@qodalis/cli-server-node 1.0.0-beta.6 → 1.0.0-beta.7

package/dist/src/mcp/mcp-controller.js

@@ -0,0 +1,358 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_SERVER_VERSION = exports.MCP_SERVER_NAME = exports.MCP_PROTOCOL_VERSIONS = void 0;
+exports.resolveMcpOptions = resolveMcpOptions;
+exports.mcpToolPatternMatches = mcpToolPatternMatches;
+exports.isMcpToolAllowed = isMcpToolAllowed;
+exports.collectMcpTools = collectMcpTools;
+exports.createMcpPreGate = createMcpPreGate;
+exports.createMcpController = createMcpController;
+const express_1 = __importStar(require("express"));
+const crypto_1 = require("crypto");
+const cli_server_auth_1 = require("../auth/cli-server-auth");
+const logger_1 = require("../utils/logger");
+const package_json_1 = require("../../package.json");
+const mcp_types_1 = require("./mcp-types");
+const mcp_schema_1 = require("./mcp-schema");
+const logger = (0, logger_1.createLogger)('Mcp');
+/** Supported MCP protocol versions, newest first. */
+exports.MCP_PROTOCOL_VERSIONS = ['2025-11-25', '2025-06-18', '2025-03-26'];
+exports.MCP_SERVER_NAME = 'qodalis-cli-server';
+exports.MCP_SERVER_VERSION = package_json_1.version;
+/** Resolves the `mcp` server option: undefined when MCP is disabled. */
+function resolveMcpOptions(option) {
+    if (!option)
+        return undefined;
+    if (option === true)
+        return {};
+    return option.enabled === false ? undefined : option;
+}
+/** True when `name` matches a pattern (exact, or prefix with a trailing `*`); case-insensitive. */
+function mcpToolPatternMatches(name, pattern) {
+    const p = pattern.trim().toLowerCase();
+    const n = name.toLowerCase();
+    return p.endsWith('*') ? n.startsWith(p.slice(0, -1)) : n === p;
+}
+/** Applies the allow-list (`tools`) then the deny-list (`exclude`). */
+function isMcpToolAllowed(name, tools, exclude) {
+    if (tools && !tools.some((p) => mcpToolPatternMatches(name, p)))
+        return false;
+    if (exclude && exclude.some((p) => mcpToolPatternMatches(name, p)))
+        return false;
+    return true;
+}
+const warned = new Set();
+function warnOnce(key, message, ...args) {
+    if (warned.has(key))
+        return;
+    warned.add(key);
+    logger.warn(message, ...args);
+}
+/**
+ * Collects the tools of every provider, in priority order (first wins on a
+ * name collision, with a warning). Invalid tool names are skipped.
+ */
+async function collectMcpTools(providers) {
+    const tools = [];
+    const owners = new Map();
+    for (const provider of providers) {
+        let provided;
+        try {
+            provided = await provider.getTools();
+        }
+        catch (err) {
+            logger.error("MCP tool provider '%s' failed: %s", provider.name, err?.message ?? err);
+            continue;
+        }
+        for (const tool of provided ?? []) {
+            if (!tool || typeof tool.name !== 'string' || !mcp_types_1.MCP_TOOL_NAME_RE.test(tool.name)) {
+                warnOnce(`invalid|${provider.name}|${tool?.name}`, "MCP tool '%s' of provider '%s' has an invalid name and is skipped", tool?.name, provider.name);
+                continue;
+            }
+            const owner = owners.get(tool.name);
+            if (owner !== undefined) {
+                warnOnce(`dup|${tool.name}|${provider.name}`, "MCP tool name collision: '%s' from provider '%s' is skipped ('%s' wins)", tool.name, provider.name, owner);
+                continue;
+            }
+            owners.set(tool.name, provider.name);
+            tools.push(tool);
+        }
+    }
+    return tools;
+}
+// JSON-RPC error codes
+const PARSE_ERROR = -32700;
+const INVALID_REQUEST = -32600;
+const METHOD_NOT_FOUND = -32601;
+const INVALID_PARAMS = -32602;
+const INTERNAL_ERROR = -32603;
+class JsonRpcError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+function sha256(value) {
+    return (0, crypto_1.createHash)('sha256').update(value, 'utf8').digest();
+}
+/** Constant-time comparison of a presented bearer token with the configured one. */
+function tokenMatches(presented, expected) {
+    if (presented === undefined)
+        return false;
+    return (0, crypto_1.timingSafeEqual)(sha256(presented), sha256(expected));
+}
+function bearerToken(req) {
+    const header = req.headers['authorization'];
+    if (typeof header !== 'string' || !header.startsWith('Bearer '))
+        return undefined;
+    const token = header.slice(7).trim();
+    return token || undefined;
+}
+function isPlainObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/**
+ * Checks done before the server auth gate: the `Origin` (DNS-rebinding
+ * protection: allowed or same-origin, else 403) and the method (`POST` only,
+ * else 405 with `Allow: POST`).
