runbios-mcp 0.2.1-dev.62

package/dist/inference-contract.d.ts

@@ -0,0 +1,29 @@
+export interface InferenceToolInput {
+    messages: Array<Record<string, unknown>>;
+    model?: string;
+    tools?: Array<Record<string, unknown>>;
+    tool_choice?: "none" | "auto" | "required" | Record<string, unknown>;
+    max_tokens?: number;
+    temperature?: number;
+    top_p?: number;
+    parallel_tool_calls?: boolean;
+    response_format?: Record<string, unknown>;
+    reasoning_effort?: "none" | "minimal" | "low" | "medium" | "high" | "max";
+    /**
+     * Request Server-Sent-Events streaming. The MCP tool consumes the SSE and
+     * aggregates content + reasoning_content deltas into one final result, so
+     * reasoning surfaces as it was produced. Defaults to false (single JSON).
+     */
+    stream?: boolean;
+    idempotency_key?: string;
+    request_id?: string;
+}
+/**
+ * Build an OpenAI chat-completions request and reject ambiguous tool histories.
+ * `stream` selects SSE (true) vs a single JSON body (false, the default);
+ * either way the same request is valid on the unified /v1 endpoint, whose
+ * model-ID routing serves dedicated deployments and serverless catalog models
+ * alike.
+ */
+export declare function buildInferenceBody(input: InferenceToolInput): Record<string, unknown>;
+//# sourceMappingURL=inference-contract.d.ts.map

package/dist/inference-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-contract.d.ts","sourceRoot":"","sources":["../src/inference-contract.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;IAC1E;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0FrF"}

package/dist/inference-contract.js

@@ -0,0 +1,112 @@
+const FUNCTION_NAME = /^[A-Za-z0-9_-]{1,64}$/;
+const ROLES = new Set(["system", "developer", "user", "assistant", "tool", "function"]);
+/**
+ * Build an OpenAI chat-completions request and reject ambiguous tool histories.
+ * `stream` selects SSE (true) vs a single JSON body (false, the default);
+ * either way the same request is valid on the unified /v1 endpoint, whose
+ * model-ID routing serves dedicated deployments and serverless catalog models
+ * alike.
+ */
+export function buildInferenceBody(input) {
+    if (!Array.isArray(input.messages) || input.messages.length === 0) {
+        throw new Error("messages must be a non-empty array");
+    }
+    const tools = input.tools ?? [];
+    const names = [];
+    for (const tool of tools) {
+        if (tool.type !== "function" || !tool.function || typeof tool.function !== "object") {
+            throw new Error('each tool must have type="function" and a function object');
+        }
+        const fn = tool.function;
+        if (typeof fn.name !== "string" || !FUNCTION_NAME.test(fn.name)) {
+            throw new Error("tool function names must be 1-64 safe characters");
+        }
+        const parameters = fn.parameters;
+        if (parameters !== undefined && (!parameters || typeof parameters !== "object" || Array.isArray(parameters)
+            || (parameters.type ?? "object") !== "object")) {
+            throw new Error("tool parameters must be a JSON Schema object");
+        }
+        names.push(fn.name);
+    }
+    if (new Set(names).size !== names.length)
+        throw new Error("tool function names must be unique");
+    if (input.tool_choice && typeof input.tool_choice === "object") {
+        const fn = input.tool_choice.function;
+        const selected = fn && typeof fn === "object" ? fn.name : undefined;
+        if (typeof selected !== "string" || !names.includes(selected)) {
+            throw new Error("tool_choice references an undefined function");
+        }
+    }
+    else if ((input.tool_choice === "auto" || input.tool_choice === "required") && tools.length === 0) {
+        throw new Error("tool_choice requires at least one tool");
+    }
+    const pending = new Set();
+    for (const message of input.messages) {
+        const role = message.role;
+        if (typeof role !== "string" || !ROLES.has(role))
+            throw new Error("every message requires a valid role");
+        const calls = message.tool_calls;
+        if (calls !== undefined && role !== "assistant")
+            throw new Error("tool_calls are only valid on assistant messages");
+        if (role === "assistant" && Array.isArray(calls) && calls.length > 0) {
+            if (pending.size > 0)
+                throw new Error("tool calls must be resolved before the next turn");
+            for (const rawCall of calls) {
+                if (!rawCall || typeof rawCall !== "object")
+                    throw new Error("assistant tool calls must be objects");
+                const call = rawCall;
+                const id = call.id;
+                const fn = call.function;
+                if (typeof id !== "string" || !id || pending.has(id)) {
