@namzu/cli 30.0.0 → 33.0.0

package/dist/integrations/mcp/servers.d.ts

@@ -14,7 +14,7 @@
  *       "search":   { "url": "https://tools.example.internal/mcp" }
  *     }
  *
- * Its tools arrive prefixed with the server's name (`mcp_tickets_create`), so
+ * Its tools arrive prefixed with the server's name (`mcp__tickets__create`), so
  * two servers offering `search` do not collide and the transcript says where a
  * call went.
  *
@@ -31,7 +31,7 @@
  * and a headless run has nobody to read anything, so it refuses. This module
  * reports; the callers decide.
  */
-import { type MCPTransportUnion, type ToolDefinition } from '@namzu/sdk';
+import { type MCPToolDrift, type MCPTransportUnion, type ToolDefinition, type Toolset } from '@namzu/sdk';
 /**
  * How long a single server gets to connect, hand shake and list its tools.
  *
@@ -55,6 +55,15 @@ export interface McpServerSpec {
     /** Stdio: the executable to run. */
     readonly command?: string;
     readonly args?: readonly string[];
+    /**
+     * A value may reference the operator's own environment with a bare
+     * `${VAR_NAME}` — no `${VAR:-default}` fallback, and an unset
+     * `VAR_NAME` fails this server with a named reason rather than running
+     * with an empty string. See {@link expandEnvRefsInRecord}. Prefer
+     * `inheritEnv` below for a plain "grant this variable under its own
+     * name"; use `${VAR_NAME}` here to rename a variable into whatever key
+     * the server expects.
+     */
     readonly env?: Readonly<Record<string, string>>;
     /**
      * Variables from the operator's own environment this server may have.
@@ -72,6 +81,11 @@ export interface McpServerSpec {
     readonly cwd?: string;
     /** HTTP: the server's endpoint. */
     readonly url?: string;
+    /**
+     * Same `${VAR_NAME}` expansion as `env` above — the only secret-safe
+     * option for a header value, since `inheritEnv` reaches the stdio
+     * child's process environment only, never an HTTP header.
+     */
     readonly headers?: Readonly<Record<string, string>>;
     /**
      * How long THIS server gets to connect, hand shake and list its tools, in
@@ -100,6 +114,18 @@ export interface McpServerSpec {
      * `connectTimeoutMs` for the handshake that will actually answer.
      */
     readonly eraProbeTimeoutMs?: number;
+    /** Server-reported names admitted from tools, prompts and resources. */
+    readonly allow?: readonly string[];
+    /** Server-reported names refused even if `allow` includes them. */
+    readonly deny?: readonly string[];
+    /** Retries only tool calls the SDK marks safe to repeat. Defaults to none. */
+    readonly maxRetries?: number;
+    /** Require a person to approve every call this server contributes. */
+    readonly requireApproval?: boolean;
+    /** Trust this server's read-only hints for review exemptions. Defaults to false. */
+    readonly readOnlyHintTrusted?: boolean;
+    /** Include the server's own initialize instructions as untrusted turn context. Default false. */
+    readonly instructions?: boolean;
 }
 export type McpServersConfig = Readonly<Record<string, McpServerSpec>>;
 export interface ConnectedMcpServer {
@@ -109,11 +135,21 @@ export interface ConnectedMcpServer {
      * What this server actually contributes, by tool name.
      *
      * Carried from the listing rather than recovered later. The names arrive
-     * prefixed with the server's own (`mcp_tickets_create`), so a caller COULD
+     * prefixed with the server's own (`mcp__tickets__create`), so a caller COULD
      * split them back apart — but that turns an encoding this file owns into a
      * format two places have to agree about, and the list is free right here.
      */
     readonly tools: readonly string[];
+    /** The server's current initialize instructions, if it supplied any. */
+    readonly instructions?: string;
+    /** Names changed since this connection's first listing; changed definitions remain held. */
+    readonly drift?: MCPToolDrift;
+    /** Current allow/deny refusals, by server-reported name. */
+    readonly refused?: readonly {
+        kind: 'tools' | 'prompts' | 'resources';
+        name: string;
+        reason: 'not_allowed' | 'denied';
+    }[];
 }
 export interface FailedMcpServer {
     readonly name: string;
@@ -121,8 +157,13 @@ export interface FailedMcpServer {
     readonly reason: string;
 }
 export interface McpConnection {
-    /** Adapted tools from every server that connected, ready to register. */
+    /** Current definitions from every connected server, read from its live toolsets. */
     readonly tools: readonly ToolDefinition[];
+    /**
+     * Two live entries per connected server: its configured main tools and its
+     * always-deferred resource tools. Both carry the `mcp:<server>` source.
+     */
+    readonly toolsets: readonly Toolset[];
     /** One coherent live snapshot; use this when successes and failures are shown together. */
     current(): {
         readonly connected: readonly ConnectedMcpServer[];
@@ -142,6 +183,32 @@ export interface McpConnection {
      */
     close(): Promise<void>;
 }
+/**
+ * Expand `${VAR}` references inside `env`/`headers` values against the
+ * operator's own environment.
