@jini-ai/mcp 0.1.0

package/dist/agent-install/install.js

@@ -0,0 +1,410 @@
+/**
+ * @module @jini-ai/mcp/agent-install/install
+ * Plans and applies registration of a stdio MCP server into external coding
+ * agents' own configs (`<cli> mcp install <agent>`): the agent-slug registry,
+ * the CLI/JSON/manual install-plan shapes, and the JSON apply/remove primitives.
+ * Pure planning logic; imports no sibling MCP subdirectory.
+ */
+// Per-agent MCP registration planner.
+//
+// `<cli> mcp install <agent>` (and any hosted bootstrap that calls it) wires
+// a stdio MCP server into a coding agent's own configuration. Each agent
+// stores MCP servers differently, so this module maps a single resolved
+// launch spec (command/args/env — the same shape buildMcpInstallPayload
+// produces and the settings UI pastes) onto one of three registration
+// strategies:
+//
+//   - 'cli'    : the agent ships its own `<bin> mcp add/remove/get`. We
+//                shell out to it so we inherit the agent's merge/validation
+//                rules instead of editing its config by hand. Used for
+//                claude / codex / kimi.
+//   - 'json'   : the agent reads a JSON config file with a known schema.
+//                We deep-merge one server entry, never clobbering the
+//                rest of the file. Used for cursor / copilot / cline /
+//                opencode / openclaw / antigravity / trae.
+//   - 'manual' : we could not verify the agent's config path/format
+//                authoritatively (pi / hermes / vibe). We refuse to write
+//                a guessed path and instead print a ready-to-paste
+//                snippet plus the best-known location. Writing a wrong
+//                path risks corrupting a user-owned config, so this stays
+//                a print-only path until the format is confirmed.
+//
+// The planning functions are pure (no fs / spawn) so they unit-test
+// against fixed launch specs + a fake home dir; the executor performs the IO.
+import path from 'node:path';
+/**
+ * Exhaustive tuple of all agent slugs recognized by `mcp install`.
+ * Used as the source of truth for the `AgentSlug` union type and the `isAgentSlug` guard.
+ */
+export const AGENT_SLUGS = [
+    'claude',
+    'codex',
+    'cursor',
+    'copilot',
+    'openclaw',
+    'antigravity',
+    'pi',
+    'vibe',
+    'hermes',
+    'cline',
+    'kimi',
+    'trae',
+    'opencode',
+];
+/**
+ * Type guard: returns `true` when `value` is a recognized `AgentSlug`.
+ * Used by the CLI argument parser to surface a clear error for unknown slugs.
+ * @param value The string to test.
+ * @returns `true` if `value` is a valid `AgentSlug`, `false` otherwise.
+ */
+export function isAgentSlug(value) {
+    return AGENT_SLUGS.includes(value);
+}
+// RESIDUAL RISK (CR-006 / SEC-RB-002): `-e`/`--env KEY=VALUE` is claude's,
+// codex's, and kimi's own documented `mcp add` CLI contract for passing
+// server env vars — a fixed, external interface this package does not
+// control and cannot change unilaterally. Because these values land in
+// `addArgv` (argv), they are visible to any other local process that can
+// list this process's command line (e.g. `ps -ww`) for the — typically very
+// brief — window while the daemon's executor shells out to `claude`/`codex`/
+// `kimi mcp add`. This package only builds the plan (`planAgentInstall`
+// itself performs no fs/spawn, per this file's header comment); there is no
+// executor here yet to redact `addArgv` before logging it, so there is
+// nothing left in this package's own code to redact. Whichever executor
+// eventually drives these plans MUST NOT log/echo `addArgv` verbatim
+// (redact anything that looks like an env value from `-e`/`--env` pairs
+// before writing it to any log/error surface), and should prefer a
+// less-exposed handoff (e.g. piping `env` via stdin, or setting it directly
+// in the spawned child's environment) for any future agent whose CLI
+// supports that instead of argv-only `KEY=VALUE`.
+function envFlags(env, flag) {
+    const out = [];
+    for (const [k, v] of Object.entries(env)) {
+        out.push(flag, `${k}=${v}`);
+    }
+    return out;
+}
+/** JSON server entry shared by the `env`-style agents (cursor / copilot /
+ *  cline / openclaw / antigravity / trae). `extra` carries per-agent
+ *  fields; env is only attached when non-empty so configs stay clean. */
+function jsonEntry(spec, extra = {}, envKey = 'env') {
+    const entry = {
+        command: spec.command,
+        args: spec.args,
+        ...extra,
+    };
+    if (Object.keys(spec.env).length > 0) {
+        entry[envKey] = spec.env;
+    }
+    return entry;
+}
+/**
+ * Build the registration plan for one agent. Pure — all IO happens in the
+ * executor. Throws on an unknown slug so callers surface a clear error.
