@quantakrypto/mcp 0.2.2 → 0.4.0

package/README.md

@@ -142,6 +142,53 @@ tooling. Reads the filesystem, so it is gated like `scan_path` over HTTP.
 }
 ```
 
+## Copilot tools — migrate through the engine
+
+These let an AI coding agent do a PQC migration **through the deterministic
+engine** ("the model proposes, the engine disposes"): the agent plans, edits,
+and re-verifies against the same detectors the CLI uses, so nothing is claimed
+fixed that the scanner still flags.
+
+- **`plan_migration`** — scan a path and return a prioritized, phased plan
+  (harvest-now-decrypt-later first, then signatures, then transport/certs), each
+  group with its PQC target and locations. Reads the filesystem, so it is gated
+  like `scan_path` over HTTP. `{ path }`.
+- **`get_fix_examples`** — before/after migration code for a classical
+  `algorithm` (or a finding's `ruleId`). No filesystem access.
+- **`verify_fix`** — run the detectors over a `code` snippet (plus `language` or
+  `filename`) and report any classical crypto that remains. The agent's
+  fix-confirmation loop. No filesystem access.
+- **`check_dependency`** — look a package `name` (+ `ecosystem`, default npm) up
+  in the vulnerable-dependency database. No filesystem access.
+- **`score_delta`** — readiness-score / HNDL change between two finding sets
+  (`before`, `after` from `scan_path --format json`). No filesystem access.
+- **`triage_findings`** — deterministic, offline, key-free. Emits a triage
+  REQUEST bundle (rubric + verdict schema + per-finding metadata + fingerprints)
+  for the host agent to reason over. It never calls a model. No filesystem access.
+- **`apply_triage`** — deterministically attach the host agent's verdicts to
+  their findings (matched by fingerprint) and re-sort by exposure. Never
+  suppresses; malformed verdicts are ignored. No filesystem access.
+- **`remediate_findings`** — deterministic, offline, key-free. Emits a fix
+  REQUEST bundle (rubric + fix schema + per-finding metadata + fingerprints) for
+  the host agent to fix: propose the corrected file, verify with `verify_fix`,
+  keep only verified fixes. Never merges. No filesystem access.
+
+> Triage on the MCP plane keeps the "engine disposes" guarantee: the server
+> stays offline and never holds an API key — the host agent (which already has
+> the code open) does the reasoning, and `apply_triage` records it
+> deterministically. The BYOK client that calls a provider directly lives only
+> in `qscan --triage` (for CI, where there is no host agent).
+
+## Resources & prompts
+
+Beyond tools, the server exposes MCP **resources** and a **prompt** (advertised in
+the `initialize` capabilities, all offline/static):
+
+- `resources/list` + `resources/read` — `quantakrypto://rules` (the full rule
+  catalog as JSON) and `quantakrypto://guide/migration` (a Markdown migration guide).
+- `prompts/list` + `prompts/get` — the `migrate` prompt (optional `path` arg): a
+  ready-made "scan → triage → remediate → verify, draft PR only" workflow.
+
 ## Hosted HTTP server (safe-by-default)
 
 The same `McpServer` can be served over HTTP (a Streamable-HTTP-style JSON-RPC
@@ -155,11 +202,13 @@ is reachable by untrusted peers:
 - **Bearer-token auth.** Set `QUANTAKRYPTO_MCP_TOKEN` and every `/mcp` request must
   send `Authorization: Bearer <token>`, else `401`. With no token set, only the
   loopback bind is allowed.
-- **Filesystem tools are disabled by default.** `scan_path`, `inventory_crypto`
-  and `generate_cbom` read arbitrary server paths, so over HTTP they are exposed
-  only when `QUANTAKRYPTO_MCP_ALLOW_FS=1`. The knowledge tools (`explain_finding`,
-  `suggest_hybrid`, `list_rules`) are always available. `tools/list` and
-  `tools/call` both reflect the gating.
+- **Filesystem tools are disabled by default.** `scan_path`, `inventory_crypto`,
+  `generate_cbom` and `plan_migration` read arbitrary server paths, so over HTTP
+  they are exposed only when `QUANTAKRYPTO_MCP_ALLOW_FS=1`. The knowledge /
+  copilot tools that take no path (`explain_finding`, `suggest_hybrid`,
+  `list_rules`, `get_fix_examples`, `verify_fix`, `check_dependency`,
+  `score_delta`, `triage_findings`, `apply_triage`, `remediate_findings`) are
+  always available. `tools/list` and `tools/call` both reflect the gating.
