@akon-labs/nexus-cli 0.1.9 → 0.1.10

package/dist/extensions/mcp/request-headers-command.js

@@ -0,0 +1,334 @@
+import { spawn, spawnSync } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { interpolateEnvVars } from "./utils.js";
+const DEFAULT_TIMEOUT_MS = 10_000;
+const MAX_OUTPUT_BYTES = 64 * 1024;
+const USE_PROCESS_GROUP = process.platform !== "win32";
+const CLEANUP_TOKEN_ENV = "NEXUS_MCP_REQUEST_HEADERS_CLEANUP_TOKEN";
+// Busy hosts can exceed spawnSync's 1 MiB default when `ps axeww` dumps each
+// process environment. Keep discovery below a bounded cap instead of letting
+// `ps` get SIGTERM'd and reporting a false cleanup failure.
+const PS_MAX_BUFFER_BYTES = 8 * 1024 * 1024;
+function isNoSuchProcessError(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === "ESRCH");
+}
+function runPosixPs(args) {
+    if (process.env.NEXUS_MCP_TEST_FAIL_PS === "1")
+        return { status: 1, signal: null, stdout: "" };
+    const result = spawnSync("ps", args, { encoding: "utf8", maxBuffer: PS_MAX_BUFFER_BYTES });
+    return { status: result.status, signal: result.signal, stdout: result.stdout };
+}
+function psFailureReason(result) {
+    return result.status === null
+        ? `ps was killed by signal ${result.signal ?? "unknown"}`
+        : `ps exited with code ${result.status}`;
+}
+function collectPosixProcessPids(rootPid, cleanupToken) {
+    const result = runPosixPs(["axeww", "-o", "pid=,ppid=,command="]);
+    if (result.status !== 0) {
+        throw new Error(`HTTP request headers command cleanup failed: ${psFailureReason(result)}`);
+    }
+    const childrenByParent = new Map();
+    const processPids = new Set();
+    const needle = cleanupToken ? `${CLEANUP_TOKEN_ENV}=${cleanupToken}` : undefined;
+    for (const line of result.stdout.split("\n")) {
+        const match = /^\s*(\d+)\s+(\d+)(?:\s+(.*))?$/.exec(line);
+        if (!match)
+            continue;
+        const pid = Number(match[1]);
+        const ppid = Number(match[2]);
+        if (!Number.isInteger(pid) || !Number.isInteger(ppid))
+            continue;
+        const children = childrenByParent.get(ppid);
+        if (children)
+            children.push(pid);
+        else
+            childrenByParent.set(ppid, [pid]);
+        if (needle && pid !== process.pid && match[3]?.includes(needle))
+            processPids.add(pid);
+    }
+    const stack = [...(childrenByParent.get(rootPid) ?? [])];
+    while (stack.length > 0) {
+        const pid = stack.pop();
+        processPids.add(pid);
+        stack.push(...(childrenByParent.get(pid) ?? []));
+    }
+    return [...processPids];
+}
+function assertPosixProcessDiscoveryAvailable() {
+    const result = runPosixPs(["axeww", "-o", "pid=,ppid=,command="]);
+    if (result.status !== 0) {
+        throw new Error(`HTTP request headers command cleanup failed: ${psFailureReason(result)}`);
+    }
+}
+function isTaskkillNoSuchProcess(result) {
+    return `${result.stdout ?? ""}\n${result.stderr ?? ""}`.toLowerCase().includes("not found");
+}
+function signalPid(pid, signal) {
+    try {
+        process.kill(pid, signal);
+    }
+    catch (error) {
+        if (!isNoSuchProcessError(error))
+            throw error;
+    }
+}
+function signalProcessGroup(pid, signal) {
+    try {
+        process.kill(-pid, signal);
+    }
+    catch (error) {
+        if (!isNoSuchProcessError(error))
+            throw error;
+    }
+}
+function killRequestHeadersCommand(child, trackedPosixDescendantPids = new Set(), cleanupToken) {
+    if (process.platform === "win32" && child.pid !== undefined) {
+        const result = spawnSync("taskkill", ["/pid", String(child.pid), "/T", "/F"], {
+            encoding: "utf8",
+            windowsHide: true,
+        });
+        if (result.status === 0 || isTaskkillNoSuchProcess(result))
+            return;
+        throw new Error(`HTTP request headers command cleanup failed: taskkill exited with code ${result.status ?? "unknown"}`);
+    }
+    if (USE_PROCESS_GROUP && child.pid !== undefined) {
+        const frozenPids = new Set();
+        let cleanupError;
+        try {
+            signalProcessGroup(child.pid, "SIGSTOP");
+            for (const pid of trackedPosixDescendantPids) {
+                signalPid(pid, "SIGSTOP");
+                frozenPids.add(pid);
+            }
+            let stablePasses = 0;
+            for (let pass = 0; pass < 16; pass++) {
+                const candidates = collectPosixProcessPids(child.pid, cleanupToken);
+                const newPids = candidates.filter((pid) => !frozenPids.has(pid));
+                if (newPids.length === 0) {
+                    stablePasses++;
+                    if (stablePasses >= 2)
+                        return;
+                    continue;
+                }
+                stablePasses = 0;
+                for (const pid of newPids) {
+                    signalPid(pid, "SIGSTOP");
+                    frozenPids.add(pid);
+                }
+            }
+            cleanupError = new Error("HTTP request headers command cleanup failed: descendant process tree did not stabilize");
+        }
+        catch (error) {
+            cleanupError = error instanceof Error ? error : new Error(String(error));
+        }
+        finally {
+            signalProcessGroup(child.pid, "SIGKILL");
+            for (const pid of frozenPids)
+                signalPid(pid, "SIGKILL");
+        }
+        if (cleanupError)
+            throw cleanupError;
+        return;
+    }
+    child.kill("SIGKILL");
+}
+function resolvedCommand(config) {
+    if (!config || typeof config !== "object" || Array.isArray(config)) {
+        throw new Error("HTTP request headers command must be an object");
+    }
+    if (typeof config.command !== "string" || config.command.trim() === "") {
+        throw new Error("HTTP request headers command requires a non-empty command");
+    }
+    if (config.args !== undefined &&
+        (!Array.isArray(config.args) || config.args.some((arg) => typeof arg !== "string"))) {
+        throw new Error("HTTP request headers command args must be strings");
+    }
+    if (config.env !== undefined &&
+        (typeof config.env !== "object" ||
+            Array.isArray(config.env) ||
+            Object.values(config.env).some((value) => typeof value !== "string"))) {
+        throw new Error("HTTP request headers command env values must be strings");
+    }
+    const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > 60_000) {
+        throw new Error("HTTP request headers command timeoutMs must be an integer between 1 and 60000");
+    }
+    return {
+        command: interpolateEnvVars(config.command),
+        args: (config.args ?? []).map(interpolateEnvVars),
+        env: {
+            ...process.env,
+            ...Object.fromEntries(Object.entries(config.env ?? {}).map(([key, value]) => [key, interpolateEnvVars(value)])),
+        },
+        timeoutMs,
+    };
+}
+async function invokeRequestHeadersCommand(config, envelope, signal) {
+    const resolved = resolvedCommand(config);
+    if (USE_PROCESS_GROUP)
+        assertPosixProcessDiscoveryAvailable();
+    return new Promise((resolve, reject) => {
+        let stdout = Buffer.alloc(0);
+        let settled = false;
+        const cleanupToken = randomUUID();
+        const child = spawn(resolved.command, resolved.args, {
+            env: { ...resolved.env, [CLEANUP_TOKEN_ENV]: cleanupToken },
+            stdio: ["pipe", "pipe", "ignore"],
+            windowsHide: true,
+            detached: USE_PROCESS_GROUP,
+        });
+        const trackedPosixDescendantPids = new Set();
+        let trackingError;
+        const trackPosixDescendants = () => {
+            if (!USE_PROCESS_GROUP || child.pid === undefined || settled || trackingError)
+                return;
+            try {
+                for (const pid of collectPosixProcessPids(child.pid, cleanupToken))
+                    trackedPosixDescendantPids.add(pid);
+            }
+            catch (error) {
+                trackingError = error instanceof Error ? error : new Error(String(error));
+            }
+        };
+        const descendantTracker = USE_PROCESS_GROUP ? setInterval(trackPosixDescendants, 50) : undefined;
+        descendantTracker?.unref();
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (descendantTracker)
+                clearInterval(descendantTracker);
+            signal.removeEventListener("abort", abort);
+            if (result.status === "error")
+                reject(result.error);
+            else
+                resolve(result.headers);
+        };
+        const finishAfterKill = (result) => {
+            try {
+                killRequestHeadersCommand(child, trackedPosixDescendantPids, cleanupToken);
+                finish(result);
+            }
+            catch (cleanupError) {
+                finish({
+                    status: "error",
+                    error: cleanupError instanceof Error ? cleanupError : new Error(String(cleanupError)),
+                });
+            }
+        };
+        const failAfterKill = (message) => {
+            finishAfterKill({ status: "error", error: trackingError ?? new Error(message) });
+        };
+        const abort = () => {
+            failAfterKill("HTTP request headers command aborted");
+        };
+        const timer = setTimeout(() => {
+            failAfterKill(`HTTP request headers command timed out after ${resolved.timeoutMs}ms`);
+        }, resolved.timeoutMs);
+        signal.addEventListener("abort", abort, { once: true });
+        if (signal.aborted) {
+            abort();
+            return;
+        }
+        child.on("error", () => finish({ status: "error", error: new Error("HTTP request headers command failed to start") }));
+        child.stdout.on("data", (chunk) => {
+            if (settled)
+                return;
+            stdout = Buffer.concat([stdout, Buffer.from(chunk)]);
+            if (stdout.byteLength > MAX_OUTPUT_BYTES) {
+                failAfterKill("HTTP request headers command output exceeded 64 KiB");
+            }
+        });
+        child.on("close", (code) => {
+            if (settled)
+                return;
+            if (trackingError) {
+                failAfterKill(trackingError.message);
+                return;
+            }
+            if (code !== 0) {
+                failAfterKill(`HTTP request headers command exited with code ${code ?? "unknown"}`);
+                return;
+            }
+            let parsed;
+            try {
+                parsed = JSON.parse(stdout.toString("utf8"));
+            }
+            catch {
+                finishAfterKill({
+                    status: "error",
+                    error: new Error("HTTP request headers command returned invalid JSON"),
+                });
+                return;
+            }
+            if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+                finishAfterKill({
+                    status: "error",
+                    error: new Error("HTTP request headers command must return a JSON object"),
+                });
+                return;
+            }
+            const entries = Object.entries(parsed);
+            if (entries.some(([, value]) => typeof value !== "string")) {
+                finishAfterKill({
+                    status: "error",
+                    error: new Error("HTTP request headers command values must be strings"),
+                });
+                return;
+            }
+            try {
+                finishAfterKill({ status: "success", headers: new Headers(entries) });
+            }
+            catch {
+                finishAfterKill({
+                    status: "error",
+                    error: new Error("HTTP request headers command returned an invalid header"),
+                });
+            }
+        });
+        child.stdin.on("error", () => { });
+        child.stdin.end(JSON.stringify(envelope));
+    });
+}
+/** Wrap fetch so a trusted command can derive headers from the exact request. */
+export function createRequestHeadersCommandFetch(config, delegate = globalThis.fetch) {
+    // Validate static configuration before the first request.
+    resolvedCommand(config);
+    return async (input, init) => {
+        const request = new Request(input, init);
+        const body = Buffer.from(await request.clone().arrayBuffer());
+        const derived = await invokeRequestHeadersCommand(config, {
+            version: 1,
+            method: request.method.toUpperCase(),
+            url: request.url,
+            bodyBase64: body.toString("base64"),
+        }, request.signal);
+        const headers = new Headers(request.headers);
+        derived.forEach((value, name) => {
+            headers.set(name, value);
+        });
+        const forwardedInit = {
+            method: request.method,
+            headers,
+            ...(request.method === "GET" || request.method === "HEAD" ? {} : { body }),
+            signal: request.signal,
+        };
+        Object.assign(forwardedInit, {
+            cache: request.cache,
+            credentials: request.credentials,
+            integrity: request.integrity,
+            keepalive: request.keepalive,
+            mode: request.mode,
+            redirect: request.redirect,
+            referrer: request.referrer,
+            referrerPolicy: request.referrerPolicy,
+        });
+        return delegate(new URL(request.url), forwardedInit);
+    };
+}
+//# sourceMappingURL=request-headers-command.js.map

