@tailrace/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Tailrace
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,37 @@
+# @tailrace/mcp
+
+Policy enforcement for [MCP](https://modelcontextprotocol.io) client transports
+(`@modelcontextprotocol/sdk` `>=1`). Wrap a transport so outbound `tools/call` arguments and
+inbound tool / `resources/read` results pass through Tailrace before they leave the process.
+
+A blocked call becomes a JSON-RPC error (`code: -32001`) instead of tearing down the transport.
+
+## Install
+
+```bash
+pnpm add @tailrace/core @tailrace/mcp @modelcontextprotocol/sdk
+```
+
+## Quickstart
+
+```ts
+import { createTailrace } from "@tailrace/core";
+import { withMcp } from "@tailrace/mcp";
+
+const tailrace = withMcp(createTailrace());
+const transport = tailrace.transport(sseTransport, { server: "salesforce" });
+// Pass `transport` to the MCP Client - secrets never reach the server.
+```
+
+Standalone form: `wrapTransport(tailrace, transport, { server: "salesforce" })`.
+
+## What gets scanned
+
+| Direction | Method                  | Boundary                                                 |
+| --------- | ----------------------- | -------------------------------------------------------- |
+| Out       | `tools/call` arguments  | `{ kind: "mcp", server, tool: name, direction: "out" }`  |
+| In        | `tools/call` result     | same with `direction: "in"`                              |
+| In        | `resources/read` result | `{ kind: "mcp", server, tool: "read", direction: "in" }` |
+
+All other JSON-RPC messages pass through. Spec: [`docs/integrations.md`](../../docs/integrations.md) §2.
+Guide: [`docs/guides/mcp-integration.md`](../../docs/guides/mcp-integration.md).

package/dist/index.cjs

@@ -0,0 +1,217 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  withMcp: () => withMcp,
+  wrapTransport: () => wrapTransport
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/wrap-transport.ts
+var import_core = require("@tailrace/core");
+
+// src/internal/context.ts
+function resolveWorkflowId(opts) {
+  return opts.workflowId ?? "default";
+}
+function buildCheckContext(boundary, opts) {
+  return {
+    boundary,
+    identity: { agent: opts.agent ?? "default" },
+    workflowId: resolveWorkflowId(opts)
+  };
+}
+async function checkWithOpts(tailrace, input, boundary, opts, checkOptions) {
+  const ctx = buildCheckContext(boundary, opts);
+  const result = await tailrace.check(input, ctx, checkOptions);
+  if (opts.onDecision !== void 0 && result.decisions.length > 0) {
+    opts.onDecision(result.decisions);
+  }
+  return result;
+}
+
+// src/internal/jsonrpc.ts
+var POLICY_VIOLATION_RPC_CODE = -32001;
+function isJsonRpcRequest(message) {
+  return typeof message === "object" && message !== null && "method" in message && "id" in message && !("result" in message) && !("error" in message);
+}
+function isJsonRpcResponse(message) {
+  return typeof message === "object" && message !== null && "id" in message && ("result" in message || "error" in message) && !("method" in message);
+}
+function policyViolationRpcError(id, err) {
+  const first = err.decisions[0];
+  const entity = first?.entity ?? "unknown";
+  const rule = first?.rule ?? "unknown";
+  return {
+    jsonrpc: "2.0",
+    id,
+    error: {
+      code: POLICY_VIOLATION_RPC_CODE,
+      message: `Blocked by data policy: ${entity} may not be sent to mcp (rule: ${rule})`,
+      data: {
+        type: "policy_violation",
+        entity,
+        rule
+      }
+    }
+  };
+}
+
+// src/internal/messages.ts
+function asCheckable(value) {
+  if (typeof value === "string") return value;
+  if (value === null || value === void 0) return {};
+  if (typeof value === "object" && !Array.isArray(value)) {
+    return value;
+  }
+  return { value };
+}
+function unwrapCheckable(original, checked) {
+  if (typeof original === "string") return checked;
+  if (original === null || original === void 0) return original;
+  if (typeof original === "object" && !Array.isArray(original)) return checked;
+  if (typeof checked === "object" && checked !== null && "value" in checked && (Array.isArray(original) || typeof original === "number" || typeof original === "boolean")) {
+    return checked["value"];
+  }
+  return checked;
+}
+function getToolsCallName(params) {
+  if (typeof params !== "object" || params === null) return void 0;
+  const name = params.name;
+  return typeof name === "string" ? name : void 0;
+}
+function getToolsCallArguments(params) {
+  if (typeof params !== "object" || params === null) return {};
+  const args = params.arguments;
+  return args === void 0 ? {} : args;
+}
+function withRewrittenArguments(params, checkedArgs) {
+  if (typeof params !== "object" || params === null) {
+    return { arguments: checkedArgs };
+  }
+  return { ...params, arguments: checkedArgs };
+}
+
+// src/wrap-transport.ts
+function wrapTransport(tailrace, transport, opts) {
+  const pending = /* @__PURE__ */ new Map();
+  const originalSend = transport.send.bind(transport);
+  let userOnMessage = transport.onmessage;
+  const deliver = (message, extra) => {
+    userOnMessage?.(message, extra);
+  };
+  const pendingKey = (id) => String(id);
+  const wrappedOnMessage = (message, extra) => {
+    void processInbound(message, extra);
+  };
+  async function processInbound(message, extra) {
+    if (!isJsonRpcResponse(message) || !("result" in message)) {
+      deliver(message, extra);
+      return;
+    }
+    const key = pendingKey(message.id);
+    const info = pending.get(key);
+    if (info === void 0) {
+      deliver(message, extra);
+      return;
+    }
+    pending.delete(key);
+    const boundary = {
+      kind: "mcp",
+      server: opts.server,
+      tool: info.tool,
+      direction: "in"
+    };
+    try {
+      const { output } = await checkWithOpts(tailrace, asCheckable(message.result), boundary, opts);
+      const rewritten = {
+        ...message,
+        result: unwrapCheckable(message.result, output)
+      };
+      deliver(rewritten, extra);
+    } catch (err) {
