@proof-holdings/mcp-server 1.0.0 → 1.2.0

package/dist/tools/authorizations.js

@@ -0,0 +1,111 @@
+import { z } from 'zod';
+import { jsonResult, errorResult, BSUID_REGEX } from '../types.js';
+import { ApiError } from '../http.js';
+const authorizationChannelEnum = z.enum(['whatsapp', 'telegram', 'sms', 'email']);
+const authorizationScopeEnum = z.enum(['confirmations']);
+const authorizationStatusEnum = z.enum(['pending', 'active', 'expired', 'revoked', 'denied']);
+export function registerTools(tool, http) {
+    tool('create_authorization', 'Create a new authorization request. Authorizations grant permission to send confirmations to a user via a specific channel. The user must approve the authorization before confirmations can be sent.', {
+        hitl_id: z.string().regex(/^[0-9a-fA-F]{24}$/).describe('HITL configuration ID to link this authorization to'),
+        recipient: z.string().min(1).max(255).describe('Channel-specific recipient identifier (chat_id for Telegram, phone/BSUID for WhatsApp)'),
+        phone: z.string().regex(/^\+[1-9]\d{1,14}$/).describe('Target phone number in E.164 format (e.g., +15551234567)'),
+        bsuid: z.string().regex(BSUID_REGEX).optional().describe('WhatsApp Business-Scoped User ID (alternative to phone for WhatsApp channel)'),
+        channel: authorizationChannelEnum.describe('Channel for sending confirmations'),
+        scope: authorizationScopeEnum.optional().describe('Authorization scope (default: confirmations)'),
+        business_name: z.string().min(1).max(200).describe('Business name displayed to user during authorization'),
+        business_profile_id: z.string().regex(/^[0-9a-fA-F]{24}$/).optional().describe('Public profile ID for branding'),
+        expires_in: z.number().int().positive().max(7776000).optional().describe('Expiry in seconds (max 90 days, default 90 days)'),
+    }, async (args) => {
+        try {
+            const result = await http.post('/api/v1/authorizations', args);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('get_authorization', 'Get an authorization by ID. Returns the current state of the authorization including status and usage statistics.', {
+        id: z.string().describe('Authorization ID'),
+    }, async ({ id }) => {
+        try {
+            const result = await http.get(`/api/v1/authorizations/${encodeURIComponent(id)}`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('list_authorizations', 'List authorizations with optional filters. Returns paginated results.', {
+        status: authorizationStatusEnum.optional().describe('Filter by authorization status'),
+        phone: z.string().optional().describe('Filter by phone number'),
+        channel: authorizationChannelEnum.optional().describe('Filter by channel'),
+        page: z.number().int().positive().optional().describe('Page number'),
+        limit: z.number().int().min(1).max(100).optional().describe('Items per page'),
+    }, async (args) => {
+        try {
+            const query = {};
+            if (args.status !== undefined)
+                query.status = args.status;
+            if (args.phone !== undefined)
+                query.phone = args.phone;
+            if (args.channel !== undefined)
+                query.channel = args.channel;
+            if (args.page !== undefined)
+                query.page = args.page;
+            if (args.limit !== undefined)
+                query.limit = args.limit;
+            const result = await http.get('/api/v1/authorizations', query);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('revoke_authorization', 'Revoke an active or pending authorization. Only authorizations with status "active" or "pending" can be revoked.', {
+        id: z.string().describe('Authorization ID to revoke'),
+        reason: z.string().min(1).max(500).optional().describe('Reason for revocation'),
+    }, async ({ id, reason }) => {
+        try {
+            const body = reason !== undefined ? { reason } : undefined;
+            const result = await http.del(`/api/v1/authorizations/${encodeURIComponent(id)}`, body);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('export_authorizations', 'Export authorizations as CSV or JSON. Supports date range and status filtering. Maximum 10,000 records.', {
+        format: z.enum(['csv', 'json']).optional().describe('Export format (default: json)'),
+        from: z.string().optional().describe('Start date filter (ISO 8601)'),
+        to: z.string().optional().describe('End date filter (ISO 8601)'),
+        status: authorizationStatusEnum.optional().describe('Filter by status'),
+    }, async (args) => {
+        try {
+            const query = {};
+            if (args.format !== undefined)
+                query.format = args.format;
+            if (args.from !== undefined)
+                query.from = args.from;
+            if (args.to !== undefined)
+                query.to = args.to;
+            if (args.status !== undefined)
+                query.status = args.status;
+            const result = await http.get('/api/v1/authorizations/export', query);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+}
+//# sourceMappingURL=authorizations.js.map

