@traceglass/mcp 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rahul Bhardwaj
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,62 @@
+# @traceglass/mcp
+
+Record **Model Context Protocol** tool calls as [traceglass](https://www.npmjs.com/package/traceglass)
+runs. One MCP session becomes one hash-chained, signed record: every `tools/call` is
+chained and journaled the moment it returns, so the tamper window closes at capture
+time — not at ingest.
+
+```bash
+npm install @traceglass/mcp
+```
+
+## Wrap the client — every tool it calls is recorded
+
+```ts
+import { startMcpRecording } from '@traceglass/mcp';
+
+const rec = startMcpRecording({ name: 'support agent — ticket 8812', currency: 'INR' });
+const mcp = rec.wrapClient(client); // your @modelcontextprotocol/sdk Client
+
+rec.step({ type: 'user_input', label: 'Refund request', input: { ticket: '8812' } });
+await mcp.callTool({ name: 'lookup_order', arguments: { id: '4471' } });
+await mcp.callTool({ name: 'issue_refund', arguments: { id: '4471', amount: 1200 } });
+rec.step({ type: 'final_output', label: 'Refund issued' });
+
+const run = await rec.end(); // verified, signed (if `traceglass keygen` was run), stored
+console.log(run?.id, run?.runHash);
+```
+
+`wrapClient` returns the same client type — pass it wherever the original went. Replay
+with `npx traceglass open --id <runId>`, verify with `npx traceglass verify <runId>`.
+
+## What lands in each step
+
+| Step field    | From                                                                           |
+| ------------- | ------------------------------------------------------------------------------ |
+| `type`        | `tool_call`, or `error` when the result has `isError: true` or the call throws |
+| `toolName`    | the `tools/call` tool name                                                     |
+| `input`       | the call's `arguments` (`{}` when a tool takes none)                           |
+| `output`      | the whole result, verbatim                                                     |
+| `dataPayload` | `structuredContent` — the data the agent actually read                         |
+| `tokens`      | `_meta["traceglass/tokens"]` (or the `usage` hook)                             |
+| `cost`        | `_meta["traceglass/cost"]` (or the `usage` hook)                               |
+
+MCP has no convention for tokens or cost. If your server reports them somewhere else,
+pass `usage: ({ result }) => ({ tokens, cost })` and it wins over the `_meta` reading.
+
+## Server side
+
+```ts
+server.registerTool('summarize', schema, rec.wrapToolHandler('summarize', handler));
+```
+
+- **Order is capture order.** Concurrent tool calls are chained as they complete and are
+  never re-sorted afterwards — re-ordering a sealed chain is the one thing a flight
+  recorder must not be able to do.
+- **Crash-safe:** if the process dies mid-session, `npx traceglass recover` finalizes the
+  journal into a `failed` run whose chain still verifies up to the crash point.
+- **Local-first:** everything is written under `~/.traceglass` (or `TRACEGLASS_HOME`).
+  Zero network egress, and no production dependency outside traceglass itself — this
+  package speaks MCP structurally, so it works with whatever MCP SDK you already have.
+- `end()` returns `null` for a session in which nothing was recorded: an empty session is
+  not evidence of anything, and no journal is left behind for `recover` to trip over.

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { startMcpRecording, type McpRecorder, type McpToolCallRecord, type McpUsageContext, type StartMcpRecordingOptions, } from './recorder.js';
+export { COST_META_KEYS, TOKENS_META_KEYS, dataPayloadFromResult, errorOutput, isErrorResult, labelForTool, usageFromResult, } from './map.js';
+export type { CallToolParams, CallToolResultLike, McpToolCaller, McpUsage } from './mcp-types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+// Public barrel for @traceglass/mcp.
+export { startMcpRecording, } from './recorder.js';
+export { COST_META_KEYS, TOKENS_META_KEYS, dataPayloadFromResult, errorOutput, isErrorResult, labelForTool, usageFromResult, } from './map.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,OAAO,EACL,iBAAiB,GAKlB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,UAAU,CAAC"}