package/dist/extensions/mcp/request-headers-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-headers-command.js","sourceRoot":"","sources":["../../../src/extensions/mcp/request-headers-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACvD,MAAM,iBAAiB,GAAG,yCAAyC,CAAC;AACpE,6EAA6E;AAC7E,6EAA6E;AAC7E,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C,SAAS,oBAAoB,CAAC,KAAc,EAAW;IACtD,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,OAAO,CACjD,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,IAAc,EAA4E;IAC7G,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC/F,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC3F,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAAA,CAC/E;AAED,SAAS,eAAe,CAAC,MAAgE,EAAU;IAClG,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI;QAC5B,CAAC,CAAC,2BAA2B,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE;QACzD,CAAC,CAAC,uBAAuB,MAAM,CAAC,MAAM,EAAE,CAAC;AAAA,CAC1C;AAED,SAAS,uBAAuB,CAAC,OAAe,EAAE,YAAqB,EAAY;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gDAAgD,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAChE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC5B,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC;AAAA,CACxB;AAED,SAAS,oCAAoC,GAAS;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gDAAgD,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AAAA,CACD;AAED,SAAS,uBAAuB,CAAC,MAAoC,EAAW;IAC/E,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAAA,CAC5F;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,MAAsB,EAAQ;IAC7D,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAC/C,CAAC;AAAA,CACD;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,MAAsB,EAAQ;IACtE,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IAC/C,CAAC;AAAA,CACD;AAED,SAAS,yBAAyB,CACjC,KAAmB,EACnB,0BAA0B,GAAG,IAAI,GAAG,EAAU,EAC9C,YAAqB,EACd;IACP,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YAC7E,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,uBAAuB,CAAC,MAAM,CAAC;YAAE,OAAO;QACnE,MAAM,IAAI,KAAK,CACd,0EAA0E,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CACtG,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,IAAI,YAA+B,CAAC;QACpC,IAAI,CAAC;YACJ,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,0BAA0B,EAAE,CAAC;gBAC9C,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC1B,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;gBACtC,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1B,YAAY,EAAE,CAAC;oBACf,IAAI,YAAY,IAAI,CAAC;wBAAE,OAAO;oBAC9B,SAAS;gBACV,CAAC;gBACD,YAAY,GAAG,CAAC,CAAC;gBACjB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC3B,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBAC1B,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACF,CAAC;YACD,YAAY,GAAG,IAAI,KAAK,CACvB,wFAAwF,CACxF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACV,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,UAAU;gBAAE,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,YAAY;YAAE,MAAM,YAAY,CAAC;QACrC,OAAO;IACR,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAAA,CACtB;AAWD,SAAS,eAAe,CAAC,MAAiC,EAKxD;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IACD,IACC,MAAM,CAAC,IAAI,KAAK,SAAS;QACzB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,EAClF,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,IACC,MAAM,CAAC,GAAG,KAAK,SAAS;QACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,EACrE,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IAClG,CAAC;IACD,OAAO;QACN,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACjD,GAAG,EAAE;YACJ,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,MAAM,CAAC,WAAW,CACpB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CACxF;SACD;QACD,SAAS;KACT,CAAC;AAAA,CACF;AAED,KAAK,UAAU,2BAA2B,CACzC,MAAiC,EACjC,QAAoC,EACpC,MAAmB,EACA;IACnB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,iBAAiB;QAAE,oCAAoC,EAAE,CAAC;IAC9D,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;YACpD,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,YAAY,EAAE;YAC3D,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;YACjC,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,iBAAiB;SAC3B,CAAC,CAAC;QAEH,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;QACrD,IAAI,aAAgC,CAAC;QACrC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC;YACnC,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,IAAI,aAAa;gBAAE,OAAO;YACtF,IAAI,CAAC;gBACJ,KAAK,MAAM,GAAG,IAAI,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC;oBAAE,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,aAAa,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,CAAC;QAAA,CACD,CAAC;QACF,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE,CAAC;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,iBAAiB;gBAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACxD,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAC/C,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAC7B,CAAC;QACF,MAAM,eAAe,GAAG,CAAC,MAAqB,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC;gBACJ,yBAAyB,CAAC,KAAK,EAAE,0BAA0B,EAAE,YAAY,CAAC,CAAC;gBAC3E,MAAM,CAAC,MAAM,CAAC,CAAC;YAChB,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACvB,MAAM,CAAC;oBACN,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;iBACrF,CAAC,CAAC;YACJ,CAAC;QAAA,CACD,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC;YAC1C,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAA,CACjF,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;YACnB,aAAa,CAAC,sCAAsC,CAAC,CAAC;QAAA,CACtD,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YAC9B,aAAa,CAAC,gDAAgD,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;QAAA,CACtF,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEvB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,EAAE,CAAC;YACR,OAAO;QACR,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACtB,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAC7F,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC;YACnD,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;gBAC1C,aAAa,CAAC,qDAAqD,CAAC,CAAC;YACtE,CAAC;QAAA,CACD,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3B,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,aAAa,EAAE,CAAC;gBACnB,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACrC,OAAO;YACR,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBAChB,aAAa,CAAC,iDAAiD,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;gBACpF,OAAO;YACR,CAAC;YACD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACR,eAAe,CAAC;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,IAAI,KAAK,CAAC,oDAAoD,CAAC;iBACtE,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,eAAe,CAAC;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,IAAI,KAAK,CAAC,wDAAwD,CAAC;iBAC1E,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC5D,eAAe,CAAC;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,IAAI,KAAK,CAAC,qDAAqD,CAAC;iBACvE,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC;YAAC,MAAM,CAAC;gBACR,eAAe,CAAC;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,IAAI,KAAK,CAAC,yDAAyD,CAAC;iBAC3E,CAAC,CAAC;YACJ,CAAC;QAAA,CACD,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAAA,CAC1C,CAAC,CAAC;AAAA,CACH;AAED,iFAAiF;AACjF,MAAM,UAAU,gCAAgC,CAC/C,MAAiC,EACjC,QAAQ,GAAc,UAAU,CAAC,KAAK,EAC1B;IACZ,0DAA0D;IAC1D,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAqB,EAAE,CAAC;QACtF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAChD,MAAM,EACN;YACC,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACnC,EACD,OAAO,CAAC,MAAM,CACd,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAA,CACzB,CAAC,CAAC;QACH,MAAM,aAAa,GAAgB;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC1E,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IAAA,CACrD,CAAC;AAAA,CACF","sourcesContent":["import { type ChildProcess, spawn, spawnSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport type { FetchLike } from \"@modelcontextprotocol/client\";\nimport type { HttpRequestHeadersCommand } from \"./types.ts\";\nimport { interpolateEnvVars } from \"./utils.ts\";\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst MAX_OUTPUT_BYTES = 64 * 1024;\nconst USE_PROCESS_GROUP = process.platform !