 - **Filesystem tools are root-confined.** Even with `QUANTAKRYPTO_MCP_ALLOW_FS=1`,
   every scanned path must resolve inside the `QUANTAKRYPTO_MCP_ROOT` allow-list
   (`:`-separated; the process CWD by default). `..` traversal and out-of-root

package/dist/index.d.ts

@@ -16,7 +16,7 @@ export type { JsonRpcRequest, JsonRpcResponse, JsonRpcSuccess, JsonRpcFailure, T
 /** The MCP server name advertised to clients. */
 export declare const SERVER_NAME = "quantakrypto";
 /** The version reported by the server (kept in sync with @quantakrypto/core). */
-export declare const SERVER_VERSION = "0.2.2";
+export declare const SERVER_VERSION = "0.4.0";
 export interface CreateServerOptions {
     /** Override the advertised server version (defaults to @quantakrypto/core VERSION). */
     version?: string;

package/dist/resources.d.ts

@@ -0,0 +1,39 @@
+/** A resource descriptor for `resources/list`. */
+export interface ResourceDescriptor {
+    uri: string;
+    name: string;
+    description: string;
+    mimeType: string;
+}
+export declare const RESOURCES: ResourceDescriptor[];
+/** Read a resource body by URI, or null when the URI is unknown. */
+export declare function readResource(uri: string): {
+    uri: string;
+    mimeType: string;
+    text: string;
+} | null;
+/** A prompt descriptor for `prompts/list`. */
+export interface PromptDescriptor {
+    name: string;
+    description: string;
+    arguments?: {
+        name: string;
+        description: string;
+        required?: boolean;
+    }[];
+}
+export declare const PROMPTS: PromptDescriptor[];
+/** A prompt message (MCP `prompts/get` shape). */
+export interface PromptMessage {
+    role: "user";
+    content: {
+        type: "text";
+        text: string;
+    };
+}
+/** Materialize a prompt by name, or null when unknown. */
+export declare function getPrompt(name: string, args: Record<string, unknown>): {
+    description: string;
+    messages: PromptMessage[];
+} | null;
+//# sourceMappingURL=resources.d.ts.map

package/dist/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAQA,kDAAkD;AAClD,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,SAAS,EAAE,kBAAkB,EAczC,CAAC;AAmBF,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAYhG;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CACzE;AAED,eAAO,MAAM,OAAO,EAAE,gBAAgB,EAOrC,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,GAAG,IAAI,CAc3D"}

package/dist/resources.js

@@ -0,0 +1,75 @@
+/**
+ * MCP resources + prompts. Resources expose read-only reference data (the full
+ * rule catalog + a migration guide); the prompt gives a client a one-call
+ * "migrate this path" workflow that drives the deterministic tools. All offline
+ * and static — no filesystem, no network, no key.
+ */
+import { defaultRegistry, REMEDIATE_RUBRIC } from "@quantakrypto/core";
+export const RESOURCES = [
+    {
+        uri: "quantakrypto://rules",
+        name: "Quantakrypto rule catalog",
+        description: "Every detection rule quantakrypto can emit (id, title, severity, category, HNDL, remediation).",
+        mimeType: "application/json",
+    },
+    {
+        uri: "quantakrypto://guide/migration",
+        name: "PQC migration guide",
+        description: "How to migrate quantum-vulnerable cryptography using the quantakrypto MCP tools.",
+        mimeType: "text/markdown",
+    },
+];
+const MIGRATION_GUIDE = `# Post-Quantum Migration with quantakrypto
+
+A safe, deterministic loop ("the model proposes, the engine disposes"):
+
+1. **Inventory** — call \`scan_path\` on the target to list quantum-vulnerable findings.
+2. **Triage** — call \`triage_findings\` for the bundle, decide an exposure verdict per
+   finding, then \`apply_triage\` to rank them (harvest-now-decrypt-later first).
+3. **Remediate** — call \`remediate_findings\`; for each finding propose the corrected
+   full file, then \`verify_fix\` on your result. Keep ONLY fixes that clear the finding
+   and introduce no new one. Skip any file containing secrets.
+4. Open a **draft** PR for review. Never auto-merge.
