@vess-id/vess 0.0.0-dev-20261015114836 → 0.0.0-dev-20261015223024

package/dist/adapter/mcp/mcp-adapter.d.ts

@@ -8,32 +8,12 @@ export declare class McpAdapter implements MCPToolHandler {
         tool: string;
         action: string;
         parameters?: Record<string, any>;
-        approval?: {
-            token: string;
-            choice: string;
-            vcTTLMinutes?: number;
-            request_id?: string;
-            outcome_id?: string;
-            granted_at?: string;
-            granted_by?: string;
-        };
-        pendingRequestId?: string;
     }): Promise<{
         success: boolean;
         data?: any;
         error?: string;
-        approvalRequired?: any;
-        waitingForApproval?: any;
         reauthRequired?: ReauthRequiredExecutionInfo;
     }>;
-    issueToolPermission(args: {
-        tool: string;
-        actions: string[];
-    }): Promise<{
-        success: boolean;
-        data?: any;
-        error?: string;
-    }>;
     /**
      * `aidentity_get_result`: read the outcome of a `pending` / `in_flight` call. Read-only — only the
      * request id reaches the engine (there is no action or parameters to execute).

package/dist/adapter/mcp/mcp-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-adapter.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-adapter.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAkB,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAE9E,qBAAa,UAAW,YAAW,cAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,eAAe;IAE9C,QAAQ,CAAC,IAAI,EAAE;QACnB,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,MAAM,CAAA;YACb,MAAM,EAAE,MAAM,CAAA;YACd,YAAY,CAAC,EAAE,MAAM,CAAA;YAIrB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;YAInB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;SACpB,CAAA;QACD,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,gBAAgB,CAAC,EAAE,GAAG,CAAA;QACtB,kBAAkB,CAAC,EAAE,GAAG,CAAA;QAIxB,cAAc,CAAC,EAAE,2BAA2B,CAAA;KAC7C,CAAC;IA+BI,mBAAmB,CAAC,IAAI,EAAE;QAC9B,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAW7D;;;OAGG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBvF,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGtF"}
+{"version":3,"file":"mcp-adapter.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-adapter.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAE9D,qBAAa,UAAW,YAAW,cAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,eAAe;IAE9C,QAAQ,CAAC,IAAI,EAAE;QACnB,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KACjC,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QAId,cAAc,CAAC,EAAE,2BAA2B,CAAA;KAC7C,CAAC;IAcF;;;OAGG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiBvF,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAGtF"}

package/dist/adapter/mcp/mcp-adapter.js

@@ -31,36 +31,9 @@ class McpAdapter {
             };
         }
         const action = (0, ai_identity_1.normalizeMcpActionName)(args.tool, args.action);
-        return this.engine.execute({
-            action,
-            input: args.parameters || {},
-            approval: args.approval
-                ? {
-                    token: args.approval.token,
-                    choice: args.approval.choice,
-                    vcTTLMinutes: args.approval.vcTTLMinutes,
-                    // Thread the Cedar retry-path context through so the engine can
-                    // consume the single-use ledger token (Step 3.5). All optional — the
-                    // engine only takes the retry path when request_id + outcome_id +
-                    // granted_at + granted_by are all present.
-                    request_id: args.approval.request_id,
-                    outcome_id: args.approval.outcome_id,
-                    granted_at: args.approval.granted_at,
-                    granted_by: args.approval.granted_by,
-                }
-                : undefined,
-            pendingRequestId: args.pendingRequestId,
-        });
-    }
-    async issueToolPermission(args) {
-        if (!args.tool || !Array.isArray(args.actions) || args.actions.length === 0) {
-            return {
-                success: false,
-                error: '"tool" and at least one "action" are required for issueToolPermission.',
-            };
-        }
-        const actions = args.actions.map(a => (0, ai_identity_1.normalizeMcpActionName)(args.tool, a));
-        return this.engine.requestPermissions(actions);
+        // 🔴 Only the action and its parameters: there is no approval hand-off through the tool call
+        //    (plan B, PR B4).
+        return this.engine.execute({ action, input: args.parameters || {} });
     }
     /**
      * `aidentity_get_result`: read the outcome of a `pending` / `in_flight` call. Read-only — only the

package/dist/adapter/mcp/mcp-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-adapter.js","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-adapter.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;GAeG;AACH,sDAA6D;AAK7D,MAAa,UAAU;IACQ;IAA7B,YAA6B,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAExD,KAAK,CAAC,QAAQ,CAAC,IAoBd;QAWC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EACH,+HAA+H;aAClI,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,oCAAsB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzB,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACrB,CAAC,CAAC;oBACE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;oBAC1B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAwB;oBAC9C,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;oBACxC,gEAAgE;oBAChE,qEAAqE;oBACrE,kEAAkE;oBAClE,2CAA2C;oBAC3C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;oBACpC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;oBACpC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;oBACpC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;iBACrC;gBACH,CAAC,CAAC,SAAS;YACb,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAGzB;QACC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wEAAwE;aAChF,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,oCAAsB,EAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,uEAAuE;QACvE,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,KAAK,EAAE;YAChB,SAAS,KAAK,GAAG;YACjB,SAAS,KAAK,IAAI,EAClB,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EACH,wFAAwF;aAC3F,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAA;IACzC,CAAC;CACF;AAtGD,gCAsGC"}
+{"version":3,"file":"mcp-adapter.js","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-adapter.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;GAeG;AACH,sDAA6D;AAK7D,MAAa,UAAU;IACQ;IAA7B,YAA6B,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAExD,KAAK,CAAC,QAAQ,CAAC,IAId;QASC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EACH,+HAA+H;aAClI,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,oCAAsB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7D,6FAA6F;QAC7F,sBAAsB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAA;IACtE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC/B,uEAAuE;QACvE,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,KAAK,EAAE;YAChB,SAAS,KAAK,GAAG;YACjB,SAAS,KAAK,IAAI,EAClB,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EACH,wFAAwF;aAC3F,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAA;IACzC,CAAC;CACF;AArDD,gCAqDC"}

