@geminixiang/mikan 1.0.0-beta.9 → 1.0.0-beta.91

package/dist/harness/mcp-result.js

@@ -0,0 +1,204 @@
+import { randomBytes } from "node:crypto";
+import { redactSecrets } from "./tools/secret-redaction.js";
+import { isRecord } from "../unknown-values.js";
+const SPILL_DIR = [".mikan", "mcp-output"];
+const NOTICE_RESERVE_BYTES = 640;
+const NOTICE_RESERVE_LINES = 4;
+const TOOL_OUTPUT_MAX_BYTES = 50 * 1024;
+const TOOL_OUTPUT_MAX_LINES = 2000;
+const RESULT_LIMITS = {
+    maxBytes: TOOL_OUTPUT_MAX_BYTES - NOTICE_RESERVE_BYTES,
+    maxLines: TOOL_OUTPUT_MAX_LINES - NOTICE_RESERVE_LINES,
+};
+const DIGEST_LEVELS = [
+    { stringChars: 200, arrayItems: 3, depth: 6 },
+    { stringChars: 80, arrayItems: 2, depth: 4 },
+    { stringChars: 40, arrayItems: 1, depth: 3 },
+    { stringChars: 16, arrayItems: 1, depth: 2 },
+];
+function isRawBlock(value) {
+    return isRecord(value);
+}
+function stringField(block, key) {
+    const value = block[key];
+    return typeof value === "string" ? value : undefined;
+}
+function describeResource(resource) {
+    const uri = stringField(resource, "uri") ?? "(no URI)";
+    const text = stringField(resource, "text");
+    if (text !== undefined)
+        return `[Resource: ${uri}]\n${text}`;
+    const blob = stringField(resource, "blob");
+    const mimeType = stringField(resource, "mimeType") ?? "unknown type";
+    const size = blob === undefined ? "no content" : `${Buffer.byteLength(blob, "base64")} bytes`;
+    return `[Resource: ${uri} (${mimeType}, ${size}, binary content omitted)]`;
+}
+function blockContent(block) {
+    const text = stringField(block, "text");
+    if (block.type === "text" && text !== undefined)
+        return { type: "text", text };
+    const data = stringField(block, "data");
+    const mimeType = stringField(block, "mimeType");
+    if (block.type === "image" && data !== undefined && mimeType !== undefined) {
+        return { type: "image", data, mimeType };
+    }
+    if (block.type === "resource" && isRawBlock(block.resource)) {
+        return { type: "text", text: describeResource(block.resource) };
+    }
+    if (block.type === "resource_link") {
+        const uri = stringField(block, "uri") ?? "(no URI)";
+        return { type: "text", text: `[Resource link: ${stringField(block, "name") ?? uri}] ${uri}` };
+    }
+    if (block.type === "audio") {
+        return { type: "text", text: `[Audio content omitted: ${mimeType ?? "audio/*"}]` };
+    }
+    return { type: "text", text: JSON.stringify(block) };
+}
+export function mcpResultContent(result) {
+    const blocks = (Array.isArray(result.content) ? result.content : [])
+        .filter(isRawBlock)
+        .map(blockContent);
+    if (blocks.length > 0)
+        return blocks;
+    if (result.structuredContent !== undefined && result.structuredContent !== null) {
+        return [{ type: "text", text: JSON.stringify(result.structuredContent) }];
+    }
+    return [{ type: "text", text: "(empty result)" }];
+}
+function parseJson(text) {
+    const trimmed = text.trimStart();
+    if (!trimmed.startsWith("{") && !trimmed.startsWith("["))
+        return undefined;
+    try {
+        return { value: JSON.parse(text) };
+    }
+    catch {
+        return undefined;
+    }
+}
+function digest(value, level, depth = 0) {
+    if (typeof value === "string") {
+        return value.length <= level.stringChars
+            ? value
+            : `${value.slice(0, level.stringChars)}…[+${value.length - level.stringChars} chars]`;
+    }
+    if (Array.isArray(value)) {
+        if (depth >= level.depth)
+            return `[…${value.length} items]`;
+        const kept = value.slice(0, level.arrayItems).map((item) => digest(item, level, depth + 1));
+        const hidden = value.length - kept.length;
+        return hidden > 0 ? [...kept, `…[+${hidden} more items]`] : kept;
+    }
+    if (isRawBlock(value)) {
+        if (depth >= level.depth)
+            return `{…${Object.keys(value).length} keys}`;
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, digest(item, level, depth + 1)]));
+    }
+    return value;
+}
+function fits(text, limits) {
+    return (Buffer.byteLength(text, "utf8") <= limits.maxBytes && text.split("\n").length <= limits.maxLines);
+}
+function sliceToBytes(text, maxBytes) {
+    const buffer = Buffer.from(text, "utf8");
+    if (buffer.length <= maxBytes)
+        return text;
+    let end = Math.max(0, maxBytes);
+    while (end > 0 && (buffer[end] & 0xc0) === 0x80)
+        end--;
+    return buffer.subarray(0, end).toString("utf8");
+}
+function headTruncate(text, limits) {
+    const kept = [];
+    let bytes = 0;
+    for (const line of text.split("\n").slice(0, limits.maxLines)) {
