@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.0

package/dist/adapters/mcp/ambient-envelope.js

@@ -0,0 +1,70 @@
+/**
+ * Lift ambient collision fields off a tool result before output-schema
+ * validation.
+ *
+ * `external.file-access.ambient-drain` injects `notice` (and sometimes a
+ * string `messages` line) into whichever tool result is in flight — including
+ * `presence` / `brain` / `session`. Those organs use `z.strictObject` bodies.
+ * Leaving the envelope keys on the domain object makes MCP throw
+ * `Invalid output from '<tool>': <root>: Unrecognized key: "notice"` and
+ * the organ never reaches the agent (2026-08-28 grok session).
+ *
+ * Envelope data belongs on the MCP `_meta` + text prefix, not in the
+ * domain body. If the tool's own schema accepts `notice`, we leave it
+ * (workspace-fs collision tests still see the field on invokeTool results).
+ */
+import * as z from 'zod/v4';
+/** The domain object, kept as the owner handed it. JSON admission happens at serialization. */
+const AmbientObjectSchema = z.object({
+    notice: z.unknown().optional(),
+    messages: z.unknown().optional()
+}).passthrough();
+/** Ambient injects a one-line string; domain `messages` fields are arrays/objects. */
+function readAmbientString(value) {
+    const parsed = z.string().min(1).safeParse(value);
+    return parsed.success ? parsed.data : undefined;
+}
+function withAmbient(output, ambientNotice, ambientMessages) {
+    const lift = { output };
+    if (ambientNotice)
+        lift.ambientNotice = ambientNotice;
+    if (ambientMessages)
+        lift.ambientMessages = ambientMessages;
+    return lift;
+}
+export function liftAmbientEnvelope(output, schema) {
+    const carrier = AmbientObjectSchema.safeParse(output);
+    if (!carrier.success)
+        return { output };
+    const ambientNotice = readAmbientString(carrier.data.notice);
+    const ambientMessages = readAmbientString(carrier.data.messages);
+    if (!ambientNotice && !ambientMessages)
+        return { output };
+    if (!schema || schema.safeParse(output).success)
+        return withAmbient(output, schema ? undefined : ambientNotice, schema ? undefined : ambientMessages);
+    const stripped = { ...carrier.data };
+    if (ambientNotice)
+        delete stripped.notice;
+    if (ambientMessages)
+        delete stripped.messages;
+    if (!schema.safeParse(stripped).success)
+        return { output };
+    return withAmbient(stripped, ambientNotice, ambientMessages);
+}
+export function formatAmbientPrefix(lift) {
+    const lines = [];
+    if (lift.ambientNotice)
+        lines.push(lift.ambientNotice);
+    if (lift.ambientMessages)
+        lines.push(lift.ambientMessages);
+    return lines.length > 0 ? lines.join('\n') : undefined;
+}
+export function ambientMeta(lift) {
+    const meta = {};
+    if (lift.ambientNotice)
+        meta.ambientNotice = lift.ambientNotice;
+    if (lift.ambientMessages)
+        meta.ambientMessages = lift.ambientMessages;
+    return Object.keys(meta).length > 0 ? meta : undefined;
+}
+//# sourceMappingURL=ambient-envelope.js.map

package/dist/adapters/mcp/ambient-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ambient-envelope.js","sourceRoot":"","sources":["../../../src/adapters/mcp/ambient-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAS5B,+FAA+F;AAC/F,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,sFAAsF;AACtF,SAAS,iBAAiB,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAS,MAAc,EAAE,aAAiC,EAAE,eAAmC;IAClH,MAAM,IAAI,GAAwB,EAAE,MAAM,EAAE,CAAC;IAC7C,IAAI,aAAa;QAAE,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACtD,IAAI,eAAe;QAAE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IAC5D,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,MAAc,EACd,MAA6B;IAE7B,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAExC,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAEtJ,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,aAAa;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAC1C,IAAI,eAAe;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3D,OAAO,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,eAAe;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAyB;IACpD,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAChE,IAAI,IAAI,CAAC,eAAe;QAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC"}

