@weave-kit/engine 0.1.0

package/dist/adapters/mcp/generate.js

@@ -0,0 +1,287 @@
+import { FIELD_TYPES, primaryFieldOf, primaryKeyOf } from '../../core/index.js';
+import { ACTION_PREFIXES } from '../../core/audit/index.js';
+import { resolvePermission } from '../../core/rbac/index.js';
+import { READ_SCOPES } from '../../core/index.js';
+import { createHandler, deleteHandler, getHandler, searchHandler, updateHandler } from './tools.js';
+import { describeObjectHandler, listObjectsHandler } from './introspection.js';
+import { TOOL_PREFIXES } from './types.js';
+/**
+ * Compile the MCP tool surface for one subject: RBAC decides which objects and
+ * which operations appear. `tools/list` returns exactly this list; `tools/call`
+ * dispatches into the same handlers (whose data-access calls re-enforce RBAC —
+ * the double layer).
+ */
+/** fields users can never write (system/formula/seq_no) — mirrors data-access validate */
+function isReadonlyField(field) {
+    return field.system === true || field.type === FIELD_TYPES.SEQ_NO || field.formula !== undefined;
+}
+/** target primary key JSON Schema type of a relation (fallback: string) */
+function pkSchema(target, defs) {
+    const pk = primaryFieldOf(defs.get(target));
+    if (pk === undefined)
+        return { type: 'string' };
+    return fieldValueSchema(pk, defs);
+}
+/** JSON Schema for a single field *value* (enum → literal set, relation → pk) */
+export function fieldValueSchema(field, defs) {
+    switch (field.type) {
+        case FIELD_TYPES.STRING:
+        case FIELD_TYPES.TEXT:
+        case FIELD_TYPES.DATETIME:
+        case FIELD_TYPES.DATE:
+        case FIELD_TYPES.SEQ_NO:
+        case FIELD_TYPES.FIRST_NAME:
+        case FIELD_TYPES.LAST_NAME:
+        case FIELD_TYPES.EMAIL:
+        case FIELD_TYPES.PHONE:
+        case FIELD_TYPES.IMAGE:
+            return { type: 'string' };
+        case FIELD_TYPES.INTEGER:
+            return { type: 'integer' };
+        case FIELD_TYPES.NUMBER:
+        case FIELD_TYPES.CURRENCY:
+            return { type: 'number' };
+        case FIELD_TYPES.BOOLEAN:
+            return { type: 'boolean' };
+        case FIELD_TYPES.JSON:
+            return { type: 'object' };
+        case FIELD_TYPES.ENUM: {
+            if (field.multiple === true) {
+                return { type: 'array', items: { type: 'string', enum: [...field.options] } };
+            }
+            return { type: 'string', enum: [...field.options] };
+        }
+        case FIELD_TYPES.RELATION:
+        case FIELD_TYPES.PERSON:
+        case FIELD_TYPES.DEPARTMENT:
+            return pkSchema(field.target, defs);
+        case FIELD_TYPES.MULTI_RELATION:
+            return { type: 'array', items: pkSchema(field.target, defs) };
+        case FIELD_TYPES.DETAILS:
+            return { type: 'array', items: { type: 'object' } };
+    }
+}
+/** read output fields for a subject: every field minus the RBAC `exclude` list */
+function readableFields(def, perm) {
+    const excluded = new Set(perm.exclude);
+    return def.fields.filter((f) => !excluded.has(f.name));
+}
+/** fields a subject can write on create: non-readonly, non-excluded, minus details (managed via child CRUD) */
+function writableCreateFields(def, perm) {
+    const excluded = new Set(perm.exclude);
+    const base = def.fields.filter((f) => !isReadonlyField(f) && !excluded.has(f.name) && f.type !== FIELD_TYPES.DETAILS);
+    // `perm.createFields === null` = unrestricted (no fields.create declared)
+    if (perm.createFields === null)
+        return base;
+    const whitelist = new Set(perm.createFields);
+    return base.filter((f) => whitelist.has(f.name));
+}
+/** fields a subject can write on update: RBAC `update` whitelist (null = all writable) */
+function updatableFields(def, perm) {
+    const excluded = new Set(perm.exclude);
+    if (perm.update === null) {
+        return def.fields.filter((f) => !isReadonlyField(f) && !excluded.has(f.name) && f.type !== FIELD_TYPES.DETAILS);
+    }
+    const whitelist = new Set(perm.update);
+    return def.fields.filter((f) => whitelist.has(f.name) && !isReadonlyField(f) && f.type !== FIELD_TYPES.DETAILS);
+}
+function objectSchema(fields, defs, requiredOnly = false) {
+    const properties = {};
+    const required = [];
+    for (const field of fields) {
+        properties[field.name] = { ...fieldValueSchema(field, defs), description: field.description };
+        if (('required' in field && field.required === true) || field.primary === true)
+            required.push(field.name);
+    }
+    const schema = { type: 'object', properties, additionalProperties: false };
+    if (requiredOnly) {
+        if (required.length > 0)
+            schema.required = required;
+    }
+    else if (required.length > 0) {
+        schema.required = required;
+    }
+    return schema;
+}