+ *
+ * Deliberately narrower than the interpolation some other MCP clients'
+ * configs use (see docs/cli/mcp-servers.md): bare `${VAR}` only, no
+ * `${VAR:-default}` fallback, and only inside `env` and `headers` values —
+ * never `command`, `args`, `url` or `cwd`, which have no legitimate secret
+ * use case and would only widen the surface for an accidental literal `${`
+ * to break. A referenced variable that is unset is refused with a named
+ * reason, not silently substituted with an empty string: that is exactly
+ * the footgun a `:-default` fallback would reintroduce, and this module's
+ * whole design is "every failure is named" rather than a server running
+ * quietly with a secret it never got.
+ *
+ * `inheritEnv` stays the primary idiom for "grant this named variable to
+ * the child process under its own name" — this is for the config VALUE
+ * itself, letting an operator rename an env var into whatever key or
+ * header a server expects, and giving `headers` a secret-safe option it
+ * has never had (`inheritEnv` only reaches the stdio child's process env,
+ * not header values).
+ *
+ * Returns the expanded record, or a reason string naming the first unset
+ * variable a value referenced.
+ */
+export declare function expandEnvRefsInRecord(record: Readonly<Record<string, string>>, env: NodeJS.ProcessEnv): Readonly<Record<string, string>> | string;
 /**
  * Turn one spec into a transport, or say why it is not one.
  *
@@ -149,7 +216,7 @@ export interface McpConnection {
  * operator who edited one into a file that already had the other, and picking
  * either would run something they did not mean to run.
  */
-export declare function transportFor(spec: McpServerSpec, defaultCwd: string): MCPTransportUnion | string;
+export declare function transportFor(spec: McpServerSpec, defaultCwd: string, env?: NodeJS.ProcessEnv): MCPTransportUnion | string;
 /**
  * The connect deadline a spec asks for, or why it cannot have it.
  *

package/dist/integrations/mcp/servers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"servers.d.ts","sourceRoot":"","sources":["../../../src/integrations/mcp/servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAEN,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEnB,MAAM,YAAY,CAAA;AAEnB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAA;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AAErC,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,mCAAmC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;AAEtE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC,2FAA2F;IAC3F,OAAO,IAAI;QACV,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAA;QACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;KAC3C,CAAA;IACD,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACjD,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,MAAM,CAwBhG;AAkBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,CAOvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAOnF;AAED,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,aAAa,CAAC,CAyHxB"}
+{"version":3,"file":"servers.d.ts","sourceRoot":"","sources":["../../../src/integrations/mcp/servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AASH,OAAO,EAIN,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,OAAO,EAGZ,MAAM,YAAY,CAAA;AAWnB;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAA;AAExC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AAErC,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC;;;;;;;;OAQG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,mCAAmC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD;;;;;;;;;OASG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IACnC,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,sEAAsE;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;IAClC,oFAAoF;IACpF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IACtC,iGAAiG;IACjG,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;AAEtE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAA;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAC3B,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,CAAA;QACvC,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,aAAa,GAAG,QAAQ,CAAA;KAChC,EAAE,CAAA;CACH;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;IACzC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAA;IACrC,2FAA2F;IAC3F,OAAO,IAAI;QACV,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAA;QACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;KAC3C,CAAA;IACD,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAA;IACjD,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAA;IAC3C;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAQD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACxC,GAAG,EAAE,MAAM,CAAC,UAAU,GACpB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAkB3C;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC3B,IAAI,EAAE,aAAa,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GAClC,iBAAiB,GAAG,MAAM,CA4B5B;AAuKD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,MAAM,CAOvE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAOnF;AAoCD,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,aAAa,CAAC,CAkLxB"}

package/dist/integrations/mcp/servers.js

@@ -14,7 +14,7 @@
  *       "search":   { "url": "https://tools.example.internal/mcp" }
  *     }
  *
- * Its tools arrive prefixed with the server's name (`mcp_tickets_create`), so
+ * Its tools arrive prefixed with the server's name (`mcp__tickets__create`), so
  * two servers offering `search` do not collide and the transcript says where a
  * call went.
  *
@@ -31,7 +31,9 @@
  * and a headless run has nobody to read anything, so it refuses. This module
  * reports; the callers decide.
  */
-import { MCPClient, mcpToolToToolDefinition, } from '@namzu/sdk';
+import { UnauthorizedError, auth, extractWWWAuthenticateParams, withOAuth, } from '@modelcontextprotocol/client';
+import { MCPClient, MCPHttpStatusError, mcpToolset, requireApproval, } from '@namzu/sdk';
+import { McpOAuthLoginRequiredError, McpOAuthStoreError, createMcpOAuthProvider, hasMcpOAuthTokens, isSecureMcpOAuthUrl, mcpOAuthPath, } from './oauth-store.js';
 /**
  * How long a single server gets to connect, hand shake and list its tools.
  *
@@ -50,6 +52,55 @@ export const CONNECT_TIMEOUT_MS = 10_000;
  * command open past the work it was asked to do.
  */
 export const CLOSE_TIMEOUT_MS = 2_000;
+/**
+ * A bare `${VAR}` reference inside an `env` or `headers` value — identifier
+ * characters only, no `:-default` fallback. See {@link expandEnvRefsInRecord}.
+ */
+const ENV_REF_PATTERN = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g;
+/**
+ * Expand `${VAR}` references inside `env`/`headers` values against the
+ * operator's own environment.
