this.preCall = config.preCall;\n this.postCall = config.postCall;\n this.onError = config.onError;\n }\n\n wrap(\n toolName: string,\n userCallback: (...args: unknown[]) => unknown,\n ): (...args: unknown[]) => Promise<unknown> {\n const middleware = this;\n return async function wrappedCallback(\n this: unknown,\n ...callbackArgs: unknown[]\n ): Promise<unknown> {\n // The MCP SDK invokes tool callbacks in two shapes depending on\n // whether the tool has an input schema:\n // (extra) — no schema\n // (args, extra) — with schema\n // The `extra` is always the LAST arg.\n const { args, extra } = splitToolArgs(callbackArgs);\n const startedAt = nowMs();\n let identity: VerifiedIdentity \| null = null;\n\n try {\n identity = await middleware.runAuthPipeline(toolName, args, extra);\n\n if (middleware.preCall !== undefined) {\n await middleware.preCall({ toolName, args, identity });\n }\n\n const result = await Promise.resolve(\n userCallback.apply(this, callbackArgs),\n );\n\n const stamped = stampAuditMeta(result, identity);\n\n if (middleware.postCall !== undefined) {\n await middleware.postCall({\n toolName,\n args,\n identity,\n durationMs: nowMs() - startedAt,\n result: stamped,\n });\n }\n return stamped;\n } catch (error: unknown) {\n if (middleware.onError !== undefined) {\n // The error hook MUST NOT throw — if it does, swallow so the\n // original error propagates to the caller intact.\n try {\n await middleware.onError({ toolName, args, identity, error });\n } catch {\n / intentionally ignored /\n }\n }\n throw normalizeError(error);\n }\n };\n }\n\n private async runAuthPipeline(\n toolName: string,\n args: unknown,\n extra: unknown,\n ): Promise<VerifiedIdentity> {\n const identityEnvelope = extractIdentityEnvelope(extra);\n if (identityEnvelope === null) {\n if (this.requireIdentity) {\n throw new MissingIdentityError(toolName);\n }\n // Permissive mode: synthesize an \"anonymous\" identity so hooks\n // still run with a stable shape.\n return ANONYMOUS_IDENTITY;\n }\n\n const requiredScopes = this.requireScopes(toolName, args);\n let identity: VerifiedIdentity;\n try {\n identity = await this.agent.verifier.verify(\n identityEnvelope,\n requiredScopes,\n );\n } catch (cause: unknown) {\n throw new IdentityVerificationError(toolName, cause);\n }\n\n enforceScopes(toolName, requiredScopes, identity.scopes);\n\n if (this.skillsPolicy !== undefined) {\n const decision = await Promise.resolve(\n this.skillsPolicy({ toolName, args, identity }),\n );\n if (!decision.allow) {\n throw new SkillsPolicyDeniedError(toolName, decision.reason);\n }\n }\n\n return identity;\n }\n}\n\nfunction enforceScopes(\n toolName: string,\n required: ReadonlyArray<string>,\n held: ReadonlyArray<string>,\n): void {\n const missing = required.filter((scope) => !held.includes(scope));\n if (missing.length > 0) {\n throw new AuthorizationDeniedError(toolName, required, held);\n }\n}\n\nfunction splitToolArgs(callbackArgs: ReadonlyArray<unknown>): {\n args: unknown;\n extra: unknown;\n} {\n if (callbackArgs.length === 0) {\n return { args: undefined, extra: undefined };\n }\n if (callbackArgs.length === 1) {\n // Single argument is the `extra` object.\n return { args: undefined, extra: callbackArgs[0] };\n }\n return {\n args: callbackArgs[0],\n extra: callbackArgs[callbackArgs.length - 1],\n };\n}\n\nfunction extractIdentityEnvelope(\n extra: unknown,\n): OpenAgentRequestIdentity \| null {\n if (extra === null \|\| typeof extra !== 'object') {\n return null;\n }\n const meta = (extra as { _meta?: unknown })._meta;\n if (meta === null \|\| typeof meta !== 'object') {\n return null;\n }\n const openAgent = (meta as { openagent?: unknown }).openagent;\n if (openAgent === null \|\| typeof openAgent !== 'object') {\n return null;\n }\n const identity = (openAgent as { identity?: unknown }).identity;\n if (identity === null \|\| typeof identity !== 'object') {\n return null;\n }\n const candidate = identity as Record<string, unknown>;\n if (\n typeof candidate['did'] !== 'string' \|\|\n typeof candidate['proof'] !== 'string'\n ) {\n return null;\n }\n const envelope: OpenAgentRequestIdentity = {\n did: candidate['did'],\n proof: candidate['proof'],\n };\n if (typeof candidate['nonce'] === 'string') {\n envelope.nonce = candidate['nonce'];\n }\n if (\n typeof candidate['context'] === 'object' &&\n candidate['context'] !== null\n ) {\n envelope.context = candidate['context'] as Record<string, unknown>;\n }\n return envelope;\n}\n\nfunction stampAuditMeta(result: unknown, identity: VerifiedIdentity): unknown {\n if (result === null \|\| typeof result !== 'object') {\n return result;\n }\n const auditMeta: AuditedResultMeta = {\n audit_id: identity.auditId,\n verified_did: identity.did,\n scopes: identity.scopes,\n };\n const existingMeta =\n typeof (result as { _meta?: unknown })._meta === 'object' &&\n (result as { _meta?: unknown })._meta !== null\n ? ((result as { _meta: Record<string, unknown> })._meta)\n : {};\n return {\n ...(result as Record<string, unknown>),\n _meta: {\n ...existingMeta,\n openagent: auditMeta,\n },\n };\n}\n\nfunction normalizeError(error: unknown): unknown {\n if (error instanceof OpenAgentMcpError) {\n // Surface the JSON-RPC code on the error so the SDK's error\n // serializer picks it up.\n const jsonRpc = error.toJsonRpcError();\n Object.assign(error, { code: jsonRpc.code, data: jsonRpc.data });\n }\n return error;\n}\n\nfunction nowMs(): number {\n if (\n typeof performance !== 'undefined' &&\n typeof performance.now === 'function'\n ) {\n return performance.now();\n }\n return Date.now();\n}\n\nconst ANONYMOUS_IDENTITY: VerifiedIdentity = {\n did: 'did:oas:anonymous',\n scopes: [],\n auditId: 'anonymous',\n claims: {},\n};\n\nexport { ANONYMOUS_IDENTITY };\n","/\n Client-side interceptor for @openagentid/mcp.\n \n Adds an OpenAgent identity envelope (`_meta.openagent.identity`) to\n * outbound MCP `tools/call` requests so an authenticated server can\n * verify the caller. The interceptor wraps the MCP client's `callTool`\n * method via a JavaScript Proxy — the rest of the client surface (list\n * tools, list resources, prompts) is forwarded unchanged.\n \n Usage:\n \n ```ts\n * import { Client } from '@modelcontextprotocol/sdk/client/index.js';\n * import { withOpenAgentClient } from '@openagentid/mcp/client';\n \n const client = new Client({ name: 'my-agent', version: '0.1.0' });\n * const authedClient = withOpenAgentClient(client, { agent });\n \n await authedClient.callTool({ name: 'search_web', arguments: { q: 'mcp' } });\n * ```\n /\n\nimport { Agent } from './types.js';\n\n/\n Minimal MCP client surface used by the interceptor. Like the server\n * adapter, we describe just the methods we need to keep peer-dep\n * compatibility broad.\n /\nexport interface McpClientLike {\n callTool(\n params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n },\n ...rest: unknown[]\n ): Promise<unknown>;\n}\n\nexport interface OpenAgentClientConfig {\n /* The agent doing the calling — used to sign each request. /\n agent: Agent;\n /\n Optional audience DID. When set, it is passed to\n * {@link Agent.signRequest} so the proof can be bound to a specific\n * server. Most production deployments should set this.\n /\n audience?: string;\n /\n Optional hook fired before every outbound call. Use it for client-\n * side metrics or to mutate the params (e.g., add tracing headers).\n * Returning a value replaces the params.\n /\n beforeCall?: (params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n }) => Promise<\n \| { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n \| void\n > \| { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n \| void;\n}\n\n/\n Wrap an MCP client so every outbound `callTool` carries an OpenAgent\n * identity envelope.\n /\nexport function withOpenAgentClient<T extends McpClientLike>(\n client: T,\n config: OpenAgentClientConfig,\n): T {\n if (config === null \|\| typeof config !== 'object') {\n throw new TypeError('OpenAgentClientConfig must be an object');\n }\n if (config.agent === undefined \|\| config.agent === null) {\n throw new TypeError('OpenAgentClientConfig.agent is required');\n }\n if (typeof config.agent.signRequest !== 'function') {\n throw new TypeError('OpenAgentClientConfig.agent.signRequest is required');\n }\n\n const interceptor = new ClientInterceptor(config);\n\n return new Proxy(client, {\n get(target, property, receiver) {\n const value = Reflect.get(target, property, receiver);\n if (typeof value !== 'function') {\n return value;\n }\n if (property === 'callTool') {\n return interceptor.wrapCallTool(\n value as McpClientLike['callTool'],\n target,\n );\n }\n return value.bind(target);\n },\n }) as T;\n}\n\nclass ClientInterceptor {\n private readonly agent: Agent;\n private readonly audience: string \| undefined;\n private readonly beforeCall: OpenAgentClientConfig['beforeCall'];\n\n constructor(config: OpenAgentClientConfig) {\n this.agent = config.agent;\n this.audience = config.audience;\n this.beforeCall = config.beforeCall;\n }\n\n wrapCallTool(\n original: McpClientLike['callTool'],\n thisArg: unknown,\n ): McpClientLike['callTool'] {\n const interceptor = this;\n return async function wrappedCallTool(\n this: unknown,\n params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n },\n ...rest: unknown[]\n ): Promise<unknown> {\n const signed = await interceptor.signParams(params);\n let toSend: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta: Record<string, unknown>;\n } = signed;\n if (interceptor.beforeCall !== undefined) {\n const replacement = await Promise.resolve(\n interceptor.beforeCall(signed),\n );\n if (replacement !== undefined) {\n // Re-attach the signed _meta if the hook stripped it.\n toSend = {\n ...replacement,\n _meta: replacement._meta ?? signed._meta,\n };\n }\n }\n return original.call(thisArg, toSend, ...rest);\n };\n }\n\n private async signParams(params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n }): Promise<{\n name: string;\n arguments?: Record<string, unknown>;\n _meta: Record<string, unknown>;\n }> {\n const identity = await this.agent.signRequest(params.name, this.audience);\n const existingMeta = params._meta ?? {};\n const existingOpenAgent =\n typeof existingMeta['openagent'] === 'object' &&\n existingMeta['openagent'] !== null\n ? (existingMeta['openagent'] as Record<string, unknown>)\n : {};\n return {\n ...params,\n _meta: {\n ...existingMeta,\n openagent: {\n ...existingOpenAgent,\n identity,\n },\n },\n };\n }\n}\n\n/\n Helper for tests and tools that want to construct the identity\n * envelope manually without going through a full Agent. Returns a `_meta`\n * object that can be merged into a CallToolRequest's params.\n /\nexport function buildIdentityMeta(identity: {\n did: string;\n proof: string;\n nonce?: string;\n context?: Record<string, unknown>;\n}): Record<string, unknown> {\n return {\n openagent: {\n identity: {\n did: identity.did,\n proof: identity.proof,\n ...(identity.nonce !== undefined ? { nonce: identity.nonce } : {}),\n ...(identity.context !== undefined\n ? { context: identity.context }\n : {}),\n },\n },\n };\n}\n","/\n Skills policy support for @openagentid/mcp.\n \n MCP tools and SKILLS.md entries describe the same thing: a capability\n * an agent can invoke. When an MCP server exposes a tool that proxies\n * skill invocation (typically named `invoke_skill` or any name a host\n * application configures), the middleware consults a skills policy\n * before allowing the call. This file provides the helper that picks the\n * right policy for a given call and a small built-in store implementation\n * suitable for tests and reference implementations.