package/dist/map.d.ts

@@ -0,0 +1,40 @@
+import type { McpUsage } from './mcp-types.js';
+/**
+ * MCP → traceglass step mapping.
+ *
+ * MCP has no convention for cost or tokens, so this reads two OPTIONAL `_meta`
+ * keys on the tool result. `_meta` keys are namespaced by the spec, hence the
+ * `traceglass/` prefix; the dotted spelling is accepted too because plenty of
+ * emitters reach for it out of habit.
+ *
+ * Anything a server reports elsewhere is reachable through the `usage` hook on
+ * `startMcpRecording` — this module stays free of per-server guesswork.
+ */
+export declare const TOKENS_META_KEYS: readonly ["traceglass/tokens", "traceglass.tokens"];
+export declare const COST_META_KEYS: readonly ["traceglass/cost", "traceglass.cost"];
+/** Read `_meta`-reported tokens/cost off a tool result. Absent members stay absent. */
+export declare function usageFromResult(result: unknown): McpUsage;
+/**
+ * Did the tool answer with a protocol-level error? MCP reports tool failures
+ * in-band (`isError: true` on a successful JSON-RPC response), so a failed tool
+ * call is invisible unless this flag is read.
+ */
+export declare function isErrorResult(result: unknown): boolean;
+/**
+ * The data the agent actually received, for the compliance-critical
+ * `dataPayload` field: `structuredContent` when the tool returns it, otherwise
+ * undefined (the full result is already recorded verbatim as `output`).
+ */
+export declare function dataPayloadFromResult(result: unknown): unknown;
+/** Human-readable step label, matching the SDK's `Tool: <name>` convention. */
+export declare function labelForTool(toolName: string): string;
+/**
+ * Normalize a thrown value into something JSON-serializable for the record.
+ * A transport rejection must still produce a step, so this never throws:
+ * a circular or unserializable value degrades to a placeholder.
+ */
+export declare function errorOutput(err: unknown): {
+    error: string;
+    name?: string;
+};
+//# sourceMappingURL=map.d.ts.map

package/dist/map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAsB,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,gBAAgB,qDAAsD,CAAC;AACpF,eAAO,MAAM,cAAc,iDAAkD,CAAC;AAoB9E,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAUzD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAG9D;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAW1E"}

package/dist/map.js

@@ -0,0 +1,85 @@
+/**
+ * MCP → traceglass step mapping.
+ *
+ * MCP has no convention for cost or tokens, so this reads two OPTIONAL `_meta`
+ * keys on the tool result. `_meta` keys are namespaced by the spec, hence the
+ * `traceglass/` prefix; the dotted spelling is accepted too because plenty of
+ * emitters reach for it out of habit.
+ *
+ * Anything a server reports elsewhere is reachable through the `usage` hook on
+ * `startMcpRecording` — this module stays free of per-server guesswork.
+ */
+export const TOKENS_META_KEYS = ['traceglass/tokens', 'traceglass.tokens'];
+export const COST_META_KEYS = ['traceglass/cost', 'traceglass.cost'];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** A finite, non-negative number, or undefined. Step fields reject the rest. */
+function nonNegative(value) {
+    const n = typeof value === 'number' ? value : typeof value === 'string' ? Number(value) : NaN;
+    return Number.isFinite(n) && n >= 0 ? n : undefined;
+}
+function firstOf(meta, keys) {
+    for (const key of keys) {
+        const n = nonNegative(meta[key]);
+        if (n !== undefined)
+            return n;
+    }
+    return undefined;
+}
+/** Read `_meta`-reported tokens/cost off a tool result. Absent members stay absent. */
+export function usageFromResult(result) {
+    if (!isRecord(result))
+        return {};
+    const meta = result._meta;
+    if (!isRecord(meta))
+        return {};
+    const tokens = firstOf(meta, TOKENS_META_KEYS);
+    const cost = firstOf(meta, COST_META_KEYS);
+    return {
+        ...(tokens !== undefined ? { tokens } : {}),
+        ...(cost !== undefined ? { cost } : {}),
+    };
+}
+/**
+ * Did the tool answer with a protocol-level error? MCP reports tool failures
+ * in-band (`isError: true` on a successful JSON-RPC response), so a failed tool
+ * call is invisible unless this flag is read.
+ */
+export function isErrorResult(result) {
+    return isRecord(result) && result.isError === true;
+}
+/**
+ * The data the agent actually received, for the compliance-critical
+ * `dataPayload` field: `structuredContent` when the tool returns it, otherwise
+ * undefined (the full result is already recorded verbatim as `output`).
+ */
+export function dataPayloadFromResult(result) {
+    if (!isRecord(result))
+        return undefined;
+    return result.structuredContent;
+}
+/** Human-readable step label, matching the SDK's `Tool: <name>` convention. */
+export function labelForTool(toolName) {
+    return `Tool: ${toolName}`;
+}
+/**
+ * Normalize a thrown value into something JSON-serializable for the record.
+ * A transport rejection must still produce a step, so this never throws:
+ * a circular or unserializable value degrades to a placeholder.
+ */
+export function errorOutput(err) {
+    if (err instanceof Error) {
+        return { error: err.message, name: err.name };
+    }
+    if (typeof err === 'string')
+        return { error: err };
+    try {
+        const json = JSON.stringify(err);
+        return { error: json ?? `[${typeof err}]` };
+    }
+    catch {
+        return { error: '[unserializable error]' };
+    }
+}
+//# sourceMappingURL=map.js.map