package/dist/adapter/mcp/mcp-server.factory.d.ts

@@ -1,6 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { ReauthRequiredExecutionInfo } from '../../core/types';
-export declare const CALL_TOOL_DESCRIPTION = "Execute an action on an external service or local resource on behalf of the user.\nThis is the PRIMARY tool \u2014 always use this to perform actions. Permission is handled in-band:\n- Actions the user has delegated run immediately.\n- External-service actions that need the user's approval return status \"pending\" with a request_id and an approval URL. Present the URL to the user. Do NOT call this tool again for the same action: once the user approves, the call runs with exactly the arguments you sent. Read the outcome with aidentity_get_result { request_id }.\n- Local actions (os.*) that need approval return waiting_for_approval with an approval URL and a requestId; after the user approves in the browser, call this tool again with the same action and pendingRequestId.\n- Actions the user's settings do not permit are refused; approving case by case is not possible for those.\nDo NOT call aidentity_request_permission first; just call this tool directly.\n\nSupported tools and common actions:\n\n**os** \u2014 Read/write local secret files (.env, credentials, etc.)\n  Actions: os.secret.read, os.secret.write\n  Example: tool=\"os\", action=\"os.secret.read\", parameters={\"file_path\": \"~/projects/app/.env\"}\n\n**slack** \u2014 Post/read/update/delete messages, list channels, get user info.\n  Common actions: slack.message.post, slack.message.read, slack.channel.read, slack.batch.read\n  The \"channel\" parameter accepts channel ID (e.g. \"C0A159PP6QM\"), channel name (e.g. \"general\"), or #-prefixed name (e.g. \"#general\"). Responses are compact by default (essential fields only). Set compact=false for full Slack API response.\n  Example: tool=\"slack\", action=\"slack.message.post\", parameters={\"channel\": \"C01ABCD2EFG\", \"text\": \"Hello!\"}\n  Example: tool=\"slack\", action=\"slack.message.read\", parameters={\"channel\": \"C01ABCD2EFG\", \"limit\": 10}\n\n**github** \u2014 Create/read/update/list issues, pull requests, repositories, contents, labels, Actions workflows, stars, users, notifications and gists.\n  Common actions: github.issue.create, github.issue.list, github.issue.read, github.issue.search, github.issue.comment.create, github.pr.create, github.pr.list, github.pr.read, github.pr.merge, github.repo.search, github.content.get, github.content.createOrUpdate, github.branch.list, github.branch.create, github.commit.list, github.code.search, github.repo.create, github.repo.fork, github.label.list, github.label.write, github.workflow.list, github.workflow.run, github.workflow.jobLogs.get, github.repo.starred.list, github.repo.star, github.user.me.get, github.org.teams.list, github.team.members.list, github.user.search, github.notification.list, github.notification.get, github.notification.markRead, github.notification.markAllRead, github.gist.create, github.gist.get, github.gist.list, github.gist.update\n  Example: tool=\"github\", action=\"github.issue.create\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"title\": \"Bug report\", \"body\": \"Details...\"}\n  Example: tool=\"github\", action=\"github.pr.create\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"title\": \"Fix bug\", \"head\": \"feature-branch\", \"base\": \"main\"}\n  Example: tool=\"github\", action=\"github.content.get\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"path\": \"README.md\"}\n\n**jira** \u2014 Manage issues, projects, boards, sprints.\n  Common actions: jira.issue.create, jira.issue.search, jira.project.read\n\n**gmail** \u2014 Search/read/send/draft/delete emails, list labels.\n  Common actions: gmail.message.search, gmail.message.read, gmail.message.send, gmail.draft.create, gmail.label.read\n  Example (new email): tool=\"gmail\", action=\"gmail.message.send\", parameters={\"to\": \"user@example.com\", \"subject\": \"Hello\", \"body\": \"Message content\"}\n  Example (draft): tool=\"gmail\", action=\"gmail.draft.create\", parameters={\"to\": \"user@example.com\", \"subject\": \"Draft subject\", \"body\": \"Draft content\"}\n  Example (search): tool=\"gmail\", action=\"gmail.message.search\", parameters={\"query\": \"from:boss subject:urgent\"}\n  **Replying to emails**: When replying, you MUST include threading parameters to ensure the reply is properly threaded:\n  1. First read the original message with gmail.message.read to get its threadId and Message-ID header (look for {name: \"Message-ID\", value: \"...\"} in the payload.headers array).\n  2. Then send with: threadId (from the read response top-level field), inReplyTo (the Message-ID header value), references (space-separated Message-IDs for the full thread chain; for a first reply, just the single Message-ID).\n  Example (reply): tool=\"gmail\", action=\"gmail.message.send\", parameters={\"to\": \"sender@example.com\", \"subject\": \"Re: Original Subject\", \"body\": \"Reply content\", \"threadId\": \"18e1234abcd\", \"inReplyTo\": \"<CABx...@mail.gmail.com>\", \"references\": \"<CABx...@mail.gmail.com>\"}\n\n**outlook** \u2014 Search/read/send/draft Outlook (Microsoft 365) email, list mail folders, trash or permanently delete messages. This is a SEPARATE tool from gmail \u2014 for a user connected via Microsoft, use tool=\"outlook\" with outlook.* actions; do not send gmail.* actions to it.\n  Common actions: outlook.message.search, outlook.message.read, outlook.message.send, outlook.draft.create, outlook.folder.read, outlook.message.trash, outlook.message.delete, outlook.batch.read\n  Example (new email): tool=\"outlook\", action=\"outlook.message.send\", parameters={\"to\": \"user@example.com\", \"subject\": \"Hello\", \"body\": \"Message content\"}\n  Example (search): tool=\"outlook\", action=\"outlook.message.search\", parameters={\"query\": \"from:boss subject:urgent\"}\n  Example (read): tool=\"outlook\", action=\"outlook.message.read\", parameters={\"messageId\": \"<id from a search result>\"}\n  Example (draft): tool=\"outlook\", action=\"outlook.draft.create\", parameters={\"to\": \"user@example.com\", \"subject\": \"Draft subject\", \"body\": \"Draft content\"}\n  Recipients (to/cc/bcc) are comma-separated address strings. The body is plain text. Read/search results are compacted (decoded body text, key headers, flags \u2014 no attachment binaries). Use outlook.message.trash to move a message to Deleted Items (recoverable) and outlook.message.delete only for a permanent, irreversible delete.\n\n**calendar** \u2014 List/create/update/delete calendar events. Works with whichever calendar the user connected \u2014 Google Calendar or Microsoft Outlook; the actions, parameters and response shape are identical for both, so never assume a provider.\n  Common actions: calendar.event.list, calendar.event.create\n  IMPORTANT: start and end MUST be objects with dateTime property, not flat strings.\n  Example: tool=\"calendar\", action=\"calendar.event.create\", parameters={\"summary\": \"Meeting\", \"start\": {\"dateTime\": \"2026-07-15T10:00:00\", \"timeZone\": \"Asia/Tokyo\"}, \"end\": {\"dateTime\": \"2026-07-15T11:00:00\", \"timeZone\": \"Asia/Tokyo\"}}\n  Example (with an online meeting): tool=\"calendar\", action=\"calendar.event.create\", parameters={\"summary\": \"Sync\", \"start\": {\"dateTime\": \"2026-07-15T10:00:00\", \"timeZone\": \"Asia/Tokyo\"}, \"end\": {\"dateTime\": \"2026-07-15T10:30:00\", \"timeZone\": \"Asia/Tokyo\"}, \"attendees\": [{\"email\": \"them@example.com\"}], \"addMeet\": true, \"meetRequestId\": \"<stable unique id>\"}\n  To attach an online meeting link, use addMeet/meetRequestId \u2014 the provider mints it (Google Meet on Google, Teams on Outlook). Raw conferenceData/conferenceDataVersion parameters are NOT supported and will be ignored.