@pellux/goodvibes-sdk 0.18.14 → 0.18.16

package/dist/_internal/platform/mcp/client.d.ts

@@ -0,0 +1,78 @@
+import type { McpServerConfig } from '@pellux/goodvibes-sdk/platform/mcp/config';
+export interface McpProcessSpec {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+    summary?: string;
+    sandboxSessionId?: string;
+}
+export interface McpToolInfo {
+    name: string;
+    description: string;
+}
+export interface McpToolSchema extends McpToolInfo {
+    inputSchema: Record<string, unknown>;
+}
+export declare class McpClient {
+    private config;
+    private options?;
+    private proc;
+    private nextId;
+    private pendingRequests;
+    private buffer;
+    private readLoopRunning;
+    private restartCount;
+    private initialized;
+    /** Cache: tool name → full schema (populated lazily on first callTool) */
+    private schemaCache;
+    /** Minimal tool info loaded at connect time (name + description only) */
+    private toolInfoCache;
+    constructor(config: McpServerConfig, options?: {
+        timeout?: number;
+        processSpec?: McpProcessSpec;
+    } | undefined);
+    get name(): string;
+    get isConnected(): boolean;
+    /**
+     * connect — Start the server process and perform MCP handshake (initialize).
+     * After connect, listTools() is available.
+     */
+    connect(): Promise<void>;
+    /**
+     * listTools — Return tool names and descriptions (progressive loading).
+     * Full schemas are NOT fetched here; call getToolSchema() to get them.
+     */
+    listTools(): Promise<McpToolInfo[]>;
+    /**
+     * getToolSchema — Fetch full JSON schema for a tool (lazy, cached).
+     * MCP protocol provides full schemas in tools/list; we cache them on first access.
+     */
+    getToolSchema(toolName: string): Promise<McpToolSchema | null>;
+    /**
+     * callTool — Execute a tool on the MCP server.
+     * Fetches full schema on first use (if not already cached).
+     */
+    callTool(toolName: string, args: Record<string, unknown>): Promise<unknown>;
+    /**
+     * disconnect — Stop the server process and clean up.
+     */
+    disconnect(): Promise<void>;
+    private _startProcess;
+    /** Perform MCP initialize handshake. */
+    private _initialize;
+    /** Send a JSON-RPC request; returns the result. */
+    private _request;
+    /** Send a JSON-RPC notification (no response expected). */
+    private _notify;
+    private _startReadLoop;
+    private _processBuffer;
+    private _dispatchLine;
+    private _scheduleRestart;
+    /**
+     * ping — Send a ping to check if server is healthy.
+     * Returns true if server responds within PING_TIMEOUT_MS.
+     */
+    ping(): Promise<boolean>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/_internal/platform/mcp/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/mcp/client.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAGjF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AA2BD,qBAAa,SAAS;IAgBlB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,OAAO,CAAC;IAhBlB,OAAO,CAAC,IAAI,CAA6C;IACzD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,eAAe,CAAqC;IAC5D,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,WAAW,CAAS;IAE5B,0EAA0E;IAC1E,OAAO,CAAC,WAAW,CAAoC;IAEvD,yEAAyE;IACzE,OAAO,CAAC,aAAa,CAA8B;gBAGzC,MAAM,EAAE,eAAe,EACvB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,cAAc,CAAA;KAAE,YAAA;IAGtE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,WAAW,IAAI,OAAO,CAOzB;IAED;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAczC;;;OAGG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAyBpE;;;OAGG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAWjF;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YA2BnB,aAAa;IAyB3B,wCAAwC;YAC1B,WAAW;IAgBzB,mDAAmD;IACnD,OAAO,CAAC,QAAQ;IAgChB,2DAA2D;IAC3D,OAAO,CAAC,OAAO;IAUf,OAAO,CAAC,cAAc;IAqCtB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,aAAa;IA2BrB,OAAO,CAAC,gBAAgB;IAmBxB;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;CAS/B"}

