@mcp-rating/gateway 0.2.0

package/dist/connection/ws-client.js

@@ -0,0 +1,26 @@
+import { WebSocketClientTransport } from "@modelcontextprotocol/sdk/client/websocket.js";
+import { connectClientAndFetchCapabilities, timeoutReject } from "./downstream-client.js";
+import { log } from "../utils/logger.js";
+/** Default timeout for WebSocket connection (30s) */
+const WS_CONNECTION_TIMEOUT_MS = 30_000;
+/**
+ * Connect to a downstream MCP server via WebSocket transport.
+ */
+export async function connectViaWebSocket(params) {
+    const { slug, url, onClose, onToolsChanged, connectionTimeoutMs = WS_CONNECTION_TIMEOUT_MS, } = params;
+    log.info("Connecting via WebSocket", { slug, url });
+    const result = await Promise.race([
+        doWsConnect(slug, url, onClose, onToolsChanged),
+        timeoutReject(connectionTimeoutMs, `Timed out connecting to "${slug}" via WebSocket after ${connectionTimeoutMs}ms`),
+    ]);
+    return result;
+}
+async function doWsConnect(slug, url, onClose, onToolsChanged) {
+    const transport = new WebSocketClientTransport(new URL(url));
+    if (onClose) {
+        transport.onclose = onClose;
+    }
+    const { client, serverInfo, tools, resources, prompts } = await connectClientAndFetchCapabilities(slug, transport, onToolsChanged);
+    return { client, transport, tools, resources, prompts, serverInfo };
+}
+//# sourceMappingURL=ws-client.js.map

package/dist/connection/ws-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-client.js","sourceRoot":"","sources":["../../src/connection/ws-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AAEzF,OAAO,EAAE,iCAAiC,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAEzC,qDAAqD;AACrD,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAUxC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAuB;IAEvB,MAAM,EACJ,IAAI,EACJ,GAAG,EACH,OAAO,EACP,cAAc,EACd,mBAAmB,GAAG,wBAAwB,GAC/C,GAAG,MAAM,CAAC;IAEX,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QAChC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC;QAC/C,aAAa,CACX,mBAAmB,EACnB,4BAA4B,IAAI,yBAAyB,mBAAmB,IAAI,CACjF;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,GAAW,EACX,OAAiC,EACjC,cAAwC;IAExC,MAAM,SAAS,GAAG,IAAI,wBAAwB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,IAAI,OAAO,EAAE,CAAC;QACZ,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,GACrD,MAAM,iCAAiC,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAE3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACtE,CAAC"}

package/dist/discovery/auto-recommender.d.ts

@@ -0,0 +1,51 @@
+import type { RegistryClient } from "../registry/registry-client.js";
+import type { ConnectionManager } from "../connection/connection-manager.js";
+import type { UsageTracker, ToolCallEvent } from "../analytics/usage-tracker.js";
+export interface ServerRecommendation {
+    slug: string;
+    name: string;
+    reason: string;
+    qualityScore: number;
+    relevanceScore: number;
+}
+/**
+ * Analyzes tool call patterns and recommends relevant servers.
+ */
+export declare class AutoRecommender {
+    private readonly registryClient;
+    private readonly connectionManager;
+    constructor(registryClient: RegistryClient, connectionManager: ConnectionManager);
+    /**
+     * Intent-based recommendation: search the registry for servers matching
+     * a free-text goal/query, ranked by quality + relevance.
+     *
+     * This is the agent-friendly path — the agent passes the user's actual
+     * intent and gets back relevant servers regardless of past usage.
+     * Server-side intent expansion (cloud storage → dropbox/gdrive/...)
+     * runs transparently.
+     */
+    recommendByQuery(query: string, options?: {
+        limit?: number;
+        category?: string;
+    }): Promise<ServerRecommendation[]>;
+    /**
+     * Analyze recent tool calls and suggest relevant servers from the registry.
+     */
+    recommend(recentCalls: ToolCallEvent[], usageTracker?: UsageTracker): Promise<ServerRecommendation[]>;
+    /**
+     * Extract keywords from tool call patterns.
+     */
+    private extractKeywords;
+    /**
+     * Compute a relevance score for a server against the extracted keywords.
+     */
+    private computeRelevance;
+    /**
+     * Build a human-readable reason for the recommendation.
+     */
+    private buildReason;
+    /**
+     * Build a human-readable reason for an intent-based (query) recommendation.
+     */
+    private buildIntentReason;
+}