+      if (err instanceof import_core.PolicyViolationError) {
+        deliver(policyViolationRpcError(message.id, err), extra);
+        return;
+      }
+      throw err;
+    }
+  }
+  transport.send = async (message, options) => {
+    if (!isJsonRpcRequest(message)) {
+      return originalSend(message, options);
+    }
+    if (message.method === "tools/call") {
+      const tool = getToolsCallName(message.params) ?? "unknown";
+      const args = getToolsCallArguments(message.params);
+      const boundary = {
+        kind: "mcp",
+        server: opts.server,
+        tool,
+        direction: "out"
+      };
+      try {
+        const { output } = await checkWithOpts(tailrace, asCheckable(args), boundary, opts);
+        const checkedArgs = unwrapCheckable(args, output);
+        const nextParams = withRewrittenArguments(message.params, checkedArgs);
+        const nextMessage = {
+          ...message,
+          params: nextParams
+        };
+        pending.set(pendingKey(message.id), { method: "tools/call", tool });
+        return originalSend(nextMessage, options);
+      } catch (err) {
+        if (err instanceof import_core.PolicyViolationError) {
+          deliver(policyViolationRpcError(message.id, err));
+          return;
+        }
+        throw err;
+      }
+    }
+    if (message.method === "resources/read") {
+      pending.set(pendingKey(message.id), { method: "resources/read", tool: "read" });
+      return originalSend(message, options);
+    }
+    return originalSend(message, options);
+  };
+  Object.defineProperty(transport, "onmessage", {
+    configurable: true,
+    enumerable: true,
+    get: () => wrappedOnMessage,
+    set: (cb) => {
+      userOnMessage = cb;
+    }
+  });
+  return transport;
+}
+
+// src/fluent.ts
+function withMcp(tailrace) {
+  return Object.assign(tailrace, {
+    transport: (transport, opts) => wrapTransport(tailrace, transport, opts)
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  withMcp,
+  wrapTransport
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/wrap-transport.ts","../src/internal/context.ts","../src/internal/jsonrpc.ts","../src/internal/messages.ts","../src/fluent.ts"],"sourcesContent":["/**\n * @tailrace/mcp - MCP client transport wrapper.\n *\n * Intercepts outbound `tools/call` arguments and inbound results (and `resources/read`\n * results), applying policy at the `mcp` boundary. A blocked outbound call is turned into\n * a JSON-RPC error result rather than tearing down the transport (docs/integrations.md §2).\n */\n\nexport type { McpWrapOptions, TailraceWithMcp } from \"./types\";\nexport { wrapTransport } from \"./wrap-transport\";\nexport { withMcp } from \"./fluent\";\n","/**\n * wrapTransport — MCP client transport proxy (docs/integrations.md §2).\n */\n\nimport type { Tailrace } from \"@tailrace/core\";\nimport { PolicyViolationError } from \"@tailrace/core\";\nimport type {\n  Transport,\n  TransportSendOptions,\n} from \"@modelcontextprotocol/sdk/shared/transport.js\";\nimport type {\n  JSONRPCMessage,\n  MessageExtraInfo,\n  RequestId,\n} from \"@modelcontextprotocol/sdk/types.js\";\n\nimport { checkWithOpts } from \"./internal/context\";\nimport { isJsonRpcRequest, isJsonRpcResponse, policyViolationRpcError } from \"./internal/jsonrpc\";\nimport {\n  asCheckable,\n  getToolsCallArguments,\n  getToolsCallName,\n  unwrapCheckable,\n  withRewrittenArguments,\n} from \"./internal/messages\";\nimport type { McpWrapOptions } from \"./types\";\n\ninterface PendingCall {\n  method: \"tools/call\" | \"resources/read\";\n  tool: string;\n}\n\n/**\n * Wrap an MCP client transport so its calls pass through policy. Returns the same transport type.\n *\n * @example\n * ```ts\n * const transport = wrapTransport(tailrace, sseTransport, { server: \"salesforce\" });\n * ```\n */\nexport function wrapTransport<T extends Transport>(\n  tailrace: Tailrace,\n  transport: T,\n  opts: McpWrapOptions,\n): T {\n  const pending = new Map<string, PendingCall>();\n  const originalSend = transport.send.bind(transport);\n\n  let userOnMessage: Transport[\"onmessage\"] = transport.onmessage;\n\n  const deliver = (message: JSONRPCMessage, extra?: MessageExtraInfo): void => {\n    userOnMessage?.(message, extra);\n  };\n\n  const pendingKey = (id: RequestId): string => String(id);\n\n  const wrappedOnMessage = (message: JSONRPCMessage, extra?: MessageExtraInfo): void => {\n    void processInbound(message, extra);\n  };\n\n  async function processInbound(message: JSONRPCMessage, extra?: MessageExtraInfo): Promise<void> {\n    if (!isJsonRpcResponse(message) || !(\"result\" in message)) {\n      deliver(message, extra);\n      return;\n    }\n\n    const key = pendingKey(message.id);\n    const info = pending.get(key);\n    if (info === undefined) {\n      deliver(message, extra);\n      return;\n    }\n    pending.delete(key);\n\n    const boundary = {\n      kind: \"mcp\" as const,\n      server: opts.server,\n      tool: info.tool,\n      direction: \"in\" as const,\n    };\n\n    try {\n      const { output } = await checkWithOpts(tailrace, asCheckable(message.result), boundary, opts);\n      const rewritten = {\n        ...message,\n        result: unwrapCheckable(message.result, output),\n      } as JSONRPCMessage;\n      deliver(rewritten, extra);\n    } catch (err) {\n      if (err instanceof PolicyViolationError) {\n        deliver(policyViolationRpcError(message.id, err), extra);\n        return;\n      }\n      throw err;\n    }\n  }\n\n  transport.send = async (\n    message: JSONRPCMessage,\n    options?: TransportSendOptions,\n  ): Promise<void> => {\n    if (!isJsonRpcRequest(message)) {\n      return originalSend(message, options);\n    }\n\n    if (message.method === \"tools/call\") {\n      const tool = getToolsCallName(message.params) ?? \"unknown\";\n      const args = getToolsCallArguments(message.params);\n      const boundary = {\n        kind: \"mcp\" as const,\n        server: opts.server,\n        tool,\n        direction: \"out\" as const,\n      };\n\n      try {\n        const { output } = await checkWithOpts(tailrace, asCheckable(args), boundary, opts);\n        const checkedArgs = unwrapCheckable(args, output);\n        const nextParams = withRewrittenArguments(message.params, checkedArgs);\n        const nextMessage = {\n          ...message,\n          params: nextParams,\n        } as JSONRPCMessage;\n        pending.set(pendingKey(message.id), { method: \"tools/call\", tool });\n        return originalSend(nextMessage, options);\n      } catch (err) {\n        if (err instanceof PolicyViolationError) {\n          deliver(policyViolationRpcError(message.id, err));\n          return;\n        }\n        throw err;\n      }\n    }\n\n    if (message.method === \"resources/read\") {\n      // Outbound resources/read params are not scanned in v0.1; track for inbound result scan.