@tethral/acr-mcp 2.1.1 → 2.1.3

package/dist/src/acr-state-file.d.ts

@@ -1,6 +0,0 @@
-export declare function writeAcrStateFile(agentId: string, apiUrl: string, apiKey?: string): void;
-export declare function readAcrStateFile(): {
-    agent_id: string;
-    api_url: string;
-    api_key?: string;
-} | null;

package/dist/src/acr-state-file.js

@@ -1,32 +0,0 @@
-/**
- * Writes ~/.claude/.acr-state.json so host plugins (claude-code-plugin)
- * can discover the agent_id, API URL, and API key. Fire-and-forget — never throws.
- */
-import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-export function writeAcrStateFile(agentId, apiUrl, apiKey) {
-    try {
-        const stateDir = join(homedir(), '.claude');
-        mkdirSync(stateDir, { recursive: true });
-        writeFileSync(join(stateDir, '.acr-state.json'), JSON.stringify({
-            agent_id: agentId,
-            api_url: apiUrl,
-            ...(apiKey && { api_key: apiKey }),
-        }));
-    }
-    catch { /* fire-and-forget */ }
-}
-export function readAcrStateFile() {
-    try {
-        const stateFile = join(homedir(), '.claude', '.acr-state.json');
-        const data = JSON.parse(readFileSync(stateFile, 'utf-8'));
-        if (data?.agent_id)
-            return data;
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-//# sourceMappingURL=acr-state-file.js.map

package/dist/src/acr-state-file.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"acr-state-file.js","sourceRoot":"","sources":["../../src/acr-state-file.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc,EAAE,MAAe;IAChF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAC5C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,aAAa,CACX,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EACjC,IAAI,CAAC,SAAS,CAAC;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,GAAG,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SACnC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAI,EAAE,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC"}

package/dist/src/env-detect.d.ts

@@ -1,25 +0,0 @@
-export interface EnvironmentContext {
-    device_class: 'desktop' | 'server' | 'sbc' | 'mobile' | 'unknown';
-    platform: string;
-    arch: string;
-    client_type?: string;
-    transport_type: 'stdio' | 'streamable-http';
-}
-export declare function detectEnvironment(transportType: 'stdio' | 'streamable-http'): EnvironmentContext;
-/** OS release string, useful for debugging but not stored by default. */
-export declare function getOsRelease(): string;
-/**
- * Observe the agent's composition from the MCP's vantage point.
- *
- * This is the MCP-observed side of the two-source composition pattern.
- * The MCP doesn't have a portable way to enumerate an agent's skills and
- * MCPs across all MCP hosts — that requires host integration (Claude Code
- * plugin in Phase 2, similar plugins for other hosts). In Phase 1 this
- * is a stub that returns empty: the plumbing is in place so the
- * agent_composition_sources table and the profile's composition_delta
- * computation work as soon as any observation is populated.
- *
- * Keep this pure and fast. No file I/O, no network, no parsing of
- * arbitrary files. It should always return in <1ms.
- */
-export declare function observeComposition(): Record<string, unknown>;

package/dist/src/env-detect.js

@@ -1,52 +0,0 @@
-/**
- * Auto-detect execution environment for ACR observability.
- * Captures device class, platform, architecture at startup.
- * Env var overrides: ACR_DEVICE_CLASS, ACR_PLATFORM, ACR_ARCH.
- */
-import { totalmem, release } from 'node:os';
-function inferDeviceClass() {
-    const override = process.env.ACR_DEVICE_CLASS;
-    if (override)
-        return override;
-    const memGB = totalmem() / (1024 ** 3);
-    if (memGB < 2)
-        return 'sbc';
-    if (memGB < 4)
-        return 'mobile';
-    return 'desktop';
-}
-export function detectEnvironment(transportType) {
-    return {
-        device_class: inferDeviceClass(),
-        platform: process.env.ACR_PLATFORM ?? process.platform,
-        arch: process.env.ACR_ARCH ?? process.arch,
-        transport_type: transportType,
-    };
-}
-/** OS release string, useful for debugging but not stored by default. */
-export function getOsRelease() {
-    return release();
-}
-/**
- * Observe the agent's composition from the MCP's vantage point.
- *
- * This is the MCP-observed side of the two-source composition pattern.
- * The MCP doesn't have a portable way to enumerate an agent's skills and
- * MCPs across all MCP hosts — that requires host integration (Claude Code
- * plugin in Phase 2, similar plugins for other hosts). In Phase 1 this
- * is a stub that returns empty: the plumbing is in place so the
- * agent_composition_sources table and the profile's composition_delta
- * computation work as soon as any observation is populated.
- *
- * Keep this pure and fast. No file I/O, no network, no parsing of
- * arbitrary files. It should always return in <1ms.
- */
-export function observeComposition() {
-    // Phase 1: MCP observation returns an empty composition. Phase 2's
-    // host plugins (Claude Code, Cursor, etc.) populate the mcp_observed
-    // source directly by calling the server API, bypassing this function.
-    // This keeps the MCP compute-thin and the observation source
-    // correctly attributed to whichever host integration produced it.
-    return {};
-}
-//# sourceMappingURL=env-detect.js.map

