@vess-id/vess 0.0.0-dev-20260902121045

package/dist/adapter/mcp/http-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.js","sourceRoot":"","sources":["../../../src/adapter/mcp/http-transport.ts"],"names":[],"mappings":";;AAyFA,gDA4LC;AArRD;;;;;;;;;;;;;;;GAeG;AACH,0FAAkG;AAElG,yCAAyE;AACzE,6CAAwC;AACxC,sDAM+B;AAoC/B,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACxB,CAAC;AAED,2EAA2E;AAC3E,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAE9B,SAAS,gBAAgB,CAAC,SAA4C;IACpE,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;QACtF,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CACrC,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC,EACxC,CAAC,GAAG,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAC9C,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,kBAAkB,CACtC,iBAAyG,EACzG,OAAe,+BAAmB,EAClC,OAAe,WAAW,EAC1B,OAA8B;IAE9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAA;IAChD,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,sCAA0B,CAAA;IAChF,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,gCAAoB,CAAA;IAChE,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,sCAA0B,CAAA;IAEhF,4DAA4D;IAC5D,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACpC,IAAI,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,gBAAgB,EAAE,CAAC;gBAChD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAA;gBAC7D,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,cAAc,CAAC,CAAA;gBAChG,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;oBACvC,MAAM,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;gBACtC,CAAC;gBAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACpB,cAAc,CAAC,KAAK,EAAE,CAAA;IAEtB,MAAM,UAAU,GAAG,IAAA,wBAAY,EAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAClF,kBAAkB;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC1D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,IAAI,sCAA0B,CAAA;YACpE,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAA;oBACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAA;oBACzD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAA;gBAChH,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAA;gBACrH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;YACjH,CAAC;YACD,OAAM;QACR,CAAC;QAED,sCAAsC;QACtC,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;YACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;YAC/C,OAAM;QACR,CAAC;QAED,gDAAgD;QAChD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAA;QAErE,IAAI,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,uEAAuE;YACvE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAA;YACxC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACjC,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACjD,CAAC;aAAM,CAAC;YACN,wCAAwC;YACxC,IAAI,QAAQ,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,WAAW,wBAAwB,CAAC,CAAA;gBACnF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;oBACjB,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,IAAI;iBACpB,CAAC,CAAA;gBACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACrB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;oBACrD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC,CAAA;gBACH,OAAM;YACR,CAAC;YAED,mDAAmD;YACnD,IAAI,SAAoD,CAAA;YACxD,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,iDAA6B,CAAC;oBAC5C,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAU,GAAE;iBACvC,CAAC,CAAA;gBACF,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;gBAEhE,oFAAoF;gBACpF,qFAAqF;gBACrF,oFAAoF;gBACpF,IAAI,SAAoB,CAAA;gBACxB,IAAI,YAA6E,CAAA;gBACjF,IAAI,OAAQ,aAA2B,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC/D,SAAS,GAAG,aAA0B,CAAA;gBACxC,CAAC;qBAAM,CAAC;oBACN,SAAS,GAAI,aAAwC,CAAC,MAAM,CAAA;oBAC5D,YAAY,GAAI,aAAwC,CAAC,YAAY,CAAA;gBACvE,CAAC;gBAED,iFAAiF;gBACjF,MAAM,CAAC,GAAG,SAAS,CAAA;gBACnB,CAAC,CAAC,OAAO,GAAG,GAAG,EAAE;oBACf,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAA;oBACvB,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7B,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;wBACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAA;oBAClG,CAAC;gBACH,CAAC,CAAA;gBAED,+EAA+E;gBAC/E,IAAI,YAAY,EAAE,CAAC;oBACjB,SAAS,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;wBACpC,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAA;wBACzD,IAAI,aAAa,EAAE,CAAC;4BAClB,YAAY,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,CAAA;wBAC5E,CAAC;oBACH,CAAC,CAAA;gBACH,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;gBAElC,2EAA2E;gBAC3E,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;gBAEvC,kEAAkE;gBAClE,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;oBACxB,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE;wBAChC,SAAS;wBACT,MAAM,EAAE,SAAS;wBACjB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;qBACzB,CAAC,CAAA;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAA;gBAC3G,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,OAAO,IAAI,CAAC,CAAA;gBACnF,wDAAwD;gBACxD,IAAI,SAAS,EAAE,CAAC;oBACd,IAAI,CAAC;wBAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAA;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;gBAC/E,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;oBAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAA;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,mDAAmD;IACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YACpD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,qDAAqD,CAAC,CAAC,CAAA;YACtF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;QACF,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI;QACjC,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,aAAa,CAAC,cAAc,CAAC,CAAA;YAC7B,oDAAoD;YACpD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE;gBAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACzE,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;oBACzC,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACxC,CAAC;gBAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;YACxD,CAAC,CAAC,CAAA;YACF,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;YAChC,QAAQ,CAAC,KAAK,EAAE,CAAA;YAChB,sDAAsD;YACtD,UAAU,CAAC,mBAAmB,EAAE,CAAA;YAChC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACvB,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;wBACf,OAAO,EAAE,CAAA;gBAChB,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/adapter/mcp/mcp-adapter.d.ts

@@ -0,0 +1,43 @@
+import { ExecutionEngine } from '../../core/execution-engine';
+import { MCPToolHandler } from './mcp-server.factory';
+import { ReauthRequiredExecutionInfo } from '../../core/types';
+export declare class McpAdapter implements MCPToolHandler {
+    private readonly engine;
+    constructor(engine: ExecutionEngine);
+    callTool(args: {
+        tool: string;
+        action: string;
+        parameters?: Record<string, any>;
+        approval?: {
+            token: string;
+            choice: string;
+            vcTTLMinutes?: number;
+            request_id?: string;
+            outcome_id?: string;
+            granted_at?: string;
+            granted_by?: string;
+        };
+        pendingRequestId?: string;
+    }): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+        approvalRequired?: any;
+        waitingForApproval?: any;
+        reauthRequired?: ReauthRequiredExecutionInfo;
+    }>;
+    issueToolPermission(args: {
+        tool: string;
+        actions: string[];
+    }): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+    }>;
+    listAvailableTools(): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+    }>;
+}
+//# sourceMappingURL=mcp-adapter.d.ts.map

package/dist/adapter/mcp/mcp-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-adapter.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-adapter.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAkB,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAE9E,qBAAa,UAAW,YAAW,cAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,eAAe;IAE9C,QAAQ,CAAC,IAAI,EAAE;QACnB,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,MAAM,CAAA;YACb,MAAM,EAAE,MAAM,CAAA;YACd,YAAY,CAAC,EAAE,MAAM,CAAA;YAIrB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;YAInB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;SACpB,CAAA;QACD,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,gBAAgB,CAAC,EAAE,GAAG,CAAA;QACtB,kBAAkB,CAAC,EAAE,GAAG,CAAA;QAIxB,cAAc,CAAC,EAAE,2BAA2B,CAAA;KAC7C,CAAC;IA4BI,mBAAmB,CAAC,IAAI,EAAE;QAC9B,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQvD,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGtF"}