\n      pending.set(pendingKey(message.id), { method: \"resources/read\", tool: \"read\" });\n      return originalSend(message, options);\n    }\n\n    return originalSend(message, options);\n  };\n\n  Object.defineProperty(transport, \"onmessage\", {\n    configurable: true,\n    enumerable: true,\n    get: () => wrappedOnMessage,\n    set: (cb: Transport[\"onmessage\"]) => {\n      userOnMessage = cb;\n    },\n  });\n\n  return transport;\n}\n","/**\n * Build CheckContext from wrap options + mcp boundary.\n */\n\nimport type {\n  Boundary,\n  CheckContext,\n  CheckOptions,\n  CheckResult,\n  JsonObject,\n  Tailrace,\n} from \"@tailrace/core\";\n\nimport type { McpWrapOptions } from \"../types\";\n\nexport function resolveWorkflowId(opts: McpWrapOptions): string {\n  return opts.workflowId ?? \"default\";\n}\n\nexport function buildCheckContext(boundary: Boundary, opts: McpWrapOptions): CheckContext {\n  return {\n    boundary,\n    identity: { agent: opts.agent ?? \"default\" },\n    workflowId: resolveWorkflowId(opts),\n  };\n}\n\n/**\n * Run check and forward decisions to the optional wrap-level onDecision callback.\n */\nexport async function checkWithOpts<T extends string | JsonObject>(\n  tailrace: Tailrace,\n  input: T,\n  boundary: Boundary,\n  opts: McpWrapOptions,\n  checkOptions?: CheckOptions,\n): Promise<CheckResult<T>> {\n  const ctx = buildCheckContext(boundary, opts);\n  const result = await tailrace.check(input, ctx, checkOptions);\n  if (opts.onDecision !== undefined && result.decisions.length > 0) {\n    opts.onDecision(result.decisions);\n  }\n  return result;\n}\n","/**\n * JSON-RPC helpers for MCP policy error synthesis (docs/integrations.md §2).\n */\n\nimport type { PolicyViolationError } from \"@tailrace/core\";\nimport type { JSONRPCError, JSONRPCMessage, RequestId } from \"@modelcontextprotocol/sdk/types.js\";\n\n/** JSON-RPC application error for Tailrace policy blocks. */\nexport const POLICY_VIOLATION_RPC_CODE = -32001;\n\nexport function isJsonRpcRequest(\n  message: JSONRPCMessage,\n): message is JSONRPCMessage & { method: string; id: RequestId; params?: unknown } {\n  return (\n    typeof message === \"object\" &&\n    message !== null &&\n    \"method\" in message &&\n    \"id\" in message &&\n    !(\"result\" in message) &&\n    !(\"error\" in message)\n  );\n}\n\nexport function isJsonRpcResponse(\n  message: JSONRPCMessage,\n): message is JSONRPCMessage & { id: RequestId } & ({ result: unknown } | { error: unknown }) {\n  return (\n    typeof message === \"object\" &&\n    message !== null &&\n    \"id\" in message &&\n    (\"result\" in message || \"error\" in message) &&\n    !(\"method\" in message)\n  );\n}\n\n/**\n * Build a JSON-RPC error response from a PolicyViolationError.\n * Never includes the raw detected value.\n */\nexport function policyViolationRpcError(id: RequestId, err: PolicyViolationError): JSONRPCError {\n  const first = err.decisions[0];\n  const entity = first?.entity ?? \"unknown\";\n  const rule = first?.rule ?? \"unknown\";\n  return {\n    jsonrpc: \"2.0\",\n    id,\n    error: {\n      code: POLICY_VIOLATION_RPC_CODE,\n      message: `Blocked by data policy: ${entity} may not be sent to mcp (rule: ${rule})`,\n      data: {\n        type: \"policy_violation\",\n        entity,\n        rule,\n      },\n    },\n  };\n}\n","/**\n * Extract / rewrite tools/call arguments and MCP result payloads for check().\n */\n\nimport type { JsonObject, JsonValue } from \"@tailrace/core\";\n\n/** Wrap opaque values so object-scan can walk string leaves. */\nexport function asCheckable(value: unknown): string | JsonObject {\n  if (typeof value === \"string\") return value;\n  if (value === null || value === undefined) return {};\n  if (typeof value === \"object\" && !Array.isArray(value)) {\n    return value as JsonObject;\n  }\n  return { value: value as JsonValue };\n}\n\nexport function unwrapCheckable(original: unknown, checked: string | JsonObject): unknown {\n  if (typeof original === \"string\") return checked;\n  if (original === null || original === undefined) return original;\n  if (typeof original === \"object\" && !Array.isArray(original)) return checked;\n  if (\n    typeof checked === \"object\" &&\n    checked !== null &&\n    \"value\" in checked &&\n    (Array.isArray(original) || typeof original === \"number\" || typeof original === \"boolean\")\n  ) {\n    return (checked as JsonObject)[\"value\"];\n  }\n  return checked;\n}\n\nexport function getToolsCallName(params: unknown): string | undefined {\n  if (typeof params !== \"object\" || params === null) return undefined;\n  const name = (params as { name?: unknown }).name;\n  return typeof name === \"string\" ? name : undefined;\n}\n\nexport function getToolsCallArguments(params: unknown): unknown {\n  if (typeof params !== \"object\" || params === null) return {};\n  const args = (params as { arguments?: unknown }).arguments;\n  return args === undefined ? {} : args;\n}\n\n/**\n * Rewrite `params.arguments` after a successful check. Returns a shallow-cloned params object.\n */\nexport function withRewrittenArguments(params: unknown, checkedArgs: unknown): unknown {\n  if (typeof params !== \"object\" || params === null) {\n    return { arguments: checkedArgs };\n  }\n  return { ...