== \"win32\";\nconst CLEANUP_TOKEN_ENV = \"NEXUS_MCP_REQUEST_HEADERS_CLEANUP_TOKEN\";\n// Busy hosts can exceed spawnSync's 1 MiB default when `ps axeww` dumps each\n// process environment. Keep discovery below a bounded cap instead of letting\n// `ps` get SIGTERM'd and reporting a false cleanup failure.\nconst PS_MAX_BUFFER_BYTES = 8 * 1024 * 1024;\n\nfunction isNoSuchProcessError(error: unknown): boolean {\n\treturn (\n\t\ttypeof error === \"object\" &&\n\t\terror !== null &&\n\t\t\"code\" in error &&\n\t\t(error as NodeJS.ErrnoException).code === \"ESRCH\"\n\t);\n}\n\nfunction runPosixPs(args: string[]): { status: number | null; signal: NodeJS.Signals | null; stdout: string } {\n\tif (process.env.NEXUS_MCP_TEST_FAIL_PS === \"1\") return { status: 1, signal: null, stdout: \"\" };\n\tconst result = spawnSync(\"ps\", args, { encoding: \"utf8\", maxBuffer: PS_MAX_BUFFER_BYTES });\n\treturn { status: result.status, signal: result.signal, stdout: result.stdout };\n}\n\nfunction psFailureReason(result: { status: number | null; signal: NodeJS.Signals | null }): string {\n\treturn result.status === null\n\t\t? `ps was killed by signal ${result.signal ?? \"unknown\"}`\n\t\t: `ps exited with code ${result.status}`;\n}\n\nfunction collectPosixProcessPids(rootPid: number, cleanupToken?: string): number[] {\n\tconst result = runPosixPs([\"axeww\", \"-o\", \"pid=,ppid=,command=\"]);\n\tif (result.status !== 0) {\n\t\tthrow new Error(`HTTP request headers command cleanup failed: ${psFailureReason(result)}`);\n\t}\n\n\tconst childrenByParent = new Map<number, number[]>();\n\tconst processPids = new Set<number>();\n\tconst needle = cleanupToken ? `${CLEANUP_TOKEN_ENV}=${cleanupToken}` : undefined;\n\tfor (const line of result.stdout.split(\"\\n\")) {\n\t\tconst match = /^\\s*(\\d+)\\s+(\\d+)(?:\\s+(.*))?$/.exec(line);\n\t\tif (!match) continue;\n\t\tconst pid = Number(match[1]);\n\t\tconst ppid = Number(match[2]);\n\t\tif (!Number.isInteger(pid) || !Number.isInteger(ppid)) continue;\n\t\tconst children = childrenByParent.get(ppid);\n\t\tif (children) children.push(pid);\n\t\telse childrenByParent.set(ppid, [pid]);\n\t\tif (needle && pid !== process.pid && match[3]?.includes(needle)) processPids.add(pid);\n\t}\n\n\tconst stack = [...(childrenByParent.get(rootPid) ?? [])];\n\twhile (stack.length > 0) {\n\t\tconst pid = stack.pop()!;\n\t\tprocessPids.add(pid);\n\t\tstack.push(...(childrenByParent.get(pid) ?? []));\n\t}\n\treturn [...processPids];\n}\n\nfunction assertPosixProcessDiscoveryAvailable(): void {\n\tconst result = runPosixPs([\"axeww\", \"-o\", \"pid=,ppid=,command=\"]);\n\tif (result.status !== 0) {\n\t\tthrow new Error(`HTTP request headers command cleanup failed: ${psFailureReason(result)}`);\n\t}\n}\n\nfunction isTaskkillNoSuchProcess(result: ReturnType<typeof spawnSync>): boolean {\n\treturn `${result.stdout ?? \"\"}\\n${result.stderr ?? \"\"}`.toLowerCase().includes(\"not found\");\n}\n\nfunction signalPid(pid: number, signal: NodeJS.Signals): void {\n\ttry {\n\t\tprocess.kill(pid, signal);\n\t} catch (error) {\n\t\tif (!isNoSuchProcessError(error)) throw error;\n\t}\n}\n\nfunction signalProcessGroup(pid: number, signal: NodeJS.Signals): void {\n\ttry {\n\t\tprocess.kill(-pid, signal);\n\t} catch (error) {\n\t\tif (!isNoSuchProcessError(error)) throw error;\n\t}\n}\n\nfunction killRequestHeadersCommand(\n\tchild: ChildProcess,\n\ttrackedPosixDescendantPids = new Set<number>(),\n\tcleanupToken?: string,\n): void {\n\tif (process.platform === \"win32\" && child.pid !== undefined) {\n\t\tconst result = spawnSync(\"taskkill\", [\"/pid\", String(child.pid), \"/T\", \"/F\"], {\n\t\t\tencoding: \"utf8\",\n\t\t\twindowsHide: true,\n\t\t});\n\t\tif (result.status === 0 || isTaskkillNoSuchProcess(result)) return;\n\t\tthrow new Error(\n\t\t\t`HTTP request headers command cleanup failed: taskkill exited with code ${result.status ?? \"unknown\"}`,\n\t\t);\n\t}\n\n\tif (USE_PROCESS_GROUP && child.pid !== undefined) {\n\t\tconst frozenPids = new Set<number>();\n\t\tlet cleanupError: Error | undefined;\n\t\ttry {\n\t\t\tsignalProcessGroup(child.pid, \"SIGSTOP\");\n\t\t\tfor (const pid of trackedPosixDescendantPids) {\n\t\t\t\tsignalPid(pid, \"SIGSTOP\");\n\t\t\t\tfrozenPids.add(pid);\n\t\t\t}\n\t\t\tlet stablePasses = 0;\n\t\t\tfor (let pass = 0; pass < 16; pass++) {\n\t\t\t\tconst candidates = collectPosixProcessPids(child.pid, cleanupToken);\n\t\t\t\tconst newPids = candidates.filter((pid) => !frozenPids.has(pid));\n\t\t\t\tif (newPids.length === 0) {\n\t\t\t\t\tstablePasses++;\n\t\t\t\t\tif (stablePasses >= 2) return;\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tstablePasses = 0;\n\t\t\t\tfor (const pid of newPids) {\n\t\t\t\t\tsignalPid(pid, \"SIGSTOP\");\n\t\t\t\t\tfrozenPids.add(pid);\n\t\t\t\t}\n\t\t\t}\n\t\t\tcleanupError = new Error(\n\t\t\t\t\"HTTP request headers command cleanup failed: descendant process tree did not stabilize\",\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tcleanupError = error instanceof Error ? error : new Error(String(error));\n\t\t} finally {\n\t\t\tsignalProcessGroup(child.pid, \"SIGKILL\");\n\t\t\tfor (const pid of frozenPids) signalPid(pid, \"SIGKILL\");\n\t\t}\n\t\tif (cleanupError) throw cleanupError;\n\t\treturn;\n\t}\n\n\tchild.kill(\"SIGKILL\");\n}\n\nexport interface HttpRequestCommandEnvelope {\n\tversion: 1;\n\tmethod: string;\n\turl: string;\n\tbodyBase64: string;\n}\n\ntype CommandResult = { status: \"error\"; error: Error } | { status: \"success\"; headers: Headers };\n\nfunction resolvedCommand(config: HttpRequestHeadersCommand): {\n\tcommand: string;\n\targs: string[];\n\tenv: NodeJS.ProcessEnv;\n\ttimeoutMs: number;\n} {\n\tif (!config || typeof config !== \"object\" || Array.isArray(config)) {\n\t\tthrow new Error(\"HTTP request headers command must be an object\");\n\t}\n\tif (typeof config.command !== \"string\" || config.command.trim() === \"\") {\n\t\tthrow new Error(\"HTTP request headers command requires a non-empty command\");\n\t}\n\tif (\n\t\tconfig.args !== undefined &&\n\t\t(!Array.isArray(config.args) || config.args.some((arg) => typeof arg !