+ *
+ * Deliberately narrower than the interpolation some other MCP clients'
+ * configs use (see docs/cli/mcp-servers.md): bare `${VAR}` only, no
+ * `${VAR:-default}` fallback, and only inside `env` and `headers` values —
+ * never `command`, `args`, `url` or `cwd`, which have no legitimate secret
+ * use case and would only widen the surface for an accidental literal `${`
+ * to break. A referenced variable that is unset is refused with a named
+ * reason, not silently substituted with an empty string: that is exactly
+ * the footgun a `:-default` fallback would reintroduce, and this module's
+ * whole design is "every failure is named" rather than a server running
+ * quietly with a secret it never got.
+ *
+ * `inheritEnv` stays the primary idiom for "grant this named variable to
+ * the child process under its own name" — this is for the config VALUE
+ * itself, letting an operator rename an env var into whatever key or
+ * header a server expects, and giving `headers` a secret-safe option it
+ * has never had (`inheritEnv` only reaches the stdio child's process env,
+ * not header values).
+ *
+ * Returns the expanded record, or a reason string naming the first unset
+ * variable a value referenced.
+ */
+export function expandEnvRefsInRecord(record, env) {
+    const result = {};
+    for (const [key, raw] of Object.entries(record)) {
+        let missing;
+        const expanded = raw.replace(ENV_REF_PATTERN, (whole, name) => {
+            const value = env[name];
+            if (value === undefined) {
+                missing = name;
+                return whole;
+            }
+            return value;
+        });
+        if (missing !== undefined) {
+            return `references \${${missing}}, which is not set in the operator's environment`;
+        }
+        result[key] = expanded;
+    }
+    return result;
+}
 /**
  * Turn one spec into a transport, or say why it is not one.
  *
@@ -57,31 +108,179 @@ export const CLOSE_TIMEOUT_MS = 2_000;
  * operator who edited one into a file that already had the other, and picking
  * either would run something they did not mean to run.
  */
-export function transportFor(spec, defaultCwd) {
+export function transportFor(spec, defaultCwd, env = process.env) {
     const hasCommand = typeof spec.command === 'string' && spec.command.trim().length > 0;
     const hasUrl = typeof spec.url === 'string' && spec.url.trim().length > 0;
     if (hasCommand && hasUrl) {
         return 'it declares both a command and a url — pick one';
     }
     if (hasCommand) {
+        const expandedEnv = spec.env ? expandEnvRefsInRecord(spec.env, env) : undefined;
+        if (typeof expandedEnv === 'string')
+            return expandedEnv;
         return {
             type: 'stdio',
             command: spec.command,
             ...(spec.args ? { args: [...spec.args] } : {}),
-            ...(spec.env ? { env: { ...spec.env } } : {}),
+            ...(expandedEnv ? { env: expandedEnv } : {}),
             ...(spec.inheritEnv ? { inheritEnv: [...spec.inheritEnv] } : {}),
             cwd: spec.cwd ?? defaultCwd,
         };
     }
     if (hasUrl) {
+        const expandedHeaders = spec.headers ? expandEnvRefsInRecord(spec.headers, env) : undefined;
+        if (typeof expandedHeaders === 'string')
+            return expandedHeaders;
         return {
             type: 'streamable-http',
             url: spec.url,
-            ...(spec.headers ? { headers: { ...spec.headers } } : {}),
+            ...(expandedHeaders ? { headers: expandedHeaders } : {}),
         };
     }
     return 'it declares neither a command nor a url';
 }
+/** One refresh per credential file; unrelated MCP requests remain concurrent. */
+const mcpOAuthRefreshes = new Map();
+function mcpOAuthUnauthorized() {
+    return new MCPHttpStatusError('MCP OAuth', 401, 'authorization required; run `namzu mcp login <server>`', '');
+}
+/**
+ * A running agent may reuse a saved OAuth grant, including its refresh token,
+ * but only an explicit `mcp login` may begin browser authorization. The store
+ * binds the grant to this complete URL (path and query included), and the
+ * fetch guard keeps it there even if a transport changes its request target.
+ */
+function withSavedMcpOAuth(transport) {
+    if (transport.type !== 'streamable-http')
+        return transport;
+    // A configured Authorization header is the operator's chosen credential.
+    // The official middleware would replace it with the saved bearer token.
+    if (Object.keys(transport.headers ?? {}).some((key) => key.toLowerCase() === 'authorization')) {
+        return transport;
+    }
+    let endpoint;
+    try {
+        endpoint = new URL(transport.url);
+    }
+    catch {
+        return transport;
+    }
+    // The OAuth store accepts HTTPS and loopback HTTP. Preserve ordinary MCP
+    // behavior for other URLs instead of turning their lack of OAuth into an
+    // unrelated startup error.
+    if (!isSecureMcpOAuthUrl(endpoint))
+        return transport;
+    if (!hasMcpOAuthTokens(transport.url))
+        return transport;
+    const provider = createMcpOAuthProvider({ endpoint: transport.url });
+    const rawFetch = fetch;
+    const oauthNetworkFetch = (input, init) => {
+        const target = new URL(String(input));
+        if (!isSecureMcpOAuthUrl(target)) {
+            throw new McpOAuthStoreError('MCP OAuth network requests require HTTPS or loopback HTTP.');
+        }
+        // OAuth discovery and token requests may carry a client secret or refresh
+        // token. A 307/308 must never replay their POST body to a redirect target.
