@loopstack/mcp-module 0.2.0

package/README.md

@@ -0,0 +1,213 @@
+# @loopstack/mcp-module
+
+> Remote-MCP client tools for the [Loopstack AI](https://loopstack.ai) automation framework.
+
+Lets a Loopstack agent list and call tools on remote Model Context Protocol (MCP)
+servers over HTTPS — Streamable HTTP or legacy SSE — with a strict SSRF allowlist
+and zero-trust handling of authentication secrets.
+
+## What this is (and isn't)
+
+- **Is:** a _client_ module — your Loopstack app reaches _out_ to a remote MCP
+  server (Linear, GitHub, internal tools, etc.).
+- **Isn't:** an MCP _server_ — it does not expose your workflows over MCP.
+
+## Tools
+
+| Tool               | Purpose                                         |
+| ------------------ | ----------------------------------------------- |
+| `McpListToolsTool` | Discover the tools a remote MCP server exposes. |
+| `McpCallTool`      | Invoke a tool on a remote MCP server.           |
+
+Both take `serverUrl`, `transport` (`streamableHttp` or `sse`), and `timeoutMs`
+at call time. `McpCallTool` additionally takes `toolName` and `arguments`.
+
+## Security model
+
+Every connection passes three checks before any bytes go out:
+
+1. **Allowlist** — `serverUrl`'s hostname must match `allowedHosts`. Exact match
+   or `*.example.com` (which also matches `example.com`).
+2. **Scheme** — `https://` by default; `http://` only if `allowInsecureHttp: true`.
+3. **Public-IP resolution** — DNS (or a literal IP) must resolve to a routable
+   public address. Loopback, RFC1918, link-local, ULA, and IPv4-mapped
+   equivalents are rejected. Override with `allowPrivateHosts: true` for trusted
+   local MCP proxies.
+
+Userinfo in the URL (`https://user:pw@host/...`) is rejected — credentials must
+flow through headers.
+
+## Authentication
+
+Configure auth headers via `@InjectTool(...)`:
+
+```ts
+@InjectTool({
+  allowedHosts: ['mcp.linear.app'],
+  hostHeaderEnv: {
+    'mcp.linear.app': { Authorization: 'LINEAR_MCP_TOKEN' },
+  },
+})
+private readonly mcpCallTool: McpCallTool;
+```
+
+Three knobs, in increasing specificity:
+
+| Knob             | Use for                                                                                                                 |
+| ---------------- | ----------------------------------------------------------------------------------------------------------------------- |
+| `defaultHeaders` | Static, **non-secret** values (e.g. `X-Trace: on`). Sensitive header names like `Authorization` are rejected here.      |
+| `headerEnv`      | `header → env-var` mapping applied to _every_ host. Value is read from `process.env` at call time.                      |
+| `hostHeaderEnv`  | `host → { header → env-var }`. Use the hostname or `'*'` (applied to all). Host-specific entries override the wildcard. |
+
+Precedence (later wins): `defaultHeaders` → `headerEnv` → `hostHeaderEnv['*']` → `hostHeaderEnv[hostname]`. `hostHeaderEnv['*']` outranks `headerEnv` because it lives in the same map as the host-specific entries — keeping all host-scoped knobs together in `hostHeaderEnv` is the intended override layer. Keys are matched case-insensitively (HTTP semantics).
+
+Header _names_ are logged on connect (e.g. `headers=[Authorization]`); values
+never are. If a referenced env var is unset or empty, the header is silently
+omitted — so missing `LINEAR_MCP_TOKEN` means no `Authorization` header, not a
+crash.
+
+The header value is sent **raw**. If the remote server expects `Bearer <token>`,
+your env var must contain the `Bearer ` prefix:
+
+```env
+LINEAR_MCP_TOKEN="Bearer lin_oauth_..."
+```
+
+## Registering the tools (workspace vs workflow)
+
+Import `McpModule` in your Nest module so the tool classes are available. Then
+register **instances** with `@InjectTool()` — where you put that decorator
+depends on how you run the LLM loop.
+
+| How you run the agent                                                                                                                              | Where to `@InjectTool` MCP tools                                                                                                                                             |
+| -------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **`ChatAgentWorkflow` / `AgentWorkflow` as a sub-workflow** (`this.agent.run({ tools: [...] })`)                                                   | **Workspace** — the child agent resolves tools from the executing workflow first, then the workspace. Tools on the parent workflow are not visible while the sub-agent runs. |