package/dist/map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map.js","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAU,CAAC;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAU,CAAC;AAE9E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9F,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,IAA6B,EAAE,IAAuB;IACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAI,MAA6B,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe;IAC3C,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAK,MAA6B,CAAC,OAAO,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAQ,MAA6B,CAAC,iBAAiB,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,SAAS,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/mcp-types.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Structural types for the Model Context Protocol shapes this adapter touches.
+ *
+ * Deliberately NOT imported from `@modelcontextprotocol/sdk`. This package adds
+ * no production dependency of its own, so:
+ *   - it records whatever MCP SDK version (or hand-rolled client/server) the
+ *     host application already has, instead of pinning a second copy, and
+ *   - the supply chain behind an audit record stays two packages wide.
+ *
+ * Compatibility with the real SDK signatures is asserted at compile time in
+ * `type-compat.ts` rather than assumed.
+ */
+/** `tools/call` request params. Extra members are preserved, never required. */
+export interface CallToolParams {
+    name: string;
+    arguments?: Record<string, unknown> | undefined;
+    _meta?: Record<string, unknown> | undefined;
+}
+/**
+ * A `tools/call` result. Every member is optional: a tool may answer with
+ * content, with `structuredContent`, with both, or with neither.
+ */
+export interface CallToolResultLike {
+    content?: unknown;
+    structuredContent?: unknown;
+    isError?: boolean;
+    _meta?: Record<string, unknown> | undefined;
+}
+/**
+ * Anything that can invoke an MCP tool — an SDK `Client`, a transport shim, a
+ * fake in a test. Method syntax (not a property) is deliberate: TypeScript
+ * checks method parameters bivariantly, so a real client whose `callTool` takes
+ * extra optional arguments (a result schema, request options) still satisfies
+ * this interface.
+ */
+export interface McpToolCaller {
+    callTool(params: CallToolParams, ...rest: never[]): Promise<unknown>;
+}
+/** Token/cost figures for one tool call, when the server reports any. */
+export interface McpUsage {
+    tokens?: number;
+    cost?: number;
+}
+//# sourceMappingURL=mcp-types.d.ts.map

package/dist/mcp-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-types.d.ts","sourceRoot":"","sources":["../src/mcp-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CAC7C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,yEAAyE;AACzE,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/mcp-types.js