package/dist/adapter/mcp/mcp-adapter.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpAdapter = void 0;
+/**
+ * MCP Adapter — thin bridge between MCP protocol and agentd core.
+ *
+ * This adapter does NOT:
+ * - Evaluate policies
+ * - Acquire or verify VCs/VPs
+ * - Access credentials or tokens
+ * - Make Gateway API calls
+ * - Decide execution routing
+ *
+ * It ONLY:
+ * - Receives MCP tool calls
+ * - Normalizes action names (MCP-specific format quirks)
+ * - Passes action + input to ExecutionEngine
+ * - Returns the result
+ */
+const ai_identity_1 = require("@vess-id/ai-identity");
+class McpAdapter {
+    engine;
+    constructor(engine) {
+        this.engine = engine;
+    }
+    async callTool(args) {
+        if (!args.tool || !args.action) {
+            return {
+                success: false,
+                error: 'Both "tool" and "action" are required. When retrying after approval, include the original tool and action along with pendingRequestId.',
+            };
+        }
+        const action = (0, ai_identity_1.normalizeMcpActionName)(args.tool, args.action);
+        return this.engine.execute({
+            action,
+            input: args.parameters || {},
+            approval: args.approval ? {
+                token: args.approval.token,
+                choice: args.approval.choice,
+                vcTTLMinutes: args.approval.vcTTLMinutes,
+                // Thread the Cedar retry-path context through so the engine can
+                // consume the single-use ledger token (Step 3.5). All optional — the
+                // engine only takes the retry path when request_id + outcome_id +
+                // granted_at + granted_by are all present.
+                request_id: args.approval.request_id,
+                outcome_id: args.approval.outcome_id,
+                granted_at: args.approval.granted_at,
+                granted_by: args.approval.granted_by,
+            } : undefined,
+            pendingRequestId: args.pendingRequestId,
+        });
+    }
+    async issueToolPermission(args) {
+        if (!args.tool || !Array.isArray(args.actions) || args.actions.length === 0) {
+            return { success: false, error: '"tool" and at least one "action" are required for issueToolPermission.' };
+        }
+        const actions = args.actions.map(a => (0, ai_identity_1.normalizeMcpActionName)(args.tool, a));
+        return this.engine.requestPermissions(actions);
+    }
+    async listAvailableTools() {
+        return this.engine.listAvailableTools();
+    }
+}
+exports.McpAdapter = McpAdapter;
+//# sourceMappingURL=mcp-adapter.js.map

package/dist/adapter/mcp/mcp-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-adapter.js","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-adapter.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;GAeG;AACH,sDAA6D;AAK7D,MAAa,UAAU;IACQ;IAA7B,YAA6B,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAExD,KAAK,CAAC,QAAQ,CAAC,IAoBd;QAWC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wIAAwI;aAChJ,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,oCAAsB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzB,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;gBAC1B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAwB;gBAC9C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACxC,gEAAgE;gBAChE,qEAAqE;gBACrE,kEAAkE;gBAClE,2CAA2C;gBAC3C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;gBACpC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;gBACpC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;gBACpC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;aACrC,CAAC,CAAC,CAAC,SAAS;YACb,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAGzB;QACC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wEAAwE,EAAE,CAAA;QAC5G,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,oCAAsB,EAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAA;IACzC,CAAC;CACF;AA3ED,gCA2EC"}

