@mcp-rating/gateway 0.2.0

package/dist/proxy/ui-detect.d.ts

@@ -0,0 +1,22 @@
+import type { DownstreamTool, DownstreamResource } from "../connection/types.js";
+/**
+ * Authoritative UI-capability detection from a LIVE connection.
+ *
+ * Unlike the registry's heuristic ("UI-capable (detected)" from package deps /
+ * keywords), this inspects the actual data the server returned after
+ * connecting — so it's ground truth:
+ *
+ *   - Any tool carrying `_meta.ui.resourceUri` (MCP Apps marker), or
+ *   - Any resource whose URI uses the `ui://` scheme (MCP-UI / MCP Apps).
+ *
+ * Returns which tools/resources triggered it so the gateway can show the user
+ * exactly what's UI-capable.
+ */
+export interface LiveUiResult {
+    supportsUi: boolean;
+    /** Tool names that declare a UI resource via _meta.ui.resourceUri. */
+    uiTools: string[];
+    /** Resource URIs using the ui:// scheme. */
+    uiResources: string[];
+}
+export declare function detectLiveUi(tools: Iterable<DownstreamTool>, resources: Iterable<DownstreamResource>): LiveUiResult;

package/dist/proxy/ui-detect.js

@@ -0,0 +1,30 @@
+export function detectLiveUi(tools, resources) {
+    const uiTools = [];
+    const uiResources = [];
+    for (const tool of tools) {
+        const meta = tool._meta;
+        if (hasUiResourceUri(meta))
+            uiTools.push(tool.name);
+    }
+    for (const res of resources) {
+        if (typeof res.uri === "string" && res.uri.startsWith("ui://")) {
+            uiResources.push(res.uri);
+        }
+    }
+    return {
+        supportsUi: uiTools.length > 0 || uiResources.length > 0,
+        uiTools,
+        uiResources,
+    };
+}
+/** True if a tool's _meta carries a `ui.resourceUri` (MCP Apps). */
+function hasUiResourceUri(meta) {
+    if (!meta || typeof meta !== "object")
+        return false;
+    const ui = meta.ui;
+    if (!ui || typeof ui !== "object")
+        return false;
+    const uri = ui.resourceUri;
+    return typeof uri === "string" && uri.length > 0;
+}
+//# sourceMappingURL=ui-detect.js.map

package/dist/proxy/ui-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-detect.js","sourceRoot":"","sources":["../../src/proxy/ui-detect.ts"],"names":[],"mappings":"AAuBA,MAAM,UAAU,YAAY,CAC1B,KAA+B,EAC/B,SAAuC;IAEvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAI,IAA4B,CAAC,KAAK,CAAC;QACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QACxD,OAAO;QACP,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,SAAS,gBAAgB,CAAC,IAAa;IACrC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;IACzC,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,GAAG,GAAI,EAAgC,CAAC,WAAW,CAAC;IAC1D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AACnD,CAAC"}

package/dist/registry/registry-client.d.ts

@@ -0,0 +1,55 @@
+import type { RegistryServer, RegistryListResponse, InstallCommand, TrustTier } from "./types.js";
+export interface RegistryStatus {
+    lastSuccessfulCall: Date | null;
+    lastError: string | null;
+    cacheSize: number;
+}
+/**
+ * HTTP client for querying the MCP-Rating API.
+ *
+ * Uses native fetch (Node 18+). Falls back gracefully when the
+ * registry is unreachable — users can still connect servers manually
+ * via explicit command+args.
+ *
+ * Features:
+ * - In-memory cache with configurable TTL
+ * - Automatic retry with backoff for transient failures (5xx / network)
+ * - Reachability tracking for health diagnostics
+ */
+export declare class RegistryClient {
+    private readonly baseUrl;
+    private readonly cacheTtlMs;
+    private readonly partnerKey?;
+    private cache;
+    private _lastSuccessfulCall;
+    private _lastError;
+    constructor(baseUrl: string, cacheTtlMs?: number, partnerKey?: string | undefined);
+    search(query: string, options?: {
+        category?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<RegistryListResponse>;
+    getServer(slug: string): Promise<RegistryServer | null>;
+    /**
+     * Resolve install command for a server.
+     * Prefers the stored `installCommand`, falling back to `npx -y {npmPackage}`.
+     */
+    resolveInstallCommand(server: RegistryServer): InstallCommand | null;
+    /**
+     * Determine trust tier from registry data.
+     *
+     * NOTE: This logic is mirrored in the main app at src/scoring/trust-tier.ts
+     * (so the REST API exposes the same `trustTier`). Keep the two in sync — the
+     * gateway is a separately-published package and can't import from the root.
+     */
+    static determineTrustTier(server: RegistryServer): TrustTier;
+    /** Get reachability status for diagnostics. */
+    getStatus(): RegistryStatus;
+    /** Clear all cached entries. */
+    clearCache(): void;
+    private getFromCache;
+    private setCache;
+    private fetchWithRetry;
+    private recordSuccess;
+    private recordError;
+}