package/dist/_internal/platform/mcp/client.js

@@ -0,0 +1,331 @@
+/**
+ * McpClient — connects to a single MCP server process via stdio JSON-RPC 2.0.
+ *
+ * Protocol: newline-delimited JSON (each message is one JSON line on stdout/stdin).
+ * Progressive loading: listTools() returns names + descriptions only.
+ * getToolSchema() fetches full inputSchema on demand and caches it.
+ */
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
+import { VERSION } from '../version.js';
+import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
+const DEFAULT_TIMEOUT_MS = 30_000;
+const PING_TIMEOUT_MS = 5_000;
+const RESTART_DELAY_MS = 2_000;
+const MAX_RESTART_ATTEMPTS = 3;
+export class McpClient {
+    config;
+    options;
+    proc = null;
+    nextId = 1;
+    pendingRequests = new Map();
+    buffer = '';
+    readLoopRunning = false;
+    restartCount = 0;
+    initialized = false;
+    /** Cache: tool name → full schema (populated lazily on first callTool) */
+    schemaCache = new Map();
+    /** Minimal tool info loaded at connect time (name + description only) */
+    toolInfoCache = null;
+    constructor(config, options) {
+        this.config = config;
+        this.options = options;
+    }
+    get name() {
+        return this.config.name;
+    }
+    get isConnected() {
+        if (!this.proc)
+            return false;
+        try {
+            return this.proc.exitCode === null;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * connect — Start the server process and perform MCP handshake (initialize).
+     * After connect, listTools() is available.
+     */
+    async connect() {
+        if (this.proc && this.isConnected)
+            return;
+        await this._startProcess();
+        await this._initialize();
+    }
+    /**
+     * listTools — Return tool names and descriptions (progressive loading).
+     * Full schemas are NOT fetched here; call getToolSchema() to get them.
+     */
+    async listTools() {
+        if (!this.isConnected) {
+            throw new Error(`McpClient(${this.config.name}): not connected`);
+        }
+        if (this.toolInfoCache)
+            return this.toolInfoCache;
+        const result = await this._request('tools/list');
+        this.toolInfoCache = (result.tools ?? []).map((t) => ({
+            name: t.name,
+            description: t.description ?? '',
+        }));
+        return this.toolInfoCache;
+    }
+    /**
+     * getToolSchema — Fetch full JSON schema for a tool (lazy, cached).
+     * MCP protocol provides full schemas in tools/list; we cache them on first access.
+     */
+    async getToolSchema(toolName) {
+        if (this.schemaCache.has(toolName)) {
+            return this.schemaCache.get(toolName);
+        }
+        if (!this.isConnected) {
+            throw new Error(`McpClient(${this.config.name}): not connected`);
+        }
+        // Fetch all tools with full schemas and cache them all at once
+        const result = await this._request('tools/list');
+        for (const t of result.tools ?? []) {
+            this.schemaCache.set(t.name, {
+                name: t.name,
+                description: t.description ?? '',
+                inputSchema: t.inputSchema ?? { type: 'object', properties: {} },
+            });
+        }
+        return this.schemaCache.get(toolName) ?? null;
+    }
+    /**
+     * callTool — Execute a tool on the MCP server.
+     * Fetches full schema on first use (if not already cached).
+     */
+    async callTool(toolName, args) {
+        if (!this.isConnected) {
+            throw new Error(`McpClient(${this.config.name}): not connected`);
+        }
+        // Ensure schema is cached on first use
+        if (!this.schemaCache.has(toolName)) {
+            await this.getToolSchema(toolName);
+        }
+        return this._request('tools/call', { name: toolName, arguments: args });
+    }
+    /**
+     * disconnect — Stop the server process and clean up.
+     */
+    async disconnect() {
+        if (!this.proc)
+            return;
