@mcpolyglot/cli 0.2.0 → 0.3.0

package/dist/__tests__/agents.test.js

@@ -0,0 +1,172 @@
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterAll, afterEach, beforeAll, describe, expect, it } from 'vitest';
+import { ConfigSchema } from '@mcpolyglot/config';
+import { hashToken, StreamableHttpTransport } from '@mcpolyglot/core/transports/streamable-http';
+import { buildServerFromConfig } from '../factory.js';
+// Real HTTP transport + real SQLite through the CLI factory: two agents, one source.
+// better-sqlite3 is connector-sql's dependency; borrow it from there to seed the file.
+const Database = createRequire(new URL('../../../connector-sql/package.json', import.meta.url))('better-sqlite3');
+const silent = { debug() { }, info() { }, warn() { }, error() { } };
+let dir;
+let dbPath;
+beforeAll(() => {
+    dir = mkdtempSync(join(tmpdir(), 'mcpolyglot-agents-'));
+    dbPath = join(dir, 'app.db');
+    const db = new Database(dbPath);
+    db.exec(`
+    CREATE TABLE users (id INTEGER PRIMARY KEY, email TEXT);
+    CREATE TABLE orders (id INTEGER PRIMARY KEY, total INTEGER);
+    INSERT INTO users (email) VALUES ('a@x.io');
+    INSERT INTO orders (total) VALUES (42);
+  `);
+    db.close();
+});
+afterAll(() => rmSync(dir, { recursive: true, force: true }));
+let server;
+afterEach(async () => {
+    await server?.stop();
+    server = undefined;
+});
+async function boot(extra) {
+    const auditPath = join(dir, `audit-${Math.random().toString(36).slice(2)}.jsonl`);
+    const cfg = ConfigSchema.parse({
+        sources: [
+            {
+                id: 'app',
+                kind: 'sqlite',
+                url: dbPath,
+                scopes: ['schema:read', 'tables:read', 'query:raw'],
+            },
+        ],
+        audit: { console: false, path: auditPath },
+        ...extra,
+    });
+    const built = await buildServerFromConfig(cfg, silent);
+    server = built.server;
+    const transport = new StreamableHttpTransport({
+        host: '127.0.0.1',
+        port: 0,
+        auth: cfg.agents ? { kind: 'agents', agents: cfg.agents } : { kind: 'bearer', token: 'shared' },
+        logger: silent,
+    });
+    await server.start(transport);
+    const port = transport.httpServer.address().port;
+    const rpc = async (token, method, params = {}, headers = {}) => {
+        const res = await fetch(`http://127.0.0.1:${port}/mcp`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${token}`,
+                'content-type': 'application/json',
+                accept: 'application/json, text/event-stream',
+                ...headers,
+            },
+            body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }),
+        });
+        const body = await res.text();
+        if (res.status !== 200)
+            return { status: res.status, body };
+        const data = body.split('\n').find((l) => l.startsWith('data: '));
+        return { status: res.status, body: JSON.parse(data ? data.slice(6) : body) };
+    };
+    const audit = () => readFileSync(auditPath, 'utf8')
+        .trim()
+        .split('\n')
+        .map((l) => JSON.parse(l));
+    return { rpc, audit };
+}
+const toolNames = (r) => r.body.result.tools.map((t) => t.name).sort();
+const text = (r) => r.body.result.content.map((c) => c.text).join('');
+describe('multi-agent HTTP', () => {
+    const agents = [
+        {
+            id: 'analyst',
+            tokens: [{ hash: hashToken('tok-analyst') }],
+            sources: { app: { policy: { tables: { users: 'none' } } } },
+        },
+        {
+            id: 'browser',
+            tokens: [{ hash: hashToken('tok-old'), revoked: true }, { hash: hashToken('tok-browser') }],
+            scopes: ['schema:read'],
+            sources: { app: {} },
+        },
+    ];
+    it('filters tools per agent scopes and applies each agent its own policy', async () => {
+        const { rpc } = await boot({ agents });
+        expect(toolNames(await rpc('tok-analyst', 'tools/list'))).toEqual([
+            'app.describe_table',
+            'app.list_tables',
+            'app.query',
+        ]);
+        // `browser` lacks query:raw/tables:read, so `app.query` doesn't exist for it.
+        expect(toolNames(await rpc('tok-browser', 'tools/list'))).toEqual([
+            'app.describe_table',
+            'app.list_tables',
+        ]);
+        const call = { name: 'app.query', arguments: { sql: 'SELECT email FROM users' } };
+        expect((await rpc('tok-browser', 'tools/call', call)).body.error.message).toMatch(/Unknown tool/);
+        // Same table, same DB: analyst's policy hides `users`, the source default doesn't.
+        const denied = await rpc('tok-analyst', 'tools/call', call);
+        expect(denied.body.result.isError).toBe(true);
+        expect(text(denied)).toMatch(/forbidden\.policy/);
+        const listA = text(await rpc('tok-analyst', 'tools/call', { name: 'app.list_tables', arguments: {} }));
+        const listB = text(await rpc('tok-browser', 'tools/call', { name: 'app.list_tables', arguments: {} }));
+        expect(listA).not.toMatch(/"users"/);
+        expect(listB).toMatch(/"users"/);
+        const orders = await rpc('tok-analyst', 'tools/call', {
+            name: 'app.query',
+            arguments: { sql: 'SELECT total FROM orders' },
+        });
+        expect(text(orders)).toMatch(/42/);
+    });
+    it("an agent's policy can narrow the source policy but never widen it", async () => {
+        const { rpc } = await boot({
+            sources: [
+                {
+                    id: 'app',
+                    kind: 'sqlite',
+                    url: dbPath,
+                    scopes: ['schema:read', 'tables:read', 'query:raw'],
+                    policy: { tables: { users: 'none' } },
+                },
+            ],
+            agents: [
+                {
+                    id: 'sneaky',
+                    tokens: [{ hash: hashToken('tok-sneaky') }],
+                    sources: { app: { policy: { tables: { users: 'write' }, defaultAccess: 'read' } } },
+                },
+            ],
+        });
+        const r = await rpc('tok-sneaky', 'tools/call', {
+            name: 'app.query',
+            arguments: { sql: 'SELECT email FROM users' },
+        });
+        expect(text(r)).toMatch(/forbidden\.policy/);
+        // Widening to `write` must not register the write tool either.
+        expect(toolNames(await rpc('tok-sneaky', 'tools/list'))).not.toContain('app.execute');
+    });
+    it('rejects revoked and unknown tokens with 401', async () => {
+        const { rpc } = await boot({ agents });
+        expect((await rpc('tok-old', 'tools/list')).status).toBe(401);
+        expect((await rpc('shared', 'tools/list')).status).toBe(401);
+    });
+    it('audit agentId comes from the token, not the header', async () => {
+        const { rpc, audit } = await boot({ agents });
+        await rpc('tok-browser', 'tools/call', { name: 'app.list_tables', arguments: {} }, { 'x-mcpolyglot-agent': 'analyst' });
+        const [entry] = audit();
+        expect(entry.agentId).toBe('browser');
+        expect(entry.scopes).toEqual(['schema:read']);
+        expect(JSON.stringify(audit())).not.toMatch(/tok-/);
+    });
+    it('without `agents`: shared token, all tools, header-labelled audit (unchanged)', async () => {
+        const { rpc, audit } = await boot({});
+        expect(toolNames(await rpc('shared', 'tools/list'))).toHaveLength(3);
+        const r = await rpc('shared', 'tools/call', { name: 'app.query', arguments: { sql: 'SELECT email FROM users' } }, { 'x-mcpolyglot-agent': 'whoever' });
+        expect(text(r)).toMatch(/"rowCount": 1/);
+        expect(audit()[0].agentId).toBe('whoever');
+    });
+});
+//# sourceMappingURL=agents.test.js.map

