@rockcarver/frodo-lib 4.10.0 → 4.11.0

package/types/lib/FrodoLib.d.ts

@@ -0,0 +1,407 @@
+import { Admin } from '../ops/AdminOps';
+import { Agent } from '../ops/AgentOps';
+import { AmConfig } from '../ops/AmConfigOps';
+import { ApiFactory } from '../ops/ApiFactoryOps';
+import { Application } from '../ops/ApplicationOps';
+import { Authenticate } from '../ops/AuthenticateOps';
+import { AuthenticationSettings } from '../ops/AuthenticationSettingsOps';
+import { CirclesOfTrust } from '../ops/CirclesOfTrustOps';
+import { Server } from '../ops/classic/ServerOps';
+import { Site } from '../ops/classic/SiteOps';
+import { AdminFederation } from '../ops/cloud/AdminFederationOps';
+import { EnvAIAgent } from '../ops/cloud/EnvAIAgentOps';
+import { EnvCertificate } from '../ops/cloud/EnvCertificatesOps';
+import { EnvContentSecurityPolicy } from '../ops/cloud/EnvContentSecurityPolicyOps';
+import { EnvCookieDomains } from '../ops/cloud/EnvCookieDomainsOps';
+import { EnvCSR } from '../ops/cloud/EnvCSRsOps';
+import { EnvCustomDomains } from '../ops/cloud/EnvCustomDomainsOps';
+import { EnvDirectConfigurationSession } from '../ops/cloud/EnvDirectConfigurationSessionOps';
+import { EnvFederationEnforcement } from '../ops/cloud/EnvFederationEnforcementOps';
+import { EnvPromotion } from '../ops/cloud/EnvPromotionOps';
+import { EnvRelease } from '../ops/cloud/EnvReleaseOps';
+import { EnvServiceAccountScopes } from '../ops/cloud/EnvServiceAccountScopesOps';
+import { EnvSSOCookieConfig } from '../ops/cloud/EnvSSOCookieConfigOps';
+import { EsvCount } from '../ops/cloud/EsvCountOps';
+import { Feature } from '../ops/cloud/FeatureOps';
+import { IdmFeature } from '../ops/cloud/IdmFeatureOps';
+import { CertificationTemplate } from '../ops/cloud/iga/IgaCertificationTemplateOps';
+import { IgaEvent } from '../ops/cloud/iga/IgaEventOps';
+import { Glossary } from '../ops/cloud/iga/IgaGlossaryOps';
+import { RequestForm } from '../ops/cloud/iga/IgaRequestFormOps';
+import { RequestType } from '../ops/cloud/iga/IgaRequestTypeOps';
+import { Workflow } from '../ops/cloud/iga/IgaWorkflowOps';
+import { Log } from '../ops/cloud/LogOps';
+import { Secret } from '../ops/cloud/SecretsOps';
+import { ServiceAccount } from '../ops/cloud/ServiceAccountOps';
+import { Startup } from '../ops/cloud/StartupOps';
+import { Telemetry } from '../ops/cloud/TelemetryOps';
+import { Variable } from '../ops/cloud/VariablesOps';
+import { WSFed } from '../ops/cloud/WSFedOps';
+import { Config } from '../ops/ConfigOps';
+import { ConnectionProfile } from '../ops/ConnectionProfileOps';
+import { Connector } from '../ops/ConnectorOps';
+import { EmailTemplate } from '../ops/EmailTemplateOps';
+import { IdmConfig } from '../ops/IdmConfigOps';
+import { IdmCrypto } from '../ops/IdmCryptoOps';
+import { IdmScript } from '../ops/IdmScriptOps';
+import { IdmSystem } from '../ops/IdmSystemOps';
+import { Idp } from '../ops/IdpOps';
+import { Info } from '../ops/InfoOps';
+import { InternalRole } from '../ops/InternalRoleOps';
+import { Jose } from '../ops/JoseOps';
+import { Journey } from '../ops/JourneyOps';
+import { ManagedObject } from '../ops/ManagedObjectOps';
+import { ManagedObjectSchemaOps as ManagedObjectSchemaNamespace } from '../ops/ManagedObjectSchemaOps';
+import { ManagedSystemObject } from '../ops/ManagedSystemObjectOps';
+import { ManagedSystemObjectSchemaOps as ManagedSystemObjectSchemaNamespace } from '../ops/ManagedSystemObjectSchemaOps';
+import { Mapping } from '../ops/MappingOps';
+import { Node } from '../ops/NodeOps';
+import { OAuth2Client } from '../ops/OAuth2ClientOps';
+import { OAuth2Oidc } from '../ops/OAuth2OidcOps';
+import { OAuth2Provider } from '../ops/OAuth2ProviderOps';
+import { OAuth2TrustedJwtIssuer } from '../ops/OAuth2TrustedJwtIssuerOps';
+import { Organization } from '../ops/OrganizationOps';
+import { Policy } from '../ops/PolicyOps';
+import { PolicySet } from '../ops/PolicySetOps';
+import { RawConfig } from '../ops/RawConfigOps';
+import { Realm } from '../ops/RealmOps';
+import { Recon } from '../ops/ReconOps';
+import { ResourceType } from '../ops/ResourceTypeOps';
+import { Saml2 } from '../ops/Saml2Ops';
+import { Script } from '../ops/ScriptOps';
+import { ScriptType } from '../ops/ScriptTypeOps';
+import { SecretStore } from '../ops/SecretStoreOps';
+import { Service } from '../ops/ServiceOps';
+import { Session } from '../ops/SessionOps';
+import { Theme } from '../ops/ThemeOps';
+import { TokenCache } from '../ops/TokenCacheOps';
+import { User } from '../ops/UserOps';
+import { Version } from '../ops/VersionUtils';
+import { Constants } from '../shared/Constants';
+import { State, StateInterface } from '../shared/State';
+import { Base64 } from '../utils/Base64Utils';
+import { FrodoCrypto } from '../utils/CryptoUtils';
