sigild 0.0.1 → 0.0.3

package/dist/src/hooks/redactor.js

@@ -0,0 +1,71 @@
+/**
+ * Output redactor — the second line of defence behind the path blocker.
+ * If a key somehow ends up in tool output (because the agent read a file
+ * the blocker missed, or coaxed a key out of an API), redact it before it
+ * reaches the model's context.
+ *
+ * The rules are deliberately strict — false positives are tolerable
+ * (redacted noise in tool output is annoying; an exfiltrated key is fatal).
+ */
+const RULES = Object.freeze([
+    // PEM-encoded private key blocks. Matched first so the inner base64 isn't
+    // also caught by the hex/JWT rules.
+    {
+        reason: 'pem-private-key',
+        regex: /-----BEGIN [A-Z0-9 ]*PRIVATE KEY[A-Z0-9 ]*-----[\s\S]+?-----END [A-Z0-9 ]*PRIVATE KEY[A-Z0-9 ]*-----/g,
+    },
+    // Generic PEM block — second-line check for "BEGIN ... KEY ...END ... KEY"
+    // that didn't say PRIVATE explicitly (some tools emit just "KEY").
+    {
+        reason: 'pem-key-block',
+        regex: /-----BEGIN [A-Z0-9 ]*KEY[A-Z0-9 ]*-----[\s\S]+?-----END [A-Z0-9 ]*KEY[A-Z0-9 ]*-----/g,
+    },
+    // 32-byte raw private keys as 0x-prefixed hex (most common Ethereum form).
+    // Word boundary on both sides so we don't grab a 0x... that happens to be
+    // a longer hash and continue past it.
+    {
+        reason: 'hex-private-key',
+        regex: /\b0x[0-9a-fA-F]{64}(?![0-9a-fA-F])/g,
+    },
+    // JWT (header.payload.signature where header starts with eyJ — base64url
+    // of {"...). Three url-safe-base64 sections separated by dots.
+    {
+        reason: 'jwt',
+        regex: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
+    },
+    // npm tokens (npm_ + ~36 chars) — same pattern they're emitted in.
+    {
+        reason: 'npm-token',
+        regex: /\bnpm_[A-Za-z0-9]{36,}\b/g,
+    },
+    // Anthropic / Claude API keys (sk-ant-...).
+    {
+        reason: 'anthropic-api-key',
+        regex: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+    },
+    // OpenAI keys.
+    {
+        reason: 'openai-api-key',
+        regex: /\bsk-[A-Za-z0-9]{32,}\b/g,
+    },
+    // AWS access key IDs (AKIA + 16 chars) and secret access keys (40 base64-ish chars).
+    {
+        reason: 'aws-access-key-id',
+        regex: /\bAKIA[0-9A-Z]{16}\b/g,
+    },
+]);
+export function redact(text) {
+    const counts = new Map();
+    let out = text;
+    for (const rule of RULES) {
+        out = out.replace(rule.regex, () => {
+            counts.set(rule.reason, (counts.get(rule.reason) ?? 0) + 1);
+            return `<REDACTED:${rule.reason}>`;
+        });
+    }
+    const redactions = [];
+    for (const [reason, count] of counts)
+        redactions.push({ reason, count });
+    return { text: out, redactions };
+}
+//# sourceMappingURL=redactor.js.map

package/dist/src/hooks/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../../src/hooks/redactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiBH,MAAM,KAAK,GAAoB,MAAM,CAAC,MAAM,CAAC;IAC3C,0EAA0E;IAC1E,oCAAoC;IACpC;QACE,MAAM,EAAE,iBAAiB;QACzB,KAAK,EAAE,uGAAuG;KAC/G;IACD,2EAA2E;IAC3E,mEAAmE;IACnE;QACE,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,uFAAuF;KAC/F;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,sCAAsC;IACtC;QACE,MAAM,EAAE,iBAAiB;QACzB,KAAK,EAAE,qCAAqC;KAC7C;IACD,yEAAyE;IACzE,+DAA+D;IAC/D;QACE,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,wDAAwD;KAChE;IACD,mEAAmE;IACnE;QACE,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,2BAA2B;KACnC;IACD,4CAA4C;IAC5C;QACE,MAAM,EAAE,mBAAmB;QAC3B,KAAK,EAAE,gCAAgC;KACxC;IACD,eAAe;IACf;QACE,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,0BAA0B;KAClC;IACD,qFAAqF;IACrF;QACE,MAAM,EAAE,mBAAmB;QAC3B,KAAK,EAAE,uBAAuB;KAC/B;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,OAAO,aAAa,IAAI,CAAC,MAAM,GAAG,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC"}

