@corenel/mcp 0.1.0

package/dist/config.js

@@ -0,0 +1,239 @@
+/* WHERE AN MCP SERVER AND ITS CREDENTIAL LIVE, AND HOW THEY ARE KEPT APART.
+ *
+ * The server list is config: it goes through readDaemonConfig/writeDaemonConfig
+ * exactly like every other daemon.json key, so unknown keys survive a write and
+ * a missing/corrupt file still starts on defaults. The credential is not: it
+ * lives in <stateDir>/auth.json, under a top-level `mcp` object keyed by server
+ * name, alongside (and never disturbing) the user's own sign-in record that
+ * auth/store.ts already keeps there.
+ *
+ * TWO GUARDS worth calling out because a later change could quietly break
+ * either:
+ *
+ *   1. "Never partially applied" is enforced at the RECORD level, not the file
+ *      level. readMcpServers drops any entry that is not an object with a
+ *      non-empty string name AND url -- a malformed entry contributes nothing,
+ *      not half of itself -- while entries around it still come through.
+ *
+ *   2. auth.json is READ-MODIFY-WRITE-merged on every credential write. This
+ *      file may hold the user's own accessToken/refreshToken alongside `mcp`;
+ *      replacing the whole file instead of merging into it would sign the user
+ *      out (or drop an unrelated server's credential) as a side effect of an
+ *      MCP write neither operation has any business touching. The other
+ *      direction of that same merge matters too: auth/store.ts's
+ *      `saveCredential` (every sign-in and token refresh) must preserve this
+ *      module's `mcp` section rather than overwrite the whole file with just
+ *      the user's own credential -- see the comment there.
+ *
+ *   3. readMcpCredential holds a stored entry to the SAME "never partially
+ *      applied" standard as readMcpServers: `isUsableCredential` checks the
+ *      tagged union's required fields for whichever `kind` is present, so a
+ *      half-written credential reads as absent, not as a broken one handed to
+ *      a caller.
+ */
+import { readFile, writeFile, mkdir, chmod } from 'node:fs/promises';
+import { credentialFilePath, credentialDir } from '@corenel/tools-node';
+import { readDaemonConfig, writeDaemonConfig } from '@corenel/config';
+/** True for a value that is a usable {name,url} server entry -- the shape
+ *  `readMcpServers` requires of every element it keeps. */
+function isUsableServer(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const r = v;
+    return typeof r.name === 'string' && r.name.length > 0 && typeof r.url === 'string' && r.url.length > 0;
+}
+/**
+ * The configured MCP servers, or `[]` on a machine that has none.
+ *
+ * `readDaemonConfig` does not deep-validate a known key -- a hand-edited
+ * daemon.json can carry anything under `mcpServers` -- so this filters to
+ * entries that are actually usable, dropping the rest rather than serving a
+ * half-populated server (missing url, wrong type, not an object at all).
+ */
+export async function readMcpServers(stateDir) {
+    const { config } = await readDaemonConfig(stateDir);
+    const raw = config.mcpServers;
+    if (!Array.isArray(raw))
+        return [];
+    /* The mapping is deliberate rather than a pass-through -- it is what keeps a
+     * hand-edited daemon.json from smuggling arbitrary keys into an McpServer --
+     * so EVERY field the daemon acts on has to be named here. `hosted` was not,
+     * and the consequence was silent: the relay auth path read `undefined` on
+     * every server while its own unit test, which builds the object by hand,
+     * stayed green.
+     *
+     * `=== true` and not a truthy check: this flag decides whether the Corenel
+     * account token is attached, so `"hosted": "no"` must read as off. Omitted
+     * when false so the round-trip matches what `addServer` writes. */
+    return raw.filter(isUsableServer).map((s) => {
+        const out = { name: s.name, url: s.url };
+        if (s.hosted === true)
+            out.hosted = true;
+        /* Named here for the same reason `hosted` is: this mapping is what stops a
+         * hand-edited daemon.json smuggling arbitrary keys in, so every field the
+         * daemon acts on has to appear. A dropped `authUrl` sends the login flow
+         * back to probing the relay route, which is the bug this field exists to
+         * fix. */
+        if (typeof s.authUrl === 'string' && s.authUrl.length > 0)
+            out.authUrl = s.authUrl;
+        return out;
+    });
+}
+/** Write the server list through daemon.json, preserving every other key --
+ *  including keys this process does not know about, via the `unknown` bucket