+                    throw new Error("assistant tool calls require unique, non-empty ids");
+                }
+                if (!fn || typeof fn !== "object")
+                    throw new Error("assistant tool calls require a function");
+                const functionCall = fn;
+                if (tools.length > 0 && !names.includes(String(functionCall.name ?? ""))) {
+                    throw new Error("assistant tool call references an undefined function");
+                }
+                let args = functionCall.arguments;
+                if (typeof args === "string") {
+                    try {
+                        args = JSON.parse(args);
+                    }
+                    catch {
+                        throw new Error("tool call arguments must be valid JSON");
+                    }
+                }
+                if (!args || typeof args !== "object" || Array.isArray(args)) {
+                    throw new Error("tool call arguments must encode a JSON object");
+                }
+                pending.add(id);
+            }
+        }
+        else if (role === "tool") {
+            const id = message.tool_call_id;
+            if (typeof id !== "string" || !pending.delete(id)) {
+                throw new Error("tool message references an unknown tool_call_id");
+            }
+        }
+        else if (pending.size > 0) {
+            throw new Error("tool calls must be resolved before the next turn");
+        }
+    }
+    if (pending.size > 0)
+        throw new Error("assistant tool calls are missing tool response messages");
+    const body = { messages: input.messages, stream: input.stream === true };
+    // When streaming, ask the endpoint to emit a terminal usage row so the
+    // aggregated result can report token counts (streaming charging itself is a
+    // server-side concern; the client only requests visibility).
+    if (input.stream === true) {
+        body.stream_options = { include_usage: true };
+    }
+    for (const field of [
+        "model", "tools", "tool_choice", "max_tokens", "temperature", "top_p",
+        "parallel_tool_calls", "response_format", "reasoning_effort",
+    ]) {
+        if (input[field] !== undefined)
+            body[field] = input[field];
+    }
+    return body;
+}
+//# sourceMappingURL=inference-contract.js.map

package/dist/inference-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-contract.js","sourceRoot":"","sources":["../src/inference-contract.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAuBxF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAmC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC;QACjC,IAAI,UAAU,KAAK,SAAS,IAAI,CAC9B,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;eACvE,CAAE,UAAsC,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,QAAQ,CAC3E,EAAE,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAEhG,IAAI,KAAK,CAAC,WAAW,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC;QACtC,MAAM,QAAQ,GAAG,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAE,EAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpH,IAAI,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrE,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC1F,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACrG,MAAM,IAAI,GAAG,OAAkC,CAAC;gBAChD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;gBACzB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC9F,MAAM,YAAY,GAAG,EAA6B,CAAC;gBACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBACzE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC;gBAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;oBAAC,CAAC;gBACvG,CAAC;gBACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;YAChC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAEjG,MAAM,IAAI,GAA4B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;IAClG,uEAAuE;IACvE,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,cAAc,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI;QAClB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO;QACrE,qBAAqB,EAAE,iBAAiB,EAAE,kBAAkB;KACpD,EAAE,CAAC;QACX,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/redaction.d.ts

@@ -0,0 +1,74 @@
+/**
+ * An MCP client is an external program the customer runs, so a tool RESULT is a
+ * customer-facing response — exactly like an HTTP body the console renders.
+ * Several tools hand the upstream payload straight back (`json(data)`), which
+ * is how internal build identity reached MCP clients: the architecture registry
+ * ships the engine image reference that published each row, and the training
+ * contract ships the image version range it was written against.
+ *
+ * Two facts never leave the platform on a customer surface:
+ *   1. any container image name, version, tag, digest or path;
+ *   2. the identity of any supplier we buy capacity from.
