@agimon-ai/doompi-mcp 0.0.1-alpha.9 → 0.0.1-alpha.90

package/README.md

@@ -1,35 +1,135 @@
 # @agimon-ai/doompi-mcp
 
-MCP server tools for Doompi.
+Domain-aware MCP selection for DoomPi and a standalone MCP adapter for Pi.
 
-The MCP adapter. Resolves the servers a selection allows and exposes them to the session, so
-a domain with an `mcp` allowlist reaches only the servers and proxy upstreams it names.
+Part of the [DoomPi distribution](https://www.npmjs.com/package/@agimon-ai/doompi).
 
-Part of [Doompi](https://www.npmjs.com/package/@agimon-ai/doompi), a coding agent that loads
-only the skills and tools you name. This package is composed by Doompi and is not usually
-installed on its own.
+The package removes disallowed servers before any stdio process is spawned. A filtered server is
+absent rather than merely hidden from the model.
+
+> **Alpha:** configuration and adapter contracts may change between releases.
+
+## Requirements
+
+- Node.js 22.19.0 or newer
+- Pi 0.85.0 and Pi TUI 0.85.0
 
 ## Install
 
+`doompi init` and `dpi init` include this adapter in `default.packages` in `.doom/modes.yaml`.
+Remove it or move it to a named layer to change which major modes load it. When loaded in DoomPi,
+domain selection controls server access. For plain Pi:
+
 ```bash
-npm install @agimon-ai/doompi-mcp
+pi install npm:@agimon-ai/doompi-mcp
+```
+
+| Entry                                 | Purpose                                                    |
+| ------------------------------------- | ---------------------------------------------------------- |
+| `@agimon-ai/doompi-mcp/extensions/pi` | Standard Pi adapter using repository and domain MCP config |
+| `@agimon-ai/doompi-mcp`               | Library API                                                |
+| `@agimon-ai/doompi-mcp/projection`    | Neutral projection adapter and Agent Plugin normalization  |
+
+## Configure direct servers
+
+Repository `.mcp.json` entries describe direct MCP servers:
+
+```json
+{
+  "mcpServers": {
+    "filesystem": {
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-filesystem", "."]
+    }
+  }
+}
+```
+
+Selected legacy plugins may also provide root `.mcp.json`. A schema-gated Agent Plugin v1 instead
+provides root `mcp.json`. Doom validates its portable contract, supplies private persistent
+`PLUGIN_DATA`, and resolves plugin-relative stdio commands and working directories. It also
+normalizes `streamable-http` for the embedded runtime. Invalid portable server entries are isolated
+from the other entries in that plugin.
+
+Proxy upstreams are read from `mcp-config.yaml`. Domains can select direct `servers` and proxy
+upstreams separately in `.doom/domains.yaml`:
+
+```yaml
+# .doom/domains.yaml
+domains:
+  development:
+    description: Repository development tools.
+    mcp:
+      servers: [filesystem]
+      proxy: [github]
+```
+
+An absent or empty allowlist retains configured entries. Use `doompi --no-mcp` when no MCP server
+should load. In plain Pi mode, no DoomPi domain allowlist is applied.
+
+Within DoomPi, this package consumes the immutable `doomMcpProjection` service published on the
+session Cordis root. Each Pi reload disposes the old injected runtime before the replacement binds.
+Downstream clients run in-process through `@agimon-ai/mcp-proxy`; this adapter does not start its
+Hono server.
+
+## Commands
+
+```text
+/mcp
+/mcp status
+/mcp auth <server>
+/mcp reload
 ```
 
-## How it loads
+In a TUI, the bare `/mcp` command opens the interactive overlay. In the web cockpit, the focused
+session's Context panel lists only servers currently waiting for authorization. Its `authorize`
+action sends one `/mcp auth <server>` prompt frame to that session. The authorization URL then appears
+as a clickable notice in the transcript. Headless hosts never open a desktop browser automatically.
+
+The live browser status is intentionally compact: `doom-mcp-session-auth` contains JSON rows shaped
+as `[{"name":"server","state":"needs-auth"}]` and is cleared when no server needs authorization.
+It never includes authorization URLs, errors, credentials, or credential-store data. Repository
+catalog and authorization APIs remain separate from this live-session view.
 
-Doompi loads this unconditionally. It is core, not a layer, so it does not appear in
-`.doom/modes.yaml`: making it optional would only create broken configurations.
+## Credentials and trust
 
-Extension entry: `@agimon-ai/doompi-mcp/extensions/pi`
+Allowed stdio entries execute their configured commands with the Pi process environment and
+operating system privileges. Review configuration as executable code.
 
-## Entry points
+OAuth credentials use the operating system keyring when available. The private-file fallback is
+stored under `~/.mcp-proxy/oauth` with owner-only permissions. Credentials remain machine-wide and
+keyed by server name, while their upstream URL binding prevents blind replay to another endpoint.
+Treat both the configuration and credential store as sensitive.
+
+The default OAuth callback is `http://127.0.0.1:19876/callback`. Authorization therefore requires the
+browser and DoomPi runtime to share that loopback network namespace. A remote browser cannot complete
+the callback when its `127.0.0.1` resolves to another machine or container.
+
+## Public API
+
+```ts
+import { buildMcpConfigGroups, readCachedCatalog, registerMcpExtension, toPiToolName } from '@agimon-ai/doompi-mcp';
+import type { McpAllowlist, McpSessionConfig } from '@agimon-ai/doompi-mcp';
+```
 
-| Import                                  |
-| --------------------------------------- |
-| `@agimon-ai/doompi-mcp`                 |
-| `@agimon-ai/doompi-mcp/extensions/pi`   |
-| `@agimon-ai/doompi-mcp/extensions/doom` |
+`doompi --emit-mcp <directory>` emits the resolved MCP configuration to the target directory
+without launching a model.
+
+## Development
+
+```bash
+pnpm build
+pnpm typecheck
+pnpm test
+pnpm lint
+```
+
+Maintained by [Agimon](https://agimon.ai/about).
 