package/dist/src/env-detect.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env-detect.js","sourceRoot":"","sources":["../../src/env-detect.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAU5C,SAAS,gBAAgB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,IAAI,QAAQ;QAAE,OAAO,QAA8C,CAAC;IAEpE,MAAM,KAAK,GAAG,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,aAA0C;IAE1C,OAAO;QACL,YAAY,EAAE,gBAAgB,EAAE;QAChC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ;QACtD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI;QAC1C,cAAc,EAAE,aAAa;KAC9B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB;IAChC,mEAAmE;IACnE,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,kEAAkE;IAClE,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/src/http.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/src/http.js

@@ -1,112 +0,0 @@
-#!/usr/bin/env node
-/**
- * ACR MCP server — Streamable HTTP entry point.
- * For browser-based clients (claude.ai) and remote MCP connections.
- * For stdio transport, see index.ts.
- */
-import { createServer } from 'node:http';
-import { randomUUID } from 'node:crypto';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { createAcrServer } from './server.js';
-import { SessionState } from './session-state.js';
-const PORT = parseInt(process.env.ACR_MCP_HTTP_PORT ?? '3001', 10);
-const AUTH_TOKEN = process.env.ACR_MCP_AUTH_TOKEN;
-const STATELESS = process.env.ACR_MCP_STATELESS === 'true';
-// Track active transports per session for cleanup
-const sessions = new Map();
-function createTransport() {
-    const transport = new StreamableHTTPServerTransport({
-        sessionIdGenerator: STATELESS ? undefined : () => randomUUID(),
-        onsessioninitialized: (sessionId) => {
-            sessions.set(sessionId, transport);
-        },
-    });
-    return transport;
-}
-const httpServer = createServer(async (req, res) => {
-    const url = new URL(req.url ?? '/', `http://localhost:${PORT}`);
-    // CORS headers for browser access
-    res.setHeader('Access-Control-Allow-Origin', '*');
-    res.setHeader('Access-Control-Allow-Methods', 'GET, POST, DELETE, OPTIONS');
-    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, Mcp-Session-Id');
-    res.setHeader('Access-Control-Expose-Headers', 'Mcp-Session-Id');
-    if (req.method === 'OPTIONS') {
-        res.writeHead(204);
-        res.end();
-        return;
-    }
-    // Health check
-    if (url.pathname === '/health') {
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify({ status: 'ok', sessions: sessions.size }));
-        return;
-    }
-    // Only handle /mcp endpoint
-    if (url.pathname !== '/mcp') {
-        res.writeHead(404, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify({ error: 'Not found. Use /mcp for MCP protocol.' }));
-        return;
-    }
-    // Optional bearer auth
-    if (AUTH_TOKEN) {
-        const auth = req.headers.authorization;
-        if (!auth || auth !== `Bearer ${AUTH_TOKEN}`) {
-            res.writeHead(401, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'Unauthorized' }));
-            return;
-        }
-    }
-    // Route by session: existing session or new initialization
-    const sessionId = req.headers['mcp-session-id'];
-    if (sessionId && sessions.has(sessionId)) {
-        // Existing session — route to its transport
-        const transport = sessions.get(sessionId);
-        await transport.handleRequest(req, res);
-        return;
-    }
-    if (req.method === 'POST' && !sessionId) {
-        // New session — create transport with its own session state, connect server
-        const transport = createTransport();
-        const session = new SessionState('streamable-http');
-        const server = createAcrServer({ session });
-        transport.onclose = () => {
-            const sid = transport.sessionId;
-            if (sid)
-                sessions.delete(sid);
-            server.close().catch((err) => { console.error('Failed to close MCP server on session end', err); });
-        };
-        await server.connect(transport);
-        await transport.handleRequest(req, res);
-        return;
-    }
-    if (req.method === 'DELETE' && sessionId) {
-        // Session cleanup
-        const transport = sessions.get(sessionId);
-        if (transport) {
-            await transport.close();
-            sessions.delete(sessionId);
-        }
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify({ closed: true }));
-        return;
-    }
-    // Unknown session ID
-    res.writeHead(404, { 'Content-Type': 'application/json' });
-    res.end(JSON.stringify({ error: 'Session not found' }));
-});
-httpServer.listen(PORT, () => {
-    console.error(`ACR MCP HTTP server listening on port ${PORT}`);
-    console.error(`  Endpoint: http://localhost:${PORT}/mcp`);
-    console.error(`  Mode: ${STATELESS ? 'stateless' : 'stateful (session-based)'}`);
-    if (AUTH_TOKEN)
-        console.error('  Auth: bearer token required');
-});
-// Graceful shutdown
-process.on('SIGTERM', () => {
-    console.error('Shutting down...');
-    for (const transport of sessions.values()) {
-        transport.close().catch((err) => { console.error('Failed to close transport during shutdown', err); });
-    }
-    httpServer.close();
-});
-//# sourceMappingURL=http.js.map

