@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/mcp/audit.js

@@ -0,0 +1,35 @@
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { appendFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { redactMcpText, sanitizeMcpArguments } from "./safety.js";
+function hashResultSize(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    return `sha256:${createHash("sha256").update(String(value)).digest("hex")}`;
+}
+export class McpAuditLogger {
+    path;
+    constructor(agentDir) {
+        this.path = join(agentDir, "mcp", "audit.jsonl");
+    }
+    async write(input) {
+        const dir = dirname(this.path);
+        if (!existsSync(dir)) {
+            mkdirSync(dir, { recursive: true, mode: 0o700 });
+        }
+        if (!existsSync(this.path)) {
+            writeFileSync(this.path, "", { mode: 0o600 });
+        }
+        const entry = {
+            ...input,
+            timestamp: new Date().toISOString(),
+            ...(input.error ? { error: redactMcpText(input.error) } : {}),
+            ...(input.resultSize !== undefined ? { resultHash: hashResultSize(input.resultSize) } : {}),
+            ...(input.arguments ? { arguments: sanitizeMcpArguments(input.arguments) } : {}),
+        };
+        await appendFile(this.path, `${JSON.stringify(entry)}\n`, "utf-8");
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/core/mcp/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/core/mcp/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAqClE,SAAS,cAAc,CAAC,KAAyB,EAAsB;IACtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAAA,CAC5E;AAED,MAAM,OAAO,cAAc;IAClB,IAAI,CAAS;IAErB,YAAY,QAAgB,EAAE;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAAA,CACjD;IAED,KAAK,CAAC,KAAK,CAAC,KAAyB,EAAiB;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,GAAkB;YAC5B,GAAG,KAAK;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC;QACF,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAA,CACnE;CACD","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, writeFileSync } from \"node:fs\";\nimport { appendFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { redactMcpText, sanitizeMcpArguments } from \"./safety.ts\";\nimport type { McpCallerSurface, McpRecentCallStatus, McpRisk } from \"./types.ts\";\n\nexport interface McpAuditEventInput {\n\tworkspaceId?: string;\n\tsessionId?: string;\n\tcallerSurface: McpCallerSurface;\n\tserver: string;\n\titem: string;\n\tkind: \"tool\" | \"resource\" | \"prompt\" | \"cache\";\n\trisk: McpRisk;\n\tstatus: McpRecentCallStatus;\n\tdurationMs?: number;\n\tresultSize?: number;\n\tcacheId?: string;\n\targuments?: Record<string, unknown>;\n\terror?: string;\n}\n\nexport interface McpAuditEntry {\n\ttimestamp: string;\n\tworkspaceId?: string;\n\tsessionId?: string;\n\tcallerSurface: McpCallerSurface;\n\tserver: string;\n\titem: string;\n\tkind: \"tool\" | \"resource\" | \"prompt\" | \"cache\";\n\trisk: McpRisk;\n\tstatus: McpRecentCallStatus;\n\tdurationMs?: number;\n\tresultSize?: number;\n\tresultHash?: string;\n\tcacheId?: string;\n\targuments?: unknown;\n\terror?: string;\n}\n\nfunction hashResultSize(value: number | undefined): string | undefined {\n\tif (value === undefined) {\n\t\treturn undefined;\n\t}\n\treturn `sha256:${createHash(\"sha256\").update(String(value)).digest(\"hex\")}`;\n}\n\nexport class McpAuditLogger {\n\tprivate path: string;\n\n\tconstructor(agentDir: string) {\n\t\tthis.path = join(agentDir, \"mcp\", \"audit.jsonl\");\n\t}\n\n\tasync write(input: McpAuditEventInput): Promise<void> {\n\t\tconst dir = dirname(this.path);\n\t\tif (!existsSync(dir)) {\n\t\t\tmkdirSync(dir, { recursive: true, mode: 0o700 });\n\t\t}\n\t\tif (!existsSync(this.path)) {\n\t\t\twriteFileSync(this.path, \"\", { mode: 0o600 });\n\t\t}\n\t\tconst entry: McpAuditEntry = {\n\t\t\t...input,\n\t\t\ttimestamp: new Date().toISOString(),\n\t\t\t...(input.error ? { error: redactMcpText(input.error) } : {}),\n\t\t\t...(input.resultSize !== undefined ? { resultHash: hashResultSize(input.resultSize) } : {}),\n\t\t\t...(input.arguments ? { arguments: sanitizeMcpArguments(input.arguments) } : {}),\n\t\t};\n\t\tawait appendFile(this.path, `${JSON.stringify(entry)}\\n`, \"utf-8\");\n\t}\n}\n"]}

package/dist/core/mcp/auth.d.ts

@@ -0,0 +1,7 @@
+import type { McpOAuthStore } from "./oauth-store.ts";
+import type { McpAuthState, McpResolvedServerConfig } from "./types.ts";
+export declare function resolveMcpSecretTemplate(value: string, env?: NodeJS.ProcessEnv): string;
+export declare function resolveMcpStringRecordTemplates(values: Record<string, string>, env?: NodeJS.ProcessEnv): Record<string, string>;
+export declare function getMcpServerAuthState(server: McpResolvedServerConfig, env?: NodeJS.ProcessEnv, oauthStore?: McpOAuthStore): McpAuthState;
+export declare function buildMcpAuthorizationHeaders(server: McpResolvedServerConfig, env?: NodeJS.ProcessEnv): Record<string, string>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/core/mcp/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAIxE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAUpG;AAED,wBAAgB,+BAA+B,CAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMxB;AAED,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,uBAAuB,EAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,UAAU,CAAC,EAAE,aAAa,GACxB,YAAY,CAoBd;AAED,wBAAgB,4BAA4B,CAC3C,MAAM,EAAE,uBAAuB,EAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB","sourcesContent":["import type { McpOAuthStore } from \"./oauth-store.ts\";\nimport type { McpAuthState, McpResolvedServerConfig } from \"./types.ts\";\n\nconst ENV_TEMPLATE = /^\\$\\{env:([A-Za-z_][A-Za-z0-9_]*)\\}$/;\n\nexport function resolveMcpSecretTemplate(value: string, env: NodeJS.ProcessEnv = process.env): string {\n\tconst match = ENV_TEMPLATE.exec(value.trim());\n\tif (!match) {\n\t\treturn value;\n\t}\n\tconst resolved = env[match[1]];\n\tif (resolved === undefined || resolved.length === 0) {\n\t\tthrow new Error(`MCP environment variable is not set: ${match[1]}`);\n\t}\n\treturn resolved;\n}\n\nexport function resolveMcpStringRecordTemplates(\n\tvalues: Record<string, string>,\n\tenv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n\tconst resolved: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(values)) {\n\t\tresolved[key] = resolveMcpSecretTemplate(value, env);\n\t}\n\treturn resolved;\n}\n\nexport function getMcpServerAuthState(\n\tserver: McpResolvedServerConfig,\n\tenv: NodeJS.ProcessEnv = process.env,\n\toauthStore?: McpOAuthStore,\n): McpAuthState {\n\tif (server.auth?.type === \"oauth\") {\n\t\treturn oauthStore?.hasUsableTokens(server) ? \"authenticated\" : \"required\";\n\t}\n\ttry {\n\t\tif (server.auth?.type === \"bearer\" && server.auth.token) {\n\t\t\tresolveMcpSecretTemplate(server.auth.token, env);\n\t\t}\n\t\tif (server.auth?.type === \"env\" && server.auth.env) {\n\t\t\tconst value = env[server.auth.env];\n\t\t\tif (!value) {\n\t\t\t\treturn \"required\";\n\t\t\t}\n\t\t}\n\t\tresolveMcpStringRecordTemplates(server.headers, env);\n\t\tresolveMcpStringRecordTemplates(server.env, env);\n\t} catch {\n\t\treturn \"required\";\n\t}\n\treturn server.auth?.type && server.auth.type !== \"none\" ? \"authenticated\" : \"none\";\n}\n\nexport function buildMcpAuthorizationHeaders(\n\tserver: McpResolvedServerConfig,\n\tenv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n\tconst headers = resolveMcpStringRecordTemplates(server.headers, env);\n\tif (server.auth?.type === \"bearer\" && server.auth.token) {\n\t\theaders.authorization = `Bearer ${resolveMcpSecretTemplate(server.auth.token, env)}`;\n\t}\n\tif (server.auth?.type === \"env\" && server.auth.env) {\n\t\tconst token = env[server.auth.env];\n\t\tif (!token) {\n\t\t\tthrow new Error(`MCP auth environment variable is not set: ${server.auth.env}`);\n\t\t}\n\t\theaders.authorization = `Bearer ${token}`;\n\t}\n\treturn headers;\n}\n"]}