package/dist/adapters/mcp/catalog.d.ts

@@ -0,0 +1,15 @@
+import type { PurposePreset } from '@vibesdotdev/tools/schemas/presets/schema';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import { type JsonSchema } from '../zod-mcp.ts';
+export interface McpToolCatalogEntry {
+    name: string;
+    description: string;
+    inputSchema: JsonSchema;
+}
+export declare function listMcpToolCatalog(runtime: VibesRuntime, options?: {
+    mcpClientId?: string;
+    preset?: string;
+    toolPatterns?: readonly string[];
+    customPresets?: Record<string, PurposePreset>;
+}): McpToolCatalogEntry[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/adapters/mcp/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/catalog.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,OAAO,EAAyC,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAGvF,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,CAAC;CACxB;AAUD,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;CAAO,GACtI,mBAAmB,EAAE,CAYvB"}

package/dist/adapters/mcp/catalog.js

@@ -0,0 +1,26 @@
+import { runtimePurposePresets } from '@vibesdotdev/tools/schemas/presets/registry';
+import * as z from 'zod/v4';
+import { resolveMcpDescription, zodToMcpSchema } from "../zod-mcp.js";
+import { selectMcpTools } from "./tool-selection.js";
+function isToolAsset(descriptor) {
+    return descriptor.kind === 'tools/tool' && 'schemas' in descriptor;
+}
+function isZodType(value) {
+    return value instanceof z.ZodType;
+}
+export function listMcpToolCatalog(runtime, options = {}) {
+    if (!runtime.hasKind('tools/tool'))
+        return [];
+    const descriptors = runtime.query('tools/tool').enabled().descriptors().filter(isToolAsset);
+    return selectMcpTools(descriptors, { ...options, customPresets: runtimePurposePresets(runtime, options.customPresets) }).descriptors.flatMap((descriptor) => {
+        const input = descriptor.schemas.input;
+        if (!isZodType(input))
+            return [];
+        return [{
+                name: descriptor.id,
+                description: resolveMcpDescription(descriptor),
+                inputSchema: zodToMcpSchema(input).schema
+            }];
+    });
+}
+//# sourceMappingURL=catalog.js.map

package/dist/adapters/mcp/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../../src/adapters/mcp/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AAKpF,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAmB,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAQrD,SAAS,WAAW,CAAC,UAA6B;IACjD,OAAO,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,IAAI,UAAU,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,OAAO,KAAK,YAAY,CAAC,CAAC,OAAO,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,kBAAkB,CACjC,OAAqB,EACrB,UAAsI,EAAE;IAExI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5F,OAAO,cAAc,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAC3J,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC;gBACP,IAAI,EAAE,UAAU,CAAC,EAAE;gBACnB,WAAW,EAAE,qBAAqB,CAAC,UAAU,CAAC;gBAC9C,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM;aACzC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/adapters/mcp/connection-identity.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Connection identity: who is on the other end of one MCP connection.
+ *
+ * Resolved once, when the connection initializes, from the `vibes/*` keys a
+ * relay stamps onto `initialize.params._meta`, then frozen on the connection.
+ * A shared host serves many agents at once, so identity never comes from the
+ * host's own environment and never from per-call `_meta` or tool arguments.
+ *
+ * Identity is admitted only from what the transport verified (RC08 U7,
+ * D-RC08): an isolated stdio server's launch identity (`stdio-launch`), or a