package/dist/__tests__/agents.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.test.js","sourceRoot":"","sources":["../../src/__tests__/agents.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,qFAAqF;AACrF,uFAAuF;AACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC7F,gBAAgB,CACmD,CAAC;AAEtE,MAAM,MAAM,GAAG,EAAE,KAAK,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC;AAChE,IAAI,GAAW,CAAC;AAChB,IAAI,MAAc,CAAC;AAEnB,SAAS,CAAC,GAAG,EAAE;IACb,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IACH,EAAE,CAAC,KAAK,EAAE,CAAC;AACb,CAAC,CAAC,CAAC;AACH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAE9D,IAAI,MAAoC,CAAC;AACzC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,MAAM,EAAE,IAAI,EAAE,CAAC;IACrB,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI,CAAC,KAA8B;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,GAAG,GAAqB,YAAY,CAAC,KAAK,CAAC;QAC/C,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,QAAQ;gBACd,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC;aACpD;SACF;QACD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;QAC1C,GAAG,KAAK;KACT,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC;QAC5C,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC/F,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GACR,SACD,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC;IAE5B,MAAM,GAAG,GAAG,KAAK,EACf,KAAa,EACb,MAAc,EACd,SAAkC,EAAE,EACpC,UAAkC,EAAE,EACpC,EAAE;QACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,MAAM,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,qCAAqC;gBAC7C,GAAG,OAAO;aACX;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CACjB,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC;SAC5B,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAsD,EAAE,EAAE,CAC3E,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,MAAM,IAAI,GAAG,CAAC,CAAwD,EAAE,EAAE,CACxE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEpD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,MAAM,GAAG;QACb;YACE,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;SAC5D;QACD;YACE,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3F,MAAM,EAAE,CAAC,aAAa,CAAC;YACvB,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACrB;KACF,CAAC;IAEF,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,oBAAoB;YACpB,iBAAiB;YACjB,WAAW;SACZ,CAAC,CAAC;QACH,8EAA8E;QAC9E,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,oBAAoB;YACpB,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE,EAAE,CAAC;QAClF,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAC/E,cAAc,CACf,CAAC;QAEF,mFAAmF;QACnF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAChB,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CACnF,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAChB,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CACnF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE;YACpD,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE;SAC/C,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC;YACzB,OAAO,EAAE;gBACP;oBACE,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC;oBACnD,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;iBACtC;aACF;YACD,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,QAAQ;oBACZ,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC3C,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;iBACpF;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE;YAC9C,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC7C,+DAA+D;QAC/D,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,CACP,aAAa,EACb,YAAY,EACZ,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,EAC1C,EAAE,oBAAoB,EAAE,SAAS,EAAE,CACpC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,KAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,MAAM,GAAG,CACjB,QAAQ,EACR,YAAY,EACZ,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE,EAAE,EACpE,EAAE,oBAAoB,EAAE,SAAS,EAAE,CACpC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/examples.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=examples.test.d.ts.map

