@mxf-dev/core 1.0.0 → 2.0.0

package/dist/protocols/mcp/security/McpToolPolicy.js

@@ -0,0 +1,202 @@
+/**
+ * Copyright 2024 Brad Anderson
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * @author Brad Anderson <BradA1878@pm.me>
+ * @repository https://github.com/BradA1878/model-exchange-framework
+ * @documentation https://mxf-dev.github.io/mxf/
+ */
+/**
+ * McpToolPolicy.ts
+ *
+ * Operator-controlled policy for the tools that reach outside the process:
+ * shell execution, the child environment those shells inherit, the workspace
+ * agents may touch, and the hosts `api_fetch` may reach.
+ *
+ * Every value here comes from configuration (environment variables), never from
+ * tool arguments. That distinction is the whole point of the module: an
+ * allowlist supplied as a tool input is supplied by the very model it is meant
+ * to restrict, so it restricts nothing.
+ *
+ * Environment variables:
+ *   MXF_SHELL_ALLOWED_COMMANDS   Comma-separated base commands agents may run.
+ *                                Empty/unset means "no command allowlist" — the
+ *                                McpSecurityGuard's own rules still apply.
+ *   MXF_SHELL_ENV_PASSTHROUGH    Comma-separated extra environment variable names
+ *                                to forward to shell children, on top of the
+ *                                always-safe base (PATH, HOME, and friends).
+ *   MXF_SHELL_SANDBOX_ENABLED    'true' to run shell_execute inside the Docker
+ *                                sandbox (see ShellSandbox.ts). Default false.
+ *   MXF_WORKSPACE_ROOT           Directory agents are allowed to work in. Required
+ *                                by anything that grants filesystem reach; there is
+ *                                no default, because the old default was $HOME.
+ *   MXF_HTTP_ALLOW_PRIVATE_HOSTS 'true' to let api_fetch reach loopback/private
+ *                                addresses. Default false. Only for local dev.
+ */
+import * as path from 'path';
+/**
+ * Environment variables always forwarded to a shell child.
+ *
+ * These are what a process needs to run at all — a PATH to find binaries, a HOME
+ * for tool caches, a TMPDIR to write scratch files, and locale/terminal settings
+ * so output is not garbled. Nothing here carries a credential.
+ *
+ * Everything else in the server's environment — JWT_SECRET, MONGODB_URI,
+ * OPENROUTER_API_KEY, MEILISEARCH_MASTER_KEY, MXP_ENCRYPTION_KEY — stays behind.
+ */
+const BASE_SHELL_ENV_VARS = [
+    'PATH',
+    'HOME',
+    'USER',
+    'LOGNAME',
+    'SHELL',
+    'LANG',
+    'LC_ALL',
+    'TERM',
+    'TMPDIR',
+    'TZ',
+    'NODE_ENV',
+    // Windows equivalents — a child on win32 cannot resolve paths without these.
+    'SYSTEMROOT',
+    'COMSPEC',
+    'PATHEXT',
+    'USERPROFILE',
+    'TEMP',
+    'TMP'
+];
+/** Parse a comma-separated env var into a trimmed, non-empty list. */
+function parseList(value) {
+    if (!value) {
+        return [];
+    }
+    return value
+        .split(',')
+        .map(entry => entry.trim())
+        .filter(entry => entry.length > 0);
+}
+/** Parse a boolean env var. Anything other than 'true' is false. */
+function parseBoolean(value, fallback) {
+    if (value === undefined || value === '') {
+        return fallback;
+    }
+    return value.toLowerCase() === 'true';
+}
+/**
+ * Base commands agents are permitted to run via shell_execute.
+ *
+ * Read from MXF_SHELL_ALLOWED_COMMANDS. An empty list means no allowlist is
+ * configured: the McpSecurityGuard's block rules and confirmation prompts remain
+ * the control, exactly as before. This is a config-supplied allowlist, so a model
+ * cannot widen it by passing arguments.
+ */
+export function getShellAllowedCommands() {
+    return parseList(process.env.MXF_SHELL_ALLOWED_COMMANDS);
+}
+/**
+ * Is a command allowlist configured at all?
+ */
+export function hasShellAllowlist() {
+    return getShellAllowedCommands().length > 0;
+}
+/**
+ * Build the environment a shell child process receives.
+ *
+ * Least privilege: start from the small base set above, add any names the
+ * operator explicitly opted into via MXF_SHELL_ENV_PASSTHROUGH, then add the
+ * caller's own explicit variables. The server's secrets are never copied in.