\n /\n\nimport { SkillsPolicyDecision, SkillsPolicyHook } from './types.js';\n\n/\n Tool name prefixes that the middleware treats as skill-like by default.\n * Host applications can override the matcher entirely via\n * {@link createSkillsPolicy}.\n /\nexport const DEFAULT_SKILL_TOOL_NAMES: ReadonlyArray<string> = [\n 'invoke_skill',\n 'run_skill',\n 'execute_skill',\n 'skill.invoke',\n 'skill.run',\n];\n\n/\n A single rule describing whether a `(skillName, did)` pair is allowed.\n * `null` for `dids` means \"any verified caller\". An empty array means\n * \"no caller\".\n /\nexport interface SkillsRule {\n skillName: string;\n /* DIDs allowed to invoke this skill, or `null` for any. /\n dids: ReadonlyArray<string> \| null;\n /* Optional reason emitted when the rule denies a call. /\n reason?: string;\n}\n\n/\n Policy store interface — implementations may be in-memory, file-backed\n * by `SKILLS.md`, or fetched from a remote service.\n /\nexport interface SkillsPolicyStore {\n lookup(skillName: string): Promise<SkillsRule \| null> \| SkillsRule \| null;\n}\n\n/\n Trivial in-memory store useful in tests and as a starting point for\n * production stores.\n /\nexport class InMemorySkillsPolicyStore implements SkillsPolicyStore {\n private readonly rules: Map<string, SkillsRule>;\n\n constructor(rules: ReadonlyArray<SkillsRule> = []) {\n this.rules = new Map(rules.map((rule) => [rule.skillName, rule]));\n }\n\n lookup(skillName: string): SkillsRule \| null {\n return this.rules.get(skillName) ?? null;\n }\n\n /* Returns a NEW store with the given rule applied (immutable update). /\n withRule(rule: SkillsRule): InMemorySkillsPolicyStore {\n const next = new Map(this.rules);\n next.set(rule.skillName, rule);\n return new InMemorySkillsPolicyStore([...next.values()]);\n }\n}\n\nexport interface CreateSkillsPolicyOptions {\n /* The store backing skill lookups. /\n store: SkillsPolicyStore;\n /\n Returns true when a tool call should be checked against the skills\n * policy. Defaults to matching the tool name against\n * {@link DEFAULT_SKILL_TOOL_NAMES}.\n /\n isSkillTool?: (toolName: string) => boolean;\n /\n Extracts the skill name from the tool's arguments. Defaults to\n * reading `args.skill` or `args.skillName`.\n /\n extractSkillName?: (args: unknown) => string \| null;\n /\n Default decision when no rule matches. Defaults to `{ allow: true }`\n * to keep non-skill tools unaffected.\n /\n defaultDecision?: SkillsPolicyDecision;\n}\n\n/\n Build a {@link SkillsPolicyHook} from a store and matching options.\n \n The returned hook always allows tools that are not skill-like; it only\n * consults the store when {@link CreateSkillsPolicyOptions.isSkillTool}\n * returns true.\n /\nexport function createSkillsPolicy(\n options: CreateSkillsPolicyOptions,\n): SkillsPolicyHook {\n const isSkillTool =\n options.isSkillTool ??\n ((toolName: string) => DEFAULT_SKILL_TOOL_NAMES.includes(toolName));\n const extractSkillName =\n options.extractSkillName ?? defaultExtractSkillName;\n const defaultDecision: SkillsPolicyDecision = options.defaultDecision ?? {\n allow: true,\n };\n\n return async ({\n toolName,\n args,\n identity,\n }): Promise<SkillsPolicyDecision> => {\n if (!isSkillTool(toolName)) {\n return defaultDecision;\n }\n\n const skillName = extractSkillName(args);\n if (skillName === null) {\n return {\n allow: false,\n reason: `Skill tool '${toolName}' invoked without a skill name`,\n };\n }\n\n const rule = await Promise.resolve(options.store.lookup(skillName));\n if (rule === null) {\n return {\n allow: false,\n reason: `No policy entry for skill '${skillName}'`,\n };\n }\n\n if (rule.dids === null) {\n return { allow: true };\n }\n\n if (rule.dids.includes(identity.did)) {\n return { allow: true };\n }\n\n return {\n allow: false,\n reason:\n rule.reason ??\n `DID '${identity.did}' is not authorized for skill '${skillName}'`,\n };\n };\n}\n\nfunction defaultExtractSkillName(args: unknown): string \| null {\n if (args === null \|\| typeof args !== 'object') {\n return null;\n }\n const record = args as Record<string, unknown>;\n const skill = record['skill'];\n if (typeof skill === 'string' && skill.length > 0) {\n return skill;\n }\n const skillName = record['skillName'];\n if (typeof skillName === 'string' && skillName.length > 0) {\n return skillName;\n }\n return null;\n}\n\n/\n Compose two skills policy hooks. The combined hook denies if either\n * underlying hook denies; allow decisions from `first` are forwarded to\n * `second`.\n /\nexport function combineSkillsPolicies(\n first: SkillsPolicyHook,\n second: SkillsPolicyHook,\n): SkillsPolicyHook {\n return async (input): Promise<SkillsPolicyDecision> => {\n const a = await Promise.resolve(first(input));\n if (!a.allow) {\n return a;\n }\n return Promise.resolve(second(input));\n };\n}\n\n/* Re-exported for convenience. */\nexport type {\n SkillsPolicyHook,\n SkillsPolicyDecision,\n VerifiedIdentity,\n} from './types.js';\n"]}
1	+ {"version":3,"sources":["../src/errors.ts","../src/types.ts","../src/request-boundary.ts","../src/server.ts","../src/client.ts","../src/skills.ts","../src/workspace.ts"],"names":["AsyncLocalStorage","createHash","randomUUID"],"mappings":";;;;;;AAUO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,cAAA,EAAgB,MAAA;AAAA;AAAA,EAEhB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,WAAA,EAAa,KAAA;AAAA;AAAA,EAEb,oBAAA,EAAsB,MAAA;AAAA;AAAA,EAEtB,mBAAA,EAAqB,MAAA;AAAA;AAAA,EAErB,kBAAA,EAAoB;AACtB;AASO,IAAM,iBAAA,GAAN,cAAgC,KAAA,CAAM;AAAA,EAC3B,IAAA;AAAA,EACA,IAAA;AAAA,EAEhB,WAAA,CACE,OAAA,EACA,IAAA,EACA,IAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,mBAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAI,SAAS,MAAA,EAAW;AACtB,MAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,cAAA,GAIE;AACA,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,IACnE;AACA,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,KAAK,OAAA,EAAQ;AAAA,EAClD;AACF;AAGO,IAAM,oBAAA,GAAN,cAAmC,iBAAA,CAAkB;AAAA,EAC1D,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA;AAAA,MACE,SAAS,QAAQ,CAAA,4DAAA,CAAA;AAAA,MACjB,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA;AAAS,KACb;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,sBAAA;AAAA,EACd;AACF;AAGO,IAAM,yBAAA,GAAN,cAAwC,iBAAA,CAAkB;AAAA,EAC/D,WAAA,CAAY,UAAkB,KAAA,EAAgB;AAC5C,IAAA,KAAA;AAAA,MACE,CAAA,uCAAA,EAA0C,QAAQ,CAAA,GAAA,EAAM,WAAA,CAAY,KAAK,CAAC,CAAA,CAAA;AAAA,MAC1E,YAAA,CAAa,oBAAA;AAAA,MACb,EAAE,QAAA,EAAU,KAAA,EAAO,WAAA,CAAY,KAAK,CAAA;AAAE,KACxC;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AAAA,EACd;AACF;AAGO,IAAM,wBAAA,GAAN,cAAuC,iBAAA,CAAkB;AAAA,EAC9D,WAAA,CACE,QAAA,EACA,cAAA,EACA,UAAA,EACA;AACA,IAAA,KAAA;AAAA,MACE,CAAA,MAAA,EAAS,QAAQ,CAAA,mBAAA,EAAsB,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,iBAAA,EAAoB,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,CAAA;AAAA,MACzG,YAAA,CAAa,mBAAA;AAAA,MACb;AAAA,QACE,QAAA;AAAA,QACA,cAAA,EAAgB,CAAC,GAAG,cAAc,CAAA;AAAA,QAClC,UAAA,EAAY,CAAC,GAAG,UAAU;AAAA;AAC5B,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,0BAAA;AAAA,EACd;AACF;AAGO,IAAM,uBAAA,GAAN,cAAsC,iBAAA,CAAkB;AAAA,EAC7D,WAAA,CAAY,UAAkB,MAAA,EAA4B;AACxD,IAAA,KAAA;AAAA,MACE,8BAA8B,QAAQ,CAAA,CAAA,EAAI,SAAS,CAAA,EAAA,EAAK,MAAM,KAAK,EAAE,CAAA,CAAA;AAAA,MACrE,YAAA,CAAa,kBAAA;AAAA,MACb,WAAW,MAAA,GAAY,EAAE,UAAU,MAAA,EAAO,GAAI,EAAE,QAAA;AAAS,KAC3D;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF;AAEA,SAAS,YAAY,KAAA,EAAwB;AAC3C,EAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,IAAA,OAAO,KAAA,CAAM,OAAA;AAAA,EACf;AACA,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,eAAA;AACT;;;ACgEO,IAAM,kBAAA,GAAqB,CAAC,QAAA,KACjC,CAAA,IAAA,EAAO,QAAQ,CAAA,OAAA;AAMV,IAAM,uBAAuB,CAAC,QAAA,KACnC,CAAC,kBAAA,CAAmB,QAAQ,CAAC;AC1LxB,SAAS,uBAAuB,MAAA,EAAwE;AAC7G,EAAA,MAAM,OAAA,GAAU,IAAIA,6BAAA,EAAkD;AACtE,EAAA,MAAM,OAAO,CAAC,OAAA,EAAkD,SAAA,KAC9D,CAAC,YAAqB,KAAA,KAAqB;AACzC,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI,OAAA,IAAW,OAAO,OAAA,KAAY,QAAA,IAAY,QAAA,IAAY,WAAW,OAAA,CAAQ,MAAA,KAAW,YAAA,IACpF,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,UAAU,OAAO,OAAA,CAAQ,MAAA,KAAW,QAAA,IACnE,MAAA,IAAU,OAAA,CAAQ,UAAU,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAA,KAAS,QAAA,EAAU;AAEvE,MAAA,OAAA,GAAU;AAAA,QAAE,QAAA,EAAU,QAAQ,MAAA,CAAO,IAAA;AAAA,QACnC,IAAA,EAAM,gBAAgB,WAAA,IAAe,OAAA,CAAQ,SAAS,OAAA,CAAQ,MAAA,CAAO,YAAY,MAAS;AAAA,OAAE;AAAA,IAChG;AACA,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS,MAAM,OAAA,CAAQ,KAAK,SAAA,EAAW,OAAA,EAAS,GAAG,KAAK,CAAC,CAAA;AAAA,EAC9E,CAAA;AAGF,EAAA,MAAM,QAAA,GAAW,OAAO,MAAA,EAAQ,SAAA;AAChC,EAAA,IAAI,QAAA,IAAY,OAAO,QAAA,KAAa,QAAA,EAAU;AAC5C,IAAA,MAAM,SAAA,GAAY,QAAA;AAClB,IAAA,IAAI,UAAU,SAAA,EAAW,SAAA,CAAU,YAAY,IAAA,CAAK,SAAA,CAAU,WAAW,SAAS,CAAA;AAAA,EACpF;AACA,EAAA,MAAM,UAAU,MAAA,CAAO,OAAA;AACvB,EAAA,IAAI,OAAA,EAAS;AAGX,IAAA,MAAA,CAAO,OAAA,GAAU,eAAgB,SAAA,EAAA,GAAuB,OAAA,EAAoB;AAC1E,MAAA,IAAI,CAAC,aAAa,OAAO,SAAA,KAAc,UAAU,MAAM,IAAI,UAAU,2BAA2B,CAAA;AAChG,MAAA,MAAM,OAAA,GAAU,IAAI,KAAA,CAAM,SAAA,EAA4B;AAAA,QACpD,GAAA,CAAI,MAAA,EAAQ,GAAA,EAAK,KAAA,EAAO;AACtB,UAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,GAAA,EAAK,QAAQ,WAAA,IAAe,OAAO,KAAA,KAAU,UAAA,GACpE,IAAA,CAAK,KAAA,EAAkD,MAAM,CAAA,GAAI,OAAO,MAAM,CAAA;AAAA,QACpF,CAAA;AAAA,QACA,GAAA,CAAI,QAAQ,GAAA,EAAK;AACf,UAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,KAAK,MAAM,CAAA;AAC7C,UAAA,OAAO,OAAO,KAAA,KAAU,UAAA,GAAa,KAAA,CAAM,IAAA,CAAK,MAAM,CAAA,GAAI,KAAA;AAAA,QAC5D;AAAA,OACD,CAAA;AACD,MAAA,MAAM,OAAA,CAAQ,IAAA,CAAK,IAAA,EAAM,OAAA,EAAS,GAAG,OAAO,CAAA;AAAA,IAC9C,CAAA;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT;;;ACUA,IAAM,yBAAA,GAA4B,CAAC,MAAA,EAAQ,cAAc,CAAA;AAwBlD,SAAS,aAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,cAAA,CAAe,MAAM,CAAA;AACrB,EAAA,MAAM,aAAa,IAAI,cAAA,CAAe,MAAA,EAAQ,sBAAA,CAAuB,MAAM,CAAC,CAAA;AAE5E,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IACE,OAAO,QAAA,KAAa,QAAA,IACpB,yBAAA,CAA0B,QAAA,CAAS,QAAkC,CAAA,EACrE;AACA,QAAA,OAAO,sBAAA;AAAA,UACL,KAAA;AAAA,UACA,MAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,SAAS,eAAe,MAAA,EAAkC;AACxD,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,sCAAsC,CAAA;AAAA,EAC5D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,sCAAsC,CAAA;AAAA,EAC5D;AACA,EAAA,IACE,MAAA,CAAO,MAAM,QAAA,KAAa,MAAA,IAC1B,OAAO,MAAA,CAAO,KAAA,CAAM,QAAA,CAAS,MAAA,KAAW,UAAA,EACxC;AACA,IAAA,MAAM,IAAI,UAAU,sDAAsD,CAAA;AAAA,EAC5E;AACF;AASA,SAAS,sBAAA,CACP,QAAA,EACA,OAAA,EACA,UAAA,EACiC;AACjC,EAAA,OAAO,SAAS,WAA0B,IAAA,EAA0B;AAClE,IAAA,MAAM,QAAA,GAAW,gBAAgB,IAAI,CAAA;AACrC,IAAA,MAAM,aAAA,GAAgB,kBAAkB,IAAI,CAAA;AAC5C,IAAA,IAAI,kBAAkB,EAAA,EAAI;AAGxB,MAAA,OAAO,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS,IAAI,CAAA;AAAA,IACrC;AACA,IAAA,MAAM,YAAA,GAAe,KAAK,aAAa,CAAA;AAGvC,IAAA,MAAM,eAAA,GAAkB,UAAA,CAAW,IAAA,CAAK,QAAA,EAAU,YAAY,CAAA;AAC9D,IAAA,MAAM,OAAA,GAAU,CAAC,GAAG,IAAI,CAAA;AACxB,IAAA,OAAA,CAAQ,aAAa,CAAA,GAAI,eAAA;AACzB,IAAA,OAAO,QAAA,CAAS,KAAA,CAAM,OAAA,EAAS,OAAO,CAAA;AAAA,EACxC,CAAA;AACF;AAEA,SAAS,gBAAgB,IAAA,EAAsC;AAC7D,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,OAAO,IAAA,CAAK,CAAC,MAAM,QAAA,EAAU;AAClD,IAAA,OAAO,KAAK,CAAC,CAAA;AAAA,EACf;AAGA,EAAA,OAAO,WAAA;AACT;AAEA,SAAS,kBAAkB,IAAA,EAAsC;AAI/D,EAAA,KAAA,IAAS,IAAI,IAAA,CAAK,MAAA,GAAS,GAAG,CAAA,IAAK,CAAA,EAAG,KAAK,CAAA,EAAG;AAC5C,IAAA,IAAI,OAAO,IAAA,CAAK,CAAC,CAAA,KAAM,UAAA,EAAY;AACjC,MAAA,OAAO,CAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,EAAA;AACT;AAKA,IAAM,iBAAN,MAAqB;AAAA,EASnB,WAAA,CAAY,QAA6C,QAAA,EAAqD;AAArD,IAAA,IAAA,CAAA,QAAA,GAAA,QAAA;AACvD,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,aAAA,GAAgB,MAAA,CAAO,aAAA,KAAkB,MAAA,CAAO,WAAA,GAAc,CAAA,IAAA,KAAQ,CAAC,MAAA,CAAO,WAAA,CAAa,IAAI,CAAC,CAAA,GAAI,oBAAA,CAAA;AACzG,IAAA,IAAA,CAAK,eAAA,GAAkB,OAAO,eAAA,IAAmB,IAAA;AACjD,IAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA;AAC3B,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AACtB