@fitchmultz/pi-mcp-adapter 5.0.0 → 7.0.0

package/types.ts

@@ -1,810 +0,0 @@
-// types.ts - Core type definitions
-import type { Transport as McpTransport } from "@modelcontextprotocol/client";
-import type {
-  ContentBlock as McpContentBlock,
-  ListPromptsResult,
-  ListResourcesResult,
-  ListToolsResult,
-} from "@modelcontextprotocol/client";
-import type { TextContent, ImageContent } from "@earendil-works/pi-ai";
-import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
-import type { UiStreamMode } from "./ui-stream-types.ts";
-import type { UiToolVisibility } from "./ui-tool-visibility.ts";
-
-export type Transport = McpTransport;
-
-/** Versioned shared-event-bus channel for read-only MCP runtime snapshots. */
-export const MCP_STATUS_EVENT = "fitch-mcp-adapter/status/v1";
-
-export const MCP_STATUS_SNAPSHOT_VERSION = 1 as const;
-
-export type McpServerRuntimeStatus =
-  | "connected"
-  | "cached"
-  | "failed"
-  | "needs-auth"
-  | "not-connected"
-  | "disabled";
-
-export interface McpServerStatusSnapshot {
-  readonly name: string;
-  readonly status: McpServerRuntimeStatus;
-  readonly toolCount: number;
-  readonly resourceCount?: number;
-  readonly failedAgoSeconds?: number;
-  readonly disabled: boolean;
-}
-
-export interface McpStatusSnapshot {
-  readonly version: typeof MCP_STATUS_SNAPSHOT_VERSION;
-  readonly servers: ReadonlyArray<McpServerStatusSnapshot>;
-  readonly totalTools: number;
-  readonly totalResources: number;
-  readonly connectedCount: number;
-  readonly disabledCount: number;
-}
-
-// Import sources for config
-export type ImportKind = 
-  | "cursor" 
-  | "claude-code" 
-  | "claude-desktop" 
-  | "codex" 
-  | "opencode"
-  | "windsurf" 
-  | "vscode";
-
-type SdkTool = ListToolsResult["tools"][number];
-type SdkResource = ListResourcesResult["resources"][number];
-type SdkPrompt = ListPromptsResult["prompts"][number];
-type SdkPromptArgument = NonNullable<SdkPrompt["arguments"]>[number];
-
-// MCP wire definitions derive their field types from the installed SDK while
-// retaining the adapter's deliberately smaller public surface.
-export interface McpTool {
-  name: SdkTool["name"];
-  title?: SdkTool["title"];
-  description?: SdkTool["description"];
-  inputSchema?: SdkTool["inputSchema"]; // JSON Schema
-  annotations?: SdkTool["annotations"];
-  _meta?: SdkTool["_meta"];
-}
-
-export interface McpResource {
-  uri: SdkResource["uri"];
-  name: SdkResource["name"];
-  description?: SdkResource["description"];
-  mimeType?: SdkResource["mimeType"];
-  _meta?: SdkResource["_meta"];
-}
-
-export interface McpPromptArgument {
-  name: SdkPromptArgument["name"];
-  description?: SdkPromptArgument["description"];
-  required?: SdkPromptArgument["required"];
-}
-
-export interface McpPrompt {
-  name: SdkPrompt["name"];
-  title?: SdkPrompt["title"];
-  description?: SdkPrompt["description"];
-  arguments?: SdkPrompt["arguments"];
-  _meta?: SdkPrompt["_meta"];
-}
-
-export interface UiResourceMeta {
-  csp?: UiResourceCsp;
-  permissions?: UiResourcePermissions;
-  domain?: string;
-  prefersBorder?: boolean;
-}
-
-export interface UiResourceContent {
-  uri: string;
-  html: string;
-  mimeType?: string;
-  meta: UiResourceMeta;
-}
-
-export interface UiProxyRequestBody<TParams> {
-  token: string;
-  params: TParams;
-}
-
-export interface UiProxyResult<T = Record<string, unknown>> {
-  ok: boolean;
-  result?: T;
-  error?: string;
-}
-
-export interface UiResourceCsp {
-  resourceDomains?: string[];
-  connectDomains?: string[];
-  frameDomains?: string[];
-  baseUriDomains?: string[];
-}
-
-export interface UiResourcePermissions {
-  camera?: {};
-  microphone?: {};
-  geolocation?: {};
-  clipboardWrite?: {};
-}
-
-export interface UiToolInfo {
-  id?: string | number;
-  tool: {
-    name: string;
-    description?: string;
-    inputSchema?: unknown;
-  };
-}
-
-export interface UiHostContext {
-  toolInfo?: UiToolInfo;
-  theme?: "light" | "dark";
-  styles?: Record<string, unknown>;
-  displayMode?: UiDisplayMode;
-  availableDisplayModes?: UiDisplayMode[];
-  containerDimensions?: {
-    width?: number;
-    maxWidth?: number;
-    height?: number;
-    maxHeight?: number;
-  };
-  [key: string]: unknown;
-}
-
-export type UiDisplayMode = "inline" | "fullscreen" | "pip";
-
-// Re-export stream types from the shared lightweight module.
