@bevel-software/platform-core-backend 0.7.5 → 0.8.0

package/dist/modules/tool-manuals/mcp-server-edit.service.d.ts

@@ -0,0 +1,92 @@
+import { type AuthUser } from '@bevel-software/platform-shared';
+import { type WorkspaceService } from '../workspace/workspace.service.js';
+import type { IAccessControl } from '../access/access-control.interface.js';
+import type { IToolManualService, ToolVariable } from './tool-manuals.contract.js';
+/**
+ * Server-scoped editing of one MCP server — the form the tool page uses
+ * instead of dropping a writer into raw `mcp.json`.
+ *
+ * One server's truth spans TWO files (the spec's split, not ours): the
+ * portable half in `mcp.json` (transport, url, literal headers) and our half
+ * in `plugin.json`'s `extensions["software.bevel.hexis"].mcpServers[<name>]`
+ * (auth headers carrying `${VAR}` vault references, variable declarations,
+ * description, `local`). This service is the ONE writer that keeps the two in
+ * step: a save rewrites both entries and commits them together, because a
+ * server whose auth landed without its url — or the reverse — is a broken
+ * tool with no author to blame.
+ *
+ * RENAME IS DESTRUCTIVE BY DESIGN and the route says so: the `mcpServers` key
+ * is the namespace vault secrets bind to (`<name>_<VAR>`), so renaming a
+ * server orphans every configured secret and completed sign-in under the old
+ * key. The frontend counts what disconnects (it already holds per-variable
+ * status) and confirms; this service just refuses a rename onto a taken key.
+ */
+export type McpTransport = 'streamable-http' | 'sse' | 'stdio';
+export interface McpServerView {
+    name: string;
+    transport: McpTransport;
+    url?: string;
+    command?: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    /** Portable headers, stored in mcp.json. Never carry a `${VAR}`. */
+    literalHeaders: Record<string, string>;
+    /** Auth headers with vault references, stored in the extensions block. */
+    authHeaders: Record<string, string>;
+    variables: ToolVariable[];
+    description?: string;
+    local: boolean;
+    canWrite: boolean;
+}
+/**
+ * PATCH semantics, field by field: `undefined` means "the client did not
+ * surface this field" and the stored value survives; a present-but-empty
+ * value (`{}`, `[]`, `''`) is an explicit clear. A full-replace contract
+ * would make every client responsible for echoing back fields it does not
+ * edit — and the one that forgot would silently destroy the literal headers
+ * in mcp.json or the variable declarations behind `${VAR}` references.
+ */
+export interface McpServerWrite {
+    newName?: string;
+    transport: McpTransport;
+    url?: string;
+    command?: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    literalHeaders?: Record<string, string>;
+    authHeaders?: Record<string, string>;
+    variables?: ToolVariable[];
+    description?: string;
+    local?: boolean;
+}
+export declare class McpServerEditError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+interface CommitDriver {
+    runPendingCommit(workspaceId: string, branch: string, targetPath: string, user: AuthUser, opts?: {
+        systemAuthorized?: boolean;
+    }): Promise<void>;
+}
+export declare class McpServerEditService {
+    private readonly workspaceService;
+    private readonly commits;
+    private readonly accessControl;
+    private readonly toolManuals;
+    private readonly kbDirName;
+    constructor(workspaceService: WorkspaceService, commits: CommitDriver, accessControl: IAccessControl, toolManuals: IToolManualService, kbDirName: string);
+    /** The merged view of one server, or null when unknown/unreadable (indistinguishable, fail closed). */
+    getServer(userEmail: string, slug: string): Promise<McpServerView | null>;
+    /** Rewrite one server across both files, in one commit. Returns the (possibly new) name. */
+    putServer(user: AuthUser, slug: string, write: McpServerWrite): Promise<{
+        name: string;
+    }>;
+    /** Resolve a slug to an mcp.json-backed server the caller can READ; null otherwise. */
+    private locate;
+    private readFiles;
+    private extensionEntry;
+}
+export {};
+//# sourceMappingURL=mcp-server-edit.service.d.ts.map

package/dist/modules/tool-manuals/mcp-server-edit.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-edit.service.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-manuals/mcp-server-edit.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,QAAQ,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAIhG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAEnF;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,KAAK,GAAG,OAAO,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBADvB,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM;CAK1B;AAuBD,UAAU,YAAY;IACpB,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,qBAAa,oBAAoB;IAE7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAJT,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE,YAAY,EACrB,aAAa,EAAE,cAAc,EAC7B,WAAW,EAAE,kBAAkB,EAC/B,SAAS,EAAE,MAAM;IAGpC,uGAAuG;IACjG,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA6B/E,4FAA4F;IACtF,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAwN/F,uFAAuF;YACzE,MAAM;YAkBN,SAAS;IAoBvB,OAAO,CAAC,cAAc;CAMvB"}

package/dist/modules/tool-manuals/mcp-server-edit.service.js

@@ -0,0 +1,328 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { DEFAULT_BRANCH, HEXIS_EXTENSION_NS, PLUGINS_DIR, PLUGIN_MANIFEST_FILE, PLUGIN_MCP_FILE, } from '@bevel-software/platform-shared';
+import { workspaceIdForBranch } from '../workspace/workspace.service.js';
+import { validatedVariables } from './mcp-json-discovery.js';
+import { assertSafeFetchUrl } from '../../shared/ssrf.js';
+import { containsVariableReference, findReservedVariableRef } from '../../shared/variable-refs.js';
+export class McpServerEditError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'McpServerEditError';
+    }
+}
+/** Same shape the discovery accepts: the key is a namespace, not prose. */
+const SERVER_NAME_RE = /^[a-z0-9][a-z0-9_-]*$/;
+// The substitutor's own grammar (shared/variable-refs.ts) decides what is a
+// reference: `${A-B}` is not (stays a literal header), `$5` is (digit-leading
+// names are legal). The migration's header split applies the same predicate.