package/dist/tools/authorizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorizations.js","sourceRoot":"","sources":["../../src/tools/authorizations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;AACzD,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAgB;IACjE,IAAI,CACF,sBAAsB,EACtB,uMAAuM,EACvM;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC;QAC9G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,wFAAwF,CAAC;QACxI,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QACjH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;QACxI,OAAO,EAAE,wBAAwB,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QAC/E,KAAK,EAAE,sBAAsB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACjG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;QAC1G,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAChH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;KAC7H,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,mBAAmB,EACnB,mHAAmH,EACnH;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KAC5C,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,qBAAqB,EACrB,uEAAuE,EACvE;QACE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QACrF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC1E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAC9E,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAA0D,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,sBAAsB,EACtB,kHAAkH,EAClH;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;KAChF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACxF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,uBAAuB,EACvB,yGAAyG,EACzG;QACE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QACpF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QACpE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAChE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KACxE,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAA0D,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACpD,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;gBAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;YACtE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/circles.d.ts

@@ -0,0 +1,4 @@
+import type { HttpClient } from '../http.js';
+import type { ToolRegistrar } from '../types.js';
+export declare function registerTools(tool: ToolRegistrar, http: HttpClient): void;
+//# sourceMappingURL=circles.d.ts.map

package/dist/tools/circles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circles.d.ts","sourceRoot":"","sources":["../../src/tools/circles.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgBjD,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,QAiQlE"}

