@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.1

package/LICENSE

@@ -0,0 +1,18 @@
+MIT License
+
+Copyright (c) 2026 VIBES DEV LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -1,3 +1,97 @@
-# Temporary Holding Version
+# @vibesdotdev/mcp
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Model Context Protocol substrate. Universal contract: `mcp/sampling` runtime kind and semantic MCP client. Explicit adapters provide HTTP + stdio transports, Zod→MCP JSON Schema conversion, API-key auth middleware, and pure protocol types and errors.
+
+See [SPEC.md](./SPEC.md) for the contract.
+
+Compose `@vibesdotdev/mcp/plugin` for universal/cloud protocol support, or
+`@vibesdotdev/mcp/consumer.plugin` for the consumer orientation tool and legacy root host adapter provider.
+Root host wrappers resolve this provider through the runtime; missing composition
+refuses with `UNAVAILABLE / mcp-host-adapters-unavailable`. New hosts use the
+explicit adapter imports below.
+The semantic `runtime/client:mcp` owns serving state across generations and is
+disposed with its runtime. Adapter-only hosts can compose `./client/plugin`;
+the adapters admit that narrow composition when needed. Session owns durable
+participant authority. Hosts without Session retain transport-only support.
+
+## Install
+
+Workspace package, consumed by apps/surfaces that expose universal tools over MCP and by modules that need client-side LLM sampling through a connected MCP client.
+
+```jsonc
+// package.json
+{
+  "dependencies": {
+    "@vibesdotdev/mcp": "workspace:*"
+  }
+}
+```
+
+## Build a tool-aware MCP server
+
+Tool-aware server building (registering `tools/tool` descriptors as MCP tools, resources, and prompts) lives here as the MCP surface over [`@vibesdotdev/tools`](../tools/SPEC.md).
+
+```ts
+import { createMcpAdapter } from '@vibesdotdev/mcp/adapters/mcp';
+import { createMcpAuthenticator } from '@vibesdotdev/mcp';
+
+const adapter = createMcpAdapter(runtime, {
+  mode: 'http',
+  port: 3000,
+  authenticate: createMcpAuthenticator({ remote: true, scope: 'mcp' }) // optional; cloud mode
+}, logger);
+
+await adapter.start();
+```
+
+Stdio mode skips the HTTP adapter entirely:
+
+```ts
+import { McpServer, StdioServerTransport } from '@vibesdotdev/mcp/adapters';
+
+const server = new McpServer({ name: 'my-server', version: '1.0.0' });
+const transport = new StdioServerTransport();
+await server.connect(transport);
+```
+
+## Request LLM sampling from a connected client
+
+Modules that need to reach the connected MCP client for generation (e.g. `presence/dream`) resolve sampling through the runtime. The MCP-over-tools adapter registers a real `mcp/sampling` impl when its transport connects.
+
+```ts
+import { runtime } from '@vibesdotdev/kernel';
+
+const sample = await runtime.query('mcp/sampling').resolve();
+const result = await sample({
+  messages: [{ role: 'user', content: [{ type: 'text', text: 'Hello' }] }],
+  maxTokens: 256
+});
+```
+
+Sampling is request-local and revoked when its request completes. Compatible implementation publication preserves each connected client's in-flight callback.
+
+## Tool schemas
+
+Author input and output Zod schemas on Tools' descriptors. The MCP adapter
+converts them to acyclic wire schemas and validates calls and results against
+the authored schemas. Conversion helpers are internal; hosts use
+`@vibesdotdev/mcp/adapters/mcp` to expose the runtime catalog.
+
+## Verify
+
+```sh
+bun run check
+bun run test
+bun run build
+```
+
+Tests cover schema conversion, session-id parsing, transport request handling, and context preparation.
+
+Policy audits use the runtime tool catalog and canonical preset policy. Any policy
+finding fails the strict verdict. Wire audits measure serialized catalog bytes and
+compare served schemas and descriptions with authored descriptors; byte-budget
+pressure alone is advisory. Explicit unknown presets refuse with
+`INVALID_INPUT / mcp-preset-unknown`.
+
+MCP error causes remain available to the caller by identity. Public error envelopes
+project the value-free message and capability taxonomy without cause contents.

