@code-yeongyu/senpi 2026.7.4 → 2026.7.9-2

package/dist/core/extensions/builtin/mcp/expose/bm25.d.ts

@@ -0,0 +1,30 @@
+export interface Bm25Doc {
+    /** Full senpi tool name, e.g. `mcp_docs_get-library-docs`. Returned in results. */
+    readonly name: string;
+    /** Bare MCP tool name, e.g. `get-library-docs`. Used for exact-name matching. */
+    readonly toolName: string;
+    readonly description?: string;
+    readonly server: string;
+}
+export interface Bm25Result {
+    readonly name: string;
+    readonly score: number;
+    readonly exact: boolean;
+    readonly doc: Bm25Doc;
+}
+export interface Bm25SearchOptions {
+    /** Restrict results to a single server (by server name). */
+    readonly server?: string;
+    /** Disable the exact-name short-circuit (used to prove BM25-alone behaviour). */
+    readonly exactMatch?: boolean;
+}
+export interface Bm25Index {
+    search(query: string, limit?: number, options?: Bm25SearchOptions): Bm25Result[];
+}
+export declare function buildBm25Index(docs: readonly Bm25Doc[]): Bm25Index;
+/** Tokenise a tool identifier or description into lowercase word tokens,
+ * splitting snake_case, kebab-case and camelCase / PascalCase boundaries. */
+export declare function tokenizeToolText(text: string): string[];
+/** Normalise a tool name for exact matching: lowercase, strip separators. */
+export declare function normalizeToolName(name: string): string;
+//# sourceMappingURL=bm25.d.ts.map

package/dist/core/extensions/builtin/mcp/expose/bm25.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bm25.d.ts","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/bm25.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,OAAO;IACvB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACzB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,UAAU,EAAE,CAAC;CACjF;AAYD,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,CAgClE;AA+DD;6EAC6E;AAC7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAYvD;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/core/extensions/builtin/mcp/expose/bm25.js

@@ -0,0 +1,126 @@
+// Zero-dependency BM25 tool-search engine (todo 30).
+//
+// Ranks MCP tools by relevance of a free-text query against tokenised
+// name + description, with a server-name field boost. A normalised exact-name
+// match short-circuits BEFORE BM25 (hyphen/underscore/case-insensitive) so a
+// query equal to a tool's own name always wins rank-1 even when raw BM25
+// term-frequency would float noisier tools above it (codex #21503 regression
+// class). Constants k1=0.9, b=0.4 are SPEC-verified.
+//
+// Ranking is deterministic: equal scores tie-break by ascending full name.
+const BM25_K1 = 0.9;
+const BM25_B = 0.4;
+// Field weights applied to term frequency. Name tokens matter most; the server
+// name gets a modest boost; description is the baseline signal.
+const NAME_FIELD_WEIGHT = 3;
+const SERVER_FIELD_WEIGHT = 2;
+const DESCRIPTION_FIELD_WEIGHT = 1;
+const DEFAULT_LIMIT = 25;
+export function buildBm25Index(docs) {
+    const indexed = docs.map(indexDoc);
+    const docFreq = new Map();
+    for (const entry of indexed) {
+        for (const term of entry.termFreq.keys()) {
+            docFreq.set(term, (docFreq.get(term) ?? 0) + 1);
+        }
+    }
+    const totalLength = indexed.reduce((sum, entry) => sum + entry.length, 0);
+    const avgLength = indexed.length === 0 ? 0 : totalLength / indexed.length;
+    const docCount = indexed.length;
+    return {
+        search(query, limit = DEFAULT_LIMIT, options = {}) {
+            const pool = options.server === undefined ? indexed : indexed.filter((entry) => entry.doc.server === options.server);
+            const queryTerms = tokenizeToolText(query);
+            if (queryTerms.length === 0)
+                return [];
+            const useExact = options.exactMatch !== false;
+            const normQuery = normalizeToolName(query);
+            const results = [];
+            for (const entry of pool) {
+                const exact = useExact && normQuery.length > 0 && isExactNameMatch(entry, normQuery);
+                const score = bm25Score(entry, queryTerms, docFreq, avgLength, docCount);
+                if (!exact && score <= 0)
+                    continue;
+                results.push({ doc: entry.doc, exact, name: entry.doc.name, score });
+            }
+            results.sort(compareResults);
+            return results.slice(0, Math.max(0, limit));
+        },
+    };
+}
+function indexDoc(doc) {
+    const termFreq = new Map();
+    addField(termFreq, tokenizeToolText(doc.name), NAME_FIELD_WEIGHT);
+    addField(termFreq, tokenizeToolText(doc.toolName), NAME_FIELD_WEIGHT);
+    addField(termFreq, tokenizeToolText(doc.server), SERVER_FIELD_WEIGHT);
+    addField(termFreq, tokenizeToolText(doc.description ?? ""), DESCRIPTION_FIELD_WEIGHT);
+    let length = 0;
+    for (const count of termFreq.values())
+        length += count;
+    return {
+        doc,
+        length,
+        normName: normalizeToolName(doc.name),
+        normToolName: normalizeToolName(doc.toolName),
+        termFreq,
+    };
+}
+function addField(termFreq, tokens, weight) {
+    for (const token of tokens) {
+        termFreq.set(token, (termFreq.get(token) ?? 0) + weight);
+    }
+}
+function bm25Score(entry, queryTerms, docFreq, avgLength, docCount) {
+    let score = 0;
+    const seen = new Set();
+    for (const term of queryTerms) {
+        if (seen.has(term))
+            continue;
+        seen.add(term);
+        const tf = entry.termFreq.get(term);
+        if (tf === undefined)
+            continue;
+        const idf = inverseDocFreq(docFreq.get(term) ?? 0, docCount);
+        const denom = tf + BM25_K1 * (1 - BM25_B + (BM25_B * entry.length) / (avgLength || 1));
+        score += idf * ((tf * (BM25_K1 + 1)) / (denom || 1));
+    }
+    return score;
+}
+function inverseDocFreq(termDocFreq, docCount) {
+    // BM25 idf with the standard +1 smoothing; clamped to be non-negative so a
+    // term present in every doc never contributes a negative score.
+    const value = Math.log(1 + (docCount - termDocFreq + 0.5) / (termDocFreq + 0.5));
+    return value < 0 ? 0 : value;
+}
+function isExactNameMatch(entry, normQuery) {
+    return normQuery === entry.normName || normQuery === entry.normToolName;
+}
+function compareResults(left, right) {
+    if (left.exact !== right.exact)
+        return left.exact ? -1 : 1;
+    if (right.score !== left.score)
+        return right.score - left.score;
+    return left.name.localeCompare(right.name);
+}
+/** Tokenise a tool identifier or description into lowercase word tokens,
+ * splitting snake_case, kebab-case and camelCase / PascalCase boundaries. */
+export function tokenizeToolText(text) {
+    if (text.length === 0)
+        return [];
+    const withBoundaries = text
+        // camelCase / PascalCase: insert a space at lower->Upper and Upper->UpperLower boundaries.
+        .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
+        .replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2");
+    const tokens = [];
+    for (const raw of withBoundaries.split(/[^a-zA-Z0-9]+/)) {
+        if (raw.length === 0)
+            continue;
+        tokens.push(raw.toLowerCase());
+    }
+    return tokens;
+}
+/** Normalise a tool name for exact matching: lowercase, strip separators. */
+export function normalizeToolName(name) {
+    return name.toLowerCase().replace(/[-_\s]+/g, "");
+}
+//# sourceMappingURL=bm25.js.map

