@quantakrypto/mcp 0.1.0

package/dist/rules.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Rule resolution for {@link explain_finding}.
+ *
+ * Core's detectors are coarse-grained: a single {@link Detector} (e.g. the
+ * `crypto-libs` detector) emits many distinct `ruleId`s (`forge-rsa-keygen`,
+ * `elliptic-ec`, `node-rsa`, …) that do NOT share the detector's `id` as a
+ * prefix. The old MCP `explain_finding` matched `ruleId` against `detector.id`
+ * by prefix and therefore returned "no matching detector" for every real
+ * library finding (P0-5).
+ *
+ * This module resolves a finding's `ruleId` against core's *actual* detector
+ * set: a curated index maps each canonical core ruleId to the detector that
+ * emits it plus the classical algorithm family it concerns, and the detector's
+ * human description is looked up live from {@link defaultRegistry}/{@link
+ * detectors}. Unknown rules fall back to a prefix match against the detector id
+ * space, and finally to the algorithm remediation. Pure and synchronous — no
+ * I/O — so it is directly unit-testable.
+ */
+import type { AlgorithmFamily } from "@quantakrypto/core";
+/** A resolved rule: the detector it belongs to (if any) and its algorithm. */
+export interface ResolvedRule {
+    /** The rule id that was looked up (echoed for convenience). */
+    ruleId: string;
+    /** The detector that emits this rule, when one could be resolved. */
+    detector?: {
+        id: string;
+        description: string;
+    };
+    /** The classical algorithm family the rule concerns, when known. */
+    algorithm?: AlgorithmFamily;
+    /** How the match was made — useful for tests and diagnostics. */
+    via: "index" | "detector-id" | "prefix" | "unresolved";
+}
+/**
+ * Resolve a finding's `ruleId` to its detector and algorithm.
+ *
+ * Resolution order:
+ *   1. Curated {@link RULE_INDEX} — the canonical mapping for every core rule.
+ *   2. Exact detector id (a rule that IS a detector id, e.g. a future 1:1 rule).
+ *   3. Prefix against the detector id space (`node-crypto-*`, `pem-*`, …).
+ *   4. Unresolved — caller falls back to the algorithm remediation.
+ *
+ * Pure: depends only on its argument and the static core detector set.
+ */
+export declare function resolveRule(ruleId: string): ResolvedRule;
+/** Exposed for tests: the set of canonical rule ids the index knows. */
+export declare const KNOWN_RULE_IDS: readonly string[];
+//# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAY,MAAM,oBAAoB,CAAC;AAEpE,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,oEAAoE;IACpE,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,iEAAiE;IACjE,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC;CACxD;AA8ED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CA2CxD;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAA4B,CAAC"}

package/dist/rules.js

@@ -0,0 +1,143 @@
+/**
+ * Rule resolution for {@link explain_finding}.
+ *
+ * Core's detectors are coarse-grained: a single {@link Detector} (e.g. the
+ * `crypto-libs` detector) emits many distinct `ruleId`s (`forge-rsa-keygen`,
+ * `elliptic-ec`, `node-rsa`, …) that do NOT share the detector's `id` as a
+ * prefix. The old MCP `explain_finding` matched `ruleId` against `detector.id`
+ * by prefix and therefore returned "no matching detector" for every real
+ * library finding (P0-5).
+ *
+ * This module resolves a finding's `ruleId` against core's *actual* detector
+ * set: a curated index maps each canonical core ruleId to the detector that
+ * emits it plus the classical algorithm family it concerns, and the detector's
+ * human description is looked up live from {@link defaultRegistry}/{@link
+ * detectors}. Unknown rules fall back to a prefix match against the detector id
+ * space, and finally to the algorithm remediation. Pure and synchronous — no
+ * I/O — so it is directly unit-testable.
+ */
+import { defaultRegistry, detectors } from "@quantakrypto/core";
+/**
+ * Canonical core ruleId → { detector id, algorithm } index.
+ *
+ * Mirrors the `ruleId`s emitted by the built-in detectors in
+ * `@quantakrypto/core` (see `packages/core/src/detectors/*` and `dependencies.ts`).
