@sentropic/h2a-cli 0.74.0 → 0.78.0

package/dist/runtime/mcp/tools.js

@@ -1,525 +0,0 @@
-import { H2A_CLI_MCP_TOOL_NAMES } from "../../mcp.js";
-/**
- * Canonical tool descriptors for the in-process MCP server. Schemas are
- * intentionally permissive — wire-level validation lives in the store /
- * @sentropic/h2a invariants, not in the MCP shim.
- */
-export const H2A_CLI_MCP_TOOL_DESCRIPTORS = [
-    {
-        name: "h2a_register_instance",
-        description: "Register an h2a instance (PRINCIPAL / CONDUCTOR / AGENT / ...) in the local registry.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                registration: {
-                    type: "object",
-                    description: "Full H2AActorRegistration record."
-                }
-            },
-            required: ["registration"]
-        }
-    },
-    {
-        name: "h2a_discover_instances",
-        description: "List instances from the registry, optionally filtered by role and/or scope.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                role: { type: "string" },
-                scope: { type: "string" }
-            }
-        }
-    },
-    {
-        name: "h2a_open_negotiation",
-        description: "Open a new negotiation. The record is persisted under negotiations/<id>/state.json.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                record: {
-                    type: "object",
-                    description: "Full H2ANegotiationRecord: { id, scope, parties, subject, status, requiredSigners, ... }."
-                }
-            },
-            required: ["record"]
-        }
-    },
-    {
-        name: "h2a_offer",
-        description: "Submit an initial offer (journal entry, type=propose) bearing the current artifact.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                instance: {
-                    type: "string",
-                    description: "Conductor instance id producing the offer."
-                },
-                artifact: {
-                    description: "Arbitrary JSON-serializable artifact to propose."
-                },
-                eventId: {
-                    type: "string",
-                    description: "Optional deterministic event id; generated if absent."
-                }
-            },
-            required: ["negotiationId", "instance", "artifact"]
-        }
-    },
-    {
-        name: "h2a_counteroffer",
-        description: "Submit a counter-offer (journal entry, type=counter) bearing a revised artifact.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                instance: {
-                    type: "string",
-                    description: "Conductor instance id producing the counter-offer."
-                },
-                artifact: {
-                    description: "Arbitrary JSON-serializable artifact to counter with."
-                },
-                eventId: {
-                    type: "string",
-                    description: "Optional deterministic event id; generated if absent."
-                }
-            },
-            required: ["negotiationId", "instance", "artifact"]
-        }
-    },
-    {
-        name: "h2a_sign",
-        description: "Sign the canonical {artifactHash} of an artifact with an ed25519 PEM-encoded private key. The signature is appended as a journal event with body.kind='signature'.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                instance: { type: "string" },
-                artifact: {
-                    description: "JSON-serializable artifact whose canonical hash is signed."
-                },
-                privateKeyPem: {
-                    type: "string",
-                    description: "ed25519 PKCS#8 PEM-encoded private key contents (NOT a file path)."
-                },
-                eventId: { type: "string" }
-            },
-            required: ["negotiationId", "instance", "artifact", "privateKeyPem"]
-        }
-    },
-    {
-        name: "h2a_stabilize",
-        description: "Stabilize a negotiation once the registered signers' ed25519 signatures form a quorum on a single artifactHash. Returns the stabilized record and the winning hash.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                eventId: {
-                    type: "string",
-                    description: "Optional deterministic id for the final 'stabilized' event."
-                }
-            },
-            required: ["negotiationId"]
-        }
-    },
-    {
-        name: "h2a_attest_comprehension",
-        description: "Emit a signed, non-binding comprehension-attestation for a dossier hash. When negotiationId is provided, appends an event with no artifactKind.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                instance: { type: "string" },
-                dossier: {
-                    description: "JSON-serializable dossier. The tool computes its canonical sha256 hash."
-                },
-                dossierHash: { type: "string", description: "Precomputed sha256:<hex> dossier hash." },
-                privateKeyPem: {
-                    type: "string",
-                    description: "ed25519 PKCS#8 PEM-encoded private key contents (NOT a file path)."
