@elie-laloum/outpost 7.0.0 → 9.0.0

package/dist/adapters/tools/mcp-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-connection.js","sourceRoot":"","sources":["../../../src/adapters/tools/mcp-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAO1D,MAAM,cAAc,GAA4C;IAC9D,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,KAA6B;IAE7B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,OAAgB,CAAC;IACrB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,OAAgC,EAAE,EAAE,CAChD,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,MAAc,EAAE,EAAE,CAC7C,IAAI,CACF,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC;QACnC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,CAAE,EAAE,EAAE;QAC3C,CAAC,CAAC;YACE,EAAE;YACF,KAAK,EAAE;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,4BAA4B,MAAM,EAAE;aAC9C;SACF,CACN,CAAC;IACJ,OAAO;QACL,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM;YAC5B,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;YAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,MAAM,GAAG,GAAG,EAAE;oBAClB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnB,IAAI,OAAO,KAAK,SAAS;wBACvB,IAAI,CAAC;4BACH,MAAM,EAAE,yBAAyB;4BACjC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;yBAC1D,CAAC,CAAC;oBACL,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACzB,CAAC,CAAC;gBACF,MAAM,MAAM,GACV,CAAI,IAAwB,EAAE,EAAE,CAChC,CAAC,KAAQ,EAAE,EAAE;oBACX,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC7C,IAAI,CAAC,KAAK,CAAC,CAAC;gBACd,CAAC,CAAC;gBACJ,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,MAAM;YACnB,IAAI,OAAO,KAAK,SAAS;gBACvB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,IAAI;YACV,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvC,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI;oBACjD,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GACT,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAY,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;;gBAC1D,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,KAAK;YACR,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO;YAClC,OAAO,GAAG,KAAK,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1D,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAE,KAAiC;YACpC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAc;IAC9C,MAAM,KAAK,GAAG,CACZ,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAChC,CAAC;IAC3B,OAAO,IAAI,YAAY,CACrB,UAAU,EACV,cAAc,MAAM,mBAAmB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EACrF,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAChC,CAAC;AACJ,CAAC","sourcesContent":["import { OutpostError } from \"../../domain/errors.ts\";\nimport { MCP_METHOD_NOT_FOUND } from \"./mcp.constants.ts\";\nimport type {\n  JsonRpcError,\n  McpConnection,\n  PendingRequest,\n} from \"./mcp.types.ts\";\n\nconst serverRequests: Readonly<Record<string, () => unknown>> = {\n  ping: () => ({}),\n};\n\nexport function mcpConnection(\n  server: string,\n  write: (line: string) => void,\n): McpConnection {\n  let next = 1;\n  let failure: unknown;\n  const pending = new Map<number, PendingRequest>();\n  const send = (message: Record<string, unknown>) =>\n    write(`${JSON.stringify({ jsonrpc: \"2.0\", ...message })}\\n`);\n  const answer = (id: unknown, method: string) =>\n    send(\n      Object.hasOwn(serverRequests, method)\n        ? { id, result: serverRequests[method]!() }\n        : {\n            id,\n            error: {\n              code: MCP_METHOD_NOT_FOUND,\n              message: `Outpost does not support ${method}`,\n            },\n          },\n    );\n  return {\n    request(method, params, signal) {\n      if (failure !== undefined) return Promise.reject(failure);\n      if (signal?.aborted) return Promise.reject(signal.reason);\n      const id = next++;\n      return new Promise((resolve, reject) => {\n        const cancel = () => {\n          pending.delete(id);\n          if (failure === undefined)\n            send({\n              method: \"notifications/cancelled\",\n              params: { requestId: id, reason: String(signal?.reason) },\n            });\n          reject(signal?.reason);\n        };\n        const settle =\n          <T>(done: (value: T) => void) =>\n          (value: T) => {\n            signal?.removeEventListener(\"abort\", cancel);\n            done(value);\n          };\n        pending.set(id, { resolve: settle(resolve), reject: settle(reject) });\n        signal?.addEventListener(\"abort\", cancel, { once: true });\n        send({ id, method, ...(params === undefined ? {} : { params }) });\n      });\n    },\n    notify(method, params) {\n      if (failure === undefined)\n        send({ method, ...(params === undefined ? {} : { params }) });\n    },\n    receive(line) {\n      const message = parse(line);\n      if (!message) return;\n      if (typeof message.method === \"string\") {\n        if (message.id !== undefined && message.id !== null)\n          answer(message.id, message.method);\n        return;\n      }\n      const entry =\n        typeof message.id === \"number\" ? pending.get(message.id) : undefined;\n      if (!entry) return;\n      pending.delete(message.id as number);\n      if (message.error === undefined) entry.resolve(message.result);\n      else entry.reject(rpcError(server, message.error));\n    },\n    fail(error) {\n      if (failure !== undefined) return;\n      failure = error;\n      for (const entry of pending.values()) entry.reject(error);\n      pending.clear();\n    },\n  };\n}\n\nfunction parse(line: string): Record<string, unknown> | undefined {\n  try {\n    const value: unknown = JSON.parse(line);\n    return value !== null && typeof value === \"object\" && !Array.isArray(value)\n      ? (value as Record<string, unknown>)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction rpcError(server: string, value: unknown): OutpostError {\n  const error = (\n    value !== null && typeof value === \"object\" ? value : {}\n  ) as Partial<JsonRpcError>;\n  return new OutpostError(\n    \"response\",\n    `MCP server ${server} returned error ${String(error.code)}: ${String(error.message)}`,\n    { server, rpcCode: error.code },\n  );\n}\n"]}

package/dist/adapters/tools/mcp-content.d.ts

@@ -0,0 +1,4 @@
+import type { McpContentBlock } from "./mcp.types.ts";
+export declare function renderContentBlock(value: unknown): string;
+export declare function renderResourceContents(contents: McpContentBlock): string;
+export declare function mcpRecord(value: unknown): Record<string, unknown> | undefined;

package/dist/adapters/tools/mcp-content.js

@@ -0,0 +1,24 @@
+const blockRenderers = {
+    text: (block) => String(block.text ?? ""),
+    image: (block) => `[image omitted: ${String(block.mimeType)}]`,
+    audio: (block) => `[audio omitted: ${String(block.mimeType)}]`,
+    resource_link: (block) => `[resource ${String(block.uri)}]`,
+    resource: (block) => renderResourceContents(mcpRecord(block.resource) ?? {}),
+};
+export function renderContentBlock(value) {
+    const block = mcpRecord(value) ?? {};
+    const render = blockRenderers[String(block.type)];
+    return render ? render(block) : JSON.stringify(value);
+}
+export function renderResourceContents(contents) {
+    if (typeof contents.text === "string")
+        return contents.text;
+    const type = contents.mimeType === undefined ? "" : ` ${String(contents.mimeType)}`;
+    return `[resource ${String(contents.uri)}${type}]`;
+}
+export function mcpRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=mcp-content.js.map

package/dist/adapters/tools/mcp-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-content.js","sourceRoot":"","sources":["../../../src/adapters/tools/mcp-content.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAEhB;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IACzC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG;IAC9D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG;IAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;IAC3D,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;CAC7E,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAC5D,MAAM,IAAI,GACR,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzE,OAAO,aAAa,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC","sourcesContent":["import type { McpContentBlock } from \"./mcp.types.ts\";\n\nconst blockRenderers: Readonly<\n  Record<string, (block: McpContentBlock) => string>\n> = {\n  text: (block) => String(block.text ?? \"\"),\n  image: (block) => `[image omitted: ${String(block.mimeType)}]`,\n  audio: (block) => `[audio omitted: ${String(block.mimeType)}]`,\n  resource_link: (block) => `[resource ${String(block.uri)}]`,\n  resource: (block) => renderResourceContents(mcpRecord(block.resource) ?? {}),\n};\n\nexport function renderContentBlock(value: unknown): string {\n  const block = mcpRecord(value) ?? {};\n  const render = blockRenderers[String(block.type)];\n  return render ? render(block) : JSON.stringify(value);\n}\n\nexport function renderResourceContents(contents: McpContentBlock): string {\n  if (typeof contents.text === \"string\") return contents.text;\n  const type =\n    contents.mimeType === undefined ? \"\" : ` ${String(contents.mimeType)}`;\n  return `[resource ${String(contents.uri)}${type}]`;\n}\n\nexport function mcpRecord(value: unknown): Record<string, unknown> | undefined {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n"]}