+const hasVarRef = containsVariableReference;
+function isRecord(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/**
+ * The same reserved-reference policy discovery enforces, applied at SAVE: a
+ * `${…API_URL}`/`${…CONNECTION_KEY}` persisted here would make discovery drop
+ * the server on its next scan — an editor that can save self-invalidating
+ * config is worse than a 422 naming the reference. The same shared grammar
+ * both sides scan with is what makes "saveable" and "discoverable" agree.
+ */
+const findReservedRef = findReservedVariableRef;
+export class McpServerEditService {
+    workspaceService;
+    commits;
+    accessControl;
+    toolManuals;
+    kbDirName;
+    constructor(workspaceService, commits, accessControl, toolManuals, kbDirName) {
+        this.workspaceService = workspaceService;
+        this.commits = commits;
+        this.accessControl = accessControl;
+        this.toolManuals = toolManuals;
+        this.kbDirName = kbDirName;
+    }
+    /** The merged view of one server, or null when unknown/unreadable (indistinguishable, fail closed). */
+    async getServer(userEmail, slug) {
+        const located = await this.locate(userEmail, slug);
+        if (!located)
+            return null;
+        const { folder, name, wsId, mcpJsonPath } = located;
+        const { mcp, manifest } = await this.readFiles(folder);
+        const entry = mcp?.mcpServers?.[name];
+        if (!entry || typeof entry !== 'object')
+            return null;
+        const raw = entry;
+        const ext = this.extensionEntry(manifest, name);
+        return {
+            name,
+            transport: raw.type ?? 'streamable-http',
+            ...(typeof raw.url === 'string' ? { url: raw.url } : {}),
+            ...(typeof raw.command === 'string' ? { command: raw.command } : {}),
+            ...(Array.isArray(raw.args) ? { args: raw.args.map(String) } : {}),
+            ...(typeof raw.cwd === 'string' ? { cwd: raw.cwd } : {}),
+            ...(raw.env && typeof raw.env === 'object' ? { env: raw.env } : {}),
+            // Shape-checked, not merely null-coalesced: both files are hand-editable
+            // knowledge-base content, and a string where an object/array belongs
+            // would flow into the form's Object.entries/`.map` as nonsense.
+            literalHeaders: isRecord(raw.headers) ? raw.headers : {},
+            authHeaders: isRecord(ext.headers) ? ext.headers : {},
+            variables: Array.isArray(ext.variables) ? ext.variables : [],
+            ...(typeof ext.description === 'string' ? { description: ext.description } : {}),
+            local: ext.local === true || raw.type === 'stdio',
+            canWrite: await this.accessControl.canWrite(wsId, userEmail, mcpJsonPath),
+        };
+    }
+    /** Rewrite one server across both files, in one commit. Returns the (possibly new) name. */
+    async putServer(user, slug, write) {
+        const located = await this.locate(user.email, slug);
+        if (!located)
+            throw new McpServerEditError('No such tool.', 404);
+        const { folder, name, wsId, mcpJsonPath } = located;
+        if (!(await this.accessControl.canWrite(wsId, user.email, mcpJsonPath))) {
+            throw new McpServerEditError("You don't have permission to edit this plugin's servers.", 403);
+        }
+        const { mcp, manifest, mcpAbs, manifestAbs } = await this.readFiles(folder);
+        if (!mcp?.mcpServers || typeof mcp.mcpServers !== 'object') {
+            throw new McpServerEditError(`${PLUGIN_MCP_FILE} is missing or unparsable — fix the file first.`, 422);
+        }
+        const servers = mcp.mcpServers;
+        if (!(name in servers))
+            throw new McpServerEditError('No such server.', 404);
+        if (write.transport !== 'streamable-http' && write.transport !== 'sse' && write.transport !== 'stdio') {
+            // Persisting an unknown transport would save an entry discovery then
+            // refuses — an unusable server with no error at the moment it was made.
