sigild 0.0.1 → 0.0.2

package/dist/src/mcp/protocol.js

@@ -0,0 +1,79 @@
+/**
+ * Minimal subset of the Model Context Protocol (MCP) wire format that sigil
+ * needs to act as a stdio tool server for Claude Code (and any other MCP
+ * client). MCP rides on JSON-RPC 2.0; this module defines the request,
+ * response, and notification shapes plus helpers for encoding.
+ *
+ * Spec reference: https://modelcontextprotocol.io/specification
+ *
+ * We implement: initialize, notifications/initialized, tools/list, tools/call.
+ * Everything else (resources, prompts, sampling, completions, logging,
+ * pagination cursors) is intentionally omitted.
+ */
+export const PROTOCOL_VERSION = '2025-06-18';
+export const SERVER_INFO = {
+    name: 'sigil-mcp',
+    version: '0.0.1',
+};
+// Standard JSON-RPC 2.0 error codes (re-stated to keep this module self-contained).
+export const MCP_PARSE_ERROR = -32700;
+export const MCP_INVALID_REQUEST = -32600;
+export const MCP_METHOD_NOT_FOUND = -32601;
+export const MCP_INVALID_PARAMS = -32602;
+export const MCP_INTERNAL_ERROR = -32603;
+export function parseMessage(line) {
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch {
+        return { kind: 'parse_error' };
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        return { kind: 'invalid', id: null, reason: 'message must be a JSON object' };
+    }
+    const obj = parsed;
+    if (obj['jsonrpc'] !== '2.0') {
+        return { kind: 'invalid', id: extractId(obj['id']), reason: 'jsonrpc must be "2.0"' };
+    }
+    if (typeof obj['method'] !== 'string' || obj['method'].length === 0) {
+        return { kind: 'invalid', id: extractId(obj['id']), reason: 'method must be a non-empty string' };
+    }
+    // Distinguish request vs notification by presence of id.
+    if (!('id' in obj)) {
+        return {
+            kind: 'notification',
+            notification: {
+                jsonrpc: '2.0',
+                method: obj['method'],
+                ...(obj['params'] !== undefined ? { params: obj['params'] } : {}),
+            },
+        };
+    }
+    const rawId = obj['id'];
+    if (typeof rawId !== 'string' && typeof rawId !== 'number' && rawId !== null) {
+        return { kind: 'invalid', id: null, reason: 'id must be string, number, or null' };
+    }
+    return {
+        kind: 'request',
+        request: {
+            jsonrpc: '2.0',
+            id: rawId,
+            method: obj['method'],
+            ...(obj['params'] !== undefined ? { params: obj['params'] } : {}),
+        },
+    };
+}
+function extractId(raw) {
+    return typeof raw === 'string' || typeof raw === 'number' || raw === null ? raw : null;
+}
+export function encodeSuccess(id, result) {
+    const r = { jsonrpc: '2.0', id, result };
+    return JSON.stringify(r);
+}
+export function encodeError(id, code, message, data) {
+    const error = data === undefined ? { code, message } : { code, message, data };
+    const r = { jsonrpc: '2.0', id, error };
+    return JSON.stringify(r);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/src/mcp/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/mcp/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;CACR,CAAC;AAqCX,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AAyCzC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpG,CAAC;IACD,yDAAyD;IACzD,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE;gBACZ,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAS,EAAE,MAAe;IACtD,MAAM,CAAC,GAAe,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IAClF,MAAM,KAAK,GAAiB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7F,MAAM,CAAC,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/src/mcp/server.d.ts

