@acr-js/meta-mcp 0.8.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (166) hide show
  1. package/README.md +212 -0
  2. package/dist/apps/cli/src/index.d.ts +3 -0
  3. package/dist/apps/cli/src/index.d.ts.map +1 -0
  4. package/dist/apps/cli/src/index.js +326 -0
  5. package/dist/apps/cli/src/index.js.map +1 -0
  6. package/dist/apps/control-plane-api/src/audit.d.ts +20 -0
  7. package/dist/apps/control-plane-api/src/audit.d.ts.map +1 -0
  8. package/dist/apps/control-plane-api/src/audit.js +26 -0
  9. package/dist/apps/control-plane-api/src/audit.js.map +1 -0
  10. package/dist/apps/control-plane-api/src/index.d.ts +2 -0
  11. package/dist/apps/control-plane-api/src/index.d.ts.map +1 -0
  12. package/dist/apps/control-plane-api/src/index.js +20 -0
  13. package/dist/apps/control-plane-api/src/index.js.map +1 -0
  14. package/dist/apps/control-plane-api/src/server.d.ts +17 -0
  15. package/dist/apps/control-plane-api/src/server.d.ts.map +1 -0
  16. package/dist/apps/control-plane-api/src/server.js +268 -0
  17. package/dist/apps/control-plane-api/src/server.js.map +1 -0
  18. package/dist/apps/control-plane-api/src/service.d.ts +63 -0
  19. package/dist/apps/control-plane-api/src/service.d.ts.map +1 -0
  20. package/dist/apps/control-plane-api/src/service.js +298 -0
  21. package/dist/apps/control-plane-api/src/service.js.map +1 -0
  22. package/dist/apps/control-plane-api/test/api.test.d.ts +2 -0
  23. package/dist/apps/control-plane-api/test/api.test.d.ts.map +1 -0
  24. package/dist/apps/control-plane-api/test/api.test.js +130 -0
  25. package/dist/apps/control-plane-api/test/api.test.js.map +1 -0
  26. package/dist/apps/control-plane-api/test/context7-e2e.test.d.ts +2 -0
  27. package/dist/apps/control-plane-api/test/context7-e2e.test.d.ts.map +1 -0
  28. package/dist/apps/control-plane-api/test/context7-e2e.test.js +166 -0
  29. package/dist/apps/control-plane-api/test/context7-e2e.test.js.map +1 -0
  30. package/dist/packages/auth-vault/src/crypto.d.ts +25 -0
  31. package/dist/packages/auth-vault/src/crypto.d.ts.map +1 -0
  32. package/dist/packages/auth-vault/src/crypto.js +117 -0
  33. package/dist/packages/auth-vault/src/crypto.js.map +1 -0
  34. package/dist/packages/auth-vault/src/db.d.ts +33 -0
  35. package/dist/packages/auth-vault/src/db.d.ts.map +1 -0
  36. package/dist/packages/auth-vault/src/db.js +154 -0
  37. package/dist/packages/auth-vault/src/db.js.map +1 -0
  38. package/dist/packages/auth-vault/src/index.d.ts +5 -0
  39. package/dist/packages/auth-vault/src/index.d.ts.map +1 -0
  40. package/dist/packages/auth-vault/src/index.js +5 -0
  41. package/dist/packages/auth-vault/src/index.js.map +1 -0
  42. package/dist/packages/auth-vault/src/types.d.ts +48 -0
  43. package/dist/packages/auth-vault/src/types.d.ts.map +1 -0
  44. package/dist/packages/auth-vault/src/types.js +2 -0
  45. package/dist/packages/auth-vault/src/types.js.map +1 -0
  46. package/dist/packages/auth-vault/src/vault.d.ts +21 -0
  47. package/dist/packages/auth-vault/src/vault.d.ts.map +1 -0
  48. package/dist/packages/auth-vault/src/vault.js +88 -0
  49. package/dist/packages/auth-vault/src/vault.js.map +1 -0
  50. package/dist/packages/auth-vault/test/vault.test.d.ts +2 -0
  51. package/dist/packages/auth-vault/test/vault.test.d.ts.map +1 -0
  52. package/dist/packages/auth-vault/test/vault.test.js +89 -0
  53. package/dist/packages/auth-vault/test/vault.test.js.map +1 -0
  54. package/dist/packages/catalog-projector/src/index.d.ts +3 -0
  55. package/dist/packages/catalog-projector/src/index.d.ts.map +1 -0
  56. package/dist/packages/catalog-projector/src/index.js +3 -0
  57. package/dist/packages/catalog-projector/src/index.js.map +1 -0
  58. package/dist/packages/catalog-projector/src/projector.d.ts +28 -0
  59. package/dist/packages/catalog-projector/src/projector.d.ts.map +1 -0
  60. package/dist/packages/catalog-projector/src/projector.js +85 -0
  61. package/dist/packages/catalog-projector/src/projector.js.map +1 -0
  62. package/dist/packages/catalog-projector/src/types.d.ts +33 -0
  63. package/dist/packages/catalog-projector/src/types.d.ts.map +1 -0
  64. package/dist/packages/catalog-projector/src/types.js +2 -0
  65. package/dist/packages/catalog-projector/src/types.js.map +1 -0
  66. package/dist/packages/catalog-projector/test/catalog.test.d.ts +2 -0
  67. package/dist/packages/catalog-projector/test/catalog.test.d.ts.map +1 -0