+        return rawFetch(input, { ...init, redirect: 'manual' });
+    };
+    const credentialKey = mcpOAuthPath(transport.url);
+    const authenticatedFetch = withOAuth(provider, transport.url)(async (input, init) => {
+        if (input.toString() !== transport.url) {
+            throw new Error('MCP OAuth refused a request to a different endpoint');
+        }
+        // The bearer token is attached by `withOAuth` before this call. Never
+        // auto-follow a redirect with it, including to another path on the
+        // same origin, even if an SDK transport changes its own redirect mode.
+        const response = await rawFetch(input, { ...init, redirect: 'manual' });
+        if (response.status !== 401)
+            return response;
+        // Intercept the challenge before `withOAuth` can start an independent
+        // refresh for every simultaneous request. Its token attachment remains
+        // authoritative; the official `auth()` performs the refresh once.
+        const attemptedAuthorization = new Headers(init?.headers).get('authorization');
+        const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(response);
+        void response.body?.cancel().catch(() => undefined);
+        let refresh = mcpOAuthRefreshes.get(credentialKey);
+        if (!refresh) {
+            refresh = (async () => {
+                const current = await provider.tokens();
+                if (!current)
+                    throw new McpOAuthLoginRequiredError();
+                // Another connection or process may have renewed this grant while
+                // the old request was in flight. Its new access token is enough.
+                if (attemptedAuthorization !== `Bearer ${current.access_token}`)
+                    return;
+                const result = await auth(provider, {
+                    serverUrl: transport.url,
+                    resourceMetadataUrl,
+                    scope,
+                    fetchFn: oauthNetworkFetch,
+                });
+                if (result !== 'AUTHORIZED')
+                    throw new McpOAuthLoginRequiredError();
+            })();
+            mcpOAuthRefreshes.set(credentialKey, refresh);
+            const ownedRefresh = refresh;
+            void ownedRefresh.then(() => {
+                if (mcpOAuthRefreshes.get(credentialKey) === ownedRefresh) {
+                    mcpOAuthRefreshes.delete(credentialKey);
+                }
+            }, () => {
+                if (mcpOAuthRefreshes.get(credentialKey) === ownedRefresh) {
+                    mcpOAuthRefreshes.delete(credentialKey);
+                }
+            });
+        }
+        try {
+            await refresh;
+        }
+        catch {
+            // A second process may have won a rotating-token refresh while
+            // this one failed. The store's issuer/endpoint binding still holds;
+            // one retry with its new token is safe and avoids a false failure.
+            const latest = await provider.tokens();
+            if (!latest || attemptedAuthorization === `Bearer ${latest.access_token}`) {
+                throw mcpOAuthUnauthorized();
+            }
+        }
+        const current = await provider.tokens();
+        if (!current)
+            throw mcpOAuthUnauthorized();
+        const headers = new Headers(init?.headers);
+        headers.set('Authorization', `Bearer ${current.access_token}`);
+        const retried = await rawFetch(input, { ...init, headers, redirect: 'manual' });
+        if (retried.status === 401) {
+            void retried.body?.cancel().catch(() => undefined);
+            throw mcpOAuthUnauthorized();
+        }
+        return retried;
+    });
+    const oauthFetch = async (input, init) => {
+        // `withOAuth` authenticates any URL handed to it. Our Streamable HTTP
+        // transport sends the configured URL exactly; reject any other target
+        // before the bearer token can reach it.
+        if (input !== transport.url) {
+            throw new Error('MCP OAuth refused a request to a different endpoint');
+        }
+        try {
+            if (!(await provider.tokens()))
+                throw new McpOAuthLoginRequiredError();
+            return await authenticatedFetch(input, init);
+        }
+        catch (error) {
+            if (error instanceof UnauthorizedError ||
+                error instanceof McpOAuthLoginRequiredError ||
+                error instanceof McpOAuthStoreError) {
+                // The official middleware throws after a 401 or failed refresh.
+                // The SDK's era probe recognizes its own HTTP status error and
+                // refuses 401 instead of offering a legacy initialize handshake.
+                throw mcpOAuthUnauthorized();
+            }
+            throw error;
+        }
+    };
+    return { ...transport, fetch: oauthFetch };
+}
 async function withDeadline(work, ms, what) {
     let timer;
     try {
@@ -136,9 +335,38 @@ export function eraProbeTimeoutFor(spec) {
     }
     return ms;
 }
+function toolsetOptionsFor(spec, name) {
+    for (const field of ['allow', 'deny']) {
+        const value = spec[field];
+        if (value !== undefined &&
+            (!Array.isArray(value) || !value.every((item) => typeof item === 'string' && item.length > 0))) {
+            return `${field} must be a list of nonempty server-reported names`;
+        }
+    }
+    if (spec.maxRetries !== undefined &&
+        (!Number.isSafeInteger(spec.maxRetries) || spec.maxRetries < 0)) {
+        return `maxRetries must be a nonnegative integer, got ${JSON.stringify(spec.maxRetries)}`;
+    }
+    if (spec.requireApproval !== undefined && typeof spec.requireApproval !== 'boolean') {
+        return 'requireApproval must be true or false';
+    }
+    if (spec.readOnlyHintTrusted !== undefined && typeof spec.readOnlyHintTrusted !== 'boolean') {
+        return 'readOnlyHintTrusted must be true or false';
+    }
+    if (spec.instructions !== undefined && typeof spec.instructions !== 'boolean') {
+        return 'instructions must be true or false';
+    }
+    return {
+        id: `mcp:${name}`,
+        allow: spec.allow,
+        deny: spec.deny,
+        maxRetries: spec.maxRetries,
+        readOnlyHintTrusted: spec.readOnlyHintTrusted,
+    };
+}
 export async function connectMcpServers(config, options) {
     const entries = Object.entries(config ?? {});
-    const tools = [];
+    const toolsets = [];
     const startupFailed = [];
     const clients = [];
     const liveServers = [];
@@ -147,6 +375,10 @@ export async function connectMcpServers(config, options) {
     // of nothing and the failure output arrive interleaved, for a saving that
     // matters only to someone running many servers, who has other problems.