+ */
+function createMcpPreGate(options) {
+    return (req, res, next) => {
+        if (req.path !== '/' && req.path !== '') {
+            next();
+            return;
+        }
+        const origin = req.headers.origin;
+        if (origin !== undefined && !(0, cli_server_auth_1.isOriginAllowed)(origin, options.allowedOrigins) && !(0, cli_server_auth_1.isSameOrigin)(origin, req, options.trustProxy)) {
+            res.status(403).json({ error: 'forbidden: origin not allowed' });
+            return;
+        }
+        const method = req.method.toUpperCase();
+        if (method === 'OPTIONS' || method === 'POST') {
+            next();
+            return;
+        }
+        res.setHeader('Allow', 'POST');
+        res.status(405).json({ error: 'method not allowed' });
+    };
+}
+/**
+ * MCP "Streamable HTTP" endpoint, stateless and JSON-only: `POST` a JSON-RPC
+ * 2.0 message, get a JSON response (`202` for notifications). Tools are the
+ * registry's commands, built on every request and filtered by the caller's
+ * permissions; calls run through the same executor as `/execute`.
+ */
+function createMcpController(options) {
+    const { mcp, getAuth } = options;
+    const router = (0, express_1.Router)();
+    router.post('/', express_1.default.text({ type: () => true, limit: '1mb' }), async (req, res) => {
+        const auth = getAuth();
+        const protectedServer = !!auth?.protectServer;
+        let ctx;
+        if (protectedServer) {
+            // Authenticated (and `commands:execute` checked) by the server auth gate
+            ctx = req.qcliServerAuth;
+            if (!ctx) {
+                res.status(401).json({ error: 'unauthorized' });
+                return;
+            }
+        }
+        else if (mcp.token && !tokenMatches(bearerToken(req), mcp.token)) {
+            res.status(401).json({ error: 'unauthorized' });
+            return;
+        }
+        const raw = typeof req.body === 'string' ? req.body : '';
+        let message;
+        try {
+            message = JSON.parse(raw);
+        }
+        catch {
+            sendRpc(res, null, undefined, new JsonRpcError(PARSE_ERROR, 'Parse error'));
+            return;
+        }
+        if (!isPlainObject(message)) {
+            sendRpc(res, null, undefined, new JsonRpcError(INVALID_REQUEST, 'Invalid Request'));
+            return;
+        }
+        const hasId = Object.prototype.hasOwnProperty.call(message, 'id');
+        const rawId = message.id;
+        const validId = typeof rawId === 'string' || (typeof rawId === 'number' && Number.isFinite(rawId));
+        const id = validId ? rawId : null;
+        if (message.jsonrpc !== '2.0') {
+            sendRpc(res, id, undefined, new JsonRpcError(INVALID_REQUEST, 'Invalid Request'));
+            return;
+        }
+        if (message.method === undefined && hasId && ('result' in message || 'error' in message)) {
+            // A JSON-RPC response from the client: nothing to answer
+            res.status(202).end();
+            return;
+        }
+        if (typeof message.method !== 'string' || (hasId && !validId)) {
+            sendRpc(res, id, undefined, new JsonRpcError(INVALID_REQUEST, 'Invalid Request'));
+            return;
+        }
+        if (!hasId) {
+            // Notification (e.g. notifications/initialized): accepted, no body
+            res.status(202).end();
+            return;
+        }
+        const params = message.params;
+        if (params !== undefined && !isPlainObject(params)) {
+            sendRpc(res, id, undefined, new JsonRpcError(INVALID_PARAMS, 'Invalid params: params must be an object'));
+            return;
+        }
+        const abortController = new AbortController();
+        res.on('close', () => {
+            if (!res.writableEnded)
+                abortController.abort();
+        });
+        try {
+            const result = await dispatch(message.method, (params ?? {}), ctx, abortController.signal, req);
+            sendRpc(res, id, result);
+        }
+        catch (err) {
+            if (err instanceof JsonRpcError) {
+                sendRpc(res, id, undefined, err);