  68. package/dist/packages/catalog-projector/test/catalog.test.js +41 -0
  69. package/dist/packages/catalog-projector/test/catalog.test.js.map +1 -0
  70. package/dist/packages/config-parser/src/index.d.ts +5 -0
  71. package/dist/packages/config-parser/src/index.d.ts.map +1 -0
  72. package/dist/packages/config-parser/src/index.js +5 -0
  73. package/dist/packages/config-parser/src/index.js.map +1 -0
  74. package/dist/packages/config-parser/src/manifest.d.ts +3 -0
  75. package/dist/packages/config-parser/src/manifest.d.ts.map +1 -0
  76. package/dist/packages/config-parser/src/manifest.js +33 -0
  77. package/dist/packages/config-parser/src/manifest.js.map +1 -0
  78. package/dist/packages/config-parser/src/parser.d.ts +9 -0
  79. package/dist/packages/config-parser/src/parser.d.ts.map +1 -0
  80. package/dist/packages/config-parser/src/parser.js +69 -0
  81. package/dist/packages/config-parser/src/parser.js.map +1 -0
  82. package/dist/packages/config-parser/src/sanitizer.d.ts +7 -0
  83. package/dist/packages/config-parser/src/sanitizer.d.ts.map +1 -0
  84. package/dist/packages/config-parser/src/sanitizer.js +40 -0
  85. package/dist/packages/config-parser/src/sanitizer.js.map +1 -0
  86. package/dist/packages/config-parser/src/types.d.ts +47 -0
  87. package/dist/packages/config-parser/src/types.d.ts.map +1 -0
  88. package/dist/packages/config-parser/src/types.js +2 -0
  89. package/dist/packages/config-parser/src/types.js.map +1 -0
  90. package/dist/packages/config-parser/test/parser.test.d.ts +2 -0
  91. package/dist/packages/config-parser/test/parser.test.d.ts.map +1 -0
  92. package/dist/packages/config-parser/test/parser.test.js +35 -0
  93. package/dist/packages/config-parser/test/parser.test.js.map +1 -0
  94. package/dist/packages/policy-engine/src/engine.d.ts +12 -0
  95. package/dist/packages/policy-engine/src/engine.d.ts.map +1 -0
  96. package/dist/packages/policy-engine/src/engine.js +127 -0
  97. package/dist/packages/policy-engine/src/engine.js.map +1 -0
  98. package/dist/packages/policy-engine/src/index.d.ts +3 -0
  99. package/dist/packages/policy-engine/src/index.d.ts.map +1 -0
  100. package/dist/packages/policy-engine/src/index.js +3 -0
  101. package/dist/packages/policy-engine/src/index.js.map +1 -0
  102. package/dist/packages/policy-engine/src/types.d.ts +33 -0
  103. package/dist/packages/policy-engine/src/types.d.ts.map +1 -0
  104. package/dist/packages/policy-engine/src/types.js +2 -0
  105. package/dist/packages/policy-engine/src/types.js.map +1 -0
  106. package/dist/packages/policy-engine/test/policy.test.d.ts +2 -0
  107. package/dist/packages/policy-engine/test/policy.test.d.ts.map +1 -0
  108. package/dist/packages/policy-engine/test/policy.test.js +48 -0
  109. package/dist/packages/policy-engine/test/policy.test.js.map +1 -0
  110. package/dist/packages/registry-core/src/index.d.ts +3 -0
  111. package/dist/packages/registry-core/src/index.d.ts.map +1 -0
  112. package/dist/packages/registry-core/src/index.js +3 -0
  113. package/dist/packages/registry-core/src/index.js.map +1 -0
  114. package/dist/packages/registry-core/src/registry.d.ts +20 -0
  115. package/dist/packages/registry-core/src/registry.d.ts.map +1 -0
  116. package/dist/packages/registry-core/src/registry.js +65 -0
  117. package/dist/packages/registry-core/src/registry.js.map +1 -0
  118. package/dist/packages/registry-core/src/types.d.ts +26 -0
  119. package/dist/packages/registry-core/src/types.d.ts.map +1 -0
  120. package/dist/packages/registry-core/src/types.js +2 -0
  121. package/dist/packages/registry-core/src/types.js.map +1 -0
  122. package/dist/packages/registry-core/test/registry.test.d.ts +2 -0
  123. package/dist/packages/registry-core/test/registry.test.d.ts.map +1 -0
  124. package/dist/packages/registry-core/test/registry.test.js +25 -0
  125. package/dist/packages/registry-core/test/registry.test.js.map +1 -0
  126. package/dist/packages/sandbox-runtime/src/executor.d.ts +13 -0
  127. package/dist/packages/sandbox-runtime/src/executor.d.ts.map +1 -0
  128. package/dist/packages/sandbox-runtime/src/executor.js +84 -0
  129. package/dist/packages/sandbox-runtime/src/executor.js.map +1 -0
  130. package/dist/packages/sandbox-runtime/src/index.d.ts +4 -0
  131. package/dist/packages/sandbox-runtime/src/index.d.ts.map +1 -0