     for (const [name, spec] of entries) {
+        if (typeof spec !== 'object' || spec === null) {
+            startupFailed.push({ name, reason: 'server spec must be a mapping' });
+            continue;
+        }
         const transport = transportFor(spec, options.cwd);
         if (typeof transport === 'string') {
             startupFailed.push({ name, reason: transport });
@@ -162,26 +394,50 @@ export async function connectMcpServers(config, options) {
             startupFailed.push({ name, reason: eraProbeTimeoutMs });
             continue;
         }
+        const toolsetOptions = toolsetOptionsFor(spec, name);
+        if (typeof toolsetOptions === 'string') {
+            startupFailed.push({ name, reason: toolsetOptions });
+            continue;
+        }
+        let connectedTransport;
+        try {
+            connectedTransport =
+                transport.type === 'streamable-http' ? withSavedMcpOAuth(transport) : transport;
+        }
+        catch (error) {
+            startupFailed.push({ name, reason: reasonOf(error) });
+            continue;
+        }
         const client = new MCPClient({
             serverName: name,
-            transport,
+            transport: connectedTransport,
             ...(eraProbeTimeoutMs !== undefined ? { eraProbeTimeoutMs } : {}),
         });
+        const discovery = {
+            added: new Set(),
+            removed: new Set(),
+            changed: new Set(),
+            refused: new Map(),
+        };
         try {
             await withDeadline(client.connect(), deadline, `server "${name}"`);
-            const listed = await withDeadline(client.listTools(), deadline, `server "${name}" listing its tools`);
-            // Adapted once, then read twice. Adapting a second time to collect
-            // the names would build a parallel set of definitions bound to the
-            // same client — cheap today and exactly the kind of duplicate a
-            // future adapter with a side effect turns into a bug.
-            const adapted = listed.map((tool) => mcpToolToToolDefinition(tool, client, name));
-            tools.push(...adapted);
-            const summary = {
-                name,
-                toolCount: adapted.length,
-                tools: adapted.map((tool) => tool.name),
-            };
-            liveServers.push({ client, summary });
+            const discovered = await withDeadline(mcpToolset(client, {
+                ...toolsetOptions,
+                onDrift: ({ drift }) => {
+                    for (const item of drift.added)
+                        discovery.added.add(item);
+                    for (const item of drift.removed)
+                        discovery.removed.add(item);
+                    for (const item of drift.changed)
+                        discovery.changed.add(item);
+                },
+                onRefused: ({ kind, refused }) => discovery.refused.set(kind, refused),
+            }), deadline, `server "${name}" discovering its tools`);
+            const mounted = spec.requireApproval
+                ? discovered.map((entry) => requireApproval(entry))
+                : [...discovered];
+            toolsets.push(...mounted);
+            liveServers.push({ client, name, toolsets: mounted, discovery });
             clients.push(client);
         }
         catch (err) {
@@ -207,14 +463,28 @@ export async function connectMcpServers(config, options) {
     const current = () => {
         const connected = [];
         const failed = [...startupFailed];
-        for (const { client, summary } of liveServers) {
+        for (const { client, name, toolsets: serverToolsets, discovery } of liveServers) {
             const state = client.getState();
             if (state.status === 'connected') {
-                connected.push(summary);
+                const names = serverToolsets.flatMap((entry) => entry.tools().map((tool) => tool.name));
+                connected.push({
+                    name,
+                    toolCount: names.length,
+                    tools: names,
+                    drift: {
+                        added: [...discovery.added],
+                        removed: [...discovery.removed],
+                        changed: [...discovery.changed],
+                    },
+                    refused: [...discovery.refused.entries()].flatMap(([kind, items]) => items.map((item) => ({ kind, ...item }))),
+                    ...(state.serverInstructions !== undefined
+                        ? { instructions: state.serverInstructions }
+                        : {}),
+                });
                 continue;
             }
             failed.push({
-                name: summary.name,
+                name,
                 reason: state.error ??
                     (state.status === 'disconnected'
                         ? 'connection closed after startup'
@@ -224,7 +494,10 @@ export async function connectMcpServers(config, options) {
         return { connected, failed };
     };
     return {
-        tools,
+        get tools() {
+            return toolsets.flatMap((entry) => entry.tools());
+        },
+        toolsets,
         current,
         get connected() {
             return current().connected;
@@ -233,6 +506,7 @@ export async function connectMcpServers(config, options) {
             return current().failed;
         },
         close: async () => {
+            await Promise.all(toolsets.map((entry) => entry.close?.()));
             await Promise.all(clients.map((c) => withDeadline(c.disconnect(), CLOSE_TIMEOUT_MS, 'closing a tool server').catch(() => {
                 // Shutting down is best effort by definition: the process may
                 // already be gone, and nothing useful follows from saying so.