package/dist/adapters/auth-middleware.d.ts

@@ -0,0 +1,68 @@
+/**
+ * MCP HTTP Auth Middleware
+ *
+ * Validates API key authentication for the MCP HTTP server without depending
+ * on the host application's auth implementation.
+ */
+import { CapabilityError, type ValueFreeFailure } from '@vibesdotdev/kernel';
+export interface McpAuthRequest {
+    headers: Record<string, string | string[] | undefined>;
+}
+export interface McpAuthResult {
+    userId: string;
+    apiKeyId: string;
+    scopes: string[];
+}
+/** The reason of the typed refusal for an unreachable remote auth origin (answer 503, not 401). */
+export declare const MCP_AUTH_UNAVAILABLE_REASON = "auth-unavailable";
+/** The reason of the typed refusal for a remote auth answer that does not parse. */
+export declare const MCP_AUTH_RESPONSE_MALFORMED_REASON = "auth-response-malformed";
+/**
+ * Remote auth validation could not be performed (network failure, auth
+ * service outage). Distinct from `valid: false`: the caller answers 503, not
+ * 401, so a client can tell "bad key" from "auth temporarily unreachable".
+ * The message is fixed; the remote failure never rides on it.
+ */
+export declare function mcpAuthUnavailableError(): CapabilityError;
+/** The remote auth origin answered a body that is not the validate contract. */
+export declare function mcpAuthResponseMalformedError(paths: readonly string[]): CapabilityError;
+/** Facts a structured logger may carry: value-free failure facts and fixed labels only. */
+export interface McpAuthLogContext {
+    readonly failure?: ValueFreeFailure;
+    readonly paths?: readonly string[];
+}
+/** The handed logger's structural shape, so this adapter stays logging-package-free. */
+export interface McpAuthLogger {
+    warn(message: string, context?: McpAuthLogContext): void;
+    error(message: string, context?: McpAuthLogContext): void;
+}
+/**
+ * Creates an authenticate function for the MCP HTTP transport.
+ *
+ * Two modes:
+ * - Local allowlist (consumer / dev): pass `apiKeys`
+ * - Remote validation via the declared auth origin: pass `remote: true` and optional `authApiBaseUrl`.
+ *   Missing origin uses the MCP config manifest default (`https://auth.vibes.dev`).
+ *   This uses the central auth service to validate keys issued with the 'mcp' scope,
+ *   returning real userId and scopes from the user's Vibes account.
+ *
+ * The middleware never reads the environment: the serving surface resolves any
+ * allowlist and hands it in.
+ */
+export declare function createMcpAuthenticator(config: {
+    apiKeys?: string[];
+    scope?: string;
+    remote?: boolean;
+    authApiBaseUrl?: string;
+    /** The handed runtime logger; remote failures are reported here once, value-free. */
+    logger: McpAuthLogger;
+    /**
+     * When true, a remote-validation network failure throws the typed
+     * `UNAVAILABLE` `auth-unavailable` refusal ({@link mcpAuthUnavailableError})
+     * instead of returning null, so the caller answers 503 rather than a
+     * misleading 401. Default false (fail closed to null, logged). A malformed
+     * remote answer always throws `auth-response-malformed`.
+     */
+    throwOnUnavailable?: boolean;
+}): (req: McpAuthRequest) => Promise<McpAuthResult | null>;
+//# sourceMappingURL=auth-middleware.d.ts.map

package/dist/adapters/auth-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../src/adapters/auth-middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,eAAe,EAAuC,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIlH,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,mGAAmG;AACnG,eAAO,MAAM,2BAA2B,qBAAqB,CAAC;AAC9D,oFAAoF;AACpF,eAAO,MAAM,kCAAkC,4BAA4B,CAAC;AAE5E;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,eAAe,CAMzD;AAED,gFAAgF;AAChF,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,CAMvF;AAED,2FAA2F;AAC3F,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC1D;AA4DD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC9C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qFAAqF;IACrF,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAoEzD"}