  132. package/dist/packages/sandbox-runtime/src/index.js +4 -0
  133. package/dist/packages/sandbox-runtime/src/index.js.map +1 -0
  134. package/dist/packages/sandbox-runtime/src/profiles.d.ts +4 -0
  135. package/dist/packages/sandbox-runtime/src/profiles.d.ts.map +1 -0
  136. package/dist/packages/sandbox-runtime/src/profiles.js +66 -0
  137. package/dist/packages/sandbox-runtime/src/profiles.js.map +1 -0
  138. package/dist/packages/sandbox-runtime/src/types.d.ts +24 -0
  139. package/dist/packages/sandbox-runtime/src/types.d.ts.map +1 -0
  140. package/dist/packages/sandbox-runtime/src/types.js +2 -0
  141. package/dist/packages/sandbox-runtime/src/types.js.map +1 -0
  142. package/dist/packages/sandbox-runtime/test/sandbox.test.d.ts +2 -0
  143. package/dist/packages/sandbox-runtime/test/sandbox.test.d.ts.map +1 -0
  144. package/dist/packages/sandbox-runtime/test/sandbox.test.js +30 -0
  145. package/dist/packages/sandbox-runtime/test/sandbox.test.js.map +1 -0
  146. package/dist/packages/transport-bridge/src/bridge.d.ts +30 -0
  147. package/dist/packages/transport-bridge/src/bridge.d.ts.map +1 -0
  148. package/dist/packages/transport-bridge/src/bridge.js +60 -0
  149. package/dist/packages/transport-bridge/src/bridge.js.map +1 -0
  150. package/dist/packages/transport-bridge/src/http-adapter.d.ts +30 -0
  151. package/dist/packages/transport-bridge/src/http-adapter.d.ts.map +1 -0
  152. package/dist/packages/transport-bridge/src/http-adapter.js +61 -0
  153. package/dist/packages/transport-bridge/src/http-adapter.js.map +1 -0
  154. package/dist/packages/transport-bridge/src/index.d.ts +5 -0
  155. package/dist/packages/transport-bridge/src/index.d.ts.map +1 -0
  156. package/dist/packages/transport-bridge/src/index.js +5 -0
  157. package/dist/packages/transport-bridge/src/index.js.map +1 -0
  158. package/dist/packages/transport-bridge/src/stdio-adapter.d.ts +36 -0
  159. package/dist/packages/transport-bridge/src/stdio-adapter.d.ts.map +1 -0
  160. package/dist/packages/transport-bridge/src/stdio-adapter.js +100 -0
  161. package/dist/packages/transport-bridge/src/stdio-adapter.js.map +1 -0
  162. package/dist/packages/transport-bridge/src/types.d.ts +35 -0
  163. package/dist/packages/transport-bridge/src/types.d.ts.map +1 -0
  164. package/dist/packages/transport-bridge/src/types.js +2 -0
  165. package/dist/packages/transport-bridge/src/types.js.map +1 -0
  166. package/package.json +40 -0
@@ -0,0 +1,4 @@
1
+ export * from './types.js';
2
+ export * from './profiles.js';
3
+ export * from './executor.js';
4
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC"}
@@ -0,0 +1,4 @@
1
+ export * from './types.js';
2
+ export * from './profiles.js';
3
+ export * from './executor.js';
4
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC"}
@@ -0,0 +1,4 @@
1
+ import { SandboxPolicyConfig, SandboxProfileType } from './types.js';
2
+ export declare const DEFAULT_SANDBOX_PROFILES: Record<SandboxProfileType, SandboxPolicyConfig>;
3
+ export declare function getSanitizedEnvironment(customEnv: Record<string, string>, profile: SandboxPolicyConfig): NodeJS.ProcessEnv;
4
+ //# sourceMappingURL=profiles.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErE,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CAkCpF,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,OAAO,EAAE,mBAAmB,GAC3B,MAAM,CAAC,UAAU,CAiCnB"}
@@ -0,0 +1,66 @@
1
+ export const DEFAULT_SANDBOX_PROFILES = {
2
+ 'no-network': {
3
+ profile: 'no-network',
4
+ maxMemoryMb: 256,
5
+ timeoutMs: 15000,
6
+ readOnlyFilesystem: true,
7
+ allowedEgressHosts: [],
8
+ },
9
+ 'egress-allowlist': {
10
+ profile: 'egress-allowlist',
11
+ maxMemoryMb: 512,
12
+ timeoutMs: 30000,
13
+ readOnlyFilesystem: true,
14
+ allowedEgressHosts: ['api.github.com', 'gitee.com', 'localhost', '127.0.0.1'],
15
+ },
16
+ 'filesystem-readonly': {
17
+ profile: 'filesystem-readonly',
18
+ maxMemoryMb: 256,
19
+ timeoutMs: 20000,
20
+ readOnlyFilesystem: true,
21
+ },
22
+ 'workspace-scoped': {
23
+ profile: 'workspace-scoped',
24
+ maxMemoryMb: 512,
25
+ timeoutMs: 60000,
26
+ readOnlyFilesystem: false,
27
+ allowedWorkspacePaths: ['./workspace', './tmp'],
28
+ },
29
+ unrestricted: {
30
+ profile: 'unrestricted',
31
+ maxMemoryMb: 1024,
32
+ timeoutMs: 120000,
33
+ readOnlyFilesystem: false,
34
+ },
35
+ };
36
+ export function getSanitizedEnvironment(customEnv, profile) {
37