package/dist/integrations/mcp/servers.js.map

@@ -1 +1 @@
-{"version":3,"file":"servers.js","sourceRoot":"","sources":["../../../src/integrations/mcp/servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACN,SAAS,EAGT,uBAAuB,GACvB,MAAM,YAAY,CAAA;AAEnB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAmGrC;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAmB,EAAE,UAAkB;IACnE,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACrF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACzE,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QAC1B,OAAO,iDAAiD,CAAA;IACzD,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO;YACN,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI,CAAC,OAAiB;YAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU;SAC3B,CAAA;IACF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO;YACN,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,IAAI,CAAC,GAAa;YACvB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAA;IACF,CAAC;IACD,OAAO,yCAAyC,CAAA;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAI,IAAgB,EAAE,EAAU,EAAE,IAAY;IACxE,IAAI,KAAiC,CAAA;IACrC,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACzB,IAAI;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACzF,CAAC,CAAC;SACF,CAAC,CAAA;IACH,CAAC;YAAS,CAAC;QACV,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;AACF,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AAE7F;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAmB;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAA;IAChC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAA;IAC/C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,mEAAmE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,CAAA;AACV,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAmB;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAA;IACjC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,oEAAoE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,CAAA;AACV,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAoC,EACpC,OAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,MAAM,aAAa,GAAsB,EAAE,CAAA;IAC3C,MAAM,OAAO,GAAgB,EAAE,CAAA;IAC/B,MAAM,WAAW,GAGZ,EAAE,CAAA;IAEP,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YAC/C,SAAQ;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9C,SAAQ;QACT,CAAC;QACD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YAC3C,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;YACvD,SAAQ;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC5B,UAAU,EAAE,IAAI;YAChB,SAAS;YACT,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAA;QACF,IAAI,CAAC;YACJ,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG,CAAC,CAAA;YAClE,MAAM,MAAM,GAAG,MAAM,YAAY,CAChC,MAAM,CAAC,SAAS,EAAE,EAClB,QAAQ,EACR,WAAW,IAAI,qBAAqB,CACpC,CAAA;YACD,mEAAmE;YACnE,mEAAmE;YACnE,gEAAgE;YAChE,sDAAsD;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;YACjF,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;YACtB,MAAM,OAAO,GAAG;gBACf,IAAI;gBACJ,SAAS,EAAE,OAAO,CAAC,MAAM;gBACzB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACV,CAAA;YAC9B,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACrC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACnD,sEAAsE;YACtE,mEAAmE;YACnE,EAAE;YACF,mEAAmE;YACnE,oEAAoE;YACpE,6DAA6D;YAC7D,iEAAiE;YACjE,mEAAmE;YACnE,2DAA2D;YAC3D,IAAI,CAAC;gBACJ,MAAM,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,YAAY,IAAI,GAAG,CAAC,CAAA;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACR,qEAAqE;gBACrE,gEAAgE;YACjE,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,GAGd,EAAE;QACH,MAAM,SAAS,GAAyB,EAAE,CAAA;QAC1C,MAAM,MAAM,GAAsB,CAAC,GAAG,aAAa,CAAC,CAAA;QACpD,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACvB,SAAQ;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EACL,KAAK,CAAC,KAAK;oBACX,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc;wBAC/B,CAAC,CAAC,iCAAiC;wBACnC,CAAC,CAAC,iBAAiB,KAAK,CAAC,MAAM,EAAE,CAAC;aACpC,CAAC,CAAA;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;IAC7B,CAAC,CAAA;IAED,OAAO;QACN,KAAK;QACL,OAAO;QACP,IAAI,SAAS;YACZ,OAAO,OAAO,EAAE,CAAC,SAAS,CAAA;QAC3B,CAAC;QACD,IAAI,MAAM;YACT,OAAO,OAAO,EAAE,CAAC,MAAM,CAAA;QACxB,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClF,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0DAA0D;gBAC1D,iDAAiD;YAClD,CAAC,CAAC,CACF,CACD,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC"}
+{"version":3,"file":"servers.js","sourceRoot":"","sources":["../../../src/integrations/mcp/servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACN,iBAAiB,EACjB,IAAI,EACJ,4BAA4B,EAC5B,SAAS,GACT,MAAM,8BAA8B,CAAA;AAErC,OAAO,EACN,SAAS,EAET,kBAAkB,EAMlB,UAAU,EACV,eAAe,GACf,MAAM,YAAY,CAAA;AAEnB,OAAO,EACN,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,GACZ,MAAM,kBAAkB,CAAA;AAEzB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAA;AA4IrC;;;GAGG;AACH,MAAM,eAAe,GAAG,iCAAiC,CAAA;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,qBAAqB,CACpC,MAAwC,EACxC,GAAsB;IAEtB,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,IAAI,OAA2B,CAAA;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YACrE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;YACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,KAAK,CAAA;YACb,CAAC;YACD,OAAO,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,iBAAiB,OAAO,mDAAmD,CAAA;QACnF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAA;IACvB,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC3B,IAAmB,EACnB,UAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACrF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IACzE,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QAC1B,OAAO,iDAAiD,CAAA;IACzD,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/E,IAAI,OAAO,WAAW,KAAK,QAAQ;YAAE,OAAO,WAAW,CAAA;QACvD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI,CAAC,OAAiB;YAC/B