-// This allows the example package to import stream schemas without pulling the full types.ts dependency graph.
-export {
-  UI_STREAM_HOST_CONTEXT_KEY,
-  UI_STREAM_REQUEST_META_KEY,
-  UI_STREAM_RESULT_PATCH_METHOD,
-  SERVER_STREAM_RESULT_PATCH_METHOD,
-  UI_STREAM_STRUCTURED_CONTENT_KEY,
-  uiStreamModeSchema,
-  visualizationStreamPhaseSchema,
-  visualizationStreamFrameTypeSchema,
-  visualizationStreamStatusSchema,
-  uiStreamHostContextSchema,
-  visualizationStreamEnvelopeSchema,
-  uiStreamCallToolResultSchema,
-  uiStreamResultPatchNotificationSchema,
-  serverStreamResultPatchNotificationSchema,
-  getUiStreamHostContext,
-  getVisualizationStreamEnvelope,
-  type UiStreamMode,
-  type VisualizationStreamPhase,
-  type VisualizationStreamFrameType,
-  type VisualizationStreamStatus,
-  type UiStreamHostContext,
-  type VisualizationStreamEnvelope,
-  type UiStreamCallToolResult,
-  type UiStreamResultPatchNotification,
-  type ServerStreamResultPatchNotification,
-  type UiStreamSummary,
-} from "./ui-stream-types.ts";
-
-export interface UiMessageParams {
-  role?: string;
-  content?: unknown[];
-  type?: "prompt" | "notify" | "intent" | "message";
-  message?: string;
-  prompt?: string;
-  intent?: string;
-  params?: Record<string, unknown>;
-  [key: string]: unknown;
-}
-
-/**
- * Extract prompt text from either legacy MCP UI message shapes or native AppBridge user messages.
- */
-export function extractUiPromptText(params: UiMessageParams): string | undefined {
-  if (params.type === "prompt" || params.prompt) {
-    const prompt = params.prompt ?? String(params.message ?? "");
-    return prompt || undefined;
-  }
-
-  if (params.role === "user" && Array.isArray(params.content)) {
-    const text = params.content
-      .map((block) => (block && typeof block === "object" && "text" in block ? String((block as { text?: unknown }).text ?? "") : ""))
-      .filter(Boolean)
-      .join("\n\n");
-    return text || undefined;
-  }
-
-  return undefined;
-}
-
-/**
- * Structured UI handoff recovered from a canonical prompt envelope.
- */
-export interface UiPromptHandoff {
-  intent: string;
-  params: Record<string, unknown>;
-  raw: string;
-}
-
-/**
- * Parse a canonical named UI handoff encoded as `intent\n{json}`.
- */
-export function parseUiPromptHandoff(prompt: string): UiPromptHandoff | undefined {
-  const newlineIndex = prompt.indexOf("\n");
-  if (newlineIndex <= 0) {
-    return undefined;
-  }
-
-  const intent = prompt.slice(0, newlineIndex).trim();
-  const payloadText = prompt.slice(newlineIndex + 1).trim();
-  if (!intent || !payloadText) {
-    return undefined;
-  }
-
-  if (!/^[A-Za-z][A-Za-z0-9_-]*$/.test(intent)) {
-    return undefined;
-  }
-
-  try {
-    const parsed = JSON.parse(payloadText);
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      return undefined;
-    }
-    return {
-      intent,
-      params: parsed as Record<string, unknown>,
-      raw: prompt,
-    };
-  } catch {
-    return undefined;
-  }
-}
-
-/**
- * Accumulated messages from a UI session.
- * Collected during the session and available when it ends.