package/dist/adapters/auth-middleware.js

@@ -0,0 +1,161 @@
+/**
+ * MCP HTTP Auth Middleware
+ *
+ * Validates API key authentication for the MCP HTTP server without depending
+ * on the host application's auth implementation.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, settle, settleNow, valueFreeFailure } from '@vibesdotdev/kernel';
+import { mcpConfigDefaults } from "../config/load.js";
+/** The reason of the typed refusal for an unreachable remote auth origin (answer 503, not 401). */
+export const MCP_AUTH_UNAVAILABLE_REASON = 'auth-unavailable';
+/** The reason of the typed refusal for a remote auth answer that does not parse. */
+export const MCP_AUTH_RESPONSE_MALFORMED_REASON = 'auth-response-malformed';
+/**
+ * Remote auth validation could not be performed (network failure, auth
+ * service outage). Distinct from `valid: false`: the caller answers 503, not
+ * 401, so a client can tell "bad key" from "auth temporarily unreachable".
+ * The message is fixed; the remote failure never rides on it.
+ */
+export function mcpAuthUnavailableError() {
+    return new CapabilityError('Remote MCP authentication is unavailable.', 'UNAVAILABLE', {
+        reason: MCP_AUTH_UNAVAILABLE_REASON,
+        retryable: true,
+        recoveryHint: 'Retry once the auth origin is reachable.'
+    });
+}
+/** The remote auth origin answered a body that is not the validate contract. */
+export function mcpAuthResponseMalformedError(paths) {
+    return new CapabilityError('Remote MCP authentication answered a malformed response.', 'UNAVAILABLE', {
+        reason: MCP_AUTH_RESPONSE_MALFORMED_REASON,
+        retryable: true,
+        details: { paths: paths.slice(0, 8) }
+    });
+}
+/**
+ * The validate endpoint's answer. `valid` is read first and alone: a refusal
+ * needs nothing else. An accepted key must carry a string identity and string
+ * scopes; anything else is a malformed answer, never a silent 401.
+ */
+const ValidateVerdictSchema = z.object({ valid: z.boolean() });
+const ValidateIdentitySchema = z.object({
+    userId: z.string().min(1),
+    keyId: z.string().min(1).optional(),
+    scopes: z.array(z.string()).optional()
+});
+/** One guarded parse: a throwing getter or a revoked Proxy is a malformed answer, never a throw. */
+function parseBoundary(schema, value) {
+    const parsed = settleNow(() => schema.safeParse(value));
+    if (!parsed.ok) {
+        // The read itself threw: the malformed outcome, carrying the throw's value-free facts.
+        return { ok: false, paths: ['(unreadable)'], failure: valueFreeFailure(parsed.cause) };
+    }
+    const result = parsed.value;
+    if (result.success)
+        return { ok: true, data: result.data };
+    return { ok: false, paths: result.error.issues.map((issue) => issue.path.map(String).join('.') || '(root)') };
+}
+/**
+ * Opaque, non-reversible key identifier. Never return key material (or a
+ * prefix of it): principal identity flows into trusted headers and logs,
+ * which must not capture secret fragments.
+ */
+async function hashApiKey(rawKey) {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(rawKey));
+    const hex = Array.from(new Uint8Array(digest))
+        .map((byte) => byte.toString(16).padStart(2, '0'))
+        .join('');
+    return `key-${hex.slice(0, 16)}`;
+}
+const HeaderValueSchema = z.union([z.string(), z.array(z.string())]).optional();
+function readHeader(headers, name) {
+    const parsed = HeaderValueSchema.safeParse(headers[name.toLowerCase()] ?? headers[name]);
+    if (!parsed.success || parsed.data === undefined)
+        return null;
+    return Array.isArray(parsed.data) ? parsed.data[0] ?? null : parsed.data;
+}
+function extractApiKey(value) {
+    if (!value)
+        return null;
+    const bearerPrefix = 'bearer ';
+    if (value.toLowerCase().startsWith(bearerPrefix)) {
+        return value.slice(bearerPrefix.length).trim() || null;
+    }
+    return value.trim() || null;
+}
+/**
+ * Creates an authenticate function for the MCP HTTP transport.
+ *
+ * Two modes:
+ * - Local allowlist (consumer / dev): pass `apiKeys`
+ * - Remote validation via the declared auth origin: pass `remote: true` and optional `authApiBaseUrl`.
+ *   Missing origin uses the MCP config manifest default (`https://auth.vibes.dev`).
+ *   This uses the central auth service to validate keys issued with the 'mcp' scope,
+ *   returning real userId and scopes from the user's Vibes account.
+ *
+ * The middleware never reads the environment: the serving surface resolves any
+ * allowlist and hands it in.
+ */
+export function createMcpAuthenticator(config) {
+    const allowedKeys = new Set(config.apiKeys ?? []);
+    const scope = config.scope ?? 'mcp';
+    const remote = config.remote ?? false;
+    const logger = config.logger;
+    const authApiBaseUrl = (config.authApiBaseUrl?.trim() || mcpConfigDefaults().authOrigin).replace(/\/+$/, '');
+    return async (req) => {
+        const rawKey = readHeader(req.headers, 'x-api-key') ??
+            extractApiKey(readHeader(req.headers, 'authorization'));
+        if (!rawKey)
+            return null;
+        if (!remote) {
+            // Local / consumer mode
+            if (allowedKeys.size === 0 || !allowedKeys.has(rawKey))
+                return null;
+            return {
+                userId: 'mcp-apikey',
+                apiKeyId: await hashApiKey(rawKey),
+                scopes: [scope]
+            };
+        }
+        // Remote validation against the declared auth origin (OAuth / central API keys).
+        // Host-only base URL: the full path, including `/api`, goes in the request
+        // path. `new URL('/api-keys/validate', 'https://auth.example/api')` drops a
+        // baseUrl path segment, which once made every remote MCP auth a 404 → 401.
+        const posted = await settle(async () => {
+            const { vibesApiClient } = await import('@vibesdotdev/client');
+            const client = vibesApiClient({ id: 'auth', baseUrl: authApiBaseUrl, timeout: 8000 });
+            return client.post('/api/api-keys/validate', { key: rawKey, requiredScope: scope });
+        });
+        if (!posted.ok) {
+            // Fail closed, never silently: the outage is logged once with value-free facts.
+            const failure = valueFreeFailure(posted.cause);
+            if (config.throwOnUnavailable) {
+                logger.error('Remote MCP auth validation unavailable (answering 503)', { failure });
+                throw mcpAuthUnavailableError();
+            }
+            logger.error('Remote MCP auth validation unavailable (answering null → 401)', { failure });
+            return null;
+        }
+        const answer = posted.value;
+        const verdict = parseBoundary(ValidateVerdictSchema, answer);
+        if (!verdict.ok) {
+            logger.error('Remote MCP auth answered a malformed verdict', { paths: verdict.paths, failure: verdict.failure });
+            throw mcpAuthResponseMalformedError(verdict.paths);
+        }
+        if (!verdict.data.valid) {
+            logger.warn('Remote MCP auth rejected credentials (valid: false → 401)');
+            return null;
+        }
+        const identity = parseBoundary(ValidateIdentitySchema, answer);
+        if (!identity.ok) {
+            logger.error('Remote MCP auth accepted a key with a malformed identity', { paths: identity.paths, failure: identity.failure });
+            throw mcpAuthResponseMalformedError(identity.paths);
+        }
+        return {
+            userId: identity.data.userId,
+            apiKeyId: identity.data.keyId ?? (await hashApiKey(rawKey)),
+            scopes: identity.data.scopes ?? [scope]
+        };
+    };
+}
+//# sourceMappingURL=auth-middleware.js.map