package/dist/adapter/mcp/mcp-server.factory.d.ts

@@ -0,0 +1,44 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ReauthRequiredExecutionInfo } from '../../core/types';
+export declare const CALL_TOOL_DESCRIPTION = "Execute an action on an external service or local resource on behalf of the user.\nThis is the PRIMARY tool \u2014 always use this to perform actions. Permission is handled automatically:\n- Read-type actions (low risk) are auto-approved and execute immediately.\n- Write-type actions that need approval will return an approval_required response. Re-call with the approval parameter to confirm or deny.\nDo NOT call aidentity_request_permission first; just call this tool directly.\n\nSupported tools and common actions:\n\n**os** \u2014 Read/write local secret files (.env, credentials, etc.)\n  Actions: os.secret.read, os.secret.write\n  Example: tool=\"os\", action=\"os.secret.read\", parameters={\"file_path\": \"~/projects/app/.env\"}\n\n**slack** \u2014 Post/read/update/delete messages, list channels, get user info.\n  Common actions: slack.message.post, slack.message.read, slack.channel.read, slack.batch.read\n  The \"channel\" parameter accepts channel ID (e.g. \"C0A159PP6QM\"), channel name (e.g. \"general\"), or #-prefixed name (e.g. \"#general\"). Responses are compact by default (essential fields only). Set compact=false for full Slack API response.\n  Example: tool=\"slack\", action=\"slack.message.post\", parameters={\"channel\": \"C01ABCD2EFG\", \"text\": \"Hello!\"}\n  Example: tool=\"slack\", action=\"slack.message.read\", parameters={\"channel\": \"C01ABCD2EFG\", \"limit\": 10}\n\n**github** \u2014 Create/read/update/list issues, pull requests, repositories, contents, labels, Actions workflows, stars, users, notifications and gists.\n  Common actions: github.issue.create, github.issue.list, github.issue.read, github.issue.search, github.issue.comment.create, github.pr.create, github.pr.list, github.pr.read, github.pr.merge, github.repo.search, github.content.get, github.content.createOrUpdate, github.branch.list, github.branch.create, github.commit.list, github.code.search, github.repo.create, github.repo.fork, github.label.list, github.label.write, github.workflow.list, github.workflow.run, github.workflow.jobLogs.get, github.repo.starred.list, github.repo.star, github.user.me.get, github.org.teams.list, github.team.members.list, github.user.search, github.notification.list, github.notification.get, github.notification.markRead, github.notification.markAllRead, github.gist.create, github.gist.get, github.gist.list, github.gist.update\n  Example: tool=\"github\", action=\"github.issue.create\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"title\": \"Bug report\", \"body\": \"Details...\"}\n  Example: tool=\"github\", action=\"github.pr.create\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"title\": \"Fix bug\", \"head\": \"feature-branch\", \"base\": \"main\"}\n  Example: tool=\"github\", action=\"github.content.get\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"path\": \"README.md\"}\n\n**jira** \u2014 Manage issues, projects, boards, sprints.\n  Common actions: jira.issue.create, jira.issue.search, jira.project.read\n\n**gmail** \u2014 Search/read/send/draft/delete emails, list labels.\n  Common actions: gmail.message.search, gmail.message.read, gmail.message.send, gmail.draft.create, gmail.label.read\n  Example (new email): tool=\"gmail\", action=\"gmail.message.send\", parameters={\"to\": \"user@example.com\", \"subject\": \"Hello\", \"body\": \"Message content\"}\n  Example (draft): tool=\"gmail\", action=\"gmail.draft.create\", parameters={\"to\": \"user@example.com\", \"subject\": \"Draft subject\", \"body\": \"Draft content\"}\n  Example (search): tool=\"gmail\", action=\"gmail.message.search\", parameters={\"query\": \"from:boss subject:urgent\"}\n  **Replying to emails**: When replying, you MUST include threading parameters to ensure the reply is properly threaded:\n  1. First read the original message with gmail.message.read to get its threadId and Message-ID header (look for {name: \"Message-ID\", value: \"...\"} in the payload.headers array).\n  2. Then send with: threadId (from the read response top-level field), inReplyTo (the Message-ID header value), references (space-separated Message-IDs for the full thread chain; for a first reply, just the single Message-ID).\n  Example (reply): tool=\"gmail\", action=\"gmail.message.send\", parameters={\"to\": \"sender@example.com\", \"subject\": \"Re: Original Subject\", \"body\": \"Reply content\", \"threadId\": \"18e1234abcd\", \"inReplyTo\": \"<CABx...@mail.gmail.com>\", \"references\": \"<CABx...@mail.gmail.com>\"}\n\n**outlook** \u2014 Search/read/send/draft Outlook (Microsoft 365) email, list mail folders, trash or permanently delete messages. This is a SEPARATE tool from gmail \u2014 for a user connected via Microsoft, use tool=\"outlook\" with outlook.* actions; do not send gmail.* actions to it.\n  Common actions: outlook.message.search, outlook.message.read, outlook.message.send, outlook.draft.create, outlook.folder.read, outlook.message.trash, outlook.message.delete, outlook.batch.read\n  Example (new email): tool=\"outlook\", action=\"outlook.message.send\", parameters={\"to\": \"user@example.com\", \"subject\": \"Hello\", \"body\": \"Message content\"}\n  Example (search): tool=\"outlook\", action=\"outlook.message.search\", parameters={\"query\": \"from:boss subject:urgent\"}\n  Example (read): tool=\"outlook\", action=\"outlook.message.read\", parameters={\"messageId\": \"<id from a search result>\"}\n  Example (draft): tool=\"outlook\", action=\"outlook.draft.create\", parameters={\"to\": \"user@example.com\", \"subject\": \"Draft subject\", \"body\": \"Draft content\"}\n  Recipients (to/cc/bcc) are comma-separated address strings. The body is plain text. Read/search results are compacted (decoded body text, key headers, flags \u2014 no attachment binaries). Use outlook.message.trash to move a message to Deleted Items (recoverable) and outlook.message.delete only for a permanent, irreversible delete.\n\n**calendar** \u2014 List/create/update/delete calendar events. Works with whichever calendar the user connected \u2014 Google Calendar or Microsoft Outlook; the actions, parameters and response shape are identical for both, so never assume a provider.\n  Common actions: calendar.event.list, calendar.event.create\n  IMPORTANT: start and end MUST be objects with dateTime property, not flat strings.\n  Example: tool=\"calendar\", action=\"calendar.event.create\", parameters={\"summary\": \"Meeting\", \"start\": {\"dateTime\": \"2026-07-15T10:00:00\", \"timeZone\": \"Asia/Tokyo\"}, \"end\": {\"dateTime\": \"2026-07-15T11:00:00\", \"timeZone\": \"Asia/Tokyo\"}}\n  Example (with an online meeting): tool=\"calendar\", action=\"calendar.event.create\", parameters={\"summary\": \"Sync\", \"start\": {\"dateTime\": \"2026-07-15T10:00:00\", \"timeZone\": \"Asia/Tokyo\"}, \"end\": {\"dateTime\": \"2026-07-15T10:30:00\", \"timeZone\": \"Asia/Tokyo\"}, \"attendees\": [{\"email\": \"them@example.com\"}], \"addMeet\": true, \"meetRequestId\": \"<stable unique id>\"}\n  To attach an online meeting link, use addMeet/meetRequestId \u2014 the provider mints it (Google Meet on Google, Teams on Outlook). Raw conferenceData/conferenceDataVersion parameters are NOT supported and will be ignored.\n  Events come back in one provider-neutral shape: id, summary, start/end, attendees, location, conferenceUrl (the meeting join URL), htmlLink. Read the join URL from conferenceUrl \u2014 provider-specific fields such as hangoutLink are not returned.\n\n**hubspot** \u2014 Read/search/create CRM objects (contacts, companies, deals), properties, associations, engagements.\n  Common actions: hubspot.crm.objects.search, hubspot.crm.objects.list, hubspot.crm.objects.batchCreate, hubspot.crm.properties.list, hubspot.crm.engagements.create, hubspot.crm.associations.list, hubspot.account.userDetails.get\n  Most CRM actions require an \"objectType\" parameter (e.g. \"contacts\", \"companies\", \"deals\", or a custom object type ID).\n  Example (search): tool=\"hubspot\", action=\"hubspot.crm.objects.search\", parameters={\"objectType\": \"contacts\", \"query\": \"acme\"}\n  Example (create): tool=\"hubspot\", action=\"hubspot.crm.objects.batchCreate\", parameters={\"objectType\": \"contacts\", \"inputs\": [{\"properties\": {\"email\": \"jane@example.com\", \"firstname\": \"Jane\"}}]}\n  For hubspot.crm.engagements.create use parameter key \"type\" (not \"engagementType\"); values \"NOTE\"/\"TASK\". ownerId comes from hubspot.account.userDetails.get.\n\n**linear** \u2014 Linear issue tracker with full CRUD for issues, comments, projects, and more.\n  Issue operations: linear.issue.list, linear.issue.read, linear.issue.search, linear.issue.create, linear.issue.update, linear.issue.archive, linear.issue.unarchive, linear.issue.delete, linear.issue.addLabel, linear.issue.removeLabel, linear.issue.subscribe\n  Comment management: linear.comment.create, linear.comment.list, linear.comment.update, linear.comment.delete, linear.comment.resolve, linear.comment.unresolve\n  Issue relations: linear.issueRelation.create, linear.issueRelation.list, linear.issueRelation.delete\n  Cycles/Sprints: linear.cycle.list, linear.cycle.read, linear.cycle.create, linear.cycle.update\n  Labels: linear.label.list, linear.label.create, linear.label.update\n  Attachments: linear.attachment.create, linear.attachment.list, linear.attachment.delete\n  Projects: linear.project.list, linear.project.read, linear.project.create, linear.project.update\n  Other: linear.team.list, linear.workflowState.list, linear.viewer.read, linear.user.list\n  Example: { \"tool\": \"linear\", \"action\": \"linear.issue.list\", \"parameters\": { \"teamId\": \"<team-id>\", \"limit\": 20 } }\n  Example (create): { \"tool\": \"linear\", \"action\": \"linear.issue.create\", \"parameters\": { \"teamId\": \"<team-id>\", \"title\": \"Bug report\" } }\n  Use linear.team.list to discover teamIds, and linear.workflowState.list to find valid state IDs.\n\n\n**scheduling / inbox** \u2014 Meeting-time negotiation and task requests between users (signed as verifiable credentials).