package/dist/core/mcp/auth.js

@@ -0,0 +1,56 @@
+const ENV_TEMPLATE = /^\$\{env:([A-Za-z_][A-Za-z0-9_]*)\}$/;
+export function resolveMcpSecretTemplate(value, env = process.env) {
+    const match = ENV_TEMPLATE.exec(value.trim());
+    if (!match) {
+        return value;
+    }
+    const resolved = env[match[1]];
+    if (resolved === undefined || resolved.length === 0) {
+        throw new Error(`MCP environment variable is not set: ${match[1]}`);
+    }
+    return resolved;
+}
+export function resolveMcpStringRecordTemplates(values, env = process.env) {
+    const resolved = {};
+    for (const [key, value] of Object.entries(values)) {
+        resolved[key] = resolveMcpSecretTemplate(value, env);
+    }
+    return resolved;
+}
+export function getMcpServerAuthState(server, env = process.env, oauthStore) {
+    if (server.auth?.type === "oauth") {
+        return oauthStore?.hasUsableTokens(server) ? "authenticated" : "required";
+    }
+    try {
+        if (server.auth?.type === "bearer" && server.auth.token) {
+            resolveMcpSecretTemplate(server.auth.token, env);
+        }
+        if (server.auth?.type === "env" && server.auth.env) {
+            const value = env[server.auth.env];
+            if (!value) {
+                return "required";
+            }
+        }
+        resolveMcpStringRecordTemplates(server.headers, env);
+        resolveMcpStringRecordTemplates(server.env, env);
+    }
+    catch {
+        return "required";
+    }
+    return server.auth?.type && server.auth.type !== "none" ? "authenticated" : "none";
+}
+export function buildMcpAuthorizationHeaders(server, env = process.env) {
+    const headers = resolveMcpStringRecordTemplates(server.headers, env);
+    if (server.auth?.type === "bearer" && server.auth.token) {
+        headers.authorization = `Bearer ${resolveMcpSecretTemplate(server.auth.token, env)}`;
+    }
+    if (server.auth?.type === "env" && server.auth.env) {
+        const token = env[server.auth.env];
+        if (!token) {
+            throw new Error(`MCP auth environment variable is not set: ${server.auth.env}`);
+        }
+        headers.authorization = `Bearer ${token}`;
+    }
+    return headers;
+}
+//# sourceMappingURL=auth.js.map

package/dist/core/mcp/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/core/mcp/auth.ts"],"names":[],"mappings":"AAGA,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAE5D,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAU;IACrG,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,UAAU,+BAA+B,CAC9C,MAA8B,EAC9B,GAAG,GAAsB,OAAO,CAAC,GAAG,EACX;IACzB,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,QAAQ,CAAC,GAAG,CAAC,GAAG,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,UAAU,qBAAqB,CACpC,MAA+B,EAC/B,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,UAA0B,EACX;IACf,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC;QACJ,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACzD,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,OAAO,UAAU,CAAC;YACnB,CAAC;QACF,CAAC;QACD,+BAA+B,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,+BAA+B,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;AAAA,CACnF;AAED,MAAM,UAAU,4BAA4B,CAC3C,MAA+B,EAC/B,GAAG,GAAsB,OAAO,CAAC,GAAG,EACX;IACzB,MAAM,OAAO,GAAG,+BAA+B,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACzD,OAAO,CAAC,aAAa,GAAG,UAAU,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf","sourcesContent":["import type { McpOAuthStore } from \"./oauth-store.ts\";\nimport type { McpAuthState, McpResolvedServerConfig } from \"./types.ts\";\n\nconst ENV_TEMPLATE = /^\\$\\{env:([A-Za-z_][A-Za-z0-9_]*)\\}$/;\n\nexport function resolveMcpSecretTemplate(value: string, env: NodeJS.ProcessEnv = process.env): string {\n\tconst match = ENV_TEMPLATE.exec(value.trim());\n\tif (!match) {\n\t\treturn value;\n\t}\n\tconst resolved = env[match[1]];\n\tif (resolved === undefined || resolved.length === 0) {\n\t\tthrow new Error(`MCP environment variable is not set: ${match[1]}`);\n\t}\n\treturn resolved;\n}\n\nexport function resolveMcpStringRecordTemplates(\n\tvalues: Record<string, string>,\n\tenv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n\tconst resolved: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(values)) {\n\t\tresolved[key] = resolveMcpSecretTemplate(value, env);\n\t}\n\treturn resolved;\n}\n\nexport function getMcpServerAuthState(\n\tserver: McpResolvedServerConfig,\n\tenv: NodeJS.ProcessEnv = process.env,\n\toauthStore?: McpOAuthStore,\n): McpAuthState {\n\tif (server.auth?.type === \"oauth\") {\n\t\treturn oauthStore?.hasUsableTokens(server) ? \"authenticated\" : \"required\";\n\t}\n\ttry {\n\t\tif (server.auth?.type === \"bearer\" && server.auth.token) {\n\t\t\tresolveMcpSecretTemplate(server.auth.token, env);\n\t\t}\n\t\tif (server.auth?.type === \"env\" && server.auth.env) {\n\t\t\tconst value = env[server.auth.env];\n\t\t\tif (!value) {\n\t\t\t\treturn \"required\";\n\t\t\t}\n\t\t}\n\t\tresolveMcpStringRecordTemplates(server.headers, env);\n\t\tresolveMcpStringRecordTemplates(server.env, env);\n\t} catch {\n\t\treturn \"required\";\n\t}\n\treturn server.auth?.type && server.auth.type !== \"none\" ? \"authenticated\" : \"none\";\n}\n\nexport function buildMcpAuthorizationHeaders(\n\tserver: McpResolvedServerConfig,\n\tenv: NodeJS.ProcessEnv = process.env,\n): Record<string, string> {\n\tconst headers = resolveMcpStringRecordTemplates(server.headers, env);\n\tif (server.auth?.type === \"bearer\" && server.auth.token) {\n\t\theaders.authorization = `Bearer ${resolveMcpSecretTemplate(server.auth.token, env)}`;\n\t}\n\tif (server.auth?.type === \"env\" && server.auth.env) {\n\t\tconst token = env[server.auth.env];\n\t\tif (!token) {\n\t\t\tthrow new Error(`MCP auth environment variable is not set: ${server.auth.env}`);\n\t\t}\n\t\theaders.authorization = `Bearer ${token}`;\n\t}\n\treturn headers;\n}\n"]}

package/dist/core/mcp/client-factory.d.ts

@@ -0,0 +1,20 @@
+import type { McpOAuthStore } from "./oauth-store.ts";
+import type { McpClientConnection, McpClientFactory, McpRequestOptions, McpResolvedServerConfig } from "./types.ts";
+export interface DefaultMcpClientFactoryOptions {
+    cwd: string;
+    clientName?: string;
+    clientVersion?: string;
+    env?: NodeJS.ProcessEnv;
+    oauthStore?: McpOAuthStore;
+}
+export declare class DefaultMcpClientFactory implements McpClientFactory {
+    private cwd;
+    private clientName;
+    private clientVersion;
+    private env;
+    private oauthStore;
+    constructor(options: DefaultMcpClientFactoryOptions);
+    connect(server: McpResolvedServerConfig, options: McpRequestOptions): Promise<McpClientConnection>;
+    private createTransport;
+}
+//# sourceMappingURL=client-factory.d.ts.map