package/dist/__tests__/examples.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"examples.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/examples.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/examples.test.js

@@ -0,0 +1,140 @@
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterAll, afterEach, describe, expect, it } from 'vitest';
+import { ConfigSchema } from '@mcpolyglot/config';
+import { StreamableHttpTransport } from '@mcpolyglot/core/transports/streamable-http';
+import { buildServerFromConfig } from '../factory.js';
+// Keeps examples/*/README.md honest: every row of each README's table is exercised here
+// against that example's own config and seed.sql, over the real HTTP transport.
+const Database = createRequire(new URL('../../../connector-sql/package.json', import.meta.url))('better-sqlite3');
+const EXAMPLES = new URL('../../../../examples/', import.meta.url);
+const silent = { debug() { }, info() { }, warn() { }, error() { } };
+const dir = mkdtempSync(join(tmpdir(), 'mcpolyglot-examples-'));
+afterAll(() => rmSync(dir, { recursive: true, force: true }));
+let server;
+afterEach(async () => {
+    await server?.stop();
+    server = undefined;
+});
+async function boot(example) {
+    const dbPath = join(dir, `${example}.db`);
+    const seed = new Database(dbPath);
+    seed.exec(readFileSync(new URL(`${example}/seed.sql`, EXAMPLES), 'utf8'));
+    seed.close();
+    const raw = JSON.parse(readFileSync(new URL(`${example}/mcpolyglot.config.json`, EXAMPLES), 'utf8'));
+    raw.sources[0].url = dbPath;
+    raw.audit = { console: false, path: join(dir, `${example}.audit.jsonl`) };
+    const cfg = ConfigSchema.parse(raw);
+    const built = await buildServerFromConfig(cfg, silent);
+    server = built.server;
+    const transport = new StreamableHttpTransport({
+        host: '127.0.0.1',
+        port: 0,
+        auth: cfg.agents ? { kind: 'agents', agents: cfg.agents } : { kind: 'bearer', token: 'shared' },
+        logger: silent,
+    });
+    await server.start(transport);
+    const port = transport.httpServer.address().port;
+    const rpc = async (token, method, params = {}) => {
+        const res = await fetch(`http://127.0.0.1:${port}/mcp`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${token}`,
+                'content-type': 'application/json',
+                accept: 'application/json, text/event-stream',
+            },
+            body: JSON.stringify({ jsonrpc: '2.0', id: 1, method, params }),
+        });
+        const body = await res.text();
+        if (res.status !== 200)
+            return { status: res.status, text: body, tools: [] };
+        const line = body.split('\n').find((l) => l.startsWith('data: '));
+        const msg = JSON.parse(line ? line.slice(6) : body);
+        return {
+            status: res.status,
+            text: msg.error
+                ? `rpc-error: ${msg.error.message}`
+                : (msg.result.content ?? []).map((c) => c.text).join(''),
+            isError: Boolean(msg.error || msg.result?.isError),
+            tools: (msg.result?.tools ?? []).map((t) => t.name),
+        };
+    };
+    const call = (token, name, args) => rpc(token, 'tools/call', { name, arguments: args });
+    const count = (sql) => {
+        const db = new Database(dbPath);
+        try {
+            return db.prepare(sql).get().n;
+        }
+        finally {
+            db.close();
+        }
+    };
+    return { rpc, call, count };
+}
+describe('examples/readonly-analytics', () => {
+    it('matches the README table', async () => {
+        const { call, rpc } = await boot('readonly-analytics');
+        const q = (sql) => call('shared', 'analytics.query', { sql });
+        const plans = await q('SELECT plan, count(*) AS n FROM users GROUP BY plan');
+        expect(plans.isError).toBe(false);
+        expect(plans.text).toContain('"pro"');