+        // Reject all pending requests
+        for (const [, pending] of this.pendingRequests) {
+            clearTimeout(pending.timer);
+            pending.reject(new Error(`McpClient(${this.config.name}): disconnected`));
+        }
+        this.pendingRequests.clear();
+        try {
+            this.proc.stdin.end();
+            this.proc.kill();
+            await this.proc.exited;
+        }
+        catch {
+            // Ignore shutdown errors
+        }
+        finally {
+            this.proc = null;
+            this.buffer = '';
+            this.readLoopRunning = false;
+            this.initialized = false;
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    async _startProcess() {
+        const processSpec = this.options?.processSpec;
+        const cmd = processSpec?.command ?? this.config.command;
+        const args = processSpec?.args ?? this.config.args ?? [];
+        const env = { ...process.env, ...(this.config.env ?? {}), ...(processSpec?.env ?? {}) };
+        const cwd = processSpec?.cwd;
+        try {
+            this.proc = Bun.spawn([cmd, ...args], {
+                stdin: 'pipe',
+                stdout: 'pipe',
+                stderr: 'pipe',
+                env,
+                ...(cwd ? { cwd } : {}),
+            });
+            this.buffer = '';
+            this.restartCount = 0;
+            this._startReadLoop();
+        }
+        catch (err) {
+            logger.error('McpClient: failed to start process', { server: this.config.name, err: summarizeError(err) });
+            this.proc = null;
+            throw new Error(`McpClient(${this.config.name}): failed to start: ${summarizeError(err)}`);
+        }
+    }
+    /** Perform MCP initialize handshake. */
+    async _initialize() {
+        if (this.initialized)
+            return;
+        try {
+            await this._request('initialize', {
+                protocolVersion: '2024-11-05',
+                capabilities: {},
+                clientInfo: { name: 'goodvibes-sdk', version: VERSION },
+            });
+            this._notify('notifications/initialized', {});
+            this.initialized = true;
+        }
+        catch (err) {
+            logger.error('McpClient: initialize handshake failed', { server: this.config.name, err: summarizeError(err) });
+            throw err;
+        }
+    }
+    /** Send a JSON-RPC request; returns the result. */
+    _request(method, params) {
+        if (!this.proc) {
+            return Promise.reject(new Error(`McpClient(${this.config.name}): not running`));
+        }
+        const id = this.nextId++;
+        const msg = { jsonrpc: '2.0', id, method, params };
+        const line = JSON.stringify(msg) + '\n';
+        const timeoutMs = this.options?.timeout ?? DEFAULT_TIMEOUT_MS;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pendingRequests.delete(id);
+                reject(new Error(`McpClient(${this.config.name}): request '${method}' timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            this.pendingRequests.set(id, {
+                resolve: resolve,
+                reject,
+                timer,
+            });
+            try {
+                this.proc.stdin.write(line);
+            }
+            catch (err) {
+                clearTimeout(timer);
+                this.pendingRequests.delete(id);
+                reject(new Error(`McpClient(${this.config.name}): write failed: ${summarizeError(err)}`));
+            }
+        });
+    }
+    /** Send a JSON-RPC notification (no response expected). */
+    _notify(method, params) {
+        if (!this.proc || !this.isConnected)
+            return;
+        try {
+            const msg = { jsonrpc: '2.0', method, params };
+            this.proc.stdin.write(JSON.stringify(msg) + '\n');
+        }
+        catch (err) {
+            logger.debug('McpClient: failed to send notification', { method, err: summarizeError(err) });
+        }
+    }
+    _startReadLoop() {
+        if (this.readLoopRunning || !this.proc)
+            return;