+ *  `readDaemonConfig` already separates out. */
+export async function writeMcpServers(stateDir, servers) {
+    const { config, unknown } = await readDaemonConfig(stateDir);
+    await writeDaemonConfig(stateDir, { ...config, mcpServers: servers }, unknown);
+}
+/** Read auth.json as a bag of top-level keys, never throwing -- a missing or
+ *  corrupt file reads as empty, exactly like readDaemonConfig treats
+ *  daemon.json, so a credential lookup can never crash the daemon. */
+async function readAuthJson(stateDir) {
+    let raw;
+    try {
+        raw = await readFile(credentialFilePath(stateDir), 'utf8');
+    }
+    catch {
+        return {};
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return {};
+        return parsed;
+    }
+    catch {
+        return {};
+    }
+}
+function isMcpAuthSection(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/** True for a value that is a usable credential of either tagged-union kind --
+ *  the same "never partially applied" posture `isUsableServer` holds servers
+ *  to, applied here so a hand-edited or half-written auth.json (e.g.
+ *  `{kind:'headers'}` with no `headers` array) reads as no credential rather
+ *  than reaching a caller that will crash or silently send nothing. */
+function isUsableCredential(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const r = v;
+    if (r.kind === 'headers') {
+        return Array.isArray(r.headers) && r.headers.every((h) => typeof h === 'object' && h !== null
+            && typeof h.name === 'string'
+            && typeof h.value === 'string');
+    }
+    if (r.kind === 'oauth') {
+        return typeof r.accessToken === 'string' && r.accessToken.length > 0
+            && typeof r.clientId === 'string' && r.clientId.length > 0
+            && typeof r.authServer === 'string' && r.authServer.length > 0;
+    }
+    return false;
+}
+/** The stored credential for `server`, or null when it has none. A malformed
+ *  `mcp` section, a malformed entry within it, or an entry that is not a
+ *  usable credential of either kind all read as "no credential" rather than
+ *  throwing -- matching how a corrupt auth.json is already treated elsewhere
+ *  in this package. */
+export async function readMcpCredential(stateDir, server) {
+    const doc = await readAuthJson(stateDir);
+    const section = doc.mcp;
+    if (!isMcpAuthSection(section))
+        return null;
+    const cred = section[server];
+    return isUsableCredential(cred) ? cred : null;
+}
+function isUsableClient(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const r = v;
+    return typeof r.clientId === 'string' && r.clientId.length > 0
+        && typeof r.authServer === 'string' && r.authServer.length > 0
+        && (r.clientSecret === undefined || typeof r.clientSecret === 'string')
+        && (r.redirectPort === undefined
+            || (typeof r.redirectPort === 'number' && Number.isInteger(r.redirectPort)
+                && r.redirectPort > 0 && r.redirectPort < 65536));
+}
+/**
+ * The OAuth client previously registered for `server`, or null.
+ *
+ * WHY THIS IS STORED AT ALL. Every sign-in used to perform a fresh dynamic
+ * client registration, so each click on Sign in minted another OAuth client at
+ * the vendor. Servers rate-limit that -- Figma answers 403 after a few -- and
+ * the refusal surfaces as a sign-in failure on a service that works, with
+ * nothing to suggest the cause is our own retry.
+ *
+ * Reuse is safe across the random loopback PORT this picks per attempt: RFC
+ * 8252 section 7.3 requires an authorization server to accept any port for a
+ * loopback redirect URI. `authServer` is stored so a registration is dropped
+ * if the server later points somewhere else, which is the one case where a
+ * cached client_id would be presented to something that never issued it.
+ */
+export async function readMcpClient(stateDir, server) {
+    const doc = await readAuthJson(stateDir);
+    const section = doc.mcpClients;
+    if (typeof section !== 'object' || section === null || Array.isArray(section))
+        return null;
+    const rec = section[server];
+    return isUsableClient(rec) ? rec : null;
+}
+/** Store `server`'s registered client, merging into auth.json exactly as
+ *  writeMcpCredential does -- same file, same 0600, same preservation of every
+ *  other key including ones this build knows nothing about. */
+export async function writeMcpClient(stateDir, server, client) {
+    const doc = await readAuthJson(stateDir);
+    const prev = doc.mcpClients;
+    const section = (typeof prev === 'object' && prev !== null && !Array.isArray(prev))