+
+## Remediation rubric
+
+${REMEDIATE_RUBRIC}
+`;
+/** Read a resource body by URI, or null when the URI is unknown. */
+export function readResource(uri) {
+    if (uri === "quantakrypto://rules") {
+        return {
+            uri,
+            mimeType: "application/json",
+            text: JSON.stringify(defaultRegistry.ruleCatalog(), null, 2),
+        };
+    }
+    if (uri === "quantakrypto://guide/migration") {
+        return { uri, mimeType: "text/markdown", text: MIGRATION_GUIDE };
+    }
+    return null;
+}
+export const PROMPTS = [
+    {
+        name: "migrate",
+        description: "Plan and apply a post-quantum migration for a path using the deterministic tools.",
+        arguments: [{ name: "path", description: "Path to scan (default: .)", required: false }],
+    },
+];
+/** Materialize a prompt by name, or null when unknown. */
+export function getPrompt(name, args) {
+    if (name !== "migrate")
+        return null;
+    const path = typeof args.path === "string" && args.path ? args.path : ".";
+    const text = `Migrate ${path} off quantum-vulnerable cryptography using the quantakrypto tools.\n` +
+        `1) Call scan_path on "${path}".\n` +
+        `2) Call triage_findings, decide exposure verdicts, then apply_triage to rank them.\n` +
+        `3) For each finding: call remediate_findings, propose the corrected full file, then\n` +
+        `   verify_fix on your result — keep only fixes that clear the finding.\n` +
+        `Never touch files containing secrets; never auto-merge — open a draft PR for review.`;
+    return {
+        description: "Plan and apply a post-quantum migration.",
+        messages: [{ role: "user", content: { type: "text", text } }],
+    };
+}
+//# sourceMappingURL=resources.js.map

package/dist/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAUvE,MAAM,CAAC,MAAM,SAAS,GAAyB;IAC7C;QACE,GAAG,EAAE,sBAAsB;QAC3B,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,gGAAgG;QAClG,QAAQ,EAAE,kBAAkB;KAC7B;IACD;QACE,GAAG,EAAE,gCAAgC;QACrC,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,kFAAkF;QAC/F,QAAQ,EAAE,eAAe;KAC1B;CACF,CAAC;AAEF,MAAM,eAAe,GAAG;;;;;;;;;;;;;;EActB,gBAAgB;CACjB,CAAC;AAEF,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;QACnC,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,KAAK,gCAAgC,EAAE,CAAC;QAC7C,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,CAAC,MAAM,OAAO,GAAuB;IACzC;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EACT,mFAAmF;QACrF,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;KACzF;CACF,CAAC;AAQF,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,IAA6B;IAE7B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1E,MAAM,IAAI,GACR,WAAW,IAAI,sEAAsE;QACrF,yBAAyB,IAAI,MAAM;QACnC,sFAAsF;QACtF,uFAAuF;QACvF,0EAA0E;QAC1E,sFAAsF,CAAC;IACzF,OAAO;QACL,WAAW,EAAE,0CAA0C;QACvD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/dist/rules.d.ts

@@ -8,15 +8,17 @@
  * by prefix and therefore returned "no matching detector" for every real
  * library finding (P0-5).
  *
- * This module resolves a finding's `ruleId` against core's *actual* detector
- * set: a curated index maps each canonical core ruleId to the detector that
- * emits it plus the classical algorithm family it concerns, and the detector's
- * human description is looked up live from {@link defaultRegistry}/{@link
- * detectors}. Unknown rules fall back to a prefix match against the detector id
- * space, and finally to the algorithm remediation. Pure and synchronous — no
- * I/O — so it is directly unit-testable.
+ * This module resolves a finding's `ruleId` against core's rule catalog
+ * ({@link defaultRegistry.ruleCatalog}) — the single source of truth declared by
+ * the detectors themselves. There is no hand-curated table to keep in sync: the
+ * ruleId → { detector, algorithm } mapping is derived from the catalog at load
+ * time, so a new rule added in core is resolvable here the moment it ships. The
+ * one non-detector rule (`dep-vulnerable`, produced by the manifest scanner
+ * rather than a {@link Detector}) is supplemented explicitly. Unknown rules fall
+ * back to a prefix match against the detector id space, then to unresolved.
+ * Pure and synchronous — no I/O — so it is directly unit-testable.
  */
-import type { AlgorithmFamily } from "@quantakrypto/core";
+import type { AlgorithmFamily, RuleMeta } from "@quantakrypto/core";
 /** A resolved rule: the detector it belongs to (if any) and its algorithm. */
 export interface ResolvedRule {
     /** The rule id that was looked up (echoed for convenience). */
@@ -28,6 +30,8 @@ export interface ResolvedRule {
     };
     /** The classical algorithm family the rule concerns, when known. */
     algorithm?: AlgorithmFamily;
+    /** The catalog metadata for the rule, when it is a known core rule. */
+    meta?: RuleMeta;
     /** How the match was made — useful for tests and diagnostics. */
     via: "index" | "detector-id" | "prefix" | "unresolved";
 }
@@ -35,14 +39,15 @@ export interface ResolvedRule {
  * Resolve a finding's `ruleId` to its detector and algorithm.
  *
  * Resolution order:
- *   1. Curated {@link RULE_INDEX} — the canonical mapping for every core rule.
- *   2. Exact detector id (a rule that IS a detector id, e.g. a future 1:1 rule).
- *   3. Prefix against the detector id space (`node-crypto-*`, `pem-*`, …).
- *   4. Unresolved — caller falls back to the algorithm remediation.
+ *   1. The core rule catalog — the authoritative path for every detector rule.
+ *   2. The {@link EXTRA_RULES} supplement (non-detector rules, e.g. dependencies).
+ *   3. Exact detector id (a rule that IS a detector id, e.g. a future 1:1 rule).
+ *   4. Prefix against the detector id space (`node-crypto-*`, `pem-*`, …).
+ *   5. Unresolved — caller falls back to the algorithm remediation.
  *
  * Pure: depends only on its argument and the static core detector set.
