@acr-js/meta-mcp 0.8.2

package/dist/packages/config-parser/test/parser.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.test.d.ts","sourceRoot":"","sources":["../../../../packages/config-parser/test/parser.test.ts"],"names":[],"mappings":""}

package/dist/packages/config-parser/test/parser.test.js

@@ -0,0 +1,35 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { compileInstallManifest, parseRawConfig } from '../src/index.js';
+describe('Config Parser & Manifest Compiler', () => {
+    it('should parse stdio and remote configs correctly', () => {
+        const rawJson = JSON.stringify({
+            mcpServers: {
+                'github-tool': {
+                    command: 'npx',
+                    args: ['-y', '@modelcontextprotocol/server-github'],
+                    env: { GITHUB_PERSONAL_ACCESS_TOKEN: 'ghp_super_secret_token_123456789' }
+                },
+                'gitee-remote': {
+                    url: 'https://gitee.com/api/mcp',
+                    headers: { Authorization: 'Bearer gitee_enterprise_token_987654321' }
+                }
+            }
+        });
+        const manifest = compileInstallManifest(rawJson);
+        assert.equal(manifest.totalServers, 2);
+        assert.equal(manifest.servers[0].serverId, 'github-tool');
+        assert.equal(manifest.servers[0].transport, 'stdio');
+        assert.ok(manifest.servers[0].stdioSpec?.envRefs.GITHUB_PERSONAL_ACCESS_TOKEN.startsWith('sec_ref_'));
+        assert.equal(manifest.servers[1].serverId, 'gitee-remote');
+        assert.equal(manifest.servers[1].transport, 'streamable_http');
+        assert.ok(manifest.servers[1].remoteSpec?.headerRefs.Authorization.startsWith('sec_ref_'));
+        assert.ok(manifest.fingerprintSha256.length === 64);
+    });
+    it('should throw ConfigParseError on invalid JSON', () => {
+        assert.throws(() => {
+            parseRawConfig('{ invalid: json');
+        });
+    });
+});
+//# sourceMappingURL=parser.test.js.map

package/dist/packages/config-parser/test/parser.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.test.js","sourceRoot":"","sources":["../../../../packages/config-parser/test/parser.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEzE,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,UAAU,EAAE;gBACV,aAAa,EAAE;oBACb,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;oBACnD,GAAG,EAAE,EAAE,4BAA4B,EAAE,kCAAkC,EAAE;iBAC1E;gBACD,cAAc,EAAE;oBACd,GAAG,EAAE,2BAA2B;oBAChC,OAAO,EAAE,EAAE,aAAa,EAAE,yCAAyC,EAAE;iBACtE;aACF;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAEjD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,4BAA4B,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAEtG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YACjB,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/packages/policy-engine/src/engine.d.ts

@@ -0,0 +1,12 @@
+import { CallerIdentity, PolicyEvaluationResult, ServerPolicyRule, ToolPolicyRule } from './types.js';
+export declare class PolicyEngine {
+    private readonly serverPolicies;
+    private readonly toolPolicies;
+    setServerPolicy(policy: ServerPolicyRule): void;
+    setToolPolicy(policy: ToolPolicyRule): void;
+    getServerPolicy(serverId: string): ServerPolicyRule | undefined;
+    getToolPolicy(toolName: string): ToolPolicyRule | undefined;
+    evaluateServerAccess(caller: CallerIdentity, serverId: string): PolicyEvaluationResult;
+    evaluateToolCall(caller: CallerIdentity, serverId: string, toolName: string, roomContext?: string): PolicyEvaluationResult;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/packages/policy-engine/src/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../packages/policy-engine/src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEtG,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAuC;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAE3D,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAErD;IAEM,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAEjD;IAEM,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAErE;IAEM,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAEjE;IAEM,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAoD5F;IAEM,gBAAgB,CACrB,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GACnB,sBAAsB,CAoExB;CACF"}