 ## License
 
 MIT
+
+The direct `src/extensions/` entries declare host contributions. MCP session state and connection behavior live in named service folders; controllers handle commands and API requests. `tools/` produces typed declarations, and `exports/` exposes reusable public APIs.
+
+Pi tools use a live collection. The helper subscribes to discovery changes and owns registrations and cleanup. Unchanged tools retain their declaration identity across reconnects. Removed tools are unavailable, and incompatible schema reuse stays hidden until the runtime is relaunched. Renderer callbacks enter through the Pi extension, keeping services independent of terminal presentation.

package/dist/apiContracts.cjs

@@ -0,0 +1,138 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+let _agimon_ai_doompi_core_apiContracts = require("@agimon-ai/doompi-core/apiContracts");
+let typebox = require("typebox");
+//#region src/schemas/apiContracts.ts
+const S = typebox.Type.String();
+const N = typebox.Type.Number();
+const B = typebox.Type.Boolean();
+const O = typebox.Type.Optional;
+const literals = (values) => typebox.Type.Union(values.map((value) => typebox.Type.Literal(value)));
+const RepositoryId = typebox.Type.String({ pattern: "^(?:[a-f0-9]{32}|repo-[A-Za-z0-9_-]{24})$" });
+const RepositoryQuery = [{
+	name: "repositoryId",
+	in: "query",
+	required: true,
+	schema: RepositoryId
+}];
+const McpCatalogSchema = typebox.Type.Object({
+	repositoryId: S,
+	sync: typebox.Type.Object({
+		fresh: B,
+		reasons: typebox.Type.Array(S)
+	}),
+	servers: typebox.Type.Array(typebox.Type.Object({
+		name: S,
+		state: literals([
+			"not-connected",
+			"connecting",
+			"connected",
+			"degraded",
+			"needs-auth",
+			"failed",
+			"closed"
+		]),
+		source: literals([
+			"cached",
+			"live",
+			"configured"
+		]),
+		credentialPresent: B,
+		tools: typebox.Type.Array(typebox.Type.Object({
+			name: S,
+			piName: S,
+			description: O(S)
+		})),
+		error: O(S)
+	})),
+	droppedServers: typebox.Type.Array(S),
+	diagnostics: typebox.Type.Array(S)
+});
+const McpAuthorizationSchema = typebox.Type.Object({
+	id: S,
+	repositoryId: S,
+	serverName: S,
+	status: literals([
+		"starting",
+		"waiting",
+		"completed",
+		"failed",
+		"cancelled",
+		"expired"
+	]),
+	authorizationUrl: O(S),
+	error: O(S),
+	expiresAt: N
+});
+const apiContracts = (0, _agimon_ai_doompi_core_apiContracts.defineApiContract)({
+	version: 1,
+	sockets: [],
+	dynamic: [],
+	http: ["global", "workspace"].flatMap((scope) => [
+		{
+			id: "mcp.catalog",
+			scope,
+			basePath: "mcp",
+			path: "/repository",
+			method: "GET",
+			authentication: "owner",
+			description: "Read the synced MCP repository catalog.",
+			parameters: RepositoryQuery,
+			responses: (0, _agimon_ai_doompi_core_apiContracts.jsonApiResponses)(McpCatalogSchema)
+		},
+		{
+			id: "mcp.discover",
+			scope,
+			basePath: "mcp",
+			path: "/repository/discover",
+			method: "POST",
+			authentication: "owner",
+			description: "Discover repository MCP servers.",
+			body: {
+				required: true,
+				contentType: "application/json",
+				schema: typebox.Type.Object({ repositoryId: RepositoryId })
+			},
+			responses: (0, _agimon_ai_doompi_core_apiContracts.jsonApiResponses)(McpCatalogSchema)
+		},
+		{
+			id: "mcp.authorize",
+			scope,
+			basePath: "mcp",
+			path: "/repository/authorize",
+			method: "POST",
+			authentication: "owner",
+			description: "Start MCP authorization.",
+			body: {
+				required: true,
+				contentType: "application/json",
+				schema: typebox.Type.Object({
+					repositoryId: RepositoryId,
+					serverName: typebox.Type.String({
+						minLength: 1,
+						maxLength: 160
+					})
+				})
+			},
+			responses: (0, _agimon_ai_doompi_core_apiContracts.jsonApiResponses)(McpAuthorizationSchema, 202)
+		},
+		...["GET", "DELETE"].map((method) => ({
+			id: `mcp.authorization.${method}`,
+			scope,
+			basePath: "mcp",
+			path: "/repository/authorize/{flowId}",
+			method,
+			authentication: "owner",
+			description: method === "GET" ? "Read an authorization flow." : "Cancel an authorization flow.",
+			parameters: RepositoryQuery,
+			responses: (0, _agimon_ai_doompi_core_apiContracts.jsonApiResponses)(McpAuthorizationSchema)
+		}))
+	])
+});
+//#endregion
+exports.apiContracts = apiContracts;
+exports.default = apiContracts;
+
+//# sourceMappingURL=apiContracts.cjs.map

