@actrun_ai/tastekit-core 0.1.0

package/dist/mcp/client.js

@@ -0,0 +1,196 @@
+/**
+ * MCP Client
+ *
+ * Client for connecting to MCP servers and discovering tools/resources/prompts.
+ * Wraps the official @modelcontextprotocol/sdk for transport, discovery, and invocation.
+ *
+ * Supports two transport modes:
+ *   - stdio: launches a local process (command + args)
+ *   - streamable-http: connects to a remote HTTP endpoint
+ */
+import { hashString } from '../utils/hash.js';
+// -- Client implementation ----------------------------------------------------
+export class MCPClient {
+    config;
+    connected = false;
+    // The official SDK client and transport are loaded dynamically
+    // so the rest of TasteKit can function even if the SDK is not installed.
+    sdkClient = null;
+    sdkTransport = null;
+    constructor(server) {
+        this.config = server;
+    }
+    /**
+     * Connect to the MCP server using the appropriate transport.
+     *
+     * Requires `@modelcontextprotocol/sdk` to be installed. If it is not,
+     * throws with a clear install instruction.
+     */
+    async connect() {
+        if (this.connected)
+            return;
+        const transport = this.resolveTransport();
+        try {
+            const sdk = await this.loadSDK();
+            if (transport === 'stdio') {
+                if (!this.config.command) {
+                    throw new Error('stdio transport requires a command');
+                }
+                const { StdioClientTransport } = sdk;
+                this.sdkTransport = new StdioClientTransport({
+                    command: this.config.command,
+                    args: this.config.args ?? [],
+                    env: { ...process.env, ...(this.config.env ?? {}) },
+                });
+            }
+            else {
+                if (!this.config.url) {
+                    throw new Error('streamable-http transport requires a url');
+                }
+                const { StreamableHTTPClientTransport } = sdk;
+                this.sdkTransport = new StreamableHTTPClientTransport(new URL(this.config.url));
+            }
+            const { Client } = sdk;
+            this.sdkClient = new Client({ name: 'tastekit', version: '0.5.0' }, { capabilities: {} });
+            await this.sdkClient.connect(this.sdkTransport);
+            this.connected = true;
+        }
+        catch (err) {
+            if (err?.code === 'ERR_MODULE_NOT_FOUND' || err?.code === 'MODULE_NOT_FOUND') {
+                throw new Error('MCP SDK not installed. Run: npm install @modelcontextprotocol/sdk\n' +
+                    'The official SDK provides stdio and HTTP transports for MCP servers.');
+            }
+            throw err;
+        }
+    }
+    async disconnect() {
+        if (!this.connected)
+            return;
+        try {
+            await this.sdkClient?.close?.();
+            await this.sdkTransport?.close?.();
+        }
+        finally {
+            this.connected = false;
+            this.sdkClient = null;
+            this.sdkTransport = null;
+        }
+    }
+    async listTools() {
+        this.ensureConnected();
+        const result = await this.sdkClient.listTools();
+        return (result.tools ?? []).map((t) => ({
+            name: t.name,
+            description: t.description,
+            inputSchema: t.inputSchema,
+            annotations: t.annotations,
+        }));
+    }
+    async listResources() {
+        this.ensureConnected();
+        try {
+            const result = await this.sdkClient.listResources();
+            return (result.resources ?? []).map((r) => ({
+                uri: r.uri,
+                name: r.name,
+                mimeType: r.mimeType,
+                description: r.description,
+            }));
+        }
+        catch {
+            // Server may not support resources
+            return [];
+        }
+    }
+    async listPrompts() {
+        this.ensureConnected();
+        try {
+            const result = await this.sdkClient.listPrompts();
+            return (result.prompts ?? []).map((p) => ({
+                name: p.name,
+                description: p.description,
+                arguments: p.arguments,
+            }));
+        }
+        catch {
+            // Server may not support prompts
+            return [];
+        }
+    }
+    async callTool(name, args = {}) {
+        this.ensureConnected();
+        const result = await this.sdkClient.callTool({ name, arguments: args });
+        return {
+            content: result.content ?? [],
+            isError: result.isError,
+        };
+    }
+    /**
+     * Compute a fingerprint for trust pinning.
+     * Based on server identity + tool names + tool schemas (sorted, hashed).
+     */
+    async getFingerprint() {
+        this.ensureConnected();
+        const tools = await this.listTools();