@@ -0,0 +1,46 @@
+import type { MethodContext } from '../daemon/methods.js';
+import { type McpId } from './protocol.js';
+export interface McpServerOpts {
+    /**
+     * In-process method context: handles + audit. The MCP server invokes
+     * sign methods directly against this — no cross-process IPC.
+     */
+    context: MethodContext;
+    /**
+     * Optional log sink for protocol-level events. Defaults to a no-op.
+     * The default binary entrypoint writes log events to stderr so they don't
+     * collide with stdio MCP traffic on stdout.
+     */
+    onLog?: (event: McpLogEvent) => void;
+}
+export type McpLogEvent = {
+    kind: 'recv';
+    method: string;
+    id: McpId | null;
+} | {
+    kind: 'send_ok';
+    id: McpId;
+} | {
+    kind: 'send_error';
+    id: McpId;
+    code: number;
+    message: string;
+} | {
+    kind: 'initialized';
+};
+/**
+ * Handle a single received line by dispatching it through the MCP protocol.
+ * Returns either a response string to send back, or `null` if the line was a
+ * notification (no response expected).
+ */
+export declare function handleLine(line: string, opts: McpServerOpts): string | null;
+export interface McpStdioOpts extends McpServerOpts {
+    stdin: NodeJS.ReadableStream;
+    stdout: NodeJS.WritableStream;
+}
+/**
+ * Run the MCP server over arbitrary streams (stdin/stdout in production,
+ * mock streams in tests). Resolves when stdin closes.
+ */
+export declare function runMcpStdio(opts: McpStdioOpts): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/src/mcp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAWL,KAAK,KAAK,EAEX,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,OAAO,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,GAAG,IAAI,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAkC3E;AA0CD,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB7D"}