+ *
+ * The rule here is CONTENT, not field name. Dropping a known key is defeated
+ * the moment the same value appears somewhere else — the architecture registry
+ * bakes the tag into free-text `notes` ("BIOS <tag>: llama, mistral"), so a
+ * key-only strip leaves the identical string one field over. What replaces a
+ * removed reference is the platform's own name and, at the envelope, the
+ * customer-meaningful fact (Run BiOS ran this end to end) — never a blank, and
+ * never a marker that advertises the existence of the thing being hidden.
+ *
+ * ── Why the names below are hashes ──────────────────────────────────────────
+ * `npm publish` ships `dist/`, so anything this module states in plaintext is
+ * downloadable by every customer. A guard that lists what to hide as literal
+ * alternations hands over exactly the roster it exists to protect — strictly
+ * worse than the one leak it was written to stop, because it needs no error to
+ * occur. So the NAMES are salted FNV-1a hashes matched token by token, and only
+ * SHAPES (a digest, an `owner/name:tag` reference, our own product name next to
+ * a version) stay readable — a shape discloses nothing.
+ *
+ * Honest limitation: a hash CONFIRMS a guess. Someone who already suspects a
+ * name can hash it and find it here. What they cannot do is ENUMERATE, which is
+ * what a plaintext list hands them. The authoritative fix stays upstream, in
+ * the services that should not send these fields at all.
+ */
+/** What the customer can rely on in place of a build reference. */
+export declare const VERIFIED_ON_RUN_BIOS: string;
+/**
+ * Remove internal build identity from one string of platform-authored text.
+ * Text with nothing to remove is returned untouched — never reformatted.
+ */
+export declare function redactBuildIdentity(value: string): string;
+/** Recursively apply redactBuildIdentity to every string in a JSON value. */
+export declare function redactBuildIdentityDeep<T>(value: T): T;
+/** Drop every build-identity key, at any depth, then redact what remains. */
+export declare function stripBuildIdentity<T>(value: T): T;
+/**
+ * Redact build identity inside NAMED free-text fields only, leaving every other
+ * value byte-identical.
+ *
+ * Some upstream contracts store a raw transport error verbatim rather than a
+ * curated sentence: the training stop saga persists the Go `*url.Error` from
+ * its last request to the machine, and that error's text is the full URL — a
+ * host that names the capacity supplier. The deployment side already curates
+ * its equivalent field before answering; the training side does not, so the
+ * value reaches this process intact and is removed here, at the boundary the
+ * MCP client reads. Scoped by key (not applied to the whole payload) because
+ * the same object carries model ids and config values, which have the same
+ * `owner/name:value` shape as a build reference and must survive untouched.
+ */
+export declare function redactFreeTextFields<T>(value: T, keys: readonly string[]): T;
+/**
+ * The architecture registry answer, with the build identity of the manifest
+ * that published each row removed.
+ *
+ * Every row records image_tag / bios_version / manifest_sha256 from the engine
+ * build whose capability manifest last published it, and the supported-row
+ * `notes` repeat the same tag as prose. None of that is a customer fact: the
+ * customer cannot choose a build, and the support decision is authoritative
+ * regardless (the deploy and training gates read these same rows). So the rows
+ * are preserved in full minus their build identity, and the response states
+ * what the customer can actually rely on.
+ */
+export declare function sanitizeArchitectureRegistry(data: unknown): unknown;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAyCH,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,QAEwE,CAAC;AAoH1G;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAsBzD;AAED,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAWtD;AAuBD,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAWjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,CAc5E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAOnE"}

package/dist/redaction.js

@@ -0,0 +1,316 @@
+/**
+ * An MCP client is an external program the customer runs, so a tool RESULT is a
+ * customer-facing response — exactly like an HTTP body the console renders.
+ * Several tools hand the upstream payload straight back (`json(data)`), which
+ * is how internal build identity reached MCP clients: the architecture registry
+ * ships the engine image reference that published each row, and the training
+ * contract ships the image version range it was written against.
+ *
+ * Two facts never leave the platform on a customer surface:
+ *   1. any container image name, version, tag, digest or path;
+ *   2. the identity of any supplier we buy capacity from.