\n  Common actions: scheduling.request, scheduling.session.create, inbox.check, inbox.respond, inbox.complete, inbox.send\n  Scheduling routing: if the user gives a specific agreed meeting time, create the calendar\n  event directly (calendar.event.create). If the time is NOT yet agreed and needs coordination,\n  do NOT create the event \u2014 compute candidate slots from calendar.event.list first, then\n  COUNT THE OTHER PEOPLE:\n    - ONE counterpart (\"X\u3055\u3093\u3068\u65E5\u7A0B\u8ABF\u6574\", \"find a time with X\") -> scheduling.request.\n    - TWO OR MORE counterparts (\"A \u3068 B \u3068 \u6253\u3061\u5408\u308F\u305B\", \"the four of us\", several addresses\n      in one ask) -> scheduling.session.create, then scheduling.coordinate with the candidate\n      slots. The 'to' on scheduling.request is a SINGLE address, so calling it once per person\n      is NOT the multi-person path: that creates independent negotiations that can settle on\n      DIFFERENT times, with no slot everyone shares and no single confirmation step.\n      scheduling.coordinate folds every reply into the slots EVERYONE can make, and\n      scheduling.finalize books it once. scheduling.coordinate also returns an inviteUrl per\n      participant \u2014 show them to the user, since the notification email may not arrive. scheduling.coordinate also returns an\n      expiresAt: the answer window CLOSES then, defaults to 48h, and can land BEFORE the\n      proposed dates \u2014 tell the user that date, and pass an explicit 'deadline' to\n      scheduling.session.create when the meeting is further out. Before scheduling.finalize,\n      call scheduling.session.status to see whether people actually answered (counts and the\n      common slots, never who said what); finalizing without it is a guess.\n\n  There are TWO roles \u2014 act according to which side you are on:\n  - Requester flow (you initiate): scheduling.request sends candidate slots. The counterpart's\n    human-approved response arrives in YOUR inbox.check as an item with role: \"sent\". BRANCH ON status\n    \u2014 but what a status MEANS depends on its taskType, so read the item's taskType first.\n    For a SCHEDULING item (taskType \"scheduling\"):\n    \u2022 status \"completed\": the meeting was ALREADY auto-confirmed and booked server-side \u2014 the item\n      carries a calendarEventId and htmlLink (plus the online-meeting link). You are DONE: do NOT call\n      calendar.event.create (it would create a duplicate). Just tell the user the confirmed date/time\n      and the meeting link. (When the sender's delegation policy authorizes it, the server confirms and\n      books automatically the moment the counterpart approves; otherwise the item stays \"processing\".)\n    \u2022 status \"processing\": awaiting manual confirmation \u2014 confirm the chosen slot with the user, create\n      the calendar event with calendar.event.create (add the counterpart to attendees so the calendar\n      invite goes out), then call inbox.complete. Set addMeet: true and meetRequestId to the inbox item id\n      (idempotent \u2014 retries won't mint duplicate meetings) for the online-meeting link \u2014 Google Meet on a\n      Google connection, Microsoft Teams on an Outlook one. A \"processing\" item can be\n      auto-confirmed right after you observe it, so re-check before booking and never race ahead.\n    \u2022 status \"declined\": inform the user and do not book \u2014 the negotiation is over.\n    For any NON-scheduling item (e.g. taskType \"doc_review\"):\n    \u2022 status \"completed\": the recipient delivered the result and the task is FINISHED. The result is in\n      the item's responseData \u2014 report THAT. There is no calendar event, no confirmed time and no Meet\n      link on such an item, so do not look for or invent a calendarEventId, a confirmed time, or a\n      Meet link (none exists), and do not call calendar.event.create.\n    \u2022 status \"declined\": the recipient did not carry out the task \u2014 inform the user.\n  - Recipient flow (someone sent YOU a request): it appears in inbox.check with role: \"received\" \u2192\n    confirm with the user \u2192 reply with inbox.respond. That is the end of your job.\n    Do NOT create a calendar event when you are the recipient \u2014 the sender books it (or the server\n    auto-confirms it under the sender's delegation) and you will receive a calendar invite.\n    When a received scheduling request surfaces, do not just list the candidates \u2014 in the same turn,\n    check the user's calendar (calendar.event.list over the candidate windows), determine which\n    candidates are free, and present: the request summary, which slots are open, your recommended\n    slot, and a confirmation question. Only call inbox.respond after the user confirms.\n\n  inbox.check results are point-in-time \u2014 when the user asks about responses or new requests,\n  ALWAYS call inbox.check again; never answer from a previous check result.\n\n  Example: tool=\"scheduling\", action=\"scheduling.request\", parameters={\"to\": \"them@example.com\", \"topic\": \"sync\", \"durationMinutes\": 30, \"candidates\": [{\"start\": \"2026-06-12T10:00:00+09:00\", \"end\": \"2026-06-12T10:30:00+09:00\"}]}\n  The response includes a schedulingUrl \u2014 always show it to the user so it can be shared via another channel if needed (the notification email is sent automatically but may not arrive).\n  inbox.send is the low-level primitive for other task types.\n  Example: tool=\"inbox\", action=\"inbox.check\", parameters={}\n  Example (recipient responds to a request): tool=\"inbox\", action=\"inbox.respond\", parameters={\"id\": \"<inbox item id from inbox.check>\", \"action\": \"accept\", \"data\": {\"selectedSlot\": {\"start\": \"2026-06-18T14:00:00+09:00\", \"end\": \"2026-06-18T15:00:00+09:00\"}}}\n  Example (requester completes after booking): tool=\"inbox\", action=\"inbox.complete\", parameters={\"id\": \"<inbox item id>\", \"result\": {\"calendarEventId\": \"...\", \"meetUrl\": \"...\"}}\n\nCall aidentity_list_available_tools for detailed parameter schemas of each action.";
+export declare const SERVER_INSTRUCTIONS = "This server provides identity-verified tool execution (VESS AIDENTITY).\nScheduling: if the user gives a specific agreed time, create the calendar event\ndirectly. If the time is not yet agreed (\"\u65E5\u7A0B\u8ABF\u6574\", \"find a time\"), compute candidate\nslots from the user's calendar \u2014 then count the other people. ONE counterpart:\nscheduling.request, then wait for the response. TWO OR MORE: scheduling.session.create\nfollowed by scheduling.coordinate (scheduling.request takes a single 'to', so sending it\nonce per person makes separate negotiations that can settle on different times).\nCheck progress with scheduling.session.status before scheduling.finalize, and tell the\nuser the expiresAt that coordinate returns (the answer window defaults to 48h).\nSize candidateWindow to the user's intent. candidateWindow is a { start, end } range OR an array of\nranges (max 5, total span \u2264 62 days); the server searches each range independently and spreads\ncandidates across them. A specific named day \u2192 one range for that day. A per-day time band\n(\"\u5E73\u65E5\u5348\u5F8C\") \u2192 one range PER business day ([{Mon 13-18}, {Tue 13-18}, \u2026]) so the band is honored\nevery day. Distinct bands (\"\u6708\u66DC\u5348\u524D or \u6728\u66DC\u5348\u5F8C\") \u2192 one range each. A single open stretch\n(\"next week\", \"\u5E73\u65E5\u3067\") \u2192 one wide range spanning the business days.\nAt session start, call inbox.check once to surface pending task requests (role \"received\") AND\nresponses to your own requests (role \"sent\"). As the requester, branch on the sent item's status \u2014\nwhat a status means depends on its taskType, so read the item's taskType first.\nFor a SCHEDULING item: \"completed\" means the server already auto-confirmed and booked it\n(calendarEventId + Meet link present) \u2014 do NOT create the event again, just tell the user the\nconfirmed time and Meet link; \"processing\" means confirm with the user, then create the event\n(adding the counterpart to attendees) and call inbox.complete; \"declined\" means inform the user and\ndo not book. For any NON-scheduling item (e.g. taskType \"doc_review\"): \"completed\" means the\nrecipient delivered the result and the task is finished \u2014 the result is in the item's responseData,\nso report THAT and do not look for or invent a calendar event, a confirmed time, or a Meet link\n(none exists); \"declined\" means the recipient did not carry out the task \u2014 inform the user.\nAs the recipient, reply with inbox.respond and stop \u2014\ndo not create the calendar event; the sender books it (or the server auto-confirms it under the\nsender's delegation) and you will receive a calendar invite.\nAs the recipient, do not just list the candidates \u2014 in the same turn check the user's calendar over\nthe candidate windows, determine which slots are free, and present the request summary, the open slots,\nyour recommended slot, and a confirmation question; only call inbox.respond after the user confirms.\ninbox.check results are point-in-time \u2014 when the user asks about responses or new requests,\nALWAYS call inbox.check again; never answer from a previous check result.\nTask requests/responses are signed as verifiable credentials.";
+export interface MCPToolHandler {
+    callTool(args: {
+        tool: string;
+        action: string;
+        parameters?: Record<string, any>;
+        approval?: {
+            token: string;
+            choice: string;
+            vcTTLMinutes?: number;
+            request_id?: string;
+            outcome_id?: string;
+            granted?: boolean;
+            granted_at?: string;
+            granted_by?: string;
+        };
+        pendingRequestId?: string;
+    }): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+        approvalRequired?: any;
+        waitingForApproval?: any;
+        reauthRequired?: ReauthRequiredExecutionInfo;
+    }>;
+    issueToolPermission(args: {
+        tool: string;
+        actions: string[];
+    }): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+    }>;
+    listAvailableTools(): Promise<{
+        success: boolean;
+        data?: any;
+        error?: string;
+    }>;
+}
+export declare function createMcpServer(handler: MCPToolHandler): McpServer;
+//# sourceMappingURL=mcp-server.factory.d.ts.map

