@nimbus-dev/connectors 0.2.2 → 0.2.4

package/connectors/iac/src/tools.ts

@@ -1,4 +1,8 @@
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { z } from "zod";
+import { awsCliArg, cliArg } from "../../../shared/cli-json-kit.ts";
 import type { ConsentServer } from "../../../shared/consent-kit.ts";
 import { createWriteToolRegistrar } from "../../../shared/consent-kit.ts";
 import {
@@ -8,6 +12,49 @@ import {
 } from "../../../shared/mcp-tool-kit.ts";
 import { runCliOkThrowing } from "../../../shared/run-cli-json.ts";
 
+/**
+ * The most a template may be when it is deployed without an S3 bucket, which this tool does not
+ * take: `aws cloudformation deploy` refuses a larger one itself, and only after the prompt.
+ */
+const TEMPLATE_MAX_BYTES = 51_200;
+
+/**
+ * A CloudFormation template. It reaches the AWS CLI as a file, never as an argument (see
+ * {@link withTemplateFile}), so none of the argument rules apply to it: a YAML template may well
+ * start with `---`. Its size is refused here, in the schema, because no consent can lift it: a
+ * larger template would be put to the human, spend a unit of write budget, and then fail. The
+ * character bound is the one a client is shown; no string over it can be within the byte bound.
+ */
+const templateDocument = z
+  .string()
+  .min(1)
+  .max(TEMPLATE_MAX_BYTES)
+  .refine((t) => new TextEncoder().encode(t).length <= TEMPLATE_MAX_BYTES, {
+    message: `must be at most ${String(TEMPLATE_MAX_BYTES)} bytes as UTF-8, the most aws cloudformation deploy takes without an S3 bucket`,
+  });
+
+/**
+ * Run `body` with `template` written to a file of its own, removed afterwards however `body` ends.
+ *
+ * `aws cloudformation deploy` takes a template only as `--template-file`, and passing one as an
+ * argument would not work anyway: a template can run past the 32,767 characters a Windows command
+ * line holds, and an `aws` that is a batch file, as a pip-installed v1 is, has cmd.exe parse every
+ * quote in it.
+ */
+async function withTemplateFile<T>(
+  template: string,
+  body: (path: string) => Promise<T>,
+): Promise<T> {
+  const dir = await mkdtemp(join(tmpdir(), "nimbus-cfn-"));
+  try {
+    const path = join(dir, "template");
+    await writeFile(path, template, { encoding: "utf8", mode: 0o600, flag: "wx" });
+    return await body(path);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+}
+
 /** Tool names exposed by this connector — for contract/introspection tests. */
 export const IAC_TOOL_NAMES = [
   "iac_terraform_plan",
@@ -39,11 +86,14 @@ export function registerIacTools(
   reg(
     "iac_terraform_plan",
     "Run terraform plan in a directory.",
-    z.object({ workingDirectory: z.string().min(1) }),
+    z.object({ workingDirectory: cliArg }),
     async (p) => {
-      await runCliOkThrowing(["terraform", "-chdir", p.workingDirectory, "plan", "-input=false"], {
-        ...processEnv,
-      });
+      await runCliOkThrowing(
+        ["terraform", `-chdir=${p.workingDirectory}`, "plan", "-input=false"],
+        {
+          ...processEnv,
+        },
+      );
       return jsonResult({ ok: true });
     },
   );
@@ -56,10 +106,10 @@ export function registerIacTools(
       scopeTargetOf: (p) => ({ kind: "dir", value: p.workingDirectory }),
     },
     "Run terraform apply.",
-    z.object({ workingDirectory: z.string().min(1) }),
+    z.object({ workingDirectory: cliArg }),
     async (p) => {
       await runCliOkThrowing(
-        ["terraform", "-chdir", p.workingDirectory, "apply", "-auto-approve", "-input=false"],
+        ["terraform", `-chdir=${p.workingDirectory}`, "apply", "-auto-approve", "-input=false"],
         { ...processEnv },
       );
       return jsonResult({ ok: true });
@@ -78,10 +128,10 @@ export function registerIacTools(
       scopeTargetOf: (p) => ({ kind: "dir", value: p.workingDirectory }),
     },
     "Run terraform destroy.",
-    z.object({ workingDirectory: z.string().min(1) }),
+    z.object({ workingDirectory: cliArg }),
     async (p) => {
       await runCliOkThrowing(
-        ["terraform", "-chdir", p.workingDirectory, "destroy", "-auto-approve", "-input=false"],
+        ["terraform", `-chdir=${p.workingDirectory}`, "destroy", "-auto-approve", "-input=false"],
         { ...processEnv },
       );
       return jsonResult({ ok: true });
@@ -97,23 +147,31 @@ export function registerIacTools(
     },
     "Deploy a CloudFormation stack via AWS CLI.",
     z.object({
-      stackName: z.string().min(1),
-      templateBody: z.string().min(1),
+      stackName: awsCliArg,
+      templateBody: templateDocument,
     }),
     async (p) => {
-      await runCliOkThrowing(
-        [
-          "aws",
-          "cloudformation",
-          "deploy",
-          "--stack-name",
-          p.stackName,
-          "--template-body",
-          p.templateBody,
-          "--capabilities",
-          "CAPABILITY_IAM",
-        ],
-        { ...processEnv },
+      await withTemplateFile(p.templateBody, (templateFile) =>
+        runCliOkThrowing(
+          [
+            "aws",
+            "cloudformation",
+            "deploy",
+            "--stack-name",
+            p.stackName,
+            "--template-file",
+            templateFile,
+            "--capabilities",
+            "CAPABILITY_IAM",
+            // A deploy of a template that changes nothing has done what was asked, not failed.
+            "--no-fail-on-empty-changeset",
+          ],
+          // The file is UTF-8. Left to itself the CLI reads it in the locale's encoding, and on a
+          // Windows machine using cp1252 a template holding "Á" fails to decode while one holding
+          // "é" deploys as "é". AWS CLI v2 reads AWS_CLI_FILE_ENCODING and ignores PYTHONUTF8; v1,
+          // plain Python, reads PYTHONUTF8 and ignores the other. Both are set.
+          { ...processEnv, AWS_CLI_FILE_ENCODING: "UTF-8", PYTHONUTF8: "1" },
+        ),
       );
       return jsonResult({ ok: true });
     },
@@ -122,7 +180,7 @@ export function registerIacTools(
   reg(
     "iac_pulumi_preview",
     "Run pulumi preview in a stack directory.",
-    z.object({ workingDirectory: z.string().min(1) }),
+    z.object({ workingDirectory: cliArg }),
     async (p) => {
       await runCliOkThrowing(
         ["pulumi", "preview", "--cwd", p.workingDirectory, "--non-interactive"],
@@ -140,7 +198,7 @@ export function registerIacTools(
       scopeTargetOf: (p) => ({ kind: "dir", value: p.workingDirectory }),
     },
     "Run pulumi up.",
-    z.object({ workingDirectory: z.string().min(1) }),
+    z.object({ workingDirectory: cliArg }),
     async (p) => {
       await runCliOkThrowing(
         ["pulumi", "up", "--yes", "--cwd", p.workingDirectory, "--non-interactive"],

