@hachej/boring-mcp 0.1.84 → 0.1.85

package/dist/server/index.d.ts

@@ -169,6 +169,23 @@ interface CreateBoringMcpAgentToolsOptions {
 }
 declare function createBoringMcpAgentTools(options: CreateBoringMcpAgentToolsOptions): AgentTool[];
 
+interface CreateBoringMcpServerPluginOptions {
+    systemPrompt?: string;
+    registry?: McpSourceRegistry;
+    transport?: McpTransportClient;
+    resolveActor?: BoringMcpAgentToolActorResolver;
+    templates?: readonly McpProviderTemplate[];
+    maxReadonlyInputBytes?: number;
+    audit?: McpReadonlyCallAuditSink;
+    hardening?: McpProviderHardeningOptions;
+}
+declare function createBoringMcpServerPlugin(options?: CreateBoringMcpServerPluginOptions): {
+    id: string;
+    label: string;
+    systemPrompt: string;
+    agentTools: _hachej_boring_workspace.AgentTool[] | undefined;
+};
+
 type ManagedConnectorSecretStorage = "server-env" | "server-vault";
 type ManagedConnectorRiskStatus = "approved" | "owner-accepted-gap";
 interface ManagedConnectorAcceptedGap {
@@ -367,6 +384,69 @@ interface RegisterBoringMcpRoutesOptions {
     whenDisabled?: 'skip' | 'serve-503';
 }
 declare function registerBoringMcpRoutes(app: BoringMcpAppServer, options: RegisterBoringMcpRoutesOptions): void;
+/**
+ * Full per-app configuration for {@link createBoringMcpAppBindings}. Extends the
+ * connector/secret binding config with the two remaining knobs a host used to
+ * hardcode: how routes behave while disabled, and the agent system prompt.
+ */
+interface BoringMcpAppBindingsConfig extends BoringMcpBindingConfig {
+    /**
+     * Behavior when boring-mcp is disabled for this deployment. Forwarded to
+     * {@link registerBoringMcpRoutes}. Defaults to `skip`.
+     */
+    whenDisabled?: 'skip' | 'serve-503';
+    /** System prompt applied to the boring-mcp server plugin this host contributes. */
+    systemPrompt?: string;
+    /**
+     * Default trusted-workspace resolver applied to every route registration for
+     * this deployment (e.g. D1 host request scoping). A per-call
+     * `resolveTrustedWorkspaceId` passed to `registerRoutes` overrides it.
+     */
+    resolveTrustedWorkspaceId?: (request: FastifyRequest) => string | undefined;
+}
+interface BoringMcpAppBindingsAgentToolsOptions {
+    env?: NodeJS.ProcessEnv;
+    transport?: McpTransportClient;
+}
+interface BoringMcpAppBindingsRoutesOptions {
+    provider?: ManagedConnectorProvider;
+    env?: NodeJS.ProcessEnv;
+    transport?: McpTransportClient;
+    resolveTrustedWorkspaceId?: (request: FastifyRequest) => string | undefined;
+}
+/**
+ * The complete set of per-app boring-mcp bindings, each pre-bound to a single
+ * {@link BoringMcpAppBindingsConfig}. Host apps expose these members instead of
+ * copying the ~110 lines of forwarding glue they used to hand-write.
+ */
+interface BoringMcpAppBindings {
+    readConfig(env?: NodeJS.ProcessEnv): BoringMcpServerRuntimeConfig;
+    createSecretResolver(env?: NodeJS.ProcessEnv): ManagedConnectorSecretResolver;
+    createConnectorAdapter(options: {
+        registry: ManagedConnectorSourceRegistry;
+        env?: NodeJS.ProcessEnv;
+        provider?: ManagedConnectorProvider;
+    }): ManagedConnectorAdapter;
+    agentSessionNamespace(ctx: {
+        workspaceId: string;
+        request?: FastifyRequest;
+        userId?: string;
+    }): string;
+    createMcpSourceRegistry(app: Pick<BoringMcpAppServer, 'userStore' | 'config'>, actorScope: McpActor): ManagedConnectorSourceRegistry;
+    createAgentTools(app: Pick<BoringMcpAppServer, 'userStore' | 'config'>, actor: McpActor, options?: BoringMcpAppBindingsAgentToolsOptions): AgentTool[];
+    createAgentToolsForRequest(app: Pick<BoringMcpAppServer, 'userStore' | 'config'>, ctx: {
+        workspaceId: string;
+        authSubject?: string;
+    }, options?: BoringMcpAppBindingsAgentToolsOptions): AgentTool[];
+    registerRoutes(app: BoringMcpAppServer, options?: BoringMcpAppBindingsRoutesOptions): void;
+    createServerPlugins(env?: NodeJS.ProcessEnv): ReturnType<typeof createBoringMcpServerPlugin>[];
+}
+/**
+ * Build the full set of boring-mcp server bindings for a host app from a single
+ * config object. Every member is pre-bound to `config`, so a host wires MCP with
+ * ~15 lines of configuration instead of re-copying the forwarding glue.
+ */
+declare function createBoringMcpAppBindings(config: BoringMcpAppBindingsConfig): BoringMcpAppBindings;
 