package/dist/core/mcp/client-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/client-factory.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAMpH,MAAM,WAAW,8BAA8B;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,aAAa,CAAC;CAC3B;AA2JD,qBAAa,uBAAwB,YAAW,gBAAgB;IAC/D,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,GAAG,CAAoB;IAC/B,OAAO,CAAC,UAAU,CAA4B;IAE9C,YAAY,OAAO,EAAE,8BAA8B,EAMlD;IAEK,OAAO,CAAC,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAUvG;IAED,OAAO,CAAC,eAAe;CA2CvB","sourcesContent":["import { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { SSEClientTransport } from \"@modelcontextprotocol/sdk/client/sse.js\";\nimport { getDefaultEnvironment, StdioClientTransport } from \"@modelcontextprotocol/sdk/client/stdio.js\";\nimport { StreamableHTTPClientTransport } from \"@modelcontextprotocol/sdk/client/streamableHttp.js\";\nimport type { Transport } from \"@modelcontextprotocol/sdk/shared/transport.js\";\nimport type {\n\tCallToolResult,\n\tGetPromptResult,\n\tListPromptsResult,\n\tListResourcesResult,\n\tListToolsResult,\n\tReadResourceResult,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport { CallToolResultSchema } from \"@modelcontextprotocol/sdk/types.js\";\nimport { VERSION } from \"../../config.ts\";\nimport { resolvePath } from \"../../utils/paths.ts\";\nimport { buildMcpAuthorizationHeaders, resolveMcpStringRecordTemplates } from \"./auth.ts\";\nimport { createSafeMcpOAuthFetch } from \"./oauth-flow.ts\";\nimport { VoltMcpOAuthProvider } from \"./oauth-provider.ts\";\nimport type { McpOAuthStore } from \"./oauth-store.ts\";\nimport type { McpClientConnection, McpClientFactory, McpRequestOptions, McpResolvedServerConfig } from \"./types.ts\";\n\ntype McpSdkTransport = Transport & {\n\tterminateSession?: () => Promise<void>;\n};\n\nexport interface DefaultMcpClientFactoryOptions {\n\tcwd: string;\n\tclientName?: string;\n\tclientVersion?: string;\n\tenv?: NodeJS.ProcessEnv;\n\toauthStore?: McpOAuthStore;\n}\n\nfunction isCallToolResult(value: unknown): value is CallToolResult {\n\treturn typeof value === \"object\" && value !== null && Array.isArray((value as { content?: unknown }).content);\n}\n\nclass SdkMcpClientConnection implements McpClientConnection {\n\tprivate client: Client;\n\tprivate transport: McpSdkTransport;\n\n\tconstructor(client: Client, transport: McpSdkTransport) {\n\t\tthis.client = client;\n\t\tthis.transport = transport;\n\t}\n\n\tasync listTools(params: { cursor?: string } | undefined, options: McpRequestOptions): Promise<ListToolsResult> {\n\t\treturn this.client.listTools(params, options);\n\t}\n\n\tasync listResources(\n\t\tparams: { cursor?: string } | undefined,\n\t\toptions: McpRequestOptions,\n\t): Promise<ListResourcesResult> {\n\t\treturn this.client.listResources(params, options);\n\t}\n\n\tasync readResource(params: { uri: string }, options: McpRequestOptions): Promise<ReadResourceResult> {\n\t\treturn this.client.readResource(params, options);\n\t}\n\n\tasync listPrompts(params: { cursor?: string } | undefined, options: McpRequestOptions): Promise<ListPromptsResult> {\n\t\treturn this.client.listPrompts(params, options);\n\t}\n\n\tasync getPrompt(\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\toptions: McpRequestOptions,\n\t): Promise<GetPromptResult> {\n\t\treturn this.client.getPrompt(\n\t\t\t{ name: params.name, arguments: stringifyPromptArguments(params.arguments) },\n\t\t\toptions,\n\t\t);\n\t}\n\n\tasync callTool(\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\toptions: McpRequestOptions,\n\t): Promise<CallToolResult> {\n\t\tconst { onProgress, ...sdkOptions } = options;\n\t\tconst result = await this.client.callTool(params, CallToolResultSchema, {\n\t\t\t...sdkOptions,\n\t\t\t...(onProgress\n\t\t\t\t? {\n\t\t\t\t\t\tonprogress: (progress: { progress: number; total?: number; message?: string }) =>\n\t\t\t\t\t\t\tonProgress({\n\t\t\t\t\t\t\t\tprogress: progress.progress,\n\t\t\t\t\t\t\t\t...(progress.total !== undefined ? { total: progress.total } : {}),\n\t\t\t\t\t\t\t\t...(progress.message !== undefined ? { message: progress.message } : {}),\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t});\n\t\tif (isCallToolResult(result)) {\n\t\t\treturn result;\n\t\t}\n\t\tthrow new Error(\"MCP server returned a compatibility tool result without content\");\n\t}\n\n\tgetServerVersion(): { name: string; version: string } | undefined {\n\t\treturn this.client.getServerVersion();\n\t}\n\n\tasync close(): Promise<void> {\n\t\ttry {\n\t\t\tawait this.transport.terminateSession?.();\n\t\t} catch {\n\t\t\t// Some servers reject session termination; close the transport regardless.\n\t\t}\n\t\tawait this.client.close();\n\t}\n}\n\nfunction stringifyPromptArguments(args: Record<string, unknown> | undefined): Record<string, string> | undefined {\n\tif (!args) {\n\t\treturn undefined;\n\t}\n\tconst result: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(args)) {\n\t\tresult[key] = typeof value === \"string\" ? value : JSON.stringify(value);\n\t}\n\treturn result;\n}\n\nfunction buildStdioEnvironment(server: McpResolvedServerConfig, env: NodeJS.ProcessEnv): Record<string, string> {\n\tconst result: Record<string, string> = getDefaultEnvironment();\n\tfor (const key of server.envAllowlist) {\n\t\tconst value = env[key];\n\t\tif (value !== undefined) {\n\t\t\tresult[key] = value;\n\t\t}\n\t}\n\treturn { ...result, ...resolveMcpStringRecordTemplates(server.env, env) };\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n\treturn hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"::1\" || hostname === \"[::1]\";\n}\n\nfunction assertSafeAuthenticatedUrl(server: McpResolvedServerConfig, url: URL, headers: Record<string, string>): void {\n\tif (Object.keys(headers).length === 0 && server.auth?.type !== \"oauth\") {\n\t\treturn;\n\t}\n\tif (url.protocol === \"https:\") {\n\t\treturn;\n\t}\n\tif (url.protocol === \"http:\" && isLoopbackHostname(url.hostname)) {\n\t\treturn;\n\t}\n\tthrow new Error(`MCP server ${server.id} uses authenticated HTTP over an insecure URL`);\n}\n\nfunction createRequestInit(server: McpResolvedServerConfig, env: NodeJS.ProcessEnv, url: URL): RequestInit | undefined {\n\tconst headers = buildMcpAuthorizationHeaders(server, env);\n\tassertSafeAuthenticatedUrl(server, url, headers);\n\tif (Object.keys(headers).length === 0) {\n\t\treturn undefined;\n\t}\n\treturn { headers };\n}\n\ntype HeaderInput = ConstructorParameters<typeof Headers>[0];\n\nfunction mergeHeaders(base: HeaderInput | undefined, extra: HeaderInput | undefined): Headers {\n\tconst headers = new Headers(base);\n\tconst extraHeaders = new Headers(extra);\n\tfor (const [key, value] of extraHeaders.entries()) {\n\t\tif (!headers.has(key)) {\n\t\t\theaders.set(key, value);\n\t\t}\n\t}\n\treturn headers;\n}\n\nfunction createExactResourceFetch(serverUrl: URL, requestInit: RequestInit | undefined): typeof fetch {\n\tconst expected = serverUrl.toString();\n\tconst oauthFetch = createSafeMcpOAuthFetch();\n\treturn async (input: string | URL | Request, init?: RequestInit): Promise<Response> => {\n\t\tconst requestUrl = input instanceof Request ? input.url : String(input);\n\t\tif (requestUrl !== expected || !requestInit?.headers) {\n\t\t\treturn oauthFetch(input, init);\n\t\t}\n\t\treturn oauthFetch(input, { ...init, headers: mergeHeaders(init?.headers, requestInit.headers) });\n\t};\n}\n\nexport class DefaultMcpClientFactory implements McpClientFactory {\n\tprivate cwd: string;\n\tprivate clientName: string;\n\tprivate clientVersion: string;\n\tprivate env: NodeJS.ProcessEnv;\n\tprivate oauthStore: McpOAuthStore | undefined;\n\n\tconstructor(options: DefaultMcpClientFactoryOptions) {\n\t\tthis.cwd = resolvePath(options.cwd);\n\t\tthis.clientName = options.clientName ?? \"volt\";\n\t\tthis.clientVersion = options.clientVersion ?? VERSION;\n\t\tthis.env = options.env ?? process.env;\n\t\tthis.oauthStore = options.oauthStore;\n\t}\n\n\tasync connect(server: McpResolvedServerConfig, options: McpRequestOptions): Promise<McpClientConnection> {\n\t\tconst client = new Client({ name: this.clientName, version: this.clientVersion }, { capabilities: {} });\n\t\tconst transport = this.createTransport(server);\n\t\ttry {\n\t\t\tawait client.connect(transport, options);\n\t\t\treturn new SdkMcpClientConnection(client, transport);\n\t\t} catch (error) {\n\t\t\tawait transport.close().catch(() => undefined);\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate createTransport(server: McpResolvedServerConfig): McpSdkTransport {\n\t\tif (server.transport === \"stdio\") {\n\t\t\tif (!server.command) {\n\t\t\t\tthrow new Error(`MCP stdio server ${server.id} is missing command`);\n\t\t\t}\n\t\t\treturn new StdioClientTransport({\n\t\t\t\tcommand: server.command,\n\t\t\t\targs: server.args,\n\t\t\t\tcwd: resolvePath(server.cwd ?? this.cwd, this.cwd),\n\t\t\t\tenv: buildStdioEnvironment(server, this.env),\n\t\t\t\tstderr: \"ignore\",\n\t\t\t});\n\t\t}\n\t\tif (!server.url) {\n\t\t\tthrow new Error(`MCP HTTP server ${server.id} is missing URL`);\n\t\t}\n\t\tconst url = new URL(server.url);\n\t\tconst requestInit = createRequestInit(server, this.env, url);\n\t\tconst authProvider =\n\t\t\tserver.auth?.type === \"oauth\" && this.oauthStore\n\t\t\t\t? new VoltMcpOAuthProvider({\n\t\t\t\t\t\tserver,\n\t\t\t\t\t\tstore: this.oauthStore,\n\t\t\t\t\t\tredirectUrl: \"http://127.0.0.1/mcp/oauth/callback\",\n\t\t\t\t\t\tclientName: this.clientName,\n\t\t\t\t\t\tclientVersion: this.clientVersion,\n\t\t\t\t\t})\n\t\t\t\t: undefined;\n\t\tconst scopedFetch = authProvider ? createExactResourceFetch(url, requestInit) : undefined;\n\t\tconst transportRequestInit = authProvider ? undefined : requestInit;\n\t\tif (server.transport === \"sse\") {\n\t\t\treturn new SSEClientTransport(url, {\n\t\t\t\trequestInit: transportRequestInit,\n\t\t\t\tauthProvider,\n\t\t\t\t...(scopedFetch ? { fetch: scopedFetch } : {}),\n\t\t\t});\n\t\t}\n\t\treturn new StreamableHTTPClientTransport(url, {\n\t\t\trequestInit: transportRequestInit,\n\t\t\tauthProvider,\n\t\t\t...(scopedFetch ? { fetch: scopedFetch } : {}),\n\t\t});\n\t}\n}\n"]}