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,UAAU,MAAA,CAAO,OAAA;AAAA,EACxB;AAAA,EARyD,QAAA;AAAA,EARxC,KAAA;AAAA,EACA,aAAA;AAAA,EACA,eAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EAYjB,IAAA,CACE,UACA,YAAA,EAC0C;AAC1C,IAAA,MAAM,UAAA,GAAa,IAAA;AACnB,IAAA,OAAO,eAAe,mBAEjB,YAAA,EACe;AAMlB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,cAAc,YAAY,CAAA;AAClD,MAAA,MAAM,YAAY,KAAA,EAAM;AACxB,MAAA,IAAI,QAAA,GAAoC,IAAA;AAExC,MAAA,IAAI;AACF,QAAA,QAAA,GAAW,MAAM,UAAA,CAAW,eAAA,CAAgB,QAAA,EAAU,MAAM,KAAK,CAAA;AAEjE,QAAA,IAAI,UAAA,CAAW,YAAY,KAAA,CAAA,EAAW;AACpC,UAAA,MAAM,WAAW,OAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU,CAAA;AAAA,QACvD;AAEA,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAA;AAAA,UAC3B,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,YAAY;AAAA,SACvC;AAEA,QAAA,MAAM,OAAA,GAAU,cAAA,CAAe,MAAA,EAAQ,QAAQ,CAAA;AAE/C,QAAA,IAAI,UAAA,CAAW,aAAa,KAAA,CAAA,EAAW;AACrC,UAAA,MAAM,WAAW,QAAA,CAAS;AAAA,YACxB,QAAA;AAAA,YACA,IAAA;AAAA,YACA,QAAA;AAAA,YACA,UAAA,EAAY,OAAM,GAAI,SAAA;AAAA,YACtB,MAAA,EAAQ;AAAA,WACT,CAAA;AAAA,QACH;AACA,QAAA,OAAO,OAAA;AAAA,MACT,SAAS,KAAA,EAAgB;AACvB,QAAA,IAAI,UAAA,CAAW,YAAY,MAAA,EAAW;AAGpC,UAAA,IAAI;AACF,YAAA,MAAM,WAAW,OAAA,CAAQ,EAAE,UAAU,IAAA,EAAM,QAAA,EAAU,OAAO,CAAA;AAAA,UAC9D,CAAA,CAAA,MAAQ;AAAA,UAER;AAAA,QACF;AACA,QAAA,MAAM,eAAe,KAAK,CAAA;AAAA,MAC5B;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,eAAA,CACZ,QAAA,EACA,IAAA,EACA,KAAA,EAC2B;AAC3B,IAAA,MAAM,gBAAA,GAAmB,wBAAwB,KAAK,CAAA;AACtD,IAAA,IAAI,qBAAqB,IAAA,EAAM;AAC7B,MAAA,IAAI,KAAK,eAAA,EAAiB;AACxB,QAAA,MAAM,IAAI,qBAAqB,QAAQ,CAAA;AAAA,MACzC;AAGA,MAAA,OAAO,kBAAA;AAAA,IACT;AAEA,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,aAAA,CAAc,QAAA,EAAU,IAAI,CAAA;AACxD,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AAGF,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,CAAS,QAAA,EAAS;AACvC,MAAA,IAAI,WAAW,OAAA,CAAQ,QAAA,KAAa,UAAU,MAAM,IAAI,MAAM,mCAAmC,CAAA;AACjG,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,MAAA;AAAA,QACnC,gBAAA;AAAA,QACA,cAAA;AAAA,QACA,OAAA,IAAW,EAAE,QAAA,EAAU,IAAA;AAAK,OAC9B;AAAA,IACF,SAAS,KAAA,EAAgB;AACvB,MAAA,MAAM,IAAI,yBAAA,CAA0B,QAAA,EAAU,KAAK,CAAA;AAAA,IACrD;AAEA,IAAA,aAAA,CAAc,QAAA,EAAU,cAAA,EAAgB,QAAA,CAAS,MAAM,CAAA;AAEvD,IAAA,IAAI,IAAA,CAAK,iBAAiB,MAAA,EAAW;AACnC,MAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA;AAAA,QAC7B,KAAK,YAAA,CAAa,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU;AAAA,OAChD;AACA,MAAA,IAAI,CAAC,SAAS,KAAA,EAAO;AACnB,QAAA,MAAM,IAAI,uBAAA,CAAwB,QAAA,EAAU,QAAA,CAAS,MAAM,CAAA;AAAA,MAC7D;AAAA,IACF;AAEA,IAAA,OAAO,QAAA;AAAA,EACT;AACF,CAAA;AAEA,SAAS,aAAA,CACP,QAAA,EACA,QAAA,EACA,IAAA,EACM;AACN,EAAA,MAAM,OAAA,GAAU,SAAS,MAAA,CAAO,CAAC,UAAU,CAAC,IAAA,CAAK,QAAA,CAAS,KAAK,CAAC,CAAA;AAChE,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,wBAAA,CAAyB,QAAA,EAAU,QAAA,EAAU,IAAI,CAAA;AAAA,EAC7D;AACF;AAEA,SAAS,cAAc,YAAA,EAGrB;AACA,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAC7B,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAW,KAAA,EAAO,MAAA,EAAU;AAAA,EAC7C;AACA,EAAA,IAAI,YAAA,CAAa,WAAW,CAAA,EAAG;AAE7B,IAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAW,KAAA,EAAO,YAAA,CAAa,CAAC,CAAA,EAAE;AAAA,EACnD;AACA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,aAAa,CAAC,CAAA;AAAA,IACpB,KAAA,EAAO,YAAA,CAAa,YAAA,CAAa,MAAA,GAAS,CAAC;AAAA,GAC7C;AACF;AAEA,SAAS,wBACP,KAAA,EACiC;AACjC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,OAAQ,KAAA,CAA8B,KAAA;AAC5C,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,YAAa,IAAA,CAAiC,SAAA;AACpD,EAAA,IAAI,SAAA,KAAc,IAAA,IAAQ,OAAO,SAAA,KAAc,QAAA,EAAU;AACvD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,WAAY,SAAA,CAAqC,QAAA;AACvD,EAAA,IAAI,QAAA,KAAa,IAAA,IAAQ,OAAO,QAAA,KAAa,QAAA,EAAU;AACrD,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,QAAA;AAClB,EAAA,IACE,OAAO,UAAU,KAAK,CAAA,KAAM,YAC5B,OAAO,SAAA,CAAU,OAAO,CAAA,KAAM,QAAA,EAC9B;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,QAAA,GAAqC;AAAA,IACzC,GAAA,EAAK,UAAU,KAAK,CAAA;AAAA,IACpB,KAAA,EAAO,UAAU,OAAO;AAAA,GAC1B;AACA,EAAA,IAAI,OAAO,SAAA,CAAU,OAAO,CAAA,KAAM,QAAA,EAAU;AAC1C,IAAA,QAAA,CAAS,KAAA,GAAQ,UAAU,OAAO,CAAA;AAAA,EACpC;AACA,EAAA,IACE,OAAO,UAAU,SAAS,CAAA,KAAM,YAChC,SAAA,CAAU,SAAS,MAAM,IAAA,EACzB;AACA,IAAA,QAAA,CAAS,OAAA,GAAU,UAAU,SAAS,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAiB,QAAA,EAAqC;AAC5E,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAA+B;AAAA,IACnC,UAAU,QAAA,CAAS,OAAA;AAAA,IACnB,cAAc,QAAA,CAAS,GAAA;AAAA,IACvB,QAAQ,QAAA,CAAS;AAAA,GACnB;AACA,EAAA,MAAM,YAAA,GACJ,OAAQ,MAAA,CAA+B,KAAA,KAAU,QAAA,IAChD,OAA+B,KAAA,KAAU,IAAA,GACpC,MAAA,CAA8C,KAAA,GAChD,EAAC;AACP,EAAA,OAAO;AAAA,IACL,GAAI,MAAA;AAAA,IACJ,KAAA,EAAO;AAAA,MACL,GAAG,YAAA;AAAA,MACH,SAAA,EAAW;AAAA;AACb,GACF;AACF;AAEA,SAAS,eAAe,KAAA,EAAyB;AAC/C,EAAA,IAAI,iBAAiB,iBAAA,EAAmB;AAGtC,IAAA,MAAM,OAAA,GAAU,MAAM,cAAA,EAAe;AACrC,IAAA,MAAA,CAAO,MAAA,CAAO,OAAO,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAM,CAAA;AAAA,EACjE;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,KAAA,GAAgB;AACvB,EAAA,IACE,OAAO,WAAA,KAAgB,WAAA,IACvB,OAAO,WAAA,CAAY,QAAQ,UAAA,EAC3B;AACA,IAAA,OAAO,YAAY,GAAA,EAAI;AAAA,EACzB;AACA,EAAA,OAAO,KAAK,GAAA,EAAI;AAClB;AAEA,IAAM,kBAAA,GAAuC;AAAA,EAC3C,GAAA,EAAK,mBAAA;AAAA,EACL,QAAQ,EAAC;AAAA,EACT,OAAA,EAAS,WAAA;AAAA,EACT,QAAQ;AACV;;;ACzWO,SAAS,mBAAA,CACd,QACA,MAAA,EACG;AACH,EAAA,IAAI,MAAA,KAAW,IAAA,IAAQ,OAAO,MAAA,KAAW,QAAA,EAAU;AACjD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,EAAM;AACvD,IAAA,MAAM,IAAI,UAAU,yCAAyC,CAAA;AAAA,EAC/D;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,KAAA,CAAM,WAAA,KAAgB,UAAA,EAAY;AAClD,IAAA,MAAM,IAAI,UAAU,qDAAqD,CAAA;AAAA,EAC3E;AAEA,EAAA,MAAM,WAAA,GAAc,IAAI,iBAAA,CAAkB,MAAM,CAAA;AAEhD,EAAA,OAAO,IAAI,MAAM,MAAA,EAAQ;AAAA,IACvB,GAAA,CAAI,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU;AAC9B,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,MAAA,EAAQ,UAAU,QAAQ,CAAA;AACpD,MAAA,IAAI,OAAO,UAAU,UAAA,EAAY;AAC/B,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,QAAA,OAAO,WAAA,CAAY,YAAA;AAAA,UACjB,KAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AACA,MAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAAA,IAC1B;AAAA,GACD,CAAA;AACH;AAEA,IAAM,oBAAN,MAAwB;AAAA,EACL,KAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AACpB,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,aAAa,MAAA,CAAO,UAAA;AAAA,EAC3B;AAAA,EAEA,YAAA,CACE,UACA,OAAA,EAC2B;AAC3B,IAAA,MAAM,WAAA,GAAc,IAAA;AACpB,IAAA,OAAO,eAAe,eAAA,CAEpB,MAAA,EAAA,GAKG,IAAA,EACe;AAElB,MAAA,MAAM,WAAA,GAAc,MAAM,WAAA,CAAY,UAAA,GAAa,MAAM,CAAA;AACzD,MAAA,MAAM,MAAA,GAAS,MAAM,WAAA,CAAY,UAAA,CAAW,eAAe,MAAM,CAAA;AACjE,MAAA,OAAO,QAAA,CAAS,IAAA,CAAK,OAAA,EAAS,MAAA,EAAQ,GAAG,IAAI,CAAA;AAAA,IAC/C,CAAA;AAAA,EACF;AAAA,EAEA,MAAc,WAAW,MAAA,EAQtB;AACD,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,OAAO,IAAA,EAAM,IAAA,CAAK,QAAA,EAAU,MAAA,CAAO,SAAS,CAAA;AAC1F,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,KAAA,IAAS,EAAC;AACtC,IAAA,MAAM,iBAAA,GACJ,OAAO,YAAA,CAAa,WAAW,CAAA,KAAM,QAAA,IACrC,YAAA,CAAa,WAAW,CAAA,KAAM,IAAA,GACzB,YAAA,CAAa,WAAW,IACzB,EAAC;AACP,IAAA,OAAO;AAAA,MACL,GAAG,MAAA;AAAA,MACH,KAAA,EAAO;AAAA,QACL,GAAG,YAAA;AAAA,QACH,SAAA,EAAW;AAAA,UACT,GAAG,iBAAA;AAAA,UACH;AAAA;AACF;AACF,KACF;AAAA,EACF;AACF,CAAA;AAOO,SAAS,kBAAkB,QAAA,EAKN;AAC1B,EAAA,OAAO;AAAA,IACL,SAAA,EAAW;AAAA,MACT,QAAA,EAAU;AAAA,QACR,KAAK,QAAA,CAAS,GAAA;AAAA,QACd,OAAO,QAAA,CAAS,KAAA;AAAA,QAChB,GAAI,SAAS,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,QAAA,CAAS,KAAA,EAAM,GAAI,EAAC;AAAA,QAChE,GAAI,SAAS,OAAA,KAAY,MAAA,GACrB,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA,EAAQ,GAC5B;AAAC;AACP;AACF,GACF;AACF;;;ACvKO,IAAM,wBAAA,GAAkD;AAAA,EAC7D,cAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF;AA2BO,IAAM,yBAAA,GAAN,MAAM,0BAAA,CAAuD;AAAA,EACjD,KAAA;AAAA,EAEjB,WAAA,CAAY,KAAA,GAAmC,EAAC,EAAG;AACjD,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAI,GAAA,CAAI,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS,CAAC,IAAA,CAAK,SAAA,EAAW,IAAI,CAAC,CAAC,CAAA;AAAA,EAClE;AAAA,EAEA,OAAO,SAAA,EAAsC;AAC3C,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,SAAS,CAAA,IAAK,IAAA;AAAA,EACtC;AAAA;AAAA,EAGA,SAAS,IAAA,EAA6C;AACpD,IAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AAC/B,IAAA,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,SAAA,EAAW,IAAI,CAAA;AAC7B,IAAA,OAAO,IAAI,0BAAA,CAA0B,CAAC,GAAG,IAAA,CAAK,MAAA,EAAQ,CAAC,CAAA;AAAA,EACzD;AACF;AA8BO,SAAS,mBACd,OAAA,EACkB;AAClB,EAAA,MAAM,cACJ,OAAA,CAAQ,WAAA,KACP,CAAC,QAAA,KAAqB,wBAAA,CAAyB,SAAS,QAAQ,CAAA,CAAA;AACnE,EAAA,MAAM,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,uBAAA;AAC9B,EAAA,MAAM,eAAA,GAAwC,QAAQ,eAAA,IAAmB;AAAA,IACvE,KAAA,EAAO;AAAA,GACT;AAEA,EAAA,OAAO,OAAO;AAAA,IACZ,QAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF,KAAqC;AACnC,IAAA,IAAI,CAAC,WAAA,CAAY,QAAQ,CAAA,EAAG;AAC1B,MAAA,OAAO,eAAA;AAAA,IACT;AAEA,IAAA,MAAM,SAAA,GAAY,iBAAiB,IAAI,CAAA;AACvC,IAAA,IAAI,cAAc,IAAA,EAAM;AACtB,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,MAAA,EAAQ,eAAe,QAAQ,CAAA,8BAAA;AAAA,OACjC;AAAA,IACF;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,OAAA,CAAQ,QAAQ,KAAA,CAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAClE,IAAA,IAAI,SAAS,IAAA,EAAM;AACjB,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,MAAA,EAAQ,8BAA8B,SAAS,CAAA,CAAA;AAAA,OACjD;AAAA,IACF;AAEA,IAAA,IAAI,IAAA,CAAK,SAAS,IAAA,EAAM;AACtB,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB;AAEA,IAAA,IAAI,IAAA,CAAK,IAAA,CAAK,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AACpC,MAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AAAA,IACvB;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,QACE,IAAA,CAAK,MAAA,IACL,QAAQ,QAAA,CAAS,GAAG,kCAAkC,SAAS,CAAA,CAAA;AAAA,KACnE;AAAA,EACF,CAAA;AACF;AAEA,SAAS,wBAAwB,IAAA,EAA8B;AAC7D,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAA,GAAS,IAAA;AACf,EAAA,MAAM,KAAA,GAAQ,OAAO,OAAO,CAAA;AAC5B,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,SAAS,CAAA,EAAG;AACjD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,OAAO,WAAW,CAAA;AACpC,EAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,CAAU,SAAS,CAAA,EAAG;AACzD,IAAA,OAAO,SAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,qBAAA,CACd,OACA,MAAA,EACkB;AAClB,EAAA,OAAO,OAAO,KAAA,KAAyC;AACrD,IAAA,MAAM,IAAI,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,CAAM,KAAK,CAAC,CAAA;AAC5C,IAAA,IAAI,CAAC,EAAE,KAAA,EAAO;AACZ,MAAA,OAAO,CAAA;AAAA,IACT;AACA,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EACtC,CAAA;AACF;AC9KA,SAAS,UAAU,KAAA,EAAwB;AACzC,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACjC,IAAA,IAAI,IAAA,KAAS,MAAA,EAAW,MAAM,IAAI,UAAU,mCAAmC,CAAA;AAC/E,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,KAAA,CAAM,GAAA,CAAI,SAAS,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AACnE,EAAA,OAAO,CAAA,CAAA,EAAI,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,MAAK,CAAE,GAAA,CAAI,CAAA,GAAA,KAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA,CAAA,EAAI,SAAA,CAAW,KAAA,CAAkC,GAAG,CAAC,CAAC,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAC3I;AAEA,SAAS,MAAA,CAAO,UAAkB,IAAA,EAAuB;AACvD,EAAA,OAAOC,iBAAA,CAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,UAAU,EAAE,QAAA,EAAU,IAAA,EAAM,IAAA,IAAQ,EAAC,EAAG,CAAC,CAAA,CAAE,OAAO,KAAK,CAAA;AAC5F;AAKO,SAAS,yBAAyB,OAAA,EASvC;AACA,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAgE;AACpF,EAAA,IAAI,OAAA,GAAU,CAAA;AACd,EAAA,MAAM,GAAA,GAAM,QAAQ,oBAAA,IAAwB,GAAA;AAC5C,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,GAAG,CAAA,IAAK,MAAM,CAAA,EAAG,MAAM,IAAI,SAAA,CAAU,iCAAiC,CAAA;AAChG,EAAA,OAAO;AAAA,IACL,MAAM,eAAe,OAAA,EAAS;AAC5B,MAAA,KAAA,MAAW,CAAC,KAAA,EAAO,KAAK,CAAA,IAAK,SAAS,IAAI,KAAA,CAAM,SAAA,IAAa,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,EAAM,OAAA,CAAQ,OAAO,KAAK,CAAA;AACpG,MAAA,IAAI,QAAQ,IAAA,GAAO,OAAA,IAAW,KAAK,MAAM,IAAI,MAAM,gCAAgC,CAAA;AACnF,MAAA,MAAM,OAAA,GAAU,MAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,QAAQ,IAAI,CAAA;AACrD,MAAA,OAAA,IAAW,CAAA;AACX,MAAA,IAAI;AACF,QAAA,MAAM,YAAY,MAAM,OAAA,CAAQ,SAAA,CAAU,cAAA,CAAe,QAAQ,GAAG,CAAA;AACpE,QAAA,OAAA,CAAQ,GAAA,CAAI,SAAA,CAAU,KAAA,EAAO,EAAE,GAAA,EAAK,OAAA,CAAQ,GAAA,EAAK,MAAA,EAAQ,OAAA,EAAS,SAAA,EAAW,SAAA,CAAU,SAAA,EAAW,CAAA;AAClG,QAAA,OAAO,SAAA;AAAA,MACT,CAAA,SAAE;AAAU,QAAA,OAAA,IAAW,CAAA;AAAA,MAAG;AAAA,IAC5B,CAAA;AAAA,IACA,KAAA,EAAO;AAAA,MACL,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,QAAA,EAAU;AAAA,QACR,MAAM,MAAA,CAAO,QAAA,EAAU,OAAA,EAAS,OAAA,EAAS;AACvC,UAAA,MAAM,QAAQ,QAAA,CAAS,KAAA;AACvB,UAAA,MAAM,OAAA,GAAU,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA,GAAI,MAAA;AAC7C,UAAA,IAAI,CAAC,WAAW,CAAC,KAAA,IAAS,CAAC,OAAA,IAAW,OAAA,CAAQ,GAAA,KAAQ,QAAA,CAAS,GAAA,IAC3D,OAAA,CAAQ,aAAa,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,IAAQ,OAAA,CAAQ,MAAA,KAAW,OAAO,OAAA,CAAQ,QAAA,EAAU,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvG,YAAA,MAAM,IAAI,MAAM,2DAA2D,CAAA;AAAA,UAC7E;AAEA,UAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AACpB,UAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA;AACvC,UAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,SAAA,CAAU,OAAO,KAAA,EAAO,EAAE,OAAO,CAAA;AAChE,UAAA,IAAI,SAAS,GAAA,KAAQ,QAAA,CAAS,KAAK,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAC9E,UAAA,MAAM,SAAS,CAAC,GAAG,MAAM,OAAA,CAAQ,SAAA,CAAU,QAAQ,CAAC,CAAA;AACpD,UAAA,IAAI,CAAC,MAAA,CAAO,KAAA,CAAM,CAAA,KAAA,KAAS,OAAO,KAAA,KAAU,QAAQ,CAAA,EAAG,MAAM,IAAI,SAAA,CAAU,2BAA2B,CAAA;AACtG,UAAA,OAAO,EAAE,GAAA,EAAK,QAAA,CAAS,GAAA,EAAK,MAAA,EAAQ,OAAA,EAASC,iBAAA,EAAW,EAAG,MAAA,EAAQ,EAAE,QAAA,EAAS,EAAE;AAAA,QAClF;AAAA;AACF;AACF,GACF;AACF;AAIO,SAAS,yBAAyB,OAAA,EAKF;AACrC,EAAA,OAAO;AAAA,IACL,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,MAAM,WAAA,CAAY,QAAA,EAAU,QAAA,EAAU,IAAA,EAAM;AAC1C,MAAA,IAAI,QAAA,KAAa,UAAa,QAAA,KAAa,OAAA,CAAQ,UAAU,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACpG,MAAA,MAAM,YAAY,MAAM,OAAA,CAAQ,cAAA,CAAe,EAAE,KAAK,OAAA,CAAQ,GAAA,EAAK,QAAA,EAAU,GAAI,OAAO,EAAE,IAAA,EAAK,GAAI,IAAK,CAAA;AACxG,MAAA,IAAI,SAAA,CAAU,QAAA,KAAa,OAAA,CAAQ,QAAA,IAAY,SAAA,CAAU,SAAA,IAAa,IAAA,CAAK,GAAA,EAAI,GAAI,GAAA,EAAM,MAAM,IAAI,MAAM,gCAAgC,CAAA;AACzI,MAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,SAAA,CAAU,MAAM,OAAA,CAAQ,GAAA,EAAK,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,EAAU,KAAA,EAAO,SAAA,CAAU,OAAO,CAAA;AAC/G,MAAA,OAAO,EAAE,GAAA,EAAK,OAAA,CAAQ,GAAA,EAAK,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,KAAA,EAAO,SAAA,CAAU,KAAA,EAAM;AAAA,IAClF;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["/*\n Error types for @openagentid/mcp.\n \n These map onto MCP JSON-RPC error codes so callers see consistent\n * failure modes regardless of which middleware step rejected the call.\n \n Reference: https://www.jsonrpc.org/specification#error_object\n /\n\n/* Standard JSON-RPC + MCP error codes used by the middleware. /\nexport const McpErrorCode = {\n /* -32600 — request was malformed at the JSON-RPC layer. /\n InvalidRequest: -32600,\n /* -32601 — the requested method/tool was not found. /\n MethodNotFound: -32601,\n /* -32602 — params failed validation. /\n InvalidParams: -32602,\n /* -32603 — internal server error. /\n InternalError: -32603,\n /* -32000 — generic server error (used for auth failures by default). /\n ServerError: -32000,\n /* -32001 — identity verification failed. /\n AuthenticationFailed: -32001,\n /* -32002 — caller does not hold the required scope. /\n AuthorizationDenied: -32002,\n /* -32003 — skills policy rejected the call. /\n SkillsPolicyDenied: -32003,\n} as const;\n\nexport type McpErrorCodeValue =\n (typeof McpErrorCode)[keyof typeof McpErrorCode];\n\n/\n Base class for all middleware errors. Subclasses set a default\n * {@link OpenAgentMcpError.code} that maps to a JSON-RPC error code.\n /\nexport class OpenAgentMcpError extends Error {\n public readonly code: McpErrorCodeValue;\n public readonly data?: Record<string, unknown>;\n\n constructor(\n message: string,\n code: McpErrorCodeValue,\n data?: Record<string, unknown>,\n ) {\n super(message);\n this.name = 'OpenAgentMcpError';\n this.code = code;\n if (data !== undefined) {\n this.data = data;\n }\n }\n\n /\n Convert to a plain JSON-RPC error payload that the MCP SDK can\n * serialize over the wire.\n /\n toJsonRpcError(): {\n code: McpErrorCodeValue;\n message: string;\n data?: Record<string, unknown>;\n } {\n if (this.data !== undefined) {\n return { code: this.code, message: this.message, data: this.data };\n }\n return { code: this.code, message: this.message };\n }\n}\n\n/* Caller did not present an OpenAgent identity envelope. /\nexport class MissingIdentityError extends OpenAgentMcpError {\n constructor(toolName: string) {\n super(\n `Tool '${toolName}' requires an OpenAgent identity in _meta.openagent.identity`,\n McpErrorCode.AuthenticationFailed,\n { toolName },\n );\n this.name = 'MissingIdentityError';\n }\n}\n\n/* Identity envelope was present but the verifier rejected it. /\nexport class IdentityVerificationError extends OpenAgentMcpError {\n constructor(toolName: string, cause: unknown) {\n super(\n `Identity verification failed for tool '${toolName}': ${formatCause(cause)}`,\n McpErrorCode.AuthenticationFailed,\n { toolName, cause: formatCause(cause) },\n );\n this.name = 'IdentityVerificationError';\n }\n}\n\n/* Caller's verified identity does not hold the required scopes. /\nexport class AuthorizationDeniedError extends OpenAgentMcpError {\n constructor(\n toolName: string,\n requiredScopes: ReadonlyArray<string>,\n heldScopes: ReadonlyArray<string>,\n ) {\n super(\n `Tool '${toolName}' requires scopes [${requiredScopes.join(', ')}], caller holds [${heldScopes.join(', ')}]`,\n McpErrorCode.AuthorizationDenied,\n {\n toolName,\n requiredScopes: [...requiredScopes],\n heldScopes: [...heldScopes],\n },\n );\n this.name = 'AuthorizationDeniedError';\n }\n}\n\n/* Skills policy hook returned `allow: false`. /\nexport class SkillsPolicyDeniedError extends OpenAgentMcpError {\n constructor(toolName: string, reason: string \| undefined) {\n super(\n `Skills policy denied tool '${toolName}'${reason ? `: ${reason}` : ''}`,\n McpErrorCode.SkillsPolicyDenied,\n reason !== undefined ? { toolName, reason } : { toolName },\n );\n this.name = 'SkillsPolicyDeniedError';\n }\n}\n\nfunction formatCause(cause: unknown): string {\n if (cause instanceof Error) {\n return cause.message;\n }\n if (typeof cause === 'string') {\n return cause;\n }\n return 'unknown error';\n}\n","/\n Public types for @openagentid/mcp.\n \n These interfaces describe the contract the middleware expects from an\n * OpenAgent {@link Agent} instance and the surrounding configuration. They are\n * defined locally so the package can be installed without `@openagentid/sdk` in\n * tests, in CI, and in environments where the host application brings its own\n * verifier implementation.\n \n Use the workspace adapters for the current SDK. These interfaces also\n * support applications that supply their own signing and verification authority.\n /\n\n/\n A decentralized identifier following the `did:oas:` method or any other\n DID method understood by the configured verifier.\n /\nexport type Did = string;\n\n/\n The four pieces of metadata an MCP request carries about the calling\n * agent. Populated by the {@link createClientInterceptor} on the call site\n * and consumed by the server middleware.\n /\nexport interface OpenAgentRequestIdentity {\n /* Caller's DID — typically `did:oas:...`. /\n did: Did;\n /\n A signed challenge response or capability token (Arsenal ACT) the\n * server can verify offline. Format is opaque to the middleware.\n /\n proof: string;\n /\n Optional bearer-style nonce. Servers may require it for replay\n * protection. Verifiers MUST treat the value as untrusted until\n * verification succeeds.\n /\n nonce?: string;\n /\n Free-form context the verifier may use (issuer DID, audience, scopes\n * the caller claims). Always validated against the verifier's policy.\n /\n context?: Record<string, unknown>;\n}\n\n/\n The result of running the auth pipeline against an incoming MCP request.\n * Available to post-call hooks and audit log emitters.\n /\nexport interface VerifiedIdentity {\n did: Did;\n scopes: ReadonlyArray<string>;\n /* Audit identifier echoed back to the caller in result `_meta`. /\n auditId: string;\n /* Verifier-issued claims about the caller. /\n claims: Readonly<Record<string, unknown>>;\n}\n\n/\n Verifier adapter contract — supplied by createWorkspaceMcpServer or an\n * application-owned identity authority.\n \n Implementations MUST be deterministic for a given input and MUST NOT\n * mutate the request identity object.\n /\nexport interface IdentityVerifier {\n verify(\n identity: OpenAgentRequestIdentity,\n requiredScopes: ReadonlyArray<string>,\n /* Original wire arguments before tool schema defaults/transforms; scopes are derived from parsed arguments. /\n request?: { toolName: string; args: unknown },\n ): Promise<VerifiedIdentity>;\n}\n\n/\n Minimal Agent surface — only the parts of the OpenAgent SDK Agent that\n * the MCP middleware actually needs.\n /\nexport interface Agent {\n did: Did;\n verifier: IdentityVerifier;\n /\n Sign an outbound MCP call so the receiving server can verify the\n * caller. Returns the identity envelope to attach as `_meta.openagent`.\n /\n signRequest(\n toolName: string,\n audience?: Did,\n args?: Record<string, unknown>,\n ): Promise<OpenAgentRequestIdentity>;\n}\n\n/\n Result envelope returned by an authenticated tool call. The `auditId` is\n * pushed into `_meta.openagent.audit_id` on the response, so callers can\n * correlate logs end-to-end.\n /\nexport interface AuditedResultMeta {\n audit_id: string;\n verified_did: Did;\n scopes: ReadonlyArray<string>;\n}\n\n/* Per-tool scope deriver. /\nexport type ScopeDeriver = (\n toolName: string,\n args: unknown,\n) => ReadonlyArray<string>;\n\n/\n Hook signature for the skills policy. The hook receives the tool name,\n * the arguments, and the verified identity, and decides whether the call\n * should be allowed.\n /\nexport type SkillsPolicyHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity;\n}) => Promise<SkillsPolicyDecision> \| SkillsPolicyDecision;\n\nexport interface SkillsPolicyDecision {\n allow: boolean;\n reason?: string;\n}\n\n/\n Hook fired before a tool body executes — after the identity has been\n * verified and the skills policy has approved the call.\n /\nexport type PreCallHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity;\n}) => Promise<void> \| void;\n\n/\n Hook fired after a tool body executes successfully. Use it for audit\n * logging, metrics, and trace propagation. Throwing from this hook does\n * NOT roll back the tool call.\n /\nexport type PostCallHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity;\n durationMs: number;\n result: unknown;\n}) => Promise<void> \| void;\n\n/\n Hook fired when the tool body or any earlier middleware step throws.\n * The middleware re-throws the error after running this hook so MCP\n * clients still observe the original failure mode.\n /\nexport type ErrorHook = (input: {\n toolName: string;\n args: unknown;\n identity: VerifiedIdentity \| null;\n error: unknown;\n}) => Promise<void> \| void;\n\n/\n Configuration for {@link withOpenAgent}.\n /\nexport interface OpenAgentMcpConfig {\n /* The agent that owns this MCP server (used for outbound signing). /\n agent: Pick<Agent, 'did' \| 'verifier'>;\n /\n Per-tool required scope set. Defaults to\n * `(toolName) => [`mcp:${toolName}:invoke`]`.\n /\n requireScopes?: ScopeDeriver;\n /\n If true (default), tool calls without an `_meta.openagent.identity`\n * envelope are rejected. Set to false to opt-in to permissive mode for\n * local development — the middleware will still run hooks but skip\n * verification.