@opentabs-dev/mcp-server 0.0.19

package/dist/manifest-schema.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Zod schema for runtime validation of opentabs-plugin.json manifests.
+ *
+ * Validates the shape and types of plugin manifests read from disk,
+ * producing clear error messages for malformed files instead of cryptic
+ * downstream crashes from unchecked casts.
+ */
+import type { PluginManifest } from '@opentabs-dev/shared';
+/**
+ * Parse and validate a plugin manifest JSON string.
+ * Throws a descriptive error on invalid input.
+ */
+export declare const parseManifest: (raw: string, sourcePath: string) => PluginManifest;
+//# sourceMappingURL=manifest-schema.d.ts.map

package/dist/manifest-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-schema.d.ts","sourceRoot":"","sources":["../src/manifest-schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA+B3D;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,YAAY,MAAM,KAAG,cAe/D,CAAC"}

package/dist/manifest-schema.js

@@ -0,0 +1,51 @@
+/**
+ * Zod schema for runtime validation of opentabs-plugin.json manifests.
+ *
+ * Validates the shape and types of plugin manifests read from disk,
+ * producing clear error messages for malformed files instead of cryptic
+ * downstream crashes from unchecked casts.
+ */
+import { z } from 'zod';
+const manifestToolSchema = z.object({
+    name: z.string().min(1, 'Tool name is required'),
+    displayName: z.string().min(1, 'Tool displayName is required'),
+    description: z
+        .string()
+        .min(1, 'Tool description is required')
+        .max(1000, 'Tool description must be at most 1000 characters'),
+    icon: z.string().min(1, 'Tool icon is required'),
+    input_schema: z.record(z.string(), z.unknown()),
+    output_schema: z.record(z.string(), z.unknown()),
+});
+const pluginManifestSchema = z.looseObject({
+    name: z.string().min(1, 'Plugin name is required'),
+    version: z.string().min(1, 'Plugin version is required'),
+    displayName: z.string().min(1, 'Plugin displayName is required'),
+    description: z
+        .string()
+        .min(1, 'Plugin description is required')
+        .max(500, 'Plugin description must be at most 500 characters'),
+    url_patterns: z.array(z.string()).min(1, 'At least one URL pattern is required'),
+    tools: z.array(manifestToolSchema).min(1, 'At least one tool is required'),
+    adapterHash: z.string().optional(),
+});
+/**
+ * Parse and validate a plugin manifest JSON string.
+ * Throws a descriptive error on invalid input.
+ */
+export const parseManifest = (raw, sourcePath) => {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`Invalid JSON in manifest at ${sourcePath}`);
+    }
+    const result = pluginManifestSchema.safeParse(parsed);
+    if (!result.success) {
+        const issues = result.error.issues.map(issue => `  - ${issue.path.join('.')}: ${issue.message}`).join('\n');
+        throw new Error(`Invalid plugin manifest at ${sourcePath}:\n${issues}`);
+    }
+    return result.data;
+};
+//# sourceMappingURL=manifest-schema.js.map

package/dist/manifest-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-schema.js","sourceRoot":"","sources":["../src/manifest-schema.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IAC9D,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACtC,GAAG,CAAC,IAAI,EAAE,kDAAkD,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;IAChE,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;SACxC,GAAG,CAAC,GAAG,EAAE,mDAAmD,CAAC;IAChE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,sCAAsC,CAAC;IAChF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;IAC1E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,UAAkB,EAAkB,EAAE;IAC/E,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,MAAM,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC,CAAC"}