+ * relay that presented the shared host's secret (`mcp-relay-launch`). A
+ * declared identity without that verification is refused, never adopted
+ * (`admitConnectionCaller`).
+ *
+ * User, org and active project are deliberately NOT accepted here: they come
+ * from authenticated direct-tool context, and a client cannot claim them.
+ */
+import { type RuntimeInvokeCaller, type VerifiedTransportIdentity } from '@vibesdotdev/kernel/schemas/invoke-caller';
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+/** `VerifiedTransportIdentity.source` of an isolated stdio server's launch identity. */
+export declare const STDIO_LAUNCH_SOURCE = "stdio-launch";
+/** `VerifiedTransportIdentity.source` of a relay that presented the shared host's local attestation (the kernel's constant). */
+export declare const RELAY_ATTESTATION_SOURCE = "mcp-relay-launch";
+/**
+ * The shared host's `relayAttestation` check over a local-attestation
+ * verifier (runtime-rpc): the relay presents the host start's secret as its
+ * bearer; anything else (no header, another scheme, a wrong or rotated
+ * secret) is unattested. Constant time is the verifier's.
+ */
+/** A local-attestation verifier: the presented secret, or none. */
+export interface PresentedSecretVerifier {
+    verify(presented: string | undefined): boolean;
+}
+/** The check a relay's `Authorization` header is admitted through. */
+export interface AuthorizationVerifier {
+    verify(authorization: string | null): boolean;
+}
+export declare function relayAttestationVerifier(verifier: PresentedSecretVerifier): AuthorizationVerifier;
+/** `initialize._meta` keys a relay may use to declare its identity. */
+export declare const CONNECTION_IDENTITY_META_KEYS: {
+    readonly agentId: "vibes/agent";
+    readonly harness: "vibes/harness";
+    readonly agentSystemId: "vibes/agentSystemId";
+    readonly harnessSessionId: "vibes/harnessSessionId";
+    readonly projectIds: "vibes/projectIds";
+    readonly home: "vibes/home";
+};
+export type ConnectionIdentityInput = {
+    readonly [K in keyof typeof CONNECTION_IDENTITY_META_KEYS]?: RuntimeInvokeCaller[K];
+};
+/** Write a connection identity as `initialize._meta` entries. */
+export declare function connectionIdentityMeta(identity: ConnectionIdentityInput): JsonObject;
+/** Read a connection identity back out of `initialize._meta`. */
+export declare function connectionIdentityFromMeta(meta: JsonObject | undefined): RuntimeInvokeCaller | undefined;
+/**
+ * Admit one tool call's caller from its connection (RC08 U7, D-RC08).
+ *
+ * - `verified` is what the transport established at connection time; the
+ *   runtime's authenticated context adds user, org and active project to it.
+ * - `declared` is the identity the connection declared at `initialize`.
+ * - `call` is the per-call caller the session layer stamps; it owns
+ *   participant and session binding.
+ *
+ * The declared connection fields win over the call's, as before, and every
+ * identity field must equal a verified one: an undeclared field is filled from
+ * verification; a declared agent, harness, harness session, user, org or active project that
+ * nothing verified, or that disagrees, is refused `PERMISSION_DENIED
+ * caller-identity-unverified` (`admitInvokeCaller`). Seat data (projects,
+ * declared home) travels as declared.
+ */
+export declare function admitConnectionCaller(input: {
+    verified: VerifiedTransportIdentity | undefined;
+    declared: RuntimeInvokeCaller | undefined;
+    call: RuntimeInvokeCaller | undefined;
+    principal: {
+        userId?: unknown;
+        orgId?: unknown;
+        projectId?: unknown;
+    } | undefined;
+}): RuntimeInvokeCaller | undefined;
+//# sourceMappingURL=connection-identity.d.ts.map

