@aipermission/mcp 0.2.54 → 0.2.55

package/README.md

@@ -86,7 +86,7 @@ does this automatically.
 ## Tools
 
 `AIPERMISSION_HTTP_TIMEOUT_MS` sets the gateway request deadline (default:
-60000 milliseconds; maximum: 600000). The value must be a positive base-10
+95000 milliseconds; maximum: 600000). The value must be a positive base-10
 integer; invalid configuration stops the bridge instead of silently changing
 the deadline. It covers both response headers and the complete response body,
 including streamed bodies. A timeout does not prove that a submitted
@@ -228,8 +228,11 @@ disclose secrets. Never automatically retry `submission_unknown`.
 
 Connector responses can include `approval_pending` or `running`. Poll
 `get_connector_action_request(request_id)` until the request reaches a terminal
-status. `outcome_unknown` is terminal and means the gateway could not prove the
-remote outcome after interruption; inspect target state or ask the operator
+status. Failed action calls carry the MCP `isError` flag; reading a recorded
+failed request is a successful read and does not. A `stopped` call response is a
+gateway control result, not a recorded request. `outcome_unknown` is terminal
+and means the gateway could not prove the remote outcome after interruption;
+inspect target state or ask the operator
 before retrying. Gateway API errors with that status retain their request id,
 assistant hint, and bounded retry delay in the MCP error envelope. MCP tool
 responses never include file contents, gateway

package/dist/config.js

@@ -1,4 +1,4 @@
-const defaultHTTPTimeoutMs = 60_000;
+const defaultHTTPTimeoutMs = 95_000;
 const maxHTTPTimeoutMs = 10 * 60_000;
 
 export function parseHTTPTimeout(value) {

package/dist/generated-connector-contract.js

@@ -0,0 +1,27 @@
+// Code generated by backend/cmd/openapi. DO NOT EDIT.
+
+export const connectorActionStatuses = Object.freeze([
+  "completed",
+  "failed",
+  "canceled",
+  "running",
+  "approval_pending",
+  "blocked",
+  "stale",
+  "declined",
+  "error",
+  "outcome_unknown",
+]);
+
+export const connectorRetryClasses = Object.freeze(["read_only", "idempotent", "conditional", "non_idempotent"]);
+
+export const executionRules = Object.freeze(["always_run", "approval_required", "blocked"]);
+
+export const connectorActionResponseRequiredFields = Object.freeze([
+  "status",
+  "request_id",
+  "target_ref",
+  "connector_kind",
+  "action_name",
+  "retry_policy",
+]);

package/dist/init.js

@@ -609,29 +609,40 @@ function removeTOMLServer(source, name) {
 }
 
 function scanTOMLHeader(line, state) {
-  if (state.multiline) {
-    if (hasMultilineDelimiter(line, state.multiline)) state.multiline = "";
-    return null;
-  }
   const trimmed = line.trimStart();
-  if (trimmed.startsWith("[")) {
+  if (!state.multiline && trimmed.startsWith("[")) {
     try {
       return findMarkerPath(parseTOML(`${line}\n__aipermission_header_marker = true\n`));
     } catch {
-      return null;
+      // A string can start with a bracket; scan it before the next line.
     }
   }
-  for (const delimiter of ['"""', "'''"]) {
-    if (!hasMultilineDelimiter(line, delimiter)) continue;
-    if ((line.split(delimiter).length - 1) % 2 === 1) state.multiline = delimiter;
-    break;
-  }
+  scanTOMLStrings(line, state);
   return null;
 }
 