+            throw new McpServerEditError(`Unknown transport "${String(write.transport)}".`, 422);
+        }
+        // The EFFECTIVE value of every field, PATCH-over-stored (see
+        // McpServerWrite): `undefined` keeps what the files already say, a
+        // present value — empty included — replaces it.
+        const prior = isRecord(servers[name]) ? servers[name] : {};
+        const priorExt = this.extensionEntry(manifest, name);
+        const url = write.url ?? (typeof prior.url === 'string' ? prior.url : undefined);
+        const command = write.command ?? (typeof prior.command === 'string' ? prior.command : undefined);
+        const args = write.args ?? (Array.isArray(prior.args) ? prior.args.map(String) : undefined);
+        const env = write.env ?? (isRecord(prior.env) ? prior.env : undefined);
+        const cwd = write.cwd ?? (typeof prior.cwd === 'string' ? prior.cwd : undefined);
+        const literalIn = write.literalHeaders ?? (isRecord(prior.headers) ? prior.headers : {});
+        const authIn = write.authHeaders ?? (isRecord(priorExt.headers) ? priorExt.headers : {});
+        // RAW on the stored side, no shape fallback: coercing malformed stored
+        // declarations to [] here would let a save that never touched variables
+        // silently CLEAR them — the validator below owes that case a 422, same
+        // as any other malformed input.
+        const variablesIn = write.variables ?? priorExt.variables;
+        // Discovery's OWN validator, at save time (like the reserved-ref check
+        // below): a malformed declaration — bad name, duplicate, re-declared
+        // platform name, oauth on a shared scope or with a broken provider —
+        // persisted here would make discovery drop the whole server on its next
+        // scan. What comes back is the normalized form discovery would read, and
+        // that is what gets stored.
+        const variables = validatedVariables(variablesIn);
+        if (variables === null) {
+            throw new McpServerEditError('The `variables` declaration is malformed — each entry needs a unique, non-reserved ' +
+                'alphanumeric/underscore name, a scope of `admin` or `user`, and any `oauth` block must sit ' +
+                'on a `user`-scoped variable with valid https provider URLs and a client id.', 422);
+        }
+        const description = write.description ?? (typeof priorExt.description === 'string' ? priorExt.description : undefined);
+        const local = write.local ?? (priorExt.local === true);
+        // The WHOLE writable surface, mirroring what discovery scans — effective
+        // values, not just the incoming patch: a reserved ref smuggled through a
+        // stdio arg (`--url=${X_API_URL}`), env value, cwd or description would
+        // save with a 200 and then vanish from the catalog on the next scan —
+        // the exact self-invalidating state this 422 prevents.
+        const reservedRef = findReservedRef({
+            url,
+            command,
+            args,
+            env,
+            cwd,
+            description,
+            literalHeaders: literalIn,
+            authHeaders: authIn,
+            variables,
+        });
+        if (reservedRef !== null) {
+            throw new McpServerEditError(`"${reservedRef}" references a platform-seeded variable (API_URL / CONNECTION_KEY) — ` +
+                'discovery refuses servers that name them, so this cannot be saved.', 422);
+        }
+        const target = write.newName?.trim() || name;
+        if (!SERVER_NAME_RE.test(target)) {
+            throw new McpServerEditError('A server name is its secret namespace: lowercase alphanumeric with `_`/`-`.', 422);
+        }
+        if (target !== name && target in servers) {
+            throw new McpServerEditError(`A server named "${target}" already exists here.`, 409);
+        }
+        // Defense in depth on the portable file: a `${VAR}` in mcp.json would be
+        // transmitted literally by a conformant client AND violate the spec's
+        // no-credentials rule — reroute it to the extensions block instead of
+        // trusting the frontend's split.
+        const literal = {};
+        const auth = { ...authIn };
+        for (const [k, v] of Object.entries(literalIn)) {
+            if (hasVarRef(v))
+                auth[k] = v;
+            else
+                literal[k] = v;
+        }
+        let entry;
+        if (write.transport === 'stdio') {
+            const cmd = command?.trim();
+            if (!cmd)
+                throw new McpServerEditError('A stdio server needs a command.', 422);
+            entry = {
+                type: 'stdio',
+                command: cmd,
+                ...(args && args.length > 0 ? { args } : {}),
+                ...(env && Object.keys(env).length > 0 ? { env } : {}),
+                ...(cwd ? { cwd } : {}),
+            };
+        }
+        else {
+            let parsed;
+            try {
+                parsed = new URL(url ?? '');
+            }
+            catch {
+                throw new McpServerEditError('The server needs a valid http(s) URL.', 422);
+            }
+            if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+                throw new McpServerEditError('The server needs a valid http(s) URL.', 422);
+            }
+            // The same SSRF gate discovery applies on read: without it here, a save
+            // succeeds and the server then silently disappears from the catalog —
+            // an edit flow that eats its own output. Local-only servers are exempt;
+            // loopback is what local means.