+ // Base minimal safe system environment
38
+ const safeEnv = {
39
+ PATH: process.env.PATH || '',
40
+ NODE_ENV: 'production',
41
+ HOME: process.env.USERPROFILE || process.env.HOME || '',
42
+ TEMP: process.env.TEMP || '',
43
+ TMP: process.env.TMP || '',
44
+ ACR_SANDBOX_PROFILE: profile.profile,
45
+ };
46
+ // Block sensitive host environment variables from leaking into child
47
+ const BLOCKED_VARS = [
48
+ 'ACR_MOAT_SECRET',
49
+ 'UNKEY_ROOT_KEY',
50
+ 'AZURE_CLIENT_SECRET',
51
+ 'MACOS_CERT_PASSWORD',
52
+ 'GITHUB_TOKEN',
53
+ ];
54
+ for (const [k, v] of Object.entries(customEnv)) {
55
+ if (!BLOCKED_VARS.includes(k)) {
56
+ safeEnv[k] = v;
57
+ }
58
+ }
59
+ if (profile.profile === 'no-network') {
60
+ safeEnv.HTTP_PROXY = 'http://0.0.0.0:0';
61
+ safeEnv.HTTPS_PROXY = 'http://0.0.0.0:0';
62
+ safeEnv.NO_PROXY = '';
63
+ }
64
+ return safeEnv;
65
+ }
66
+ //# sourceMappingURL=profiles.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/profiles.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,wBAAwB,GAAoD;IACvF,YAAY,EAAE;QACZ,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,EAAE;KACvB;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,CAAC,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC;KAC9E;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,IAAI;KACzB;IACD,kBAAkB,EAAE;QAClB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,GAAG;QAChB,SAAS,EAAE,KAAK;QAChB,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KAChD;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,MAAM;QACjB,kBAAkB,EAAE,KAAK;KAC1B;CACF,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACrC,SAAiC,EACjC,OAA4B;IAE5B,uCAAuC;IACvC,MAAM,OAAO,GAAsB;QACjC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QAC5B,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QACvD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE;QAC1B,mBAAmB,EAAE,OAAO,CAAC,OAAO;KACrC,CAAC;IAEF,qEAAqE;IACrE,MAAM,YAAY,GAAG;QACnB,iBAAiB;QACjB,gBAAgB;QAChB,qBAAqB;QACrB,qBAAqB;QACrB,cAAc;KACf,CAAC;IAEF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,CAAC,UAAU,GAAG,kBAAkB,CAAC;QACxC,OAAO,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
@@ -0,0 +1,24 @@
1
+ export type SandboxProfileType = 'no-network' | 'egress-allowlist' | 'filesystem-readonly' | 'workspace-scoped' | 'unrestricted';
2
+ export interface SandboxPolicyConfig {
3
+ profile: SandboxProfileType;
4
+ allowedEgressHosts?: string[];
5
+ maxMemoryMb?: number;
6
+ timeoutMs?: number;
7
+ readOnlyFilesystem?: boolean;
8
+ allowedWorkspacePaths?: string[];
9
+ }
10
+ export interface ProcessSpawnSpec {
11
+ command: string;
12
+ args: string[];
13
+ env: Record<string, string>;
14
+ cwd?: string;
15
+ policy: SandboxPolicyConfig;
16
+ }
17
+ export interface ExecutionResult {
18
+ stdout: string;
19
+ stderr: string;
20
+ exitCode: number | null;
21
+ durationMs: number;
22
+ timedOut: boolean;
23
+ }
24
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,kBAAkB,GAClB,qBAAqB,GACrB,kBAAkB,GAClB,cAAc,CAAC;AAEnB,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/src/types.ts"],"names":[],"mappings":""}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=sandbox.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sandbox.test.d.ts","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/test/sandbox.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,30 @@
1
+ import { describe, it } from 'node:test';
2
+ import assert from 'node:assert/strict';
3
+ import { getSanitizedEnvironment, SandboxedProcess, DEFAULT_SANDBOX_PROFILES } from '../src/index.js';
4
+ describe('Sandbox Runtime (Containment Engine)', () => {
5
+ it('should scrub dangerous host env vars from execution environment', () => {
6
+ const rawEnv = {
7
+ ACR_MOAT_SECRET: 'leaked_moat_secret',
8
+ CUSTOM_SAFE_VAR: 'hello_world'
9
+ };
10
+ const sanitized = getSanitizedEnvironment(rawEnv, DEFAULT_SANDBOX_PROFILES['no-network']);
11
+ assert.equal(sanitized.ACR_MOAT_SECRET, undefined);
12
+ assert.equal(sanitized.CUSTOM_SAFE_VAR, 'hello_world');
13
+ assert.equal(sanitized.ACR_SANDBOX_PROFILE, 'no-network');
14
+ assert.equal(sanitized.HTTP_PROXY, 'http://0.0.0.0:0');
15
+ });
16
+ it('should execute node inline command safely and return stdout', async () => {
17
+ const sandbox = new SandboxedProcess({
18
+ command: process.execPath,
19
+ args: ['-e', 'console.log(JSON.stringify({ status: "ok" }))'],
20
+ env: {},