+import { ExportImport } from '../utils/ExportImportUtils';
+import { FRUtils } from '../utils/ForgeRockUtils';
+import { FrodoUtils } from '../utils/FrodoUtils';
+import { HelpUtils } from '../utils/HelpUtils';
+import { Json } from '../utils/JsonUtils';
+import { ScriptValidation } from '../utils/ScriptValidationUtils';
+/**
+ * Frodo Library
+ */
+export type Frodo = {
+    state: State;
+    admin: Admin;
+    agent: Agent;
+    am: {
+        config: AmConfig;
+    };
+    app: Application;
+    authn: {
+        journey: Journey;
+        node: Node;
+        settings: AuthenticationSettings;
+    };
+    authz: {
+        policy: Policy;
+        policySet: PolicySet;
+        resourceType: ResourceType;
+    };
+    cloud: EsvCount & {
+        adminFed: AdminFederation;
+        env: EnvAIAgent & EnvContentSecurityPolicy & EnvCookieDomains & EnvCustomDomains & EnvDirectConfigurationSession & EnvFederationEnforcement & EnvRelease & EnvServiceAccountScopes & EnvSSOCookieConfig & {
+            cert: EnvCertificate;
+            csr: EnvCSR;
+            promotion: EnvPromotion;
+        };
+        /**
+         * @deprecated since v2.0.4 use {@link frodo.cloud.getEsvCount | frodo.cloud.getEsvCount} instead
+         */
+        esvCount: EsvCount;
+        feature: Feature;
+        idmFeature: IdmFeature;
+        iga: {
+            certificationTemplate: CertificationTemplate;
+            event: IgaEvent;
+            glossary: Glossary;
+            requestForm: RequestForm;
+            requestType: RequestType;
+            workflow: Workflow;
+        };
+        log: Log;
+        secret: Secret;
+        serviceAccount: ServiceAccount;
+        startup: Startup;
+        telemetry: Telemetry;
+        variable: Variable;
+        wsfed: WSFed;
+    };
+    config: Config;
+    conn: ConnectionProfile;
+    cache: TokenCache;
+    email: {
+        template: EmailTemplate;
+    };
+    factory: ApiFactory;
+    idm: {
+        config: IdmConfig;
+        connector: Connector;
+        crypto: IdmCrypto;
+        managed: ManagedObject & {
+            schema: ManagedObjectSchemaNamespace;
+        };
+        managedSystem: ManagedSystemObject & {
+            schema: ManagedSystemObjectSchemaNamespace;
+        };
+        mapping: Mapping;
+        organization: Organization;
+        recon: Recon;
+        script: IdmScript;
+        system: IdmSystem;
+    };
+    info: Info;
+    login: Authenticate;
+    oauth2oidc: {
+        client: OAuth2Client;
+        endpoint: OAuth2Oidc;
+        external: Idp;
+        provider: OAuth2Provider;
+        issuer: OAuth2TrustedJwtIssuer;
+    };
+    rawConfig: RawConfig;
+    realm: Realm;
+    role: InternalRole;
+    saml2: {
+        circlesOfTrust: CirclesOfTrust;
+        entityProvider: Saml2;
+    };
+    script: Script;
+    scriptType: ScriptType;
+    server: Server;
+    secretStore: SecretStore;
+    service: Service;
+    session: Session;
+    site: Site;
+    theme: Theme;
+    user: User;
+    utils: FRUtils & FrodoUtils & HelpUtils & ScriptValidation & ExportImport & Base64 & {
+        constants: Constants;
+        crypto: FrodoCrypto;
+        jose: Jose;
+        json: Json;
+        version: Version;
+    };
+    /**
+     * Create a new frodo instance
+     * @param {StateInterface} config Initial state configuration to use with the new instance
+     * @returns {Frodo} frodo instance
+     */
+    createInstance(config: StateInterface): Frodo;
+    /**
+     * Factory helper to create a frodo instance ready for logging in with an admin user account
+     * @param {string} host host base URL, e.g. 'https://openam-my-tenant.forgeblocks.com/am'
+     * @param {string} username admin account username
+     * @param {string} password admin account password
+     * @param {string} realm (optional) override default realm
+     * @param {string} deploymentType (optional) override deployment type ('cloud', 'forgeops', or 'classic')
+     * @param {boolean} allowInsecureConnection (optional) allow insecure connection
+     * @param {boolean} debug (optional) enable debug output
+     * @param {boolean} curlirize (optional) enable output of all library REST calls as curl commands
+     * @returns {Frodo} frodo instance
+     */
+    createInstanceWithAdminAccount(host: string, username: string, password: string, realm?: string, deploymentType?: string, allowInsecureConnection?: boolean, debug?: boolean, curlirize?: boolean): Frodo;
+    /**
+     * Factory helper to create a frodo instance ready for logging in with a service account
+     * @param {string} host host base URL, e.g. 'https://openam-my-tenant.forgeblocks.com/am'
+     * @param {string} serviceAccountId service account uuid