 interface ComposioMcpSession {
     id: string;
@@ -422,22 +502,6 @@ declare function requireActorOwnedMcpSource(registry: McpSourceRegistry, actor:
 declare function assertMcpPublicPayloadSecretFree(value: unknown): void;
 declare function createMcpSourceStatusPayload(source: McpSource): McpSourceStatusPayload;
 
-interface CreateBoringMcpServerPluginOptions {
-    systemPrompt?: string;
-    registry?: McpSourceRegistry;
-    transport?: McpTransportClient;
-    resolveActor?: BoringMcpAgentToolActorResolver;
-    templates?: readonly McpProviderTemplate[];
-    maxReadonlyInputBytes?: number;
-    audit?: McpReadonlyCallAuditSink;
-    hardening?: McpProviderHardeningOptions;
-}
-declare function createBoringMcpServerPlugin(options?: CreateBoringMcpServerPluginOptions): {
-    id: string;
-    label: string;
-    systemPrompt: string;
-    agentTools: _hachej_boring_workspace.AgentTool[] | undefined;
-};
 declare const _default: {
     id: string;
     label: string;
@@ -445,4 +509,4 @@ declare const _default: {
     agentTools: _hachej_boring_workspace.AgentTool[] | undefined;
 };
 
-export { BORING_MCP_AGENT_BRIDGE_TOOL_DEFINITIONS, BORING_MCP_AGENT_BRIDGE_TOOL_NAMES, type BoringMcpAgentBridgeContext, type BoringMcpAgentBridgeRegistry, type BoringMcpAgentBridgeTool, type BoringMcpAgentBridgeToolDefinition, type BoringMcpAgentBridgeToolName, type BoringMcpAgentToolActorResolver, type BoringMcpAppServer, type BoringMcpBindingConfig, type BoringMcpLaunchGateInput, type BoringMcpLaunchGateIssue, type BoringMcpLaunchGateIssueCode, type BoringMcpLaunchGateResult, type BoringMcpReadonlyCallOptions, type BoringMcpReadonlyCaller, type BoringMcpServerRuntimeConfig, type BoringMcpSourceHandlers, type BoringMcpSourceHandlersOptions, type BoringMcpToolCatalog, type BoringMcpToolCatalogOptions, type ComposioManagedConnectorProviderOptions, type ComposioMcpSession, type CreateBoringMcpAgentToolsOptions, type CreateBoringMcpAppAgentToolsOptions, type CreateBoringMcpServerPluginOptions, type CreateManagedConnectorAdapterOptions, type CreateManagedConnectorSecretResolverOptions, InMemoryMcpRateBudgetGate, type InMemoryMcpRateBudgetGateOptions, InMemoryMcpToolCatalogCache, type ManagedConnectorAcceptedGap, type ManagedConnectorAdapter, type ManagedConnectorAdapterOptions, type ManagedConnectorConfig, type ManagedConnectorPreflightCheck, type ManagedConnectorPreflightEvidence, type ManagedConnectorPreflightResult, type ManagedConnectorProbeResponse, type ManagedConnectorProvider, type ManagedConnectorRiskStatus, type ManagedConnectorSecret, type ManagedConnectorSecretResolver, type ManagedConnectorSecretStorage, type ManagedConnectorSourceRegistry, type ManagedConnectorStartInput, type ManagedConnectorStartResponse, type ManagedConnectorStartResult, type ManagedConnectorStatusResponse, type