+            }
+            else {
+                logger.error('MCP request failed: %s', err?.message ?? err);
+                sendRpc(res, id, undefined, new JsonRpcError(INTERNAL_ERROR, 'Internal error'));
+            }
+        }
+    });
+    // Body too large / unreadable: plain HTTP errors
+    router.use((err, _req, res, next) => {
+        if (err && (err.type === 'entity.too.large' || typeof err.status === 'number')) {
+            const status = err.type === 'entity.too.large' ? 413 : err.status;
+            res.status(status).json({ error: status === 413 ? 'request body too large' : 'bad request' });
+            return;
+        }
+        next(err);
+    });
+    /** Tools visible to the caller: allow/deny lists, then the tool's permissions (when protected). */
+    const visibleTools = async (ctx) => {
+        const auth = getAuth();
+        const tools = await collectMcpTools(options.providers());
+        return tools.filter((tool) => {
+            if (!isMcpToolAllowed(tool.name, mcp.tools, mcp.exclude))
+                return false;
+            if (!auth?.protectServer)
+                return true;
+            if (!ctx)
+                return false;
+            return (tool.requiredPermissions ?? []).every((p) => auth.hasPermission(ctx, p));
+        });
+    };
+    const dispatch = async (method, params, ctx, signal, req) => {
+        switch (method) {
+            case 'initialize': {
+                const requested = params.protocolVersion;
+                if (typeof requested !== 'string') {
+                    throw new JsonRpcError(INVALID_PARAMS, 'Invalid params: protocolVersion is required');
+                }
+                const protocolVersion = exports.MCP_PROTOCOL_VERSIONS.includes(requested)
+                    ? requested
+                    : exports.MCP_PROTOCOL_VERSIONS[0];
+                return {
+                    protocolVersion,
+                    capabilities: { tools: { listChanged: false } },
+                    serverInfo: { name: exports.MCP_SERVER_NAME, version: exports.MCP_SERVER_VERSION },
+                    ...(mcp.instructions ? { instructions: mcp.instructions } : {}),
+                };
+            }
+            case 'ping':
+                return {};
+            case 'tools/list':
+                return {
+                    tools: (await visibleTools(ctx)).map((t) => ({
+                        name: t.name,
+                        description: t.description,
+                        inputSchema: t.inputSchema,
+                        ...(t.annotations ? { annotations: t.annotations } : {}),
+                    })),
+                };
+            case 'tools/call':
+                return callTool(params, ctx, signal, req);
+            default:
+                throw new JsonRpcError(METHOD_NOT_FOUND, `Method not found: ${method}`);
+        }
+    };
+    const callTool = async (params, ctx, signal, req) => {
+        const name = params.name;
+        if (typeof name !== 'string' || !name) {
+            throw new JsonRpcError(INVALID_PARAMS, 'Invalid params: name is required');
+        }
+        const args = params.arguments ?? {};
+        if (!isPlainObject(args)) {
+            throw new JsonRpcError(INVALID_PARAMS, 'Invalid params: arguments must be an object');
+        }
+        const tool = (await visibleTools(ctx)).find((t) => t.name === name);
+        if (!tool) {
+            throw new JsonRpcError(INVALID_PARAMS, `Unknown tool: ${name}`);
+        }
+        const invalid = (0, mcp_schema_1.validateMcpArguments)(tool.inputSchema, args);
+        if (invalid) {
+            throw new JsonRpcError(INVALID_PARAMS, `Invalid arguments for tool ${name}: ${invalid}`);
+        }
+        logger.debug('MCP tool call: %s (user=%s)', tool.name, ctx?.userName ?? '-');
+        let result;
+        try {
+            result = await tool.call(args, { auth: ctx, signal, request: req });
+        }
+        catch (err) {
+            result = { text: `Error executing tool: ${err?.message ?? err}`, isError: true };
+        }
+        return {