+ * The `detectorId` values reference real detector ids in {@link
+ * defaultRegistry}; the descriptions are not duplicated here — they are read
+ * live from the registry so they never drift. Algorithms that a single rule
+ * can span (e.g. `jsrsasign-*` covers RSA *and* EC) are recorded as
+ * `"unknown"`, matching core's own classification.
+ */
+const RULE_INDEX = {
+    // node-crypto detector
+    "node-crypto-keygen": { detectorId: "node-crypto", algorithm: "unknown" },
+    "node-crypto-sign": { detectorId: "node-crypto", algorithm: "unknown" },
+    "node-crypto-sign-oneshot": { detectorId: "node-crypto", algorithm: "unknown" },
+    "node-crypto-dh": { detectorId: "node-crypto", algorithm: "DH" },
+    "node-crypto-dh-modp": { detectorId: "node-crypto", algorithm: "DH" },
+    "node-crypto-ecdh": { detectorId: "node-crypto", algorithm: "ECDH" },
+    "node-crypto-rsa-encrypt": { detectorId: "node-crypto", algorithm: "RSA" },
+    "node-crypto-dh-keyobject": { detectorId: "node-crypto", algorithm: "DH" },
+    // webcrypto detector
+    "webcrypto-classical": { detectorId: "webcrypto", algorithm: "unknown" },
+    // crypto-libs detector (the library findings P0-5 was about)
+    "forge-rsa-keygen": { detectorId: "crypto-libs", algorithm: "RSA" },
+    "forge-ed25519": { detectorId: "crypto-libs", algorithm: "EdDSA" },
+    "elliptic-ec": { detectorId: "crypto-libs", algorithm: "ECDSA" },
+    "secp256k1-usage": { detectorId: "crypto-libs", algorithm: "ECDSA" },
+    "jsrsasign-keygen": { detectorId: "crypto-libs", algorithm: "unknown" },
+    "jsrsasign-sign": { detectorId: "crypto-libs", algorithm: "unknown" },
+    "node-rsa": { detectorId: "crypto-libs", algorithm: "RSA" },
+    // jwt-jose detector
+    "jwt-classical-alg": { detectorId: "jwt-jose", algorithm: "unknown" },
+    "jose-ecdh-es": { detectorId: "jwt-jose", algorithm: "ECDH" },
+    // tls-config detector
+    "tls-legacy-version": { detectorId: "tls-config", algorithm: "unknown" },
+    "tls-reject-unauthorized": { detectorId: "tls-config", algorithm: "unknown" },
+    "tls-weak-cipher": { detectorId: "tls-config", algorithm: "unknown" },
+    // ssh-cert detector
+    "ssh-public-key": { detectorId: "ssh-cert", algorithm: "unknown" },
+    "cert-signature-algorithm": { detectorId: "ssh-cert", algorithm: "unknown" },
+    // pem-material detector
+    "pem-rsa-private-key": { detectorId: "pem-material", algorithm: "RSA" },
+    "pem-ec-private-key": { detectorId: "pem-material", algorithm: "ECDSA" },
+    "pem-dsa-private-key": { detectorId: "pem-material", algorithm: "DSA" },
+    "pem-openssh-private-key": { detectorId: "pem-material", algorithm: "unknown" },
+    "pem-pgp-private-key": { detectorId: "pem-material", algorithm: "unknown" },
+    "pem-pgp-message": { detectorId: "pem-material", algorithm: "unknown" },
+    "pem-pkcs8-private-key": { detectorId: "pem-material", algorithm: "unknown" },
+    "pem-certificate": { detectorId: "pem-material", algorithm: "unknown" },
+    // dependency scanner (not a Detector, handled by scan()); no registry entry.
+    "dep-vulnerable": { detectorId: "dep-vulnerable", algorithm: "unknown" },
+};
+/** Build a fast id → Detector lookup over the active detector set. */
+function detectorMap() {
+    const map = new Map();
+    // Prefer the registry; fall back to the exported `detectors` array.
+    const all = (() => {
+        try {
+            return defaultRegistry.all();
+        }
+        catch {
+            return detectors;
+        }
+    })();
+    for (const d of all)
+        map.set(d.id, d);
+    return map;
+}
+/**
+ * Resolve a finding's `ruleId` to its detector and algorithm.
+ *
+ * Resolution order:
+ *   1. Curated {@link RULE_INDEX} — the canonical mapping for every core rule.