+ *
+ * This mirrors what ExternalMcpServerManager already does when it spawns an
+ * external MCP server.
+ *
+ * @param explicitEnv - Variables the caller wants the child to see
+ * @returns The complete environment for the child process
+ */
+export function buildShellChildEnv(explicitEnv) {
+    const childEnv = {};
+    const passthroughNames = [
+        ...BASE_SHELL_ENV_VARS,
+        ...parseList(process.env.MXF_SHELL_ENV_PASSTHROUGH)
+    ];
+    for (const name of passthroughNames) {
+        const value = process.env[name];
+        if (value !== undefined && value !== '') {
+            childEnv[name] = value;
+        }
+    }
+    // Caller-supplied variables are layered last so a tool can set, for example,
+    // CI=true or NODE_OPTIONS for the command it is about to run.
+    if (explicitEnv) {
+        for (const [name, value] of Object.entries(explicitEnv)) {
+            if (value !== undefined && value !== null) {
+                childEnv[name] = String(value);
+            }
+        }
+    }
+    return childEnv;
+}
+/**
+ * Should shell_execute run commands inside the Docker sandbox?
+ *
+ * Off by default: the sandbox requires Docker and the mxf/shell-executor image,
+ * and turning it on changes where commands run. When it is on and Docker is
+ * missing, execution fails — it never silently falls back to the host.
+ */
+export function isShellSandboxEnabled() {
+    return parseBoolean(process.env.MXF_SHELL_SANDBOX_ENABLED, false);
+}
+/**
+ * The directory tree agents are allowed to work in.
+ *
+ * Returns undefined when MXF_WORKSPACE_ROOT is not set. Callers that hand out
+ * filesystem reach must treat that as fatal — see {@link requireWorkspaceRoot}.
+ * There is deliberately no default: the previous default was the user's home
+ * directory, which put ~/.ssh, ~/.aws and ~/.mxf/config.json inside the agents'
+ * reach.
+ */
+export function getWorkspaceRoot() {
+    const configured = process.env.MXF_WORKSPACE_ROOT;
+    if (!configured || configured.trim().length === 0) {
+        return undefined;
+    }
+    return path.resolve(configured.trim());
+}
+/**
+ * The workspace root, or a thrown error explaining how to set it.
+ *
+ * @throws Error when MXF_WORKSPACE_ROOT is not configured
+ */
+export function requireWorkspaceRoot(consumer) {
+    const root = getWorkspaceRoot();
+    if (!root) {
+        throw new Error(`${consumer} needs a workspace directory but MXF_WORKSPACE_ROOT is not set. ` +
+            `Set it to the directory agents are allowed to work in ` +
+            `(for example: MXF_WORKSPACE_ROOT=/Users/you/projects/my-app). ` +
+            `It has no default — the previous default was your home directory, which ` +
+            `exposed ~/.ssh, ~/.aws and ~/.mxf/config.json to agents.`);
+    }
+    return root;
+}
+/**
+ * May api_fetch reach loopback and private-network addresses?
+ *
+ * Default false. When false, api_fetch refuses localhost, RFC1918 ranges, and
+ * the cloud metadata endpoint — otherwise an agent could use the server as a
+ * proxy into the MXF API itself, Meilisearch, or a cloud instance's credentials.
+ *
+ * Turn on only for local development against services on your own machine.
+ */
+export function allowPrivateHttpHosts() {
+    return parseBoolean(process.env.MXF_HTTP_ALLOW_PRIVATE_HOSTS, false);
+}
+//# sourceMappingURL=McpToolPolicy.js.map

package/dist/protocols/mcp/security/McpToolPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpToolPolicy.js","sourceRoot":"","sources":["../../../../src/protocols/mcp/security/McpToolPolicy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B;;;;;;;;;GASG;AACH,MAAM,mBAAmB,GAAG;IACxB,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,UAAU;IACV,6EAA6E;IAC7E,YAAY;IACZ,SAAS;IACT,SAAS;IACT,aAAa;IACb,MAAM;IACN,KAAK;CACR,CAAC;AAEF,sEAAsE;AACtE,SAAS,SAAS,CAAC,KAAyB;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAiB;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB;IACnC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC7B,OAAO,uBAAuB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAC9B,WAAoC;IAEpC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,MAAM,gBAAgB,GAAG;QACrB,GAAG,mBAAmB;QACtB,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;KACtD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,8DAA8D;IAC9D,IAAI,WAAW,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB;IACjC,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAClD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CACX,GAAG,QAAQ,kEAAkE;YAC7E,wDAAwD;YACxD,gEAAgE;YAChE,0EAA0E;YAC1E,0DAA0D,CAC7D,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB;IACjC,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;AACzE,CAAC"}

package/dist/protocols/mcp/security/index.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/protocols/mcp/security/index.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/protocols/mcp/services/ExternalMcpServerManager.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 import { EventEmitter } from 'events';
@@ -144,36 +144,66 @@ export declare class ExternalMcpServerManager extends EventEmitter {
      */
     private setupProcessEventHandlers;
     /**
-     * Start health check monitoring for a server
+     * Route a chunk of a server's stdout to whoever is waiting for it.