package/dist/registry/registry-client.js

@@ -0,0 +1,211 @@
+import { log } from "../utils/logger.js";
+import { RegistryError } from "../utils/errors.js";
+/**
+ * HTTP client for querying the MCP-Rating API.
+ *
+ * Uses native fetch (Node 18+). Falls back gracefully when the
+ * registry is unreachable — users can still connect servers manually
+ * via explicit command+args.
+ *
+ * Features:
+ * - In-memory cache with configurable TTL
+ * - Automatic retry with backoff for transient failures (5xx / network)
+ * - Reachability tracking for health diagnostics
+ */
+export class RegistryClient {
+    baseUrl;
+    cacheTtlMs;
+    partnerKey;
+    cache = new Map();
+    _lastSuccessfulCall = null;
+    _lastError = null;
+    constructor(baseUrl, cacheTtlMs = 300_000, partnerKey) {
+        this.baseUrl = baseUrl;
+        this.cacheTtlMs = cacheTtlMs;
+        this.partnerKey = partnerKey;
+    }
+    async search(query, options) {
+        const params = new URLSearchParams({
+            search: query,
+            limit: String(options?.limit ?? 10),
+            offset: String(options?.offset ?? 0),
+        });
+        if (options?.category) {
+            params.set("category", options.category);
+        }
+        const url = `${this.baseUrl}/servers?${params}`;
+        const cacheKey = `search:${url}`;
+        const cached = this.getFromCache(cacheKey);
+        if (cached) {
+            log.debug("Registry cache hit", { cacheKey });
+            return cached;
+        }
+        log.debug("Registry search", { url });
+        try {
+            const res = await this.fetchWithRetry(url);
+            if (!res.ok) {
+                throw new RegistryError(`Registry API returned ${res.status}: ${res.statusText}`);
+            }
+            const data = (await res.json());
+            this.setCache(cacheKey, data);
+            this.recordSuccess();
+            return data;
+        }
+        catch (err) {
+            this.recordError(err);
+            if (err instanceof RegistryError)
+                throw err;
+            throw new RegistryError(`Failed to reach MCP-Rating registry at ${this.baseUrl}: ${String(err)}`);
+        }
+    }
+    async getServer(slug) {
+        const url = `${this.baseUrl}/servers/${encodeURIComponent(slug)}`;
+        const cacheKey = `server:${slug}`;
+        const cached = this.getFromCache(cacheKey);
+        if (cached !== undefined) {
+            log.debug("Registry cache hit", { cacheKey });
+            return cached;
+        }
+        log.debug("Registry getServer", { url });
+        try {
+            const res = await this.fetchWithRetry(url);
+            if (res.status === 404) {
+                this.setCache(cacheKey, null);
+                this.recordSuccess();
+                return null;
+            }
+            if (!res.ok) {
+                throw new RegistryError(`Registry API returned ${res.status}: ${res.statusText}`);
+            }
+            const data = (await res.json());
+            this.setCache(cacheKey, data);
+            this.recordSuccess();
+            return data;
+        }
+        catch (err) {
+            this.recordError(err);
+            if (err instanceof RegistryError)
+                throw err;
+            throw new RegistryError(`Failed to reach MCP-Rating registry: ${String(err)}`);
+        }
+    }
+    /**
+     * Resolve install command for a server.
+     * Prefers the stored `installCommand`, falling back to `npx -y {npmPackage}`.
+     */
+    resolveInstallCommand(server) {
+        if (server.installCommand) {
+            const parts = server.installCommand.split(/\s+/);
+            if (parts.length > 0) {
+                return { command: parts[0], args: parts.slice(1) };
+            }