package/dist/discovery/auto-recommender.js

@@ -0,0 +1,176 @@
+import { log } from "../utils/logger.js";
+// ── Auto-Recommender ─────────────────────────────────────────────────────────
+/**
+ * Analyzes tool call patterns and recommends relevant servers.
+ */
+export class AutoRecommender {
+    registryClient;
+    connectionManager;
+    constructor(registryClient, connectionManager) {
+        this.registryClient = registryClient;
+        this.connectionManager = connectionManager;
+    }
+    /**
+     * Intent-based recommendation: search the registry for servers matching
+     * a free-text goal/query, ranked by quality + relevance.
+     *
+     * This is the agent-friendly path — the agent passes the user's actual
+     * intent and gets back relevant servers regardless of past usage.
+     * Server-side intent expansion (cloud storage → dropbox/gdrive/...)
+     * runs transparently.
+     */
+    async recommendByQuery(query, options = {}) {
+        const limit = options.limit ?? 5;
+        const connectedSlugs = new Set(this.connectionManager.listConnections().map((c) => c.slug));
+        try {
+            // Over-fetch so we can filter out connected servers and still hit the cap
+            const result = await this.registryClient.search(query, {
+                limit: Math.max(limit * 3, 15),
+                category: options.category,
+            });
+            const recommendations = [];
+            const queryTerms = query.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
+            for (const server of result.data) {
+                if (connectedSlugs.has(server.slug))
+                    continue;
+                const relevance = this.computeRelevance(server, queryTerms);
+                recommendations.push({
+                    slug: server.slug,
+                    name: server.name || server.slug,
+                    reason: this.buildIntentReason(server, query, queryTerms),
+                    qualityScore: server.qualityScore ?? 0,
+                    relevanceScore: relevance,
+                });
+            }
+            // Sort by combined quality + relevance. For intent queries, registry
+            // ranking already incorporates semantic + FTS + intent expansion, so
+            // we lean slightly more on quality to break ties.
+            return recommendations
+                .sort((a, b) => b.qualityScore * 0.5 + b.relevanceScore * 0.5 -
+                (a.qualityScore * 0.5 + a.relevanceScore * 0.5))
+                .slice(0, limit);
+        }
+        catch (err) {
+            log.warn("Registry search failed for intent query", {
+                query,
+                error: String(err),
+            });
+            return [];
+        }
+    }
+    /**
+     * Analyze recent tool calls and suggest relevant servers from the registry.
+     */
+    async recommend(recentCalls, usageTracker) {
+        // Extract keywords from recent tool usage patterns
+        const keywords = this.extractKeywords(recentCalls);
+        if (keywords.length === 0) {
+            log.debug("No keywords extracted from recent calls, using general recommendations");
+            keywords.push("popular", "tools");
+        }
+        log.debug("Recommending servers based on usage patterns", { keywords });
+        // Search registry for each keyword set
+        const allResults = new Map();
+        const connectedSlugs = new Set(this.connectionManager.listConnections().map((c) => c.slug));
+        for (const keyword of keywords.slice(0, 5)) {
+            try {
+                const results = await this.registryClient.search(keyword, { limit: 10 });
+                for (const server of results.data) {
+                    // Skip already-connected servers
+                    if (connectedSlugs.has(server.slug))
+                        continue;
