@cogenta/mcp 0.1.3 → 0.3.0

package/dist/client/watchdog.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Fiche 58 task 1bis: "Watchdog mémoire/CPU par poll du PID (pas de
+ * dépendance native)". A `child_process` spawned to run a third-party
+ * binary has no `resourceLimits` the way a `worker_threads` worker does
+ * (`@cogenta/plugins`'s isolation model does not apply here — see the
+ * fiche's "pièges connus"), and R9/R10 forbid pulling in a native addon
+ * (`pidusage` and friends) just to read one process's RSS/CPU. This polls
+ * the OS's own process inspector instead — `ps` on POSIX, PowerShell's
+ * `Get-Process` on Windows — both already present on every real deployment
+ * target, zero new dependency.
+ *
+ * This is explicitly a best-effort floor, not a guarantee: the real limit
+ * is host-level (a cgroup, a Windows Job Object), which this code cannot
+ * set up and does not pretend to (fiche's own words: "à documenter comme
+ * prérequis, pas une garantie du code"). `readUsage` is injectable so tests
+ * never depend on the real `ps`/PowerShell being present or behaving a
+ * particular way.
+ */
+export interface PidUsage {
+    readonly rssBytes: number;
+    /** 0-based fraction of one core recently, e.g. 1.5 == 150% of one core. `0` when unknown (Windows falls back to memory-only). */
+    readonly cpuPercent: number;
+}
+export type ReadPidUsage = (pid: number) => Promise<PidUsage | null>;
+export interface PidWatchdogOptions {
+    readonly pid: number;
+    readonly pollMs?: number;
+    /** `undefined` disables the memory ceiling. */
+    readonly maxRssBytes?: number;
+    /** `undefined` disables the CPU ceiling. */
+    readonly maxCpuPercent?: number;
+    readonly onExceeded: (usage: PidUsage, reason: 'memory' | 'cpu') => void;
+    /** Injectable for tests — defaults to the real `ps`/PowerShell probe. */
+    readonly readUsage?: ReadPidUsage;
+}
+export interface PidWatchdog {
+    stop(): void;
+}
+/** Polls one PID on an interval; fires `onExceeded` at most once (the caller is expected to kill the process and tear the watchdog down in response — this module never kills anything itself, it only observes). A process that has already exited, or a platform where the probe fails, is silently treated as "no signal" rather than a crash — this is a best-effort floor, never a hard dependency for the connection to function. */
+export declare function startPidWatchdog(options: PidWatchdogOptions): PidWatchdog;
+//# sourceMappingURL=watchdog.d.ts.map

package/dist/client/watchdog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog.d.ts","sourceRoot":"","sources":["../../src/client/watchdog.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,iIAAiI;IACjI,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;AAwCpE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,4CAA4C;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAA;IACxE,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAA;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,IAAI,IAAI,CAAA;CACb;AAID,2aAA2a;AAC3a,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CA6BzE"}