  */
 export declare function resolveRule(ruleId: string): ResolvedRule;
-/** Exposed for tests: the set of canonical rule ids the index knows. */
+/** Exposed for tests: the set of canonical rule ids resolvable via the catalog. */
 export declare const KNOWN_RULE_IDS: readonly string[];
 //# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAY,MAAM,oBAAoB,CAAC;AAEpE,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,oEAAoE;IACpE,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,iEAAiE;IACjE,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC;CACxD;AA8ED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CA2CxD;AAED,wEAAwE;AACxE,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAA4B,CAAC"}
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAY,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9E,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,oEAAoE;IACpE,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,uEAAuE;IACvE,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,iEAAiE;IACjE,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,YAAY,CAAC;CACxD;AAyBD;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAwDxD;AAED,mFAAmF;AACnF,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EASxC,CAAC"}

package/dist/rules.js

@@ -8,72 +8,28 @@
  * by prefix and therefore returned "no matching detector" for every real
  * library finding (P0-5).
  *
- * This module resolves a finding's `ruleId` against core's *actual* detector
- * set: a curated index maps each canonical core ruleId to the detector that
- * emits it plus the classical algorithm family it concerns, and the detector's
- * human description is looked up live from {@link defaultRegistry}/{@link
- * detectors}. Unknown rules fall back to a prefix match against the detector id
- * space, and finally to the algorithm remediation. Pure and synchronous — no
- * I/O — so it is directly unit-testable.
+ * This module resolves a finding's `ruleId` against core's rule catalog
+ * ({@link defaultRegistry.ruleCatalog}) — the single source of truth declared by
+ * the detectors themselves. There is no hand-curated table to keep in sync: the
+ * ruleId → { detector, algorithm } mapping is derived from the catalog at load
+ * time, so a new rule added in core is resolvable here the moment it ships. The
+ * one non-detector rule (`dep-vulnerable`, produced by the manifest scanner
+ * rather than a {@link Detector}) is supplemented explicitly. Unknown rules fall
+ * back to a prefix match against the detector id space, then to unresolved.
+ * Pure and synchronous — no I/O — so it is directly unit-testable.
  */
 import { defaultRegistry, detectors } from "@quantakrypto/core";
 /**
- * Canonical core ruleId → { detector id, algorithm } index.
- *
- * Mirrors the `ruleId`s emitted by the built-in detectors in
- * `@quantakrypto/core` (see `packages/core/src/detectors/*` and `dependencies.ts`).
- * The `detectorId` values reference real detector ids in {@link
- * defaultRegistry}; the descriptions are not duplicated here — they are read
- * live from the registry so they never drift. Algorithms that a single rule
- * can span (e.g. `jsrsasign-*` covers RSA *and* EC) are recorded as
- * `"unknown"`, matching core's own classification.
+ * Rules that are NOT emitted by a {@link Detector} and so are absent from the
+ * catalog, but are still canonical core ruleIds. Today that is only the
+ * dependency-manifest scanner's `dep-vulnerable` rule.
  */
-const RULE_INDEX = {
-    // node-crypto detector
-    "node-crypto-keygen": { detectorId: "node-crypto", algorithm: "unknown" },
-    "node-crypto-sign": { detectorId: "node-crypto", algorithm: "unknown" },
-    "node-crypto-sign-oneshot": { detectorId: "node-crypto", algorithm: "unknown" },
-    "node-crypto-dh": { detectorId: "node-crypto", algorithm: "DH" },
-    "node-crypto-dh-modp": { detectorId: "node-crypto", algorithm: "DH" },
-    "node-crypto-ecdh": { detectorId: "node-crypto", algorithm: "ECDH" },
-    "node-crypto-rsa-encrypt": { detectorId: "node-crypto", algorithm: "RSA" },
-    "node-crypto-dh-keyobject": { detectorId: "node-crypto", algorithm: "DH" },
-    // webcrypto detector
-    "webcrypto-classical": { detectorId: "webcrypto", algorithm: "unknown" },
-    // crypto-libs detector (the library findings P0-5 was about)
-    "forge-rsa-keygen": { detectorId: "crypto-libs", algorithm: "RSA" },
-    "forge-ed25519": { detectorId: "crypto-libs", algorithm: "EdDSA" },
-    "elliptic-ec": { detectorId: "crypto-libs", algorithm: "ECDSA" },
-    "secp256k1-usage": { detectorId: "crypto-libs", algorithm: "ECDSA" },
-    "jsrsasign-keygen": { detectorId: "crypto-libs", algorithm: "unknown" },
-    "jsrsasign-sign": { detectorId: "crypto-libs", algorithm: "unknown" },
-    "node-rsa": { detectorId: "crypto-libs", algorithm: "RSA" },
-    // jwt-jose detector
-    "jwt-classical-alg": { detectorId: "jwt-jose", algorithm: "unknown" },
-    "jose-ecdh-es": { detectorId: "jwt-jose", algorithm: "ECDH" },
-    // tls-config detector
-    "tls-legacy-version": { detectorId: "tls-config", algorithm: "unknown" },
-    "tls-reject-unauthorized": { detectorId: "tls-config", algorithm: "unknown" },
-    "tls-weak-cipher": { detectorId: "tls-config", algorithm: "unknown" },
-    // ssh-cert detector
-    "ssh-public-key": { detectorId: "ssh-cert", algorithm: "unknown" },
-    "cert-signature-algorithm": { detectorId: "ssh-cert", algorithm: "unknown" },
-    // pem-material detector
-    "pem-rsa-private-key": { detectorId: "pem-material", algorithm: "RSA" },
-    "pem-ec-private-key": { detectorId: "pem-material", algorithm: "ECDSA" },
-    "pem-dsa-private-key": { detectorId: "pem-material", algorithm: "DSA" },
-    "pem-openssh-private-key": { detectorId: "pem-material", algorithm: "unknown" },
-    "pem-pgp-private-key": { detectorId: "pem-material", algorithm: "unknown" },
-    "pem-pgp-message": { detectorId: "pem-material", algorithm: "unknown" },
-    "pem-pkcs8-private-key": { detectorId: "pem-material", algorithm: "unknown" },
-    "pem-certificate": { detectorId: "pem-material", algorithm: "unknown" },
-    // dependency scanner (not a Detector, handled by scan()); no registry entry.