+     * @param {string} serviceAccountJwkStr service account JWK as stringified JSON
+     * @param {string} realm (optional) override default realm
+     * @param {string} deploymentType (optional) override deployment type ('cloud', 'forgeops', or 'classic')
+     * @param {boolean} allowInsecureConnection (optional) allow insecure connection
+     * @param {boolean} debug (optional) enable debug output
+     * @param {boolean} curlirize (optional) enable output of all library REST calls as curl commands
+     * @returns {Frodo} frodo instance
+     */
+    createInstanceWithServiceAccount(host: string, serviceAccountId: string, serviceAccountJwkStr: string, realm?: string, deploymentType?: string, allowInsecureConnection?: boolean, debug?: boolean, curlirize?: boolean): Frodo;
+    /**
+     * Factory helper to create a frodo instance ready for logging in with Amster credentials
+     * @param {string} host host base URL, e.g. 'https://am.example.com:8443/am'
+     * @param {string} amsterPrivateKey the pem encoded private key used to authenticate with Amster
+     * @param {string} authenticationService (optional) the authentication service used to authenticate with Amster (default: 'amsterService')
+     * @param {string} realm (optional) override default realm
+     * @param {string} deploymentType (optional) override deployment type ('cloud', 'forgeops', or 'classic')
+     * @param {boolean} allowInsecureConnection (optional) allow insecure connection
+     * @param {boolean} debug (optional) enable debug output
+     * @param {boolean} curlirize (optional) enable output of all library REST calls as curl commands
+     * @returns {Frodo} frodo instance
+     */
+    createInstanceWithAmsterAccount(host: string, amsterPrivateKey: string, authenticationService?: string, realm?: string, deploymentType?: string, allowInsecureConnection?: boolean, debug?: boolean, curlirize?: boolean): Frodo;
+    /**
+     * Factory helper to create a frodo instance ready for a real interactive
+     * browser login. Unlike the other three factories, this one alone doesn't
+     * make the instance immediately usable — a real interactive round trip is
+     * required first (there is no unattended way to redo it, unlike every
+     * other auth mode's silent background re-login). Call
+     * `.login.getTokensInteractive(...)` on the returned instance before using
+     * it, supplying a `promptHandler` to present the login step.
+     * @param {string} host host base URL, e.g. 'https://openam-my-tenant.forgeblocks.com/am'
+     * @param {string} loginClientId (optional) OAuth2 client id — mandatory for forgeops/classic (no built-in default); cloud has one
+     * @param {string} loginScope (optional) override the default scope requested for the target deployment type
+     * @param {string} loginRedirectUri (optional) full, absolute redirect URI to use, for a client registered with an exact-match redirect URI (shared with the non-interactive synthetic flow's own redirect URI setting)
+     * @param {string} realm (optional) override default realm
+     * @param {string} deploymentType (optional) deployment type ('cloud', 'forgeops', or 'classic') — required for browser login, since there is no existing session to auto-detect it from
+     * @param {boolean} allowInsecureConnection (optional) allow insecure connection
+     * @param {boolean} debug (optional) enable debug output
+     * @param {boolean} curlirize (optional) enable output of all library REST calls as curl commands
+     * @returns {Frodo} frodo instance, not yet logged in
+     */
+    createInstanceWithBrowserLogin(host: string, loginClientId?: string, loginScope?: string, loginRedirectUri?: string, realm?: string, deploymentType?: string, allowInsecureConnection?: boolean, debug?: boolean, curlirize?: boolean): Frodo;
+    /**
+     * Factory helper to create a frodo instance ready to use an already-issued,
+     * externally-obtained OAuth2 access token (e.g. one an MCP server verified
+     * as an OAuth2 resource server). Like `createInstanceWithBrowserLogin`,
+     * this alone doesn't make the instance immediately usable — call
+     * `.login.applyAccessToken(token)` on the returned instance before using
+     * it. Never persists to the local token cache, regardless of the
+     * environment's default: this credential belongs to whoever presented the
+     * token, not to the operator running this process.
+     * @param {string} host host base URL, e.g. 'https://openam-my-tenant.forgeblocks.com/am'
+     * @param {string} realm (optional) override default realm
+     * @param {string} deploymentType deployment type ('cloud', 'forgeops', or 'classic') — required, since there is no existing session to auto-detect it from
+     * @param {boolean} allowInsecureConnection (optional) allow insecure connection
