@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/mcp/output-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-store.js","sourceRoot":"","sources":["../../../src/core/mcp/output-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACN,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAG1F,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,6BAA6B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzD,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAuCzD,SAAS,UAAU,CAAC,KAAa,EAAU;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAAA,CACzC;AAED,SAAS,SAAS,CAAC,KAAa,EAAU;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC;IACV,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,EAAE,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AAAA,CACpB;AAED,SAAS,aAAa,GAAW;IAChC,OAAO,UAAU,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CAClD;AAED,SAAS,WAAW,CAAC,OAAe,EAAU;IAC7C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,SAAiB,EAAE,QAAgB,EAA4C;IACtH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,GAAG,EAAE,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AAAA,CAChF;AAED,MAAM,OAAO,cAAc;IAClB,GAAG,CAAS;IACZ,cAAc,CAAS;IACvB,cAAc,CAAS;IACvB,kBAAkB,CAAS;IAC3B,eAAe,CAAS;IACxB,kBAAkB,CAAS;IAC3B,aAAa,CAAS;IACtB,GAAG,CAAe;IAClB,SAAS,CAAqB;IAC9B,WAAW,CAAqB;IAExC,YAAY,OAA8B,EAAE;QAC3C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,iBAAiB,CAAC;QAClE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,iBAAiB,CAAC;QAClE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC,CAAC;QACnG,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC,CAAC;QACzF,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC,CAAC;QACnG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAAA,CACvC;IAED,WAAW,CAAC,IAAY,EAAyB;QAChD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO;YACN,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,UAAU,EAAE;gBACX,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,UAAU,CAAC,WAAW;gBACrC,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,aAAa,EAAE,UAAU,CAAC,WAAW;gBACrC,UAAU,EAAE,UAAU,CAAC,UAAU;aACjC;YACD,GAAG,CAAC,OAAO;gBACV,CAAC,CAAC;oBACA,KAAK,EAAE;wBACN,EAAE,EAAE,OAAO;wBACX,IAAI,EAAE,yCAAyC,OAAO,KAAK;qBAC3D;iBACD;gBACF,CAAC,CAAC,EAAE,CAAC;SACN,CAAC;IAAA,CACF;IAED,KAAK,CAAC,IAAY,EAAsB;QACvC,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAoB;YAC/B,EAAE;YACF,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7C,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,IAAI;YACJ,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;YACvB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;SACtB,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QACjD,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,eAAe,GAAG,IAAI,CAAC,kBAAkB,IAAI,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5F,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,uBAAuB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC;IAAA,CACV;IAED,IAAI,CAAC,OAAe,EAAE,OAA6C,EAAwB;QAC1F,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,oEAAoE,OAAO,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAY,CAAC;QACtE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,MAAkC,CAAC;QAClD,IACC,MAAM,CAAC,EAAE,KAAK,EAAE;YAChB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EACvC,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,qDAAqD,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,uDAAuD,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO;YACN,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,UAAU,EAAE,MAAM,CAAC,KAAK;SACxB,CAAC;IAAA,CACF;IAEO,KAAK,CAAC,aAAa,GAAG,CAAC,EAAE,eAAe,GAAG,CAAC,EAAW;QAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;aACnC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC/C,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;oBACjE,UAAU,CAAC,IAAI,CAAC,CAAC;oBACjB,OAAO,EAAE,CAAC;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAClE,UAAU,CAAC,IAAI,CAAC,CAAC;oBACjB,OAAO,EAAE,CAAC;gBACX,CAAC;gBACD,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,EAAE,CAAC;YACX,CAAC;QAAA,CACD,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IACC,UAAU,GAAG,aAAa,IAAI,IAAI,CAAC,kBAAkB;gBACrD,YAAY,GAAG,eAAe,IAAI,IAAI,CAAC,eAAe,EACrD,CAAC;gBACF,MAAM;YACP,CAAC;YACD,IAAI,CAAC;gBACJ,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvB,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC;gBACzB,YAAY,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACR,uEAAuE;YACxE,CAAC;QACF,CAAC;QACD,OAAO,CACN,UAAU,GAAG,aAAa,IAAI,IAAI,CAAC,kBAAkB,IAAI,YAAY,GAAG,eAAe,IAAI,IAAI,CAAC,eAAe,CAC/G,CAAC;IAAA,CACF;CACD","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { existsSync, lstatSync, readdirSync, readFileSync, unlinkSync, utimesSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport {\n\tensurePrivateDirectorySync,\n\thardenPrivateRegularFileSync,\n\twritePrivateNewFileSync,\n} from \"../../utils/private-files.ts\";\nimport { DEFAULT_MAX_BYTES, DEFAULT_MAX_LINES, truncateHead } from \"../tools/truncate.ts\";\nimport type { McpCacheReference, McpOutputTruncation } from \"./types.ts\";\n\nconst DEFAULT_MAX_CACHE_ENTRY_BYTES = 16 * 1024 * 1024;\nconst DEFAULT_MAX_CACHE_ENTRIES = 64;\nconst DEFAULT_MAX_CACHE_TOTAL_BYTES = 128 * 1024 * 1024;\nconst DEFAULT_MAX_CACHE_AGE_MS = 7 * 24 * 60 * 60 * 1000;\nconst CACHE_FILE_PATTERN = /^mcpout_[a-f0-9]{32}\\.json$/;\n\nexport interface McpOutputStoreOptions {\n\tagentDir: string;\n\tmaxOutputBytes?: number;\n\tmaxOutputLines?: number;\n\tmaxCacheEntryBytes?: number;\n\tmaxCacheEntries?: number;\n\tmaxCacheTotalBytes?: number;\n\tmaxCacheAgeMs?: number;\n\tnow?: () => number;\n\tsessionId?: string;\n\tworkspaceId?: string;\n}\n\nexport interface McpStoredOutput {\n\tid: string;\n\tcreatedAt: string;\n\tsessionId?: string;\n\tworkspaceId?: string;\n\ttext: string;\n\tbytes: number;\n\tlines: number;\n}\n\nexport interface McpStoredOutputChunk {\n\tcacheId: string;\n\tcontent: string;\n\tstartByte: number;\n\tnextCursor?: string;\n\ttotalBytes: number;\n}\n\nexport interface McpStoredOutputResult {\n\tcontent: string;\n\ttruncation?: McpOutputTruncation;\n\tcache?: McpCacheReference;\n}\n\nfunction byteLength(value: string): number {\n\treturn Buffer.byteLength(value, \"utf-8\");\n}\n\nfunction lineCount(value: string): number {\n\tif (value.length === 0) {\n\t\treturn 0;\n\t}\n\tconst lines = value.split(\"\\n\");\n\tif (value.endsWith(\"\\n\")) {\n\t\tlines.pop();\n\t}\n\treturn lines.length;\n}\n\nfunction createCacheId(): string {\n\treturn `mcpout_${randomUUID().replace(/-/g, \"\")}`;\n}\n\nfunction safeCacheId(cacheId: string): string {\n\tif (!/^mcpout_[a-f0-9]{32}$/.test(cacheId)) {\n\t\tthrow new Error(\"Invalid MCP cache id\");\n\t}\n\treturn cacheId;\n}\n\nfunction sliceByUtf8Bytes(text: string, startByte: number, maxBytes: number): { content: string; nextCursor?: string } {\n\tconst buffer = Buffer.from(text, \"utf-8\");\n\tconst start = Math.max(0, Math.min(startByte, buffer.length));\n\tlet end = Math.max(start, Math.min(buffer.length, start + maxBytes));\n\twhile (end > start && (buffer[end] & 0xc0) === 0x80) {\n\t\tend--;\n\t}\n\tconst content = buffer.slice(start, end).toString(\"utf-8\");\n\treturn end < buffer.length ? { content, nextCursor: String(end) } : { content };\n}\n\nexport class McpOutputStore {\n\tprivate dir: string;\n\tprivate maxOutputBytes: number;\n\tprivate maxOutputLines: number;\n\tprivate maxCacheEntryBytes: number;\n\tprivate maxCacheEntries: number;\n\tprivate maxCacheTotalBytes: number;\n\tprivate maxCacheAgeMs: number;\n\tprivate now: () => number;\n\tprivate sessionId: string | undefined;\n\tprivate workspaceId: string | undefined;\n\n\tconstructor(options: McpOutputStoreOptions) {\n\t\tthis.dir = join(options.agentDir, \"mcp\", \"output\");\n\t\tthis.maxOutputBytes = options.maxOutputBytes ?? DEFAULT_MAX_BYTES;\n\t\tthis.maxOutputLines = options.maxOutputLines ?? DEFAULT_MAX_LINES;\n\t\tthis.maxCacheEntryBytes = Math.max(1, options.maxCacheEntryBytes ?? DEFAULT_MAX_CACHE_ENTRY_BYTES);\n\t\tthis.maxCacheEntries = Math.max(1, options.maxCacheEntries ?? DEFAULT_MAX_CACHE_ENTRIES);\n\t\tthis.maxCacheTotalBytes = Math.max(1, options.maxCacheTotalBytes ?? DEFAULT_MAX_CACHE_TOTAL_BYTES);\n\t\tthis.maxCacheAgeMs = Math.max(1, options.maxCacheAgeMs ?? DEFAULT_MAX_CACHE_AGE_MS);\n\t\tthis.now = options.now ?? Date.now;\n\t\tthis.sessionId = options.sessionId;\n\t\tthis.workspaceId = options.workspaceId;\n\t}\n\n\tshapeOutput(text: string): McpStoredOutputResult {\n\t\tconst truncation = truncateHead(text, { maxBytes: this.maxOutputBytes, maxLines: this.maxOutputLines });\n\t\tif (!truncation.truncated) {\n\t\t\treturn { content: text };\n\t\t}\n\t\tconst cacheId = this.write(text);\n\t\treturn {\n\t\t\tcontent: truncation.content,\n\t\t\ttruncation: {\n\t\t\t\ttruncated: true,\n\t\t\t\treturnedBytes: truncation.outputBytes,\n\t\t\t\ttotalBytes: truncation.totalBytes,\n\t\t\t\treturnedLines: truncation.outputLines,\n\t\t\t\ttotalLines: truncation.totalLines,\n\t\t\t},\n\t\t\t...(cacheId\n\t\t\t\t? {\n\t\t\t\t\t\tcache: {\n\t\t\t\t\t\t\tid: cacheId,\n\t\t\t\t\t\t\tread: `mcp({\"action\":\"read_cache\",\"cacheId\":\"${cacheId}\"})`,\n\t\t\t\t\t\t},\n\t\t\t\t\t}\n\t\t\t\t: {}),\n\t\t};\n\t}\n\n\twrite(text: string): string | undefined {\n\t\tconst id = createCacheId();\n\t\tconst record: McpStoredOutput = {\n\t\t\tid,\n\t\t\tcreatedAt: new Date(this.now()).toISOString(),\n\t\t\t...(this.sessionId ? { sessionId: this.sessionId } : {}),\n\t\t\t...(this.workspaceId ? { workspaceId: this.workspaceId } : {}),\n\t\t\ttext,\n\t\t\tbytes: byteLength(text),\n\t\t\tlines: lineCount(text),\n\t\t};\n\t\tconst serialized = `${JSON.stringify(record)}\\n`;\n\t\tconst serializedBytes = byteLength(serialized);\n\t\tif (serializedBytes > this.maxCacheEntryBytes || serializedBytes > this.maxCacheTotalBytes) {\n\t\t\treturn undefined;\n\t\t}\n\t\tensurePrivateDirectorySync(this.dir);\n\t\tif (!this.prune(serializedBytes, 1)) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst filePath = join(this.dir, `${id}.json`);\n\t\twritePrivateNewFileSync(filePath, serialized);\n\t\tconst timestamp = new Date(this.now());\n\t\tutimesSync(filePath, timestamp, timestamp);\n\t\treturn id;\n\t}\n\n\tread(cacheId: string, options?: { cursor?: string; limit?: number }): McpStoredOutputChunk {\n\t\tconst id = safeCacheId(cacheId);\n\t\tconst filePath = join(this.dir, `${id}.json`);\n\t\tif (!existsSync(filePath)) {\n\t\t\tthrow new Error(`MCP cache entry not found: ${cacheId}`);\n\t\t}\n\t\thardenPrivateRegularFileSync(filePath);\n\t\tconst stat = lstatSync(filePath);\n\t\tif (stat.size > this.maxCacheEntryBytes || stat.mtimeMs < this.now() - this.maxCacheAgeMs) {\n\t\t\tthrow new Error(`MCP cache entry is expired or exceeds the configured size limit: ${cacheId}`);\n\t\t}\n\t\tconst parsed = JSON.parse(readFileSync(filePath, \"utf-8\")) as unknown;\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\tthrow new Error(`Invalid MCP cache entry: ${cacheId}`);\n\t\t}\n\t\tconst record = parsed as Partial<McpStoredOutput>;\n\t\tif (\n\t\t\trecord.id !== id ||\n\t\t\ttypeof record.text !== \"string\" ||\n\t\t\ttypeof record.bytes !== \"number\" ||\n\t\t\trecord.bytes !== byteLength(record.text)\n\t\t) {\n\t\t\tthrow new Error(`Invalid MCP cache entry: ${cacheId}`);\n\t\t}\n\t\tif (record.sessionId !== this.sessionId) {\n\t\t\tthrow new Error(`MCP cache entry is not available in this session: ${cacheId}`);\n\t\t}\n\t\tif (record.workspaceId !== this.workspaceId) {\n\t\t\tthrow new Error(`MCP cache entry is not available in this workspace: ${cacheId}`);\n\t\t}\n\t\tif (options?.cursor !== undefined && !/^\\d+$/.test(options.cursor)) {\n\t\t\tthrow new Error(\"Invalid MCP cache cursor\");\n\t\t}\n\t\tconst startByte = options?.cursor ? Number.parseInt(options.cursor, 10) : 0;\n\t\tif (!Number.isSafeInteger(startByte) || startByte < 0 || startByte > record.bytes) {\n\t\t\tthrow new Error(\"Invalid MCP cache cursor\");\n\t\t}\n\t\tconst maxBytes = Math.max(1, Math.min(options?.limit ?? this.maxOutputBytes, this.maxOutputBytes));\n\t\tconst chunk = sliceByUtf8Bytes(record.text, startByte, maxBytes);\n\t\treturn {\n\t\t\tcacheId,\n\t\t\tcontent: chunk.content,\n\t\t\tstartByte,\n\t\t\t...(chunk.nextCursor ? { nextCursor: chunk.nextCursor } : {}),\n\t\t\ttotalBytes: record.bytes,\n\t\t};\n\t}\n\n\tprivate prune(reservedBytes = 0, reservedEntries = 0): boolean {\n\t\tif (!existsSync(this.dir)) return true;\n\t\tconst cutoff = this.now() - this.maxCacheAgeMs;\n\t\tconst entries = readdirSync(this.dir)\n\t\t\t.filter((name) => CACHE_FILE_PATTERN.test(name))\n\t\t\t.flatMap((name) => {\n\t\t\t\tconst path = join(this.dir, name);\n\t\t\t\ttry {\n\t\t\t\t\tconst stat = lstatSync(path);\n\t\t\t\t\tif (stat.isSymbolicLink() || !stat.isFile() || stat.nlink !== 1) {\n\t\t\t\t\t\tunlinkSync(path);\n\t\t\t\t\t\treturn [];\n\t\t\t\t\t}\n\t\t\t\t\tif (stat.mtimeMs < cutoff || stat.size > this.maxCacheEntryBytes) {\n\t\t\t\t\t\tunlinkSync(path);\n\t\t\t\t\t\treturn [];\n\t\t\t\t\t}\n\t\t\t\t\treturn [{ path, size: stat.size, mtimeMs: stat.mtimeMs }];\n\t\t\t\t} catch {\n\t\t\t\t\treturn [];\n\t\t\t\t}\n\t\t\t})\n\t\t\t.sort((left, right) => left.mtimeMs - right.mtimeMs);\n\t\tlet totalBytes = entries.reduce((total, entry) => total + entry.size, 0);\n\t\tlet totalEntries = entries.length;\n\t\tfor (const entry of entries) {\n\t\t\tif (\n\t\t\t\ttotalBytes + reservedBytes <= this.maxCacheTotalBytes &&\n\t\t\t\ttotalEntries + reservedEntries <= this.maxCacheEntries\n\t\t\t) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tunlinkSync(entry.path);\n\t\t\t\ttotalBytes -= entry.size;\n\t\t\t\ttotalEntries--;\n\t\t\t} catch {\n\t\t\t\t// Capacity is checked below; a failed eviction prevents the new write.\n\t\t\t}\n\t\t}\n\t\treturn (\n\t\t\ttotalBytes + reservedBytes <= this.maxCacheTotalBytes && totalEntries + reservedEntries <= this.maxCacheEntries\n\t\t);\n\t}\n}\n"]}