21
+ policy: DEFAULT_SANDBOX_PROFILES['workspace-scoped']
22
+ });
23
+ const res = await sandbox.executeOnce();
24
+ assert.equal(res.exitCode, 0);
25
+ assert.equal(res.timedOut, false);
26
+ const parsed = JSON.parse(res.stdout.trim());
27
+ assert.equal(parsed.status, 'ok');
28
+ });
29
+ });
30
+ //# sourceMappingURL=sandbox.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"sandbox.test.js","sourceRoot":"","sources":["../../../../packages/sandbox-runtime/test/sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAEtG,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAG;YACb,eAAe,EAAE,oBAAoB;YACrC,eAAe,EAAE,aAAa;SAC/B,CAAC;QAEF,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,QAAQ;YACzB,IAAI,EAAE,CAAC,IAAI,EAAE,+CAA+C,CAAC;YAC7D,GAAG,EAAE,EAAE;YACP,MAAM,EAAE,wBAAwB,CAAC,kBAAkB,CAAC;SACrD,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,30 @@
1
+ import { McpClientAdapter } from './types.js';
2
+ export interface ServerConnectionSpec {
3
+ serverId: string;
4
+ transport: 'stdio' | 'sse' | 'streamable_http';
5
+ command?: string;
6
+ args?: string[];
7
+ env?: Record<string, string>;
8
+ url?: string;
9
+ headers?: Record<string, string>;
10
+ sandboxProfile?: any;
11
+ }
12
+ export declare class TransportBridge {
13
+ private readonly adapters;
14
+ getOrCreateAdapter(spec: ServerConnectionSpec): McpClientAdapter;
15
+ forwardToolCall(spec: ServerConnectionSpec, originalToolName: string, args: Record<string, unknown>): Promise<{
16
+ content: Array<{
17
+ type: string;
18
+ text?: string;
19
+ data?: string;
20
+ }>;
21
+ isError?: boolean;
22
+ }>;
23
+ forwardListTools(spec: ServerConnectionSpec): Promise<Array<{
24
+ name: string;
25
+ description?: string;
26
+ inputSchema?: any;
27
+ }>>;
28
+ disconnectAll(): Promise<void>;
29
+ }
30
+ //# sourceMappingURL=bridge.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/bridge.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,GAAG,CAAC;CACtB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuC;IAEzD,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,gBAAgB,CA8BtE;IAEY,eAAe,CAC1B,IAAI,EAAE,oBAAoB,EAC1B,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAMhG;IAEY,gBAAgB,CAC3B,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,CAM3E;IAEY,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAS1C;CACF"}
@@ -0,0 +1,60 @@
1
+ import { HttpMcpAdapter } from './http-adapter.js';
2
+ import { StdioMcpAdapter } from './stdio-adapter.js';
3
+ export class TransportBridge {
4
+ adapters = new Map();
5
+ getOrCreateAdapter(spec) {
6
+ const existing = this.adapters.get(spec.serverId);
7
+ if (existing && existing.isConnected()) {
8
+ return existing;
9
+ }
10
+ let adapter;
11
+ if (spec.transport === 'stdio') {
12
+ if (!spec.command) {
13
+ throw new Error(`Cannot create Stdio adapter for "${spec.serverId}": missing command.`);
14
+ }
15
+ adapter = new StdioMcpAdapter({
16
+ command: spec.command,
17
+ args: spec.args,
18
+ env: spec.env,
19
+ policy: spec.sandboxProfile,
20
+ });
21
+ }
22
+ else {
23
+ if (!spec.url) {
24
+ throw new Error(`Cannot create HTTP adapter for "${spec.serverId}": missing url.`);
25
+ }
26
+ adapter = new HttpMcpAdapter({
27
+ url: spec.url,
28
+ headers: spec.headers,
29
+ });
30
+ }
31
+ this.adapters.set(spec.serverId, adapter);
32
+ return adapter;
33
+ }
34
+ async forwardToolCall(spec, originalToolName, args) {
35
+ const adapter = this.getOrCreateAdapter(spec);
36
+ if (!adapter.isConnected()) {
37
+ await adapter.connect();
38
+ }
39
+ return adapter.callTool(originalToolName, args);
40
+ }
41
+ async forwardListTools(spec) {
42
+ const adapter = this.getOrCreateAdapter(spec);
43
+ if (!adapter.isConnected()) {
44
+ await adapter.connect();
45
+ }
46
+ return adapter.listTools();
47
+ }
48
+ async disconnectAll() {
49
+ for (const adapter of this.adapters.values()) {
50
+ try {
51
+ await adapter.disconnect();
52
+ }
53
+ catch {
54
+ // Ignore disconnect errors during batch shutdown
55
+ }
56
+ }
57
+ this.adapters.clear();
58
+ }
59
+ }
60