package/dist/adapters/mcp/connection-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-identity.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/connection-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAGN,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,kCAAkC,CAAC;AAE9E,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,gIAAgI;AAChI,eAAO,MAAM,wBAAwB,qBAAmC,CAAC;AAEzE;;;;;GAKG;AACH,mEAAmE;AACnE,MAAM,WAAW,uBAAuB;IACvC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;CAC/C;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACrC,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;CAC9C;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,qBAAqB,CAOjG;AAED,uEAAuE;AACvE,eAAO,MAAM,6BAA6B;;;;;;;CAO6B,CAAC;AAWxE,MAAM,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,CAAC,IAAI,MAAM,OAAO,6BAA6B,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC;CACnF,CAAC;AAaF,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,UAAU,CAQpF;AAED,iEAAiE;AACjE,wBAAgB,0BAA0B,CACzC,IAAI,EAAE,UAAU,GAAG,SAAS,GAC1B,mBAAmB,GAAG,SAAS,CASjC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC5C,QAAQ,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAChD,QAAQ,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACtC,SAAS,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAC;CAClF,GAAG,mBAAmB,GAAG,SAAS,CAgBlC"}

package/dist/adapters/mcp/connection-identity.js

@@ -0,0 +1,114 @@
+/**
+ * Connection identity: who is on the other end of one MCP connection.
+ *
+ * Resolved once, when the connection initializes, from the `vibes/*` keys a
+ * relay stamps onto `initialize.params._meta`, then frozen on the connection.
+ * A shared host serves many agents at once, so identity never comes from the
+ * host's own environment and never from per-call `_meta` or tool arguments.
+ *
+ * Identity is admitted only from what the transport verified (RC08 U7,
+ * D-RC08): an isolated stdio server's launch identity (`stdio-launch`), or a
+ * relay that presented the shared host's secret (`mcp-relay-launch`). A
+ * declared identity without that verification is refused, never adopted
+ * (`admitConnectionCaller`).
+ *
+ * User, org and active project are deliberately NOT accepted here: they come
+ * from authenticated direct-tool context, and a client cannot claim them.
+ */
+import { admitInvokeCaller, WireInvokeCallerSchema } from '@vibesdotdev/kernel/schemas/invoke-caller';
+import { MCP_RELAY_LAUNCH_IDENTITY_SOURCE } from '@vibesdotdev/kernel/schemas';
+/** `VerifiedTransportIdentity.source` of an isolated stdio server's launch identity. */
+export const STDIO_LAUNCH_SOURCE = 'stdio-launch';
+/** `VerifiedTransportIdentity.source` of a relay that presented the shared host's local attestation (the kernel's constant). */
+export const RELAY_ATTESTATION_SOURCE = MCP_RELAY_LAUNCH_IDENTITY_SOURCE;
+export function relayAttestationVerifier(verifier) {
+    return {
+        verify(authorization) {
+            const bearer = /^Bearer\s+(\S+)\s*$/i.exec(authorization ?? '')?.[1];
+            return bearer !== undefined && verifier.verify(bearer);
+        }
+    };
+}
+/** `initialize._meta` keys a relay may use to declare its identity. */
+export const CONNECTION_IDENTITY_META_KEYS = {
+    agentId: 'vibes/agent',
+    harness: 'vibes/harness',
+    agentSystemId: 'vibes/agentSystemId',
+    harnessSessionId: 'vibes/harnessSessionId',
+    projectIds: 'vibes/projectIds',
+    home: 'vibes/home'
+};
+const CONNECTION_IDENTITY_FIELDS = [
+    'agentId',
+    'harness',
+    'agentSystemId',
+    'harnessSessionId',
+    'projectIds',
+    'home'
+];
+function isStringList(value) {
+    return Array.isArray(value);
+}
+function identityMetaValue(value) {
+    if (!isStringList(value))
+        return value;
+    const copy = [];
+    for (const item of value)
+        copy.push(item);
+    return copy;
+}
+/** Write a connection identity as `initialize._meta` entries. */
+export function connectionIdentityMeta(identity) {
+    const meta = {};
+    for (const field of CONNECTION_IDENTITY_FIELDS) {
+        const value = identity[field];
+        if (value === undefined || (Array.isArray(value) && value.length === 0))
+            continue;
+        meta[CONNECTION_IDENTITY_META_KEYS[field]] = identityMetaValue(value);
+    }
+    return meta;
+}
+/** Read a connection identity back out of `initialize._meta`. */
+export function connectionIdentityFromMeta(meta) {
+    if (!meta)
+        return undefined;
+    const raw = {};
+    for (const field of CONNECTION_IDENTITY_FIELDS) {
+        const value = meta[CONNECTION_IDENTITY_META_KEYS[field]];
+        if (value !== undefined)
+            raw[field] = value;
+    }
+    const parsed = WireInvokeCallerSchema.parse(raw);
+    return parsed ? Object.freeze(parsed) : undefined;
+}
+/**
+ * Admit one tool call's caller from its connection (RC08 U7, D-RC08).
+ *
+ * - `verified` is what the transport established at connection time; the
+ *   runtime's authenticated context adds user, org and active project to it.
+ * - `declared` is the identity the connection declared at `initialize`.
+ * - `call` is the per-call caller the session layer stamps; it owns
+ *   participant and session binding.
+ *
+ * The declared connection fields win over the call's, as before, and every
+ * identity field must equal a verified one: an undeclared field is filled from
+ * verification; a declared agent, harness, harness session, user, org or active project that
+ * nothing verified, or that disagrees, is refused `PERMISSION_DENIED
+ * caller-identity-unverified` (`admitInvokeCaller`). Seat data (projects,
+ * declared home) travels as declared.
+ */
+export function admitConnectionCaller(input) {
+    const principal = WireInvokeCallerSchema.parse({ userId: input.principal?.userId, orgId: input.principal?.orgId, projectId: input.principal?.projectId });
+    const verifiedCaller = WireInvokeCallerSchema.parse({ ...input.verified?.caller, ...principal });
+    const verified = verifiedCaller
+        ? { source: input.verified?.source ?? 'runtime-principal', caller: verifiedCaller }
+        : undefined;
+    return admitInvokeCaller({
+        ...input.call,
+        ...input.verified?.caller,
+        ...input.declared,
+        participantId: input.call?.participantId,
+        sessionId: input.call?.sessionId
+    }, verified);
+}
+//# sourceMappingURL=connection-identity.js.map