package/dist/packages/policy-engine/src/engine.js

@@ -0,0 +1,127 @@
+export class PolicyEngine {
+    serverPolicies = new Map();
+    toolPolicies = new Map();
+    setServerPolicy(policy) {
+        this.serverPolicies.set(policy.serverId, policy);
+    }
+    setToolPolicy(policy) {
+        this.toolPolicies.set(policy.toolName, policy);
+    }
+    getServerPolicy(serverId) {
+        return this.serverPolicies.get(serverId);
+    }
+    getToolPolicy(toolName) {
+        return this.toolPolicies.get(toolName);
+    }
+    evaluateServerAccess(caller, serverId) {
+        const now = new Date().toISOString();
+        const serverRule = this.serverPolicies.get(serverId);
+        // Default policy if unconfigured
+        if (!serverRule) {
+            return {
+                allowed: true,
+                action: 'ALLOW',
+                reason: `Server "${serverId}" has no explicit policy (default allow).`,
+                layer: 'META_MCP_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (!serverRule.enabled) {
+            return {
+                allowed: false,
+                action: 'DENY',
+                reason: `Server "${serverId}" is disabled by administrator.`,
+                layer: 'META_MCP_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (serverRule.quarantined && caller.role !== 'admin') {
+            return {
+                allowed: false,
+                action: 'DENY',
+                reason: `Server "${serverId}" is in QUARANTINE status. Only administrators may access.`,
+                layer: 'META_MCP_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (serverRule.allowedRoles && !serverRule.allowedRoles.includes(caller.role)) {
+            return {
+                allowed: false,
+                action: 'DENY',
+                reason: `Caller role "${caller.role}" is not in server allowedRoles list.`,
+                layer: 'NATIVE_MASTER_GATE',
+                evaluatedAt: now,
+            };
+        }
+        return {
+            allowed: true,
+            action: 'ALLOW',
+            reason: `Server "${serverId}" access approved for ${caller.did}.`,
+            layer: 'META_MCP_GATE',
+            evaluatedAt: now,
+        };
+    }
+    evaluateToolCall(caller, serverId, toolName, roomContext) {
+        const now = new Date().toISOString();
+        // Layer 1: Check Server Access
+        const serverAccess = this.evaluateServerAccess(caller, serverId);
+        if (!serverAccess.allowed) {
+            return serverAccess;
+        }
+        // Layer 2: Check Specific Tool Access
+        const toolRule = this.toolPolicies.get(toolName);
+        if (!toolRule) {
+            return {
+                allowed: true,
+                action: 'ALLOW',
+                reason: `Tool "${toolName}" has no specific restriction.`,
+                layer: 'META_MCP_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (!toolRule.enabled) {
+            return {
+                allowed: false,
+                action: 'DENY',
+                reason: `Tool "${toolName}" is explicitly disabled.`,
+                layer: 'META_MCP_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (toolRule.allowedRoles && !toolRule.allowedRoles.includes(caller.role)) {
+            return {
+                allowed: false,
+                action: 'DENY',
+                reason: `Role "${caller.role}" is not authorized for tool "${toolName}".`,
+                layer: 'NATIVE_MASTER_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (toolRule.allowedRooms && roomContext && !toolRule.allowedRooms.includes(roomContext)) {
+            return {
+                allowed: false,
+                action: 'DENY',
+                reason: `Tool "${toolName}" is not permitted in room "${roomContext}".`,
+                layer: 'NATIVE_MASTER_GATE',
+                evaluatedAt: now,
+            };
+        }
+        if (toolRule.action === 'REQUIRE_HUMAN_CONFIRMATION' && caller.role === 'agent') {
+            return {
+                allowed: false,
+                action: 'REQUIRE_HUMAN_CONFIRMATION',
+                reason: `Tool "${toolName}" requires human operator escalation consent.`,
+                layer: 'NATIVE_MASTER_GATE',
+                evaluatedAt: now,
+            };
+        }
+        return {
+            allowed: true,
+            action: 'ALLOW',
+            reason: `Tool call "${toolName}" authorized for ${caller.did}.`,
+            layer: 'META_MCP_GATE',
+            evaluatedAt: now,
+        };
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/packages/policy-engine/src/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../../packages/policy-engine/src/engine.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,YAAY;IACN,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,eAAe,CAAC,MAAwB;QAC7C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAEM,aAAa,CAAC,MAAsB;QACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAEM,eAAe,CAAC,QAAgB;QACrC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAEM,aAAa,CAAC,QAAgB;QACnC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEM,oBAAoB,CAAC,MAAsB,EAAE,QAAgB;QAClE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAErD,iCAAiC;QACjC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,WAAW,QAAQ,2CAA2C;gBACtE,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,QAAQ,iCAAiC;gBAC5D,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,QAAQ,4DAA4D;gBACvF,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,gBAAgB,MAAM,CAAC,IAAI,uCAAuC;gBAC1E,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,WAAW,QAAQ,yBAAyB,MAAM,CAAC,GAAG,GAAG;YACjE,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,GAAG;SACjB,CAAC;IACJ,CAAC;IAEM,gBAAgB,CACrB,MAAsB,EACtB,QAAgB,EAChB,QAAgB,EAChB,WAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,+BAA+B;QAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,SAAS,QAAQ,gCAAgC;gBACzD,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,SAAS,QAAQ,2BAA2B;gBACpD,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,SAAS,MAAM,CAAC,IAAI,iCAAiC,QAAQ,IAAI;gBACzE,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,YAAY,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACzF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,SAAS,QAAQ,+BAA+B,WAAW,IAAI;gBACvE,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,4BAA4B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAChF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,4BAA4B;gBACpC,MAAM,EAAE,SAAS,QAAQ,+CAA+C;gBACxE,KAAK,EAAE,oBAAoB;gBAC3B,WAAW,EAAE,GAAG;aACjB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,cAAc,QAAQ,oBAAoB,MAAM,CAAC,GAAG,GAAG;YAC/D,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,GAAG;SACjB,CAAC;IACJ,CAAC;CACF"}