package/dist/core/mcp/rpc.d.ts

@@ -0,0 +1,13 @@
+import type { McpManager } from "./manager.ts";
+import type { McpServerSummary } from "./types.ts";
+export interface McpRpcCapabilities {
+    protocolVersion: 1;
+    features: string[];
+    remoteSafeByDefault: string[];
+}
+export interface McpRpcServerListResponse {
+    servers: McpServerSummary[];
+}
+export declare function getMcpRpcCapabilities(): McpRpcCapabilities;
+export declare function listMcpRpcServers(manager: McpManager | undefined): McpRpcServerListResponse;
+//# sourceMappingURL=rpc.d.ts.map

package/dist/core/mcp/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IAClC,eAAe,EAAE,CAAC,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACxC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC5B;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAwB1D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,wBAAwB,CAE3F","sourcesContent":["import type { McpManager } from \"./manager.ts\";\nimport type { McpServerSummary } from \"./types.ts\";\n\nexport interface McpRpcCapabilities {\n\tprotocolVersion: 1;\n\tfeatures: string[];\n\tremoteSafeByDefault: string[];\n}\n\nexport interface McpRpcServerListResponse {\n\tservers: McpServerSummary[];\n}\n\nexport function getMcpRpcCapabilities(): McpRpcCapabilities {\n\treturn {\n\t\tprotocolVersion: 1,\n\t\tfeatures: [\"mcp_management.v1\", \"mcp_oauth.v1\", \"mcp_device_auth.v1\", \"mcp_events.v1\"],\n\t\tremoteSafeByDefault: [\n\t\t\t\"list_mcp_servers\",\n\t\t\t\"get_mcp_server\",\n\t\t\t\"connect_mcp_server\",\n\t\t\t\"refresh_mcp_server\",\n\t\t\t\"set_mcp_server_enabled\",\n\t\t\t\"list_mcp_recent_calls\",\n\t\t\t\"list_mcp_tools\",\n\t\t\t\"get_mcp_tool\",\n\t\t\t\"list_mcp_resources\",\n\t\t\t\"read_mcp_resource\",\n\t\t\t\"list_mcp_prompts\",\n\t\t\t\"get_mcp_prompt\",\n\t\t\t\"disconnect_mcp_server\",\n\t\t\t\"start_mcp_server_auth\",\n\t\t\t\"poll_mcp_server_auth\",\n\t\t\t\"cancel_mcp_server_auth\",\n\t\t\t\"logout_mcp_server\",\n\t\t],\n\t};\n}\n\nexport function listMcpRpcServers(manager: McpManager | undefined): McpRpcServerListResponse {\n\treturn { servers: manager?.listServers() ?? [] };\n}\n"]}