@@ -0,0 +1,14 @@
+/**
+ * Structural types for the Model Context Protocol shapes this adapter touches.
+ *
+ * Deliberately NOT imported from `@modelcontextprotocol/sdk`. This package adds
+ * no production dependency of its own, so:
+ *   - it records whatever MCP SDK version (or hand-rolled client/server) the
+ *     host application already has, instead of pinning a second copy, and
+ *   - the supply chain behind an audit record stays two packages wide.
+ *
+ * Compatibility with the real SDK signatures is asserted at compile time in
+ * `type-compat.ts` rather than assumed.
+ */
+export {};
+//# sourceMappingURL=mcp-types.js.map

package/dist/mcp-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-types.js","sourceRoot":"","sources":["../src/mcp-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/recorder.d.ts

@@ -0,0 +1,86 @@
+import type { Run, Step } from '@traceglass/core';
+import { type RecordStepInput } from '@traceglass/sdk';
+import type { CallToolParams, McpToolCaller, McpUsage } from './mcp-types.js';
+/**
+ * MCP session recorder.
+ *
+ * One MCP session becomes one traceglass run: every `tools/call` is a
+ * `tool_call` step, hash-chained the moment it returns and journaled to disk
+ * before the caller gets its result back. The chain is therefore fixed at
+ * capture time — the same guarantee `@traceglass/sdk` gives, reached without
+ * the host application writing any per-tool recording code.
+ *
+ * Steps land in COMPLETION order, which is the order the agent actually learned
+ * things. Concurrent tool calls are not re-sorted by start time afterwards:
+ * re-ordering a chain after the fact is exactly what a flight recorder must not
+ * be able to do.
+ */
+/** Context handed to the `usage` hook for one completed call. */
+export interface McpUsageContext {
+    toolName: string;
+    params: CallToolParams;
+    /** The tool result, or undefined when the call threw. */
+    result: unknown;
+}
+export interface StartMcpRecordingOptions {
+    /** Run name. Defaults to `MCP session`. */
+    name?: string;
+    /** Explicit run id; defaults to `mcp-<date>-<hex>`. */
+    id?: string;
+    currency?: string;
+    /** traceglass data dir; `null` for a memory-only recording. See the SDK. */
+    dir?: string | null;
+    /** Per-leaf commitments so payloads can be redacted later (default on). */
+    redactable?: boolean;
+    /** Built-in redaction patterns applied at capture time, before hashing. */
+    redactPatterns?: string[];
+    /**
+     * Pull tokens/cost out of a result when your server reports them somewhere
+     * other than the `_meta` keys `map.ts` knows about. Returning `undefined`
+     * (or omitting a member) falls back to the `_meta` reading.
+     */
+    usage?: (ctx: McpUsageContext) => McpUsage | undefined;
+}
+/** One tool invocation to record. Everything except `name` is optional. */
+export interface McpToolCallRecord {
+    /** Tool name as sent in `tools/call`. */
+    name: string;
+    arguments?: Record<string, unknown> | undefined;
+    /** The tool result, when the call completed. */
+    result?: unknown;
+    /** The thrown value, when the call failed at the transport/protocol level. */
+    error?: unknown;
+    /** ISO 8601 start time; defaults to now. */
+    startedAt?: string;
+    durationMs?: number;
+    /** Overrides anything derived from the result. */
+    usage?: McpUsage;
+}
+export interface McpRecorder {
+    readonly runId: string;
+    /** Record one tool invocation. Returns the chained step. */
+    recordToolCall(call: McpToolCallRecord): Step;
+    /**
+     * Wrap an MCP client so every `tools/call` it makes is recorded. The returned
+     * value is the same client type — pass it wherever the original went.
+     */
+    wrapClient<T extends McpToolCaller>(client: T): T;
+    /**
+     * Server side: wrap one tool handler so every invocation it serves is
+     * recorded. `args` is the tool's argument object as MCP delivers it.
+     */
+    wrapToolHandler<A extends unknown[], R>(name: string, handler: (...args: A) => R | Promise<R>): (...args: A) => Promise<R>;
+    /** Record a non-tool step (user input, final output, an approval, ...). */
+    step(input: RecordStepInput): Step;
+    /**
+     * Finalize: totals, warnings, anchor, signature (if `traceglass keygen` was
+     * run), store. Returns `null` for a session in which nothing was recorded —
+     * an empty session is not evidence of anything, and a run with no steps
+     * cannot be anchored (SPEC §6.1).
+     */
+    end(opts?: {
+        status?: 'completed' | 'failed';
+    }): Promise<Run | null>;
+}
+export declare function startMcpRecording(opts?: StartMcpRecordingOptions): McpRecorder;
+//# sourceMappingURL=recorder.d.ts.map