+        const joined = await q("SELECT u.plan, count(*) AS exports FROM events e JOIN users u ON u.id = e.user_id WHERE e.name = 'export' GROUP BY u.plan");
+        expect(joined.isError).toBe(false);
+        expect((await q('SELECT password_hash FROM users')).text).toMatch(/forbidden\.policy.*denied column/);
+        expect((await q('SELECT * FROM users')).text).toMatch(/forbidden\.policy.*SELECT \*/);
+        expect((await q('SELECT body FROM internal_notes')).text).toMatch(/forbidden\.policy.*not accessible/);
+        expect((await q('DELETE FROM events WHERE id = 1')).text).toMatch(/forbidden\.policy.*read-only/);
+        const list = (await call('shared', 'analytics.list_tables', {})).text;
+        expect(list).not.toContain('internal_notes');
+        expect(list).not.toContain('password_hash');
+        expect((await rpc('shared', 'tools/list')).tools).not.toContain('analytics.execute');
+    });
+});
+describe('examples/spend-policy', () => {
+    it('matches the README table', async () => {
+        const { call, count } = await boot('spend-policy');
+        const exec = (sql, extra = {}) => call('shared', 'bank.execute', { sql, ...extra });
+        const txCount = () => count('SELECT count(*) AS n FROM transactions');
+        const coffee = "INSERT INTO transactions (account_id, amount_cents, memo) VALUES (1, -2500, 'Coffee')";
+        expect((await exec(coffee)).text).toContain('"rowsAffected": 1');
+        expect(txCount()).toBe(3);
+        const tea = "INSERT INTO transactions (account_id, amount_cents, memo) VALUES (2, -300, 'Tea')";
+        await exec(tea, { idempotencyKey: 'coffee-1' });
+        await exec(tea, { idempotencyKey: 'coffee-1' });
+        expect(txCount()).toBe(4);
+        const tv = await exec("INSERT INTO transactions (account_id, amount_cents, memo) VALUES (1, -90000, 'TV')");
+        expect(tv.isError).toBe(true);
+        expect(tv.text).toMatch(/CHECK/i);
+        expect(txCount()).toBe(4);
+        expect((await exec('UPDATE accounts SET balance_cents = 999999 WHERE id = 1')).text).toMatch(/forbidden\.policy.*read-only/);
+        const del = await exec('DELETE FROM transactions WHERE account_id = 1');
+        expect(del.text).toMatch(/forbidden\.policy/);
+        expect(txCount()).toBe(4);
+        expect((await call('shared', 'bank.query', { sql: 'SELECT ssn FROM customers' })).text).toMatch(/forbidden\.policy.*denied column/);
+        expect((await exec('DROP TABLE transactions')).text).toMatch(/forbidden\.policy.*always blocked/);
+    });
+});
+describe('examples/multi-agent', () => {
+    it('matches the README table', async () => {
+        const { call, rpc } = await boot('multi-agent');
+        const support = 'demo-support-token';
+        const finance = 'demo-finance-token';
+        // support-bot
+        expect((await call(support, 'app.query', { sql: 'SELECT email FROM customers' })).isError).toBe(false);
+        expect((await call(support, 'app.execute', {
+            sql: "UPDATE tickets SET status = 'closed' WHERE id = 1",
+        })).text).toContain('"rowsAffected": 1');
+        expect((await call(support, 'app.query', { sql: 'SELECT id FROM invoices' })).text).toMatch(/forbidden\.policy/);
+        expect((await call(support, 'app.list_tables', {})).text).not.toContain('invoices');
+        // finance-bot
+        expect((await call(finance, 'app.query', { sql: 'SELECT id, status FROM invoices' })).isError).toBe(false);
+        expect((await call(finance, 'app.query', { sql: 'SELECT email FROM customers' })).text).toMatch(/forbidden\.policy.*denied column/);
+        expect((await call(finance, 'app.query', { sql: 'SELECT id FROM tickets' })).text).toMatch(/forbidden\.policy/);
+        expect((await rpc(finance, 'tools/list')).tools).not.toContain('app.execute');
+        // retired-bot
+        expect((await rpc('demo-retired-token', 'tools/list')).status).toBe(401);
+    });
+});
+//# sourceMappingURL=examples.test.js.map