- */
-export interface UiSessionMessages {
-  prompts: string[];
-  notifications: string[];
-  intents: Array<{ intent: string; params?: Record<string, unknown> }>;
-  contexts: UiModelContextUpdate[];
-}
-
-export interface UiModelContextUpdate {
-  summary: string;
-  truncated: boolean;
-  payload?: Record<string, unknown>;
-}
-
-export interface UiModelContextParams {
-  content?: McpContentBlock[];
-  structuredContent?: Record<string, unknown>;
-}
-
-export function createUiModelContextUpdate(params: UiModelContextParams, maxChars = 12_000): UiModelContextUpdate | undefined {
-  const payload = Object.fromEntries(
-    Object.entries(params).filter(([, value]) => value !== undefined),
-  );
-  if (Object.keys(payload).length === 0) return undefined;
-
-  const serialized = JSON.stringify(payload);
-  if (serialized.length <= maxChars) {
-    return { payload, summary: serialized, truncated: false };
-  }
-
-  return {
-    summary: `${serialized.slice(0, Math.max(0, maxChars - 1))}…`,
-    truncated: true,
-  };
-}
-
-export interface UiOpenLinkResult {
-  isError?: boolean;
-  [key: string]: unknown;
-}
-
-export interface UiDisplayModeRequest {
-  mode?: UiDisplayMode;
-}
-
-export interface UiDisplayModeResult {
-  mode: UiDisplayMode;
-  [key: string]: unknown;
-}
-
-// Content types from MCP
-export interface McpContent {
-  type: "text" | "image" | "audio" | "resource" | "resource_link";
-  text?: string;
-  data?: string;
-  mimeType?: string;
-  resource?: {
-    uri: string;
-    text?: string;
-    blob?: string;
-  };
-  uri?: string;
-  name?: string;
-  description?: string;
-}
-
-// Pi content block type
-export type ContentBlock = TextContent | ImageContent;
-
-/** Native private_key_jwt authentication; public verification keys are provisioned separately. */
-export interface OAuthPrivateKeyJwtConfig {
-  /** PKCS#8 PEM, JWK object/JSON, or an existing environment/!command source. Resolved only when signing. */
-  privateKey: string | Record<string, unknown>;
-  /** Asymmetric JOSE algorithm, such as ES256, RS256, PS256 or EdDSA (JWK only). */
-  algorithm: string;
-  /** JWT audience override only; defaults to the discovered issuer, then token URL. */
-  audience?: string;
-  /** Positive integer assertion lifetime in seconds; native default is 300. */
-  lifetimeSeconds?: number;
-  /** Additional claims. Native iss/sub/aud/iat/exp/jti always take precedence. */
-  claims?: Record<string, unknown>;
-}
-
-/** Enterprise OIDC token exchange. IdP credentials are separate from the MCP client identity. */
-export interface OAuthCrossAppAccessConfig {
-  /** IdP issuer used by native discovery. */
-  idpUrl: string;
-  /** IdP client ID, not the outer MCP clientId. */
-  clientId: string;
-  /** Existing OIDC ID token; environment/!command sources are resolved for each exchange. */
-  idToken: string;
-  /** Optional IdP client_secret_post credential, also resolved lazily. */
-  clientSecret?: string;
-}
-
-export function isNonInteractiveOAuth(config: OAuthConfig | false | undefined): boolean {
-  return !!config && (config.grantType === "client_credentials" || config.crossAppAccess !== undefined);
-}
-
-// OAuth configuration (SDK handles discovery and client registration)
-export interface OAuthConfig {
-  /** Skip only authorization-server metadata issuer validation. Defaults to false. */
-  skipIssuerMetadataValidation?: boolean;
-  /** OAuth grant type (defaults to authorization_code) */
-  grantType?: "authorization_code" | "client_credentials";
-  /** Pre-registered client ID; takes priority over stored clients, CIMD and dynamic registration. */
-  clientId?: string;
-  /** Client secret for confidential clients */
-  clientSecret?: string;
-  /** Private-key authentication instead of clientSecret; requires clientId or a custom clientMetadataUrl. */
-  privateKeyJwt?: OAuthPrivateKeyJwtConfig;
-  /** Noninteractive ID-token -> ID-JAG -> MCP access token flow; omit grantType. */
-  crossAppAccess?: OAuthCrossAppAccessConfig;
-  /** Requested OAuth scopes */
-  scope?: string;
-  /** Extra authorization URL parameters for provider-specific extensions. Flow-owned parameters cannot be overridden. */
-  authorizationParams?: Record<string, string>;
-  /** Exact authorization-code redirect URI for pre-registered clients */
-  redirectUri?: string;
-  /** Client display name for dynamic registration */
-  clientName?: string;