+ *
+ * The rule here is CONTENT, not field name. Dropping a known key is defeated
+ * the moment the same value appears somewhere else — the architecture registry
+ * bakes the tag into free-text `notes` ("BIOS <tag>: llama, mistral"), so a
+ * key-only strip leaves the identical string one field over. What replaces a
+ * removed reference is the platform's own name and, at the envelope, the
+ * customer-meaningful fact (Run BiOS ran this end to end) — never a blank, and
+ * never a marker that advertises the existence of the thing being hidden.
+ *
+ * ── Why the names below are hashes ──────────────────────────────────────────
+ * `npm publish` ships `dist/`, so anything this module states in plaintext is
+ * downloadable by every customer. A guard that lists what to hide as literal
+ * alternations hands over exactly the roster it exists to protect — strictly
+ * worse than the one leak it was written to stop, because it needs no error to
+ * occur. So the NAMES are salted FNV-1a hashes matched token by token, and only
+ * SHAPES (a digest, an `owner/name:tag` reference, our own product name next to
+ * a version) stay readable — a shape discloses nothing.
+ *
+ * Honest limitation: a hash CONFIRMS a guess. Someone who already suspects a
+ * name can hash it and find it here. What they cannot do is ENUMERATE, which is
+ * what a plaintext list hands them. The authoritative fix stays upstream, in
+ * the services that should not send these fields at all.
+ */
+const HASH_SALT = "bios-mcp/redaction/v1:";
+/** FNV-1a (32-bit), base-36. Not a security hash — an anti-enumeration one. */
+function fingerprint(normalized) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < normalized.length; i += 1) {
+        h ^= normalized.charCodeAt(i);
+        h = Math.imul(h, 0x01000193) >>> 0;
+    }
+    return h.toString(36);
+}
+/**
+ * Fingerprints of the engine/image repositories Run BiOS builds and runs, our
+ * storage namespaces, the serving and training engines behind them, and the
+ * capacity suppliers we buy from. Separators are normalized away before
+ * hashing, so a hyphenated, dotted, spaced or run-together spelling of the same
+ * name all collapse onto one entry.
+ *
+ * A name that is also ordinary English or ML vocabulary is deliberately NOT a
+ * single-token entry — blanking those words would corrupt legitimate platform
+ * text — and is covered only in its unambiguous two-word form.
+ *
+ * The plaintext inputs live in test/build-identity-leak.test.ts, which asserts
+ * that every one of them still redacts. Tests are not published.
+ */
+const INTERNAL_NAME_FINGERPRINTS = new Set([
+    "10x0xbx", "12wy7fm", "13xtaj5", "1810k1x", "18usfr7", "199flq2", "1a1qwfu",
+    "1a7nk5a", "1bk01j6", "1dihvvx", "1etj9sp", "1f8y85q", "1fg3w0r", "1g76afq",
+    "1ij8vte", "1k55s00", "1l27e3z", "1o62s5m", "1spctel", "1wkeshf", "4q2wdq",
+    "8an6wv", "adgu8j", "bdgi9y", "d32wt5", "dl793q", "jrv624", "pr8tmh",
+    "pvzflf", "uwkhbj", "vdixvx", "yj2u8f",
+]);
+/** How many adjacent word-parts are joined when testing a candidate name. */
+const MAX_NAME_PARTS = 2;
+const REPLACEMENT = "Run BiOS";
+/** What the customer can rely on in place of a build reference. */
+export const VERIFIED_ON_RUN_BIOS = "Every architecture listed here has been run end to end on Run BiOS and confirmed to load and serve; "
+    + "the enabled flags are authoritative because the deployment and training gates read these same rows.";
+/**
+ * Platform-authored sentences that FRAME a build reference. Rewriting the whole
+ * sentence keeps the note readable, instead of leaving the punctuation that
+ * wrapped the reference stranded around a hole. These are shapes and our own
+ * product name, so they are safe to state plainly.
+ */
+const BUILD_SENTENCE_REWRITES = [
+    // "Not supported by the training engine (BIOS <tag>)."
+    {
+        pattern: /\bnot supported by (?:the )?(?:training|serving|inference) engine\s*\([^)]*\)\.?/gi,
+        replacement: "Not supported on Run BiOS today.",
+    },
+    // "Dropped by training engine <tag>."