+        const resources = await this.listResources();
+        const prompts = await this.listPrompts();
+        const identity = {
+            name: this.config.name,
+            tools: tools.map(t => ({ name: t.name, inputSchema: t.inputSchema })),
+            resources: resources.map(r => ({ uri: r.uri })),
+            prompts: prompts.map(p => ({ name: p.name })),
+        };
+        return hashString(JSON.stringify(identity));
+    }
+    async getCapabilities() {
+        this.ensureConnected();
+        const caps = this.sdkClient.getServerCapabilities?.() ?? {};
+        return {
+            tools: !!caps.tools,
+            resources: !!caps.resources,
+            prompts: !!caps.prompts,
+            logging: !!caps.logging,
+        };
+    }
+    isConnected() {
+        return this.connected;
+    }
+    getConfig() {
+        return this.config;
+    }
+    // -- Private helpers --------------------------------------------------------
+    resolveTransport() {
+        if (this.config.transport)
+            return this.config.transport;
+        if (this.config.command)
+            return 'stdio';
+        if (this.config.url)
+            return 'streamable-http';
+        throw new Error('MCPServerConfig must specify either command (stdio) or url (http)');
+    }
+    ensureConnected() {
+        if (!this.connected || !this.sdkClient) {
+            throw new Error('MCPClient is not connected. Call connect() first.');
+        }
+    }
+    async loadSDK() {
+        // Dynamic import so the rest of TasteKit works without the SDK installed
+        const clientModule = await import('@modelcontextprotocol/sdk/client/index.js');
+        let stdioModule = {};
+        let httpModule = {};
+        try {
+            stdioModule = await import('@modelcontextprotocol/sdk/client/stdio.js');
+        }
+        catch { /* stdio transport not needed for HTTP connections */ }
+        try {
+            httpModule = await import('@modelcontextprotocol/sdk/client/streamableHttp.js');
+        }
+        catch { /* HTTP transport not needed for stdio connections */ }
+        return {
+            Client: clientModule.Client,
+            StdioClientTransport: stdioModule.StdioClientTransport,
+            StreamableHTTPClientTransport: httpModule.StreamableHTTPClientTransport,
+        };
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/mcp/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../mcp/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAgE9C,gFAAgF;AAEhF,MAAM,OAAO,SAAS;IACZ,MAAM,CAAkB;IACxB,SAAS,GAAG,KAAK,CAAC;IAE1B,+DAA+D;IAC/D,yEAAyE;IACjE,SAAS,GAAQ,IAAI,CAAC;IACtB,YAAY,GAAQ,IAAI,CAAC;IAEjC,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAEjC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,EAAE,oBAAoB,EAAE,GAAG,GAAG,CAAC;gBACrC,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC;oBAC3C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE;oBAC5B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAA4B;iBAC9E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,EAAE,6BAA6B,EAAE,GAAG,GAAG,CAAC;gBAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,6BAA6B,CACnD,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CACzB,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,MAAM,CACzB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;YAEF,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,EAAE,IAAI,KAAK,sBAAsB,IAAI,GAAG,EAAE,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CACb,qEAAqE;oBACrE,sEAAsE,CACvE,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBAC/C,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;YACnC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBAC7C,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;YACjC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,OAAgC,EAAE;QAC7D,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzC,MAAM,QAAQ,GAAG;YACf,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SAC9C,CAAC;QAEF,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC;QAC5D,OAAO;YACL,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;YACnB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS;YAC3B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;YACvB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,8EAA8E;IAEtE,gBAAgB;QACtB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,iBAAiB,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IAEO,eAAe;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,yEAAyE;QACzE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC/E,IAAI,WAAW,GAAQ,EAAE,CAAC;QAC1B,IAAI,UAAU,GAAQ,EAAE,CAAC;QAEzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QAEjE,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QAEjE,OAAO;YACL,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,oBAAoB,EAAE,WAAW,CAAC,oBAAoB;YACtD,6BAA6B,EAAE,UAAU,CAAC,6BAA6B;SACxE,CAAC;IACJ,CAAC;CACF"}