-  /** Client homepage URI for dynamic registration */
-  clientUri?: string;
-  /** Client metadata document URL. Eligible browser clients default to Pi MCP Adapter's shared identity; false opts out for new registrations. Stored clients keep priority. */
-  clientMetadataUrl?: string | false;
-}
-
-// Server configuration
-export interface ServerEntry {
-  command?: string;
-  args?: string[];
-  /** Explicit rmcp-mux Unix-domain socket path. Mutually exclusive with command and url. */
-  socket?: string;
-  env?: Record<string, string>;
-  cwd?: string;
-  /** HTTP defaults to auto negotiation; stdio/socket default to legacy. */
-  protocolVersion?: "auto" | "legacy";
-  /** Trust explicit readOnlyHint/idempotentHint annotations for one modern transport retry. Defaults to false. */
-  retryOnTransportFailure?: boolean;
-  // HTTP fields
-  url?: string;
-  headers?: Record<string, string>;
-  /** 
-   * Authentication type:
-   * - 'oauth' - Use OAuth 2.1 (auto-discovers endpoints, supports dynamic client registration)
-   * - 'bearer' - Use static Bearer token
-   * - false - Disable authentication
-   * If not specified and url is present, OAuth will be auto-detected unless custom headers are configured
-   */
-  auth?: "oauth" | "bearer" | false;
-  bearerToken?: string;
-  bearerTokenEnv?: string;
-  /** 
-   * OAuth configuration (optional).
-   * Eligible browser clients use the shared client metadata document when supported, otherwise dynamic registration.
-   * Set to false to explicitly disable OAuth for this server.
-   */
-  oauth?: OAuthConfig | false;
-  lifecycle?: "keep-alive" | "lazy" | "lazy-keep-alive" | "eager";
-  idleTimeout?: number; // minutes, overrides global setting
-  requestTimeoutMs?: number; // milliseconds, overrides global request timeout when > 0
-  // Resource handling
-  exposeResources?: boolean;
-  // Direct tool registration
-  directTools?: boolean | string[];
-  // Override settings.toolPrefix for this server.
-  toolPrefix?: ToolPrefix;
-  // Include/exclude specific MCP tools/resources by original or prefixed name
-  includeTools?: string[];
-  excludeTools?: string[];
-  // Require interactive approval before calling matching MCP tools/resources.
-  approveTools?: boolean | string[];
-  // Debug
-  debug?: boolean;  // Show server stderr (default: false)
-  /** Enable metadata-only JSONL protocol tracing for this server. */
-  trace?: boolean;
-  // Keep configuration visible without allowing connections or execution.
-  disabled?: boolean;
-}
-
-/** Validate protocol options for both file and in-memory configurations. */
-export function validateServerProtocolConfig(definition: ServerEntry): void {
-  if (definition.protocolVersion !== undefined && definition.protocolVersion !== "auto" && definition.protocolVersion !== "legacy") {
-    throw new Error("protocolVersion must be auto or legacy");
-  }
-  if (definition.retryOnTransportFailure !== undefined && typeof definition.retryOnTransportFailure !== "boolean") {
-    throw new Error("retryOnTransportFailure must be a boolean");
-  }
-  if (definition.oauth && definition.oauth.skipIssuerMetadataValidation !== undefined
-    && typeof definition.oauth.skipIssuerMetadataValidation !== "boolean") {
-    throw new Error("oauth.skipIssuerMetadataValidation must be a boolean");
-  }
-}
-
-/** Only the literal boolean `true` disables a server. */
-export function isServerDisabled(definition: ServerEntry | undefined): boolean {
-  return definition?.disabled === true;
-}
-
-// Output guard tuning (settings.outputGuard object form)
-export interface McpOutputGuardSettings {
-  /** Maximum inline MCP text output bytes before truncation/spill-to-disk. Defaults to 51200 (50 KiB). */
-  maxBytes?: number;
-  /** Maximum inline MCP text output lines before truncation/spill-to-disk. Defaults to 2000. */
-  maxLines?: number;
-  /** Maximum details.mcpResult JSON bytes kept raw; larger results are summarized and spilled to disk. Defaults to 16384 (16 KiB). */
-  detailsMaxBytes?: number;
-}
-
-// Settings
-export type ToolPrefix = "server" | "none" | "short" | "mcp";
-export type HostConfigDiscovery = "off" | "on";
-export type McpFooterStatus = "full" | "compact" | "off";
-
-export interface McpTraceSettings {
-  /** Enable tracing for all servers unless a server sets trace to false. */
-  enabled?: boolean;
-  /** JSONL destination; relative paths are resolved from the session cwd. */