package/dist/core/extensions/builtin/mcp/expose/bm25.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bm25.js","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/bm25.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,sEAAsE;AACtE,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,qDAAqD;AACrD,EAAE;AACF,2EAA2E;AAE3E,MAAM,OAAO,GAAG,GAAG,CAAC;AACpB,MAAM,MAAM,GAAG,GAAG,CAAC;AAEnB,+EAA+E;AAC/E,gEAAgE;AAChE,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAqCnC,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,MAAM,UAAU,cAAc,CAAC,IAAwB;IACtD,MAAM,OAAO,GAAiB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAEhC,OAAO;QACN,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,aAAa,EAAE,OAAO,GAAG,EAAE;YAChD,MAAM,IAAI,GACT,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;YACzG,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAEvC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC;YAC9C,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACrF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACzE,IAAI,CAAC,KAAK,IAAI,KAAK,IAAI,CAAC;oBAAE,SAAS;gBACnC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAClE,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtE,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACtE,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACtF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC;IACvD,OAAO;QACN,GAAG;QACH,MAAM;QACN,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;QACrC,YAAY,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7C,QAAQ;KACR,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,QAA6B,EAAE,MAAyB,EAAE,MAAc;IACzF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,SAAS,SAAS,CACjB,KAAiB,EACjB,UAA6B,EAC7B,OAAoC,EACpC,SAAiB,EACjB,QAAgB;IAEhB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;QACvF,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB,EAAE,QAAgB;IAC5D,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC;IACjF,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB,EAAE,SAAiB;IAC7D,OAAO,SAAS,KAAK,KAAK,CAAC,QAAQ,IAAI,SAAS,KAAK,KAAK,CAAC,YAAY,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,IAAgB,EAAE,KAAiB;IAC1D,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,cAAc,GAAG,IAAI;QAC1B,2FAA2F;SAC1F,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC","sourcesContent":["// Zero-dependency BM25 tool-search engine (todo 30).\n//\n// Ranks MCP tools by relevance of a free-text query against tokenised\n// name + description, with a server-name field boost. A normalised exact-name\n// match short-circuits BEFORE BM25 (hyphen/underscore/case-insensitive) so a\n// query equal to a tool's own name always wins rank-1 even when raw BM25\n// term-frequency would float noisier tools above it (codex #21503 regression\n// class). Constants k1=0.9, b=0.4 are SPEC-verified.\n//\n// Ranking is deterministic: equal scores tie-break by ascending full name.\n\nconst BM25_K1 = 0.9;\nconst BM25_B = 0.4;\n\n// Field weights applied to term frequency. Name tokens matter most; the server\n// name gets a modest boost; description is the baseline signal.\nconst NAME_FIELD_WEIGHT = 3;\nconst SERVER_FIELD_WEIGHT = 2;\nconst DESCRIPTION_FIELD_WEIGHT = 1;\n\nexport interface Bm25Doc {\n\t/** Full senpi tool name, e.g. `mcp_docs_get-library-docs`. Returned in results. */\n\treadonly name: string;\n\t/** Bare MCP tool name, e.g. `get-library-docs`. Used for exact-name matching. */\n\treadonly toolName: string;\n\treadonly description?: string;\n\treadonly server: string;\n}\n\nexport interface Bm25Result {\n\treadonly name: string;\n\treadonly score: number;\n\treadonly exact: boolean;\n\treadonly doc: Bm25Doc;\n}\n\nexport interface Bm25SearchOptions {\n\t/** Restrict results to a single server (by server name). */\n\treadonly server?: string;\n\t/** Disable the exact-name short-circuit (used to prove BM25-alone behaviour). */\n\treadonly exactMatch?: boolean;\n}\n\nexport interface Bm25Index {\n\tsearch(query: string, limit?: number, options?: Bm25SearchOptions): Bm25Result[];\n}\n\ninterface IndexedDoc {\n\treadonly doc: Bm25Doc;\n\treadonly termFreq: ReadonlyMap<string, number>;\n\treadonly length: number;\n\treadonly normName: string;\n\treadonly normToolName: string;\n}\n\nconst DEFAULT_LIMIT = 25;\n\nexport function buildBm25Index(docs: readonly Bm25Doc[]): Bm25Index {\n\tconst indexed: IndexedDoc[] = docs.map(indexDoc);\n\tconst docFreq = new Map<string, number>();\n\tfor (const entry of indexed) {\n\t\tfor (const term of entry.termFreq.keys()) {\n\t\t\tdocFreq.set(term, (docFreq.get(term) ?? 