package/dist/apiContracts.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.cjs","names":["Type","defineApiContract","jsonApiResponses"],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses } from '@agimon-ai/doompi-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst S = Type.String();\nconst N = Type.Number();\nconst B = Type.Boolean();\nconst O = Type.Optional;\nconst literals = <T extends string>(values: T[]) => Type.Union(values.map((value) => Type.Literal(value)));\nconst RepositoryId = Type.String({ pattern: '^(?:[a-f0-9]{32}|repo-[A-Za-z0-9_-]{24})$' });\nconst RepositoryQuery = [{ name: 'repositoryId', in: 'query' as const, required: true, schema: RepositoryId }];\nexport const McpCatalogSchema = Type.Object({\n  repositoryId: S,\n  sync: Type.Object({ fresh: B, reasons: Type.Array(S) }),\n  servers: Type.Array(\n    Type.Object({\n      name: S,\n      state: literals(['not-connected', 'connecting', 'connected', 'degraded', 'needs-auth', 'failed', 'closed']),\n      source: literals(['cached', 'live', 'configured']),\n      credentialPresent: B,\n      tools: Type.Array(Type.Object({ name: S, piName: S, description: O(S) })),\n      error: O(S),\n    }),\n  ),\n  droppedServers: Type.Array(S),\n  diagnostics: Type.Array(S),\n});\nexport const McpAuthorizationSchema = Type.Object({\n  id: S,\n  repositoryId: S,\n  serverName: S,\n  status: literals(['starting', 'waiting', 'completed', 'failed', 'cancelled', 'expired']),\n  authorizationUrl: O(S),\n  error: O(S),\n  expiresAt: N,\n});\nexport const apiContracts = defineApiContract({\n  version: 1,\n  sockets: [],\n  dynamic: [],\n  http: (['global', 'workspace'] as const).flatMap((scope) => [\n    {\n      id: 'mcp.catalog',\n      scope,\n      basePath: 'mcp',\n      path: '/repository',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read the synced MCP repository catalog.',\n      parameters: RepositoryQuery,\n      responses: jsonApiResponses(McpCatalogSchema),\n    },\n    {\n      id: 'mcp.discover',\n      scope,\n      basePath: 'mcp',\n      path: '/repository/discover',\n      method: 'POST',\n      authentication: 'owner',\n      description: 'Discover repository MCP servers.',\n      body: { required: true, contentType: 'application/json', schema: Type.Object({ repositoryId: RepositoryId }) },\n      responses: jsonApiResponses(McpCatalogSchema),\n    },\n    {\n      id: 'mcp.authorize',\n      scope,\n      basePath: 'mcp',\n      path: '/repository/authorize',\n      method: 'POST',\n      authentication: 'owner',\n      description: 'Start MCP authorization.',\n      body: {\n        required: true,\n        contentType: 'application/json',\n        schema: Type.Object({ repositoryId: RepositoryId, serverName: Type.String({ minLength: 1, maxLength: 160 }) }),\n      },\n      responses: jsonApiResponses(McpAuthorizationSchema, 202),\n    },\n    ...(['GET', 'DELETE'] as const).map((method) => ({\n      id: `mcp.authorization.${method}`,\n      scope,\n      basePath: 'mcp',\n      path: '/repository/authorize/{flowId}',\n      method,\n      authentication: 'owner' as const,\n      description: method === 'GET' ? 'Read an authorization flow.' : 'Cancel an authorization flow.',\n      parameters: RepositoryQuery,\n      responses: jsonApiResponses(McpAuthorizationSchema),\n    })),\n  ]),\n});\nexport default apiContracts;\n"],"mappings":";;;;;;;AAGA,MAAM,IAAIA,QAAAA,KAAK,OAAO;AACtB,MAAM,IAAIA,QAAAA,KAAK,OAAO;AACtB,MAAM,IAAIA,QAAAA,KAAK,QAAQ;AACvB,MAAM,IAAIA,QAAAA,KAAK;AACf,MAAM,YAA8B,WAAgBA,QAAAA,KAAK,MAAM,OAAO,KAAK,UAAUA,QAAAA,KAAK,QAAQ,KAAK,CAAC,CAAC;AACzG,MAAM,eAAeA,QAAAA,KAAK,OAAO,EAAE,SAAS,4CAA4C,CAAC;AACzF,MAAM,kBAAkB,CAAC;CAAE,MAAM;CAAgB,IAAI;CAAkB,UAAU;CAAM,QAAQ;AAAa,CAAC;AAC7G,MAAa,mBAAmBA,QAAAA,KAAK,OAAO;CAC1C,cAAc;CACd,MAAMA,QAAAA,KAAK,OAAO;EAAE,OAAO;EAAG,SAASA,QAAAA,KAAK,MAAM,CAAC;CAAE,CAAC;CACtD,SAASA,QAAAA,KAAK,MACZA,QAAAA,KAAK,OAAO;EACV,MAAM;EACN,OAAO,SAAS;GAAC;GAAiB;GAAc;GAAa;GAAY;GAAc;GAAU;EAAQ,CAAC;EAC1G,QAAQ,SAAS;GAAC;GAAU;GAAQ;EAAY,CAAC;EACjD,mBAAmB;EACnB,OAAOA,QAAAA,KAAK,MAAMA,QAAAA,KAAK,OAAO;GAAE,MAAM;GAAG,QAAQ;GAAG,aAAa,EAAE,CAAC;EAAE,CAAC,CAAC;EACxE,OAAO,EAAE,CAAC;CACZ,CAAC,CACH;CACA,gBAAgBA,QAAAA,KAAK,MAAM,CAAC;CAC5B,aAAaA,QAAAA,KAAK,MAAM,CAAC;AAC3B,CAAC;AACD,MAAa,yBAAyBA,QAAAA,KAAK,OAAO;CAChD,IAAI;CACJ,cAAc;CACd,YAAY;CACZ,QAAQ,SAAS;EAAC;EAAY;EAAW;EAAa;EAAU;EAAa;CAAS,CAAC;CACvF,kBAAkB,EAAE,CAAC;CACrB,OAAO,EAAE,CAAC;CACV,WAAW;AACb,CAAC;AACD,MAAa,gBAAA,GAAeC,oCAAAA,kBAAAA,CAAkB;CAC5C,SAAS;CACT,SAAS,CAAC;CACV,SAAS,CAAC;CACV,MAAO,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU;EAC1D;GACE,IAAI;GACJ;GACA,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAY;GACZ,YAAA,GAAWC,oCAAAA,iBAAAA,CAAiB,gBAAgB;EAC9C;EACA;GACE,IAAI;GACJ;GACA,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,MAAM;IAAE,UAAU;IAAM,aAAa;IAAoB,QAAQF,QAAAA,KAAK,OAAO,EAAE,cAAc,aAAa,CAAC;GAAE;GAC7G,YAAA,GAAWE,oCAAAA,iBAAAA,CAAiB,gBAAgB;EAC9C;EACA;GACE,IAAI;GACJ;GACA,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQF,QAAAA,KAAK,OAAO;KAAE,cAAc;KAAc,YAAYA,QAAAA,KAAK,OAAO;MAAE,WAAW;MAAG,WAAW;KAAI,CAAC;IAAE,CAAC;GAC/G;GACA,YAAA,GAAWE,oCAAAA,iBAAAA,CAAiB,wBAAwB,GAAG;EACzD;EACA,GAAI,CAAC,OAAO,QAAQ,CAAC,CAAW,KAAK,YAAY;GAC/C,IAAI,qBAAqB;GACzB;GACA,UAAU;GACV,MAAM;GACN;GACA,gBAAgB;GAChB,aAAa,WAAW,QAAQ,gCAAgC;GAChE,YAAY;GACZ,YAAA,GAAWA,oCAAAA,iBAAAA,CAAiB,sBAAsB;EACpD,EAAE;CACJ,CAAC;AACH,CAAC"}