package/dist/recorder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder.d.ts","sourceRoot":"","sources":["../src/recorder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAkB,KAAK,eAAe,EAAiB,MAAM,iBAAiB,CAAC;AAQtF,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AAEH,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,yDAAyD;IACzD,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,SAAS,CAAC;CACxD;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAChD,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4DAA4D;IAC5D,cAAc,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC9C;;;OAGG;IACH,UAAU,CAAC,CAAC,SAAS,aAAa,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAClD;;;OAGG;IACH,eAAe,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,CAAC,EACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACtC,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,2EAA2E;IAC3E,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC;;;;;OAKG;IACH,GAAG,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;CACtE;AAMD,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,wBAA6B,GAAG,WAAW,CA+JlF"}

package/dist/recorder.js

@@ -0,0 +1,154 @@
+import { randomBytes } from 'node:crypto';
+import { startRecording } from '@traceglass/sdk';
+import { dataPayloadFromResult, errorOutput, isErrorResult, labelForTool, usageFromResult, } from './map.js';
+function nowMs() {
+    return performance.now();
+}
+export function startMcpRecording(opts = {}) {
+    const runId = opts.id ?? `mcp-${new Date().toISOString().slice(0, 10)}-${randomBytes(3).toString('hex')}`;
+    /**
+     * The underlying recorder is created on the FIRST recorded step, not here.
+     * An MCP session that never calls a tool would otherwise leave a stepless
+     * journal on disk, which `traceglass recover` cannot finalize (a run with no
+     * steps is not a record of anything). The run id is fixed up front so callers
+     * can log or correlate it before anything is recorded.
+     */
+    let inner = null;
+    function recorder() {
+        inner ??= startRecording({
+            name: opts.name ?? 'MCP session',
+            id: runId,
+            ...(opts.currency !== undefined ? { currency: opts.currency } : {}),
+            ...(opts.dir !== undefined ? { dir: opts.dir } : {}),
+            ...(opts.redactable !== undefined ? { redactable: opts.redactable } : {}),
+            ...(opts.redactPatterns !== undefined ? { redactPatterns: opts.redactPatterns } : {}),
+        });
+        return inner;
+    }
+    let count = 0;
+    let ended = false;
+    function recordToolCall(call) {
+        if (ended) {
+            throw new Error(`MCP recording "${runId}" has already ended.`);
+        }
+        const failed = call.error !== undefined || isErrorResult(call.result);
+        const output = call.error !== undefined ? errorOutput(call.error) : call.result;
+        const dataPayload = dataPayloadFromResult(call.result);
+        const fromResult = usageFromResult(call.result);
+        const hook = opts.usage?.({
+            toolName: call.name,
+            params: { name: call.name, arguments: call.arguments },
+            result: call.result,
+        });
+        const usage = { ...fromResult, ...hook, ...call.usage };
+        const step = recorder().step({
+            type: failed ? 'error' : 'tool_call',
+            label: labelForTool(call.name),
+            toolName: call.name,
+            // `arguments` may legitimately be absent (a tool that takes none); an
+            // empty object records "called with nothing" rather than "not recorded".
+            input: call.arguments ?? {},
+            ...(output !== undefined ? { output } : {}),
+            ...(dataPayload !== undefined ? { dataPayload } : {}),
+            ...(usage.tokens !== undefined ? { tokens: usage.tokens } : {}),
+            ...(usage.cost !== undefined ? { cost: usage.cost } : {}),
