@effected/mcp 0.11.0 → 0.13.0

package/ToolOutcome.js

@@ -1,119 +0,0 @@
-import { ToolFailure } from "./ToolFailure.js";
-import { ToolOutputSchema } from "./ToolOutputSchema.js";
-import { Effect, Schema } from "effect";
-
-// src/ToolOutcome.ts
-/**
-* The `ok: false` structured-outcome envelope: an expected error an agent
-* should branch on, returned on a tool's success channel so it reaches the
-* client as `structuredContent` instead of message text.
-*
-* @remarks
-* Two channels, two jobs, one error shape:
-*
-* - {@link ToolRefusal} is a declared failure: the call itself was wrong, and
-*   the agent reads one sentence (`isError: true`, message text only; core
-*   never sends a failure's `structuredContent`).
-* - `ToolOutcome` is an expected domain outcome: an id that does not exist, a
-*   transition that is not allowed. The agent branches on its `_tag` and
-*   fields (`isError: false`, `structuredContent` carries the envelope).
-*
-* Both carry {@link ToolFailure.fields} (`message`, `remediation`), so an error
-* can move between channels without reshaping.
-*
-* Success members are not reshaped. Spread {@link ToolOutcome.ok} into each
-* success struct so a client can discriminate on `ok`; a member that
-* discriminates another way (`found: true | false`) stays legal.
-*
-* @example
-* ```ts
-* import { ToolOutcome } from "@effected/mcp"
-* import { Effect, Schema } from "effect"
-* import { Tool } from "effect/ai"
-*
-* const NotFound = ToolOutcome.error("GoalNotFound", { id: Schema.Number })
-* const Lookup = Tool.make("goal", {
-* 	parameters: Schema.Struct({ id: Schema.Number }),
-* 	success: ToolOutcome.envelope(Schema.Struct({ ...ToolOutcome.ok, goal: Goal }), [NotFound]),
-* })
-* // in the handler:
-* findGoal(id).pipe(
-* 	Effect.map((goal) => ({ ok: true as const, goal })),
-* 	ToolOutcome.catchAsEnvelope({
-* 		GoalNotFound: (e) => ({ id: e.id, message: `No goal ${e.id}.`, remediation: { hint: "List goals first.", suggestedTool: "goal" } }),
-* 	}),
-* )
-* ```
-*
-* @public
-*/
-var ToolOutcome = class ToolOutcome {
-	constructor() {}
-	/** `{ ok: true }` as schema fields, to spread into each success member. */
-	static ok = { ok: Schema.Literal(true).annotate({ description: "true: the call succeeded." }) };
-	/**
-	* The schema of one envelope error: `_tag`, {@link ToolFailure.fields} and
-	* `fields`. A field named `_tag`, `message` or `remediation` is rejected by
-	* the type, because it would replace the shared one.
-	*/
-	static error = (tag, fields) => Schema.Struct({
-		_tag: Schema.Literal(tag).annotate({ description: "The error's tag: the value to branch on." }),
-		...ToolFailure.fields,
-		...fields
-	});
-	/**
-	* A tool's success schema: `success`, or `{ ok: false, error }` where `error`
-	* is one of `errors`. Object-rooted with {@link ToolOutputSchema.objectRooted},
-	* so core serves its `outputSchema` on every protocol revision.
-	*
-	* @remarks
-	* The failure member, its `ok` and its `error` carry default descriptions.
-	* `options` names the member (`identifier`, served once under `$defs`) or
-	* replaces its description.
-	*/
-	static envelope = (success, errors, options) => ToolOutputSchema.objectRooted(Schema.Union([success, Schema.Struct({
-		ok: Schema.Literal(false).annotate({ description: "false: the call hit an expected error, described in error." }),
-		error: Schema.Union(errors).annotate({ description: "The expected error. Branch on its _tag." })
-	}).annotate({
-		description: options?.description ?? "An expected error the caller should branch on, returned in place of a result.",
-		...options?.identifier === void 0 ? {} : { identifier: options.identifier }
-	})]));
-	/** One `ok: false` value, for a handler that decides on a failure without catching an error. */
-	static failure = (tag, error) => ({
-		ok: false,
-		error: {
-			...error,
-			_tag: tag
-		}
-	});
-	/**
-	* Turns each handled tagged error into its `ok: false` value on the success
-	* channel; every other error stays in the error channel. Typed like core's
-	* `Effect.catchTags`: a case for a tag the effect cannot fail with is a type
-	* error, and the handled tags leave `E`.
-	*
-	* @remarks
-	* Write it inline in the effect's `pipe`. `E` is inferred from the effect
-	* being piped, so `effect.pipe(ToolOutcome.catchAsEnvelope({ … }))` checks
-	* every case name against the effect's real tags. Bound to a `const` first,
-	* the combinator never sees that effect: `E` infers as `unknown`, the
-	* unknown-tag check switches off, and a misspelled tag compiles and never
-	* matches. Core's `catchTags` looks a case up only among `cases`' own keys,
-	* so an error tagged `"toString"` or `"constructor"` never hits an inherited
-	* `Object.prototype` member and stays in the error channel.
-	*/
-	static catchAsEnvelope = (cases) => (self) => {
-		const handlers = {};
-		for (const [tag, handle] of Object.entries(cases)) handlers[tag] = (error) => Effect.succeed(ToolOutcome.failure(tag, handle(error)));
-		return Effect.catchTags(self, handlers);
-	};
-	/**
-	* Whether `value` is an `ok: false` envelope member: an object whose `ok` is
-	* exactly `false`. A success member that discriminates some other way, or a
-	* non-object, is not a failure. Narrows to `{ ok: false }` only: it checks
-	* the discriminant, not the `error` payload.
-	*/
-	static isFailure = (value) => typeof value === "object" && value !== null && value.ok === false;
-};
-
-export { ToolOutcome };