-  file?: string;
-  /** Maximum per-session trace file size in bytes. */
-  maxBytes?: number;
-  /** Maximum events retained in the per-session trace file. */
-  maxEvents?: number;
-}
-
-export interface McpSettings {
-  toolPrefix?: ToolPrefix;
-  /** Show the plug prefix in MCP status and connection text (default: true). Set to false to disable it. */
-  showStatusIcon?: boolean;
-  /** Footer status verbosity: full details, compact connected/enabled count, or no footer status. Defaults to compact. */
-  mcpFooterStatus?: McpFooterStatus;
-  /** Discover detected host-specific MCP configs only when explicitly enabled. */
-  hostConfigDiscovery?: HostConfigDiscovery;
-  idleTimeout?: number; // minutes, default 10, 0 to disable
-  requestTimeoutMs?: number; // milliseconds, overrides the SDK request timeout when > 0
-  directTools?: boolean;
-  /** Register the trusted MCP-only JavaScript scripting tool. Defaults to true; set false to hide it. */
-  scriptMode?: boolean;
-  /** Default approval gate for matching tools/resources; per-server settings override it. */
-  approveTools?: boolean | string[];
-  disableProxyTool?: boolean;
-  /** Freeze direct-tool registration after the initial sync. Automatic metadata updates
-   * (reconnects, lazy-connect, tool-list-changed) won't rebuild the system prompt,
-   * preserving the prompt-cache prefix. The agent rediscovers explicitly via
-   * mcp({ connect: "server" }). Default: false. */
-  freezeDirectTools?: boolean;
-  autoAuth?: boolean;
-  sampling?: boolean;
-  samplingAutoApprove?: boolean;
-  elicitation?: boolean;
-  /**
-   * Guard oversized MCP tool/resource output before it is returned to the model.
-   * Defaults to true (50 KiB / 2,000 lines inline text, 16 KiB details.mcpResult).
-   * Set to false to restore raw MCP output behavior, or pass an object to tune
-   * the limits. Env kill switch: MCP_OUTPUT_GUARD=0.
-   */
-  outputGuard?: boolean | McpOutputGuardSettings;
-  /**
-   * Opt-in metadata-only MCP protocol tracing. Payloads, prompts, tool
-   * arguments/results, authorization data, and URLs are never persisted.
-   */
-  trace?: McpTraceSettings;
-  /**
-   * Message returned in tool results when a server needs (re-)authentication.
-   * "${server}" is substituted with the server name. Defaults to a TUI
-   * instruction when unset.
-   */
-  authRequiredMessage?: string;
-  /**
-   * Parent of the fitch-mcp-adapter/ legacy OAuth import directory.
-   * Relative paths resolve from the project root (cwd). Explicit v4 migration
-   * reads the original directory; runtime never consumes those source files.
-   * FITCH_MCP_OAUTH_DIR overrides the final runtime import path.
-   * Persistent credentials live in the OS credential store. Plaintext files
-   * in the runtime import directory are imported once and removed.
-   */
-  oauthDir?: string;
-}
-
-// Root config
-export interface McpConfig {
-  mcpServers: Record<string, ServerEntry>;
-  imports?: ImportKind[];
-  settings?: McpSettings;
-}
-
-export interface McpToolCallIdentity {
-  /** Native Pi call ID; correlation only, never a provider idempotency key. */
-  toolCallId?: string;
-  /** Existing mcp_script IPC sequence ID, scoped to toolCallId. */
-  innerCallId?: number;
-}
-
-export type McpToolCallEvent = McpToolCallIdentity & {
-  server: string;
-  tool: string;
-  args: Record<string, unknown>;
-  annotations?: McpTool["annotations"];
-  resourceUri?: string;
-  signal: AbortSignal;
-} & (
-  | { phase: "before" }
-  | { phase: "after"; result: unknown }
-  | { phase: "after"; error: unknown }
-);
-
-/** Resolved operation facts before the service deadline; no connection/configuration objects. */
-export type McpOperationContext = Omit<Extract<McpToolCallEvent, { phase: "before" }>, "phase" | "signal"> & {
-  /** The configured server opted into trusting annotations via retryOnTransportFailure. */
-  annotationsTrusted: boolean;
-};
-
-export interface McpAdapterOptions {
-  /** Awaited before the service deadline for each resolved call; operation is absent for other proxy modes. Honor ctx.signal. Selects native sequential sibling scheduling. */
-  beforeExecute?: (toolCallId: string, ctx: ExtensionContext, operation?: McpOperationContext) => Promise<void>;
-  config?: McpConfig;
-  configPath?: string;
-  /** Synchronously transform a clone of the resolved config once per session_start, before registration/initialization.