+        const lineBytes = Buffer.byteLength(line, "utf8") + (kept.length > 0 ? 1 : 0);
+        if (bytes + lineBytes > limits.maxBytes)
+            break;
+        kept.push(line);
+        bytes += lineBytes;
+    }
+    return kept.length === 0 ? sliceToBytes(text, limits.maxBytes) : kept.join("\n");
+}
+function formatSize(bytes) {
+    if (bytes < 1024)
+        return `${bytes}B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)}KB`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+}
+export function boundMcpText(text, limits) {
+    const parsed = parseJson(text);
+    if (!parsed) {
+        return fits(text, limits) ? { text } : { text: headTruncate(text, limits) };
+    }
+    const compact = JSON.stringify(parsed.value);
+    if (fits(compact, limits))
+        return { text: compact };
+    for (const level of DIGEST_LEVELS) {
+        const digested = JSON.stringify(digest(parsed.value, level));
+        if (fits(digested, limits))
+            return { text: digested, digest: true };
+    }
+    const smallest = JSON.stringify(digest(parsed.value, DIGEST_LEVELS.at(-1)));
+    return { text: sliceToBytes(smallest, limits.maxBytes), digest: true };
+}
+function compactMcpText(text) {
+    const parsed = parseJson(text);
+    return parsed ? JSON.stringify(parsed.value) : text;
+}
+function readableSpill(text) {
+    const parsed = parseJson(text);
+    return parsed
+        ? { text: JSON.stringify(parsed.value, null, 2), extension: "json" }
+        : { text, extension: "txt" };
+}
+async function spillFullResult(env, result, context) {
+    if (!env)
+        return undefined;
+    const { text, extension } = readableSpill(result);
+    const path = await env.joinPath([env.cwd, ...SPILL_DIR, `${randomBytes(8).toString("hex")}.${extension}`], context);
+    if (!path.ok)
+        return undefined;
+    const written = await env.writeFile(path.value, redactSecrets(text), context);
+    return written.ok ? path.value : undefined;
+}
+function truncationNotice(bounded, totalBytes, spillPath) {
+    const view = bounded.digest
+        ? `an abbreviated view of ${formatSize(totalBytes)}: long strings, arrays, and deep nesting are shortened; keys, counts, and pagination fields are kept`
+        : `the beginning of ${formatSize(totalBytes)}`;
+    const full = spillPath
+        ? `Full result: ${spillPath} — use read with offset/limit or grep to inspect it`
+        : "The full result could not be saved";
+    return `[MCP result truncated: showing ${view}. ${full}, or re-query with filters or smaller pages.]`;
+}
+function scriptResult(result) {
+    const copy = JSON.parse(JSON.stringify({
+        content: Array.isArray(result.content) ? result.content : [],
+        structuredContent: result.structuredContent ?? undefined,
+        isError: result.isError === true ? true : undefined,
+    }));
+    return copy;
+}
+export async function guardMcpToolResult(result, env, context) {
+    const structuredContent = scriptResult(result);
+    const blocks = mcpResultContent(result).map((block) => block.type === "text" ? Object.assign(block, { text: compactMcpText(block.text) }) : block);
+    const texts = blocks.filter((block) => block.type === "text");
+    const images = blocks.filter((block) => block.type === "image");
+    const combined = texts.map((block) => block.text).join("\n");
+    if (result.isError) {
+        const text = boundMcpText(combined, RESULT_LIMITS).text || "MCP tool call failed";
+        return { content: [{ type: "text", text }], isError: true, structuredContent };
+    }
+    if (fits(combined, RESULT_LIMITS))
+        return { content: blocks, details: undefined, structuredContent };
+    const bounded = boundMcpText(combined, RESULT_LIMITS);
+    const spillPath = await spillFullResult(env, combined, context);
+    const notice = truncationNotice(bounded, Buffer.byteLength(combined, "utf8"), spillPath);
+    return {
+        content: [{ type: "text", text: `${bounded.text}\n\n${notice}` }, ...images],
+        details: undefined,
+        structuredContent,
+    };
+}
+//# sourceMappingURL=mcp-result.js.map