+ */
+export function planAgentInstall(slug, spec, ctx) {
+    const { home, platform, serverName } = ctx;
+    switch (slug) {
+        // ----- CLI-driven agents (idempotent via the agent's own tool) -----
+        case 'claude':
+            return {
+                kind: 'cli',
+                slug,
+                bin: 'claude',
+                addArgv: [
+                    'mcp', 'add', '--scope', 'user',
+                    serverName,
+                    ...envFlags(spec.env, '-e'),
+                    '--', spec.command, ...spec.args,
+                ],
+                removeArgv: ['mcp', 'remove', '--scope', 'user', serverName],
+                getArgv: ['mcp', 'get', serverName],
+            };
+        case 'codex':
+            return {
+                kind: 'cli',
+                slug,
+                bin: 'codex',
+                addArgv: [
+                    'mcp', 'add', serverName,
+                    ...envFlags(spec.env, '--env'),
+                    '--', spec.command, ...spec.args,
+                ],
+                removeArgv: ['mcp', 'remove', serverName],
+                getArgv: ['mcp', 'get', serverName],
+            };
+        case 'kimi':
+            return {
+                kind: 'cli',
+                slug,
+                bin: 'kimi',
+                addArgv: [
+                    'mcp', 'add', '--transport', 'stdio',
+                    ...envFlags(spec.env, '--env'),
+                    serverName, '--', spec.command, ...spec.args,
+                ],
+                removeArgv: ['mcp', 'remove', serverName],
+                getArgv: ['mcp', 'get', serverName],
+            };
+        // ----- JSON config-file agents (safe deep-merge) -----
+        case 'cursor':
+            return {
+                kind: 'json',
+                slug,
+                configPath: path.join(home, '.cursor', 'mcp.json'),
+                keyPath: ['mcpServers'],
+                serverKey: serverName,
+                entry: jsonEntry(spec, { type: 'stdio' }),
+            };
+        case 'copilot':
+            // GitHub Copilot CLI: ~/.copilot/mcp-config.json, type "local".
+            // (VS Code Copilot uses a different `servers` key in
+            // .vscode/mcp.json; the terminal installer targets the CLI.)
+            return {
+                kind: 'json',
+                slug,
+                configPath: path.join(home, '.copilot', 'mcp-config.json'),
+                keyPath: ['mcpServers'],
+                serverKey: serverName,
+                entry: jsonEntry(spec, { type: 'local', tools: ['*'] }),
+            };
+        case 'cline':
+            return {
+                kind: 'json',
+                slug,
+                configPath: clineConfigPath(home, platform),
+                keyPath: ['mcpServers'],
+                serverKey: serverName,
+                entry: jsonEntry(spec, { disabled: false, autoApprove: [] }),
+            };
+        case 'opencode':
+            // OpenCode nests under `mcp`, folds command+args into one array,
+            // and gates the server with `enabled`.
+            return {
+                kind: 'json',
+                slug,
+                configPath: path.join(home, '.config', 'opencode', 'opencode.json'),
+                keyPath: ['mcp'],
+                serverKey: serverName,
+                entry: (() => {
+                    const e = {
+                        type: 'local',
+                        command: [spec.command, ...spec.args],
+                        enabled: true,
+                    };
+                    if (Object.keys(spec.env).length > 0)
+                        e.environment = spec.env;
+                    return e;
+                })(),
+            };
+        case 'openclaw':
+            return {
+                kind: 'json',
+                slug,
+                configPath: path.join(home, '.openclaw', 'openclaw.json'),
+                keyPath: ['mcp', 'servers'],
+                serverKey: serverName,
+                entry: jsonEntry(spec),
+            };
+        case 'antigravity':
+            return {
+                kind: 'json',
+                slug,
+                configPath: path.join(home, '.gemini', 'antigravity', 'mcp_config.json'),
+                keyPath: ['mcpServers'],
+                serverKey: serverName,
+                entry: jsonEntry(spec),
+            };
+        case 'trae':
+            return {
+                kind: 'json',
+                slug,
+                configPath: traeConfigPath(home, platform),
+                keyPath: ['mcpServers'],
+                serverKey: serverName,
+                entry: jsonEntry(spec),
+            };
+        // ----- Unverified formats: print-only, never write -----
+        case 'vibe':
+            return {
+                kind: 'manual',
+                slug,
+                format: 'toml',