package/dist/src/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/http.ts"],"names":[],"mappings":";AACA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AACnE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC;AAE3D,kDAAkD;AAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;AAElE,SAAS,eAAe;IACtB,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE;QAC9D,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE;YAClC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;KACF,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAEhE,kCAAkC;IAClC,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAClD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;IAC5E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,6CAA6C,CAAC,CAAC;IAC7F,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,gBAAgB,CAAC,CAAC;IAEjE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,eAAe;IACf,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,uBAAuB;IACvB,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,UAAU,UAAU,EAAE,EAAE,CAAC;YAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;IAEtE,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,4CAA4C;QAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,4EAA4E;QAC5E,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAE5C,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YACvB,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC;YAChC,IAAI,GAAG;gBAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,CAAC,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;QACzC,kBAAkB;QAClB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IAC3B,OAAO,CAAC,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,KAAK,CAAC,gCAAgC,IAAI,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,WAAW,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACjF,IAAI,UAAU;QAAE,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,oBAAoB;AACpB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;IACzB,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/src/index.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/src/index.js

@@ -1,17 +0,0 @@
-#!/usr/bin/env node
-/**
- * ACR MCP server — stdio entry point.
- * For HTTP transport, see http.ts.
- */
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { createAcrServer } from './server.js';
-async function main() {
-    const server = createAcrServer();
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
-}
-main().catch((err) => {
-    console.error('ACR MCP server failed to start:', err);
-    process.exit(1);
-});
-//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/middleware/correlation-window.d.ts