+ *   2. Exact detector id (a rule that IS a detector id, e.g. a future 1:1 rule).
+ *   3. Prefix against the detector id space (`node-crypto-*`, `pem-*`, …).
+ *   4. Unresolved — caller falls back to the algorithm remediation.
+ *
+ * Pure: depends only on its argument and the static core detector set.
+ */
+export function resolveRule(ruleId) {
+    const id = ruleId.trim();
+    const detectorsById = detectorMap();
+    // 1. Curated index — the authoritative path for known core rules.
+    const indexed = RULE_INDEX[id];
+    if (indexed) {
+        const det = detectorsById.get(indexed.detectorId);
+        return {
+            ruleId: id,
+            detector: det ? { id: det.id, description: det.description } : undefined,
+            algorithm: indexed.algorithm,
+            via: "index",
+        };
+    }
+    // 2. Exact detector id.
+    const exact = detectorsById.get(id);
+    if (exact) {
+        return {
+            ruleId: id,
+            detector: { id: exact.id, description: exact.description },
+            via: "detector-id",
+        };
+    }
+    // 3. Longest-prefix detector id (e.g. `node-crypto-foo` → `node-crypto`).
+    let best;
+    for (const det of detectorsById.values()) {
+        if (id === det.id || id.startsWith(`${det.id}-`)) {
+            if (!best || det.id.length > best.id.length)
+                best = det;
+        }
+    }
+    if (best) {
+        return {
+            ruleId: id,
+            detector: { id: best.id, description: best.description },
+            via: "prefix",
+        };
+    }
+    // 4. Unresolved.
+    return { ruleId: id, via: "unresolved" };
+}
+/** Exposed for tests: the set of canonical rule ids the index knows. */
+export const KNOWN_RULE_IDS = Object.keys(RULE_INDEX);
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAehE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAuE;IACrF,uBAAuB;IACvB,oBAAoB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACzE,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACvE,0BAA0B,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IAC/E,gBAAgB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;IAChE,qBAAqB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;IACrE,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE;IACpE,yBAAyB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAC1E,0BAA0B,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;IAE1E,qBAAqB;IACrB,qBAAqB,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE;IAExE,6DAA6D;IAC7D,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACnE,eAAe,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;IAClE,aAAa,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;IAChE,iBAAiB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;IACpE,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACvE,gBAAgB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACrE,UAAU,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAE3D,oBAAoB;IACpB,mBAAmB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;IACrE,cAAc,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE;IAE7D,sBAAsB;IACtB,oBAAoB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;IACxE,yBAAyB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;IAC7E,iBAAiB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;IAErE,oBAAoB;IACpB,gBAAgB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;IAClE,0BAA0B,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;IAE5E,wBAAwB;IACxB,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,oBAAoB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE;IACxE,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,yBAAyB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAC/E,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAC3E,iBAAiB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IACvE,uBAAuB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAC7E,iBAAiB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAEvE,6EAA6E;IAC7E,gBAAgB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE;CACzE,CAAC;AAEF,sEAAsE;AACtE,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,oEAAoE;IACpE,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,WAAW,EAAE,CAAC;IAEpC,kEAAkE;IAClE,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YACxE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1D,GAAG,EAAE,aAAa;SACnB,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,IAAI,IAA0B,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM;gBAAE,IAAI,GAAG,GAAG,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YACxD,GAAG,EAAE,QAAQ;SACd,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Transport-agnostic MCP server core.
+ *
+ * {@link McpServer} owns a tool registry and a single pure entry point,
+ * {@link McpServer.handle}, that turns one JSON-RPC message into one JSON-RPC
+ * response (or `null` for notifications, which get no reply). It performs no
+ * I/O whatsoever — the stdio and http transports feed it parsed messages and
+ * serialize whatever it returns. This makes the whole protocol surface
+ * unit-testable by calling `handle` directly.
+ */
+import type { JsonRpcResponse, ToolDefinition, ToolDescriptor } from "./protocol.js";
+/** Identifying info advertised to clients during `initialize`. */
+export interface ServerInfo {
+    name: string;
+    version: string;
+}
+export interface McpServerOptions {
+    /** Server identity returned in the `initialize` handshake. */
+    info: ServerInfo;
+    /** Optional human-readable instructions surfaced to the client. */
+    instructions?: string;
+}
+/**
+ * A minimal, spec-faithful MCP server. Register tools with {@link registerTool}
+ * and drive it one message at a time with {@link handle}.