(params as Record<string, unknown>), arguments: checkedArgs };\n}\n","/**\n * Fluent MCP helpers without core importing the MCP SDK (docs/integrations.md §2).\n */\n\nimport type { Tailrace } from \"@tailrace/core\";\nimport type { Transport } from \"@modelcontextprotocol/sdk/shared/transport.js\";\n\nimport type { McpWrapOptions, TailraceWithMcp } from \"./types\";\nimport { wrapTransport } from \"./wrap-transport\";\n\n/**\n * Attach a `transport` helper to an existing Tailrace instance.\n *\n * @example\n * ```ts\n * const tailrace = withMcp(createTailrace());\n * const transport = tailrace.transport(sseTransport, { server: \"salesforce\" });\n * ```\n */\nexport function withMcp(tailrace: Tailrace): TailraceWithMcp {\n  return Object.assign(tailrace, {\n    transport: <T extends Transport>(transport: T, opts: McpWrapOptions) =>\n      wrapTransport(tailrace, transport, opts),\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACKA,kBAAqC;;;ACU9B,SAAS,kBAAkB,MAA8B;AAC9D,SAAO,KAAK,cAAc;AAC5B;AAEO,SAAS,kBAAkB,UAAoB,MAAoC;AACxF,SAAO;AAAA,IACL;AAAA,IACA,UAAU,EAAE,OAAO,KAAK,SAAS,UAAU;AAAA,IAC3C,YAAY,kBAAkB,IAAI;AAAA,EACpC;AACF;AAKA,eAAsB,cACpB,UACA,OACA,UACA,MACA,cACyB;AACzB,QAAM,MAAM,kBAAkB,UAAU,IAAI;AAC5C,QAAM,SAAS,MAAM,SAAS,MAAM,OAAO,KAAK,YAAY;AAC5D,MAAI,KAAK,eAAe,UAAa,OAAO,UAAU,SAAS,GAAG;AAChE,SAAK,WAAW,OAAO,SAAS;AAAA,EAClC;AACA,SAAO;AACT;;;ACnCO,IAAM,4BAA4B;AAElC,SAAS,iBACd,SACiF;AACjF,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,YAAY,WACZ,QAAQ,WACR,EAAE,YAAY,YACd,EAAE,WAAW;AAEjB;AAEO,SAAS,kBACd,SAC4F;AAC5F,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,QAAQ,YACP,YAAY,WAAW,WAAW,YACnC,EAAE,YAAY;AAElB;AAMO,SAAS,wBAAwB,IAAe,KAAyC;AAC9F,QAAM,QAAQ,IAAI,UAAU,CAAC;AAC7B,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,OAAO,OAAO,QAAQ;AAC5B,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS,2BAA2B,MAAM,kCAAkC,IAAI;AAAA,MAChF,MAAM;AAAA,QACJ,MAAM;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACjDO,SAAS,YAAY,OAAqC;AAC/D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO,CAAC;AACnD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AACtD,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAA0B;AACrC;AAEO,SAAS,gBAAgB,UAAmB,SAAuC;AACxF,MAAI,OAAO,aAAa,SAAU,QAAO;AACzC,MAAI,aAAa,QAAQ,aAAa,OAAW,QAAO;AACxD,MAAI,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO;AACrE,MACE,OAAO,YAAY,YACnB,YAAY,QACZ,WAAW,YACV,MAAM,QAAQ,QAAQ,KAAK,OAAO,aAAa,YAAY,OAAO,aAAa,YAChF;AACA,WAAQ,QAAuB,OAAO;AAAA,EACxC;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,QAAqC;AACpE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,OAAQ,OAA8B;AAC5C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEO,SAAS,sBAAsB,QAA0B;AAC9D,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO,CAAC;AAC3D,QAAM,OAAQ,OAAmC;AACjD,SAAO,SAAS,SAAY,CAAC,IAAI;AACnC;AAKO,SAAS,uBAAuB,QAAiB,aAA+B;AACrF,MAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,WAAO,EAAE,WAAW,YAAY;AAAA,EAClC;AACA,SAAO,EAAE,GAAI,QAAoC,WAAW,YAAY;AAC1E;;;AHXO,SAAS,cACd,UACA,WACA,MACG;AACH,QAAM,UAAU,oBAAI,IAAyB;AAC7C,QAAM,eAAe,UAAU,KAAK,KAAK,SAAS;AAElD,MAAI,gBAAwC,UAAU;AAEtD,QAAM,UAAU,CAAC,SAAyB,UAAmC;AAC3E,oBAAgB,SAAS,KAAK;AAAA,EAChC;AAEA,QAAM,aAAa,CAAC,OAA0B,OAAO,EAAE;AAEvD,QAAM,mBAAmB,CAAC,SAAyB,UAAmC;AACpF,SAAK,eAAe,SAAS,KAAK;AAAA,EACpC;AAEA,iBAAe,eAAe,SAAyB,OAAyC;AAC9F,QAAI,CAAC,kBAAkB,OAAO,KAAK,EAAE,YAAY,UAAU;AACzD,cAAQ,SAAS,KAAK;AACtB;AAAA,IACF;AAEA,UAAM,MAAM,WAAW,QAAQ,EAAE;AACjC,UAAM,OAAO,QAAQ,IAAI,GAAG;AAC5B,QAAI,SAAS,QAAW;AACtB,cAAQ,SAAS,KAAK;AACtB;AAAA,IACF;AACA,YAAQ,OAAO,GAAG;AAElB,UAAM,WAAW;AAAA,MACf,MAAM;AAAA,MACN,QAAQ,KAAK;AAAA,MACb,MAAM,KAAK;AAAA,MACX,WAAW;AAAA,IACb;AAEA,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,cAAc,UAAU,YAAY,QAAQ,MAAM,GAAG,UAAU,IAAI;AAC5F,YAAM,YAAY;AAAA,QAChB,GAAG;AAAA,QACH,QAAQ,gBAAgB,QAAQ,QAAQ,MAAM;AAAA,MAChD;AACA,cAAQ,WAAW,KAAK;AAAA,IAC1B,SAAS,KAAK;AACZ,UAAI,eAAe,kCAAsB;AACvC,gBAAQ,wBAAwB,QAAQ,IAAI,GAAG,GAAG,KAAK;AACvD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,YAAU,OAAO,OACf,SACA,YACkB;AAClB,QAAI,CAAC,iBAAiB,OAAO,GAAG;AAC9B,aAAO,aAAa,SAAS,OAAO;AAAA,IACtC;AAEA,QAAI,QAAQ,WAAW,cAAc;AACnC,YAAM,OAAO,iBAAiB,QAAQ,MAAM,KAAK;AACjD,YAAM,OAAO,sBAAsB,QAAQ,MAAM;AACjD,YAAM,WAAW;AAAA,QACf,MAAM;AAAA,QACN,QAAQ,KAAK;AAAA,QACb;AAAA,QACA,WAAW;AAAA,MACb;AAEA,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,cAAc,UAAU,YAAY,IAAI,GAAG,UAAU,IAAI;AAClF,cAAM,cAAc,gBAAgB,MAAM,MAAM;AAChD,cAAM,aAAa,uBAAuB,QAAQ,QAAQ,WAAW;AACrE,cAAM,cAAc;AAAA,UAClB,GAAG;AAAA,UACH,QAAQ;AAAA,QACV;AACA,gBAAQ,IAAI,WAAW,QAAQ,EAAE,GAAG,EAAE,QAAQ,cAAc,KAAK,CAAC;AAClE,eAAO,aAAa,aAAa,OAAO;AAAA,MAC1C,SAAS,KAAK;AACZ,YAAI,eAAe,kCAAsB;AACvC,kBAAQ,wBAAwB,QAAQ,IAAI,GAAG,CAAC;AAChD;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW,kBAAkB;AAEvC,cAAQ,IAAI,WAAW,QAAQ,EAAE,GAAG,EAAE,QAAQ,kBAAkB,MAAM,OAAO,CAAC;AAC9E,aAAO,aAAa,SAAS,OAAO;AAAA,IACtC;AAEA,WAAO,aAAa,SAAS,OAAO;AAAA,EACtC;AAEA,SAAO,eAAe,WAAW,aAAa;AAAA,IAC5C,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,KAAK,MAAM;AAAA,IACX,KAAK,CAAC,OAA+B;AACnC,sBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AAED,SAAO;AACT;;;AItIO,SAAS,QAAQ,UAAqC;AAC3D,SAAO,OAAO,OAAO,UAAU;AAAA,IAC7B,WAAW,CAAsB,WAAc,SAC7C,cAAc,UAAU,WAAW,IAAI;AAAA,EAC3C,CAAC;AACH;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,52 @@
+import { Decision, Tailrace } from '@tailrace/core';
+import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+
+/**
+ * Public types for @tailrace/mcp.
+ */
+
+interface McpWrapOptions {
+    /** MCP server identity used in policy boundary keys (`mcp:{server}/{tool}`). */
+    server: string;
+    agent?: string;
+    workflowId?: string;
+    onDecision?: (decisions: Decision[]) => void;
+}
+/**
+ * Tailrace instance with fluent MCP helpers. Produced by {@link withMcp};
+ * core stays framework-free.
+ */
+interface TailraceWithMcp extends Tailrace {
+    transport<T extends Transport>(transport: T, opts: McpWrapOptions): T;
+}
+
+/**
+ * wrapTransport — MCP client transport proxy (docs/integrations.md §2).
+ */
+
+/**
+ * Wrap an MCP client transport so its calls pass through policy. Returns the same transport type.