package/dist/client/watchdog.js

@@ -0,0 +1,67 @@
+import { execFile } from 'node:child_process';
+import process from 'node:process';
+function parsePosixPs(stdout) {
+    const line = stdout.trim().split('\n').at(-1) ?? '';
+    const [rssKb, cpu] = line.trim().split(/\s+/u);
+    const rssBytes = Number.parseInt(rssKb ?? '', 10) * 1024;
+    if (!Number.isFinite(rssBytes) || rssBytes < 0)
+        return null;
+    const cpuPercent = Number.parseFloat(cpu ?? '');
+    return { rssBytes, cpuPercent: Number.isFinite(cpuPercent) ? cpuPercent : 0 };
+}
+async function readUsageViaCli(pid) {
+    return new Promise((resolve) => {
+        if (process.platform === 'win32') {
+            execFile('powershell', [
+                '-NoProfile',
+                '-NonInteractive',
+                '-Command',
+                `(Get-Process -Id ${pid} -ErrorAction Stop).WorkingSet64`,
+            ], { timeout: 5000 }, (error, stdout) => {
+                if (error) {
+                    resolve(null);
+                    return;
+                }
+                const rssBytes = Number.parseInt(stdout.trim(), 10);
+                resolve(Number.isFinite(rssBytes) && rssBytes >= 0 ? { rssBytes, cpuPercent: 0 } : null);
+            });
+            return;
+        }
+        execFile('ps', ['-o', 'rss=,%cpu=', '-p', String(pid)], { timeout: 5000 }, (error, stdout) => {
+            resolve(error ? null : parsePosixPs(stdout));
+        });
+    });
+}
+const DEFAULT_POLL_MS = 5000;
+/** Polls one PID on an interval; fires `onExceeded` at most once (the caller is expected to kill the process and tear the watchdog down in response — this module never kills anything itself, it only observes). A process that has already exited, or a platform where the probe fails, is silently treated as "no signal" rather than a crash — this is a best-effort floor, never a hard dependency for the connection to function. */
+export function startPidWatchdog(options) {
+    const pollMs = options.pollMs ?? DEFAULT_POLL_MS;
+    const readUsage = options.readUsage ?? readUsageViaCli;
+    let stopped = false;
+    let fired = false;
+    const timer = setInterval(() => {
+        if (stopped || fired)
+            return;
+        void readUsage(options.pid).then((usage) => {
+            if (stopped || fired || usage === null)
+                return;
+            if (options.maxRssBytes !== undefined && usage.rssBytes > options.maxRssBytes) {
+                fired = true;
+                options.onExceeded(usage, 'memory');
+                return;
+            }
+            if (options.maxCpuPercent !== undefined && usage.cpuPercent > options.maxCpuPercent) {
+                fired = true;
+                options.onExceeded(usage, 'cpu');
+            }
+        });
+    }, pollMs);
+    timer.unref?.();
+    return {
+        stop() {
+            stopped = true;
+            clearInterval(timer);
+        },
+    };
+}
+//# sourceMappingURL=watchdog.js.map

package/dist/client/watchdog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog.js","sourceRoot":"","sources":["../../src/client/watchdog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,OAAO,MAAM,cAAc,CAAA;AA6BlC,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACnD,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAA;IACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IAC/C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC/E,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,QAAQ,CACN,YAAY,EACZ;gBACE,YAAY;gBACZ,iBAAiB;gBACjB,UAAU;gBACV,oBAAoB,GAAG,kCAAkC;aAC1D,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,EACjB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBAChB,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC,CAAA;oBACb,OAAM;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;gBACnD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC1F,CAAC,CACF,CAAA;YACD,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC3F,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAkBD,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B,2aAA2a;AAC3a,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAA;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,eAAe,CAAA;IACtD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAI,KAAK;YAAE,OAAM;QAC5B,KAAK,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACzC,IAAI,OAAO,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAM;YAC9C,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC9E,KAAK,GAAG,IAAI,CAAA;gBACZ,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;gBACnC,OAAM;YACR,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;gBACpF,KAAK,GAAG,IAAI,CAAA;gBACZ,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,MAAM,CAAC,CAAA;IACV,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;IAEf,OAAO;QACL,IAAI;YACF,OAAO,GAAG,IAAI,CAAA;YACd,aAAa,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/client/wrap-tool.d.ts

@@ -18,6 +18,19 @@ export interface WrapMcpToolOptions<Input, Output> {
      * les outils internes": these five fields are the integrator's own
      * declaration, checked by the same runtime (registry, manifest, audit,
      * autonomy) as every other `defineTool` built in-repo.
+     *
+     * Fiche 58 task 6 settles the taxonomy: an MCP client integrator (the
+     * registry wiring in `../registry/`) always passes exactly one string
+     * here, `mcp.external:<connectionId>.<remoteName>` — one permission per
+     * checked remote tool, never `mcp.external.<connexion>` (rejected by the
+     * security review: that would grant every tool on a connection
+     * indifferently of its own risk, and R4 requires an outcome to declare
+     * its own permission, not inherit its connection's). This module itself
+     * does not enforce that convention — it accepts whatever `permissions`
+     * its caller declares, exactly like every other `defineTool` call — the
+     * enforcement is structural: nothing in this repository constructs a
+     * wrapped MCP tool except `../registry/`'s own builder, which always
+     * follows it.
      */
     readonly permissions: readonly string[];
     readonly sideEffects: boolean;
@@ -30,6 +43,13 @@ export interface WrapMcpToolOptions<Input, Output> {
  * tool implemented in this repository. `execute` calls the remote tool and
  * maps its MCP result back to the declared Zod `output`; a remote failure
  * (`isError: true`) becomes a thrown error, same as a local tool's.
+ *
+ * Fiche 58 task 1bis: `execute` takes `(input, ctx)` — contract C's own
+ * shape — and forwards `ctx.signal` to the client's per-call `callTool`, so
+ * the run's own cancellation (budget exceeded, kill switch, the agent loop
+ * itself being aborted) reaches the remote process the same way a hung
+ * server's own timeout does: the connection's underlying `child_process` is
+ * killed, not merely "stopped waiting on our end while it keeps running".
  */
 export declare function wrapMcpTool<Input, Output>(options: WrapMcpToolOptions<Input, Output>): ToolDefinition<Input, Output>;
 //# sourceMappingURL=wrap-tool.d.ts.map