+| **Inline agent loop in one workflow** (your transitions call `this.llmGenerateText.call()` / `this.llmDelegateToolCalls.call()` on the same class) | **That workflow** — same pattern as other registry agents (e.g. Google Workspace).                                                                                           |
+
+See [@loopstack/agent — Tool Resolution]() for the full resolution order.
+
+### With `ChatAgentWorkflow` (register on the workspace)
+
+This is the pattern used by `@loopstack/mcp-linear-example-workflow` and the app
+template: declare MCP tools once on the workspace, then pass their property names
+to `agent.run()`.
+
+```ts
+import { Injectable } from '@nestjs/common';
+import { ChatAgentWorkflow } from '@loopstack/agent';
+import { InjectTool, InjectWorkflow, Workspace } from '@loopstack/common';
+import { McpCallTool, McpListToolsTool } from '@loopstack/mcp-module';
+import { MyMcpWorkflow } from './my-mcp.workflow';
+
+const mcpToolConfig = {
+  allowedHosts: ['mcp.linear.app', 'mcp.github.com'],
+  hostHeaderEnv: {
+    'mcp.linear.app': { Authorization: 'LINEAR_MCP_TOKEN' },
+    'mcp.github.com': { Authorization: 'GITHUB_MCP_TOKEN' },
+  },
+} as const;
+
+@Injectable()
+@Workspace({ uiConfig: { title: 'My Workspace' } })
+export class MyWorkspace {
+  @InjectWorkflow() mcpAgent: MyMcpWorkflow;
+
+  @InjectTool(mcpToolConfig)
+  mcpListTools: McpListToolsTool;
+
+  @InjectTool(mcpToolConfig)
+  mcpCallTool: McpCallTool;
+}
+```
+
+```ts
+// my-mcp.workflow.ts — parent only starts the sub-agent
+@InjectWorkflow({ model: 'claude-sonnet-4-6' }) private agent: ChatAgentWorkflow;
+
+await this.agent.run({
+  system: '...',
+  tools: ['mcpListTools', 'mcpCallTool'],
+  userMessage: '...',
+});
+```
+
+### Inline agent loop (register on the workflow)
+
+If your workflow owns the LLM turns and tool delegation (no `ChatAgentWorkflow`
+sub-workflow), inject MCP tools on that same workflow class alongside
+`LlmGenerateTextTool` and `LlmDelegateToolCallsTool`.
+
+The agent picks `serverUrl` per call, so it can hop between any of the
+allowlisted hosts within the same chat.
+
+## Multiple MCP servers
+
+`serverUrl` is a per-call argument. **An agent can reach any host listed in
+`allowedHosts`** — there is no "primary" server. To add a new server:
+
+1. Add its hostname to `allowedHosts` on both `@InjectTool` configs.
+2. Add its auth mapping to `hostHeaderEnv`.
+3. Set the corresponding env var.
+
+Dynamic, end-user-driven server registration (paste any URL mid-chat) is
+deliberately _not_ supported — the allowlist exists to prevent agents from
+being tricked into hitting internal hosts. Adding that flow safely requires
+a per-user registry plus an auth onboarding step (out of scope here).
+
+## Transport guidance
+
+| Server                    | Transport                  |
+| ------------------------- | -------------------------- |
+| Linear (`mcp.linear.app`) | `sse`                      |
+| Most modern hosted MCP    | `streamableHttp` (default) |
+
+Pass `transport: 'sse'` per call when needed.
+
+## Errors
+
+All failures throw subclasses of `McpError`:
+
+- `McpUrlSecurityError` — SSRF / allowlist / scheme / userinfo violations.
+- `McpAuthError` — 401 / 403 from the remote (or transport-equivalent).
+- `McpTimeoutError` — call exceeded `timeoutMs`.
+- `McpProtocolError` — malformed MCP response.
+- `McpTransportError` — DNS, TCP, TLS, abort, fallback.
+
+Catch `McpError` for any failure, or a specific subclass to react to a category.
+
+## Observability
+
+The service logs structured events with header _names_ only, never values:
+
+```
+mcp.connect host=mcp.linear.app transport=sse headers=[Authorization]
+mcp.connect.done host=mcp.linear.app transport=sse outcome=success latencyMs=412
+mcp.callTool host=mcp.linear.app transport=sse toolName=createIssue outcome=success latencyMs=623
+```
+
+For metrics, implement `McpMetricsPort` and bind it via the `MCP_METRICS`
+provider token — the default is a no-op:
+
+```ts
+@Module({
+  providers: [{ provide: MCP_METRICS, useClass: MyOtelMetrics }],
+})
+```
+
+Same pattern for `MCP_ENV_READER` if you need to source secrets from somewhere
+other than `process.env` (e.g. a secrets manager).
+
+## Testing
+
+The module ships unit tests for:
+
+- `hostMatchesAllowlist`, `assertIpIsPublic`, `assertMcpUrlSafe` (with mocked DNS)
+- `McpClientService.mergeHeaders` (precedence, host scoping, env-var skipping)
+- Both tools (config guard + arg forwarding)
+- Config-schema validation (secret-header rejection, strict mode, required keys)
+
+Run with:
+
+```sh
+npm test
+```