+                configPath: path.join(home, '.vibe', 'config.toml'),
+                snippet: vibeTomlSnippet(spec, serverName),
+                reason: 'Vibe uses a TOML array-of-tables ([[mcp_servers]]); ' +
+                    'its exact schema is unverified, so append this block by hand ' +
+                    'to avoid corrupting an existing config.',
+            };
+        case 'pi':
+            return {
+                kind: 'manual',
+                slug,
+                format: 'json',
+                configPath: path.join(home, '.pi', 'agent', 'mcp.json'),
+                snippet: genericMcpServersSnippet(spec, serverName),
+                reason: 'The pi coding agent exposes MCP, but its config path/schema is ' +
+                    'not authoritatively documented. Paste this into pi’s MCP ' +
+                    'config (check `pi --help` for the exact location).',
+            };
+        case 'hermes':
+            return {
+                kind: 'manual',
+                slug,
+                format: 'yaml',
+                configPath: path.join(home, '.hermes', 'config.yaml'),
+                snippet: hermesYamlSnippet(spec, serverName),
+                reason: 'Hermes config format is unverified. Add this under your Hermes ' +
+                    'MCP server configuration by hand.',
+            };
+        default: {
+            const exhaustive = slug;
+            throw new Error(`unknown agent slug: ${String(exhaustive)}`);
+        }
+    }
+}
+function clineConfigPath(home, platform) {
+    const rel = path.join('globalStorage', 'saoudrizwan.claude-dev', 'settings', 'cline_mcp_settings.json');
+    if (platform === 'darwin') {
+        return path.join(home, 'Library', 'Application Support', 'Code', 'User', rel);
+    }
+    if (platform === 'win32') {
+        const appData = process.env.APPDATA ?? path.join(home, 'AppData', 'Roaming');
+        return path.join(appData, 'Code', 'User', rel);
+    }
+    return path.join(home, '.config', 'Code', 'User', rel);
+}
+function traeConfigPath(home, platform) {
+    if (platform === 'darwin') {
+        return path.join(home, 'Library', 'Application Support', 'Trae', 'User', 'mcp.json');
+    }
+    if (platform === 'win32') {
+        const appData = process.env.APPDATA ?? path.join(home, 'AppData', 'Roaming');
+        return path.join(appData, 'Trae', 'User', 'mcp.json');
+    }
+    return path.join(home, '.config', 'Trae', 'User', 'mcp.json');
+}
+// --- Pure JSON merge / removal (the heart of the 'json' strategy) -------
+// CR-007: `JsonInstallPlan` is a public shape and `applyJsonInstall` /
+// `removeJsonInstall` are public functions — a caller-supplied `keyPath`/
+// `serverKey` containing `__proto__`, `prototype`, or `constructor` would
+// otherwise let bracket-notation traversal (`cursor[key]`) walk onto (and
+// then assign directly onto) `Object.prototype` or a constructor function,
+// polluting every plain object in the process rather than merely the target
+// config file. Every segment is validated before any traversal/assignment
+// happens, so a dangerous plan is rejected outright instead of partially
+// applied.
+const DANGEROUS_OBJECT_PATH_SEGMENTS = new Set([
+    '__proto__',
+    'prototype',
+    'constructor',
+]);
+function assertSafeObjectPathSegment(segment, context) {
+    if (DANGEROUS_OBJECT_PATH_SEGMENTS.has(segment)) {
+        throw new Error(`refusing to apply MCP install plan: "${segment}" is not a safe ${context} segment (prototype-pollution guard)`);
+    }
+}
+function assertSafeJsonInstallPlan(plan) {
+    for (const key of plan.keyPath) {
+        assertSafeObjectPathSegment(key, 'keyPath');
+    }
+    assertSafeObjectPathSegment(plan.serverKey, 'serverKey');
+}
+/**
+ * Merge one server entry into existing config text without disturbing the
+ * rest. Missing intermediate objects are created. Returns pretty JSON with
+ * a trailing newline. Throws if existing text is non-empty but unparseable
+ * (caller decides whether to bail or back up), or if `plan.keyPath` /
+ * `plan.serverKey` contains a dangerous object-path segment (CR-007).
+ */
+export function applyJsonInstall(existingText, plan) {
+    assertSafeJsonInstallPlan(plan);
+    const root = parseJsonObject(existingText, plan.configPath);
+    let cursor = root;
+    for (const key of plan.keyPath) {
+        const next = cursor[key];
+        if (next == null || typeof next !== 'object' || Array.isArray(next)) {
+            cursor[key] = {};
+        }
+        cursor = cursor[key];
+    }
+    cursor[plan.serverKey] = plan.entry;
+    return `${JSON.stringify(root, null, 2)}\n`;
+}
+/**
+ * Remove the server entry. Returns the new text, or null when the file did
+ * not exist / had nothing to remove (caller treats null as a no-op). Throws
+ * if `plan.keyPath` / `plan.serverKey` contains a dangerous object-path
+ * segment (CR-007).