0) + 1);\n\t\t}\n\t}\n\tconst totalLength = indexed.reduce((sum, entry) => sum + entry.length, 0);\n\tconst avgLength = indexed.length === 0 ? 0 : totalLength / indexed.length;\n\tconst docCount = indexed.length;\n\n\treturn {\n\t\tsearch(query, limit = DEFAULT_LIMIT, options = {}): Bm25Result[] {\n\t\t\tconst pool =\n\t\t\t\toptions.server === undefined ? indexed : indexed.filter((entry) => entry.doc.server === options.server);\n\t\t\tconst queryTerms = tokenizeToolText(query);\n\t\t\tif (queryTerms.length === 0) return [];\n\n\t\t\tconst useExact = options.exactMatch !== false;\n\t\t\tconst normQuery = normalizeToolName(query);\n\t\t\tconst results: Bm25Result[] = [];\n\t\t\tfor (const entry of pool) {\n\t\t\t\tconst exact = useExact && normQuery.length > 0 && isExactNameMatch(entry, normQuery);\n\t\t\t\tconst score = bm25Score(entry, queryTerms, docFreq, avgLength, docCount);\n\t\t\t\tif (!exact && score <= 0) continue;\n\t\t\t\tresults.push({ doc: entry.doc, exact, name: entry.doc.name, score });\n\t\t\t}\n\t\t\tresults.sort(compareResults);\n\t\t\treturn results.slice(0, Math.max(0, limit));\n\t\t},\n\t};\n}\n\nfunction indexDoc(doc: Bm25Doc): IndexedDoc {\n\tconst termFreq = new Map<string, number>();\n\taddField(termFreq, tokenizeToolText(doc.name), NAME_FIELD_WEIGHT);\n\taddField(termFreq, tokenizeToolText(doc.toolName), NAME_FIELD_WEIGHT);\n\taddField(termFreq, tokenizeToolText(doc.server), SERVER_FIELD_WEIGHT);\n\taddField(termFreq, tokenizeToolText(doc.description ?? \"\"), DESCRIPTION_FIELD_WEIGHT);\n\tlet length = 0;\n\tfor (const count of termFreq.values()) length += count;\n\treturn {\n\t\tdoc,\n\t\tlength,\n\t\tnormName: normalizeToolName(doc.name),\n\t\tnormToolName: normalizeToolName(doc.toolName),\n\t\ttermFreq,\n\t};\n}\n\nfunction addField(termFreq: Map<string, number>, tokens: readonly string[], weight: number): void {\n\tfor (const token of tokens) {\n\t\ttermFreq.set(token, (termFreq.get(token) ?? 0) + weight);\n\t}\n}\n\nfunction bm25Score(\n\tentry: IndexedDoc,\n\tqueryTerms: readonly string[],\n\tdocFreq: ReadonlyMap<string, number>,\n\tavgLength: number,\n\tdocCount: number,\n): number {\n\tlet score = 0;\n\tconst seen = new Set<string>();\n\tfor (const term of queryTerms) {\n\t\tif (seen.has(term)) continue;\n\t\tseen.add(term);\n\t\tconst tf = entry.termFreq.get(term);\n\t\tif (tf === undefined) continue;\n\t\tconst idf = inverseDocFreq(docFreq.get(term) ?? 0, docCount);\n\t\tconst denom = tf + BM25_K1 * (1 - BM25_B + (BM25_B * entry.length) / (avgLength || 1));\n\t\tscore += idf * ((tf * (BM25_K1 + 1)) / (denom || 1));\n\t}\n\treturn score;\n}\n\nfunction inverseDocFreq(termDocFreq: number, docCount: number): number {\n\t// BM25 idf with the standard +1 smoothing; clamped to be non-negative so a\n\t// term present in every doc never contributes a negative score.\n\tconst value = Math.log(1 + (docCount - termDocFreq + 0.5) / (termDocFreq + 0.5));\n\treturn value < 0 ? 0 : value;\n}\n\nfunction isExactNameMatch(entry: IndexedDoc, normQuery: string): boolean {\n\treturn normQuery === entry.normName || normQuery === entry.normToolName;\n}\n\nfunction compareResults(left: Bm25Result, right: Bm25Result): number {\n\tif (left.exact !== right.exact) return left.exact ? -1 : 1;\n\tif (right.score !== left.score) return right.score - left.score;\n\treturn left.name.localeCompare(right.name);\n}\n\n/** Tokenise a tool identifier or description into lowercase word tokens,\n * splitting snake_case, kebab-case and camelCase / PascalCase boundaries. */\nexport function tokenizeToolText(text: string): string[] {\n\tif (text.length === 0) return [];\n\tconst withBoundaries = text\n\t\t// camelCase / PascalCase: insert a space at lower->Upper and Upper->UpperLower boundaries.\n\t\t.replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n\t\t.replace(/([A-Z]+)([A-Z][a-z])/g, \"$1 $2\");\n\tconst tokens: string[] = [];\n\tfor (const raw of withBoundaries.split(/[^a-zA-Z0-9]+/)) {\n\t\tif (raw.length === 0) continue;\n\t\ttokens.push(raw.toLowerCase());\n\t}\n\treturn tokens;\n}\n\n/** Normalise a tool name for exact matching: lowercase, strip separators. */\nexport function normalizeToolName(name: string): string {\n\treturn name.toLowerCase().replace(/[-_\\s]+/g, \"\");\n}\n"]}