package/ToolOutputSchema.js

@@ -1,65 +0,0 @@
-import { Schema, SchemaAST } from "effect";
-
-// src/ToolOutputSchema.ts
-const MARK = "~effected/mcp/objectRooted";
-/** Always passes; contributes `type: "object"` beside whatever the node already emits. */
-const objectRoot = Schema.makeFilter(() => true, {
-	[MARK]: true,
-	toJsonSchema: () => ({ type: "object" })
-});
-const isObjectRooted = (ast) => ast.checks?.some((check) => check.annotations?.[MARK] === true) === true;
-/**
-* Shaping for a tool's `success` schema, so the `outputSchema` core serves
-* is one every client accepts.
-*
-* @remarks
-* MCP requires a tool's `outputSchema` to be rooted in an object, and a
-* top-level `Schema.Union` emits a bare `anyOf`. Core drops such an
-* `outputSchema` from `tools/list` on the stateful revisions and serves it
-* verbatim on the stateless one, where strict clients reject it.
-* `McpToolAudit`'s `objectRootedOutput` check reports it either way.
-*
-* {@link ToolOutputSchema.objectRooted} is the fix when every member of the
-* union is an object shape; never apply it to a union with a primitive or
-* array member. It works on the Effect
-* schema, not on JSON Schema — unlike `ToolInputSchema.objectRooted`, which
-* rewrites the served input document of a `Tool.dynamic`.
-*
-* @public
-*/
-var ToolOutputSchema = class {
-	constructor() {}
-	/**
-	* `schema` with `type: "object"` added beside the `anyOf` at its JSON
-	* Schema root, through a check that always passes. Decoding, encoding and
-	* the schema's type are unchanged.
-	*
-	* @remarks
-	* Order against `.annotate({ identifier })` does not matter. A check added
-	* after an identifier starts a new node that would drop the definition
-	* name, so the identifier the schema already resolves is carried onto the
-	* new check, and the served documents are equal either way (key order
-	* can differ when the schema carries a title or description). Applying it
-	* twice is a no-op.
-	*
-	* Every union member must be an object shape: the added `type: "object"`
-	* is a claim about the whole union, and nothing checks it. Do not use it
-	* on a union with a primitive or array member — the served schema would
-	* contradict the values the tool returns; give such a tool an object
-	* envelope instead.
-	*
-	* @example
-	* ```ts
-	* const Result = ToolOutputSchema.objectRooted(Schema.Union([Found, Missing])).annotate({ identifier: "Result" })
-	* Tool.make("lookup", { parameters, success: Result })
-	* ```
-	*/
-	static objectRooted = (schema) => {
-		if (isObjectRooted(schema.ast)) return schema;
-		const identifier = SchemaAST.resolveIdentifier(schema.ast);
-		const checked = schema.check(objectRoot);
-		return identifier === void 0 ? checked : checked.annotate({ identifier });
-	};
-};
-
-export { ToolOutputSchema };