package/dist/src/mcp/index.d.ts

@@ -0,0 +1,4 @@
+export { type McpId, type McpRequest, type McpNotification, type McpResponse, type McpSuccess, type McpError, type McpErrorBody, type ParseResult, type ToolInputSchema, type ToolDefinition, type ToolContent, type ToolResult, PROTOCOL_VERSION, SERVER_INFO, MCP_PARSE_ERROR, MCP_INVALID_REQUEST, MCP_METHOD_NOT_FOUND, MCP_INVALID_PARAMS, MCP_INTERNAL_ERROR, parseMessage, encodeSuccess, encodeError, } from './protocol.js';
+export { type Tool, type ToolHandler, type ToolHandlerCtx, ToolError, TOOLS, findTool, } from './tools.js';
+export { type McpServerOpts, type McpStdioOpts, type McpLogEvent, handleLine, runMcpStdio, } from './server.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,KAAK,EACV,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,SAAS,EACT,KAAK,EACL,QAAQ,GACT,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,UAAU,EACV,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/dist/src/mcp/index.js

@@ -0,0 +1,4 @@
+export { PROTOCOL_VERSION, SERVER_INFO, MCP_PARSE_ERROR, MCP_INVALID_REQUEST, MCP_METHOD_NOT_FOUND, MCP_INVALID_PARAMS, MCP_INTERNAL_ERROR, parseMessage, encodeSuccess, encodeError, } from './protocol.js';
+export { ToolError, TOOLS, findTool, } from './tools.js';
+export { handleLine, runMcpStdio, } from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/src/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAaL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,SAAS,EACT,KAAK,EACL,QAAQ,GACT,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,UAAU,EACV,WAAW,GACZ,MAAM,aAAa,CAAC"}

package/dist/src/mcp/protocol.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Minimal subset of the Model Context Protocol (MCP) wire format that sigil
+ * needs to act as a stdio tool server for Claude Code (and any other MCP
+ * client). MCP rides on JSON-RPC 2.0; this module defines the request,
+ * response, and notification shapes plus helpers for encoding.
+ *
+ * Spec reference: https://modelcontextprotocol.io/specification
+ *
+ * We implement: initialize, notifications/initialized, tools/list, tools/call.
+ * Everything else (resources, prompts, sampling, completions, logging,
+ * pagination cursors) is intentionally omitted.
+ */
+export declare const PROTOCOL_VERSION = "2025-06-18";
+export declare const SERVER_INFO: {
+    readonly name: "sigil-mcp";
+    readonly version: "0.0.1";
+};
+export type McpId = string | number | null;
+export interface McpRequest {
+    jsonrpc: '2.0';
+    id: McpId;
+    method: string;
+    params?: unknown;
+}
+export interface McpNotification {
+    jsonrpc: '2.0';
+    method: string;
+    params?: unknown;
+}
+export interface McpSuccess {
+    jsonrpc: '2.0';
+    id: McpId;
+    result: unknown;
+}
+export interface McpErrorBody {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+export interface McpError {
+    jsonrpc: '2.0';
+    id: McpId;
+    error: McpErrorBody;
+}
+export type McpResponse = McpSuccess | McpError;
+export declare const MCP_PARSE_ERROR = -32700;
+export declare const MCP_INVALID_REQUEST = -32600;
+export declare const MCP_METHOD_NOT_FOUND = -32601;
+export declare const MCP_INVALID_PARAMS = -32602;
+export declare const MCP_INTERNAL_ERROR = -32603;
+export interface ToolInputSchema {
+    type: 'object';
+    properties: Record<string, unknown>;
+    required?: string[];
+    additionalProperties?: boolean;
+}
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: ToolInputSchema;
+}
+export type ToolContent = {
+    type: 'text';
+    text: string;
+};
+export interface ToolResult {
+    content: ToolContent[];
+    /** When omitted, treated as false. */
+    isError?: boolean;
+    /** Structured payload for clients that want typed access; supplemental to content. */
+    structuredContent?: unknown;
+}
+/**
+ * Parse a single NDJSON line into an MCP envelope.
+ *
+ * Returns:
+ *  - `{ kind: 'request', request }` for an incoming request (has id + method)
+ *  - `{ kind: 'notification', notification }` for an incoming notification (method, no id)
+ *  - `{ kind: 'parse_error' }` for non-JSON
+ *  - `{ kind: 'invalid', id, reason }` for a JSON object that isn't a valid envelope
+ */
+export type ParseResult = {
+    kind: 'request';
+    request: McpRequest;
+} | {
+    kind: 'notification';
+    notification: McpNotification;
+} | {
+    kind: 'parse_error';
+} | {
+    kind: 'invalid';
+    id: McpId;
+    reason: string;
+};
+export declare function parseMessage(line: string): ParseResult;
+export declare function encodeSuccess(id: McpId, result: unknown): string;
+export declare function encodeError(id: McpId, code: number, message: string, data?: unknown): string;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/src/mcp/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../src/mcp/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAE7C,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;AAGhD,eAAO,MAAM,eAAe,SAAS,CAAC;AACtC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,eAAe,CAAC;CAC9B;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,sCAAsC;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,eAAe,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAyCtD;AAMD,wBAAgB,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAGhE;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAI5F"}