package/dist/harness/mcp-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-result.js","sourceRoot":"","sources":["../../src/harness/mcp-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAkBhD,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC3C,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,aAAa,GAAkB;IACnC,QAAQ,EAAE,qBAAqB,GAAG,oBAAoB;IACtD,QAAQ,EAAE,qBAAqB,GAAG,oBAAoB;CACvD,CAAC;AAQF,MAAM,aAAa,GAA2B;IAC5C,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC7C,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC5C,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;IAC5C,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;CAC7C,CAAC;AAIF,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAAe,EAAE,GAAW;IAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB;IAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,cAAc,GAAG,MAAM,IAAI,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,cAAc,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC9F,OAAO,cAAc,GAAG,KAAK,QAAQ,KAAK,IAAI,4BAA4B,CAAC;AAC7E,CAAC;AAED,SAAS,YAAY,CAAC,KAAe;IACnC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,QAAQ,IAAI,SAAS,GAAG,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC,YAAY,CAAC,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAChF,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAkB,EAAE,KAAK,GAAG,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW;YACtC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,WAAW,SAAS,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,KAAK,CAAC,MAAM,SAAS,CAAC;QAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1C,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC;QACxE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAqB;IAC/C,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CACjG,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,GAAG,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAqB;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,KAAK,GAAG,SAAS,GAAG,MAAM,CAAC,QAAQ;YAAE,MAAM;QAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,KAAK,IAAI,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAqB;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM;QACX,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;QACpE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAA6B,EAC7B,MAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAC7B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC,EACzE,OAAO,CACR,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB,EACvB,UAAkB,EAClB,SAA6B;IAE7B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,0BAA0B,UAAU,CAAC,UAAU,CAAC,sGAAsG;QACxJ,CAAC,CAAC,oBAAoB,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS;QACpB,CAAC,CAAC,gBAAgB,SAAS,qDAAqD;QAChF,CAAC,CAAC,oCAAoC,CAAC;IACzC,OAAO,kCAAkC,IAAI,KAAK,IAAI,+CAA+C,CAAC;AACxG,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,IAAI,GAAc,IAAI,CAAC,KAAK,CAChC,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAC5D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;QACxD,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KACpD,CAAC,CACH,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAqB,EACrB,GAA6B,EAC7B,OAAgB;IAEhB,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3F,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,IAAI,sBAAsB,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACzF,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,OAAO,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;QAC5E,OAAO,EAAE,SAAS;QAClB,iBAAiB;KAClB,CAAC;AACJ,CAAC","sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport type { ImageContent, JsonValue, TextContent } from \"@earendil-works/pi-ai\";\nimport type { Context } from \"@earendil-works/chord\";\nimport type { ExecutionEnv } from \"@earendil-works/pi-durable/env\";\nimport type { MikanToolResult } from \"./types.js\";\nimport { redactSecrets } from \"./tools/secret-redaction.js\";\nimport { isRecord } from \"../unknown-values.js\";\n\nexport interface McpTextLimits {\n  maxBytes: number;\n  maxLines: number;\n}\n\nexport interface BoundedMcpText {\n  text: string;\n  digest?: true;\n}\n\nexport interface McpCallResult {\n  content?: unknown;\n  structuredContent?: unknown;\n  isError?: boolean;\n}\n\nconst SPILL_DIR = [\".mikan\", \"mcp-output\"];\nconst NOTICE_RESERVE_BYTES = 640;\nconst NOTICE_RESERVE_LINES = 4;\nconst TOOL_OUTPUT_MAX_BYTES = 50 * 1024;\nconst TOOL_OUTPUT_MAX_LINES = 2000;\nconst RESULT_LIMITS: McpTextLimits = {\n  maxBytes: TOOL_OUTPUT_MAX_BYTES - NOTICE_RESERVE_BYTES,\n  maxLines: TOOL_OUTPUT_MAX_LINES - NOTICE_RESERVE_LINES,\n};\n\ninterface DigestLevel {\n  stringChars: number;\n  arrayItems: number;\n  depth: number;\n}\n\nconst DIGEST_LEVELS: readonly DigestLevel[] = [\n  { stringChars: 200, arrayItems: 3, depth: 6 },\n  { stringChars: 80, arrayItems: 2, depth: 4 },\n  { stringChars: 40, arrayItems: 1, depth: 3 },\n  { stringChars: 16, arrayItems: 1, depth: 2 },\n];\n\ntype RawBlock = Record<string, unknown>;\n\nfunction isRawBlock(value: unknown): value is RawBlock {\n  return isRecord(value);\n}\n\nfunction stringField(block: RawBlock, key: string): string | undefined {\n  const value = block[key];\n  return typeof value === \"string\" ? value : undefined;\n}\n\nfunction describeResource(resource: RawBlock): string {\n  const uri = stringField(resource, \"uri\") ?? \"(no URI)\";\n  const text = stringField(resource, \"text\");\n  if (text !