package/dist/mcp/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * TasteKit MCP Integration
+ *
+ * Model Context Protocol server management and tool binding.
+ */
+export * from './client.js';
+export * from './binder.js';
+export * from './inspector.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../mcp/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/mcp/index.js

@@ -0,0 +1,9 @@
+/**
+ * TasteKit MCP Integration
+ *
+ * Model Context Protocol server management and tool binding.
+ */
+export * from './client.js';
+export * from './binder.js';
+export * from './inspector.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../mcp/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/mcp/inspector.d.ts

@@ -0,0 +1,29 @@
+import { MCPServer } from './client.js';
+/**
+ * MCP Inspector
+ *
+ * Inspects MCP servers and provides detailed information about capabilities.
+ */
+export interface InspectionResult {
+    server: MCPServer;
+    tools: Array<{
+        name: string;
+        description?: string;
+        risk_level: 'low' | 'medium' | 'high';
+        destructive: boolean;
+    }>;
+    resources: Array<{
+        uri: string;
+        name?: string;
+    }>;
+    prompts: Array<{
+        name: string;
+        description?: string;
+    }>;
+    fingerprint: string;
+}
+export declare class MCPInspector {
+    inspect(server: MCPServer): Promise<InspectionResult>;
+    private assessRiskLevel;
+}
+//# sourceMappingURL=inspector.d.ts.map

package/dist/mcp/inspector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspector.d.ts","sourceRoot":"","sources":["../../mcp/inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,SAAS,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;GAIG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;QACtC,WAAW,EAAE,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,SAAS,EAAE,KAAK,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,YAAY;IACjB,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmC3D,OAAO,CAAC,eAAe;CASxB"}

package/dist/mcp/inspector.js

@@ -0,0 +1,44 @@
+import { MCPClient } from './client.js';
+export class MCPInspector {
+    async inspect(server) {
+        const client = new MCPClient(server);
+        try {
+            await client.connect();
+            const tools = await client.listTools();
+            const resources = await client.listResources();
+            const prompts = await client.listPrompts();
+            const fingerprint = await client.getFingerprint();
+            return {
+                server,
+                tools: tools.map(tool => ({
+                    name: tool.name,
+                    description: tool.description,
+                    risk_level: this.assessRiskLevel(tool),
+                    destructive: tool.annotations?.destructive || false,
+                })),
+                resources: resources.map(r => ({
+                    uri: r.uri,
+                    name: r.name,
+                })),
+                prompts: prompts.map(p => ({
+                    name: p.name,
+                    description: p.description,
+                })),
+                fingerprint,
+            };
+        }
+        finally {
+            await client.disconnect();
+        }
+    }
+    assessRiskLevel(tool) {
+        if (tool.annotations?.risk === 'high' || tool.annotations?.destructive) {
+            return 'high';
+        }
+        if (tool.annotations?.risk === 'medium') {
+            return 'medium';
+        }
+        return 'low';
+    }
+}
+//# sourceMappingURL=inspector.js.map

package/dist/mcp/inspector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspector.js","sourceRoot":"","sources":["../../mcp/inspector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAa,MAAM,aAAa,CAAC;AA2BnD,MAAM,OAAO,YAAY;IACvB,KAAK,CAAC,OAAO,CAAC,MAAiB;QAC7B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YAEvB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAElD,OAAO;gBACL,MAAM;gBACN,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACxB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;oBACtC,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,IAAI,KAAK;iBACpD,CAAC,CAAC;gBACH,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC7B,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC,CAAC;gBACH,WAAW;aACZ,CAAC;QAEJ,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAS;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/schemas/bindings.d.ts