package/dist/src/mcp/server.js

@@ -0,0 +1,108 @@
+import { findTool, ToolError, TOOLS } from './tools.js';
+import { encodeError, encodeSuccess, MCP_INTERNAL_ERROR, MCP_INVALID_PARAMS, MCP_INVALID_REQUEST, MCP_METHOD_NOT_FOUND, MCP_PARSE_ERROR, parseMessage, PROTOCOL_VERSION, SERVER_INFO, } from './protocol.js';
+/**
+ * Handle a single received line by dispatching it through the MCP protocol.
+ * Returns either a response string to send back, or `null` if the line was a
+ * notification (no response expected).
+ */
+export function handleLine(line, opts) {
+    const parsed = parseMessage(line);
+    const log = (e) => opts.onLog?.(e);
+    if (parsed.kind === 'parse_error') {
+        log({ kind: 'send_error', id: null, code: MCP_PARSE_ERROR, message: 'parse error' });
+        return encodeError(null, MCP_PARSE_ERROR, 'parse error');
+    }
+    if (parsed.kind === 'invalid') {
+        log({ kind: 'send_error', id: parsed.id, code: MCP_INVALID_REQUEST, message: parsed.reason });
+        return encodeError(parsed.id, MCP_INVALID_REQUEST, parsed.reason);
+    }
+    if (parsed.kind === 'notification') {
+        log({ kind: 'recv', method: parsed.notification.method, id: null });
+        if (parsed.notification.method === 'notifications/initialized') {
+            log({ kind: 'initialized' });
+        }
+        return null;
+    }
+    const req = parsed.request;
+    log({ kind: 'recv', method: req.method, id: req.id });
+    try {
+        const result = dispatch(req, opts);
+        log({ kind: 'send_ok', id: req.id });
+        return encodeSuccess(req.id, result);
+    }
+    catch (err) {
+        if (err instanceof ToolError) {
+            log({ kind: 'send_error', id: req.id, code: err.code, message: err.message });
+            return encodeError(req.id, err.code, err.message, err.data);
+        }
+        const message = `internal error: ${err.message}`;
+        log({ kind: 'send_error', id: req.id, code: MCP_INTERNAL_ERROR, message });
+        return encodeError(req.id, MCP_INTERNAL_ERROR, message);
+    }
+}
+function dispatch(req, opts) {
+    switch (req.method) {
+        case 'initialize':
+            return {
+                protocolVersion: PROTOCOL_VERSION,
+                capabilities: { tools: { listChanged: false } },
+                serverInfo: SERVER_INFO,
+            };
+        case 'tools/list':
+            return { tools: TOOLS.map((t) => t.definition) };
+        case 'tools/call':
+            return invokeTool(req.params, opts);
+        case 'ping':
+            return {};
+        default:
+            throw new ToolError(MCP_METHOD_NOT_FOUND, `method not found: ${req.method}`);
+    }
+}
+function invokeTool(params, opts) {
+    if (typeof params !== 'object' || params === null || Array.isArray(params)) {
+        throw new ToolError(MCP_INVALID_PARAMS, 'tools/call: params must be an object');
+    }
+    const obj = params;
+    const name = obj['name'];
+    if (typeof name !== 'string' || name.length === 0) {
+        throw new ToolError(MCP_INVALID_PARAMS, 'tools/call: name must be a non-empty string');
+    }
+    const tool = findTool(name);
+    if (!tool) {
+        throw new ToolError(MCP_METHOD_NOT_FOUND, `unknown tool: ${name}`);
+    }
+    const args = obj['arguments'] ?? {};
+    return tool.handler(args, opts.context);
+}
+/**
+ * Run the MCP server over arbitrary streams (stdin/stdout in production,
+ * mock streams in tests). Resolves when stdin closes.
+ */
+export function runMcpStdio(opts) {
+    const { stdin, stdout } = opts;
+    stdin.setEncoding?.('utf8');
+    return new Promise((resolve, reject) => {
+        let buf = '';
+        let stdinEnded = false;
+        stdin.on('data', (chunk) => {
+            buf += typeof chunk === 'string' ? chunk : chunk.toString('utf8');
+            let nl;
+            while ((nl = buf.indexOf('\n')) !== -1) {
+                const line = buf.slice(0, nl);
+                buf = buf.slice(nl + 1);
+                if (line.length === 0)
+                    continue;
+                const resp = handleLine(line, opts);
+                if (resp !== null)
+                    stdout.write(resp + '\n');
+            }
+        });
+        stdin.on('end', () => {
+            stdinEnded = true;
+            if (stdinEnded)
+                resolve();
+        });
+        stdin.on('error', reject);
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/src/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,EACL,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,WAAW,GAGZ,MAAM,eAAe,CAAC;AAsBvB;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAmB;IAC1D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAc,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACrF,OAAO,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;YAC/D,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC;QAC5D,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAe,EAAE,IAAmB;IACpD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO;gBACL,eAAe,EAAE,gBAAgB;gBACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;gBAC/C,UAAU,EAAE,WAAW;aACxB,CAAC;QACJ,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,KAAK,YAAY;YACf,OAAO,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM;YACT,OAAO,EAAE,CAAC;QACZ;YACE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAe,EAAE,IAAmB;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,GAAG,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAChC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,KAAK,IAAI;oBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACnB,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,UAAU;gBAAE,OAAO,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/mcp/tools.d.ts

@@ -0,0 +1,16 @@
+import { type MethodContext } from '../daemon/methods.js';
+import { type ToolDefinition, type ToolResult } from './protocol.js';
+export type ToolHandlerCtx = MethodContext;
+export type ToolHandler = (args: unknown, ctx: ToolHandlerCtx) => ToolResult;
+export interface Tool {
+    definition: ToolDefinition;
+    handler: ToolHandler;
+}
+export declare const TOOLS: readonly Tool[];
+export declare function findTool(name: string): Tool | undefined;
+export declare class ToolError extends Error {
+    readonly code: number;
+    readonly data: unknown;
+    constructor(code: number, message: string, data?: unknown);
+}
+//# sourceMappingURL=tools.d.ts.map

package/dist/src/mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,aAAa,EAAkB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAsB,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAEzF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC;AAE3C,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,KAAK,UAAU,CAAC;AAE7E,MAAM,WAAW,IAAI;IACnB,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;CACtB;AA6ED,eAAO,MAAM,KAAK,EAAE,SAAS,IAAI,EAK/B,CAAC;AAEH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAEvD;AAMD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBACX,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;CAM1D"}