package/dist/mcp-setup.d.ts

@@ -0,0 +1,131 @@
+/**
+ * MCP server factory.
+ * Creates a low-level Server instance and registers tools dynamically from
+ * discovered plugins and built-in browser tools.
+ *
+ * Uses the low-level Server API (not McpServer) because plugin manifests provide
+ * raw JSON Schema objects for tool input/output — McpServer.registerTool() requires
+ * Zod schemas and cannot accept pre-computed JSON Schema. The Server class deprecation
+ * message acknowledges this: "Only use Server for advanced use cases."
+ *
+ * The Server import uses dynamic import() to satisfy import-x/no-deprecated. The
+ * @typescript-eslint/no-deprecated rule is addressed by typing through the awaited
+ * module rather than referencing the deprecated class name directly.
+ *
+ * Hot reload:
+ *   `registerMcpHandlers` is separated from `createMcpServer` so that existing
+ *   MCP sessions can have their tools/list and tools/call handler logic refreshed
+ *   on hot reload. After bun --hot re-evaluates this module, calling
+ *   `registerMcpHandlers(server, state)` on each existing session replaces the
+ *   old handler closures with new ones that reference the fresh module imports
+ *   (dispatchToExtension, sendInvocationStart, etc.).
+ */
+import type { ServerState } from './state.js';
+/**
+ * Recursively remove dangerous keys from objects to prevent prototype pollution
+ * in MCP clients that use naive JSON deserialization.
+ */
+declare const sanitizeOutput: (obj: unknown, depth?: number) => unknown;
+/** Extra context passed to request handlers by the MCP SDK */
+interface RequestHandlerExtra {
+    signal: AbortSignal;
+    sessionId?: string;
+    _meta?: {
+        progressToken?: string | number;
+    };
+    sendNotification: (notification: {
+        method: string;
+        params?: Record<string, unknown>;
+    }) => Promise<void>;
+}
+/** The instantiated MCP server with the methods we use */
+interface McpServerInstance {
+    setRequestHandler: (schema: unknown, handler: (request: {
+        params: {
+            name: string;
+            arguments?: Record<string, unknown>;
+            uri?: string;
+        };
+    }, extra: RequestHandlerExtra) => unknown) => void;
+    connect: (transport: unknown) => Promise<void>;
+    sendToolListChanged: () => Promise<void>;
+    sendResourceListChanged: () => Promise<void>;
+    sendPromptListChanged: () => Promise<void>;
+    sendLoggingMessage: (params: {
+        level: string;
+        logger?: string;
+        data?: unknown;
+    }) => Promise<void>;
+}
+/**
+ * Rebuild cached browser tool JSON schemas on state.
+ * Called after state.browserTools changes (during reload).
+ * Plugin tool lookups are handled by the immutable registry.
+ */
+declare const rebuildCachedBrowserTools: (state: ServerState) => void;
+/**
+ * Register (or re-register) tools/list and tools/call handlers on an MCP Server
+ * instance. Each handler creates fresh closures over the current module's imports
+ * (dispatchToolToExtension, sendInvocationStart, etc.), ensuring that after hot
+ * reload, existing sessions invoke the latest handler logic.
+ *
+ * Called by:
+ *   1. `createMcpServer` — for new sessions
+ *   2. Hot reload sequence in reload.ts — for existing sessions
+ */
+declare const registerMcpHandlers: (server: McpServerInstance, state: ServerState) => void;
+/**
+ * Create a new low-level MCP Server instance with the OpenTabs server info
+ * and register handlers for tools/list and tools/call.
+ */
+declare const createMcpServer: (state: ServerState) => Promise<McpServerInstance>;
+/**
+ * Notify a connected MCP client that the tool list has changed.
+ * Logs a warning if the notification fails (e.g., transport in a bad state)
+ * to aid debugging when a client doesn't see a tool update.
+ */
+declare const notifyToolListChanged: (server: McpServerInstance) => void;
+/**
+ * Notify a connected MCP client that the resource list has changed.
+ */
+declare const notifyResourceListChanged: (server: McpServerInstance) => void;
+/**
+ * Notify a connected MCP client that the prompt list has changed.
+ */
+declare const notifyPromptListChanged: (server: McpServerInstance) => void;
+/**
+ * Returns the list of enabled tools for MCP tools/list responses.
+ * Plugin tools are filtered by the toolConfig (disabled tools are excluded).
+ * Browser tools are filtered by the browserToolPolicy (disabled tools are excluded).
+ */
+export declare const getEnabledToolsList: (state: ServerState) => Array<{
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+}>;
+/** Result of checking whether a plugin tool is callable */
+export interface ToolCallableOk {
+    ok: true;
+    pluginName: string;
+    toolName: string;
+}
+/** A failed tool-callable check with a human-readable error message. */
+export interface ToolCallableError {
+    ok: false;
+    error: string;
+}
+/** Discriminated union returned by {@link checkToolCallable} indicating success or failure. */
+export type ToolCallableResult = ToolCallableOk | ToolCallableError;
+/**
+ * Check if a prefixed plugin tool name is callable: exists in the tool lookup
+ * and is enabled in the tool config. Browser tools are handled separately
+ * (before this check) in the tools/call handler.
+ *
+ * @param state - Server state containing the plugin registry and tool config
+ * @param prefixedToolName - Fully prefixed tool name (e.g., 'slack_send_message')
+ * @returns An ok result with pluginName/toolName if callable, or an error result with a message
+ */
+export declare const checkToolCallable: (state: ServerState, prefixedToolName: string) => ToolCallableResult;
+export type { McpServerInstance, RequestHandlerExtra };
+export { createMcpServer, registerMcpHandlers, rebuildCachedBrowserTools, notifyToolListChanged, notifyResourceListChanged, notifyPromptListChanged, sanitizeOutput, };
+//# sourceMappingURL=mcp-setup.d.ts.map