-                },
-                role: { type: "string", description: "Actor role; defaults to the instance's first registered role." },
-                scope: { type: "string", description: "Actor scope; defaults to the instance's first registered scope or negotiation scope." },
-                eventId: { type: "string" },
-                at: { type: "string" },
-                causationId: { type: "string" },
-                correlationId: { type: "string" }
-            },
-            required: ["instance", "privateKeyPem"]
-        }
-    },
-    {
-        name: "h2a_declare_conflit_interet",
-        description: "Append a declaration-interet journal event for an instance in a negotiation.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                instance: { type: "string" },
-                interets: {
-                    type: "array",
-                    items: { type: "string" }
-                },
-                bindings: {
-                    type: "array",
-                    items: { type: "string" }
-                },
-                masqueImpactCollectif: { type: "boolean" },
-                eventId: { type: "string" },
-                at: { type: "string" }
-            },
-            required: ["negotiationId", "instance", "interets"]
-        }
-    },
-    {
-        name: "h2a_conflict_posture",
-        description: "Derive postureConflit for the negotiation signers and declared subjects.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" }
-            },
-            required: ["negotiationId"]
-        }
-    },
-    {
-        name: "h2a_inbox",
-        description: "Inbox dispatch — read | put | pop envelopes for a given instance.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                action: { type: "string", enum: ["read", "put", "pop"] },
-                instance: { type: "string" },
-                envelope: { type: "object" },
-                envelopeId: { type: "string" }
-            },
-            required: ["action", "instance"]
-        }
-    },
-    {
-        name: "h2a_append_journal",
-        description: "Append a journal event to a negotiation's chained journal.jsonl.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                payload: { type: "object" }
-            },
-            required: ["negotiationId", "payload"]
-        }
-    },
-    {
-        name: "h2a_escalate",
-        description: "Escalate a negotiation to a higher control surface. Appends a journal event with type=escalate carrying { kind: 'escalation', channel, payload }.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                negotiationId: { type: "string" },
-                instance: {
-                    type: "string",
-                    description: "Instance performing the escalation (acts as MANDATAIRE)."
-                },
-                channel: {
-                    type: "string",
-                    enum: ["advise", "decide", "alert"]
-                },
-                payload: {
-                    description: "Arbitrary JSON-serializable escalation payload."
-                }
-            },
-            required: ["negotiationId", "instance", "channel"]
-        }
-    },
-    {
-        name: "h2a_session_open",
-        description: "Open a live session for an instance (DEC-050/051). Writes a presence file under <root>/.h2a/presence/<sessionId>.json and returns the session plus the currently-fresh peers. The session subscribes by default to all canonical notification topics.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: {
-                    type: "string",
-                    description: "Identity of the live attachment (e.g. 'claude:proj-1')."
-                },
-                host: {
-                    type: "string",
-                    description: "Optional host CLI hint ('claude', 'codex', 'gemini', ...)."
-                },
-                pid: {
-                    type: "number",
-                    description: "Optional PID of the holding process; defaults to the mcp-serve PID."
-                },
-                interests: {
-                    type: "object",
-                    description: "Scopes / negotiations the session wants to observe.",
-                    properties: {
-                        scopes: { type: "array", items: { type: "string" } },
-                        negotiations: { type: "array", items: { type: "string" } }
-                    }
-                },
-                subscribedTopics: {
-                    type: "array",
-                    items: { type: "string" },
-                    description: "Subset of canonical notification topics to subscribe to. Defaults to all four."
-                },
-                sessionId: {
-                    type: "string",
-                    description: "Optional explicit session id (UUID-like). Generated if absent."
-                }
-            },
-            required: ["instance"]
-        }
-    },
-    {
-        name: "h2a_session_close",
-        description: "Close a previously-opened session (DEC-051). Stops the heartbeat, marks the final state, and deletes the presence file for the 'closed'/'expired' terminal states.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                sessionId: { type: "string" },
-                state: {
-                    type: "string",
-                    enum: ["closed", "draining", "expired"],
-                    description: "Final state to record. Defaults to 'closed'."