\n /\n requireIdentity?: boolean;\n /* Optional skills policy hook. /\n skillsPolicy?: SkillsPolicyHook;\n /* Optional pre-call hook. /\n preCall?: PreCallHook;\n /* Optional post-call hook for audit/log emission. /\n postCall?: PostCallHook;\n /* Optional error hook. /\n onError?: ErrorHook;\n /\n Override the default `mcp:<tool>:invoke` scope format. Receives the\n * tool name and returns the canonical scope string.\n /\n scopeFormat?: (toolName: string) => string;\n}\n\n/\n Default scope format used when {@link OpenAgentMcpConfig.scopeFormat} is\n * not supplied.\n /\nexport const defaultScopeFormat = (toolName: string): string =>\n `mcp:${toolName}:invoke`;\n\n/\n Default scope deriver used when {@link OpenAgentMcpConfig.requireScopes}\n * is not supplied.\n /\nexport const defaultRequireScopes = (toolName: string): ReadonlyArray<string> =>\n [defaultScopeFormat(toolName)];\n","import { AsyncLocalStorage } from 'node:async_hooks';\n\nexport interface InboundToolRequest {\n readonly toolName: string;\n readonly args: unknown;\n}\n\ninterface TransportLike {\n onmessage?: (message: unknown, ...extra: unknown[]) => unknown;\n}\n\ninterface Connectable {\n connect?(transport: unknown, ...options: unknown[]): Promise<void>;\n readonly server?: { readonly transport?: unknown };\n}\n\n/* Capture the wire request before McpServer applies the tool's Zod schema.\n * Public transport callbacks are the only boundary touched. Async context keeps\n * concurrent calls isolated even when they reuse a JSON-RPC request ID. /\nexport function installRequestBoundary(server: Connectable): AsyncLocalStorage<InboundToolRequest \| undefined> {\n const context = new AsyncLocalStorage<InboundToolRequest \| undefined>();\n const wrap = (handler: NonNullable<TransportLike['onmessage']>, transport: object) =>\n (message: unknown, ...extra: unknown[]) => {\n let request: InboundToolRequest \| undefined;\n if (message && typeof message === 'object' && 'method' in message && message.method === 'tools/call' &&\n 'params' in message && message.params && typeof message.params === 'object' &&\n 'name' in message.params && typeof message.params.name === 'string') {\n // Snapshot before schemas or application transforms can mutate the input.\n request = { toolName: message.params.name,\n args: structuredClone('arguments' in message.params ? message.params.arguments : undefined) };\n }\n return context.run(request, () => handler.call(transport, message, ...extra));\n };\n\n // Also support wrapping an already-connected McpServer via its public transport.\n const existing = server.server?.transport;\n if (existing && typeof existing === 'object') {\n const transport = existing as TransportLike;\n if (transport.onmessage) transport.onmessage = wrap(transport.onmessage, transport);\n }\n const connect = server.connect;\n if (connect) {\n // Patch the public method so both rawServer.connect() and proxy.connect()\n // work; existing callers need not change which handle they connect.\n server.connect = async function (transport: unknown, ...options: unknown[]) {\n if (!transport \|\| typeof transport !== 'object') throw new TypeError('MCP transport is required');\n const wrapped = new Proxy(transport as TransportLike, {\n set(target, key, value) {\n return Reflect.set(target, key, key === 'onmessage' && typeof value === 'function'\n ? wrap(value as NonNullable<TransportLike['onmessage']>, target) : value, target);\n },\n get(target, key) {\n const value = Reflect.get(target, key, target);\n return typeof value === 'function' ? value.bind(target) : value;\n },\n });\n await connect.call(this, wrapped, ...options);\n };\n }\n return context;\n}\n","/\n Server-side middleware for @openagentid/mcp.\n \n Wraps an MCP {@link McpServer} (from `@modelcontextprotocol/sdk`) so that\n * every tool registration runs through an OpenAgent authentication\n * pipeline:\n \n 1. Extract the identity envelope from `extra._meta.openagent.identity`.\n * 2. Verify it via the configured {@link IdentityVerifier} and check\n * that the caller holds the scopes returned by `requireScopes`.\n * 3. Run the optional skills policy hook.\n * 4. Run the optional pre-call hook.\n * 5. Invoke the user's tool callback.\n * 6. Run the optional post-call hook with the result + duration.\n * 7. Stamp `audit_id` + `verified_did` into the result `_meta.openagent`.\n * 8. On error, run the optional onError hook and re-throw.\n \n Implementation note — version pinning:\n * The middleware is built against `@modelcontextprotocol/sdk@^1.27.0`.\n * The TypeScript SDK changed its tool registration API between 1.17 and\n * 1.27 (`tool(name, cb, ...)` → `registerTool(name, config, cb)`); both\n * call sites are intercepted here so any 1.x server still works.\n \n We deliberately do NOT touch the private `_registeredTools` map. The\n * middleware uses a JavaScript {@link Proxy} so callbacks are wrapped\n * exactly once at registration time, before the SDK's internal\n * request handler ever sees them.\n /\n\nimport {\n AuthorizationDeniedError,\n IdentityVerificationError,\n MissingIdentityError,\n OpenAgentMcpError,\n SkillsPolicyDeniedError,\n} from './errors.js';\nimport {\n Agent,\n AuditedResultMeta,\n ErrorHook,\n OpenAgentMcpConfig,\n OpenAgentRequestIdentity,\n PostCallHook,\n PreCallHook,\n ScopeDeriver,\n SkillsPolicyHook,\n VerifiedIdentity,\n defaultRequireScopes,\n} from './types.js';\nimport { installRequestBoundary } from './request-boundary.js';\n\n/\n Minimal McpServer surface used by the middleware. We avoid importing\n * concrete types from `@modelcontextprotocol/sdk` because peer-dep\n * versions vary across host applications and the SDK's own type exports\n * are subject to change. The shape below is the intersection of every\n * `1.x` McpServer release.\n /\nexport interface McpServerLike {\n tool(...args: unknown[]): unknown;\n registerTool(...args: unknown[]): unknown;\n connect?(transport: unknown, ...options: unknown[]): Promise<void>;\n readonly server?: { readonly transport?: unknown };\n}\n\n/\n Names of methods on the underlying server that take a tool callback as\n * one of their arguments. Both APIs are intercepted; if the SDK adds new\n * registration methods, append to this list.\n /\nconst TOOL_REGISTRATION_METHODS = ['tool', 'registerTool'] as const;\n\ntype ToolRegistrationMethod = (typeof TOOL_REGISTRATION_METHODS)[number];\n\n/\n Wrap an MCP server so every tool call is authenticated against an\n * OpenAgent identity.\n \n @example\n * ```ts\n * import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\n * import { withOpenAgent } from '@openagentid/mcp';\n * import { agent } from './my-agent.js';\n \n const server = new McpServer({ name: 'my-tools', version: '0.1.0' });\n * const authedServer = withOpenAgent(server, { agent });\n \n authedServer.tool('search_web', searchHandler);\n * ```\n \n The returned proxy is type-compatible with the underlying server, so\n * existing code that calls `tool()`, `registerTool()`, `connect()`, etc.\n * keeps working without changes.\n /\nexport function withOpenAgent<T extends McpServerLike>(\n server: T,\n config: OpenAgentMcpConfig,\n): T {\n validateConfig(config);\n const middleware = new ToolMiddleware(config, installRequestBoundary(server));\n\n return new Proxy(server, {\n get(target, property, receiver) {\n const value = Reflect.get(target, property, receiver);\n if (typeof value !== 'function') {\n return value;\n }\n if (\n typeof property === 'string' &&\n TOOL_REGISTRATION_METHODS.includes(property as ToolRegistrationMethod)\n ) {\n return wrapRegistrationMethod(\n value as (...args: unknown[]) => unknown,\n target,\n middleware,\n );\n }\n // Bind methods so `this` stays correct when destructured.\n return value.bind(target);\n },\n }) as T;\n}\n\nfunction validateConfig(config: OpenAgentMcpConfig): void {\n if (config === null \|\| typeof config !== 'object') {\n throw new TypeError('OpenAgentMcpConfig must be an object');\n }\n if (config.agent === undefined \|\| config.agent === null) {\n throw new TypeError('OpenAgentMcpConfig.agent is required');\n }\n if (\n config.agent.verifier === undefined \|\|\n typeof config.agent.verifier.verify !== 'function'\n ) {\n throw new TypeError('OpenAgentMcpConfig.agent.verifier.verify is required');\n }\n}\n\n/\n Wrap a single registration method so the user-supplied callback gets\n * replaced by an auth-wrapped one. The MCP SDK accepts the callback in\n * different positional slots depending on overload — we walk the args\n * list and replace the FIRST function we find. This is the same approach\n * the SDK itself uses internally.\n /\nfunction wrapRegistrationMethod(\n original: (...args: unknown[]) => unknown,\n thisArg: unknown,\n middleware: ToolMiddleware,\n): (...args: unknown[]) => unknown {\n return function wrapped(this: unknown, ...args: unknown[]): unknown {\n const toolName = extractToolName(args);\n const callbackIndex = findCallbackIndex(args);\n if (callbackIndex === -1) {\n // No callback in the args — defensive: forward as-is so we don't\n // mask SDK-level errors that the host would otherwise see.\n return original.apply(thisArg, args);\n }\n const userCallback = args[callbackIndex] as (\n ...callbackArgs: unknown[]\n ) => unknown;\n const wrappedCallback = middleware.wrap(toolName, userCallback);\n const newArgs = [...args];\n newArgs[callbackIndex] = wrappedCallback;\n return original.apply(thisArg, newArgs);\n };\n}\n\nfunction extractToolName(args: ReadonlyArray<unknown>): string {\n if (args.length > 0 && typeof args[0] === 'string') {\n return args[0];\n }\n // registerTool's first arg is also a string in 1.27, so this should\n // never trigger — kept as a safety net.\n return '<unknown>';\n}\n\nfunction findCallbackIndex(args: ReadonlyArray<unknown>): number {\n // Walk the args from the end so we find the LAST function — that's\n // the tool body in every overload of both `tool()` and\n // `registerTool()`.\n for (let i = args.length - 1; i >= 0; i -= 1) {\n if (typeof args[i] === 'function') {\n return i;\n }\n }\n return -1;\n}\n\n/\n Holds the middleware configuration and wraps individual tool callbacks.\n /\nclass ToolMiddleware {\n private readonly agent: Pick<Agent, 'did' \| 'verifier'>;\n private readonly requireScopes: ScopeDeriver;\n private readonly requireIdentity: boolean;\n private readonly skillsPolicy: SkillsPolicyHook \| undefined;\n private readonly preCall: PreCallHook \| undefined;\n private readonly postCall: PostCallHook \| undefined;\n private readonly onError: ErrorHook \| undefined;\n\n constructor(config: OpenAgentMcpConfig, private readonly requests: ReturnType<typeof installRequestBoundary>) {\n this.agent = config.agent;\n this.requireScopes = config.requireScopes ?? (config.scopeFormat ? tool => [config.scopeFormat!(tool)] : defaultRequireScopes);\n this.requireIdentity = config.requireIdentity ?? true;\n this.skillsPolicy = config.skillsPolicy;\n this.preCall = config.preCall;\n this.postCall = config.postCall;\n this.onError = config.onError;\n }\n\n wrap(\n toolName: string,\n userCallback: (...args: unknown[]) => unknown,\n ): (...args: unknown[]) => Promise<unknown> {\n const middleware = this;\n return async function wrappedCallback(\n this: unknown,\n ...callbackArgs: unknown[]\n ): Promise<unknown> {\n // The MCP SDK invokes tool callbacks in two shapes depending on\n // whether the tool has an input schema:\n // (extra) — no schema\n // (args, extra) — with schema\n // The `extra` is always the LAST arg.\n const { args, extra } = splitToolArgs(callbackArgs);\n const startedAt = nowMs();\n let identity: VerifiedIdentity \| null = null;\n\n try {\n identity = await middleware.runAuthPipeline(toolName, args, extra);\n\n if (middleware.preCall !