+ //# sourceMappingURL=bridge.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAcrD,MAAM,OAAO,eAAe;IACT,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEzD,kBAAkB,CAAC,IAA0B;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACvC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,IAAI,OAAyB,CAAC;QAE9B,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,QAAQ,qBAAqB,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,GAAG,IAAI,eAAe,CAAC;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,MAAM,EAAE,IAAI,CAAC,cAAc;aAC5B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,QAAQ,iBAAiB,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,GAAG,IAAI,cAAc,CAAC;gBAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,IAA0B,EAC1B,gBAAwB,EACxB,IAA6B;QAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,IAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,EAAE,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,iDAAiD;YACnD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}
@@ -0,0 +1,30 @@
1
+ import { McpClientAdapter } from './types.js';
2
+ export interface HttpAdapterOptions {
3
+ url: string;
4
+ headers?: Record<string, string>;
5
+ timeoutMs?: number;
6
+ }
7
+ export declare class HttpMcpAdapter implements McpClientAdapter {
8
+ private readonly options;
9
+ private connected;
10
+ private reqIdCounter;
11
+ constructor(options: HttpAdapterOptions);
12
+ connect(): Promise<void>;
13
+ sendRequest(method: string, params?: Record<string, unknown>): Promise<any>;
14
+ listTools(): Promise<Array<{
15
+ name: string;
16
+ description?: string;
17
+ inputSchema?: any;
18
+ }>>;
19
+ callTool(name: string, args: Record<string, unknown>): Promise<{
20
+ content: Array<{
21
+ type: string;
22
+ text?: string;
23
+ data?: string;
24
+ }>;
25
+ isError?: boolean;
26
+ }>;
27
+ disconnect(): Promise<void>;
28
+ isConnected(): boolean;
29
+ }
30
+ //# sourceMappingURL=http-adapter.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"http-adapter.d.ts","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/http-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmC,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,cAAe,YAAW,gBAAgB;IAIzC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,YAAY,CAAK;IAEzB,YAA6B,OAAO,EAAE,kBAAkB,EAAI;IAE/C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAEpC;IAEY,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAkCvF;IAEY,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,CAOlG;IAEY,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAGjK;IAEY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAEvC;IAEM,WAAW,IAAI,OAAO,CAE5B;CACF"}
@@ -0,0 +1,61 @@
1
+ export class HttpMcpAdapter {
2
+ options;
3
+ connected = false;
4
+ reqIdCounter = 1;
5
+ constructor(options) {
6
+ this.options = options;
7
+ }
8
+ async connect() {
9
+ this.connected = true;
10
+ }
11
+ async sendRequest(method, params) {
12
+ const id = this.reqIdCounter++;
13
+ const req = { jsonrpc: '2.0', id, method, params };
14
+ const headers = {
15
+ 'Content-Type': 'application/json',
16
+ 'User-Agent': 'ACR-Meta-MCP-Proxy/0.8.2',
17
+ ...(this.options.headers || {}),
18
+ };
19
+ const controller = new AbortController();
20
+ const timeout = setTimeout(() => controller.abort(), this.options.timeoutMs || 25000);
21
+ try {
22
+ const resp = await fetch(this.options.url, {
23
+ method: 'POST',
24
+ headers,
25
+ body: JSON.stringify(req),
26
+ signal: controller.signal,
27
+ });
28
+ if (!resp.ok) {
29
+ throw new Error(`HTTP ${resp.status}: ${resp.statusText}`);
30
+ }
31
+ const json = (await resp.json());
32
+ if (json.error) {
33
+ throw new Error(`Remote MCP Error [${json.error.code}]: ${json.error.message}`);
34
+ }
35
+ return json.result;
36
+ }
37
+ finally {
38
+ clearTimeout(timeout);
39
+ }
40
+ }
41
+ async listTools() {
42
+ try {
43
+ const res = await this.sendRequest('tools/list', {});
44
+ return res?.tools || [];
45
+ }
46
+ catch {
47
+ return [];
48
+ }
49
+ }
50
+ async callTool(name, args) {
51
+ const res = await this.sendRequest('tools/call', { name, arguments: args });
52
+ return res || { content: [{ type: 'text', text: 'Success' }] };
53
+ }
54
+ async disconnect() {
55
+ this.connected = false;
56
+ }
57
+ isConnected() {
58
+ return this.connected;
59
+ }
60
+ }
61