package/dist/adapters/tools/mcp-launcher.constants.d.ts

@@ -0,0 +1 @@
+export declare const mcpLauncher = "\nconst { spawn } = require(\"node:child_process\");\nconst { createInterface } = require(\"node:readline\");\nconst config = JSON.parse(process.argv[1]);\nfor (const name of config.variables) {\n  if (!process.env[name]) {\n    process.stderr.write(\"Missing \" + name + \" for MCP server \" + config.server + \". Declare it in .outpost/.env or the sandbox provider variables.\\n\");\n    process.exit(78);\n  }\n}\nif (config.url) bridge();\nelse serve();\n\nfunction serve() {\n  const child = spawn(config.command, config.arguments, { stdio: \"inherit\" });\n  child.on(\"error\", (error) => {\n    process.stderr.write(error.message + \"\\n\");\n    process.exit(127);\n  });\n  child.on(\"exit\", (code) => process.exit(code ?? 1));\n  for (const signal of [\"SIGTERM\", \"SIGINT\", \"SIGHUP\"])\n    process.on(signal, () => child.kill(signal));\n}\n\nfunction bridge() {\n  const authorization = authorizer();\n  let session;\n  let version;\n  let ordered = Promise.resolve();\n  const pending = new Set();\n  const write = (message) => process.stdout.write(JSON.stringify(message) + \"\\n\");\n  const deliver = (message) => {\n    if (typeof message?.result?.protocolVersion === \"string\") version = message.result.protocolVersion;\n    write(message);\n  };\n  const fail = (message, text) => {\n    if (message.id === undefined) process.stderr.write(text + \"\\n\");\n    else write({ jsonrpc: \"2.0\", id: message.id, error: { code: -32000, message: text } });\n  };\n  const headers = () => ({\n    ...config.headers,\n    ...(session ? { \"mcp-session-id\": session } : {}),\n    ...(version ? { \"mcp-protocol-version\": version } : {}),\n  });\n  async function events(body) {\n    const decoder = new TextDecoder();\n    let buffer = \"\";\n    const flush = (block) => {\n      const data = block.split(/\\r?\\n/).filter((line) => line.startsWith(\"data:\")).map((line) => line.slice(5).replace(/^ /, \"\")).join(\"\\n\");\n      if (data) deliver(JSON.parse(data));\n    };\n    for await (const chunk of body) {\n      buffer += decoder.decode(chunk, { stream: true });\n      let end;\n      while ((end = buffer.search(/\\r?\\n\\r?\\n/)) >= 0) {\n        flush(buffer.slice(0, end));\n        buffer = buffer.slice(end).replace(/^\\r?\\n\\r?\\n/, \"\");\n      }\n    }\n    flush(buffer + decoder.decode());\n  }\n  async function post(line) {\n    let message;\n    try {\n      message = JSON.parse(line);\n    } catch {\n      return;\n    }\n    try {\n      const send = async () =>\n        fetch(config.url, {\n          method: \"POST\",\n          headers: { ...(await authorization.headers()), ...headers(), \"content-type\": \"application/json\", accept: \"application/json, text/event-stream\" },\n          body: line,\n        });\n      let response = await send();\n      if (await authorization.retry(response)) {\n        await response.arrayBuffer();\n        response = await send();\n      }\n      session = response.headers.get(\"mcp-session-id\") ?? session;\n      if (!response.ok) {\n        fail(message, \"HTTP \" + response.status + \": \" + (await response.text()).slice(0, 500));\n        return;\n      }\n      const type = response.headers.get(\"content-type\") ?? \"\";\n      if (type.includes(\"text/event-stream\")) await events(response.body);\n      else if (type.includes(\"application/json\")) [].concat(await response.json()).forEach(deliver);\n      else await response.arrayBuffer();\n    } catch (error) {\n      fail(message, \"MCP HTTP request failed: \" + error.message);\n    }\n  }\n  const isRequest = (line) => {\n    try {\n      return JSON.parse(line).id !== undefined;\n    } catch {\n      return false;\n    }\n  };\n  const track = (operation) => {\n    pending.add(operation);\n    operation.finally(() => pending.delete(operation));\n  };\n  const input = createInterface({ input: process.stdin });\n  input.on(\"line\", (line) => {\n    // Notifications keep their order; requests may overlap once earlier notifications are sent.\n    if (isRequest(line)) track(ordered.then(() => post(line)));\n    else track((ordered = ordered.then(() => post(line))));\n  });\n  input.on(\"close\", async () => {\n    await Promise.allSettled([...pending]);\n    if (session)\n      await authorization\n        .headers()\n        .then((credentials) => fetch(config.url, { method: \"DELETE\", headers: { ...credentials, ...headers() } }))\n        .catch(() => undefined);\n    process.exit(0);\n  });\n}\n\nfunction authorizer() {\n  const bearer = config.bearerTokenVariable ? process.env[config.bearerTokenVariable] : undefined;\n  const auth = config.oauth;\n  if (!auth)\n    return {\n      headers: async () => (bearer ? { authorization: \"Bearer \" + bearer } : {}),\n      retry: async () => false,\n    };\n  const id = process.env[auth.clientIdVariable];\n  const secret = process.env[auth.clientSecretVariable];\n  const target = new URL(config.url);\n  target.hash = \"\";\n  const resource = target.toString();\n  let token;\n  let expiresAt = 0;\n  let pending;\n  let endpoint;\n  let methods;\n  let challengeScope;\n  const read = async (url) => {\n    const response = await fetch(url, { headers: { accept: \"application/json\" } });\n    if (!response.ok) throw new Error(\"HTTP \" + response.status + \" from \" + url);\n    return response.json();\n  };\n  const first = async (urls) => {\n    for (const url of urls) {\n      try {\n        return await read(url);\n      } catch {}\n    }\n    throw new Error(\"OAuth metadata was not found at \" + urls.join(\", \"));\n  };\n  const wellKnown = (base, names) => {\n    const url = new URL(base);\n    const path = url.pathname.replace(/\\/$/, \"\");\n    return names.flatMap((name) => (path ? [url.origin + \"/.well-known/\" + name + path] : [])).concat(\n      path ? [url.origin + path + \"/.well-known/openid-configuration\"] : names.map((name) => url.origin + \"/.well-known/\" + name),\n    );\n  };\n  async function discover(challenge) {\n    const metadata = /resource_metadata=\"([^\"]+)\"/.exec(challenge ?? \"\")?.[1];\n    challengeScope = /scope=\"([^\"]+)\"/.exec(challenge ?? \"\")?.[1] ?? challengeScope;\n    const protectedResource = await first(\n      metadata ? [metadata] : wellKnown(config.url, [\"oauth-protected-resource\"]).filter((url) => !url.endsWith(\"openid-configuration\")).concat(new URL(config.url).origin + \"/.well-known/oauth-protected-resource\"),\n    );\n    const issuer = protectedResource.authorization_servers?.[0];\n    if (typeof issuer !== \"string\") throw new Error(\"Protected resource metadata names no authorization server\");\n    const server = await first(wellKnown(issuer, [\"oauth-authorization-server\", \"openid-configuration\"]));\n    if (typeof server.token_endpoint !== \"string\") throw new Error(\"Authorization server metadata has no token_endpoint\");\n    endpoint = server.token_endpoint;\n    methods = server.token_endpoint_auth_methods_supported ?? [\"client_secret_basic\"];\n  }\n  async function request(challenge) {\n    if (!endpoint || challenge) await discover(challenge);\n    const scope = auth.scopes?.join(\" \") ?? challengeScope;\n    const body = new URLSearchParams({ grant_type: \"client_credentials\", resource, ...(scope ? { scope } : {}) });\n    const headers = { \"content-type\": \"application/x-www-form-urlencoded\", accept: \"application/json\" };\n    if (methods.includes(\"client_secret_basic\"))\n      headers.authorization = \"Basic \" + Buffer.from(encodeURIComponent(id) + \":\" + encodeURIComponent(secret)).toString(\"base64\");\n    else if (methods.includes(\"client_secret_post\")) {\n      body.set(\"client_id\", id);\n      body.set(\"client_secret\", secret);\n    } else throw new Error(\"The authorization server supports neither client_secret_basic nor client_secret_post\");\n    const response = await fetch(endpoint, { method: \"POST\", headers, body });\n    const text = await response.text();\n    if (!response.ok) throw new Error(\"OAuth token request failed with HTTP \" + response.status + \": \" + text.slice(0, 300));\n    const result = JSON.parse(text);\n    if (typeof result.access_token !== \"string\") throw new Error(\"OAuth token response has no access_token\");\n    const lifetime = Number(result.expires_in);\n    token = result.access_token;\n    expiresAt = Number.isFinite(lifetime) && lifetime > 0 ? Date.now() + lifetime * 1000 - Math.min(30000, lifetime * 500) : Infinity;\n  }\n  const refresh = (challenge) => (pending ??= request(challenge).finally(() => { pending = undefined; }));\n  return {\n    async headers() {\n      if (!token || Date.now() >= expiresAt) await refresh();\n      return { authorization: \"Bearer \" + token };\n    },\n    async retry(response) {\n      if (response.status !== 401) return false;\n      token = undefined;\n      await refresh(response.headers.get(\"www-authenticate\") ?? undefined);\n      return true;\n    },\n  };\n}\n";