package/dist/adapters/mcp/connection-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-identity.js","sourceRoot":"","sources":["../../../src/adapters/mcp/connection-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EAGtB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAG/E,wFAAwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAElD,gIAAgI;AAChI,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAkBzE,MAAM,UAAU,wBAAwB,CAAC,QAAiC;IACzE,OAAO;QACN,MAAM,CAAC,aAA4B;YAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;KACD,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC5C,OAAO,EAAE,aAAa;IACtB,OAAO,EAAE,eAAe;IACxB,aAAa,EAAE,qBAAqB;IACpC,gBAAgB,EAAE,wBAAwB;IAC1C,UAAU,EAAE,kBAAkB;IAC9B,IAAI,EAAE,YAAY;CACoD,CAAC;AAExE,MAAM,0BAA0B,GAA4D;IAC3F,SAAS;IACT,SAAS;IACT,eAAe;IACf,kBAAkB;IAClB,YAAY;IACZ,MAAM;CACN,CAAC;AAMF,SAAS,YAAY,CAAC,KAAiC;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiC;IAC3D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CAAC,QAAiC;IACvE,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,SAAS;QAClF,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,0BAA0B,CACzC,IAA4B;IAE5B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,0BAA0B,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACA,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1J,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;IACjG,MAAM,QAAQ,GAA0C,cAAc;QACrE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE;QACnF,CAAC,CAAC,SAAS,CAAC;IACb,OAAO,iBAAiB,CACvB;QACC,GAAG,KAAK,CAAC,IAAI;QACb,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM;QACzB,GAAG,KAAK,CAAC,QAAQ;QACjB,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa;QACxC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS;KAChC,EACD,QAAQ,CACR,CAAC;AACH,CAAC"}