package/dist/packages/policy-engine/src/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './engine.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/packages/policy-engine/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/policy-engine/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}

package/dist/packages/policy-engine/src/index.js

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './engine.js';
+//# sourceMappingURL=index.js.map

package/dist/packages/policy-engine/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/policy-engine/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC"}

package/dist/packages/policy-engine/src/types.d.ts

@@ -0,0 +1,33 @@
+export type CallerRole = 'admin' | 'agent' | 'human_operator' | 'guest';
+export interface CallerIdentity {
+    did: string;
+    role: CallerRole;
+    rooms?: string[];
+    scopes?: string[];
+}
+export type PolicyAction = 'ALLOW' | 'DENY' | 'REQUIRE_HUMAN_CONFIRMATION';
+export interface ServerPolicyRule {
+    serverId: string;
+    enabled: boolean;
+    quarantined: boolean;
+    trustLevel: 'untrusted' | 'verified' | 'internal';
+    allowedRoles?: CallerRole[];
+    allowedRooms?: string[];
+    maxCallsPerMinute?: number;
+}
+export interface ToolPolicyRule {
+    toolName: string;
+    enabled: boolean;
+    action: PolicyAction;
+    allowedRoles?: CallerRole[];
+    allowedRooms?: string[];
+    requiredScopes?: string[];
+}
+export interface PolicyEvaluationResult {
+    allowed: boolean;
+    action: PolicyAction;
+    reason: string;
+    layer: 'NATIVE_MASTER_GATE' | 'META_MCP_GATE';
+    evaluatedAt: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/packages/policy-engine/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../packages/policy-engine/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAExE,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,4BAA4B,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;IAClD,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,oBAAoB,GAAG,eAAe,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;CACrB"}

package/dist/packages/policy-engine/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/packages/policy-engine/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/policy-engine/src/types.ts"],"names":[],"mappings":""}

package/dist/packages/policy-engine/test/policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.test.d.ts.map

package/dist/packages/policy-engine/test/policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.test.d.ts","sourceRoot":"","sources":["../../../../packages/policy-engine/test/policy.test.ts"],"names":[],"mappings":""}

package/dist/packages/policy-engine/test/policy.test.js

@@ -0,0 +1,48 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { PolicyEngine } from '../src/index.js';
+describe('Policy Engine & Dual Consent', () => {
+    it('should enforce server enable/disable rules', () => {
+        const engine = new PolicyEngine();
+        engine.setServerPolicy({
+            serverId: 'test-server',
+            enabled: false,
+            quarantined: false,
+            trustLevel: 'untrusted'
+        });
+        const res = engine.evaluateServerAccess({ did: 'did:key:agent1', role: 'agent' }, 'test-server');
+        assert.equal(res.allowed, false);
+        assert.equal(res.action, 'DENY');
+    });
+    it('should block quarantined server for agents but allow admins', () => {
+        const engine = new PolicyEngine();
+        engine.setServerPolicy({
+            serverId: 'quarantined-server',
+            enabled: true,
+            quarantined: true,
+            trustLevel: 'untrusted'
+        });
+        const agentRes = engine.evaluateServerAccess({ did: 'did:key:agent1', role: 'agent' }, 'quarantined-server');
+        assert.equal(agentRes.allowed, false);
+        const adminRes = engine.evaluateServerAccess({ did: 'did:key:admin1', role: 'admin' }, 'quarantined-server');
+        assert.equal(adminRes.allowed, true);
+    });
+    it('should require human confirmation on sensitive tools for agents', () => {
+        const engine = new PolicyEngine();
+        engine.setServerPolicy({
+            serverId: 'db-server',
+            enabled: true,
+            quarantined: false,
+            trustLevel: 'verified'
+        });
+        engine.setToolPolicy({
+            toolName: 'db-server__drop_table',
+            enabled: true,
+            action: 'REQUIRE_HUMAN_CONFIRMATION'
+        });
+        const agentRes = engine.evaluateToolCall({ did: 'did:key:agent1', role: 'agent' }, 'db-server', 'db-server__drop_table');
+        assert.equal(agentRes.allowed, false);
+        assert.equal(agentRes.action, 'REQUIRE_HUMAN_CONFIRMATION');
+    });
+});
+//# sourceMappingURL=policy.test.js.map