package/dist/tools/circles.js

@@ -0,0 +1,215 @@
+import { z } from 'zod';
+import { jsonResult, errorResult } from '../types.js';
+import { ApiError } from '../http.js';
+const objectId = z.string().regex(/^[0-9a-fA-F]{24}$/);
+const circleChannel = z.enum(['telegram', 'whatsapp']);
+const e164 = z.string().regex(/^\+[1-9]\d{7,14}$/, 'must be E.164 with a leading +');
+// A contact at create time: name + OPTIONAL flat channel identifiers (mirrors the backend
+// circleMemberInputSchema). A member may be added by name only and enrolled later.
+const circleMemberInput = z.object({
+    name: z.string().min(1).max(100).describe('Display name of the member'),
+    telegram_chat_id: z.string().max(50).optional().describe('Telegram chat id (declared; usually captured at enrollment instead)'),
+    whatsapp_phone: e164.optional().describe('E.164 WhatsApp phone with a leading + (declared)'),
+});
+export function registerTools(tool, http) {
+    tool('create_circle', 'Create a Circle — a named group of trusted contacts (the people-primitive powering Proof-Me and Approvals-on-Circle). Optionally seed initial members; each member\'s declared channels are stored so they can be invited to enroll.\n\nAgent usage: after creating a Circle, add members with add_circle_member (or seed them here), then invite_circle_member to mint the enrollment deep link each contact taps to bind their messenger identity.', {
+        name: z.string().min(1).max(200).describe('Human-readable name for the Circle'),
+        profile_id: objectId.optional().describe('Public profile (sub-account) to bind for branded messages — create-only'),
+        proof_me_enabled: z.boolean().optional().describe('Enable Proof-Me drills for this Circle'),
+        members: z.array(circleMemberInput).max(100).optional().describe('Initial members (name + optional declared channels)'),
+    }, async (args) => {
+        try {
+            const result = await http.post('/api/v1/circles', args);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('list_circles', 'List Circles with optional filters. Archived Circles are excluded by default; pass status="archived" to surface them. Returns paginated results.', {
+        status: z.enum(['active', 'archived']).optional().describe('Filter by status (archived excluded unless requested)'),
+        environment: z.enum(['production', 'test']).optional().describe('Filter by environment (production or test)'),
+        profile_id: objectId.optional().describe('Filter by bound public profile (sub-account)'),
+        page: z.number().int().positive().max(10000).optional().describe('Page number (default 1)'),
+        limit: z.number().int().positive().max(100).optional().describe('Items per page (default 20, max 100)'),
+    }, async (args) => {
+        try {
+            const query = {};
+            if (args.status !== undefined)
+                query.status = args.status;
+            if (args.environment !== undefined)
+                query.environment = args.environment;
+            if (args.profile_id !== undefined)
+                query.profile_id = args.profile_id;
+            if (args.page !== undefined)
+                query.page = args.page;
+            if (args.limit !== undefined)
+                query.limit = args.limit;
+            const result = await http.get('/api/v1/circles', query);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('get_circle', 'Get a Circle by ID. Returns the Circle including its members and per-member channel presence booleans (an identifier is NEVER returned — SEC-PM-006).', {
+        id: objectId.describe('Circle ID'),
+    }, async ({ id }) => {
+        try {
+            const result = await http.get(`/api/v1/circles/${encodeURIComponent(id)}`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('update_circle', 'Update a Circle\'s name. Only the display name is mutable — the profile/identity binding is create-only.', {
+        id: objectId.describe('Circle ID'),
+        name: z.string().min(1).max(200).optional().describe('New name for the Circle'),
+    }, async ({ id, ...body }) => {
+        try {
+            const result = await http.patch(`/api/v1/circles/${encodeURIComponent(id)}`, body);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('delete_circle', 'Archive a Circle (soft delete — sets status to archived). It stops appearing in the default list but is recoverable via list_circles with status="archived".', {
+        id: objectId.describe('Circle ID to archive'),
+    }, async ({ id }) => {
+        try {
+            const result = await http.del(`/api/v1/circles/${encodeURIComponent(id)}`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('add_circle_member', 'Add a pending member to a Circle by name, with an optional pre-declared WhatsApp phone. The Telegram chat id is captured later when the member taps the enrollment deep link.\n\nAgent usage: after adding a member, call invite_circle_member to mint the single-use enrollment link the member taps to bind their messenger identity.', {
+        id: objectId.describe('Circle ID to add the member to'),
+        name: z.string().min(1).max(100).describe('Display name of the member'),
+        whatsapp_phone: e164.optional().describe('E.164 WhatsApp phone with a leading + (optional, declared)'),
+    }, async ({ id, ...body }) => {
+        try {
+            const result = await http.post(`/api/v1/circles/${encodeURIComponent(id)}/members`, body);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('list_circle_members', 'List a Circle\'s members. Each member carries channel-presence booleans only (has_telegram / has_whatsapp) — an identifier is NEVER returned (SEC-PM-006).', {
+        id: objectId.describe('Circle ID'),
+    }, async ({ id }) => {
+        try {
+            const result = await http.get(`/api/v1/circles/${encodeURIComponent(id)}/members`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('invite_circle_member', 'Mint a single-use enrollment invite for a Circle member. Returns Telegram + WhatsApp deep links and a QR code; the member taps the channel-matched link to bind their messenger identity to the Circle.', {
+        id: objectId.describe('Circle ID'),
+        member_id: objectId.describe('Member ID to invite'),
+    }, async ({ id, member_id }) => {
+        try {
+            const result = await http.post(`/api/v1/circles/${encodeURIComponent(id)}/members/invite`, { member_id });
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('create_circle_member_drill', 'Fire an on-demand Proof-Me drill against one enrolled member — a real cross-channel identity challenge carrying the scheduled-safety-check label (the account owner practices confirming). Complements the automated daily drill + monthly reinforcement sweeps.', {
+        id: objectId.describe('Circle ID'),
+        member_id: objectId.describe('Member ID to drill'),
+    }, async ({ id, member_id }) => {
+        try {
+            const result = await http.post(`/api/v1/circles/${encodeURIComponent(id)}/members/${encodeURIComponent(member_id)}/drill`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('remove_circle_member', 'Remove a member from a Circle. Deletes the member\'s channels and revokes any live authorizations that routed through them.', {
+        id: objectId.describe('Circle ID'),
+        member_id: objectId.describe('Member ID to remove'),
+    }, async ({ id, member_id }) => {
+        try {
+            const result = await http.del(`/api/v1/circles/${encodeURIComponent(id)}/members/${encodeURIComponent(member_id)}`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('add_circle_member_channel', 'Declare a channel for a Circle member. Returns 409 if that channel type already exists on the member. The identifier is a Telegram chat id or an E.164 WhatsApp phone (per-channel format validated server-side).', {
+        id: objectId.describe('Circle ID'),
+        member_id: objectId.describe('Member ID to add the channel to'),
+        channel: circleChannel.describe('Channel type (telegram or whatsapp)'),
+        identifier: z.string().min(1).max(100).describe('Telegram chat id, or E.164 WhatsApp phone with a leading +'),
+    }, async ({ id, member_id, ...body }) => {
+        try {
+            const result = await http.post(`/api/v1/circles/${encodeURIComponent(id)}/members/${encodeURIComponent(member_id)}/channels`, body);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('list_circle_member_channels', 'List a Circle member\'s channels. Returns channel metadata only (channel, status, verified_at) — an identifier is NEVER returned (SEC-PM-006).', {
+        id: objectId.describe('Circle ID'),
+        member_id: objectId.describe('Member ID'),
+    }, async ({ id, member_id }) => {
+        try {
+            const result = await http.get(`/api/v1/circles/${encodeURIComponent(id)}/members/${encodeURIComponent(member_id)}/channels`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('remove_circle_member_channel', 'Remove a channel from a Circle member. Removing the last channel is allowed (the member simply becomes unreachable).', {
+        id: objectId.describe('Circle ID'),
+        member_id: objectId.describe('Member ID'),
+        channel_id: objectId.describe('Channel ID to remove'),
+    }, async ({ id, member_id, channel_id }) => {
+        try {
+            const result = await http.del(`/api/v1/circles/${encodeURIComponent(id)}/members/${encodeURIComponent(member_id)}/channels/${encodeURIComponent(channel_id)}`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+}
+//# sourceMappingURL=circles.js.map