+     *
+     * MCP over stdio is line-delimited JSON. Chunks do not respect line boundaries,
+     * so a partial line is carried over to the next chunk.
      */
-    private startHealthChecking;
+    private handleServerOutput;
     /**
-     * Perform health check for a server
+     * Send a JSON-RPC request and wait for its reply.
+     *
+     * The reply is matched by id in handleServerOutput(). On timeout the pending
+     * entry is removed, so nothing accumulates.
      */
-    private performHealthCheck;
+    private sendRequest;
     /**
-     * Handle server output for tool discovery
+     * Send a JSON-RPC notification. Notifications have no id and get no reply.
+     */
+    private sendNotification;
+    /**
+     * Fail every in-flight request for a server. Called when the process dies, so
+     * callers get an error instead of hanging until their individual timeouts.
+     */
+    private rejectPendingRequests;
+    /**
+     * Start health check monitoring for a server
+     */
+    private startHealthChecking;
+    /**
+     * Check that a server is actually answering.
+     *
+     * This used to be `process && !process.killed` — which only says the OS has not
+     * reaped the process. A server that had wedged, deadlocked, or stopped reading
+     * stdin stayed "healthy" forever.
      *
-     * MCP protocol message parsing is handled in:
-     * - initializeMcpConnection(): Handles MCP initialize handshake
-     * - discoverRealToolsFromServer(): Handles tools/list JSON-RPC calls
-     * - executeToolOnServer(): Handles tools/call JSON-RPC calls
+     * A real probe means a round trip through the JSON-RPC layer. `tools/list` is
+     * the probe: every server we can talk to implements it (we call it at
+     * discovery), it takes no arguments, and a reply proves the server is reading
+     * stdin, parsing JSON-RPC, and writing stdout.
      */
-    private handleServerOutput;
+    private performHealthCheck;
     /**
      * Discover tools available from a server
      */
     private discoverServerTools;
     /**
-     * Initialize MCP connection with server
+     * Perform the MCP handshake, then discover the server's tools.
+     *
+     * The handshake is two messages, not one:
+     *   1. `initialize` — request/response, negotiates protocol version.
+     *   2. `notifications/initialized` — a notification telling the server the
+     *      client is ready.
+     *
+     * The second was never sent. It is required by the MCP spec, and a strict
+     * server is entitled to reject `tools/list` from a client that never sent it.
+     *
+     * The server is only marked 'running' once this completes. Spawning a process
+     * says nothing about whether it speaks MCP.
      */
     private initializeMcpConnection;
     /**
-     * Wait for MCP response with specific ID
-     */
-    private waitForMcpResponse;
-    /**
-     * Discover tools from external MCP server using JSON-RPC tools/list method
+     * Ask a server what tools it has.
      */
     private discoverRealToolsFromServer;
     /**
@@ -223,9 +253,12 @@ export declare class ExternalMcpServerManager extends EventEmitter {
     /**
      * Execute a tool on an external MCP server via JSON-RPC with auto-correction support
      */
-    executeToolOnServer(serverId: string, toolName: string, input: any, agentId?: string, channelId?: string): Promise<any>;
+    executeToolOnServer(serverId: string, toolName: string, input: any, agentId: string, channelId: string): Promise<any>;
     /**
-     * Internal method to execute tool once (without retry logic)
+     * Execute a tool once, without the retry/auto-correction wrapper.
+     *
+     * The reply is matched by request id through the server's single stdout
+     * listener — see sendRequest() and handleServerOutput().