+ *
+ * @example
+ * ```ts
+ * const transport = wrapTransport(tailrace, sseTransport, { server: "salesforce" });
+ * ```
+ */
+declare function wrapTransport<T extends Transport>(tailrace: Tailrace, transport: T, opts: McpWrapOptions): T;
+
+/**
+ * Fluent MCP helpers without core importing the MCP SDK (docs/integrations.md §2).
+ */
+
+/**
+ * Attach a `transport` helper to an existing Tailrace instance.
+ *
+ * @example
+ * ```ts
+ * const tailrace = withMcp(createTailrace());
+ * const transport = tailrace.transport(sseTransport, { server: "salesforce" });
+ * ```
+ */
+declare function withMcp(tailrace: Tailrace): TailraceWithMcp;
+
+export { type McpWrapOptions, type TailraceWithMcp, withMcp, wrapTransport };

package/dist/index.d.ts

@@ -0,0 +1,52 @@
+import { Decision, Tailrace } from '@tailrace/core';
+import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+
+/**
+ * Public types for @tailrace/mcp.
+ */
+
+interface McpWrapOptions {
+    /** MCP server identity used in policy boundary keys (`mcp:{server}/{tool}`). */
+    server: string;
+    agent?: string;
+    workflowId?: string;
+    onDecision?: (decisions: Decision[]) => void;
+}
+/**
+ * Tailrace instance with fluent MCP helpers. Produced by {@link withMcp};
+ * core stays framework-free.
+ */
+interface TailraceWithMcp extends Tailrace {
+    transport<T extends Transport>(transport: T, opts: McpWrapOptions): T;
+}
+
+/**
+ * wrapTransport — MCP client transport proxy (docs/integrations.md §2).
+ */
+
+/**
+ * Wrap an MCP client transport so its calls pass through policy. Returns the same transport type.
+ *
+ * @example
+ * ```ts
+ * const transport = wrapTransport(tailrace, sseTransport, { server: "salesforce" });
+ * ```
+ */
+declare function wrapTransport<T extends Transport>(tailrace: Tailrace, transport: T, opts: McpWrapOptions): T;
+
+/**
+ * Fluent MCP helpers without core importing the MCP SDK (docs/integrations.md §2).
+ */
+
+/**
+ * Attach a `transport` helper to an existing Tailrace instance.
+ *
+ * @example
+ * ```ts
+ * const tailrace = withMcp(createTailrace());
+ * const transport = tailrace.transport(sseTransport, { server: "salesforce" });
+ * ```
+ */
+declare function withMcp(tailrace: Tailrace): TailraceWithMcp;
+
+export { type McpWrapOptions, type TailraceWithMcp, withMcp, wrapTransport };

package/dist/index.js

@@ -0,0 +1,189 @@
+// src/wrap-transport.ts
+import { PolicyViolationError } from "@tailrace/core";
+
+// src/internal/context.ts
+function resolveWorkflowId(opts) {
+  return opts.workflowId ?? "default";
+}
+function buildCheckContext(boundary, opts) {
+  return {
+    boundary,
+    identity: { agent: opts.agent ?? "default" },
+    workflowId: resolveWorkflowId(opts)
+  };
+}
+async function checkWithOpts(tailrace, input, boundary, opts, checkOptions) {
+  const ctx = buildCheckContext(boundary, opts);
+  const result = await tailrace.check(input, ctx, checkOptions);
+  if (opts.onDecision !== void 0 && result.decisions.length > 0) {
+    opts.onDecision(result.decisions);
+  }
+  return result;
+}
+
+// src/internal/jsonrpc.ts
+var POLICY_VIOLATION_RPC_CODE = -32001;
+function isJsonRpcRequest(message) {
+  return typeof message === "object" && message !== null && "method" in message && "id" in message && !("result" in message) && !("error" in message);
+}
+function isJsonRpcResponse(message) {
+  return typeof message === "object" && message !== null && "id" in message && ("result" in message || "error" in message) && !("method" in message);
+}
+function policyViolationRpcError(id, err) {
+  const first = err.decisions[0];
+  const entity = first?.entity ?? "unknown";
+  const rule = first?.rule ?? "unknown";
+  return {
+    jsonrpc: "2.0",
+    id,
+    error: {
+      code: POLICY_VIOLATION_RPC_CODE,
+      message: `Blocked by data policy: ${entity} may not be sent to mcp (rule: ${rule})`,
+      data: {
+        type: "policy_violation",
+        entity,
+        rule
+      }
+    }
+  };
+}
+
+// src/internal/messages.ts
+function asCheckable(value) {
+  if (typeof value === "string") return value;
+  if (value === null || value === void 0) return {};
+  if (typeof value === "object" && !Array.isArray(value)) {
+    return value;
+  }
+  return { value };
+}
+function unwrapCheckable(original, checked) {
+  if (typeof original === "string") return checked;
+  if (original === null || original === void 0) return original;
+  if (typeof original === "object" && !Array.isArray(original)) return checked;
+  if (typeof checked === "object" && checked !== null && "value" in checked && (Array.isArray(original) || typeof original === "number" || typeof original === "boolean")) {
+    return checked["value"];
+  }
+  return checked;
+}
+function getToolsCallName(params) {
+  if (typeof params !== "object" || params === null) return void 0;
+  const name = params.name;
+  return typeof name === "string" ? name : void 0;
+}
+function getToolsCallArguments(params) {
+  if (typeof params !== "object" || params === null) return {};
+  const args = params.arguments;
+  return args === void 0 ? {} : args;
+}
+function withRewrittenArguments(params, checkedArgs) {
+  if (typeof params !== "object" || params === null) {
+    return { arguments: checkedArgs };
+  }
+  return { ...params, arguments: checkedArgs };
+}
+
+// src/wrap-transport.ts
+function wrapTransport(tailrace, transport, opts) {
+  const pending = /* @__PURE__ */ new Map();
+  const originalSend = transport.send.bind(transport);
+  let userOnMessage = transport.onmessage;
+  const deliver = (message, extra) => {
+    userOnMessage?.(message, extra);
+  };
+  const pendingKey = (id) => String(id);
+  const wrappedOnMessage = (message, extra) => {
+    void processInbound(message, extra);
+  };
+  async function processInbound(message, extra) {
+    if (!isJsonRpcResponse(message) || !("result" in message)) {
+      deliver(message, extra);
+      return;
+    }