package/dist/mcp-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-setup.d.ts","sourceRoot":"","sources":["../src/mcp-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA0BH,OAAO,KAAK,EAAE,WAAW,EAAwE,MAAM,YAAY,CAAC;AASpH;;;GAGG;AACH,QAAA,MAAM,cAAc,GAAI,KAAK,OAAO,EAAE,cAAS,KAAG,OAQjD,CAAC;AA6EF,8DAA8D;AAC9D,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAC5C,gBAAgB,EAAE,CAAC,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzG;AAED,0DAA0D;AAC1D,UAAU,iBAAiB;IACzB,iBAAiB,EAAE,CACjB,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,CACP,OAAO,EAAE;QAAE,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,EACxF,KAAK,EAAE,mBAAmB,KACvB,OAAO,KACT,IAAI,CAAC;IACV,OAAO,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,mBAAmB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,uBAAuB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,qBAAqB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,kBAAkB,EAAE,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnG;AA2DD;;;;GAIG;AACH,QAAA,MAAM,yBAAyB,GAAI,OAAO,WAAW,KAAG,IAWvD,CAAC;AAEF;;;;;;;;;GASG;AACH,QAAA,MAAM,mBAAmB,GAAI,QAAQ,iBAAiB,EAAE,OAAO,WAAW,KAAG,IAqc5E,CAAC;AAEF;;;GAGG;AACH,QAAA,MAAM,eAAe,GAAU,OAAO,WAAW,KAAG,OAAO,CAAC,iBAAiB,CAiB5E,CAAC;AAEF;;;;GAIG;AACH,QAAA,MAAM,qBAAqB,GAAI,QAAQ,iBAAiB,KAAG,IAI1D,CAAC;AAEF;;GAEG;AACH,QAAA,MAAM,yBAAyB,GAAI,QAAQ,iBAAiB,KAAG,IAI9D,CAAC;AAEF;;GAEG;AACH,QAAA,MAAM,uBAAuB,GAAI,QAAQ,iBAAiB,KAAG,IAI5D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,OAAO,WAAW,KACjB,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAyBnF,CAAC;AAEF,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,IAAI,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACf;AAED,+FAA+F;AAC/F,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAEpE;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,WAAW,EAAE,kBAAkB,MAAM,KAAG,kBAKhF,CAAC;AAEF,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;AACvD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,cAAc,GACf,CAAC"}