-   * The result is cloned for session ownership. Ambient config/trust and panels remain enabled unless config is supplied. */
-  transformConfig?: (config: McpConfig, ctx: ExtensionContext) => McpConfig;
-  /** Default overall mcp_script timeout: integer 1–2,147,483,647ms, or null to disable. Omit for 30,000ms. */
-  defaultScriptTimeoutMs?: number | null;
-  /** Parent directory for oversized text/raw results, including script output. Defaults to the system temp directory. */
-  outputDirectory?: string;
-  /** Awaited before dispatch and after its raw outcome, before any dependent script call. */
-  onToolCall?: (event: McpToolCallEvent) => Promise<void>;
-}
-
-// Alias for clarity
-export type ServerDefinition = ServerEntry;
-
-export interface ToolMetadata {
-  name: string;           // Prefixed tool name (e.g., "xcodebuild_list_sims")
-  originalName: string;   // Original MCP tool name (e.g., "list_sims")
-  description: string;
-  resourceUri?: string;   // For resource tools: the URI to read
-  uiResourceUri?: string; // For app-enabled tools: the UI resource URI
-  uiVisibility?: UiToolVisibility[];
-  inputSchema?: unknown;  // JSON Schema for parameters (stored for describe/errors)
-  annotations?: McpTool["annotations"];
-  uiStreamMode?: UiStreamMode;
-}
-
-export interface PromptMetadata {
-  serverName: string;
-  originalName: string;
-  commandName: string;
-  title?: string;
-  description: string;
-  arguments: McpPromptArgument[];
-}
-
-export interface DirectToolSpec {
-  serverName: string;
-  originalName: string;
-  prefixedName: string;
-  description: string;
-  inputSchema?: unknown;
-  annotations?: McpTool["annotations"];
-  resourceUri?: string;
-  uiResourceUri?: string;
-  uiStreamMode?: UiStreamMode;
-}
-
-export interface ServerProvenance {
-  path: string;
-  kind: "user" | "project" | "import";
-  importKind?: string;
-}
-
-export interface McpAuthResult {
-  ok: boolean;
-  message?: string;
-}
-
-export interface CachedTool {
-  name: string;
-  description?: string;
-  inputSchema?: unknown;
-  annotations?: McpTool["annotations"];
-  uiResourceUri?: string;
-  uiVisibility?: UiToolVisibility[];
-  uiStreamMode?: "eager" | "stream-first";
-}
-
-export interface CachedResource {
-  uri: string;
-  name: string;
-  description?: string;
-}
-
-export interface CachedPrompt {
-  name: string;
-  title?: string;
-  description?: string;
-  arguments?: { name: string; description?: string; required?: boolean }[];
-}
-
-export interface ServerCacheEntry {
-  configHash: string;
-  tools: CachedTool[];
-  resources: CachedResource[];
-  prompts?: CachedPrompt[];
-  instructions?: string;
-  cachedAt: number;
-}
-
-export interface MetadataCache {
-  version: number;
-  servers: Record<string, ServerCacheEntry>;
-}
-
-export interface McpPanelCallbacks {
-  reconnect: (serverName: string, afterAuth?: boolean) => Promise<boolean>;
-  canAuthenticate: (serverName: string) => boolean;
-  authenticate: (serverName: string) => Promise<McpAuthResult>;
-  getConnectionStatus: (serverName: string) => "connected" | "idle" | "failed" | "needs-auth" | "disabled";
-  getFailureMessage?: (serverName: string) => string | null;
-  refreshCacheAfterReconnect: (serverName: string) => ServerCacheEntry | null;
-}
-
-export interface McpPanelResult {
-  changes: Map<string, true | string[] | false>;
-  cancelled: boolean;
-}
-
-/**
- * Get server prefix based on tool prefix mode.