== undefined) return `[Resource: ${uri}]\\n${text}`;\n  const blob = stringField(resource, \"blob\");\n  const mimeType = stringField(resource, \"mimeType\") ?? \"unknown type\";\n  const size = blob === undefined ? \"no content\" : `${Buffer.byteLength(blob, \"base64\")} bytes`;\n  return `[Resource: ${uri} (${mimeType}, ${size}, binary content omitted)]`;\n}\n\nfunction blockContent(block: RawBlock): TextContent | ImageContent {\n  const text = stringField(block, \"text\");\n  if (block.type === \"text\" && text !== undefined) return { type: \"text\", text };\n  const data = stringField(block, \"data\");\n  const mimeType = stringField(block, \"mimeType\");\n  if (block.type === \"image\" && data !== undefined && mimeType !== undefined) {\n    return { type: \"image\", data, mimeType };\n  }\n  if (block.type === \"resource\" && isRawBlock(block.resource)) {\n    return { type: \"text\", text: describeResource(block.resource) };\n  }\n  if (block.type === \"resource_link\") {\n    const uri = stringField(block, \"uri\") ?? \"(no URI)\";\n    return { type: \"text\", text: `[Resource link: ${stringField(block, \"name\") ?? uri}] ${uri}` };\n  }\n  if (block.type === \"audio\") {\n    return { type: \"text\", text: `[Audio content omitted: ${mimeType ?? \"audio/*\"}]` };\n  }\n  return { type: \"text\", text: JSON.stringify(block) };\n}\n\nexport function mcpResultContent(result: McpCallResult): (TextContent | ImageContent)[] {\n  const blocks = (Array.isArray(result.content) ? result.content : [])\n    .filter(isRawBlock)\n    .map(blockContent);\n  if (blocks.length > 0) return blocks;\n  if (result.structuredContent !== undefined && result.structuredContent !== null) {\n    return [{ type: \"text\", text: JSON.stringify(result.structuredContent) }];\n  }\n  return [{ type: \"text\", text: \"(empty result)\" }];\n}\n\nfunction parseJson(text: string): { value: unknown } | undefined {\n  const trimmed = text.trimStart();\n  if (!trimmed.startsWith(\"{\") && !trimmed.startsWith(\"[\")) return undefined;\n  try {\n    return { value: JSON.parse(text) };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction digest(value: unknown, level: DigestLevel, depth = 0): unknown {\n  if (typeof value === \"string\") {\n    return value.length <= level.stringChars\n      ? value\n      : `${value.slice(0, level.stringChars)}…[+${value.length - level.stringChars} chars]`;\n  }\n  if (Array.isArray(value)) {\n    if (depth >= level.depth) return `[…${value.length} items]`;\n    const kept = value.slice(0, level.arrayItems).map((item) => digest(item, level, depth + 1));\n    const hidden = value.length - kept.length;\n    return hidden > 0 ? [...kept, `…[+${hidden} more items]`] : kept;\n  }\n  if (isRawBlock(value)) {\n    if (depth >= level.depth) return `{…${Object.keys(value).length} keys}`;\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, digest(item, level, depth + 1)]),\n    );\n  }\n  return value;\n}\n\nfunction fits(text: string, limits: McpTextLimits): boolean {\n  return (\n    Buffer.byteLength(text, \"utf8\") <= limits.maxBytes && text.split(\"\\n\").length <= limits.maxLines\n  );\n}\n\nfunction sliceToBytes(text: string, maxBytes: number): string {\n  const buffer = Buffer.from(text, \"utf8\");\n  if (buffer.length <= maxBytes) return text;\n  let end = Math.max(0, maxBytes);\n  while (end > 0 && (buffer[end]! & 0xc0) === 0x80) end--;\n  return buffer.subarray(0, end).toString(\"utf8\");\n}\n\nfunction headTruncate(text: string, limits: McpTextLimits): string {\n  const kept: string[] = [];\n  let bytes = 0;\n  for (const line of text.split(\"\\n\").slice(0, limits.maxLines)) {\n    const lineBytes = Buffer.byteLength(line, \"utf8\") + (kept.length > 0 ? 1 : 0);\n    if (bytes + lineBytes > limits.maxBytes) break;\n    kept.push(line);\n    bytes += lineBytes;\n  }\n  return kept.length === 0 ? sliceToBytes(text, limits.maxBytes) : kept.join(\"\\n\");\n}\n\nfunction formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes}B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)}KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;\n}\n\nexport function boundMcpText(text: string, limits: McpTextLimits): BoundedMcpText {\n  const parsed = parseJson(text);\n  if (!parsed) {\n    return fits(text, limits) ? { text } : { text: headTruncate(text, limits) };\n  }\n  const compact = JSON.stringify(parsed.value);\n  if (fits(compact, limits)) return { text: compact };\n  for (const level of DIGEST_LEVELS) {\n    const digested = JSON.stringify(digest(parsed.value, level));\n    if (fits(digested, limits)) return { text: digested, digest: true };\n  }\n  const smallest = JSON.stringify(digest(parsed.value, DIGEST_LEVELS.at(-1)!));\n  return { text: sliceToBytes(smallest, limits.maxBytes), digest: true };\n}\n\nfunction compactMcpText(text: string): string {\n  const parsed = parseJson(text);\n  return parsed ? JSON.stringify(parsed.value) : text;\n}\n\nfunction readableSpill(text: string): { text: string; extension: \"json\" | \"txt\" } {\n  const parsed = parseJson(text);\n  return parsed\n    ? { text: JSON.stringify(parsed.value, null, 2), extension: \"json\" }\n    : { text, extension: \"txt\" };\n}\n\nasync function spillFullResult(\n  env: ExecutionEnv | undefined,\n  result: string,\n  context: Context,\n): Promise<string | undefined> {\n  if (!env) return undefined;\n  const { text, extension } = readableSpill(result);\n  const path = await env.joinPath(\n    [env.cwd, ...SPILL_DIR, `${randomBytes(8).toString(\"hex\")}.${extension}`],\n    context,\n  );\n  if (!path.ok) return undefined;\n  const written = await env.writeFile(path.value, redactSecrets(text), context);\n  return written.ok ? path.value : undefined;\n}\n\nfunction truncationNotice(\n  bounded: BoundedMcpText,\n  totalBytes: number,\n  spillPath: string | undefined,\n): string {\n  const view = bounded.digest\n    ? `an abbreviated view of ${formatSize(totalBytes)}: long strings, arrays, and deep nesting are shortened; keys, counts, and pagination fields are kept`\n    : `the beginning of ${formatSize(totalBytes)}`;\n  const full = spillPath\n    ? `Full result: ${spillPath} — use read with offset/limit or grep to inspect it`\n    : \"The full result could not be saved\";\n  return `[MCP result truncated: showing ${view}. ${full}, or re-query with filters or smaller pages.]`;\n}\n\nfunction scriptResult(result: McpCallResult): JsonValue {\n  const copy: JsonValue = JSON.parse(\n    JSON.stringify({\n      content: Array.isArray(result.content) ? result.content : [],\n      structuredContent: result.structuredContent ?? undefined,\n      isError: result.isError === true ? true : undefined,\n    }),\n  );\n  return copy;\n}\n\nexport async function guardMcpToolResult(\n  result: McpCallResult,\n  env: ExecutionEnv | undefined,\n  context: Context,\n): Promise<MikanToolResult> {\n  const structuredContent = scriptResult(result);\n  const blocks = mcpResultContent(result).map((block) =>\n    block.type === \"text\" ? Object.assign(block, { text: compactMcpText(block.text) }) : block,\n  );\n  const texts = blocks.filter((block): block is TextContent => block.type === \"text\");\n  const images = blocks.filter((block): block is ImageContent => block.type === \"image\");\n  const combined = texts.map((block) => block.text).join(\"\\n\");\n  if (result.isError) {\n    const text = boundMcpText(combined, RESULT_LIMITS).text || \"MCP tool call failed\";\n    return { content: [{ type: \"text\", text }], isError: true, structuredContent };\n  }\n  if (fits(combined, RESULT_LIMITS))\n    return { content: blocks, details: undefined, structuredContent };\n  const bounded = boundMcpText(combined, RESULT_LIMITS);\n  const spillPath = await spillFullResult(env, combined, context);\n  const notice = truncationNotice(bounded, Buffer.byteLength(combined, \"utf8\"), spillPath);\n  return {\n    content: [{ type: \"text\", text: `${bounded.text}\\n\\n${notice}` }, ...images],\n    details: undefined,\n    structuredContent,\n  };\n}\n"]}

package/dist/harness/mcp.d.ts

@@ -0,0 +1,17 @@
+import type { McpPreset, McpServerConfig, McpServerSummary, McpToolsResult } from "./types.js";
+export declare function isValidMcpServerName(name: string): boolean;
+export type StandardMcpParseResult = {
+    servers: Record<string, McpServerConfig>;
+    error?: undefined;
+} | {
+    servers?: undefined;
+    error: string;
+};
+export declare function parseStandardMcpServers(text: string): StandardMcpParseResult;
+export declare function redactMcpUrl(url: string): string;
+export declare function listMcpPresets(): readonly McpPreset[];
+export declare function findMcpPreset(id: string): McpPreset | undefined;
+export declare function materializeMcpPreset(preset: McpPreset, values: Record<string, string>): McpServerConfig;
+export declare function renderMcpServersSection(servers: readonly McpServerSummary[]): string;
+export declare function loadMcpTools(servers: Record<string, McpServerConfig>, signal?: AbortSignal): Promise<McpToolsResult>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/harness/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/harness/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,SAAS,EACT,eAAe,EACf,gBAAgB,EAEhB,cAAc,EACf,MAAM,YAAY,CAAC;AAsBpB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAE,GAC/D;IAAE,OAAO,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,CA0C5E;AAMD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOhD;AAmCD,wBAAgB,cAAc,IAAI,SAAS,SAAS,EAAE,CAErD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,eAAe,CA2BjB;AA2JD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CA0BpF;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACxC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CA+CzB"}