package/dist/adapters/auth-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware.js","sourceRoot":"","sources":["../../src/adapters/auth-middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAyB,MAAM,qBAAqB,CAAC;AAElH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAYtD,mGAAmG;AACnG,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAC9D,oFAAoF;AACpF,MAAM,CAAC,MAAM,kCAAkC,GAAG,yBAAyB,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IACtC,OAAO,IAAI,eAAe,CAAC,2CAA2C,EAAE,aAAa,EAAE;QACtF,MAAM,EAAE,2BAA2B;QACnC,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,0CAA0C;KACxD,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,6BAA6B,CAAC,KAAwB;IACrE,OAAO,IAAI,eAAe,CAAC,0DAA0D,EAAE,aAAa,EAAE;QACrG,MAAM,EAAE,kCAAkC;QAC1C,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;KACrC,CAAC,CAAC;AACJ,CAAC;AAcD;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC/D,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAMH,oGAAoG;AACpG,SAAS,aAAa,CAAW,MAAoB,EAAE,KAAY;IAClE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAChB,uFAAuF;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEhF,SAAS,UAAU,CAAC,OAAkC,EAAE,IAAY;IACnE,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,KAAoB;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,YAAY,GAAG,SAAS,CAAC;IAC/B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAetC;IACA,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,cAAc,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC,UAAU,CAAC,CAAC,OAAO,CAC/F,MAAM,EACN,EAAE,CACF,CAAC;IAEF,OAAO,KAAK,EAAE,GAAmB,EAAiC,EAAE;QACnE,MAAM,MAAM,GACX,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC;YACpC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,wBAAwB;YACxB,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpE,OAAO;gBACN,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,MAAM,UAAU,CAAC,MAAM,CAAC;gBAClC,MAAM,EAAE,CAAC,KAAK,CAAC;aACf,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACtF,OAAO,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,gFAAgF;YAChF,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC/B,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBACpF,MAAM,uBAAuB,EAAE,CAAC;YACjC,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+DAA+D,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;QAE5B,MAAM,OAAO,GAAG,aAAa,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACjH,MAAM,6BAA6B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,0DAA0D,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/H,MAAM,6BAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,OAAO;YACN,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM;YAC5B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC;SACvC,CAAC;IACH,CAAC,CAAC;AACH,CAAC"}