package/dist/src/mcp/tools.js

@@ -0,0 +1,117 @@
+import { dispatch, RpcMethodError } from '../daemon/methods.js';
+import { MCP_INTERNAL_ERROR } from './protocol.js';
+// ---------------------------------------------------------------------------
+// Tool definitions
+// ---------------------------------------------------------------------------
+const listPortals = {
+    definition: {
+        name: 'sigil_list_portals',
+        description: 'List the signing portals currently loaded in sigil. Returns each portal handle (e.g. "eth:executor"), its kind, and the public address it controls.',
+        inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    },
+    handler: (args, ctx) => callMethod('sigil_list_portals', args, ctx),
+};
+const ethSignMessage = {
+    definition: {
+        name: 'sigil_eth_sign_message',
+        description: 'Sign an EIP-191 personal_sign message with the named portal. The message is supplied as 0x-prefixed hex bytes (encode strings to UTF-8 first). Returns the 65-byte r||s||v signature as 0x-prefixed hex.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                portal: { type: 'string', description: 'Portal handle, e.g. "eth:executor".' },
+                message: { type: 'string', description: '0x-prefixed hex of the bytes to sign.' },
+            },
+            required: ['portal', 'message'],
+            additionalProperties: false,
+        },
+    },
+    handler: (args, ctx) => callMethod('sigil_eth_sign_message', args, ctx),
+};
+const ethSignTransaction = {
+    definition: {
+        name: 'sigil_eth_sign_transaction',
+        description: 'Sign an Ethereum transaction (legacy or EIP-1559) with the named portal. Returns the signed transaction as 0x-prefixed hex, ready for eth_sendRawTransaction.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                portal: { type: 'string', description: 'Portal handle.' },
+                tx: {
+                    type: 'object',
+                    description: 'Transaction fields. type="legacy" requires {chainId, nonce, gasPrice, gasLimit, to, value, data}. type="eip1559" requires {chainId, nonce, maxPriorityFeePerGas, maxFeePerGas, gasLimit, to, value, data, accessList?}. Numbers may be supplied as JSON numbers or decimal strings.',
+                },
+            },
+            required: ['portal', 'tx'],
+            additionalProperties: false,
+        },
+    },
+    handler: (args, ctx) => callMethod('sigil_eth_sign_transaction', args, ctx),
+};
+const ethSignTypedData = {
+    definition: {
+        name: 'sigil_eth_sign_typed_data',
+        description: 'Sign an EIP-712 typed data structure with the named portal. Returns the 65-byte signature as 0x-prefixed hex.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                portal: { type: 'string', description: 'Portal handle.' },
+                typedData: {
+                    type: 'object',
+                    description: 'EIP-712 typed data: {types, primaryType, domain, message}.',
+                },
+            },
+            required: ['portal', 'typedData'],
+            additionalProperties: false,
+        },
+    },
+    handler: (args, ctx) => callMethod('sigil_eth_sign_typed_data', args, ctx),
+};
+export const TOOLS = Object.freeze([
+    listPortals,
+    ethSignMessage,
+    ethSignTransaction,
+    ethSignTypedData,
+]);
+export function findTool(name) {
+    return TOOLS.find((t) => t.definition.name === name);
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+export class ToolError extends Error {
+    code;
+    data;
+    constructor(code, message, data) {
+        super(message);
+        this.name = 'ToolError';
+        this.code = code;
+        this.data = data;
+    }
+}
+/**
+ * Call into the in-process method dispatcher and wrap the result for MCP.