package/dist/src/mcp/protocol.js

@@ -0,0 +1,79 @@
+/**
+ * Minimal subset of the Model Context Protocol (MCP) wire format that sigil
+ * needs to act as a stdio tool server for Claude Code (and any other MCP
+ * client). MCP rides on JSON-RPC 2.0; this module defines the request,
+ * response, and notification shapes plus helpers for encoding.
+ *
+ * Spec reference: https://modelcontextprotocol.io/specification
+ *
+ * We implement: initialize, notifications/initialized, tools/list, tools/call.
+ * Everything else (resources, prompts, sampling, completions, logging,
+ * pagination cursors) is intentionally omitted.
+ */
+export const PROTOCOL_VERSION = '2025-06-18';
+export const SERVER_INFO = {
+    name: 'sigil-mcp',
+    version: '0.0.1',
+};
+// Standard JSON-RPC 2.0 error codes (re-stated to keep this module self-contained).
+export const MCP_PARSE_ERROR = -32700;
+export const MCP_INVALID_REQUEST = -32600;
+export const MCP_METHOD_NOT_FOUND = -32601;
+export const MCP_INVALID_PARAMS = -32602;
+export const MCP_INTERNAL_ERROR = -32603;
+export function parseMessage(line) {
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch {
+        return { kind: 'parse_error' };
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        return { kind: 'invalid', id: null, reason: 'message must be a JSON object' };
+    }
+    const obj = parsed;
+    if (obj['jsonrpc'] !== '2.0') {
+        return { kind: 'invalid', id: extractId(obj['id']), reason: 'jsonrpc must be "2.0"' };
+    }
+    if (typeof obj['method'] !== 'string' || obj['method'].length === 0) {
+        return { kind: 'invalid', id: extractId(obj['id']), reason: 'method must be a non-empty string' };
+    }
+    // Distinguish request vs notification by presence of id.
+    if (!('id' in obj)) {
+        return {
+            kind: 'notification',
+            notification: {
+                jsonrpc: '2.0',
+                method: obj['method'],
+                ...(obj['params'] !== undefined ? { params: obj['params'] } : {}),
+            },
+        };
+    }
+    const rawId = obj['id'];
+    if (typeof rawId !== 'string' && typeof rawId !== 'number' && rawId !== null) {
+        return { kind: 'invalid', id: null, reason: 'id must be string, number, or null' };
+    }
+    return {
+        kind: 'request',
+        request: {
+            jsonrpc: '2.0',
+            id: rawId,
+            method: obj['method'],
+            ...(obj['params'] !== undefined ? { params: obj['params'] } : {}),
+        },
+    };
+}
+function extractId(raw) {
+    return typeof raw === 'string' || typeof raw === 'number' || raw === null ? raw : null;
+}
+export function encodeSuccess(id, result) {
+    const r = { jsonrpc: '2.0', id, result };
+    return JSON.stringify(r);
+}
+export function encodeError(id, code, message, data) {
+    const error = data === undefined ? { code, message } : { code, message, data };
+    const r = { jsonrpc: '2.0', id, error };
+    return JSON.stringify(r);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/src/mcp/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/mcp/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,OAAO;CACR,CAAC;AAqCX,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AAyCzC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpG,CAAC;IACD,yDAAyD;IACzD,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE;gBACZ,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;gBACrB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAS,EAAE,MAAe;IACtD,MAAM,CAAC,GAAe,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,IAAY,EAAE,OAAe,EAAE,IAAc;IAClF,MAAM,KAAK,GAAiB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7F,MAAM,CAAC,GAAa,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/src/mcp/server.d.ts