+/** custom-tool surface merged into the session tool surface (roles filtered by the executor, D8-cached) */
+function customToolTools(engine, subject, custom) {
+    return custom.executor.surface(subject, custom.defs).map((entry) => {
+        const def = custom.defs.find((d) => d.name === entry.name);
+        return {
+            objectName: undefined,
+            spec: {
+                name: def.name,
+                description: def.description,
+                inputSchema: def.inputSchema,
+                handler: async (args, ctx) => {
+                    // rate limit at the adapter layer (agentKey, widened by roles:tool — M10 D6)
+                    const scope = `${[...ctx.session.user.roles].sort().join(',')}:${def.name}`;
+                    if (!ctx.guardrails.checkRateLimit(ctx.session.agentKey, scope)) {
+                        const { SchemaError } = await import('../../core/index.js');
+                        throw new SchemaError('mcp.rateLimited', {}, ctx.engine.locale);
+                    }
+                    const result = await custom.executor.execute(def, args, {
+                        subject: ctx.session.user,
+                        actor: {
+                            key: ctx.session.agentKey,
+                            label: ctx.session.agentSubject.id,
+                            onBehalfOf: ctx.session.onBehalfOf,
+                        },
+                        action: `${ACTION_PREFIXES.MCP_TOOL}.${def.name}`,
+                        args,
+                        locale: ctx.engine.locale,
+                    });
+                    return result;
+                },
+            },
+        };
+    });
+}
+/** build the per-object CRUD tools (search/get/create/update/delete) */
+function objectTools(def, defs, perm) {
+    const tools = [];
+    const pkField = primaryFieldOf(def);
+    const pkName = primaryKeyOf(def);
+    const idSchema = pkField !== undefined ? fieldValueSchema(pkField, defs) : { type: 'string' };
+    const readable = readableFields(def, perm);
+    if (perm.read !== undefined) {
+        const readFields = readable.map((f) => f.name);
+        tools.push({
+            objectName: def.name,
+            spec: {
+                name: `${TOOL_PREFIXES.SEARCH}${def.name}`,
+                description: `Search ${def.name} records (rows are filtered to your read scope)`,
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        filter: {
+                            type: 'object',
+                            description: `filter by exact values or operators on readable fields: ${readFields.join(', ') || '(none)'}`,
+                            additionalProperties: true,
+                        },
+                        sort: {
+                            type: 'array',
+                            description: `sort by readable fields: ${readFields.join(', ') || '(none)'}`,
+                            items: {
+                                type: 'object',
+                                properties: { field: { type: 'string', enum: readFields }, direction: { type: 'string', enum: ['asc', 'desc'] } },
+                                required: ['field'],
+                            },
+                        },
+                        limit: { type: 'integer', minimum: 1, maximum: 1000 },
+                        offset: { type: 'integer', minimum: 0 },
+                        fields: { type: 'array', items: { type: 'string', enum: readFields } },
+                    },
+                },
+                handler: (args, ctx) => searchHandler(def, args, ctx),
+            },
+        });
+        tools.push({
+            objectName: def.name,
+            spec: {
+                name: `${TOOL_PREFIXES.GET}${def.name}`,
+                description: `Fetch one ${def.name} record by ${pkName ?? 'primary key'} (404 → not found error)`,
+                inputSchema: {
+                    type: 'object',
+                    properties: { [pkName ?? 'id']: { ...idSchema, description: 'primary key' } },
+                    required: [pkName ?? 'id'],
+                },
+                handler: (args, ctx) => getHandler(def, args, ctx),
+            },
+        });
+    }
+    if (perm.create === true) {
+        tools.push({
+            objectName: def.name,
+            spec: {
+                name: `${TOOL_PREFIXES.CREATE}${def.name}`,
+                description: `Create a ${def.name} record`,
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        data: { ...objectSchema(writableCreateFields(def, perm), defs, true), description: 'fields to set' },
+                    },
+                    required: ['data'],
+                },
+                handler: (args, ctx) => createHandler(def, args, ctx),
+            },
+        });
+    }
+    if (perm.update === null || perm.update.length > 0) {
+        tools.push({