+                    // Skip if already found with a better score
+                    const existing = allResults.get(server.slug);
+                    const relevance = this.computeRelevance(server, keywords);
+                    if (existing && existing.relevanceScore >= relevance)
+                        continue;
+                    allResults.set(server.slug, {
+                        slug: server.slug,
+                        name: server.name || server.slug,
+                        reason: this.buildReason(server, keywords),
+                        qualityScore: server.qualityScore ?? 0,
+                        relevanceScore: relevance,
+                    });
+                }
+            }
+            catch (err) {
+                log.debug("Registry search failed for keyword", {
+                    keyword,
+                    error: String(err),
+                });
+            }
+        }
+        // Sort by combined relevance + quality score
+        const recommendations = [...allResults.values()]
+            .sort((a, b) => b.relevanceScore * 0.6 + b.qualityScore * 0.4 -
+            (a.relevanceScore * 0.6 + a.qualityScore * 0.4))
+            .slice(0, 5);
+        return recommendations;
+    }
+    /**
+     * Extract keywords from tool call patterns.
+     */
+    extractKeywords(calls) {
+        const words = new Map();
+        for (const call of calls) {
+            // Extract words from tool names
+            const parts = call.toolName
+                .replace(/[_-]/g, " ")
+                .split(/\s+/)
+                .filter((w) => w.length > 2);
+            for (const part of parts) {
+                const lower = part.toLowerCase();
+                words.set(lower, (words.get(lower) || 0) + 1);
+            }
+            // Extract category hints from slug
+            const slugParts = call.slug
+                .replace(/[_\-@/.]/g, " ")
+                .split(/\s+/)
+                .filter((w) => w.length > 2);
+            for (const part of slugParts) {
+                const lower = part.toLowerCase();
+                words.set(lower, (words.get(lower) || 0) + 0.5);
+            }
+        }
+        // Sort by frequency, take top keywords
+        return [...words.entries()]
+            .sort((a, b) => b[1] - a[1])
+            .slice(0, 8)
+            .map(([word]) => word);
+    }
+    /**
+     * Compute a relevance score for a server against the extracted keywords.
+     */
+    computeRelevance(server, keywords) {
+        let score = 0;
+        const text = `${server.name} ${server.description || ""} ${server.slug}`.toLowerCase();
+        for (const keyword of keywords) {
+            if (text.includes(keyword)) {
+                score += 1;
+            }
+        }
+        return score / Math.max(keywords.length, 1);
+    }
+    /**
+     * Build a human-readable reason for the recommendation.
+     */
+    buildReason(server, keywords) {
+        const matching = keywords.filter((k) => `${server.name} ${server.description || ""}`.toLowerCase().includes(k));
+        if (matching.length > 0) {
+            return `Related to your recent usage (${matching.slice(0, 3).join(", ")})`;
+        }
+        return "Popular server that may complement your workflow";
+    }
+    /**
+     * Build a human-readable reason for an intent-based (query) recommendation.
+     */
+    buildIntentReason(server, query, queryTerms) {
+        const text = `${server.name} ${server.description || ""}`.toLowerCase();
+        const directHits = queryTerms.filter((t) => text.includes(t));
+        if (directHits.length > 0) {
+            return `Matches "${query}" (terms: ${directHits.slice(0, 3).join(", ")})`;
+        }
+        return `Surfaced via intent expansion for "${query}"`;
+    }
+}
+//# sourceMappingURL=auto-recommender.js.map