@@ -0,0 +1,46 @@
+import type { MethodContext } from '../daemon/methods.js';
+import { type McpId } from './protocol.js';
+export interface McpServerOpts {
+    /**
+     * In-process method context: handles + audit. The MCP server invokes
+     * sign methods directly against this — no cross-process IPC.
+     */
+    context: MethodContext;
+    /**
+     * Optional log sink for protocol-level events. Defaults to a no-op.
+     * The default binary entrypoint writes log events to stderr so they don't
+     * collide with stdio MCP traffic on stdout.
+     */
+    onLog?: (event: McpLogEvent) => void;
+}
+export type McpLogEvent = {
+    kind: 'recv';
+    method: string;
+    id: McpId | null;
+} | {
+    kind: 'send_ok';
+    id: McpId;
+} | {
+    kind: 'send_error';
+    id: McpId;
+    code: number;
+    message: string;
+} | {
+    kind: 'initialized';
+};
+/**
+ * Handle a single received line by dispatching it through the MCP protocol.
+ * Returns either a response string to send back, or `null` if the line was a
+ * notification (no response expected).
+ */
+export declare function handleLine(line: string, opts: McpServerOpts): string | null;
+export interface McpStdioOpts extends McpServerOpts {
+    stdin: NodeJS.ReadableStream;
+    stdout: NodeJS.WritableStream;
+}
+/**
+ * Run the MCP server over arbitrary streams (stdin/stdout in production,
+ * mock streams in tests). Resolves when stdin closes.
+ */
+export declare function runMcpStdio(opts: McpStdioOpts): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/src/mcp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAWL,KAAK,KAAK,EAEX,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,OAAO,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,GAAG,IAAI,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAkC3E;AA0CD,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB7D"}