+ */
+export function removeJsonInstall(existingText, plan) {
+    assertSafeJsonInstallPlan(plan);
+    if (existingText == null || existingText.trim() === '')
+        return null;
+    const root = parseJsonObject(existingText, plan.configPath);
+    let cursor = root;
+    for (const key of plan.keyPath) {
+        const next = cursor[key];
+        if (next == null || typeof next !== 'object' || Array.isArray(next)) {
+            return null;
+        }
+        cursor = next;
+    }
+    if (!(plan.serverKey in cursor))
+        return null;
+    delete cursor[plan.serverKey];
+    return `${JSON.stringify(root, null, 2)}\n`;
+}
+function parseJsonObject(text, where) {
+    if (text == null || text.trim() === '')
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        // JSON.parse only ever throws a SyntaxError, so `err` is always an Error.
+        throw new Error(`existing config at ${where} is not valid JSON: ${err.message}`);
+    }
+    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error(`existing config at ${where} is not a JSON object`);
+    }
+    return parsed;
+}
+// --- Snippets for the manual (print-only) strategy ----------------------
+function genericMcpServersSnippet(spec, name) {
+    const server = {
+        command: spec.command,
+        args: spec.args,
+    };
+    if (Object.keys(spec.env).length > 0)
+        server.env = spec.env;
+    return JSON.stringify({ mcpServers: { [name]: server } }, null, 2);
+}
+function hermesYamlSnippet(spec, name) {
+    const lines = [
+        'mcp_servers:',
+        `  ${name}:`,
+        `    command: ${JSON.stringify(spec.command)}`,
+        `    args: ${JSON.stringify(spec.args)}`,
+    ];
+    if (Object.keys(spec.env).length > 0) {
+        lines.push('    env:');
+        for (const [k, v] of Object.entries(spec.env)) {
+            lines.push(`      ${k}: ${JSON.stringify(v)}`);
+        }
+    }
+    return lines.join('\n');
+}
+function vibeTomlSnippet(spec, name) {
+    const argsToml = `[${spec.args.map((a) => JSON.stringify(a)).join(', ')}]`;
+    const lines = [
+        '[[mcp_servers]]',
+        `name = ${JSON.stringify(name)}`,
+        'transport = "stdio"',
+        `command = ${JSON.stringify(spec.command)}`,
+        `args = ${argsToml}`,
+    ];
+    return lines.join('\n');
+}
+//# sourceMappingURL=install.js.map

package/dist/agent-install/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/agent-install/install.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,cAAc;AACd,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,uEAAuE;AACvE,wCAAwC;AACxC,yEAAyE;AACzE,sEAAsE;AACtE,uEAAuE;AACvE,2DAA2D;AAC3D,oEAAoE;AACpE,0EAA0E;AAC1E,mEAAmE;AACnE,uEAAuE;AACvE,0EAA0E;AAC1E,kEAAkE;AAClE,EAAE;AACF,oEAAoE;AACpE,8EAA8E;AAE9E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,aAAa;IACb,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,UAAU;CACF,CAAC;AAKX;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAQ,WAAiC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AA+DD,2EAA2E;AAC3E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,wEAAwE;AACxE,mEAAmE;AACnE,4EAA4E;AAC5E,qEAAqE;AACrE,kDAAkD;AAClD,SAAS,QAAQ,CAAC,GAA2B,EAAE,IAAY;IACzD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;yEAEyE;AACzE,SAAS,SAAS,CAChB,IAAmB,EACnB,QAAiC,EAAE,EACnC,SAAgC,KAAK;IAErC,MAAM,KAAK,GAA4B;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,KAAK;KACT,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAe,EACf,IAAmB,EACnB,GAAgB;IAEhB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;IAE3C,QAAQ,IAAI,EAAE,CAAC;QACb,sEAAsE;QACtE,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI;gBACJ,GAAG,EAAE,QAAQ;gBACb,OAAO,EAAE;oBACP,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM;oBAC/B,UAAU;oBACV,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;oBAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI;iBACjC;gBACD,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC;gBAC5D,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;aACpC,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI;gBACJ,GAAG,EAAE,OAAO;gBACZ,OAAO,EAAE;oBACP,KAAK,EAAE,KAAK,EAAE,UAAU;oBACxB,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;oBAC9B,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI;iBACjC;gBACD,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC;gBACzC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;aACpC,CAAC;QACJ,KAAK,MAAM;YACT,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,IAAI;gBACJ,GAAG,EAAE,MAAM;gBACX,OAAO,EAAE;oBACP,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO;oBACpC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;oBAC9B,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI;iBAC7C;gBACD,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC;gBACzC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;aACpC,CAAC;QAEJ,wDAAwD;QACxD,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;gBAClD,OAAO,EAAE,CAAC,YAAY,CAAC;gBACvB,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAC1C,CAAC;QACJ,KAAK,SAAS;YACZ,gEAAgE;YAChE,qDAAqD;YACrD,6DAA6D;YAC7D,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,CAAC;gBAC1D,OAAO,EAAE,CAAC,YAAY,CAAC;gBACvB,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;aACxD,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAC3C,OAAO,EAAE,CAAC,YAAY,CAAC;gBACvB,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;aAC7D,CAAC;QACJ,KAAK,UAAU;YACb,iEAAiE;YACjE,uCAAuC;YACvC,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC;gBACnE,OAAO,EAAE,CAAC,KAAK,CAAC;gBAChB,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,CAAC,GAAG,EAAE;oBACX,MAAM,CAAC,GAA4B;wBACjC,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;wBACrC,OAAO,EAAE,IAAI;qBACd,CAAC;oBACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;oBAC/D,OAAO,CAAC,CAAC;gBACX,CAAC,CAAC,EAAE;aACL,CAAC;QACJ,KAAK,UAAU;YACb,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC;gBACzD,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;gBAC3B,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;aACvB,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,CAAC;gBACxE,OAAO,EAAE,CAAC,YAAY,CAAC;gBACvB,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;aACvB,CAAC;QACJ,KAAK,MAAM;YACT,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,UAAU,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAC1C,OAAO,EAAE,CAAC,YAAY,CAAC;gBACvB,SAAS,EAAE,UAAU;gBACrB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC;aACvB,CAAC;QAEJ,0DAA0D;QAC1D,KAAK,MAAM;YACT,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC;gBACnD,OAAO,EAAE,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC;gBAC1C,MAAM,EACJ,sDAAsD;oBACtD,+DAA+D;oBAC/D,yCAAyC;aAC5C,CAAC;QACJ,KAAK,IAAI;YACP,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC;gBACvD,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC;gBACnD,MAAM,EACJ,iEAAiE;oBACjE,2DAA2D;oBAC3D,oDAAoD;aACvD,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,MAAM,EAAE,MAAM;gBACd,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC;gBACrD,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC;gBAC5C,MAAM,EACJ,iEAAiE;oBACjE,mCAAmC;aACtC,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,QAAyB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,eAAe,EACf,wBAAwB,EACxB,UAAU,EACV,yBAAyB,CAC1B,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAyB;IAC7D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC;AAED,2EAA2E;AAE3E,uEAAuE;AACvE,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,WAAW;AACX,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAClE,WAAW;IACX,WAAW;IACX,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,2BAA2B,CAAC,OAAe,EAAE,OAAe;IACnE,IAAI,8BAA8B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,mBAAmB,OAAO,sCAAsC,CAChH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAqB;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,2BAA2B,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAA2B,EAAE,IAAqB;IACjF,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,MAAM,GAA4B,IAAI,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IACpC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAA2B,EAAE,IAAqB;IAClF,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,YAAY,IAAI,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,MAAM,GAA4B,IAAI,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,IAA+B,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,IAAmB,EAAE,KAAa;IACzD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,IAAI,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,uBAAuB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAE3E,SAAS,wBAAwB,CAAC,IAAmB,EAAE,IAAY;IACjE,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAmB,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAG;QACZ,cAAc;QACd,KAAK,IAAI,GAAG;QACZ,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC9C,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACzC,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,IAAmB,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,KAAK,GAAG;QACZ,iBAAiB;QACjB,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QAChC,qBAAqB;QACrB,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QAC3C,UAAU,QAAQ,EAAE;KACrB,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/bin/serve.d.ts

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+/**
+ * @module @jini-ai/mcp/bin/serve
+ *
+ * The bootable `jini-mcp` binary (`package.json`'s `"bin": { "jini-mcp": "./dist/bin/serve.js" }`)
+ * — the real executable entry point gap 3's MCP-callback continuation-transport spike needed and
+ * did not have (see `packages/daemon/source-map.md`'s "run/chat orchestration gap 3, part 1"
+ * addition, and this package's own dated section in `source-map.md`). `../server/tool-server.js`'s
+ * `createMcpToolServer` was always designed to run as *this process's own* stdio — meant to be a
+ * script a client (Claude Code) spawns as its own child subprocess and talks to over that child's
+ * stdin/stdout — but until this file, nothing in this package actually was that script.
+ *
+ * Follows `@jini-ai/cli/main.ts`'s established shape for a bootable, side-effect-guarded, `#!/usr/bin/env
+ * node` entry point: a named, fully-dependency-injected `serve()` export (importable for tests, or
+ * for a consumer building its own bin wrapper around it) plus a bottom-of-file guard that only
+ * calls it for real when this module is the actual process entrypoint — mirrors that file's own
+ * `isMainModule` check (Node's ESM equivalent of the CommonJS `require.main === module` idiom).