+            objectName: def.name,
+            spec: {
+                name: `${TOOL_PREFIXES.UPDATE}${def.name}`,
+                description: `Update a ${def.name} record (only whitelisted fields are accepted)`,
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        [pkName ?? 'id']: { ...idSchema, description: 'primary key' },
+                        changes: { ...objectSchema(updatableFields(def, perm), defs), description: 'fields to change' },
+                    },
+                    required: [pkName ?? 'id', 'changes'],
+                },
+                handler: (args, ctx) => updateHandler(def, args, ctx),
+            },
+        });
+    }
+    if (perm.delete === true) {
+        tools.push({
+            objectName: def.name,
+            spec: {
+                name: `${TOOL_PREFIXES.DELETE}${def.name}`,
+                description: `Delete a ${def.name} record`,
+                inputSchema: {
+                    type: 'object',
+                    properties: { [pkName ?? 'id']: { ...idSchema, description: 'primary key' } },
+                    required: [pkName ?? 'id'],
+                },
+                handler: (args, ctx) => deleteHandler(def, args, ctx),
+            },
+        });
+    }
+    return tools;
+}
+/**
+ * Compile the full tool surface for a subject: CRUD tools for every object the
+ * subject can touch (per RBAC) plus the always-on introspection tools plus the
+ * subject-visible custom tools (M10b, roles-filtered by the executor).
+ */
+export function compileToolsFor(engine, subject, custom) {
+    const registry = engine.registry;
+    const defs = new Map(registry.list().map((def) => [def.name, def]));
+    const tools = [];
+    for (const def of registry.list()) {
+        const perm = resolvePermission(def, subject.roles);
+        if (perm === undefined)
+            continue; // role not listed → object invisible
+        tools.push(...objectTools(def, defs, perm));
+    }
+    tools.push({
+        objectName: undefined,
+        spec: {
+            name: 'list_objects',
+            description: 'List objects the current identity can read',
+            inputSchema: { type: 'object' },
+            handler: (args, ctx) => listObjectsHandler(args, ctx),
+        },
+    }, {
+        objectName: undefined,
+        spec: {
+            name: 'describe_object',
+            description: 'Describe an object schema (fields, relations, permissions) for the current identity',
+            inputSchema: {
+                type: 'object',
+                properties: { name: { type: 'string', description: 'object name' } },
+                required: ['name'],
+            },
+            handler: (args, ctx) => describeObjectHandler(args, ctx),
+        },
+    });
+    if (custom !== undefined) {
+        tools.push(...customToolTools(engine, subject, custom));
+    }
+    return tools;
+}
+export { READ_SCOPES };
+//# sourceMappingURL=generate.js.map

package/dist/adapters/mcp/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/adapters/mcp/generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;GAKG;AAEH,0FAA0F;AAC1F,SAAS,eAAe,CAAC,KAAsB;IAC7C,OAAO,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAK,KAA8B,CAAC,OAAO,KAAK,SAAS,CAAC;AAC7H,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAmC;IACnE,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChD,OAAO,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,KAAsB,EAAE,IAAmC;IAC1F,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,IAAI,CAAC;QACtB,KAAK,WAAW,CAAC,QAAQ,CAAC;QAC1B,KAAK,WAAW,CAAC,IAAI,CAAC;QACtB,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,UAAU,CAAC;QAC5B,KAAK,WAAW,CAAC,SAAS,CAAC;QAC3B,KAAK,WAAW,CAAC,KAAK,CAAC;QACvB,KAAK,WAAW,CAAC,KAAK,CAAC;QACvB,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,KAAK,WAAW,CAAC,IAAI;YACnB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YACtB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,CAAC;QACD,KAAK,WAAW,CAAC,QAAQ,CAAC;QAC1B,KAAK,WAAW,CAAC,MAAM,CAAC;QACxB,KAAK,WAAW,CAAC,UAAU;YACzB,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,WAAW,CAAC,cAAc;YAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAChE,KAAK,WAAW,CAAC,OAAO;YACtB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,GAAqB,EAAE,IAAwB;IACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,+GAA+G;AAC/G,SAAS,oBAAoB,CAAC,GAAqB,EAAE,IAAwB;IAC3E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;IACtH,0EAA0E;IAC1E,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,0FAA0F;AAC1F,SAAS,eAAe,CAAC,GAAqB,EAAE,IAAwB;IACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,OAAO,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB,EAAE,IAAmC,EAAE,YAAY,GAAG,KAAK;IACxG,MAAM,UAAU,GAA+B,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9F,IAAI,CAAC,UAAU,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,MAAM,GAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IACvF,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACtD,CAAC;SAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,2GAA2G;AAC3G,SAAS,eAAe,CACtB,MAAiB,EACjB,OAAoB,EACpB,MAA0D;IAE1D,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC7E,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,GAAoB,EAA0B,EAAE;oBAC7F,6EAA6E;oBAC7E,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC5E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;wBAChE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;wBAC5D,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAClE,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE;wBACtD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;wBACzB,KAAK,EAAE;4BACL,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;4BACzB,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;4BAClC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU;yBACnC;wBACD,MAAM,EAAE,GAAG,eAAe,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;wBACjD,IAAI;wBACJ,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;qBAC1B,CAAC,CAAC;oBACH,OAAO,MAAuB,CAAC;gBACjC,CAAC;aACF;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,SAAS,WAAW,CAClB,GAAqB,EACrB,IAAmC,EACnC,IAAwB;IAExB,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAe,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC1G,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE;gBAC1C,WAAW,EAAE,UAAU,GAAG,CAAC,IAAI,iDAAiD;gBAChF,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,2DAA2D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;4BAC3G,oBAAoB,EAAE,IAAI;yBAC3B;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,4BAA4B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;4BAC5E,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE;gCACjH,QAAQ,EAAE,CAAC,OAAO,CAAC;6BACpB;yBACF;wBACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;wBACrD,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;wBACvC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;qBACvE;iBACF;gBACD,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;aAChG;SACF,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,aAAa,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE;gBACvC,WAAW,EAAE,aAAa,GAAG,CAAC,IAAI,cAAc,MAAM,IAAI,aAAa,0BAA0B;gBACjG,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;oBAC7E,QAAQ,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC;iBAC3B;gBACD,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;aAC7F;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE;gBAC1C,WAAW,EAAE,YAAY,GAAG,CAAC,IAAI,SAAS;gBAC1C,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE;qBACrG;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;gBACD,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;aAChG;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE;gBAC1C,WAAW,EAAE,YAAY,GAAG,CAAC,IAAI,gDAAgD;gBACjF,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;wBAC7D,OAAO,EAAE,EAAE,GAAG,YAAY,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAChG;oBACD,QAAQ,EAAE,CAAC,MAAM,IAAI,IAAI,EAAE,SAAS,CAAC;iBACtC;gBACD,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;aAChG;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC;YACT,UAAU,EAAE,GAAG,CAAC,IAAI;YACpB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE;gBAC1C,WAAW,EAAE,YAAY,GAAG,CAAC,IAAI,SAAS;gBAC1C,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;oBAC7E,QAAQ,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC;iBAC3B;gBACD,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC;aAChG;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAiB,EACjB,OAAoB,EACpB,MAA2D;IAE3D,MAAM,QAAQ,GAAmB,MAAM,CAAC,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAmB,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,qCAAqC;QACvE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CACR;QACE,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE;YACJ,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,4CAA4C;YACzD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC/B,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC;SAChG;KACF,EACD;QACE,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE;YACJ,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,qFAAqF;YAClG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;gBACpE,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,CAAC,IAA6B,EAAE,GAAoB,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC;SACnG;KACF,CACF,CAAC;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/adapters/mcp/guardrails.d.ts

@@ -0,0 +1,39 @@
+import type { AuditEvent, AuditSink } from '../../core/audit/index.js';
+import type { AlertSink } from '../../core/provider/alerts/index.js';
+/**
+ * Guardrails for the MCP endpoint: per-key sliding-window rate limiting plus
+ * injected alert/audit sinks. RBAC is NOT implemented here — it is enforced by
+ * the RBAC-decorated data-access layer at call time (see tools.ts).