package/dist/harness/mcp.js

@@ -0,0 +1,339 @@
+import { McpClient, McpHttpError, StdioTransport, StreamableHttpTransport, } from "@earendil-works/pi-mcp";
+import { guardMcpToolResult } from "./mcp-result.js";
+import { tagHarnessTool } from "./tools/pi-tools.js";
+import { TOOL_SEARCH_TOOL } from "./tools/tool-search.js";
+import { LABEL_PARAMETER } from "./tools/host-fn-tool.js";
+import { Type } from "typebox";
+import { readStandardEnv } from "../env-manifest.js";
+import * as log from "../log.js";
+import { errorMessage, isRecord } from "../unknown-values.js";
+const SERVER_NAME_RE = /^[a-zA-Z][a-zA-Z0-9_-]{0,63}$/;
+export function isValidMcpServerName(name) {
+    return SERVER_NAME_RE.test(name);
+}
+export function parseStandardMcpServers(text) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        return { error: `not valid JSON: ${errorMessage(err)}` };
+    }
+    if (!isRecord(parsed))
+        return { error: "expected a JSON object at the top level" };
+    const map = "mcpServers" in parsed ? parsed.mcpServers : parsed;
+    if (!isRecord(map))
+        return { error: '"mcpServers" must be an object keyed by server name' };
+    if (Object.keys(map).length === 0)
+        return { error: "no servers found in the pasted JSON" };
+    const servers = {};
+    for (const [name, entry] of Object.entries(map)) {
+        if (!isValidMcpServerName(name)) {
+            return {
+                error: `invalid server name "${name}" (letters, digits, '_' or '-', starting with a letter)`,
+            };
+        }
+        if (!isRecord(entry))
+            return { error: `"${name}" must be an object` };
+        const hasCommand = typeof entry.command === "string" && entry.command.trim() !== "";
+        const hasUrl = typeof entry.url === "string";
+        if (hasUrl && !URL.canParse(entry.url)) {
+            return { error: `"${name}": url is not a valid URL` };
+        }
+        if (hasCommand === hasUrl) {
+            const detail = hasCommand
+                ? "set only one of command / url"
+                : "set either command (stdio) or url (HTTP)";
+            return { error: `"${name}": ${detail}` };
+        }
+        servers[name] = {
+            command: hasCommand ? entry.command : undefined,
+            args: Array.isArray(entry.args) ? entry.args.map(String) : undefined,
+            env: isRecord(entry.env) ? stringValues(entry.env) : undefined,
+            url: hasUrl ? entry.url : undefined,
+            headers: isRecord(entry.headers) ? stringValues(entry.headers) : undefined,
+            disabled: entry.disabled === true ? true : undefined,
+            exposure: entry.exposure === "deferred" ? "deferred" : undefined,
+            description: typeof entry.description === "string" ? entry.description : undefined,
+        };
+    }
+    return { servers };
+}
+function stringValues(map) {
+    return Object.fromEntries(Object.entries(map).map(([k, v]) => [k, String(v)]));
+}
+export function redactMcpUrl(url) {
+    if (!URL.canParse(url))
+        return url.replace(/([?&][^=&]+=)[^&]*/g, "$1<redacted>");
+    const parsed = new URL(url);
+    if (!parsed.search)
+        return url;
+    const keys = new Set(parsed.searchParams.keys());
+    for (const key of keys)
+        parsed.searchParams.set(key, "<redacted>");
+    return parsed.toString().replace(/%3Credacted%3E/g, "<redacted>");
+}
+const MCP_PRESETS = [
+    {
+        id: "metabase",
+        name: "Metabase",
+        description: "Query and explore analytics from your Metabase instance.",
+        category: "Analytics",
+        serverName: "metabase",
+        sourceUrl: "https://github.com/metabase/metabase",
+        setupUrl: "https://www.metabase.com/docs/latest/ai/mcp",
+        server: { url: "https://{your-metabase.example.com}/api/metabase-mcp" },
+        credentials: [
+            {
+                key: "url",
+                label: "Metabase MCP server URL",
+                description: "The full endpoint, for example https://metabase.example.com/api/metabase-mcp.",
+                target: "url",
+                required: true,
+                secret: false,
+            },
+            {
+                key: "x-api-key",
+                label: "Metabase API key",
+                description: "An API key whose Metabase permissions match the access you want mikan to have.",