+            content: [{ type: 'text', text: result?.text ?? '' }],
+            isError: !!result?.isError,
+            ...(result?.structured && typeof result.structured === 'object' && !Array.isArray(result.structured)
+                ? { structuredContent: result.structured }
+                : {}),
+        };
+    };
+    return router;
+}
+function sendRpc(res, id, result, error) {
+    res.status(200).type('application/json');
+    if (error) {
+        res.send(JSON.stringify({ jsonrpc: '2.0', id, error: { code: error.code, message: error.message } }));
+    }
+    else {
+        res.send(JSON.stringify({ jsonrpc: '2.0', id, result }));
+    }
+}
+//# sourceMappingURL=mcp-controller.js.map

package/dist/src/mcp/mcp-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-controller.js","sourceRoot":"","sources":["../../../src/mcp/mcp-controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,8CAIC;AAGD,sDAIC;AAGD,4CAIC;AAaD,0CA0BC;AAqDD,4CAmBC;AAQD,kDAsLC;AA7VD,mDAA2F;AAC3F,mCAAqD;AACrD,6DAA8G;AAC9G,4CAA+C;AAC/C,qDAAgE;AAChE,2CAAwF;AACxF,6CAAoD;AAEpD,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC,CAAC;AAEnC,qDAAqD;AACxC,QAAA,qBAAqB,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,CAAU,CAAC;AAC5E,QAAA,eAAe,GAAG,oBAAoB,CAAC;AACvC,QAAA,kBAAkB,GAAW,sBAAe,CAAC;AAgB1D,wEAAwE;AACxE,SAAgB,iBAAiB,CAAC,MAA2C;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACzD,CAAC;AAED,mGAAmG;AACnG,SAAgB,qBAAqB,CAAC,IAAY,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,uEAAuE;AACvE,SAAgB,gBAAgB,CAAC,IAAY,EAAE,KAAyB,EAAE,OAA2B;IACjG,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;AACjC,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAe,EAAE,GAAG,IAAe;IAC9D,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,eAAe,CAAC,SAAqC;IACvE,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,QAAmB,CAAC;QACxB,IAAI,CAAC;YACD,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,QAAQ,CAAC,IAAI,EAAG,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;YACjG,SAAS;QACb,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,4BAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9E,QAAQ,CAAC,WAAW,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,mEAAmE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACnJ,SAAS;YACb,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtB,QAAQ,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,yEAAyE,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1J,SAAS;YACb,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAYD,uBAAuB;AACvB,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC;AAC3B,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC;AAC/B,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC;AAChC,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC;AAE9B,MAAM,YAAa,SAAQ,KAAK;IACP;IAArB,YAAqB,IAAY,EAAE,OAAe;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QADE,SAAI,GAAJ,IAAI,CAAQ;IAEjC,CAAC;CACJ;AAID,SAAS,MAAM,CAAC,KAAa;IACzB,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,oFAAoF;AACpF,SAAS,YAAY,CAAC,SAA6B,EAAE,QAAgB;IACjE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAA,wBAAe,EAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,KAAK,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,OAAoE;IACjG,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACvD,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACtC,IAAI,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAA,iCAAe,EAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAA,8BAAY,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7H,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACjE,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5C,IAAI,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;AACN,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,OAA6B;IAC7D,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACjC,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACrG,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC;QAC9C,IAAI,GAAqC,CAAC;QAC1C,IAAI,eAAe,EAAE,CAAC;YAClB,yEAAyE;YACzE,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC;YACzB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAChD,OAAO;YACX,