package/dist/core/mcp/client-factory.js

@@ -0,0 +1,200 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { getDefaultEnvironment, StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { CallToolResultSchema } from "@modelcontextprotocol/sdk/types.js";
+import { VERSION } from "../../config.js";
+import { resolvePath } from "../../utils/paths.js";
+import { buildMcpAuthorizationHeaders, resolveMcpStringRecordTemplates } from "./auth.js";
+import { createSafeMcpOAuthFetch } from "./oauth-flow.js";
+import { VoltMcpOAuthProvider } from "./oauth-provider.js";
+function isCallToolResult(value) {
+    return typeof value === "object" && value !== null && Array.isArray(value.content);
+}
+class SdkMcpClientConnection {
+    client;
+    transport;
+    constructor(client, transport) {
+        this.client = client;
+        this.transport = transport;
+    }
+    async listTools(params, options) {
+        return this.client.listTools(params, options);
+    }
+    async listResources(params, options) {
+        return this.client.listResources(params, options);
+    }
+    async readResource(params, options) {
+        return this.client.readResource(params, options);
+    }
+    async listPrompts(params, options) {
+        return this.client.listPrompts(params, options);
+    }
+    async getPrompt(params, options) {
+        return this.client.getPrompt({ name: params.name, arguments: stringifyPromptArguments(params.arguments) }, options);
+    }
+    async callTool(params, options) {
+        const { onProgress, ...sdkOptions } = options;
+        const result = await this.client.callTool(params, CallToolResultSchema, {
+            ...sdkOptions,
+            ...(onProgress
+                ? {
+                    onprogress: (progress) => onProgress({
+                        progress: progress.progress,
+                        ...(progress.total !== undefined ? { total: progress.total } : {}),
+                        ...(progress.message !== undefined ? { message: progress.message } : {}),
+                    }),
+                }
+                : {}),
+        });
+        if (isCallToolResult(result)) {
+            return result;
+        }
+        throw new Error("MCP server returned a compatibility tool result without content");
+    }
+    getServerVersion() {
+        return this.client.getServerVersion();
+    }
+    async close() {
+        try {
+            await this.transport.terminateSession?.();
+        }
+        catch {
+            // Some servers reject session termination; close the transport regardless.
+        }
+        await this.client.close();
+    }
+}
+function stringifyPromptArguments(args) {
+    if (!args) {
+        return undefined;
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(args)) {
+        result[key] = typeof value === "string" ? value : JSON.stringify(value);
+    }
+    return result;
+}
+function buildStdioEnvironment(server, env) {
+    const result = getDefaultEnvironment();
+    for (const key of server.envAllowlist) {
+        const value = env[key];
+        if (value !== undefined) {
+            result[key] = value;
+        }
+    }
+    return { ...result, ...resolveMcpStringRecordTemplates(server.env, env) };
+}
+function isLoopbackHostname(hostname) {
+    return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
+}
+function assertSafeAuthenticatedUrl(server, url, headers) {
+    if (Object.keys(headers).length === 0 && server.auth?.type !== "oauth") {
+        return;
+    }
+    if (url.protocol === "https:") {
+        return;
+    }
+    if (url.protocol === "http:" && isLoopbackHostname(url.hostname)) {
+        return;
+    }
+    throw new Error(`MCP server ${server.id} uses authenticated HTTP over an insecure URL`);
+}
+function createRequestInit(server, env, url) {
+    const headers = buildMcpAuthorizationHeaders(server, env);
+    assertSafeAuthenticatedUrl(server, url, headers);
+    if (Object.keys(headers).length === 0) {
+        return undefined;
+    }
+    return { headers };
+}
+function mergeHeaders(base, extra) {
+    const headers = new Headers(base);
+    const extraHeaders = new Headers(extra);
+    for (const [key, value] of extraHeaders.entries()) {
+        if (!headers.has(key)) {
+            headers.set(key, value);
+        }
+    }
+    return headers;
+}
+function createExactResourceFetch(serverUrl, requestInit) {
+    const expected = serverUrl.toString();
+    const oauthFetch = createSafeMcpOAuthFetch();
+    return async (input, init) => {
+        const requestUrl = input instanceof Request ? input.url : String(input);
+        if (requestUrl !== expected || !requestInit?.headers) {
+            return oauthFetch(input, init);
+        }
+        return oauthFetch(input, { ...init, headers: mergeHeaders(init?.headers, requestInit.headers) });
+    };
+}
+export class DefaultMcpClientFactory {
+    cwd;
+    clientName;
+    clientVersion;
+    env;
+    oauthStore;
+    constructor(options) {
+        this.cwd = resolvePath(options.cwd);
+        this.clientName = options.clientName ?? "volt";
+        this.clientVersion = options.clientVersion ?? VERSION;
+        this.env = options.env ?? process.env;
+        this.oauthStore = options.oauthStore;
+    }
+    async connect(server, options) {
+        const client = new Client({ name: this.clientName, version: this.clientVersion }, { capabilities: {} });
+        const transport = this.createTransport(server);
+        try {
+            await client.connect(transport, options);
+            return new SdkMcpClientConnection(client, transport);
+        }
+        catch (error) {
+            await transport.close().catch(() => undefined);
+            throw error;
+        }
+    }
+    createTransport(server) {
+        if (server.transport === "stdio") {
+            if (!server.command) {
+                throw new Error(`MCP stdio server ${server.id} is missing command`);
+            }
+            return new StdioClientTransport({
+                command: server.command,
+                args: server.args,
+                cwd: resolvePath(server.cwd ?? this.cwd, this.cwd),
+                env: buildStdioEnvironment(server, this.env),
+                stderr: "ignore",
+            });
+        }
+        if (!server.url) {
+            throw new Error(`MCP HTTP server ${server.id} is missing URL`);
+        }
+        const url = new URL(server.url);
+        const requestInit = createRequestInit(server, this.env, url);
+        const authProvider = server.auth?.type === "oauth" && this.oauthStore
+            ? new VoltMcpOAuthProvider({
+                server,
+                store: this.oauthStore,
+                redirectUrl: "http://127.0.0.1/mcp/oauth/callback",
+                clientName: this.clientName,
+                clientVersion: this.clientVersion,
+            })
+            : undefined;
+        const scopedFetch = authProvider ? createExactResourceFetch(url, requestInit) : undefined;
+        const transportRequestInit = authProvider ? undefined : requestInit;
+        if (server.transport === "sse") {
+            return new SSEClientTransport(url, {
+                requestInit: transportRequestInit,
+                authProvider,
+                ...(scopedFetch ? { fetch: scopedFetch } : {}),
+            });
+        }
+        return new StreamableHTTPClientTransport(url, {
+            requestInit: transportRequestInit,
+            authProvider,
+            ...(scopedFetch ? { fetch: scopedFetch } : {}),
+        });
+    }
+}
+//# sourceMappingURL=client-factory.js.map