-    "dep-vulnerable": { detectorId: "dep-vulnerable", algorithm: "unknown" },
+const EXTRA_RULES = {
+    "dep-vulnerable": { algorithm: "unknown" },
 };
-/** Build a fast id → Detector lookup over the active detector set. */
+/** Build an id → Detector lookup over the active detector set (registry first). */
 function detectorMap() {
     const map = new Map();
-    // Prefer the registry; fall back to the exported `detectors` array.
     const all = (() => {
         try {
             return defaultRegistry.all();
@@ -90,28 +46,41 @@ function detectorMap() {
  * Resolve a finding's `ruleId` to its detector and algorithm.
  *
  * Resolution order:
- *   1. Curated {@link RULE_INDEX} — the canonical mapping for every core rule.
- *   2. Exact detector id (a rule that IS a detector id, e.g. a future 1:1 rule).
- *   3. Prefix against the detector id space (`node-crypto-*`, `pem-*`, …).
- *   4. Unresolved — caller falls back to the algorithm remediation.
+ *   1. The core rule catalog — the authoritative path for every detector rule.
+ *   2. The {@link EXTRA_RULES} supplement (non-detector rules, e.g. dependencies).
+ *   3. Exact detector id (a rule that IS a detector id, e.g. a future 1:1 rule).
+ *   4. Prefix against the detector id space (`node-crypto-*`, `pem-*`, …).
+ *   5. Unresolved — caller falls back to the algorithm remediation.
  *
  * Pure: depends only on its argument and the static core detector set.
  */
 export function resolveRule(ruleId) {
     const id = ruleId.trim();
-    const detectorsById = detectorMap();
-    // 1. Curated index — the authoritative path for known core rules.
-    const indexed = RULE_INDEX[id];
-    if (indexed) {
-        const det = detectorsById.get(indexed.detectorId);
+    // 1. Catalog — the authoritative path for known core detector rules.
+    const entry = (() => {
+        try {
+            return defaultRegistry.forRule(id);
+        }
+        catch {
+            return undefined;
+        }
+    })();
+    if (entry) {
         return {
             ruleId: id,
-            detector: det ? { id: det.id, description: det.description } : undefined,
-            algorithm: indexed.algorithm,
+            detector: { id: entry.detector.id, description: entry.detector.description },
+            algorithm: entry.rule.algorithm ?? "unknown",
+            meta: entry.rule,
             via: "index",
         };
     }
-    // 2. Exact detector id.
+    // 2. Non-detector supplement (dependency scanner, …).
+    const extra = EXTRA_RULES[id];
+    if (extra) {
+        return { ruleId: id, algorithm: extra.algorithm, via: "index" };
+    }
+    const detectorsById = detectorMap();
+    // 3. Exact detector id.
     const exact = detectorsById.get(id);
     if (exact) {
         return {
@@ -120,7 +89,7 @@ export function resolveRule(ruleId) {
             via: "detector-id",
         };
     }
-    // 3. Longest-prefix detector id (e.g. `node-crypto-foo` → `node-crypto`).
+    // 4. Longest-prefix detector id (e.g. `node-crypto-foo` → `node-crypto`).
     let best;
     for (const det of detectorsById.values()) {
         if (id === det.id || id.startsWith(`${det.id}-`)) {
@@ -135,9 +104,20 @@ export function resolveRule(ruleId) {
             via: "prefix",
         };
     }
-    // 4. Unresolved.
+    // 5. Unresolved.
     return { ruleId: id, via: "unresolved" };
 }
-/** Exposed for tests: the set of canonical rule ids the index knows. */
-export const KNOWN_RULE_IDS = Object.keys(RULE_INDEX);
+/** Exposed for tests: the set of canonical rule ids resolvable via the catalog. */
+export const KNOWN_RULE_IDS = (() => {
+    const ids = [];
+    try {
+        for (const r of defaultRegistry.ruleCatalog())
+            ids.push(r.id);
+    }
+    catch {
+        // ignore — an empty/broken catalog just yields the supplement below.