+ */
+export declare class McpServer {
+    private readonly tools;
+    private readonly info;
+    private readonly instructions?;
+    /** Set once `initialize` has been received; informational only. */
+    private initialized;
+    constructor(options: McpServerOptions);
+    /** Register a tool. Throws if a tool with the same name already exists. */
+    registerTool(tool: ToolDefinition): this;
+    /** The public descriptors of all registered tools (sorted by name). */
+    listTools(): ToolDescriptor[];
+    /** Whether the `initialize` handshake has completed. */
+    get isInitialized(): boolean;
+    /**
+     * Process a single JSON-RPC message.
+     *
+     * @param message An already-parsed JSON value (the transport handles framing
+     *   and `JSON.parse`). May be malformed; this method validates it.
+     * @returns The response to send back, or `null` when no reply is due
+     *   (notifications, or an unparseable notification-shaped message).
+     */
+    handle(message: unknown): Promise<JsonRpcResponse | null>;
+    /** Route a request to the right handler. Throws {@link RpcError} on failure. */
+    private dispatch;
+    /** Build the `initialize` result. */
+    private onInitialize;
+    /** Validate params and execute a tool for `tools/call`. */
+    private onToolsCall;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,OAAO,KAAK,EAEV,eAAe,EACf,cAAc,EACd,cAAc,EAEf,MAAM,eAAe,CAAC;AAEvB,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,IAAI,EAAE,UAAU,CAAC;IACjB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,mEAAmE;IACnE,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,gBAAgB;IAKrC,2EAA2E;IAC3E,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAQxC,uEAAuE;IACvE,SAAS,IAAI,cAAc,EAAE;IAM7B,wDAAwD;IACxD,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAyB/D,gFAAgF;YAClE,QAAQ;IAkBtB,qCAAqC;IACrC,OAAO,CAAC,YAAY;IAcpB,2DAA2D;YAC7C,WAAW;CAuB1B"}

package/dist/server.js

@@ -0,0 +1,132 @@
+/**
+ * Transport-agnostic MCP server core.
+ *
+ * {@link McpServer} owns a tool registry and a single pure entry point,
+ * {@link McpServer.handle}, that turns one JSON-RPC message into one JSON-RPC
+ * response (or `null` for notifications, which get no reply). It performs no
+ * I/O whatsoever — the stdio and http transports feed it parsed messages and
+ * serialize whatever it returns. This makes the whole protocol surface
+ * unit-testable by calling `handle` directly.
+ */
+import { ErrorCode, MCP_PROTOCOL_VERSION, RpcError, isJsonRpcRequestLike, isNotification, makeFailure, makeSuccess, } from "./protocol.js";
+/**
+ * A minimal, spec-faithful MCP server. Register tools with {@link registerTool}
+ * and drive it one message at a time with {@link handle}.
+ */
+export class McpServer {
+    tools = new Map();
+    info;
+    instructions;
+    /** Set once `initialize` has been received; informational only. */
+    initialized = false;
+    constructor(options) {
+        this.info = options.info;
+        this.instructions = options.instructions;
+    }
+    /** Register a tool. Throws if a tool with the same name already exists. */
+    registerTool(tool) {
+        if (this.tools.has(tool.name)) {
+            throw new Error(`duplicate tool registration: ${tool.name}`);
+        }
+        this.tools.set(tool.name, tool);
+        return this;
+    }
+    /** The public descriptors of all registered tools (sorted by name). */
+    listTools() {
+        return [...this.tools.values()]
+            .map(({ name, description, inputSchema }) => ({ name, description, inputSchema }))
+            .sort((a, b) => a.name.localeCompare(b.name));
+    }
+    /** Whether the `initialize` handshake has completed. */
+    get isInitialized() {
+        return this.initialized;
+    }
+    /**
+     * Process a single JSON-RPC message.
+     *
+     * @param message An already-parsed JSON value (the transport handles framing
+     *   and `JSON.parse`). May be malformed; this method validates it.