+        ? { ...prev }
+        : {};
+    section[server] = client;
+    const next = { ...doc, mcpClients: section };
+    const path = credentialFilePath(stateDir);
+    await mkdir(credentialDir(stateDir), { recursive: true });
+    await writeFile(path, `${JSON.stringify(next, null, 2)}
+`, { mode: 0o600 });
+    try {
+        await chmod(path, 0o600);
+    }
+    catch {
+        /* best effort on platforms without POSIX modes, matching auth/store.ts */
+    }
+}
+/** Forget `server`'s registered client, so the next sign-in registers afresh.
+ *  Used when a server rejects the stored client_id -- the registration is gone
+ *  on their side and keeping it only reproduces the failure. */
+export async function clearMcpClient(stateDir, server) {
+    const doc = await readAuthJson(stateDir);
+    const prev = doc.mcpClients;
+    if (typeof prev !== 'object' || prev === null || Array.isArray(prev))
+        return;
+    const section = { ...prev };
+    if (!(server in section))
+        return;
+    delete section[server];
+    const path = credentialFilePath(stateDir);
+    await mkdir(credentialDir(stateDir), { recursive: true });
+    await writeFile(path, `${JSON.stringify({ ...doc, mcpClients: section }, null, 2)}
+`, { mode: 0o600 });
+    try {
+        await chmod(path, 0o600);
+    }
+    catch { /* as above */ }
+}
+export async function writeMcpCredential(stateDir, server, cred) {
+    const doc = await readAuthJson(stateDir);
+    const section = isMcpAuthSection(doc.mcp) ? { ...doc.mcp } : {};
+    section[server] = cred;
+    const next = { ...doc, mcp: section };
+    const path = credentialFilePath(stateDir);
+    await mkdir(credentialDir(stateDir), { recursive: true });
+    await writeFile(path, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+    try {
+        await chmod(path, 0o600);
+    }
+    catch {
+        /* best effort on platforms without POSIX modes, matching auth/store.ts */
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGtE;2DAC2D;AAC3D,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC;;;;;;;;;uEASmE;IACnE,OAAO,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,MAAM,GAAG,GAAc,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;QACzC;;;;kBAIU;QACV,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QACnF,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;gDAEgD;AAChD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAoB;IAC1E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AACjF,CAAC;AAKD;;sEAEsE;AACtE,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9E,OAAO,MAAiC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;uEAIuE;AACvE,SAAS,kBAAkB,CAAC,CAAU;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAChD,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;eACrC,OAAQ,CAA6B,CAAC,IAAI,KAAK,QAAQ;eACvD,OAAQ,CAA6B,CAAC,KAAK,KAAK,QAAQ,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;eAC/D,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;eACvD,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;uBAIuB;AACvB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAc;IACtE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC;IACxB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AA4BD,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;WACzD,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;WAC3D,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC;WACpE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS;eAC3B,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;mBACrE,CAAC,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc;IAClE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,GAAG,GAAI,OAAmC,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED;;+DAE+D;AAC/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc,EAAE,MAA2B;IAChG,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC;IAC5B,MAAM,OAAO,GAA4B,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1G,CAAC,CAAC,EAAE,GAAI,IAAgC,EAAE;QAC1C,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;CACvD,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED;;gEAEgE;AAChE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7E,MAAM,OAAO,GAAG,EAAE,GAAI,IAAgC,EAAE,CAAC;IACzD,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO;IACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;CAClF,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClB,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAmB;IAC5F,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAmB,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAI,GAAG,CAAC,GAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC"}