+                target: "header",
+                required: true,
+                secret: true,
+            },
+        ],
+    },
+];
+export function listMcpPresets() {
+    return MCP_PRESETS;
+}
+export function findMcpPreset(id) {
+    return MCP_PRESETS.find((preset) => preset.id === id);
+}
+export function materializeMcpPreset(preset, values) {
+    const env = {};
+    const headers = {};
+    let url = preset.server.url;
+    for (const credential of preset.credentials) {
+        const value = values[credential.key]?.trim() ?? "";
+        if (!value) {
+            if (credential.required)
+                throw new Error(`${credential.label} is required`);
+            continue;
+        }
+        const formatted = `${credential.valuePrefix ?? ""}${value}`;
+        if (credential.target === "env")
+            env[credential.key] = formatted;
+        else if (credential.target === "header")
+            headers[credential.key] = formatted;
+        else {
+            if (!URL.canParse(formatted) || !/^https?:/.test(new URL(formatted).protocol)) {
+                throw new Error(`${credential.label} must be a valid HTTP URL`);
+            }
+            url = formatted;
+        }
+    }
+    return {
+        ...preset.server,
+        args: preset.server.args ? [...preset.server.args] : undefined,
+        url,
+        ...(Object.keys(env).length > 0 ? { env } : {}),
+        ...(Object.keys(headers).length > 0 ? { headers } : {}),
+    };
+}
+const CONNECT_TIMEOUT_MS = 15_000;
+const CALL_TIMEOUT_MS = 120_000;
+const INHERITED_ENV_KEYS = ["HOME", "LOGNAME", "PATH", "SHELL", "TERM", "USER"];
+function inheritedEnvironment() {
+    return Object.fromEntries(INHERITED_ENV_KEYS.flatMap((key) => {
+        const value = readStandardEnv(key);
+        return value === undefined || value.startsWith("()") ? [] : [[key, value]];
+    }));
+}
+const ERROR_BODY_CHARS = 300;
+function describeLoadError(error) {
+    const message = errorMessage(error);
+    if (!(error instanceof McpHttpError))
+        return message;
+    const body = error.body.trim().slice(0, ERROR_BODY_CHARS);
+    if (!body || message.includes(body.slice(0, 40)))
+        return message;
+    return `${message} (HTTP ${error.status}): ${body}`;
+}
+function untilAborted(work, signal) {
+    if (!signal)
+        return work;
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+        work.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+    });
+}
+function buildTransport(name, config) {
+    if (config.command && config.url) {
+        throw new Error(`server "${name}" sets both command and url; pick one transport`);
+    }
+    if (config.command) {
+        return new StdioTransport({
+            command: config.command,
+            args: config.args ?? [],
+            env: { ...inheritedEnvironment(), ...config.env },
+            inheritEnv: false,
+            stderr: "pipe",
+        });
+    }
+    if (config.url) {
+        return new StreamableHttpTransport({ url: config.url, headers: config.headers });
+    }
+    throw new Error(`server "${name}" sets neither command nor url`);
+}
+async function connectServer(name, config, signal) {
+    const exposure = config.exposure ?? "codemode";
+    const client = new McpClient({
+        name: "mikan",
+        version: "1.0.0",
+        requestTimeoutMs: CONNECT_TIMEOUT_MS,
+    });
+    try {
+        await untilAborted(client.connect(buildTransport(name, config)), signal);
+        const listed = await client.listTools({ timeoutMs: CONNECT_TIMEOUT_MS, signal });
+        const tools = listed.map((mcpTool) => {
+            const ownsLabel = Object.hasOwn(schemaProperties(mcpTool.inputSchema), "label");
+            return tagHarnessTool({
+                name: `mcp__${name}__${mcpTool.name}`,
+                exposure,
+                namespace: name,
+                description: mcpTool.description ?? `${mcpTool.name} (MCP server "${name}")`,
+                parameters: ownsLabel ? mcpTool.inputSchema : withLabelParameter(mcpTool.inputSchema),
+                outputSchema: mcpResultSchema(mcpTool.outputSchema),
+                execute: async (params, api, context) => {
+                    const result = await client.callTool(mcpTool.name, ownsLabel ? params : withoutLabel(params), { timeoutMs: CALL_TIMEOUT_MS, signal: context.abortSignal });
+                    return guardMcpToolResult(result, api.env, context);
+                },
+            });
+        });
+        const instructions = client.instructions?.trim();
+        return { client, tools, instructions: instructions || undefined };
+    }
+    catch (error) {
+        try {
+            await client.close();
+        }