+     * @param {boolean} debug (optional) enable debug output
+     * @param {boolean} curlirize (optional) enable output of all library REST calls as curl commands
+     * @returns {Frodo} frodo instance, not yet ready to use
+     */
+    createInstanceWithAccessToken(host: string, realm?: string, deploymentType?: string, allowInsecureConnection?: boolean, debug?: boolean, curlirize?: boolean): Frodo;
+};
+/**
+ * Create a new frodo instance
+ * @param {StateInterface} config Initial state configuration to use with the new instance
+ * @returns {Frodo} frodo instance
+ */
+declare const FrodoLib: (config?: StateInterface) => Frodo;
+/**
+ * Default frodo instance
+ *
+ * @remarks
+ *
+ * If your application requires a single connection to a ForgeRock Identity Platform
+ * instance at a time, then this default instance is all you need:
+ *
+ * In order to use the default {@link Frodo | frodo} instance, you must populate its {@link State | state} with the
+ * minimum required information to login to your ForgeRock Identity Platform instance:
+ *
+ * ```javascript
+ * // configure the state before invoking any library functions that require credentials
+ * state.setHost('https://instance0/am');
+ * state.setUsername('admin');
+ * state.setPassword('p@ssw0rd!');
+ *
+ * // now the library can login
+ * frodo.login.getTokens();
+ *
+ * // and perform operations
+ * frodo.authn.journey.exportJourney('Login');
+ * ```
+ *
+ * If your application needs to connect to multiple ForgeRock Identity Platform instances
+ * simultaneously, then you will want to create additional frodo instances using any of
+ * the available factory methods accessible from the default instance:
+ *
+ * {@link frodo.createInstance}
+ * ```javascript
+ * // use factory method to create a new Frodo instance
+ * const instance1 = frodo.createInstance({
+ *    host: 'https://instance1/am',
+ *    username: 'admin',
+ *    password: 'p@ssw0rd!',
+ * });
+ *
+ * // now the instance can login
+ * instance1.login.getTokens();
+ *
+ * // and perform operations
+ * instance1.authn.journey.exportJourney('Login');
+ * ```
+ *
+ * {@link frodo.createInstanceWithAdminAccount}
+ * ```javascript
+ * // use factory method to create a new Frodo instance ready to login with an admin user account
+ * const instance2 = frodo.createInstanceWithAdminAccount(
+ *   'https://instance2/am',
+ *   'admin',
+ *   'p@ssw0rd!'
+ * );
+ *
+ * // now the instance can login
+ * instance2.login.getTokens();
+ *
+ * // and perform operations
+ * instance2.authn.journey.exportJourney('Login');
+ * ```
+ *
+ * {@link frodo.createInstanceWithServiceAccount}
+ * ```javascript
+ * // use factory method to create a new Frodo instance ready to login with a service account
+ * const instance3 = frodo.createInstanceWithServiceAccount(
+ *   'https://instance3/am',
+ *   'serviceAccount',
+ *   '{"k":"jwk"}'
+ * );
+ *
+ * // now the instance can login
+ * instance3.login.getTokens();
+ *
+ * // and perform operations
+ * instance3.authn.journey.exportJourney('Login');
+ * ```
+ *
+ * {@link frodo.createInstanceWithAmsterAccount}
+ * ```javascript
+ * // use factory method to create a new Frodo instance ready to login with Amster account
+ * const instance4 = frodo.createInstanceWithAmsterAccount(
+ *   'https://instance4/am',
+ *   '-----BEGIN PRIVATE KEY-----\nMIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCVPUZaHCRHu9i3\n...',
+ *   'amsterService'
+ * );
+ *
+ * // now the instance can login
+ * instance4.login.getTokens();
+ *
+ * // and perform AM operations
+ * instance4.authn.journey.exportJourney('Login');
+ * ```
+ */
+declare const frodo: Frodo;
+/**
+ * Default state instance
+ *
+ * @remarks
+ *
+ * {@link Frodo} maintains a {@link State | state} for each instance. The state is where Frodo gets configuration
+ * information from like host to connecto to, username and password to use, whether to
+ * allow insecure connections or not, etc. As the library operates, it updates its state.
+ *
+ * The default frodo instance contains an empty state instance by default. In order to
+ * use the default frodo instance, you must populate its state with the minimum required
+ * information to login to your ForgeRock Identity Platform instance:
+ *
+ * ```javascript
+ * // configure the state before invoking any library functions that require credentials
+ * state.setHost('https://instance0/am');
+ * state.setUsername('admin');
+ * state.setPassword('p@ssw0rd!');
+ *
+ * // now the library can login
+ * frodo.login.getTokens();
+ *
+ * // and perform operations
+ * frodo.authn.journey.exportJourney('Login');
+ * ```
+ */
+declare const state: State;
+export { frodo, FrodoLib, state };
+export default FrodoLib;
+//# sourceMappingURL=FrodoLib.d.ts.map