package/dist/config/mcp-tool-config.schema.d.ts

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+export declare const McpToolConfigSchema: z.ZodObject<{
+    allowedHosts: z.ZodArray<z.ZodString>;
+    allowInsecureHttp: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    allowPrivateHosts: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    defaultHeaders: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    headerEnv: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    hostHeaderEnv: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>>;
+}, z.core.$strict>;
+export type McpToolConfig = z.infer<typeof McpToolConfigSchema>;
+//# sourceMappingURL=mcp-tool-config.schema.d.ts.map

package/dist/config/mcp-tool-config.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-config.schema.d.ts","sourceRoot":"","sources":["../../src/config/mcp-tool-config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuBxB,eAAO,MAAM,mBAAmB;;;;;;;kBAiC5B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/config/mcp-tool-config.schema.js

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+const RESERVED_SECRET_HEADER_NAMES = new Set([
+    'authorization',
+    'proxy-authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+]);
+function rejectSecretsInDefaults(defaults, ctx) {
+    if (!defaults)
+        return;
+    for (const name of Object.keys(defaults)) {
+        if (RESERVED_SECRET_HEADER_NAMES.has(name.toLowerCase())) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['defaultHeaders', name],
+                message: `Header "${name}" likely carries a secret; use headerEnv or hostHeaderEnv instead of defaultHeaders.`,
+            });
+        }
+    }
+}
+export const McpToolConfigSchema = z
+    .object({
+    allowedHosts: z
+        .array(z.string().min(1))
+        .min(1)
+        .describe('Hostnames allowed for `serverUrl`. Use `*.example.com` to allow any subdomain of example.com (also matches example.com).'),
+    allowInsecureHttp: z.boolean().optional().default(false),
+    allowPrivateHosts: z.boolean().optional().default(false),
+    defaultHeaders: z.record(z.string(), z.string()).optional(),
+    headerEnv: z.record(z.string(), z.string()).optional(),
+    hostHeaderEnv: z.record(z.string(), z.record(z.string(), z.string())).optional(),
+})
+    .strict()
+    .superRefine((cfg, ctx) => {
+    rejectSecretsInDefaults(cfg.defaultHeaders, ctx);
+});
+//# sourceMappingURL=mcp-tool-config.schema.js.map