package/dist/__tests__/examples.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"examples.test.js","sourceRoot":"","sources":["../../src/__tests__/examples.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,wFAAwF;AACxF,gFAAgF;AAChF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC7F,gBAAgB,CAKjB,CAAC;AAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,MAAM,MAAM,GAAG,EAAE,KAAK,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC;AAChE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAChE,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAE9D,IAAI,MAAoC,CAAC;AACzC,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,MAAM,EAAE,IAAI,EAAE,CAAC;IACrB,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI,CAAC,OAAe;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,WAAW,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;IAEb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,yBAAyB,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAC7E,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC;IAC5B,GAAG,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,cAAc,CAAC,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC;QAC5C,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC/F,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GACR,SACD,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC;IAE5B,MAAM,GAAG,GAAG,KAAK,EAAE,KAAa,EAAE,MAAc,EAAE,SAAkC,EAAE,EAAE,EAAE;QACxF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,MAAM,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,qCAAqC;aAC9C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAc,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,KAAK;gBACb,CAAC,CAAC,cAAc,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE;gBACnC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;YAClD,KAAK,EAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAC5E,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,IAA6B,EAAE,EAAE,CAC1E,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,OAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,CACpB,2HAA2H,CAC5H,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC/D,kCAAkC,CACnC,CAAC;QACF,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACtF,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC/D,mCAAmC,CACpC,CAAC;QACF,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC/D,8BAA8B,CAC/B,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAiC,EAAE,EAAE,EAAE,CAChE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAEtE,MAAM,MAAM,GACV,uFAAuF,CAAC;QAC1F,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1B,MAAM,GAAG,GAAG,mFAAmF,CAAC;QAChG,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1B,MAAM,EAAE,GAAG,MAAM,IAAI,CACnB,oFAAoF,CACrF,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1B,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,yDAAyD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC1F,8BAA8B,CAC/B,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1B,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC7F,kCAAkC,CACnC,CAAC;QACF,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC1D,mCAAmC,CACpC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC;QAErC,cAAc;QACd,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7F,KAAK,CACN,CAAC;QACF,MAAM,CACJ,CACE,MAAM,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE;YACjC,GAAG,EAAE,mDAAmD;SACzD,CAAC,CACH,CAAC,IAAI,CACP,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CACzF,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAEpF,cAAc;QACd,MAAM,CACJ,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC,OAAO,CACvF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAC7F,kCAAkC,CACnC,CAAC;QACF,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CACxF,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAE9E,cAAc;QACd,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/init-doctor.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=init-doctor.test.d.ts.map

package/dist/__tests__/init-doctor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-doctor.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/init-doctor.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/init-doctor.test.js