== undefined) {\n await middleware.preCall({ toolName, args, identity });\n }\n\n const result = await Promise.resolve(\n userCallback.apply(this, callbackArgs),\n );\n\n const stamped = stampAuditMeta(result, identity);\n\n if (middleware.postCall !== undefined) {\n await middleware.postCall({\n toolName,\n args,\n identity,\n durationMs: nowMs() - startedAt,\n result: stamped,\n });\n }\n return stamped;\n } catch (error: unknown) {\n if (middleware.onError !== undefined) {\n // The error hook MUST NOT throw — if it does, swallow so the\n // original error propagates to the caller intact.\n try {\n await middleware.onError({ toolName, args, identity, error });\n } catch {\n / intentionally ignored /\n }\n }\n throw normalizeError(error);\n }\n };\n }\n\n private async runAuthPipeline(\n toolName: string,\n args: unknown,\n extra: unknown,\n ): Promise<VerifiedIdentity> {\n const identityEnvelope = extractIdentityEnvelope(extra);\n if (identityEnvelope === null) {\n if (this.requireIdentity) {\n throw new MissingIdentityError(toolName);\n }\n // Permissive mode: synthesize an \"anonymous\" identity so hooks\n // still run with a stable shape.\n return ANONYMOUS_IDENTITY;\n }\n\n const requiredScopes = this.requireScopes(toolName, args);\n let identity: VerifiedIdentity;\n try {\n // Identity binds the original transmitted request. Authorization policies\n // and tool callbacks intentionally use the SDK's parsed/effective arguments.\n const inbound = this.requests.getStore();\n if (inbound && inbound.toolName !== toolName) throw new Error('MCP request/tool binding mismatch');\n identity = await this.agent.verifier.verify(\n identityEnvelope,\n requiredScopes,\n inbound ?? { toolName, args },\n );\n } catch (cause: unknown) {\n throw new IdentityVerificationError(toolName, cause);\n }\n\n enforceScopes(toolName, requiredScopes, identity.scopes);\n\n if (this.skillsPolicy !== undefined) {\n const decision = await Promise.resolve(\n this.skillsPolicy({ toolName, args, identity }),\n );\n if (!decision.allow) {\n throw new SkillsPolicyDeniedError(toolName, decision.reason);\n }\n }\n\n return identity;\n }\n}\n\nfunction enforceScopes(\n toolName: string,\n required: ReadonlyArray<string>,\n held: ReadonlyArray<string>,\n): void {\n const missing = required.filter((scope) => !held.includes(scope));\n if (missing.length > 0) {\n throw new AuthorizationDeniedError(toolName, required, held);\n }\n}\n\nfunction splitToolArgs(callbackArgs: ReadonlyArray<unknown>): {\n args: unknown;\n extra: unknown;\n} {\n if (callbackArgs.length === 0) {\n return { args: undefined, extra: undefined };\n }\n if (callbackArgs.length === 1) {\n // Single argument is the `extra` object.\n return { args: undefined, extra: callbackArgs[0] };\n }\n return {\n args: callbackArgs[0],\n extra: callbackArgs[callbackArgs.length - 1],\n };\n}\n\nfunction extractIdentityEnvelope(\n extra: unknown,\n): OpenAgentRequestIdentity \| null {\n if (extra === null \|\| typeof extra !== 'object') {\n return null;\n }\n const meta = (extra as { _meta?: unknown })._meta;\n if (meta === null \|\| typeof meta !== 'object') {\n return null;\n }\n const openAgent = (meta as { openagent?: unknown }).openagent;\n if (openAgent === null \|\| typeof openAgent !== 'object') {\n return null;\n }\n const identity = (openAgent as { identity?: unknown }).identity;\n if (identity === null \|\| typeof identity !== 'object') {\n return null;\n }\n const candidate = identity as Record<string, unknown>;\n if (\n typeof candidate['did'] !== 'string' \|\|\n typeof candidate['proof'] !== 'string'\n ) {\n return null;\n }\n const envelope: OpenAgentRequestIdentity = {\n did: candidate['did'],\n proof: candidate['proof'],\n };\n if (typeof candidate['nonce'] === 'string') {\n envelope.nonce = candidate['nonce'];\n }\n if (\n typeof candidate['context'] === 'object' &&\n candidate['context'] !== null\n ) {\n envelope.context = candidate['context'] as Record<string, unknown>;\n }\n return envelope;\n}\n\nfunction stampAuditMeta(result: unknown, identity: VerifiedIdentity): unknown {\n if (result === null \|\| typeof result !== 'object') {\n return result;\n }\n const auditMeta: AuditedResultMeta = {\n audit_id: identity.auditId,\n verified_did: identity.did,\n scopes: identity.scopes,\n };\n const existingMeta =\n typeof (result as { _meta?: unknown })._meta === 'object' &&\n (result as { _meta?: unknown })._meta !== null\n ? ((result as { _meta: Record<string, unknown> })._meta)\n : {};\n return {\n ...(result as Record<string, unknown>),\n _meta: {\n ...existingMeta,\n openagent: auditMeta,\n },\n };\n}\n\nfunction normalizeError(error: unknown): unknown {\n if (error instanceof OpenAgentMcpError) {\n // Surface the JSON-RPC code on the error so the SDK's error\n // serializer picks it up.\n const jsonRpc = error.toJsonRpcError();\n Object.assign(error, { code: jsonRpc.code, data: jsonRpc.data });\n }\n return error;\n}\n\nfunction nowMs(): number {\n if (\n typeof performance !== 'undefined' &&\n typeof performance.now === 'function'\n ) {\n return performance.now();\n }\n return Date.now();\n}\n\nconst ANONYMOUS_IDENTITY: VerifiedIdentity = {\n did: 'did:oas:anonymous',\n scopes: [],\n auditId: 'anonymous',\n claims: {},\n};\n\nexport { ANONYMOUS_IDENTITY };\n","/\n Client-side interceptor for @openagentid/mcp.\n \n Adds an OpenAgent identity envelope (`_meta.openagent.identity`) to\n * outbound MCP `tools/call` requests so an authenticated server can\n * verify the caller. The interceptor wraps the MCP client's `callTool`\n * method via a JavaScript Proxy — the rest of the client surface (list\n * tools, list resources, prompts) is forwarded unchanged.\n \n Usage:\n \n ```ts\n * import { Client } from '@modelcontextprotocol/sdk/client/index.js';\n * import { withOpenAgentClient } from '@openagentid/mcp/client';\n \n const client = new Client({ name: 'my-agent', version: '0.1.0' });\n * const authedClient = withOpenAgentClient(client, { agent });\n \n await authedClient.callTool({ name: 'search_web', arguments: { q: 'mcp' } });\n * ```\n /\n\nimport { Agent } from './types.js';\n\n/\n Minimal MCP client surface used by the interceptor. Like the server\n * adapter, we describe just the methods we need to keep peer-dep\n * compatibility broad.\n /\nexport interface McpClientLike {\n callTool(\n params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n },\n ...rest: unknown[]\n ): Promise<unknown>;\n}\n\nexport interface OpenAgentClientConfig {\n /* The agent doing the calling — used to sign each request. /\n agent: Pick<Agent, 'did' \| 'signRequest'>;\n /\n Optional audience DID. When set, it is passed to\n * {@link Agent.signRequest} so the proof can be bound to a specific\n * server. Most production deployments should set this.\n /\n audience?: string;\n /\n Optional hook fired before every outbound call. Use it for client-\n * side metrics or to mutate the params (e.g., add tracing headers).\n * Returning a value replaces the params.\n /\n beforeCall?: (params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n }) => Promise<\n \| { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n \| void\n > \| { name: string; arguments?: Record<string, unknown>; _meta?: Record<string, unknown> }\n \| void;\n}\n\n/\n Wrap an MCP client so every outbound `callTool` carries an OpenAgent\n * identity envelope.\n /\nexport function withOpenAgentClient<T extends McpClientLike>(\n client: T,\n config: OpenAgentClientConfig,\n): T {\n if (config === null \|\| typeof config !== 'object') {\n throw new TypeError('OpenAgentClientConfig must be an object');\n }\n if (config.agent === undefined \|\| config.agent === null) {\n throw new TypeError('OpenAgentClientConfig.agent is required');\n }\n if (typeof config.agent.signRequest !== 'function') {\n throw new TypeError('OpenAgentClientConfig.agent.signRequest is required');\n }\n\n const interceptor = new ClientInterceptor(config);\n\n return new Proxy(client, {\n get(target, property, receiver) {\n const value = Reflect.get(target, property, receiver);\n if (typeof value !== 'function') {\n return value;\n }\n if (property === 'callTool') {\n return interceptor.wrapCallTool(\n value as McpClientLike['callTool'],\n target,\n );\n }\n return value.bind(target);\n },\n }) as T;\n}\n\nclass ClientInterceptor {\n private readonly agent: Pick<Agent, 'did' \| 'signRequest'>;\n private readonly audience: string \| undefined;\n private readonly beforeCall: OpenAgentClientConfig['beforeCall'];\n\n constructor(config: OpenAgentClientConfig) {\n this.agent = config.agent;\n this.audience = config.audience;\n this.beforeCall = config.beforeCall;\n }\n\n wrapCallTool(\n original: McpClientLike['callTool'],\n thisArg: unknown,\n ): McpClientLike['callTool'] {\n const interceptor = this;\n return async function wrappedCallTool(\n this: unknown,\n params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n },\n ...rest: unknown[]\n ): Promise<unknown> {\n // Mutate first; the signature must cover the actual transmitted call.\n const replacement = await interceptor.beforeCall?.(params);\n const toSend = await interceptor.signParams(replacement ?? params);\n return original.call(thisArg, toSend, ...rest);\n };\n }\n\n private async signParams(params: {\n name: string;\n arguments?: Record<string, unknown>;\n _meta?: Record<string, unknown>;\n }): Promise<{\n name: string;\n arguments?: Record<string, unknown>;\n _meta: Record<string, unknown>;\n }> {\n const identity = await this.agent.signRequest(params.name, this.audience, params.arguments);\n const existingMeta = params._meta ?? {};\n const existingOpenAgent =\n typeof existingMeta['openagent'] === 'object' &&\n existingMeta['openagent'] !== null\n ? (existingMeta['openagent'] as Record<string, unknown>)\n : {};\n return {\n ...params,\n _meta: {\n ...existingMeta,\n openagent: {\n ...existingOpenAgent,\n identity,\n },\n },\n };\n }\n}\n\n/\n Helper for tests and tools that want to construct the identity\n * envelope manually without going through a full Agent. Returns a `_meta`\n * object that can be merged into a CallToolRequest's params.\n /\nexport function buildIdentityMeta(identity: {\n did: string;\n proof: string;\n nonce?: string;\n context?: Record<string, unknown>;\n}): Record<string, unknown> {\n return {\n openagent: {\n identity: {\n did: identity.did,\n proof: identity.proof,\n ...(identity.nonce !== undefined ? { nonce: identity.nonce } : {}),\n ...(identity.context !== undefined\n ? { context: identity.context }\n : {}),\n },\n },\n };\n}\n","/\n Skills policy support for @openagentid/mcp.\n \n MCP tools and SKILLS.md entries describe the same thing: a capability\n * an agent can invoke. When an MCP server exposes a tool that proxies\n * skill invocation (typically named `invoke_skill` or any name a host\n * application configures), the middleware consults a skills policy\n * before allowing the call. This file provides the helper that picks the\n * right policy for a given call and a small built-in store implementation\n * suitable for tests and reference implementations.\n /\n\nimport { SkillsPolicyDecision, SkillsPolicyHook } from './types.js';\n\n/\n Tool name prefixes that the middleware treats as skill-like by default.\n * Host applications can override the matcher entirely via\n * {@link createSkillsPolicy}.\n /\nexport const DEFAULT_SKILL_TOOL_NAMES: ReadonlyArray<string> = [\n 'invoke_skill',\n 'run_skill',\n 'execute_skill',\n 'skill.invoke',\n 'skill.run',\n];\n\n/\n A single rule describing whether a `(skillName, did)` pair is allowed.\n * `null` for `dids` means \"any verified caller\". An empty array means\n * \"no caller\".