+     * @returns The response to send back, or `null` when no reply is due
+     *   (notifications, or an unparseable notification-shaped message).
+     */
+    async handle(message) {
+        if (!isJsonRpcRequestLike(message)) {
+            // Not a valid request object. We can't know its id, so reply with null id.
+            return makeFailure(null, ErrorCode.InvalidRequest, "invalid JSON-RPC request");
+        }
+        const req = message;
+        const notification = isNotification(req);
+        const id = notification ? null : (req.id ?? null);
+        try {
+            const result = await this.dispatch(req);
+            // Notifications never receive a response, even on success.
+            if (notification)
+                return null;
+            return makeSuccess(id, result);
+        }
+        catch (err) {
+            if (notification)
+                return null; // swallow errors from notifications
+            if (err instanceof RpcError) {
+                return makeFailure(id, err.code, err.message, err.data);
+            }
+            const messageText = err instanceof Error ? err.message : String(err);
+            return makeFailure(id, ErrorCode.InternalError, messageText);
+        }
+    }
+    /** Route a request to the right handler. Throws {@link RpcError} on failure. */
+    async dispatch(req) {
+        switch (req.method) {
+            case "initialize":
+                return this.onInitialize();
+            case "notifications/initialized":
+                this.initialized = true;
+                return {}; // notification → result ignored by handle()
+            case "ping":
+                return {};
+            case "tools/list":
+                return { tools: this.listTools() };
+            case "tools/call":
+                return this.onToolsCall(req.params);
+            default:
+                throw new RpcError(ErrorCode.MethodNotFound, `method not found: ${req.method}`);
+        }
+    }
+    /** Build the `initialize` result. */
+    onInitialize() {
+        this.initialized = true;
+        const result = {
+            protocolVersion: MCP_PROTOCOL_VERSION,
+            capabilities: {
+                // We expose tools; our list is static, so listChanged is false.
+                tools: { listChanged: false },
+            },
+            serverInfo: { name: this.info.name, version: this.info.version },
+        };
+        if (this.instructions)
+            result.instructions = this.instructions;
+        return result;
+    }
+    /** Validate params and execute a tool for `tools/call`. */
+    async onToolsCall(params) {
+        if (typeof params !== "object" || params === null || Array.isArray(params)) {
+            throw new RpcError(ErrorCode.InvalidParams, "tools/call requires an object params");
+        }
+        const { name, arguments: args } = params;
+        if (typeof name !== "string" || name.length === 0) {
+            throw new RpcError(ErrorCode.InvalidParams, "tools/call requires a 'name' string");
+        }
+        const tool = this.tools.get(name);
+        if (!tool) {
+            throw new RpcError(ErrorCode.InvalidParams, `unknown tool: ${name}`);
+        }
+        if (args !== undefined && (typeof args !== "object" || args === null || Array.isArray(args))) {
+            throw new RpcError(ErrorCode.InvalidParams, "tool 'arguments' must be an object");
+        }
+        const toolArgs = (args ?? {});
+        // Tool-level failures are reported as isError results, not protocol errors,
+        // so the model can read and react to them. Only unexpected throws bubble up.
+        return tool.handler(toolArgs);
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AAsBvB;;;GAGG;AACH,MAAM,OAAO,SAAS;IACH,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,IAAI,CAAa;IACjB,YAAY,CAAU;IACvC,mEAAmE;IAC3D,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,OAAyB;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED,2EAA2E;IAC3E,YAAY,CAAC,IAAoB;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aAC5B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;aACjF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,2EAA2E;YAC3E,OAAO,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,GAAG,GAAG,OAAyB,CAAC;QACtC,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxC,2DAA2D;YAC3D,IAAI,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,YAAY;gBAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;YACnE,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAC5B,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrE,OAAO,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,QAAQ,CAAC,GAAmB;QACxC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,KAAK,2BAA2B;gBAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,OAAO,EAAE,CAAC,CAAC,4CAA4C;YACzD,KAAK,MAAM;gBACT,OAAO,EAAE,CAAC;YACZ,KAAK,YAAY;gBACf,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC;gBACE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,qCAAqC;IAC7B,YAAY;QAClB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,MAAM,GAA4B;YACtC,eAAe,EAAE,oBAAoB;YACrC,YAAY,EAAE;gBACZ,gEAAgE;gBAChE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;aAC9B;YACD,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;SACjE,CAAC;QACF,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2DAA2D;IACnD,KAAK,CAAC,WAAW,CAAC,MAAe;QACvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAGjC,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;CACF"}

package/dist/stdio.d.ts

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+/**
+ * quantakrypto-mcp — stdio transport.