+ * Maps `RpcMethodError` (raised by the dispatcher on user errors or
+ * not-found method) into `ToolError` with the same code, so the original
+ * error semantics flow through to the MCP client unchanged.
+ */
+function callMethod(methodName, args, ctx) {
+    try {
+        const result = dispatch(methodName, args, ctx);
+        return textResult(result);
+    }
+    catch (err) {
+        if (err instanceof RpcMethodError) {
+            throw new ToolError(err.code, err.message, err.data);
+        }
+        throw new ToolError(MCP_INTERNAL_ERROR, `internal: ${err.message}`);
+    }
+}
+function textResult(payload) {
+    // JSON-serialize the response into the MCP text content slot.
+    // We also include structuredContent so MCP clients that support it can
+    // access the typed payload directly without re-parsing.
+    return {
+        content: [{ type: 'text', text: JSON.stringify(payload) }],
+        structuredContent: payload,
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/src/mcp/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAsB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAwC,MAAM,eAAe,CAAC;AAWzF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,WAAW,GAAS;IACxB,UAAU,EAAE;QACV,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,qJAAqJ;QACvJ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;KAC7E;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,CAAC;CACpE,CAAC;AAEF,MAAM,cAAc,GAAS;IAC3B,UAAU,EAAE;QACV,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,0MAA0M;QAC5M,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;aAClF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC/B,oBAAoB,EAAE,KAAK;SAC5B;KACF;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,wBAAwB,EAAE,IAAI,EAAE,GAAG,CAAC;CACxE,CAAC;AAEF,MAAM,kBAAkB,GAAS;IAC/B,UAAU,EAAE;QACV,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,+JAA+J;QACjK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBACzD,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,qRAAqR;iBACxR;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC1B,oBAAoB,EAAE,KAAK;SAC5B;KACF;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,CAAC;CAC5E,CAAC;AAEF,MAAM,gBAAgB,GAAS;IAC7B,UAAU,EAAE;QACV,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,+GAA+G;QACjH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBACzD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4DAA4D;iBAC1E;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;YACjC,oBAAoB,EAAE,KAAK;SAC5B;KACF;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,IAAI,EAAE,GAAG,CAAC;CAC3E,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAoB,MAAM,CAAC,MAAM,CAAC;IAClD,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAS;IACb,IAAI,CAAU;IACvB,YAAY,IAAY,EAAE,OAAe,EAAE,IAAc;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,UAAkB,EAAE,IAAa,EAAE,GAAkB;IACvE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,8DAA8D;IAC9D,uEAAuE;IACvE,wDAAwD;IACxD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,iBAAiB,EAAE,OAAO;KAC3B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "sigild",
-  "version": "0.0.1",
-  "description": "Claude can sign, but never see. Local signing daemon that keeps private keys out of LLM context.",
+  "version": "0.0.2",
+  "mcpName": "io.github.cdrn/sigil",
+  "description": "Claude can sign, but never see. MCP server + CLI that keeps private keys out of the LLM's context window.",
   "license": "Apache-2.0",
   "author": "Chris Doran",
   "homepage": "https://github.com/cdrn/sigil#readme",
@@ -30,7 +31,11 @@
   ],
   "type": "module",
   "bin": {
-    "sigild": "dist/src/bin/sigild.js"
+    "sigil": "dist/src/bin/sigil.js",
+    "sigil-mcp": "dist/src/bin/sigil-mcp.js",
+    "sigild": "dist/src/bin/sigil-mcp.js",
+    "sigil-hook-pre": "dist/src/bin/sigil-hook-pre.js",
+    "sigil-hook-post": "dist/src/bin/sigil-hook-post.js"
   },
   "files": [
     "dist/src/**/*",