package/ToolRefusal.js

@@ -1,57 +0,0 @@
-import { ToolFailure } from "./ToolFailure.js";
-import { Schema } from "effect";
-
-// src/ToolRefusal.ts
-/**
-* A tool call refused for a reason the caller can fix: the kit's ready-made
-* declared failure, built on {@link ToolFailure.fields}.
-*
-* @remarks
-* Core scrubs every undeclared failure and every defect to one generic
-* internal-error sentence, so a refusal the agent must act on (an unknown id,
-* a missing argument, a precondition) reaches it only when the tool declares
-* it. Declare `ToolRefusal` in the tool's `failure` schema and fail with
-* {@link ToolRefusal.refuse}; its message already carries the remediation,
-* because a declared `Error` failure sends `message` and nothing else.
-*
-* Audit every throw path of a tool: any failure left undeclared loses its
-* message on the wire, however carefully it was worded.
-*
-* **Structured data on a refusal is deliberately unreachable: put it in the
-* message.** Core's `McpServer.registerToolkit` builds every failed call's
-* result with `structuredContent` unset and no `_meta`, on every protocol
-* revision. Under the default `failureMode: "error"` a declared `Error`
-* failure sends `message` as the only text; under `failureMode: "return"`
-* it sends the whole encoded failure JSON-stringified into the text, still
-* with no `structuredContent`, which buries the human message in JSON a
-* client must parse. So `refuse` takes no data argument: a list of valid
-* names, the root that was searched, the id that was not found all belong
-* in `reason`, truncated with {@link ToolFailure.truncate}. When an agent
-* must branch on the data itself, return it on the success channel as an
-* `ok: false` envelope, where `structuredContent` does reach the client.
-*
-* @example
-* ```ts
-* import { ToolFailure, ToolRefusal } from "@effected/mcp";
-* import { Tool } from "effect/ai";
-*
-* const Lookup = Tool.make("lookup", { parameters, success, failure: ToolRefusal })
-* // in the handler:
-* return yield* ToolRefusal.refuse(`No run "${ToolFailure.truncate(id)}".`, { hint: "List runs first.", suggestedTool: "list_runs" })
-* ```
-*
-* @public
-*/
-var ToolRefusal = class ToolRefusal extends Schema.TaggedError()("ToolRefusal", ToolFailure.fields) {
-	/**
-	* A refusal for `reason`, with `remediation` folded into its message by
-	* {@link ToolFailure.message}. `reason` must already truncate any
-	* caller-supplied value it echoes, with {@link ToolFailure.truncate}.
-	*/
-	static refuse = (reason, remediation) => new ToolRefusal({
-		message: ToolFailure.message(reason, remediation),
-		remediation
-	});
-};
-
-export { ToolRefusal };