== \"string\"))\n\t) {\n\t\tthrow new Error(\"HTTP request headers command args must be strings\");\n\t}\n\tif (\n\t\tconfig.env !== undefined &&\n\t\t(typeof config.env !== \"object\" ||\n\t\t\tArray.isArray(config.env) ||\n\t\t\tObject.values(config.env).some((value) => typeof value !== \"string\"))\n\t) {\n\t\tthrow new Error(\"HTTP request headers command env values must be strings\");\n\t}\n\tconst timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n\tif (!Number.isInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > 60_000) {\n\t\tthrow new Error(\"HTTP request headers command timeoutMs must be an integer between 1 and 60000\");\n\t}\n\treturn {\n\t\tcommand: interpolateEnvVars(config.command),\n\t\targs: (config.args ?? []).map(interpolateEnvVars),\n\t\tenv: {\n\t\t\t...process.env,\n\t\t\t...Object.fromEntries(\n\t\t\t\tObject.entries(config.env ?? {}).map(([key, value]) => [key, interpolateEnvVars(value)]),\n\t\t\t),\n\t\t},\n\t\ttimeoutMs,\n\t};\n}\n\nasync function invokeRequestHeadersCommand(\n\tconfig: HttpRequestHeadersCommand,\n\tenvelope: HttpRequestCommandEnvelope,\n\tsignal: AbortSignal,\n): Promise<Headers> {\n\tconst resolved = resolvedCommand(config);\n\tif (USE_PROCESS_GROUP) assertPosixProcessDiscoveryAvailable();\n\treturn new Promise<Headers>((resolve, reject) => {\n\t\tlet stdout = Buffer.alloc(0);\n\t\tlet settled = false;\n\t\tconst cleanupToken = randomUUID();\n\t\tconst child = spawn(resolved.command, resolved.args, {\n\t\t\tenv: { ...resolved.env, [CLEANUP_TOKEN_ENV]: cleanupToken },\n\t\t\tstdio: [\"pipe\", \"pipe\", \"ignore\"],\n\t\t\twindowsHide: true,\n\t\t\tdetached: USE_PROCESS_GROUP,\n\t\t});\n\n\t\tconst trackedPosixDescendantPids = new Set<number>();\n\t\tlet trackingError: Error | undefined;\n\t\tconst trackPosixDescendants = () => {\n\t\t\tif (!USE_PROCESS_GROUP || child.pid === undefined || settled || trackingError) return;\n\t\t\ttry {\n\t\t\t\tfor (const pid of collectPosixProcessPids(child.pid, cleanupToken)) trackedPosixDescendantPids.add(pid);\n\t\t\t} catch (error) {\n\t\t\t\ttrackingError = error instanceof Error ? error : new Error(String(error));\n\t\t\t}\n\t\t};\n\t\tconst descendantTracker = USE_PROCESS_GROUP ? setInterval(trackPosixDescendants, 50) : undefined;\n\t\tdescendantTracker?.unref();\n\n\t\tconst finish = (result: CommandResult) => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timer);\n\t\t\tif (descendantTracker) clearInterval(descendantTracker);\n\t\t\tsignal.removeEventListener(\"abort\", abort);\n\t\t\tif (result.status === \"error\") reject(result.error);\n\t\t\telse resolve(result.headers);\n\t\t};\n\t\tconst finishAfterKill = (result: CommandResult) => {\n\t\t\ttry {\n\t\t\t\tkillRequestHeadersCommand(child, trackedPosixDescendantPids, cleanupToken);\n\t\t\t\tfinish(result);\n\t\t\t} catch (cleanupError) {\n\t\t\t\tfinish({\n\t\t\t\t\tstatus: \"error\",\n\t\t\t\t\terror: cleanupError instanceof Error ? cleanupError : new Error(String(cleanupError)),\n\t\t\t\t});\n\t\t\t}\n\t\t};\n\t\tconst failAfterKill = (message: string) => {\n\t\t\tfinishAfterKill({ status: \"error\", error: trackingError ?? new Error(message) });\n\t\t};\n\t\tconst abort = () => {\n\t\t\tfailAfterKill(\"HTTP request headers command aborted\");\n\t\t};\n\t\tconst timer = setTimeout(() => {\n\t\t\tfailAfterKill(`HTTP request headers command timed out after ${resolved.timeoutMs}ms`);\n\t\t}, resolved.timeoutMs);\n\n\t\tsignal.addEventListener(\"abort\", abort, { once: true });\n\t\tif (signal.aborted) {\n\t\t\tabort();\n\t\t\treturn;\n\t\t}\n\n\t\tchild.on(\"error\", () =>\n\t\t\tfinish({ status: \"error\", error: new Error(\"HTTP request headers command failed to start\") }),\n\t\t);\n\t\tchild.stdout.on(\"data\", (chunk: Buffer | string) => {\n\t\t\tif (settled) return;\n\t\t\tstdout = Buffer.concat([stdout, Buffer.from(chunk)]);\n\t\t\tif (stdout.byteLength > MAX_OUTPUT_BYTES) {\n\t\t\t\tfailAfterKill(\"HTTP request headers command output exceeded 64 KiB\");\n\t\t\t}\n\t\t});\n\t\tchild.on(\"close\", (code) => {\n\t\t\tif (settled) return;\n\t\t\tif (trackingError) {\n\t\t\t\tfailAfterKill(trackingError.message);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (code !== 0) {\n\t\t\t\tfailAfterKill(`HTTP request headers command exited with code ${code ?? \"unknown\"}`);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tlet parsed: unknown;\n\t\t\ttry {\n\t\t\t\tparsed = JSON.parse(stdout.toString(\"utf8\"));\n\t\t\t} catch {\n\t\t\t\tfinishAfterKill({\n\t\t\t\t\tstatus: \"error\",\n\t\t\t\t\terror: new Error(\"HTTP request headers command returned invalid JSON\"),\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\t\t\tfinishAfterKill({\n\t\t\t\t\tstatus: \"error\",\n\t\t\t\t\terror: new Error(\"HTTP request headers command must return a JSON object\"),\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst entries = Object.entries(parsed);\n\t\t\tif (entries.some(([, value]) => typeof value !== \"string\")) {\n\t\t\t\tfinishAfterKill({\n\t\t\t\t\tstatus: \"error\",\n\t\t\t\t\terror: new Error(\"HTTP request headers command values must be strings\"),\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tfinishAfterKill({ status: \"success\", headers: new Headers(entries as Array<[string, string]>) });\n\t\t\t} catch {\n\t\t\t\tfinishAfterKill({\n\t\t\t\t\tstatus: \"error\",\n\t\t\t\t\terror: new Error(\"HTTP request headers command returned an invalid header\"),\n\t\t\t\t});\n\t\t\t}\n\t\t});\n\n\t\tchild.stdin.on(\"error\", () => {});\n\t\tchild.stdin.end(JSON.stringify(envelope));\n\t});\n}\n\n/** Wrap fetch so a trusted command can derive headers from the exact request. */\nexport function createRequestHeadersCommandFetch(\n\tconfig: HttpRequestHeadersCommand,\n\tdelegate: FetchLike = globalThis.fetch,\n): FetchLike {\n\t// Validate static configuration before the first request.\n\tresolvedCommand(config);\n\treturn async (input: string | URL | Request, init?: RequestInit): Promise<Response> => {\n\t\tconst request = new Request(input, init);\n\t\tconst body = Buffer.from(await request.clone().arrayBuffer());\n\t\tconst derived = await invokeRequestHeadersCommand(\n\t\t\tconfig,\n\t\t\t{\n\t\t\t\tversion: 1,\n\t\t\t\tmethod: request.method.toUpperCase(),\n\t\t\t\turl: request.url,\n\t\t\t\tbodyBase64: body.toString(\"base64\"),\n\t\t\t},\n\t\t\trequest.signal,\n\t\t);\n\t\tconst headers = new Headers(request.headers);\n\t\tderived.forEach((value, name) => {\n\t\t\theaders.set(name, value);\n\t\t});\n\t\tconst forwardedInit: RequestInit = {\n\t\t\tmethod: request.method,\n\t\t\theaders,\n\t\t\t...(request.method === \"GET\" || request.method === \"HEAD\" ? {} : { body }),\n\t\t\tsignal: request.signal,\n\t\t};\n\t\tObject.assign(forwardedInit, {\n\t\t\tcache: request.cache,\n\t\t\tcredentials: request.credentials,\n\t\t\tintegrity: request.integrity,\n\t\t\tkeepalive: request.keepalive,\n\t\t\tmode: request.mode,\n\t\t\tredirect: request.redirect,\n\t\t\treferrer: request.referrer,\n\t\t\treferrerPolicy: request.referrerPolicy,\n\t\t});\n\t\treturn delegate(new URL(request.url), forwardedInit);\n\t};\n}\n"]}