-function hasMultilineDelimiter(line, delimiter) {
-  const comment = line.indexOf("#");
-  return (comment < 0 ? line : line.slice(0, comment)).includes(delimiter);
+function scanTOMLStrings(line, state) {
+  let quote = state.multiline;
+  for (let index = 0; index < line.length; index += 1) {
+    const character = line[index];
+    if (!quote && character === "#") break;
+    if (quote.startsWith('"') && character === "\\") {
+      index += 1;
+      continue;
+    }
+    if (quote) {
+      if (line.startsWith(quote, index)) {
+        index += quote.length - 1;
+        quote = "";
+      }
+      continue;
+    }
+    if (character !== '"' && character !== "'") continue;
+    const triple = character.repeat(3);
+    quote = line.startsWith(triple, index) ? triple : character;
+    index += quote.length - 1;
+  }
+  state.multiline = quote.length === 3 ? quote : "";
 }
 
 function findMarkerPath(value, pathParts = []) {

package/dist/response-contracts.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { connectorActionStatuses, connectorRetryClasses } from "./generated-connector-contract.js";
 
 const positiveID = z.number().int().positive();
 const nonNegativeInteger = z.number().int().nonnegative();
@@ -97,7 +98,7 @@ const outputHintSchema = z
   .strict();
 const retryPolicySchema = z
   .object({
-    class: z.string(),
+    class: z.enum([...connectorRetryClasses]),
     precondition_fields: z.array(z.string()).optional(),
     guidance: z.string(),
   })
@@ -119,28 +120,39 @@ const actionDefinitionSchema = z
 
 const connectorActionsSchema = z.object({ items: z.array(actionDefinitionSchema) }).strict();
 
-const connectorActionResponseSchema = z
+const connectorActionRequestSchema = z
   .object({
-    status: z.string(),
-    request_id: positiveID.optional(),
-    target_ref: z.string().optional(),
+    status: z.enum([...connectorActionStatuses]),
+    request_id: positiveID,
+    target_ref: z.string(),
     target_name: z.string().optional(),
-    connector_kind: z.string().optional(),
+    connector_kind: z.string(),
     profile_label: z.string().optional(),
-    action_name: z.string().optional(),
+    action_name: z.string(),
     input: z.record(z.unknown()).optional(),
     // Connector-owned output is intentionally opaque. The gateway credential
     // boundary redacts values; this schema owns only the shared MCP envelope.
     output: z.unknown().optional(),
     display_text: z.string().optional(),
     error: z.string().optional(),
-    retry_policy: retryPolicySchema.optional(),
-    retry_after_seconds: nonNegativeInteger.optional(),
+    retry_policy: retryPolicySchema,
+    retry_after_seconds: nonNegativeInteger.max(3600).optional(),
     assistant_hint: z.string().optional(),
     output_withheld: z.boolean().optional(),
     replayed: z.boolean().optional(),
   })
-  .strict();
+  .strict()
+  .superRefine((value, context) => {
+    if (value.output_withheld) {
+      if (value.input !== undefined || value.output !== undefined || value.display_text !== undefined || value.error !== undefined) {
+        context.addIssue({ code: z.ZodIssueCode.custom, message: "withheld action output must not contain request or result content" });
+      }
+    } else if (!value.target_ref || !value.connector_kind || !value.action_name) {
+      context.addIssue({ code: z.ZodIssueCode.custom, message: "action response identity is required" });
+    }
+  });
+const connectorActionStoppedSchema = z.object({ status: z.literal("stopped"), error: z.string().min(1) }).strict();
+const connectorActionCallSchema = z.union([connectorActionRequestSchema, connectorActionStoppedSchema]);
 
 const vaultItemSchema = z
   .object({
@@ -248,7 +260,8 @@ export const responseContracts = Object.freeze({
   connectorTargets: z.array(connectorTargetSchema),
   connectorHelp: connectorHelpSchema,
   connectorActions: connectorActionsSchema,
-  connectorAction: connectorActionResponseSchema,
+  connectorActionCall: connectorActionCallSchema,
+  connectorActionRequest: connectorActionRequestSchema,
   vaultItems: vaultItemsSchema,
   vaultAction: vaultActionResponseSchema,
 });