package/ToolReplay.js

@@ -1,122 +0,0 @@
-import { ToolOutcome } from "./ToolOutcome.js";
-import { Effect, Option, Schema } from "effect";
-import { KeyValueStore } from "effect/persistence";
-
-// src/ToolReplay.ts
-/**
-* Idempotent replay for a write tool: a repeated call with the same key returns
-* the first call's stored result, marked `_idempotentReplay: true`, instead of
-* running the mutation again.
-*
-* @remarks
-* The store is core's `KeyValueStore` (`effect/persistence`), required in `R`
-* (`KeyValueStore.layerMemory`, `layerFileSystem` or `layerSql`), unless
-* {@link ToolReplayOptions.store} supplies a {@link ToolReplayStore}: just
-* `get` and `set`, for an application's own table. Then `R` carries no
-* `KeyValueStore`.
-*
-* Semantics, per call:
-*
-* - A key of `Option.none()` runs the handler; nothing is read or stored.
-* - A stored value that decodes through `success` is returned with the marker,
-*   and the handler does not run.
-* - A miss runs the handler and stores its result, best-effort. A store that
-*   fails, a row that no longer decodes (written under an older schema, or
-*   corrupt), and a failed write are each a miss or a skipped write, never a
-*   tool error. Each is logged at debug level with the tool name.
-* - A handler failure stores nothing, so a retry runs it again.
-* - An `ok: false` result (a {@link ToolOutcome} envelope failure) is never
-*   stored: a "not found" must not replay after the thing exists.
-*
-* This is replay, not exactly-once: two concurrent calls with one key both
-* miss and both run.
-*
-* The key is the whole identity of a request. A hit compares neither the
-* params nor the schema version (a row written under an older schema replays
-* whenever it still decodes), and rows never expire: the store keeps a result
-* until something removes it. A key reused with different params therefore
-* replays the first result, so {@link ToolReplayOptions.key} must fold in a
-* digest of any params that can vary under one id.
-*
-* Wrap it inside {@link ToolOutcome.catchAsEnvelope}, so the envelope sees the
-* handler's real errors and replay sees only real successes.
-*
-* @example
-* ```ts
-* import { ToolReplay } from "@effected/mcp"
-* import { Option, Schema } from "effect"
-*
-* const Created = ToolReplay.success(Schema.Struct({ ok: Schema.Literal(true), id: Schema.Number }))
-* const create = ToolReplay.wrap({
-* 	tool: "goal_create",
-* 	success: Created,
-* 	key: (params: { readonly requestId?: string }) => Option.fromUndefinedOr(params.requestId),
-* })(createGoal)
-* ```
-*
-* @public
-*/
-var ToolReplay = class ToolReplay {
-	constructor() {}
-	/**
-	* The marker field, to spread into each object member of a replayable
-	* success schema. {@link ToolReplay.success} adds it for you.
-	*/
-	static marker = { _idempotentReplay: Schema.optionalKey(Schema.Literal(true).annotate({ description: "Present and true when this result replays an earlier call with the same idempotency key: the stored result is returned and the mutation did not run again." })) };
-	/**
-	* A struct with {@link ToolReplay.marker} added. Use it for each object
-	* success member, so core's encoder keeps the marker on a replayed reply.
-	*
-	* @remarks
-	* Built with core's `fieldsAssign`, which, like `mapFields`, does not carry
-	* the struct's own `.check(...)` refinements over: apply checks to the
-	* result, not to the struct passed in.
-	*/
-	static success = (schema) => schema.pipe(Schema.fieldsAssign(ToolReplay.marker));
-	/**
-	* The `KeyValueStore` key one call is stored under: `<tool>:<key>`. Split on
-	* the first `:` to recover both parts; MCP tool names are `[A-Za-z0-9_.-]`.
-	*/
-	static storeKey = (tool, key) => `${tool}:${key}`;
-	/**
-	* Wraps a handler with replay. Throws at wrap time when `tool` contains
-	* `:`, a wiring mistake, so it surfaces when the server is built.
-	*/
-	static wrap = (options) => {
-		if (options.tool.includes(":")) throw new Error(`ToolReplay.wrap: tool name "${options.tool}" contains ":", the stored-key separator.`);
-		const { tool, success } = options;
-		const given = options.store;
-		const json = Schema.fromJsonString(Schema.toCodecJson(success));
-		const decode = Schema.decodeEffect(json);
-		const encode = Schema.encodeEffect(json);
-		return (handler) => (params) => {
-			const found = options.key(params);
-			if (Option.isNone(found)) return handler(params);
-			const storeKey = ToolReplay.storeKey(tool, found.value);
-			return Effect.gen(function* () {
-				const store = given ?? (yield* KeyValueStore.KeyValueStore);
-				const cached = yield* store.get(storeKey).pipe(Effect.flatMap((raw) => raw === void 0 ? Effect.succeedNone : Effect.asSome(decode(raw))), Effect.tapCause((cause) => Effect.logDebug("ToolReplay lookup failed; treating as a miss", {
-					tool,
-					cause
-				})), Effect.orElseSucceed(() => Option.none()));
-				if (Option.isSome(cached)) {
-					yield* Effect.annotateCurrentSpan("mcp.tool.replayed", true);
-					return withMarker(cached.value);
-				}
-				yield* Effect.annotateCurrentSpan("mcp.tool.replayed", false);
-				const result = yield* handler(params);
-				if (!ToolOutcome.isFailure(result)) yield* encode(result).pipe(Effect.flatMap((encoded) => store.set(storeKey, encoded)), Effect.tapCause((cause) => Effect.logDebug("ToolReplay store failed; result not stored", {
-					tool,
-					cause
-				})), Effect.ignore);
-				return result;
-			}).pipe(Effect.withSpan("ToolReplay.wrap", { attributes: { "mcp.tool.name": tool } }));
-		};
-	};
-};
-const withMarker = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? {
-	...value,
-	_idempotentReplay: true
-} : value;
-
-export { ToolReplay };