+ //# sourceMappingURL=http-adapter.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"http-adapter.js","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/http-adapter.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,cAAc;IAII,OAAO;IAH5B,SAAS,GAAG,KAAK,CAAC;IAClB,YAAY,GAAG,CAAC,CAAC;IAEzB,YAA6B,OAA2B;uBAA3B,OAAO;IAAuB,CAAC;IAErD,KAAK,CAAC,OAAO;QAClB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,MAAgC;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEnE,MAAM,OAAO,GAAG;YACd,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,0BAA0B;YACxC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;SAChC,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAEtF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBACzC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;gBACzB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;YACpD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,SAAS;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAEM,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAEM,WAAW;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
@@ -0,0 +1,5 @@
1
+ export * from './types.js';
2
+ export * from './stdio-adapter.js';
3
+ export * from './http-adapter.js';
4
+ export * from './bridge.js';
5
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC"}
@@ -0,0 +1,5 @@
1
+ export * from './types.js';
2
+ export * from './stdio-adapter.js';
3
+ export * from './http-adapter.js';
4
+ export * from './bridge.js';
5
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC"}
@@ -0,0 +1,36 @@
1
+ import { SandboxPolicyConfig } from '../../sandbox-runtime/src/index.js';
2
+ import { McpClientAdapter } from './types.js';
3
+ export interface StdioAdapterOptions {
4
+ command: string;
5
+ args?: string[];
6
+ env?: Record<string, string>;
7
+ policy?: SandboxPolicyConfig;
8
+ }
9
+ export declare class StdioMcpAdapter implements McpClientAdapter {
10
+ private readonly options;
11
+ private sandboxProcess;
12
+ private connected;
13
+ private reqIdCounter;
14
+ private pendingRequests;
15
+ private buffer;
16
+ constructor(options: StdioAdapterOptions);
17
+ connect(): Promise<void>;
18
+ private processBuffer;
19
+ sendRequest(method: string, params?: Record<string, unknown>): Promise<any>;
20
+ listTools(): Promise<Array<{
21
+ name: string;
22
+ description?: string;
23
+ inputSchema?: any;
24
+ }>>;
25
+ callTool(name: string, args: Record<string, unknown>): Promise<{
26
+ content: Array<{
27
+ type: string;
28
+ text?: string;
29
+ data?: string;
30
+ }>;
31
+ isError?: boolean;
32
+ }>;
33
+ disconnect(): Promise<void>;
34
+ isConnected(): boolean;
35
+ }
36
+ //# sourceMappingURL=stdio-adapter.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"stdio-adapter.d.ts","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/stdio-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAmC,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,mBAAmB,CAAC;CAC9B;AAED,qBAAa,eAAgB,YAAW,gBAAgB;IAO1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,cAAc,CAAiC;IACvD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,eAAe,CAA2F;IAClH,OAAO,CAAC,MAAM,CAAM;IAEpB,YAA6B,OAAO,EAAE,mBAAmB,EAAI;IAEhD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAgCpC;IAED,OAAO,CAAC,aAAa;IAwBR,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAYvF;IAEY,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,CAOlG;IAEY,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAGjK;IAEY,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAMvC;IAEM,WAAW,IAAI,OAAO,CAE5B;CACF"}
@@ -0,0 +1,100 @@
1
+ import { SandboxedProcess } from '../../sandbox-runtime/src/index.js';
2
+ export class StdioMcpAdapter {
3
+ options;
4
+ sandboxProcess = null;
5
+ connected = false;
6
+ reqIdCounter = 1;
7
+ pendingRequests = new Map();
8
+ buffer = '';
9
+ constructor(options) {
10
+ this.options = options;
11
+ }
12
+ async connect() {
13
+ const policy = this.options.policy || {
14
+ profile: 'workspace-scoped',
15
+ maxMemoryMb: 512,
16
+ timeoutMs: 30000,
17
+ };
18
+ this.sandboxProcess = new SandboxedProcess({
19
+ command: this.options.command,
20
+ args: this.options.args || [],
21
+ env: this.options.env || {},
22
+ policy,
23
+ });
24
+ const child = this.sandboxProcess.spawn();
25
+ this.connected = true;
26
+ child.stdout.on('data', (chunk) => {
27
+ this.buffer += chunk.toString();
28
+ this.processBuffer();
29
+ });
30
+ child.on('close', () => {
31
+ this.connected = false;
32
+ });
33
+ // Send standard initialize request
34
+ await this.sendRequest('initialize', {
35
+ protocolVersion: '2024-11-05',
36
+ capabilities: { tools: {} },
37
+ clientInfo: { name: 'acr-meta-mcp-proxy', version: '0.8.2' },
38
+ });
39
+ }
40
+ processBuffer() {
41
+ const lines = this.buffer.split('\n');
42
+ this.buffer = lines.pop() || '';
43
+ for (const line of lines) {
44