+ *
+ * MCP's stdio transport is newline-delimited JSON: exactly one JSON-RPC 2.0
+ * message per line on stdin, one per line on stdout. (This is NOT HTTP-style
+ * Content-Length framing.) This module reads stdin line-by-line with
+ * {@link node:readline}, hands each parsed message to {@link McpServer.handle},
+ * and writes any response back as a single line on stdout. Diagnostics go to
+ * stderr so they never corrupt the protocol stream.
+ *
+ * Run as the `quantakrypto-mcp` bin, or `node dist/stdio.js`.
+ */
+import type { McpServer } from "./server.js";
+/** Serialize a value as one newline-terminated JSON line to stdout. */
+declare function writeLine(value: unknown): void;
+/**
+ * Attach a line-delimited JSON-RPC loop to the given streams. Exposed (rather
+ * than only run on import) so it can be reused or tested with custom streams.
+ */
+export declare function runStdioServer(server: McpServer, input?: NodeJS.ReadableStream, output?: NodeJS.WritableStream): void;
+export { writeLine };
+//# sourceMappingURL=stdio.d.ts.map

package/dist/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,uEAAuE;AACvE,iBAAS,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAEvC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,KAAK,GAAE,MAAM,CAAC,cAA8B,EAC5C,MAAM,GAAE,MAAM,CAAC,cAA+B,GAC7C,IAAI,CAkCN;AA6BD,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/stdio.js

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+/**
+ * quantakrypto-mcp — stdio transport.
+ *
+ * MCP's stdio transport is newline-delimited JSON: exactly one JSON-RPC 2.0
+ * message per line on stdin, one per line on stdout. (This is NOT HTTP-style
+ * Content-Length framing.) This module reads stdin line-by-line with
+ * {@link node:readline}, hands each parsed message to {@link McpServer.handle},
+ * and writes any response back as a single line on stdout. Diagnostics go to
+ * stderr so they never corrupt the protocol stream.
+ *
+ * Run as the `quantakrypto-mcp` bin, or `node dist/stdio.js`.
+ */
+import { createInterface } from "node:readline";
+import process from "node:process";
+import { realpathSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { createQuantakryptoServer } from "./index.js";
+import { ErrorCode, makeFailure } from "./protocol.js";
+/** Serialize a value as one newline-terminated JSON line to stdout. */
+function writeLine(value) {
+    process.stdout.write(JSON.stringify(value) + "\n");
+}
+/**
+ * Attach a line-delimited JSON-RPC loop to the given streams. Exposed (rather
+ * than only run on import) so it can be reused or tested with custom streams.
+ */
+export function runStdioServer(server, input = process.stdin, output = process.stdout) {
+    const rl = createInterface({ input, crlfDelay: Infinity });
+    rl.on("line", (raw) => {
+        const line = raw.trim();
+        if (line.length === 0)
+            return; // tolerate blank lines / keepalives
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            // Parse error: we have no id, so reply with a null-id error per JSON-RPC.
+            output.write(JSON.stringify(makeFailure(null, ErrorCode.ParseError, "parse error")) + "\n");
+            return;
+        }
+        // Process asynchronously; responses are written as they resolve. Ordering
+        // within a single client is preserved because handlers here are fast and
+        // the event loop drains line events in order.
+        void server
+            .handle(parsed)
+            .then((response) => {
+            if (response !== null)
+                output.write(JSON.stringify(response) + "\n");
+        })
+            .catch((err) => {
+            // Defensive: handle() already catches, but never let a rejection escape.
+            const messageText = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`quantakrypto-mcp internal error: ${messageText}\n`);
+        });
+    });
+    rl.on("close", () => {
+        process.exitCode = 0;
+    });
+}
+/** Entry point when executed directly (the bin / `node dist/stdio.js`). */
+function main() {
+    const server = createQuantakryptoServer();
+    process.stderr.write(`quantakrypto MCP server (stdio) ready\n`);
+    runStdioServer(server);
+}
+/**
+ * True when this module is the program's entry point. Resolves symlinks so the
+ * check also holds when launched via the `quantakrypto-mcp` bin shim in node_modules/.bin.