package/dist/src/bin/sigild.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=sigild.d.ts.map

package/dist/src/bin/sigild.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sigild.d.ts","sourceRoot":"","sources":["../../../src/bin/sigild.ts"],"names":[],"mappings":""}

package/dist/src/bin/sigild.js

@@ -1,30 +0,0 @@
-#!/usr/bin/env node
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { readPassphrase } from '../daemon/passphrase.js';
-import { runDaemon } from '../daemon/runtime.js';
-const sigilHome = process.env['SIGIL_HOME'] ?? join(homedir(), '.sigil');
-let shutting = false;
-async function main() {
-    const handle = await runDaemon({
-        sigilHome,
-        passphrase: () => readPassphrase('sigil passphrase: '),
-        onLog: (e) => process.stderr.write(JSON.stringify(e) + '\n'),
-    });
-    process.stderr.write(`sigild ready: ${handle.portals} portal(s) loaded, listening on ${handle.socketPath}\n`);
-    const shutdown = async (signal) => {
-        if (shutting)
-            return;
-        shutting = true;
-        process.stderr.write(`sigild: ${signal} received, shutting down\n`);
-        await handle.shutdown();
-        process.exit(0);
-    };
-    process.on('SIGINT', () => { void shutdown('SIGINT'); });
-    process.on('SIGTERM', () => { void shutdown('SIGTERM'); });
-}
-main().catch((err) => {
-    process.stderr.write(`sigild: ${err.message}\n`);
-    process.exit(1);
-});
-//# sourceMappingURL=sigild.js.map

package/dist/src/bin/sigild.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sigild.js","sourceRoot":"","sources":["../../../src/bin/sigild.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAEzE,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;QAC7B,SAAS;QACT,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC;QACtD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;KAC7D,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iBAAiB,MAAM,CAAC,OAAO,mCAAmC,MAAM,CAAC,UAAU,IAAI,CACxF,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,4BAA4B,CAAC,CAAC;QACpE,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/daemon/rpc.d.ts

@@ -1,61 +0,0 @@
-/**
- * JSON-RPC 2.0 over newline-delimited JSON (NDJSON).
- * Pure functions only — no IO. The server in server.ts wires this onto sockets.
- *
- * We use the strict JSON-RPC 2.0 envelope: every request has `jsonrpc: "2.0"`,
- * a method, and either an id (for requests expecting a response) or no id (for
- * notifications, which sigil currently rejects since every sign decision needs
- * to round-trip through the audit log).
- */
-export declare const RPC_VERSION = "2.0";
-export type RpcId = string | number | null;
-export interface RpcRequest {
-    jsonrpc: '2.0';
-    id: RpcId;
-    method: string;
-    params: unknown;
-}
-export interface RpcSuccess {
-    jsonrpc: '2.0';
-    id: RpcId;
-    result: unknown;
-}
-export interface RpcErrorObject {
-    code: number;
-    message: string;
-    data?: unknown;
-}
-export interface RpcError {
-    jsonrpc: '2.0';
-    id: RpcId;
-    error: RpcErrorObject;
-}
-export type RpcResponse = RpcSuccess | RpcError;
-export declare const RPC_PARSE_ERROR = -32700;
-export declare const RPC_INVALID_REQUEST = -32600;
-export declare const RPC_METHOD_NOT_FOUND = -32601;
-export declare const RPC_INVALID_PARAMS = -32602;
-export declare const RPC_INTERNAL_ERROR = -32603;
-export declare const RPC_PORTAL_NOT_FOUND = -32000;
-export declare const RPC_POLICY_DENIED = -32001;
-export declare const RPC_INVALID_PAYLOAD = -32002;
-export type ParseResult = {
-    kind: 'request';
-    request: RpcRequest;
-} | {
-    kind: 'parse_error';
-} | {
-    kind: 'invalid';
-    id: RpcId;
-    reason: string;
-};
-/**
- * Parse a single NDJSON line into a JSON-RPC request.
- * Returns either a valid request, a parse_error (if the line is not JSON), or
- * an invalid envelope along with the id that should be echoed in the error
- * response (which is null if the id couldn't be extracted).
- */
-export declare function parseRequest(line: string): ParseResult;
-export declare function encodeResponse(id: RpcId, result: unknown): string;
-export declare function encodeError(id: RpcId, code: number, message: string, data?: unknown): string;
-//# sourceMappingURL=rpc.d.ts.map

package/dist/src/daemon/rpc.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../../src/daemon/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,WAAW,QAAQ,CAAC;AAEjC,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;AAGhD,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAGzC,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAE1C,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAuCtD;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAGjE;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAI5F"}