@@ -1,68 +0,0 @@
-/**
- * Correlation window for the ACR MCP.
- *
- * A passive in-process buffer of ~60 seconds of recent receipt correlation
- * keys. The window is used at receipt emit time to tag a new receipt with a
- * `preceded_by` link when it's part of the same in-flight workflow as a
- * recent prior receipt. Beyond 60 seconds, correlation is the server's job.
- *
- * Design choices and their rationale (see proposals/mcp-compute-boundary.md
- * constraint #3):
- *
- * - In-process only. No disk, no persistence, no tmpfile. The window is lost
- *   on process restart, which is fine: the authoritative record lives on
- *   the server, and 60 seconds is short enough that restart rarely matters.
- * - Passive. No pattern matching forward or reverse. No aggregation. No
- *   prediction. The window holds correlation keys and nothing else.
- * - Eager eviction on insert. No setInterval, no background sweeper, no
- *   timers. Eviction runs once per insert, O(n) over at-most-hundreds of
- *   entries. No background work.
- * - One window per session. Instantiated in server.ts and passed by
- *   reference into the tools that need it. Not a module-level singleton, so
- *   the HTTP transport with concurrent sessions doesn't share state across
- *   agents.
- * - Framed as a privacy + lightweight design choice. Users get useful
- *   interaction data without persistent surveillance state on their machine.
- */
-export interface CorrelationEntry {
-    receipt_id: string;
-    chain_id: string | null;
-    target_system_id: string;
-    /** Unix ms timestamp when the receipt was produced. */
-    created_at_ms: number;
-}
-export declare class CorrelationWindow {
-    private readonly entries;
-    private readonly windowMs;
-    private readonly maxEntries;
-    constructor(windowMs?: number, maxEntries?: number);
-    /**
-     * Record a receipt's correlation keys into the window. Runs eviction of
-     * expired entries on every insert — no background sweeper.
-     *
-     * If the window is at its hard cap after eviction (indicates either a
-     * very high tool-call rate or a bug), the oldest entries are dropped.
-     * This is a safety net, not a normal path.
-     */
-    record(entry: CorrelationEntry): void;
-    /**
-     * Find a recent receipt that should be linked as `preceded_by` for a new
-     * receipt. Prefers the most recent entry in the same chain_id. Returns the
-     * target_system_id of the match (that's what `preceded_by` stores), or
-     * null if nothing links.
-     *
-     * If currentChainId is null, we don't attempt cross-chain linking — the
-     * agent didn't declare a chain, so the server will reconstruct any
-     * linkage from its full history.
-     */
-    findPrecededBy(currentChainId: string | null, nowMs: number): string | null;
-    /**
-     * Evict entries older than the window. Called on every record() and
-     * every findPrecededBy() call. No background timers.
-     */
-    private evictExpired;
-    /** Current number of entries in the window. Used by tests and observability. */
-    size(): number;
-    /** Clear the window. Used by tests; not expected in production code paths. */
-    clear(): void;
-}

package/dist/src/middleware/correlation-window.js

@@ -1,113 +0,0 @@
-/**
- * Correlation window for the ACR MCP.
- *
- * A passive in-process buffer of ~60 seconds of recent receipt correlation
- * keys. The window is used at receipt emit time to tag a new receipt with a
- * `preceded_by` link when it's part of the same in-flight workflow as a
- * recent prior receipt. Beyond 60 seconds, correlation is the server's job.
- *
- * Design choices and their rationale (see proposals/mcp-compute-boundary.md
- * constraint #3):
- *
- * - In-process only. No disk, no persistence, no tmpfile. The window is lost
- *   on process restart, which is fine: the authoritative record lives on
- *   the server, and 60 seconds is short enough that restart rarely matters.
- * - Passive. No pattern matching forward or reverse. No aggregation. No
- *   prediction. The window holds correlation keys and nothing else.
- * - Eager eviction on insert. No setInterval, no background sweeper, no
- *   timers. Eviction runs once per insert, O(n) over at-most-hundreds of
- *   entries. No background work.
- * - One window per session. Instantiated in server.ts and passed by
- *   reference into the tools that need it. Not a module-level singleton, so
- *   the HTTP transport with concurrent sessions doesn't share state across
- *   agents.
- * - Framed as a privacy + lightweight design choice. Users get useful
- *   interaction data without persistent surveillance state on their machine.
- */
-/** Defaults to 60 seconds. Overridable for tests only. */
-const DEFAULT_WINDOW_MS = 60_000;
-/**
- * Hard cap on entries held in the window, as a safety net in case eviction
- * has a bug or the MCP is under unusual load. 500 is plenty for a 60s
- * window at realistic tool-call rates.
- */
-const DEFAULT_MAX_ENTRIES = 500;
-export class CorrelationWindow {
-    entries = new Map();
-    windowMs;
-    maxEntries;
-    constructor(windowMs = DEFAULT_WINDOW_MS, maxEntries = DEFAULT_MAX_ENTRIES) {
-        this.windowMs = windowMs;
-        this.maxEntries = maxEntries;
-    }
-    /**
-     * Record a receipt's correlation keys into the window. Runs eviction of
-     * expired entries on every insert — no background sweeper.
-     *
-     * If the window is at its hard cap after eviction (indicates either a
-     * very high tool-call rate or a bug), the oldest entries are dropped.
-     * This is a safety net, not a normal path.
-     */
-    record(entry) {
-        this.evictExpired(entry.created_at_ms);
-        this.entries.set(entry.receipt_id, entry);
-        // Hard-cap safety: if we're somehow over the limit, drop oldest.
-        if (this.entries.size > this.maxEntries) {
-            const excess = this.entries.size - this.maxEntries;
-            let dropped = 0;
-            for (const key of this.entries.keys()) {
-                if (dropped >= excess)
-                    break;
-                this.entries.delete(key);
-                dropped++;
-            }
-        }
-    }
-    /**
-     * Find a recent receipt that should be linked as `preceded_by` for a new
-     * receipt. Prefers the most recent entry in the same chain_id. Returns the
-     * target_system_id of the match (that's what `preceded_by` stores), or
-     * null if nothing links.
-     *
-     * If currentChainId is null, we don't attempt cross-chain linking — the
-     * agent didn't declare a chain, so the server will reconstruct any
-     * linkage from its full history.
-     */
-    findPrecededBy(currentChainId, nowMs) {
-        if (!currentChainId)
-            return null;
-        this.evictExpired(nowMs);
-        // Walk entries newest-first by iterating in reverse insertion order.
-        // Map preserves insertion order, so the newest entry is last. Convert
-        // to an array and scan from the end.
-        const allEntries = Array.from(this.entries.values());
-        for (let i = allEntries.length - 1; i >= 0; i--) {
-            const entry = allEntries[i];
-            if (entry.chain_id === currentChainId) {
-                return entry.target_system_id;
-            }
-        }
-        return null;
-    }
-    /**
-     * Evict entries older than the window. Called on every record() and
-     * every findPrecededBy() call. No background timers.
-     */
-    evictExpired(nowMs) {
-        const cutoff = nowMs - this.windowMs;
-        for (const [key, entry] of this.entries) {
-            if (entry.created_at_ms < cutoff) {
-                this.entries.delete(key);
-            }
-        }
-    }
-    /** Current number of entries in the window. Used by tests and observability. */
-    size() {
-        return this.entries.size;
-    }
-    /** Clear the window. Used by tests; not expected in production code paths. */
-    clear() {
-        this.entries.clear();
-    }
-}
-//# sourceMappingURL=correlation-window.js.map