package/dist/discovery/auto-recommender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-recommender.js","sourceRoot":"","sources":["../../src/discovery/auto-recommender.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAYzC,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,cAA8B,EAC9B,iBAAoC;QADpC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,sBAAiB,GAAjB,iBAAiB,CAAmB;IACpD,CAAC;IAEJ;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,UAAiD,EAAE;QAEnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACjC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC5D,CAAC;QAEF,IAAI,CAAC;YACH,0EAA0E;YAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE;gBACrD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,MAAM,eAAe,GAA2B,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAE9C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAC5D,eAAe,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;oBAChC,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC;oBACzD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC;oBACtC,cAAc,EAAE,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,qEAAqE;YACrE,kDAAkD;YAClD,OAAO,eAAe;iBACnB,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,YAAY,GAAG,GAAG,GAAG,CAAC,CAAC,cAAc,GAAG,GAAG;gBAC7C,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,GAAG,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC,CAClD;iBACA,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAClD,KAAK;gBACL,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,WAA4B,EAC5B,YAA2B;QAE3B,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QAEnD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;YACpF,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,GAAG,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAExE,uCAAuC;QACvC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC5D,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBACzE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBAClC,iCAAiC;oBACjC,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAE9C,4CAA4C;oBAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC1D,IAAI,QAAQ,IAAI,QAAQ,CAAC,cAAc,IAAI,SAAS;wBAAE,SAAS;oBAE/D,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;wBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI;wBAChC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;wBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC;wBACtC,cAAc,EAAE,SAAS;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,oCAAoC,EAAE;oBAC9C,OAAO;oBACP,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,MAAM,eAAe,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;aAC7C,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,GAAG,GAAG;YAC7C,CAAC,CAAC,CAAC,cAAc,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC,CAClD;aACA,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEf,OAAO,eAAe,CAAC;IACzB,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,KAAsB;QAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,gCAAgC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;iBACrB,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,CAAC;YAED,mCAAmC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI;iBACxB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;iBACzB,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAE/B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;aACxB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,MAAkE,EAClE,QAAkB;QAElB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEvF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QAED,OAAO,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,WAAW,CACjB,MAAoD,EACpD,QAAkB;QAElB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CACvE,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,iCAAiC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7E,CAAC;QACD,OAAO,kDAAkD,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,MAAoD,EACpD,KAAa,EACb,UAAoB;QAEpB,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,YAAY,KAAK,aAAa,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5E,CAAC;QACD,OAAO,sCAAsC,KAAK,GAAG,CAAC;IACxD,CAAC;CACF"}

package/dist/gateway-server.d.ts

@@ -0,0 +1,42 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { GatewayConfig } from "./config/types.js";
+import { RegistryClient } from "./registry/registry-client.js";
+import { ConnectionManager } from "./connection/connection-manager.js";
+import { PermissionManager } from "./permissions/permission-manager.js";
+import { AdTracker } from "./ads/ad-tracker.js";
+import { UsageTracker } from "./analytics/usage-tracker.js";
+import { PluginManager } from "./plugins/plugin-manager.js";
+import { AutoRecommender } from "./discovery/auto-recommender.js";
+import { ManifestResolver } from "./sandbox/manifest-resolver.js";
+import { AuditLog } from "./audit/audit-log.js";
+export interface GatewayContext {
+    mcpServer: McpServer;
+    connectionManager: ConnectionManager;
+    registryClient: RegistryClient;
+    permissionManager: PermissionManager;
+    adTracker: AdTracker | null;
+    usageTracker: UsageTracker | null;
+    pluginManager: PluginManager;
+    autoRecommender: AutoRecommender | null;
+    auditLog: AuditLog;
+}
+/**
+ * Process-wide singletons that can be shared across multiple gateway contexts
+ * (e.g. one per HTTP session). Sharing these gives the daemon a warm registry
+ * cache and a single source of truth for sandbox manifests, while each session
+ * still gets its own McpServer + ConnectionManager (connection isolation).
+ */
+export interface SharedSingletons {
+    registryClient?: RegistryClient;
+    manifestResolver?: ManifestResolver;
+}
+/**
+ * Create and wire up the MCP Gateway server.
+ *
+ * Returns a context object containing the McpServer and all component
+ * managers. The caller is responsible for connecting a transport and
+ * handling shutdown via `connectionManager.disconnectAll()`.
+ *
+ * @param shared Optional process-wide singletons to reuse across contexts.
+ */
+export declare function createGatewayServer(config: GatewayConfig, shared?: SharedSingletons): GatewayContext;