+    const key = pendingKey(message.id);
+    const info = pending.get(key);
+    if (info === void 0) {
+      deliver(message, extra);
+      return;
+    }
+    pending.delete(key);
+    const boundary = {
+      kind: "mcp",
+      server: opts.server,
+      tool: info.tool,
+      direction: "in"
+    };
+    try {
+      const { output } = await checkWithOpts(tailrace, asCheckable(message.result), boundary, opts);
+      const rewritten = {
+        ...message,
+        result: unwrapCheckable(message.result, output)
+      };
+      deliver(rewritten, extra);
+    } catch (err) {
+      if (err instanceof PolicyViolationError) {
+        deliver(policyViolationRpcError(message.id, err), extra);
+        return;
+      }
+      throw err;
+    }
+  }
+  transport.send = async (message, options) => {
+    if (!isJsonRpcRequest(message)) {
+      return originalSend(message, options);
+    }
+    if (message.method === "tools/call") {
+      const tool = getToolsCallName(message.params) ?? "unknown";
+      const args = getToolsCallArguments(message.params);
+      const boundary = {
+        kind: "mcp",
+        server: opts.server,
+        tool,
+        direction: "out"
+      };
+      try {
+        const { output } = await checkWithOpts(tailrace, asCheckable(args), boundary, opts);
+        const checkedArgs = unwrapCheckable(args, output);
+        const nextParams = withRewrittenArguments(message.params, checkedArgs);
+        const nextMessage = {
+          ...message,
+          params: nextParams
+        };
+        pending.set(pendingKey(message.id), { method: "tools/call", tool });
+        return originalSend(nextMessage, options);
+      } catch (err) {
+        if (err instanceof PolicyViolationError) {
+          deliver(policyViolationRpcError(message.id, err));
+          return;
+        }
+        throw err;
+      }
+    }
+    if (message.method === "resources/read") {
+      pending.set(pendingKey(message.id), { method: "resources/read", tool: "read" });
+      return originalSend(message, options);
+    }
+    return originalSend(message, options);
+  };
+  Object.defineProperty(transport, "onmessage", {
+    configurable: true,
+    enumerable: true,
+    get: () => wrappedOnMessage,
+    set: (cb) => {
+      userOnMessage = cb;
+    }
+  });
+  return transport;
+}
+
+// src/fluent.ts
+function withMcp(tailrace) {
+  return Object.assign(tailrace, {
+    transport: (transport, opts) => wrapTransport(tailrace, transport, opts)
+  });
+}
+export {
+  withMcp,
+  wrapTransport
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/wrap-transport.ts","../src/internal/context.ts","../src/internal/jsonrpc.ts","../src/internal/messages.ts","../src/fluent.ts"],"sourcesContent":["/**\n * wrapTransport — MCP client transport proxy (docs/integrations.md §2).\n */\n\nimport type { Tailrace } from \"@tailrace/core\";\nimport { PolicyViolationError } from \"@tailrace/core\";\nimport type {\n  Transport,\n  TransportSendOptions,\n} from \"@modelcontextprotocol/sdk/shared/transport.js\";\nimport type {\n  JSONRPCMessage,\n  MessageExtraInfo,\n  RequestId,\n} from \"@modelcontextprotocol/sdk/types.js\";\n\nimport { checkWithOpts } from \"./internal/context\";\nimport { isJsonRpcRequest, isJsonRpcResponse, policyViolationRpcError } from \"./internal/jsonrpc\";\nimport {\n  asCheckable,\n  getToolsCallArguments,\n  getToolsCallName,\n  unwrapCheckable,\n  withRewrittenArguments,\n} from \"./internal/messages\";\nimport type { McpWrapOptions } from \"./types\";\n\ninterface PendingCall {\n  method: \"tools/call\" | \"resources/read\";\n  tool: string;\n}\n\n/**\n * Wrap an MCP client transport so its calls pass through policy. Returns the same transport type.\n *\n * @example\n * ```ts\n * const transport = wrapTransport(tailrace, sseTransport, { server: \"salesforce\" });\n * ```\n */\nexport function wrapTransport<T extends Transport>(\n  tailrace: Tailrace,\n  transport: T,\n  opts: McpWrapOptions,\n): T {\n  const pending = new Map<string, PendingCall>();\n  const originalSend = transport.send.bind(transport);\n\n  let userOnMessage: Transport[\"onmessage\"] = transport.onmessage;\n\n  const deliver = (message: JSONRPCMessage, extra?: MessageExtraInfo): void => {\n    userOnMessage?.(message, extra);\n  };\n\n  const pendingKey = (id: RequestId): string => String(id);\n\n  const wrappedOnMessage = (message: JSONRPCMessage, extra?: MessageExtraInfo): void => {\n    void processInbound(message, extra);\n  };\n\n  async function processInbound(message: JSONRPCMessage, extra?: MessageExtraInfo): Promise<void> {\n    if (!isJsonRpcResponse(message) || !(\"result\" in message)) {\n      deliver(message, extra);\n      return;\n    }\n\n    const key = pendingKey(message.id);\n    const info = pending.get(key);\n    if (info === undefined) {\n      deliver(message, extra);\n      return;\n    }\n    pending.delete(key);\n\n    const boundary = {\n      kind: \"mcp\" as const,\n      server: opts.server,\n      tool: info.tool,\n      direction: \"in\" as const,\n    };\n\n    try {\n      const { output } = await checkWithOpts(tailrace, asCheckable(message.result), boundary, opts);\n      const rewritten = {\n        ...message,\n        result: unwrapCheckable(message.result, output),\n      } as JSONRPCMessage;\n      deliver(rewritten, extra);\n    } catch (err) {\n      if (err instanceof PolicyViolationError) {\n        deliver(policyViolationRpcError(message.id, err), extra);\n        return;\n      }\n      throw err;\n    }\n  }\n\n  transport.send = async (\n    message: JSONRPCMessage,\n    options?: TransportSendOptions,\n  ): Promise<void> => {\n    if (!isJsonRpcRequest(message)) {\n      return originalSend(message, options);\n    }\n\n    if (message.method === \"tools/call\") {\n      const tool = getToolsCallName(message.params) ?? \"unknown\";\n      const args = getToolsCallArguments(message.params);\n      const