package/dist/packages/policy-engine/test/policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.test.js","sourceRoot":"","sources":["../../../../packages/policy-engine/test/policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,eAAe,CAAC;YACrB,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,eAAe,CAAC;YACrB,QAAQ,EAAE,oBAAoB;YAC9B,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC7G,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC7G,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,CAAC,eAAe,CAAC;YACrB,QAAQ,EAAE,WAAW;YACrB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,uBAAuB;YACjC,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,4BAA4B;SACrC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC;QACzH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/packages/registry-core/src/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/packages/registry-core/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/registry-core/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC"}

package/dist/packages/registry-core/src/index.js

@@ -0,0 +1,3 @@
+export * from './types.js';
+export * from './registry.js';
+//# sourceMappingURL=index.js.map

package/dist/packages/registry-core/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/registry-core/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC"}

package/dist/packages/registry-core/src/registry.d.ts

@@ -0,0 +1,20 @@
+import { ServerRegistrationRecord } from './types.js';
+export declare class MetaMcpRegistry {
+    private readonly servers;
+    registerServer(id: string, data: {
+        displayName?: string;
+        transport: 'stdio' | 'sse' | 'streamable_http';
+        sandboxProfile?: string;
+        trustLevel?: 'untrusted' | 'verified' | 'internal';
+        manifestFingerprint?: string;
+        configSpec?: Record<string, unknown>;
+        enabled?: boolean;
+    }): ServerRegistrationRecord;
+    getServer(id: string): ServerRegistrationRecord | undefined;
+    listServers(): ServerRegistrationRecord[];
+    toggleEnabled(id: string, enabled?: boolean): ServerRegistrationRecord;
+    toggleQuarantine(id: string, quarantined?: boolean): ServerRegistrationRecord;
+    updateHealth(id: string, status: ServerRegistrationRecord['healthStatus'], toolCount?: number, errorMessage?: string): ServerRegistrationRecord;
+    deleteServer(id: string): boolean;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/packages/registry-core/src/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../packages/registry-core/src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IAEhE,cAAc,CACnB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QACJ,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;QAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,UAAU,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;QACnD,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GACA,wBAAwB,CAoB1B;IAEM,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAEjE;IAEM,WAAW,IAAI,wBAAwB,EAAE,CAE/C;IAEM,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,wBAAwB,CAQ5E;IAEM,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,wBAAwB,CAQnF;IAEM,YAAY,CACjB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,wBAAwB,CAAC,cAAc,CAAC,EAChD,SAAS,CAAC,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,wBAAwB,CAW1B;IAEM,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEvC;CACF"}