package/dist/gateway-server.js

@@ -0,0 +1,135 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { InMemoryTaskStore, InMemoryTaskMessageQueue, } from "@modelcontextprotocol/sdk/experimental/tasks/stores/in-memory.js";
+import { RegistryClient } from "./registry/registry-client.js";
+import { ConnectionManager } from "./connection/connection-manager.js";
+import { PermissionManager } from "./permissions/permission-manager.js";
+import { registerMetaTools } from "./meta-tools/index.js";
+import { AdTracker } from "./ads/ad-tracker.js";
+import { UsageTracker } from "./analytics/usage-tracker.js";
+import { PluginManager } from "./plugins/plugin-manager.js";
+import { loggingPlugin } from "./plugins/builtin/logging-plugin.js";
+import { AutoRecommender } from "./discovery/auto-recommender.js";
+import { ManifestResolver } from "./sandbox/manifest-resolver.js";
+import { AuditLog } from "./audit/audit-log.js";
+import { primeProxyHandlers } from "./proxy/prime-handlers.js";
+import { dirname, join } from "node:path";
+const GATEWAY_VERSION = "0.2.0";
+/**
+ * Create and wire up the MCP Gateway server.
+ *
+ * Returns a context object containing the McpServer and all component
+ * managers. The caller is responsible for connecting a transport and
+ * handling shutdown via `connectionManager.disconnectAll()`.
+ *
+ * @param shared Optional process-wide singletons to reuse across contexts.
+ */
+export function createGatewayServer(config, shared = {}) {
+    const mcpServer = new McpServer({
+        name: "mcp-gateway",
+        version: GATEWAY_VERSION,
+    }, {
+        capabilities: {
+            tools: { listChanged: true },
+            resources: { listChanged: true },
+            prompts: { listChanged: true },
+            // Experimental Tasks capability — must be advertised at initialize
+            // so upstream clients send task-augmented `tools/call` requests.
+            // `list`/`cancel` enable tasks/list and tasks/cancel; `requests.tools.call`
+            // enables task creation for tool calls.
+            tasks: {
+                list: {},
+                cancel: {},
+                requests: { tools: { call: {} } },
+            },
+        },
+        // The in-memory store mirrors downstream task state; the message
+        // queue buffers side-channel messages during task execution.
+        taskStore: new InMemoryTaskStore(),
+        taskMessageQueue: new InMemoryTaskMessageQueue(),
+        instructions: [
+            "MCP Gateway — a meta-server that discovers, connects, and proxies other MCP servers.",
+            "",
+            "Use mcp_discover to search the MCP-Rating registry for servers.",
+            "Use mcp_connect to connect to a server (spawns it and proxies its tools, resources, and prompts).",
+            "  - Connect via stdio: mcp_connect({command: 'npx', args: ['-y', 'package']})",
+            "  - Connect via URL:   mcp_connect({url: 'http://localhost:3000/mcp'})",
+            "  - Connect via slug:  mcp_connect({slug: 'server-name'})",
+            "Once connected, call the server's tools directly via namespaced names like 'servername__toolname'.",
+            "Use mcp_list_active to see all connected servers.",
+            "Use mcp_disconnect to remove a server.",
+            "",
+            "Advanced features:",
+            "  - mcp_profiles: Manage named connection presets (work, personal, etc.)",
+            "  - mcp_groups: Atomic connect/disconnect of server groups",