package/dist/adapter/mcp/mcp-server.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.factory.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-server.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAInE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAUnE,eAAO,MAAM,qBAAqB,w2fAyIiD,CAAA;AAEnF,eAAO,MAAM,mBAAmB,ysGAkC8B,CAAA;AAE9D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,MAAM,CAAA;YACb,MAAM,EAAE,MAAM,CAAA;YACd,YAAY,CAAC,EAAE,MAAM,CAAA;YAIrB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,OAAO,CAAC,EAAE,OAAO,CAAA;YACjB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;SACpB,CAAA;QACD,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,gBAAgB,CAAC,EAAE,GAAG,CAAA;QACtB,kBAAkB,CAAC,EAAE,GAAG,CAAA;QACxB,cAAc,CAAC,EAAE,2BAA2B,CAAA;KAC7C,CAAC,CAAA;IACF,mBAAmB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACzH,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAChF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAkKlE"}

package/dist/adapter/mcp/mcp-server.factory.js

@@ -0,0 +1,311 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SERVER_INSTRUCTIONS = exports.CALL_TOOL_DESCRIPTION = void 0;
+exports.createMcpServer = createMcpServer;
+const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
+const ai_identity_1 = require("@vess-id/ai-identity");
+const zod_1 = require("zod");
+const version_1 = require("../../config/version");
+/** Zod enum for tool names, derived from SDK (now includes 'os') */
+const toolEnum = zod_1.z.enum(ai_identity_1.VALID_MCP_TOOLS);
+/** Action format description with full valid action list */
+const ACTION_FORMAT_DESC = 'Action in provider.resource.operation format. Valid actions: ' +
+    (0, ai_identity_1.getAllValidMcpActionNames)().join(', ');
+exports.CALL_TOOL_DESCRIPTION = `Execute an action on an external service or local resource on behalf of the user.
+This is the PRIMARY tool — always use this to perform actions. Permission is handled automatically:
+- Read-type actions (low risk) are auto-approved and execute immediately.
+- Write-type actions that need approval will return an approval_required response. Re-call with the approval parameter to confirm or deny.
+Do NOT call aidentity_request_permission first; just call this tool directly.
+
+Supported tools and common actions:
+
+**os** — Read/write local secret files (.env, credentials, etc.)
+  Actions: os.secret.read, os.secret.write
+  Example: tool="os", action="os.secret.read", parameters={"file_path": "~/projects/app/.env"}
+
+**slack** — Post/read/update/delete messages, list channels, get user info.
+  Common actions: slack.message.post, slack.message.read, slack.channel.read, slack.batch.read
+  The "channel" parameter accepts channel ID (e.g. "C0A159PP6QM"), channel name (e.g. "general"), or #-prefixed name (e.g. "#general"). Responses are compact by default (essential fields only). Set compact=false for full Slack API response.
+  Example: tool="slack", action="slack.message.post", parameters={"channel": "C01ABCD2EFG", "text": "Hello!"}
+  Example: tool="slack", action="slack.message.read", parameters={"channel": "C01ABCD2EFG", "limit": 10}
+
+**github** — Create/read/update/list issues, pull requests, repositories, contents, labels, Actions workflows, stars, users, notifications and gists.
+  Common actions: github.issue.create, github.issue.list, github.issue.read, github.issue.search, github.issue.comment.create, github.pr.create, github.pr.list, github.pr.read, github.pr.merge, github.repo.search, github.content.get, github.content.createOrUpdate, github.branch.list, github.branch.create, github.commit.list, github.code.search, github.repo.create, github.repo.fork, github.label.list, github.label.write, github.workflow.list, github.workflow.run, github.workflow.jobLogs.get, github.repo.starred.list, github.repo.star, github.user.me.get, github.org.teams.list, github.team.members.list, github.user.search, github.notification.list, github.notification.get, github.notification.markRead, github.notification.markAllRead, github.gist.create, github.gist.get, github.gist.list, github.gist.update
+  Example: tool="github", action="github.issue.create", parameters={"owner": "org", "repo": "repo", "title": "Bug report", "body": "Details..."}
+  Example: tool="github", action="github.pr.create", parameters={"owner": "org", "repo": "repo", "title": "Fix bug", "head": "feature-branch", "base": "main"}
+  Example: tool="github", action="github.content.get", parameters={"owner": "org", "repo": "repo", "path": "README.md"}
+
+**jira** — Manage issues, projects, boards, sprints.
+  Common actions: jira.issue.create, jira.issue.search, jira.project.read
+
+**gmail** — Search/read/send/draft/delete emails, list labels.
+  Common actions: gmail.message.search, gmail.message.read, gmail.message.send, gmail.draft.create, gmail.label.read
+  Example (new email): tool="gmail", action="gmail.message.send", parameters={"to": "user@example.com", "subject": "Hello", "body": "Message content"}
+  Example (draft): tool="gmail", action="gmail.draft.create", parameters={"to": "user@example.com", "subject": "Draft subject", "body": "Draft content"}
+  Example (search): tool="gmail", action="gmail.message.search", parameters={"query": "from:boss subject:urgent"}
+  **Replying to emails**: When replying, you MUST include threading parameters to ensure the reply is properly threaded:
+  1. First read the original message with gmail.message.read to get its threadId and Message-ID header (look for {name: "Message-ID", value: "..."} in the payload.headers array).
+  2. Then send with: threadId (from the read response top-level field), inReplyTo (the Message-ID header value), references (space-separated Message-IDs for the full thread chain; for a first reply, just the single Message-ID).
+  Example (reply): tool="gmail", action="gmail.message.send", parameters={"to": "sender@example.com", "subject": "Re: Original Subject", "body": "Reply content", "threadId": "18e1234abcd", "inReplyTo": "<CABx...@mail.gmail.com>", "references": "<CABx...@mail.gmail.com>"}
+
+**outlook** — Search/read/send/draft Outlook (Microsoft 365) email, list mail folders, trash or permanently delete messages. This is a SEPARATE tool from gmail — for a user connected via Microsoft, use tool="outlook" with outlook.* actions; do not send gmail.* actions to it.
+  Common actions: outlook.message.search, outlook.message.read, outlook.message.send, outlook.draft.create, outlook.folder.read, outlook.message.trash, outlook.message.delete, outlook.batch.read
+  Example (new email): tool="outlook", action="outlook.message.send", parameters={"to": "user@example.com", "subject": "Hello", "body": "Message content"}
+  Example (search): tool="outlook", action="outlook.message.search", parameters={"query": "from:boss subject:urgent"}
+  Example (read): tool="outlook", action="outlook.message.read", parameters={"messageId": "<id from a search result>"}
+  Example (draft): tool="outlook", action="outlook.draft.create", parameters={"to": "user@example.com", "subject": "Draft subject", "body": "Draft content"}
+  Recipients (to/cc/bcc) are comma-separated address strings. The body is plain text. Read/search results are compacted (decoded body text, key headers, flags — no attachment binaries). Use outlook.message.trash to move a message to Deleted Items (recoverable) and outlook.message.delete only for a permanent, irreversible delete.
+
+**calendar** — List/create/update/delete calendar events. Works with whichever calendar the user connected — Google Calendar or Microsoft Outlook; the actions, parameters and response shape are identical for both, so never assume a provider.
+  Common actions: calendar.event.list, calendar.event.create
+  IMPORTANT: start and end MUST be objects with dateTime property, not flat strings.
+  Example: tool="calendar", action="calendar.event.create", parameters={"summary": "Meeting", "start": {"dateTime": "2026-07-15T10:00:00", "timeZone": "Asia/Tokyo"}, "end": {"dateTime": "2026-07-15T11:00:00", "timeZone": "Asia/Tokyo"}}
+  Example (with an online meeting): tool="calendar", action="calendar.event.create", parameters={"summary": "Sync", "start": {"dateTime": "2026-07-15T10:00:00", "timeZone": "Asia/Tokyo"}, "end": {"dateTime": "2026-07-15T10:30:00", "timeZone": "Asia/Tokyo"}, "attendees": [{"email": "them@example.com"}], "addMeet": true, "meetRequestId": "<stable unique id>"}
+  To attach an online meeting link, use addMeet/meetRequestId — the provider mints it (Google Meet on Google, Teams on Outlook). Raw conferenceData/conferenceDataVersion parameters are NOT supported and will be ignored.
+  Events come back in one provider-neutral shape: id, summary, start/end, attendees, location, conferenceUrl (the meeting join URL), htmlLink. Read the join URL from conferenceUrl — provider-specific fields such as hangoutLink are not returned.
+
+**hubspot** — Read/search/create CRM objects (contacts, companies, deals), properties, associations, engagements.
+  Common actions: hubspot.crm.objects.search, hubspot.crm.objects.list, hubspot.crm.objects.batchCreate, hubspot.crm.properties.list, hubspot.crm.engagements.create, hubspot.crm.associations.list, hubspot.account.userDetails.get
+  Most CRM actions require an "objectType" parameter (e.g. "contacts", "companies", "deals", or a custom object type ID).
+  Example (search): tool="hubspot", action="hubspot.crm.objects.search", parameters={"objectType": "contacts", "query": "acme"}
+  Example (create): tool="hubspot", action="hubspot.crm.objects.batchCreate", parameters={"objectType": "contacts", "inputs": [{"properties": {"email": "jane@example.com", "firstname": "Jane"}}]}
+  For hubspot.crm.engagements.create use parameter key "type" (not "engagementType"); values "NOTE"/"TASK". ownerId comes from hubspot.account.userDetails.get.
+
+**linear** — Linear issue tracker with full CRUD for issues, comments, projects, and more.
+  Issue operations: linear.issue.list, linear.issue.read, linear.issue.search, linear.issue.create, linear.issue.update, linear.issue.archive, linear.issue.unarchive, linear.issue.delete, linear.issue.addLabel, linear.issue.removeLabel, linear.issue.subscribe
+  Comment management: linear.comment.create, linear.comment.list, linear.comment.update, linear.comment.delete, linear.comment.resolve, linear.comment.unresolve
+  Issue relations: linear.issueRelation.create, linear.issueRelation.list, linear.issueRelation.delete
+  Cycles/Sprints: linear.cycle.list, linear.cycle.read, linear.cycle.create, linear.cycle.update
+  Labels: linear.label.list, linear.label.create, linear.label.update
+  Attachments: linear.attachment.create, linear.attachment.list, linear.attachment.delete
+  Projects: linear.project.list, linear.project.read, linear.project.create, linear.project.update
+  Other: linear.team.list, linear.workflowState.list, linear.viewer.read, linear.user.list
+  Example: { "tool": "linear", "action": "linear.issue.list", "parameters": { "teamId": "<team-id>", "limit": 20 } }
+  Example (create): { "tool": "linear", "action": "linear.issue.create", "parameters": { "teamId": "<team-id>", "title": "Bug report" } }
+  Use linear.team.list to discover teamIds, and linear.workflowState.list to find valid state IDs.
+
+
+**scheduling / inbox** — Meeting-time negotiation and task requests between users (signed as verifiable credentials).
+  Common actions: scheduling.request, scheduling.session.create, inbox.check, inbox.respond, inbox.complete, inbox.send
+  Scheduling routing: if the user gives a specific agreed meeting time, create the calendar
+  event directly (calendar.event.create). If the time is NOT yet agreed and needs coordination,
+  do NOT create the event — compute candidate slots from calendar.event.list first, then
+  COUNT THE OTHER PEOPLE:
+    - ONE counterpart ("Xさんと日程調整", "find a time with X") -> scheduling.request.
+    - TWO OR MORE counterparts ("A と B と 打ち合わせ", "the four of us", several addresses
+      in one ask) -> scheduling.session.create, then scheduling.coordinate with the candidate
+      slots. The 'to' on scheduling.request is a SINGLE address, so calling it once per person
+      is NOT the multi-person path: that creates independent negotiations that can settle on
+      DIFFERENT times, with no slot everyone shares and no single confirmation step.
+      scheduling.coordinate folds every reply into the slots EVERYONE can make, and
+      scheduling.finalize books it once. scheduling.coordinate also returns an inviteUrl per
+      participant — show them to the user, since the notification email may not arrive. scheduling.coordinate also returns an
+      expiresAt: the answer window CLOSES then, defaults to 48h, and can land BEFORE the
+      proposed dates — tell the user that date, and pass an explicit 'deadline' to
+      scheduling.session.create when the meeting is further out. Before scheduling.finalize,
+      call scheduling.session.status to see whether people actually answered (counts and the
+      common slots, never who said what); finalizing without it is a guess.
+
+  There are TWO roles — act according to which side you are on:
+  - Requester flow (you initiate): scheduling.request sends candidate slots. The counterpart's
+    human-approved response arrives in YOUR inbox.check as an item with role: "sent". BRANCH ON status