package/dist/packages/registry-core/src/registry.js

@@ -0,0 +1,65 @@
+export class MetaMcpRegistry {
+    servers = new Map();
+    registerServer(id, data) {
+        const now = new Date().toISOString();
+        const record = {
+            id,
+            displayName: data.displayName || id,
+            transport: data.transport,
+            healthStatus: 'OFFLINE',
+            enabled: data.enabled ?? true,
+            quarantined: false,
+            trustLevel: data.trustLevel || 'untrusted',
+            sandboxProfile: data.sandboxProfile || 'no-network',
+            manifestFingerprint: data.manifestFingerprint,
+            toolCount: 0,
+            configSpec: data.configSpec || {},
+            createdAt: now,
+            updatedAt: now,
+        };
+        this.servers.set(id, record);
+        return record;
+    }
+    getServer(id) {
+        return this.servers.get(id);
+    }
+    listServers() {
+        return Array.from(this.servers.values());
+    }
+    toggleEnabled(id, enabled) {
+        const server = this.servers.get(id);
+        if (!server) {
+            throw new Error(`Server "${id}" not found in registry.`);
+        }
+        server.enabled = enabled !== undefined ? enabled : !server.enabled;
+        server.updatedAt = new Date().toISOString();
+        return server;
+    }
+    toggleQuarantine(id, quarantined) {
+        const server = this.servers.get(id);
+        if (!server) {
+            throw new Error(`Server "${id}" not found in registry.`);
+        }
+        server.quarantined = quarantined !== undefined ? quarantined : !server.quarantined;
+        server.updatedAt = new Date().toISOString();
+        return server;
+    }
+    updateHealth(id, status, toolCount, errorMessage) {
+        const server = this.servers.get(id);
+        if (!server) {
+            throw new Error(`Server "${id}" not found in registry.`);
+        }
+        server.healthStatus = status;
+        if (toolCount !== undefined)
+            server.toolCount = toolCount;
+        if (errorMessage !== undefined)
+            server.errorMessage = errorMessage;
+        server.lastHealthCheck = new Date().toISOString();
+        server.updatedAt = new Date().toISOString();
+        return server;
+    }
+    deleteServer(id) {
+        return this.servers.delete(id);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/packages/registry-core/src/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../packages/registry-core/src/registry.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,eAAe;IACT,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEhE,cAAc,CACnB,EAAU,EACV,IAQC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAA6B;YACvC,EAAE;YACF,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,SAAS;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC7B,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,WAAW;YAC1C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,YAAY;YACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,SAAS,EAAE,CAAC;YACZ,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;YACjC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,SAAS,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAEM,WAAW;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAEM,aAAa,CAAC,EAAU,EAAE,OAAiB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACnE,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,gBAAgB,CAAC,EAAU,EAAE,WAAqB;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,WAAW,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACnF,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,YAAY,CACjB,EAAU,EACV,MAAgD,EAChD,SAAkB,EAClB,YAAqB;QAErB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC;QAC7B,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1D,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACnE,MAAM,CAAC,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,YAAY,CAAC,EAAU;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/packages/registry-core/src/types.d.ts

@@ -0,0 +1,26 @@
+export type ServerHealthStatus = 'ONLINE' | 'OFFLINE' | 'DEGRADED' | 'ERROR';
+export type TrustLevel = 'untrusted' | 'verified' | 'internal';
+export interface ServerRegistrationRecord {
+    id: string;
+    displayName: string;
+    transport: 'stdio' | 'sse' | 'streamable_http';
+    healthStatus: ServerHealthStatus;
+    enabled: boolean;
+    quarantined: boolean;
+    trustLevel: TrustLevel;
+    sandboxProfile: string;
+    manifestFingerprint?: string;
+    toolCount: number;
+    configSpec: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+    lastHealthCheck?: string;
+    errorMessage?: string;
+}
+export interface IRegistryStore {
+    save(record: ServerRegistrationRecord): Promise<void>;
+    get(id: string): Promise<ServerRegistrationRecord | null>;
+    list(): Promise<ServerRegistrationRecord[]>;
+    delete(id: string): Promise<boolean>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/packages/registry-core/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../packages/registry-core/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAC7E,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAC/C,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtC"}

package/dist/packages/registry-core/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/packages/registry-core/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/registry-core/src/types.ts"],"names":[],"mappings":""}

package/dist/packages/registry-core/test/registry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.test.d.ts.map

package/dist/packages/registry-core/test/registry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.d.ts","sourceRoot":"","sources":["../../../../packages/registry-core/test/registry.test.ts"],"names":[],"mappings":""}

package/dist/packages/registry-core/test/registry.test.js

@@ -0,0 +1,25 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { MetaMcpRegistry } from '../src/index.js';
+describe('Registry Core (State Machine & Server Persistence)', () => {
+    it('should register, toggle, and update server health', () => {
+        const registry = new MetaMcpRegistry();
+        const server = registry.registerServer('gitee-server', {
+            displayName: 'Gitee Enterprise MCP',
+            transport: 'sse',
+            trustLevel: 'verified'
+        });
+        assert.equal(server.id, 'gitee-server');
+        assert.equal(server.enabled, true);
+        assert.equal(server.quarantined, false);
+        assert.equal(server.healthStatus, 'OFFLINE');
+        const toggled = registry.toggleEnabled('gitee-server', false);
+        assert.equal(toggled.enabled, false);
+        const quarantined = registry.toggleQuarantine('gitee-server', true);
+        assert.equal(quarantined.quarantined, true);
+        const updated = registry.updateHealth('gitee-server', 'ONLINE', 12);
+        assert.equal(updated.healthStatus, 'ONLINE');
+        assert.equal(updated.toolCount, 12);
+    });
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/packages/registry-core/test/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../../../packages/registry-core/test/registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,cAAc,EAAE;YACrD,WAAW,EAAE,sBAAsB;YACnC,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAErC,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE5C,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/packages/sandbox-runtime/src/executor.d.ts