package/dist/core/extensions/builtin/mcp/expose/naming.d.ts

@@ -0,0 +1,10 @@
+export interface McpToolNameEntry {
+    serverName: string;
+    toolName: string;
+}
+export declare const MCP_TOOL_NAME_MAX_LENGTH = 64;
+type WarnFn = (message: string) => void;
+export declare function buildMcpToolNames(entries: readonly McpToolNameEntry[], warn?: WarnFn): string[];
+export declare function buildMcpToolName(entry: McpToolNameEntry): string;
+export {};
+//# sourceMappingURL=naming.d.ts.map

package/dist/core/extensions/builtin/mcp/expose/naming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.d.ts","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/naming.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAExC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CA0B/F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAEhE"}

package/dist/core/extensions/builtin/mcp/expose/naming.js

@@ -0,0 +1,57 @@
+import { createHash } from "node:crypto";
+export const MCP_TOOL_NAME_MAX_LENGTH = 64;
+export function buildMcpToolNames(entries, warn) {
+    const items = entries.map((entry, index) => ({
+        base: ellipsizeMiddle(buildBaseName(entry), MCP_TOOL_NAME_MAX_LENGTH),
+        entry,
+        index,
+    }));
+    const groups = new Map();
+    for (const item of items) {
+        const key = matcherKey(item.base);
+        const group = groups.get(key) ?? [];
+        group.push(item);
+        groups.set(key, group);
+    }
+    const names = items.map((item) => item.base);
+    for (const group of groups.values()) {
+        if (group.length < 2)
+            continue;
+        const [first] = group;
+        if (!first)
+            continue;
+        warn?.(`MCP tool name collision after normalization for '${first.base}'; appended deterministic suffixes.`);
+        for (const item of group) {
+            const suffix = hashSuffix(item.entry);
+            names[item.index] = `${ellipsizeMiddle(item.base, MCP_TOOL_NAME_MAX_LENGTH - suffix.length)}${suffix}`;
+        }
+    }
+    return names;
+}
+export function buildMcpToolName(entry) {
+    return ellipsizeMiddle(buildBaseName(entry), MCP_TOOL_NAME_MAX_LENGTH);
+}
+function buildBaseName(entry) {
+    return `mcp_${sanitizeNamePart(entry.serverName)}_${sanitizeNamePart(entry.toolName)}`;
+}
+function sanitizeNamePart(name) {
+    return name.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+function matcherKey(name) {
+    return name.replace(/-/g, "_");
+}
+function hashSuffix(entry) {
+    return `_${createHash("sha1").update(`${entry.serverName}\0${entry.toolName}`).digest("hex").slice(0, 4)}`;
+}
+function ellipsizeMiddle(value, maxLength) {
+    if (value.length <= maxLength)
+        return value;
+    if (maxLength <= 3)
+        return value.slice(0, maxLength);
+    const marker = "...";
+    const remaining = maxLength - marker.length;
+    const prefixLength = Math.ceil(remaining / 2);
+    const suffixLength = Math.floor(remaining / 2);
+    return `${value.slice(0, prefixLength)}${marker}${value.slice(value.length - suffixLength)}`;
+}
+//# sourceMappingURL=naming.js.map

package/dist/core/extensions/builtin/mcp/expose/naming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/naming.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAI3C,MAAM,UAAU,iBAAiB,CAAC,OAAoC,EAAE,IAAa;IACpF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,EAAE,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC;QACrE,KAAK;QACL,KAAK;KACL,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,EAAE,CAAC,oDAAoD,KAAK,CAAC,IAAI,qCAAqC,CAAC,CAAC;QAC5G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACxG,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACvD,OAAO,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,KAAuB;IAC7C,OAAO,OAAO,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAuB;IAC1C,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,SAAiB;IACxD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC;AAC9F,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\n\nexport interface McpToolNameEntry {\n\tserverName: string;\n\ttoolName: string;\n}\n\nexport const MCP_TOOL_NAME_MAX_LENGTH = 64;\n\ntype WarnFn = (message: string) => void;\n\nexport function buildMcpToolNames(entries: readonly McpToolNameEntry[], warn?: WarnFn): string[] {\n\tconst items = entries.map((entry, index) => ({\n\t\tbase: ellipsizeMiddle(buildBaseName(entry), MCP_TOOL_NAME_MAX_LENGTH),\n\t\tentry,\n\t\tindex,\n\t}));\n\tconst groups = new Map<string, typeof items>();\n\tfor (const item of items) {\n\t\tconst key = matcherKey(item.base);\n\t\tconst group = groups.get(key) ?? [];\n\t\tgroup.push(item);\n\t\tgroups.set(key, group);\n\t}\n\n\tconst names = items.map((item) => item.base);\n\tfor (const group of groups.values()) {\n\t\tif (group.length < 2) continue;\n\t\tconst [first] = group;\n\t\tif (!first) continue;\n\t\twarn?.(`MCP tool name collision after normalization for '${first.base}'; appended deterministic suffixes.`);\n\t\tfor (const item of group) {\n\t\t\tconst suffix = hashSuffix(item.entry);\n\t\t\tnames[item.index] = `${ellipsizeMiddle(item.base, MCP_TOOL_NAME_MAX_LENGTH - suffix.length)}${suffix}`;\n\t\t}\n\t}\n\treturn names;\n}\n\nexport function buildMcpToolName(entry: McpToolNameEntry): string {\n\treturn ellipsizeMiddle(buildBaseName(entry), MCP_TOOL_NAME_MAX_LENGTH);\n}\n\nfunction buildBaseName(entry: McpToolNameEntry): string {\n\treturn `mcp_${sanitizeNamePart(entry.serverName)}_${sanitizeNamePart(entry.toolName)}`;\n}\n\nfunction sanitizeNamePart(name: string): string {\n\treturn name.replace(/[^a-zA-Z0-9_-]/g, \"_\");\n}\n\nfunction matcherKey(name: string): string {\n\treturn name.replace(/-/g, \"_\");\n}\n\nfunction hashSuffix(entry: McpToolNameEntry): string {\n\treturn `_${createHash(\"sha1\").update(`${entry.serverName}\\0${entry.toolName}`).digest(\"hex\").slice(0, 4)}`;\n}\n\nfunction ellipsizeMiddle(value: string, maxLength: number): string {\n\tif (value.length <= maxLength) return value;\n\tif (maxLength <= 3) return value.slice(0, maxLength);\n\tconst marker = \"...\";\n\tconst remaining = maxLength - marker.length;\n\tconst prefixLength = Math.ceil(remaining / 2);\n\tconst suffixLength = Math.floor(remaining / 2);\n\treturn `${value.slice(0, prefixLength)}${marker}${value.slice(value.length - suffixLength)}`;\n}\n"]}