@@ -0,0 +1,248 @@
+import { z } from 'zod';
+/**
+ * Bindings v1 Schema
+ *
+ * MCP server bindings - selected tools, resources, and prompts.
+ */
+export declare const BindingsToolSchema: z.ZodObject<{
+    tool_ref: z.ZodString;
+    risk_hints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    default_permission_scope_id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    tool_ref: string;
+    risk_hints?: string[] | undefined;
+    default_permission_scope_id?: string | undefined;
+}, {
+    tool_ref: string;
+    risk_hints?: string[] | undefined;
+    default_permission_scope_id?: string | undefined;
+}>;
+export declare const BindingsResourceSchema: z.ZodObject<{
+    resource_ref: z.ZodString;
+    uri_pattern: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    resource_ref: string;
+    uri_pattern?: string | undefined;
+}, {
+    resource_ref: string;
+    uri_pattern?: string | undefined;
+}>;
+export declare const BindingsPromptSchema: z.ZodObject<{
+    prompt_ref: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    prompt_ref: string;
+    description?: string | undefined;
+}, {
+    prompt_ref: string;
+    description?: string | undefined;
+}>;
+export declare const BindingsServerSchema: z.ZodObject<{
+    name: z.ZodString;
+    url: z.ZodString;
+    pinned_fingerprint: z.ZodOptional<z.ZodString>;
+    auth: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    tools: z.ZodArray<z.ZodObject<{
+        tool_ref: z.ZodString;
+        risk_hints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        default_permission_scope_id: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        tool_ref: string;
+        risk_hints?: string[] | undefined;
+        default_permission_scope_id?: string | undefined;
+    }, {
+        tool_ref: string;
+        risk_hints?: string[] | undefined;
+        default_permission_scope_id?: string | undefined;
+    }>, "many">;
+    resources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        resource_ref: z.ZodString;
+        uri_pattern: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        resource_ref: string;
+        uri_pattern?: string | undefined;
+    }, {
+        resource_ref: string;
+        uri_pattern?: string | undefined;
+    }>, "many">>;
+    prompts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        prompt_ref: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        prompt_ref: string;
+        description?: string | undefined;
+    }, {
+        prompt_ref: string;
+        description?: string | undefined;
+    }>, "many">>;
+    last_bind_at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    url: string;
+    tools: {
+        tool_ref: string;
+        risk_hints?: string[] | undefined;
+        default_permission_scope_id?: string | undefined;
+    }[];
+    last_bind_at: string;
+    pinned_fingerprint?: string | undefined;
+    auth?: Record<string, string> | undefined;
+    resources?: {
+        resource_ref: string;
+        uri_pattern?: string | undefined;
+    }[] | undefined;
+    prompts?: {
+        prompt_ref: string;
+        description?: string | undefined;
+    }[] | undefined;
+}, {
+    name: string;
+    url: string;
+    tools: {
+        tool_ref: string;
+        risk_hints?: string[] | undefined;
+        default_permission_scope_id?: string | undefined;
+    }[];
+    last_bind_at: string;
+    pinned_fingerprint?: string | undefined;
+    auth?: Record<string, string> | undefined;
+    resources?: {
+        resource_ref: string;
+        uri_pattern?: string | undefined;
+    }[] | undefined;
+    prompts?: {
+        prompt_ref: string;
+        description?: string | undefined;
+    }[] | undefined;
+}>;
+export declare const BindingsV1Schema: z.ZodObject<{
+    schema_version: z.ZodLiteral<"bindings.v1">;
+    servers: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        url: z.ZodString;
+        pinned_fingerprint: z.ZodOptional<z.ZodString>;
+        auth: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        tools: z.ZodArray<z.ZodObject<{
+            tool_ref: z.ZodString;
+            risk_hints: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            default_permission_scope_id: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            tool_ref: string;
+            risk_hints?: string[] | undefined;
+            default_permission_scope_id?: string | undefined;
+        }, {
+            tool_ref: string;
+            risk_hints?: string[] | undefined;
+            default_permission_scope_id?: string | undefined;
+        }>, "many">;
+        resources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            resource_ref: z.ZodString;
+            uri_pattern: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            resource_ref: string;
+            uri_pattern?: string | undefined;
+        }, {
+            resource_ref: string;
+            uri_pattern?: string | undefined;
+        }>, "many">>;
+        prompts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            prompt_ref: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            prompt_ref: string;
+            description?: string | undefined;
+        }, {
+            prompt_ref: string;
+            description?: string | undefined;
+        }>, "many">>;
+        last_bind_at: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        url: string;
+        tools: {
+            tool_ref: string;
+            risk_hints?: string[] | undefined;
+            default_permission_scope_id?: string | undefined;
+        }[];
+        last_bind_at: string;
+        pinned_fingerprint?: string | undefined;
+        auth?: Record<string, string> | undefined;
+        resources?: {
+            resource_ref: string;
+            uri_pattern?: string | undefined;
+        }[] | undefined;
+        prompts?: {
+            prompt_ref: string;
+            description?: string | undefined;
+        }[] | undefined;
+    }, {
+        name: string;
+        url: string;
+        tools: {
+            tool_ref: string;
+            risk_hints?: string[] | undefined;
+            default_permission_scope_id?: string | undefined;
+        }[];
+        last_bind_at: string;
+        pinned_fingerprint?: string | undefined;
+        auth?: Record<string, string> | undefined;
+        resources?: {
+            resource_ref: string;
+            uri_pattern?: string | undefined;
+        }[] | undefined;
+        prompts?: {
+            prompt_ref: string;
+            description?: string | undefined;
+        }[] | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    schema_version: "bindings.v1";
+    servers: {
+        name: string;
+        url: string;
+        tools: {
+            tool_ref: string;
+            risk_hints?: string[] | undefined;
+            default_permission_scope_id?: string | undefined;
+        }[];
+        last_bind_at: string;
+        pinned_fingerprint?: string | undefined;
+        auth?: Record<string, string> | undefined;
+        resources?: {
+            resource_ref: string;
+            uri_pattern?: string | undefined;
+        }[] | undefined;
+        prompts?: {
+            prompt_ref: string;
+            description?: string | undefined;
+        }[] | undefined;
+    }[];
+}, {
+    schema_version: "bindings.v1";
+    servers: {
+        name: string;
+        url: string;
+        tools: {
+            tool_ref: string;
+            risk_hints?: string[] | undefined;
+            default_permission_scope_id?: string | undefined;
+        }[];
+        last_bind_at: string;
+        pinned_fingerprint?: string | undefined;
+        auth?: Record<string, string> | undefined;
+        resources?: {
+            resource_ref: string;
+            uri_pattern?: string | undefined;
+        }[] | undefined;
+        prompts?: {
+            prompt_ref: string;
+            description?: string | undefined;
+        }[] | undefined;
+    }[];
+}>;
+export type BindingsV1 = z.infer<typeof BindingsV1Schema>;
+export type BindingsServer = z.infer<typeof BindingsServerSchema>;
+export type BindingsTool = z.infer<typeof BindingsToolSchema>;
+export type BindingsResource = z.infer<typeof BindingsResourceSchema>;
+export type BindingsPrompt = z.infer<typeof BindingsPromptSchema>;
+//# sourceMappingURL=bindings.d.ts.map