package/dist/config/mcp-tool-config.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-config.schema.js","sourceRoot":"","sources":["../../src/config/mcp-tool-config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,eAAe;IACf,qBAAqB;IACrB,QAAQ;IACR,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAAC,QAA4C,EAAE,GAAoB;IACjG,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,gBAAgB,EAAE,IAAI,CAAC;gBAC9B,OAAO,EAAE,WAAW,IAAI,sFAAsF;aAC/G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,0HAA0H,CAC3H;IAEH,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAOxD,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAGxD,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAG3D,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAMtD,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjF,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,uBAAuB,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,14 @@
+export declare abstract class McpError extends Error {
+    constructor(message: string);
+}
+export declare class McpUrlSecurityError extends McpError {
+}
+export declare class McpAuthError extends McpError {
+}
+export declare class McpTimeoutError extends McpError {
+}
+export declare class McpProtocolError extends McpError {
+}
+export declare class McpTransportError extends McpError {
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,8BAAsB,QAAS,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,mBAAoB,SAAQ,QAAQ;CAAG;AAEpD,qBAAa,YAAa,SAAQ,QAAQ;CAAG;AAC7C,qBAAa,eAAgB,SAAQ,QAAQ;CAAG;AAChD,qBAAa,gBAAiB,SAAQ,QAAQ;CAAG;AAEjD,qBAAa,iBAAkB,SAAQ,QAAQ;CAAG"}

package/dist/errors.js

@@ -0,0 +1,17 @@
+export class McpError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = new.target.name;
+    }
+}
+export class McpUrlSecurityError extends McpError {
+}
+export class McpAuthError extends McpError {
+}
+export class McpTimeoutError extends McpError {
+}
+export class McpProtocolError extends McpError {
+}
+export class McpTransportError extends McpError {
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAgB,QAAS,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;CAAG;AAEpD,MAAM,OAAO,YAAa,SAAQ,QAAQ;CAAG;AAC7C,MAAM,OAAO,eAAgB,SAAQ,QAAQ;CAAG;AAChD,MAAM,OAAO,gBAAiB,SAAQ,QAAQ;CAAG;AAEjD,MAAM,OAAO,iBAAkB,SAAQ,QAAQ;CAAG"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export * from './config/mcp-tool-config.schema.js';
+export * from './errors.js';
+export * from './mcp.module.js';
+export * from './services/index.js';
+export * from './tools/index.js';
+export * from './types.js';
+export * from './utils/url-security.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oCAAoC,CAAC;AACnD,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export * from './config/mcp-tool-config.schema.js';
+export * from './errors.js';
+export * from './mcp.module.js';
+export * from './services/index.js';
+export * from './tools/index.js';
+export * from './types.js';
+export * from './utils/url-security.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oCAAoC,CAAC;AACnD,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,yBAAyB,CAAC"}

package/dist/mcp.module.d.ts

@@ -0,0 +1,3 @@
+export declare class McpModule {
+}
+//# sourceMappingURL=mcp.module.d.ts.map

package/dist/mcp.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.module.d.ts","sourceRoot":"","sources":["../src/mcp.module.ts"],"names":[],"mappings":"AAiBA,qBAKa,SAAS;CAAG"}

package/dist/mcp.module.js

@@ -0,0 +1,31 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Module } from '@nestjs/common';
+import { LoopCoreModule } from '@loopstack/core';
+import { MCP_ENV_READER, ProcessEnvReader } from './services/env-reader.js';
+import { McpClientService } from './services/index.js';
+import { MCP_METRICS, NoopMcpMetrics } from './services/metrics-port.js';
+import { McpCallTool, McpListToolsTool } from './tools/index.js';
+const envReaderProvider = {
+    provide: MCP_ENV_READER,
+    useClass: ProcessEnvReader,
+};
+const metricsProvider = {
+    provide: MCP_METRICS,
+    useClass: NoopMcpMetrics,
+};
+let McpModule = class McpModule {
+};
+McpModule = __decorate([
+    Module({
+        imports: [LoopCoreModule],
+        providers: [envReaderProvider, metricsProvider, McpClientService, McpListToolsTool, McpCallTool],
+        exports: [MCP_ENV_READER, MCP_METRICS, McpClientService, McpListToolsTool, McpCallTool],
+    })
+], McpModule);
+export { McpModule };
+//# sourceMappingURL=mcp.module.js.map

package/dist/mcp.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../src/mcp.module.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,MAAM,EAAY,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEjE,MAAM,iBAAiB,GAAa;IAClC,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,MAAM,eAAe,GAAa;IAChC,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,cAAc;CACzB,CAAC;AAOK,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,SAAS;IALrB,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,SAAS,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,CAAC;QAChG,OAAO,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,CAAC;KACxF,CAAC;GACW,SAAS,CAAG"}