package/dist/results.js

@@ -45,7 +45,7 @@ export function errorResult(error) {
   };
 }
 
-export async function jsonToolResult(callback, project, mutationContext = null) {
+export async function jsonToolResult(callback, project, mutationContext = null, isFailure = () => false) {
   if (typeof project !== "function") {
     return errorResult(new Error("MCP tool result projector is required."));
   }
@@ -56,12 +56,23 @@ export async function jsonToolResult(callback, project, mutationContext = null)
     return errorResult(error);
   }
   try {
-    return textResult(project(value));
+    const projected = project(value);
+    const result = textResult(projected);
+    return isFailure(projected) ? { ...result, isError: true } : result;
   } catch (error) {
     return errorResult(mutationContext ? projectionOutcomeUnknown(error, mutationContext) : error);
   }
 }
 
+export function jsonActionToolResult(callback, project, mutationContext) {
+  return jsonToolResult(
+    callback,
+    project,
+    mutationContext,
+    (value) => !["completed", "approval_pending", "running"].includes(value.status),
+  );
+}
+
 function projectionOutcomeUnknown(cause, context) {
   const error = new Error(
     "The gateway accepted the mutation, but its response failed MCP contract validation. The operation may have completed.",

package/dist/server.js

@@ -17,7 +17,7 @@ import { parseHTTPTimeout } from "./config.js";
 import { idempotencyKeySchema } from "./idempotency-key.js";
 import { normalizeLocalAPIURL } from "./local-url.js";
 import { projectGatewaySuccess, responseContracts } from "./response-contracts.js";
-import { jsonToolResult } from "./results.js";
+import { jsonActionToolResult, jsonToolResult } from "./results.js";
 import { externalActionAnnotations, localMutationAnnotations, localReadAnnotations } from "./tool-annotations.js";
 
 const packageMetadata = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
@@ -100,7 +100,7 @@ server.tool(
   },
   externalActionAnnotations,
   async ({ target_ref, action_name, input, reason, idempotency_key }, { signal }) => {
-    return jsonToolResult(
+    return jsonActionToolResult(
       () =>
         apiPost(
           "/api/mcp/connector-actions/call",
@@ -113,7 +113,7 @@ server.tool(
           },
           { signal },
         ),
-      (value) => projectGatewaySuccess(responseContracts.connectorAction, value),
+      (value) => projectGatewaySuccess(responseContracts.connectorActionCall, value),
       { idempotencyKey: idempotency_key },
     );
   },
@@ -129,7 +129,7 @@ server.tool(
   async ({ request_id }, { signal }) => {
     return jsonToolResult(
       () => apiGet(`/api/mcp/connector-action-requests/${request_id}`, { signal }),
-      (value) => projectGatewaySuccess(responseContracts.connectorAction, value),
+      (value) => projectGatewaySuccess(responseContracts.connectorActionRequest, value),
     );
   },
 );
@@ -158,7 +158,7 @@ server.tool(
   callVaultActionSchema,
   externalActionAnnotations,
   async ({ project_ref, action_name, input, reason, idempotency_key }, { signal }) => {
-    return jsonToolResult(
+    return jsonActionToolResult(
       () =>
         apiPost(
           "/api/mcp/vault-actions/call",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aipermission/mcp",
-  "version": "0.2.54",
+  "version": "0.2.55",
   "mcpName": "io.github.aipermission/aipermission-mcp",
   "description": "Local-only MCP bridge for the aipermission gateway.",
   "license": "AGPL-3.0-only",
@@ -51,7 +51,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
     "smol-toml": "1.8.0",
-    "yaml": "2.9.0",
+    "yaml": "2.9.1",
     "zod": "3.25.76"
   },
   "devDependencies": {

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.aipermission/aipermission-mcp",
   "title": "AIPermission",
   "description": "Local-only MCP bridge for the AIPermission gateway.",
-  "version": "0.2.54",
+  "version": "0.2.55",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aipermission/mcp",
-      "version": "0.2.54",
+      "version": "0.2.55",
       "transport": {
         "type": "stdio"
       }