+    {
+        pattern: /\bdropped by (?:the )?(?:training|serving|inference) engine\b[^.;\n]*\.?/gi,
+        replacement: "No longer supported on Run BiOS.",
+    },
+    // "BIOS <tag>: llama, mistral" — the supported-row note prefix. The version
+    // goes; the platform name and the model types the note carries stay. The
+    // optional "Run " prefix consumes the two-word form whole, so a note already
+    // written "Run BiOS <tag>" collapses to one brand mention, not "Run Run
+    // BiOS".
+    {
+        pattern: /(^|[\s(])(?:Run[\s@]+)?BIOS[\s@:]+v?\d[\w.\-]*(?::[\w.\-]+)?(?:@sha256:[0-9a-fA-F]+)?/gi,
+        replacement: `$1${REPLACEMENT}`,
+    },
+];
+/**
+ * Build references matched by SHAPE. Path-segment repetition is bounded: an OCI
+ * reference is never many segments deep, and an unbounded `*` over free text
+ * the platform does not control is a backtracking liability.
+ */
+const BUILD_SHAPE_PATTERNS = [
+    // Any digest-pinned OCI reference, whatever the registry:
+    // `[host[:port]/]repo[/path]@sha256:<hex>`. A catalog model id pins a 40-hex
+    // GIT commit and never uses `@sha256:`, so this cannot eat one.
+    /(?:[A-Za-z0-9][\w.-]*(?::\d+)?\/)?[A-Za-z0-9][\w.-]*(?:\/[A-Za-z0-9][\w.-]*){0,6}@sha256:[0-9a-fA-F]{16,}/g,
+    // A bare digest left on its own.
+    /\bsha256:[0-9a-fA-F]{16,}/g,
+    // A TAGGED image reference: `[host/]owner/name:tag`, at least one slash and a
+    // trailing `:tag`. A catalog model id is `owner/name` with no tag and pins a
+    // revision with `@<40-hex>`, so it can never take this shape. An all-digit
+    // suffix is excluded so a `path/file.py:88` line reference in a log survives.
+    /\b[A-Za-z0-9][\w.-]*(?:\/[A-Za-z0-9][\w.-]*){1,6}:(?![0-9]+(?![\w.-]))[A-Za-z0-9][\w.-]{0,60}\b/g,
+];
+/** Lower-case alphanumeric runs — the units a name is tested against. */
+function wordParts(token) {
+    return token.toLowerCase().match(/[a-z0-9]+/g) ?? [];
+}
+/** Does this token (or a run of its parts) fingerprint to an internal name? */
+function namesInternalThing(token) {
+    const parts = wordParts(token);
+    for (let i = 0; i < parts.length; i += 1) {
+        for (let len = 1; len <= MAX_NAME_PARTS && i + len <= parts.length; len += 1) {
+            const candidate = parts.slice(i, i + len).join("");
+            if (candidate.length < 4)
+                continue; // too short to be a name; avoids noise
+            if (INTERNAL_NAME_FINGERPRINTS.has(fingerprint(HASH_SALT + candidate)))
+                return true;
+        }
+    }
+    return false;
+}
+/** Replace one word-part inside a token, keeping the punctuation around it. */
+function replacePart(token, part, replacement, fromEnd) {
+    const matcher = new RegExp(part, "i");
+    if (!fromEnd)
+        return token.replace(matcher, replacement);
+    const index = token.toLowerCase().lastIndexOf(part);
+    if (index < 0)
+        return token;
+    return token.slice(0, index) + replacement + token.slice(index + part.length);
+}
+/**
+ * Replace any whitespace-delimited token that names an internal thing. Adjacent
+ * tokens are also tested joined, so a two-word name is caught
+ * without either half being blocked on its own.