package/dist/core/mcp/rpc.js

@@ -0,0 +1,29 @@
+export function getMcpRpcCapabilities() {
+    return {
+        protocolVersion: 1,
+        features: ["mcp_management.v1", "mcp_oauth.v1", "mcp_device_auth.v1", "mcp_events.v1"],
+        remoteSafeByDefault: [
+            "list_mcp_servers",
+            "get_mcp_server",
+            "connect_mcp_server",
+            "refresh_mcp_server",
+            "set_mcp_server_enabled",
+            "list_mcp_recent_calls",
+            "list_mcp_tools",
+            "get_mcp_tool",
+            "list_mcp_resources",
+            "read_mcp_resource",
+            "list_mcp_prompts",
+            "get_mcp_prompt",
+            "disconnect_mcp_server",
+            "start_mcp_server_auth",
+            "poll_mcp_server_auth",
+            "cancel_mcp_server_auth",
+            "logout_mcp_server",
+        ],
+    };
+}
+export function listMcpRpcServers(manager) {
+    return { servers: manager?.listServers() ?? [] };
+}
+//# sourceMappingURL=rpc.js.map

package/dist/core/mcp/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../../src/core/mcp/rpc.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,qBAAqB,GAAuB;IAC3D,OAAO;QACN,eAAe,EAAE,CAAC;QAClB,QAAQ,EAAE,CAAC,mBAAmB,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,CAAC;QACtF,mBAAmB,EAAE;YACpB,kBAAkB;YAClB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;YACpB,wBAAwB;YACxB,uBAAuB;YACvB,gBAAgB;YAChB,cAAc;YACd,oBAAoB;YACpB,mBAAmB;YACnB,kBAAkB;YAClB,gBAAgB;YAChB,uBAAuB;YACvB,uBAAuB;YACvB,sBAAsB;YACtB,wBAAwB;YACxB,mBAAmB;SACnB;KACD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA+B,EAA4B;IAC5F,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;AAAA,CACjD","sourcesContent":["import type { McpManager } from \"./manager.ts\";\nimport type { McpServerSummary } from \"./types.ts\";\n\nexport interface McpRpcCapabilities {\n\tprotocolVersion: 1;\n\tfeatures: string[];\n\tremoteSafeByDefault: string[];\n}\n\nexport interface McpRpcServerListResponse {\n\tservers: McpServerSummary[];\n}\n\nexport function getMcpRpcCapabilities(): McpRpcCapabilities {\n\treturn {\n\t\tprotocolVersion: 1,\n\t\tfeatures: [\"mcp_management.v1\", \"mcp_oauth.v1\", \"mcp_device_auth.v1\", \"mcp_events.v1\"],\n\t\tremoteSafeByDefault: [\n\t\t\t\"list_mcp_servers\",\n\t\t\t\"get_mcp_server\",\n\t\t\t\"connect_mcp_server\",\n\t\t\t\"refresh_mcp_server\",\n\t\t\t\"set_mcp_server_enabled\",\n\t\t\t\"list_mcp_recent_calls\",\n\t\t\t\"list_mcp_tools\",\n\t\t\t\"get_mcp_tool\",\n\t\t\t\"list_mcp_resources\",\n\t\t\t\"read_mcp_resource\",\n\t\t\t\"list_mcp_prompts\",\n\t\t\t\"get_mcp_prompt\",\n\t\t\t\"disconnect_mcp_server\",\n\t\t\t\"start_mcp_server_auth\",\n\t\t\t\"poll_mcp_server_auth\",\n\t\t\t\"cancel_mcp_server_auth\",\n\t\t\t\"logout_mcp_server\",\n\t\t],\n\t};\n}\n\nexport function listMcpRpcServers(manager: McpManager | undefined): McpRpcServerListResponse {\n\treturn { servers: manager?.listServers() ?? [] };\n}\n"]}

package/dist/core/mcp/safety.d.ts

@@ -0,0 +1,6 @@
+import type { Tool as SdkTool } from "@modelcontextprotocol/sdk/types.js";
+import type { McpRisk } from "./types.ts";
+export declare function classifyMcpToolRisk(tool: Pick<SdkTool, "name" | "description" | "annotations">): McpRisk;
+export declare function redactMcpText(value: string): string;
+export declare function sanitizeMcpArguments(value: unknown, depth?: number): unknown;
+//# sourceMappingURL=safety.d.ts.map

package/dist/core/mcp/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/safety.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,IAAI,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAoB1C,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,GAAG,OAAO,CAkBxG;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAanD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAyBvE","sourcesContent":["import type { Tool as SdkTool } from \"@modelcontextprotocol/sdk/types.js\";\nimport type { McpRisk } from \"./types.ts\";\n\nconst TOKEN_START = \"(?:^|[^a-z0-9])\";\nconst TOKEN_END = \"(?:$|[^a-z0-9])\";\nconst DESTRUCTIVE_NAME_PATTERN = new RegExp(\n\t`${TOKEN_START}(delete|remove|rm|destroy|drop|truncate|erase|reset|revoke|terminate|kill|purge)${TOKEN_END}`,\n\t\"i\",\n);\nconst WRITE_NAME_PATTERN = new RegExp(\n\t`${TOKEN_START}(create|update|write|edit|patch|post|put|send|submit|comment|merge|commit|push|publish|upload|insert|set|add|assign)${TOKEN_END}`,\n\t\"i\",\n);\nconst READ_NAME_PATTERN = new RegExp(\n\t`${TOKEN_START}(read|get|list|search|find|query|fetch|lookup|inspect|describe|show|view|download)${TOKEN_END}`,\n\t\"i\",\n);\nconst SECRET_KEY_PATTERN = /token|secret|password|passwd|api[-_]?key|authorization|credential|private/i;\nconst SECRET_VALUE_PATTERN =\n\t/(bearer\\s+)[A-Za-z0-9._~+/=-]+|((?:token|secret|password|passwd|api[-_]?key|authorization|credential|private)[\\s:=]+)[^\\s,;]+/gi;\n\nexport function classifyMcpToolRisk(tool: Pick<SdkTool, \"name\" | \"description\" | \"annotations\">): McpRisk {\n\tif (tool.annotations?.destructiveHint === true) {\n\t\treturn \"destructive\";\n\t}\n\tconst haystack = `${tool.name} ${tool.description ?? \"\"}`;\n\tif (DESTRUCTIVE_NAME_PATTERN.test(haystack)) {\n\t\treturn \"destructive\";\n\t}\n\tif (WRITE_NAME_PATTERN.test(haystack)) {\n\t\treturn \"write\";\n\t}\n\tif (READ_NAME_PATTERN.test(haystack)) {\n\t\treturn \"read\";\n\t}\n\tif (tool.annotations?.readOnlyHint === true) {\n\t\treturn \"read\";\n\t}\n\treturn \"unknown\";\n}\n\nexport function redactMcpText(value: string): string {\n\treturn value.replace(\n\t\tSECRET_VALUE_PATTERN,\n\t\t(_match, bearerPrefix: string | undefined, keyPrefix: string | undefined) => {\n\t\t\tif (bearerPrefix) {\n\t\t\t\treturn `${bearerPrefix}[redacted]`;\n\t\t\t}\n\t\t\tif (keyPrefix) {\n\t\t\t\treturn `${keyPrefix}[redacted]`;\n\t\t\t}\n\t\t\treturn \"[redacted]\";\n\t\t},\n\t);\n}\n\nexport function sanitizeMcpArguments(value: unknown, depth = 0): unknown {\n\tif (depth > 4) {\n\t\treturn \"[redacted: nested]\";\n\t}\n\tif (value === null || typeof value === \"number\" || typeof value === \"boolean\") {\n\t\treturn value;\n\t}\n\tif (typeof value === \"string\") {\n\t\treturn redactMcpText(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn value.slice(0, 20).map((entry) => sanitizeMcpArguments(entry, depth + 1));\n\t}\n\tif (typeof value !== \"object\") {\n\t\treturn String(value);\n\t}\n\tconst result: Record<string, unknown> = {};\n\tfor (const [key, entry] of Object.entries(value as Record<string, unknown>)) {\n\t\tif (SECRET_KEY_PATTERN.test(key)) {\n\t\t\tresult[key] = \"[redacted]\";\n\t\t} else {\n\t\t\tresult[key] = sanitizeMcpArguments(entry, depth + 1);\n\t\t}\n\t}\n\treturn result;\n}\n"]}