+            if (local !== true) {
+                try {
+                    assertSafeFetchUrl(url ?? '', { label: 'Server URL' });
+                }
+                catch (err) {
+                    throw new McpServerEditError(`${err instanceof Error ? err.message : 'The URL is not reachable from the workspace'} — ` +
+                        'mark the server local-only if it is deliberately private.', 422);
+                }
+            }
+            entry = {
+                type: write.transport,
+                url,
+                ...(Object.keys(literal).length > 0 ? { headers: literal } : {}),
+            };
+        }
+        if (target !== name)
+            delete servers[name];
+        servers[target] = entry;
+        // The extensions half: rewrite our entry, drop the old key on rename.
+        // A missing/unparsable manifest refuses the save when there is auth to
+        // store — silently dropping a credential mapping is worse than an error.
+        const extEntry = {
+            ...(Object.keys(auth).length > 0 ? { headers: auth } : {}),
+            ...(variables.length > 0 ? { variables } : {}),
+            ...(description ? { description } : {}),
+            ...(local === true && write.transport !== 'stdio' ? { local: true } : {}),
+        };
+        if (manifest === null && Object.keys(extEntry).length > 0) {
+            throw new McpServerEditError(`${PLUGIN_MANIFEST_FILE} is missing or unparsable — fix the file first.`, 422);
+        }
+        if (manifest !== null) {
+            // A wrong-TYPED extensions chain (a string, an array) would throw a
+            // TypeError below and surface as a 500. It is also not ours to silently
+            // replace: an array `extensions` may be another tool's data, malformed
+            // or not, and a save aimed at one server should not discard it.
+            const badShape = (v) => v !== undefined && (typeof v !== 'object' || v === null || Array.isArray(v));
+            const ext = (manifest.extensions ??= {});
+            if (badShape(manifest.extensions)) {
+                throw new McpServerEditError(`${PLUGIN_MANIFEST_FILE} has a malformed \`extensions\` block — fix the file first.`, 422);
+            }
+            if (badShape(ext[HEXIS_EXTENSION_NS]) || badShape(ext[HEXIS_EXTENSION_NS]?.mcpServers)) {
+                throw new McpServerEditError(`${PLUGIN_MANIFEST_FILE} has a malformed \`extensions\` block — fix the file first.`, 422);
+            }
+            const ns = (ext[HEXIS_EXTENSION_NS] ??= {});
+            const extServers = (ns.mcpServers ??= {});
+            delete extServers[name];
+            if (Object.keys(extEntry).length > 0)
+                extServers[target] = extEntry;
+        }
+        // All-or-nothing for real: snapshot both files first, and on ANY failure
+        // past the first write put the originals back — the API reporting failure
+        // while the workspace keeps half the edit is the state this exists to
+        // prevent.
+        // Rollback scope is the WRITES only. A failed write restores both files
+        // (a half-written pair is the state this exists to prevent); a failed
+        // COMMIT must not — the pending-commit pipeline may already have created
+        // a local commit before the push refused, and rewriting the working tree
+        // to pre-edit bytes would leave it dirty AGAINST that commit, a state the
+        // workflow layer's own pull-rebase recovery then misreads. Commit-stage
+        // failures propagate as-is and the pipeline's recovery owns the cleanup.
+        const [mcpBefore, manifestBefore] = await Promise.all([
+            fs.readFile(mcpAbs, 'utf8').catch(() => null),
+            fs.readFile(manifestAbs, 'utf8').catch(() => null),
+        ]);
+        try {
+            await fs.writeFile(mcpAbs, `${JSON.stringify(mcp, null, 2)}\n`, 'utf8');
+            if (manifest !== null) {
+                await fs.writeFile(manifestAbs, `${JSON.stringify(manifest, null, 2)}\n`, 'utf8');
+            }
+        }
+        catch (err) {
+            if (mcpBefore !== null)
+                await fs.writeFile(mcpAbs, mcpBefore, 'utf8').catch(() => { });
+            if (manifestBefore !== null)
+                await fs.writeFile(manifestAbs, manifestBefore, 'utf8').catch(() => { });
+            throw err;
+        }
+        // One folder-scoped commit, ungated beyond the caller's own write access —
+        // both files or neither. The catalog cache is stale the moment it lands.
