@proof-holdings/delegation-self-refusal 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/install.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { type McpServerLike, type ToolRegistrar } from './registrar.js';
|
|
2
2
|
import type { GuardOptions } from './types.js';
|
|
3
3
|
/** Version reported in the `X-Proof-Surface` header. Kept in lockstep with package.json by a drift test. */
|
|
4
|
-
export declare const SHOWCASE_VERSION = "0.1.
|
|
4
|
+
export declare const SHOWCASE_VERSION = "0.1.1";
|
|
5
5
|
export interface InstallProofLayerOptions extends GuardOptions {
|
|
6
6
|
}
|
|
7
7
|
export declare function installProofLayer(server: McpServerLike, opts: InstallProofLayerOptions): ToolRegistrar;
|
package/dist/install.js
CHANGED
|
@@ -6,7 +6,7 @@ import { createLayerSurfaceFetch, createMarkedFetch } from './showcase/marked-fe
|
|
|
6
6
|
import { registerShowcase, SHOWCASE_TOOL_NAMES } from './showcase/tools.js';
|
|
7
7
|
import { showcaseInstructionsParagraph } from './showcase/instructions.js';
|
|
8
8
|
/** Version reported in the `X-Proof-Surface` header. Kept in lockstep with package.json by a drift test. */
|
|
9
|
-
export const SHOWCASE_VERSION = '0.1.
|
|
9
|
+
export const SHOWCASE_VERSION = '0.1.1';
|
|
10
10
|
/**
|
|
11
11
|
* Installs the self-refusal gate AND the three-tool Proof showcase in one call — the alternative
|
|
12
12
|
* to `guardDelegation` for a publisher who wants their users to see Proof inside the server they
|
|
@@ -11,11 +11,10 @@ export interface ConnectInfo {
|
|
|
11
11
|
remote_url?: string;
|
|
12
12
|
remote_config?: unknown;
|
|
13
13
|
install_command: string;
|
|
14
|
-
/** Why
|
|
14
|
+
/** Why a client that resolved an older published build should prefer the remote route. */
|
|
15
15
|
install_caveat?: string;
|
|
16
16
|
docs_url: string;
|
|
17
17
|
client_config?: unknown;
|
|
18
|
-
updated_at?: string;
|
|
19
18
|
source: 'live' | 'offline_fallback';
|
|
20
19
|
}
|
|
21
20
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/showcase/connect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,
|
|
1
|
+
{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/showcase/connect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACrC;AAoBD;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,EAAE,WA0B9B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,WAAW,CAAC,CAuDtB"}
|
package/dist/showcase/connect.js
CHANGED
|
@@ -33,7 +33,19 @@ export const OFFLINE_FALLBACK = {
|
|
|
33
33
|
mcpServers: { proof: { type: 'http', url: 'https://api.proof.holdings/mcp' } },
|
|
34
34
|
},
|
|
35
35
|
install_command: 'npx -y @proof-holdings/mcp-server',
|
|
36
|
-
|
|
36
|
+
// Names VERSIONS, never the registry's present contents. This string freezes into the
|
|
37
|
+
// publisher's node_modules at install time, so a claim about what npm carries "currently" cannot
|
|
38
|
+
// be corrected later — and the previous wording, which said the published build predated the
|
|
39
|
+
// delegation tools "until it is republished", went out inside a tarball and became false while
|
|
40
|
+
// sitting there. Phrased against a version number it stays true without any republish: a client
|
|
41
|
+
// that really did resolve 1.0.0 is still better served by remote_url.
|
|
42
|
+
//
|
|
43
|
+
// A LOCKSTEP COPY of the issuer's `INSTALL_CAVEAT` (`src/controllers/mcp.ts`) — this package
|
|
44
|
+
// shares no build graph with the backend, so the two are held equal by
|
|
45
|
+
// `src/__tests__/drift/mcp-showcase.test.ts` rather than by an import. The live answer from
|
|
46
|
+
// `GET /api/v1/mcp/connect` overrides this whenever the issuer is reachable; this copy is
|
|
47
|
+
// labelled `offline_fallback` so a reader can tell them apart.
|
|
48
|
+
install_caveat: '@proof-holdings/mcp-server 1.0.0 (published 2026-02-27) predates the delegation tools and the keyless public mode, so it exposes an older and smaller surface; every later release carries them. A client still resolving 1.0.0 should use remote_url.',
|
|
37
49
|
docs_url: 'https://proof.holdings/docs/mcp',
|
|
38
50
|
source: 'offline_fallback',
|
|
39
51
|
};
|
|
@@ -91,7 +103,6 @@ export async function fetchConnectInfo(baseUrl, breaker, fetchImpl) {
|
|
|
91
103
|
...(typeof body.install_caveat === 'string' ? { install_caveat: body.install_caveat } : {}),
|
|
92
104
|
docs_url: typeof body.docs_url === 'string' ? body.docs_url : OFFLINE_FALLBACK.docs_url,
|
|
93
105
|
...(body.client_config !== undefined ? { client_config: body.client_config } : {}),
|
|
94
|
-
...(typeof body.updated_at === 'string' ? { updated_at: body.updated_at } : {}),
|
|
95
106
|
source: 'live',
|
|
96
107
|
};
|
|
97
108
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/showcase/connect.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/showcase/connect.ts"],"names":[],"mappings":"AAqBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAgB;IAC3C,OAAO,EACL,+dAA+d;IACje,0FAA0F;IAC1F,4FAA4F;IAC5F,UAAU,EAAE,gCAAgC;IAC5C,aAAa,EAAE;QACb,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gCAAgC,EAAE,EAAE;KAC/E;IACD,eAAe,EAAE,mCAAmC;IACpD,sFAAsF;IACtF,iGAAiG;IACjG,6FAA6F;IAC7F,+FAA+F;IAC/F,gGAAgG;IAChG,sEAAsE;IACtE,EAAE;IACF,6FAA6F;IAC7F,uEAAuE;IACvE,4FAA4F;IAC5F,0FAA0F;IAC1F,+DAA+D;IAC/D,cAAc,EACZ,wPAAwP;IAC1P,QAAQ,EAAE,iCAAiC;IAC3C,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,OAAgB,EAChB,SAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,MAAM,qBAAqB,EAAE;YAC/D,MAAM,EAAE,KAAK;YACb,MAAM;YACN,2FAA2F;YAC3F,4FAA4F;YAC5F,2FAA2F;YAC3F,2FAA2F;YAC3F,uDAAuD;YACvD,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,yFAAyF;QACzF,+EAA+E;QAC/E,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,sBAAsB,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,EAAE,eAAe,KAAK,QAAQ,EAAE,CAAC;QACnF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,2FAA2F;IAC3F,iGAAiG;IACjG,4FAA4F;IAC5F,0EAA0E;IAC1E,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,GAAG,CAAC,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ;QACvF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,EAAE,MAAM;KACf,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@proof-holdings/delegation-self-refusal",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.1",
|
|
4
4
|
"description": "A delegated MCP server that refuses its own tool calls once its Proof of Delegation is revoked, suspended, or expired — self-enforcement, not consumer verification",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|