package/dist/schemas/bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../schemas/bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAI7B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;EAGjC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;EAG/B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW/B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/schemas/bindings.js

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+/**
+ * Bindings v1 Schema
+ *
+ * MCP server bindings - selected tools, resources, and prompts.
+ */
+export const BindingsToolSchema = z.object({
+    tool_ref: z.string().describe('Tool reference (server:tool)'),
+    risk_hints: z.array(z.string()).optional().describe('Risk hints from MCP annotations'),
+    default_permission_scope_id: z.string().optional(),
+});
+export const BindingsResourceSchema = z.object({
+    resource_ref: z.string().describe('Resource reference (server:resource)'),
+    uri_pattern: z.string().optional(),
+});
+export const BindingsPromptSchema = z.object({
+    prompt_ref: z.string().describe('Prompt reference (server:prompt)'),
+    description: z.string().optional(),
+});
+export const BindingsServerSchema = z.object({
+    name: z.string().describe('Server name'),
+    url: z.string().describe('Server URL or connection string'),
+    pinned_fingerprint: z.string().optional().describe('Pinned server fingerprint for trust'),
+    auth: z.record(z.string()).optional().describe('Auth references (no secrets)'),
+    tools: z.array(BindingsToolSchema).describe('Selected tools from this server'),
+    resources: z.array(BindingsResourceSchema).optional().describe('Selected resources'),
+    prompts: z.array(BindingsPromptSchema).optional().describe('Selected prompts'),
+    last_bind_at: z.string().datetime().describe('Last binding timestamp'),
+});
+export const BindingsV1Schema = z.object({
+    schema_version: z.literal('bindings.v1'),
+    servers: z.array(BindingsServerSchema),
+});
+//# sourceMappingURL=bindings.js.map

package/dist/schemas/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../schemas/bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC7D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IACtF,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACzE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACzF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAE9E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC9E,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IACpF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAE9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACvC,CAAC,CAAC"}