package/dist/client/wrap-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrap-tool.d.ts","sourceRoot":"","sources":["../../src/client/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhF,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,MAAM,WAAW,kBAAkB,CAAC,KAAK,EAAE,MAAM;IAC/C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EACvC,OAAO,EAAE,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,GACzC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CA+B/B"}
+{"version":3,"file":"wrap-tool.d.ts","sourceRoot":"","sources":["../../src/client/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEhF,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,MAAM,WAAW,kBAAkB,CAAC,KAAK,EAAE,MAAM;IAC/C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAClC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EACvC,OAAO,EAAE,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,GACzC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAgC/B"}

package/dist/client/wrap-tool.js

@@ -6,6 +6,13 @@ import { CogentaError } from '@cogenta/core';
  * tool implemented in this repository. `execute` calls the remote tool and
  * maps its MCP result back to the declared Zod `output`; a remote failure
  * (`isError: true`) becomes a thrown error, same as a local tool's.
+ *
+ * Fiche 58 task 1bis: `execute` takes `(input, ctx)` — contract C's own
+ * shape — and forwards `ctx.signal` to the client's per-call `callTool`, so
+ * the run's own cancellation (budget exceeded, kill switch, the agent loop
+ * itself being aborted) reaches the remote process the same way a hung
+ * server's own timeout does: the connection's underlying `child_process` is
+ * killed, not merely "stopped waiting on our end while it keeps running".
  */
 export function wrapMcpTool(options) {
     return defineTool({
@@ -18,8 +25,8 @@ export function wrapMcpTool(options) {
         sideEffects: options.sideEffects,
         reversible: options.reversible,
         cost: options.cost,
-        async execute(input) {
-            const result = await options.client.callTool(options.remoteName, input);
+        async execute(input, ctx) {
+            const result = await options.client.callTool(options.remoteName, input, { signal: ctx.signal });
             const text = result.content.map((block) => block.text).join('\n');
             if (result.isError) {
                 throw new CogentaError({

package/dist/client/wrap-tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrap-tool.js","sourceRoot":"","sources":["../../src/client/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsC,MAAM,iBAAiB,CAAA;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AA4B5C;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,OAA0C;IAE1C,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAC1C,OAAO,CAAC,UAAU,EAClB,KAA0C,CAC3C,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,oCAAoC,CAAC,CAAC,CAAC,IAAI;oBACxF,IAAI,EAAE,0EAA0E;iBACjF,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAW,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAyB,CAAA;YAClC,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"wrap-tool.js","sourceRoot":"","sources":["../../src/client/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsC,MAAM,iBAAiB,CAAA;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAyC5C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CACzB,OAA0C;IAE1C,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAC1C,OAAO,CAAC,UAAU,EAClB,KAA0C,EAC1C,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CACvB,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,oCAAoC,CAAC,CAAC,CAAC,IAAI;oBACxF,IAAI,EAAE,0EAA0E;iBACjF,CAAC,CAAA;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAW,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAyB,CAAA;YAClC,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,21 @@
-export type { McpStdioClientOptions } from './client/stdio-client.js';
+export type { SandboxWorkDir } from './client/sandbox.js';
+export { createSandboxWorkDir } from './client/sandbox.js';
+export type { McpStdioClientOptions, SpawnOptionsForClient } from './client/stdio-client.js';
 export { createMcpStdioClient } from './client/stdio-client.js';
-export type { ChildProcessLike, McpClient, McpContentBlock, McpServerInfo, McpToolCallResult, McpToolSpec, } from './client/types.js';
+export type { ChildProcessLike, McpCallOptions, McpClient, McpContentBlock, McpServerInfo, McpToolCallResult, McpToolSpec, } from './client/types.js';
+export type { PidUsage, PidWatchdog, PidWatchdogOptions, ReadPidUsage } from './client/watchdog.js';
+export { startPidWatchdog } from './client/watchdog.js';
 export type { WrapMcpToolOptions } from './client/wrap-tool.js';
 export { wrapMcpTool } from './client/wrap-tool.js';
 export type { JsonRpcError, JsonRpcErrorPayload, JsonRpcRequest, JsonRpcResponse, JsonRpcSuccess, } from './jsonrpc.js';
 export { JsonRpcErrorCode, jsonRpcError, jsonRpcSuccess } from './jsonrpc.js';
+export type { DiscoverMcpConnectionOptions, DiscoverMcpConnectionResult, } from './registry/discovery.js';
+export { discoverMcpConnection } from './registry/discovery.js';
+export type { FileMcpConnectionStoreOptions, McpAuthKind, McpConnectionCreateInput, McpConnectionStatus, McpConnectionStore, McpConnectionSummary, McpConnectionUpdateInput, McpDiscoveredTool, McpDiscoveryFailure, McpDiscoveryResult, McpExposedTool, McpTransport, } from './registry/store.js';
+export { createMcpConnectionStore } from './registry/store.js';
+export { ensureMcpConnectionTables, MCP_CONNECTION_TABLE } from './registry/tables.js';
+export type { BuildMcpToolDefinitionsOptions, McpToolDefinitionsAssembly, } from './registry/tool-definitions.js';
+export { buildMcpToolDefinitions } from './registry/tool-definitions.js';
 export type { McpServer, McpServerOptions } from './server.js';
 export { createMcpServer } from './server.js';
 export type { StdioTransport, StdioTransportOptions } from './stdio-transport.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,YAAY,EACV,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7E,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,YAAY,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC/D,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7E,YAAY,EACV,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,YAAY,EACV,6BAA6B,EAC7B,WAAW,EACX,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,YAAY,GACb,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AACtF,YAAY,EACV,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AACxE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/index.js