package/dist/adapters/tools/mcp-launcher.constants.js

@@ -0,0 +1,210 @@
+// Runs inside the sandbox: checks declared variables, then serves stdio or bridges HTTP.
+export const mcpLauncher = `
+const { spawn } = require("node:child_process");
+const { createInterface } = require("node:readline");
+const config = JSON.parse(process.argv[1]);
+for (const name of config.variables) {
+  if (!process.env[name]) {
+    process.stderr.write("Missing " + name + " for MCP server " + config.server + ". Declare it in .outpost/.env or the sandbox provider variables.\\n");
+    process.exit(78);
+  }
+}
+if (config.url) bridge();
+else serve();
+
+function serve() {
+  const child = spawn(config.command, config.arguments, { stdio: "inherit" });
+  child.on("error", (error) => {
+    process.stderr.write(error.message + "\\n");
+    process.exit(127);
+  });
+  child.on("exit", (code) => process.exit(code ?? 1));
+  for (const signal of ["SIGTERM", "SIGINT", "SIGHUP"])
+    process.on(signal, () => child.kill(signal));
+}
+
+function bridge() {
+  const authorization = authorizer();
+  let session;
+  let version;
+  let ordered = Promise.resolve();
+  const pending = new Set();
+  const write = (message) => process.stdout.write(JSON.stringify(message) + "\\n");
+  const deliver = (message) => {
+    if (typeof message?.result?.protocolVersion === "string") version = message.result.protocolVersion;
+    write(message);
+  };
+  const fail = (message, text) => {
+    if (message.id === undefined) process.stderr.write(text + "\\n");
+    else write({ jsonrpc: "2.0", id: message.id, error: { code: -32000, message: text } });
+  };
+  const headers = () => ({
+    ...config.headers,
+    ...(session ? { "mcp-session-id": session } : {}),
+    ...(version ? { "mcp-protocol-version": version } : {}),
+  });
+  async function events(body) {
+    const decoder = new TextDecoder();
+    let buffer = "";
+    const flush = (block) => {
+      const data = block.split(/\\r?\\n/).filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\\n");
+      if (data) deliver(JSON.parse(data));
+    };
+    for await (const chunk of body) {
+      buffer += decoder.decode(chunk, { stream: true });
+      let end;
+      while ((end = buffer.search(/\\r?\\n\\r?\\n/)) >= 0) {
+        flush(buffer.slice(0, end));
+        buffer = buffer.slice(end).replace(/^\\r?\\n\\r?\\n/, "");
+      }
+    }
+    flush(buffer + decoder.decode());
+  }
+  async function post(line) {
+    let message;
+    try {
+      message = JSON.parse(line);
+    } catch {
+      return;
+    }
+    try {
+      const send = async () =>
+        fetch(config.url, {
+          method: "POST",
+          headers: { ...(await authorization.headers()), ...headers(), "content-type": "application/json", accept: "application/json, text/event-stream" },
+          body: line,
+        });
+      let response = await send();
+      if (await authorization.retry(response)) {
+        await response.arrayBuffer();
+        response = await send();
+      }
+      session = response.headers.get("mcp-session-id") ?? session;
+      if (!response.ok) {
+        fail(message, "HTTP " + response.status + ": " + (await response.text()).slice(0, 500));
+        return;
+      }
+      const type = response.headers.get("content-type") ?? "";
+      if (type.includes("text/event-stream")) await events(response.body);
+      else if (type.includes("application/json")) [].concat(await response.json()).forEach(deliver);
+      else await response.arrayBuffer();
+    } catch (error) {
+      fail(message, "MCP HTTP request failed: " + error.message);
+    }
+  }
+  const isRequest = (line) => {
+    try {
+      return JSON.parse(line).id !== undefined;
+    } catch {
+      return false;
+    }
+  };
+  const track = (operation) => {
+    pending.add(operation);
+    operation.finally(() => pending.delete(operation));
+  };
+  const input = createInterface({ input: process.stdin });
+  input.on("line", (line) => {
+    // Notifications keep their order; requests may overlap once earlier notifications are sent.
+    if (isRequest(line)) track(ordered.then(() => post(line)));
+    else track((ordered = ordered.then(() => post(line))));
+  });
+  input.on("close", async () => {
+    await Promise.allSettled([...pending]);
+    if (session)
+      await authorization
+        .headers()
+        .then((credentials) => fetch(config.url, { method: "DELETE", headers: { ...credentials, ...headers() } }))
+        .catch(() => undefined);
+    process.exit(0);
+  });
+}
+
+function authorizer() {
+  const bearer = config.bearerTokenVariable ? process.env[config.bearerTokenVariable] : undefined;
+  const auth = config.oauth;
+  if (!auth)
+    return {
+      headers: async () => (bearer ? { authorization: "Bearer " + bearer } : {}),
+      retry: async () => false,
+    };
+  const id = process.env[auth.clientIdVariable];
+  const secret = process.env[auth.clientSecretVariable];
+  const target = new URL(config.url);
+  target.hash = "";
+  const resource = target.toString();
+  let token;
+  let expiresAt = 0;
+  let pending;
+  let endpoint;
+  let methods;
+  let challengeScope;
+  const read = async (url) => {
+    const response = await fetch(url, { headers: { accept: "application/json" } });
+    if (!response.ok) throw new Error("HTTP " + response.status + " from " + url);
+    return response.json();
+  };
+  const first = async (urls) => {
+    for (const url of urls) {
+      try {
+        return await read(url);
+      } catch {}
+    }
+    throw new Error("OAuth metadata was not found at " + urls.join(", "));
+  };
+  const wellKnown = (base, names) => {
+    const url = new URL(base);
+    const path = url.pathname.replace(/\\/$/, "");
+    return names.flatMap((name) => (path ? [url.origin + "/.well-known/" + name + path] : [])).concat(
+      path ? [url.origin + path + "/.well-known/openid-configuration"] : names.map((name) => url.origin + "/.well-known/" + name),
+    );
+  };
+  async function discover(challenge) {
+    const metadata = /resource_metadata="([^"]+)"/.exec(challenge ?? "")?.[1];
+    challengeScope = /scope="([^"]+)"/.exec(challenge ?? "")?.[1] ?? challengeScope;
+    const protectedResource = await first(
+      metadata ? [metadata] : wellKnown(config.url, ["oauth-protected-resource"]).filter((url) => !url.endsWith("openid-configuration")).concat(new URL(config.url).origin + "/.well-known/oauth-protected-resource"),
+    );
+    const issuer = protectedResource.authorization_servers?.[0];
+    if (typeof issuer !== "string") throw new Error("Protected resource metadata names no authorization server");
+    const server = await first(wellKnown(issuer, ["oauth-authorization-server", "openid-configuration"]));
+    if (typeof server.token_endpoint !== "string") throw new Error("Authorization server metadata has no token_endpoint");
+    endpoint = server.token_endpoint;
+    methods = server.token_endpoint_auth_methods_supported ?? ["client_secret_basic"];
+  }
+  async function request(challenge) {
+    if (!endpoint || challenge) await discover(challenge);
+    const scope = auth.scopes?.join(" ") ?? challengeScope;
+    const body = new URLSearchParams({ grant_type: "client_credentials", resource, ...(scope ? { scope } : {}) });
+    const headers = { "content-type": "application/x-www-form-urlencoded", accept: "application/json" };
+    if (methods.includes("client_secret_basic"))
+      headers.authorization = "Basic " + Buffer.from(encodeURIComponent(id) + ":" + encodeURIComponent(secret)).toString("base64");
+    else if (methods.includes("client_secret_post")) {
+      body.set("client_id", id);
+      body.set("client_secret", secret);
+    } else throw new Error("The authorization server supports neither client_secret_basic nor client_secret_post");
+    const response = await fetch(endpoint, { method: "POST", headers, body });
+    const text = await response.text();
+    if (!response.ok) throw new Error("OAuth token request failed with HTTP " + response.status + ": " + text.slice(0, 300));
+    const result = JSON.parse(text);
+    if (typeof result.access_token !== "string") throw new Error("OAuth token response has no access_token");
+    const lifetime = Number(result.expires_in);
+    token = result.access_token;
+    expiresAt = Number.isFinite(lifetime) && lifetime > 0 ? Date.now() + lifetime * 1000 - Math.min(30000, lifetime * 500) : Infinity;
+  }
+  const refresh = (challenge) => (pending ??= request(challenge).finally(() => { pending = undefined; }));
+  return {
+    async headers() {
+      if (!token || Date.now() >= expiresAt) await refresh();
+      return { authorization: "Bearer " + token };
+    },
+    async retry(response) {
+      if (response.status !== 401) return false;
+      token = undefined;
+      await refresh(response.headers.get("www-authenticate") ?? undefined);
+      return true;
+    },
+  };
+}
+`;
+//# sourceMappingURL=mcp-launcher.constants.js.map