+ * Deliberately **not** re-exported from `../index.ts`: that barrel is a plain library dependency, and
+ * this file's whole purpose is a `process.env`-reading, stdio-serving, potentially `process.exit`-
+ * calling side effect — bundling it into the library barrel would mean `import '@jini-ai/mcp'` could
+ * start behaving like a spawned MCP server.
+ *
+ * **Scope: what this process is spawned to do.** One `jini-mcp` process serves exactly one run for
+ * its entire lifetime — the spawning daemon injects {@link RUN_ID_ENV_VAR} into the child's own
+ * environment before Claude Code (which in turn spawns *this* as its own MCP server child, per its
+ * `.mcp.json`) ever starts talking to it. That is what lets `execute_delegated_tool`
+ * (`../server/tools/delegated-tool.js`) close over a fixed `runId` at construction time instead of
+ * trusting a model-supplied one — see that module's own doc for why that boundary matters. Every
+ * other tool this server hosts (`RUN_TOOLS`, `../server/tools/run-tools.js`) is run-agnostic and
+ * needed no such scoping.
+ *
+ * **Daemon-URL resolution** mirrors `@jini-ai/cli/main.ts`'s own posture: no baked-in default, just
+ * `resolveDaemonUrl` (`@jini-ai/cli`) wired to a `--daemon-url`-shaped precedence chain — except this
+ * process has no argv to parse (an MCP client launches it with a fixed `command`/`args`/`env`, not
+ * interactive flags), so only the env-var step applies: {@link DAEMON_URL_ENV_VAR}. When unset,
+ * `resolveDaemonUrl` throws, and this file's own top-level error boundary turns that into a clean
+ * stderr message + non-zero exit rather than an unhandled rejection.
+ */
+import type { Readable, Writable } from 'node:stream';
+import { resolveDaemonUrl as resolveDaemonUrlDefault } from '@jini-ai/cli';
+import { createMcpToolServer as createMcpToolServerDefault } from '../server/tool-server.js';
+/** The one run this process is scoped to for its entire lifetime. Set by the spawning daemon, never by the MCP client. */
+export declare const RUN_ID_ENV_VAR = "JINI_RUN_ID";
+/** Checked (only) when resolving the daemon HTTP base URL — see `resolveDaemonUrl`'s own docs; matches `@jini-ai/cli/main.ts`'s identically-named constant. */
+export declare const DAEMON_URL_ENV_VAR = "JINI_DAEMON_URL";
+export interface ServeDeps {
+    /** @default process.env */
+    readonly env?: NodeJS.ProcessEnv;
+    /** @default process.stderr.write */
+    readonly writeErr?: (text: string) => void;
+    /** @default process.exit; inject for tests (must not return) */
+    readonly exit?: (code: number) => never;
+    /** @default the real @jini-ai/cli resolveDaemonUrl */
+    readonly resolveDaemonUrl?: typeof resolveDaemonUrlDefault;
+    /** @default the real createMcpToolServer */
+    readonly createMcpToolServer?: typeof createMcpToolServerDefault;
+    /** Threaded into `execute_delegated_tool`'s per-call correlation id. @default node:crypto randomUUID */
+    readonly generateToolUseId?: () => string;
+    /** Threaded into every tool's daemon call. @default the global fetch */
+    readonly fetchImpl?: typeof fetch;
+    /** @default process.stdin */
+    readonly stdin?: Readable;
+    /** @default process.stdout */
+    readonly stdout?: Writable;
+}
+/**
+ * Assembles and runs the `jini-mcp` stdio MCP server: `RUN_ID_ENV_VAR` (required — this process
+ * has no meaningful default run to serve) plus `DAEMON_URL_ENV_VAR` resolution, then hosts
+ * `RUN_TOOLS` (run-agnostic) alongside a fresh `execute_delegated_tool` def scoped to the resolved
+ * `runId`, and `KERNEL_RESOURCES`. Resolves once the client disconnects (stdin EOF) or the
+ * idle-exit window elapses (`createMcpToolServer`'s own default) — never bare-throws: every error
+ * path below writes a message to `writeErr` and calls `exit(1)` instead.