+    — but what a status MEANS depends on its taskType, so read the item's taskType first.
+    For a SCHEDULING item (taskType "scheduling"):
+    • status "completed": the meeting was ALREADY auto-confirmed and booked server-side — the item
+      carries a calendarEventId and htmlLink (plus the online-meeting link). You are DONE: do NOT call
+      calendar.event.create (it would create a duplicate). Just tell the user the confirmed date/time
+      and the meeting link. (When the sender's delegation policy authorizes it, the server confirms and
+      books automatically the moment the counterpart approves; otherwise the item stays "processing".)
+    • status "processing": awaiting manual confirmation — confirm the chosen slot with the user, create
+      the calendar event with calendar.event.create (add the counterpart to attendees so the calendar
+      invite goes out), then call inbox.complete. Set addMeet: true and meetRequestId to the inbox item id
+      (idempotent — retries won't mint duplicate meetings) for the online-meeting link — Google Meet on a
+      Google connection, Microsoft Teams on an Outlook one. A "processing" item can be
+      auto-confirmed right after you observe it, so re-check before booking and never race ahead.
+    • status "declined": inform the user and do not book — the negotiation is over.
+    For any NON-scheduling item (e.g. taskType "doc_review"):
+    • status "completed": the recipient delivered the result and the task is FINISHED. The result is in
+      the item's responseData — report THAT. There is no calendar event, no confirmed time and no Meet
+      link on such an item, so do not look for or invent a calendarEventId, a confirmed time, or a
+      Meet link (none exists), and do not call calendar.event.create.
+    • status "declined": the recipient did not carry out the task — inform the user.
+  - Recipient flow (someone sent YOU a request): it appears in inbox.check with role: "received" →
+    confirm with the user → reply with inbox.respond. That is the end of your job.
+    Do NOT create a calendar event when you are the recipient — the sender books it (or the server
+    auto-confirms it under the sender's delegation) and you will receive a calendar invite.
+    When a received scheduling request surfaces, do not just list the candidates — in the same turn,
+    check the user's calendar (calendar.event.list over the candidate windows), determine which
+    candidates are free, and present: the request summary, which slots are open, your recommended
+    slot, and a confirmation question. Only call inbox.respond after the user confirms.
+
+  inbox.check results are point-in-time — when the user asks about responses or new requests,
+  ALWAYS call inbox.check again; never answer from a previous check result.
+
+  Example: tool="scheduling", action="scheduling.request", parameters={"to": "them@example.com", "topic": "sync", "durationMinutes": 30, "candidates": [{"start": "2026-06-12T10:00:00+09:00", "end": "2026-06-12T10:30:00+09:00"}]}
+  The response includes a schedulingUrl — always show it to the user so it can be shared via another channel if needed (the notification email is sent automatically but may not arrive).
+  inbox.send is the low-level primitive for other task types.
+  Example: tool="inbox", action="inbox.check", parameters={}
+  Example (recipient responds to a request): tool="inbox", action="inbox.respond", parameters={"id": "<inbox item id from inbox.check>", "action": "accept", "data": {"selectedSlot": {"start": "2026-06-18T14:00:00+09:00", "end": "2026-06-18T15:00:00+09:00"}}}
+  Example (requester completes after booking): tool="inbox", action="inbox.complete", parameters={"id": "<inbox item id>", "result": {"calendarEventId": "...", "meetUrl": "..."}}
+
+Call aidentity_list_available_tools for detailed parameter schemas of each action.`;
+exports.SERVER_INSTRUCTIONS = `This server provides identity-verified tool execution (VESS AIDENTITY).
+Scheduling: if the user gives a specific agreed time, create the calendar event
+directly. If the time is not yet agreed ("日程調整", "find a time"), compute candidate
+slots from the user's calendar — then count the other people. ONE counterpart:
+scheduling.request, then wait for the response. TWO OR MORE: scheduling.session.create
+followed by scheduling.coordinate (scheduling.request takes a single 'to', so sending it
+once per person makes separate negotiations that can settle on different times).
+Check progress with scheduling.session.status before scheduling.finalize, and tell the
+user the expiresAt that coordinate returns (the answer window defaults to 48h).
+Size candidateWindow to the user's intent. candidateWindow is a { start, end } range OR an array of
+ranges (max 5, total span ≤ 62 days); the server searches each range independently and spreads
+candidates across them. A specific named day → one range for that day. A per-day time band
+("平日午後") → one range PER business day ([{Mon 13-18}, {Tue 13-18}, …]) so the band is honored
+every day. Distinct bands ("月曜午前 or 木曜午後") → one range each. A single open stretch
+("next week", "平日で") → one wide range spanning the business days.
+At session start, call inbox.check once to surface pending task requests (role "received") AND
+responses to your own requests (role "sent"). As the requester, branch on the sent item's status —
+what a status means depends on its taskType, so read the item's taskType first.
+For a SCHEDULING item: "completed" means the server already auto-confirmed and booked it
+(calendarEventId + Meet link present) — do NOT create the event again, just tell the user the
+confirmed time and Meet link; "processing" means confirm with the user, then create the event
+(adding the counterpart to attendees) and call inbox.complete; "declined" means inform the user and
+do not book. For any NON-scheduling item (e.g. taskType "doc_review"): "completed" means the
+recipient delivered the result and the task is finished — the result is in the item's responseData,
+so report THAT and do not look for or invent a calendar event, a confirmed time, or a Meet link
+(none exists); "declined" means the recipient did not carry out the task — inform the user.
+As the recipient, reply with inbox.respond and stop —
+do not create the calendar event; the sender books it (or the server auto-confirms it under the
+sender's delegation) and you will receive a calendar invite.
+As the recipient, do not just list the candidates — in the same turn check the user's calendar over
+the candidate windows, determine which slots are free, and present the request summary, the open slots,
+your recommended slot, and a confirmation question; only call inbox.respond after the user confirms.
+inbox.check results are point-in-time — when the user asks about responses or new requests,
+ALWAYS call inbox.check again; never answer from a previous check result.
+Task requests/responses are signed as verifiable credentials.`;
+function createMcpServer(handler) {
+    const server = new mcp_js_1.McpServer({
+        name: 'VESS',
+        version: version_1.CLI_VERSION,
+    }, { instructions: exports.SERVER_INSTRUCTIONS });
+    // Migrated from the deprecated `server.tool(name, description, schema, cb)`
+    // overload to the v1.29+ `server.registerTool(name, config, cb)` API.
+    // Two reasons:
+    //   1. `server.tool()` is marked @deprecated in @modelcontextprotocol/sdk
+    //      1.29 (all six overloads — see dist/esm/server/mcp.d.ts).
+    //   2. The old overload's Zod schema inference blew up after the SDK
+    //      bump in PR #274, producing TS2589 "Type instantiation is
+    //      excessively deep and possibly infinite" on this file's three
+    //      call sites. `registerTool` takes a simpler config shape whose
+    //      inference doesn't recurse.
+    // Cast through `(...args: any[]) => any` to sidestep the generic
+    // constraint on `inputSchema` — mirrors the pattern already in use
+    // at packages/remote-mcp/src/server/mcp-server.factory.ts:94.
+    // Removable once `@modelcontextprotocol/sdk` ships a `registerTool`
+    // overload whose `inputSchema` constraint no longer triggers TS2589
+    // on this file's call sites — re-test by deleting the cast and
+    // running `pnpm --filter @vess-id/vess typecheck`.
+    const registerTool = server.registerTool.bind(server);
+    const formatResult = (result) => {
+        if (result.waitingForApproval) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify(result.waitingForApproval, null, 2),
+                    }],
+                isError: false,
+            };
+        }
+        if (result.approvalRequired) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify(result.approvalRequired, null, 2) }],
+                isError: false,
+            };
+        }
+        if (result.reauthRequired) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify(result.reauthRequired, null, 2) }],
+                isError: false,
+            };
+        }
+        if (result.success) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify(result.data, null, 2) }],
+            };
+        }
+        return {
+            content: [{ type: 'text', text: result.error || 'Unknown error' }],
+            isError: true,
+        };
+    };
+    registerTool('aidentity_call_tool', {
+        description: exports.CALL_TOOL_DESCRIPTION,
+        inputSchema: {
+            tool: toolEnum,
+            action: zod_1.z.string().describe(ACTION_FORMAT_DESC),
+            parameters: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional().describe('Tool-specific parameters'),
+            approval: zod_1.z.object({
+                token: zod_1.z.string().describe('HMAC-signed approval token from a previous approval_required response'),
+                choice: zod_1.z.enum(['one_time', 'persistent', 'deny_once', 'deny_persistent']).describe('User approval choice'),
+                vcTTLMinutes: zod_1.z.number().min(5).max(1440).optional().describe('Custom VC TTL in minutes (5-1440)'),
+                // Cedar 一元化 Step 3.5 retry-path context, handed back by the
+                // approval-outcome page after the user clicked 承認. Optional; when
+                // all four are present the engine consumes the single-use ledger
+                // token and lifts a prior Cedar `auth_required` → `permit`.
+                request_id: zod_1.z.string().optional()
+                    .describe('Approval-request id (`req_<uuid>`) from the prior auth_required response'),
+                outcome_id: zod_1.z.string().optional()
+                    .describe('Approval-outcome id (`outcome_<uuid>`) emitted when the user clicked 承認'),
+                // deny intent flows via `choice` (deny_once | deny_persistent); the
+                // `granted` boolean is not used for redeem (the ledger CAS is
+                // authoritative), so it was removed as dead schema surface.
+                granted_at: zod_1.z.string().optional()
+                    .describe('ISO-8601 timestamp of the approval action'),
+                granted_by: zod_1.z.string().optional()
+                    .describe('User id, or the literal "system" for auto-approve'),
+            }).optional().describe('Approval response — only provide when re-calling after an approval_required response'),
+            pendingRequestId: zod_1.z.string().optional()
+                .describe('Request ID from a previous waiting_for_approval response. Use to check if approval was completed.'),
+        },
+    }, async (args) => {
+        const result = await handler.callTool({
+            tool: args.tool,
+            action: args.action,
+            parameters: args.parameters,
+            approval: args.approval,
+            pendingRequestId: args.pendingRequestId,
+        });
+        return formatResult(result);
+    });
+    registerTool('aidentity_request_permission', {
+        description: 'OPTIONAL: Pre-request permission for multiple actions at once. ' +
+            'In most cases, use aidentity_call_tool directly instead — it handles permissions automatically.',
+        inputSchema: {
+            tool: toolEnum,
+            actions: zod_1.z.array(zod_1.z.string().describe(ACTION_FORMAT_DESC))
+                .describe('One or more actions to request permission for'),
+        },
+    }, async (args) => {
+        const result = await handler.issueToolPermission({
+            tool: args.tool,
+            actions: args.actions,
+        });
+        return formatResult(result);
+    });
+    registerTool('aidentity_list_available_tools', {
+        description: 'List all available tools and their supported actions.',
+        // Explicit empty shape mirrors the same pattern at
+        // packages/remote-mcp/src/server/mcp-server.factory.ts:197. The
+        // `any` cast above lets TS accept a missing `inputSchema`, but
+        // at runtime SDK 1.29 still wants the key present — omitting it
+        // silently works today but becomes a footgun if the SDK
+        // tightens the contract.
+        inputSchema: {},
+    }, async () => {
+        const result = await handler.listAvailableTools();
+        return formatResult(result);
+    });
+    return server;
+}
+//# sourceMappingURL=mcp-server.factory.js.map