+        }
+        if (server.npmPackage) {
+            return { command: "npx", args: ["-y", server.npmPackage] };
+        }
+        return null;
+    }
+    /**
+     * Determine trust tier from registry data.
+     *
+     * NOTE: This logic is mirrored in the main app at src/scoring/trust-tier.ts
+     * (so the REST API exposes the same `trustTier`). Keep the two in sync — the
+     * gateway is a separately-published package and can't import from the root.
+     */
+    static determineTrustTier(server) {
+        if (server.isVerified ||
+            (server.isOfficial && (server.qualityScore ?? 0) >= 80)) {
+            return "verified";
+        }
+        if ((server.qualityScore ?? 0) >= 60 &&
+            server.repositoryUrl &&
+            server.installCommand) {
+            return "trusted";
+        }
+        if ((server.qualityScore ?? 0) >= 30) {
+            return "community";
+        }
+        return "unknown";
+    }
+    /** Get reachability status for diagnostics. */
+    getStatus() {
+        return {
+            lastSuccessfulCall: this._lastSuccessfulCall,
+            lastError: this._lastError,
+            cacheSize: this.cache.size,
+        };
+    }
+    /** Clear all cached entries. */
+    clearCache() {
+        this.cache.clear();
+        log.debug("Registry cache cleared");
+    }
+    // ── Cache helpers ──────────────────────────────────────────────
+    getFromCache(key) {
+        const entry = this.cache.get(key);
+        if (!entry)
+            return undefined;
+        if (Date.now() > entry.expiresAt) {
+            this.cache.delete(key);
+            return undefined;
+        }
+        return entry.data;
+    }
+    setCache(key, data) {
+        this.cache.set(key, {
+            data,
+            expiresAt: Date.now() + this.cacheTtlMs,
+        });
+    }
+    // ── Retry helper ───────────────────────────────────────────────
+    async fetchWithRetry(url, maxRetries = 2) {
+        const headers = {};
+        if (this.partnerKey) {
+            headers["x-partner-key"] = this.partnerKey;
+        }
+        let lastError;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+            try {
+                const res = await fetch(url, {
+                    headers,
+                    signal: AbortSignal.timeout(10_000),
+                });
+                // Don't retry on client errors (4xx) or success
+                if (res.ok || res.status < 500)
+                    return res;
+                // 5xx — retry if attempts remain
+                lastError = new Error(`HTTP ${res.status}: ${res.statusText}`);
+                log.warn("Registry returned 5xx, retrying", {
+                    url,
+                    status: res.status,
+                    attempt: attempt + 1,
+                    maxRetries,
+                });
+            }
+            catch (err) {
+                lastError = err;
+                if (attempt < maxRetries) {
+                    log.warn("Registry fetch failed, retrying", {
+                        url,
+                        error: String(err),
+                        attempt: attempt + 1,
+                        maxRetries,
+                    });
+                }
+            }
+            if (attempt < maxRetries) {
+                await new Promise((r) => setTimeout(r, 500 * (attempt + 1)));
+            }
+        }
+        throw lastError;
+    }
+    // ── Reachability tracking ──────────────────────────────────────
+    recordSuccess() {
+        this._lastSuccessfulCall = new Date();
+        this._lastError = null;
+    }
+    recordError(err) {
+        this._lastError = err instanceof Error ? err.message : String(err);
+    }
+}
+//# sourceMappingURL=registry-client.js.map