package/dist/core/mcp/client-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.js","sourceRoot":"","sources":["../../../src/core/mcp/client-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACxG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAUnG,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAgB3D,SAAS,gBAAgB,CAAC,KAAc,EAA2B;IAClE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,KAA+B,CAAC,OAAO,CAAC,CAAC;AAAA,CAC9G;AAED,MAAM,sBAAsB;IACnB,MAAM,CAAS;IACf,SAAS,CAAkB;IAEnC,YAAY,MAAc,EAAE,SAA0B,EAAE;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAAA,CAC3B;IAED,KAAK,CAAC,SAAS,CAAC,MAAuC,EAAE,OAA0B,EAA4B;QAC9G,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAA,CAC9C;IAED,KAAK,CAAC,aAAa,CAClB,MAAuC,EACvC,OAA0B,EACK;QAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAA,CAClD;IAED,KAAK,CAAC,YAAY,CAAC,MAAuB,EAAE,OAA0B,EAA+B;QACpG,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAA,CACjD;IAED,KAAK,CAAC,WAAW,CAAC,MAAuC,EAAE,OAA0B,EAA8B;QAClH,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAA,CAChD;IAED,KAAK,CAAC,SAAS,CACd,MAA6D,EAC7D,OAA0B,EACC;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAC3B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAC5E,OAAO,CACP,CAAC;IAAA,CACF;IAED,KAAK,CAAC,QAAQ,CACb,MAA6D,EAC7D,OAA0B,EACA;QAC1B,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,EAAE;YACvE,GAAG,UAAU;YACb,GAAG,CAAC,UAAU;gBACb,CAAC,CAAC;oBACA,UAAU,EAAE,CAAC,QAAgE,EAAE,EAAE,CAChF,UAAU,CAAC;wBACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClE,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACxE,CAAC;iBACH;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAC;QACH,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC;QACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAAA,CACnF;IAED,gBAAgB,GAAkD;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAAA,CACtC;IAED,KAAK,CAAC,KAAK,GAAkB;QAC5B,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,2EAA2E;QAC5E,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAAA,CAC1B;CACD;AAED,SAAS,wBAAwB,CAAC,IAAyC,EAAsC;IAChH,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,qBAAqB,CAAC,MAA+B,EAAE,GAAsB,EAA0B;IAC/G,MAAM,MAAM,GAA2B,qBAAqB,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACF,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,+BAA+B,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;AAAA,CAC1E;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAW;IACtD,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO,CAAC;AAAA,CAC1G;AAED,SAAS,0BAA0B,CAAC,MAA+B,EAAE,GAAQ,EAAE,OAA+B,EAAQ;IACrH,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QACxE,OAAO;IACR,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;IACR,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,OAAO;IACR,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,cAAc,MAAM,CAAC,EAAE,+CAA+C,CAAC,CAAC;AAAA,CACxF;AAED,SAAS,iBAAiB,CAAC,MAA+B,EAAE,GAAsB,EAAE,GAAQ,EAA2B;IACtH,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1D,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,CACnB;AAID,SAAS,YAAY,CAAC,IAA6B,EAAE,KAA8B,EAAW;IAC7F,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,wBAAwB,CAAC,SAAc,EAAE,WAAoC,EAAgB;IACrG,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;IAC7C,OAAO,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAqB,EAAE,CAAC;QACtF,MAAM,UAAU,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YACtD,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAAA,CACjG,CAAC;AAAA,CACF;AAED,MAAM,OAAO,uBAAuB;IAC3B,GAAG,CAAS;IACZ,UAAU,CAAS;IACnB,aAAa,CAAS;IACtB,GAAG,CAAoB;IACvB,UAAU,CAA4B;IAE9C,YAAY,OAAuC,EAAE;QACpD,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC;QACtD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAAA,CACrC;IAED,KAAK,CAAC,OAAO,CAAC,MAA+B,EAAE,OAA0B,EAAgC;QACxG,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACxG,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC;YACJ,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,IAAI,sBAAsB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAEO,eAAe,CAAC,MAA+B,EAAmB;QACzE,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,IAAI,oBAAoB,CAAC;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;gBAClD,GAAG,EAAE,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;gBAC5C,MAAM,EAAE,QAAQ;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,YAAY,GACjB,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU;YAC/C,CAAC,CAAC,IAAI,oBAAoB,CAAC;gBACzB,MAAM;gBACN,KAAK,EAAE,IAAI,CAAC,UAAU;gBACtB,WAAW,EAAE,qCAAqC;gBAClD,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;aACjC,CAAC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,MAAM,oBAAoB,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACpE,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAChC,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE;gBAClC,WAAW,EAAE,oBAAoB;gBACjC,YAAY;gBACZ,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE;YAC7C,WAAW,EAAE,oBAAoB;YACjC,YAAY;YACZ,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;IAAA,CACH;CACD","sourcesContent":["import { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { SSEClientTransport } from \"@modelcontextprotocol/sdk/client/sse.js\";\nimport { getDefaultEnvironment, StdioClientTransport } from \"@modelcontextprotocol/sdk/client/stdio.js\";\nimport { StreamableHTTPClientTransport } from \"@modelcontextprotocol/sdk/client/streamableHttp.js\";\nimport type { Transport } from \"@modelcontextprotocol/sdk/shared/transport.js\";\nimport type {\n\tCallToolResult,\n\tGetPromptResult,\n\tListPromptsResult,\n\tListResourcesResult,\n\tListToolsResult,\n\tReadResourceResult,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport { CallToolResultSchema } from \"@modelcontextprotocol/sdk/types.js\";\nimport { VERSION } from \"../../config.ts\";\nimport { resolvePath } from \"../../utils/paths.ts\";\nimport { buildMcpAuthorizationHeaders, resolveMcpStringRecordTemplates } from \"./auth.ts\";\nimport { createSafeMcpOAuthFetch } from \"./oauth-flow.ts\";\nimport { VoltMcpOAuthProvider } from \"./oauth-provider.ts\";\nimport type { McpOAuthStore } from \"./oauth-store.ts\";\nimport type { McpClientConnection, McpClientFactory, McpRequestOptions, McpResolvedServerConfig } from \"./types.ts\";\n\ntype McpSdkTransport = Transport & {\n\tterminateSession?: () => Promise<void>;\n};\n\nexport interface DefaultMcpClientFactoryOptions {\n\tcwd: string;\n\tclientName?: string;\n\tclientVersion?: string;\n\tenv?: NodeJS.ProcessEnv;\n\toauthStore?: McpOAuthStore;\n}\n\nfunction isCallToolResult(value: unknown): value is CallToolResult {\n\treturn typeof value === \"object\" && value !== null && Array.isArray((value as { content?: unknown }).content);\n}\n\nclass SdkMcpClientConnection implements McpClientConnection {\n\tprivate client: Client;\n\tprivate transport: McpSdkTransport;\n\n\tconstructor(client: Client, transport: McpSdkTransport) {\n\t\tthis.client = client;\n\t\tthis.transport = transport;\n\t}\n\n\tasync listTools(params: { cursor?: string } | undefined, options: McpRequestOptions): Promise<ListToolsResult> {\n\t\treturn this.client.listTools(params, options);\n\t}\n\n\tasync listResources(\n\t\tparams: { cursor?: string } | undefined,\n\t\toptions: McpRequestOptions,\n\t): Promise<ListResourcesResult> {\n\t\treturn this.client.listResources(params, options);\n\t}\n\n\tasync readResource(params: { uri: string }, options: McpRequestOptions): Promise<ReadResourceResult> {\n\t\treturn this.client.readResource(params, options);\n\t}\n\n\tasync listPrompts(params: { cursor?: string } | undefined, options: McpRequestOptions): Promise<ListPromptsResult> {\n\t\treturn this.client.listPrompts(params, options);\n\t}\n\n\tasync getPrompt(\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\toptions: McpRequestOptions,\n\t): Promise<GetPromptResult> {\n\t\treturn this.client.getPrompt(\n\t\t\t{ name: params.name, arguments: stringifyPromptArguments(params.arguments) },\n\t\t\toptions,\n\t\t);\n\t}\n\n\tasync callTool(\n\t\tparams: { name: string; arguments?: Record<string, unknown> },\n\t\toptions: McpRequestOptions,\n\t): Promise<CallToolResult> {\n\t\tconst { onProgress, ...sdkOptions } = options;\n\t\tconst result = await this.client.callTool(params, CallToolResultSchema, {\n\t\t\t...sdkOptions,\n\t\t\t...(onProgress\n\t\t\t\t? {\n\t\t\t\t\t\tonprogress: (progress: { progress: number; total?: number; message?: string }) =>\n\t\t\t\t\t\t\tonProgress({\n\t\t\t\t\t\t\t\tprogress: progress.progress,\n\t\t\t\t\t\t\t\t...(progress.total !== undefined ? { total: progress.total } : {}),\n\t\t\t\t\t\t\t\t...(progress.message !== undefined ? { message: progress.message } : {}),\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t});\n\t\tif (isCallToolResult(result)) {\n\t\t\treturn result;\n\t\t}\n\t\tthrow new Error(\"MCP server returned a compatibility tool result without content\");\n\t}\n\n\tgetServerVersion(): { name: string; version: string } | undefined {\n\t\treturn this.client.getServerVersion();\n\t}\n\n\tasync close(): Promise<void> {\n\t\ttry {\n\t\t\tawait this.transport.terminateSession?.();\n\t\t} catch {\n\t\t\t// Some servers reject session termination; close the transport regardless.\n\t\t}\n\t\tawait this.client.close();\n\t}\n}\n\nfunction stringifyPromptArguments(args: Record<string, unknown> | undefined): Record<string, string> | undefined {\n\tif (!args) {\n\t\treturn undefined;\n\t}\n\tconst result: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(args)) {\n\t\tresult[key] = typeof value === \"string\" ? value : JSON.stringify(value);\n\t}\n\treturn result;\n}\n\nfunction buildStdioEnvironment(server: McpResolvedServerConfig, env: NodeJS.ProcessEnv): Record<string, string> {\n\tconst result: Record<string, string> = getDefaultEnvironment();\n\tfor (const key of server.envAllowlist) {\n\t\tconst value = env[key];\n\t\tif (value !== undefined) {\n\t\t\tresult[key] = value;\n\t\t}\n\t}\n\treturn { ...result, ...resolveMcpStringRecordTemplates(server.env, env) };\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n\treturn hostname === \"localhost\" || hostname === \"127.0.0.1\" || hostname === \"::1\" || hostname === \"[::1]\";\n}\n\nfunction assertSafeAuthenticatedUrl(server: McpResolvedServerConfig, url: URL, headers: Record<string, string>): void {\n\tif (Object.keys(headers).length === 0 && server.auth?.type !== \"oauth\") {\n\t\treturn;\n\t}\n\tif (url.protocol === \"https:\") {\n\t\treturn;\n\t}\n\tif (url.protocol === \"http:\" && isLoopbackHostname(url.hostname)) {\n\t\treturn;\n\t}\n\tthrow new Error(`MCP server ${server.id} uses authenticated HTTP over an insecure URL`);\n}\n\nfunction createRequestInit(server: McpResolvedServerConfig, env: NodeJS.ProcessEnv, url: URL): RequestInit | undefined {\n\tconst headers = buildMcpAuthorizationHeaders(server, env);\n\tassertSafeAuthenticatedUrl(server, url, headers);\n\tif (Object.keys(headers).length === 0) {\n\t\treturn undefined;\n\t}\n\treturn { headers };\n}\n\ntype HeaderInput = ConstructorParameters<typeof Headers>[0];\n\nfunction mergeHeaders(base: HeaderInput | undefined, extra: HeaderInput | undefined): Headers {\n\tconst headers = new Headers(base);\n\tconst extraHeaders = new Headers(extra);\n\tfor (const [key, value] of extraHeaders.entries()) {\n\t\tif (!headers.has(key)) {\n\t\t\theaders.set(key, value);\n\t\t}\n\t}\n\treturn headers;\n}\n\nfunction createExactResourceFetch(serverUrl: URL, requestInit: RequestInit | undefined): typeof fetch {\n\tconst expected = serverUrl.toString();\n\tconst oauthFetch = createSafeMcpOAuthFetch();\n\treturn async (input: string | URL | Request, init?: RequestInit): Promise<Response> => {\n\t\tconst requestUrl = input instanceof Request ? input.url : String(input);\n\t\tif (requestUrl !== expected || !requestInit?.headers) {\n\t\t\treturn oauthFetch(input, init);\n\t\t}\n\t\treturn oauthFetch(input, { ...init, headers: mergeHeaders(init?.headers, requestInit.headers) });\n\t};\n}\n\nexport class DefaultMcpClientFactory implements McpClientFactory {\n\tprivate cwd: string;\n\tprivate clientName: string;\n\tprivate clientVersion: string;\n\tprivate env: NodeJS.ProcessEnv;\n\tprivate oauthStore: McpOAuthStore | undefined;\n\n\tconstructor(options: DefaultMcpClientFactoryOptions) {\n\t\tthis.cwd = resolvePath(options.cwd);\n\t\tthis.clientName = options.clientName ?? \"volt\";\n\t\tthis.clientVersion = options.clientVersion ?? VERSION;\n\t\tthis.env = options.env ?? process.env;\n\t\tthis.oauthStore = options.oauthStore;\n\t}\n\n\tasync connect(server: McpResolvedServerConfig, options: McpRequestOptions): Promise<McpClientConnection> {\n\t\tconst client = new Client({ name: this.clientName, version: this.clientVersion }, { capabilities: {} });\n\t\tconst transport = this.createTransport(server);\n\t\ttry {\n\t\t\tawait client.connect(transport, options);\n\t\t\treturn new SdkMcpClientConnection(client, transport);\n\t\t} catch (error) {\n\t\t\tawait transport.close().catch(() => undefined);\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate createTransport(server: McpResolvedServerConfig): McpSdkTransport {\n\t\tif (server.transport === \"stdio\") {\n\t\t\tif (!server.command) {\n\t\t\t\tthrow new Error(`MCP stdio server ${server.id} is missing command`);\n\t\t\t}\n\t\t\treturn new StdioClientTransport({\n\t\t\t\tcommand: server.command,\n\t\t\t\targs: server.args,\n\t\t\t\tcwd: resolvePath(server.cwd ?? this.cwd, this.cwd),\n\t\t\t\tenv: buildStdioEnvironment(server, this.env),\n\t\t\t\tstderr: \"ignore\",\n\t\t\t});\n\t\t}\n\t\tif (!server.url) {\n\t\t\tthrow new Error(`MCP HTTP server ${server.id} is missing URL`);\n\t\t}\n\t\tconst url = new URL(server.url);\n\t\tconst requestInit = createRequestInit(server, this.env, url);\n\t\tconst authProvider =\n\t\t\tserver.auth?.type === \"oauth\" && this.oauthStore\n\t\t\t\t? new VoltMcpOAuthProvider({\n\t\t\t\t\t\tserver,\n\t\t\t\t\t\tstore: this.oauthStore,\n\t\t\t\t\t\tredirectUrl: \"http://127.0.0.1/mcp/oauth/callback\",\n\t\t\t\t\t\tclientName: this.clientName,\n\t\t\t\t\t\tclientVersion: this.clientVersion,\n\t\t\t\t\t})\n\t\t\t\t: undefined;\n\t\tconst scopedFetch = authProvider ? createExactResourceFetch(url, requestInit) : undefined;\n\t\tconst transportRequestInit = authProvider ? undefined : requestInit;\n\t\tif (server.transport === \"sse\") {\n\t\t\treturn new SSEClientTransport(url, {\n\t\t\t\trequestInit: transportRequestInit,\n\t\t\t\tauthProvider,\n\t\t\t\t...(scopedFetch ? { fetch: scopedFetch } : {}),\n\t\t\t});\n\t\t}\n\t\treturn new StreamableHTTPClientTransport(url, {\n\t\t\trequestInit: transportRequestInit,\n\t\t\tauthProvider,\n\t\t\t...(scopedFetch ? { fetch: scopedFetch } : {}),\n\t\t});\n\t}\n}\n"]}

