@ours.network/mcp 1.2.0-nightly.5 → 1.2.0-nightly.6

package/dist/types/application-identities.d.ts

@@ -0,0 +1,26 @@
+export declare const APPLICATION_IDENTITIES_VERSION: 1;
+export declare const APPLICATION_IDENTITIES_ENV = "OURS_MCP_CONFIG";
+type ApplicationIdentityTarget = string | Readonly<{
+    instanceId: string;
+}>;
+export declare function applicationIdentityConfigPath(env?: NodeJS.ProcessEnv): string;
+/** Application-local identity visibility bookkeeping, never authorization or selection state. */
+export declare class ApplicationIdentityStore {
+    readonly stateDir: string | null;
+    readonly instanceId: string | null;
+    readonly path: string;
+    constructor(target: ApplicationIdentityTarget, options?: {
+        path?: string;
+        env?: NodeJS.ProcessEnv;
+    });
+    private rows;
+    private key;
+    list(): Promise<string[]>;
+    has(name: string): Promise<boolean>;
+    add(name: string): Promise<void>;
+    remove(name: string): Promise<void>;
+}
+export declare function filterApplicationIdentities<T extends {
+    name: string;
+}>(store: ApplicationIdentityStore, daemonRows: readonly T[]): Promise<T[]>;
+export {};

package/dist/types/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/types/connector.d.ts

@@ -0,0 +1,26 @@
+import type { OursClient } from '@ours.network/sdk';
+import type { HostProfile } from './host-profile.js';
+import { createOursMcpServer } from './mcp/server.js';
+export type ExternalConnectorSelection = Readonly<{
+    mode: 'external-profile';
+    profile: HostProfile;
+    ownerInstanceId: string;
+}>;
+export interface ConnectorOptions {
+    leaseToken: string;
+    clientPid: number;
+    version: string;
+    bindIdentity?: string;
+    selection?: ExternalConnectorSelection;
+}
+export declare class ArrivalWatcher {
+    private readonly client;
+    private readonly server;
+    private stopped;
+    private bound;
+    private readonly abort;
+    constructor(client: OursClient, server: ReturnType<typeof createOursMcpServer>);
+    stop(): void;
+    run(): Promise<void>;
+}
+export declare function runConnector(options: ConnectorOptions): Promise<void>;

package/dist/types/contacts.d.ts

@@ -0,0 +1,12 @@
+export interface ContactLineInput {
+    name: string;
+    container_id: string;
+    /** pre-rendered root-linkage tag, e.g. `  [role "PeerOne" of BookKeeper]` */
+    rootTag?: string;
+    /** queued-restore count when the contact's keys are degraded */
+    degradedQueued?: number;
+    /** the shared name this contact held before the boot import sweep renamed it */
+    renamedFrom?: string;
+}
+export declare function duplicateNameCounts(items: ContactLineInput[]): Map<string, number>;
+export declare function buildContactLines(items: ContactLineInput[]): string[];

package/dist/types/container.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/types/host-client/index.d.ts

@@ -0,0 +1,3 @@
+export { readHostProfile, hostProfileFromEnv, hostProfileSelectionFromEnv, validateHostProfile } from './profile.js';
+export type { HostProfile } from './profile.js';
+export { endNativeSessionAtRoot, nativeClientForAtRoot, nativeSessionRecordPath, } from './native-session.js';

package/dist/types/host-client/native-session.d.ts

@@ -0,0 +1 @@
+export { endNativeSessionAtRoot, nativeClientForAtRoot, nativeSessionRecordPath, } from '../native-session.js';

package/dist/types/host-client/profile.d.ts

@@ -0,0 +1,2 @@
+export { hostProfileFromEnv, hostProfileSelectionFromEnv, readHostProfile, validateHostProfile } from '../host-profile.js';
+export type { HostProfile } from '../host-profile.js';

package/dist/types/host-profile.d.ts

@@ -0,0 +1,13 @@
+export type HostProfile = Readonly<{
+    endpoint: string;
+    expectedInstanceId: string;
+    credentialPath: string;
+}>;
+export declare function validateHostProfile(value: unknown): HostProfile;
+export declare function readHostProfile(configPath: string): HostProfile | null;
+/** Select only host-client profiles; daemon configuration resolution is unchanged. */
+export declare function hostProfileSelectionFromEnv(env?: NodeJS.ProcessEnv): {
+    profile: HostProfile;
+    configPath: string;
+} | null;
+export declare function hostProfileFromEnv(env?: NodeJS.ProcessEnv): HostProfile | null;