package/guard.d.ts

@@ -1,189 +0,0 @@
-import { Effect, Layer, Runtime } from "effect";
-/**
- * The slice of the host process the guard uses. Node's `process` satisfies it.
- *
- * @public
- */
-interface McpGuardHost {
-  /** Register the `uncaughtException` listener. */
-  on(event: "uncaughtException", listener: (error: Error, origin: string) => void): unknown;
-  /** Register the `unhandledRejection` listener. */
-  on(event: "unhandledRejection", listener: (reason: unknown) => void): unknown;
-  /** Raise an `uncaughtException` to the registered listeners. Used only by {@link McpGuardRunOptions.injectCrash}. */
-  emit(event: "uncaughtException", error: Error, origin: "uncaughtException" | "unhandledRejection"): unknown;
-  /** Raise an `unhandledRejection` to the registered listeners. Used only by {@link McpGuardRunOptions.injectCrash}. */
-  emit(event: "unhandledRejection", reason: unknown, promise: Promise<unknown>): unknown;
-  /** Where every guard report is written. Never stdout: that is the JSON-RPC wire. */
-  readonly stderr: {
-    write(chunk: string): unknown;
-  };
-  /** End the process at once. */
-  exit(code?: number): never;
-}
-/**
- * When a stray exception or rejection ends the process.
- *
- * @remarks
- * `"exit"` exits 1 whenever it happens. `"exitBeforeConnect"` exits 1 until
- * the server is serving, then logs and keeps serving: a server that dies
- * mid-session deregisters every tool from the client. `"log"` never exits.
- *
- * @public
- */
-interface McpGuardPolicy {
-  /** For `uncaughtException`. */
-  readonly onUncaught: "exit" | "exitBeforeConnect";
-  /** For `unhandledRejection`. Defaults to `"exit"`. */
-  readonly onRejection?: "exit" | "exitBeforeConnect" | "log" | undefined;
-}
-/**
- * What {@link McpGuardRunOptions.load} resolves to: the server and the
- * platform runner to launch it with.
- *
- * @public
- */
-interface McpGuardedServer<ROut, E> {
-  /** The whole server layer, stdio included, with nothing left to provide. */
-  readonly layer: Layer.Layer<ROut, E, never>;
-  /** The platform's `runMain`, such as `NodeRuntime.runMain` from `@effect/platform-node`. */
-  readonly runMain: (effect: Effect.Effect<never, Error>, options: {
-    readonly teardown: Runtime.Teardown;
-  }) => void;
-  /** Formats a reported error from here on; the guard's own dependency-free formatter until then. */
-  readonly format?: ((error: unknown) => string) | undefined;
-}
-/**
- * Options for {@link McpGuard.run}.
- *
- * @public
- */
-interface McpGuardRunOptions<ROut, E> {
-  /** Prefixes every report the guard writes, as in `my-server: uncaughtException (…): …`. */
-  readonly label: string;
-  /** The process: pass `process`. */
-  readonly host: McpGuardHost;
-  /** Defaults to `{ onUncaught: "exit", onRejection: "exit" }`. */
-  readonly policy?: McpGuardPolicy | undefined;
-  /**
-   * Import and assemble the server. Everything that can throw while loading
-   * belongs here, behind a dynamic `import()`, so the guards are already
-   * listening when it runs.
-   */
-  readonly load: () => Promise<McpGuardedServer<ROut, E>>;
-  /**
-   * For a test of the guards themselves: raise one stray `kind` at `at`, so
-   * both halves of a policy can be driven end to end in a real process.
-   *
-   * @remarks
-   * - `"load"` raises it once both listeners are installed and before
-   *   `load()` is called, then waits for the guard to handle it: `load()`