\n  Events come back in one provider-neutral shape: id, summary, start/end, attendees, location, conferenceUrl (the meeting join URL), htmlLink. Read the join URL from conferenceUrl \u2014 provider-specific fields such as hangoutLink are not returned.\n\n**hubspot** \u2014 Read/search/create CRM objects (contacts, companies, deals), properties, associations, engagements.\n  Common actions: hubspot.crm.objects.search, hubspot.crm.objects.list, hubspot.crm.objects.batchCreate, hubspot.crm.properties.list, hubspot.crm.engagements.create, hubspot.crm.associations.list, hubspot.account.userDetails.get\n  Most CRM actions require an \"objectType\" parameter (e.g. \"contacts\", \"companies\", \"deals\", or a custom object type ID).\n  Example (search): tool=\"hubspot\", action=\"hubspot.crm.objects.search\", parameters={\"objectType\": \"contacts\", \"query\": \"acme\"}\n  Example (create): tool=\"hubspot\", action=\"hubspot.crm.objects.batchCreate\", parameters={\"objectType\": \"contacts\", \"inputs\": [{\"properties\": {\"email\": \"jane@example.com\", \"firstname\": \"Jane\"}}]}\n  For hubspot.crm.engagements.create use parameter key \"type\" (not \"engagementType\"); values \"NOTE\"/\"TASK\". ownerId comes from hubspot.account.userDetails.get.\n\n**linear** \u2014 Linear issue tracker with full CRUD for issues, comments, projects, and more.\n  Issue operations: linear.issue.list, linear.issue.read, linear.issue.search, linear.issue.create, linear.issue.update, linear.issue.archive, linear.issue.unarchive, linear.issue.delete, linear.issue.addLabel, linear.issue.removeLabel, linear.issue.subscribe\n  Comment management: linear.comment.create, linear.comment.list, linear.comment.update, linear.comment.delete, linear.comment.resolve, linear.comment.unresolve\n  Issue relations: linear.issueRelation.create, linear.issueRelation.list, linear.issueRelation.delete\n  Cycles/Sprints: linear.cycle.list, linear.cycle.read, linear.cycle.create, linear.cycle.update\n  Labels: linear.label.list, linear.label.create, linear.label.update\n  Attachments: linear.attachment.create, linear.attachment.list, linear.attachment.delete\n  Projects: linear.project.list, linear.project.read, linear.project.create, linear.project.update\n  Other: linear.team.list, linear.workflowState.list, linear.viewer.read, linear.user.list\n  Example: { \"tool\": \"linear\", \"action\": \"linear.issue.list\", \"parameters\": { \"teamId\": \"<team-id>\", \"limit\": 20 } }\n  Example (create): { \"tool\": \"linear\", \"action\": \"linear.issue.create\", \"parameters\": { \"teamId\": \"<team-id>\", \"title\": \"Bug report\" } }\n  Use linear.team.list to discover teamIds, and linear.workflowState.list to find valid state IDs.\n\n\nCall aidentity_list_available_tools for detailed parameter schemas of each action.";
+export declare const CALL_TOOL_DESCRIPTION = "Execute an action on an external service or local resource on behalf of the user.\nThis is the PRIMARY tool \u2014 always use this to perform actions. Permission is handled in-band:\n- Actions the user has delegated run immediately.\n- Actions that need the user's approval return status \"pending\" with a request_id and an approval URL. Present the URL to the user. Do NOT call this tool again for the same action: once the user approves, the call runs by itself with exactly the arguments you sent. Read the outcome with aidentity_get_result { request_id }.\n- Actions the user's settings do not permit are refused; approving case by case is not possible for those.\nThere is no separate permission tool.\n\nSupported tools and common actions:\n\n**os** \u2014 Read/write local secret files (.env, credentials, etc.)\n  Actions: os.secret.read, os.secret.write\n  Example: tool=\"os\", action=\"os.secret.read\", parameters={\"file_path\": \"~/projects/app/.env\"}\n\n**slack** \u2014 Post/read/update/delete messages, list channels, get user info.\n  Common actions: slack.message.post, slack.message.read, slack.channel.read, slack.batch.read\n  The \"channel\" parameter accepts channel ID (e.g. \"C0A159PP6QM\"), channel name (e.g. \"general\"), or #-prefixed name (e.g. \"#general\"). Responses are compact by default (essential fields only). Set compact=false for full Slack API response.\n  Example: tool=\"slack\", action=\"slack.message.post\", parameters={\"channel\": \"C01ABCD2EFG\", \"text\": \"Hello!\"}\n  Example: tool=\"slack\", action=\"slack.message.read\", parameters={\"channel\": \"C01ABCD2EFG\", \"limit\": 10}\n\n**github** \u2014 Create/read/update/list issues, pull requests, repositories, contents, labels, Actions workflows, stars, users, notifications and gists.\n  Common actions: github.issue.create, github.issue.list, github.issue.read, github.issue.search, github.issue.comment.create, github.pr.create, github.pr.list, github.pr.read, github.pr.merge, github.repo.search, github.content.get, github.content.createOrUpdate, github.branch.list, github.branch.create, github.commit.list, github.code.search, github.repo.create, github.repo.fork, github.label.list, github.label.write, github.workflow.list, github.workflow.run, github.workflow.jobLogs.get, github.repo.starred.list, github.repo.star, github.user.me.get, github.org.teams.list, github.team.members.list, github.user.search, github.notification.list, github.notification.get, github.notification.markRead, github.notification.markAllRead, github.gist.create, github.gist.get, github.gist.list, github.gist.update\n  Example: tool=\"github\", action=\"github.issue.create\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"title\": \"Bug report\", \"body\": \"Details...\"}\n  Example: tool=\"github\", action=\"github.pr.create\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"title\": \"Fix bug\", \"head\": \"feature-branch\", \"base\": \"main\"}\n  Example: tool=\"github\", action=\"github.content.get\", parameters={\"owner\": \"org\", \"repo\": \"repo\", \"path\": \"README.md\"}\n\n**jira** \u2014 Manage issues, projects, boards, sprints.\n  Common actions: jira.issue.create, jira.issue.search, jira.project.read\n\n**gmail** \u2014 Search/read/send/draft/delete emails, list labels.\n  Common actions: gmail.message.search, gmail.message.read, gmail.message.send, gmail.draft.create, gmail.label.read\n  Example (new email): tool=\"gmail\", action=\"gmail.message.send\", parameters={\"to\": \"user@example.com\", \"subject\": \"Hello\", \"body\": \"Message content\"}\n  Example (draft): tool=\"gmail\", action=\"gmail.draft.create\", parameters={\"to\": \"user@example.com\", \"subject\": \"Draft subject\", \"body\": \"Draft content\"}\n  Example (search): tool=\"gmail\", action=\"gmail.message.search\", parameters={\"query\": \"from:boss subject:urgent\"}\n  **Replying to emails**: When replying, you MUST include threading parameters to ensure the reply is properly threaded:\n  1. First read the original message with gmail.message.read to get its threadId and Message-ID header (look for {name: \"Message-ID\", value: \"...