package/dist/core/mcp/safety.js

@@ -0,0 +1,65 @@
+const TOKEN_START = "(?:^|[^a-z0-9])";
+const TOKEN_END = "(?:$|[^a-z0-9])";
+const DESTRUCTIVE_NAME_PATTERN = new RegExp(`${TOKEN_START}(delete|remove|rm|destroy|drop|truncate|erase|reset|revoke|terminate|kill|purge)${TOKEN_END}`, "i");
+const WRITE_NAME_PATTERN = new RegExp(`${TOKEN_START}(create|update|write|edit|patch|post|put|send|submit|comment|merge|commit|push|publish|upload|insert|set|add|assign)${TOKEN_END}`, "i");
+const READ_NAME_PATTERN = new RegExp(`${TOKEN_START}(read|get|list|search|find|query|fetch|lookup|inspect|describe|show|view|download)${TOKEN_END}`, "i");
+const SECRET_KEY_PATTERN = /token|secret|password|passwd|api[-_]?key|authorization|credential|private/i;
+const SECRET_VALUE_PATTERN = /(bearer\s+)[A-Za-z0-9._~+/=-]+|((?:token|secret|password|passwd|api[-_]?key|authorization|credential|private)[\s:=]+)[^\s,;]+/gi;
+export function classifyMcpToolRisk(tool) {
+    if (tool.annotations?.destructiveHint === true) {
+        return "destructive";
+    }
+    const haystack = `${tool.name} ${tool.description ?? ""}`;
+    if (DESTRUCTIVE_NAME_PATTERN.test(haystack)) {
+        return "destructive";
+    }
+    if (WRITE_NAME_PATTERN.test(haystack)) {
+        return "write";
+    }
+    if (READ_NAME_PATTERN.test(haystack)) {
+        return "read";
+    }
+    if (tool.annotations?.readOnlyHint === true) {
+        return "read";
+    }
+    return "unknown";
+}
+export function redactMcpText(value) {
+    return value.replace(SECRET_VALUE_PATTERN, (_match, bearerPrefix, keyPrefix) => {
+        if (bearerPrefix) {
+            return `${bearerPrefix}[redacted]`;
+        }
+        if (keyPrefix) {
+            return `${keyPrefix}[redacted]`;
+        }
+        return "[redacted]";
+    });
+}
+export function sanitizeMcpArguments(value, depth = 0) {
+    if (depth > 4) {
+        return "[redacted: nested]";
+    }
+    if (value === null || typeof value === "number" || typeof value === "boolean") {
+        return value;
+    }
+    if (typeof value === "string") {
+        return redactMcpText(value);
+    }
+    if (Array.isArray(value)) {
+        return value.slice(0, 20).map((entry) => sanitizeMcpArguments(entry, depth + 1));
+    }
+    if (typeof value !== "object") {
+        return String(value);
+    }
+    const result = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (SECRET_KEY_PATTERN.test(key)) {
+            result[key] = "[redacted]";
+        }
+        else {
+            result[key] = sanitizeMcpArguments(entry, depth + 1);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=safety.js.map

package/dist/core/mcp/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../src/core/mcp/safety.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,wBAAwB,GAAG,IAAI,MAAM,CAC1C,GAAG,WAAW,mFAAmF,SAAS,EAAE,EAC5G,GAAG,CACH,CAAC;AACF,MAAM,kBAAkB,GAAG,IAAI,MAAM,CACpC,GAAG,WAAW,uHAAuH,SAAS,EAAE,EAChJ,GAAG,CACH,CAAC;AACF,MAAM,iBAAiB,GAAG,IAAI,MAAM,CACnC,GAAG,WAAW,qFAAqF,SAAS,EAAE,EAC9G,GAAG,CACH,CAAC;AACF,MAAM,kBAAkB,GAAG,4EAA4E,CAAC;AACxG,MAAM,oBAAoB,GACzB,iIAAiI,CAAC;AAEnI,MAAM,UAAU,mBAAmB,CAAC,IAA2D,EAAW;IACzG,IAAI,IAAI,CAAC,WAAW,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;IAC1D,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAU;IACpD,OAAO,KAAK,CAAC,OAAO,CACnB,oBAAoB,EACpB,CAAC,MAAM,EAAE,YAAgC,EAAE,SAA6B,EAAE,EAAE,CAAC;QAC5E,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO,GAAG,YAAY,YAAY,CAAC;QACpC,CAAC;QACD,IAAI,SAAS,EAAE,CAAC;YACf,OAAO,GAAG,SAAS,YAAY,CAAC;QACjC,CAAC;QACD,OAAO,YAAY,CAAC;IAAA,CACpB,CACD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAW;IACxE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACf,OAAO,oBAAoB,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC7E,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC5B,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import type { Tool as SdkTool } from \"@modelcontextprotocol/sdk/types.js\";\nimport type { McpRisk } from \"./types.ts\";\n\nconst TOKEN_START = \"(?:^|[^a-z0-9])\";\nconst TOKEN_END = \"(?:$|[^a-z0-9])\";\nconst DESTRUCTIVE_NAME_PATTERN = new RegExp(\n\t`${TOKEN_START}(delete|remove|rm|destroy|drop|truncate|erase|reset|revoke|terminate|kill|purge)${TOKEN_END}`,\n\t\"i\",\n);\nconst WRITE_NAME_PATTERN = new RegExp(\n\t`${TOKEN_START}(create|update|write|edit|patch|post|put|send|submit|comment|merge|commit|push|publish|upload|insert|set|add|assign)${TOKEN_END}`,\n\t\"i\",\n);\nconst READ_NAME_PATTERN = new RegExp(\n\t`${TOKEN_START}(read|get|list|search|find|query|fetch|lookup|inspect|describe|show|view|download)${TOKEN_END}`,\n\t\"i\",\n);\nconst SECRET_KEY_PATTERN = /token|secret|password|passwd|api[-_]?key|authorization|credential|private/i;\nconst SECRET_VALUE_PATTERN =\n\t/(bearer\\s+)[A-Za-z0-9._~+/=-]+|((?:token|secret|password|passwd|api[-_]?key|authorization|credential|private)[\\s:=]+)[^\\s,;]+/gi;\n\nexport function classifyMcpToolRisk(tool: Pick<SdkTool, \"name\" | \"description\" | \"annotations\">): McpRisk {\n\tif (tool.annotations?.destructiveHint === true) {\n\t\treturn \"destructive\";\n\t}\n\tconst haystack = `${tool.name} ${tool.description ?? \"\"}`;\n\tif (DESTRUCTIVE_NAME_PATTERN.test(haystack)) {\n\t\treturn \"destructive\";\n\t}\n\tif (WRITE_NAME_PATTERN.test(haystack)) {\n\t\treturn \"write\";\n\t}\n\tif (READ_NAME_PATTERN.test(haystack)) {\n\t\treturn \"read\";\n\t}\n\tif (tool.annotations?.readOnlyHint === true) {\n\t\treturn \"read\";\n\t}\n\treturn \"unknown\";\n}\n\nexport function redactMcpText(value: string): string {\n\treturn value.replace(\n\t\tSECRET_VALUE_PATTERN,\n\t\t(_match, bearerPrefix: string | undefined, keyPrefix: string | undefined) => {\n\t\t\tif (bearerPrefix) {\n\t\t\t\treturn `${bearerPrefix}[redacted]`;\n\t\t\t}\n\t\t\tif (keyPrefix) {\n\t\t\t\treturn `${keyPrefix}[redacted]`;\n\t\t\t}\n\t\t\treturn \"[redacted]\";\n\t\t},\n\t);\n}\n\nexport function sanitizeMcpArguments(value: unknown, depth = 0): unknown {\n\tif (depth > 4) {\n\t\treturn \"[redacted: nested]\";\n\t}\n\tif (value === null || typeof value === \"number\" || typeof value === \"boolean\") {\n\t\treturn value;\n\t}\n\tif (typeof value === \"string\") {\n\t\treturn redactMcpText(value);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn value.slice(0, 20).map((entry) => sanitizeMcpArguments(entry, depth + 1));\n\t}\n\tif (typeof value !== \"object\") {\n\t\treturn String(value);\n\t}\n\tconst result: Record<string, unknown> = {};\n\tfor (const [key, entry] of Object.entries(value as Record<string, unknown>)) {\n\t\tif (SECRET_KEY_PATTERN.test(key)) {\n\t\t\tresult[key] = \"[redacted]\";\n\t\t} else {\n\t\t\tresult[key] = sanitizeMcpArguments(entry, depth + 1);\n\t\t}\n\t}\n\treturn result;\n}\n"]}

package/dist/core/mcp/search.d.ts

@@ -0,0 +1,8 @@
+import type { McpResolvedServerConfig, McpSearchMatch, McpServerMetadata } from "./types.ts";
+export declare function searchMcpMetadata(options: {
+    query: string;
+    limit?: number;
+    servers: Record<string, McpResolvedServerConfig>;
+    metadata: McpServerMetadata[];
+}): McpSearchMatch[];
+//# sourceMappingURL=search.d.ts.map