ManagedConnectorVendorRiskEvidence, McpActor, McpConnectorRef, McpDiscoveredResource, McpDiscoveredTool, McpDoctorResult, McpErrorCode, McpProbeResult, type McpProviderCallContext, type McpProviderHardeningOptions, McpProviderId, type McpProviderOperation, type McpProviderRateBudgetGate, McpProviderTemplate, McpReadonlyCallAuditEvent, type McpReadonlyCallAuditSink, McpReadonlyCallInput, McpReadonlyCallResult, type McpSdkEndpoint, type McpSdkEndpointResolverInput, type McpSdkTransportOptions, McpSource, McpSourceDto, McpSourceRegistry, McpSourceStatus, McpSourceStatusPayload, type McpToolCatalogCache, McpToolCatalogEntry, type McpToolDescribeInput, McpToolDescribeResult, McpToolSearchResult, type McpToolsSearchInput, McpTransportClient, type RegisterBoringMcpRoutesOptions, type ResolveComposioMcpSessionInput, assertManagedConnectorPreflight, assertMcpPublicPayloadSecretFree, boringMcpAgentSessionNamespace, createBoringMcpAgentBridgeRegistry, createBoringMcpAgentTools, createBoringMcpAppAgentTools, createBoringMcpAppAgentToolsForRequest, createBoringMcpManagedConnectorAdapter, createBoringMcpReadonlyCaller, createBoringMcpServerPlugin, createBoringMcpSourceHandlers, createBoringMcpToolCatalog, createComposioManagedConnectorProvider, createComposioMcpTransport, createHardenedMcpTransport, createLegacyManagedConnectorSourceId, createManagedConnectorAdapter, createManagedConnectorSecretResolver, createManagedConnectorSourceId, createMcpSchemaHash, createMcpSdkStreamableHttpTransport, createMcpSourceStatusPayload, createUserSettingsMcpSourceRegistry, _default as default, evaluateBoringMcpLaunchGate, isActorOwnedMcpSource, listBoringMcpAgentBridgeTools, normalizeMcpCatalogTool, readBoringMcpServerConfig, registerBoringMcpRoutes, requireActorOwnedMcpSource, resolveComposioMcpSession, validateManagedConnectorPreflight, validateMcpSourceId, verifyMcpDisconnectResult };
+export { BORING_MCP_AGENT_BRIDGE_TOOL_DEFINITIONS, BORING_MCP_AGENT_BRIDGE_TOOL_NAMES, type BoringMcpAgentBridgeContext, type BoringMcpAgentBridgeRegistry, type BoringMcpAgentBridgeTool, type BoringMcpAgentBridgeToolDefinition, type BoringMcpAgentBridgeToolName, type BoringMcpAgentToolActorResolver, type BoringMcpAppBindings, type BoringMcpAppBindingsAgentToolsOptions, type BoringMcpAppBindingsConfig, type BoringMcpAppBindingsRoutesOptions, type BoringMcpAppServer, type BoringMcpBindingConfig, type BoringMcpLaunchGateInput, type BoringMcpLaunchGateIssue, type BoringMcpLaunchGateIssueCode, type BoringMcpLaunchGateResult, type BoringMcpReadonlyCallOptions, type BoringMcpReadonlyCaller, type BoringMcpServerRuntimeConfig, type BoringMcpSourceHandlers, type BoringMcpSourceHandlersOptions, type BoringMcpToolCatalog, type BoringMcpToolCatalogOptions, type ComposioManagedConnectorProviderOptions, type ComposioMcpSession, type