package/dist/src/daemon/rpc.js

@@ -1,76 +0,0 @@
-/**
- * JSON-RPC 2.0 over newline-delimited JSON (NDJSON).
- * Pure functions only — no IO. The server in server.ts wires this onto sockets.
- *
- * We use the strict JSON-RPC 2.0 envelope: every request has `jsonrpc: "2.0"`,
- * a method, and either an id (for requests expecting a response) or no id (for
- * notifications, which sigil currently rejects since every sign decision needs
- * to round-trip through the audit log).
- */
-export const RPC_VERSION = '2.0';
-// Standard JSON-RPC 2.0 error codes.
-export const RPC_PARSE_ERROR = -32700;
-export const RPC_INVALID_REQUEST = -32600;
-export const RPC_METHOD_NOT_FOUND = -32601;
-export const RPC_INVALID_PARAMS = -32602;
-export const RPC_INTERNAL_ERROR = -32603;
-// Reserved range for sigil-specific errors: -32000 .. -32099.
-export const RPC_PORTAL_NOT_FOUND = -32000;
-export const RPC_POLICY_DENIED = -32001;
-export const RPC_INVALID_PAYLOAD = -32002;
-/**
- * Parse a single NDJSON line into a JSON-RPC request.
- * Returns either a valid request, a parse_error (if the line is not JSON), or
- * an invalid envelope along with the id that should be echoed in the error
- * response (which is null if the id couldn't be extracted).
- */
-export function parseRequest(line) {
-    let parsed;
-    try {
-        parsed = JSON.parse(line);
-    }
-    catch {
-        return { kind: 'parse_error' };
-    }
-    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
-        return { kind: 'invalid', id: null, reason: 'request must be a JSON object' };
-    }
-    const obj = parsed;
-    // Try to extract an id even if the rest is malformed, so the error
-    // response can be correlated.
-    const rawId = obj['id'];
-    const id = typeof rawId === 'string' || typeof rawId === 'number' || rawId === null ? rawId : null;
-    if (obj['jsonrpc'] !== RPC_VERSION) {
-        return { kind: 'invalid', id, reason: 'jsonrpc must be "2.0"' };
-    }
-    if (typeof obj['method'] !== 'string' || obj['method'].length === 0) {
-        return { kind: 'invalid', id, reason: 'method must be a non-empty string' };
-    }
-    // Notifications (no id) are not supported — every call must be acknowledged
-    // because every sign call needs an audit-log roundtrip.
-    if (!('id' in obj)) {
-        return { kind: 'invalid', id: null, reason: 'notifications are not supported' };
-    }
-    if (typeof rawId !== 'string' && typeof rawId !== 'number' && rawId !== null) {
-        return { kind: 'invalid', id: null, reason: 'id must be string, number, or null' };
-    }
-    return {
-        kind: 'request',
-        request: {
-            jsonrpc: '2.0',
-            id,
-            method: obj['method'],
-            params: obj['params'],
-        },
-    };
-}
-export function encodeResponse(id, result) {
-    const r = { jsonrpc: RPC_VERSION, id, result };
-    return JSON.stringify(r);
-}
-export function encodeError(id, code, message, data) {
-    const error = data === undefined ? { code, message } : { code, message, data };
-    const r = { jsonrpc: RPC_VERSION, id, error };
-    return JSON.stringify(r);
-}
-//# sourceMappingURL=rpc.js.map

package/dist/src/daemon/rpc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../../src/daemon/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC;AA+BjC,qCAAqC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AAEzC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAO1C;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,mEAAmE;IACnE,8BAA8B;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,EAAE,GACN,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAC9E,CAAC;IACD,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,OAAO,EAAE,KAAK;YACd,EAAE;YACF,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;YACrB,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;SACtB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAS,EAAE,MAAe;IACvD,MAAM,CAAC,GAAe,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IAClF,MAAM,KAAK,GAAmB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/F,MAAM,CAAC,GAAa,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACxD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}