package/dist/core/mcp/search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/search.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAuD7F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACjD,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC9B,GAAG,cAAc,EAAE,CAoCnB","sourcesContent":["import { serverMatchesToolFilters } from \"./config.ts\";\nimport { classifyMcpToolRisk } from \"./safety.ts\";\nimport type { McpResolvedServerConfig, McpSearchMatch, McpServerMetadata } from \"./types.ts\";\n\nconst DEFAULT_MCP_SEARCH_LIMIT = 8;\nconst MAX_MCP_SEARCH_LIMIT = 20;\n\nfunction tokenize(value: string): string[] {\n\treturn value\n\t\t.toLowerCase()\n\t\t.split(/[^a-z0-9_]+/)\n\t\t.map((token) => token.trim())\n\t\t.filter((token) => token.length > 0);\n}\n\nfunction normalizeLimit(limit: number | undefined): number {\n\tif (limit === undefined || !Number.isFinite(limit)) {\n\t\treturn DEFAULT_MCP_SEARCH_LIMIT;\n\t}\n\treturn Math.max(1, Math.min(MAX_MCP_SEARCH_LIMIT, Math.floor(limit)));\n}\n\nfunction boundedSummary(value: string | undefined): string {\n\tconst normalized = (value ?? \"\").replace(/\\s+/g, \" \").trim();\n\tif (!normalized) {\n\t\treturn \"No description.\";\n\t}\n\treturn normalized.length <= 180 ? normalized : `${normalized.slice(0, 177)}...`;\n}\n\nfunction scoreTool(\n\tqueryTokens: string[],\n\tname: string,\n\ttitle: string | undefined,\n\tdescription: string | undefined,\n): number {\n\tconst nameText = name.toLowerCase();\n\tconst titleText = (title ?? \"\").toLowerCase();\n\tconst descriptionText = (description ?? \"\").toLowerCase();\n\tlet score = 0;\n\tfor (const token of queryTokens) {\n\t\tif (nameText === token) score += 20;\n\t\tif (nameText.includes(token)) score += 8;\n\t\tif (titleText.includes(token)) score += 5;\n\t\tif (descriptionText.includes(token)) score += 2;\n\t}\n\treturn score;\n}\n\nfunction callSnippet(server: string, tool: string): string {\n\treturn `mcp({\"action\":\"call\",\"server\":\"${server}\",\"tool\":\"${tool}\",\"arguments\":{...}})`;\n}\n\nfunction describeSnippet(server: string, tool: string): string {\n\treturn `mcp({\"action\":\"describe\",\"server\":\"${server}\",\"tool\":\"${tool}\"})`;\n}\n\nexport function searchMcpMetadata(options: {\n\tquery: string;\n\tlimit?: number;\n\tservers: Record<string, McpResolvedServerConfig>;\n\tmetadata: McpServerMetadata[];\n}): McpSearchMatch[] {\n\tconst queryTokens = tokenize(options.query);\n\tif (queryTokens.length === 0) {\n\t\treturn [];\n\t}\n\tconst matches: McpSearchMatch[] = [];\n\tfor (const metadata of options.metadata) {\n\t\tconst server = options.servers[metadata.server];\n\t\tif (!server || !server.enabled) {\n\t\t\tcontinue;\n\t\t}\n\t\tfor (const tool of metadata.tools) {\n\t\t\tif (!serverMatchesToolFilters(server, tool.name)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst title = tool.title ?? tool.name;\n\t\t\tconst score = scoreTool(queryTokens, tool.name, title, tool.description);\n\t\t\tif (score <= 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tmatches.push({\n\t\t\t\tserver: metadata.server,\n\t\t\t\ttool: tool.name,\n\t\t\t\ttitle,\n\t\t\t\tsummary: boundedSummary(tool.description),\n\t\t\t\trisk: classifyMcpToolRisk(tool),\n\t\t\t\tmetadataHash: metadata.metadataHash,\n\t\t\t\tcall: callSnippet(metadata.server, tool.name),\n\t\t\t\tdescribe: describeSnippet(metadata.server, tool.name),\n\t\t\t\tscore,\n\t\t\t});\n\t\t}\n\t}\n\treturn matches\n\t\t.sort((a, b) => b.score - a.score || a.server.localeCompare(b.server) || a.tool.localeCompare(b.tool))\n\t\t.slice(0, normalizeLimit(options.limit));\n}\n"]}

package/dist/core/mcp/search.js

@@ -0,0 +1,85 @@
+import { serverMatchesToolFilters } from "./config.js";
+import { classifyMcpToolRisk } from "./safety.js";
+const DEFAULT_MCP_SEARCH_LIMIT = 8;
+const MAX_MCP_SEARCH_LIMIT = 20;
+function tokenize(value) {
+    return value
+        .toLowerCase()
+        .split(/[^a-z0-9_]+/)
+        .map((token) => token.trim())
+        .filter((token) => token.length > 0);
+}
+function normalizeLimit(limit) {
+    if (limit === undefined || !Number.isFinite(limit)) {
+        return DEFAULT_MCP_SEARCH_LIMIT;
+    }
+    return Math.max(1, Math.min(MAX_MCP_SEARCH_LIMIT, Math.floor(limit)));
+}
+function boundedSummary(value) {
+    const normalized = (value ?? "").replace(/\s+/g, " ").trim();
+    if (!normalized) {
+        return "No description.";
+    }
+    return normalized.length <= 180 ? normalized : `${normalized.slice(0, 177)}...`;
+}
+function scoreTool(queryTokens, name, title, description) {
+    const nameText = name.toLowerCase();
+    const titleText = (title ?? "").toLowerCase();
+    const descriptionText = (description ?? "").toLowerCase();
+    let score = 0;
+    for (const token of queryTokens) {
+        if (nameText === token)
+            score += 20;
+        if (nameText.includes(token))
+            score += 8;
+        if (titleText.includes(token))
+            score += 5;
+        if (descriptionText.includes(token))
+            score += 2;
+    }
+    return score;
+}
+function callSnippet(server, tool) {
+    return `mcp({"action":"call","server":"${server}","tool":"${tool}","arguments":{...}})`;
+}
+function describeSnippet(server, tool) {
+    return `mcp({"action":"describe","server":"${server}","tool":"${tool}"})`;
+}
+export function searchMcpMetadata(options) {
+    const queryTokens = tokenize(options.query);
+    if (queryTokens.length === 0) {
+        return [];
+    }
+    const matches = [];
+    for (const metadata of options.metadata) {
+        const server = options.servers[metadata.server];
+        if (!server || !server.enabled) {
+            continue;
+        }
+        for (const tool of metadata.tools) {
+            if (!serverMatchesToolFilters(server, tool.name)) {
+                continue;
+            }
+            const title = tool.title ?? tool.name;
+            const score = scoreTool(queryTokens, tool.name, title, tool.description);
+            if (score <= 0) {
+                continue;
+            }
+            matches.push({
+                server: metadata.server,
+                tool: tool.name,
+                title,
+                summary: boundedSummary(tool.description),
+                risk: classifyMcpToolRisk(tool),
+                metadataHash: metadata.metadataHash,
+                call: callSnippet(metadata.server, tool.name),
+                describe: describeSnippet(metadata.server, tool.name),
+                score,
+            });
+        }
+    }
+    return matches
+        .sort((a, b) => b.score - a.score || a.server.localeCompare(b.server) || a.tool.localeCompare(b.tool))
+        .slice(0, normalizeLimit(options.limit));
+}
+//# sourceMappingURL=search.js.map