+ */
+function redactInternalNames(value) {
+    const tokens = value.split(/(\s+)/);
+    let changed = false;
+    for (let i = 0; i < tokens.length; i += 1) {
+        const token = tokens[i];
+        if (!token || /^\s+$/.test(token))
+            continue;
+        if (namesInternalThing(token)) {
+            tokens[i] = REPLACEMENT;
+            changed = true;
+            continue;
+        }
+        // Two-word name split across the space. Machine-generated text almost never
+        // presents the halves as two bare words — it glues the first half to the
+        // key, bracket or quote in front of it (`key="<first> <second>"`,
+        // `rank1(<first> <second>)`), so requiring both tokens to be a single
+        // word-part let every realistic shape through. Pair the LAST word-part of
+        // this token with the FIRST of the next, and blank only those two parts so
+        // the surrounding key/punctuation the caller needs survives.
+        const nextIndex = i + 2;
+        const next = tokens[nextIndex];
+        if (!next || /^\s+$/.test(next))
+            continue;
+        const leadParts = wordParts(token);
+        const tailParts = wordParts(next);
+        const lead = leadParts[leadParts.length - 1];
+        const tail = tailParts[0];
+        if (lead && tail && namesInternalThing(lead + tail)) {
+            tokens[i] = replacePart(token, lead, REPLACEMENT, true);
+            tokens[i + 1] = "";
+            tokens[nextIndex] = replacePart(next, tail, "", false);
+            changed = true;
+        }
+    }
+    return changed ? tokens.join("") : value;
+}
+/**
+ * Remove internal build identity from one string of platform-authored text.
+ * Text with nothing to remove is returned untouched — never reformatted.
+ */
+export function redactBuildIdentity(value) {
+    // Order matters: references go first, so the sentence rules then see a clean
+    // "…engine BiOS." and can rewrite the whole sentence. Reversing it leaves the
+    // tail of a version string ("…on BiOS.51.") behind.
+    let out = value;
+    for (const pattern of BUILD_SHAPE_PATTERNS) {
+        out = out.replace(pattern, REPLACEMENT);
+    }
+    out = redactInternalNames(out);
+    for (const { pattern, replacement } of BUILD_SENTENCE_REWRITES) {
+        out = out.replace(pattern, replacement);
+    }
+    if (out === value)
+        return value;
+    return out
+        // Two removals in a row, or our own name left in front of one — matched in
+        // both the legacy one-word and the current two-word brand forms.
+        .replace(/\b(?:Run BiOS|BIOS|BiOS)(?:[\s@:]+(?:Run BiOS|BiOS))+\b/g, REPLACEMENT)
+        // A removal can strand the punctuation that framed the reference.
+        .replace(/\s+([:.,;])/g, "$1")
+        .replace(/\(\s*\)/g, "")
+        .replace(/\s{2,}/g, " ")
+        .trim();
+}
+/** Recursively apply redactBuildIdentity to every string in a JSON value. */
+export function redactBuildIdentityDeep(value) {
+    if (typeof value === "string")
+        return redactBuildIdentity(value);
+    if (Array.isArray(value))
+        return value.map((entry) => redactBuildIdentityDeep(entry));
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [key, entry] of Object.entries(value)) {
+            out[key] = redactBuildIdentityDeep(entry);
+        }
+        return out;
+    }
+    return value;
+}
+/**
+ * Keys that carry build identity outright. They are dropped wherever they
+ * appear in a platform-authored payload; the content rules above then catch the
+ * same value when it also lives in free text.
+ *
+ * Applied ONLY to platform-authored payloads (the architecture registry, the
+ * training contract) — never to customer data such as a dataset preview or a
+ * model completion, where a key like `image` means the customer's own content.
+ */
+const BUILD_IDENTITY_KEYS = new Set([
+    "image_tag",
+    "imageTag",
+    "bios_version",
+    "biosVersion",
+    "manifest_sha256",
+    "manifestSha256",
+    "image_compatibility",
+    "engine_image",
+    "base_image",
+]);
+/** Drop every build-identity key, at any depth, then redact what remains. */
+export function stripBuildIdentity(value) {
+    if (Array.isArray(value))
+        return value.map((entry) => stripBuildIdentity(entry));
+    if (value && typeof value === "object") {
+        const out = {};
+        for (const [key, entry] of Object.entries(value)) {
+            if (BUILD_IDENTITY_KEYS.has(key))
+                continue;
+            out[key] = stripBuildIdentity(entry);
+        }
+        return out;
+    }
+    return redactBuildIdentityDeep(value);
+}
+/**
+ * Redact build identity inside NAMED free-text fields only, leaving every other
+ * value byte-identical.