@@ -1,6 +1,12 @@
+export { createSandboxWorkDir } from './client/sandbox.js';
 export { createMcpStdioClient } from './client/stdio-client.js';
+export { startPidWatchdog } from './client/watchdog.js';
 export { wrapMcpTool } from './client/wrap-tool.js';
 export { JsonRpcErrorCode, jsonRpcError, jsonRpcSuccess } from './jsonrpc.js';
+export { discoverMcpConnection } from './registry/discovery.js';
+export { createMcpConnectionStore } from './registry/store.js';
+export { ensureMcpConnectionTables, MCP_CONNECTION_TABLE } from './registry/tables.js';
+export { buildMcpToolDefinitions } from './registry/tool-definitions.js';
 export { createMcpServer } from './server.js';
 export { serveMcpOverStdio } from './stdio-transport.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAU/D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAQnD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAW/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAQnD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAK7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAe/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAKtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AAExE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA"}

package/dist/registry/discovery.d.ts

@@ -0,0 +1,37 @@
+import type { Logger } from '@cogenta/core';
+import { type McpStdioClientOptions } from '../client/stdio-client.js';
+import type { McpConnectionSummary, McpDiscoveredTool } from './store.js';
+export interface DiscoverMcpConnectionOptions {
+    readonly connection: McpConnectionSummary;
+    /** The decrypted secret for this connection, when `connection.authKind !== 'none'` — resolved by the caller (`McpConnectionStore.decryptSecret`), never by this module. */
+    readonly secret?: string;
+    readonly logger?: Logger;
+    readonly callTimeoutMs?: number;
+    /** Injectable for tests — defaults to a real spawned process (see `McpStdioClientOptions.spawnFn`). */
+    readonly spawnFn?: McpStdioClientOptions['spawnFn'];
+}
+export type DiscoverMcpConnectionResult = {
+    readonly status: 'ok';
+    readonly tools: readonly McpDiscoveredTool[];
+} | {
+    readonly status: 'error';
+    readonly error: string;
+};
+/**
+ * Fiche 58 task 3's "test (`initialize` + `tools/list`)" — the one real
+ * network/process boundary the "MCP Clients" admin screen's "test
+ * connection" action crosses. Goes through the exact same sandboxed
+ * `createMcpStdioClient` an actual agent run later uses
+ * (`./tool-definitions.js`) — never a lighter, unsandboxed path just
+ * because this call is "only a test": a malicious `stdio` server has no
+ * way to tell a probe from a real call.
+ *
+ * `http` connections are stored (fiche 58 task 2's schema names both
+ * transports) but this module honestly refuses them — no HTTP MCP client
+ * exists in this repository yet (see `../index.js`'s own module comment).
+ * Storing the shape without silently pretending to support it is the
+ * documented, deliberate gap; claiming to test an HTTP connection that
+ * cannot actually connect would be worse than refusing outright.
+ */
+export declare function discoverMcpConnection(options: DiscoverMcpConnectionOptions): Promise<DiscoverMcpConnectionResult>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/registry/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/registry/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAE3C,OAAO,EAAwB,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAE5F,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEzE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,2KAA2K;IAC3K,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,uGAAuG;IACvG,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAA;CACpD;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAAE,GACvE;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAaxD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,2BAA2B,CAAC,CAyCtC"}