+        catch (closeError) {
+            log.logWarning("MCP client rollback failed", String(closeError));
+        }
+        throw error;
+    }
+}
+function schemaProperties(schema) {
+    return isRecord(schema.properties) ? schema.properties : {};
+}
+function withLabelParameter(schema) {
+    const required = Array.isArray(schema.required) ? schema.required : [];
+    return {
+        ...schema,
+        type: "object",
+        properties: { label: LABEL_PARAMETER, ...schemaProperties(schema) },
+        required: ["label", ...required],
+    };
+}
+function withoutLabel(params) {
+    if (!isRecord(params))
+        return {};
+    const { label: _label, ...rest } = params;
+    return rest;
+}
+function mcpResultSchema(structuredContent) {
+    return Type.Object({
+        content: Type.Array(Type.Object({})),
+        ...(structuredContent
+            ? { structuredContent: Type.Optional(Type.Unsafe(structuredContent)) }
+            : {}),
+        isError: Type.Optional(Type.Boolean()),
+        _meta: Type.Optional(Type.Object({})),
+    });
+}
+const MAX_SERVER_SUMMARY_CHARS = 250;
+const MAX_SERVERS_SECTION_CHARS = 4096;
+function serverReach(server) {
+    return server.exposure === "deferred" ? TOOL_SEARCH_TOOL : "codemode";
+}
+function serverSummary(server) {
+    const text = server.description?.trim() || server.instructions?.trim() || "";
+    return (text.split("\n", 1)[0] ?? "").trim();
+}
+function omittedServers(count) {
+    return count > 0 ? [`- … ${count} more servers; find their tools with searchTools()`] : [];
+}
+function truncateSummary(text, max) {
+    if (text.length <= max)
+        return text;
+    return max <= 1 ? "" : `${text.slice(0, max - 1).trimEnd()}…`;
+}
+export function renderMcpServersSection(servers) {
+    if (servers.length === 0)
+        return "";
+    const listed = servers.toSorted((a, b) => a.name.localeCompare(b.name));
+    const reaches = new Set(listed.map(serverReach));
+    let intro = "MCP servers whose tools are not declared to you.";
+    if (reaches.has("codemode"))
+        intro += " Call the tools of `codemode` servers from codemode scripts.";
+    if (reaches.has(TOOL_SEARCH_TOOL))
+        intro += " Load the tools of `tool_search` servers with `tool_search`.";
+    const heads = listed.map((server) => `- mcp__${server.name} (${serverReach(server)})`);
+    const size = (kept) => [intro, ...heads.slice(0, kept), ...omittedServers(listed.length - kept)].join("\n").length;
+    let kept = listed.length;
+    while (kept > 0 && size(kept) > MAX_SERVERS_SECTION_CHARS)
+        kept--;
+    const perServer = kept === 0
+        ? 0
+        : Math.min(MAX_SERVER_SUMMARY_CHARS, Math.floor((MAX_SERVERS_SECTION_CHARS - size(kept)) / kept) - 2);
+    const lines = listed.slice(0, kept).map((server, index) => {
+        const summary = perServer > 0 ? truncateSummary(serverSummary(server), perServer) : "";
+        return summary ? `${heads[index]}: ${summary}` : heads[index];
+    });
+    return [intro, ...lines, ...omittedServers(listed.length - kept)].join("\n");
+}
+export async function loadMcpTools(servers, signal) {
+    const clients = [];
+    const tools = [];
+    const errors = [];
+    const summaries = [];
+    const entries = Object.entries(servers).filter(([, config]) => !config.disabled);
+    const results = await Promise.allSettled(entries.map(async ([name, config]) => {
+        if (!isValidMcpServerName(name)) {
+            throw new Error(`server name "${name}" is invalid: use letters, digits, "_" or "-", starting with a letter`);
+        }
+        return { name, ...(await connectServer(name, config, signal)) };
+    }));
+    for (const [index, result] of results.entries()) {
+        const name = entries[index][0];
+        if (result.status === "rejected") {
+            errors.push({ server: name, error: describeLoadError(result.reason) });
+            continue;
+        }
+        clients.push(result.value.client);
+        tools.push(...result.value.tools);
+        const config = entries[index][1];
+        summaries.push({
+            name,
+            exposure: config.exposure ?? "codemode",
+            description: config.description,
+            instructions: result.value.instructions,
+        });
+    }
+    return {
+        tools,
+        errors,
+        servers: summaries,
+        dispose: async () => {
+            const closes = await Promise.allSettled(clients.map((client) => client.close()));
+            for (const close of closes) {
+                if (close.status === "rejected") {
+                    log.logWarning("MCP client close failed", String(close.reason));
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=mcp.js.map