+        this.readLoopRunning = true;
+        const proc = this.proc;
+        const decoder = new TextDecoder();
+        (async () => {
+            try {
+                const reader = proc.stdout.getReader();
+                while (true) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    this.buffer += decoder.decode(value, { stream: true });
+                    this._processBuffer();
+                }
+            }
+            catch (err) {
+                logger.debug('McpClient: stdout read loop ended', { server: this.config.name, err: summarizeError(err) });
+            }
+            finally {
+                this.readLoopRunning = false;
+                // Reject remaining pending requests
+                for (const [, pending] of this.pendingRequests) {
+                    clearTimeout(pending.timer);
+                    pending.reject(new Error(`McpClient(${this.config.name}): process exited unexpectedly`));
+                }
+                this.pendingRequests.clear();
+                // Auto-restart if process crashed and we haven't exceeded retry limit
+                if (this.restartCount < MAX_RESTART_ATTEMPTS) {
+                    this._scheduleRestart();
+                }
+                else {
+                    logger.info('McpClient: exceeded max restart attempts', { server: this.config.name });
+                }
+            }
+        })();
+    }
+    _processBuffer() {
+        let newlineIdx;
+        while ((newlineIdx = this.buffer.indexOf('\n')) !== -1) {
+            const line = this.buffer.slice(0, newlineIdx).trim();
+            this.buffer = this.buffer.slice(newlineIdx + 1);
+            if (!line)
+                continue;
+            this._dispatchLine(line);
+        }
+    }
+    _dispatchLine(line) {
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch (err) {
+            logger.debug('McpClient: failed to parse JSON line', { server: this.config.name, err: summarizeError(err), line: line.slice(0, 200) });
+            return;
+        }
+        if (typeof msg !== 'object' || msg === null)
+            return;
+        const response = msg;
+        if ('id' in response && typeof response.id === 'number') {
+            const pending = this.pendingRequests.get(response.id);
+            if (pending) {
+                clearTimeout(pending.timer);
+                this.pendingRequests.delete(response.id);
+                if (response.error) {
+                    pending.reject(new Error(`McpClient(${this.config.name}) RPC error ${response.error.code}: ${response.error.message}`));
+                }
+                else {
+                    pending.resolve(response.result);
+                }
+            }
+        }
+        // Notifications (no id or id=null) are silently ignored
+    }
+    _scheduleRestart() {
+        this.restartCount++;
+        const delay = RESTART_DELAY_MS * this.restartCount;
+        logger.info('McpClient: scheduling restart', { server: this.config.name, attempt: this.restartCount, delayMs: delay });
+        setTimeout(async () => {
+            if (this.proc && this.isConnected)
+                return; // Already restarted by something else
+            try {
+                await this._startProcess();
+                await this._initialize();
+                // Invalidate tool cache so it's re-fetched after restart
+                this.toolInfoCache = null;
+                logger.info('McpClient: restart successful', { server: this.config.name });
+            }
+            catch (err) {
+                logger.error('McpClient: restart failed', { server: this.config.name, err: summarizeError(err) });
+            }
+        }, delay);
+    }
+    /**
+     * ping — Send a ping to check if server is healthy.
+     * Returns true if server responds within PING_TIMEOUT_MS.
+     */
+    async ping() {
+        if (!this.isConnected)
+            return false;
+        try {
+            await this._request('ping', {});
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}