package/dist/gatedAgentTools.d.ts

@@ -0,0 +1,12 @@
+import type { AgentTool } from '@corenel/protocol';
+import type { Policy } from '@corenel/protocol';
+import type { McpRegistry } from './registry';
+/**
+ * Every connected/primed MCP tool on `registry`, wrapped so a call is gated
+ * by `mcpCallAllowed(address, policy)` BEFORE the underlying tool ever runs.
+ * A tool whose server/tool pair cannot be encoded as a wire name is skipped
+ * (matching `asAgentTools`'s own refusal, already logged there -- not
+ * duplicated or silenced here).
+ */
+export declare function gatedAgentTools(registry: McpRegistry, policy: Policy): AgentTool[];
+//# sourceMappingURL=gatedAgentTools.d.ts.map

package/dist/gatedAgentTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatedAgentTools.d.ts","sourceRoot":"","sources":["../src/gatedAgentTools.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAyBlF"}

package/dist/gatedAgentTools.js

@@ -0,0 +1,36 @@
+import { asAgentTools } from './asAgentTools.js';
+import { mcpCallAllowed } from './policy.js';
+import { canEncodeMcpWireName, mcpToolAddress, mcpWireName } from './toolNames.js';
+/**
+ * Every connected/primed MCP tool on `registry`, wrapped so a call is gated
+ * by `mcpCallAllowed(address, policy)` BEFORE the underlying tool ever runs.
+ * A tool whose server/tool pair cannot be encoded as a wire name is skipped
+ * (matching `asAgentTools`'s own refusal, already logged there -- not
+ * duplicated or silenced here).
+ */
+export function gatedAgentTools(registry, policy) {
+    const base = asAgentTools(registry);
+    const byWireName = new Map(base.map((t) => [t.name, t]));
+    const wrapped = [];
+    for (const { server, tool } of registry.tools()) {
+        if (!canEncodeMcpWireName(server, tool.name))
+            continue;
+        const name = mcpWireName(server, tool.name);
+        const original = byWireName.get(name);
+        if (!original)
+            continue; // defensive: cannot happen, base and tools() agree by construction
+        // Built ONCE, from the connected {server, tool} pair -- never from a call.
+        const address = mcpToolAddress(server, tool.name);
+        wrapped.push({
+            ...original,
+            async run(args, ctx) {
+                const decision = mcpCallAllowed(address, policy);
+                if (!decision.ok)
+                    return `Error: ${decision.reason}`;
+                return original.run(args, ctx);
+            },
+        });
+    }
+    return wrapped;
+}
+//# sourceMappingURL=gatedAgentTools.js.map

package/dist/gatedAgentTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatedAgentTools.js","sourceRoot":"","sources":["../src/gatedAgentTools.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,QAAqB,EAAE,MAAc;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ;YAAE,SAAS,CAAC,mEAAmE;QAE5F,2EAA2E;QAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAElD,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,QAAQ;YACX,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG;gBACjB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACrD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/httpClient.d.ts

@@ -0,0 +1,47 @@
+import type { McpServer } from './types.ts';
+import type { AuthProvider } from './auth.ts';
+export interface McpTool {
+    name: string;
+    description?: string;
+    inputSchema: unknown;
+}
+export declare class McpHttpClient {
+    private readonly server;
+    private readonly auth;
+    private readonly fetchImpl;
+    private nextRequestId;
+    private sessionId;
+    constructor(server: McpServer, auth: AuthProvider, fetchImpl?: typeof fetch);
+    initialize(): Promise<void>;
+    listTools(): Promise<McpTool[]>;
+    callTool(name: string, args: unknown): Promise<{
+        content: unknown;
+        isError: boolean;
+    }>;
+    /** Send one JSON-RPC request, retrying exactly once on a 401 that the
+     *  AuthProvider says it recovered from. `isRetry` prevents a second retry
+     *  loop -- a credential that fails twice is refused, not flaky. */
+    private send;
+    /** Read an SSE body until the JSON-RPC response for `id` arrives.
+     *
+     *  Events are separated by a blank line; an event's `data:` lines are joined
+     *  with newlines, per the SSE spec, and parsed as one JSON-RPC message.
+     *  Notifications (no `id`) and responses to other ids are skipped. The reader
+     *  is cancelled once the answer is in, so a server that keeps the stream open
+     *  after replying cannot hold this call open with it. */
+    private readSseResponse;
+    /** The JSON-RPC response in one SSE event, if it answers `id`; else null. */
+    private matchSseEvent;
+    /** The bare `fetch()` call, wrapped -- every OTHER throw in `send` already
+     *  names the server; this is the one call whose own failures (DNS miss,
+     *  connection refused, TLS failure) never reach `send`'s response-handling
+     *  at all. Left unguarded, node's bare `fetch failed` -- naming neither the
+     *  URL nor the actual cause -- propagates straight out of `send`, into
+     *  `registry.ts`'s `status().error`, and out of `doctor`, the one command
+     *  whose entire job is diagnosis. `err.cause` carries the real reason
+     *  (ECONNREFUSED, ENOTFOUND, a TLS alert); undici puts it there rather than
+     *  in `err.message`. */
+    private request;
+    private buildHeaders;
+}
+//# sourceMappingURL=httpClient.d.ts.map