+ *
+ * Adapter purity: this module depends on core contracts only. The real sinks
+ * (createAlerts() / the audit buffered sink) are injected by the assembly
+ * layer (createEngine), keeping the adapters→subsystems dependency ban intact.
+ */
+export interface RateLimitConfig {
+    /** sliding window length in ms; defaults to 60_000 */
+    windowMs?: number;
+    /** max calls per window; defaults to 100 */
+    max?: number;
+}
+export interface McpGuardrails {
+    /**
+     * Sliding-window check for a key (agent key). Returns true when within the
+     * limit. On over-limit it fires a WARN alert and returns false — the caller
+     * turns that into an isError tool result. An optional `scope` widens the
+     * window key (e.g. `${rolesHash}:${tool}`) so role/tool dimensions get their
+     * own windows (M10 D6); scope absent = per-agentKey as before.
+     */
+    checkRateLimit(key: string, scope?: string, now?: number): boolean;
+    /** record a tool-call audit event; failures are caught (audit is best-effort) */
+    audit(entry: AuditEvent): Promise<void>;
+    /** alert sink for guardrail events (default console) */
+    alert: AlertSink;
+    /** release timers/state (no-op in the in-memory implementation) */
+    dispose(): void;
+}
+export declare function createGuardrails(options: {
+    rateLimit?: RateLimitConfig;
+    alerts?: AlertSink;
+    audit?: AuditSink;
+}): McpGuardrails;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/adapters/mcp/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/guardrails.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,KAAK,EAAE,SAAS,EAAc,MAAM,qCAAqC,CAAC;AAIjF;;;;;;;;GAQG;AAEH,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACnE,iFAAiF;IACjF,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,wDAAwD;IACxD,KAAK,EAAE,SAAS,CAAC;IACjB,mEAAmE;IACnE,OAAO,IAAI,IAAI,CAAC;CACjB;AAYD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE;IACxC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,GAAG,aAAa,CA8BhB"}

package/dist/adapters/mcp/guardrails.js

@@ -0,0 +1,45 @@
+import { NOOP_AUDIT_SINK } from '../../core/audit/index.js';
+import { ALERT_LEVELS } from '../../core/provider/alerts/index.js';
+import { createSlidingWindow } from '../../core/limiter/index.js';
+/** minimal console sink so the adapter needs no infrastructure import */
+const consoleSink = {
+    alert(level, message, meta) {
+        const line = `[weavekit:mcp] ${level}: ${message}${meta !== undefined ? ` ${JSON.stringify(meta)}` : ''}`;
+        if (level === ALERT_LEVELS.ERROR)
+            console.error(line);
+        else
+            console.warn(line);
+        return Promise.resolve();
+    },
+};
+export function createGuardrails(options) {
+    const windowMs = options.rateLimit?.windowMs ?? 60_000;
+    const max = options.rateLimit?.max ?? 100;
+    const alerts = options.alerts ?? consoleSink;
+    const audit = options.audit ?? NOOP_AUDIT_SINK;
+    const limiter = createSlidingWindow({ windowMs, max });
+    function checkRateLimit(key, scope, now = Date.now()) {
+        const windowKey = scope !== undefined ? `${key}:${scope}` : key;
+        if (limiter.check(windowKey, now))
+            return true;
+        void alerts.alert(ALERT_LEVELS.WARN, 'rate limit exceeded', { key: windowKey, limit: max, windowMs });
+        return false;
+    }
+    return {
+        checkRateLimit,
+        async audit(entry) {
+            try {
+                await audit.record(entry);
+            }
+            catch (error) {
+                // audit is best-effort; a failing sink must never break the tool call
+                console.error('mcp audit failed:', error instanceof Error ? error.message : String(error));
+            }
+        },
+        alert: alerts,
+        dispose() {