package/dist/extensions/mcp/resource-tools.d.ts

@@ -0,0 +1,2 @@
+export declare function resourceNameToToolName(name: string): string;
+//# sourceMappingURL=resource-tools.d.ts.map

package/dist/extensions/mcp/resource-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-tools.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/resource-tools.ts"],"names":[],"mappings":"AAEA,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc3D","sourcesContent":["// resource-tools.ts - MCP resource name utilities\n\nexport function resourceNameToToolName(name: string): string {\n\tlet result = name\n\t\t.replace(/[^a-zA-Z0-9]/g, \"_\")\n\t\t.replace(/_+/g, \"_\")\n\t\t.replace(/^_+/, \"\") // Remove leading underscores\n\t\t.replace(/_+$/, \"\") // Remove trailing underscores\n\t\t.toLowerCase();\n\n\t// Ensure we have a valid name\n\tif (!result || /^\\d/.test(result)) {\n\t\tresult = `resource${result ? `_${result}` : \"\"}`;\n\t}\n\n\treturn result;\n}\n"]}

package/dist/extensions/mcp/resource-tools.js

@@ -0,0 +1,15 @@
+// resource-tools.ts - MCP resource name utilities
+export function resourceNameToToolName(name) {
+    let result = name
+        .replace(/[^a-zA-Z0-9]/g, "_")
+        .replace(/_+/g, "_")
+        .replace(/^_+/, "") // Remove leading underscores
+        .replace(/_+$/, "") // Remove trailing underscores
+        .toLowerCase();
+    // Ensure we have a valid name
+    if (!result || /^\d/.test(result)) {
+        result = `resource${result ? `_${result}` : ""}`;
+    }
+    return result;
+}
+//# sourceMappingURL=resource-tools.js.map

package/dist/extensions/mcp/resource-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-tools.js","sourceRoot":"","sources":["../../../src/extensions/mcp/resource-tools.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAElD,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAU;IAC5D,IAAI,MAAM,GAAG,IAAI;SACf,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,6BAA6B;SAChD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,8BAA8B;SACjD,WAAW,EAAE,CAAC;IAEhB,8BAA8B;IAC9B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["// resource-tools.ts - MCP resource name utilities\n\nexport function resourceNameToToolName(name: string): string {\n\tlet result = name\n\t\t.replace(/[^a-zA-Z0-9]/g, \"_\")\n\t\t.replace(/_+/g, \"_\")\n\t\t.replace(/^_+/, \"\") // Remove leading underscores\n\t\t.replace(/_+$/, \"\") // Remove trailing underscores\n\t\t.toLowerCase();\n\n\t// Ensure we have a valid name\n\tif (!result || /^\\d/.test(result)) {\n\t\tresult = `resource${result ? `_${result}` : \"\"}`;\n\t}\n\n\treturn result;\n}\n"]}

package/dist/extensions/mcp/runtime-owner.d.ts

@@ -0,0 +1,14 @@
+import type { ExtensionUIContext } from "../../core/extensions/types.ts";
+export interface McpRuntimeOwner {
+    readonly signal: AbortSignal;
+    isActive(): boolean;
+    addCleanup(cleanup: () => void | Promise<void>): void;
+    stop(reason?: string): Promise<void>;
+    throwIfInactive(): void;
+}
+export declare function createMcpRuntimeOwner(): McpRuntimeOwner;
+export declare function combineAbortSignals(...signals: Array<AbortSignal | undefined>): AbortSignal | undefined;
+/** Fence session-bound UI calls after the owning extension runtime stops. */
+export declare function createOwnedUi(ui: ExtensionUIContext, owner: McpRuntimeOwner): ExtensionUIContext;
+export declare function isAbortError(error: unknown, signal?: AbortSignal): boolean;
+//# sourceMappingURL=runtime-owner.d.ts.map

package/dist/extensions/mcp/runtime-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-owner.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/runtime-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAGzE,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,IAAI,OAAO,CAAC;IACpB,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,eAAe,IAAI,IAAI,CAAC;CACxB;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAwCvD;AAED,wBAAgB,mBAAmB,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,GAAG,WAAW,GAAG,SAAS,CAKvG;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,GAAG,kBAAkB,CA0BhG;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAG1E","sourcesContent":["import type { ExtensionUIContext } from \"../../core/extensions/types.ts\";\nimport { formatTerminalError } from \"./utils.ts\";\n\nexport interface McpRuntimeOwner {\n\treadonly signal: AbortSignal;\n\tisActive(): boolean;\n\taddCleanup(cleanup: () => void | Promise<void>): void;\n\tstop(reason?: string): Promise<void>;\n\tthrowIfInactive(): void;\n}\n\nexport function createMcpRuntimeOwner(): McpRuntimeOwner {\n\tconst controller = new AbortController();\n\tconst cleanups: Array<() => void | Promise<void>> = [];\n\tlet stopPromise: Promise<void> | undefined;\n\n\tconst reportCleanupFailure = (error: unknown, late: boolean) => {\n\t\tconsole.error(`MCP: ${late ? \"late \" : \"\"}runtime cleanup failed: ${formatTerminalError(error)}`);\n\t};\n\n\treturn {\n\t\tsignal: controller.signal,\n\t\tisActive: () => !controller.signal.aborted,\n\t\taddCleanup: (cleanup) => {\n\t\t\tif (controller.signal.aborted) {\n\t\t\t\tvoid Promise.resolve()\n\t\t\t\t\t.then(cleanup)\n\t\t\t\t\t.catch((error) => reportCleanupFailure(error, true));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcleanups.push(cleanup);\n\t\t},\n\t\tstop: (reason = \"MCP extension runtime stopped\") => {\n\t\t\tif (stopPromise) return stopPromise;\n\t\t\tcontroller.abort(new Error(reason));\n\t\t\tconst pendingCleanups = cleanups\n\t\t\t\t.splice(0)\n\t\t\t\t.reverse()\n\t\t\t\t.map((cleanup) => Promise.resolve().then(cleanup));\n\t\t\tstopPromise = Promise.allSettled(pendingCleanups).then((results) => {\n\t\t\t\tconst failures = results.flatMap((result) => (result.status === \"rejected\" ? [result.reason] : []));\n\t\t\t\tif (failures.length > 0) {\n\t\t\t\t\tconst aggregate = new AggregateError(failures, \"MCP runtime cleanup failed\");\n\t\t\t\t\tconsole.error(`MCP: runtime cleanup failed: ${formatTerminalError(aggregate)}`);\n\t\t\t\t\tthrow aggregate;\n\t\t\t\t}\n\t\t\t});\n\t\t\treturn stopPromise;\n\t\t},\n\t\tthrowIfInactive: () => controller.signal.throwIfAborted(),\n\t};\n}\n\nexport function combineAbortSignals(...signals: Array<AbortSignal | undefined>): AbortSignal | undefined {\n\tconst active = signals.filter((signal): signal is AbortSignal => signal !== undefined);\n\tif (active.length === 0) return undefined;\n\tif (active.length === 1) return active[0];\n\treturn AbortSignal.any(active);\n}\n\n/** Fence session-bound UI calls after the owning extension runtime stops. */\nexport function createOwnedUi(ui: ExtensionUIContext, owner: McpRuntimeOwner): ExtensionUIContext {\n\tconst proxies = new WeakMap<object, object>();\n\tconst wrap = (value: unknown): unknown => {\n\t\tif ((typeof value !== \"object\" || value === null) && typeof value !== \"function\") {\n\t\t\treturn value;\n\t\t}\n\t\tconst object = value as object;\n\t\tconst existing = proxies.get(object);\n\t\tif (existing) return existing;\n\n\t\tconst proxy = new Proxy(object, {\n\t\t\tget(target, property, receiver) {\n\t\t\t\tconst member = Reflect.get(target, property, receiver);\n\t\t\t\tif (typeof member === \"function\") {\n\t\t\t\t\treturn (...args: unknown[]) => {\n\t\t\t\t\t\tif (!owner.isActive()) return undefined;\n\t\t\t\t\t\treturn Reflect.apply(member, target, args);\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\treturn owner.isActive() ? wrap(member) : undefined;\n\t\t\t},\n\t\t});\n\t\tproxies.set(object, proxy);\n\t\treturn proxy;\n\t};\n\treturn wrap(ui) as ExtensionUIContext;\n}\n\nexport function isAbortError(error: unknown, signal?: AbortSignal): boolean {\n\tif (signal?.aborted) return true;\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.message === \"MCP extension runtime stopped\");\n}\n"]}