\n /\nexport interface SkillsRule {\n skillName: string;\n /* DIDs allowed to invoke this skill, or `null` for any. /\n dids: ReadonlyArray<string> \| null;\n /* Optional reason emitted when the rule denies a call. /\n reason?: string;\n}\n\n/\n Policy store interface — implementations may be in-memory, file-backed\n * by `SKILLS.md`, or fetched from a remote service.\n /\nexport interface SkillsPolicyStore {\n lookup(skillName: string): Promise<SkillsRule \| null> \| SkillsRule \| null;\n}\n\n/\n Trivial in-memory store useful in tests and as a starting point for\n * production stores.\n /\nexport class InMemorySkillsPolicyStore implements SkillsPolicyStore {\n private readonly rules: Map<string, SkillsRule>;\n\n constructor(rules: ReadonlyArray<SkillsRule> = []) {\n this.rules = new Map(rules.map((rule) => [rule.skillName, rule]));\n }\n\n lookup(skillName: string): SkillsRule \| null {\n return this.rules.get(skillName) ?? null;\n }\n\n /* Returns a NEW store with the given rule applied (immutable update). /\n withRule(rule: SkillsRule): InMemorySkillsPolicyStore {\n const next = new Map(this.rules);\n next.set(rule.skillName, rule);\n return new InMemorySkillsPolicyStore([...next.values()]);\n }\n}\n\nexport interface CreateSkillsPolicyOptions {\n /* The store backing skill lookups. /\n store: SkillsPolicyStore;\n /\n Returns true when a tool call should be checked against the skills\n * policy. Defaults to matching the tool name against\n * {@link DEFAULT_SKILL_TOOL_NAMES}.\n /\n isSkillTool?: (toolName: string) => boolean;\n /\n Extracts the skill name from the tool's arguments. Defaults to\n * reading `args.skill` or `args.skillName`.\n /\n extractSkillName?: (args: unknown) => string \| null;\n /\n Default decision when no rule matches. Defaults to `{ allow: true }`\n * to keep non-skill tools unaffected.\n /\n defaultDecision?: SkillsPolicyDecision;\n}\n\n/\n Build a {@link SkillsPolicyHook} from a store and matching options.\n \n The returned hook always allows tools that are not skill-like; it only\n * consults the store when {@link CreateSkillsPolicyOptions.isSkillTool}\n * returns true.\n /\nexport function createSkillsPolicy(\n options: CreateSkillsPolicyOptions,\n): SkillsPolicyHook {\n const isSkillTool =\n options.isSkillTool ??\n ((toolName: string) => DEFAULT_SKILL_TOOL_NAMES.includes(toolName));\n const extractSkillName =\n options.extractSkillName ?? defaultExtractSkillName;\n const defaultDecision: SkillsPolicyDecision = options.defaultDecision ?? {\n allow: true,\n };\n\n return async ({\n toolName,\n args,\n identity,\n }): Promise<SkillsPolicyDecision> => {\n if (!isSkillTool(toolName)) {\n return defaultDecision;\n }\n\n const skillName = extractSkillName(args);\n if (skillName === null) {\n return {\n allow: false,\n reason: `Skill tool '${toolName}' invoked without a skill name`,\n };\n }\n\n const rule = await Promise.resolve(options.store.lookup(skillName));\n if (rule === null) {\n return {\n allow: false,\n reason: `No policy entry for skill '${skillName}'`,\n };\n }\n\n if (rule.dids === null) {\n return { allow: true };\n }\n\n if (rule.dids.includes(identity.did)) {\n return { allow: true };\n }\n\n return {\n allow: false,\n reason:\n rule.reason ??\n `DID '${identity.did}' is not authorized for skill '${skillName}'`,\n };\n };\n}\n\nfunction defaultExtractSkillName(args: unknown): string \| null {\n if (args === null \|\| typeof args !== 'object') {\n return null;\n }\n const record = args as Record<string, unknown>;\n const skill = record['skill'];\n if (typeof skill === 'string' && skill.length > 0) {\n return skill;\n }\n const skillName = record['skillName'];\n if (typeof skillName === 'string' && skillName.length > 0) {\n return skillName;\n }\n return null;\n}\n\n/\n Compose two skills policy hooks. The combined hook denies if either\n * underlying hook denies; allow decisions from `first` are forwarded to\n * `second`.\n /\nexport function combineSkillsPolicies(\n first: SkillsPolicyHook,\n second: SkillsPolicyHook,\n): SkillsPolicyHook {\n return async (input): Promise<SkillsPolicyDecision> => {\n const a = await Promise.resolve(first(input));\n if (!a.allow) {\n return a;\n }\n return Promise.resolve(second(input));\n };\n}\n\n/* Re-exported for convenience. /\nexport type {\n SkillsPolicyHook,\n SkillsPolicyDecision,\n VerifiedIdentity,\n} from './types.js';\n","import { createHash, randomUUID } from 'node:crypto';\nimport type { OpenAgentWorkspace, LocalChallenge } from '@openagentid/sdk/local';\nimport type { VerifiedAgentIdentity } from '@openagentid/sdk';\nimport type { Agent } from './types.js';\n\nexport interface McpChallengeRequest {\n did: string;\n toolName: string;\n args?: Record<string, unknown>;\n}\n\nfunction canonical(value: unknown): string {\n if (value === null \|\| typeof value !== 'object') {\n const text = JSON.stringify(value);\n if (text === undefined) throw new TypeError('MCP arguments must be JSON values');\n return text;\n }\n if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;\n return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonical((value as Record<string, unknown>)[key])}`).join(',')}}`;\n}\n\nfunction digest(toolName: string, args: unknown): string {\n return createHash('sha256').update(canonical({ toolName, args: args ?? {} })).digest('hex');\n}\n\n/* Receiver-owned, single-process challenge bindings. Keep this instance alive\n * for the server's lifetime. Restarts fail outstanding requests closed. The SDK\n * persists trust, replay consumption and revocation in the receiver workspace. /\nexport function createWorkspaceMcpServer(options: {\n workspace: OpenAgentWorkspace;\n did: string;\n /* Scopes come from receiver policy, never from request metadata. /\n authorize(identity: VerifiedAgentIdentity): Promise<readonly string[]> \| readonly string[];\n maxPendingChallenges?: number;\n}): {\n agent: Pick<Agent, 'did' \| 'verifier'>;\n issueChallenge(request: McpChallengeRequest): Promise<LocalChallenge>;\n} {\n const pending = new Map<string, { did: string; digest: string; expiresAt: number }>();\n let issuing = 0;\n const max = options.maxPendingChallenges ?? 1000;\n if (!Number.isSafeInteger(max) \|\| max < 1) throw new TypeError('Invalid pending challenge limit');\n return {\n async issueChallenge(request) {\n for (const [nonce, value] of pending) if (value.expiresAt <= Date.now() / 1000) pending.delete(nonce);\n if (pending.size + issuing >= max) throw new Error('MCP challenge capacity reached');\n const binding = digest(request.toolName, request.args);\n issuing += 1;\n try {\n const challenge = await options.workspace.issueChallenge(request.did);\n pending.set(challenge.nonce, { did: request.did, digest: binding, expiresAt: challenge.expiresAt });\n return challenge;\n } finally { issuing -= 1; }\n },\n agent: {\n did: options.did,\n verifier: {\n async verify(envelope, _scopes, request) {\n const nonce = envelope.nonce;\n const binding = nonce ? pending.get(nonce) : undefined;\n if (!binding \|\| !nonce \|\| !request \|\| binding.did !== envelope.did \|\|\n binding.expiresAt <= Date.now() / 1000 \|\| binding.digest !== digest(request.toolName, request.args)) {\n throw new Error('MCP challenge does not match this caller and tool request');\n }\n // Claim before awaiting verification to exclude parallel use in this process.\n pending.delete(nonce);\n const proof = JSON.parse(envelope.proof) as Parameters<OpenAgentWorkspace['verify']>[0];\n const identity = await options.workspace.verify(proof, { nonce });\n if (identity.did !== envelope.did) throw new Error('MCP identity DID mismatch');\n const scopes = [...await options.authorize(identity)];\n if (!scopes.every(scope => typeof scope === 'string')) throw new TypeError('Invalid authorized scopes');\n return { did: identity.did, scopes, auditId: randomUUID(), claims: { identity } };\n },\n },\n },\n };\n}\n\n/* Adapt a current SDK signer. Obtain challenges over the receiver's trusted\n * transport; reject an audience change before signing. */\nexport function createWorkspaceMcpClient(options: {\n workspace: OpenAgentWorkspace;\n did: string;\n audience: string;\n issueChallenge(request: McpChallengeRequest): Promise<LocalChallenge>;\n}): Pick<Agent, 'did' \| 'signRequest'> {\n return {\n did: options.did,\n async signRequest(toolName, audience, args) {\n if (audience !== undefined && audience !== options.audience) throw new Error('MCP audience mismatch');\n const challenge = await options.issueChallenge({ did: options.did, toolName, ...(args ? { args } : {}) });\n if (challenge.audience !== options.audience \|\| challenge.expiresAt <= Date.now() / 1000) throw new Error('Invalid MCP receiver challenge');\n const proof = await options.workspace.prove(options.did, { audience: options.audience, nonce: challenge.nonce });\n return { did: options.did, proof: JSON.stringify(proof), nonce: challenge.nonce };\n },\n };\n}\n"]}

package/dist/index.d.cts CHANGED Viewed

@@ -2,4 +2,36 @@ export { ANONYMOUS_IDENTITY, McpServerLike, withOpenAgent } from './server.cjs';
 export { McpClientLike, OpenAgentClientConfig, buildIdentityMeta, withOpenAgentClient } from './client.cjs';
 export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, McpErrorCodeValue, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError } from './errors.cjs';
 export { CreateSkillsPolicyOptions, DEFAULT_SKILL_TOOL_NAMES, InMemorySkillsPolicyStore, SkillsPolicyStore, SkillsRule, combineSkillsPolicies, createSkillsPolicy } from './skills.cjs';
-export { Agent, AuditedResultMeta, Did, ErrorHook, IdentityVerifier, OpenAgentMcpConfig, OpenAgentRequestIdentity, PostCallHook, PreCallHook, ScopeDeriver, SkillsPolicyDecision, SkillsPolicyHook, VerifiedIdentity, defaultRequireScopes, defaultScopeFormat } from './types.cjs';
+import { Agent } from './types.cjs';
+export { AuditedResultMeta, Did, ErrorHook, IdentityVerifier, OpenAgentMcpConfig, OpenAgentRequestIdentity, PostCallHook, PreCallHook, ScopeDeriver, SkillsPolicyDecision, SkillsPolicyHook, VerifiedIdentity, defaultRequireScopes, defaultScopeFormat } from './types.cjs';
+import { OpenAgentWorkspace, LocalChallenge } from '@openagentid/sdk/local';
+import { VerifiedAgentIdentity } from '@openagentid/sdk';
+interface McpChallengeRequest {
+    did: string;
+    toolName: string;
+    args?: Record<string, unknown>;
+}
+/** Receiver-owned, single-process challenge bindings. Keep this instance alive
+ * for the server's lifetime. Restarts fail outstanding requests closed. The SDK
+ * persists trust, replay consumption and revocation in the receiver workspace. */
+declare function createWorkspaceMcpServer(options: {
+    workspace: OpenAgentWorkspace;
+    did: string;
+    /** Scopes come from receiver policy, never from request metadata. */
+    authorize(identity: VerifiedAgentIdentity): Promise<readonly string[]> | readonly string[];
+    maxPendingChallenges?: number;
+}): {
+    agent: Pick<Agent, 'did' | 'verifier'>;
+    issueChallenge(request: McpChallengeRequest): Promise<LocalChallenge>;
+};
+/** Adapt a current SDK signer. Obtain challenges over the receiver's trusted
+ * transport; reject an audience change before signing. */
+declare function createWorkspaceMcpClient(options: {
+    workspace: OpenAgentWorkspace;
+    did: string;
+    audience: string;
+    issueChallenge(request: McpChallengeRequest): Promise<LocalChallenge>;
+}): Pick<Agent, 'did' | 'signRequest'>;
+export { Agent, type McpChallengeRequest, createWorkspaceMcpClient, createWorkspaceMcpServer };

package/dist/index.d.ts CHANGED Viewed

@@ -2,4 +2,36 @@ export { ANONYMOUS_IDENTITY, McpServerLike, withOpenAgent } from './server.js';
 export { McpClientLike, OpenAgentClientConfig, buildIdentityMeta, withOpenAgentClient } from './client.js';