package/dist/httpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.d.ts","sourceRoot":"","sources":["../src/httpClient.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAa9C,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACtB;AAcD,qBAAa,aAAa;IAKtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAN5B,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,SAAS,CAAqB;gBAGnB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,YAAY,EAClB,SAAS,GAAE,OAAO,KAAa;IAG5C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAU/B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAU5F;;uEAEmE;YACrD,IAAI;IAgDlB;;;;;;6DAMyD;YAC3C,eAAe;IAiC7B,6EAA6E;IAC7E,OAAO,CAAC,aAAa;IAkBrB;;;;;;;;4BAQwB;YACV,OAAO;YAeP,YAAY;CAQ3B"}

package/dist/httpClient.js

@@ -0,0 +1,196 @@
+/** MCP spec revision this client speaks. Bumping it is a protocol decision,
+ *  not a version-string typo -- do it deliberately. */
+const PROTOCOL_VERSION = '2025-06-18';
+const CLIENT_INFO = { name: 'corenel', version: '0.2.0' };
+/** The `Mcp-Session-Id` header name, per the MCP Streamable HTTP transport
+ *  spec. Servers are free to omit it (stateless servers have no session to
+ *  track); when present it must be echoed on every later request. */
+const SESSION_HEADER = 'Mcp-Session-Id';
+export class McpHttpClient {
+    server;
+    auth;
+    fetchImpl;
+    nextRequestId = 1;
+    sessionId;
+    constructor(server, auth, fetchImpl = fetch) {
+        this.server = server;
+        this.auth = auth;
+        this.fetchImpl = fetchImpl;
+    }
+    async initialize() {
+        await this.send('initialize', {
+            protocolVersion: PROTOCOL_VERSION,
+            capabilities: {},
+            clientInfo: CLIENT_INFO,
+        });
+    }
+    async listTools() {
+        const result = await this.send('tools/list', {});
+        const tools = isRecord(result) ? result.tools : undefined;
+        // A server with zero tools is a legitimate, common answer -- not an
+        // error, and not something to confuse with the stream-response case
+        // above (which throws rather than reaching here at all).
+        if (!Array.isArray(tools))
+            return [];
+        return tools.filter(isMcpTool);
+    }
+    async callTool(name, args) {
+        const result = await this.send('tools/call', { name, arguments: args });
+        const record = isRecord(result) ? result : {};
+        // isError: true is the TOOL failing -- information for the model, not a
+        // transport problem, so it is returned rather than thrown. A transport
+        // failure (bad JSON-RPC, 401 refused twice, a stream response) throws
+        // out of `send` before we ever get here.
+        return { content: record.content, isError: record.isError === true };
+    }
+    /** Send one JSON-RPC request, retrying exactly once on a 401 that the
+     *  AuthProvider says it recovered from. `isRetry` prevents a second retry
+     *  loop -- a credential that fails twice is refused, not flaky. */
+    async send(method, params, isRetry = false) {
+        const headers = await this.buildHeaders();
+        // Allocated HERE rather than inside `request`, because an SSE reply has to be
+        // matched back to this id: a stream may carry notifications, or a response
+        // to some other request, ahead of ours.
+        const id = this.nextRequestId++;
+        const res = await this.request(headers, id, method, params);
+        if (res.status === 401) {
+            if (!isRetry && (await this.auth.onUnauthorized())) {
+                return this.send(method, params, true);
+            }
+            throw new Error(`MCP server "${this.server.name}" refused the credential (401) -- run: corenel mcp login ${this.server.name}`);
+        }
+        const sessionId = res.headers.get(SESSION_HEADER);
+        if (sessionId)
+            this.sessionId = sessionId;
+        if (!res.ok) {
+            throw new Error(`MCP server "${this.server.name}" returned HTTP ${res.status}`);
+        }
+        const contentType = res.headers.get('content-type') ?? '';
+        let body;
+        if (contentType.includes('text/event-stream')) {
+            /* STREAMABLE HTTP MAY ANSWER WITH SSE, and Notion, Asana, Atlassian and
+             * Dropbox all do. This client used to throw on sight, so those servers
+             * never connected at all. Notion's real reply is one `message` event
+             * carrying the JSON-RPC response, then a close -- but a server may also
+             * send notifications first, or hold the stream open afterwards, so the
+             * reader stops at OUR response rather than at the end of the stream. */
+            body = await this.readSseResponse(res, id);
+        }
+        else if (contentType.includes('application/json')) {
+            body = (await res.json());
+        }
+        else {