+ */
+export declare function serve(deps?: ServeDeps): Promise<void>;
+//# sourceMappingURL=serve.d.ts.map

package/dist/bin/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/bin/serve.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,gBAAgB,IAAI,uBAAuB,EAAgC,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,mBAAmB,IAAI,0BAA0B,EAA6B,MAAM,0BAA0B,CAAC;AAOxH,0HAA0H;AAC1H,eAAO,MAAM,cAAc,gBAAgB,CAAC;AAC5C,+JAA+J;AAC/J,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AASpD,MAAM,WAAW,SAAS;IACxB,2BAA2B;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;IACxC,sDAAsD;IACtD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAC3D,4CAA4C;IAC5C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,0BAA0B,CAAC;IACjE,wGAAwG;IACxG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,MAAM,CAAC;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;CAC5B;AAMD;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA8C/D"}

package/dist/bin/serve.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+import { fileURLToPath } from 'node:url';
+import { resolveDaemonUrl as resolveDaemonUrlDefault } from '@jini-ai/cli';
+import { createMcpToolServer as createMcpToolServerDefault } from '../server/tool-server.js';
+import { RUN_TOOLS } from '../server/tools/run-tools.js';
+import { TOOL_CATALOG_TOOLS } from '../server/tools/tool-catalog-tools.js';
+import { createExecuteDelegatedToolTool } from '../server/tools/delegated-tool.js';
+import { KERNEL_RESOURCES } from '../server/resources/active-resource.js';
+/** The one run this process is scoped to for its entire lifetime. Set by the spawning daemon, never by the MCP client. */
+export const RUN_ID_ENV_VAR = 'JINI_RUN_ID';
+/** Checked (only) when resolving the daemon HTTP base URL — see `resolveDaemonUrl`'s own docs; matches `@jini-ai/cli/main.ts`'s identically-named constant. */
+export const DAEMON_URL_ENV_VAR = 'JINI_DAEMON_URL';
+const SERVER_NAME = 'jini-mcp';
+const SERVER_VERSION = '0.0.0';
+const INSTRUCTIONS = 'Tools proxying this host\'s Jini daemon over loopback HTTP, scoped to the run that spawned this MCP server process. ' +
+    'Use execute_delegated_tool to invoke a Jini-registered tool (never an agent-vendor-specific tool name) against that run — ' +
+    'every call is routed through the daemon\'s deny-by-default ToolExecutor gate.';
+function defaultWriteErr(text) {
+    process.stderr.write(text);
+}
+/**
+ * Assembles and runs the `jini-mcp` stdio MCP server: `RUN_ID_ENV_VAR` (required — this process
+ * has no meaningful default run to serve) plus `DAEMON_URL_ENV_VAR` resolution, then hosts
+ * `RUN_TOOLS` (run-agnostic) alongside a fresh `execute_delegated_tool` def scoped to the resolved
+ * `runId`, and `KERNEL_RESOURCES`. Resolves once the client disconnects (stdin EOF) or the
+ * idle-exit window elapses (`createMcpToolServer`'s own default) — never bare-throws: every error
+ * path below writes a message to `writeErr` and calls `exit(1)` instead.
+ */
+export async function serve(deps = {}) {
+    const env = deps.env ?? process.env;
+    const writeErr = deps.writeErr ?? defaultWriteErr;
+    const exit = deps.exit ?? ((code) => process.exit(code));
+    const resolveDaemonUrlFn = deps.resolveDaemonUrl ?? resolveDaemonUrlDefault;
+    const createMcpToolServerFn = deps.createMcpToolServer ?? createMcpToolServerDefault;
+    const runId = env[RUN_ID_ENV_VAR];
+    if (typeof runId !== 'string' || runId.length === 0) {
+        writeErr(`${SERVER_NAME}: missing required ${RUN_ID_ENV_VAR} environment variable (this process must be spawned by a Jini daemon, which sets it)\n`);
+        return exit(1);
+    }
+    const resolveBaseUrl = () => {
+        const options = { flagUrl: null, env, envVarName: DAEMON_URL_ENV_VAR, warn: writeErr };
+        return resolveDaemonUrlFn(options);
+    };
+    const tools = [
+        ...RUN_TOOLS,
+        ...TOOL_CATALOG_TOOLS,
+        createExecuteDelegatedToolTool({
+            runId,
+            ...(deps.generateToolUseId !== undefined ? { generateToolUseId: deps.generateToolUseId } : {}),
+        }),
+    ];
+    const serverOptions = {
+        name: SERVER_NAME,
+        version: SERVER_VERSION,
+        tools,
+        resources: KERNEL_RESOURCES,
+        resolveBaseUrl,
+        instructions: INSTRUCTIONS,
+        ...(deps.fetchImpl !== undefined ? { fetchImpl: deps.fetchImpl } : {}),
+        ...(deps.stdin !== undefined ? { stdin: deps.stdin } : {}),
+        ...(deps.stdout !== undefined ? { stdout: deps.stdout } : {}),
+    };
+    try {
+        await createMcpToolServerFn(serverOptions).run();
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        writeErr(`${SERVER_NAME}: ${message}\n`);
+        return exit(1);
+    }
+}
+// Only run for real when this module is the actual process entrypoint (`node dist/bin/serve.js`,
+// or the `jini-mcp` bin shim pnpm/npm links to it) — not merely imported, e.g. by this file's own
+// tests importing the named `serve` export above. Mirrors `@jini-ai/cli/main.ts`'s identical guard.