-                }
-            },
-            required: ["sessionId"]
-        }
-    },
-    {
-        name: "h2a_discover_sessions",
-        description: "List currently-live peer sessions (DEC-051). Reads presence files under <root>/.h2a/presence/ and filters by freshness (default expiry 90s). Optional scope/instance/name filters.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                scope: { type: "string" },
-                instance: { type: "string" },
-                name: {
-                    type: "string",
-                    description: "Case-insensitive substring match on session.name (display name). Use to find a peer by friendly name when you don't know the full instance id."
-                }
-            }
-        }
-    },
-    {
-        name: "h2a_nhi_report",
-        description: "Derive a Non-Human-Identity posture (OWASP NHI Top 10 / NIST CSF) from the registry (DEC-087): per-risk findings (NHI1 offboarding, NHI4 auth, NHI5 over-privilege, NHI7 long-lived keys, NHI9 reuse) plus a summary. Read-only.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                longLivedKeyMaxDays: {
-                    type: "number",
-                    description: "Keys older than this many days are flagged long-lived (NHI7). Default 90."
-                }
-            }
-        }
-    },
-    {
-        name: "h2a_nhi_inventory",
-        description: "Per-identity inventory of the NHI estate (DEC-090): each instance with its active keys (fingerprint, age, long-lived flag, reuse), subagents (status, capability bound) and offboard state, plus estate totals. Read-only.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                longLivedKeyMaxDays: {
-                    type: "number",
-                    description: "Keys older than this many days are flagged long-lived. Default 90."
-                }
-            }
-        }
-    },
-    {
-        name: "h2a_nhi_attest",
-        description: "Emit a signed attestation of the current NHI posture (DEC-087): an ed25519-signed `event` envelope whose body carries the posture report. Actor role/scope default to the instance's registration.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: { type: "string" },
-                privateKeyPem: {
-                    type: "string",
-                    description: "ed25519 PKCS#8 PEM-encoded private key contents (NOT a file path)."
-                },
-                role: { type: "string", description: "Actor role; defaults to the instance's first registered role." },
-                scope: { type: "string", description: "Actor scope; defaults to the instance's first registered scope." },
-                longLivedKeyMaxDays: { type: "number" }
-            },
-            required: ["instance", "privateKeyPem"]
-        }
-    },
-    {
-        name: "h2a_nhi_offboard",
-        description: "Coordinated decommission of an NHI (DEC-089): revoke every active key and every active subagent of the instance, then append an offboard tombstone. Idempotent. Returns the tombstone.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: { type: "string" },
-                reason: { type: "string" }
-            },
-            required: ["instance"]
-        }
-    },
-    {
-        name: "h2a_nhi_export",
-        description: "Export an instance's active public keys as a SPIFFE-trust-bundle / JWKS-shaped object (NHI P3 interop, DEC-094). Trust-anchor material in a bundle shape; live SPIRE integration stays in an external connector.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: { type: "string" },
-                trustDomain: { type: "string", description: "SPIFFE trust domain, e.g. example.org" }
-            },
-            required: ["instance", "trustDomain"]
-        }
-    },
-    {
-        name: "h2a_blockage_raise",
-        description: "Raise a blockage (DEC-092, EVO-3) so peers in scope are notified (peer.blocked push) — distinct from the drumbeat stall and from escalation. Durable.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: { type: "string" },
-                reason: { type: "string" },
-                scope: { type: "string" },
-                needs: { type: "string", description: "What would unblock it (helps a peer act)." }
-            },
-            required: ["instance", "reason"]
-        }
-    },
-    {
-        name: "h2a_blockage_list",
-        description: "List recorded blockages (DEC-092), optionally filtered by scope or active-only.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                scope: { type: "string" },
-                active: { type: "boolean", description: "Only unresolved blockages." }
-            }
-        }
-    },
-    {
-        name: "h2a_blockage_resolve",
-        description: "Resolve a blockage (DEC-092, idempotent); the dispatcher then pushes peer.unblocked.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: { type: "string" },
-                by: { type: "string" }
-            },
-            required: ["instance"]
-        }
-    },
-    {
-        name: "h2a_conductor",
-        description: "Resolve the live conductor/owner of a workspace (WP-G1, read-only). conductor = the earliest active-claim live agent (WP-G1b), or the live agent registered with role CONDUCTOR (WP-G1a), or null. candidates = all in-workspace live agents. Accepts workspaceId (ws:…) or workspacePath (filesystem path).",
-        inputSchema: {
-            type: "object",
-            properties: {
-                workspaceId: {
-                    type: "string",
-                    description: "Workspace id in ws:<uuid> form. Mutually exclusive with workspacePath."