package/dist/tools/circles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circles.js","sourceRoot":"","sources":["../../src/tools/circles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACvD,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AACvD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC;AAErF,0FAA0F;AAC1F,mFAAmF;AACnF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;IAC/H,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;CAC7F,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAgB;IACjE,IAAI,CACF,eAAe,EACf,sbAAsb,EACtb;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC/E,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;QACnH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAC3F,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;KACxH,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;YACxD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,cAAc,EACd,kJAAkJ,EAClJ;QACE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;QACnH,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;QAC7G,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACxF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC3F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;KACxG,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAA0D,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1D,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACzE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;gBAAE,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACtE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,YAAY,EACZ,uJAAuJ,EACvJ;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;KACnC,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,eAAe,EACf,0GAA0G,EAC1G;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;KAChF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACnF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,eAAe,EACf,8JAA8J,EAC9J;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KAC9C,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3E,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,mBAAmB,EACnB,yUAAyU,EACzU;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACvE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;KACvG,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC1F,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,qBAAqB,EACrB,4JAA4J,EAC5J;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;KACnC,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;YACnF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,sBAAsB,EACtB,yMAAyM,EACzM;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KACpD,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1G,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,4BAA4B,EAC5B,kQAAkQ,EAClQ;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACnD,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAC3F,CAAC;YACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,sBAAsB,EACtB,6HAA6H,EAC7H;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KACpD,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAC3B,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACrF,CAAC;YACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,2BAA2B,EAC3B,mNAAmN,EACnN;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QAC/D,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACtE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC;KAC9G,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,WAAW,EAC7F,IAAI,CACL,CAAC;YACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,6BAA6B,EAC7B,gJAAgJ,EAChJ;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC1C,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAC3B,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAC9F,CAAC;YACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,8BAA8B,EAC9B,sHAAsH,EACtH;QACE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KACtD,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAC3B,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,aAAa,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAChI,CAAC;YACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/confirmations.d.ts

@@ -0,0 +1,4 @@
+import type { HttpClient } from '../http.js';
+import type { ToolRegistrar } from '../types.js';
+export declare function registerTools(tool: ToolRegistrar, http: HttpClient): void;
+//# sourceMappingURL=confirmations.d.ts.map

package/dist/tools/confirmations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmations.d.ts","sourceRoot":"","sources":["../../src/tools/confirmations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAMjD,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,QAoGlE"}