package/dist/core/extensions/builtin/mcp/expose/native-search.d.ts

@@ -0,0 +1,45 @@
+export declare const ANTHROPIC_TOOL_SEARCH_TYPE = "tool_search_tool_bm25_20251119";
+export declare const ANTHROPIC_TOOL_SEARCH_NAME = "tool_search";
+/** Anthropic caps a request at 10k tools; beyond that native search is invalid. */
+export declare const ANTHROPIC_MAX_TOOLS = 10000;
+export interface AnthropicNativeInjectionConfig {
+    /** Never defer this tool (our custom mcp_search), and it is non-deferrable. */
+    readonly searchToolName?: string;
+    /** True for MCP catalog tools eligible for deferral. */
+    readonly isDeferrable: (toolName: string) => boolean;
+}
+/**
+ * Pure payload transform. Adds exactly one native tool-search tool (idempotent)
+ * and sets `defer_loading:true` on eligible MCP tools, enforcing the HARD RULES:
+ * never defer the search tool, never combine defer_loading with cache_control
+ * (400), keep >=1 non-deferred tool (the native search tool guarantees this),
+ * and skip entirely above the 10k tool cap.
+ */
+export declare function addAnthropicNativeToolSearch(api: string | undefined, payload: unknown, config: AnthropicNativeInjectionConfig): unknown;
+/** `tool_reference` blocks emitted inside a tool_result so the API expands the
+ * referenced (deferred) tools — the cache-prefix-safe custom-search path. */
+export declare function buildToolReferenceBlocks(names: readonly string[]): {
+    type: "tool_reference";
+    name: string;
+}[];
+export interface AnthropicNativeAdapterDeps extends AnthropicNativeInjectionConfig {
+    /** Resolved config gate (nativeToolSearch auto|true AND provider supports). */
+    enabled(): boolean;
+    /** Invoked once when a 400 forces the local-search fallback. */
+    onFallback?(reason: string): void;
+}
+/**
+ * Stateful adapter driving the before_provider_request injection and the
+ * after_provider_response 400 detector. Once a 400 lands on a request we
+ * injected, native search is disabled for the rest of the session and the
+ * extension falls back to local Tier-B (which is always registered).
+ */
+export declare class AnthropicNativeToolSearchAdapter {
+    #private;
+    constructor(deps: AnthropicNativeAdapterDeps);
+    applyBeforeRequest(api: string | undefined, payload: unknown): unknown;
+    noteResponseStatus(status: number): void;
+    get disabled(): boolean;
+    get fallbackReason(): string | null;
+}
+//# sourceMappingURL=native-search.d.ts.map

package/dist/core/extensions/builtin/mcp/expose/native-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-search.d.ts","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/native-search.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,0BAA0B,mCAAmC,CAAC;AAC3E,eAAO,MAAM,0BAA0B,gBAAgB,CAAC;AACxD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,MAAM,WAAW,8BAA8B;IAC9C,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;CACrD;AAMD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC3C,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,8BAA8B,GACpC,OAAO,CAUT;AAaD;6EAC6E;AAC7E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAE7G;AAED,MAAM,WAAW,0BAA2B,SAAQ,8BAA8B;IACjF,+EAA+E;IAC/E,OAAO,IAAI,OAAO,CAAC;IACnB,gEAAgE;IAChE,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;GAKG;AACH,qBAAa,gCAAgC;;IAM5C,YAAY,IAAI,EAAE,0BAA0B,EAE3C;IAED,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAMrE;IAED,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAMvC;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,CAElC;CACD"}

package/dist/core/extensions/builtin/mcp/expose/native-search.js

@@ -0,0 +1,98 @@
+// Native provider tool-search adapters (todo 33 — Anthropic half).
+//
+// Gated on the todo-29 spike verdict: Anthropic Messages is GO-pure-extension —
+// server_tool_use / tool_search_tool_result blocks round-trip pi-ai's
+// parse->persist->re-serialise cycle untouched (native-search-spike.md), so this
+// adapter injects request-side fields via the extension before_provider_request
+// event ONLY (the sole ExtensionAPI payload surface) with no pi-ai change.
+//
+// It injects Anthropic's native `tool_search_tool_bm25_20251119` tool and marks
+// deferrable MCP tools `defer_loading:true`, honouring the API HARD RULES, and
+// auto-falls-back to local Tier-B on a 400. The OpenAI half is deferred
+// (spike = GO-with-ai-seam; see native-search-spike.md).
+export const ANTHROPIC_TOOL_SEARCH_TYPE = "tool_search_tool_bm25_20251119";
+export const ANTHROPIC_TOOL_SEARCH_NAME = "tool_search";
+/** Anthropic caps a request at 10k tools; beyond that native search is invalid. */
+export const ANTHROPIC_MAX_TOOLS = 10000;
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+/**
+ * Pure payload transform. Adds exactly one native tool-search tool (idempotent)
+ * and sets `defer_loading:true` on eligible MCP tools, enforcing the HARD RULES:
+ * never defer the search tool, never combine defer_loading with cache_control
+ * (400), keep >=1 non-deferred tool (the native search tool guarantees this),
+ * and skip entirely above the 10k tool cap.
+ */
+export function addAnthropicNativeToolSearch(api, payload, config) {
+    if (api !== "anthropic-messages" || !isRecord(payload))
+        return payload;
+    const tools = Array.isArray(payload.tools) ? payload.tools : [];
+    if (tools.length > ANTHROPIC_MAX_TOOLS)
+        return payload;
+    const deferred = tools.map((tool) => maybeDefer(tool, config));
+    const hasSearchTool = deferred.some((tool) => isRecord(tool) && tool.type === ANTHROPIC_TOOL_SEARCH_TYPE);
+    const nextTools = hasSearchTool
+        ? deferred
+        : [...deferred, { type: ANTHROPIC_TOOL_SEARCH_TYPE, name: ANTHROPIC_TOOL_SEARCH_NAME }];
+    return { ...payload, tools: nextTools };
+}
+function maybeDefer(tool, config) {
+    if (!isRecord(tool))
+        return tool;
+    const name = typeof tool.name === "string" ? tool.name : undefined;
+    if (name === undefined)
+        return tool; // server/native tools are type-based, never deferred
+    if (name === config.searchToolName)
+        return tool; // never defer the search tool
+    if (!config.isDeferrable(name))
+        return tool; // non-MCP tools untouched
+    if ("cache_control" in tool)
+        return tool; // never defer_loading + cache_control (400)
+    if (tool.defer_loading === true)
+        return tool; // idempotent
+    return { ...tool, defer_loading: true };
+}
+/** `tool_reference` blocks emitted inside a tool_result so the API expands the
+ * referenced (deferred) tools — the cache-prefix-safe custom-search path. */
+export function buildToolReferenceBlocks(names) {
+    return names.map((name) => ({ type: "tool_reference", name }));
+}
+/**
+ * Stateful adapter driving the before_provider_request injection and the
+ * after_provider_response 400 detector. Once a 400 lands on a request we
+ * injected, native search is disabled for the rest of the session and the
+ * extension falls back to local Tier-B (which is always registered).
+ */
+export class AnthropicNativeToolSearchAdapter {
+    #disabled = false;
+    #injectedLastRequest = false;
+    #fallbackReason = null;
+    #deps;
+    constructor(deps) {
+        this.#deps = deps;
+    }
+    applyBeforeRequest(api, payload) {
+        this.#injectedLastRequest = false;
+        if (this.#disabled || !this.#deps.enabled())
+            return payload;
+        const next = addAnthropicNativeToolSearch(api, payload, this.#deps);
+        this.#injectedLastRequest = next !== payload;
+        return next;
+    }
+    noteResponseStatus(status) {
+        if (status !== 400 || !this.#injectedLastRequest || this.#disabled)
+            return;
+        this.#disabled = true;
+        this.#fallbackReason =
+            "Anthropic returned 400 for native tool-search; disabled it and fell back to local mcp_search for this session.";
+        this.#deps.onFallback?.(this.#fallbackReason);
+    }
+    get disabled() {
+        return this.#disabled;
+    }
+    get fallbackReason() {
+        return this.#fallbackReason;
+    }
+}
+//# sourceMappingURL=native-search.js.map