+            ...(call.startedAt !== undefined ? { startedAt: call.startedAt } : {}),
+            ...(call.durationMs !== undefined ? { durationMs: call.durationMs } : {}),
+        });
+        count += 1;
+        return step;
+    }
+    return {
+        runId,
+        recordToolCall,
+        wrapClient(client) {
+            const original = client.callTool.bind(client);
+            const wrapped = async (params, ...rest) => {
+                const startedAt = new Date().toISOString();
+                const t0 = nowMs();
+                try {
+                    const result = await original(params, ...rest);
+                    recordToolCall({
+                        name: params.name,
+                        arguments: params.arguments,
+                        result,
+                        startedAt,
+                        durationMs: Math.round(nowMs() - t0),
+                    });
+                    return result;
+                }
+                catch (err) {
+                    recordToolCall({
+                        name: params.name,
+                        arguments: params.arguments,
+                        error: err,
+                        startedAt,
+                        durationMs: Math.round(nowMs() - t0),
+                    });
+                    throw err;
+                }
+            };
+            // A Proxy keeps the wrapped value assignment-compatible with the original
+            // client (same type, same extra methods). Every non-intercepted member is
+            // read with the TARGET as receiver and bound to it, so methods that touch
+            // private state still run on the real object rather than on the proxy.
+            return new Proxy(client, {
+                get(target, prop, _receiver) {
+                    if (prop === 'callTool')
+                        return wrapped;
+                    const value = Reflect.get(target, prop, target);
+                    return typeof value === 'function'
+                        ? value.bind(target)
+                        : value;
+                },
+            });
+        },
+        wrapToolHandler(name, handler) {
+            return async (...args) => {
+                const startedAt = new Date().toISOString();
+                const t0 = nowMs();
+                const first = args[0];
+                const argObject = typeof first === 'object' && first !== null && !Array.isArray(first)
+                    ? first
+                    : undefined;
+                try {
+                    const result = await handler(...args);
+                    recordToolCall({
+                        name,
+                        arguments: argObject,
+                        result,
+                        startedAt,
+                        durationMs: Math.round(nowMs() - t0),
+                    });
+                    return result;
+                }
+                catch (err) {
+                    recordToolCall({
+                        name,
+                        arguments: argObject,
+                        error: err,
+                        startedAt,
+                        durationMs: Math.round(nowMs() - t0),
+                    });
+                    throw err;
+                }
+            };
+        },
+        step(input) {
+            if (ended)
+                throw new Error(`MCP recording "${runId}" has already ended.`);
+            const step = recorder().step(input);
+            count += 1;
+            return step;
+        },
+        async end(endOpts = {}) {
+            if (ended)
+                throw new Error(`MCP recording "${runId}" has already ended.`);
+            ended = true;
+            if (count === 0 || inner === null)
+                return null;
+            return inner.end(endOpts);
+        },
+    };
+}
+//# sourceMappingURL=recorder.js.map