+ *
+ * Some upstream contracts store a raw transport error verbatim rather than a
+ * curated sentence: the training stop saga persists the Go `*url.Error` from
+ * its last request to the machine, and that error's text is the full URL — a
+ * host that names the capacity supplier. The deployment side already curates
+ * its equivalent field before answering; the training side does not, so the
+ * value reaches this process intact and is removed here, at the boundary the
+ * MCP client reads. Scoped by key (not applied to the whole payload) because
+ * the same object carries model ids and config values, which have the same
+ * `owner/name:value` shape as a build reference and must survive untouched.
+ */
+export function redactFreeTextFields(value, keys) {
+    const named = new Set(keys);
+    const walk = (node) => {
+        if (Array.isArray(node))
+            return node.map(walk);
+        if (node && typeof node === "object") {
+            const out = {};
+            for (const [key, entry] of Object.entries(node)) {
+                out[key] = named.has(key) && typeof entry === "string" ? redactBuildIdentity(entry) : walk(entry);
+            }
+            return out;
+        }
+        return node;
+    };
+    return walk(value);
+}
+/**
+ * The architecture registry answer, with the build identity of the manifest
+ * that published each row removed.
+ *
+ * Every row records image_tag / bios_version / manifest_sha256 from the engine
+ * build whose capability manifest last published it, and the supported-row
+ * `notes` repeat the same tag as prose. None of that is a customer fact: the
+ * customer cannot choose a build, and the support decision is authoritative
+ * regardless (the deploy and training gates read these same rows). So the rows
+ * are preserved in full minus their build identity, and the response states
+ * what the customer can actually rely on.
+ */
+export function sanitizeArchitectureRegistry(data) {
+    if (!data || typeof data !== "object" || Array.isArray(data))
+        return stripBuildIdentity(data);
+    const payload = data;
+    if (!Array.isArray(payload.architectures))
+        return stripBuildIdentity(data);
+    const clean = stripBuildIdentity(payload);
+    clean.verification = VERIFIED_ON_RUN_BIOS;
+    return clean;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAE3C,+EAA+E;AAC/E,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAS;IACjD,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IAC3E,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IAC3E,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ;IAC1E,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;IACpE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ;CACvC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,MAAM,WAAW,GAAG,UAAU,CAAC;AAE/B,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAC/B,sGAAsG;MACpG,qGAAqG,CAAC;AAE1G;;;;;GAKG;AACH,MAAM,uBAAuB,GAAoD;IAC/E,uDAAuD;IACvD;QACE,OAAO,EAAE,oFAAoF;QAC7F,WAAW,EAAE,kCAAkC;KAChD;IACD,sCAAsC;IACtC;QACE,OAAO,EAAE,4EAA4E;QACrF,WAAW,EAAE,kCAAkC;KAChD;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,SAAS;IACT;QACE,OAAO,EAAE,yFAAyF;QAClG,WAAW,EAAE,KAAK,WAAW,EAAE;KAChC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,oBAAoB,GAAa;IACrC,0DAA0D;IAC1D,6EAA6E;IAC7E,gEAAgE;IAChE,4GAA4G;IAC5G,iCAAiC;IACjC,4BAA4B;IAC5B,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,kGAAkG;CACnG,CAAC;AAEF,yEAAyE;AACzE,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,cAAc,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,uCAAuC;YAC3E,IAAI,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB,EAAE,OAAgB;IACrF,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QAC5C,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;YACxB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,4EAA4E;QAC5E,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,0EAA0E;QAC1E,2EAA2E;QAC3E,6DAA6D;QAC7D,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,IAAI,IAAI,IAAI,kBAAkB,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YACxD,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACnB,MAAM,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,6EAA6E;IAC7E,8EAA8E;IAC9E,oDAAoD;IACpD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;QAC3C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,uBAAuB,EAAE,CAAC;QAC/D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,GAAG;QACR,2EAA2E;QAC3E,iEAAiE;SAChE,OAAO,CAAC,0DAA0D,EAAE,WAAW,CAAC;QACjF,kEAAkE;SACjE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CAAI,KAAQ;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,CAAiB,CAAC;IACjF