package/dist/core/extensions/builtin/mcp/expose/native-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-search.js","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/native-search.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,iFAAiF;AACjF,gFAAgF;AAChF,2EAA2E;AAC3E,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,wEAAwE;AACxE,yDAAyD;AAEzD,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAC3E,MAAM,CAAC,MAAM,0BAA0B,GAAG,aAAa,CAAC;AACxD,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AASzC,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC3C,GAAuB,EACvB,OAAgB,EAChB,MAAsC;IAEtC,IAAI,GAAG,KAAK,oBAAoB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;QAAE,OAAO,OAAO,CAAC;IACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC;IAC1G,MAAM,SAAS,GAAG,aAAa;QAC9B,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,MAAsC;IACxE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,qDAAqD;IAC1F,IAAI,IAAI,KAAK,MAAM,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAC/E,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;IACvE,IAAI,eAAe,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,4CAA4C;IACtF,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IAC3D,OAAO,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAChE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAChE,CAAC;AASD;;;;;GAKG;AACH,MAAM,OAAO,gCAAgC;IAC5C,SAAS,GAAG,KAAK,CAAC;IAClB,oBAAoB,GAAG,KAAK,CAAC;IAC7B,eAAe,GAAkB,IAAI,CAAC;IAC7B,KAAK,CAA6B;IAE3C,YAAY,IAAgC;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,kBAAkB,CAAC,GAAuB,EAAE,OAAgB;QAC3D,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;QAClC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;YAAE,OAAO,OAAO,CAAC;QAC5D,MAAM,IAAI,GAAG,4BAA4B,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,oBAAoB,GAAG,IAAI,KAAK,OAAO,CAAC;QAC7C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,kBAAkB,CAAC,MAAc;QAChC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3E,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,eAAe;YACnB,gHAAgH,CAAC;QAClH,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,IAAI,cAAc;QACjB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC7B,CAAC;CACD","sourcesContent":["// Native provider tool-search adapters (todo 33 — Anthropic half).\n//\n// Gated on the todo-29 spike verdict: Anthropic Messages is GO-pure-extension —\n// server_tool_use / tool_search_tool_result blocks round-trip pi-ai's\n// parse->persist->re-serialise cycle untouched (native-search-spike.md), so this\n// adapter injects request-side fields via the extension before_provider_request\n// event ONLY (the sole ExtensionAPI payload surface) with no pi-ai change.\n//\n// It injects Anthropic's native `tool_search_tool_bm25_20251119` tool and marks\n// deferrable MCP tools `defer_loading:true`, honouring the API HARD RULES, and\n// auto-falls-back to local Tier-B on a 400. The OpenAI half is deferred\n// (spike = GO-with-ai-seam; see native-search-spike.md).\n\nexport const ANTHROPIC_TOOL_SEARCH_TYPE = \"tool_search_tool_bm25_20251119\";\nexport const ANTHROPIC_TOOL_SEARCH_NAME = \"tool_search\";\n/** Anthropic caps a request at 10k tools; beyond that native search is invalid. */\nexport const ANTHROPIC_MAX_TOOLS = 10000;\n\nexport interface AnthropicNativeInjectionConfig {\n\t/** Never defer this tool (our custom mcp_search), and it is non-deferrable. */\n\treadonly searchToolName?: string;\n\t/** True for MCP catalog tools eligible for deferral. */\n\treadonly isDeferrable: (toolName: string) => boolean;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\n/**\n * Pure payload transform. Adds exactly one native tool-search tool (idempotent)\n * and sets `defer_loading:true` on eligible MCP tools, enforcing the HARD RULES:\n * never defer the search tool, never combine defer_loading with cache_control\n * (400), keep >=1 non-deferred tool (the native search tool guarantees this),\n * and skip entirely above the 10k tool cap.\n */\nexport function addAnthropicNativeToolSearch(\n\tapi: string | undefined,\n\tpayload: unknown,\n\tconfig: AnthropicNativeInjectionConfig,\n): unknown {\n\tif (api !== \"anthropic-messages\" || !isRecord(payload)) return payload;\n\tconst tools = Array.isArray(payload.tools) ? payload.tools : [];\n\tif (tools.length > ANTHROPIC_MAX_TOOLS) return payload;\n\tconst deferred = tools.map((tool) => maybeDefer(tool, config));\n\tconst hasSearchTool = deferred.some((tool) => isRecord(tool) && tool.type === ANTHROPIC_TOOL_SEARCH_TYPE);\n\tconst nextTools = hasSearchTool\n\t\t? deferred\n\t\t: [...deferred, { type: ANTHROPIC_TOOL_SEARCH_TYPE, name: ANTHROPIC_TOOL_SEARCH_NAME }];\n\treturn { ...payload, tools: nextTools };\n}\n\nfunction maybeDefer(tool: unknown, config: AnthropicNativeInjectionConfig): unknown {\n\tif (!isRecord(tool)) return tool;\n\tconst name = typeof tool.name === \"string\" ? tool.name : undefined;\n\tif (name === undefined) return tool; // server/native tools are type-based, never deferred\n\tif (name === config.searchToolName) return tool; // never defer the search tool\n\tif (!config.isDeferrable(name)) return tool; // non-MCP tools untouched\n\tif (\"cache_control\" in tool) return tool; // never defer_loading + cache_control (400)\n\tif (tool.defer_loading === true) return tool; // idempotent\n\treturn { ...tool, defer_loading: true };\n}\n\n/** `tool_reference` blocks emitted inside a tool_result so the API expands the\n * referenced (deferred) tools — the cache-prefix-safe custom-search path. */\nexport function buildToolReferenceBlocks(names: readonly string[]): { type: \"tool_reference\"; name: string }[] {\n\treturn names.map((name) => ({ type: \"tool_reference\", name }));\n}\n\nexport interface AnthropicNativeAdapterDeps extends AnthropicNativeInjectionConfig {\n\t/** Resolved config gate (nativeToolSearch auto|true AND provider supports). */\n\tenabled(): boolean;\n\t/** Invoked once when a 400 forces the local-search fallback. */\n\tonFallback?(reason: string): void;\n}\n\n/**\n * Stateful adapter driving the before_provider_request injection and the\n * after_provider_response 400 detector. Once a 400 lands on a request we\n * injected, native search is disabled for the rest of the session and the\n * extension falls back to local Tier-B (which is always registered).\n */\nexport class AnthropicNativeToolSearchAdapter {\n\t#disabled = false;\n\t#injectedLastRequest = false;\n\t#fallbackReason: string | null = null;\n\treadonly #deps: AnthropicNativeAdapterDeps;\n\n\tconstructor(deps: AnthropicNativeAdapterDeps) {\n\t\tthis.#deps = deps;\n\t}\n\n\tapplyBeforeRequest(api: string | undefined, payload: unknown): unknown {\n\t\tthis.#injectedLastRequest = false;\n\t\tif (this.#disabled || !this.#deps.enabled()) return payload;\n\t\tconst next = addAnthropicNativeToolSearch(api, payload, this.#deps);\n\t\tthis.#injectedLastRequest = next !== payload;\n\t\treturn next;\n\t}\n\n\tnoteResponseStatus(status: number): void {\n\t\tif (status !== 400 || !this.#injectedLastRequest || this.#disabled) return;\n\t\tthis.#disabled = true;\n\t\tthis.#fallbackReason =\n\t\t\t\"Anthropic returned 400 for native tool-search; disabled it and fell back to local mcp_search for this session.\";\n\t\tthis.#deps.onFallback?.(this.#fallbackReason);\n\t}\n\n\tget disabled(): boolean {\n\t\treturn this.#disabled;\n\t}\n\n\tget fallbackReason(): string | null {\n\t\treturn this.#fallbackReason;\n\t}\n}\n"]}