@@ -0,0 +1,13 @@
+import { ChildProcessWithoutNullStreams } from 'node:child_process';
+import { ExecutionResult, ProcessSpawnSpec } from './types.js';
+export declare class SandboxedProcess {
+    private readonly spec;
+    private child;
+    private isKilled;
+    constructor(spec: ProcessSpawnSpec);
+    spawn(): ChildProcessWithoutNullStreams;
+    executeOnce(inputPayload?: string): Promise<ExecutionResult>;
+    kill(signal?: NodeJS.Signals): void;
+    get process(): ChildProcessWithoutNullStreams | null;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/packages/sandbox-runtime/src/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG/D,qBAAa,gBAAgB;IAIf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHjC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAS;IAEzB,YAA6B,IAAI,EAAE,gBAAgB,EAAI;IAEhD,KAAK,IAAI,8BAA8B,CAW7C;IAEY,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAuDxE;IAEM,IAAI,CAAC,MAAM,GAAE,MAAM,CAAC,OAAmB,GAAG,IAAI,CASpD;IAED,IAAW,OAAO,IAAI,8BAA8B,GAAG,IAAI,CAE1D;CACF"}

package/dist/packages/sandbox-runtime/src/executor.js

@@ -0,0 +1,84 @@
+import { spawn } from 'node:child_process';
+import { getSanitizedEnvironment } from './profiles.js';
+export class SandboxedProcess {
+    spec;
+    child = null;
+    isKilled = false;
+    constructor(spec) {
+        this.spec = spec;
+    }
+    spawn() {
+        const env = getSanitizedEnvironment(this.spec.env, this.spec.policy);
+        this.child = spawn(this.spec.command, this.spec.args, {
+            env,
+            cwd: this.spec.cwd || process.cwd(),
+            shell: false,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return this.child;
+    }
+    async executeOnce(inputPayload) {
+        const startTime = Date.now();
+        const child = this.spawn();
+        return new Promise((resolve) => {
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            const timeoutMs = this.spec.policy.timeoutMs || 30000;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                this.kill();
+            }, timeoutMs);
+            child.stdout.on('data', (chunk) => {
+                stdout += chunk.toString();
+                // Memory safety guard: cap stdout at 10MB
+                if (stdout.length > 10 * 1024 * 1024) {
+                    this.kill();
+                }
+            });
+            child.stderr.on('data', (chunk) => {
+                stderr += chunk.toString();
+            });
+            child.on('close', (code) => {
+                clearTimeout(timer);
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: code,
+                    durationMs: Date.now() - startTime,
+                    timedOut,
+                });
+            });
+            child.on('error', (err) => {
+                clearTimeout(timer);
+                stderr += `\nSpawn error: ${err.message}`;
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: -1,
+                    durationMs: Date.now() - startTime,
+                    timedOut,
+                });
+            });
+            if (inputPayload) {
+                child.stdin.write(inputPayload);
+                child.stdin.end();
+            }
+        });
+    }
+    kill(signal = 'SIGTERM') {
+        if (this.child && !this.isKilled) {
+            this.isKilled = true;
+            try {
+                this.child.kill(signal);
+            }
+            catch {
+                // Ignore kill errors if already terminated
+            }
+        }
+    }
+    get process() {
+        return this.child;
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/packages/sandbox-runtime/src/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAkC,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,OAAO,gBAAgB;IAIE,IAAI;IAHzB,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,IAAsB;oBAAtB,IAAI;IAAqB,CAAC;IAEhD,KAAK;QACV,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAErE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACpD,GAAG;YACH,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,YAAqB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAE3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC;YACtD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC3B,0CAA0C;gBAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBACrC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,IAAI,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC1C,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,CAAC,CAAC;oBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAClC,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAChC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,IAAI,CAAC,MAAM,GAAmB,SAAS;QAC5C,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAW,OAAO;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}