+            "  - mcp_usage: View call analytics, latency, and error rates",
+            "  - mcp_recommend: Get AI-powered server suggestions based on usage patterns",
+            "",
+            "Trust tiers: [Verified] = high quality + official, [Trusted] = good quality,",
+            "[Community] = listed in registry, [Unverified] = unknown origin.",
+        ].join("\n"),
+    });
+    // Reuse a shared RegistryClient (warm cache) when provided, else create one.
+    const registryClient = shared.registryClient ??
+        new RegistryClient(config.registryApiUrl, config.registryCacheTtlMs, config.partnerKey);
+    const permissionManager = new PermissionManager(config);
+    // Create AdTracker if partner key is configured and tracking is not disabled
+    const adTracker = config.partnerKey && config.enableAdTracking !== false
+        ? new AdTracker(config.registryApiUrl, config.partnerKey)
+        : null;
+    // Create UsageTracker if analytics is enabled
+    const usageTracker = config.enableUsageTracking !== false
+        ? new UsageTracker(config.usageBufferSize)
+        : null;
+    // Create PluginManager and register built-in plugins
+    const pluginManager = new PluginManager();
+    pluginManager.register(loggingPlugin);
+    // Create ConnectionManager first (AutoRecommender depends on it)
+    const connectionManager = new ConnectionManager(mcpServer, registryClient, permissionManager, config, adTracker);
+    // Wire up optional components to connection manager
+    connectionManager.usageTracker = usageTracker ?? undefined;
+    connectionManager.pluginManager = pluginManager;
+    // Safety audit trail — forensics log of sandboxed-server actions. Optional
+    // durable JSONL alongside the permissions file for SIEM ingestion.
+    const auditLog = new AuditLog({
+        filePath: config.auditLogPath,
+    });
+    connectionManager.auditLog = auditLog;
+    // Sandbox (L1): per-server capability manifests + env scoping.
+    // Manifests are persisted alongside the permissions file. Reuse a shared
+    // resolver across sessions when provided (single source of truth on disk).
+    const manifestsPath = join(dirname(config.permissionsPath), "mcp-gateway-manifests.json");
+    connectionManager.manifestResolver =
+        shared.manifestResolver ??
+            new ManifestResolver(manifestsPath, config.enableContainerIsolation === true);
+    // Create AutoRecommender if enabled (requires connectionManager)
+    const autoRecommender = config.enableAutoRecommend !== false
+        ? new AutoRecommender(registryClient, connectionManager)
+        : null;
+    // Derive groups path from profiles path
+    const groupsPath = config.groupsPath ||
+        join(dirname(config.profilesPath), "mcp-gateway-groups.json");
+    registerMetaTools(mcpServer, connectionManager, registryClient, {
+        adTracker,
+        usageTracker,
+        autoRecommender,
+        auditLog,
+        profilesPath: config.profilesPath,
+        groupsPath,
+    });
+    // Prime resource/prompt handlers before the transport connects, so that
+    // dynamically-proxied downstream resources/prompts can be registered later
+    // without hitting the SDK's post-connect capability lock.
+    primeProxyHandlers(mcpServer);
+    return {
+        mcpServer,
+        connectionManager,
+        registryClient,
+        permissionManager,
+        adTracker,
+        usageTracker,
+        pluginManager,
+        autoRecommender,
+        auditLog,
+    };
+}
+//# sourceMappingURL=gateway-server.js.map