package/types/lib/FrodoLib.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FrodoLib.d.ts","sourceRoot":"","sources":["../../src/lib/FrodoLib.ts"],"names":[],"mappings":"AACA,OAAiB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAiB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAoB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAuB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAwB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAkC,EAChC,sBAAsB,EACvB,MAAM,kCAAkC,CAAC;AAC1C,OAA0B,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAkB,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAgB,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAA2B,EACzB,eAAe,EAChB,MAAM,iCAAiC,CAAC;AACzC,OAAsB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAA2B,EACzB,cAAc,EACf,MAAM,iCAAiC,CAAC;AACzC,OAA8B,EAC5B,wBAAwB,EACzB,MAAM,0CAA0C,CAAC;AAClD,OAA4B,EAC1B,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAmB,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAA4B,EAC1B,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAyC,EACvC,6BAA6B,EAC9B,MAAM,+CAA+C,CAAC;AACvD,OAAoC,EAClC,wBAAwB,EACzB,MAAM,0CAA0C,CAAC;AAClD,OAAwB,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAsB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAmC,EACjC,uBAAuB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAA8B,EAC5B,kBAAkB,EACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAoB,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAmB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAsB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAoC,EAClC,qBAAqB,EACtB,MAAM,8CAA8C,CAAC;AACtD,OAAoB,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAuB,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAA0B,EACxB,WAAW,EACZ,MAAM,oCAAoC,CAAC;AAC5C,OAA0B,EACxB,WAAW,EACZ,MAAM,oCAAoC,CAAC;AAC5C,OAAuB,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAe,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAmB,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAA0B,EACxB,cAAc,EACf,MAAM,gCAAgC,CAAC;AACxC,OAAmB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAqB,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAqB,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAiB,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAkB,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAA6B,EAC3B,iBAAiB,EAClB,MAAM,6BAA6B,CAAC;AACrC,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAyB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAe,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAwB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAmB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAyB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAA+B,EAC7B,sBAAsB,IAAI,4BAA4B,EACvD,MAAM,+BAA+B,CAAC;AACvC,OAA+B,EAC7B,mBAAmB,EACpB,MAAM,+BAA+B,CAAC;AACvC,OAAqC,EACnC,4BAA4B,IAAI,kCAAkC,EACnE,MAAM,qCAAqC,CAAC;AAC7C,OAAmB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAwB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAsB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAA0B,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAkC,EAChC,sBAAsB,EACvB,MAAM,kCAAkC,CAAC;AAC1C,OAAwB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAkB,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAqB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAiB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAiB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAwB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAiB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAkB,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAsB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAuB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAmB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAmB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAiB,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAsB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAgB,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAqB,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAsB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAkB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAoB,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAoB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAA0B,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAuB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAuB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAsB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAkB,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAA8B,EAC5B,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AAExC;;GAEG;AACH,MAAM,MAAM,KAAK,GAAG;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,KAAK,CAAC;IAEb,EAAE,EAAE;QACF,MAAM,EAAE,QAAQ,CAAC;KAClB,CAAC;IAEF,GAAG,EAAE,WAAW,CAAC;IAEjB,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,IAAI,CAAC;QACX,QAAQ,EAAE,sBAAsB,CAAC;KAClC,CAAC;IAEF,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,SAAS,CAAC;QACrB,YAAY,EAAE,YAAY,CAAC;KAC5B,CAAC;IAEF,KAAK,EAAE,QAAQ,GAAG;QAChB,QAAQ,EAAE,eAAe,CAAC;QAC1B,GAAG,EAAE,UAAU,GACb,wBAAwB,GACxB,gBAAgB,GAChB,gBAAgB,GAChB,6BAA6B,GAC7B,wBAAwB,GACxB,UAAU,GACV,uBAAuB,GACvB,kBAAkB,GAAG;YACnB,IAAI,EAAE,cAAc,CAAC;YACrB,GAAG,EAAE,MAAM,CAAC;YACZ,SAAS,EAAE,YAAY,CAAC;SACzB,CAAC;QACJ;;WAEG;QACH,QAAQ,EAAE,QAAQ,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC;QACvB,GAAG,EAAE;YACH,qBAAqB,EAAE,qBAAqB,CAAC;YAC7C,KAAK,EAAE,QAAQ,CAAC;YAChB,QAAQ,EAAE,QAAQ,CAAC;YACnB,WAAW,EAAE,WAAW,CAAC;YACzB,WAAW,EAAE,WAAW,CAAC;YACzB,QAAQ,EAAE,QAAQ,CAAC;SACpB,CAAC;QACF,GAAG,EAAE,GAAG,CAAC;QACT,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,cAAc,CAAC;QAC/B,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,SAAS,CAAC;QACrB,QAAQ,EAAE,QAAQ,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;KACd,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,UAAU,CAAC;IAElB,KAAK,EAAE;QACL,QAAQ,EAAE,aAAa,CAAC;KACzB,CAAC;IAEF,OAAO,EAAE,UAAU,CAAC;IAEpB,GAAG,EAAE;QACH,MAAM,EAAE,SAAS,CAAC;QAClB,SAAS,EAAE,SAAS,CAAC;QACrB,MAAM,EAAE,SAAS,CAAC;QAClB,OAAO,EAAE,aAAa,GAAG;YAAE,MAAM,EAAE,4BAA4B,CAAA;SAAE,CAAC;QAClE,aAAa,EAAE,mBAAmB,GAAG;YACnC,MAAM,EAAE,kCAAkC,CAAC;SAC5C,CAAC;QACF,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,EAAE,YAAY,CAAC;QAC3B,KAAK,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,SAAS,CAAC;QAClB,MAAM,EAAE,SAAS,CAAC;KACnB,CAAC;IAEF,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,YAAY,CAAC;IAEpB,UAAU,EAAE;QACV,MAAM,EAAE,YAAY,CAAC;QACrB,QAAQ,EAAE,UAAU,CAAC;QACrB,QAAQ,EAAE,GAAG,CAAC;QACd,QAAQ,EAAE,cAAc,CAAC;QACzB,MAAM,EAAE,sBAAsB,CAAC;KAChC,CAAC;IAEF,SAAS,EAAE,SAAS,CAAC;IAErB,KAAK,EAAE,KAAK,CAAC;IAEb,IAAI,EAAE,YAAY,CAAC;IAEnB,KAAK,EAAE;QACL,cAAc,EAAE,cAAc,CAAC;QAC/B,cAAc,EAAE,KAAK,CAAC;KACvB,CAAC;IAEF,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;IAEX,KAAK,EAAE,KAAK,CAAC;IAEb,IAAI,EAAE,IAAI,CAAC;IAEX,KAAK,EAAE,OAAO,GACZ,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,YAAY,GACZ,MAAM,GAAG;QACP,SAAS,EAAE,SAAS,CAAC;QACrB,MAAM,EAAE,WAAW,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC;QACX,IAAI,EAAE,IAAI,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;IAEJ;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,KAAK,CAAC;IAE9C;;;;;;;;;;;OAWG;IACH,8BAA8B,CAC5B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,EACvB,uBAAuB,CAAC,EAAE,OAAO,EACjC,KAAK,CAAC,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,OAAO,GAClB,KAAK,CAAC;IAET;;;;;;;;;;;OAWG;IACH,gCAAgC,CAC9B,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,oBAAoB,EAAE,MAAM,EAC5B,KAAK,CAAC,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,EACvB,uBAAuB,CAAC,EAAE,OAAO,EACjC,KAAK,CAAC,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,OAAO,GAClB,KAAK,CAAC;IAET;;;;;;;;;;;OAWG;IACH,+BAA+B,CAC7B,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,qBAAqB,CAAC,EAAE,MAAM,EAC9B,KAAK,CAAC,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,EACvB,uBAAuB,CAAC,EAAE,OAAO,EACjC,KAAK,CAAC,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,OAAO,GAClB,KAAK,CAAC;IAET;;;;;;;;;;;;;;;;;;OAkBG;IACH,8BAA8B,CAC5B,IAAI,EAAE,MAAM,EACZ,aAAa,CAAC,EAAE,MAAM,EACtB,UAAU,CAAC,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,EACzB,KAAK,CAAC,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,EACvB,uBAAuB,CAAC,EAAE,OAAO,EACjC,KAAK,CAAC,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,OAAO,GAClB,KAAK,CAAC;IAET;;;;;;;;;;;;;;;;OAgBG;IACH,6BAA6B,CAC3B,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,EACvB,uBAAuB,CAAC,EAAE,OAAO,EACjC,KAAK,CAAC,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,OAAO,GAClB,KAAK,CAAC;CACV,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,QAAQ,GAAI,SAAQ,cAAmB,KAAG,KAkJ/C,CAAC;AAkIF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AACH,QAAA,MAAM,KAAK,OAAa,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,QAAA,MAAM,KAAK,OAAc,CAAC;AAE1B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAElC,eAAe,QAAQ,CAAC"}