-   *   is not called until the listener has run. If a test double's `exit`
-   *   throws instead of ending the process, `run` rejects with what it
-   *   threw and never calls `load()`. The pre-connect half of
-   *   the policy applies, so `"exitBeforeConnect"` exits 1 here, and only
-   *   an `onRejection` of `"log"` lets the process go on to load and serve.
-   *   The report uses the guard's own formatter, since no `format` is
-   *   loaded yet.
-   * - `"connected"` raises it on a timer right after the server is
-   *   serving, where `"exitBeforeConnect"` logs and keeps serving. A throw
-   *   from a test double's `exit` there is dropped.
-   *
-   * **The `"connected"` report is asynchronous.** It is raised on a later
-   * tick, a `setTimeout(0)` after the server starts serving, so it can land
-   * after the first responses a test reads: reading stderr once, right
-   * after the `initialize` or `tools/list` response, can see an empty
-   * buffer. Wait for it with `McpProcess.stderrUntil` from
-   * `@effected/mcp/testing` rather than reading it once.
-   *
-   * Either is raised only through `host.emit`, on a `setTimeout(0)` tick,
-   * never as a real throw or rejection, so the guard's listeners handle it
-   * the same way under the real `process` and under a test double. Under
-   * `process`, every listener registered for the event sees it, not only
-   * the guard's. It carries an `[injected]` message; a rejection is emitted
-   * with an already-handled rejected promise. `undefined`, or
-   * an `at` or `kind` outside these values, does nothing at all. Wire it to
-   * an environment variable only a test sets.
-   */
-  readonly injectCrash?: InjectCrash | undefined;
-}
-/**
- * One test-only injected crash, as {@link McpGuard.parseInjectCrash} returns
- * it and {@link McpGuardRunOptions.injectCrash} takes it: which point of the
- * launch to raise it at, and which process event to raise. The same shape as
- * `ProcessGuardInjection` from `@effected/engine/guard`.
- *
- * @public
- */
-interface InjectCrash {
-  /** `"load"`: before the server module loads. `"connected"`: once the server is serving. */
-  readonly at: "load" | "connected";
-  /** The process event raised to the guard's listeners. */
-  readonly kind: "uncaughtException" | "unhandledRejection";
-}
-/**
- * Crash guards for an MCP server process, installed before the server's
- * module graph is loaded. Imported from `@effected/mcp/guard`.
- *
- * @remarks
- * {@link McpGuard.run} is `ProcessGuard.run` from `@effected/engine/guard`
- * with an MCP launch in its `load`: it registers `uncaughtException` and
- * `unhandledRejection` listeners on `host`, then awaits `load()`, then
- * launches the server with `McpStdio.launch` and `McpStdio.teardown` under
- * the `runMain` it returned. A server on another transport (an LSP over
- * `vscode-languageserver`, say) uses `ProcessGuard.run` directly and calls
- * its `markConnected` itself. This entrypoint statically imports only
- * `@effected/engine/guard`, which imports nothing: it loads `effect` and the
- * stdio wiring only after the guards are listening, so a throw while any of
- * it evaluates is still reported on stderr.
- *
- * - "Connected" means the whole server layer has built, so stdin is being
- *   read. That is before any client sends `initialize`.
- * - `injectCrash` drives either half of the policy from a test, before