package/dist/adapters/tools/mcp-launcher.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-launcher.constants.js","sourceRoot":"","sources":["../../../src/adapters/tools/mcp-launcher.constants.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+M1B,CAAC","sourcesContent":["// Runs inside the sandbox: checks declared variables, then serves stdio or bridges HTTP.\nexport const mcpLauncher = `\nconst { spawn } = require(\"node:child_process\");\nconst { createInterface } = require(\"node:readline\");\nconst config = JSON.parse(process.argv[1]);\nfor (const name of config.variables) {\n  if (!process.env[name]) {\n    process.stderr.write(\"Missing \" + name + \" for MCP server \" + config.server + \". Declare it in .outpost/.env or the sandbox provider variables.\\\\n\");\n    process.exit(78);\n  }\n}\nif (config.url) bridge();\nelse serve();\n\nfunction serve() {\n  const child = spawn(config.command, config.arguments, { stdio: \"inherit\" });\n  child.on(\"error\", (error) => {\n    process.stderr.write(error.message + \"\\\\n\");\n    process.exit(127);\n  });\n  child.on(\"exit\", (code) => process.exit(code ?? 1));\n  for (const signal of [\"SIGTERM\", \"SIGINT\", \"SIGHUP\"])\n    process.on(signal, () => child.kill(signal));\n}\n\nfunction bridge() {\n  const authorization = authorizer();\n  let session;\n  let version;\n  let ordered = Promise.resolve();\n  const pending = new Set();\n  const write = (message) => process.stdout.write(JSON.stringify(message) + \"\\\\n\");\n  const deliver = (message) => {\n    if (typeof message?.result?.protocolVersion === \"string\") version = message.result.protocolVersion;\n    write(message);\n  };\n  const fail = (message, text) => {\n    if (message.id === undefined) process.stderr.write(text + \"\\\\n\");\n    else write({ jsonrpc: \"2.0\", id: message.id, error: { code: -32000, message: text } });\n  };\n  const headers = () => ({\n    ...config.headers,\n    ...(session ? { \"mcp-session-id\": session } : {}),\n    ...(version ? { \"mcp-protocol-version\": version } : {}),\n  });\n  async function events(body) {\n    const decoder = new TextDecoder();\n    let buffer = \"\";\n    const flush = (block) => {\n      const data = block.split(/\\\\r?\\\\n/).filter((line) => line.startsWith(\"data:\")).map((line) => line.slice(5).replace(/^ /, \"\")).join(\"\\\\n\");\n      if (data) deliver(JSON.parse(data));\n    };\n    for await (const chunk of body) {\n      buffer += decoder.decode(chunk, { stream: true });\n      let end;\n      while ((end = buffer.search(/\\\\r?\\\\n\\\\r?\\\\n/)) >= 0) {\n        flush(buffer.slice(0, end));\n        buffer = buffer.slice(end).replace(/^\\\\r?\\\\n\\\\r?\\\\n/, \"\");\n      }\n    }\n    flush(buffer + decoder.decode());\n  }\n  async function post(line) {\n    let message;\n    try {\n      message = JSON.parse(line);\n    } catch {\n      return;\n    }\n    try {\n      const send = async () =>\n        fetch(config.url, {\n          method: \"POST\",\n          headers: { ...(await authorization.headers()), ...headers(), \"content-type\": \"application/json\", accept: \"application/json, text/event-stream\" },\n          body: line,\n        });\n      let response = await send();\n      if (await authorization.retry(response)) {\n        await response.arrayBuffer();\n        response = await send();\n      }\n      session = response.headers.get(\"mcp-session-id\") ?? session;\n      if (!response.ok) {\n        fail(message, \"HTTP \" + response.status + \": \" + (await response.text()).slice(0, 500));\n        return;\n      }\n      const type = response.headers.get(\"content-type\") ?? \"\";\n      if (type.includes(\"text/event-stream\")) await events(response.body);\n      else if (type.includes(\"application/json\")) [].concat(await response.json()).forEach(deliver);\n      else await response.arrayBuffer();\n    } catch (error) {\n      fail(message, \"MCP HTTP request failed: \" + error.message);\n    }\n  }\n  const isRequest = (line) => {\n    try {\n      return JSON.parse(line).id !== undefined;\n    } catch {\n      return false;\n    }\n  };\n  const track = (operation) => {\n    pending.add(operation);\n    operation.finally(() => pending.delete(operation));\n  };\n  const input = createInterface({ input: process.stdin });\n  input.on(\"line\", (line) => {\n    // Notifications keep their order; requests may overlap once earlier notifications are sent.\n    if (isRequest(line)) track(ordered.then(() => post(line)));\n    else track((ordered = ordered.then(() => post(line))));\n  });\n  input.on(\"close\", async () => {\n    await Promise.allSettled([...pending]);\n    if (session)\n      await authorization\n        .headers()\n        .then((credentials) => fetch(config.url, { method: \"DELETE\", headers: { ...credentials, ...headers() } }))\n        .catch(() => undefined);\n    process.exit(0);\n  });\n}\n\nfunction authorizer() {\n  const bearer = config.bearerTokenVariable ? process.env[config.bearerTokenVariable] : undefined;\n  const auth = config.oauth;\n  if (!auth)\n    return {\n      headers: async () => (bearer ? { authorization: \"Bearer \" + bearer } : {}),\n      retry: async () => false,\n    };\n  const id = process.env[auth.clientIdVariable];\n  const secret = process.env[auth.clientSecretVariable];\n  const target = new URL(config.url);\n  target.hash = \"\";\n  const resource = target.toString();\n  let token;\n  let expiresAt = 0;\n  let pending;\n  let endpoint;\n  let methods;\n  let challengeScope;\n  const read = async (url) => {\n    const response = await fetch(url, { headers: { accept: \"application/json\" } });\n    if (!response.ok) throw new Error(\"HTTP \" + response.status + \" from \" + url);\n    return response.json();\n  };\n  const first = async (urls) => {\n    for (const url of urls) {\n      try {\n        return await read(url);\n      } catch {}\n    }\n    throw new Error(\"OAuth metadata was not found at \" + urls.join(\", \"));\n  };\n  const wellKnown = (base, names) => {\n    const url = new URL(base);\n    const path = url.pathname.replace(/\\\\/$/, \"\");\n    return names.flatMap((name) => (path ? [url.origin + \"/.well-known/\" + name + path] : [])).concat(\n      path ? [url.origin + path + \"/.well-known/openid-configuration\"] : names.map((name) => url.origin + \"/.well-known/\" + name),\n    );\n  };\n  async function discover(challenge) {\n    const metadata = /resource_metadata=\"([^\"]+)\"/.exec(challenge ?? \"\")?.[1];\n    challengeScope = /scope=\"([^\"]+)\"/.exec(challenge ?? \"\")?.[1] ?? challengeScope;\n    const protectedResource = await first(\n      metadata ? [metadata] : wellKnown(config.url, [\"oauth-protected-resource\"]).filter((url) => !url.endsWith(\"openid-configuration\")).concat(new URL(config.url).origin + \"/.well-known/oauth-protected-resource\"),\n    );\n    const issuer = protectedResource.authorization_servers?.[0];\n    if (typeof issuer !== \"string\") throw new Error(\"Protected resource metadata names no authorization server\");\n    const server = await first(wellKnown(issuer, [\"oauth-authorization-server\", \"openid-configuration\"]));\n    if (typeof server.token_endpoint !== \"string\") throw new Error(\"Authorization server metadata has no token_endpoint\");\n    endpoint = server.token_endpoint;\n    methods = server.token_endpoint_auth_methods_supported ?? [\"client_secret_basic\"];\n  }\n  async function request(challenge) {\n    if (!endpoint || challenge) await discover(challenge);\n    const scope = auth.scopes?.join(\" \") ?? challengeScope;\n    const body = new URLSearchParams({ grant_type: \"client_credentials\", resource, ...(scope ? { scope } : {}) });\n    const headers = { \"content-type\": \"application/x-www-form-urlencoded\", accept: \"application/json\" };\n    if (methods.includes(\"client_secret_basic\"))\n      headers.authorization = \"Basic \" + Buffer.from(encodeURIComponent(id) + \":\" + encodeURIComponent(secret)).toString(\"base64\");\n    else if (methods.includes(\"client_secret_post\")) {\n      body.set(\"client_id\", id);\n      body.set(\"client_secret\", secret);\n    } else throw new Error(\"The authorization server supports neither client_secret_basic nor client_secret_post\");\n    const response = await fetch(endpoint, { method: \"POST\", headers, body });\n    const text = await response.text();\n    if (!response.ok) throw new Error(\"OAuth token request failed with HTTP \" + response.status + \": \" + text.slice(0, 300));\n    const result = JSON.parse(text);\n    if (typeof result.access_token !== \"string\") throw new Error(\"OAuth token response has no access_token\");\n    const lifetime = Number(result.expires_in);\n    token = result.access_token;\n    expiresAt = Number.isFinite(lifetime) && lifetime > 0 ? Date.now() + lifetime * 1000 - Math.min(30000, lifetime * 500) : Infinity;\n  }\n  const refresh = (challenge) => (pending ??= request(challenge).finally(() => { pending = undefined; }));\n  return {\n    async headers() {\n      if (!token || Date.now() >= expiresAt) await refresh();\n      return { authorization: \"Bearer \" + token };\n    },\n    async retry(response) {\n      if (response.status !== 401) return false;\n      token = undefined;\n      await refresh(response.headers.get(\"www-authenticate\") ?? undefined);\n      return true;\n    },\n  };\n}\n`;\n"]}