package/dist/core/mcp/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../../src/core/mcp/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,SAAS,QAAQ,CAAC,KAAa,EAAY;IAC1C,OAAO,KAAK;SACV,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CACtC;AAED,SAAS,cAAc,CAAC,KAAyB,EAAU;IAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,wBAAwB,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAAA,CACtE;AAED,SAAS,cAAc,CAAC,KAAyB,EAAU;IAC1D,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AAAA,CAChF;AAED,SAAS,SAAS,CACjB,WAAqB,EACrB,IAAY,EACZ,KAAyB,EACzB,WAA+B,EACtB;IACT,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,eAAe,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QACjC,IAAI,QAAQ,KAAK,KAAK;YAAE,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACzC,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAC1C,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY,EAAU;IAC1D,OAAO,kCAAkC,MAAM,aAAa,IAAI,uBAAuB,CAAC;AAAA,CACxF;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY,EAAU;IAC9D,OAAO,sCAAsC,MAAM,aAAa,IAAI,KAAK,CAAC;AAAA,CAC1E;AAED,MAAM,UAAU,iBAAiB,CAAC,OAKjC,EAAoB;IACpB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAChC,SAAS;QACV,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,SAAS;YACV,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;YACtC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACzE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBAChB,SAAS;YACV,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK;gBACL,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;gBACzC,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC;gBAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;gBAC7C,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;gBACrD,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,OAAO;SACZ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACrG,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAC1C","sourcesContent":["import { serverMatchesToolFilters } from \"./config.ts\";\nimport { classifyMcpToolRisk } from \"./safety.ts\";\nimport type { McpResolvedServerConfig, McpSearchMatch, McpServerMetadata } from \"./types.ts\";\n\nconst DEFAULT_MCP_SEARCH_LIMIT = 8;\nconst MAX_MCP_SEARCH_LIMIT = 20;\n\nfunction tokenize(value: string): string[] {\n\treturn value\n\t\t.toLowerCase()\n\t\t.split(/[^a-z0-9_]+/)\n\t\t.map((token) => token.trim())\n\t\t.filter((token) => token.length > 0);\n}\n\nfunction normalizeLimit(limit: number | undefined): number {\n\tif (limit === undefined || !Number.isFinite(limit)) {\n\t\treturn DEFAULT_MCP_SEARCH_LIMIT;\n\t}\n\treturn Math.max(1, Math.min(MAX_MCP_SEARCH_LIMIT, Math.floor(limit)));\n}\n\nfunction boundedSummary(value: string | undefined): string {\n\tconst normalized = (value ?? \"\").replace(/\\s+/g, \" \").trim();\n\tif (!normalized) {\n\t\treturn \"No description.\";\n\t}\n\treturn normalized.length <= 180 ? normalized : `${normalized.slice(0, 177)}...`;\n}\n\nfunction scoreTool(\n\tqueryTokens: string[],\n\tname: string,\n\ttitle: string | undefined,\n\tdescription: string | undefined,\n): number {\n\tconst nameText = name.toLowerCase();\n\tconst titleText = (title ?? \"\").toLowerCase();\n\tconst descriptionText = (description ?? \"\").toLowerCase();\n\tlet score = 0;\n\tfor (const token of queryTokens) {\n\t\tif (nameText === token) score += 20;\n\t\tif (nameText.includes(token)) score += 8;\n\t\tif (titleText.includes(token)) score += 5;\n\t\tif (descriptionText.includes(token)) score += 2;\n\t}\n\treturn score;\n}\n\nfunction callSnippet(server: string, tool: string): string {\n\treturn `mcp({\"action\":\"call\",\"server\":\"${server}\",\"tool\":\"${tool}\",\"arguments\":{...}})`;\n}\n\nfunction describeSnippet(server: string, tool: string): string {\n\treturn `mcp({\"action\":\"describe\",\"server\":\"${server}\",\"tool\":\"${tool}\"})`;\n}\n\nexport function searchMcpMetadata(options: {\n\tquery: string;\n\tlimit?: number;\n\tservers: Record<string, McpResolvedServerConfig>;\n\tmetadata: McpServerMetadata[];\n}): McpSearchMatch[] {\n\tconst queryTokens = tokenize(options.query);\n\tif (queryTokens.length === 0) {\n\t\treturn [];\n\t}\n\tconst matches: McpSearchMatch[] = [];\n\tfor (const metadata of options.metadata) {\n\t\tconst server = options.servers[metadata.server];\n\t\tif (!server || !server.enabled) {\n\t\t\tcontinue;\n\t\t}\n\t\tfor (const tool of metadata.tools) {\n\t\t\tif (!serverMatchesToolFilters(server, tool.name)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst title = tool.title ?? tool.name;\n\t\t\tconst score = scoreTool(queryTokens, tool.name, title, tool.description);\n\t\t\tif (score <= 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tmatches.push({\n\t\t\t\tserver: metadata.server,\n\t\t\t\ttool: tool.name,\n\t\t\t\ttitle,\n\t\t\t\tsummary: boundedSummary(tool.description),\n\t\t\t\trisk: classifyMcpToolRisk(tool),\n\t\t\t\tmetadataHash: metadata.metadataHash,\n\t\t\t\tcall: callSnippet(metadata.server, tool.name),\n\t\t\t\tdescribe: describeSnippet(metadata.server, tool.name),\n\t\t\t\tscore,\n\t\t\t});\n\t\t}\n\t}\n\treturn matches\n\t\t.sort((a, b) => b.score - a.score || a.server.localeCompare(b.server) || a.tool.localeCompare(b.tool))\n\t\t.slice(0, normalizeLimit(options.limit));\n}\n"]}

package/dist/core/mcp/server-supervisor.d.ts

@@ -0,0 +1,59 @@
+import type { CallToolResult, GetPromptResult, ListPromptsResult, ListResourcesResult, ReadResourceResult, Tool as SdkTool } from "@modelcontextprotocol/sdk/types.js";
+import type { McpMetadataCache } from "./metadata-cache.ts";
+import type { McpOAuthStore } from "./oauth-store.ts";
+import type { McpAuthState, McpCallProgress, McpClientConnection, McpClientFactory, McpRecentCallSummary, McpResolvedServerConfig, McpServerMetadata, McpServerStatus, McpServerSummary, McpSettings } from "./types.ts";
+export interface McpServerSupervisorOptions {
+    server: McpResolvedServerConfig;
+    settings: McpSettings;
+    clientFactory: McpClientFactory;
+    metadataCache: McpMetadataCache;
+    oauthStore?: McpOAuthStore;
+    /** Fired whenever status or auth state actually changes value. */
+    onStateChanged?: (supervisor: McpServerSupervisor) => void;
+}
+export declare class McpServerSupervisor {
+    readonly server: McpResolvedServerConfig;
+    private settings;
+    private clientFactory;
+    private metadataCache;
+    private oauthStore;
+    private connection;
+    private statusValue;
+    private authStateValue;
+    private lastErrorValue;
+    private lastConnectedAtValue;
+    private liveToolCountValue;
+    private idleTimer;
+    private connecting;
+    private connectGeneration;
+    private recentCallsValue;
+    private onStateChanged;
+    constructor(options: McpServerSupervisorOptions);
+    setStateChangedListener(listener: ((supervisor: McpServerSupervisor) => void) | undefined): void;
+    private setState;
+    get status(): McpServerStatus;
+    get authState(): McpAuthState;
+    get lastError(): string | undefined;
+    get recentCalls(): McpRecentCallSummary[];
+    get cachedMetadata(): McpServerMetadata | undefined;
+    get isConnected(): boolean;
+    refreshAuthState(): McpAuthState;
+    connect(signal?: AbortSignal): Promise<McpClientConnection>;
+    setEnabled(enabled: boolean): Promise<void>;
+    disconnect(): Promise<void>;
+    refreshMetadata(signal?: AbortSignal): Promise<McpServerMetadata>;
+    listResources(cursor: string | undefined, signal?: AbortSignal): Promise<ListResourcesResult>;
+    readResource(uri: string, signal?: AbortSignal): Promise<ReadResourceResult>;
+    listPrompts(cursor: string | undefined, signal?: AbortSignal): Promise<ListPromptsResult>;
+    getPrompt(name: string, args: Record<string, unknown> | undefined, signal?: AbortSignal): Promise<GetPromptResult>;
+    callTool(name: string, args: Record<string, unknown>, signal?: AbortSignal, onProgress?: (progress: McpCallProgress) => void): Promise<CallToolResult>;
+    recordCall(call: McpRecentCallSummary): void;
+    findCachedTool(toolName: string): SdkTool | undefined;
+    getSummary(): McpServerSummary;
+    private listAllTools;
+    private listAllResources;
+    private listAllPrompts;
+    private resetIdleTimer;
+    private clearIdleTimer;
+}
+//# sourceMappingURL=server-supervisor.d.ts.map