package/dist/adapters/mcp/context.d.ts

@@ -0,0 +1,137 @@
+/**
+ * MCP Tool Context Types and Helpers
+ *
+ * Tool-runtime context with CLI/AI/auth/PM runtime fields.
+ * These types compose tool-runtime context for MCP tool execution.
+ */
+import * as z from 'zod/v4';
+import type { PMContext } from '@vibesdotdev/pm/context';
+import type { CLIAIContext } from '@vibesdotdev/ai/generation/text/schemas/context';
+import type { ApiClientImplementation } from '@vibesdotdev/client/schemas';
+import type { LogLevel } from '@vibesdotdev/logging/schemas/entry';
+import type { IUIHandles } from '@vibesdotdev/cli/schemas/types';
+import type { AuthContext } from '@vibesdotdev/auth/schemas/provider';
+import type { RuntimeContextMetadata } from '@vibesdotdev/tools/schemas/types';
+import type { McpUser, McpToolResult, McpClientInfo, McpConnectionState, SamplingRequest, SamplingResult } from '@vibesdotdev/mcp/types';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+/** String-keyed record whose values are validated by the reader, not by the type. */
+declare const McpRecordSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export type McpRecord = z.infer<typeof McpRecordSchema>;
+/**
+ * Request metadata passed into MCP tool context creation.
+ * Allows HTTP adapters to forward headers/cookies/session/project info.
+ */
+export interface McpHttpRequest {
+    toolId: string;
+    toolCallId?: string;
+    headers?: Record<string, string | string[] | undefined>;
+    cookies?: Record<string, string>;
+    sessionId?: string;
+    projectId?: string;
+    workspacePath?: string;
+}
+/**
+ * Workspace source enumeration
+ */
+export type WorkspaceSource = 'arguments' | 'config' | 'environment' | 'cli';
+/**
+ * Workspace context for MCP tool execution
+ */
+export interface WorkspaceContext {
+    path: string;
+    source: WorkspaceSource;
+}
+/**
+ * MCP Server Runtime Configuration
+ */
+export interface McpServerRuntimeConfig {
+    auth?: {};
+    mode?: 'stdio' | 'http';
+    http?: {
+        port: number;
+        host?: string;
+        sessionTimeoutMs?: number;
+        sessionCleanupIntervalMs?: number;
+    };
+    logging?: {
+        level?: LogLevel;
+        logFile?: string;
+    };
+}
+/**
+ * MCP Tool Execution Context
+ * Contains full CLI runtime context plus MCP-specific data
+ */
+export interface McpToolContext {
+    /** API client for making authenticated requests (canonical property) */
+    api?: ApiClientImplementation;
+    /** Auth context with user info and credentials */
+    auth?: AuthContext;
+    /** CLI configuration */
+    config?: McpRecord;
+    /** Environment configuration */
+    environment?: McpRecord;
+    /** UI toolkit for user interaction */
+    ui?: IUIHandles;
+    /** Process manager for background jobs */
+    pm?: PMContext;
+    /** AI context with generation client */
+    ai?: CLIAIContext;
+    /** Feature-specific runtime context */
+    dev?: McpRecord;
+    /** Tool runtime metadata */
+    runtime?: Partial<RuntimeContextMetadata>;
+    /** Authenticated user info */
+    user: McpUser | null;
+    /** Request timestamp */
+    timestamp: Date;
+    /** Tool call parameters */
+    params?: McpRecord;
+    /** Request sampling callback for LLM interactions */
+    requestSampling?: (request: SamplingRequest) => Promise<SamplingResult>;
+    /** Workspace context */
+    workspace?: WorkspaceContext;
+    /** Workspace root path */
+    workspacePath?: string;
+    /** MCP client info */
+    clientInfo?: McpClientInfo;
+    /** Connection state */
+    connection?: McpConnectionState;
+    /** Factory to create API client on demand */
+    createClient?: () => Promise<ApiClientImplementation>;
+}
+/**
+ * MCP Tool Execution Info
+ */
+export interface McpToolExecutionInfo {
+    callId: string;
+    runtime: VibesRuntime;
+    workspacePath: string | null;
+    transport: 'stdio' | 'http';
+    sessionId: string | undefined;
+    projectId: string | undefined;
+}
+/**
+ * CLI Runtime context subset for MCP tool execution
+ */
+export interface McpRuntimeContext extends McpRecord {
+    workspacePath?: string;
+    /** Workspace resolution options */
+    options?: {
+        workspace?: string;
+        cwd?: string;
+    };
+    environment?: McpRecord | null;
+}
+/**
+ * Prepare MCP tool execution from CLI context and HTTP request
+ * @deprecated Use prepareMcpToolExecutionAsync instead
+ */
+export declare function prepareMcpToolExecution(_cliContext: McpRuntimeContext, _request: McpHttpRequest): never;
+/**
+ * Async version that accepts runtime directly
+ * Validates headers, cookies, session ID, and project ID before use.
+ */
+export declare function prepareMcpToolExecutionAsync(runtime: VibesRuntime, cliContext: McpRuntimeContext, request: McpHttpRequest): McpToolExecutionInfo;
+export type { McpUser, McpToolResult };
+//# sourceMappingURL=context.d.ts.map

package/dist/adapters/mcp/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/context.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAC;AACpF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EACX,OAAO,EACP,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAoDxD,qFAAqF;AACrF,QAAA,MAAM,eAAe,wCAAoC,CAAC;AAC1D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AA2IxD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAC;AAE7E;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,IAAI,CAAC,EAAE,EAGN,CAAC;IACF,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,wBAAwB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,OAAO,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,QAAQ,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAE9B,wEAAwE;IACxE,GAAG,CAAC,EAAE,uBAAuB,CAAC;IAC9B,kDAAkD;IAClD,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,wBAAwB;IACxB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,gCAAgC;IAChC,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,sCAAsC;IACtC,EAAE,CAAC,EAAE,UAAU,CAAC;IAChB,0CAA0C;IAC1C,EAAE,CAAC,EAAE,SAAS,CAAC;IACf,wCAAwC;IACxC,EAAE,CAAC,EAAE,YAAY,CAAC;IAClB,uCAAuC;IACvC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAG1C,8BAA8B;IAC9B,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,2BAA2B;IAC3B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,qDAAqD;IACrD,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACxE,wBAAwB;IACxB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,0BAA0B;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB;IACtB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,uBAAuB;IACvB,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,OAAO,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IACF,WAAW,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC/B;AAeD;;;GAGG;AACH,wBAAgB,uBAAuB,CACtC,WAAW,EAAE,iBAAiB,EAC9B,QAAQ,EAAE,cAAc,GACtB,KAAK,CAIP;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,YAAY,EACrB,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,cAAc,GACrB,oBAAoB,CA2EtB;AAWD,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC"}