package/dist/src/mcp/server.js

@@ -0,0 +1,108 @@
+import { findTool, ToolError, TOOLS } from './tools.js';
+import { encodeError, encodeSuccess, MCP_INTERNAL_ERROR, MCP_INVALID_PARAMS, MCP_INVALID_REQUEST, MCP_METHOD_NOT_FOUND, MCP_PARSE_ERROR, parseMessage, PROTOCOL_VERSION, SERVER_INFO, } from './protocol.js';
+/**
+ * Handle a single received line by dispatching it through the MCP protocol.
+ * Returns either a response string to send back, or `null` if the line was a
+ * notification (no response expected).
+ */
+export function handleLine(line, opts) {
+    const parsed = parseMessage(line);
+    const log = (e) => opts.onLog?.(e);
+    if (parsed.kind === 'parse_error') {
+        log({ kind: 'send_error', id: null, code: MCP_PARSE_ERROR, message: 'parse error' });
+        return encodeError(null, MCP_PARSE_ERROR, 'parse error');
+    }
+    if (parsed.kind === 'invalid') {
+        log({ kind: 'send_error', id: parsed.id, code: MCP_INVALID_REQUEST, message: parsed.reason });
+        return encodeError(parsed.id, MCP_INVALID_REQUEST, parsed.reason);
+    }
+    if (parsed.kind === 'notification') {
+        log({ kind: 'recv', method: parsed.notification.method, id: null });
+        if (parsed.notification.method === 'notifications/initialized') {
+            log({ kind: 'initialized' });
+        }
+        return null;
+    }
+    const req = parsed.request;
+    log({ kind: 'recv', method: req.method, id: req.id });
+    try {
+        const result = dispatch(req, opts);
+        log({ kind: 'send_ok', id: req.id });
+        return encodeSuccess(req.id, result);
+    }
+    catch (err) {
+        if (err instanceof ToolError) {
+            log({ kind: 'send_error', id: req.id, code: err.code, message: err.message });
+            return encodeError(req.id, err.code, err.message, err.data);
+        }
+        const message = `internal error: ${err.message}`;
+        log({ kind: 'send_error', id: req.id, code: MCP_INTERNAL_ERROR, message });
+        return encodeError(req.id, MCP_INTERNAL_ERROR, message);
+    }
+}
+function dispatch(req, opts) {
+    switch (req.method) {
+        case 'initialize':
+            return {
+                protocolVersion: PROTOCOL_VERSION,
+                capabilities: { tools: { listChanged: false } },
+                serverInfo: SERVER_INFO,
+            };
+        case 'tools/list':
+            return { tools: TOOLS.map((t) => t.definition) };
+        case 'tools/call':
+            return invokeTool(req.params, opts);
+        case 'ping':
+            return {};
+        default:
+            throw new ToolError(MCP_METHOD_NOT_FOUND, `method not found: ${req.method}`);
+    }
+}
+function invokeTool(params, opts) {
+    if (typeof params !== 'object' || params === null || Array.isArray(params)) {
+        throw new ToolError(MCP_INVALID_PARAMS, 'tools/call: params must be an object');
+    }
+    const obj = params;
+    const name = obj['name'];
+    if (typeof name !== 'string' || name.length === 0) {
+        throw new ToolError(MCP_INVALID_PARAMS, 'tools/call: name must be a non-empty string');
+    }
+    const tool = findTool(name);
+    if (!tool) {
+        throw new ToolError(MCP_METHOD_NOT_FOUND, `unknown tool: ${name}`);
+    }
+    const args = obj['arguments'] ?? {};
+    return tool.handler(args, opts.context);
+}
+/**
+ * Run the MCP server over arbitrary streams (stdin/stdout in production,
+ * mock streams in tests). Resolves when stdin closes.
+ */
+export function runMcpStdio(opts) {
+    const { stdin, stdout } = opts;
+    stdin.setEncoding?.('utf8');
+    return new Promise((resolve, reject) => {
+        let buf = '';
+        let stdinEnded = false;
+        stdin.on('data', (chunk) => {
+            buf += typeof chunk === 'string' ? chunk : chunk.toString('utf8');
+            let nl;
+            while ((nl = buf.indexOf('\n')) !== -1) {
+                const line = buf.slice(0, nl);
+                buf = buf.slice(nl + 1);
+                if (line.length === 0)
+                    continue;
+                const resp = handleLine(line, opts);
+                if (resp !== null)
+                    stdout.write(resp + '\n');
+            }
+        });
+        stdin.on('end', () => {
+            stdinEnded = true;
+            if (stdinEnded)
+                resolve();
+        });
+        stdin.on('error', reject);
+    });
+}
+//# sourceMappingURL=server.js.map

package/dist/src/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,EACL,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,WAAW,GAGZ,MAAM,eAAe,CAAC;AAsBvB;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAmB;IAC1D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,CAAc,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAClC,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACrF,OAAO,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;YAC/D,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC;QAC5D,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAe,EAAE,IAAmB;IACpD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO;gBACL,eAAe,EAAE,gBAAgB;gBACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;gBAC/C,UAAU,EAAE,WAAW;aACxB,CAAC;QACJ,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,KAAK,YAAY;YACf,OAAO,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,MAAM;YACT,OAAO,EAAE,CAAC;QACZ;YACE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAe,EAAE,IAAmB;IACtD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,GAAG,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAChC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,KAAK,IAAI;oBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACnB,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,UAAU;gBAAE,OAAO,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/mcp/tools.d.ts