+            limiter.clear();
+        },
+    };
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/adapters/mcp/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../../src/adapters/mcp/guardrails.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,6BAA6B,CAAC;AAoCtF,yEAAyE;AACzE,MAAM,WAAW,GAAc;IAC7B,KAAK,CAAC,KAAiB,EAAE,OAAe,EAAE,IAA8B;QACtE,MAAM,IAAI,GAAG,kBAAkB,KAAK,KAAK,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1G,IAAI,KAAK,KAAK,YAAY,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YACjD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,OAIhC;IACC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,IAAI,MAAM,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC;IAE/C,MAAM,OAAO,GAAkB,mBAAmB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAEtE,SAAS,cAAc,CAAC,GAAW,EAAE,KAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAChE,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,KAAK,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,qBAAqB,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,cAAc;QACd,KAAK,CAAC,KAAK,CAAC,KAAiB;YAC3B,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,KAAK,EAAE,MAAM;QACb,OAAO;YACL,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/mcp/http.d.ts

@@ -0,0 +1,32 @@
+import type { FastifyInstance } from 'fastify';
+import type { Locale, ToolDefinition } from '../../core/index.js';
+import type { ToolExecutor } from '../../runtime/tools/index.js';
+import type { Authenticator } from '../auth/index.js';
+import type { IdentityResolver } from '../../core/provider/identity/index.js';
+import type { McpSessionStore } from './session.js';
+import type { McpGuardrails } from './guardrails.js';
+import type { McpEngine } from './types.js';
+export interface McpHttpDeps {
+    engine: McpEngine;
+    authenticator: Authenticator;
+    identityResolver: IdentityResolver;
+    guardrails: McpGuardrails;
+    sessionStore: McpSessionStore;
+    locale: Locale;
+    /** M10 custom tools: loaded definitions + the protocol-agnostic executor */
+    tools?: {
+        defs: ToolDefinition[];
+        executor: ToolExecutor;
+    };
+    /** HTTP path to mount the endpoint on; defaults to `/mcp` */
+    endpoint?: string;
+    /**
+     * CORS origin to allow on hijacked responses (mirrors `adapters.rest.cors.origin`).
+     * The streamable-HTTP transport owns the raw reply after `reply.hijack()`,
+     * bypassing the @fastify/cors onSend hook — so the header is injected into
+     * every `writeHead` call instead (`true` reflects the request origin).
+     */
+    corsOrigin?: string | string[] | boolean;
+}
+export declare function registerMcpRoutes(app: FastifyInstance, deps: McpHttpDeps): void;
+//# sourceMappingURL=http.d.ts.map

package/dist/adapters/mcp/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAO7E,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,KAAK,EAAE,SAAS,EAAiB,MAAM,YAAY,CAAC;AAwD3D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,aAAa,EAAE,aAAa,CAAC;IAC7B,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,UAAU,EAAE,aAAa,CAAC;IAC1B,YAAY,EAAE,eAAe,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;IAC3D,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;CAC1C;AAmCD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CA+I/E"}

package/dist/adapters/mcp/http.js

@@ -0,0 +1,206 @@
+import { randomUUID } from 'node:crypto';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
+import { SchemaError } from '../../core/index.js';
+import { authenticate } from '../auth/index.js';
+import { compileToolsFor } from './generate.js';
+import { ACTION_PREFIXES, AUDIT_ACTOR_TYPES } from '../../core/audit/index.js';
+import { version } from '../../version.js';
+/**
+ * Fastify adapter for the MCP endpoint (`/mcp`, streamable HTTP).