package/connectors/imap/src/server.ts

@@ -10,6 +10,7 @@
 
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { envInt } from "../../../shared/imap-tool-kit.ts";
 import { createImapFlowClient, createNodemailerMailer } from "../../../shared/imapflow-adapter.ts";
 import { requireProcessEnv } from "../../../shared/mcp-tool-kit.ts";
@@ -22,7 +23,10 @@ const SMTPS_PORT = 465;
 
 const smtpPort = envInt("IMAP_SMTP_PORT", DEFAULT_SMTP_PORT);
 
-const server = new McpServer({ name: "nimbus-imap", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-imap", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerImapTools(
   server,

package/connectors/jenkins/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerJenkinsTools } from "./tools.ts";
 
-const mcp = new McpServer({ name: "nimbus-jenkins", version: "0.1.0" });
+const mcp = new McpServer(
+  { name: "nimbus-jenkins", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerJenkinsTools(mcp);
 

package/connectors/jira/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerJiraTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-jira", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-jira", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerJiraTools(server);
 

package/connectors/kubernetes/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerKubernetesTools } from "./tools.ts";
 
-const mcp = new McpServer({ name: "nimbus-kubernetes", version: "0.1.0" });
+const mcp = new McpServer(
+  { name: "nimbus-kubernetes", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerKubernetesTools(mcp);
 

package/connectors/kubernetes/src/tools.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { cliArg } from "../../../shared/cli-json-kit.ts";
 import type { ConsentServer } from "../../../shared/consent-kit.ts";
 import { createWriteToolRegistrar } from "../../../shared/consent-kit.ts";
 import {
@@ -34,7 +35,7 @@ async function kubectlJson(rest: string[]): Promise<unknown> {
   return runCliJsonThrowing(cmd, kubeEnv());
 }
 
-const optionalNamespaceSchema = z.object({ namespace: z.string().min(1).optional() });
+const optionalNamespaceSchema = z.object({ namespace: cliArg.optional() });
 
 async function k8sListNamespacedResource(p: { namespace?: string | undefined }, resource: string) {
   const ns = p.namespace ?? "default";
@@ -92,9 +93,9 @@ export function registerKubernetesTools(
     },
     "Restart a rollout (e.g. deployment).",
     z.object({
-      namespace: z.string().min(1).optional(),
-      resourceType: z.string().min(1),
-      name: z.string().min(1),
+      namespace: cliArg.optional(),
+      resourceType: cliArg,
+      name: cliArg,
     }),
     async (p) => {
       const ns = p.namespace ?? "default";
@@ -117,8 +118,8 @@ export function registerKubernetesTools(
     },
     "Delete a pod.",
     z.object({
-      namespace: z.string().min(1).optional(),
-      podName: z.string().min(1),
+      namespace: cliArg.optional(),
+      podName: cliArg,
     }),
     async (p) => {
       const ns = p.namespace ?? "default";
@@ -137,8 +138,8 @@ export function registerKubernetesTools(
     },
     "Scale a deployment.",
     z.object({
-      namespace: z.string().min(1).optional(),
-      deploymentName: z.string().min(1),
+      namespace: cliArg.optional(),
+      deploymentName: cliArg,
       replicas: z.number().int().min(0),
     }),
     async (p) => {