package/dist/adapter/mcp/mcp-server.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.factory.js","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-server.factory.ts"],"names":[],"mappings":";;;AA4NA,0CAkKC;AA9XD,oEAAmE;AACnE,sDAAiF;AACjF,6BAAuB;AACvB,kDAAkD;AAGlD,oEAAoE;AACpE,MAAM,QAAQ,GAAG,OAAC,CAAC,IAAI,CAAC,6BAAwC,CAAC,CAAA;AAEjE,4DAA4D;AAC5D,MAAM,kBAAkB,GACtB,+DAA+D;IAC/D,IAAA,uCAAyB,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAE3B,QAAA,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mFAyI8C,CAAA;AAEtE,QAAA,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8DAkC2B,CAAA;AAiC9D,SAAgB,eAAe,CAAC,OAAuB;IACrD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAC1B;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qBAAW;KACrB,EACD,EAAE,YAAY,EAAE,2BAAmB,EAAE,CACtC,CAAA;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,eAAe;IACf,0EAA0E;IAC1E,gEAAgE;IAChE,qEAAqE;IACrE,gEAAgE;IAChE,oEAAoE;IACpE,qEAAqE;IACrE,kCAAkC;IAClC,iEAAiE;IACjE,mEAAmE;IACnE,8DAA8D;IAC9D,oEAAoE;IACpE,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAA4B,CAAA;IAEhF,MAAM,YAAY,GAAG,CAAC,MAOrB,EAAE,EAAE;QACH,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzD,CAAC;gBACF,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC5F,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1F,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aACjF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;YAC3E,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC,CAAA;IAED,YAAY,CACV,qBAAqB,EACrB;QACE,WAAW,EAAE,6BAAqB;QAClC,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC/C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACzF,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC;gBACjB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;gBACnG,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBAC3G,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;gBAClG,4DAA4D;gBAC5D,kEAAkE;gBAClE,iEAAiE;gBACjE,4DAA4D;gBAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;qBAC9B,QAAQ,CAAC,0EAA0E,CAAC;gBACvF,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;qBAC9B,QAAQ,CAAC,yEAAyE,CAAC;gBACtF,oEAAoE;gBACpE,8DAA8D;gBAC9D,4DAA4D;gBAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;qBAC9B,QAAQ,CAAC,2CAA2C,CAAC;gBACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;qBAC9B,QAAQ,CAAC,mDAAmD,CAAC;aACjE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sFAAsF,CAAC;YAC9G,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBACpC,QAAQ,CAAC,mGAAmG,CAAC;SACjH;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,MAAM,EAAE,IAAI,CAAC,MAAgB;YAC7B,UAAU,EAAE,IAAI,CAAC,UAA6C;YAC9D,QAAQ,EAAE,IAAI,CAAC,QAUF;YACb,gBAAgB,EAAE,IAAI,CAAC,gBAAsC;SAC9D,CAAC,CAAA;QACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,8BAA8B,EAC9B;QACE,WAAW,EACT,iEAAiE;YACjE,iGAAiG;QACnG,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;iBACtD,QAAQ,CAAC,+CAA+C,CAAC;SAC7D;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,OAAO,EAAE,IAAI,CAAC,OAAmB;SAClC,CAAC,CAAA;QACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,gCAAgC,EAChC;QACE,WAAW,EAAE,uDAAuD;QACpE,mDAAmD;QACnD,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,wDAAwD;QACxD,yBAAyB;QACzB,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAA;QACjD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/adapter/mcp/stdio-transport.d.ts