- */
-export function getServerPrefix(
-  serverName: string,
-  mode: ToolPrefix
-): string {
-  if (mode === "none") return "";
-  if (mode === "short") {
-    let short = serverName.replace(/-?mcp$/i, "").replace(/-/g, "_");
-    if (!short) short = "mcp";
-    return short;
-  }
-  if (mode === "mcp") return `mcp__${serverName.replace(/-/g, "_")}`;
-  return serverName.replace(/-/g, "_");
-}
-
-/**
- * Format a tool name with server prefix.
- */
-export function formatToolName(
-  toolName: string,
-  serverName: string,
-  prefix: ToolPrefix
-): string {
-  const p = getServerPrefix(serverName, prefix);
-  const sanitized = toolName.replace(/\./g, "_");
-  return p ? `${p}_${sanitized}` : sanitized;
-}
-
-export function resolveToolPrefix(
-  definition?: Pick<ServerEntry, "toolPrefix">,
-  globalPrefix?: ToolPrefix,
-): ToolPrefix {
-  return definition?.toolPrefix ?? globalPrefix ?? "server";
-}
-
-export function sanitizePromptName(name: string): string {
-  const cleaned = name.replace(/[^A-Za-z0-9_-]+/g, "_").replace(/^[_-]+|[_-]+$/g, "");
-  if (!cleaned) return "prompt";
-  return /^[0-9]/.test(cleaned) ? `_${cleaned}` : cleaned;
-}
-
-export function formatPromptCommandName(
-  promptName: string,
-  serverName: string,
-  prefix: ToolPrefix,
-): string {
-  const serverPart = getServerPrefix(serverName, prefix) || serverName.replace(/-/g, "_") || "server";
-  return `mcp__${serverPart}__${sanitizePromptName(promptName)}`;
-}
-
-function normalizeToolName(value: string): string {
-  return value.replace(/-/g, "_");
-}
-
-export function getToolNameCandidates(toolName: string, serverName: string, prefix: ToolPrefix): Set<string> {
-  return new Set<string>([
-    normalizeToolName(toolName),
-    normalizeToolName(formatToolName(toolName, serverName, prefix)),
-    normalizeToolName(formatToolName(toolName, serverName, "server")),
-    normalizeToolName(formatToolName(toolName, serverName, "short")),
-    normalizeToolName(formatToolName(toolName, serverName, "mcp")),
-  ]);
-}
-
-function globToRegExp(pattern: string): RegExp {
-  const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*").replace(/\?/g, ".");
-  return new RegExp(`^${escaped}$`);
-}
-
-export function matchesToolPattern(candidates: Set<string>, patterns?: unknown): boolean {
-  if (!Array.isArray(patterns) || patterns.length === 0) return false;
-
-  for (const pattern of patterns) {
-    if (typeof pattern !== "string") continue;
-    const normalized = normalizeToolName(pattern);
-    if (!normalized.includes("*") && !normalized.includes("?") && candidates.has(normalized)) {
-      return true;
-    }
-    if ((normalized.includes("*") || normalized.includes("?")) && [...candidates].some(candidate => globToRegExp(normalized).test(candidate))) {
-      return true;
-    }
-  }
-
-  return false;
-}
-
-export function isToolIncluded(
-  toolName: string,
-  serverName: string,
-  prefix: ToolPrefix,
-  includeTools?: unknown
-): boolean {
-  if (!Array.isArray(includeTools) || includeTools.length === 0) return true;
-  return matchesToolPattern(getToolNameCandidates(toolName, serverName, prefix), includeTools);
-}
-
-export function isToolExcluded(
-  toolName: string,
-  serverName: string,
-  prefix: ToolPrefix,
-  excludeTools?: unknown
-): boolean {
-  return matchesToolPattern(getToolNameCandidates(toolName, serverName, prefix), excludeTools);
-}
-
-export function isToolAllowed(
-  toolName: string,
-  serverName: string,
-  prefix: ToolPrefix,
-  includeTools?: unknown,
-  excludeTools?: unknown,
-): boolean {
-  return isToolIncluded(toolName, serverName, prefix, includeTools)
-    && !isToolExcluded(toolName, serverName, prefix, excludeTools);
-}