package/dist/adapters/tools/mcp-process.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from "../../domain/command.types.ts";
+import type { SandboxLease } from "../../domain/sandbox.types.ts";
+import type { McpProcess } from "./mcp.types.ts";
+export declare function openMcpProcess(server: string, lease: SandboxLease, command: Pick<Command, "executable" | "arguments" | "variables">, signal: AbortSignal): McpProcess;

package/dist/adapters/tools/mcp-process.js

@@ -0,0 +1,65 @@
+import { PassThrough } from "node:stream";
+import { setTimeout as delay } from "node:timers/promises";
+import { OutpostError } from "../../domain/errors.js";
+import { mcpConnection } from "./mcp-connection.js";
+import { mcpDefaults } from "./mcp.constants.js";
+export function openMcpProcess(server, lease, command, signal) {
+    const input = new PassThrough();
+    const stop = new AbortController();
+    let open = true;
+    let stderr = "";
+    let pending = "";
+    const connection = mcpConnection(server, (text) => {
+        if (open)
+            input.write(text);
+    });
+    const receive = (chunk) => {
+        pending += chunk;
+        let end;
+        while ((end = pending.indexOf("\n")) >= 0) {
+            connection.receive(pending.slice(0, end));
+            pending = pending.slice(end + 1);
+        }
+        if (pending.length > mcpDefaults.lineCharacters)
+            stop.abort(new OutpostError("response", `MCP server ${server} sent a message larger than ${mcpDefaults.lineCharacters} characters`));
+    };
+    const running = lease.invoke({
+        ...command,
+        input,
+        deadlineMs: mcpDefaults.processDeadlineMs,
+        retain: 1,
+        signal: AbortSignal.any([signal, stop.signal]),
+        observe(channel, text) {
+            if (channel === "stdout")
+                receive(text);
+            else
+                stderr = (stderr + text).slice(-mcpDefaults.stderrCharacters);
+        },
+    });
+    void running.then((result) => exited(new OutpostError(result.status === mcpDefaults.missingVariableStatus
+        ? "configuration"
+        : "process", `MCP server ${server} exited with status ${result.status}${stderr.trim() ? `: ${stderr.trim()}` : ""}`, { server, status: result.status })), exited);
+    function exited(error) {
+        open = false;
+        input.end();
+        connection.fail(error);
+    }
+    return {
+        connection,
+        async close() {
+            if (open) {
+                open = false;
+                input.end();
+            }
+            const settled = running.then(() => true, () => true);
+            const graceful = await Promise.race([
+                settled,
+                delay(mcpDefaults.closeGraceMs, false, { ref: false }),
+            ]);
+            if (!graceful)
+                stop.abort(new OutpostError("aborted", `MCP server ${server} closed`));
+            await settled;
+        },
+    };
+}
+//# sourceMappingURL=mcp-process.js.map