package/dist/core/extensions/builtin/mcp/expose/pagination.d.ts

@@ -0,0 +1,14 @@
+export interface McpListPage<TItem> {
+    items?: TItem[];
+    tools?: TItem[];
+    resources?: TItem[];
+    prompts?: TItem[];
+    nextCursor?: string;
+}
+export interface McpPaginationResult<TItem> {
+    items: TItem[];
+    warnings: string[];
+    pages: number;
+}
+export declare function collectAllPages<TItem>(listFn: (cursor: string | undefined) => Promise<McpListPage<TItem>>): Promise<McpPaginationResult<TItem>>;
+//# sourceMappingURL=pagination.d.ts.map

package/dist/core/extensions/builtin/mcp/expose/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/pagination.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW,CAAC,KAAK;IACjC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB,CAAC,KAAK;IACzC,KAAK,EAAE,KAAK,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACd;AAID,wBAAsB,eAAe,CAAC,KAAK,EAC1C,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GACjE,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CA0BrC"}

package/dist/core/extensions/builtin/mcp/expose/pagination.js

@@ -0,0 +1,29 @@
+const MAX_MCP_PAGES = 1000;
+export async function collectAllPages(listFn) {
+    const items = [];
+    const warnings = [];
+    const seenCursors = new Set();
+    let cursor;
+    let pages = 0;
+    while (pages < MAX_MCP_PAGES) {
+        const page = await listFn(cursor);
+        pages += 1;
+        items.push(...getPageItems(page));
+        const nextCursor = page.nextCursor;
+        if (!nextCursor) {
+            return { items, warnings, pages };
+        }
+        if (seenCursors.has(nextCursor)) {
+            warnings.push(`Stopped MCP pagination after duplicate cursor '${nextCursor}'.`);
+            return { items, warnings, pages };
+        }
+        seenCursors.add(nextCursor);
+        cursor = nextCursor;
+    }
+    warnings.push(`Stopped MCP pagination after ${MAX_MCP_PAGES} pages.`);
+    return { items, warnings, pages };
+}
+function getPageItems(page) {
+    return page.items ?? page.tools ?? page.resources ?? page.prompts ?? [];
+}
+//# sourceMappingURL=pagination.js.map

package/dist/core/extensions/builtin/mcp/expose/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/pagination.ts"],"names":[],"mappings":"AAcA,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,MAAmE;IAEnE,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,IAAI,MAA0B,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAElC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,kDAAkD,UAAU,IAAI,CAAC,CAAC;YAChF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,GAAG,UAAU,CAAC;IACrB,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,gCAAgC,aAAa,SAAS,CAAC,CAAC;IACtE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAQ,IAAwB;IACpD,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;AACzE,CAAC","sourcesContent":["export interface McpListPage<TItem> {\n\titems?: TItem[];\n\ttools?: TItem[];\n\tresources?: TItem[];\n\tprompts?: TItem[];\n\tnextCursor?: string;\n}\n\nexport interface McpPaginationResult<TItem> {\n\titems: TItem[];\n\twarnings: string[];\n\tpages: number;\n}\n\nconst MAX_MCP_PAGES = 1000;\n\nexport async function collectAllPages<TItem>(\n\tlistFn: (cursor: string | undefined) => Promise<McpListPage<TItem>>,\n): Promise<McpPaginationResult<TItem>> {\n\tconst items: TItem[] = [];\n\tconst warnings: string[] = [];\n\tconst seenCursors = new Set<string>();\n\tlet cursor: string | undefined;\n\tlet pages = 0;\n\n\twhile (pages < MAX_MCP_PAGES) {\n\t\tconst page = await listFn(cursor);\n\t\tpages += 1;\n\t\titems.push(...getPageItems(page));\n\n\t\tconst nextCursor = page.nextCursor;\n\t\tif (!nextCursor) {\n\t\t\treturn { items, warnings, pages };\n\t\t}\n\t\tif (seenCursors.has(nextCursor)) {\n\t\t\twarnings.push(`Stopped MCP pagination after duplicate cursor '${nextCursor}'.`);\n\t\t\treturn { items, warnings, pages };\n\t\t}\n\t\tseenCursors.add(nextCursor);\n\t\tcursor = nextCursor;\n\t}\n\n\twarnings.push(`Stopped MCP pagination after ${MAX_MCP_PAGES} pages.`);\n\treturn { items, warnings, pages };\n}\n\nfunction getPageItems<TItem>(page: McpListPage<TItem>): TItem[] {\n\treturn page.items ?? page.tools ?? page.resources ?? page.prompts ?? [];\n}\n"]}