package/dist/types/mcp/file-context.d.ts

@@ -0,0 +1,17 @@
+import type { ToolRequestExtra } from './tool.js';
+/** All path resolution, probing and I/O happens in the caller's OS context. */
+export interface FileExecutionContext {
+    read(path: string, extra: ToolRequestExtra): Promise<{
+        filename: string;
+        size: number;
+        body: ReadableStream<Uint8Array>;
+        close(): void | Promise<void>;
+    }>;
+    write(path: string, body: ReadableStream<Uint8Array>, extra: ToolRequestExtra): Promise<{
+        path: string;
+        size: number;
+    }>;
+    canRead(path: string, extra: ToolRequestExtra): Promise<boolean>;
+}
+/** Standalone only. Managed callers must supply their sandbox callback context. */
+export declare const localFileContext: FileExecutionContext;

package/dist/types/mcp/format.d.ts

@@ -0,0 +1,20 @@
+import type { OursClient } from '@ours.network/sdk';
+type IncomingFileMeta = Awaited<ReturnType<OursClient['listIncomingFiles']>>[number];
+export declare const FILES_ALWAYS_PROMPT: boolean;
+export declare const canRead: (p: string) => boolean;
+declare function renderFiles(files: IncomingFileMeta[]): string;
+export { renderFiles };
+/**
+ * Annotate a get_files RESULT in place when some of its files are not readable
+ * by this OS user. Returns true if the result was annotated. No
+ * structuredContent (an older daemon) means no probe and no annotation — pure
+ * passthrough.
+ *
+ * The instruction is PREPENDED, never substituted for the daemon's own text.
+ * That text can carry payload the proxy cannot reconstruct — a voice message is
+ * delivered as a TRANSCRIPT, not as a path — so replacing it wholesale would
+ * drop real message content whenever an unreadable file shares a batch with one.
+ *
+ * Unchanged from `proxy.ts:139`. What changed is who calls it — see below.
+ */
+export declare function annotateGetFilesResult(result: unknown, readable: (p: string) => boolean): boolean;

package/dist/types/mcp/push.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The member of `McpServer` this file touches, described structurally so
+ * nothing here has to import the MCP package. The real `McpServer` satisfies it.
+ */
+export interface ArrivalPushTarget {
+    sendLoggingMessage(payload: {
+        level: 'info';
+        logger: string;
+        data: string;
+    }): unknown;
+}
+/** Reported per failed push; the caller decides how to log it. */
+export type PushErrorSink = (what: 'sendLoggingMessage', err: unknown) => void;
+/**
+ * Announce one body-free arrival summary on the logging channel.
+ */
+export declare function pushArrivalNotification(target: ArrivalPushTarget, summary: string, onError: PushErrorSink): void;

package/dist/types/mcp/registry.d.ts

@@ -0,0 +1,22 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolRequestExtra } from './tool.js';
+export declare const REGISTRY_VERSION: 1;
+export declare const TOOL_EFFECTS: readonly ["bound", "binding", "lifecycle", "profile", "contact", "inventory", "filesystem", "workspace-pin"];
+export type ToolEffect = typeof TOOL_EFFECTS[number];
+export interface ToolPolicy {
+    version: typeof REGISTRY_VERSION;
+    allowedEffects: readonly ToolEffect[];
+    /** Admission spans the entire handler, including file callbacks and rendering. */
+    admit: (tool: string, extra: ToolRequestExtra) => Promise<() => void | Promise<void>>;
+}
+/** Registrations own their effects alongside their original schemas and handlers. */
+export declare class ToolRegistry {
+    private readonly server;
+    private readonly policy?;
+    readonly entries: Array<{
+        name: string;
+        effect: ToolEffect;
+    }>;
+    constructor(server: McpServer, policy?: ToolPolicy | undefined);
+    tool(effect: ToolEffect): McpServer['tool'];
+}