\"} in the payload.headers array).\n  2. Then send with: threadId (from the read response top-level field), inReplyTo (the Message-ID header value), references (space-separated Message-IDs for the full thread chain; for a first reply, just the single Message-ID).\n  Example (reply): tool=\"gmail\", action=\"gmail.message.send\", parameters={\"to\": \"sender@example.com\", \"subject\": \"Re: Original Subject\", \"body\": \"Reply content\", \"threadId\": \"18e1234abcd\", \"inReplyTo\": \"<CABx...@mail.gmail.com>\", \"references\": \"<CABx...@mail.gmail.com>\"}\n\n**outlook** \u2014 Search/read/send/draft Outlook (Microsoft 365) email, list mail folders, trash or permanently delete messages. This is a SEPARATE tool from gmail \u2014 for a user connected via Microsoft, use tool=\"outlook\" with outlook.* actions; do not send gmail.* actions to it.\n  Common actions: outlook.message.search, outlook.message.read, outlook.message.send, outlook.draft.create, outlook.folder.read, outlook.message.trash, outlook.message.delete, outlook.batch.read\n  Example (new email): tool=\"outlook\", action=\"outlook.message.send\", parameters={\"to\": \"user@example.com\", \"subject\": \"Hello\", \"body\": \"Message content\"}\n  Example (search): tool=\"outlook\", action=\"outlook.message.search\", parameters={\"query\": \"from:boss subject:urgent\"}\n  Example (read): tool=\"outlook\", action=\"outlook.message.read\", parameters={\"messageId\": \"<id from a search result>\"}\n  Example (draft): tool=\"outlook\", action=\"outlook.draft.create\", parameters={\"to\": \"user@example.com\", \"subject\": \"Draft subject\", \"body\": \"Draft content\"}\n  Recipients (to/cc/bcc) are comma-separated address strings. The body is plain text. Read/search results are compacted (decoded body text, key headers, flags \u2014 no attachment binaries). Use outlook.message.trash to move a message to Deleted Items (recoverable) and outlook.message.delete only for a permanent, irreversible delete.\n\n**calendar** \u2014 List/create/update/delete calendar events. Works with whichever calendar the user connected \u2014 Google Calendar or Microsoft Outlook; the actions, parameters and response shape are identical for both, so never assume a provider.\n  Common actions: calendar.event.list, calendar.event.create\n  IMPORTANT: start and end MUST be objects with dateTime property, not flat strings.\n  Example: tool=\"calendar\", action=\"calendar.event.create\", parameters={\"summary\": \"Meeting\", \"start\": {\"dateTime\": \"2026-07-15T10:00:00\", \"timeZone\": \"Asia/Tokyo\"}, \"end\": {\"dateTime\": \"2026-07-15T11:00:00\", \"timeZone\": \"Asia/Tokyo\"}}\n  Example (with an online meeting): tool=\"calendar\", action=\"calendar.event.create\", parameters={\"summary\": \"Sync\", \"start\": {\"dateTime\": \"2026-07-15T10:00:00\", \"timeZone\": \"Asia/Tokyo\"}, \"end\": {\"dateTime\": \"2026-07-15T10:30:00\", \"timeZone\": \"Asia/Tokyo\"}, \"attendees\": [{\"email\": \"them@example.com\"}], \"addMeet\": true, \"meetRequestId\": \"<stable unique id>\"}\n  To attach an online meeting link, use addMeet/meetRequestId \u2014 the provider mints it (Google Meet on Google, Teams on Outlook). Raw conferenceData/conferenceDataVersion parameters are NOT supported and will be ignored.\n  Events come back in one provider-neutral shape: id, summary, start/end, attendees, location, conferenceUrl (the meeting join URL), htmlLink. Read the join URL from conferenceUrl \u2014 provider-specific fields such as hangoutLink are not returned.\n\n**hubspot** \u2014 Read/search/create CRM objects (contacts, companies, deals), properties, associations, engagements.\n  Common actions: hubspot.crm.objects.search, hubspot.crm.objects.list, hubspot.crm.objects.batchCreate, hubspot.crm.properties.list, hubspot.crm.engagements.create, hubspot.crm.associations.list, hubspot.account.userDetails.get\n  Most CRM actions require an \"objectType\" parameter (e.g. \"contacts\", \"companies\", \"deals\", or a custom object type ID).\n  Example (search): tool=\"hubspot\", action=\"hubspot.crm.objects.search\", parameters={\"objectType\": \"contacts\", \"query\": \"acme\"}\n  Example (create): tool=\"hubspot\", action=\"hubspot.crm.objects.batchCreate\", parameters={\"objectType\": \"contacts\", \"inputs\": [{\"properties\": {\"email\": \"jane@example.com\", \"firstname\": \"Jane\"}}]}\n  For hubspot.crm.engagements.create use parameter key \"type\" (not \"engagementType\"); values \"NOTE\"/\"TASK\". ownerId comes from hubspot.account.userDetails.get.\n\n**linear** \u2014 Linear issue tracker with full CRUD for issues, comments, projects, and more.\n  Issue operations: linear.issue.list, linear.issue.read, linear.issue.search, linear.issue.create, linear.issue.update, linear.issue.archive, linear.issue.unarchive, linear.issue.delete, linear.issue.addLabel, linear.issue.removeLabel, linear.issue.subscribe\n  Comment management: linear.comment.create, linear.comment.list, linear.comment.update, linear.comment.delete, linear.comment.resolve, linear.comment.unresolve\n  Issue relations: linear.issueRelation.create, linear.issueRelation.list, linear.issueRelation.delete\n  Cycles/Sprints: linear.cycle.list, linear.cycle.read, linear.cycle.create, linear.cycle.update\n  Labels: linear.label.list, linear.label.create, linear.label.update\n  Attachments: linear.attachment.create, linear.attachment.list, linear.attachment.delete\n  Projects: linear.project.list, linear.project.read, linear.project.create, linear.project.update\n  Other: linear.team.list, linear.workflowState.list, linear.viewer.read, linear.user.list\n  Example: { \"tool\": \"linear\", \"action\": \"linear.issue.list\", \"parameters\": { \"teamId\": \"<team-id>\", \"limit\": 20 } }\n  Example (create): { \"tool\": \"linear\", \"action\": \"linear.issue.create\", \"parameters\": { \"teamId\": \"<team-id>\", \"title\": \"Bug report\" } }\n  Use linear.team.list to discover teamIds, and linear.workflowState.list to find valid state IDs.\n\n\nCall aidentity_list_available_tools for detailed parameter schemas of each action.";
 export declare const SERVER_INSTRUCTIONS = "This server provides identity-verified tool execution (VESS AIDENTITY).\nCalendar: if the user gives a specific agreed time, create the calendar event directly\n(calendar.event.create).\nTool calls are authorized with verifiable credentials.";
 /** Same text as remote-mcp's `GET_RESULT_DESCRIPTION`. */
 export declare const GET_RESULT_DESCRIPTION: string;
@@ -9,33 +9,12 @@ export interface MCPToolHandler {
         tool: string;
         action: string;
         parameters?: Record<string, any>;
-        approval?: {
-            token: string;
-            choice: string;
-            vcTTLMinutes?: number;
-            request_id?: string;
-            outcome_id?: string;
-            granted?: boolean;
-            granted_at?: string;
-            granted_by?: string;
-        };
-        pendingRequestId?: string;
     }): Promise<{
         success: boolean;
         data?: any;
         error?: string;
-        approvalRequired?: any;
-        waitingForApproval?: any;
         reauthRequired?: ReauthRequiredExecutionInfo;
     }>;
-    issueToolPermission(args: {
-        tool: string;
-        actions: string[];
-    }): Promise<{
-        success: boolean;
-        data?: any;
-        error?: string;
-    }>;
     listAvailableTools(): Promise<{
         success: boolean;
         data?: any;