package/dist/tools/confirmations.js

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import { jsonResult, errorResult, pollUntilTerminal, WAIT_DEFAULT_SECONDS } from '../types.js';
+import { ApiError } from '../http.js';
+const confirmationStatusEnum = z.enum(['pending', 'approved', 'denied']);
+export function registerTools(tool, http) {
+    tool('create_confirmation', 'Create a HITL confirmation request. Sends an approval request to the channels configured on the referenced HITL config. First response wins.\n\nAgent usage: The HITL config referenced by hitl_id must be authorized before you can create confirmations. If this returns a 403 or "not authorized" error, call request_hitl_authorization on the HITL config first, then wait for the user to approve via the messaging channel. After creating a confirmation, poll get_confirmation to check for approval/denial, or use get_confirmation_approval_link to generate a fresh link for the user.\n\nEncryption is NOT optional: a HITL config cannot send confirmations without a keypair, the human approves by decrypting in their browser, and `message` must be a JSON ciphertext envelope. Plaintext is refused with 400 `message_not_encrypted`; an envelope sealed to another key with 400 `message_key_mismatch`. Choose the version by who must be able to decrypt:\n- v1 (single-recipient): wraps the content key for the config owner only. Use ONLY when there are no enrolled non-owner approvers — with approvers enrolled it is refused with 400 `envelope_missing_approvers`.\n- v2 (multi-recipient): additionally wraps the content key for each enrolled approver via an `approver_ek` map, so every approver can decrypt. Build it with the SDK `encryptMessageV2(plaintext, ownerPublicKey, hitlId, approverKeys)` after fetching the approvers via the SDK `getApproverKeys(hitlId)` (`GET /api/v1/hitl/:id/approver-keys`). AAD is the `hitlId`.', {
+        hitl_id: z.string().regex(/^[0-9a-fA-F]{24}$/).describe('HITL config ID whose channels will receive the approval request'),
+        message: z.string().min(1).max(10000).describe('The client-encrypted ciphertext envelope as a JSON string (v1 or v2) — NOT the human-readable text. Encrypt the sentence the approver should read; passing it directly is refused with 400 `message_not_encrypted`, because the approval page can only decrypt an envelope.'),
+        proof_expiry_days: z.number().int().optional().describe('Per-request proof expiry override in days (7, 30, 90, or 365)'),
+    }, async (args) => {
+        try {
+            const result = await http.post('/api/v1/confirmations', args);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('get_confirmation', 'Get a confirmation by ID. Returns the full confirmation including status, response, and proof token.', {
+        id: z.string().describe('Confirmation ID'),
+    }, async ({ id }) => {
+        try {
+            const result = await http.get(`/api/v1/confirmations/${encodeURIComponent(id)}`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('list_confirmations', 'List confirmations with optional filters. Returns paginated results with status and HITL config filtering.', {
+        status: confirmationStatusEnum.optional().describe('Filter by confirmation status'),
+        hitl_id: z.string().regex(/^[0-9a-fA-F]{24}$/).optional().describe('Filter by HITL config ID'),
+        page: z.number().int().positive().optional().describe('Page number'),
+        limit: z.number().int().min(1).max(100).optional().describe('Items per page'),
+    }, async (args) => {
+        try {
+            const query = {};
+            if (args.status !== undefined)
+                query.status = args.status;
+            if (args.hitl_id !== undefined)
+                query.hitl_id = args.hitl_id;
+            if (args.page !== undefined)
+                query.page = args.page;
+            if (args.limit !== undefined)
+                query.limit = args.limit;
+            const result = await http.get('/api/v1/confirmations', query);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('get_confirmation_approval_link', 'Generate a fresh approval link for a pending confirmation. The link expiry inherits the confirmation timeout. Only works for pending confirmations.', {
+        id: z.string().regex(/^[0-9a-fA-F]{24}$/).describe('Confirmation ID'),
+    }, async ({ id }) => {
+        try {
+            const result = await http.post(`/api/v1/confirmations/${encodeURIComponent(id)}/approval-link`);
+            return jsonResult(result);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+    tool('wait_for_confirmation', 'Poll a confirmation until the approver responds. Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter.\n\nAgent usage: Call this after create_confirmation with the returned confirmation ID. Terminal states: "approved" (action authorized — check the proof_token), "denied" (action rejected). While "pending", the approver has not yet responded. This poll returns no link — the approval request is delivered to the approver\'s own channel. If the approver needs one anyway, call get_confirmation_approval_link for a fresh `approval_url`; it needs the confirmation to be still pending — the state this tool waits in — and also refuses once `timeout_at` has passed, so a long wait can outlive the link even while the status has not moved.', {
+        id: z.string().describe('Confirmation ID from create_confirmation'),
+        timeout_seconds: z.number().int().min(1).max(600).optional().describe(`Maximum wait time in seconds (default: ${WAIT_DEFAULT_SECONDS}, max: 600). Keep it under your MCP client's request timeout (the SDK default is 60 s) — a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.`),
+    }, async ({ id, timeout_seconds }) => {
+        try {
+            return await pollUntilTerminal(() => http.get(`/api/v1/confirmations/${encodeURIComponent(id)}`), ['approved', 'denied'], timeout_seconds ?? WAIT_DEFAULT_SECONDS, `confirmation ${id}`);
+        }
+        catch (e) {
+            if (e instanceof ApiError)
+                return errorResult(`${e.code}: ${e.message}`);
+            throw e;
+        }
+    });
+}
+//# sourceMappingURL=confirmations.js.map