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU;SAC3B,CAAA;IACF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3F,IAAI,OAAO,eAAe,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAA;QAC/D,OAAO;YACN,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,IAAI,CAAC,GAAa;YACvB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAA;IACF,CAAC;IACD,OAAO,yCAAyC,CAAA;AACjD,CAAC;AAED,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAyB,CAAA;AAE1D,SAAS,oBAAoB;IAC5B,OAAO,IAAI,kBAAkB,CAC5B,WAAW,EACX,GAAG,EACH,wDAAwD,EACxD,EAAE,CACF,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACzB,SAAsD;IAEtD,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,SAAS,CAAA;IAC1D,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,EAAE,CAAC;QAC/F,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,IAAI,QAAa,CAAA;IACjB,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,2BAA2B;IAC3B,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAA;IACpD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAEvD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAA;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAA;IACtB,MAAM,iBAAiB,GAAG,CAAC,KAAmB,EAAE,IAAkB,EAAqB,EAAE;QACxF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,kBAAkB,CAAC,4DAA4D,CAAC,CAAA;QAC3F,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,OAAO,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IACxD,CAAC,CAAA;IACD,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACjD,MAAM,kBAAkB,GAAG,SAAS,CACnC,QAAQ,EACR,SAAS,CAAC,GAAG,CACb,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACvE,CAAC;QACD,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,QAAQ,CAAA;QAC5C,sEAAsE;QACtE,uEAAuE;QACvE,kEAAkE;QAClE,MAAM,sBAAsB,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAC9E,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAA;QAC7E,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACrB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;gBACvC,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;gBACpD,kEAAkE;gBAClE,iEAAiE;gBACjE,IAAI,sBAAsB,KAAK,UAAU,OAAO,CAAC,YAAY,EAAE;oBAAE,OAAM;gBACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE;oBACnC,SAAS,EAAE,SAAS,CAAC,GAAG;oBACxB,mBAAmB;oBACnB,KAAK;oBACL,OAAO,EAAE,iBAAiB;iBAC1B,CAAC,CAAA;gBACF,IAAI,MAAM,KAAK,YAAY;oBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACpE,CAAC,CAAC,EAAE,CAAA;YACJ,iBAAiB,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;YAC7C,MAAM,YAAY,GAAG,OAAO,CAAA;YAC5B,KAAK,YAAY,CAAC,IAAI,CACrB,GAAG,EAAE;gBACJ,IAAI,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,YAAY,EAAE,CAAC;oBAC3D,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBACxC,CAAC;YACF,CAAC,EACD,GAAG,EAAE;gBACJ,IAAI,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,YAAY,EAAE,CAAC;oBAC3D,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBACxC,CAAC;YACF,CAAC,CACD,CAAA;QACF,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,OAAO,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;YAC/D,oEAAoE;YACpE,mEAAmE;YACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;YACtC,IAAI,CAAC,MAAM,IAAI,sBAAsB,KAAK,UAAU,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC3E,MAAM,oBAAoB,EAAE,CAAA;YAC7B,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAA;QACvC,IAAI,CAAC,OAAO;YAAE,MAAM,oBAAoB,EAAE,CAAA;QAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;QAC9D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,oBAAoB,EAAE,CAAA;QAC7B,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC,CAAC,CAAA;IACF,MAAM,UAAU,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtD,sEAAsE;QACtE,sEAAsE;QACtE,wCAAwC;QACxC,IAAI,KAAK,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACvE,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAE,MAAM,IAAI,0BAA0B,EAAE,CAAA;YACtE,OAAO,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IACC,KAAK,YAAY,iBAAiB;gBAClC,KAAK,YAAY,0BAA0B;gBAC3C,KAAK,YAAY,kBAAkB,EAClC,CAAC;gBACF,gEAAgE;gBAChE,+DAA+D;gBAC/D,iEAAiE;gBACjE,MAAM,oBAAoB,EAAE,CAAA;YAC7B,CAAC;YACD,MAAM,KAAK,CAAA;QACZ,CAAC;IACF,CAAC,CAAA;IACD,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC3C,CAAC;AAED,KAAK,UAAU,YAAY,CAAI,IAAgB,EAAE,EAAU,EAAE,IAAY;IACxE,IAAI,KAAiC,CAAA;IACrC,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACzB,IAAI;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAChC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,0BAA0B,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACzF,CAAC,CAAC;SACF,CAAC,CAAA;IACH,CAAC;YAAS,CAAC;QACV,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;AACF,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;AAE7F;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAmB;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAA;IAChC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAA;IAC/C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,mEAAmE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAA;IAC/F,CAAC;IACD,OAAO,EAAE,CAAA;AACV,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAmB;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAA;IACjC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACtC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,oEAAoE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,CAAA;AACV,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAmB,EAAE,IAAY;IAC3D,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,IACC,KAAK,KAAK,SAAS;YACnB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAC7F,CAAC;YACF,OAAO,GAAG,KAAK,mDAAmD,CAAA;QACnE,CAAC;IACF,CAAC;IACD,IACC,IAAI,CAAC,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAC9D,CAAC;QACF,OAAO,iDAAiD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAA;IAC1F,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACrF,OAAO,uCAAuC,CAAA;IAC/C,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC7F,OAAO,2CAA2C,CAAA;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