+        await this.commits.runPendingCommit(workspaceIdForBranch(DEFAULT_BRANCH), DEFAULT_BRANCH, `${this.kbDirName}/${PLUGINS_DIR}/${folder}`, user);
+        this.toolManuals.invalidate();
+        return { name: target };
+    }
+    /** Resolve a slug to an mcp.json-backed server the caller can READ; null otherwise. */
+    async locate(userEmail, slug) {
+        const summaries = await this.toolManuals.listAccessible(userEmail);
+        const found = summaries.find((s) => s.slug === slug);
+        if (!found || found.type !== 'mcp' || !found.path.endsWith(`/${PLUGIN_MCP_FILE}`))
+            return null;
+        const segments = found.path.split('/');
+        const folder = segments[1];
+        if (!folder)
+            return null;
+        return {
+            folder,
+            name: found.name,
+            wsId: workspaceIdForBranch(DEFAULT_BRANCH),
+            mcpJsonPath: found.path,
+        };
+    }
+    async readFiles(folder) {
+        const wsId = workspaceIdForBranch(DEFAULT_BRANCH);
+        await this.workspaceService.getOrCreateForBranch(DEFAULT_BRANCH);
+        const wsDir = await this.workspaceService.getWorkspacePath(wsId);
+        const pluginDir = path.join(wsDir, this.kbDirName, PLUGINS_DIR, folder);
+        const mcpAbs = path.join(pluginDir, PLUGIN_MCP_FILE);
+        const manifestAbs = path.join(pluginDir, PLUGIN_MANIFEST_FILE);
+        return {
+            mcp: await readJson(mcpAbs),
+            manifest: await readJson(manifestAbs),
+            mcpAbs,
+            manifestAbs,
+        };
+    }
+    extensionEntry(manifest, name) {
+        const ns = manifest?.extensions?.[HEXIS_EXTENSION_NS];
+        const servers = ns?.mcpServers;
+        const entry = servers?.[name];
+        return entry && typeof entry === 'object' ? entry : {};
+    }
+}
+async function readJson(p) {
+    try {
+        const parsed = JSON.parse(await fs.readFile(p, 'utf-8'));
+        return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=mcp-server-edit.service.js.map

package/dist/modules/tool-manuals/mcp-server-edit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-edit.service.js","sourceRoot":"","sources":["../../../src/modules/tool-manuals/mcp-server-edit.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,eAAe,GAEhB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAyB,MAAM,mCAAmC,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAmEnG,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGhC;IAFX,YACE,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAQ;QAGvB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAE/C,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAE5C,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAYhD,MAAM,OAAO,oBAAoB;IAEZ;IACA;IACA;IACA;IACA;IALnB,YACmB,gBAAkC,EAClC,OAAqB,EACrB,aAA6B,EAC7B,WAA+B,EAC/B,SAAiB;QAJjB,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,YAAO,GAAP,OAAO,CAAc;QACrB,kBAAa,GAAb,aAAa,CAAgB;QAC7B,gBAAW,GAAX,WAAW,CAAoB;QAC/B,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEJ,uGAAuG;IACvG,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,IAAY;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACpD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,KAAK,GAAI,GAAG,EAAE,UAAkD,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO;YACL,IAAI;YACJ,SAAS,EAAG,GAAG,CAAC,IAAqB,IAAI,iBAAiB;YAC1D,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAA6B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,yEAAyE;YACzE,qEAAqE;YACrE,gEAAgE;YAChE,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE;YACpF,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE;YACjF,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,SAA4B,CAAC,CAAC,CAAC,EAAE;YAChF,GAAG,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;YACjD,QAAQ,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,SAAS,CAAC,IAAc,EAAE,IAAY,EAAE,KAAqB;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,kBAAkB,CAAC,0DAA0D,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,EAAE,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,kBAAkB,CAAC,GAAG,eAAe,iDAAiD,EAAE,GAAG,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAqC,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAE7E,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACtG,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,6DAA6D;QAC7D,mEAAmE;QACnE,gDAAgD;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,GAA8B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,SAAS,GACb,KAAK,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrG,MAAM,MAAM,GACV,KAAK,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,QAAQ,CAAC,OAAkC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxG,uEAAuE;QACvE,wEAAwE;QACxE,uEAAuE;QACvE,gCAAgC;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;QAC1D,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,wEAAwE;QACxE,yEAAyE;QACzE,4BAA4B;QAC5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAkB,CAC1B,qFAAqF;gBACnF,6FAA6F;gBAC7F,6EAA6E,EAC/E,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GACf,KAAK,CAAC,WAAW,IAAI,CAAC,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QAEvD,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,uDAAuD;QACvD,MAAM,WAAW,GAAG,eAAe,CAAC;YAClC,GAAG;YACH,OAAO;YACP,IAAI;YACJ,GAAG;YACH,GAAG;YACH,WAAW;YACX,cAAc,EAAE,SAAS;YACzB,WAAW,EAAE,MAAM;YACnB,SAAS;SACV,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAC1B,IAAI,WAAW,uEAAuE;gBACpF,oEAAoE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,kBAAkB,CAC1B,6EAA6E,EAC7E,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;YACzC,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,MAAM,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,iCAAiC;QACjC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,IAAI,GAA2B,EAAE,GAAG,MAAM,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,IAAI,SAAS,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;gBACzB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,KAA8B,CAAC;QACnC,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,kBAAkB,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;YAC/E,KAAK,GAAG;gBACN,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,GAAG;gBACZ,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChE,MAAM,IAAI,kBAAkB,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC7E,CAAC;YACD,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,gCAAgC;YAChC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,kBAAkB,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,IAAI,kBAAkB,CAC1B,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,6CAA6C,KAAK;wBACxF,2DAA2D,EAC7D,GAAG,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,KAAK,GAAG;gBACN,IAAI,EAAE,KAAK,CAAC,SAAS;gBACrB,GAAG;gBACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAExB,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;QACF,IAAI,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,kBAAkB,CAAC,GAAG,oBAAoB,iDAAiD,EAAE,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,oEAAoE;YACpE,wEAAwE;YACxE,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACvH,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,EAAE,CAA4B,CAAC;YACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,kBAAkB,CAAC,GAAG,oBAAoB,6DAA6D,EAAE,GAAG,CAAC,CAAC;YAC1H,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,QAAQ,CAAE,GAAG,CAAC,kBAAkB,CAAyC,EAAE,UAAU,CAAC,EAAE,CAAC;gBAChI,MAAM,IAAI,kBAAkB,CAAC,GAAG,oBAAoB,6DAA6D,EAAE,GAAG,CAAC,CAAC;YAC1H,CAAC;YACD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAA4B,CAAC;YACvE,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,CAA4B,CAAC;YACrE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,UAAU,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;QACtE,CAAC;QAED,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,WAAW;QACX,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAC7C,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtF,IAAI,cAAc,KAAK,IAAI;gBAAE,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrG,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CACjC,oBAAoB,CAAC,cAAc,CAAC,EACpC,cAAc,EACd,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,IAAI,MAAM,EAAE,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,uFAAuF;IAC/E,KAAK,CAAC,MAAM,CAClB,SAAiB,EACjB,IAAY;QAEZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO;YACL,MAAM;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,oBAAoB,CAAC,cAAc,CAAC;YAC1C,WAAW,EAAE,KAAK,CAAC,IAAI;SACxB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAc;QAMpC,MAAM,IAAI,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAC/D,OAAO;YACL,GAAG,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,MAAM,QAAQ,CAAC,WAAW,CAAC;YACrC,MAAM;YACN,WAAW;SACZ,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,QAAwC,EAAE,IAAY;QAC3E,MAAM,EAAE,GAAI,QAAQ,EAAE,UAAkD,EAAE,CAAC,kBAAkB,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAI,EAA0C,EAAE,UAAU,CAAC;QACxE,MAAM,KAAK,GAAI,OAA+C,EAAE,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;CACF;AAED,KAAK,UAAU,QAAQ,CAAC,CAAS;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/modules/tool-manuals/tool-manuals.contract.d.ts

@@ -1,6 +1,6 @@
 import type { CallTemplate } from '@utcp/sdk';
 /**
- * Tool manuals — user-authored `*.tool` files under `Groups/` in the DEFAULT
+ * Tool manuals — user-authored `*.tool` files under `Plugins/` in the DEFAULT
  * branch KB. Each is a UTCP *manual* (a pointer to where tools come from), not a
  * flattened tool list. Access-controlled exactly like Skills (default-deny ACL
  * on the `.tool` file path). The MCP/UTCP endpoint serves every manual a user
@@ -77,8 +77,8 @@ export interface ToolManualSetup {
     /** Why auto-setup didn't complete — present for `oauth-manual`. */
     reason?: string;
 }
-/** A parsed `.tool` file (normalized). */
-export interface ToolManualDescriptor {
+/** Fields common to every parsed manual — see {@link ToolManualDescriptor}. */
+export interface ToolManualDescriptorBase {
     /** URL-safe id derived from the file name (route `:slug`), unique in the catalog. */
     slug: string;
     /**
@@ -87,7 +87,7 @@ export interface ToolManualDescriptor {
      * catalog; namespacing doubles underscores in vault keys (`utcpNamespacedKey`).
      */
     name: string;
-    /** Repo-root-relative path of the `.tool` file (e.g. `Groups/Everyone/weather.tool`). */
+    /** Repo-root-relative path of the `.tool` file (e.g. `Plugins/Everyone/weather.tool`). */
     path: string;
     type: ToolManualType;
     /**
@@ -105,16 +105,42 @@ export interface ToolManualDescriptor {
     tools?: unknown[];
     /** Declared `${VAR}` scopes (see {@link ToolVariable}); empty when none declared. */
     variables?: ToolVariable[];
-    /**
-     * Whether this tool can run for a REMOTE consumer (Bevel's hosted MCP proxy).