package/dist/apiContracts.d.mts

@@ -0,0 +1,53 @@
+import { Type } from "typebox";
+//#region src/schemas/apiContracts.d.ts
+export declare const apiContracts: {
+  version: 1;
+  protocols?: Record<string, string> | undefined;
+  schemas?: Record<string, boolean | object> | undefined;
+  http: {
+    id: string;
+    scope: "global" | "session" | "workspace";
+    basePath?: string | undefined;
+    path: string;
+    method: "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PUT";
+    description: string;
+    availability?: string | undefined;
+    authentication: "device" | "none" | "owner";
+    parameters?: {
+      name: string;
+      in: "header" | "path" | "query";
+      required: boolean;
+      schema: boolean | object;
+    }[] | undefined;
+    body?: {
+      contentType: string;
+      contentTypes?: string[] | undefined;
+      required: boolean;
+      schema: boolean | object;
+    } | undefined;
+    responses: Record<string, {
+      description: string;
+      contentType?: string | undefined;
+      schema?: boolean | object | undefined;
+      events?: Record<string, boolean | object> | undefined;
+    }>;
+  }[];
+  sockets: {
+    id: string;
+    scope: "global" | "session" | "workspace";
+    description: string;
+    availability?: string | undefined;
+    service: string;
+    member: string;
+    direction: "client-to-server" | "server-to-client";
+    kind: "channel" | "method" | "state";
+    input: boolean | object;
+    output?: boolean | object | undefined;
+    errors?: boolean | object | undefined;
+  }[];
+  dynamic: string[];
+  gaps?: string[] | undefined;
+};
+//#endregion
+export { apiContracts as default };
+//# sourceMappingURL=apiContracts.d.mts.map

package/dist/apiContracts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.d.mts","names":[],"sources":["../src/schemas/apiContracts.ts"],"mappings":";;qBAmCa"}