package/dist/registry/registry-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-client.js","sourceRoot":"","sources":["../../src/registry/registry-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAmBnD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,cAAc;IAMN;IACA;IACA;IAPX,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC/C,mBAAmB,GAAgB,IAAI,CAAC;IACxC,UAAU,GAAkB,IAAI,CAAC;IAEzC,YACmB,OAAe,EACf,aAAqB,OAAO,EAC5B,UAAmB;QAFnB,YAAO,GAAP,OAAO,CAAQ;QACf,eAAU,GAAV,UAAU,CAAkB;QAC5B,eAAU,GAAV,UAAU,CAAS;IACnC,CAAC;IAEJ,KAAK,CAAC,MAAM,CACV,KAAa,EACb,OAAgE;QAEhE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;SACrC,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,YAAY,MAAM,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,UAAU,GAAG,EAAE,CAAC;QAEjC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAuB,QAAQ,CAAC,CAAC;QACjE,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,aAAa,CACrB,yBAAyB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,CACzD,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,aAAa,CACrB,0CAA0C,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,UAAU,IAAI,EAAE,CAAC;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAwB,QAAQ,CAAC,CAAC;QAClE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,aAAa,CACrB,yBAAyB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,CACzD,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,GAAG,YAAY,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,IAAI,aAAa,CACrB,wCAAwC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,qBAAqB,CAAC,MAAsB;QAC1C,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,kBAAkB,CAAC,MAAsB;QAC9C,IACE,MAAM,CAAC,UAAU;YACjB,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EACvD,CAAC;YACD,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IACE,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,EAAE;YAChC,MAAM,CAAC,aAAa;YACpB,MAAM,CAAC,cAAc,EACrB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+CAA+C;IAC/C,SAAS;QACP,OAAO;YACL,kBAAkB,EAAE,IAAI,CAAC,mBAAmB;YAC5C,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IAED,kEAAkE;IAE1D,YAAY,CAAI,GAAW;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAA8B,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IAEO,QAAQ,CAAI,GAAW,EAAE,IAAO;QACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU;SACxC,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAE1D,KAAK,CAAC,cAAc,CAAC,GAAW,EAAE,UAAU,GAAG,CAAC;QACtD,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7C,CAAC;QAED,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC3B,OAAO;oBACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,gDAAgD;gBAChD,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;oBAAE,OAAO,GAAG,CAAC;gBAC3C,iCAAiC;gBACjC,SAAS,GAAG,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC/D,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAC1C,GAAG;oBACH,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,OAAO,EAAE,OAAO,GAAG,CAAC;oBACpB,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE;wBAC1C,GAAG;wBACH,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;wBAClB,OAAO,EAAE,OAAO,GAAG,CAAC;wBACpB,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAC;IAClB,CAAC;IAED,kEAAkE;IAE1D,aAAa;QACnB,IAAI,CAAC,mBAAmB,GAAG,IAAI,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAEO,WAAW,CAAC,GAAY;QAC9B,IAAI,CAAC,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;CACF"}

package/dist/registry/types.d.ts

@@ -0,0 +1,69 @@
+/** Server data returned by the MCP-Rating API */
+export interface RegistryServer {
+    id: string;
+    slug: string;
+    name: string;
+    description: string | null;
+    author: string | null;
+    repositoryUrl: string | null;
+    npmPackage: string | null;
+    homepage: string | null;
+    installCommand: string | null;
+    stars: number | null;
+    weeklyDownloads: number | null;
+    qualityScore: number | null;
+    isOfficial: boolean;
+    isVerified: boolean;
+    supportsDiscovery: boolean;
+    discoveryUrl: string | null;
+    /** Heuristic UI capability from the registry ("UI-capable (detected)"). */
+    supportsUi?: boolean;
+    uiType?: string | null;
+    /** How the server is run: npm | pypi | docker | remote | github-manual. */
+    accessMethod?: string | null;
+    /** Supply-chain safety screen, 0-100 (>=80 safe, 50-79 caution, <50 risk). */
+    safetyScore?: number | null;
+    safetyFlags?: string[] | null;
+    category: {
+        slug: string;
+        name: string;
+    } | null;
+    tools: {
+        name: string;
+        description: string | null;
+    }[];
+    resources: {
+        uri: string;
+        name: string;
+        description: string | null;
+    }[];
+    metadata: Record<string, unknown> | null;
+    /** Whether this server requires API keys or authentication (computed from metadata) */
+    requiresAuth?: boolean;
+    /** Detailed auth info (computed from metadata) */
+    authDetails?: {
+        envVars: Array<{
+            name: string;
+            description?: string;
+        }>;
+        allEnvVars: Array<{
+            name: string;
+            description?: string;
+        }>;
+        schemes: string[];
+    } | null;
+}
+/** Paginated list response from the API */
+export interface RegistryListResponse {
+    data: RegistryServer[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+/** Trust tiers derived from registry data */
+export type TrustTier = "verified" | "trusted" | "community" | "unknown";
+/** Resolved install command for spawning a server */
+export interface InstallCommand {
+    command: string;
+    args: string[];
+}