+ *
+ * Session lifecycle: the first POST that carries an `initialize` request (and no
+ * `Mcp-Session-Id` header) establishes a session — the Bearer key is resolved to
+ * the agent subject, and `X-Weavekit-On-Behalf-Of` resolves to the proxied user
+ * whose identity binds the session. `tools/list` and `tools/call` then run
+ * against that identity (double-layer RBAC).
+ *
+ * Transport wiring: the SDK's streamable-HTTP transport is stateful per session
+ * and the SDK `Server` may only `connect()` to one transport, so each session
+ * gets its own transport + server pair, stored by session id.
+ */
+const SESSION_HEADER = 'mcp-session-id';
+const ON_BEHALF_OF_HEADER = 'x-weavekit-on-behalf-of';
+/** resolve the Access-Control-Allow-Origin value (cors origin semantics, mirrors events/stream) */
+function allowOrigin(cors, requestOrigin) {
+    if (cors === undefined || cors === false)
+        return undefined;
+    if (cors === true)
+        return requestOrigin;
+    if (typeof cors === 'string')
+        return cors;
+    return requestOrigin !== undefined && cors.includes(requestOrigin) ? requestOrigin : undefined;
+}
+/**
+ * Inject `access-control-allow-origin` into every `writeHead` call on the raw
+ * response. The streamable-HTTP transport manages the reply itself after
+ * `reply.hijack()` (bypassing the @fastify/cors onSend hook), so the header is
+ * patched here instead of relying on a Fastify hook.
+ */
+function injectCorsOrigin(raw, value) {
+    const original = raw.writeHead;
+    raw.writeHead = ((statusCode, statusMessage, headers) => {
+        let message = statusMessage;
+        let hdrs = headers;
+        if (typeof message !== 'string') {
+            hdrs = message;
+            message = undefined;
+        }
+        hdrs = { ...(hdrs ?? {}), 'access-control-allow-origin': value };
+        return message === undefined
+            ? original.call(raw, statusCode, hdrs)
+            : original.call(raw, statusCode, message, hdrs);
+    });
+}
+/** audit a denied tool call (tool outside the session surface) — best-effort */
+function auditDeniedTool(guardrails, session, tool, args) {
+    const event = {
+        actorType: AUDIT_ACTOR_TYPES.AGENT,
+        actorId: session.agentKey,
+        action: `${ACTION_PREFIXES.MCP_TOOL}.${tool}`,
+        objectName: undefined,
+        changes: args,
+        isError: true,
+        errorCode: 'mcp.tool.notFound',
+        meta: {
+            onBehalfOf: session.onBehalfOf,
+            subjectId: session.user.id,
+            roles: session.user.roles,
+            agentLabel: session.agentSubject.id,
+            tool,
+        },
+        timestamp: new Date(),
+    };
+    void guardrails.audit(event);
+}
+export function registerMcpRoutes(app, deps) {
+    const { engine, authenticator, identityResolver, guardrails, locale, endpoint, tools } = deps;
+    const sessionStore = deps.sessionStore;
+    const path = endpoint ?? '/mcp';
+    const sessions = new Map();
+    /** per-subject compiled surface cache (D8: kills the per-request full recompile on list AND call) */
+    const surfaceCache = new Map();
+    function surfaceFor(session) {
+        const key = `${session.user.id}:${[...session.user.roles].sort().join(',')}`;
+        let cached = surfaceCache.get(key);
+        if (cached === undefined) {
+            cached = compileToolsFor(engine, session.user, tools);
+            surfaceCache.set(key, cached);
+        }
+        return cached;
+    }
+    /** one server per session: request handlers bound to that session's user identity */
+    function buildServer(sessionId) {
+        const server = new Server({ name: 'weavekit', version }, { capabilities: { tools: {} } });
+        server.setRequestHandler(ListToolsRequestSchema, async () => {
+            const sid = sessionId();
+            const session = sid === undefined ? undefined : sessionStore.get(sid);
+            if (session === undefined)
+                throw new SchemaError('mcp.session.notFound', { session: sid }, locale);
+            const toolsList = surfaceFor(session).map((t) => ({
+                name: t.spec.name,
+                description: t.spec.description,
+                inputSchema: t.spec.inputSchema,
+            }));
+            return { tools: toolsList };
+        });
+        server.setRequestHandler(CallToolRequestSchema, async (request) => {
+            const sid = sessionId();
+            const session = sid === undefined ? undefined : sessionStore.get(sid);
+            if (session === undefined)
+                throw new SchemaError('mcp.session.notFound', { session: sid }, locale);
+            const name = request.params.name;
+            const tool = surfaceFor(session).find((t) => t.spec.name === name);
+            if (tool === undefined) {
+                // a tool outside the session's surface: audit the attempt (call-layer deny)
+                auditDeniedTool(guardrails, session, name, request.params.arguments);
+                throw new SchemaError('mcp.tool.notFound', { tool: name }, locale);
+            }
+            const ctx = { engine, session, guardrails, resolveIdentity: identityResolver };
+            const result = await tool.spec.handler((request.params.arguments ?? {}), ctx);
+            return result;
+        });
+        return server;
+    }
+    /**
+     * Create a fresh session entry. The identity is bound when the SDK transport
+     * assigns the session id (inside handleRequest), so the session record is
+     * created in `onsessioninitialized`.