+            throw new Error(`MCP server "${this.server.name}" answered with an unexpected content-type: "${contentType || '(none)'}"`);
+        }
+        if (body.error) {
+            throw new Error(`MCP server "${this.server.name}" returned error ${body.error.code}: ${body.error.message}`);
+        }
+        return body.result;
+    }
+    /** Read an SSE body until the JSON-RPC response for `id` arrives.
+     *
+     *  Events are separated by a blank line; an event's `data:` lines are joined
+     *  with newlines, per the SSE spec, and parsed as one JSON-RPC message.
+     *  Notifications (no `id`) and responses to other ids are skipped. The reader
+     *  is cancelled once the answer is in, so a server that keeps the stream open
+     *  after replying cannot hold this call open with it. */
+    async readSseResponse(res, id) {
+        if (!res.body) {
+            throw new Error(`MCP server "${this.server.name}" closed the stream without a response`);
+        }
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder();
+        let buffer = '';
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (value)
+                    buffer += decoder.decode(value, { stream: true });
+                // Normalise CRLF so one splitter handles both line endings.
+                buffer = buffer.replace(/\r\n/g, '\n');
+                let boundary = buffer.indexOf('\n\n');
+                while (boundary !== -1) {
+                    const event = buffer.slice(0, boundary);
+                    buffer = buffer.slice(boundary + 2);
+                    const match = this.matchSseEvent(event, id);
+                    if (match)
+                        return match;
+                    boundary = buffer.indexOf('\n\n');
+                }
+                if (done) {
+                    // A final event the server did not terminate with a blank line.
+                    const tail = buffer.trim() ? this.matchSseEvent(buffer, id) : null;
+                    if (tail)
+                        return tail;
+                    throw new Error(`MCP server "${this.server.name}" closed the stream without a response`);
+                }
+            }
+        }
+        finally {
+            reader.cancel().catch(() => { });
+        }
+    }
+    /** The JSON-RPC response in one SSE event, if it answers `id`; else null. */
+    matchSseEvent(event, id) {
+        const data = event
+            .split('\n')
+            .filter((line) => line.startsWith('data:'))
+            .map((line) => line.slice(5).replace(/^ /, ''))
+            .join('\n');
+        if (!data)
+            return null;
+        let parsed;
+        try {
+            parsed = JSON.parse(data);
+        }
+        catch {
+            return null; // not a JSON-RPC message; SSE comments and keep-alives land here
+        }
+        if (!isRecord(parsed) || parsed.id !== id)
+            return null;
+        if (!('result' in parsed) && !('error' in parsed))
+            return null;
+        return parsed;
+    }
+    /** The bare `fetch()` call, wrapped -- every OTHER throw in `send` already
+     *  names the server; this is the one call whose own failures (DNS miss,
+     *  connection refused, TLS failure) never reach `send`'s response-handling
+     *  at all. Left unguarded, node's bare `fetch failed` -- naming neither the
+     *  URL nor the actual cause -- propagates straight out of `send`, into
+     *  `registry.ts`'s `status().error`, and out of `doctor`, the one command
+     *  whose entire job is diagnosis. `err.cause` carries the real reason
+     *  (ECONNREFUSED, ENOTFOUND, a TLS alert); undici puts it there rather than
+     *  in `err.message`. */
+    async request(headers, id, method, params) {
+        try {
+            return await this.fetchImpl(this.server.url, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify({ jsonrpc: '2.0', id, method, params }),
+            });
+        }
+        catch (err) {
+            const cause = err instanceof Error && err.cause instanceof Error ? err.cause.message
+                : err instanceof Error ? err.message
+                    : String(err);
+            throw new Error(`MCP server "${this.server.name}" (${this.server.url}) is unreachable: ${cause}`);
+        }
+    }
+    async buildHeaders() {
+        const headers = new Headers();
+        headers.set('Content-Type', 'application/json');
+        headers.set('Accept', 'application/json, text/event-stream');
+        for (const h of await this.auth.headers())
+            headers.set(h.name, h.value);
+        if (this.sessionId)
+            headers.set(SESSION_HEADER, this.sessionId);
+        return headers;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function isMcpTool(value) {
+    return isRecord(value) && typeof value.name === 'string' && 'inputSchema' in value;
+}
+//# sourceMappingURL=httpClient.js.map