package/dist/registry/discovery.js

@@ -0,0 +1,68 @@
+import { createSandboxWorkDir } from '../client/sandbox.js';
+import { createMcpStdioClient } from '../client/stdio-client.js';
+function envFor(connection, secret) {
+    const env = { ...connection.env };
+    if (connection.secretEnvVar !== undefined && secret !== undefined) {
+        env[connection.secretEnvVar] = secret;
+    }
+    return env;
+}
+/**
+ * Fiche 58 task 3's "test (`initialize` + `tools/list`)" — the one real
+ * network/process boundary the "MCP Clients" admin screen's "test
+ * connection" action crosses. Goes through the exact same sandboxed
+ * `createMcpStdioClient` an actual agent run later uses
+ * (`./tool-definitions.js`) — never a lighter, unsandboxed path just
+ * because this call is "only a test": a malicious `stdio` server has no
+ * way to tell a probe from a real call.
+ *
+ * `http` connections are stored (fiche 58 task 2's schema names both
+ * transports) but this module honestly refuses them — no HTTP MCP client
+ * exists in this repository yet (see `../index.js`'s own module comment).
+ * Storing the shape without silently pretending to support it is the
+ * documented, deliberate gap; claiming to test an HTTP connection that
+ * cannot actually connect would be worse than refusing outright.
+ */
+export async function discoverMcpConnection(options) {
+    const { connection } = options;
+    if (connection.transport !== 'stdio') {
+        return {
+            status: 'error',
+            error: 'HTTP MCP connections are stored but not implemented yet — only "stdio" connections can be tested or used today.',
+        };
+    }
+    if (connection.command === undefined) {
+        return { status: 'error', error: 'This connection has no command configured.' };
+    }
+    const sandbox = await createSandboxWorkDir();
+    let client;
+    try {
+        client = createMcpStdioClient({
+            command: connection.command,
+            args: connection.args,
+            env: envFor(connection, options.secret),
+            cwd: sandbox.path,
+            ...(options.logger === undefined ? {} : { logger: options.logger }),
+            ...(options.callTimeoutMs === undefined ? {} : { callTimeoutMs: options.callTimeoutMs }),
+            ...(options.spawnFn === undefined ? {} : { spawnFn: options.spawnFn }),
+        });
+        await client.initialize();
+        const tools = await client.listTools();
+        return {
+            status: 'ok',
+            tools: tools.map((tool) => ({
+                name: tool.name,
+                description: tool.description,
+                inputSchema: tool.inputSchema,
+            })),
+        };
+    }
+    catch (error) {
+        return { status: 'error', error: error instanceof Error ? error.message : String(error) };
+    }
+    finally {
+        client?.close();
+        await sandbox.cleanup();
+    }
+}
+//# sourceMappingURL=discovery.js.map

package/dist/registry/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/registry/discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,oBAAoB,EAA8B,MAAM,2BAA2B,CAAA;AAkB5F,SAAS,MAAM,CACb,UAAgC,EAChC,MAA0B;IAE1B,MAAM,GAAG,GAA2B,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAA;IACzD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClE,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,MAAM,CAAA;IACvC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAA;IAC9B,IAAI,UAAU,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EACH,iHAAiH;SACpH,CAAA;IACH,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAA;IACjF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,EAAE,CAAA;IAC5C,IAAI,MAA6B,CAAA;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,oBAAoB,CAAC;YAC5B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC;YACvC,GAAG,EAAE,OAAO,CAAC,IAAI;YACjB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CAAA;QACF,MAAM,MAAM,CAAC,UAAU,EAAE,CAAA;QACzB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAA;QACtC,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;SACJ,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC3F,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,KAAK,EAAE,CAAA;QACf,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;IACzB,CAAC;AACH,CAAC"}

