@agentdocumentformat/cli 0.7.7 → 0.8.0

package/dist/chunks/chunk-VMHTYDH4.mjs

@@ -1,172 +0,0 @@
-import { createRequire as __adfCreateRequire } from 'node:module';
-import { fileURLToPath as __adfFileURLToPath } from 'node:url';
-import { dirname as __adfDirname } from 'node:path';
-const require = __adfCreateRequire(import.meta.url);
-const __filename = __adfFileURLToPath(import.meta.url);
-const __dirname = __adfDirname(__filename);
-import {
-  __export
-} from "./chunk-M2RX3S2T.mjs";
-
-// src/shared/utils/mcp-config.ts
-var mcp_config_exports = {};
-__export(mcp_config_exports, {
-  MCP_EXECUTABLE_IDENTITY_FIELDS: () => MCP_EXECUTABLE_IDENTITY_FIELDS,
-  buildEnvSchemaFromKeys: () => buildEnvSchemaFromKeys,
-  buildHeaderEnvSchemaFromEntries: () => buildHeaderEnvSchemaFromEntries,
-  buildMcpServerConfigFromRegistration: () => buildMcpServerConfigFromRegistration,
-  deriveRegistrationTestPlan: () => deriveRegistrationTestPlan,
-  getMcpRegistrationEnvKeys: () => getMcpRegistrationEnvKeys,
-  isRegistrationAgentVisible: () => isRegistrationAgentVisible,
-  isSensitiveMcpHeader: () => isSensitiveMcpHeader,
-  mcpCredentialNamespace: () => mcpCredentialNamespace,
-  mcpCredentialRef: () => mcpCredentialRef,
-  pinServerConfigToRegistration: () => pinServerConfigToRegistration,
-  reconcileHostApprovedRegistrations: () => reconcileHostApprovedRegistrations,
-  registrationSourceIdentity: () => registrationSourceIdentity,
-  sameExecutableIdentity: () => sameExecutableIdentity,
-  suggestedAgentVisible: () => suggestedAgentVisible
-});
-function sourcePackage(source) {
-  let s = source;
-  return s.npm_package ?? s.npmPackage ?? s.pypi_package ?? s.pypiPackage;
-}
-function mcpCredentialNamespace(source) {
-  return sourcePackage(source) ?? source.name;
-}
-function mcpCredentialRef(source, key) {
-  return `mcp:${mcpCredentialNamespace(source)}:${key}`;
-}
-function isSensitiveMcpHeader(header) {
-  let normalized = header.trim().toLowerCase();
-  return normalized === "authorization" || normalized === "proxy-authorization" || normalized === "x-api-key" || normalized === "api-key" || normalized === "apikey" || normalized === "x-auth-token" || normalized === "x-access-token" || normalized.includes("token") || normalized.includes("secret") || normalized.includes("credential");
-}
-function buildEnvSchemaFromKeys(source, keys, scope, requiredKeys = keys) {
-  let required = new Set(requiredKeys);
-  return [...new Set(keys.filter(Boolean))].map((key) => ({
-    key,
-    scope,
-    required: required.has(key) || void 0,
-    credential_ref: scope === "app" ? mcpCredentialRef(source, key) : void 0
-  }));
-}
-function buildHeaderEnvSchemaFromEntries(source, entries, appScoped = !0) {
-  return entries.filter((entry) => entry.header && entry.env).map((entry) => ({
-    header: entry.header,
-    env: entry.env,
-    required: !0,
-    credential_ref: appScoped ? mcpCredentialRef(source, entry.env) : void 0
-  }));
-}
-function getMcpRegistrationEnvKeys(registration) {
-  return [.../* @__PURE__ */ new Set([
-    ...(registration.env ?? []).map((entry) => entry.key).filter(Boolean),
-    ...registration.bearerTokenEnvVar ? [registration.bearerTokenEnvVar] : [],
-    ...(registration.headerEnv ?? []).map((entry) => entry.value).filter(Boolean)
-  ])];
-}
-function buildMcpServerConfigFromRegistration(registration) {
-  let isHttp = registration.type === "http" || !!registration.url, serverCfg = {
-    name: registration.name,
-    transport: isHttp ? "http" : "stdio"
-  };
-  if (isHttp) {
-    serverCfg.url = registration.url, serverCfg.source = registration.url ? `http:${registration.url}` : "http";
-    let staticHeaders = {};
-    for (let { key, value } of registration.headers ?? [])
-      key && value && !isSensitiveMcpHeader(key) && (staticHeaders[key] = value);
-    Object.keys(staticHeaders).length && (serverCfg.headers = staticHeaders), registration.headerEnv?.length && (serverCfg.header_env = buildHeaderEnvSchemaFromEntries(
-      registration,
-      registration.headerEnv.map(({ key, value }) => ({ header: key, env: value })),
-      (registration.credentialStorage ?? "app") !== "agent"
-    )), registration.oauth ? serverCfg.oauth = !0 : registration.bearerTokenEnvVar && (serverCfg.bearer_token_env_var = registration.bearerTokenEnvVar);
-  } else registration.npmPackage ? (serverCfg.source = `npm:${registration.npmPackage}`, serverCfg.npm_package = registration.npmPackage) : registration.pypiPackage ? (serverCfg.source = `uvx:${registration.pypiPackage}`, serverCfg.pypi_package = registration.pypiPackage) : (serverCfg.source = "custom", serverCfg.command = registration.command, serverCfg.args = registration.args);
-  isHttp || (registration.command && (serverCfg.command = registration.command), registration.args?.length && (serverCfg.args = registration.args));
-  let envKeys = getMcpRegistrationEnvKeys(registration);
-  if (envKeys.length) {