-                },
-                workspacePath: {
-                    type: "string",
-                    description: "Filesystem path; resolved to a workspaceId via the same derivation presence uses."
-                }
-            }
-        }
-    },
-    {
-        name: "h2a_conductor_claim",
-        description: "Claim the conductor role for a workspace (WP-G1b, additive/reversible). Appends a claim event and returns the post-claim conductorFor resolution — the caller sees who the conductor now is (should be itself if it won the election). Earliest live claimant wins.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: {
-                    type: "string",
-                    description: "The claiming instance id (perennial, host:label:uuid12)."
-                },
-                workspaceId: {
-                    type: "string",
-                    description: "Workspace id in ws:<uuid> form. Mutually exclusive with workspacePath."
-                },
-                workspacePath: {
-                    type: "string",
-                    description: "Filesystem path; resolved to a workspaceId via the same derivation presence uses."
-                }
-            },
-            required: ["instance"]
-        }
-    },
-    {
-        name: "h2a_conductor_release",
-        description: "Release the conductor claim for a workspace (WP-G1b, additive/reversible). Appends a release event and returns the post-release conductorFor resolution so the caller sees the new conductor (or null if no other claimant is live).",
-        inputSchema: {
-            type: "object",
-            properties: {
-                instance: {
-                    type: "string",
-                    description: "The releasing instance id (perennial, host:label:uuid12)."
-                },
-                workspaceId: {
-                    type: "string",
-                    description: "Workspace id in ws:<uuid> form. Mutually exclusive with workspacePath."
-                },
-                workspacePath: {
-                    type: "string",
-                    description: "Filesystem path; resolved to a workspaceId via the same derivation presence uses."
-                }
-            },
-            required: ["instance"]
-        }
-    },
-    {
-        name: "h2a_conductor_launch_check",
-        description: "DRY-RUN (D3): poll track workspace-activity and return a recommendation to launch a conductor if work is durably stalled and no conductor is live. h2a does NOT spawn anything — this is advisory only. The launch is parked pending a spawn policy and remote-trigger support. Returns: { workspaceId, trackAvailable, conductor, conductorLive, pending, stalled, recommendation, reason, suggestedHosts? }.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                workspaceId: {
-                    type: "string",
-                    description: "Workspace id in ws:<uuid> form. Mutually exclusive with workspacePath."
-                },
-                workspacePath: {
-                    type: "string",
-                    description: "Filesystem path; resolved to a workspaceId via the same derivation presence uses."
-                },
-                idleMs: {
-                    type: "number",
-                    description: "Idle threshold in milliseconds for track workspace-activity (default 86400000 = 24h)."
-                }
-            }
-        }
-    },
-    {
-        name: "h2a_conductor_launch",
-        description: "D3 EMISSION: when work is stalled and no conductor is live, EMIT a conductor-launch-request envelope to a live remote agent. Gated by confirm=true (human gate) and a 1/30min/workspace cap. h2a NEVER spawns a process — it only puts a request envelope to remote; remote executes the actual spawn. Without confirm=true, returns a DRY-RUN preview (action: 'would-emit'). Requires instance (self/sender) when confirm=true.",
-        inputSchema: {
-            type: "object",
-            properties: {
-                workspaceId: {
-                    type: "string",
-                    description: "Workspace id in ws:<uuid> form. Mutually exclusive with workspacePath."