package/dist/src/middleware/correlation-window.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"correlation-window.js","sourceRoot":"","sources":["../../../src/middleware/correlation-window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAUH,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,OAAO,iBAAiB;IACX,OAAO,GAAkC,IAAI,GAAG,EAAE,CAAC;IACnD,QAAQ,CAAS;IACjB,UAAU,CAAS;IAEpC,YAAY,WAAmB,iBAAiB,EAAE,aAAqB,mBAAmB;QACxF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAuB;QAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE1C,iEAAiE;QACjE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;YACnD,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACtC,IAAI,OAAO,IAAI,MAAM;oBAAE,MAAM;gBAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,cAAc,CAAC,cAA6B,EAAE,KAAa;QACzD,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAEzB,qEAAqE;QACrE,sEAAsE;QACtE,qCAAqC;QACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC,gBAAgB,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,KAAa;QAChC,MAAM,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/src/middleware/self-log.d.ts

@@ -1,22 +0,0 @@
-/**
- * Self-logging middleware for ACR MCP tools.
- * Wraps each tool handler to automatically log timing and status,
- * without relying on the LLM to call log_interaction.
- *
- * Self-logged receipts use source='server' to distinguish from
- * LLM-initiated logs (source='agent').
- */
-import type { SessionState } from '../session-state.js';
-type ToolResult = {
-    content: Array<{
-        type: string;
-        text: string;
-    }>;
-};
-type ToolHandler = (params: Record<string, unknown>, extra: unknown) => Promise<ToolResult>;
-/**
- * Wrap a tool handler with automatic interaction logging.
- * Fires a non-blocking POST to the receipts API after each call.
- */
-export declare function withSelfLog(toolName: string, handler: ToolHandler, getState: () => SessionState, apiUrl: string): ToolHandler;
-export {};