package/connectors/linear/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerLinearTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-linear", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-linear", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerLinearTools(server);
 

package/connectors/notion/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerNotionTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-notion", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-notion", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerNotionTools(server);
 

package/connectors/obsidian/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerObsidianTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-obsidian", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-obsidian", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerObsidianTools(server);
 

package/connectors/onedrive/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerOnedriveTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-onedrive", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-onedrive", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerOnedriveTools(server);
 

package/connectors/outlook/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerOutlookTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-outlook", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-outlook", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerOutlookTools(server);
 

package/connectors/pagerduty/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerPagerdutyTools } from "./tools.ts";
 
-const mcp = new McpServer({ name: "nimbus-pagerduty", version: "0.1.0" });
+const mcp = new McpServer(
+  { name: "nimbus-pagerduty", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerPagerdutyTools(mcp);
 

package/connectors/protonmail/src/server.ts

@@ -9,6 +9,7 @@
 
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { optionalEnv } from "../../../shared/env-json-api.ts";
 import { envInt } from "../../../shared/imap-tool-kit.ts";
 import { createImapFlowClient, createNodemailerMailer } from "../../../shared/imapflow-adapter.ts";
@@ -28,7 +29,10 @@ const DEFAULT_SMTP_PORT = 1025;
  */
 const BRIDGE_TLS = { secure: false, rejectUnauthorized: false } as const;
 
-const server = new McpServer({ name: "nimbus-protonmail", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-protonmail", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerProtonmailTools(
   server,

package/connectors/sagemaker/src/tools.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import {
   asArray,
-  cliArg,
+  awsCliArg,
   createCliJsonRunner,
   isRecord,
   strField,
@@ -13,9 +13,9 @@ import type { ZodToolRegistrar } from "../../../shared/run-read-only-mcp-connect
 /**
  * The argv-injection guard every SageMaker model name passes through on its way to the
  * `aws sagemaker` CLI. Re-exported so this connector's own test can assert the guard rejects a
- * `-`-prefixed value.
+ * `-`-prefixed value, and one the CLI would replace by a file's contents (`file://<path>`).
  */
-export { cliArg };
+export { awsCliArg };
 
 /**
  * Amazon SageMaker (Tier-3, metadata-only) MCP tool surface. ALL tools index
@@ -65,7 +65,7 @@ export function registerSagemakerTools(reg: ZodToolRegistrar): void {
     "sagemaker_list",
     "List Amazon SageMaker models — METADATA ONLY (`aws sagemaker list-models`). Each entry carries `ModelName`, `ModelArn`, and `CreationTime`. Optionally filter by a `nameContains` substring on the model name. Never invokes an endpoint and never fetches inference / training / model-artifact data.",
     z.object({
-      nameContains: cliArg.optional(),
+      nameContains: awsCliArg.optional(),
     }),
     async (p) => {
       const args = ["list-models", "--max-results", PAGE];
@@ -80,7 +80,7 @@ export function registerSagemakerTools(reg: ZodToolRegistrar): void {
     "sagemaker_get",
     "Fetch one Amazon SageMaker model's METADATA (`aws sagemaker describe-model`). Returns the model object including `ModelName`, `ModelArn`, `PrimaryContainer` (container `Image` reference + `ModelDataUrl` S3 pointer — a URI string, NOT the model bytes), `ExecutionRoleArn`, and `CreationTime`. No inference, training, or model-artifact data is returned — registry metadata only.",
     z.object({
-      modelName: cliArg,
+      modelName: awsCliArg,
     }),
     async (p) => {
       return jsonResult(await sagemakerCli(["describe-model", "--model-name", p.modelName]));

package/connectors/slack/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerSlackTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-slack", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-slack", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerSlackTools(server);
 

package/connectors/teams/src/server.ts

@@ -1,8 +1,12 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CONSENT_SERVER_CAPABILITIES } from "../../../shared/consent-kit.ts";
 import { registerTeamsTools } from "./tools.ts";
 
-const server = new McpServer({ name: "nimbus-teams", version: "0.1.0" });
+const server = new McpServer(
+  { name: "nimbus-teams", version: "0.1.0" },
+  { capabilities: CONSENT_SERVER_CAPABILITIES },
+);
 
 registerTeamsTools(server);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nimbus-dev/connectors",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "publishConfig": {
     "access": "public"
   },