package/dist/core/mcp/server-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-supervisor.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/server-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EAGnB,kBAAkB,EAElB,IAAI,IAAI,OAAO,EACf,MAAM,oCAAoC,CAAC;AAS5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EACX,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EAEpB,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,WAAW,CAAC;IACtB,aAAa,EAAE,gBAAgB,CAAC;IAChC,aAAa,EAAE,gBAAgB,CAAC;IAChC,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAC3D;AA2BD,qBAAa,mBAAmB;IAC/B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,OAAO,CAAC,QAAQ,CAAc;IAC9B,OAAO,CAAC,aAAa,CAAmB;IACxC,OAAO,CAAC,aAAa,CAAmB;IACxC,OAAO,CAAC,UAAU,CAA4B;IAC9C,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,cAAc,CAAe;IACrC,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,SAAS,CAA6B;IAC9C,OAAO,CAAC,UAAU,CAA2C;IAC7D,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,gBAAgB,CAA8B;IACtD,OAAO,CAAC,cAAc,CAA0D;IAEhF,YAAY,OAAO,EAAE,0BAA0B,EAS9C;IAED,uBAAuB,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,mBAAmB,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI,CAE/F;IAED,OAAO,CAAC,QAAQ;IAehB,IAAI,MAAM,IAAI,eAAe,CAE5B;IAED,IAAI,SAAS,IAAI,YAAY,CAE5B;IAED,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED,IAAI,WAAW,IAAI,oBAAoB,EAAE,CAExC;IAED,IAAI,cAAc,IAAI,iBAAiB,GAAG,SAAS,CAElD;IAED,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,gBAAgB,IAAI,YAAY,CAU/B;IAEK,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAmDhE;IAEK,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhD;IAEK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAkBhC;IAEK,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyBtE;IAEK,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAQlG;IAEK,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAQjF;IAEK,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAQ9F;IAEK,SAAS,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,eAAe,CAAC,CAQ1B;IAEK,QAAQ,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,GAC9C,OAAO,CAAC,cAAc,CAAC,CAWzB;IAED,UAAU,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAE3C;IAED,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAEpD;IAED,UAAU,IAAI,gBAAgB,CAiC7B;YAEa,YAAY;YAcZ,gBAAgB;YAiBhB,cAAc;IAc5B,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,cAAc;CAMtB","sourcesContent":["import type {\n\tCallToolResult,\n\tGetPromptResult,\n\tListPromptsResult,\n\tListResourcesResult,\n\tListToolsResult,\n\tPrompt,\n\tReadResourceResult,\n\tResource,\n\tTool as SdkTool,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport { getMcpServerAuthState } from \"./auth.ts\";\nimport {\n\tgetServerTimeoutMs,\n\thashMcpServerConfig,\n\tmcpLifecycleToDto,\n\tmcpTransportToDto,\n\tserverMatchesToolFilters,\n} from \"./config.ts\";\nimport type { McpMetadataCache } from \"./metadata-cache.ts\";\nimport type { McpOAuthStore } from \"./oauth-store.ts\";\nimport { redactMcpText } from \"./safety.ts\";\nimport type {\n\tMcpAuthState,\n\tMcpCallProgress,\n\tMcpClientConnection,\n\tMcpClientFactory,\n\tMcpRecentCallSummary,\n\tMcpRequestOptions,\n\tMcpResolvedServerConfig,\n\tMcpServerMetadata,\n\tMcpServerStatus,\n\tMcpServerSummary,\n\tMcpSettings,\n} from \"./types.ts\";\n\nconst MAX_RECENT_CALLS = 25;\n\nexport interface McpServerSupervisorOptions {\n\tserver: McpResolvedServerConfig;\n\tsettings: McpSettings;\n\tclientFactory: McpClientFactory;\n\tmetadataCache: McpMetadataCache;\n\toauthStore?: McpOAuthStore;\n\t/** Fired whenever status or auth state actually changes value. */\n\tonStateChanged?: (supervisor: McpServerSupervisor) => void;\n}\n\nfunction isAbortError(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || /aborted/i.test(error.message));\n}\n\nfunction messageFromError(error: unknown): string {\n\treturn redactMcpText(error instanceof Error ? error.message : String(error));\n}\n\nfunction requestOptions(signal: AbortSignal | undefined, timeout: number): McpRequestOptions {\n\treturn { signal, timeout, resetTimeoutOnProgress: true };\n}\n\nfunction uniqueByName<T extends { name: string }>(items: T[]): T[] {\n\tconst seen = new Set<string>();\n\tconst result: T[] = [];\n\tfor (const item of items) {\n\t\tif (seen.has(item.name)) {\n\t\t\tcontinue;\n\t\t}\n\t\tseen.add(item.name);\n\t\tresult.push(item);\n\t}\n\treturn result;\n}\n\nexport class McpServerSupervisor {\n\treadonly server: McpResolvedServerConfig;\n\tprivate settings: McpSettings;\n\tprivate clientFactory: McpClientFactory;\n\tprivate metadataCache: McpMetadataCache;\n\tprivate oauthStore: McpOAuthStore | undefined;\n\tprivate connection: McpClientConnection | undefined;\n\tprivate statusValue: McpServerStatus;\n\tprivate authStateValue: McpAuthState;\n\tprivate lastErrorValue: string | undefined;\n\tprivate lastConnectedAtValue: string | undefined;\n\tprivate liveToolCountValue: number | undefined;\n\tprivate idleTimer: NodeJS.Timeout | undefined;\n\tprivate connecting: Promise<McpClientConnection> | undefined;\n\tprivate connectGeneration = 0;\n\tprivate recentCallsValue: McpRecentCallSummary[] = [];\n\tprivate onStateChanged: ((supervisor: McpServerSupervisor) => void) | undefined;\n\n\tconstructor(options: McpServerSupervisorOptions) {\n\t\tthis.server = options.server;\n\t\tthis.settings = options.settings;\n\t\tthis.clientFactory = options.clientFactory;\n\t\tthis.metadataCache = options.metadataCache;\n\t\tthis.oauthStore = options.oauthStore;\n\t\tthis.onStateChanged = options.onStateChanged;\n\t\tthis.authStateValue = getMcpServerAuthState(this.server, process.env, this.oauthStore);\n\t\tthis.statusValue = this.server.enabled ? \"cold\" : \"disabled\";\n\t}\n\n\tsetStateChangedListener(listener: ((supervisor: McpServerSupervisor) => void) | undefined): void {\n\t\tthis.onStateChanged = listener;\n\t}\n\n\tprivate setState(next: { status?: McpServerStatus; authState?: McpAuthState }): void {\n\t\tlet changed = false;\n\t\tif (next.status !== undefined && next.status !== this.statusValue) {\n\t\t\tthis.statusValue = next.status;\n\t\t\tchanged = true;\n\t\t}\n\t\tif (next.authState !== undefined && next.authState !== this.authStateValue) {\n\t\t\tthis.authStateValue = next.authState;\n\t\t\tchanged = true;\n\t\t}\n\t\tif (changed) {\n\t\t\tthis.onStateChanged?.(this);\n\t\t}\n\t}\n\n\tget status(): McpServerStatus {\n\t\treturn this.statusValue;\n\t}\n\n\tget authState(): McpAuthState {\n\t\treturn this.authStateValue;\n\t}\n\n\tget lastError(): string | undefined {\n\t\treturn this.lastErrorValue;\n\t}\n\n\tget recentCalls(): McpRecentCallSummary[] {\n\t\treturn [...this.recentCallsValue];\n\t}\n\n\tget cachedMetadata(): McpServerMetadata | undefined {\n\t\treturn this.metadataCache.get(this.server.id);\n\t}\n\n\tget isConnected(): boolean {\n\t\treturn this.connection !== undefined;\n\t}\n\n\trefreshAuthState(): McpAuthState {\n\t\tconst authState = getMcpServerAuthState(this.server, process.env, this.oauthStore);\n\t\tlet status = this.statusValue;\n\t\tif (authState === \"required\" && this.server.enabled) {\n\t\t\tstatus = \"needs_auth\";\n\t\t} else if (this.statusValue === \"needs_auth\" && this.server.enabled) {\n\t\t\tstatus = \"cold\";\n\t\t}\n\t\tthis.setState({ status, authState });\n\t\treturn this.authStateValue;\n\t}\n\n\tasync connect(signal?: AbortSignal): Promise<McpClientConnection> {\n\t\tif (!this.server.enabled) {\n\t\t\tthrow new Error(`MCP server is disabled: ${this.server.id}`);\n\t\t}\n\t\tif (this.connection) {\n\t\t\tthis.resetIdleTimer();\n\t\t\treturn this.connection;\n\t\t}\n\t\tif (this.connecting) {\n\t\t\treturn this.connecting;\n\t\t}\n\t\tconst preConnectAuthState = getMcpServerAuthState(this.server, process.env, this.oauthStore);\n\t\tif (preConnectAuthState === \"required\") {\n\t\t\tthis.setState({ status: \"needs_auth\", authState: preConnectAuthState });\n\t\t\tthrow new Error(`MCP server needs authentication: ${this.server.id}`);\n\t\t}\n\t\tthis.setState({ status: \"connecting\", authState: preConnectAuthState });\n\t\tthis.lastErrorValue = undefined;\n\t\tconst timeout = getServerTimeoutMs(this.server, this.settings, \"connect\");\n\t\tconst generation = ++this.connectGeneration;\n\t\tthis.connecting = this.clientFactory\n\t\t\t.connect(this.server, requestOptions(signal, timeout))\n\t\t\t.then(async (connection) => {\n\t\t\t\tif (generation !== this.connectGeneration) {\n\t\t\t\t\tawait connection.close().catch(() => undefined);\n\t\t\t\t\tconst error = new Error(`MCP connection cancelled: ${this.server.id}`);\n\t\t\t\t\terror.name = \"AbortError\";\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t\tthis.connection = connection;\n\t\t\t\tthis.connecting = undefined;\n\t\t\t\tthis.lastConnectedAtValue = new Date().toISOString();\n\t\t\t\tthis.setState({\n\t\t\t\t\tstatus: \"connected\",\n\t\t\t\t\tauthState: this.authStateValue === \"none\" ? \"none\" : \"authenticated\",\n\t\t\t\t});\n\t\t\t\tthis.resetIdleTimer();\n\t\t\t\treturn connection;\n\t\t\t})\n\t\t\t.catch((error) => {\n\t\t\t\tthis.connecting = undefined;\n\t\t\t\tthis.connection = undefined;\n\t\t\t\tif (generation !