package/dist/httpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.js","sourceRoot":"","sources":["../src/httpClient.ts"],"names":[],"mappings":"AAkBA;uDACuD;AACvD,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAEtC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE1D;;qEAEqE;AACrE,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAoBxC,MAAM,OAAO,aAAa;IAKL;IACA;IACA;IANX,aAAa,GAAG,CAAC,CAAC;IAClB,SAAS,CAAqB;IAEtC,YACmB,MAAiB,EACjB,IAAkB,EAClB,YAA0B,KAAK;QAF/B,WAAM,GAAN,MAAM,CAAW;QACjB,SAAI,GAAJ,IAAI,CAAc;QAClB,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YAC5B,eAAe,EAAE,gBAAgB;YACjC,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,oEAAoE;QACpE,oEAAoE;QACpE,yDAAyD;QACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAa;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,yCAAyC;QACzC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;IACvE,CAAC;IAED;;uEAEmE;IAC3D,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,MAAe,EAAE,OAAO,GAAG,KAAK;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,8EAA8E;QAC9E,2EAA2E;QAC3E,wCAAwC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,4DAA4D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAC9G,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE1C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,IAAyB,CAAC;QAC9B,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9C;;;;;oFAKwE;YACxE,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,gDAAgD,WAAW,IAAI,QAAQ,GAAG,CAC1G,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,oBAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;;6DAMyD;IACjD,KAAK,CAAC,eAAe,CAAC,GAAa,EAAE,EAAU;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,KAAK;oBAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,4DAA4D;gBAC5D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACvC,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtC,OAAO,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;oBACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;oBACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;oBACpC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC5C,IAAI,KAAK;wBAAE,OAAO,KAAK,CAAC;oBACxB,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;gBACD,IAAI,IAAI,EAAE,CAAC;oBACT,gEAAgE;oBAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACnE,IAAI,IAAI;wBAAE,OAAO,IAAI,CAAC;oBACtB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAwB,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,aAAa,CAAC,KAAa,EAAE,EAAU;QAC7C,MAAM,IAAI,GAAG,KAAK;aACf,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,iEAAiE;QAChF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,MAAwC,CAAC;IAClD,CAAC;IAED;;;;;;;;4BAQwB;IAChB,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,EAAU,EAAE,MAAc,EAAE,MAAe;QACjF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aAC7D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;gBAClF,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;oBACpC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,qBAAqB,KAAK,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,aAAa,IAAI,KAAK,CAAC;AACrF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+export type { McpServer, McpCredential, McpHeadersCredential, McpOAuthCredential } from './types';
+export type { McpTool } from './httpClient';
+export { McpHttpClient } from './httpClient';
+export type { McpRegisteredClient } from './config';
+export { readMcpServers, writeMcpServers, readMcpCredential, writeMcpCredential, readMcpClient, writeMcpClient, clearMcpClient, } from './config';
+export type { McpClient, McpClientFactory, ServerReport, ConnectAllOptions } from './registry';
+export { McpRegistry, SERVER_CONNECT_TIMEOUT_MS, accountTokenFor } from './registry';
+export type { McpCallDecision } from './policy';
+export { mcpCallAllowed } from './policy';
+export { asAgentTools } from './asAgentTools';
+export { gatedAgentTools } from './gatedAgentTools';
+export type { AuthProvider } from './auth';
+export { authProviderFor } from './auth';
+export { timedFetch, AUTH_REQUEST_TIMEOUT_MS } from './timedFetch';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClG,YAAY,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export { McpHttpClient } from './httpClient.js';
+export { readMcpServers, writeMcpServers, readMcpCredential, writeMcpCredential, readMcpClient, writeMcpClient, clearMcpClient, } from './config.js';
+export { McpRegistry, SERVER_CONNECT_TIMEOUT_MS, accountTokenFor } from './registry.js';
+export { mcpCallAllowed } from './policy.js';
+export { asAgentTools } from './asAgentTools.js';
+export { gatedAgentTools } from './gatedAgentTools.js';
+export { authProviderFor } from './auth.js';
+export { timedFetch, AUTH_REQUEST_TIMEOUT_MS } from './timedFetch.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EACL,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAErF,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC"}