package/dist/types/mcp/server.d.ts

@@ -0,0 +1,23 @@
+import type { FileExecutionContext } from './file-context.js';
+import { type ToolPolicy } from './registry.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { OursClient } from '@ours.network/sdk';
+import type { ApplicationIdentityStore } from '../application-identities.js';
+import type { OursClientProvider } from './tool.js';
+/**
+ * Build one per-session MCP server around the already-attached shared-daemon
+ * client.
+ */
+export declare function createOursMcpServer(client: OursClient | OursClientProvider, version: string, applicationIdentities: ApplicationIdentityStore, options?: {
+    remoteDaemonFiles?: boolean;
+    policy?: ToolPolicy;
+    fileContext?: FileExecutionContext;
+}): McpServer;
+export { REGISTRY_VERSION, TOOL_EFFECTS, type ToolEffect, type ToolPolicy } from "./registry.js";
+export type { FileExecutionContext } from "./file-context.js";
+/** Fixed-identity entry point: lifecycle tools cannot be enabled by a caller policy. */
+export declare function createManagedOursMcpServer(client: OursClient, version: string, applicationIdentities: ApplicationIdentityStore, options: {
+    fileContext: FileExecutionContext;
+    admit: ToolPolicy['admit'];
+    remoteDaemonFiles?: boolean;
+}): McpServer;

package/dist/types/mcp/tool.d.ts

@@ -0,0 +1,22 @@
+import type { OursClient } from '@ours.network/sdk';
+import type { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';
+import type { ServerNotification, ServerRequest } from '@modelcontextprotocol/sdk/types.js';
+export type ToolRequestExtra = RequestHandlerExtra<ServerRequest, ServerNotification>;
+export type OursClientProvider = (extra: ToolRequestExtra) => OursClient | Promise<OursClient>;
+/** The MCP content shape every ours tool returns. */
+export type McpTextResult = {
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+    isError: boolean;
+    structuredContent?: Record<string, unknown>;
+};
+export declare function textResult(text: string, isError?: boolean): McpTextResult;
+/** Managed clients never bind or retry behind the supervisor recovery gate. */
+export declare function markManagedClient(client: OursClient): void;
+export declare function rememberBinding(client: OursClient, name: string): void;
+/** What runTool has learned. The inbox watch reads this rather than asking again. */
+export declare function getBoundIdentity(client: OursClient): string | null;
+export declare function forgetBinding(client: OursClient): void;
+export declare function runTool<T>(clientValue: OursClient | Promise<OursClient>, call: (client: OursClient) => Promise<T> | T, render: (value: T) => McpTextResult | Promise<McpTextResult>): Promise<McpTextResult>;

package/dist/types/mcp/tools/commands.d.ts

@@ -0,0 +1,3 @@
+import type { ToolRegistry } from '../registry.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerCommandTools(server: ToolRegistry, clientFor: OursClientProvider): void;

package/dist/types/mcp/tools/contacts.d.ts

@@ -0,0 +1,3 @@
+import type { ToolRegistry } from '../registry.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerContactsTools(server: ToolRegistry, clientFor: OursClientProvider): void;

package/dist/types/mcp/tools/files.d.ts

@@ -0,0 +1,7 @@
+import type { ToolRegistry } from '../registry.js';
+import { type FileExecutionContext } from '../file-context.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerFilesTools(server: ToolRegistry, clientFor: OursClientProvider, options?: {
+    remoteDaemonFiles?: boolean;
+    fileContext?: FileExecutionContext;
+}): void;

package/dist/types/mcp/tools/history.d.ts

@@ -0,0 +1,3 @@
+import type { ToolRegistry } from '../registry.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerHistoryTools(server: ToolRegistry, clientFor: OursClientProvider): void;

package/dist/types/mcp/tools/identity.d.ts

@@ -0,0 +1,6 @@
+import type { ToolRegistry } from '../registry.js';
+import type { ApplicationIdentityStore } from '../../application-identities.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerIdentityTools(server: ToolRegistry, clientFor: OursClientProvider, applicationIdentities: ApplicationIdentityStore, options?: {
+    managedLifetime?: boolean;
+}): void;

package/dist/types/mcp/tools/messaging.d.ts

@@ -0,0 +1,4 @@
+import { type FileExecutionContext } from '../file-context.js';
+import type { ToolRegistry } from '../registry.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerMessagingTools(server: ToolRegistry, clientFor: OursClientProvider, files?: FileExecutionContext): void;

package/dist/types/mcp/tools/profile.d.ts

@@ -0,0 +1,3 @@
+import type { ToolRegistry } from '../registry.js';
+import { type OursClientProvider } from '../tool.js';
+export declare function registerProfileTools(server: ToolRegistry, clientFor: OursClientProvider): void;