-    let scope = (registration.credentialStorage ?? "app") === "agent" ? "agent" : "app";
-    scope === "agent" && (serverCfg.env_keys = envKeys), serverCfg.env_schema = buildEnvSchemaFromKeys(registration, envKeys, scope);
-  }
-  return registration.toolCallTimeout && (serverCfg.tool_call_timeout_ms = registration.toolCallTimeout * 1e3), !isHttp && registration.runLocation && (serverCfg.run_location = registration.runLocation), registration.credentialFiles?.length && (serverCfg.credential_files = registration.credentialFiles.map((f) => ({
-    path: f.path,
-    ...f.required !== void 0 ? { required: f.required } : {},
-    ...f.writeBack !== void 0 ? { write_back: f.writeBack } : {}
-  }))), serverCfg;
-}
-function pinServerConfigToRegistration(connCfg, registration) {
-  let canonical = buildMcpServerConfigFromRegistration(registration), agentEnvSchema = (connCfg.env_schema ?? []).filter((e) => e.scope === "agent"), mergedEnvSchema = [
-    ...canonical.env_schema ?? [],
-    ...agentEnvSchema.filter(
-      (a) => !(canonical.env_schema ?? []).some((c) => c.key === a.key && c.scope === a.scope)
-    )
-  ];
-  return {
-    ...canonical,
-    // Agent-owned state kept from the .adf copy:
-    env: connCfg.env,
-    env_keys: connCfg.env_keys,
-    available_tools: connCfg.available_tools,
-    restricted: connCfg.restricted,
-    ...mergedEnvSchema.length ? { env_schema: mergedEnvSchema } : {}
-  };
-}
-function suggestedAgentVisible(reg) {
-  return reg.type === "http" || !!reg.url ? !0 : reg.runLocation !== "host";
-}
-function isRegistrationAgentVisible(reg) {
-  return reg.agentVisible ?? suggestedAgentVisible(reg);
-}
-var MCP_EXECUTABLE_IDENTITY_FIELDS = ["type", "url", "command", "args", "npmPackage", "pypiPackage"];
-function sameExecutableIdentity(a, b) {
-  let argsA = a.args ?? [], argsB = b.args ?? [];
-  return a.type === b.type && a.url === b.url && a.command === b.command && a.npmPackage === b.npmPackage && a.pypiPackage === b.pypiPackage && argsA.length === argsB.length && argsA.every((arg, i) => arg === argsB[i]);
-}
-function deriveRegistrationTestPlan(reg, opts) {
-  if (reg.type === "http" || !!reg.url) {
-    let notes2 = reg.oauth ? ["Interactive OAuth sign-in runs in a browser during this test."] : [];
-    return { location: "remote http", authMode: reg.oauth ? "run" : "none", materializeFiles: !1, notes: notes2 };
-  }
-  if (reg.runLocation === "host") {
-    if (!opts?.hostAccessEnabled) {
-      let notes2 = ["Host access is disabled app-wide \u2014 this test ran in the shared container. Enable host access in Settings \u2192 Compute to test on the host."];
-      return reg.auth && notes2.push("Authorization for containerized servers happens per-agent when an agent attaches this server."), { location: "shared container", authMode: reg.auth ? "skip" : "none", materializeFiles: !1, notes: notes2 };
-    }
-    return {
-      location: "host",
-      authMode: reg.auth ? "run" : "none",
-      materializeFiles: !0,
-      notes: []
-    };
-  }
-  let notes = [];
-  return reg.auth && notes.push("Authorization for containerized servers happens per-agent when an agent attaches this server."), reg.credentialFiles?.length && notes.push("Credential files for containerized servers are captured per-agent at attach; this test verifies the package launches and lists tools."), { location: "shared container", authMode: reg.auth ? "skip" : "none", materializeFiles: !1, notes };
-}
-function registrationSourceIdentity(reg) {
-  return reg.type === "http" || reg.url ? reg.url ? `http:${reg.url}` : "http" : reg.npmPackage ? `npm:${reg.npmPackage}` : reg.pypiPackage ? `uvx:${reg.pypiPackage}` : "custom";
-}
-function reconcileHostApprovedRegistrations(prev, next, approved, approvedSources) {
-  let result = [...approved], sources = { ...approvedSources ?? {} }, prevByName = new Map(prev.filter((r) => r.name).map((r) => [r.name, r])), nextByName = new Map(next.filter((r) => r.name).map((r) => [r.name, r])), add = (name, reg) => {
-    result.includes(name) || result.push(name), sources[name] = registrationSourceIdentity(reg);
-  }, remove = (name) => {
-    let i = result.indexOf(name);
-    i >= 0 && result.splice(i, 1), delete sources[name];
-  };
-  for (let [name, reg] of nextByName) {
-    let wasHost = prevByName.get(name)?.runLocation === "host", isHost = reg.runLocation === "host" && reg.type !== "http";
-    isHost && !wasHost ? add(name, reg) : !isHost && wasHost ? remove(name) : isHost && wasHost && result.includes(name) && (sources[name] = registrationSourceIdentity(reg));
-  }
-  for (let [name, reg] of prevByName)
-    !nextByName.has(name) && reg.runLocation === "host" && remove(name);
-  return { approved: result, sources };
-}
-
-export {
-  mcpCredentialRef,
-  isSensitiveMcpHeader,
-  buildEnvSchemaFromKeys,
-  buildHeaderEnvSchemaFromEntries,
-  buildMcpServerConfigFromRegistration,
-  pinServerConfigToRegistration,
-  isRegistrationAgentVisible,
-  mcp_config_exports
-};