package/dist/registry/store.d.ts

@@ -0,0 +1,137 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * Fiche 58 task 2/3. The registry of external MCP connections this site's
+ * agent runtime may consume — never confused with `cogenta mcp` (the
+ * *server* this site exposes outward, `packages/cli/src/commands/mcp.ts`,
+ * unrelated code path). See `../client/stdio-client.js` for what actually
+ * runs when a `stdio` connection is used, and `wrap-tool.js` for how one
+ * exposed tool becomes a Contract C `ToolDefinition`.
+ */
+export type McpTransport = 'stdio' | 'http';
+export type McpAuthKind = 'none' | 'api_key' | 'oauth';
+export type McpConnectionStatus = 'unverified' | 'ok' | 'error';
+export interface McpDiscoveredTool {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: Readonly<Record<string, unknown>>;
+}
+/** One remote tool the admin has explicitly checked as exposable — "absent, pas refusée": a tool discovered but never listed here is never wrapped, never offered to a single agent. */
+export interface McpExposedTool {
+    /** The tool's name on the remote server — must be present in this connection's last discovered tool list. */
+    readonly remoteName: string;
+    /** This connection's own name for it in Cogenta's tool registry — defaults to `remoteName` when not given. */
+    readonly localName: string;
+    readonly description: string;
+    /** Declared by the admin at exposure time, per fiche 58 task 6 — never read from the remote server, which has no way to be trusted to declare its own blast radius. */
+    readonly sideEffects: boolean;
+    readonly reversible: boolean;
+    readonly cost: 'low' | 'medium' | 'high';
+}
+export interface McpConnectionSummary {
+    readonly id: string;
+    readonly name: string;
+    readonly transport: McpTransport;
+    readonly command?: string;
+    readonly args: readonly string[];
+    readonly url?: string;
+    /** Explicit, non-secret environment for a `stdio` connection — see `../client/stdio-client.js`: this is exactly, and only, what the spawned process receives, never `process.env`. */
+    readonly env: Readonly<Record<string, string>>;
+    readonly authKind: McpAuthKind;
+    /** `true` once a secret has been saved — the secret itself is never returned here (same posture as `ProviderConfigStore.decryptKey`, R7). */
+    readonly hasSecret: boolean;
+    /** For `authKind !== 'none'` on a `stdio` connection: which environment variable receives the decrypted secret at connect time. Irrelevant otherwise. */
+    readonly secretEnvVar?: string;
+    /**
+     * Fiche 58 task 1bis's mandatory, honest confirmation for a `stdio`
+     * connection: whoever created it explicitly acknowledged that this
+     * binary runs with the Cogenta process's own full OS privileges,
+     * unsandboxed beyond `../client/stdio-client.js`'s own floor. Always
+     * `true` for an `http` connection (nothing is spawned).
+     */
+    readonly confirmedUnsandboxed: boolean;
+    readonly enabled: boolean;
+    readonly status: McpConnectionStatus;
+    readonly lastError?: string;
+    readonly discoveredTools: readonly McpDiscoveredTool[];
+    readonly lastDiscoveredAt?: string;
+    readonly exposedTools: readonly McpExposedTool[];
+    readonly createdAt: string;
+    readonly updatedAt: string;
+}
+export interface McpConnectionCreateInput {
+    readonly name: string;
+    readonly transport: McpTransport;
+    readonly command?: string;
+    readonly args?: readonly string[];
+    readonly url?: string;
+    readonly env?: Readonly<Record<string, string>>;
+    readonly authKind?: McpAuthKind;
+    readonly secret?: string;
+    readonly secretEnvVar?: string;
+    /**
+     * Required `true` for a `stdio` connection. This is the structural half
+     * of fiche 58 task 1bis's confirmation requirement — a UI can and must
+     * show the warning (`packages/admin/src/routes/mcp-clients.tsx`), but the
+     * refusal itself lives here, not only in a checkbox that markup could
+     * omit: `create()` throws `MCP_CONNECTION_CONFIRMATION_REQUIRED` for every
+     * `stdio` connection created without this being exactly `true`.
+     */
+    readonly confirmUnsandboxed?: boolean;
+}
+/**
+ * Fiche feedback: a saved connection had no way to change its own
+ * command/args/env/auth/secret without deleting and recreating it (losing
+ * its already-validated `exposedTools`) — same trap as
+ * `ProviderConfigStore.updateSettings` fixed for Providers. Every field is
+ * optional and means "leave exactly as saved" when absent; `transport` is
+ * deliberately not here (changing it is a different connection, not an
+ * edit — delete and recreate, same as a provider's id).
+ */
+export interface McpConnectionUpdateInput {
+    readonly name?: string;
+    readonly command?: string;