package/dist/_internal/platform/mcp/index.d.ts

@@ -0,0 +1,7 @@
+export { McpRegistry } from './registry.js';
+export type { RegisteredTool } from './registry.js';
+export { createMcpApi } from './mcp-api.js';
+export type { McpApi, McpApiRegistry, McpSandboxBindingRecord, McpServerRecord, McpServerSecurityRecord, } from './mcp-api.js';
+export { loadMcpConfig } from '@pellux/goodvibes-sdk/platform/mcp/config';
+export type { McpConfig, McpConfigRoots, McpServerConfig } from '@pellux/goodvibes-sdk/platform/mcp/config';
+//# sourceMappingURL=index.d.ts.map

package/dist/_internal/platform/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,YAAY,EACV,MAAM,EACN,cAAc,EACd,uBAAuB,EACvB,eAAe,EACf,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAC1E,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC"}

package/dist/_internal/platform/mcp/index.js

@@ -0,0 +1,3 @@
+export { McpRegistry } from './registry.js';
+export { createMcpApi } from './mcp-api.js';
+export { loadMcpConfig } from '@pellux/goodvibes-sdk/platform/mcp/config';

package/dist/_internal/platform/mcp/mcp-api.d.ts

@@ -0,0 +1,52 @@
+import type { RegisteredTool } from './registry.js';
+import type { McpDecisionRecord, McpServerRole, McpTrustMode, QuarantineReason, SchemaFreshness } from '@pellux/goodvibes-sdk/platform/runtime/mcp/types';
+export interface McpServerRecord {
+    readonly name: string;
+    readonly connected: boolean;
+}
+export interface McpServerSecurityRecord {
+    readonly name: string;
+    readonly connected: boolean;
+    readonly role: McpServerRole;
+    readonly trustMode: McpTrustMode;
+    readonly allowedPaths: readonly string[];
+    readonly allowedHosts: readonly string[];
+    readonly schemaFreshness: SchemaFreshness;
+    readonly quarantineReason?: QuarantineReason;
+    readonly quarantineDetail?: string;
+    readonly quarantineApprovedBy?: string;
+}
+export interface McpSandboxBindingRecord {
+    readonly name: string;
+    readonly sessionId?: string;
+    readonly profileId?: 'mcp-shared' | 'mcp-per-server';
+    readonly state?: import('@pellux/goodvibes-sdk/platform/runtime/sandbox/types').SandboxSessionState;
+    readonly backend?: import('@pellux/goodvibes-sdk/platform/runtime/sandbox/types').SandboxResolvedBackend | import('@pellux/goodvibes-sdk/platform/runtime/sandbox/types').SandboxVmBackend;
+    readonly startupStatus?: 'verified' | 'planned' | 'failed';
+}
+export interface McpApi {
+    listServerNames(): readonly string[];
+    listServers(): readonly McpServerRecord[];
+    listServerSecurity(): readonly McpServerSecurityRecord[];
+    listSandboxBindings(): readonly McpSandboxBindingRecord[];
+    listRecentSecurityDecisions(limit?: number): readonly McpDecisionRecord[];
+    listAllTools(): Promise<readonly RegisteredTool[]>;
+    setServerTrustMode(serverName: string, mode: McpTrustMode): void;
+    setServerRole(serverName: string, role: McpServerRole): void;
+    quarantineSchema(serverName: string, reason: QuarantineReason, detail?: string): void;
+    approveSchemaQuarantine(serverName: string, operatorId: string): void;
+}
+export interface McpApiRegistry {
+    readonly serverNames: readonly string[];
+    listServers(): readonly McpServerRecord[];
+    listServerSecurity(): readonly McpServerSecurityRecord[];
+    listServerSandboxBindings(): readonly McpSandboxBindingRecord[];
+    listRecentSecurityDecisions(limit?: number): readonly McpDecisionRecord[];
+    listAllTools(): Promise<readonly RegisteredTool[]>;
+    setServerTrustMode(serverName: string, mode: McpTrustMode): void;
+    setServerRole(serverName: string, role: McpServerRole): void;
+    quarantineSchema(serverName: string, reason: QuarantineReason, detail?: string): void;
+    approveSchemaQuarantine(serverName: string, operatorId: string): void;
+}
+export declare function createMcpApi(registry: McpApiRegistry): McpApi;
+//# sourceMappingURL=mcp-api.d.ts.map

package/dist/_internal/platform/mcp/mcp-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-api.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/mcp/mcp-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAE1J,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,sDAAsD,EAAE,mBAAmB,CAAC;IACpG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,sDAAsD,EAAE,sBAAsB,GAAG,OAAO,sDAAsD,EAAE,gBAAgB,CAAC;IAC3L,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;CAC5D;AAED,MAAM,WAAW,MAAM;IACrB,eAAe,IAAI,SAAS,MAAM,EAAE,CAAC;IACrC,WAAW,IAAI,SAAS,eAAe,EAAE,CAAC;IAC1C,kBAAkB,IAAI,SAAS,uBAAuB,EAAE,CAAC;IACzD,mBAAmB,IAAI,SAAS,uBAAuB,EAAE,CAAC;IAC1D,2BAA2B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,iBAAiB,EAAE,CAAC;IAC1E,YAAY,IAAI,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;IACnD,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IACjE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7D,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtF,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACvE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,WAAW,IAAI,SAAS,eAAe,EAAE,CAAC;IAC1C,kBAAkB,IAAI,SAAS,uBAAuB,EAAE,CAAC;IACzD,yBAAyB,IAAI,SAAS,uBAAuB,EAAE,CAAC;IAChE,2BAA2B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,iBAAiB,EAAE,CAAC;IAC1E,YAAY,IAAI,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;IACnD,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;IACjE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7D,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtF,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACvE;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAiC7D"}