@@ -0,0 +1,79 @@
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterAll, beforeAll, describe, expect, it } from 'vitest';
+import { PolicySchema, SqliteDialect } from '@mcpolyglot/connector-sql';
+import { generatePolicy, initCommand } from '../commands/init.js';
+import { checkPolicy } from '../commands/doctor.js';
+let canRun = true;
+try {
+    await import('better-sqlite3');
+}
+catch {
+    canRun = false;
+}
+const d = canRun ? describe : describe.skip;
+d('init <url> / doctor policy checks against SQLite', () => {
+    let dir;
+    let dbPath;
+    let tables;
+    beforeAll(async () => {
+        dir = mkdtempSync(join(tmpdir(), 'mcpolyglot-init-'));
+        dbPath = join(dir, 'app.db');
+        const Database = (await import('better-sqlite3')).default;
+        const db = new Database(dbPath);
+        db.exec(`
+      CREATE TABLE customers (id INTEGER PRIMARY KEY, name TEXT, ssn TEXT, password_hash TEXT);
+      CREATE TABLE accounts (id INTEGER PRIMARY KEY, customer_id INTEGER, api_key TEXT, balance INTEGER);
+      CREATE TABLE transactions (id INTEGER PRIMARY KEY, account_id INTEGER, amount INTEGER);
+    `);
+        db.close();
+        const dialect = new SqliteDialect(dbPath);
+        await dialect.connect();
+        tables = await dialect.listTables();
+        await dialect.close();
+    });
+    afterAll(() => rmSync(dir, { recursive: true, force: true }));
+    it('generates an all-read policy with defaultAccess none and heuristic denies', () => {
+        const policy = PolicySchema.parse(generatePolicy(tables));
+        expect(policy.defaultAccess).toBe('none');
+        expect(policy.tables).toEqual({ accounts: 'read', customers: 'read', transactions: 'read' });
+        expect(policy.denyColumns.sort()).toEqual([
+            'accounts.api_key',
+            'customers.password_hash',
+            'customers.ssn',
+        ]);
+    });
+    it('writes the policy into mcpolyglot.config.ts, marked as suggestions', async () => {
+        await initCommand({ cwd: dir, url: dbPath, id: 'sqlite.app' });
+        const text = readFileSync(join(dir, 'mcpolyglot.config.ts'), 'utf8');
+        expect(text).toContain(`defaultAccess: 'none'`);
+        expect(text).toContain(`"transactions": 'read'`);
+        expect(text).not.toContain(`: 'write'`);
+        expect(text).toMatch(/Suggested from column names[\s\S]*"customers.ssn"/);
+        // Only a type import: the file must load under npx with no @mcpolyglot/config installed.
+        expect(text).toMatch(/^import type \{ McpolyglotConfig \} from '@mcpolyglot\/config';/m);
+        expect(text).not.toMatch(/^import \{/m);
+        await expect(initCommand({ cwd: dir, url: dbPath })).rejects.toThrow(/already exists/);
+    });
+    it('doctor flags policy keys and denyColumns that are not in the schema', () => {
+        const r = checkPolicy({
+            defaultAccess: 'none',
+            tables: { customers: 'read', accounts: 'write', ledger: 'read' },
+            denyColumns: ['customers.ssn', 'customers.pin', '*.nope'],
+        }, tables);
+        expect(r.problems).toEqual([
+            'policy.tables names "ledger", which is not in the schema',
+            'denyColumns has "customers.pin", which matches no column in the schema',
+            'denyColumns has "*.nope", which matches no column in the schema',
+        ]);
+        expect(r.readable).toEqual(['customers']);
+        expect(r.writable).toEqual(['accounts']);
+        expect(r.hidden).toEqual(['transactions']);
+        expect(r.hiddenColumns).toEqual(['customers.ssn']);
+    });
+    it('doctor reports a clean generated policy with no problems', () => {
+        expect(checkPolicy(generatePolicy(tables), tables).problems).toEqual([]);
+    });
+});
+//# sourceMappingURL=init-doctor.test.js.map