package/dist/services/env-reader.d.ts

@@ -0,0 +1,8 @@
+export interface EnvReader {
+    get(key: string): string | undefined;
+}
+export declare class ProcessEnvReader implements EnvReader {
+    get(key: string): string | undefined;
+}
+export declare const MCP_ENV_READER: unique symbol;
+//# sourceMappingURL=env-reader.d.ts.map

package/dist/services/env-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-reader.d.ts","sourceRoot":"","sources":["../../src/services/env-reader.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,qBAAa,gBAAiB,YAAW,SAAS;IAChD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAKrC;AAED,eAAO,MAAM,cAAc,eAA2B,CAAC"}

package/dist/services/env-reader.js

@@ -0,0 +1,10 @@
+export class ProcessEnvReader {
+    get(key) {
+        const v = process.env[key];
+        if (v === undefined || v === '')
+            return undefined;
+        return v;
+    }
+}
+export const MCP_ENV_READER = Symbol('MCP_ENV_READER');
+//# sourceMappingURL=env-reader.js.map

package/dist/services/env-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-reader.js","sourceRoot":"","sources":["../../src/services/env-reader.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,gBAAgB;IAC3B,GAAG,CAAC,GAAW;QACb,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/services/index.d.ts

@@ -0,0 +1,5 @@
+export * from './env-reader.js';
+export * from './mcp-client.service.js';
+export * from './mcp-sdk.types.js';
+export * from './metrics-port.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}

package/dist/services/index.js

@@ -0,0 +1,5 @@
+export * from './env-reader.js';
+export * from './mcp-client.service.js';
+export * from './mcp-sdk.types.js';
+export * from './metrics-port.js';
+//# sourceMappingURL=index.js.map

package/dist/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}

package/dist/services/mcp-client.service.d.ts

@@ -0,0 +1,39 @@
+import type { McpToolConfig } from '../config/mcp-tool-config.schema.js';
+import type { McpTransportKind } from '../types.js';
+import { EnvReader } from './env-reader.js';
+import { McpMetricsPort } from './metrics-port.js';
+export type { McpTransportKind };
+export interface McpClientCallOptions {
+    timeoutMs?: number;
+    skipDnsResolution?: boolean;
+    transport?: McpTransportKind;
+}
+export type McpCallToolResult = {
+    kind: 'legacyToolResult';
+    toolResult: unknown;
+    meta?: unknown;
+} | {
+    kind: 'callToolResult';
+    content: unknown;
+    structuredContent?: unknown;
+    isError?: unknown;
+    meta?: unknown;
+};
+export declare class McpClientService {
+    private readonly env;
+    private readonly metrics;
+    private readonly logger;
+    constructor(env?: EnvReader, metrics?: McpMetricsPort);
+    listTools(rawUrl: string, config: McpToolConfig, options?: McpClientCallOptions): Promise<{
+        tools: unknown;
+    }>;
+    callTool(rawUrl: string, config: McpToolConfig, toolName: string, toolArgs: Record<string, unknown>, options?: McpClientCallOptions): Promise<McpCallToolResult>;
+    mergeHeaders(config: McpToolConfig, url: URL): Record<string, string>;
+    private applyEnvMap;
+    private connect;
+    private dispose;
+    private mapSdkError;
+    private recordConnect;
+    private recordCall;
+}
+//# sourceMappingURL=mcp-client.service.d.ts.map

package/dist/services/mcp-client.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.service.d.ts","sourceRoot":"","sources":["../../src/services/mcp-client.service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAoC,MAAM,iBAAiB,CAAC;AAE9E,OAAO,EAKL,cAAc,EAEf,MAAM,mBAAmB,CAAC;AAa3B,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACjE;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEN,qBACa,gBAAgB;IAIW,OAAO,CAAC,QAAQ,CAAC,GAAG;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqC;gBAGL,GAAG,GAAE,SAAkC,EAC1C,OAAO,GAAE,cAAqC;IAG5F,SAAS,CACb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IA6BxB,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,iBAAiB,CAAC;IAyD7B,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAwBrE,OAAO,CAAC,WAAW;YAOL,OAAO;YA4EP,OAAO;IAUrB,OAAO,CAAC,WAAW;IA0BnB,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,UAAU;CAWnB"}