+    readonly args?: readonly string[];
+    readonly url?: string;
+    readonly env?: Readonly<Record<string, string>>;
+    readonly authKind?: McpAuthKind;
+    /** Re-encrypts and replaces the saved secret. Ignored (never touches the saved secret) unless given — there is no way to read it back to resend unchanged. */
+    readonly secret?: string;
+    readonly secretEnvVar?: string;
+}
+export interface McpDiscoveryResult {
+    readonly status: 'ok';
+    readonly tools: readonly McpDiscoveredTool[];
+}
+export interface McpDiscoveryFailure {
+    readonly status: 'error';
+    readonly error: string;
+}
+export interface McpConnectionStore {
+    list(): Promise<readonly McpConnectionSummary[]>;
+    get(id: string): Promise<McpConnectionSummary | undefined>;
+    create(input: McpConnectionCreateInput): Promise<McpConnectionSummary>;
+    remove(id: string): Promise<void>;
+    setEnabled(id: string, enabled: boolean): Promise<McpConnectionSummary>;
+    /** Tri-state patch (fields absent from `patch` are left exactly as saved) for everything but `transport` and `enabled` — see `McpConnectionUpdateInput`. */
+    update(id: string, patch: McpConnectionUpdateInput): Promise<McpConnectionSummary>;
+    /** Persists the result of a real `initialize()`+`tools/list()` probe (`../discovery.js`) — never invented here. A failed discovery does not clear previously exposed tools; a connection that briefly can't be reached does not silently lose its admin's prior decisions. */
+    recordDiscovery(id: string, result: McpDiscoveryResult | McpDiscoveryFailure): Promise<McpConnectionSummary>;
+    /**
+     * The admin's checkbox decision (task 3) — replaces the full exposed-tool
+     * set for this connection. Every `remoteName` must be present in the
+     * connection's last discovered tool list: this is what makes "jamais un
+     * octroi implicite du catalogue distant entier" true structurally rather
+     * than by UI convention — a caller cannot expose a tool that was never
+     * actually seen on the wire.
+     */
+    setExposedTools(id: string, tools: readonly McpExposedTool[]): Promise<McpConnectionSummary>;
+    /** The one place the real secret is ever decrypted — never exposed on `McpConnectionSummary`. Throws `MCP_CONNECTION_NOT_FOUND`/`MCP_CONNECTION_AUTH_INVALID` as appropriate. */
+    decryptSecret(id: string): Promise<string>;
+}
+export interface FileMcpConnectionStoreOptions {
+    /** `COGENTA_AUTH_SIGNING_KEY` — the encryption key is derived from it, never stored itself (same posture as `ProviderConfigStore`, R7). */
+    readonly signingKey: string;
+    readonly now?: () => number;
+}
+export declare function createMcpConnectionStore(db: DatabaseHandle, options: FileMcpConnectionStoreOptions): McpConnectionStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/registry/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/registry/store.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAGzF;;;;;;;GAOG;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,CAAA;AAC3C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAA;AACtD,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,IAAI,GAAG,OAAO,CAAA;AAE/D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACxD;AAED,wLAAwL;AACxL,MAAM,WAAW,cAAc;IAC7B,6GAA6G;IAC7G,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8GAA8G;IAC9G,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,uKAAuK;IACvK,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;CACzC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,sLAAsL;IACtL,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC9C,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAA;IAC9B,6IAA6I;IAC7I,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,yJAAyJ;IACzJ,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACtD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAA;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;CACtC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAA;IAC/B,8JAA8J;IAC9J,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAC7C;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAA;IAChD,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAA;IAC1D,MAAM,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACtE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACvE,4JAA4J;IAC5J,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAClF,8QAA8Q;IAC9Q,eAAe,CACb,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,kBAAkB,GAAG,mBAAmB,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAChC;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC5F,iLAAiL;IACjL,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC3C;AAsFD,MAAM,WAAW,6BAA6B;IAC5C,2IAA2I;IAC3I,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,cAAc,EAClB,OAAO,EAAE,6BAA6B,GACrC,kBAAkB,CAyOpB"}