package/dist/tools/confirmations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmations.js","sourceRoot":"","sources":["../../src/tools/confirmations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE,MAAM,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAgB;IACjE,IAAI,CACF,qBAAqB,EACrB,4+CAA4+C,EAC5+C;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;QAC1H,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,6QAA6Q,CAAC;QAC7T,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;KACzH,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;YAC9D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,kBAAkB,EAClB,sGAAsG,EACtG;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KAC3C,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,yBAAyB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,oBAAoB,EACpB,4GAA4G,EAC5G;QACE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QACnF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACpE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;KAC9E,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC;YACH,MAAM,KAAK,GAA0D,EAAE,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,gCAAgC,EAChC,qJAAqJ,EACrJ;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KACtE,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,kBAAkB,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;YAChG,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEF,IAAI,CACF,uBAAuB,EACvB,4uBAA4uB,EAC5uB;QACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACnE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,oBAAoB,0PAA0P,CAAC;KAChY,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,iBAAiB,CAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAqC,EACrG,CAAC,UAAU,EAAE,QAAQ,CAAC,EACtB,eAAe,IAAI,oBAAoB,EACvC,gBAAgB,EAAE,EAAE,CACrB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/delegation-verify-outcomes.d.ts

@@ -0,0 +1,23 @@
+import { type FailureReason } from '@proof-holdings/delegation-verifier';
+/**
+ * The batch checker's outcome vocabulary (h-proof-checker-mcp).
+ *
+ * `confirmed_valid` is not a key of this map — it comes from `VerificationSuccess.valid: true`,
+ * never from a `FailureReason`. The three keys below are the only buckets a FAILED verification
+ * may land in, and the distinction is the whole point of the task: a checker that renders
+ * "could not reach the issuer" the same as "revoked" silently breaks tools belonging to people
+ * who have never heard of us.
+ *
+ * This is a LOCAL map, scoped to this MCP tool. `h-delegation-verifier-status-fallthrough-gate`
+ * added the official upstream field this map anticipated (`VerificationFailure.outcome` via
+ * `classifyFailureReason`), but that field is BINARY (`invalid` | `unconfirmed`) while this
+ * tool's vocabulary is three buckets — `no_claim_found` has no upstream equivalent (the package
+ * has no concept of "nothing to check", only "checked and bad" vs "could not check"), and two
+ * more reasons (`multiple_publications`, and the two unreachable-in-practice call-shape errors)
+ * read differently at this tool's altitude than the package's binary split would give them by
+ * default. So the map is not deleted, only DERIVED: every reason not named in `LOCAL_OVERRIDE`
+ * below takes its bucket straight from `classifyFailureReason`.
+ */
+export type FailureOutcome = 'confirmed_invalid' | 'no_claim_found' | 'unconfirmed';
+export declare const FAILURE_REASON_OUTCOME: Record<FailureReason, FailureOutcome>;
+//# sourceMappingURL=delegation-verify-outcomes.d.ts.map

package/dist/tools/delegation-verify-outcomes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-verify-outcomes.d.ts","sourceRoot":"","sources":["../../src/tools/delegation-verify-outcomes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEhG;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,cAAc,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAiDpF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,cAAc,CAK/B,CAAC"}