package/dist/extensions/mcp/runtime-owner.js

@@ -0,0 +1,84 @@
+import { formatTerminalError } from "./utils.js";
+export function createMcpRuntimeOwner() {
+    const controller = new AbortController();
+    const cleanups = [];
+    let stopPromise;
+    const reportCleanupFailure = (error, late) => {
+        console.error(`MCP: ${late ? "late " : ""}runtime cleanup failed: ${formatTerminalError(error)}`);
+    };
+    return {
+        signal: controller.signal,
+        isActive: () => !controller.signal.aborted,
+        addCleanup: (cleanup) => {
+            if (controller.signal.aborted) {
+                void Promise.resolve()
+                    .then(cleanup)
+                    .catch((error) => reportCleanupFailure(error, true));
+                return;
+            }
+            cleanups.push(cleanup);
+        },
+        stop: (reason = "MCP extension runtime stopped") => {
+            if (stopPromise)
+                return stopPromise;
+            controller.abort(new Error(reason));
+            const pendingCleanups = cleanups
+                .splice(0)
+                .reverse()
+                .map((cleanup) => Promise.resolve().then(cleanup));
+            stopPromise = Promise.allSettled(pendingCleanups).then((results) => {
+                const failures = results.flatMap((result) => (result.status === "rejected" ? [result.reason] : []));
+                if (failures.length > 0) {
+                    const aggregate = new AggregateError(failures, "MCP runtime cleanup failed");
+                    console.error(`MCP: runtime cleanup failed: ${formatTerminalError(aggregate)}`);
+                    throw aggregate;
+                }
+            });
+            return stopPromise;
+        },
+        throwIfInactive: () => controller.signal.throwIfAborted(),
+    };
+}
+export function combineAbortSignals(...signals) {
+    const active = signals.filter((signal) => signal !== undefined);
+    if (active.length === 0)
+        return undefined;
+    if (active.length === 1)
+        return active[0];
+    return AbortSignal.any(active);
+}
+/** Fence session-bound UI calls after the owning extension runtime stops. */
+export function createOwnedUi(ui, owner) {
+    const proxies = new WeakMap();
+    const wrap = (value) => {
+        if ((typeof value !== "object" || value === null) && typeof value !== "function") {
+            return value;
+        }
+        const object = value;
+        const existing = proxies.get(object);
+        if (existing)
+            return existing;
+        const proxy = new Proxy(object, {
+            get(target, property, receiver) {
+                const member = Reflect.get(target, property, receiver);
+                if (typeof member === "function") {
+                    return (...args) => {
+                        if (!owner.isActive())
+                            return undefined;
+                        return Reflect.apply(member, target, args);
+                    };
+                }
+                return owner.isActive() ? wrap(member) : undefined;
+            },
+        });
+        proxies.set(object, proxy);
+        return proxy;
+    };
+    return wrap(ui);
+}
+export function isAbortError(error, signal) {
+    if (signal?.aborted)
+        return true;
+    return error instanceof Error && (error.name === "AbortError" || error.message === "MCP extension runtime stopped");
+}
+//# sourceMappingURL=runtime-owner.js.map

package/dist/extensions/mcp/runtime-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-owner.js","sourceRoot":"","sources":["../../../src/extensions/mcp/runtime-owner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAUjD,MAAM,UAAU,qBAAqB,GAAoB;IACxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,IAAI,WAAsC,CAAC;IAE3C,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAE,IAAa,EAAE,EAAE,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,2BAA2B,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAAA,CAClG,CAAC;IAEF,OAAO;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;QAC1C,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,KAAK,OAAO,CAAC,OAAO,EAAE;qBACpB,IAAI,CAAC,OAAO,CAAC;qBACb,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBACtD,OAAO;YACR,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAA,CACvB;QACD,IAAI,EAAE,CAAC,MAAM,GAAG,+BAA+B,EAAE,EAAE,CAAC;YACnD,IAAI,WAAW;gBAAE,OAAO,WAAW,CAAC;YACpC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACpC,MAAM,eAAe,GAAG,QAAQ;iBAC9B,MAAM,CAAC,CAAC,CAAC;iBACT,OAAO,EAAE;iBACT,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACpD,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;oBAC7E,OAAO,CAAC,KAAK,CAAC,gCAAgC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;oBAChF,MAAM,SAAS,CAAC;gBACjB,CAAC;YAAA,CACD,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QAAA,CACnB;QACD,eAAe,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE;KACzD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAG,OAAuC,EAA2B;IACxG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAyB,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAAA,CAC/B;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,EAAsB,EAAE,KAAsB,EAAsB;IACjG,MAAM,OAAO,GAAG,IAAI,OAAO,EAAkB,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAe,CAAC;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE;YAC/B,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACvD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;oBAClC,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC;wBAC9B,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;4BAAE,OAAO,SAAS,CAAC;wBACxC,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;oBAAA,CAC3C,CAAC;gBACH,CAAC;gBACD,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAAA,CACnD;SACD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC;IAAA,CACb,CAAC;IACF,OAAO,IAAI,CAAC,EAAE,CAAuB,CAAC;AAAA,CACtC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,MAAoB,EAAW;IAC3E,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,+BAA+B,CAAC,CAAC;AAAA,CACpH","sourcesContent":["import type { ExtensionUIContext } from \"../../core/extensions/types.ts\";\nimport { formatTerminalError } from \"./utils.ts\";\n\nexport interface McpRuntimeOwner {\n\treadonly signal: AbortSignal;\n\tisActive(): boolean;\n\taddCleanup(cleanup: () => void | Promise<void>): void;\n\tstop(reason?: string): Promise<void>;\n\tthrowIfInactive(): void;\n}\n\nexport function createMcpRuntimeOwner(): McpRuntimeOwner {\n\tconst controller = new AbortController();\n\tconst cleanups: Array<() => void | Promise<void>> = [];\n\tlet stopPromise: Promise<void> | undefined;\n\n\tconst reportCleanupFailure = (error: unknown, late: boolean) => {\n\t\tconsole.error(`MCP: ${late ? \"late \" : \"\"}runtime cleanup failed: ${formatTerminalError(error)}`);\n\t};\n\n\treturn {\n\t\tsignal: controller.signal,\n\t\tisActive: () => !controller.signal.aborted,\n\t\taddCleanup: (cleanup) => {\n\t\t\tif (controller.signal.aborted) {\n\t\t\t\tvoid Promise.resolve()\n\t\t\t\t\t.then(cleanup)\n\t\t\t\t\t.catch((error) => reportCleanupFailure(error, true));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcleanups.push(cleanup);\n\t\t},\n\t\tstop: (reason = \"MCP extension runtime stopped\") => {\n\t\t\tif (stopPromise) return stopPromise;\n\t\t\tcontroller.abort(new Error(reason));\n\t\t\tconst pendingCleanups = cleanups\n\t\t\t\t.splice(0)\n\t\t\t\t.reverse()\n\t\t\t\t.map((cleanup) => Promise.resolve().then(cleanup));\n\t\t\tstopPromise = Promise.allSettled(pendingCleanups).then((results) => {\n\t\t\t\tconst failures = results.flatMap((result) => (result.status === \"rejected\" ? [result.reason] : []));\n\t\t\t\tif (failures.length > 0) {\n\t\t\t\t\tconst aggregate = new AggregateError(failures, \"MCP runtime cleanup failed\");\n\t\t\t\t\tconsole.error(`MCP: runtime cleanup failed: ${formatTerminalError(aggregate)}`);\n\t\t\t\t\tthrow aggregate;\n\t\t\t\t}\n\t\t\t});\n\t\t\treturn stopPromise;\n\t\t},\n\t\tthrowIfInactive: () => controller.signal.throwIfAborted(),\n\t};\n}\n\nexport function combineAbortSignals(...signals: Array<AbortSignal | undefined>): AbortSignal | undefined {\n\tconst active = signals.filter((signal): signal is AbortSignal => signal !== undefined);\n\tif (active.length === 0) return undefined;\n\tif (active.length === 1) return active[0];\n\treturn AbortSignal.any(active);\n}\n\n/** Fence session-bound UI calls after the owning extension runtime stops. */\nexport function createOwnedUi(ui: ExtensionUIContext, owner: McpRuntimeOwner): ExtensionUIContext {\n\tconst proxies = new WeakMap<object, object>();\n\tconst wrap = (value: unknown): unknown => {\n\t\tif ((typeof value !== \"object\" || value === null) && typeof value !== \"function\") {\n\t\t\treturn value;\n\t\t}\n\t\tconst object = value as object;\n\t\tconst existing = proxies.get(object);\n\t\tif (existing) return existing;\n\n\t\tconst proxy = new Proxy(object, {\n\t\t\tget(target, property, receiver) {\n\t\t\t\tconst member = Reflect.get(target, property, receiver);\n\t\t\t\tif (typeof member === \"function\") {\n\t\t\t\t\treturn (...args: unknown[]) => {\n\t\t\t\t\t\tif (!owner.isActive()) return undefined;\n\t\t\t\t\t\treturn Reflect.apply(member, target, args);\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\treturn owner.isActive() ? wrap(member) : undefined;\n\t\t\t},\n\t\t});\n\t\tproxies.set(object, proxy);\n\t\treturn proxy;\n\t};\n\treturn wrap(ui) as ExtensionUIContext;\n}\n\nexport function isAbortError(error: unknown, signal?: AbortSignal): boolean {\n\tif (signal?.aborted) return true;\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.message === \"MCP extension runtime stopped\");\n}\n"]}