-     * Absent/`true` ⇒ available remotely; `false` ⇒ LOCAL-ONLY — the remote endpoint
-     * skips it (it can't reach e.g. a `localhost` MCP server), and instead surfaces
-     * its path via the `list_local_tools` tool so a local agent can self-configure it.
-     */
-    remote?: boolean;
     /** For `type: mcp`: the admin-facing setup requirement from auto-discovery. */
     setup?: ToolManualSetup;
 }
+/** The spawn spec of a stdio-declared MCP server (a plugin `mcp.json` entry). */
+export interface ToolManualStdioSpec {
+    command: string;
+    args: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+}
+/**
+ * A parsed manual (a `.tool` file or a plugin `mcp.json` entry, normalized).
+ *
+ * `remote` — whether the tool can run for a REMOTE consumer (Bevel's hosted
+ * MCP proxy). Absent/`true` ⇒ available remotely; `false` ⇒ LOCAL-ONLY — the
+ * remote endpoint skips it (it can't reach e.g. a `localhost` MCP server),
+ * and instead surfaces its path via the `list_local_tools` tool so a local
+ * agent can self-configure it.
+ *
+ * `stdio` — for a `type: mcp` server declared with a stdio transport in a
+ * plugin's `mcp.json`: the spawn spec. A UNION, not two optional fields,
+ * because a stdio spec REQUIRES `remote: false` — the hosted proxy can never
+ * spawn a subprocess out of knowledge-base content, so stdio servers are
+ * served only to local consumers, which run them per the Agent Plugins
+ * runtime contract (PLUGIN_ROOT/PLUGIN_DATA, `./` containment) — and the
+ * type refusing `remote: true` beside a spawn spec is what keeps every
+ * producer honest about that.
+ */
+export type ToolManualDescriptor = (ToolManualDescriptorBase & {
+    remote?: boolean;
+    stdio?: undefined;
+}) | (ToolManualDescriptorBase & {
+    type: 'mcp';
+    remote: false;
+    stdio: ToolManualStdioSpec;
+});
 /** A validated UTCP manual dict (`{ utcp_version, manual_version, tools }`). */
 export type UtcpManualDict = Record<string, unknown>;
 /** Result of validating a draft `.tool` for the renderer's preview. */
@@ -176,7 +202,7 @@ export interface IToolManualService {
     /**
      * Every manual in the catalog, UNFILTERED by access — the mirror of
      * `skillService.listSkills(undefined)`. For caller-INDEPENDENT counting only
-     * (the group index's "N tools", which a non-member is allowed to see as a
+     * (the plugin index's "N tools", which a non-member is allowed to see as a
      * number). Never surface a name, path or description from this to someone
      * who cannot read the file; `listAccessible` is the surface for that.
      */

package/dist/modules/tool-manuals/tool-manuals.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-manuals.contract.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-manuals/tool-manuals.contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C;;;;;;;;;;;;;;;GAeG;AAEH,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEvD,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,iBAAiB,CAAC;IACzB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,CAAC;IAC7C,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,sDAAsD;IACtD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC9E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,YAAY,EAAE,cAAc,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAChE;;;;;OAKG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAE7E;;;;;;OAMG;IACH,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACnG,4FAA4F;IAC5F,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IAC5E,4FAA4F;IAC5F,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACrF,wEAAwE;IACxE,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD;;;;;;OAMG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClE;;;;;OAKG;IACH,uBAAuB,CACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CACR;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAC9F,CAAC;IACF,0EAA0E;IAC1E,UAAU,IAAI,IAAI,CAAC;CACpB"}
+{"version":3,"file":"tool-manuals.contract.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-manuals/tool-manuals.contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C;;;;;;;;;;;;;;;GAeG;AAEH,sFAAsF;AACtF,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAEvD,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,iBAAiB,CAAC;IACzB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,cAAc,CAAC;IAC7C,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACvC,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,qFAAqF;IACrF,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,+EAA+E;IAC/E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,oBAAoB,GAC5B,CAAC,wBAAwB,GAAG;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,CAAC,GACpE,CAAC,wBAAwB,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAAC;AAE5F,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,sDAAsD;IACtD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC;IAC9E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,YAAY,EAAE,cAAc,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAChE;;;;;OAKG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAE7E;;;;;;OAMG;IACH,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjD;;;;;;OAMG;IACH,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACnG,4FAA4F;IAC5F,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;IAC5E,4FAA4F;IAC5F,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACrF,wEAAwE;IACxE,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD;;;;;;OAMG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClE;;;;;OAKG;IACH,uBAAuB,CACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CACR;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAC9F,CAAC;IACF,0EAA0E;IAC1E,UAAU,IAAI,IAAI,CAAC;CACpB"}