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAiB,CAAC;IACtG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,GAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,WAAW;IACX,UAAU;IACV,cAAc;IACd,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAI,KAAQ;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAiB,CAAC;IACjG,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC3C,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,GAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAI,KAAQ,EAAE,IAAuB;IACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,IAAa,EAAW,EAAE;QACtC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAM,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,IAA+B,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAA4B,CAAC;IACrE,KAAK,CAAC,YAAY,GAAG,oBAAoB,CAAC;IAC1C,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,63 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BiosClient } from "./api-client.js";
+import { type LaunchGates } from "./config.js";
+import { VERSION } from "./version.js";
+export { VERSION };
+export interface ToolCallInfo {
+    tool: string;
+    ok: boolean;
+    ms: number;
+    error?: string;
+}
+export interface ServerHooks {
+    onToolCall?: (info: ToolCallInfo) => void;
+}
+export interface DeploymentCapabilities {
+    supportsImages?: boolean;
+    supportsTools?: boolean;
+}
+/**
+ * Label the architecture registry's provenance instead of shipping it bare.
+ *
+ * Each row in the registry TABLE records image_tag/bios_version/manifest_sha256
+ * from the serving image whose capability manifest last published it. That is
+ * REGISTRY PROVENANCE, not the image the platform is running now, and the two
+ * drift apart whenever a newer image has not re-published the manifest. An
+ * agent that reads a build reference next to a support list concludes "the
+ * platform runs this build" and tells the user a stale version — a wrong action
+ * caused purely by presentation. The support decision itself IS authoritative
+ * (the deploy gate reads these same rows), so the rows are preserved; the
+ * internal image reference is removed by CONTENT from every field of every
+ * scope (see redactBuildReferences) and replaced with an explicit provenance
+ * block. Fixing the underlying manifest staleness is a control-plane concern
+ * and is deliberately NOT duplicated here.
+ *
+ * Those three columns no longer REACH this function: the public endpoint
+ * projects them away before the response leaves the control plane. What arrives
+ * here is the customer projection, and this block must describe that.
+ *
+ * The block itself only asserts what the rows actually carry, and since the
+ * control plane started projecting this endpoint that is LESS than it once was:
+ * image_tag, bios_version and manifest_sha256 are dropped at the boundary now
+ * (publicArchRow in deployment-service), so no response can still see them.
+ * Counting them here would therefore report 0 forever and drive the block to
+ * announce "no row records a build version" about a registry whose rows do —
+ * narrating a field that is empty on every row is the same defect one level up,
+ * and asserting a fact about rows this layer can no longer inspect is worse.
+ * `source` is the discriminator that survives the projection, so it is the one
+ * this block counts on.
+ */
+export declare function annotateArchitectureProvenance(data: unknown): unknown;
+/**
+ * Summarize what a deployment detail payload ACTUALLY proves about the GPU and
+ * the lifecycle phase.
+ *
+ * The detail response is wide and reports several things as null until a pod
+ * callback lands, which reads to an agent as "no GPU" and "no phase" on a
+ * deployment that is demonstrably provisioning on a known SKU. Everything here
+ * is derived from fields the same payload returned — nothing is invented, and a
+ * value that cannot be derived stays "unknown" instead of being guessed.
+ */
+export declare function summarizeInferenceStatus(data: unknown): unknown;
+export declare function createBiosMcpServer(client: BiosClient, hooks?: ServerHooks, deploymentCaps?: DeploymentCapabilities, launchGates?: LaunchGates): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkDpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC;CAC3C;AAUD,MAAM,WAAW,sBAAsB;IAErC,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAkYD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAkDrE;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAiD/D;AAID,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,EAClB,KAAK,CAAC,EAAE,WAAW,EACnB,cAAc,CAAC,EAAE,sBAAsB,EAOvC,WAAW,GAAE,WAAkC,GAC9C,SAAS,CAghEX"}