@@ -0,0 +1,7 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/**
+ * Connect MCP server via stdio transport.
+ * This is how AI clients (Claude Code, etc.) communicate with vess.
+ */
+export declare function connectStdioTransport(server: McpServer): Promise<void>;
+//# sourceMappingURL=stdio-transport.d.ts.map

package/dist/adapter/mcp/stdio-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-transport.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/stdio-transport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAEnE;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5E"}

package/dist/adapter/mcp/stdio-transport.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectStdioTransport = connectStdioTransport;
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+/**
+ * Connect MCP server via stdio transport.
+ * This is how AI clients (Claude Code, etc.) communicate with vess.
+ */
+async function connectStdioTransport(server) {
+    const transport = new stdio_js_1.StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=stdio-transport.js.map

package/dist/adapter/mcp/stdio-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio-transport.js","sourceRoot":"","sources":["../../../src/adapter/mcp/stdio-transport.ts"],"names":[],"mappings":";;AAOA,sDAGC;AAVD,wEAAgF;AAGhF;;;GAGG;AACI,KAAK,UAAU,qBAAqB,CAAC,MAAiB;IAC3D,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAA;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC"}

package/dist/adapter/mcp/transport.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Transport layer re-exports.
+ *
+ * - stdio: for single-client mode (used internally by MCP)
+ * - http: for multi-client daemon mode (vess daemon start)
+ */
+export { connectStdioTransport } from './stdio-transport';
+export { startHttpTransport } from './http-transport';
+export type { HttpTransportHandle } from './http-transport';
+//# sourceMappingURL=transport.d.ts.map

package/dist/adapter/mcp/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/transport.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA"}