package/dist/core/mcp/config-loader.d.ts

@@ -0,0 +1,9 @@
+import type { McpResolvedConfig } from "./types.ts";
+export interface LoadMcpConfigOptions {
+    cwd: string;
+    agentDir: string;
+    projectTrusted: boolean;
+}
+export declare function loadMcpConfig(options: LoadMcpConfigOptions): McpResolvedConfig;
+export declare function hasProjectMcpConfig(cwd: string): boolean;
+//# sourceMappingURL=config-loader.d.ts.map

package/dist/core/mcp/config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/config-loader.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAwC,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1F,MAAM,WAAW,oBAAoB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;CACxB;AAwED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,iBAAiB,CAyB9E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExD","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { resolvePath } from \"../../utils/paths.ts\";\nimport {\n\tcreateEmptyMcpMergedConfig,\n\tfinalizeMcpConfig,\n\tgetMcpProjectConfigPaths,\n\ttype McpRawConfigFile,\n\tmergeMcpConfigFile,\n\tsourceForMcpConfigPath,\n} from \"./config.ts\";\nimport type { McpConfigDiagnostic, McpConfigSource, McpResolvedConfig } from \"./types.ts\";\n\nexport interface LoadMcpConfigOptions {\n\tcwd: string;\n\tagentDir: string;\n\tprojectTrusted: boolean;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction parseMcpConfigFile(path: string): { config?: McpRawConfigFile; diagnostic?: McpConfigDiagnostic } {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(readFileSync(path, \"utf-8\"));\n\t} catch (error) {\n\t\treturn {\n\t\t\tdiagnostic: {\n\t\t\t\tseverity: \"error\",\n\t\t\t\tmessage: `Failed to read MCP config: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\tpath,\n\t\t\t},\n\t\t};\n\t}\n\tif (!isRecord(parsed)) {\n\t\treturn {\n\t\t\tdiagnostic: {\n\t\t\t\tseverity: \"error\",\n\t\t\t\tmessage: \"Invalid MCP config: expected a JSON object\",\n\t\t\t\tpath,\n\t\t\t},\n\t\t};\n\t}\n\tconst config: McpRawConfigFile = {};\n\tif (typeof parsed.version === \"number\") {\n\t\tconfig.version = parsed.version;\n\t}\n\tif (isRecord(parsed.settings)) {\n\t\tconfig.settings = parsed.settings;\n\t}\n\tif (isRecord(parsed.servers)) {\n\t\tconfig.servers = parsed.servers;\n\t}\n\treturn { config };\n}\n\nfunction mcpConfigSources(cwd: string, agentDir: string): McpConfigSource[] {\n\tconst resolvedCwd = resolvePath(cwd);\n\tconst resolvedAgentDir = resolvePath(agentDir);\n\treturn [\n\t\tsourceForMcpConfigPath(join(homedir(), \".config\", \"mcp\", \"mcp.json\"), {\n\t\t\tscope: \"user\",\n\t\t\tlabel: \"user shared\",\n\t\t\tprecedence: 1,\n\t\t\tshared: true,\n\t\t}),\n\t\tsourceForMcpConfigPath(join(resolvedAgentDir, \"mcp.json\"), {\n\t\t\tscope: \"user\",\n\t\t\tlabel: \"user Volt\",\n\t\t\tprecedence: 2,\n\t\t\tshared: false,\n\t\t}),\n\t\tsourceForMcpConfigPath(join(resolvedCwd, \".mcp.json\"), {\n\t\t\tscope: \"project\",\n\t\t\tlabel: \"project shared\",\n\t\t\tprecedence: 3,\n\t\t\tshared: true,\n\t\t}),\n\t\tsourceForMcpConfigPath(join(resolvedCwd, CONFIG_DIR_NAME, \"mcp.json\"), {\n\t\t\tscope: \"project\",\n\t\t\tlabel: \"project Volt\",\n\t\t\tprecedence: 4,\n\t\t\tshared: false,\n\t\t}),\n\t];\n}\n\nexport function loadMcpConfig(options: LoadMcpConfigOptions): McpResolvedConfig {\n\tconst sources = mcpConfigSources(options.cwd, options.agentDir);\n\tconst merged = createEmptyMcpMergedConfig();\n\tfor (const source of sources) {\n\t\tif (!existsSync(source.path)) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (source.scope === \"project\" && !options.projectTrusted) {\n\t\t\tmerged.diagnostics.push({\n\t\t\t\tseverity: \"warning\",\n\t\t\t\tmessage: `Ignored project MCP config because project trust is not granted: ${source.path}`,\n\t\t\t\tpath: source.path,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\tconst parsed = parseMcpConfigFile(source.path);\n\t\tif (parsed.diagnostic) {\n\t\t\tmerged.diagnostics.push(parsed.diagnostic);\n\t\t\tcontinue;\n\t\t}\n\t\tif (parsed.config) {\n\t\t\tmergeMcpConfigFile(merged, parsed.config, source);\n\t\t}\n\t}\n\treturn finalizeMcpConfig(merged);\n}\n\nexport function hasProjectMcpConfig(cwd: string): boolean {\n\treturn getMcpProjectConfigPaths(cwd).some((path) => existsSync(path));\n}\n"]}