- *   `load()` or once connected; unset, it does nothing.
- * - A `load()` that rejects is reported as `startup failed` and exits 1
- *   whatever the policy. Left to a log-only rejection listener, it would
- *   let the event loop drain and exit 0 with no server.
- * - Installing an `unhandledRejection` listener switches off Node's default
- *   of throwing on one, so `"log"` really does keep the process running.
- * - An exit from a guard skips Effect's finalizers and the teardown.
- * - Keeping on serving after a crash works because the platform `runMain`
- *   holds the process open while the server fiber lives.
- * - A layer that fails to build is still reported by `McpStdio.launch`.
- *
- * @example
- * ```ts
- * import { McpGuard } from "@effected/mcp/guard";
- *
- * await McpGuard.run({
- *   label: "my-server",
- *   host: process,
- *   policy: { onUncaught: "exitBeforeConnect", onRejection: "log" },
- *   load: async () => {
- *     const { NodeRuntime } = await import("@effect/platform-node");
- *     const { Main } = await import("./server.js");
- *     return { layer: Main, runMain: NodeRuntime.runMain };
- *   },
- * });
- * ```
- *
- * @public
- */
-export declare class McpGuard {
-  private constructor();
-  /**
-   * Parse a test-only crash-injection setting into {@link McpGuardRunOptions.injectCrash}: `<at>:<kind>`, where `at`
-   * is `"load"` or `"connected"` and `kind` is `"uncaughtException"` or `"unhandledRejection"`. Anything else, or no
-   * value, is `undefined`. The same grammar as `ProcessGuard.parseInjectCrash` from `@effected/engine/guard`, which
-   * this is, so an MCP launcher need not import the engine guard for it.
-   *
-   * @example
-   * ```ts
-   * McpGuard.parseInjectCrash("load:uncaughtException"); // => { at: "load", kind: "uncaughtException" }
-   * ```
-   */
-  static readonly parseInjectCrash: (value: string | undefined) => InjectCrash | undefined;
-  /** Install the guards, load the server, and launch it. Resolves once the server is launched. */
-  static readonly run: <ROut, E>(options: McpGuardRunOptions<ROut, E>) => Promise<void>;
-}
-export type { InjectCrash, McpGuardHost, McpGuardPolicy, McpGuardRunOptions, McpGuardedServer };
-//# sourceMappingURL=guard.d.ts.map

package/guard.js

@@ -1,3 +0,0 @@
-import { McpGuard } from "./McpGuard.js";
-
-export { McpGuard };

package/internal/LaunchFailed.js

@@ -1,34 +0,0 @@
-import { Runtime } from "effect";
-
-// src/internal/LaunchFailed.ts
-/**
-* The failure `McpStdio.launch` re-raises after reporting a launch failure on
-* stderr itself. `errorReported: false` keeps `runMain` from reporting it a
-* second time — through a logger that writes to stdout — and the original exit
-* code rides along for the teardown.
-*
-* @remarks
-* Both runtime markers are prototype getters rather than own fields, so a JSON
-* or logger dump of the error does not carry them; the code lives in a private
-* field.
-*
-* @internal
-*/
-var LaunchFailed = class extends Error {
-	#code;
-	constructor(code) {
-		super(`the MCP server failed to launch (exit ${code})`);
-		this.name = "LaunchFailed";
-		this.#code = code;
-	}
-	/** Already reported on stderr: `runMain` must not report it again. */
-	get [Runtime.errorReported]() {
-		return false;
-	}
-	/** The exit code the launch failed with. */
-	get [Runtime.errorExitCode]() {
-		return this.#code;
-	}
-};
-
-export { LaunchFailed };