package/dist/__tests__/init-doctor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-doctor.test.js","sourceRoot":"","sources":["../../src/__tests__/init-doctor.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,IAAI,MAAM,GAAG,IAAI,CAAC;AAClB,IAAI,CAAC;IACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACjC,CAAC;AAAC,MAAM,CAAC;IACP,MAAM,GAAG,KAAK,CAAC;AACjB,CAAC;AACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAE5C,CAAC,CAAC,kDAAkD,EAAE,GAAG,EAAE;IACzD,IAAI,GAAW,CAAC;IAChB,IAAI,MAAc,CAAC;IACnB,IAAI,MAAqB,CAAC;IAE1B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,EAAE,CAAC,IAAI,CAAC;;;;KAIP,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE9D,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACxC,kBAAkB;YAClB,yBAAyB;YACzB,eAAe;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;QAC1E,yFAAyF;QACzF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,GAAG,WAAW,CACnB;YACE,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;YAChE,WAAW,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,QAAQ,CAAC;SAC1D,EACD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACzB,0DAA0D;YAC1D,wEAAwE;YACxE,iEAAiE;SAClE,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/bin.js

@@ -5,6 +5,7 @@ import { serveCommand } from './commands/serve.js';
 import { initCommand } from './commands/init.js';
 import { doctorCommand } from './commands/doctor.js';
 import { toolsCommand } from './commands/tools.js';
+import { tokenCreateCommand, tokenHashCommand } from './commands/token.js';
 const VERSION = '0.0.1';
 function bannerHeader() {
     const wordmark = pc.cyan('m') +
@@ -32,8 +33,10 @@ program
     .command('init')
     .description('Interactively scaffold an mcpolyglot.config.ts in the current directory.')
     .option('--cwd <dir>', 'Directory to scaffold into', process.cwd())
-    .action(async (opts) => {
-    await initCommand({ cwd: opts.cwd });
+    .argument('[url]', 'DB URL or SQLite path: introspect it and generate a read-only policy')
+    .option('--id <id>', 'Source id (with a URL)')
+    .action(async (url, opts) => {
+    await initCommand({ cwd: opts.cwd, url, id: opts.id });
 });
 program
     .command('serve')
@@ -65,8 +68,18 @@ program
     .action(async (opts) => {
     await toolsCommand({ config: opts.config });
 });
+const token = program.command('token').description('Manage per-agent HTTP bearer tokens.');
+token
+    .command('create <agentId>')
+    .description('Mint a new token; prints it once with its sha256 hash and a config snippet.')
+    .action((agentId) => tokenCreateCommand(agentId));
+token
+    .command('hash')
+    .description('Print the sha256 hash of a token read from stdin.')
+    .action(async () => {
+    await tokenHashCommand();
+});
 program.parseAsync(process.argv).catch((err) => {
-    // eslint-disable-next-line no-console
     console.error(`mcpolyglot: ${err.message}`);
     process.exit(1);
 });

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,YAAY;IACnB,MAAM,QAAQ,GACZ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACZ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACZ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACZ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,6CAA6C,CAAC,IAAI,CAAC;AACxJ,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,mEAAmE,CAAC;KAChF,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,oBAAoB,CAAC;KACvD,UAAU,CAAC,YAAY,EAAE,cAAc,CAAC;KACxC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC;KACxC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,IAAI,CAAC,CAAC;AAErF,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0EAA0E,CAAC;KACvF,MAAM,CAAC,aAAa,EAAE,4BAA4B,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,gDAAgD,EAAE,KAAK,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,CAAC;KAC5D,MAAM,CAAC,eAAe,EAAE,yBAAyB,EAAE,WAAW,CAAC;KAC/D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+EAA+E,CAAC;KAC5F,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC5E,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC5E,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACpD,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,YAAY;IACnB,MAAM,QAAQ,GACZ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACZ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACZ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACZ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACf,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,6CAA6C,CAAC,IAAI,CAAC;AACxJ,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,mEAAmE,CAAC;KAChF,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,oBAAoB,CAAC;KACvD,UAAU,CAAC,YAAY,EAAE,cAAc,CAAC;KACxC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC;KACxC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,IAAI,CAAC,CAAC;AAErF,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0EAA0E,CAAC;KACvF,MAAM,CAAC,aAAa,EAAE,4BAA4B,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KAClE,QAAQ,CAAC,OAAO,EAAE,sEAAsE,CAAC;KACzF,MAAM,CAAC,WAAW,EAAE,wBAAwB,CAAC;KAC7C,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,IAAI,EAAE,EAAE;IAC9C,MAAM,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,gDAAgD,EAAE,KAAK,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,CAAC;KAC5D,MAAM,CAAC,eAAe,EAAE,yBAAyB,EAAE,WAAW,CAAC;KAC/D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;KACxB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+EAA+E,CAAC;KAC5F,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC5E,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC5E,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC;AAC3F,KAAK;KACF,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,6EAA6E,CAAC;KAC1F,MAAM,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5D,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,mDAAmD,CAAC;KAChE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,gBAAgB,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACpD,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/commands/doctor-agents.d.ts