boundary = {\n        kind: \"mcp\" as const,\n        server: opts.server,\n        tool,\n        direction: \"out\" as const,\n      };\n\n      try {\n        const { output } = await checkWithOpts(tailrace, asCheckable(args), boundary, opts);\n        const checkedArgs = unwrapCheckable(args, output);\n        const nextParams = withRewrittenArguments(message.params, checkedArgs);\n        const nextMessage = {\n          ...message,\n          params: nextParams,\n        } as JSONRPCMessage;\n        pending.set(pendingKey(message.id), { method: \"tools/call\", tool });\n        return originalSend(nextMessage, options);\n      } catch (err) {\n        if (err instanceof PolicyViolationError) {\n          deliver(policyViolationRpcError(message.id, err));\n          return;\n        }\n        throw err;\n      }\n    }\n\n    if (message.method === \"resources/read\") {\n      // Outbound resources/read params are not scanned in v0.1; track for inbound result scan.\n      pending.set(pendingKey(message.id), { method: \"resources/read\", tool: \"read\" });\n      return originalSend(message, options);\n    }\n\n    return originalSend(message, options);\n  };\n\n  Object.defineProperty(transport, \"onmessage\", {\n    configurable: true,\n    enumerable: true,\n    get: () => wrappedOnMessage,\n    set: (cb: Transport[\"onmessage\"]) => {\n      userOnMessage = cb;\n    },\n  });\n\n  return transport;\n}\n","/**\n * Build CheckContext from wrap options + mcp boundary.\n */\n\nimport type {\n  Boundary,\n  CheckContext,\n  CheckOptions,\n  CheckResult,\n  JsonObject,\n  Tailrace,\n} from \"@tailrace/core\";\n\nimport type { McpWrapOptions } from \"../types\";\n\nexport function resolveWorkflowId(opts: McpWrapOptions): string {\n  return opts.workflowId ?? \"default\";\n}\n\nexport function buildCheckContext(boundary: Boundary, opts: McpWrapOptions): CheckContext {\n  return {\n    boundary,\n    identity: { agent: opts.agent ?? \"default\" },\n    workflowId: resolveWorkflowId(opts),\n  };\n}\n\n/**\n * Run check and forward decisions to the optional wrap-level onDecision callback.\n */\nexport async function checkWithOpts<T extends string | JsonObject>(\n  tailrace: Tailrace,\n  input: T,\n  boundary: Boundary,\n  opts: McpWrapOptions,\n  checkOptions?: CheckOptions,\n): Promise<CheckResult<T>> {\n  const ctx = buildCheckContext(boundary, opts);\n  const result = await tailrace.check(input, ctx, checkOptions);\n  if (opts.onDecision !== undefined && result.decisions.length > 0) {\n    opts.onDecision(result.decisions);\n  }\n  return result;\n}\n","/**\n * JSON-RPC helpers for MCP policy error synthesis (docs/integrations.md §2).\n */\n\nimport type { PolicyViolationError } from \"@tailrace/core\";\nimport type { JSONRPCError, JSONRPCMessage, RequestId } from \"@modelcontextprotocol/sdk/types.js\";\n\n/** JSON-RPC application error for Tailrace policy blocks. */\nexport const POLICY_VIOLATION_RPC_CODE = -32001;\n\nexport function isJsonRpcRequest(\n  message: JSONRPCMessage,\n): message is JSONRPCMessage & { method: string; id: RequestId; params?: unknown } {\n  return (\n    typeof message === \"object\" &&\n    message !== null &&\n    \"method\" in message &&\n    \"id\" in message &&\n    !(\"result\" in message) &&\n    !(\"error\" in message)\n  );\n}\n\nexport function isJsonRpcResponse(\n  message: JSONRPCMessage,\n): message is JSONRPCMessage & { id: RequestId } & ({ result: unknown } | { error: unknown }) {\n  return (\n    typeof message === \"object\" &&\n    message !== null &&\n    \"id\" in message &&\n    (\"result\" in message || \"error\" in message) &&\n    !(\"method\" in message)\n  );\n}\n\n/**\n * Build a JSON-RPC error response from a PolicyViolationError.\n * Never includes the raw detected value.\n */\nexport function policyViolationRpcError(id: RequestId, err: PolicyViolationError): JSONRPCError {\n  const first = err.decisions[0];\n  const entity = first?.entity ?? \"unknown\";\n  const rule = first?.rule ?? \"unknown\";\n  return {\n    jsonrpc: \"2.0\",\n    id,\n    error: {\n      code: POLICY_VIOLATION_RPC_CODE,\n      message: `Blocked by data policy: ${entity} may not be sent to mcp (rule: ${rule})`,\n      data: {\n        type: \"policy_violation\",\n        entity,\n        rule,\n      },\n    },\n  };\n}\n","/**\n * Extract / rewrite tools/call arguments and MCP result payloads for check().\n */\n\nimport type { JsonObject, JsonValue } from \"@tailrace/core\";\n\n/** Wrap opaque values so object-scan can walk string leaves. */\nexport function asCheckable(value: unknown): string | JsonObject {\n  if (typeof value === \"string\") return value;\n  if (value === null || value === undefined) return {};\n  if (typeof value === \"object\" && !Array.isArray(value)) {\n    return value as JsonObject;\n  }\n  return { value: value as JsonValue };\n}\n\nexport function unwrapCheckable(original: unknown, checked: string | JsonObject): unknown {\n  if (typeof original === \"string\") return checked;\n  if (original === null || original === undefined) return original;\n  if (typeof original === \"object\" && !Array.isArray(original)) return checked;\n  if (\n    typeof checked === \"object\" &&\n    checked !== null &&\n    \"value\" in checked &&\n    (Array.isArray(original) || typeof original === \"number\" || typeof original === \"boolean\")\n  ) {\n    return (checked as JsonObject)[\"value\"];\n  }\n  return checked;\n}\n\nexport function getToolsCallName(params: unknown): string | undefined {\n  if (typeof params !== \"object\" || params === null) return undefined;\n  const name = (params as { name?: unknown }).name;\n  return typeof name === \"string\" ? name : undefined;\n}\n\nexport function getToolsCallArguments(params: unknown): unknown {\n  if (typeof params !== \"object\" || params === null) return {};\n  const args = (params as { arguments?: unknown }).arguments;\n  return args === undefined ? {} : args;\n}\n\n/**\n * Rewrite `params.arguments` after a successful check. Returns a shallow-cloned params object.