package/dist/adapters/compatibility.d.ts

@@ -0,0 +1,20 @@
+export { createBunMcpServer } from './transport-bun-http.ts';
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import type { StdioServerTransport as SdkStdioTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import type { McpAdapter, McpAdapterOptions } from './types.ts';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { LoggerImplementation } from '@vibesdotdev/logging';
+export declare class StdioServerTransport implements Transport {
+    private transport?;
+    private starting?;
+    onclose?: Transport['onclose'];
+    onerror?: Transport['onerror'];
+    onmessage?: Transport['onmessage'];
+    constructor(...args: ConstructorParameters<typeof SdkStdioTransport>);
+    private readonly args;
+    start(): Promise<void>;
+    send(...args: Parameters<SdkStdioTransport['send']>): Promise<void>;
+    close(): Promise<void>;
+}
+export declare function createMcpAdapter(runtime: VibesRuntime, options: McpAdapterOptions, logger: LoggerImplementation): McpAdapter;
+//# sourceMappingURL=compatibility.d.ts.map

package/dist/adapters/compatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compatibility.d.ts","sourceRoot":"","sources":["../../src/adapters/compatibility.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EAAE,oBAAoB,IAAI,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC3G,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,qBAAa,oBAAqB,YAAW,SAAS;IACrD,OAAO,CAAC,SAAS,CAAC,CAAoB;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;gBAEvB,GAAG,IAAI,EAAE,qBAAqB,CAAC,OAAO,iBAAiB,CAAC;IAGpE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkD;IAEvE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAehB,IAAI,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAI5B;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,oBAAoB,GAAG,UAAU,CAU5H"}

package/dist/adapters/compatibility.js

@@ -0,0 +1,57 @@
+/**
+ * Historical root entrypoints resolve host adapters through consumer composition. New hosts
+ * import ./adapters or ./adapters/mcp explicitly.
+ */
+import { getVibesRuntime } from '@vibesdotdev/kernel';
+import { resolveMcpHostAdapters } from "./host-context.js";
+export { createBunMcpServer } from "./transport-bun-http.js";
+export class StdioServerTransport {
+    transport;
+    starting;
+    onclose;
+    onerror;
+    onmessage;
+    constructor(...args) {
+        this.args = args;
+    }
+    args;
+    start() {
+        return this.starting ??= (async () => {
+            const provider = await resolveMcpHostAdapters(getVibesRuntime());
+            const transport = provider.createStdioTransport(...this.args);
+            this.transport = transport;
+            transport.onclose = () => this.onclose?.();
+            transport.onerror = error => {
+                if (this.onerror)
+                    this.onerror(error);
+                else
+                    throw error;
+            };
+            transport.onmessage = message => this.onmessage?.(message);
+            await transport.start();
+        })();
+    }
+    async send(...args) {
+        await this.start();
+        const transport = this.transport;
+        if (!transport)
+            throw new Error('The stdio transport did not start.');
+        await transport.send(...args);
+    }
+    async close() {
+        await this.starting;
+        await this.transport?.close();
+    }
+}
+export function createMcpAdapter(runtime, options, logger) {
+    let adapter;
+    return {
+        async start() {
+            const module = await resolveMcpHostAdapters(runtime);
+            adapter = module.createMcpAdapter(runtime, options, logger);
+            await adapter.start();
+        },
+        async shutdown() { await adapter?.shutdown(); }
+    };
+}
+//# sourceMappingURL=compatibility.js.map