package/dist/extensions/mcp/sampling-handler.d.ts

@@ -0,0 +1,18 @@
+import type { Api, Model } from "@earendil-works/pi-ai";
+import type { Client, CreateMessageRequest, CreateMessageResult } from "@modelcontextprotocol/client";
+import type { ExtensionUIContext } from "../../core/extensions/types.ts";
+import type { ModelRegistry } from "../../core/model-registry.ts";
+export type SamplingUIContext = Pick<ExtensionUIContext, "confirm">;
+export type SamplingModelRegistry = Pick<ModelRegistry, "getAvailable" | "getApiKeyAndHeaders">;
+export interface SamplingHandlerOptions {
+    serverName: string;
+    autoApprove: boolean;
+    ui?: SamplingUIContext;
+    modelRegistry: SamplingModelRegistry;
+    getCurrentModel: () => Model<Api> | undefined;
+    getSignal: () => AbortSignal | undefined;
+}
+export type ServerSamplingConfig = Omit<SamplingHandlerOptions, "serverName">;
+export declare function registerSamplingHandler(client: Client, options: SamplingHandlerOptions): void;
+export declare function handleSamplingRequest(options: SamplingHandlerOptions, request: CreateMessageRequest): Promise<CreateMessageResult>;
+//# sourceMappingURL=sampling-handler.d.ts.map