package/dist/adapter/mcp/mcp-server.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.factory.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-server.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAInE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAUnE,eAAO,MAAM,qBAAqB,4xUA4EiD,CAAA;AAEnF,eAAO,MAAM,mBAAmB,sPAGuB,CAAA;AAEvD,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB,QAG8D,CAAA;AAEjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,QAAQ,CAAC,EAAE;YACT,KAAK,EAAE,MAAM,CAAA;YACb,MAAM,EAAE,MAAM,CAAA;YACd,YAAY,CAAC,EAAE,MAAM,CAAA;YAIrB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,OAAO,CAAC,EAAE,OAAO,CAAA;YACjB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,UAAU,CAAC,EAAE,MAAM,CAAA;SACpB,CAAA;QACD,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,GAAG,OAAO,CAAC;QACV,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,gBAAgB,CAAC,EAAE,GAAG,CAAA;QACtB,kBAAkB,CAAC,EAAE,GAAG,CAAA;QACxB,cAAc,CAAC,EAAE,2BAA2B,CAAA;KAC7C,CAAC,CAAA;IACF,mBAAmB,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,EAAE,CAAA;KAClB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC7D,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACxF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAoNlE"}
+{"version":3,"file":"mcp-server.factory.d.ts","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-server.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AAInE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAUnE,eAAO,MAAM,qBAAqB,whUA2EiD,CAAA;AAEnF,eAAO,MAAM,mBAAmB,sPAGuB,CAAA;AAEvD,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB,QAG8D,CAAA;AAEjG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC;QAC1F,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,GAAG,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,cAAc,CAAC,EAAE,2BAA2B,CAAA;KAC7C,CAAC,CAAA;IACF,kBAAkB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC/E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACxF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAiHlE"}