package/dist/registry/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/registry/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/registry/types.ts"],"names":[],"mappings":""}

package/dist/sandbox/container-runtime.d.ts

@@ -0,0 +1,91 @@
+import type { CapabilityManifest } from "./types.js";
+/** A container runtime available on the host. */
+export type ContainerEngine = "docker" | "podman";
+/** Result of wrapping a spawn command for container execution. */
+export interface WrappedSpawn {
+    command: string;
+    args: string[];
+    /**
+     * Env var NAMES that must be forwarded into the container. The values are
+     * supplied via the spawn process env (the scoped env), and `-e NAME` tells
+     * the engine to forward them. Kept separate so callers can audit.
+     */
+    forwardedEnvNames: string[];
+}
+/** Default base images by command family. Overridable via config. */
+export interface ContainerImages {
+    /** Image for node/npm/npx-based servers. */
+    node: string;
+    /** Image for python/pip/uvx-based servers. */
+    python: string;
+    /** Fallback image for anything else. */
+    default: string;
+}
+export declare const DEFAULT_IMAGES: ContainerImages;
+/**
+ * Detect an available container engine (docker preferred, then podman).
+ * Result is cached for the process lifetime. Returns null if none is usable.
+ */
+export declare function detectContainerEngine(): Promise<ContainerEngine | null>;
+/** Reset the cached engine (for tests). */
+export declare function _resetEngineCache(): void;
+/** Deterministic image name for a pre-baked server image. */
+export declare function bakedImageName(slug: string): string;
+export interface BakedImage {
+    image: string;
+    /**
+     * The executable name baked into the image (from the mcp.sandbox.bin label).
+     * Run directly at runtime — npx can't resolve a globally-installed scoped
+     * package offline, so we invoke the bin instead.
+     */
+    bin: string | null;
+}
+/**
+ * Check whether a pre-baked image exists locally for this slug. A baked image
+ * has the server package installed at build time, so it runs offline under
+ * `network: none` without an npx/uvx fetch.
+ *
+ * Returns { image, bin } if present, else null.
+ */
+export declare function resolveBakedImage(engine: ContainerEngine, slug: string): Promise<BakedImage | null>;
+/**
+ * Choose a base image for the given command.
+ *  - npx / npm / node / yarn / pnpm  → node image
+ *  - uvx / uv / python / python3 / pip → python image
+ *  - anything else                     → default image
+ */
+export declare function selectImage(command: string, images?: ContainerImages): string;
+/**
+ * Build the `docker run` / `podman run` invocation that executes the
+ * downstream server inside a constrained container.
+ *
+ * Pure function (no I/O) so the flag construction is unit-testable without a
+ * running engine. The caller supplies the scoped environment separately (via
+ * the spawn process env); here we only emit `-e NAME` forwarding flags.
+ *
+ * Enforcement applied:
+ *  - Capabilities dropped (--cap-drop ALL), no privilege escalation
+ *  - Read-only root filesystem + tmpfs scratch
+ *  - Non-root user
+ *  - Memory / CPU limits from manifest.limits
+ *  - Network mode from manifest.network
+ *  - Read/write mounts from manifest.filesystem
+ *  - Env forwarding limited to manifest.env.allow
+ */
+export interface ContainerBuildOptions {
+    images?: ContainerImages;
+    /**
+     * Egress proxy URL for `network: allowlist` mode. When set, the container is
+     * given HTTP(S)_PROXY env vars pointing here and a host.docker.internal
+     * mapping so proxy-aware clients route through the gateway's allowlist filter.
+     */
+    egressProxyUrl?: string;
+    /**
+     * Pre-baked image (from resolveBakedImage). When set, this image is used
+     * instead of a generic base, and the baked bin is run directly (offline) —
+     * enabling true `network: none`. npx cannot resolve a globally-installed
+     * scoped package offline, so we invoke the bin instead.
+     */
+    bakedImage?: BakedImage;
+}
+export declare function buildContainerCommand(engine: ContainerEngine, manifest: CapabilityManifest, command: string, args: string[], opts?: ContainerBuildOptions): WrappedSpawn;