package/dist/core/mcp/config-loader.js

@@ -0,0 +1,104 @@
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { CONFIG_DIR_NAME } from "../../config.js";
+import { resolvePath } from "../../utils/paths.js";
+import { createEmptyMcpMergedConfig, finalizeMcpConfig, getMcpProjectConfigPaths, mergeMcpConfigFile, sourceForMcpConfigPath, } from "./config.js";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseMcpConfigFile(path) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch (error) {
+        return {
+            diagnostic: {
+                severity: "error",
+                message: `Failed to read MCP config: ${error instanceof Error ? error.message : String(error)}`,
+                path,
+            },
+        };
+    }
+    if (!isRecord(parsed)) {
+        return {
+            diagnostic: {
+                severity: "error",
+                message: "Invalid MCP config: expected a JSON object",
+                path,
+            },
+        };
+    }
+    const config = {};
+    if (typeof parsed.version === "number") {
+        config.version = parsed.version;
+    }
+    if (isRecord(parsed.settings)) {
+        config.settings = parsed.settings;
+    }
+    if (isRecord(parsed.servers)) {
+        config.servers = parsed.servers;
+    }
+    return { config };
+}
+function mcpConfigSources(cwd, agentDir) {
+    const resolvedCwd = resolvePath(cwd);
+    const resolvedAgentDir = resolvePath(agentDir);
+    return [
+        sourceForMcpConfigPath(join(homedir(), ".config", "mcp", "mcp.json"), {
+            scope: "user",
+            label: "user shared",
+            precedence: 1,
+            shared: true,
+        }),
+        sourceForMcpConfigPath(join(resolvedAgentDir, "mcp.json"), {
+            scope: "user",
+            label: "user Volt",
+            precedence: 2,
+            shared: false,
+        }),
+        sourceForMcpConfigPath(join(resolvedCwd, ".mcp.json"), {
+            scope: "project",
+            label: "project shared",
+            precedence: 3,
+            shared: true,
+        }),
+        sourceForMcpConfigPath(join(resolvedCwd, CONFIG_DIR_NAME, "mcp.json"), {
+            scope: "project",
+            label: "project Volt",
+            precedence: 4,
+            shared: false,
+        }),
+    ];
+}
+export function loadMcpConfig(options) {
+    const sources = mcpConfigSources(options.cwd, options.agentDir);
+    const merged = createEmptyMcpMergedConfig();
+    for (const source of sources) {
+        if (!existsSync(source.path)) {
+            continue;
+        }
+        if (source.scope === "project" && !options.projectTrusted) {
+            merged.diagnostics.push({
+                severity: "warning",
+                message: `Ignored project MCP config because project trust is not granted: ${source.path}`,
+                path: source.path,
+            });
+            continue;
+        }
+        const parsed = parseMcpConfigFile(source.path);
+        if (parsed.diagnostic) {
+            merged.diagnostics.push(parsed.diagnostic);
+            continue;
+        }
+        if (parsed.config) {
+            mergeMcpConfigFile(merged, parsed.config, source);
+        }
+    }
+    return finalizeMcpConfig(merged);
+}
+export function hasProjectMcpConfig(cwd) {
+    return getMcpProjectConfigPaths(cwd).some((path) => existsSync(path));
+}
+//# sourceMappingURL=config-loader.js.map

package/dist/core/mcp/config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-loader.js","sourceRoot":"","sources":["../../../src/core/mcp/config-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EACN,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,EAExB,kBAAkB,EAClB,sBAAsB,GACtB,MAAM,aAAa,CAAC;AASrB,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAmE;IAC1G,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,UAAU,EAAE;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC/F,IAAI;aACJ;SACD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,OAAO;YACN,UAAU,EAAE;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,4CAA4C;gBACrD,IAAI;aACJ;SACD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACnC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AAAA,CAClB;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,QAAgB,EAAqB;IAC3E,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,gBAAgB,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACN,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE;YACrE,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,aAAa;YACpB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,IAAI;SACZ,CAAC;QACF,sBAAsB,CAAC,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,EAAE;YAC1D,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,KAAK;SACb,CAAC;QACF,sBAAsB,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE;YACtD,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,gBAAgB;YACvB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,IAAI;SACZ,CAAC;QACF,sBAAsB,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE;YACtE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,KAAK;SACb,CAAC;KACF,CAAC;AAAA,CACF;AAED,MAAM,UAAU,aAAa,CAAC,OAA6B,EAAqB;IAC/E,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,0BAA0B,EAAE,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,SAAS;QACV,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3D,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;gBACvB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,oEAAoE,MAAM,CAAC,IAAI,EAAE;gBAC1F,IAAI,EAAE,MAAM,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3C,SAAS;QACV,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACF,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAW;IACzD,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CACtE","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { resolvePath } from \"../../utils/paths.ts\";\nimport {\n\tcreateEmptyMcpMergedConfig,\n\tfinalizeMcpConfig,\n\tgetMcpProjectConfigPaths,\n\ttype McpRawConfigFile,\n\tmergeMcpConfigFile,\n\tsourceForMcpConfigPath,\n} from \"./config.ts\";\nimport type { McpConfigDiagnostic, McpConfigSource, McpResolvedConfig } from \"./types.ts\";\n\nexport interface LoadMcpConfigOptions {\n\tcwd: string;\n\tagentDir: string;\n\tprojectTrusted: boolean;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction parseMcpConfigFile(path: string): { config?: McpRawConfigFile; diagnostic?: McpConfigDiagnostic } {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(readFileSync(path, \"utf-8\"));\n\t} catch (error) {\n\t\treturn {\n\t\t\tdiagnostic: {\n\t\t\t\tseverity: \"error\",\n\t\t\t\tmessage: `Failed to read MCP config: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\tpath,\n\t\t\t},\n\t\t};\n\t}\n\tif (!isRecord(parsed)) {\n\t\treturn {\n\t\t\tdiagnostic: {\n\t\t\t\tseverity: \"error\",\n\t\t\t\tmessage: \"Invalid MCP config: expected a JSON object\",\n\t\t\t\tpath,\n\t\t\t},\n\t\t};\n\t}\n\tconst config: McpRawConfigFile = {};\n\tif (typeof parsed.version === \"number\") {\n\t\tconfig.version = parsed.version;\n\t}\n\tif (isRecord(parsed.settings)) {\n\t\tconfig.settings = parsed.settings;\n\t}\n\tif (isRecord(parsed.servers)) {\n\t\tconfig.servers = parsed.servers;\n\t}\n\treturn { config };\n}\n\nfunction mcpConfigSources(cwd: string, agentDir: string): McpConfigSource[] {\n\tconst resolvedCwd = resolvePath(cwd);\n\tconst resolvedAgentDir = resolvePath(agentDir);\n\treturn [\n\t\tsourceForMcpConfigPath(join(homedir(), \".config\", \"mcp\", \"mcp.json\"), {\n\t\t\tscope: \"user\",\n\t\t\tlabel: \"user shared\",\n\t\t\tprecedence: 1,\n\t\t\tshared: true,\n\t\t}),\n\t\tsourceForMcpConfigPath(join(resolvedAgentDir, \"mcp.json\"), {\n\t\t\tscope: \"user\",\n\t\t\tlabel: \"user Volt\",\n\t\t\tprecedence: 2,\n\t\t\tshared: false,\n\t\t}),\n\t\tsourceForMcpConfigPath(join(resolvedCwd, \".mcp.json\"), {\n\t\t\tscope: \"project\",\n\t\t\tlabel: \"project shared\",\n\t\t\tprecedence: 3,\n\t\t\tshared: true,\n\t\t}),\n\t\tsourceForMcpConfigPath(join(resolvedCwd, CONFIG_DIR_NAME, \"mcp.json\"), {\n\t\t\tscope: \"project\",\n\t\t\tlabel: \"project Volt\",\n\t\t\tprecedence: 4,\n\t\t\tshared: false,\n\t\t}),\n\t];\n}\n\nexport function loadMcpConfig(options: LoadMcpConfigOptions): McpResolvedConfig {\n\tconst sources = mcpConfigSources(options.cwd, options.agentDir);\n\tconst merged = createEmptyMcpMergedConfig();\n\tfor (const source of sources) {\n\t\tif (!existsSync(source.path)) {\n\t\t\tcontinue;\n\t\t}\n\t\tif (source.scope === \"project\" && !options.projectTrusted) {\n\t\t\tmerged.diagnostics.push({\n\t\t\t\tseverity: \"warning\",\n\t\t\t\tmessage: `Ignored project MCP config because project trust is not granted: ${source.path}`,\n\t\t\t\tpath: source.path,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\tconst parsed = parseMcpConfigFile(source.path);\n\t\tif (parsed.diagnostic) {\n\t\t\tmerged.diagnostics.push(parsed.diagnostic);\n\t\t\tcontinue;\n\t\t}\n\t\tif (parsed.config) {\n\t\t\tmergeMcpConfigFile(merged, parsed.config, source);\n\t\t}\n\t}\n\treturn finalizeMcpConfig(merged);\n}\n\nexport function hasProjectMcpConfig(cwd: string): boolean {\n\treturn getMcpProjectConfigPaths(cwd).some((path) => existsSync(path));\n}\n"]}