package/types/lib/Help.d.ts

@@ -0,0 +1,18 @@
+export interface MethodParam {
+    name: string;
+    type: string;
+    description: string;
+    /** Derived from the real TS signature (a `?` before the type), not JSDoc prose. */
+    required: boolean;
+}
+export interface MethodHelpDoc {
+    typeName: string;
+    methodName: string;
+    /** Full TypeScript signature without the trailing semicolon */
+    signature: string;
+    description: string;
+    params: MethodParam[];
+    returns: string;
+}
+export declare const helpMetadata: MethodHelpDoc[];
+//# sourceMappingURL=Help.d.ts.map

package/types/lib/Help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Help.d.ts","sourceRoot":"","sources":["../../src/lib/Help.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,YAAY,EAAE,aAAa,EAy/QvC,CAAC"}

package/types/mcp/CapabilityMetadata.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Static capability metadata map for the MCP capability registry.
+ *
+ * @remarks
+ * This map is the single source of truth for deployment affinity, identity surface,
+ * and object type routing knowledge that cannot be reliably inferred from method
+ * naming conventions alone.
+ *
+ * **Entry key semantics**
+ *
+ * Keys are matched against a capability's dot-path `id` (e.g. `"idm.managed.countManagedObjects"`)
+ * using a two-pass lookup in {@link resolveCapabilityMeta}:
+ *
+ * 1. **Exact match** — full id equals the key. Used for per-method overrides.
+ * 2. **Module prefix match** — the id starts with `<key>.`. Used to annotate all
+ *    methods in a module at once. The longest matching prefix wins.
+ *
+ * Exact matches always take priority over prefix matches.
+ *
+ * **Adding entries**
+ *
+ * Only add entries when the inferred defaults (deploymentTypes: `['any']`, no surface)
+ * are wrong or incomplete. The registry merges this map with inferred values so you only
+ * need to specify the fields that differ from the defaults.
+ */
+import { OperationCapabilityMeta } from './CapabilityTypes';
+/**
+ * Static map of capability ID prefixes and exact IDs to explicit metadata overrides.
+ *
+ * For each entry:
+ * - Key is either a full capability id **or** a module path prefix (no trailing dot).
+ * - Value is a partial {@link OperationCapabilityMeta} — absent fields fall back to
+ *   registry-inferred defaults.
+ */
+export declare const CAPABILITY_META: Record<string, OperationCapabilityMeta>;
+/**
+ * Resolves the most specific {@link OperationCapabilityMeta} entry for a capability id.
+ *
+ * @remarks
+ * Matching module-prefix metadata is composed from least to most specific,
+ * then exact operation metadata is applied last. This lets exact argument
+ * contracts inherit deployment and identity-surface metadata from their module.
+ *
+ * @param capabilityId Full dot-path capability id, e.g. `"idm.managed.countManagedObjects"`.
+ * @returns The matching metadata entry, or `undefined` if no entry covers this id.
+ */
+export declare function resolveCapabilityMeta(capabilityId: string): OperationCapabilityMeta | undefined;
+//# sourceMappingURL=CapabilityMetadata.d.ts.map

package/types/mcp/CapabilityMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityMetadata.d.ts","sourceRoot":"","sources":["../../src/mcp/CapabilityMetadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAqB,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAK/E;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAmzGnE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,GACnB,uBAAuB,GAAG,SAAS,CAoBrC"}

package/types/mcp/CapabilityPolicy.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Defines baseline policy presets and filtering behavior for MCP capabilities.
+ *
+ * @remarks
+ * The intent of this module is to provide safe defaults that can be composed with
+ * CLI launch profiles and explicit allow/deny overrides without changing the
+ * descriptor model itself.
+ */
+import { McpCapabilityDescriptor, McpCapabilityPolicy, McpCapabilityPolicyPresetName } from './CapabilityTypes';
+/**
+ * Built-in policy presets representing common launch safety postures.
+ */
+export declare const MCP_POLICY_PRESETS: Record<McpCapabilityPolicyPresetName, McpCapabilityPolicy>;
+/**
+ * Applies capability exposure rules to a descriptor set.
+ *
+ * @param capabilities Candidate capabilities.
+ * @param policy Policy rules used to include or exclude capabilities.
+ * @returns Filtered capability set.
+ */
+export declare function applyCapabilityPolicy(capabilities: McpCapabilityDescriptor[], policy: McpCapabilityPolicy): McpCapabilityDescriptor[];
+//# sourceMappingURL=CapabilityPolicy.d.ts.map

package/types/mcp/CapabilityPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityPolicy.d.ts","sourceRoot":"","sources":["../../src/mcp/CapabilityPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,6BAA6B,EAC9B,MAAM,mBAAmB,CAAC;AAE3B;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CACrC,6BAA6B,EAC7B,mBAAmB,CA6CpB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,uBAAuB,EAAE,EACvC,MAAM,EAAE,mBAAmB,GAC1B,uBAAuB,EAAE,CAoF3B"}