-                },
-                workspacePath: {
-                    type: "string",
-                    description: "Filesystem path; resolved to a workspaceId via the same derivation presence uses."
-                },
-                idleMs: {
-                    type: "number",
-                    description: "Idle threshold in milliseconds (default 86400000 = 24h)."
-                },
-                confirm: {
-                    type: "boolean",
-                    description: "Human gate: set true to actually emit the request. Without it, returns a DRY-RUN preview."
-                },
-                remote: {
-                    type: "string",
-                    description: "Optional: explicit remote instance id to target. If absent, the first live remote: agent is used."
-                },
-                instance: {
-                    type: "string",
-                    description: "Self (sender/signer) instance id. Required when confirm=true."
-                }
-            }
-        }
-    }
-];
-//# sourceMappingURL=tools.js.map

package/dist/runtime/mcp/tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/runtime/mcp/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAetD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwB;IAC/D;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,uFAAuF;QACzF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mCAAmC;iBACjD;aACF;YACD,QAAQ,EAAE,CAAC,cAAc,CAAC;SAC3B;KACF;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,6EAA6E;QAC/E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B;SACF;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,qFAAqF;QACvF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,2FAA2F;iBAC9F;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,qFAAqF;QACvF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4CAA4C;iBAC1D;gBACD,QAAQ,EAAE;oBACR,WAAW,EAAE,kDAAkD;iBAChE;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uDAAuD;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC;SACpD;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,kFAAkF;QACpF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oDAAoD;iBAClE;gBACD,QAAQ,EAAE;oBACR,WAAW,EAAE,uDAAuD;iBACrE;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uDAAuD;iBACrE;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC;SACpD;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,oKAAoK;QACtK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE;oBACR,WAAW,EAAE,4DAA4D;iBAC1E;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,oEAAoE;iBACvE;gBACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC;SACrE;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,qKAAqK;QACvK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6DAA6D;iBAC3E;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,CAAC;SAC5B;KACF;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EACT,iJAAiJ;QACnJ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,OAAO,EAAE;oBACP,WAAW,EAAE,yEAAyE;iBACvF;gBACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;gBACtF,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oEAAoE;iBAClF;gBACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;gBACtG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sFAAsF,EAAE;gBAC9H,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACtB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,eAAe,CAAC;SACxC;KACF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,WAAW,EACT,8EAA8E;QAChF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC1B;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC1B;gBACD,qBAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACvB;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC;SACpD;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,0EAA0E;QAC5E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAClC;YACD,QAAQ,EAAE,CAAC,eAAe,CAAC;SAC5B;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,mEAAmE;QACrE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;gBACxD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC/B;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;SACjC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,kEAAkE;QACpE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;SACvC;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,mJAAmJ;QACrJ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACjC,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0DAA0D;iBACxE;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;iBACpC;gBACD,OAAO,EAAE;oBACP,WAAW,EAAE,iDAAiD;iBAC/D;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,SAAS,CAAC;SACnD;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,uPAAuP;QACzP,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yDAAyD;iBACvE;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4DAA4D;iBAC1E;gBACD,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qEAAqE;iBACnF;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qDAAqD;oBAClE,UAAU,EAAE;wBACV,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACpD,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBAC3D;iBACF;gBACD,gBAAgB,EAAE;oBAChB,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EACT,gFAAgF;iBACnF;gBACD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gEAAgE;iBAC9E;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,oKAAoK;QACtK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;oBACvC,WAAW,EAAE,8CAA8C;iBAC5D;aACF;YACD,QAAQ,EAAE,CAAC,WAAW,CAAC;SACxB;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,oLAAoL;QACtL,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,gJAAgJ;iBACnJ;aACF;SACF;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,kOAAkO;QACpO,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,mBAAmB,EAAE;oBACnB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,2EAA2E;iBACzF;aACF;SACF;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,4NAA4N;QAC9N,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,mBAAmB,EAAE;oBACnB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oEAAoE;iBAClF;aACF;SACF;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,oMAAoM;QACtM,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oEAAoE;iBAClF;gBACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;gBACtG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;gBACzG,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACxC;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,eAAe,CAAC;SACxC;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EACT,wLAAwL;QAC1L,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC3B;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,kNAAkN;QACpN,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;aACtF;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,uJAAuJ;QACzJ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2CAA2C,EAAE;aACpF;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;SACjC;KACF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,iFAAiF;QAC9F,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,4BAA4B,EAAE;aACvE;SACF;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,sFAAsF;QACnG,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACvB;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,8SAA8S;QAChT,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;iBACtF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;aACF;SACF;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EACT,qQAAqQ;QACvQ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0DAA0D;iBACxE;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;iBACtF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EACT,sOAAsO;QACxO,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,2DAA2D;iBACzE;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;iBACtF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,gZAAgZ;QAClZ,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;iBACtF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uFAAuF;iBACrG;aACF;SACF;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,maAAma;QACra,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,wEAAwE;iBACtF;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mFAAmF;iBACjG;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0DAA0D;iBACxE;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,2FAA2F;iBACzG;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mGAAmG;iBACjH;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+DAA+D;iBAC7E;aACF;SACF;KACF;CACF,CAAC"}

package/dist/runtime/mcp-http/app.d.ts

@@ -1,33 +0,0 @@
-import { Hono } from "hono";
-import type { McpServer } from "../mcp/server.js";
-import type { BrokerLogin } from "./oauth/broker-login.js";
-import { type H2AHostedOAuthConfig } from "./oauth/config.js";
-import type { SingleTenantOAuthProvider } from "./oauth/single-tenant-provider.js";
-export interface HostedAppDeps {
-    oauthProvider: SingleTenantOAuthProvider;
-    oauthConfig: H2AHostedOAuthConfig;
-    /** The in-process h2a MCP dispatch (createMcpServer) — its read-only tools are exposed. */
-    h2aMcpServer: McpServer;
-    /**
-     * EVO-12 P2 (mode 3): when `oauthConfig.brokerMode`, the broker login (built
-     * from `oauthConfig.upstream`). Its /authorize delegates the user login to
-     * 39-auth instead of the consent secret. Omit for single-tenant.
-     */
-    brokerLogin?: BrokerLogin;
-    /**
-     * EVO-12 P2 (mode 3, multi-tenant): per-user /mcp serving. When present AND
-     * `oauthConfig.brokerMode`, the /mcp handler derives each request's tenant
-     * root from the access token's `sub` (rootForSub(baseRoot, sub)) and serves
-     * that tenant's h2a dispatch — instead of the single `h2aMcpServer`. Underlying
-     * servers are cached per root; a session is pinned to the tenant that opened
-     * it (a token for another tenant cannot reuse it). `h2aMcpServer` remains the
-     * fallback for any non-broker path.
-     */
-    tenancy?: {
-        baseRoot: string;
-        /** Build the in-process h2a dispatch rooted at `root` (e.g. createMcpServer({ root })). */
-        createServer: (root: string) => McpServer;
-    };
-}
-export declare function createHostedApp(deps: HostedAppDeps): Hono;
-//# sourceMappingURL=app.d.ts.map

package/dist/runtime/mcp-http/app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp-http/app.ts"],"names":[],"mappings":"AAQA,OAAO,EAAgB,IAAI,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAA0B,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEtF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAGnF,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,yBAAyB,CAAC;IACzC,WAAW,EAAE,oBAAoB,CAAC;IAClC,2FAA2F;IAC3F,YAAY,EAAE,SAAS,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE;QACR,QAAQ,EAAE,MAAM,CAAC;QACjB,2FAA2F;QAC3F,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC;KAC3C,CAAC;CACH;AAQD,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,CA2JzD"}