package/dist/apiContracts.mjs

@@ -0,0 +1,133 @@
+import { defineApiContract, jsonApiResponses } from "@agimon-ai/doompi-core/apiContracts";
+import { Type } from "typebox";
+//#region src/schemas/apiContracts.ts
+const S = Type.String();
+const N = Type.Number();
+const B = Type.Boolean();
+const O = Type.Optional;
+const literals = (values) => Type.Union(values.map((value) => Type.Literal(value)));
+const RepositoryId = Type.String({ pattern: "^(?:[a-f0-9]{32}|repo-[A-Za-z0-9_-]{24})$" });
+const RepositoryQuery = [{
+	name: "repositoryId",
+	in: "query",
+	required: true,
+	schema: RepositoryId
+}];
+const McpCatalogSchema = Type.Object({
+	repositoryId: S,
+	sync: Type.Object({
+		fresh: B,
+		reasons: Type.Array(S)
+	}),
+	servers: Type.Array(Type.Object({
+		name: S,
+		state: literals([
+			"not-connected",
+			"connecting",
+			"connected",
+			"degraded",
+			"needs-auth",
+			"failed",
+			"closed"
+		]),
+		source: literals([
+			"cached",
+			"live",
+			"configured"
+		]),
+		credentialPresent: B,
+		tools: Type.Array(Type.Object({
+			name: S,
+			piName: S,
+			description: O(S)
+		})),
+		error: O(S)
+	})),
+	droppedServers: Type.Array(S),
+	diagnostics: Type.Array(S)
+});
+const McpAuthorizationSchema = Type.Object({
+	id: S,
+	repositoryId: S,
+	serverName: S,
+	status: literals([
+		"starting",
+		"waiting",
+		"completed",
+		"failed",
+		"cancelled",
+		"expired"
+	]),
+	authorizationUrl: O(S),
+	error: O(S),
+	expiresAt: N
+});
+const apiContracts = defineApiContract({
+	version: 1,
+	sockets: [],
+	dynamic: [],
+	http: ["global", "workspace"].flatMap((scope) => [
+		{
+			id: "mcp.catalog",
+			scope,
+			basePath: "mcp",
+			path: "/repository",
+			method: "GET",
+			authentication: "owner",
+			description: "Read the synced MCP repository catalog.",
+			parameters: RepositoryQuery,
+			responses: jsonApiResponses(McpCatalogSchema)
+		},
+		{
+			id: "mcp.discover",
+			scope,
+			basePath: "mcp",
+			path: "/repository/discover",
+			method: "POST",
+			authentication: "owner",
+			description: "Discover repository MCP servers.",
+			body: {
+				required: true,
+				contentType: "application/json",
+				schema: Type.Object({ repositoryId: RepositoryId })
+			},
+			responses: jsonApiResponses(McpCatalogSchema)
+		},
+		{
+			id: "mcp.authorize",
+			scope,
+			basePath: "mcp",
+			path: "/repository/authorize",
+			method: "POST",
+			authentication: "owner",
+			description: "Start MCP authorization.",
+			body: {
+				required: true,
+				contentType: "application/json",
+				schema: Type.Object({
+					repositoryId: RepositoryId,
+					serverName: Type.String({
+						minLength: 1,
+						maxLength: 160
+					})
+				})
+			},
+			responses: jsonApiResponses(McpAuthorizationSchema, 202)
+		},
+		...["GET", "DELETE"].map((method) => ({
+			id: `mcp.authorization.${method}`,
+			scope,
+			basePath: "mcp",
+			path: "/repository/authorize/{flowId}",
+			method,
+			authentication: "owner",
+			description: method === "GET" ? "Read an authorization flow." : "Cancel an authorization flow.",
+			parameters: RepositoryQuery,
+			responses: jsonApiResponses(McpAuthorizationSchema)
+		}))
+	])
+});
+//#endregion
+export { apiContracts, apiContracts as default };
+
+//# sourceMappingURL=apiContracts.mjs.map