package/dist/adapters/tools/mcp-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-process.js","sourceRoot":"","sources":["../../../src/adapters/tools/mcp-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,KAAmB,EACnB,OAAgE,EAChE,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAChD,IAAI,IAAI;YAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;QAChC,OAAO,IAAI,KAAK,CAAC;QACjB,IAAI,GAAW,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,cAAc;YAC7C,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CACd,UAAU,EACV,cAAc,MAAM,+BAA+B,WAAW,CAAC,cAAc,aAAa,CAC3F,CACF,CAAC;IACN,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,GAAG,OAAO;QACV,KAAK;QACL,UAAU,EAAE,WAAW,CAAC,iBAAiB;QACzC,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,CAAC,OAAO,EAAE,IAAI;YACnB,IAAI,OAAO,KAAK,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;;gBACnC,MAAM,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACrE,CAAC;KACF,CAAC,CAAC;IACH,KAAK,OAAO,CAAC,IAAI,CACf,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CACJ,IAAI,YAAY,CACd,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,qBAAqB;QACjD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,SAAS,EACb,cAAc,MAAM,uBAAuB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EACtG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAClC,CACF,EACH,MAAM,CACP,CAAC;IACF,SAAS,MAAM,CAAC,KAAc;QAC5B,IAAI,GAAG,KAAK,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,CAAC;QACZ,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO;QACL,UAAU;QACV,KAAK,CAAC,KAAK;YACT,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,GAAG,KAAK,CAAC;gBACb,KAAK,CAAC,GAAG,EAAE,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAClC,OAAO;gBACP,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aACvD,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ;gBACX,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,cAAc,MAAM,SAAS,CAAC,CAAC,CAAC;YACzE,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { PassThrough } from \"node:stream\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport type { Command } from \"../../domain/command.types.ts\";\nimport { OutpostError } from \"../../domain/errors.ts\";\nimport type { SandboxLease } from \"../../domain/sandbox.types.ts\";\nimport { mcpConnection } from \"./mcp-connection.ts\";\nimport { mcpDefaults } from \"./mcp.constants.ts\";\nimport type { McpProcess } from \"./mcp.types.ts\";\n\nexport function openMcpProcess(\n  server: string,\n  lease: SandboxLease,\n  command: Pick<Command, \"executable\" | \"arguments\" | \"variables\">,\n  signal: AbortSignal,\n): McpProcess {\n  const input = new PassThrough();\n  const stop = new AbortController();\n  let open = true;\n  let stderr = \"\";\n  let pending = \"\";\n  const connection = mcpConnection(server, (text) => {\n    if (open) input.write(text);\n  });\n  const receive = (chunk: string) => {\n    pending += chunk;\n    let end: number;\n    while ((end = pending.indexOf(\"\\n\")) >= 0) {\n      connection.receive(pending.slice(0, end));\n      pending = pending.slice(end + 1);\n    }\n    if (pending.length > mcpDefaults.lineCharacters)\n      stop.abort(\n        new OutpostError(\n          \"response\",\n          `MCP server ${server} sent a message larger than ${mcpDefaults.lineCharacters} characters`,\n        ),\n      );\n  };\n  const running = lease.invoke({\n    ...command,\n    input,\n    deadlineMs: mcpDefaults.processDeadlineMs,\n    retain: 1,\n    signal: AbortSignal.any([signal, stop.signal]),\n    observe(channel, text) {\n      if (channel === \"stdout\") receive(text);\n      else stderr = (stderr + text).slice(-mcpDefaults.stderrCharacters);\n    },\n  });\n  void running.then(\n    (result) =>\n      exited(\n        new OutpostError(\n          result.status === mcpDefaults.missingVariableStatus\n            ? \"configuration\"\n            : \"process\",\n          `MCP server ${server} exited with status ${result.status}${stderr.trim() ? `: ${stderr.trim()}` : \"\"}`,\n          { server, status: result.status },\n        ),\n      ),\n    exited,\n  );\n  function exited(error: unknown): void {\n    open = false;\n    input.end();\n    connection.fail(error);\n  }\n  return {\n    connection,\n    async close() {\n      if (open) {\n        open = false;\n        input.end();\n      }\n      const settled = running.then(\n        () => true,\n        () => true,\n      );\n      const graceful = await Promise.race([\n        settled,\n        delay(mcpDefaults.closeGraceMs, false, { ref: false }),\n      ]);\n      if (!graceful)\n        stop.abort(new OutpostError(\"aborted\", `MCP server ${server} closed`));\n      await settled;\n    },\n  };\n}\n"]}

package/dist/adapters/tools/mcp-resources.d.ts

@@ -0,0 +1,5 @@
+import type { HarnessTool } from "../../domain/tool.types.ts";
+import type { McpSession } from "./mcp.types.ts";
+export declare function mcpCapabilityTools(sessions: readonly McpSession[]): readonly HarnessTool[];
+export declare function getMcpPrompt(sessions: readonly McpSession[], server: string, name: string, promptArguments: Readonly<Record<string, string>>, signal: AbortSignal): Promise<string>;
+export declare function renderPrompt(value: unknown): string;