package/dist/adapters/compatibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compatibility.js","sourceRoot":"","sources":["../../src/adapters/compatibility.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAO7D,MAAM,OAAO,oBAAoB;IACxB,SAAS,CAAqB;IAC9B,QAAQ,CAAiB;IACjC,OAAO,CAAwB;IAC/B,OAAO,CAAwB;IAC/B,SAAS,CAA0B;IAEnC,YAAY,GAAG,IAAqD;QACnE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;IACgB,IAAI,CAAkD;IAEvE,KAAK;QACJ,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YACpC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,eAAe,EAAE,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,SAAS,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE;gBAC3B,IAAI,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;oBACjC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC;YACF,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC,CAAC,EAAE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,IAA2C;QACxD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACtE,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK;QACV,MAAM,IAAI,CAAC,QAAQ,CAAC;QACpB,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;CACD;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,OAA0B,EAAE,MAA4B;IAC/G,IAAI,OAA+B,CAAC;IACpC,OAAO;QACN,KAAK,CAAC,KAAK;YACV,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACrD,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,QAAQ,KAAK,MAAM,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;KAC/C,CAAC;AACH,CAAC"}

package/dist/adapters/host-context.consumer.d.ts

@@ -0,0 +1,12 @@
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { createMcpAdapter } from './mcp/server.consumer.ts';
+/** Only the consumer plugin loads this host implementation. */
+export declare const impl: {
+    provide: () => {
+        createStdioTransport: (_stdin?: import("node:stream").Readable | undefined, _stdout?: import("node:stream").Writable | undefined, options?: {
+            maxBufferSize?: number;
+        } | undefined) => StdioServerTransport;
+        createMcpAdapter: typeof createMcpAdapter;
+    };
+};
+//# sourceMappingURL=host-context.consumer.d.ts.map

package/dist/adapters/host-context.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-context.consumer.d.ts","sourceRoot":"","sources":["../../src/adapters/host-context.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,+DAA+D;AAC/D,eAAO,MAAM,IAAI;;;;;;;CAKhB,CAAC"}

package/dist/adapters/host-context.consumer.js

@@ -0,0 +1,10 @@
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { createMcpAdapter } from "./mcp/server.consumer.js";
+/** Only the consumer plugin loads this host implementation. */
+export const impl = {
+    provide: () => ({
+        createStdioTransport: (...args) => new StdioServerTransport(...args),
+        createMcpAdapter
+    })
+};
+//# sourceMappingURL=host-context.consumer.js.map

package/dist/adapters/host-context.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-context.consumer.js","sourceRoot":"","sources":["../../src/adapters/host-context.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,IAAI,GAAG;IACnB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACf,oBAAoB,EAAE,CAAC,GAAG,IAAwD,EAAE,EAAE,CAAC,IAAI,oBAAoB,CAAC,GAAG,IAAI,CAAC;QACxH,gBAAgB;KAChB,CAAC;CACF,CAAC"}

package/dist/adapters/host-context.d.ts

@@ -0,0 +1,32 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type McpHostAdapters } from '../schemas/host-adapters.ts';
+export declare const mcpHostAdaptersContext: {
+    id: string;
+    kind: "context";
+    name?: string | undefined;
+    description?: string | undefined;
+    tags?: string[] | undefined;
+    hardware?: string[] | undefined;
+    enabled?: boolean | undefined;
+    priority?: number | undefined;
+    capabilityId?: string | undefined;
+    requiredContext?: string[] | undefined;
+    optionalContext?: string[] | undefined;
+    retention?: string | {
+        reason: string;
+        maxAgeDays?: number | undefined;
+        maxEntries?: number | undefined;
+        maxBytes?: number | undefined;
+        cascadeFrom?: string | undefined;
+        ageField?: string | undefined;
+        enforcedBy?: string | undefined;
+    } | undefined;
+    valueKind?: "data" | "service" | undefined;
+    valueSchema?: unknown;
+    config?: {
+        sources: ("literal" | "workspace" | "floor")[];
+        subset?: true | undefined;
+    } | undefined;
+};
+export declare function resolveMcpHostAdapters(runtime: RuntimeRef): Promise<McpHostAdapters>;
+//# sourceMappingURL=host-context.d.ts.map

package/dist/adapters/host-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-context.d.ts","sourceRoot":"","sources":["../../src/adapters/host-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE1F,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIjC,CAAC;AAEH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAQ1F"}