+     */
+    function createSession(agentKey, input) {
+        const entry = {};
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            onsessioninitialized: (sid) => {
+                sessionStore.create(sid, input);
+                sessions.set(sid, entry);
+            },
+            onsessionclosed: (sid) => {
+                sessions.delete(sid);
+                sessionStore.delete(sid);
+            },
+        });
+        entry.transport = transport;
+        entry.server = buildServer(() => transport.sessionId);
+        entry.connected = false;
+        return entry;
+    }
+    async function handle(request, reply) {
+        // authenticate before entering the transport (401 stays a plain HTTP error)
+        const agentSubject = await authenticate(authenticator, request.headers.authorization, locale);
+        const header = request.headers[SESSION_HEADER];
+        const sessionId = Array.isArray(header) ? header[0] : header;
+        let entry = sessionId !== undefined ? sessions.get(sessionId) : undefined;
+        const body = request.body;
+        if (entry === undefined && sessionId === undefined && body !== undefined && isInitializeRequest(body)) {
+            // new session: bind the proxied user from the header (fail closed on missing/unknown)
+            const obh = request.headers[ON_BEHALF_OF_HEADER];
+            const onBehalfOf = Array.isArray(obh) ? obh[0] : obh;
+            if (onBehalfOf === undefined) {
+                throw new SchemaError('mcp.onBehalfOf.missing', {}, locale);
+            }
+            const user = await identityResolver(onBehalfOf);
+            if (user === null) {
+                throw new SchemaError('mcp.identity.unknown', { ref: onBehalfOf }, locale);
+            }
+            // agentKey = the raw API key (the audit actor identity), while the RBAC
+            // subject stays the resolved key subject
+            const authHeader = request.headers.authorization;
+            const rawKey = typeof authHeader === 'string' ? authHeader.replace(/^Bearer\s+/i, '') : agentSubject.id;
+            entry = createSession(rawKey, {
+                agentKey: rawKey,
+                agentSubject,
+                user,
+                onBehalfOf,
+            });
+        }
+        if (entry === undefined) {
+            throw new SchemaError('mcp.session.notFound', { session: sessionId ?? '(none)' }, locale);
+        }
+        // one-time connect: the SDK server assumes ownership of the transport
+        if (!entry.connected) {
+            await entry.server.connect(entry.transport);
+            entry.connected = true;
+        }
+        // CORS: the transport hijacks the reply and writes its own headers, so inject
+        // the allow-origin header into every writeHead on the raw response.
+        const corsValue = allowOrigin(deps.corsOrigin, request.headers.origin);
+        if (corsValue !== undefined)
+            injectCorsOrigin(reply.raw, corsValue);
+        reply.hijack();
+        await entry.transport.handleRequest(request.raw, reply.raw, request.body);
+    }
+    app.post(path, handle);
+    app.get(path, handle);
+    app.delete(path, handle);
+    app.addHook('onClose', async () => {
+        for (const entry of sessions.values()) {
+            await entry.transport.close();
+            await entry.server.close();
+        }
+        sessions.clear();
+        sessionStore.dispose();
+    });
+}
+//# sourceMappingURL=http.js.map