package/dist/apiContracts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiContracts.mjs","names":[],"sources":["../src/schemas/apiContracts.ts"],"sourcesContent":["import { defineApiContract, jsonApiResponses } from '@agimon-ai/doompi-core/apiContracts';\nimport { Type } from 'typebox';\n\nconst S = Type.String();\nconst N = Type.Number();\nconst B = Type.Boolean();\nconst O = Type.Optional;\nconst literals = <T extends string>(values: T[]) => Type.Union(values.map((value) => Type.Literal(value)));\nconst RepositoryId = Type.String({ pattern: '^(?:[a-f0-9]{32}|repo-[A-Za-z0-9_-]{24})$' });\nconst RepositoryQuery = [{ name: 'repositoryId', in: 'query' as const, required: true, schema: RepositoryId }];\nexport const McpCatalogSchema = Type.Object({\n  repositoryId: S,\n  sync: Type.Object({ fresh: B, reasons: Type.Array(S) }),\n  servers: Type.Array(\n    Type.Object({\n      name: S,\n      state: literals(['not-connected', 'connecting', 'connected', 'degraded', 'needs-auth', 'failed', 'closed']),\n      source: literals(['cached', 'live', 'configured']),\n      credentialPresent: B,\n      tools: Type.Array(Type.Object({ name: S, piName: S, description: O(S) })),\n      error: O(S),\n    }),\n  ),\n  droppedServers: Type.Array(S),\n  diagnostics: Type.Array(S),\n});\nexport const McpAuthorizationSchema = Type.Object({\n  id: S,\n  repositoryId: S,\n  serverName: S,\n  status: literals(['starting', 'waiting', 'completed', 'failed', 'cancelled', 'expired']),\n  authorizationUrl: O(S),\n  error: O(S),\n  expiresAt: N,\n});\nexport const apiContracts = defineApiContract({\n  version: 1,\n  sockets: [],\n  dynamic: [],\n  http: (['global', 'workspace'] as const).flatMap((scope) => [\n    {\n      id: 'mcp.catalog',\n      scope,\n      basePath: 'mcp',\n      path: '/repository',\n      method: 'GET',\n      authentication: 'owner',\n      description: 'Read the synced MCP repository catalog.',\n      parameters: RepositoryQuery,\n      responses: jsonApiResponses(McpCatalogSchema),\n    },\n    {\n      id: 'mcp.discover',\n      scope,\n      basePath: 'mcp',\n      path: '/repository/discover',\n      method: 'POST',\n      authentication: 'owner',\n      description: 'Discover repository MCP servers.',\n      body: { required: true, contentType: 'application/json', schema: Type.Object({ repositoryId: RepositoryId }) },\n      responses: jsonApiResponses(McpCatalogSchema),\n    },\n    {\n      id: 'mcp.authorize',\n      scope,\n      basePath: 'mcp',\n      path: '/repository/authorize',\n      method: 'POST',\n      authentication: 'owner',\n      description: 'Start MCP authorization.',\n      body: {\n        required: true,\n        contentType: 'application/json',\n        schema: Type.Object({ repositoryId: RepositoryId, serverName: Type.String({ minLength: 1, maxLength: 160 }) }),\n      },\n      responses: jsonApiResponses(McpAuthorizationSchema, 202),\n    },\n    ...(['GET', 'DELETE'] as const).map((method) => ({\n      id: `mcp.authorization.${method}`,\n      scope,\n      basePath: 'mcp',\n      path: '/repository/authorize/{flowId}',\n      method,\n      authentication: 'owner' as const,\n      description: method === 'GET' ? 'Read an authorization flow.' : 'Cancel an authorization flow.',\n      parameters: RepositoryQuery,\n      responses: jsonApiResponses(McpAuthorizationSchema),\n    })),\n  ]),\n});\nexport default apiContracts;\n"],"mappings":";;;AAGA,MAAM,IAAI,KAAK,OAAO;AACtB,MAAM,IAAI,KAAK,OAAO;AACtB,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAM,IAAI,KAAK;AACf,MAAM,YAA8B,WAAgB,KAAK,MAAM,OAAO,KAAK,UAAU,KAAK,QAAQ,KAAK,CAAC,CAAC;AACzG,MAAM,eAAe,KAAK,OAAO,EAAE,SAAS,4CAA4C,CAAC;AACzF,MAAM,kBAAkB,CAAC;CAAE,MAAM;CAAgB,IAAI;CAAkB,UAAU;CAAM,QAAQ;AAAa,CAAC;AAC7G,MAAa,mBAAmB,KAAK,OAAO;CAC1C,cAAc;CACd,MAAM,KAAK,OAAO;EAAE,OAAO;EAAG,SAAS,KAAK,MAAM,CAAC;CAAE,CAAC;CACtD,SAAS,KAAK,MACZ,KAAK,OAAO;EACV,MAAM;EACN,OAAO,SAAS;GAAC;GAAiB;GAAc;GAAa;GAAY;GAAc;GAAU;EAAQ,CAAC;EAC1G,QAAQ,SAAS;GAAC;GAAU;GAAQ;EAAY,CAAC;EACjD,mBAAmB;EACnB,OAAO,KAAK,MAAM,KAAK,OAAO;GAAE,MAAM;GAAG,QAAQ;GAAG,aAAa,EAAE,CAAC;EAAE,CAAC,CAAC;EACxE,OAAO,EAAE,CAAC;CACZ,CAAC,CACH;CACA,gBAAgB,KAAK,MAAM,CAAC;CAC5B,aAAa,KAAK,MAAM,CAAC;AAC3B,CAAC;AACD,MAAa,yBAAyB,KAAK,OAAO;CAChD,IAAI;CACJ,cAAc;CACd,YAAY;CACZ,QAAQ,SAAS;EAAC;EAAY;EAAW;EAAa;EAAU;EAAa;CAAS,CAAC;CACvF,kBAAkB,EAAE,CAAC;CACrB,OAAO,EAAE,CAAC;CACV,WAAW;AACb,CAAC;AACD,MAAa,eAAe,kBAAkB;CAC5C,SAAS;CACT,SAAS,CAAC;CACV,SAAS,CAAC;CACV,MAAO,CAAC,UAAU,WAAW,CAAC,CAAW,SAAS,UAAU;EAC1D;GACE,IAAI;GACJ;GACA,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,YAAY;GACZ,WAAW,iBAAiB,gBAAgB;EAC9C;EACA;GACE,IAAI;GACJ;GACA,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,MAAM;IAAE,UAAU;IAAM,aAAa;IAAoB,QAAQ,KAAK,OAAO,EAAE,cAAc,aAAa,CAAC;GAAE;GAC7G,WAAW,iBAAiB,gBAAgB;EAC9C;EACA;GACE,IAAI;GACJ;GACA,UAAU;GACV,MAAM;GACN,QAAQ;GACR,gBAAgB;GAChB,aAAa;GACb,MAAM;IACJ,UAAU;IACV,aAAa;IACb,QAAQ,KAAK,OAAO;KAAE,cAAc;KAAc,YAAY,KAAK,OAAO;MAAE,WAAW;MAAG,WAAW;KAAI,CAAC;IAAE,CAAC;GAC/G;GACA,WAAW,iBAAiB,wBAAwB,GAAG;EACzD;EACA,GAAI,CAAC,OAAO,QAAQ,CAAC,CAAW,KAAK,YAAY;GAC/C,IAAI,qBAAqB;GACzB;GACA,UAAU;GACV,MAAM;GACN;GACA,gBAAgB;GAChB,aAAa,WAAW,QAAQ,gCAAgC;GAChE,YAAY;GACZ,WAAW,iBAAiB,sBAAsB;EACpD,EAAE;CACJ,CAAC;AACH,CAAC"}