package/dist/_internal/platform/mcp/mcp-api.js

@@ -0,0 +1,34 @@
+export function createMcpApi(registry) {
+    return {
+        listServerNames() {
+            return registry.serverNames;
+        },
+        listServers() {
+            return registry.listServers();
+        },
+        listServerSecurity() {
+            return registry.listServerSecurity();
+        },
+        listSandboxBindings() {
+            return registry.listServerSandboxBindings();
+        },
+        listRecentSecurityDecisions(limit = 8) {
+            return registry.listRecentSecurityDecisions(limit);
+        },
+        listAllTools() {
+            return registry.listAllTools();
+        },
+        setServerTrustMode(serverName, mode) {
+            registry.setServerTrustMode(serverName, mode);
+        },
+        setServerRole(serverName, role) {
+            registry.setServerRole(serverName, role);
+        },
+        quarantineSchema(serverName, reason, detail) {
+            registry.quarantineSchema(serverName, reason, detail);
+        },
+        approveSchemaQuarantine(serverName, operatorId) {
+            registry.approveSchemaQuarantine(serverName, operatorId);
+        },
+    };
+}

package/dist/_internal/platform/mcp/registry.d.ts

@@ -0,0 +1,110 @@
+import { McpClient } from './client.js';
+import type { McpToolSchema } from './client.js';
+import type { McpServerConfig } from '@pellux/goodvibes-sdk/platform/mcp/config';
+import type { HookDispatcher } from '../hooks/dispatcher.js';
+import type { McpDecisionRecord, QuarantineReason, SchemaFreshness } from '@pellux/goodvibes-sdk/platform/runtime/mcp/types';
+import type { RuntimeEventBus } from '../runtime/events/index.js';
+import type { ConfigManager } from '../config/manager.js';
+import type { McpConfigRoots } from '@pellux/goodvibes-sdk/platform/mcp/config';
+import { type SandboxSessionRegistry } from '../runtime/sandbox/session-registry.js';
+export interface RegisteredTool {
+    /** Fully-qualified tool name: mcp:<server>:<tool> */
+    qualifiedName: string;
+    serverName: string;
+    toolName: string;
+    description: string;
+}
+export declare class McpRegistry {
+    private clients;
+    private permissions;
+    private freshness;
+    private runtimeBus;
+    private sandboxConfigManager;
+    private sandboxSessions;
+    private sandboxSessionByServer;
+    private readonly hookDispatcher;
+    constructor(options: {
+        readonly hookDispatcher: Pick<HookDispatcher, 'fire'>;
+        readonly sandboxSessions: SandboxSessionRegistry;
+    });
+    setRuntimeBus(runtimeBus: RuntimeEventBus | null): void;
+    setSandboxRuntime(configManager: ConfigManager, sessions: SandboxSessionRegistry): void;
+    /**
+     * connectAll — Load config from .goodvibes/mcp.json and connect to all servers.
+     * Errors on individual servers are logged but do not abort the whole startup.
+     */
+    connectAll(roots: McpConfigRoots): Promise<void>;
+    /**
+     * connectServer — Connect a single MCP server by config.
+     * Exposed for programmatic use (testing, dynamic registration).
+     */
+    connectServer(serverConfig: McpServerConfig): Promise<void>;
+    /**
+     * listAllTools — Return all registered tools (name + description) from all connected servers.
+     * Only loads tool names and descriptions — full schemas are NOT fetched here.
+     */
+    listAllTools(): Promise<RegisteredTool[]>;
+    /**
+     * getToolSchema — Fetch full JSON schema for a qualified tool name.
+     * Triggers lazy schema load and caches within McpClient.
+     */
+    getToolSchema(qualifiedName: string): Promise<McpToolSchema | null>;
+    /**
+     * callTool — Execute a tool by its qualified name.
+     * Fetches full schema on first use (progressive loading — F2).
+     */
+    callTool(qualifiedName: string, args: Record<string, unknown>): Promise<unknown>;
+    /**
+     * disconnectAll — Stop all connected MCP server processes.
+     */
+    disconnectAll(): Promise<void>;
+    /**
+     * getClient — Get the McpClient for a given server name (for advanced use).
+     */
+    getClient(serverName: string): McpClient | undefined;
+    /** Connected server names. */
+    get serverNames(): string[];
+    /**
+     * listServers — Return status info for all known servers (connected or not).
+     */
+    listServers(): Array<{
+        name: string;
+        connected: boolean;
+    }>;