package/dist/adapters/tools/mcp-resources.js

@@ -0,0 +1,157 @@
+import { OutpostError } from "../../domain/errors.js";
+import { defineHarnessTool } from "../../domain/tool.js";
+import { mcpRecord, renderContentBlock, renderResourceContents, } from "./mcp-content.js";
+import { MCP_CAPABILITY_TOOLS } from "./mcp.constants.js";
+export function mcpCapabilityTools(sessions) {
+    const resources = capable(sessions, "resources");
+    const prompts = capable(sessions, "prompts");
+    return [
+        ...(resources.size ? resourceTools(resources) : []),
+        ...(prompts.size ? promptTools(prompts) : []),
+    ];
+}
+export async function getMcpPrompt(sessions, server, name, promptArguments, signal) {
+    const session = capable(sessions, "prompts").get(server);
+    if (!session)
+        throw new OutpostError("configuration", `MCP server ${server} is not declared on this harness or offers no prompts`, { server });
+    return renderPrompt(await session.connection.request("prompts/get", { name, arguments: promptArguments }, signal));
+}
+export function renderPrompt(value) {
+    const result = mcpRecord(value) ?? {};
+    const messages = Array.isArray(result.messages) ? result.messages : [];
+    return messages
+        .flatMap((entry) => {
+        const message = mcpRecord(entry);
+        return message && mcpRecord(message.content)
+            ? [`${String(message.role)}: ${renderContentBlock(message.content)}`]
+            : [];
+    })
+        .join("\n\n");
+}
+function resourceTools(sessions) {
+    const server = serverSchema(sessions);
+    return [
+        defineHarnessTool({
+            name: MCP_CAPABILITY_TOOLS.listResources,
+            description: "List the resources and resource templates of an MCP server. Pass nextCursor back as cursor for the next page.",
+            readOnly: true,
+            input: {
+                type: "object",
+                properties: { server, cursor: { type: "string" } },
+                required: ["server"],
+                additionalProperties: false,
+            },
+            execute: (input, context) => call(async () => {
+                const connection = sessions.get(input.server).connection;
+                const params = input.cursor ? { cursor: input.cursor } : {};
+                const page = mcpRecord(await connection.request("resources/list", params, context.signal));
+                const templates = input.cursor
+                    ? undefined
+                    : mcpRecord(await connection
+                        .request("resources/templates/list", {}, context.signal)
+                        .catch(unsupported));
+                return JSON.stringify({
+                    resources: page?.resources ?? [],
+                    ...(templates?.resourceTemplates
+                        ? { resourceTemplates: templates.resourceTemplates }
+                        : {}),
+                    ...(page?.nextCursor ? { nextCursor: page.nextCursor } : {}),
+                });
+            }),
+        }),
+        defineHarnessTool({
+            name: MCP_CAPABILITY_TOOLS.readResource,
+            description: "Read a resource of an MCP server by URI, including a URI expanded from a resource template.",
+            readOnly: true,
+            input: {
+                type: "object",
+                properties: { server, uri: { type: "string", minLength: 1 } },
+                required: ["server", "uri"],
+                additionalProperties: false,
+            },
+            execute: (input, context) => call(async () => {
+                const result = mcpRecord(await sessions
+                    .get(input.server)
+                    .connection.request("resources/read", { uri: input.uri }, context.signal));
+                const contents = Array.isArray(result?.contents)
+                    ? result.contents
+                    : [];
+                return contents
+                    .map((entry) => renderResourceContents(mcpRecord(entry) ?? {}))
+                    .join("\n\n");
+            }),
+        }),
+    ];
+}
+function promptTools(sessions) {
+    const server = serverSchema(sessions);
+    return [
+        defineHarnessTool({
+            name: MCP_CAPABILITY_TOOLS.listPrompts,
+            description: "List the prompts of an MCP server with their arguments. Pass nextCursor back as cursor for the next page.",
+            readOnly: true,
+            input: {
+                type: "object",
+                properties: { server, cursor: { type: "string" } },
+                required: ["server"],
+                additionalProperties: false,
+            },
+            execute: (input, context) => call(async () => {
+                const page = mcpRecord(await sessions
+                    .get(input.server)
+                    .connection.request("prompts/list", input.cursor ? { cursor: input.cursor } : {}, context.signal));
+                return JSON.stringify({
+                    prompts: page?.prompts ?? [],
+                    ...(page?.nextCursor ? { nextCursor: page.nextCursor } : {}),
+                });
+            }),
+        }),
+        defineHarnessTool({
+            name: MCP_CAPABILITY_TOOLS.getPrompt,
+            description: "Render a prompt of an MCP server with string arguments and return its messages.",
+            readOnly: true,
+            input: {
+                type: "object",
+                properties: {
+                    server,
+                    name: { type: "string", minLength: 1 },
+                    arguments: {
+                        type: "object",
+                        additionalProperties: { type: "string" },
+                    },
+                },
+                required: ["server", "name"],
+                additionalProperties: false,
+            },
+            execute: (input, context) => call(async () => renderPrompt(await sessions
+                .get(input.server)
+                .connection.request("prompts/get", { name: input.name, arguments: input.arguments ?? {} }, context.signal))),
+        }),
+    ];
+}
+function capable(sessions, capability) {
+    return new Map(sessions
+        .filter((session) => mcpRecord(session.capabilities[capability]))
+        .map((session) => [session.name, session]));
+}
+function serverSchema(sessions) {
+    return { type: "string", enum: [...sessions.keys()] };
+}
+// Protocol errors from the server go back to the model like MCP tool errors.
+async function call(operation) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        if (error instanceof OutpostError && error.code === "response")
+            return { content: error.message, isError: true };
+        throw error;
+    }
+}
+// Servers without templates answer templates/list with a protocol error.
+function unsupported(error) {
+    if (error instanceof OutpostError && error.code === "response")
+        return undefined;
+    throw error;
+}
+//# sourceMappingURL=mcp-resources.js.map