+    }
+    ids.push(...Object.keys(EXTRA_RULES));
+    return ids;
+})();
 //# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAehE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAuE;IACrF,uBAAuB;IACvB,oBAAoB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACzE,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACvE,0BAA0B,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IAC/E,gBAAgB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;IAChE,qBAAqB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;IACrE,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE;IACpE,yBAAyB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAC1E,0BAA0B,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;IAE1E,qBAAqB;IACrB,qBAAqB,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE;IAExE,6DAA6D;IAC7D,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACnE,eAAe,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;IAClE,aAAa,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;IAChE,iBAAiB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;IACpE,kBAAkB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACvE,gBAAgB,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;IACrE,UAAU,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAE3D,oBAAoB;IACpB,mBAAmB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;IACrE,cAAc,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE;IAE7D,sBAAsB;IACtB,oBAAoB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;IACxE,yBAAyB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;IAC7E,iBAAiB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE;IAErE,oBAAoB;IACpB,gBAAgB,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;IAClE,0BAA0B,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE;IAE5E,wBAAwB;IACxB,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,oBAAoB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE;IACxE,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,yBAAyB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAC/E,qBAAqB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAC3E,iBAAiB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IACvE,uBAAuB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAC7E,iBAAiB,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE;IAEvE,6EAA6E;IAC7E,gBAAgB,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE;CACzE,CAAC;AAEF,sEAAsE;AACtE,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,oEAAoE;IACpE,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,MAAM,aAAa,GAAG,WAAW,EAAE,CAAC;IAEpC,kEAAkE;IAClE,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YACxE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1D,GAAG,EAAE,aAAa;SACnB,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,IAAI,IAA0B,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM;gBAAE,IAAI,GAAG,GAAG,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YACxD,GAAG,EAAE,QAAQ;SACd,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC"}
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAiBhE;;;;GAIG;AACH,MAAM,WAAW,GAAmD;IAClE,gBAAgB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;CAC3C,CAAC;AAEF,mFAAmF;AACnF,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAEzB,qEAAqE;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;YAC5E,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,EAAE,CAAC;IAEpC,wBAAwB;IACxB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;YAC1D,GAAG,EAAE,aAAa;SACnB,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,IAAI,IAA0B,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM;gBAAE,IAAI,GAAG,GAAG,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YACxD,GAAG,EAAE,QAAQ;SACd,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAsB,CAAC,GAAG,EAAE;IACrD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,eAAe,CAAC,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC,CAAC,EAAE,CAAC"}

package/dist/server.d.ts

@@ -55,6 +55,10 @@ export declare class McpServer {
     handle(message: unknown, context?: ToolContext): Promise<JsonRpcResponse | null>;
     /** Route a request to the right handler. Throws {@link RpcError} on failure. */
     private dispatch;
+    /** `resources/read`: return the body for a known resource URI. */
+    private onResourcesRead;
+    /** `prompts/get`: materialize a named prompt with optional arguments. */
+    private onPromptsGet;
     /** Build the `initialize` result. */
     private onInitialize;
     /** Validate params and execute a tool for `tools/call`. */

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAaH,OAAO,KAAK,EAEV,eAAe,EACf,WAAW,EACX,cAAc,EACd,cAAc,EAEf,MAAM,eAAe,CAAC;AAEvB,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,IAAI,EAAE,UAAU,CAAC;IACjB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,mEAAmE;IACnE,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,gBAAgB;IAKrC,2EAA2E;IAC3E,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAQxC,uEAAuE;IACvE,SAAS,IAAI,cAAc,EAAE;IAM7B,wDAAwD;IACxD,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;;;;;OASG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8BtF,gFAAgF;YAClE,QAAQ;IAkBtB,qCAAqC;IACrC,OAAO,CAAC,YAAY;IAcpB,2DAA2D;YAC7C,WAAW;CAuB1B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAaH,OAAO,KAAK,EAEV,eAAe,EACf,WAAW,EACX,cAAc,EACd,cAAc,EAEf,MAAM,eAAe,CAAC;AAGvB,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,IAAI,EAAE,UAAU,CAAC;IACjB,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAS;IACvC,mEAAmE;IACnE,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,gBAAgB;IAKrC,2EAA2E;IAC3E,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAQxC,uEAAuE;IACvE,SAAS,IAAI,cAAc,EAAE;IAM7B,wDAAwD;IACxD,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED;;;;;;;;;OASG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA8BtF,gFAAgF;YAClE,QAAQ;IA0BtB,kEAAkE;IAClE,OAAO,CAAC,eAAe;IAavB,yEAAyE;IACzE,OAAO,CAAC,YAAY;IAiBpB,qCAAqC;IACrC,OAAO,CAAC,YAAY;IAgBpB,2DAA2D;YAC7C,WAAW;CAuB1B"}

package/dist/server.js

@@ -15,6 +15,7 @@
  */
 import process from "node:process";
 import { ErrorCode, MCP_PROTOCOL_VERSION, RpcError, isJsonRpcRequestLike, isNotification, makeFailure, makeSuccess, } from "./protocol.js";
+import { RESOURCES, PROMPTS, readResource, getPrompt } from "./resources.js";
 /**
  * A minimal, spec-faithful MCP server. Register tools with {@link registerTool}
  * and drive it one message at a time with {@link handle}.