package/dist/core/extensions/builtin/mcp/expose/policy.d.ts

@@ -0,0 +1,12 @@
+import type { McpToolCatalogEntry } from "../catalog.ts";
+import type { McpServerConfig, McpSettings } from "../config-schema.ts";
+export interface McpExposurePolicyResult {
+    readonly activeEntries: McpToolCatalogEntry[];
+    readonly filteredEntries: McpToolCatalogEntry[];
+    readonly mode: "direct" | "search" | "proxy";
+    readonly reason: "explicit" | "threshold" | "directTools";
+    readonly registeredEntries: McpToolCatalogEntry[];
+    readonly warnings: string[];
+}
+export declare function computeMcpExposurePolicy(entries: readonly McpToolCatalogEntry[], config: McpServerConfig, settings: McpSettings): McpExposurePolicyResult;
+//# sourceMappingURL=policy.d.ts.map

package/dist/core/extensions/builtin/mcp/expose/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../../../src/core/extensions/builtin/mcp/expose/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAExE,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,EAAE,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;CAC5B;AAMD,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,WAAW,GACnB,uBAAuB,CA0CzB"}

package/dist/core/extensions/builtin/mcp/expose/policy.js

@@ -0,0 +1,98 @@
+import picomatch from "picomatch";
+const PICOMATCH_OPTIONS = { bash: true, dot: true };
+export function computeMcpExposurePolicy(entries, config, settings) {
+    const filteredEntries = stableSort(entries.filter((entry) => passesToolFilters(entry.tool, config)));
+    const directEntries = stableSort(entriesMatchingDirectTools(filteredEntries, config.directTools));
+    if (filteredEntries.length === 0) {
+        return {
+            activeEntries: [],
+            filteredEntries,
+            mode: "direct",
+            reason: "explicit",
+            registeredEntries: [],
+            warnings: [`MCP server ${serverName(entries)} has 0 exposed tools after includeTools/excludeTools filters.`],
+        };
+    }
+    if (config.directTools === true) {
+        return directResult(filteredEntries, filteredEntries, "directTools");
+    }
+    if (config.exposure === "direct") {
+        return directResult(filteredEntries, filteredEntries, "explicit");
+    }
+    // Tier-C proxy mode (todo 38): per-server OPT-IN only. The whole catalog
+    // stays behind a single gateway tool; nothing registers directly and auto
+    // never selects this mode (SPEC §5: -27.3pp GSM8K structured-output evidence).
+    if (config.exposure === "proxy") {
+        return {
+            activeEntries: [],
+            filteredEntries,
+            mode: "proxy",
+            reason: "explicit",
+            registeredEntries: [],
+            warnings: [],
+        };
+    }
+    // Tier-B search mode: register the full catalog but keep only directTools
+    // active; mcp_search promotes the rest on demand.
+    if (config.exposure === "search") {
+        return searchResult(filteredEntries, directEntries, "explicit");
+    }
+    if (filteredEntries.length <= (settings.searchThreshold ?? 10)) {
+        return directResult(filteredEntries, filteredEntries, "threshold");
+    }
+    return searchResult(filteredEntries, directEntries, "threshold");
+}
+function searchResult(filteredEntries, directEntries, reason) {
+    return {
+        activeEntries: stableSort(directEntries),
+        filteredEntries: stableSort(filteredEntries),
+        mode: "search",
+        reason,
+        registeredEntries: stableSort(filteredEntries),
+        warnings: [],
+    };
+}
+function directResult(filteredEntries, activeEntries, reason) {
+    return {
+        activeEntries: stableSort(activeEntries),
+        filteredEntries: stableSort(filteredEntries),
+        mode: "direct",
+        reason,
+        registeredEntries: stableSort(activeEntries),
+        warnings: [],
+    };
+}
+function passesToolFilters(toolName, config) {
+    const include = compileMatchers(config.includeTools);
+    const exclude = compileMatchers(config.excludeTools);
+    const included = include.length === 0 || include.some((isMatch) => isMatch(toolName));
+    if (!included)
+        return false;
+    return !exclude.some((isMatch) => isMatch(toolName));
+}
+function entriesMatchingDirectTools(entries, directTools) {
+    if (directTools === true)
+        return stableSort(entries);
+    if (!Array.isArray(directTools) || directTools.length === 0)
+        return [];
+    const matchers = compileMatchers(directTools);
+    return stableSort(entries.filter((entry) => matchers.some((isMatch) => isMatch(entry.tool))));
+}
+function compileMatchers(patterns) {
+    return (patterns ?? []).map((pattern) => safeMatcher(pattern));
+}
+function safeMatcher(pattern) {
+    try {
+        return picomatch(pattern, PICOMATCH_OPTIONS);
+    }
+    catch {
+        return (toolName) => toolName === pattern;
+    }
+}
+function stableSort(entries) {
+    return [...entries].sort((left, right) => left.server.localeCompare(right.server) || left.tool.localeCompare(right.tool));
+}
+function serverName(entries) {
+    return entries[0]?.server ?? "<unknown>";
+}
+//# sourceMappingURL=policy.js.map