+    listServerSecurity(): Array<{
+        name: string;
+        connected: boolean;
+        role: import('@pellux/goodvibes-sdk/platform/runtime/mcp/types').McpServerRole;
+        trustMode: import('@pellux/goodvibes-sdk/platform/runtime/mcp/types').McpTrustMode;
+        allowedPaths: string[];
+        allowedHosts: string[];
+        schemaFreshness: SchemaFreshness;
+        quarantineReason?: QuarantineReason;
+        quarantineDetail?: string;
+        quarantineApprovedBy?: string;
+    }>;
+    listServerSandboxBindings(): Array<{
+        name: string;
+        sessionId?: string;
+        profileId?: 'mcp-shared' | 'mcp-per-server';
+        state?: import('@pellux/goodvibes-sdk/platform/runtime/sandbox/types').SandboxSessionState;
+        backend?: import('@pellux/goodvibes-sdk/platform/runtime/sandbox/types').SandboxResolvedBackend | import('@pellux/goodvibes-sdk/platform/runtime/sandbox/types').SandboxVmBackend;
+        startupStatus?: 'verified' | 'planned' | 'failed';
+    }>;
+    setServerTrustMode(serverName: string, mode: import('@pellux/goodvibes-sdk/platform/runtime/mcp/types').McpTrustMode): void;
+    setServerRole(serverName: string, role: import('@pellux/goodvibes-sdk/platform/runtime/mcp/types').McpServerRole): void;
+    listRecentSecurityDecisions(limit?: number): McpDecisionRecord[];
+    quarantineSchema(serverName: string, reason: QuarantineReason, detail?: string): void;
+    approveSchemaQuarantine(serverName: string, operatorId: string): void;
+    private _connectServer;
+    private _resolveSandboxProcessSpec;
+    private _selectSandboxProfile;
+    private _requiresDedicatedMcpSandbox;
+    /**
+     * Parse mcp:<server>:<tool> qualified name.
+     * Returns null if the name doesn't match the expected format.
+     */
+    private _parseQualifiedName;
+    private _emitPolicyUpdate;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/_internal/platform/mcp/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/mcp/registry.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAC7H,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAOlE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAEhF,OAAO,EACL,KAAK,sBAAsB,EAC5B,MAAM,wCAAwC,CAAC;AAUhD,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAgC;IAC/C,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,oBAAoB,CAA8B;IAC1D,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,sBAAsB,CAA6B;IAC3D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA+B;gBAElD,OAAO,EAAE;QACnB,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtD,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;KAClD;IAKD,aAAa,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,GAAG,IAAI;IAIvD,iBAAiB,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAKvF;;;OAGG;IACG,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD;;;OAGG;IACG,aAAa,CAAC,YAAY,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAqB/C;;;OAGG;IACG,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAQzE;;;OAGG;IACG,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAwEtF;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBpC;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIpD,8BAA8B;IAC9B,IAAI,WAAW,IAAI,MAAM,EAAE,CAE1B;IAED;;OAEG;IACH,WAAW,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAO1D,kBAAkB,IAAI,KAAK,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,OAAO,CAAC;QACnB,IAAI,EAAE,OAAO,kDAAkD,EAAE,aAAa,CAAC;QAC/E,SAAS,EAAE,OAAO,kDAAkD,EAAE,YAAY,CAAC;QACnF,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,eAAe,EAAE,eAAe,CAAC;QACjC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;QACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IAmBF,yBAAyB,IAAI,KAAK,CAAC;QACjC,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;QAC5C,KAAK,CAAC,EAAE,OAAO,sDAAsD,EAAE,mBAAmB,CAAC;QAC3F,OAAO,CAAC,EAAE,OAAO,sDAAsD,EAAE,sBAAsB,GAAG,OAAO,sDAAsD,EAAE,gBAAgB,CAAC;QAClL,aAAa,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;KACnD,CAAC;IAiBF,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,kDAAkD,EAAE,YAAY,GAAG,IAAI;IAK3H,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,kDAAkD,EAAE,aAAa,GAAG,IAAI;IAKvH,2BAA2B,CAAC,KAAK,SAAI,GAAG,iBAAiB,EAAE;IAI3D,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAWrF,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;YAevD,cAAc;YAgEd,0BAA0B;IAiCxC,OAAO,CAAC,qBAAqB;IAiB7B,OAAO,CAAC,4BAA4B;IAWpC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,iBAAiB;CAgB1B"}