package/dist/types/native-session.d.ts

@@ -0,0 +1,9 @@
+import type { OursClient } from '@ours.network/sdk';
+import type { HostProfile } from './host-profile.js';
+export declare function nativeSessionRecordPath(hostRecordRoot: string, instanceId: string, nativeSessionId: string): string;
+/** Attach or recover the owner for one native Codex/Claude logical session. */
+export declare function nativeClientFor(profileValue: HostProfile, nativeSessionId: string, env?: NodeJS.ProcessEnv): Promise<OursClient>;
+export declare function nativeClientForAtRoot(profileValue: HostProfile, nativeSessionId: string, hostRecordRoot: string): Promise<OursClient>;
+/** Persist terminal intent and release exactly the owner captured by that intent. */
+export declare function endNativeSession(profileValue: HostProfile, nativeSessionId: string, env?: NodeJS.ProcessEnv): Promise<void>;
+export declare function endNativeSessionAtRoot(profileValue: HostProfile, nativeSessionId: string, hostRecordRoot: string): Promise<void>;

package/dist/types/session-guard.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Cross-process coordination guard for native session records.
+ * Uses SQLite BEGIN EXCLUSIVE on a permanent guard file adjacent to
+ * the JSON record, following the SDK acquireStateRootLock pattern.
+ *
+ * OS-released: process death closes the SQLite connection and
+ * releases the exclusive lock. The guard inode is permanent.
+ */
+/**
+ * Acquire a cross-process exclusive lock on the guard file.
+ * Returns a release function. The lock is also released on process death.
+ */
+export declare function acquireSessionGuard(recordPath: string): () => void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/mcp",
-  "version": "1.2.0-nightly.5",
+  "version": "1.2.0-nightly.6",
   "description": "MCP adapter for the shared ours daemon, with application-local identity bookkeeping and secure agent-to-agent messaging tools over stdio.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -27,7 +27,15 @@
     "ours-mcp": "dist/cli.js"
   },
   "exports": {
-    "./dist/*": "./dist/*"
+    "./dist/*": "./dist/*",
+    "./server": {
+      "types": "./dist/types/mcp/server.d.ts",
+      "default": "./dist/server.js"
+    },
+    "./application-identities": {
+      "types": "./dist/types/application-identities.d.ts",
+      "default": "./dist/application-identities.js"
+    }
   },
   "files": [
     "dist",
@@ -46,20 +54,20 @@
     "dev": "tsx src/cli.ts proxy",
     "prepublishOnly": "node build.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "node test/application-identities.test.mjs && node test/local-files.test.mjs && node test/cli-delegation.test.mjs && node test/sdk-pin.test.mjs && node test/skill-tool-vocabulary.test.mjs && node test/inbox-push.test.mjs && node test/contact-lines.test.mjs && node test/env-bind-identity.test.mjs && node test/proxy-exit-on-stdin-eof.test.mjs && node test/proxy-dead-stderr.test.mjs && node test/session-end-temp-cleanup.test.mjs && node test/host-profile.test.mjs && node test/container.test.mjs",
+    "test": "node --test test/managed-server.test.mjs && node test/application-identities.test.mjs && node test/local-files.test.mjs && node test/cli-delegation.test.mjs && node test/inbox-push.test.mjs && node test/contact-lines.test.mjs && node test/env-bind-identity.test.mjs && node test/proxy-exit-on-stdin-eof.test.mjs && node test/proxy-dead-stderr.test.mjs && node test/session-end-temp-cleanup.test.mjs && node test/host-profile.test.mjs && node test/container.test.mjs",
     "test:external-profile": "node test/native-profile-session.test.mjs && node test/external-profile-stdio-refresh.test.mjs"
   },
   "dependencies": {
-    "@ours.network/sdk": "3.8.1-nightly.9"
+    "@ours.network/sdk": "3.8.1-nightly.10",
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "zod": "^3.23.8"
   },
   "devDependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.4",
     "@types/node": "^20.14.0",
     "esbuild": "^0.24.2",
     "tsx": "^4.19.0",
     "typescript": "^5.5.4",
-    "zod": "^3.23.8",
-    "@ours.network/cli": "2.8.1-nightly.7",
-    "@ours.network/daemon": "3.8.1-nightly.1"
+    "@ours.network/cli": "2.8.1-nightly.8",
+    "@ours.network/daemon": "3.8.1-nightly.2"
   }
 }