package/dist/adapter/mcp/mcp-server.factory.js

@@ -14,10 +14,9 @@ const ACTION_FORMAT_DESC = 'Action in provider.resource.operation format. Valid
 exports.CALL_TOOL_DESCRIPTION = `Execute an action on an external service or local resource on behalf of the user.
 This is the PRIMARY tool — always use this to perform actions. Permission is handled in-band:
 - Actions the user has delegated run immediately.
-- External-service actions that need the user's approval return status "pending" with a request_id and an approval URL. Present the URL to the user. Do NOT call this tool again for the same action: once the user approves, the call runs with exactly the arguments you sent. Read the outcome with aidentity_get_result { request_id }.
-- Local actions (os.*) that need approval return waiting_for_approval with an approval URL and a requestId; after the user approves in the browser, call this tool again with the same action and pendingRequestId.
+- Actions that need the user's approval return status "pending" with a request_id and an approval URL. Present the URL to the user. Do NOT call this tool again for the same action: once the user approves, the call runs by itself with exactly the arguments you sent. Read the outcome with aidentity_get_result { request_id }.
 - Actions the user's settings do not permit are refused; approving case by case is not possible for those.
-Do NOT call aidentity_request_permission first; just call this tool directly.
+There is no separate permission tool.
 
 Supported tools and common actions:
 
@@ -120,25 +119,6 @@ function createMcpServer(handler) {
     // running `pnpm --filter @vess-id/vess typecheck`.
     const registerTool = server.registerTool.bind(server);
     const formatResult = (result) => {
-        if (result.waitingForApproval) {
-            return {
-                content: [
-                    {
-                        type: 'text',
-                        text: JSON.stringify(result.waitingForApproval, null, 2),
-                    },
-                ],
-                isError: false,
-            };
-        }
-        if (result.approvalRequired) {
-            return {
-                content: [
-                    { type: 'text', text: JSON.stringify(result.approvalRequired, null, 2) },
-                ],
-                isError: false,
-            };
-        }
         if (result.reauthRequired) {
             return {
                 content: [{ type: 'text', text: JSON.stringify(result.reauthRequired, null, 2) }],
@@ -161,55 +141,15 @@ function createMcpServer(handler) {
             tool: toolEnum,
             action: zod_1.z.string().describe(ACTION_FORMAT_DESC),
             parameters: zod_1.z.record(zod_1.z.string(), zod_1.z.any()).optional().describe('Tool-specific parameters'),
-            approval: zod_1.z
-                .object({
-                token: zod_1.z
-                    .string()
-                    .describe('HMAC-signed approval token from a previous approval_required response'),
-                choice: zod_1.z
-                    .enum(['one_time', 'persistent', 'deny_once', 'deny_persistent'])
-                    .describe('User approval choice'),
-                vcTTLMinutes: zod_1.z
-                    .number()
-                    .min(5)
-                    .max(1440)
-                    .optional()
-                    .describe('Custom VC TTL in minutes (5-1440)'),
-                // Cedar 一元化 Step 3.5 retry-path context, handed back by the
-                // approval-outcome page after the user clicked 承認. Optional; when
-                // all four are present the engine consumes the single-use ledger
-                // token and lifts a prior Cedar `auth_required` → `permit`.
-                request_id: zod_1.z
-                    .string()
-                    .optional()
-                    .describe('Approval-request id (`req_<uuid>`) from the prior auth_required response'),
-                outcome_id: zod_1.z
-                    .string()
-                    .optional()
-                    .describe('Approval-outcome id (`outcome_<uuid>`) emitted when the user clicked 承認'),
-                // deny intent flows via `choice` (deny_once | deny_persistent); the
-                // `granted` boolean is not used for redeem (the ledger CAS is
-                // authoritative), so it was removed as dead schema surface.
-                granted_at: zod_1.z.string().optional().describe('ISO-8601 timestamp of the approval action'),
-                granted_by: zod_1.z
-                    .string()
-                    .optional()
-                    .describe('User id, or the literal "system" for auto-approve'),
-            })
-                .optional()
-                .describe('Deprecated: refused for every action (there is no approval hand-off through the tool call). Removed in a later release.'),
-            pendingRequestId: zod_1.z
-                .string()
-                .optional()
-                .describe('Local (os.*) actions only: the requestId from a previous waiting_for_approval response, to run the call after the user approved it in the browser. Refused for other actions — use aidentity_get_result with the request_id instead.'),
         },
     }, async (args) => {
+        // 🔴 Only these three keys reach the engine. A host that still sends the removed `approval` /
+        //    `pendingRequestId` (plan B, PR B4) gets them dropped here (and by the MCP SDK's zod parse,
+        //    which strips unknown keys): the call runs as an ordinary call through the issuer.
         const result = await handler.callTool({
             tool: args.tool,
             action: args.action,
             parameters: args.parameters,
-            approval: args.approval,
-            pendingRequestId: args.pendingRequestId,
         });
         return formatResult(result);
     });
@@ -226,22 +166,6 @@ function createMcpServer(handler) {
         const result = await handler.getResult(String(args?.request_id ?? ''));
         return formatResult(result);
     });
-    registerTool('aidentity_request_permission', {
-        description: 'OPTIONAL: Pre-request permission for multiple actions at once. ' +
-            'In most cases, use aidentity_call_tool directly instead — it handles permissions automatically.',
-        inputSchema: {
-            tool: toolEnum,
-            actions: zod_1.z
-                .array(zod_1.z.string().describe(ACTION_FORMAT_DESC))
-                .describe('One or more actions to request permission for'),
-        },
-    }, async (args) => {
-        const result = await handler.issueToolPermission({
-            tool: args.tool,
-            actions: args.actions,
-        });
-        return formatResult(result);
-    });
     registerTool('aidentity_list_available_tools', {
         description: 'List all available tools and their supported actions.',
         // Explicit empty shape mirrors the same pattern at