package/dist/extensions/mcp-ui.mjs

@@ -0,0 +1,31 @@
+import { defineMcpWidget } from "@agimon-ai/doompi-core/web";
+import { McpToolFields, McpToolFrame, McpToolOutput } from "@agimon-ai/doompi-web-components";
+import { jsx, jsxs } from "react/jsx-runtime";
+//#region src/extensions/workspaces/sessions/(frontend)/tool/mcp_use.mcp.tsx
+function McpUseMcpWidget(props) {
+	return /* @__PURE__ */ jsxs(McpToolFrame, {
+		...props,
+		title: "Call MCP tool",
+		children: [/* @__PURE__ */ jsx(McpToolFields, { fields: [["Server", props.args.server], ["Tool", props.args.tool]] }), /* @__PURE__ */ jsx(McpToolOutput, { result: props.result })]
+	});
+}
+var mcp_use_mcp_default = defineMcpWidget(McpUseMcpWidget);
+//#endregion
+//#region src/extensions/workspaces/sessions/(frontend)/tool/session_mcp.mcp.tsx
+function SessionMcpMcpWidget(props) {
+	return /* @__PURE__ */ jsx(McpToolFrame, {
+		...props,
+		title: props.toolName,
+		children: /* @__PURE__ */ jsx(McpToolOutput, { result: props.result })
+	});
+}
+//#endregion
+//#region generated/mcp-ui.ts
+const widgets = {
+	"@agimon-ai/doompi-mcp/mcp_use": mcp_use_mcp_default,
+	"@agimon-ai/doompi-mcp/session_mcp": defineMcpWidget(SessionMcpMcpWidget)
+};
+//#endregion
+export { widgets };
+
+//# sourceMappingURL=mcp-ui.mjs.map

package/dist/extensions/mcp-ui.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-ui.mjs","names":["Widget0","Widget1"],"sources":["../../src/extensions/workspaces/sessions/(frontend)/tool/mcp_use.mcp.tsx","../../src/extensions/workspaces/sessions/(frontend)/tool/session_mcp.mcp.tsx","../../generated/mcp-ui.ts"],"sourcesContent":["import { defineMcpWidget, type DoomMcpWidgetProps } from '@agimon-ai/doompi-core/web';\nimport { McpToolFrame, McpToolFields, McpToolOutput } from '@agimon-ai/doompi-web-components';\n\nfunction McpUseMcpWidget(props: DoomMcpWidgetProps) {\n  return (\n    <McpToolFrame {...props} title=\"Call MCP tool\">\n      <McpToolFields\n        fields={[\n          ['Server', props.args.server],\n          ['Tool', props.args.tool],\n        ]}\n      />\n      <McpToolOutput result={props.result} />\n    </McpToolFrame>\n  );\n}\n\nexport default defineMcpWidget(McpUseMcpWidget);\n","import { defineMcpWidget, type DoomMcpWidgetProps } from '@agimon-ai/doompi-core/web';\nimport { McpToolFrame, McpToolOutput } from '@agimon-ai/doompi-web-components';\n\nfunction SessionMcpMcpWidget(props: DoomMcpWidgetProps) {\n  return (\n    <McpToolFrame {...props} title={props.toolName}>\n      <McpToolOutput result={props.result} />\n    </McpToolFrame>\n  );\n}\n\nexport default defineMcpWidget(SessionMcpMcpWidget);\n","// Generated by @agimon-ai/doompi-build. Do not edit by hand.\nimport type { ComponentType } from 'react';\nimport type { DoomMcpWidgetProps } from '@agimon-ai/doompi-core/mcpWidget';\nimport Widget0 from \"../src/extensions/workspaces/sessions/(frontend)/tool/mcp_use.mcp\";\nimport Widget1 from \"../src/extensions/workspaces/sessions/(frontend)/tool/session_mcp.mcp\";\n\nexport const widgets: Readonly<Record<string, ComponentType<DoomMcpWidgetProps>>> = {\n  \"@agimon-ai/doompi-mcp/mcp_use\": Widget0,\n  \"@agimon-ai/doompi-mcp/session_mcp\": Widget1,\n};\n"],"mappings":";;;;AAGA,SAAS,gBAAgB,OAA2B;CAClD,OACE,qBAAC,cAAD;EAAc,GAAI;EAAO,OAAM;EAA/B,UAAA,CACE,oBAAC,eAAD,EACE,QAAQ,CACN,CAAC,UAAU,MAAM,KAAK,MAAM,GAC5B,CAAC,QAAQ,MAAM,KAAK,IAAI,CAC1B,EACD,CAAA,GACD,oBAAC,eAAD,EAAe,QAAQ,MAAM,OAAS,CAAA,CAC1B;;AAElB;AAEA,IAAA,sBAAe,gBAAgB,eAAe;;;ACd9C,SAAS,oBAAoB,OAA2B;CACtD,OACE,oBAAC,cAAD;EAAc,GAAI;EAAO,OAAO,MAAM;EACpC,UAAA,oBAAC,eAAD,EAAe,QAAQ,MAAM,OAAS,CAAA;CAC1B,CAAA;AAElB;;;ACHA,MAAa,UAAuE;CAClF,iCAAiCA;CACjC,qCDGa,gBAAgB,mBCHQC;AACvC"}