package/types/mcp/CapabilityRegistry.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Builds MCP capability inventory records from a Frodo instance.
+ *
+ * @remarks
+ * This module is a transitional registry helper. It provides deterministic
+ * discovery and normalization so downstream MCP runtime code can consume a stable
+ * descriptor shape while the library evolves toward richer metadata-driven
+ * manifests.
+ */
+import { Frodo } from '../lib/FrodoLib';
+import { McpCapabilityDescriptor, McpCapabilityInventoryOptions, McpCapabilityOperationType, McpCapabilityRiskClass } from './CapabilityTypes';
+/**
+ * Produces a normalized capability inventory by walking the provided Frodo
+ * instance and inferring operation metadata from method signatures and names.
+ *
+ * @param frodo Frodo instance to inspect.
+ * @param options Optional inventory filters.
+ * @returns Sorted capability descriptors ready for policy filtering.
+ */
+export declare function buildCapabilityInventory(frodo: Frodo, options?: McpCapabilityInventoryOptions): McpCapabilityDescriptor[];
+/**
+ * Infers a normalized operation type from a Frodo method name.
+ *
+ * @remarks
+ * Frodo follows a consistent naming convention where the *singular* form reads
+ * one object by id or name (`readJourney`) and the *plural* form reads all
+ * objects of that type (`readJourneys`). This function maps the plural form to
+ * the `list` operation type so policy filtering and tooling can reliably
+ * distinguish single-object reads from collection reads without requiring
+ * explicit per-method metadata.
+ *
+ * @param methodName Method name to classify.
+ * @returns Inferred operation type.
+ */
+export declare function inferOperationType(methodName: string): McpCapabilityOperationType;
+/**
+ * Infers an object type label from a method name and module path.
+ *
+ * @param methodName Method name to inspect.
+ * @param modulePath Path of containing modules.
+ * @param operationType Previously inferred operation type.
+ * @returns Inferred object type or fallback token.
+ */
+export declare function inferObjectType(methodName: string, modulePath: string[], operationType: McpCapabilityOperationType): string;
+/**
+ * Infers a baseline risk class from the operation and method name.
+ *
+ * @remarks
+ * The sensitive-keyword check runs before the operation-type branches, not
+ * after: a `create`/`update`/`export` on a secret, credential, or
+ * service-account is at least as sensitive as reading one, but until this
+ * ordering was fixed the operation-type branches returned first and the
+ * keyword check never ran, silently capping methods like
+ * `cloud.secret.createSecret` and `cloud.serviceAccount.createServiceAccount`
+ * at `'medium'` no matter what they were named.
+ *
+ * @param operationType Inferred operation type.
+ * @param methodName Method name used for keyword-based risk escalation.
+ * @returns Inferred risk class.
+ */
+export declare function inferRiskClass(operationType: McpCapabilityOperationType, methodName: string): McpCapabilityRiskClass;
+//# sourceMappingURL=CapabilityRegistry.d.ts.map

package/types/mcp/CapabilityRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityRegistry.d.ts","sourceRoot":"","sources":["../../src/mcp/CapabilityRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,OAAO,EAEL,uBAAuB,EACvB,6BAA6B,EAE7B,0BAA0B,EAE1B,sBAAsB,EAGvB,MAAM,mBAAmB,CAAC;AA+C3B;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE,6BAAkC,GAC1C,uBAAuB,EAAE,CA+D3B;AA6PD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,GACjB,0BAA0B,CAa5B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,aAAa,EAAE,0BAA0B,GACxC,MAAM,CA+BR;AAyBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,aAAa,EAAE,0BAA0B,EACzC,UAAU,EAAE,MAAM,GACjB,sBAAsB,CAaxB"}

package/types/mcp/CapabilityRouting.d.ts

@@ -0,0 +1,9 @@
+import { McpCapabilityDescriptor, McpDeploymentType } from './CapabilityTypes';
+export type McpCapabilityRoutingStatus = 'preferred' | 'compatible' | 'unknown' | 'incompatible';
+export type McpCapabilityRouting = {
+    status: McpCapabilityRoutingStatus;
+    reason: string;
+};
+export declare function rankCapabilitiesForDeployment(capabilities: McpCapabilityDescriptor[], deploymentType?: McpDeploymentType, query?: string): McpCapabilityDescriptor[];
+export declare function describeCapabilityRouting(capability: McpCapabilityDescriptor, deploymentType?: McpDeploymentType): McpCapabilityRouting;
+//# sourceMappingURL=CapabilityRouting.d.ts.map

package/types/mcp/CapabilityRouting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CapabilityRouting.d.ts","sourceRoot":"","sources":["../../src/mcp/CapabilityRouting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,MAAM,MAAM,0BAA0B,GACpC,WAAW,GAAG,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;AAE1D,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,0BAA0B,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,uBAAuB,EAAE,EACvC,cAAc,CAAC,EAAE,iBAAiB,EAClC,KAAK,CAAC,EAAE,MAAM,GACb,uBAAuB,EAAE,CAkB3B;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,uBAAuB,EACnC,cAAc,CAAC,EAAE,iBAAiB,GACjC,oBAAoB,CA8BtB"}