package/dist/adapter/mcp/mcp-server.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-server.factory.js","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-server.factory.ts"],"names":[],"mappings":";;;AA0IA,0CAoNC;AA9VD,oEAAmE;AACnE,sDAAiF;AACjF,6BAAuB;AACvB,kDAAkD;AAGlD,oEAAoE;AACpE,MAAM,QAAQ,GAAG,OAAC,CAAC,IAAI,CAAC,6BAAwC,CAAC,CAAA;AAEjE,4DAA4D;AAC5D,MAAM,kBAAkB,GACtB,+DAA+D;IAC/D,IAAA,uCAAyB,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAE3B,QAAA,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mFA4E8C,CAAA;AAEtE,QAAA,mBAAmB,GAAG;;;uDAGoB,CAAA;AAEvD,0DAA0D;AAC7C,QAAA,sBAAsB,GACjC,oGAAoG;IACpG,uEAAuE;IACvE,+FAA+F,CAAA;AAqCjG,SAAgB,eAAe,CAAC,OAAuB;IACrD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAC1B;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qBAAW;KACrB,EACD,EAAE,YAAY,EAAE,2BAAmB,EAAE,CACtC,CAAA;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,eAAe;IACf,0EAA0E;IAC1E,gEAAgE;IAChE,qEAAqE;IACrE,gEAAgE;IAChE,oEAAoE;IACpE,qEAAqE;IACrE,kCAAkC;IAClC,iEAAiE;IACjE,mEAAmE;IACnE,8DAA8D;IAC9D,oEAAoE;IACpE,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAA4B,CAAA;IAEhF,MAAM,YAAY,GAAG,CAAC,MAOrB,EAAE,EAAE;QACH,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9B,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;qBACzD;iBACF;gBACD,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;iBAClF;gBACD,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1F,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aACjF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;YAC3E,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC,CAAA;IAED,YAAY,CACV,qBAAqB,EACrB;QACE,WAAW,EAAE,6BAAqB;QAClC,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC/C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YACzF,QAAQ,EAAE,OAAC;iBACR,MAAM,CAAC;gBACN,KAAK,EAAE,OAAC;qBACL,MAAM,EAAE;qBACR,QAAQ,CAAC,uEAAuE,CAAC;gBACpF,MAAM,EAAE,OAAC;qBACN,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;qBAChE,QAAQ,CAAC,sBAAsB,CAAC;gBACnC,YAAY,EAAE,OAAC;qBACZ,MAAM,EAAE;qBACR,GAAG,CAAC,CAAC,CAAC;qBACN,GAAG,CAAC,IAAI,CAAC;qBACT,QAAQ,EAAE;qBACV,QAAQ,CAAC,mCAAmC,CAAC;gBAChD,4DAA4D;gBAC5D,kEAAkE;gBAClE,iEAAiE;gBACjE,4DAA4D;gBAC5D,UAAU,EAAE,OAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,0EAA0E,CAAC;gBACvF,UAAU,EAAE,OAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,yEAAyE,CAC1E;gBACH,oEAAoE;gBACpE,8DAA8D;gBAC9D,4DAA4D;gBAC5D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;gBACvF,UAAU,EAAE,OAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CAAC,mDAAmD,CAAC;aACjE,CAAC;iBACD,QAAQ,EAAE;iBACV,QAAQ,CACP,yHAAyH,CAC1H;YACH,gBAAgB,EAAE,OAAC;iBAChB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,sOAAsO,CACvO;SACJ;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,MAAM,EAAE,IAAI,CAAC,MAAgB;YAC7B,UAAU,EAAE,IAAI,CAAC,UAA6C;YAC9D,QAAQ,EAAE,IAAI,CAAC,QAUF;YACb,gBAAgB,EAAE,IAAI,CAAC,gBAAsC;SAC9D,CAAC,CAAA;QACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,sBAAsB,EACtB;QACE,WAAW,EAAE,8BAAsB;QACnC,WAAW,EAAE;YACX,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,CACP,sFAAsF,CACvF;SACJ;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,8FAA8F;QAC9F,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;QACtE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,8BAA8B,EAC9B;QACE,WAAW,EACT,iEAAiE;YACjE,iGAAiG;QACnG,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,OAAC;iBACP,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;iBAC9C,QAAQ,CAAC,+CAA+C,CAAC;SAC7D;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,OAAO,EAAE,IAAI,CAAC,OAAmB;SAClC,CAAC,CAAA;QACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,gCAAgC,EAChC;QACE,WAAW,EAAE,uDAAuD;QACpE,mDAAmD;QACnD,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,wDAAwD;QACxD,yBAAyB;QACzB,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAA;QACjD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"mcp-server.factory.js","sourceRoot":"","sources":["../../../src/adapter/mcp/mcp-server.factory.ts"],"names":[],"mappings":";;;AAiHA,0CAiHC;AAlOD,oEAAmE;AACnE,sDAAiF;AACjF,6BAAuB;AACvB,kDAAkD;AAGlD,oEAAoE;AACpE,MAAM,QAAQ,GAAG,OAAC,CAAC,IAAI,CAAC,6BAAwC,CAAC,CAAA;AAEjE,4DAA4D;AAC5D,MAAM,kBAAkB,GACtB,+DAA+D;IAC/D,IAAA,uCAAyB,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAE3B,QAAA,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mFA2E8C,CAAA;AAEtE,QAAA,mBAAmB,GAAG;;;uDAGoB,CAAA;AAEvD,0DAA0D;AAC7C,QAAA,sBAAsB,GACjC,oGAAoG;IACpG,uEAAuE;IACvE,+FAA+F,CAAA;AAajG,SAAgB,eAAe,CAAC,OAAuB;IACrD,MAAM,MAAM,GAAG,IAAI,kBAAS,CAC1B;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qBAAW;KACrB,EACD,EAAE,YAAY,EAAE,2BAAmB,EAAE,CACtC,CAAA;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,eAAe;IACf,0EAA0E;IAC1E,gEAAgE;IAChE,qEAAqE;IACrE,gEAAgE;IAChE,oEAAoE;IACpE,qEAAqE;IACrE,kCAAkC;IAClC,iEAAiE;IACjE,mEAAmE;IACnE,8DAA8D;IAC9D,oEAAoE;IACpE,oEAAoE;IACpE,+DAA+D;IAC/D,mDAAmD;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAA4B,CAAA;IAEhF,MAAM,YAAY,GAAG,CAAC,MAKrB,EAAE,EAAE;QACH,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1F,OAAO,EAAE,KAAK;aACf,CAAA;QACH,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aACjF,CAAA;QACH,CAAC;QACD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;YAC3E,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC,CAAA;IAED,YAAY,CACV,qBAAqB,EACrB;QACE,WAAW,EAAE,6BAAqB;QAClC,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC/C,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SAC1F;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,8FAA8F;QAC9F,gGAAgG;QAChG,uFAAuF;QACvF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,MAAM,EAAE,IAAI,CAAC,MAAgB;YAC7B,UAAU,EAAE,IAAI,CAAC,UAA6C;SAC/D,CAAC,CAAA;QACF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,sBAAsB,EACtB;QACE,WAAW,EAAE,8BAAsB;QACnC,WAAW,EAAE;YACX,UAAU,EAAE,OAAC;iBACV,MAAM,EAAE;iBACR,QAAQ,CACP,sFAAsF,CACvF;SACJ;KACF,EACD,KAAK,EAAE,IAAS,EAAE,EAAE;QAClB,8FAA8F;QAC9F,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;QACtE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,YAAY,CACV,gCAAgC,EAChC;QACE,WAAW,EAAE,uDAAuD;QACpE,mDAAmD;QACnD,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,wDAAwD;QACxD,yBAAyB;QACzB,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAA;QACjD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC,CACF,CAAA;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/core/approval-pull.d.ts