+ */
+function isMainModule() {
+    const argv1 = process.argv[1];
+    if (!argv1)
+        return false;
+    const thisPath = fileURLToPath(import.meta.url);
+    try {
+        return realpathSync(argv1) === realpathSync(thisPath);
+    }
+    catch {
+        return argv1 === thisPath;
+    }
+}
+// Only auto-run when invoked as a script, not when imported by tests.
+if (isMainModule()) {
+    main();
+}
+export { writeLine };
+//# sourceMappingURL=stdio.js.map

package/dist/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGvD,uEAAuE;AACvE,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAiB,EACjB,QAA+B,OAAO,CAAC,KAAK,EAC5C,SAAgC,OAAO,CAAC,MAAM;IAE9C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3D,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,oCAAoC;QAEnE,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,KAAK,MAAM;aACR,MAAM,CAAC,MAAM,CAAC;aACd,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,QAAQ,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,yEAAyE;YACzE,MAAM,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,WAAW,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,IAAI;IACX,MAAM,MAAM,GAAG,wBAAwB,EAAE,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAChE,cAAc,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,KAAK,QAAQ,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,IAAI,YAAY,EAAE,EAAE,CAAC;IACnB,IAAI,EAAE,CAAC;AACT,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,38 @@
+/**
+ * quantakrypto MCP tools, backed by {@link @quantakrypto/core}.
+ *
+ * Every tool returns an MCP {@link ToolResult} ({ content, isError? }). Because
+ * `@quantakrypto/core` is still partly stubbed (several functions throw "not
+ * implemented"), each handler runs core calls through {@link safe} so a missing
+ * implementation surfaces as a readable `isError` tool result instead of a
+ * protocol-level crash. When core lands, the tools work unchanged.
+ */
+import type { AlgorithmFamily, ScanResult } from "@quantakrypto/core";
+import type { JsonSchema, ToolDefinition } from "./protocol.js";
+/** Map a free-text algorithm string onto a known {@link AlgorithmFamily}. */
+declare function normalizeAlgorithm(input: string): AlgorithmFamily;
+/** Render a scan result as a compact human-readable summary. */
+declare function summarizeScan(result: ScanResult): string;
+/** Built-in PQC guidance used when core's remediation table is unavailable. */
+declare function staticHybridAdvice(algorithm: AlgorithmFamily): string[];
+/**
+ * Tools that read arbitrary filesystem paths. Disabled by default on the HTTP
+ * transport (see {@link ./http.ts}) because a hosted endpoint must not be an
+ * arbitrary-file-read oracle (security audit Q-01). The stdio transport, which
+ * trusts the local user, always exposes them.
+ */
+export declare const FS_TOOL_NAMES: readonly string[];
+/** All quantakrypto MCP tools, in a stable order. */
+export declare const quantakryptoTools: ToolDefinition[];
+/** The core version these tools are built against (re-exported for diagnostics). */
+export declare const CORE_VERSION = "0.1.0";
+/** Exposed for tests and advanced callers. */
+export declare const __test: {
+    normalizeAlgorithm: typeof normalizeAlgorithm;
+    summarizeScan: typeof summarizeScan;
+    staticHybridAdvice: typeof staticHybridAdvice;
+};
+/** Keep the schema type imported and referenced (documentation aid). */
+export type ToolInputSchema = JsonSchema;
+export {};
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,OAAO,KAAK,EACV,eAAe,EAGf,UAAU,EAEX,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAc,MAAM,eAAe,CAAC;AAmC5E,6EAA6E;AAC7E,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAkB1D;AAED,gEAAgE;AAChE,iBAAS,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAmCjD;AAyOD,+EAA+E;AAC/E,iBAAS,kBAAkB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,EAAE,CA4BhE;AA8DD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAAuD,CAAC;AAEnG,qDAAqD;AACrD,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAO7C,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,8CAA8C;AAC9C,eAAO,MAAM,MAAM;;;;CAA4D,CAAC;AAEhF,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC"}