@@ -0,0 +1,5 @@
+import type { Connector } from '@mcpolyglot/core';
+import type { McpolyglotConfig } from '@mcpolyglot/config';
+/** Per agent: which sources and tools it can use over HTTP, and which it can't. */
+export declare function doctorAgents(cfg: McpolyglotConfig, connectors: Connector[]): void;
+//# sourceMappingURL=doctor-agents.d.ts.map

package/dist/commands/doctor-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-agents.d.ts","sourceRoot":"","sources":["../../src/commands/doctor-agents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI3D,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAI,CA0BjF"}

package/dist/commands/doctor-agents.js

@@ -0,0 +1,33 @@
+import pc from 'picocolors';
+import { agentScopes } from '../factory.js';
+import { section, ok, warn, stdoutSink, sym } from '../ui.js';
+/** Per agent: which sources and tools it can use over HTTP, and which it can't. */
+export function doctorAgents(cfg, connectors) {
+    if (!cfg.agents)
+        return;
+    section('Agents', stdoutSink);
+    for (const a of cfg.agents) {
+        const listed = cfg.sources.filter((s) => s.id in a.sources);
+        const scopes = agentScopes(a, listed);
+        const active = a.tokens.filter((t) => !t.revoked).length;
+        const detail = `${active} active token(s) · scopes: ${scopes.join(', ') || 'none'}`;
+        if (active === 0)
+            warn(a.id, `${detail} — every token is revoked`, stdoutSink);
+        else
+            ok(a.id, detail, stdoutSink);
+        for (const c of connectors) {
+            const policy = a.sources[c.id]?.policy ? pc.dim(' (own policy)') : '';
+            if (!(c.id in a.sources)) {
+                process.stdout.write(`      ${sym.err} ${pc.dim(c.id)}  ${pc.dim('not listed')}\n`);
+                continue;
+            }
+            for (const t of c.listPrimitiveTools()) {
+                const missing = t.scopes.filter((s) => !scopes.includes(s));
+                process.stdout.write(missing.length === 0
+                    ? `      ${sym.ok} ${pc.bold(t.name)}${policy}\n`
+                    : `      ${sym.err} ${t.name}  ${pc.dim(`missing ${missing.join(', ')}`)}\n`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=doctor-agents.js.map

package/dist/commands/doctor-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor-agents.js","sourceRoot":"","sources":["../../src/commands/doctor-agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE9D,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,GAAqB,EAAE,UAAuB;IACzE,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO;IACxB,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACzD,MAAM,MAAM,GAAG,GAAG,MAAM,8BAA8B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;QACpF,IAAI,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,2BAA2B,EAAE,UAAU,CAAC,CAAC;;YAC1E,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACpF,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO,CAAC,MAAM,KAAK,CAAC;oBAClB,CAAC,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI;oBACjD,CAAC,CAAC,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/doctor.d.ts

@@ -1,5 +1,15 @@
+import type { TableSchema } from '@mcpolyglot/core';
 export interface DoctorOptions {
     config: string;
 }
 export declare function doctorCommand(opts: DoctorOptions): Promise<boolean>;
+export interface PolicyReport {
+    problems: string[];
+    readable: string[];
+    writable: string[];
+    hidden: string[];
+    hiddenColumns: string[];
+}
+/** Check a source's policy against its live schema. `policy` must already parse. */
+export declare function checkPolicy(raw: unknown, tables: TableSchema[]): PolicyReport;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CA4EzE"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAsBpD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAyGzE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAyC7E"}