@@ -0,0 +1,16 @@
+import { type MethodContext } from '../daemon/methods.js';
+import { type ToolDefinition, type ToolResult } from './protocol.js';
+export type ToolHandlerCtx = MethodContext;
+export type ToolHandler = (args: unknown, ctx: ToolHandlerCtx) => ToolResult;
+export interface Tool {
+    definition: ToolDefinition;
+    handler: ToolHandler;
+}
+export declare const TOOLS: readonly Tool[];
+export declare function findTool(name: string): Tool | undefined;
+export declare class ToolError extends Error {
+    readonly code: number;
+    readonly data: unknown;
+    constructor(code: number, message: string, data?: unknown);
+}
+//# sourceMappingURL=tools.d.ts.map

package/dist/src/mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,aAAa,EAAkB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAsB,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAEzF,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC;AAE3C,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,KAAK,UAAU,CAAC;AAE7E,MAAM,WAAW,IAAI;IACnB,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;CACtB;AA6ED,eAAO,MAAM,KAAK,EAAE,SAAS,IAAI,EAK/B,CAAC;AAEH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAEvD;AAMD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBACX,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;CAM1D"}

package/dist/src/mcp/tools.js

@@ -0,0 +1,117 @@
+import { dispatch, RpcMethodError } from '../daemon/methods.js';
+import { MCP_INTERNAL_ERROR } from './protocol.js';
+// ---------------------------------------------------------------------------
+// Tool definitions
+// ---------------------------------------------------------------------------
+const listPortals = {
+    definition: {
+        name: 'sigil_list_portals',
+        description: 'List the signing portals currently loaded in sigil. Returns each portal handle (e.g. "eth:executor"), its kind, and the public address it controls.',
+        inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    },
+    handler: (args, ctx) => callMethod('sigil_list_portals', args, ctx),
+};
+const ethSignMessage = {
+    definition: {
+        name: 'sigil_eth_sign_message',
+        description: 'Sign an EIP-191 personal_sign message with the named portal. The message is supplied as 0x-prefixed hex bytes (encode strings to UTF-8 first). Returns the 65-byte r||s||v signature as 0x-prefixed hex.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                portal: { type: 'string', description: 'Portal handle, e.g. "eth:executor".' },
+                message: { type: 'string', description: '0x-prefixed hex of the bytes to sign.' },
+            },
+            required: ['portal', 'message'],
+            additionalProperties: false,
+        },
+    },
+    handler: (args, ctx) => callMethod('sigil_eth_sign_message', args, ctx),
+};
+const ethSignTransaction = {
+    definition: {
+        name: 'sigil_eth_sign_transaction',
+        description: 'Sign an Ethereum transaction (legacy or EIP-1559) with the named portal. Returns the signed transaction as 0x-prefixed hex, ready for eth_sendRawTransaction.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                portal: { type: 'string', description: 'Portal handle.' },
+                tx: {
+                    type: 'object',
+                    description: 'Transaction fields. type="legacy" requires {chainId, nonce, gasPrice, gasLimit, to, value, data}. type="eip1559" requires {chainId, nonce, maxPriorityFeePerGas, maxFeePerGas, gasLimit, to, value, data, accessList?}. Numbers may be supplied as JSON numbers or decimal strings.',
+                },
+            },
+            required: ['portal', 'tx'],
+            additionalProperties: false,
+        },
+    },
+    handler: (args, ctx) => callMethod('sigil_eth_sign_transaction', args, ctx),
+};
+const ethSignTypedData = {
+    definition: {
+        name: 'sigil_eth_sign_typed_data',
+        description: 'Sign an EIP-712 typed data structure with the named portal. Returns the 65-byte signature as 0x-prefixed hex.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                portal: { type: 'string', description: 'Portal handle.' },
+                typedData: {
+                    type: 'object',
+                    description: 'EIP-712 typed data: {types, primaryType, domain, message}.',
+                },
+            },
+            required: ['portal', 'typedData'],
+            additionalProperties: false,
+        },
+    },
+    handler: (args, ctx) => callMethod('sigil_eth_sign_typed_data', args, ctx),
+};
+export const TOOLS = Object.freeze([
+    listPortals,
+    ethSignMessage,
+    ethSignTransaction,
+    ethSignTypedData,
+]);
+export function findTool(name) {
+    return TOOLS.find((t) => t.definition.name === name);
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+export class ToolError extends Error {
+    code;
+    data;
+    constructor(code, message, data) {
+        super(message);
+        this.name = 'ToolError';
+        this.code = code;
+        this.data = data;
+    }
+}
+/**
+ * Call into the in-process method dispatcher and wrap the result for MCP.
+ * Maps `RpcMethodError` (raised by the dispatcher on user errors or
+ * not-found method) into `ToolError` with the same code, so the original
+ * error semantics flow through to the MCP client unchanged.
+ */
+function callMethod(methodName, args, ctx) {
+    try {
+        const result = dispatch(methodName, args, ctx);
+        return textResult(result);
+    }
+    catch (err) {
+        if (err instanceof RpcMethodError) {
+            throw new ToolError(err.code, err.message, err.data);
+        }
+        throw new ToolError(MCP_INTERNAL_ERROR, `internal: ${err.message}`);
+    }
+}
+function textResult(payload) {
+    // JSON-serialize the response into the MCP text content slot.
+    // We also include structuredContent so MCP clients that support it can
+    // access the typed payload directly without re-parsing.
+    return {
+        content: [{ type: 'text', text: JSON.stringify(payload) }],
+        structuredContent: payload,
+    };
+}
+//# sourceMappingURL=tools.js.map