 export { AuthorizationDeniedError, IdentityVerificationError, McpErrorCode, McpErrorCodeValue, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError } from './errors.js';
 export { CreateSkillsPolicyOptions, DEFAULT_SKILL_TOOL_NAMES, InMemorySkillsPolicyStore, SkillsPolicyStore, SkillsRule, combineSkillsPolicies, createSkillsPolicy } from './skills.js';
-export { Agent, AuditedResultMeta, Did, ErrorHook, IdentityVerifier, OpenAgentMcpConfig, OpenAgentRequestIdentity, PostCallHook, PreCallHook, ScopeDeriver, SkillsPolicyDecision, SkillsPolicyHook, VerifiedIdentity, defaultRequireScopes, defaultScopeFormat } from './types.js';
+import { Agent } from './types.js';
+export { AuditedResultMeta, Did, ErrorHook, IdentityVerifier, OpenAgentMcpConfig, OpenAgentRequestIdentity, PostCallHook, PreCallHook, ScopeDeriver, SkillsPolicyDecision, SkillsPolicyHook, VerifiedIdentity, defaultRequireScopes, defaultScopeFormat } from './types.js';
+import { OpenAgentWorkspace, LocalChallenge } from '@openagentid/sdk/local';
+import { VerifiedAgentIdentity } from '@openagentid/sdk';
+interface McpChallengeRequest {
+    did: string;
+    toolName: string;
+    args?: Record<string, unknown>;
+}
+/** Receiver-owned, single-process challenge bindings. Keep this instance alive
+ * for the server's lifetime. Restarts fail outstanding requests closed. The SDK
+ * persists trust, replay consumption and revocation in the receiver workspace. */
+declare function createWorkspaceMcpServer(options: {
+    workspace: OpenAgentWorkspace;
+    did: string;
+    /** Scopes come from receiver policy, never from request metadata. */
+    authorize(identity: VerifiedAgentIdentity): Promise<readonly string[]> | readonly string[];
+    maxPendingChallenges?: number;
+}): {
+    agent: Pick<Agent, 'did' | 'verifier'>;
+    issueChallenge(request: McpChallengeRequest): Promise<LocalChallenge>;
+};
+/** Adapt a current SDK signer. Obtain challenges over the receiver's trusted
+ * transport; reject an audience change before signing. */
+declare function createWorkspaceMcpClient(options: {
+    workspace: OpenAgentWorkspace;
+    did: string;
+    audience: string;
+    issueChallenge(request: McpChallengeRequest): Promise<LocalChallenge>;
+}): Pick<Agent, 'did' | 'signRequest'>;
+export { Agent, type McpChallengeRequest, createWorkspaceMcpClient, createWorkspaceMcpServer };

package/dist/index.js CHANGED Viewed

@@ -1,3 +1,6 @@
+import { AsyncLocalStorage } from 'async_hooks';
+import { randomUUID, createHash } from 'crypto';
 // src/errors.ts
 var McpErrorCode = {
   /** -32600 — request was malformed at the JSON-RPC layer. */
@@ -96,12 +99,47 @@ function formatCause(cause) {
 // src/types.ts
 var defaultScopeFormat = (toolName) => `mcp:${toolName}:invoke`;
 var defaultRequireScopes = (toolName) => [defaultScopeFormat(toolName)];
+function installRequestBoundary(server) {
+  const context = new AsyncLocalStorage();
+  const wrap = (handler, transport) => (message, ...extra) => {
+    let request;
+    if (message && typeof message === "object" && "method" in message && message.method === "tools/call" && "params" in message && message.params && typeof message.params === "object" && "name" in message.params && typeof message.params.name === "string") {
+      request = {
+        toolName: message.params.name,
+        args: structuredClone("arguments" in message.params ? message.params.arguments : void 0)
+      };
+    }
+    return context.run(request, () => handler.call(transport, message, ...extra));
+  };
+  const existing = server.server?.transport;
+  if (existing && typeof existing === "object") {
+    const transport = existing;
+    if (transport.onmessage) transport.onmessage = wrap(transport.onmessage, transport);
+  }
+  const connect = server.connect;
+  if (connect) {
+    server.connect = async function(transport, ...options) {
+      if (!transport || typeof transport !== "object") throw new TypeError("MCP transport is required");
+      const wrapped = new Proxy(transport, {
+        set(target, key, value) {
+          return Reflect.set(target, key, key === "onmessage" && typeof value === "function" ? wrap(value, target) : value, target);
+        },
+        get(target, key) {
+          const value = Reflect.get(target, key, target);
+          return typeof value === "function" ? value.bind(target) : value;
+        }
+      });
+      await connect.call(this, wrapped, ...options);
+    };
+  }
+  return context;
+}
 // src/server.ts
 var TOOL_REGISTRATION_METHODS = ["tool", "registerTool"];
 function withOpenAgent(server, config) {
   validateConfig(config);
-  const middleware = new ToolMiddleware(config);
+  const middleware = new ToolMiddleware(config, installRequestBoundary(server));
   return new Proxy(server, {
     get(target, property, receiver) {
       const value = Reflect.get(target, property, receiver);
@@ -159,22 +197,24 @@ function findCallbackIndex(args) {
   return -1;
 }
 var ToolMiddleware = class {
-  agent;
-  requireScopes;
-  requireIdentity;
-  skillsPolicy;
-  preCall;
-  postCall;
-  onError;
-  constructor(config) {
+  constructor(config, requests) {
+    this.requests = requests;
     this.agent = config.agent;
-    this.requireScopes = config.requireScopes ?? defaultRequireScopes;
+    this.requireScopes = config.requireScopes ?? (config.scopeFormat ? (tool) => [config.scopeFormat(tool)] : defaultRequireScopes);
     this.requireIdentity = config.requireIdentity ?? true;
     this.skillsPolicy = config.skillsPolicy;
     this.preCall = config.preCall;
     this.postCall = config.postCall;
     this.onError = config.onError;
   }
+  requests;
+  agent;
+  requireScopes;
+  requireIdentity;
+  skillsPolicy;
+  preCall;
+  postCall;
+  onError;
   wrap(toolName, userCallback) {
     const middleware = this;
     return async function wrappedCallback(...callbackArgs) {
@@ -222,9 +262,12 @@ var ToolMiddleware = class {
     const requiredScopes = this.requireScopes(toolName, args);
     let identity;
     try {
+      const inbound = this.requests.getStore();
+      if (inbound && inbound.toolName !== toolName) throw new Error("MCP request/tool binding mismatch");
       identity = await this.agent.verifier.verify(
         identityEnvelope,
-        requiredScopes
+        requiredScopes,
+        inbound ?? { toolName, args }
       );
     } catch (cause) {
       throw new IdentityVerificationError(toolName, cause);
@@ -369,24 +412,13 @@ var ClientInterceptor = class {
   wrapCallTool(original, thisArg) {
     const interceptor = this;
     return async function wrappedCallTool(params, ...rest) {
-      const signed = await interceptor.signParams(params);
-      let toSend = signed;
-      if (interceptor.beforeCall !== void 0) {
-        const replacement = await Promise.resolve(
-          interceptor.beforeCall(signed)
-        );
-        if (replacement !== void 0) {
-          toSend = {
-            ...replacement,
-            _meta: replacement._meta ?? signed._meta
-          };
-        }
-      }
+      const replacement = await interceptor.beforeCall?.(params);
+      const toSend = await interceptor.signParams(replacement ?? params);
       return original.call(thisArg, toSend, ...rest);
     };
   }
   async signParams(params) {
-    const identity = await this.agent.signRequest(params.name, this.audience);
+    const identity = await this.agent.signRequest(params.name, this.audience, params.arguments);
     const existingMeta = params._meta ?? {};
     const existingOpenAgent = typeof existingMeta["openagent"] === "object" && existingMeta["openagent"] !== null ? existingMeta["openagent"] : {};
     return {
@@ -501,7 +533,71 @@ function combineSkillsPolicies(first, second) {
     return Promise.resolve(second(input));
   };
 }
+function canonical(value) {
+  if (value === null || typeof value !== "object") {
+    const text = JSON.stringify(value);
+    if (text === void 0) throw new TypeError("MCP arguments must be JSON values");
+    return text;
+  }
+  if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+  return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`;
+}
+function digest(toolName, args) {
+  return createHash("sha256").update(canonical({ toolName, args: args ?? {} })).digest("hex");
+}
+function createWorkspaceMcpServer(options) {
+  const pending = /* @__PURE__ */ new Map();
+  let issuing = 0;
+  const max = options.maxPendingChallenges ?? 1e3;
+  if (!Number.isSafeInteger(max) || max < 1) throw new TypeError("Invalid pending challenge limit");
+  return {
+    async issueChallenge(request) {
+      for (const [nonce, value] of pending) if (value.expiresAt <= Date.now() / 1e3) pending.delete(nonce);
+      if (pending.size + issuing >= max) throw new Error("MCP challenge capacity reached");
+      const binding = digest(request.toolName, request.args);
+      issuing += 1;
+      try {
+        const challenge = await options.workspace.issueChallenge(request.did);
+        pending.set(challenge.nonce, { did: request.did, digest: binding, expiresAt: challenge.expiresAt });
+        return challenge;
+      } finally {
+        issuing -= 1;
+      }
+    },
+    agent: {
+      did: options.did,
+      verifier: {
+        async verify(envelope, _scopes, request) {
+          const nonce = envelope.nonce;
+          const binding = nonce ? pending.get(nonce) : void 0;
+          if (!binding || !nonce || !request || binding.did !== envelope.did || binding.expiresAt <= Date.now() / 1e3 || binding.digest !== digest(request.toolName, request.args)) {
+            throw new Error("MCP challenge does not match this caller and tool request");
+          }
+          pending.delete(nonce);
+          const proof = JSON.parse(envelope.proof);
+          const identity = await options.workspace.verify(proof, { nonce });
+          if (identity.did !== envelope.did) throw new Error("MCP identity DID mismatch");
+          const scopes = [...await options.authorize(identity)];
+          if (!scopes.every((scope) => typeof scope === "string")) throw new TypeError("Invalid authorized scopes");
+          return { did: identity.did, scopes, auditId: randomUUID(), claims: { identity } };
+        }
+      }
+    }
+  };
+}
+function createWorkspaceMcpClient(options) {
+  return {
+    did: options.did,
+    async signRequest(toolName, audience, args) {
+      if (audience !== void 0 && audience !== options.audience) throw new Error("MCP audience mismatch");
+      const challenge = await options.issueChallenge({ did: options.did, toolName, ...args ? { args } : {} });
+      if (challenge.audience !== options.audience || challenge.expiresAt <= Date.now() / 1e3) throw new Error("Invalid MCP receiver challenge");
+      const proof = await options.workspace.prove(options.did, { audience: options.audience, nonce: challenge.nonce });
+      return { did: options.did, proof: JSON.stringify(proof), nonce: challenge.nonce };
+    }
+  };
+}
-export { ANONYMOUS_IDENTITY, AuthorizationDeniedError, DEFAULT_SKILL_TOOL_NAMES, IdentityVerificationError, InMemorySkillsPolicyStore, McpErrorCode, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError, buildIdentityMeta, combineSkillsPolicies, createSkillsPolicy, defaultRequireScopes, defaultScopeFormat, withOpenAgent, withOpenAgentClient };
+export { ANONYMOUS_IDENTITY, AuthorizationDeniedError, DEFAULT_SKILL_TOOL_NAMES, IdentityVerificationError, InMemorySkillsPolicyStore, McpErrorCode, MissingIdentityError, OpenAgentMcpError, SkillsPolicyDeniedError, buildIdentityMeta, combineSkillsPolicies, createSkillsPolicy, createWorkspaceMcpClient, createWorkspaceMcpServer, defaultRequireScopes, defaultScopeFormat, withOpenAgent, withOpenAgentClient };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map