package/dist/src/middleware/self-log.js

@@ -1,72 +0,0 @@
-import { defaultSession } from '../session-state.js';
-// Re-entrancy guard to prevent the self-log POST from triggering another self-log
-let selfLogging = false;
-/**
- * Wrap a tool handler with automatic interaction logging.
- * Fires a non-blocking POST to the receipts API after each call.
- */
-export function withSelfLog(toolName, handler, getState, apiUrl) {
-    return async (params, extra) => {
-        const startMs = Date.now();
-        let status = 'success';
-        let result;
-        try {
-            result = await handler(params, extra);
-        }
-        catch (err) {
-            status = 'failure';
-            throw err;
-        }
-        finally {
-            // Fire-and-forget self-log (never block or fail the tool call)
-            if (!selfLogging) {
-                const durationMs = Date.now() - startMs;
-                const state = getState();
-                // Tools currently store agentId on defaultSession (via state.ts compat layer).
-                // Check both the provided session and defaultSession as fallback.
-                const agentId = state.agentId ?? defaultSession.agentId;
-                if (agentId) {
-                    selfLogging = true;
-                    fireAndForgetLog(apiUrl, agentId, toolName, status, durationMs, state.transportType)
-                        .finally(() => { selfLogging = false; });
-                }
-            }
-        }
-        return result;
-    };
-}
-async function fireAndForgetLog(apiUrl, agentId, toolName, status, durationMs, transportType) {
-    try {
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), 2000);
-        const res = await fetch(`${apiUrl}/api/v1/receipts`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            signal: controller.signal,
-            body: JSON.stringify({
-                emitter: {
-                    agent_id: agentId,
-                    provider_class: 'unknown',
-                },
-                target: {
-                    system_id: `mcp:acr-registry`,
-                    system_type: 'mcp_server',
-                },
-                interaction: {
-                    category: 'tool_call',
-                    status,
-                    duration_ms: durationMs,
-                    request_timestamp_ms: Date.now() - durationMs,
-                },
-                anomaly: { flagged: false },
-                transport_type: transportType,
-                source: 'server',
-            }),
-        });
-        clearTimeout(timeout);
-    }
-    catch {
-        // Silently ignore — self-logging must never break tool calls
-    }
-}
-//# sourceMappingURL=self-log.js.map

package/dist/src/middleware/self-log.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"self-log.js","sourceRoot":"","sources":["../../../src/middleware/self-log.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,kFAAkF;AAClF,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,OAAoB,EACpB,QAA4B,EAC5B,MAAc;IAEd,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,MAAM,GAA0B,SAAS,CAAC;QAC9C,IAAI,MAAkB,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBACxC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACzB,+EAA+E;gBAC/E,kEAAkE;gBAClE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC;gBAExD,IAAI,OAAO,EAAE,CAAC;oBACZ,WAAW,GAAG,IAAI,CAAC;oBACnB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;yBACjF,OAAO,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,OAAe,EACf,QAAgB,EAChB,MAAc,EACd,UAAkB,EAClB,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,kBAAkB,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE;oBACP,QAAQ,EAAE,OAAO;oBACjB,cAAc,EAAE,SAAS;iBAC1B;gBACD,MAAM,EAAE;oBACN,SAAS,EAAE,kBAAkB;oBAC7B,WAAW,EAAE,YAAY;iBAC1B;gBACD,WAAW,EAAE;oBACX,QAAQ,EAAE,WAAW;oBACrB,MAAM;oBACN,WAAW,EAAE,UAAU;oBACvB,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;iBAC9C;gBACD,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC3B,cAAc,EAAE,aAAa;gBAC7B,MAAM,EAAE,QAAQ;aACjB,CAAC;SACH,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC"}

package/dist/src/server.d.ts

@@ -1,17 +0,0 @@
-/**
- * Shared server factory for the ACR MCP server.
- * Creates and configures the McpServer with all tools registered.
- * Used by both stdio (index.ts) and HTTP (http.ts) entry points.
- */
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { CorrelationWindow } from './middleware/correlation-window.js';
-import { SessionState } from './session-state.js';
-export interface AcrServerOptions {
-    apiUrl?: string;
-    resolverUrl?: string;
-    /** Session state for this server instance. Defaults to the stdio singleton. */
-    session?: SessionState;
-    /** Correlation window for in-flight receipt linkage. One per session. */
-    correlationWindow?: CorrelationWindow;
-}
-export declare function createAcrServer(options?: AcrServerOptions): McpServer;