package/dist/extensions/mcp/sampling-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampling-handler.d.ts","sourceRoot":"","sources":["../../../src/extensions/mcp/sampling-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAA6B,KAAK,EAAgC,MAAM,uBAAuB,CAAC;AAEjH,OAAO,KAAK,EACX,MAAM,EACN,oBAAoB,EACpB,mBAAmB,EAInB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAKlE,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;AACpE,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,GAAG,qBAAqB,CAAC,CAAC;AAEhG,MAAM,WAAW,sBAAsB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,EAAE,CAAC,EAAE,iBAAiB,CAAC;IACvB,aAAa,EAAE,qBAAqB,CAAC;IACrC,eAAe,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IAC9C,SAAS,EAAE,MAAM,WAAW,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;AAE9E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAW7F;AAED,wBAAsB,qBAAqB,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,oBAAoB,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAuD9B","sourcesContent":["import type { Api, AssistantMessage, Message, Model, ProviderHeaders, TextContent } from \"@earendil-works/pi-ai\";\nimport { complete } from \"@earendil-works/pi-ai/compat\";\nimport type {\n\tClient,\n\tCreateMessageRequest,\n\tCreateMessageResult,\n\tModelPreferences,\n\tSamplingMessage,\n\tSamplingMessageContentBlock,\n} from \"@modelcontextprotocol/client\";\nimport type { ExtensionUIContext } from \"../../core/extensions/types.ts\";\nimport type { ModelRegistry } from \"../../core/model-registry.ts\";\nimport { throwIfAborted } from \"./abort.ts\";\nimport { combineAbortSignals } from \"./runtime-owner.ts\";\nimport { truncateAtWord } from \"./utils.ts\";\n\nexport type SamplingUIContext = Pick<ExtensionUIContext, \"confirm\">;\nexport type SamplingModelRegistry = Pick<ModelRegistry, \"getAvailable\" | \"getApiKeyAndHeaders\">;\n\nexport interface SamplingHandlerOptions {\n\tserverName: string;\n\tautoApprove: boolean;\n\tui?: SamplingUIContext;\n\tmodelRegistry: SamplingModelRegistry;\n\tgetCurrentModel: () => Model<Api> | undefined;\n\tgetSignal: () => AbortSignal | undefined;\n}\n\nexport type ServerSamplingConfig = Omit<SamplingHandlerOptions, \"serverName\">;\n\nexport function registerSamplingHandler(client: Client, options: SamplingHandlerOptions): void {\n\tclient.setRequestHandler(\"sampling/createMessage\", (request, context) => {\n\t\tconst requestSignal = (context as { signal?: AbortSignal }).signal;\n\t\treturn handleSamplingRequest(\n\t\t\t{\n\t\t\t\t...options,\n\t\t\t\tgetSignal: () => combineAbortSignals(options.getSignal(), requestSignal),\n\t\t\t},\n\t\t\trequest,\n\t\t);\n\t});\n}\n\nexport async function handleSamplingRequest(\n\toptions: SamplingHandlerOptions,\n\trequest: CreateMessageRequest,\n): Promise<CreateMessageResult> {\n\tconst params = request.params;\n\tconst signal = options.getSignal();\n\tthrowIfAborted(signal);\n\n\tif (\"task\" in params && params.task) {\n\t\tthrow new Error(\"MCP sampling tasks are not supported\");\n\t}\n\tif (params.includeContext && params.includeContext !== \"none\") {\n\t\tthrow new Error(\"MCP sampling context inclusion is not supported\");\n\t}\n\tif (params.tools?.length) {\n\t\tthrow new Error(\"MCP sampling tool use is not supported\");\n\t}\n\tif (params.toolChoice) {\n\t\tthrow new Error(\"MCP sampling tool choice is not supported\");\n\t}\n\tif (params.stopSequences?.length) {\n\t\tthrow new Error(\"MCP sampling stop sequences are not supported\");\n\t}\n\n\tconst messages = params.messages.map(convertSamplingMessage);\n\tconst { model, apiKey, headers } = await resolveSamplingModel(options, params.modelPreferences);\n\tthrowIfAborted(signal);\n\tawait confirmSampling(\n\t\toptions,\n\t\t\"Approve MCP sampling request\",\n\t\tformatRequestApproval(options.serverName, `${model.provider}/${model.id}`, params.systemPrompt, messages),\n\t);\n\tthrowIfAborted(signal);\n\n\tconst result = await complete(\n\t\tmodel,\n\t\t{\n\t\t\t...(params.systemPrompt !== undefined ? { systemPrompt: params.systemPrompt } : {}),\n\t\t\tmessages,\n\t\t},\n\t\t{\n\t\t\t...(apiKey !== undefined ? { apiKey } : {}),\n\t\t\t...(headers !== undefined ? { headers } : {}),\n\t\t\tmaxTokens: params.maxTokens,\n\t\t\t...(params.temperature !== undefined ? { temperature: params.temperature } : {}),\n\t\t\t...(params.metadata !== undefined ? { metadata: params.metadata as Record<string, unknown> } : {}),\n\t\t\t...(signal ? { signal } : {}),\n\t\t},\n\t);\n\n\tconst converted = convertAssistantResult(result);\n\tthrowIfAborted(signal);\n\tawait confirmSampling(\n\t\toptions,\n\t\t\"Return MCP sampling response\",\n\t\tformatResponseApproval(options.serverName, converted),\n\t);\n\treturn converted;\n}\n\nfunction formatRequestApproval(\n\tserverName: string,\n\tmodelName: string,\n\tsystemPrompt: string | undefined,\n\tmessages: Message[],\n): string {\n\tconst lines = [\n\t\t`${serverName} wants to sample ${messages.length} message${messages.length === 1 ? \"\" : \"s\"} with ${modelName}.`,\n\t];\n\tif (systemPrompt) {\n\t\tlines.push(`System: ${truncateAtWord(systemPrompt, 400)}`);\n\t}\n\tfor (const [index, message] of messages.entries()) {\n\t\tlines.push(`${index + 1}. ${message.role}: ${truncateAtWord(messageText(message), 400)}`);\n\t}\n\treturn lines.join(\"\\n\\n\");\n}\n\nfunction formatResponseApproval(serverName: string, response: CreateMessageResult): string {\n\tconst text = response.content.type === \"text\" ? response.content.text : `[${response.content.type} content]`;\n\treturn `${serverName} will receive this response from ${response.model}:\\n\\n${truncateAtWord(text, 1000)}`;\n}\n\nfunction messageText(message: Message): string {\n\tif (typeof message.content === \"string\") return message.content;\n\treturn message.content\n\t\t.map((block) => {\n\t\t\tif (block.type === \"text\") return block.text;\n\t\t\tif (block.type === \"image\") return `[image: ${block.mimeType}]`;\n\t\t\tif (block.type === \"thinking\") return \"[thinking]\";\n\t\t\tif (block.type === \"toolCall\") return `[tool call: ${block.name}]`;\n\t\t\treturn \"[content]\";\n\t\t})\n\t\t.join(\"\\n\");\n}\n\nasync function resolveSamplingModel(\n\toptions: SamplingHandlerOptions,\n\tmodelPreferences: ModelPreferences | undefined,\n): Promise<{\n\tmodel: Model<Api>;\n\tapiKey?: string;\n\theaders?: ProviderHeaders;\n}> {\n\tconst candidates: Model<Api>[] = [];\n\tconst availableModels = options.modelRegistry.getAvailable();\n\n\tfor (const hint of modelPreferences?.hints ?? []) {\n\t\tconst normalizedHint = hint.name?.trim().toLowerCase();\n\t\tif (!normalizedHint) continue;\n\t\tfor (const model of availableModels) {\n\t\t\tconst searchableNames = [`${model.provider}/${model.id}`, model.id, model.name];\n\t\t\tif (searchableNames.some((name) => name.toLowerCase().includes(normalizedHint))) {\n\t\t\t\taddSamplingCandidate(candidates, model);\n\t\t\t}\n\t\t}\n\t}\n\n\tconst currentModel = options.getCurrentModel();\n\tif (currentModel) addSamplingCandidate(candidates, currentModel);\n\n\tfor (const model of availableModels) {\n\t\taddSamplingCandidate(candidates, model);\n\t}\n\n\tconst errors: string[] = [];\n\tconst signal = options.getSignal();\n\tfor (const model of candidates) {\n\t\tthrowIfAborted(signal);\n\t\tconst auth = await options.modelRegistry.getApiKeyAndHeaders(model);\n\t\tthrowIfAborted(signal);\n\t\tif (auth.ok === false) {\n\t\t\terrors.push(`${model.provider}/${model.id}: ${auth.error}`);\n\t\t\tcontinue;\n\t\t}\n\t\treturn {\n\t\t\tmodel,\n\t\t\t...(auth.apiKey !== undefined ? { apiKey: auth.apiKey } : {}),\n\t\t\t...(auth.headers !== undefined ? { headers: auth.headers } : {}),\n\t\t};\n\t}\n\n\tif (errors.length > 0) {\n\t\tthrow new Error(`No configured auth for MCP sampling model. ${errors.join(\"; \")}`);\n\t}\n\tthrow new Error(\"No Nexus model is available for MCP sampling\");\n}\n\nfunction addSamplingCandidate(candidates: Model<Api>[], model: Model<Api>): void {\n\tif (!candidates.some((candidate) => candidate.provider === model.provider && candidate.id === model.id)) {\n\t\tcandidates.push(model);\n\t}\n}\n\nasync function confirmSampling(options: SamplingHandlerOptions, title: string, message: string): Promise<void> {\n\tif (options.autoApprove) return;\n\tif (!options.ui) {\n\t\tthrow new Error(\n\t\t\t\"MCP sampling requires interactive approval. Set settings.samplingAutoApprove to true to allow it without UI.\",\n\t\t);\n\t}\n\tconst approved = await options.ui.confirm(title, message);\n\tif (!approved) {\n\t\tthrow new Error(\"MCP sampling request was declined\");\n\t}\n}\n\nfunction convertSamplingMessage(message: SamplingMessage): Message {\n\tconst blocks = Array.isArray(message.content) ? message.content : [message.content];\n\tif (message.role === \"user\") {\n\t\treturn {\n\t\t\trole: \"user\",\n\t\t\tcontent: blocks.map(convertUserContent),\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\t}\n\n\treturn {\n\t\trole: \"assistant\",\n\t\tcontent: blocks.map(convertAssistantContent),\n\t\tapi: \"mcp-sampling\",\n\t\tprovider: \"mcp\",\n\t\tmodel: \"sampling-request\",\n\t\tusage: zeroUsage(),\n\t\tstopReason: \"stop\",\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nfunction convertUserContent(block: SamplingMessageContentBlock): TextContent {\n\tif (block.type === \"text\") {\n\t\treturn { type: \"text\", text: block.text };\n\t}\n\tthrow new Error(`MCP sampling ${block.type} content is not supported`);\n}\n\nfunction convertAssistantContent(block: SamplingMessageContentBlock): TextContent {\n\tif (block.type === \"text\") {\n\t\treturn { type: \"text\", text: block.text };\n\t}\n\tthrow new Error(`MCP sampling assistant ${block.type} content is not supported`);\n}\n\nfunction convertAssistantResult(message: AssistantMessage): CreateMessageResult {\n\tif (message.stopReason === \"error\") {\n\t\tthrow new Error(message.errorMessage ?? \"MCP sampling model call failed\");\n\t}\n\tif (message.stopReason === \"aborted\") {\n\t\tthrow new Error(message.errorMessage ?? \"MCP sampling model call was aborted\");\n\t}\n\n\tconst text = message.content\n\t\t.map((block) => {\n\t\t\tif (block.type === \"text\") return block.text;\n\t\t\tif (block.type === \"thinking\") return undefined;\n\t\t\tthrow new Error(`MCP sampling result ${block.type} content is not supported`);\n\t\t})\n\t\t.filter((value): value is string => value !== undefined)\n\t\t.join(\"\\n\\n\")\n\t\t.trim();\n\n\tif (!text) {\n\t\tthrow new Error(\"MCP sampling result did not contain text content\");\n\t}\n\n\treturn {\n\t\trole: \"assistant\",\n\t\tcontent: { type: \"text\", text },\n\t\tmodel: `${message.provider}/${message.model}`,\n\t\tstopReason: mapStopReason(message.stopReason),\n\t};\n}\n\nfunction mapStopReason(reason: AssistantMessage[\"stopReason\"]): CreateMessageResult[\"stopReason\"] {\n\tif (reason === \"stop\") return \"endTurn\";\n\tif (reason === \"length\") return \"maxTokens\";\n\tif (reason === \"toolUse\") return \"toolUse\";\n\treturn reason;\n}\n\nfunction zeroUsage(): AssistantMessage[\"usage\"] {\n\treturn {\n\t\tinput: 0,\n\t\toutput: 0,\n\t\tcacheRead: 0,\n\t\tcacheWrite: 0,\n\t\ttotalTokens: 0,\n\t\tcost: {\n\t\t\tinput: 0,\n\t\t\toutput: 0,\n\t\t\tcacheRead: 0,\n\t\t\tcacheWrite: 0,\n\t\t\ttotal: 0,\n\t\t},\n\t};\n}\n"]}