      */
     private executeToolOnServerInternal;
 }

package/dist/protocols/mcp/services/ExternalMcpServerManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExternalMcpServerManager.d.ts","sourceRoot":"","sources":["../../../../src/protocols/mcp/services/ExternalMcpServerManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAWtC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAQ3D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,cAAc,EAAE,OAAO,CAAC;IACxB,4CAA4C;IAC5C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,KAAK,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACpC,CAAC,CAAC;CACN;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACtD,OAAO,CAAC,OAAO,CAMA;IAGf,OAAO,CAAC,YAAY,CAaL;IAEf,OAAO,CAAC,qBAAqB,CAAwB;IAErD;;yFAEqF;IACrF,OAAO,CAAC,gBAAgB,CAAkC;IAE1D;;;OAGG;gBACS,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;QAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAAE;IAejG;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA6N1B;;OAEG;IACU,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCxE;;OAEG;IACU,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA+EnG;;OAEG;IACU,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BlF;;OAEG;IACU,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BnF;;OAEG;IACI,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAoBzG;;OAEG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAiDlG;;OAEG;IACI,eAAe,IAAI,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAU3D;;OAEG;IACI,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAK9E;;OAEG;IACI,mBAAmB,IAAI,eAAe,EAAE;IAe/C;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAsFjC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;OAEG;YACW,kBAAkB;IAsBhC;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;OAEG;YACW,mBAAmB;IAwEjC;;OAEG;YACW,uBAAuB;IA6DrC;;OAEG;YACW,kBAAkB;IAsDhC;;OAEG;YACW,2BAA2B;IA8FzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;OAEG;IACH,OAAO,CAAC,eAAe;IAkCvB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuB9B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAuBjC;;OAEG;IACU,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAatC;;OAEG;IACI,mBAAmB,IAAI,MAAM,EAAE;IAUtC;;OAEG;IACI,kBAAkB,IAAI,MAAM,EAAE;IAUrC;;OAEG;IACI,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAQhE;;OAEG;IACU,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBlF;;OAEG;IACU,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB9D;;OAEG;IACU,mBAAmB,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,GAAG,EACV,OAAO,GAAE,MAAiB,EAC1B,SAAS,GAAE,MAAkB,GAC9B,OAAO,CAAC,GAAG,CAAC;IA8Df;;OAEG;YACW,2BAA2B;CA8G5C"}
+{"version":3,"file":"ExternalMcpServerManager.d.ts","sourceRoot":"","sources":["../../../../src/protocols/mcp/services/ExternalMcpServerManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAWH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAWtC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAQ3D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,2DAA2D;IAC3D,cAAc,EAAE,OAAO,CAAC;IACxB,4CAA4C;IAC5C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,KAAK,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACpC,CAAC,CAAC;CACN;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;CACpB;AA0BD;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACtD,OAAO,CAAC,OAAO,CAmBA;IAGf,OAAO,CAAC,YAAY,CAaL;IAEf,OAAO,CAAC,qBAAqB,CAAwB;IAErD;;yFAEqF;IACrF,OAAO,CAAC,gBAAgB,CAAkC;IAE1D;;;OAGG;gBACS,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;QAAC,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAAE;IAejG;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA6N1B;;OAEG;IACU,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAwCxE;;OAEG;IACU,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA+EnG;;OAEG;IACU,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BlF;;OAEG;IACU,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BnF;;OAEG;IACI,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAoBzG;;OAEG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDlG;;OAEG;IACI,eAAe,IAAI,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAU3D;;OAEG;IACI,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS;IAK9E;;OAEG;IACI,mBAAmB,IAAI,eAAe,EAAE;IAe/C;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAyFjC;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAqD1B;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IA2CnB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAcxB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAe7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;;;;;;;;;;OAWG;YACW,kBAAkB;IAiChC;;OAEG;YACW,mBAAmB;IAwEjC;;;;;;;;;;;;;OAaG;YACW,uBAAuB;IAyDrC;;OAEG;YACW,2BAA2B;IAyBzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAezB;;OAEG;IACH,OAAO,CAAC,eAAe;IAkCvB;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuB9B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAwBjC;;OAEG;IACU,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAatC;;OAEG;IACI,mBAAmB,IAAI,MAAM,EAAE;IAUtC;;OAEG;IACI,kBAAkB,IAAI,MAAM,EAAE;IAUrC;;OAEG;IACI,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAQhE;;OAEG;IACU,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBlF;;OAEG;IACU,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoB9D;;OAEG;IACU,mBAAmB,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAClB,OAAO,CAAC,GAAG,CAAC;IA+Ef;;;;;OAKG;YACW,2BAA2B;CA4B5C"}