package/dist/adapters/host-context.js

@@ -0,0 +1,17 @@
+import { CapabilityError, createContextDescriptor } from '@vibesdotdev/kernel';
+import { McpHostAdaptersSchema } from "../schemas/host-adapters.js";
+export const mcpHostAdaptersContext = createContextDescriptor({
+    id: 'mcp/host-adapters',
+    description: 'Consumer-owned MCP transport constructors and adapter factory.',
+    valueSchema: McpHostAdaptersSchema
+});
+export async function resolveMcpHostAdapters(runtime) {
+    if (!runtime.hasContext(mcpHostAdaptersContext.id)) {
+        throw new CapabilityError('MCP host adapters require the consumer composition.', 'UNAVAILABLE', {
+            reason: 'mcp-host-adapters-unavailable',
+            recoveryHint: 'Compose @vibesdotdev/mcp/consumer.plugin or import the explicit adapter entrypoint.'
+        });
+    }
+    return McpHostAdaptersSchema.parse(await runtime.context(mcpHostAdaptersContext.id));
+}
+//# sourceMappingURL=host-context.js.map

package/dist/adapters/host-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-context.js","sourceRoot":"","sources":["../../src/adapters/host-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAmB,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAwB,MAAM,6BAA6B,CAAC;AAE1F,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;IAC7D,EAAE,EAAE,mBAAmB;IACvB,WAAW,EAAE,gEAAgE;IAC7E,WAAW,EAAE,qBAAqB;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAmB;IAC/D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE;YAC/F,MAAM,EAAE,+BAA+B;YACvC,YAAY,EAAE,qFAAqF;SACnG,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/adapters/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * MCP Transport Layer
+ *
+ * Low-level transport primitives for MCP.
+ * Tool-specific server building lives under `./mcp` in this package.
+ */
+export { createBunMcpServer, type BunMcpServerOptions } from './transport-bun-http.ts';
+export { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+export { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export type { McpAdapter, McpAdapterMode, McpAdapterOptions, SamplingRequest, SamplingResult } from './types.ts';
+export { createMcpAuthenticator, type McpAuthRequest, type McpAuthResult } from './auth-middleware.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjH,OAAO,EAAE,sBAAsB,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/adapters/index.js

@@ -0,0 +1,13 @@
+/**
+ * MCP Transport Layer
+ *
+ * Low-level transport primitives for MCP.
+ * Tool-specific server building lives under `./mcp` in this package.
+ */
+export { createBunMcpServer } from "./transport-bun-http.js";
+export { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+export { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export { createMcpAuthenticator } from "./auth-middleware.js";
+// Note: The Node-style HTTP transport (transport-http.ts) has been removed.
+// Use the Bun.serve-based transport (createBunMcpServer) instead.
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAA4B,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,sBAAsB,EAA2C,MAAM,sBAAsB,CAAC;AAEvG,4EAA4E;AAC5E,kEAAkE"}

package/dist/adapters/mcp/ambient-envelope.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Lift ambient collision fields off a tool result before output-schema
+ * validation.
+ *
+ * `external.file-access.ambient-drain` injects `notice` (and sometimes a
+ * string `messages` line) into whichever tool result is in flight — including
+ * `presence` / `brain` / `session`. Those organs use `z.strictObject` bodies.
+ * Leaving the envelope keys on the domain object makes MCP throw
+ * `Invalid output from '<tool>': <root>: Unrecognized key: "notice"` and
+ * the organ never reaches the agent (2026-08-28 grok session).
+ *
+ * Envelope data belongs on the MCP `_meta` + text prefix, not in the
+ * domain body. If the tool's own schema accepts `notice`, we leave it
+ * (workspace-fs collision tests still see the field on invokeTool results).
+ */
+import * as z from 'zod/v4';
+import type { JsonObject } from '@vibesdotdev/kernel/schemas/json';
+export type AmbientEnvelopeLift = {
+    output: unknown;
+    ambientNotice?: string;
+    ambientMessages?: string;
+};
+export declare function liftAmbientEnvelope<Output>(output: Output, schema: z.ZodType | undefined): AmbientEnvelopeLift;
+export declare function formatAmbientPrefix(lift: AmbientEnvelopeLift): string | undefined;
+export declare function ambientMeta(lift: AmbientEnvelopeLift): JsonObject | undefined;
+//# sourceMappingURL=ambient-envelope.d.ts.map

package/dist/adapters/mcp/ambient-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ambient-envelope.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/ambient-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAqBF,wBAAgB,mBAAmB,CAAC,MAAM,EACzC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,GAC3B,mBAAmB,CAcrB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAKjF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,mBAAmB,GAAG,UAAU,GAAG,SAAS,CAK7E"}