+const isMainModule = process.argv[1] !== undefined && fileURLToPath(import.meta.url) === process.argv[1];
+if (isMainModule) {
+    await serve();
+}
+//# sourceMappingURL=serve.js.map

package/dist/bin/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/bin/serve.ts"],"names":[],"mappings":";AAuCA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,IAAI,uBAAuB,EAAgC,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,mBAAmB,IAAI,0BAA0B,EAA6B,MAAM,0BAA0B,CAAC;AAExH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAE1E,0HAA0H;AAC1H,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;AAC5C,+JAA+J;AAC/J,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,YAAY,GAChB,sHAAsH;IACtH,4HAA4H;IAC5H,+EAA+E,CAAC;AAuBlF,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAkB,EAAE;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAS,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IAC5E,MAAM,qBAAqB,GAAG,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC;IAErF,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,GAAG,WAAW,sBAAsB,cAAc,wFAAwF,CAAC,CAAC;QACrJ,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,cAAc,GAAG,GAAoB,EAAE;QAC3C,MAAM,OAAO,GAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,KAAK,GAA0B;QACnC,GAAG,SAAS;QACZ,GAAG,kBAAkB;QACrB,8BAA8B,CAAC;YAC7B,KAAK;YACL,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAC;KACH,CAAC;IAEF,MAAM,aAAa,GAAyB;QAC1C,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,cAAc;QACvB,KAAK;QACL,SAAS,EAAE,gBAAgB;QAC3B,cAAc;QACd,YAAY,EAAE,YAAY;QAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC,GAAG,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,QAAQ,CAAC,GAAG,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AACpG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzG,IAAI,YAAY,EAAE,CAAC;IACjB,MAAM,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/client/client.d.ts

@@ -0,0 +1,48 @@
+/**
+ * @module @jini-ai/mcp/client/client
+ * Product-neutral runtime primitives for a stdio MCP server: an idle-exit
+ * controller that auto-closes an idle server process, a relative-reference
+ * extractor that walks HTML/CSS/JS text to find sibling files to bundle, and a
+ * textual-MIME classifier. Dependency-free (node stdlib only); imports no
+ * sibling MCP subdirectory.
+ */
+interface McpIdleExitControllerOptions {
+    idleMs: number;
+    onIdle: () => void;
+}
+/**
+ * Create an idle-exit controller that calls `onIdle` after `idleMs` of
+ * inactivity. Activity is tracked via `noteActivity()` and `trackRequest()`;
+ * in-flight requests defer the idle timer. Used to auto-close a long-running
+ * stdio MCP server process after a period of no tool calls.
+ * @param options Idle duration in ms (finite positive integer, clamped to a
+ *   24h ceiling — throws `RangeError` otherwise) and the callback to invoke on idle.
+ * @returns An object with `noteActivity`, `trackRequest`, and `dispose` methods.
+ */
+export declare function createMcpIdleExitController({ idleMs, onIdle, }: McpIdleExitControllerOptions): {
+    noteActivity(): void;
+    trackRequest<T>(fn: () => T | Promise<T>): Promise<T>;
+    dispose(): void;
+};
+/**
+ * True when `mime` names a textual content type whose body can be surfaced
+ * as MCP `text` content (text/*, JSON, JS/TS, XML, YAML/TOML/PHP/sh, `+json`
+ * / `+xml` suffixes, and SVG). Returns false for an absent/unknown mime.
+ * @param mime The MIME type string to classify (undefined counts as non-textual).
+ * @returns Whether the content should be treated as text.
+ */
+export declare function isTextualMime(mime: string | undefined): boolean;
+/**
+ * Extract all relative (non-absolute, non-CDN, non-data-URI) file references from
+ * the text content of a file, normalized to root-relative paths.
+ * Runs HTML, CSS, and/or JS pattern sets based on the file's MIME type and extension.
+ * Skips `https?:`, `//`, `data:`, `mailto:`, `tel:`, and `#` prefixes; drops any
+ * reference that would escape the root via `..` traversal.
+ * @param text The textual content of the file.
+ * @param fromPath The root-relative path of the file (used for relative-path resolution).
+ * @param fromMime The MIME type of the file (used to select reference-extraction patterns).
+ * @returns Deduplicated root-relative paths of all referenced files found.
+ */
+export declare function extractRelativeRefs(text: string, fromPath: string, fromMime: string): string[];
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/client/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,UAAU,4BAA4B;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,IAAI,CAAC;CACpB;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,MAAM,EACN,MAAM,GACP,EAAE,4BAA4B;;iBAmCR,CAAC,MAAM,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;;EA0B9D;AAeD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAG/D;AA6CD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CA8D9F"}