package/dist/tools/delegation-verify-outcomes.js

@@ -0,0 +1,51 @@
+import { classifyFailureReason } from '@proof-holdings/delegation-verifier';
+/** Every `FailureReason` the shared package declares today. Kept as an explicit value list
+ * (not derived from the type, which is erased at runtime) — the exhaustiveness test in
+ * `delegation-verify-outcomes.test.ts` fails loudly if this list drifts from the package. */
+const ALL_FAILURE_REASONS = [
+    'invalid_options',
+    'no_trust_policy',
+    'malformed_token',
+    'untrusted_issuer',
+    'unsupported_algorithm',
+    'unknown_key',
+    'bad_signature',
+    'jwks_unavailable',
+    'not_a_delegation',
+    'unsupported_schema',
+    'expired',
+    'not_yet_valid',
+    'malformed_claims',
+    'principal_mismatch',
+    'delegate_mismatch',
+    'scope_not_granted',
+    'status_uri_untrusted',
+    'status_unavailable',
+    'revoked',
+    'suspended',
+    'unknown_delegation',
+    'no_publication',
+    'multiple_publications',
+];
+/**
+ * The reasons whose LOCAL 3-bucket meaning differs from the package's binary
+ * `classifyFailureReason` — everything else in `ALL_FAILURE_REASONS` derives straight from it.
+ */
+const LOCAL_OVERRIDE = {
+    // The card carries no delegation publication at all — an absence, never an accusation. The
+    // package's binary field has no third bucket for this; it isn't a "check" at all.
+    no_publication: 'no_claim_found',
+    // Ambiguous input (the card names two different publications), not a confirmed-bad artifact —
+    // the package's binary split would otherwise bucket it `invalid`, which overstates it.
+    multiple_publications: 'unconfirmed',
+    // Errors in the CALL itself, not a statement about the artifact. This tool always supplies a
+    // well-formed VerifyOptions (non-empty trustedIssuers, delegate required by the Zod schema),
+    // so these are unreachable in practice — mapped for exhaustiveness, not because they occur.
+    invalid_options: 'unconfirmed',
+    no_trust_policy: 'unconfirmed',
+};
+export const FAILURE_REASON_OUTCOME = Object.fromEntries(ALL_FAILURE_REASONS.map((reason) => [
+    reason,
+    LOCAL_OVERRIDE[reason] ?? (classifyFailureReason(reason) === 'unconfirmed' ? 'unconfirmed' : 'confirmed_invalid'),
+]));
+//# sourceMappingURL=delegation-verify-outcomes.js.map

package/dist/tools/delegation-verify-outcomes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-verify-outcomes.js","sourceRoot":"","sources":["../../src/tools/delegation-verify-outcomes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAsB,MAAM,qCAAqC,CAAC;AAuBhG;;6FAE6F;AAC7F,MAAM,mBAAmB,GAAoB;IAC3C,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;IACvB,aAAa;IACb,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,SAAS;IACT,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,SAAS;IACT,WAAW;IACX,oBAAoB;IACpB,gBAAgB;IAChB,uBAAuB;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,cAAc,GAAmD;IACrE,2FAA2F;IAC3F,kFAAkF;IAClF,cAAc,EAAE,gBAAgB;IAChC,8FAA8F;IAC9F,uFAAuF;IACvF,qBAAqB,EAAE,aAAa;IACpC,6FAA6F;IAC7F,6FAA6F;IAC7F,4FAA4F;IAC5F,eAAe,EAAE,aAAa;IAC9B,eAAe,EAAE,aAAa;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAA0C,MAAM,CAAC,WAAW,CAC7F,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAClC,MAAM;IACN,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC;CAClH,CAAC,CACsC,CAAC"}

package/dist/tools/delegation-verify.d.ts

@@ -0,0 +1,24 @@
+import type { VerificationResult } from '@proof-holdings/delegation-verifier';
+import type { ToolRegistrar } from '../types.js';
+export interface DelegationVerifyItem {
+    card?: Record<string, unknown>;
+    token?: string;
+    delegate: {
+        type: 'url' | 'purl';
+        value: string;
+    };
+    expected_principal: string;
+    required_scopes?: string[];
+    check_status?: boolean;
+}
+/**
+ * The single-artifact verification core, factored out so `verify_delegation` (one item) and
+ * `verify_delegations` (a batch of up to 50, h-proof-checker-mcp) share exactly one call into
+ * the reference verifier. Callers must already have checked `card` XOR `token` — this function
+ * does not, so it stays usable per-item inside a batch loop without duplicating that guard.
+ */
+export declare function verifyOneDelegation(item: DelegationVerifyItem, baseUrl: string): Promise<VerificationResult>;
+export declare function registerTools(tool: ToolRegistrar, options: {
+    baseUrl: string;
+}): void;
+//# sourceMappingURL=delegation-verify.d.ts.map

package/dist/tools/delegation-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-verify.d.ts","sourceRoot":"","sources":["../../src/tools/delegation-verify.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAgC,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC5G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA8CjD,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QAAE,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAY5G;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,QA4J9E"}