package/dist/core/mcp/config-writer.d.ts

@@ -0,0 +1,21 @@
+import type { McpResolvedServerConfig, McpSourceScope } from "./types.ts";
+export interface McpConfigWriterOptions {
+    cwd: string;
+    agentDir: string;
+    projectTrusted: boolean;
+}
+export interface McpConfigWriteResult {
+    path: string;
+    scope: McpSourceScope;
+}
+export declare class McpConfigWriter {
+    private cwd;
+    private agentDir;
+    private projectTrusted;
+    constructor(options: McpConfigWriterOptions);
+    setServerEnabled(server: McpResolvedServerConfig, enabled: boolean): McpConfigWriteResult;
+    setServerDirectTools(server: McpResolvedServerConfig, directTools: boolean | string[]): McpConfigWriteResult;
+    private getVoltOwnedPath;
+    private updateServerOverlay;
+}
+//# sourceMappingURL=config-writer.d.ts.map

package/dist/core/mcp/config-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-writer.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/config-writer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAI1E,MAAM,WAAW,sBAAsB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;CACtB;AAwED,qBAAa,eAAe;IAC3B,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAU;IAEhC,YAAY,OAAO,EAAE,sBAAsB,EAI1C;IAED,gBAAgB,CAAC,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,GAAG,oBAAoB,CAIxF;IAED,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,oBAAoB,CAI3G;IAED,OAAO,CAAC,gBAAgB;IAaxB,OAAO,CAAC,mBAAmB;CAmB3B","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { existsSync, lstatSync, readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport lockfile from \"proper-lockfile\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { writeDurableAtomicFileSync } from \"../../utils/durable-atomic-write.ts\";\nimport { resolvePath } from \"../../utils/paths.ts\";\nimport { ensurePrivateDirectorySync, hardenPrivateRegularFileSync } from \"../../utils/private-files.ts\";\nimport type { McpResolvedServerConfig, McpSourceScope } from \"./types.ts\";\n\nconst MAX_MCP_CONFIG_BYTES = 4 * 1024 * 1024;\n\nexport interface McpConfigWriterOptions {\n\tcwd: string;\n\tagentDir: string;\n\tprojectTrusted: boolean;\n}\n\nexport interface McpConfigWriteResult {\n\tpath: string;\n\tscope: McpSourceScope;\n}\n\ntype MutableJsonRecord = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is MutableJsonRecord {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction readJsonObject(path: string): MutableJsonRecord {\n\tif (!existsSync(path)) {\n\t\treturn {};\n\t}\n\thardenPrivateRegularFileSync(path);\n\tif (lstatSync(path).size > MAX_MCP_CONFIG_BYTES) {\n\t\tthrow new Error(`MCP config exceeds ${MAX_MCP_CONFIG_BYTES} bytes: ${path}`);\n\t}\n\tconst parsed = JSON.parse(readFileSync(path, \"utf-8\")) as unknown;\n\tif (!isRecord(parsed)) {\n\t\tthrow new Error(`MCP config is not a JSON object: ${path}`);\n\t}\n\treturn parsed;\n}\n\nfunction ensureObjectField(parent: MutableJsonRecord, field: string): MutableJsonRecord {\n\tconst current = parent[field];\n\tif (isRecord(current)) {\n\t\treturn current;\n\t}\n\tconst next: MutableJsonRecord = {};\n\tparent[field] = next;\n\treturn next;\n}\n\nfunction writeJsonObject(path: string, value: MutableJsonRecord): void {\n\tconst serialized = `${JSON.stringify(value, null, 2)}\\n`;\n\tif (Buffer.byteLength(serialized, \"utf8\") > MAX_MCP_CONFIG_BYTES) {\n\t\tthrow new Error(`Refusing to write MCP config larger than ${MAX_MCP_CONFIG_BYTES} bytes`);\n\t}\n\tensurePrivateDirectorySync(dirname(path));\n\twriteDurableAtomicFileSync(path, serialized);\n}\n\nfunction withConfigLock<T>(path: string, operation: () => T): T {\n\tconst directoryPath = dirname(path);\n\tensurePrivateDirectorySync(directoryPath);\n\tlet release: (() => void) | undefined;\n\tlet lastError: unknown;\n\tfor (let attempt = 1; attempt <= 10; attempt++) {\n\t\ttry {\n\t\t\trelease = lockfile.lockSync(directoryPath, { realpath: false, lockfilePath: `${path}.lock` });\n\t\t\tbreak;\n\t\t} catch (error) {\n\t\t\tconst code =\n\t\t\t\ttypeof error === \"object\" && error !== null && \"code\" in error\n\t\t\t\t\t? String((error as { code?: unknown }).code)\n\t\t\t\t\t: undefined;\n\t\t\tif (code !== \"ELOCKED\" || attempt === 10) throw error;\n\t\t\tlastError = error;\n\t\t\tconst startedAt = Date.now();\n\t\t\twhile (Date.now() - startedAt < 20) {\n\t\t\t\t// Preserve the synchronous writer contract while waiting briefly.\n\t\t\t}\n\t\t}\n\t}\n\tif (!release) throw lastError instanceof Error ? lastError : new Error(\"Failed to lock MCP config\");\n\ttry {\n\t\treturn operation();\n\t} finally {\n\t\trelease();\n\t}\n}\n\nexport class McpConfigWriter {\n\tprivate cwd: string;\n\tprivate agentDir: string;\n\tprivate projectTrusted: boolean;\n\n\tconstructor(options: McpConfigWriterOptions) {\n\t\tthis.cwd = resolvePath(options.cwd);\n\t\tthis.agentDir = resolvePath(options.agentDir);\n\t\tthis.projectTrusted = options.projectTrusted;\n\t}\n\n\tsetServerEnabled(server: McpResolvedServerConfig, enabled: boolean): McpConfigWriteResult {\n\t\treturn this.updateServerOverlay(server, (overlay) => {\n\t\t\toverlay.enabled = enabled;\n\t\t});\n\t}\n\n\tsetServerDirectTools(server: McpResolvedServerConfig, directTools: boolean | string[]): McpConfigWriteResult {\n\t\treturn this.updateServerOverlay(server, (overlay) => {\n\t\t\toverlay.directTools = Array.isArray(directTools) ? [...directTools] : directTools;\n\t\t});\n\t}\n\n\tprivate getVoltOwnedPath(scope: McpSourceScope): string {\n\t\tif (scope === \"project\") {\n\t\t\tif (!this.projectTrusted) {\n\t\t\t\tthrow new Error(\"Cannot persist project MCP config because project trust is not granted\");\n\t\t\t}\n\t\t\treturn join(this.cwd, CONFIG_DIR_NAME, \"mcp.json\");\n\t\t}\n\t\tif (scope === \"temporary\") {\n\t\t\tthrow new Error(\"Cannot persist temporary MCP server config\");\n\t\t}\n\t\treturn join(this.agentDir, \"mcp.json\");\n\t}\n\n\tprivate updateServerOverlay(\n\t\tserver: McpResolvedServerConfig,\n\t\tupdate: (overlay: MutableJsonRecord) => void,\n\t): McpConfigWriteResult {\n\t\tconst path = this.getVoltOwnedPath(server.source.scope);\n\t\twithConfigLock(path, () => {\n\t\t\tconst config = readJsonObject(path);\n\t\t\tif (typeof config.version !== \"number\") {\n\t\t\t\tconfig.version = 1;\n\t\t\t}\n\t\t\tconst servers = ensureObjectField(config, \"servers\");\n\t\t\tconst current = servers[server.id];\n\t\t\tconst overlay = isRecord(current) ? current : {};\n\t\t\tservers[server.id] = overlay;\n\t\t\tupdate(overlay);\n\t\t\twriteJsonObject(path, config);\n\t\t});\n\t\treturn { path, scope: server.source.scope };\n\t}\n}\n"]}