CreateBoringMcpAgentToolsOptions, type CreateBoringMcpAppAgentToolsOptions, type CreateBoringMcpServerPluginOptions, type CreateManagedConnectorAdapterOptions, type CreateManagedConnectorSecretResolverOptions, InMemoryMcpRateBudgetGate, type InMemoryMcpRateBudgetGateOptions, InMemoryMcpToolCatalogCache, type ManagedConnectorAcceptedGap, type ManagedConnectorAdapter, type ManagedConnectorAdapterOptions, type ManagedConnectorConfig, type ManagedConnectorPreflightCheck, type ManagedConnectorPreflightEvidence, type ManagedConnectorPreflightResult, type ManagedConnectorProbeResponse, type ManagedConnectorProvider, type ManagedConnectorRiskStatus, type ManagedConnectorSecret, type ManagedConnectorSecretResolver, type ManagedConnectorSecretStorage, type ManagedConnectorSourceRegistry, type ManagedConnectorStartInput, type ManagedConnectorStartResponse, type ManagedConnectorStartResult, type ManagedConnectorStatusResponse, type ManagedConnectorVendorRiskEvidence, McpActor, McpConnectorRef, McpDiscoveredResource, McpDiscoveredTool, McpDoctorResult, McpErrorCode, McpProbeResult, type McpProviderCallContext, type McpProviderHardeningOptions, McpProviderId, type McpProviderOperation, type McpProviderRateBudgetGate, McpProviderTemplate, McpReadonlyCallAuditEvent, type McpReadonlyCallAuditSink, McpReadonlyCallInput, McpReadonlyCallResult, type McpSdkEndpoint, type McpSdkEndpointResolverInput, type McpSdkTransportOptions, McpSource, McpSourceDto, McpSourceRegistry, McpSourceStatus, McpSourceStatusPayload, type McpToolCatalogCache, McpToolCatalogEntry, type McpToolDescribeInput, McpToolDescribeResult, McpToolSearchResult, type McpToolsSearchInput, McpTransportClient, type RegisterBoringMcpRoutesOptions, type ResolveComposioMcpSessionInput, assertManagedConnectorPreflight, assertMcpPublicPayloadSecretFree, boringMcpAgentSessionNamespace, createBoringMcpAgentBridgeRegistry, createBoringMcpAgentTools, createBoringMcpAppAgentTools, createBoringMcpAppAgentToolsForRequest, createBoringMcpAppBindings, createBoringMcpManagedConnectorAdapter, createBoringMcpReadonlyCaller, createBoringMcpServerPlugin, createBoringMcpSourceHandlers, createBoringMcpToolCatalog, createComposioManagedConnectorProvider, createComposioMcpTransport, createHardenedMcpTransport, createLegacyManagedConnectorSourceId, createManagedConnectorAdapter, createManagedConnectorSecretResolver, createManagedConnectorSourceId, createMcpSchemaHash, createMcpSdkStreamableHttpTransport, createMcpSourceStatusPayload, createUserSettingsMcpSourceRegistry, _default as default, evaluateBoringMcpLaunchGate, isActorOwnedMcpSource, listBoringMcpAgentBridgeTools, normalizeMcpCatalogTool, readBoringMcpServerConfig, registerBoringMcpRoutes, requireActorOwnedMcpSource, resolveComposioMcpSession, validateManagedConnectorPreflight, validateMcpSourceId, verifyMcpDisconnectResult };