@@ -23,7 +23,10 @@
 import type { AgentdGatewayClient, DelegatedApprovalView } from '../gateway/gateway-client';
 /** What the pull hands to a holder: the API's row, nothing from an LLM. */
 export type ApprovedRow = Pick<DelegatedApprovalView, 'id' | 'action' | 'actionParams'>;
-/** `executed` = the PEP ran it; `failed` = presented and failed; `skipped` = nothing was run. */
+/**
+ * `executed` = it ran; `failed` = it was issued but did not run successfully (presented and failed, or
+ * refused at presentation); `skipped` = nothing was asked or run.
+ */
 export type PullOutcome = 'executed' | 'failed' | 'skipped';
 /** A holder that runs in this process (an `ExecutionEngine`). */
 export interface PullHolder {

package/dist/core/approval-pull.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-pull.d.ts","sourceRoot":"","sources":["../../src/core/approval-pull.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAE3F,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE,IAAI,GAAG,QAAQ,GAAG,cAAc,CAAC,CAAA;AAEvF,iGAAiG;AACjG,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE3D,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,gFAAgF;IAChF,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CACxD;AASD,qBAAa,YAAY;IAWrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAZtB,MAAM,CAAC,QAAQ,CAAC,WAAW,SAAS;IACpC,OAAO,CAAC,KAAK,CAAC,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAQ;IAEvB;;;;OAIG;gBAEgB,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAC3D,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,EACpC,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAe;IAGzD,KAAK,IAAI,IAAI;IAOb,IAAI,IAAI,IAAI;IAKZ,sFAAsF;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBb,OAAO;CAqBtB"}
+{"version":3,"file":"approval-pull.d.ts","sourceRoot":"","sources":["../../src/core/approval-pull.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAE3F,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,EAAE,IAAI,GAAG,QAAQ,GAAG,cAAc,CAAC,CAAA;AAEvF;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE3D,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,gFAAgF;IAChF,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CACxD;AASD,qBAAa,YAAY;IAWrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAZtB,MAAM,CAAC,QAAQ,CAAC,WAAW,SAAS;IACpC,OAAO,CAAC,KAAK,CAAC,CAAgB;IAC9B,OAAO,CAAC,OAAO,CAAQ;IAEvB;;;;OAIG;gBAEgB,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,EAC3D,OAAO,EAAE,MAAM,SAAS,UAAU,EAAE,EACpC,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAe;IAGzD,KAAK,IAAI,IAAI;IAOb,IAAI,IAAI,IAAI;IAKZ,sFAAsF;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAgBb,OAAO;CAqBtB"}

package/dist/core/approval-pull.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-pull.js","sourceRoot":"","sources":["../../src/core/approval-pull.ts"],"names":[],"mappings":";;;AAqCA,MAAM,OAAO,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AAE5F,wEAAwE;AACxE,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAQ,EAAE;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;AAC1C,CAAC,CAAA;AAED,MAAa,YAAY;IAWJ;IACA;IACA;IAZnB,MAAM,CAAU,WAAW,GAAG,MAAM,CAAA;IAC5B,KAAK,CAAiB;IACtB,OAAO,GAAG,KAAK,CAAA;IAEvB;;;;OAIG;IACH,YACmB,OAA2D,EAC3D,OAAoC,EACpC,MAA8B,QAAQ;QAFtC,YAAO,GAAP,OAAO,CAAoD;QAC3D,YAAO,GAAP,OAAO,CAA6B;QACpC,QAAG,GAAH,GAAG,CAAmC;IACtD,CAAC;IAEJ,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAM;QACtB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;QAC1E,sDAAsD;QACtD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACxB,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC;YACH,sFAAsF;YACtF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;YAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAEpF,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,+BAA+B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAkB;QACtC,IAAI,IAA6B,CAAA;QACjC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,QAAQ,YAAY,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjF,OAAM;QACR,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;oBAC3C,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,YAAY,EAAE,GAAG,CAAC,YAAY;iBAC/B,CAAC,CAAA;gBACF,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,OAAO,OAAO,EAAE,CAAC,CAAA;YACnE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,aAAa,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;;AAjEH,oCAkEC"}
+{"version":3,"file":"approval-pull.js","sourceRoot":"","sources":["../../src/core/approval-pull.ts"],"names":[],"mappings":";;;AAwCA,MAAM,OAAO,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AAE5F,wEAAwE;AACxE,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAQ,EAAE;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAA;AAC1C,CAAC,CAAA;AAED,MAAa,YAAY;IAWJ;IACA;IACA;IAZnB,MAAM,CAAU,WAAW,GAAG,MAAM,CAAA;IAC5B,KAAK,CAAiB;IACtB,OAAO,GAAG,KAAK,CAAA;IAEvB;;;;OAIG;IACH,YACmB,OAA2D,EAC3D,OAAoC,EACpC,MAA8B,QAAQ;QAFtC,YAAO,GAAP,OAAO,CAAoD;QAC3D,YAAO,GAAP,OAAO,CAA6B;QACpC,QAAG,GAAH,GAAG,CAAmC;IACtD,CAAC;IAEJ,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAM;QACtB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;QAC1E,sDAAsD;QACtD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAA;IACxB,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC;YACH,sFAAsF;YACtF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;YAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;YAEpF,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,+BAA+B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzD,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAkB;QACtC,IAAI,IAA6B,CAAA;QACjC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,QAAQ,YAAY,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACjF,OAAM;QACR,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;oBAC3C,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,YAAY,EAAE,GAAG,CAAC,YAAY;iBAC/B,CAAC,CAAA;gBACF,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,OAAO,OAAO,EAAE,CAAC,CAAA;YACnE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,aAAa,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC;IACH,CAAC;;AAjEH,oCAkEC"}

package/dist/core/call-budget.d.ts

@@ -4,7 +4,7 @@
  * MCP hosts (Claude Code / Claude Desktop / Cursor …) cut a tool call at 60 seconds (a host-side constant).
  * Inside that, agentd uses 45 seconds and keeps 25 of them for the execution itself
  * (nonce → VP → PEP → connector). ⇒ the owner's approval can be **awaited for the remaining 20 seconds**.
- * If that is not enough the call returns `waiting_for_approval` and the outcome is read later with
+ * If that is not enough the call returns `pending` + `request_id` and the outcome is read later with
  * `aidentity_get_result` (two-stage delivery). Same numbers as remote-mcp (`server/call-budget.ts`).
  */
 export declare const CALL_TOOL_BUDGET_MS = 45000;

package/dist/core/call-budget.js

@@ -8,7 +8,7 @@ exports.waitSecondsAvailable = waitSecondsAvailable;
  * MCP hosts (Claude Code / Claude Desktop / Cursor …) cut a tool call at 60 seconds (a host-side constant).
  * Inside that, agentd uses 45 seconds and keeps 25 of them for the execution itself
  * (nonce → VP → PEP → connector). ⇒ the owner's approval can be **awaited for the remaining 20 seconds**.
- * If that is not enough the call returns `waiting_for_approval` and the outcome is read later with
+ * If that is not enough the call returns `pending` + `request_id` and the outcome is read later with
  * `aidentity_get_result` (two-stage delivery). Same numbers as remote-mcp (`server/call-budget.ts`).
  */
 exports.CALL_TOOL_BUDGET_MS = 45_000;