,oCAAoC,CAAA;IAC5C,CAAC;IACD,OAAO;QACN,EAAE,EAAE,OAAO,IAAI,EAAE;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC7C,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAoC,EACpC,OAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,MAAM,aAAa,GAAsB,EAAE,CAAA;IAC3C,MAAM,OAAO,GAAgB,EAAE,CAAA;IAC/B,MAAM,WAAW,GAaZ,EAAE,CAAA;IAEP,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC/C,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAA;YACrE,SAAQ;QACT,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YACnC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YAC/C,SAAQ;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9C,SAAQ;QACT,CAAC;QACD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;QAClD,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;YAC3C,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAA;YACvD,SAAQ;QACT,CAAC;QACD,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACpD,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;YACpD,SAAQ;QACT,CAAC;QACD,IAAI,kBAAqC,CAAA;QACzC,IAAI,CAAC;YACJ,kBAAkB;gBACjB,SAAS,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACrD,SAAQ;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC5B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,kBAAkB;YAC7B,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAA;QACF,MAAM,SAAS,GAAG;YACjB,KAAK,EAAE,IAAI,GAAG,EAAU;YACxB,OAAO,EAAE,IAAI,GAAG,EAAU;YAC1B,OAAO,EAAE,IAAI,GAAG,EAAU;YAC1B,OAAO,EAAE,IAAI,GAAG,EAGb;SACH,CAAA;QACD,IAAI,CAAC;YACJ,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG,CAAC,CAAA;YAClE,MAAM,UAAU,GAAG,MAAM,YAAY,CACpC,UAAU,CAAC,MAAM,EAAE;gBAClB,GAAG,cAAc;gBACjB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;oBACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;wBAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBACzD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO;wBAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;oBAC7D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO;wBAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC9D,CAAC;gBACD,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;aACtE,CAAC,EACF,QAAQ,EACR,WAAW,IAAI,yBAAyB,CACxC,CAAA;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe;gBACnC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBACnD,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;YAClB,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAA;YACzB,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;YAChE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACnD,sEAAsE;YACtE,mEAAmE;YACnE,EAAE;YACF,mEAAmE;YACnE,oEAAoE;YACpE,6DAA6D;YAC7D,iEAAiE;YACjE,mEAAmE;YACnE,2DAA2D;YAC3D,IAAI,CAAC;gBACJ,MAAM,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,YAAY,IAAI,GAAG,CAAC,CAAA;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACR,qEAAqE;gBACrE,gEAAgE;YACjE,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,GAGd,EAAE;QACH,MAAM,SAAS,GAAyB,EAAE,CAAA;QAC1C,MAAM,MAAM,GAAsB,CAAC,GAAG,aAAa,CAAC,CAAA;QACpD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;gBACvF,SAAS,CAAC,IAAI,CAAC;oBACd,IAAI;oBACJ,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE;wBACN,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;wBAC3B,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;wBAC/B,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;qBAC/B;oBACD,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CACnE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CACxC;oBACD,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;wBACzC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,kBAAkB,EAAE;wBAC5C,CAAC,CAAC,EAAE,CAAC;iBACN,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,MAAM,EACL,KAAK,CAAC,KAAK;oBACX,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc;wBAC/B,CAAC,CAAC,iCAAiC;wBACnC,CAAC,CAAC,iBAAiB,KAAK,CAAC,MAAM,EAAE,CAAC;aACpC,CAAC,CAAA;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;IAC7B,CAAC,CAAA;IAED,OAAO;QACN,IAAI,KAAK;YACR,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,QAAQ;QACR,OAAO;QACP,IAAI,SAAS;YACZ,OAAO,OAAO,EAAE,CAAC,SAAS,CAAA;QAC3B,CAAC;QACD,IAAI,MAAM;YACT,OAAO,OAAO,EAAE,CAAC,MAAM,CAAA;QACxB,CAAC;QACD,KAAK,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;YAC3D,MAAM,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAClF,8DAA8D;gBAC9D,8DAA8D;gBAC9D,0DAA0D;gBAC1D,iDAAiD;YAClD,CAAC,CAAC,CACF,CACD,CAAA;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/integrations/mcp/user-config.d.ts

@@ -0,0 +1,25 @@
+import { type UserConfigWriteOptions } from '../../config/user-config.js';
+import type { McpServerSpec } from './servers.js';
+export interface UserMcpServer {
+    readonly name: string;
+    readonly spec: unknown;
+}
+/** Read only the user's own entries, not project/profile/managed overrides. */
+export declare function readUserMcpServers(opts?: UserConfigWriteOptions): readonly UserMcpServer[];
+export declare function isUserMcpName(name: string): boolean;
+/** Never replace an entry silently: the existing server may carry permissions. */
+export declare function addUserMcpServer(name: string, spec: McpServerSpec, opts?: UserConfigWriteOptions): string;
+export declare function removeUserMcpServer(name: string, opts?: UserConfigWriteOptions): boolean;
+export interface UserMcpServerSummary {
+    readonly name: string;
+    readonly transport: 'stdio' | 'http' | 'invalid';
+    readonly command?: string;
+    readonly endpoint?: string;
+    readonly argumentCount?: number;
+    readonly envNames?: readonly string[];
+    readonly headerNames?: readonly string[];
+    readonly inheritEnv?: readonly string[];
+}
+/** Display metadata only. Headers, environment values, and argv can contain secrets. */
+export declare function summarizeUserMcpServer(entry: UserMcpServer): UserMcpServerSummary;
+//# sourceMappingURL=user-config.d.ts.map