== this.connectGeneration || isAbortError(error)) {\n\t\t\t\t\tthis.setState({ status: this.server.enabled ? \"disconnected\" : \"disabled\" });\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t\tthis.lastErrorValue = messageFromError(error);\n\t\t\t\tthis.setState({ status: this.authStateValue === \"required\" ? \"needs_auth\" : \"error\" });\n\t\t\t\tthrow error;\n\t\t\t});\n\t\treturn this.connecting;\n\t}\n\n\tasync setEnabled(enabled: boolean): Promise<void> {\n\t\tif (this.server.enabled === enabled) {\n\t\t\treturn;\n\t\t}\n\t\tthis.server.enabled = enabled;\n\t\tif (!enabled) {\n\t\t\tawait this.disconnect();\n\t\t\tthis.setState({ status: \"disabled\" });\n\t\t\treturn;\n\t\t}\n\t\tthis.lastErrorValue = undefined;\n\t\tthis.setState({ status: \"cold\", authState: getMcpServerAuthState(this.server, process.env, this.oauthStore) });\n\t}\n\n\tasync disconnect(): Promise<void> {\n\t\tthis.clearIdleTimer();\n\t\tthis.connectGeneration++;\n\t\tthis.connecting = undefined;\n\t\tif (!this.connection) {\n\t\t\tthis.setState({ status: this.server.enabled ? \"disconnected\" : \"disabled\" });\n\t\t\treturn;\n\t\t}\n\t\tconst connection = this.connection;\n\t\tthis.connection = undefined;\n\t\tthis.setState({ status: \"disconnecting\" });\n\t\ttry {\n\t\t\tawait connection.close();\n\t\t\tthis.setState({ status: this.server.enabled ? \"disconnected\" : \"disabled\" });\n\t\t} catch (error) {\n\t\t\tthis.lastErrorValue = messageFromError(error);\n\t\t\tthis.setState({ status: \"error\" });\n\t\t}\n\t}\n\n\tasync refreshMetadata(signal?: AbortSignal): Promise<McpServerMetadata> {\n\t\tconst connection = await this.connect(signal);\n\t\tthis.setState({ status: \"discovering\" });\n\t\ttry {\n\t\t\tconst tools = await this.listAllTools(connection, signal);\n\t\t\tconst resources = await this.listAllResources(connection, signal).catch((): Resource[] => []);\n\t\t\tconst prompts = await this.listAllPrompts(connection, signal).catch((): Prompt[] => []);\n\t\t\tconst serverVersion = connection.getServerVersion();\n\t\t\tconst metadata = this.metadataCache.set(this.server.id, {\n\t\t\t\tserver: this.server.id,\n\t\t\t\t...(serverVersion ? { serverVersion: `${serverVersion.name}@${serverVersion.version}` } : {}),\n\t\t\t\tconfigHash: hashMcpServerConfig(this.server),\n\t\t\t\ttools: uniqueByName(tools).filter((tool) => serverMatchesToolFilters(this.server, tool.name)),\n\t\t\t\tresources,\n\t\t\t\tprompts,\n\t\t\t});\n\t\t\tthis.liveToolCountValue = metadata.tools.length;\n\t\t\tthis.setState({ status: \"ready\" });\n\t\t\tthis.resetIdleTimer();\n\t\t\treturn metadata;\n\t\t} catch (error) {\n\t\t\tthis.lastErrorValue = messageFromError(error);\n\t\t\tthis.setState({ status: isAbortError(error) ? \"disconnected\" : \"error\" });\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync listResources(cursor: string | undefined, signal?: AbortSignal): Promise<ListResourcesResult> {\n\t\tconst connection = await this.connect(signal);\n\t\tconst result = await connection.listResources(\n\t\t\tcursor ? { cursor } : undefined,\n\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"metadata\")),\n\t\t);\n\t\tthis.resetIdleTimer();\n\t\treturn result;\n\t}\n\n\tasync readResource(uri: string, signal?: AbortSignal): Promise<ReadResourceResult> {\n\t\tconst connection = await this.connect(signal);\n\t\tconst result = await connection.readResource(\n\t\t\t{ uri },\n\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"call\")),\n\t\t);\n\t\tthis.resetIdleTimer();\n\t\treturn result;\n\t}\n\n\tasync listPrompts(cursor: string | undefined, signal?: AbortSignal): Promise<ListPromptsResult> {\n\t\tconst connection = await this.connect(signal);\n\t\tconst result = await connection.listPrompts(\n\t\t\tcursor ? { cursor } : undefined,\n\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"metadata\")),\n\t\t);\n\t\tthis.resetIdleTimer();\n\t\treturn result;\n\t}\n\n\tasync getPrompt(\n\t\tname: string,\n\t\targs: Record<string, unknown> | undefined,\n\t\tsignal?: AbortSignal,\n\t): Promise<GetPromptResult> {\n\t\tconst connection = await this.connect(signal);\n\t\tconst result = await connection.getPrompt(\n\t\t\t{ name, ...(args ? { arguments: args } : {}) },\n\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"call\")),\n\t\t);\n\t\tthis.resetIdleTimer();\n\t\treturn result;\n\t}\n\n\tasync callTool(\n\t\tname: string,\n\t\targs: Record<string, unknown>,\n\t\tsignal?: AbortSignal,\n\t\tonProgress?: (progress: McpCallProgress) => void,\n\t): Promise<CallToolResult> {\n\t\tconst connection = await this.connect(signal);\n\t\tconst result = await connection.callTool(\n\t\t\t{ name, arguments: args },\n\t\t\t{\n\t\t\t\t...requestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"call\")),\n\t\t\t\t...(onProgress ? { onProgress } : {}),\n\t\t\t},\n\t\t);\n\t\tthis.resetIdleTimer();\n\t\treturn result;\n\t}\n\n\trecordCall(call: McpRecentCallSummary): void {\n\t\tthis.recentCallsValue = [call, ...this.recentCallsValue].slice(0, MAX_RECENT_CALLS);\n\t}\n\n\tfindCachedTool(toolName: string): SdkTool | undefined {\n\t\treturn this.cachedMetadata?.tools.find((tool) => tool.name === toolName);\n\t}\n\n\tgetSummary(): McpServerSummary {\n\t\tconst cachedMetadata = this.cachedMetadata;\n\t\treturn {\n\t\t\tid: this.server.id,\n\t\t\tdisplayName: this.server.displayName,\n\t\t\tsourceScope: this.server.source.scope,\n\t\t\tsourceLabel: this.server.source.label,\n\t\t\tenabled: this.server.enabled,\n\t\t\tactiveInSession: this.server.enabled,\n\t\t\ttransport: mcpTransportToDto(this.server.transport),\n\t\t\tlifecycle: mcpLifecycleToDto(this.server.lifecycle),\n\t\t\tstatus: this.statusValue,\n\t\t\tauthState: this.authStateValue,\n\t\t\ttoolCounts: {\n\t\t\t\tcached: cachedMetadata?.tools.length ?? 0,\n\t\t\t\t...(this.liveToolCountValue !== undefined ? { live: this.liveToolCountValue } : {}),\n\t\t\t\tenabled:\n\t\t\t\t\tcachedMetadata?.tools.filter((tool) => serverMatchesToolFilters(this.server, tool.name)).length ?? 0,\n\t\t\t},\n\t\t\tresourceCount: cachedMetadata?.resources.length,\n\t\t\tpromptCount: cachedMetadata?.prompts.length,\n\t\t\trecentCalls: this.recentCalls,\n\t\t\t...(this.lastErrorValue ? { lastError: this.lastErrorValue } : {}),\n\t\t\t...(this.lastConnectedAtValue ? { lastConnectedAt: this.lastConnectedAtValue } : {}),\n\t\t\tcapabilities: {\n\t\t\t\tcanEnable: true,\n\t\t\t\tcanConnect: this.server.enabled && !this.connection,\n\t\t\t\tcanDisconnect: this.connection !== undefined,\n\t\t\t\tcanRefresh: this.server.enabled,\n\t\t\t\tcanAuthenticate: this.authStateValue === \"required\" || this.authStateValue === \"failed\",\n\t\t\t\tcanPersistChanges: !this.server.source.shared,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async listAllTools(connection: McpClientConnection, signal: AbortSignal | undefined): Promise<SdkTool[]> {\n\t\tconst tools: SdkTool[] = [];\n\t\tlet cursor: string | undefined;\n\t\tdo {\n\t\t\tconst result: ListToolsResult = await connection.listTools(\n\t\t\t\tcursor ? { cursor } : undefined,\n\t\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"metadata\")),\n\t\t\t);\n\t\t\ttools.push(...result.tools);\n\t\t\tcursor = result.nextCursor;\n\t\t} while (cursor);\n\t\treturn tools;\n\t}\n\n\tprivate async listAllResources(\n\t\tconnection: McpClientConnection,\n\t\tsignal: AbortSignal | undefined,\n\t): Promise<Resource[]> {\n\t\tconst resources: Resource[] = [];\n\t\tlet cursor: string | undefined;\n\t\tdo {\n\t\t\tconst result: ListResourcesResult = await connection.listResources(\n\t\t\t\tcursor ? { cursor } : undefined,\n\t\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"metadata\")),\n\t\t\t);\n\t\t\tresources.push(...result.resources);\n\t\t\tcursor = result.nextCursor;\n\t\t} while (cursor);\n\t\treturn resources;\n\t}\n\n\tprivate async listAllPrompts(connection: McpClientConnection, signal: AbortSignal | undefined): Promise<Prompt[]> {\n\t\tconst prompts: Prompt[] = [];\n\t\tlet cursor: string | undefined;\n\t\tdo {\n\t\t\tconst result: ListPromptsResult = await connection.listPrompts(\n\t\t\t\tcursor ? { cursor } : undefined,\n\t\t\t\trequestOptions(signal, getServerTimeoutMs(this.server, this.settings, \"metadata\")),\n\t\t\t);\n\t\t\tprompts.push(...result.prompts);\n\t\t\tcursor = result.nextCursor;\n\t\t} while (cursor);\n\t\treturn prompts;\n\t}\n\n\tprivate resetIdleTimer(): void {\n\t\tthis.clearIdleTimer();\n\t\tif (!this.connection || this.server.lifecycle === \"keep-alive\") {\n\t\t\treturn;\n\t\t}\n\t\tconst timeoutMs = getServerTimeoutMs(this.server, this.settings, \"idle\");\n\t\tthis.idleTimer = setTimeout(() => {\n\t\t\tvoid this.disconnect();\n\t\t}, timeoutMs);\n\t}\n\n\tprivate clearIdleTimer(): void {\n\t\tif (this.idleTimer) {\n\t\t\tclearTimeout(this.idleTimer);\n\t\t\tthis.idleTimer = undefined;\n\t\t}\n\t}\n}\n"]}