package/dist/src/mcp/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/mcp/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAsB,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAwC,MAAM,eAAe,CAAC;AAWzF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,WAAW,GAAS;IACxB,UAAU,EAAE;QACV,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,qJAAqJ;QACvJ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;KAC7E;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,CAAC;CACpE,CAAC;AAEF,MAAM,cAAc,GAAS;IAC3B,UAAU,EAAE;QACV,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,0MAA0M;QAC5M,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;aAClF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC/B,oBAAoB,EAAE,KAAK;SAC5B;KACF;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,wBAAwB,EAAE,IAAI,EAAE,GAAG,CAAC;CACxE,CAAC;AAEF,MAAM,kBAAkB,GAAS;IAC/B,UAAU,EAAE;QACV,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,+JAA+J;QACjK,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBACzD,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,qRAAqR;iBACxR;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC1B,oBAAoB,EAAE,KAAK;SAC5B;KACF;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,CAAC;CAC5E,CAAC;AAEF,MAAM,gBAAgB,GAAS;IAC7B,UAAU,EAAE;QACV,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,+GAA+G;QACjH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBACzD,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4DAA4D;iBAC1E;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;YACjC,oBAAoB,EAAE,KAAK;SAC5B;KACF;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,IAAI,EAAE,GAAG,CAAC;CAC3E,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAoB,MAAM,CAAC,MAAM,CAAC;IAClD,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAS;IACb,IAAI,CAAU;IACvB,YAAY,IAAY,EAAE,OAAe,EAAE,IAAc;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,UAAkB,EAAE,IAAa,EAAE,GAAkB;IACvE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,8DAA8D;IAC9D,uEAAuE;IACvE,wDAAwD;IACxD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,iBAAiB,EAAE,OAAO;KAC3B,CAAC;AACJ,CAAC"}

package/dist/src/policy/evaluate.d.ts

@@ -0,0 +1,13 @@
+import type { Policy, PolicyDecision, PolicyRequest } from './types.js';
+/**
+ * Pure evaluator. Takes a (request, policy), returns Allow or Deny(reason).
+ *
+ * The reason string is what the caller writes into the audit log and surfaces
+ * as the RPC_POLICY_DENIED error message — write it for a human.
+ *
+ * Permissive mode short-circuits to Allow for everything. Strict mode walks
+ * the rules in a fixed order and returns the first failing one — the order
+ * doesn't matter for correctness, only for which reason the user sees first.
+ */
+export declare function evaluate(request: PolicyRequest, policy: Policy): PolicyDecision;
+//# sourceMappingURL=evaluate.d.ts.map

package/dist/src/policy/evaluate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../../src/policy/evaluate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAExE;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAoB/E"}