+ const trimmed = line.trim();
45
+ if (!trimmed)
46
+ continue;
47
+ try {
48
+ const parsed = JSON.parse(trimmed);
49
+ if (parsed.id !== undefined && this.pendingRequests.has(parsed.id)) {
50
+ const handler = this.pendingRequests.get(parsed.id);
51
+ this.pendingRequests.delete(parsed.id);
52
+ if (parsed.error) {
53
+ handler.reject(new Error(`MCP Error [${parsed.error.code}]: ${parsed.error.message}`));
54
+ }
55
+ else {
56
+ handler.resolve(parsed.result);
57
+ }
58
+ }
59
+ }
60
+ catch {
61
+ // Non-JSON logging line from child process
62
+ }
63
+ }
64
+ }
65
+ async sendRequest(method, params) {
66
+ if (!this.connected || !this.sandboxProcess?.process) {
67
+ throw new Error('StdioMcpAdapter is not connected.');
68
+ }
69
+ const id = this.reqIdCounter++;
70
+ const req = { jsonrpc: '2.0', id, method, params };
71
+ return new Promise((resolve, reject) => {
72
+ this.pendingRequests.set(id, { resolve, reject });
73
+ this.sandboxProcess.process.stdin.write(JSON.stringify(req) + '\n');
74
+ });
75
+ }
76
+ async listTools() {
77
+ try {
78
+ const res = await this.sendRequest('tools/list', {});
79
+ return res?.tools || [];
80
+ }
81
+ catch {
82
+ return [];
83
+ }
84
+ }
85
+ async callTool(name, args) {
86
+ const res = await this.sendRequest('tools/call', { name, arguments: args });
87
+ return res || { content: [{ type: 'text', text: 'Success' }] };
88
+ }
89
+ async disconnect() {
90
+ if (this.sandboxProcess) {
91
+ this.sandboxProcess.kill();
92
+ this.sandboxProcess = null;
93
+ }
94
+ this.connected = false;
95
+ }
96
+ isConnected() {
97
+ return this.connected;
98
+ }
99
+ }
100
+ //# sourceMappingURL=stdio-adapter.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"stdio-adapter.js","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/stdio-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAuB,MAAM,oCAAoC,CAAC;AAU3F,MAAM,OAAO,eAAe;IAOG,OAAO;IAN5B,cAAc,GAA4B,IAAI,CAAC;IAC/C,SAAS,GAAG,KAAK,CAAC;IAClB,YAAY,GAAG,CAAC,CAAC;IACjB,eAAe,GAAG,IAAI,GAAG,EAAgF,CAAC;IAC1G,MAAM,GAAG,EAAE,CAAC;IAEpB,YAA6B,OAA4B;uBAA5B,OAAO;IAAwB,CAAC;IAEtD,KAAK,CAAC,OAAO;QAClB,MAAM,MAAM,GAAwB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI;YACzD,OAAO,EAAE,kBAAkB;YAC3B,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,gBAAgB,CAAC;YACzC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE;YAC3B,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,mCAAmC;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE;YACnC,eAAe,EAAE,YAAY;YAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAEO,aAAa;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;gBACtD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBACnE,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAE,CAAC;oBACrD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACvC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBACjB,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBACzF,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,MAAgC;QACvE,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,cAAe,CAAC,OAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,OAAO,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAEM,KAAK,CAAC,UAAU;QACrB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAEM,WAAW;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}
@@ -0,0 +1,35 @@
1
+ export interface JsonRpcRequest {
2
+ jsonrpc: '2.0';
3
+ id: string | number;
4
+ method: string;
5
+ params?: Record<string, unknown>;
6
+ }
7
+ export interface JsonRpcResponse {
8
+ jsonrpc: '2.0';
9
+ id: string | number;
10
+ result?: unknown;
11
+ error?: {
12
+ code: number;
13
+ message: string;
14
+ data?: unknown;
15
+ };
16
+ }
17
+ export interface McpClientAdapter {
18
+ connect(): Promise<void>;
19
+ disconnect(): Promise<void>;
20
+ listTools(): Promise<Array<{
21
+ name: string;
22
+ description?: string;
23
+ inputSchema?: any;
24
+ }>>;
25
+ callTool(name: string, args: Record<string, unknown>): Promise<{
26
+ content: Array<{
27
+ type: string;
28
+ text?: string;
29
+ data?: string;
30
+ }>;
31
+ isError?: boolean;
32
+ }>;
33
+ isConnected(): boolean;
34
+ }
35
+ //# sourceMappingURL=types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC,CAAC;IACvF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtJ,WAAW,IAAI,OAAO,CAAC;CACxB"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/transport-bridge/src/types.ts"],"names":[],"mappings":""}