package/dist/adapters/tools/mcp-resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-resources.js","sourceRoot":"","sources":["../../../src/adapters/tools/mcp-resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,MAAM,UAAU,kBAAkB,CAChC,QAA+B;IAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC7C,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA+B,EAC/B,MAAc,EACd,IAAY,EACZ,eAAiD,EACjD,MAAmB;IAEnB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,YAAY,CACpB,eAAe,EACf,cAAc,MAAM,uDAAuD,EAC3E,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,OAAO,YAAY,CACjB,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAC9B,aAAa,EACb,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,EACpC,MAAM,CACP,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,OAAO,QAAQ;SACZ,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;YAC1C,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,QAAyC;IAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO;QACL,iBAAiB,CAAC;YAChB,IAAI,EAAE,oBAAoB,CAAC,aAAa;YACxC,WAAW,EACT,+GAA+G;YACjH,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAClD,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,oBAAoB,EAAE,KAAK;aAC5B;YACD,OAAO,EAAE,CAAC,KAAmB,EAAE,OAAO,EAAE,EAAE,CACxC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACd,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE,CAAC,UAAU,CAAC;gBAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAG,SAAS,CACpB,MAAM,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CACnE,CAAC;gBACF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM;oBAC5B,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS,CACP,MAAM,UAAU;yBACb,OAAO,CAAC,0BAA0B,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC;yBACvD,KAAK,CAAC,WAAW,CAAC,CACtB,CAAC;gBACN,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE;oBAChC,GAAG,CAAC,SAAS,EAAE,iBAAiB;wBAC9B,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE;wBACpD,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC,CAAC;SACL,CAAC;QACF,iBAAiB,CAAC;YAChB,IAAI,EAAE,oBAAoB,CAAC,YAAY;YACvC,WAAW,EACT,6FAA6F;YAC/F,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;gBAC7D,QAAQ,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAC3B,oBAAoB,EAAE,KAAK;aAC5B;YACD,OAAO,EAAE,CAAC,KAA2B,EAAE,OAAO,EAAE,EAAE,CAChD,IAAI,CAAC,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,GAAG,SAAS,CACtB,MAAM,QAAQ;qBACX,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE;qBAClB,UAAU,CAAC,OAAO,CACjB,gBAAgB,EAChB,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAClB,OAAO,CAAC,MAAM,CACf,CACJ,CAAC;gBACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAC9C,CAAC,CAAC,MAAM,CAAC,QAAQ;oBACjB,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,QAAQ;qBACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;qBAC9D,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC;SACL,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAyC;IAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO;QACL,iBAAiB,CAAC;YAChB,IAAI,EAAE,oBAAoB,CAAC,WAAW;YACtC,WAAW,EACT,2GAA2G;YAC7G,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAClD,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,oBAAoB,EAAE,KAAK;aAC5B;YACD,OAAO,EAAE,CAAC,KAAmB,EAAE,OAAO,EAAE,EAAE,CACxC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACd,MAAM,IAAI,GAAG,SAAS,CACpB,MAAM,QAAQ;qBACX,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE;qBAClB,UAAU,CAAC,OAAO,CACjB,cAAc,EACd,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAC5C,OAAO,CAAC,MAAM,CACf,CACJ,CAAC;gBACF,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE;oBAC5B,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7D,CAAC,CAAC;YACL,CAAC,CAAC;SACL,CAAC;QACF,iBAAiB,CAAC;YAChB,IAAI,EAAE,oBAAoB,CAAC,SAAS;YACpC,WAAW,EACT,iFAAiF;YACnF,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM;oBACN,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBACtC,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACzC;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAC5B,oBAAoB,EAAE,KAAK;aAC5B;YACD,OAAO,EAAE,CAAC,KAAwB,EAAE,OAAO,EAAE,EAAE,CAC7C,IAAI,CAAC,KAAK,IAAI,EAAE,CACd,YAAY,CACV,MAAM,QAAQ;iBACX,GAAG,CAAC,KAAK,CAAC,MAAM,CAAE;iBAClB,UAAU,CAAC,OAAO,CACjB,aAAa,EACb,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE,EACtD,OAAO,CAAC,MAAM,CACf,CACJ,CACF;SACJ,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,QAA+B,EAC/B,UAAkB;IAElB,OAAO,IAAI,GAAG,CACZ,QAAQ;SACL,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;SAChE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAAyC;IAC7D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,IAAI,CAAC,SAAgC;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;YAC5D,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAC5D,OAAO,SAAS,CAAC;IACnB,MAAM,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { OutpostError } from \"../../domain/errors.ts\";\nimport { defineHarnessTool } from \"../../domain/tool.ts\";\nimport type { HarnessTool, ToolOutput } from \"../../domain/tool.types.ts\";\nimport {\n  mcpRecord,\n  renderContentBlock,\n  renderResourceContents,\n} from \"./mcp-content.ts\";\nimport { MCP_CAPABILITY_TOOLS } from \"./mcp.constants.ts\";\nimport type {\n  McpGetPromptInput,\n  McpListInput,\n  McpReadResourceInput,\n  McpSession,\n} from \"./mcp.types.ts\";\n\nexport function mcpCapabilityTools(\n  sessions: readonly McpSession[],\n): readonly HarnessTool[] {\n  const resources = capable(sessions, \"resources\");\n  const prompts = capable(sessions, \"prompts\");\n  return [\n    ...(resources.size ? resourceTools(resources) : []),\n    ...(prompts.size ? promptTools(prompts) : []),\n  ];\n}\n\nexport async function getMcpPrompt(\n  sessions: readonly McpSession[],\n  server: string,\n  name: string,\n  promptArguments: Readonly<Record<string, string>>,\n  signal: AbortSignal,\n): Promise<string> {\n  const session = capable(sessions, \"prompts\").get(server);\n  if (!session)\n    throw new OutpostError(\n      \"configuration\",\n      `MCP server ${server} is not declared on this harness or offers no prompts`,\n      { server },\n    );\n  return renderPrompt(\n    await session.connection.request(\n      \"prompts/get\",\n      { name, arguments: promptArguments },\n      signal,\n    ),\n  );\n}\n\nexport function renderPrompt(value: unknown): string {\n  const result = mcpRecord(value) ?? {};\n  const messages = Array.isArray(result.messages) ? result.messages : [];\n  return messages\n    .flatMap((entry) => {\n      const message = mcpRecord(entry);\n      return message && mcpRecord(message.content)\n        ? [`${String(message.role)}: ${renderContentBlock(message.content)}`]\n        : [];\n    })\n    .join(\"\\n\\n\");\n}\n\nfunction resourceTools(sessions: ReadonlyMap<string, McpSession>) {\n  const server = serverSchema(sessions);\n  return [\n    defineHarnessTool({\n      name: MCP_CAPABILITY_TOOLS.listResources,\n      description:\n        \"List the resources and resource templates of an MCP server. Pass nextCursor back as cursor for the next page.\",\n      readOnly: true,\n      input: {\n        type: \"object\",\n        properties: { server, cursor: { type: \"string\" } },\n        required: [\"server\"],\n        additionalProperties: false,\n      },\n      execute: (input: McpListInput, context) =>\n        call(async () => {\n          const connection = sessions.get(input.server)!.connection;\n          const params = input.cursor ? { cursor: input.cursor } : {};\n          const page = mcpRecord(\n            await connection.request(\"resources/list\", params, context.signal),\n          );\n          const templates = input.cursor\n            ? undefined\n            : mcpRecord(\n                await connection\n                  .request(\"resources/templates/list\", {}, context.signal)\n                  .catch(unsupported),\n              );\n          return JSON.stringify({\n            resources: page?.resources ?? [],\n            ...(templates?.resourceTemplates\n              ? { resourceTemplates: templates.resourceTemplates }\n              : {}),\n            ...(page?.nextCursor ? { nextCursor: page.nextCursor } : {}),\n          });\n        }),\n    }),\n    defineHarnessTool({\n      name: MCP_CAPABILITY_TOOLS.readResource,\n      description:\n        \"Read a resource of an MCP server by URI, including a URI expanded from a resource template.\",\n      readOnly: true,\n      input: {\n        type: \"object\",\n        properties: { server, uri: { type: \"string\", minLength: 1 } },\n        required: [\"server\", \"uri\"],\n        additionalProperties: false,\n      },\n      execute: (input: McpReadResourceInput, context) =>\n        call(async () => {\n          const result = mcpRecord(\n            await sessions\n              .get(input.server)!\n              .connection.request(\n                \"resources/read\",\n                { uri: input.uri },\n                context.signal,\n              ),\n          );\n          const contents = Array.isArray(result?.contents)\n            ? result.contents\n            : [];\n          return contents\n            .map((entry) => renderResourceContents(mcpRecord(entry) ?? {}))\n            .join(\"\\n\\n\");\n        }),\n    }),\n  ];\n}\n\nfunction promptTools(sessions: ReadonlyMap<string, McpSession>) {\n  const server = serverSchema(sessions);\n  return [\n    defineHarnessTool({\n      name: MCP_CAPABILITY_TOOLS.listPrompts,\n      description:\n        \"List the prompts of an MCP server with their arguments. Pass nextCursor back as cursor for the next page.\",\n      readOnly: true,\n      input: {\n        type: \"object\",\n        properties: { server, cursor: { type: \"string\" } },\n        required: [\"server\"],\n        additionalProperties: false,\n      },\n      execute: (input: McpListInput, context) =>\n        call(async () => {\n          const page = mcpRecord(\n            await sessions\n              .get(input.server)!\n              .connection.request(\n                \"prompts/list\",\n                input.cursor ? { cursor: input.cursor } : {},\n                context.signal,\n              ),\n          );\n          return JSON.stringify({\n            prompts: page?.prompts ?? [],\n            ...(page?.nextCursor ? { nextCursor: page.nextCursor } : {}),\n          });\n        }),\n    }),\n    defineHarnessTool({\n      name: MCP_CAPABILITY_TOOLS.getPrompt,\n      description:\n        \"Render a prompt of an MCP server with string arguments and return its messages.\",\n      readOnly: true,\n      input: {\n        type: \"object\",\n        properties: {\n          server,\n          name: { type: \"string\", minLength: 1 },\n          arguments: {\n            type: \"object\",\n            additionalProperties: { type: \"string\" },\n          },\n        },\n        required: [\"server\", \"name\"],\n        additionalProperties: false,\n      },\n      execute: (input: McpGetPromptInput, context) =>\n        call(async () =>\n          renderPrompt(\n            await sessions\n              .get(input.server)!\n              .connection.request(\n                \"prompts/get\",\n                { name: input.name, arguments: input.arguments ?? {} },\n                context.signal,\n              ),\n          ),\n        ),\n    }),\n  ];\n}\n\nfunction capable(\n  sessions: readonly McpSession[],\n  capability: string,\n): ReadonlyMap<string, McpSession> {\n  return new Map(\n    sessions\n      .filter((session) => mcpRecord(session.capabilities[capability]))\n      .map((session) => [session.name, session]),\n  );\n}\n\nfunction serverSchema(sessions: ReadonlyMap<string, McpSession>) {\n  return { type: \"string\", enum: [...sessions.keys()] };\n}\n\n// Protocol errors from the server go back to the model like MCP tool errors.\nasync function call(operation: () => Promise<string>): Promise<ToolOutput> {\n  try {\n    return await operation();\n  } catch (error) {\n    if (error instanceof OutpostError && error.code === \"response\")\n      return { content: error.message, isError: true };\n    throw error;\n  }\n}\n\n// Servers without templates answer templates/list with a protocol error.\nfunction unsupported(error: unknown): undefined {\n  if (error instanceof OutpostError && error.code === \"response\")\n    return undefined;\n  throw error;\n}\n"]}

package/dist/adapters/tools/mcp-tools.d.ts

@@ -0,0 +1,6 @@
+import type { McpToolFilter } from "../../domain/mcp-server.types.ts";
+import type { HarnessTool, ToolOutput } from "../../domain/tool.types.ts";
+import type { McpConnection } from "./mcp.types.ts";
+export declare function mcpTools(server: string, connection: McpConnection, signal: AbortSignal, filter?: McpToolFilter): Promise<readonly HarnessTool[]>;
+export declare function toolName(server: string, tool: string): string;
+export declare function renderToolResult(value: unknown): ToolOutput;