package/dist/extensions/mcp.cjs

@@ -0,0 +1,109 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+let _agimon_ai_doompi_core_mcpFacet = require("@agimon-ai/doompi-core/mcpFacet");
+let _agimon_ai_doompi_core_serverFacet = require("@agimon-ai/doompi-core/serverFacet");
+let _agimon_ai_doompi_core_extensionFile = require("@agimon-ai/doompi-core/extensionFile");
+require("typebox/value");
+let typebox = require("typebox");
+//#region src/extensions/workspaces/sessions/(backend)/skill/doompi-use-mcp.mcp.ts
+var doompi_use_mcp_mcp_default = (0, _agimon_ai_doompi_core_mcpFacet.defineMcpSkill)({
+	name: "doompi-use-mcp",
+	description: "Use Doom Pi MCP to inspect domain-scoped servers, authenticate, reload configuration, and troubleshoot tool availability.",
+	read: () => (0, _agimon_ai_doompi_core_serverFacet.readPackageResource)(require("url").pathToFileURL(__filename).href, "src/prompts/doompi-use-mcp/SKILL.md")
+});
+//#endregion
+//#region src/services/mcpHeadlessTools/index.ts
+const MCP_HEADLESS_TOOLS_SERVICE = "doom/mcp-headless-tools";
+function bindMcpHeadlessTool(context, name) {
+	const tool = context.services.get(MCP_HEADLESS_TOOLS_SERVICE)?.get(name);
+	if (!tool) throw new Error(`MCP tool is unavailable: ${name}`);
+	return {
+		...tool,
+		execute(toolCallId, parameters, signal, onUpdate) {
+			const executionSignal = AbortSignal.any([context.signal, signal ?? context.signal]);
+			return tool.execute(toolCallId, parameters, executionSignal, onUpdate, context.execution);
+		}
+	};
+}
+//#endregion
+//#region src/extensions/workspaces/sessions/(backend)/tool/mcp_use.mcp.ts
+var mcp_use_mcp_default = (0, _agimon_ai_doompi_core_mcpFacet.defineMcpTool)((context) => bindMcpHeadlessTool(context, "mcp_use"));
+typebox.Type.Object({
+	server: typebox.Type.String({ minLength: 1 }),
+	tool: typebox.Type.String({ minLength: 1 }),
+	arguments: typebox.Type.Optional(typebox.Type.Record(typebox.Type.String(), typebox.Type.Unknown()))
+});
+//#endregion
+//#region src/services/mcpSessionTools/index.ts
+const MCP_SESSION_TOOLS_SERVICE = "doom/mcp-session-tools";
+//#endregion
+//#region src/extensions/workspaces/sessions/(backend)/tool/session_mcp.mcp.ts
+function fingerprint(service) {
+	return JSON.stringify(service.snapshot().map((tool) => ({
+		name: tool.piName,
+		description: tool.description,
+		schema: tool.inputSchema,
+		annotations: tool.annotations,
+		outputSchema: tool.outputSchema
+	})));
+}
+var session_mcp_mcp_default = (0, _agimon_ai_doompi_core_extensionFile.defineRoutedContribution)((context) => {
+	const service = context.services.get(MCP_SESSION_TOOLS_SERVICE);
+	if (!service) return [];
+	let current = fingerprint(service);
+	const stop = service.onChange(() => {
+		const next = fingerprint(service);
+		if (next === current) return;
+		current = next;
+		context.refresh();
+	});
+	context.signal.addEventListener("abort", stop, { once: true });
+	return service.snapshot().map((tool) => ({
+		name: tool.piName,
+		label: `${tool.serverName}: ${tool.toolName}`,
+		description: tool.description ?? `${tool.toolName} on the ${tool.serverName} MCP server.`,
+		...tool.annotations === void 0 ? {} : { annotations: tool.annotations },
+		...tool.outputSchema === void 0 ? {} : { outputSchema: tool.outputSchema },
+		parameters: Object.keys(tool.inputSchema).length > 0 ? tool.inputSchema : {
+			type: "object",
+			properties: {}
+		},
+		execute: (_toolCallId, parameters, signal) => service.invoke(tool.piName, parameters ?? {}, AbortSignal.any([context.signal, signal ?? context.signal]))
+	}));
+}, { cardinality: "many" });
+//#endregion
+//#region generated/mcp.ts
+const at = (value, context) => typeof value === "function" ? value(context) : value;
+const many = (value, context) => {
+	const resolved = typeof value === "function" ? value(context) : value;
+	return Array.isArray(resolved) ? resolved : [resolved];
+};
+const via = (identity, value) => value === void 0 ? void 0 : {
+	...identity,
+	...value
+};
+const withWidget = (key, value) => value === void 0 ? value : {
+	...value,
+	_meta: {
+		...value._meta,
+		["doompi/widget"]: key
+	}
+};
+const mcp = (0, _agimon_ai_doompi_core_mcpFacet.defineMcpPlugin)({
+	name: "@agimon-ai/doompi-mcp",
+	session: (context) => ({
+		get skills() {
+			return [at(doompi_use_mcp_mcp_default, context)];
+		},
+		get tools() {
+			return [withWidget("@agimon-ai/doompi-mcp/mcp_use", via({ name: "mcp_use" }, at(mcp_use_mcp_default, context))), ...many(session_mcp_mcp_default, context).map((tool) => withWidget("@agimon-ai/doompi-mcp/session_mcp", tool))];
+		}
+	})
+});
+//#endregion
+exports.default = mcp;
+exports.mcp = mcp;
+
+//# sourceMappingURL=mcp.cjs.map