package/dist/recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recorder.js","sourceRoot":"","sources":["../src/recorder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAuC,MAAM,iBAAiB,CAAC;AACtF,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,UAAU,CAAC;AA0FlB,SAAS,KAAK;IACZ,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAiC,EAAE;IACnE,MAAM,KAAK,GACT,IAAI,CAAC,EAAE,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAE9F;;;;;;OAMG;IACH,IAAI,KAAK,GAAoB,IAAI,CAAC;IAClC,SAAS,QAAQ;QACf,KAAK,KAAK,cAAc,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,aAAa;YAChC,EAAE,EAAE,KAAK;YACT,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,SAAS,cAAc,CAAC,IAAuB;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,sBAAsB,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChF,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;YACtD,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,MAAM,KAAK,GAAa,EAAE,GAAG,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAElE,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;YACpC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,sEAAsE;YACtE,yEAAyE;YACzE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC3B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,KAAK;QAEL,cAAc;QAEd,UAAU,CAA0B,MAAS;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAGvB,CAAC;YAEtB,MAAM,OAAO,GAAG,KAAK,EAAE,MAAsB,EAAE,GAAG,IAAe,EAAoB,EAAE;gBACrF,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;oBAC/C,cAAc,CAAC;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,MAAM;wBACN,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;qBACrC,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,cAAc,CAAC;wBACb,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,KAAK,EAAE,GAAG;wBACV,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;qBACrC,CAAC,CAAC;oBACH,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YAEF,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,uEAAuE;YACvE,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE;gBACvB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS;oBACzB,IAAI,IAAI,KAAK,UAAU;wBAAE,OAAO,OAAO,CAAC;oBACxC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAY,CAAC;oBAC3D,OAAO,OAAO,KAAK,KAAK,UAAU;wBAChC,CAAC,CAAE,KAAsC,CAAC,IAAI,CAAC,MAAM,CAAC;wBACtD,CAAC,CAAC,KAAK,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QAED,eAAe,CACb,IAAY,EACZ,OAAuC;YAEvC,OAAO,KAAK,EAAE,GAAG,IAAO,EAAc,EAAE;gBACtC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;gBACnB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,SAAS,GACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAClE,CAAC,CAAE,KAAiC;oBACpC,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;oBACtC,cAAc,CAAC;wBACb,IAAI;wBACJ,SAAS,EAAE,SAAS;wBACpB,MAAM;wBACN,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;qBACrC,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,cAAc,CAAC;wBACb,IAAI;wBACJ,SAAS,EAAE,SAAS;wBACpB,KAAK,EAAE,GAAG;wBACV,SAAS;wBACT,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;qBACrC,CAAC,CAAC;oBACH,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAsB;YACzB,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,sBAAsB,CAAC,CAAC;YAC1E,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,UAA+C,EAAE;YACzD,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,sBAAsB,CAAC,CAAC;YAC1E,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/type-compat.d.ts

@@ -0,0 +1,3 @@
+/** Nothing here is meant to be imported; the assertions above are the payload. */
+export declare const TYPE_COMPAT_ASSERTIONS = 3;
+//# sourceMappingURL=type-compat.d.ts.map

package/dist/type-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-compat.d.ts","sourceRoot":"","sources":["../src/type-compat.ts"],"names":[],"mappings":"AA4DA,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,IAAI,CAAC"}

package/dist/type-compat.js

@@ -0,0 +1,9 @@
+const _clientIsCaller = true;
+const _wrappedKeepsType = wrapLike(_upstream);
+const _wrappedHandler = wrapHandlerLike('t', _upstreamHandler);
+/** Nothing here is meant to be imported; the assertions above are the payload. */
+export const TYPE_COMPAT_ASSERTIONS = 3;
+void _clientIsCaller;
+void _wrappedKeepsType;
+void _wrappedHandler;
+//# sourceMappingURL=type-compat.js.map

package/dist/type-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-compat.js","sourceRoot":"","sources":["../src/type-compat.ts"],"names":[],"mappings":"AAoCA,MAAM,eAAe,GAAoB,IAAI,CAAC;AAK9C,MAAM,iBAAiB,GAAmB,QAAQ,CAAC,SAAS,CAAC,CAAC;AAiB9D,MAAM,eAAe,GAAwB,eAAe,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;AAEpF,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,KAAK,eAAe,CAAC;AACrB,KAAK,iBAAiB,CAAC;AACvB,KAAK,eAAe,CAAC"}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@traceglass/mcp",
+  "version": "1.0.0",
+  "description": "Record Model Context Protocol tool calls as tamper-evident traceglass runs",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "agents",
+    "audit",
+    "compliance"
+  ],
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc -b",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@traceglass/core": "1.0.0",
+    "@traceglass/sdk": "1.0.0"
+  }
+}