package/dist/modules/tool-manuals/tool-manuals.contract.js

@@ -1,5 +1,5 @@
 /**
- * Tool manuals — user-authored `*.tool` files under `Groups/` in the DEFAULT
+ * Tool manuals — user-authored `*.tool` files under `Plugins/` in the DEFAULT
  * branch KB. Each is a UTCP *manual* (a pointer to where tools come from), not a
  * flattened tool list. Access-controlled exactly like Skills (default-deny ACL
  * on the `.tool` file path). The MCP/UTCP endpoint serves every manual a user

package/dist/modules/tool-manuals/tool-manuals.routes.d.ts

@@ -1,6 +1,10 @@
 import express, { type RequestHandler } from 'express';
+import { type WorkspaceService } from '../workspace/workspace.service.js';
+import type { IAccessControl } from '../access/access-control.interface.js';
 import '@utcp/http';
 import { type IToolManualService } from './tool-manuals.contract.js';
+import { type McpServerEditService } from './mcp-server-edit.service.js';
+import type { AuthUser } from '@bevel-software/platform-shared';
 import '../auth/auth.middleware.js';
 import '../tool-auth/tool-auth.middleware.js';
 /** Resolve a connection-key/internal-token user id to its email (per-caller ACL). */
@@ -14,7 +18,11 @@ export type ResolveUserEmail = (userId: string) => Promise<string | undefined>;
  *   GET /tools/:slug/manual    — an inline `.tool`'s embedded tools as a UTCP
  *                                manual (so inline needs no extra client plugin).
  */
-export declare function createToolManualsAgentRoutes(toolManualService: IToolManualService, manualAuth: RequestHandler, resolveUserEmail: ResolveUserEmail): express.Router;
+export declare function createToolManualsAgentRoutes(toolManualService: IToolManualService, manualAuth: RequestHandler, resolveUserEmail: ResolveUserEmail, archiveDeps?: {
+    workspaceService: WorkspaceService;
+    accessControl: IAccessControl;
+    kbDirName: string;
+}): express.Router;
 /**
  * Browser-facing tool-manual routes (mounted under the JWT auth middleware):
  *   GET  /tools           — the caller's accessible `.tool` manuals (summaries).
@@ -24,5 +32,8 @@ export declare function createToolManualsAgentRoutes(toolManualService: IToolMan
  *                            literal sibling is shadowed by the param segment;
  *                            `preview` is POST-only, so it never collides.
  */
-export declare function createToolManualsBrowserRoutes(toolManualService: IToolManualService): express.Router;
+export declare function createToolManualsBrowserRoutes(toolManualService: IToolManualService, serverEdit?: {
+    service: McpServerEditService;
+    getUser: (userId: string) => Promise<AuthUser | undefined>;
+}): express.Router;
 //# sourceMappingURL=tool-manuals.routes.d.ts.map

package/dist/modules/tool-manuals/tool-manuals.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-manuals.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-manuals/tool-manuals.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAgB,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,YAAY,CAAC;AAEpB,OAAO,EAAE,KAAK,kBAAkB,EAA2B,MAAM,4BAA4B,CAAC;AAC9F,OAAO,4BAA4B,CAAC;AACpC,OAAO,sCAAsC,CAAC;AAE9C,qFAAqF;AACrF,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAgB/E;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,iBAAiB,EAAE,kBAAkB,EACrC,UAAU,EAAE,cAAc,EAC1B,gBAAgB,EAAE,gBAAgB,GACjC,OAAO,CAAC,MAAM,CA2ChB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,iBAAiB,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAuCpG"}
+{"version":3,"file":"tool-manuals.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/tool-manuals/tool-manuals.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAgB,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AAKrE,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAChG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,YAAY,CAAC;AAEpB,OAAO,EAAE,KAAK,kBAAkB,EAA2B,MAAM,4BAA4B,CAAC;AAC9F,OAAO,EAAsB,KAAK,oBAAoB,EAAuB,MAAM,8BAA8B,CAAC;AAClH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,4BAA4B,CAAC;AACpC,OAAO,sCAAsC,CAAC;AAE9C,qFAAqF;AACrF,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAgB/E;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,iBAAiB,EAAE,kBAAkB,EACrC,UAAU,EAAE,cAAc,EAC1B,gBAAgB,EAAE,gBAAgB,EAClC,WAAW,CAAC,EAAE;IAAE,gBAAgB,EAAE,gBAAgB,CAAC;IAAC,aAAa,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrG,OAAO,CAAC,MAAM,CAkNhB;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,kBAAkB,EACrC,UAAU,CAAC,EAAE;IAAE,OAAO,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;CAAE,GACzG,OAAO,CAAC,MAAM,CAiFhB"}