package/dist/gateway-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-server.js","sourceRoot":"","sources":["../src/gateway-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,kEAAkE,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,eAAe,GAAG,OAAO,CAAC;AAyBhC;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAqB,EACrB,SAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,SAAS,CAC7B;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,eAAe;KACzB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;YAC5B,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;YAChC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;YAC9B,mEAAmE;YACnE,iEAAiE;YACjE,4EAA4E;YAC5E,wCAAwC;YACxC,KAAK,EAAE;gBACL,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;aAClC;SACF;QACD,iEAAiE;QACjE,6DAA6D;QAC7D,SAAS,EAAE,IAAI,iBAAiB,EAAE;QAClC,gBAAgB,EAAE,IAAI,wBAAwB,EAAE;QAChD,YAAY,EAAE;YACZ,sFAAsF;YACtF,EAAE;YACF,iEAAiE;YACjE,mGAAmG;YACnG,+EAA+E;YAC/E,wEAAwE;YACxE,2DAA2D;YAC3D,oGAAoG;YACpG,mDAAmD;YACnD,wCAAwC;YACxC,EAAE;YACF,oBAAoB;YACpB,0EAA0E;YAC1E,4DAA4D;YAC5D,8DAA8D;YAC9D,8EAA8E;YAC9E,EAAE;YACF,8EAA8E;YAC9E,kEAAkE;SACnE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CACF,CAAC;IAEF,6EAA6E;IAC7E,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc;QACrB,IAAI,cAAc,CAChB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,UAAU,CAClB,CAAC;IACJ,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAExD,6EAA6E;IAC7E,MAAM,SAAS,GACb,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK;QACpD,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC;IAEX,8CAA8C;IAC9C,MAAM,YAAY,GAChB,MAAM,CAAC,mBAAmB,KAAK,KAAK;QAClC,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC;IAEX,qDAAqD;IACrD,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAEtC,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAC7C,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,MAAM,EACN,SAAS,CACV,CAAC;IAEF,oDAAoD;IACpD,iBAAiB,CAAC,YAAY,GAAG,YAAY,IAAI,SAAS,CAAC;IAC3D,iBAAiB,CAAC,aAAa,GAAG,aAAa,CAAC;IAEhD,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,YAAY;KAC9B,CAAC,CAAC;IACH,iBAAiB,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAEtC,+DAA+D;IAC/D,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,aAAa,GAAG,IAAI,CACxB,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAC/B,4BAA4B,CAC7B,CAAC;IACF,iBAAiB,CAAC,gBAAgB;QAChC,MAAM,CAAC,gBAAgB;YACvB,IAAI,gBAAgB,CAClB,aAAa,EACb,MAAM,CAAC,wBAAwB,KAAK,IAAI,CACzC,CAAC;IAEJ,iEAAiE;IACjE,MAAM,eAAe,GACnB,MAAM,CAAC,mBAAmB,KAAK,KAAK;QAClC,CAAC,CAAC,IAAI,eAAe,CAAC,cAAc,EAAE,iBAAiB,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC;IAEX,wCAAwC;IACxC,MAAM,UAAU,GACd,MAAM,CAAC,UAAU;QACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAEhE,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAE;QAC9D,SAAS;QACT,YAAY;QACZ,eAAe;QACf,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,UAAU;KACX,CAAC,CAAC;IAEH,wEAAwE;IACxE,2EAA2E;IAC3E,0DAA0D;IAC1D,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE9B,OAAO;QACL,SAAS;QACT,iBAAiB;QACjB,cAAc;QACd,iBAAiB;QACjB,SAAS;QACT,YAAY;QACZ,aAAa;QACb,eAAe;QACf,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/http-daemon.d.ts

@@ -0,0 +1,26 @@
+import type { GatewayConfig } from "./config/types.js";
+/**
+ * Run the gateway as a long-running HTTP daemon.
+ *
+ * Multiple MCP clients connect over Streamable HTTP. Each gets its own
+ * isolated session (McpServer + ConnectionManager + downstream connections),
+ * but all sessions share a warm RegistryClient cache and a single Manifest
+ * resolver (one source of truth for sandbox manifests on disk).
+ *
+ * Security: every /mcp request must carry `Authorization: Bearer <token>`.
+ * The token is required in daemon mode regardless of bind address.
+ *
+ * Multi-tenant: supply `tokens` (tenantId → token) to run a shared daemon
+ * where each tenant authenticates with its own token. Sessions are bound to
+ * the authenticating tenant (cross-tenant session reuse is rejected), and each
+ * tenant gets an isolated sandbox-manifest store. The single `token` maps to
+ * tenant "default" for backward compatibility.
+ */
+export declare function runHttpDaemon(config: GatewayConfig, opts: {
+    port: number;
+    host: string;
+    token?: string;
+    tokens?: Record<string, string>;
+    allowedHosts?: string[];
+    allowedOrigins?: string[];
+}): Promise<void>;