@@ -101,18 +102,59 @@ export class McpServer {
                 return { tools: this.listTools() };
             case "tools/call":
                 return this.onToolsCall(req.params, context);
+            case "resources/list":
+                return { resources: RESOURCES };
+            case "resources/read":
+                return this.onResourcesRead(req.params);
+            case "prompts/list":
+                return { prompts: PROMPTS };
+            case "prompts/get":
+                return this.onPromptsGet(req.params);
             default:
                 throw new RpcError(ErrorCode.MethodNotFound, `method not found: ${req.method}`);
         }
     }
+    /** `resources/read`: return the body for a known resource URI. */
+    onResourcesRead(params) {
+        if (typeof params !== "object" || params === null || Array.isArray(params)) {
+            throw new RpcError(ErrorCode.InvalidParams, "resources/read requires an object params");
+        }
+        const uri = params.uri;
+        if (typeof uri !== "string" || uri.length === 0) {
+            throw new RpcError(ErrorCode.InvalidParams, "resources/read requires a 'uri' string");
+        }
+        const contents = readResource(uri);
+        if (!contents)
+            throw new RpcError(ErrorCode.InvalidParams, `unknown resource: ${uri}`);
+        return { contents: [contents] };
+    }
+    /** `prompts/get`: materialize a named prompt with optional arguments. */
+    onPromptsGet(params) {
+        if (typeof params !== "object" || params === null || Array.isArray(params)) {
+            throw new RpcError(ErrorCode.InvalidParams, "prompts/get requires an object params");
+        }
+        const { name, arguments: args } = params;
+        if (typeof name !== "string" || name.length === 0) {
+            throw new RpcError(ErrorCode.InvalidParams, "prompts/get requires a 'name' string");
+        }
+        const promptArgs = args && typeof args === "object" && !Array.isArray(args)
+            ? args
+            : {};
+        const prompt = getPrompt(name, promptArgs);
+        if (!prompt)
+            throw new RpcError(ErrorCode.InvalidParams, `unknown prompt: ${name}`);
+        return prompt;
+    }
     /** Build the `initialize` result. */
     onInitialize() {
         this.initialized = true;
         const result = {
             protocolVersion: MCP_PROTOCOL_VERSION,
             capabilities: {
-                // We expose tools; our list is static, so listChanged is false.
+                // Everything we expose is static, so listChanged is false throughout.
                 tools: { listChanged: false },
+                resources: { listChanged: false },
+                prompts: { listChanged: false },
             },
             serverInfo: { name: this.info.name, version: this.info.version },
         };

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AAuBvB;;;GAGG;AACH,MAAM,OAAO,SAAS;IACH,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,IAAI,CAAa;IACjB,YAAY,CAAU;IACvC,mEAAmE;IAC3D,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,OAAyB;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED,2EAA2E;IAC3E,YAAY,CAAC,IAAoB;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aAC5B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;aACjF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,OAAqB;QAClD,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,2EAA2E;YAC3E,OAAO,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,GAAG,GAAG,OAAyB,CAAC;QACtC,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,2DAA2D;YAC3D,IAAI,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,YAAY;gBAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;YACnE,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAC5B,8EAA8E;gBAC9E,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC;YACD,4EAA4E;YAC5E,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,MAAM,IAAI,CAAC,CAAC;YACvF,OAAO,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,QAAQ,CAAC,GAAmB,EAAE,OAAqB;QAC/D,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,KAAK,2BAA2B;gBAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,OAAO,EAAE,CAAC,CAAC,4CAA4C;YACzD,KAAK,MAAM;gBACT,OAAO,EAAE,CAAC;YACZ,KAAK,YAAY;gBACf,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C;gBACE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,qCAAqC;IAC7B,YAAY;QAClB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,MAAM,GAA4B;YACtC,eAAe,EAAE,oBAAoB;YACrC,YAAY,EAAE;gBACZ,gEAAgE;gBAChE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;aAC9B;YACD,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;SACjE,CAAC;QACF,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2DAA2D;IACnD,KAAK,CAAC,WAAW,CAAC,MAAe,EAAE,OAAqB;QAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAGjC,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;CACF"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,eAAe,CAAC;AASvB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAe7E;;;GAGG;AACH,MAAM,OAAO,SAAS;IACH,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,IAAI,CAAa;IACjB,YAAY,CAAU;IACvC,mEAAmE;IAC3D,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,OAAyB;QACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED,2EAA2E;IAC3E,YAAY,CAAC,IAAoB;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aAC5B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;aACjF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,OAAqB;QAClD,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,2EAA2E;YAC3E,OAAO,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,GAAG,GAAG,OAAyB,CAAC;QACtC,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjD,2DAA2D;YAC3D,IAAI,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,YAAY;gBAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;YACnE,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAC5B,8EAA8E;gBAC9E,OAAO,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC;YACD,4EAA4E;YAC5E,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,MAAM,IAAI,CAAC,CAAC;YACvF,OAAO,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,QAAQ,CAAC,GAAmB,EAAE,OAAqB;QAC/D,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,KAAK,2BAA2B;gBAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,OAAO,EAAE,CAAC,CAAC,4CAA4C;YACzD,KAAK,MAAM;gBACT,OAAO,EAAE,CAAC;YACZ,KAAK,YAAY;gBACf,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C,KAAK,gBAAgB;gBACnB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YAClC,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,KAAK,cAAc;gBACjB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC9B,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACvC;gBACE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,kEAAkE;IAC1D,eAAe,CAAC,MAAe;QACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,GAAG,GAAI,MAA4B,CAAC,GAAG,CAAC;QAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,qBAAqB,GAAG,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClC,CAAC;IAED,yEAAyE;IACjE,YAAY,CAAC,MAAe;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAiD,CAAC;QACpF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,UAAU,GACd,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACtD,CAAC,CAAE,IAAgC;YACnC,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACpF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qCAAqC;IAC7B,YAAY;QAClB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,MAAM,MAAM,GAA4B;YACtC,eAAe,EAAE,oBAAoB;YACrC,YAAY,EAAE;gBACZ,sEAAsE;gBACtE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;gBAC7B,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;gBACjC,OAAO,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;aAChC;YACD,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;SACjE,CAAC;QACF,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2DAA2D;IACnD,KAAK,CAAC,WAAW,CAAC,MAAe,EAAE,OAAqB;QAC9D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAGjC,CAAC;QACF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/tools.d.ts

@@ -1,11 +1,11 @@
 /**
  * quantakrypto MCP tools, backed by {@link @quantakrypto/core}.
  *
- * Every tool returns an MCP {@link ToolResult} ({ content, isError? }). Because
- * `@quantakrypto/core` is still partly stubbed (several functions throw "not
- * implemented"), each handler runs core calls through {@link safe} so a missing
- * implementation surfaces as a readable `isError` tool result instead of a
- * protocol-level crash. When core lands, the tools work unchanged.
+ * Every tool returns an MCP {@link ToolResult} ({ content, isError? }). Each
+ * handler runs core calls through {@link safe} so any runtime failure (a bad
+ * path, a work-budget overflow, an unexpected error) surfaces as a readable
+ * `isError` tool result with host details stripped, rather than a protocol-level
+ * crash.
  */
 import type { AlgorithmFamily, ScanOptions, ScanResult } from "@quantakrypto/core";
 import type { JsonSchema, ToolContext, ToolDefinition, ToolResult } from "./protocol.js";
@@ -50,7 +50,7 @@ export declare const FS_TOOL_NAMES: readonly string[];
 /** All quantakrypto MCP tools, in a stable order. */
 export declare const quantakryptoTools: ToolDefinition[];
 /** The core version these tools are built against (re-exported for diagnostics). */
-export declare const CORE_VERSION = "0.2.2";
+export declare const CORE_VERSION = "0.4.0";
 /** Exposed for tests and advanced callers. */
 export declare const __test: {
     normalizeAlgorithm: typeof normalizeAlgorithm;

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH,OAAO,KAAK,EACV,eAAe,EAGf,WAAW,EACX,UAAU,EAEX,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAoBzF;;;;;;GAMG;AACH,iBAAS,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAS1D;AAkBD;;;;;;;;;GASG;AACH,iBAAS,gBAAgB,CACvB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,WAAW,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAexE;AAED,6EAA6E;AAC7E,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAkB1D;AAED,gEAAgE;AAChE,iBAAS,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAmCjD;AA6OD,+EAA+E;AAC/E,iBAAS,kBAAkB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,EAAE,CA4BhE;AAgED;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAAuD,CAAC;AAEnG,qDAAqD;AACrD,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAO7C,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,8CAA8C;AAC9C,eAAO,MAAM,MAAM;;;;;;CAMlB,CAAC;AAEF,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsBH,OAAO,KAAK,EACV,eAAe,EAIf,WAAW,EACX,UAAU,EAGX,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAkBzF;;;;;;GAMG;AACH,iBAAS,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAS1D;AAkBD;;;;;;;;;GASG;AACH,iBAAS,gBAAgB,CACvB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,WAAW,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAexE;AAED,6EAA6E;AAC7E,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CAmB1D;AAED,gEAAgE;AAChE,iBAAS,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAmCjD;AAwPD,+EAA+E;AAC/E,iBAAS,kBAAkB,CAAC,SAAS,EAAE,eAAe,GAAG,MAAM,EAAE,CA4BhE;AAusBD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAK1C,CAAC;AAEF,qDAAqD;AACrD,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAiB7C,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,8CAA8C;AAC9C,eAAO,MAAM,MAAM;;;;;;CAMlB,CAAC;AAEF,wEAAwE;AACxE,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC"}