package/dist/server/index.js

@@ -1,4 +1,4 @@
-// src/server/index.ts
+// src/server/serverPlugin.ts
 import { defineServerPlugin } from "@hachej/boring-workspace/server";
 
 // src/shared/index.ts
@@ -883,6 +883,25 @@ function createBoringMcpAgentTools(options) {
   }));
 }
 
+// src/server/serverPlugin.ts
+function createBoringMcpServerPlugin(options = {}) {
+  const hasAgentToolWiring = Boolean(options.registry && options.transport && options.resolveActor);
+  return defineServerPlugin({
+    id: BORING_MCP_PLUGIN_ID,
+    label: "Sources",
+    systemPrompt: options.systemPrompt ?? "Use boring-mcp bridge tools only when an app has enabled them. Treat MCP sources as read-only unless a tool is explicitly allowed.",
+    agentTools: hasAgentToolWiring ? createBoringMcpAgentTools({
+      registry: options.registry,
+      transport: options.transport,
+      resolveActor: options.resolveActor,
+      templates: options.templates,
+      maxReadonlyInputBytes: options.maxReadonlyInputBytes,
+      audit: options.audit,
+      hardening: options.hardening
+    }) : void 0
+  });
+}
+
 // src/server/appServerBinding.ts
 import { createHash as createHash3 } from "crypto";
 import { HttpError, ERROR_CODES } from "@hachej/boring-core/shared";
@@ -1971,6 +1990,29 @@ function registerBoringMcpRoutes(app, options) {
     return { tools: result.tools };
   });
 }
+function createBoringMcpAppBindings(config) {
+  return {
+    readConfig: (env) => readBoringMcpServerConfig(env, { secretEnvVars: config.secretEnvVars }),
+    createSecretResolver: (env) => createManagedConnectorSecretResolver({ env, configs: config.connectorConfigs, secretEnvVars: config.secretEnvVars }),
+    createConnectorAdapter: (options) => createBoringMcpManagedConnectorAdapter({ config, registry: options.registry, env: options.env, provider: options.provider }),
+    agentSessionNamespace: boringMcpAgentSessionNamespace,
+    createMcpSourceRegistry: createUserSettingsMcpSourceRegistry,
+    createAgentTools: (app, actor, options = {}) => createBoringMcpAppAgentTools(app, actor, { config, env: options.env, transport: options.transport }),
+    createAgentToolsForRequest: (app, ctx, options = {}) => createBoringMcpAppAgentToolsForRequest(app, ctx, { config, env: options.env, transport: options.transport }),
+    registerRoutes: (app, options = {}) => registerBoringMcpRoutes(app, {
+      config,
+      whenDisabled: config.whenDisabled,
+      provider: options.provider,
+      env: options.env,
+      transport: options.transport,
+      resolveTrustedWorkspaceId: options.resolveTrustedWorkspaceId ?? config.resolveTrustedWorkspaceId
+    }),
+    createServerPlugins: (env = process.env) => {
+      if (!readBoringMcpServerConfig(env, { secretEnvVars: config.secretEnvVars }).enabled) return [];
+      return [createBoringMcpServerPlugin({ systemPrompt: config.systemPrompt })];
+    }
+  };
+}
 
 // src/server/managedConnectorPreflight.ts
 var VENDOR_RISK_FIELDS = [
@@ -2019,23 +2061,6 @@ function assertManagedConnectorPreflight(evidence) {
 }
 
 // src/server/index.ts
-function createBoringMcpServerPlugin(options = {}) {
-  const hasAgentToolWiring = Boolean(options.registry && options.transport && options.resolveActor);
-  return defineServerPlugin({
-    id: BORING_MCP_PLUGIN_ID,
-    label: "Sources",
-    systemPrompt: options.systemPrompt ?? "Use boring-mcp bridge tools only when an app has enabled them. Treat MCP sources as read-only unless a tool is explicitly allowed.",
-    agentTools: hasAgentToolWiring ? createBoringMcpAgentTools({
-      registry: options.registry,
-      transport: options.transport,
-      resolveActor: options.resolveActor,
-      templates: options.templates,
-      maxReadonlyInputBytes: options.maxReadonlyInputBytes,
-      audit: options.audit,
-      hardening: options.hardening
-    }) : void 0
-  });
-}
 var server_default = createBoringMcpServerPlugin();
 export {
   AIRTABLE_MCP_TEMPLATE,
@@ -2065,6 +2090,7 @@ export {
   createBoringMcpAgentTools,
   createBoringMcpAppAgentTools,
   createBoringMcpAppAgentToolsForRequest,
+  createBoringMcpAppBindings,
   createBoringMcpManagedConnectorAdapter,
   createBoringMcpReadonlyCaller,
   createBoringMcpServerPlugin,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-mcp",
-  "version": "0.1.84",
+  "version": "0.1.85",
   "type": "module",
   "private": false,
   "license": "MIT",
@@ -49,8 +49,8 @@
     "fastify": "^5.9.0",
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
-    "@hachej/boring-core": "0.1.84",
-    "@hachej/boring-workspace": "0.1.84"
+    "@hachej/boring-core": "0.1.85",
+    "@hachej/boring-workspace": "0.1.85"
   },
   "devDependencies": {
     "fastify": "^5.9.0",
@@ -66,8 +66,8 @@
     "tsup": "^8.4.0",
     "typescript": "~6.0.3",
     "vitest": "^4.1.9",
-    "@hachej/boring-workspace": "0.1.84",
-    "@hachej/boring-core": "0.1.84"
+    "@hachej/boring-core": "0.1.85",
+    "@hachej/boring-workspace": "0.1.85"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0"