\n */\nexport function withRewrittenArguments(params: unknown, checkedArgs: unknown): unknown {\n  if (typeof params !== \"object\" || params === null) {\n    return { arguments: checkedArgs };\n  }\n  return { ...(params as Record<string, unknown>), arguments: checkedArgs };\n}\n","/**\n * Fluent MCP helpers without core importing the MCP SDK (docs/integrations.md §2).\n */\n\nimport type { Tailrace } from \"@tailrace/core\";\nimport type { Transport } from \"@modelcontextprotocol/sdk/shared/transport.js\";\n\nimport type { McpWrapOptions, TailraceWithMcp } from \"./types\";\nimport { wrapTransport } from \"./wrap-transport\";\n\n/**\n * Attach a `transport` helper to an existing Tailrace instance.\n *\n * @example\n * ```ts\n * const tailrace = withMcp(createTailrace());\n * const transport = tailrace.transport(sseTransport, { server: \"salesforce\" });\n * ```\n */\nexport function withMcp(tailrace: Tailrace): TailraceWithMcp {\n  return Object.assign(tailrace, {\n    transport: <T extends Transport>(transport: T, opts: McpWrapOptions) =>\n      wrapTransport(tailrace, transport, opts),\n  });\n}\n"],"mappings":";AAKA,SAAS,4BAA4B;;;ACU9B,SAAS,kBAAkB,MAA8B;AAC9D,SAAO,KAAK,cAAc;AAC5B;AAEO,SAAS,kBAAkB,UAAoB,MAAoC;AACxF,SAAO;AAAA,IACL;AAAA,IACA,UAAU,EAAE,OAAO,KAAK,SAAS,UAAU;AAAA,IAC3C,YAAY,kBAAkB,IAAI;AAAA,EACpC;AACF;AAKA,eAAsB,cACpB,UACA,OACA,UACA,MACA,cACyB;AACzB,QAAM,MAAM,kBAAkB,UAAU,IAAI;AAC5C,QAAM,SAAS,MAAM,SAAS,MAAM,OAAO,KAAK,YAAY;AAC5D,MAAI,KAAK,eAAe,UAAa,OAAO,UAAU,SAAS,GAAG;AAChE,SAAK,WAAW,OAAO,SAAS;AAAA,EAClC;AACA,SAAO;AACT;;;ACnCO,IAAM,4BAA4B;AAElC,SAAS,iBACd,SACiF;AACjF,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,YAAY,WACZ,QAAQ,WACR,EAAE,YAAY,YACd,EAAE,WAAW;AAEjB;AAEO,SAAS,kBACd,SAC4F;AAC5F,SACE,OAAO,YAAY,YACnB,YAAY,QACZ,QAAQ,YACP,YAAY,WAAW,WAAW,YACnC,EAAE,YAAY;AAElB;AAMO,SAAS,wBAAwB,IAAe,KAAyC;AAC9F,QAAM,QAAQ,IAAI,UAAU,CAAC;AAC7B,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,OAAO,OAAO,QAAQ;AAC5B,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS,2BAA2B,MAAM,kCAAkC,IAAI;AAAA,MAChF,MAAM;AAAA,QACJ,MAAM;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACjDO,SAAS,YAAY,OAAqC;AAC/D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO,CAAC;AACnD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG;AACtD,WAAO;AAAA,EACT;AACA,SAAO,EAAE,MAA0B;AACrC;AAEO,SAAS,gBAAgB,UAAmB,SAAuC;AACxF,MAAI,OAAO,aAAa,SAAU,QAAO;AACzC,MAAI,aAAa,QAAQ,aAAa,OAAW,QAAO;AACxD,MAAI,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO;AACrE,MACE,OAAO,YAAY,YACnB,YAAY,QACZ,WAAW,YACV,MAAM,QAAQ,QAAQ,KAAK,OAAO,aAAa,YAAY,OAAO,aAAa,YAChF;AACA,WAAQ,QAAuB,OAAO;AAAA,EACxC;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,QAAqC;AACpE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,OAAQ,OAA8B;AAC5C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEO,SAAS,sBAAsB,QAA0B;AAC9D,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO,CAAC;AAC3D,QAAM,OAAQ,OAAmC;AACjD,SAAO,SAAS,SAAY,CAAC,IAAI;AACnC;AAKO,SAAS,uBAAuB,QAAiB,aAA+B;AACrF,MAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,WAAO,EAAE,WAAW,YAAY;AAAA,EAClC;AACA,SAAO,EAAE,GAAI,QAAoC,WAAW,YAAY;AAC1E;;;AHXO,SAAS,cACd,UACA,WACA,MACG;AACH,QAAM,UAAU,oBAAI,IAAyB;AAC7C,QAAM,eAAe,UAAU,KAAK,KAAK,SAAS;AAElD,MAAI,gBAAwC,UAAU;AAEtD,QAAM,UAAU,CAAC,SAAyB,UAAmC;AAC3E,oBAAgB,SAAS,KAAK;AAAA,EAChC;AAEA,QAAM,aAAa,CAAC,OAA0B,OAAO,EAAE;AAEvD,QAAM,mBAAmB,CAAC,SAAyB,UAAmC;AACpF,SAAK,eAAe,SAAS,KAAK;AAAA,EACpC;AAEA,iBAAe,eAAe,SAAyB,OAAyC;AAC9F,QAAI,CAAC,kBAAkB,OAAO,KAAK,EAAE,YAAY,UAAU;AACzD,cAAQ,SAAS,KAAK;AACtB;AAAA,IACF;AAEA,UAAM,MAAM,WAAW,QAAQ,EAAE;AACjC,UAAM,OAAO,QAAQ,IAAI,GAAG;AAC5B,QAAI,SAAS,QAAW;AACtB,cAAQ,SAAS,KAAK;AACtB;AAAA,IACF;AACA,YAAQ,OAAO,GAAG;AAElB,UAAM,WAAW;AAAA,MACf,MAAM;AAAA,MACN,QAAQ,KAAK;AAAA,MACb,MAAM,KAAK;AAAA,MACX,WAAW;AAAA,IACb;AAEA,QAAI;AACF,YAAM,EAAE,OAAO,IAAI,MAAM,cAAc,UAAU,YAAY,QAAQ,MAAM,GAAG,UAAU,IAAI;AAC5F,YAAM,YAAY;AAAA,QAChB,GAAG;AAAA,QACH,QAAQ,gBAAgB,QAAQ,QAAQ,MAAM;AAAA,MAChD;AACA,cAAQ,WAAW,KAAK;AAAA,IAC1B,SAAS,KAAK;AACZ,UAAI,eAAe,sBAAsB;AACvC,gBAAQ,wBAAwB,QAAQ,IAAI,GAAG,GAAG,KAAK;AACvD;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,YAAU,OAAO,OACf,SACA,YACkB;AAClB,QAAI,CAAC,iBAAiB,OAAO,GAAG;AAC9B,aAAO,aAAa,SAAS,OAAO;AAAA,IACtC;AAEA,QAAI,QAAQ,WAAW,cAAc;AACnC,YAAM,OAAO,iBAAiB,QAAQ,MAAM,KAAK;AACjD,YAAM,OAAO,sBAAsB,QAAQ,MAAM;AACjD,YAAM,WAAW;AAAA,QACf,MAAM;AAAA,QACN,QAAQ,KAAK;AAAA,QACb;AAAA,QACA,WAAW;AAAA,MACb;AAEA,UAAI;AACF,cAAM,EAAE,OAAO,IAAI,MAAM,cAAc,UAAU,YAAY,IAAI,GAAG,UAAU,IAAI;AAClF,cAAM,cAAc,gBAAgB,MAAM,MAAM;AAChD,cAAM,aAAa,uBAAuB,QAAQ,QAAQ,WAAW;AACrE,cAAM,cAAc;AAAA,UAClB,GAAG;AAAA,UACH,QAAQ;AAAA,QACV;AACA,gBAAQ,IAAI,WAAW,QAAQ,EAAE,GAAG,EAAE,QAAQ,cAAc,KAAK,CAAC;AAClE,eAAO,aAAa,aAAa,OAAO;AAAA,MAC1C,SAAS,KAAK;AACZ,YAAI,eAAe,sBAAsB;AACvC,kBAAQ,wBAAwB,QAAQ,IAAI,GAAG,CAAC;AAChD;AAAA,QACF;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW,kBAAkB;AAEvC,cAAQ,IAAI,WAAW,QAAQ,EAAE,GAAG,EAAE,QAAQ,kBAAkB,MAAM,OAAO,CAAC;AAC9E,aAAO,aAAa,SAAS,OAAO;AAAA,IACtC;AAEA,WAAO,aAAa,SAAS,OAAO;AAAA,EACtC;AAEA,SAAO,eAAe,WAAW,aAAa;AAAA,IAC5C,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,KAAK,MAAM;AAAA,IACX,KAAK,CAAC,OAA+B;AACnC,sBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AAED,SAAO;AACT;;;AItIO,SAAS,QAAQ,UAAqC;AAC3D,SAAO,OAAO,OAAO,UAAU;AAAA,IAC7B,WAAW,CAAsB,WAAc,SAC7C,cAAc,UAAU,WAAW,IAAI;AAAA,EAC3C,CAAC;AACH;","names":[]}

package/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@tailrace/mcp",
+  "version": "0.1.0",
+  "description": "Tailrace wrapper for MCP client transports: policy at the tools/call and resources/read boundary.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@tailrace/core": "0.1.0"
+  },
+  "peerDependencies": {
+    "@modelcontextprotocol/sdk": ">=1"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "expect-type": "^1.4.0",
+    "vitest": "^2.1.9"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.testd.json"
+  }
+}