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,YAAY,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAC5E,OAAO;QACX,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,YAAY,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACpF,OAAO;QACX,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACnG,MAAM,EAAE,GAAc,OAAO,CAAC,CAAC,CAAE,KAAyB,CAAC,CAAC,CAAC,IAAI,CAAC;QAElE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,YAAY,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAClF,OAAO;QACX,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;YACvF,yDAAyD;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACX,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,YAAY,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAClF,OAAO;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,mEAAmE;YACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,YAAY,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAC,CAAC;YAC1G,OAAO;QACX,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,eAAe,CAAC,KAAK,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE,CAA4B,EAAE,GAAG,EAAE,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3H,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAG,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;gBACvE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,YAAY,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACpF,CAAC;QACL,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAQ,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACtE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;YAC9F,OAAO;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,mGAAmG;IACnG,MAAM,YAAY,GAAG,KAAK,EAAE,GAAqC,EAAsB,EAAE;QACrF,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvE,IAAI,CAAC,IAAI,EAAE,aAAa;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAClB,MAAc,EACd,MAA+B,EAC/B,GAAqC,EACrC,MAAmB,EACnB,GAAY,EACI,EAAE;QAClB,QAAQ,MAAM,EAAE,CAAC;YACb,KAAK,YAAY,CAAC,CAAC,CAAC;gBAChB,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;gBACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;gBAC1F,CAAC;gBACD,MAAM,eAAe,GAAI,6BAA2C,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACpF,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,6BAAqB,CAAC,CAAC,CAAC,CAAC;gBAC/B,OAAO;oBACH,eAAe;oBACf,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;oBAC/C,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAe,EAAE,OAAO,EAAE,0BAAkB,EAAE;oBAClE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC;YACN,CAAC;YACD,KAAK,MAAM;gBACP,OAAO,EAAE,CAAC;YACd,KAAK,YAAY;gBACb,OAAO;oBACH,KAAK,EAAE,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACzC,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3D,CAAC,CAAC;iBACN,CAAC;YACN,KAAK,YAAY;gBACb,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9C;gBACI,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAClB,MAA+B,EAC/B,GAAqC,EACrC,MAAmB,EACnB,GAAY,EACI,EAAE;QAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,iCAAoB,EAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,8BAA8B,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC,CAAC;QAC7E,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,GAAG,EAAE,IAAI,EAAE,yBAA0B,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChG,CAAC;QACD,OAAO;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO;YAC1B,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChG,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC1C,CAAC,CAAC,EAAE,CAAC;SACZ,CAAC;IACN,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,OAAO,CAAC,GAAa,EAAE,EAAa,EAAE,MAAgB,EAAE,KAAoB;IACjF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACR,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;AACL,CAAC"}

package/dist/src/mcp/mcp-render.d.ts

@@ -0,0 +1,10 @@
+import { CliStructuredOutput } from '../abstractions';
+import { CliServerResponse } from '../models';
+import { McpToolResult } from './mcp-types';
+/** Renders command outputs as plain text (text as-is, tables `a | b`, lists one per line, json pretty, key-value `k: v`). */
+export declare function renderOutputsAsText(outputs: readonly CliStructuredOutput[]): string;
+/** Tool result of a command response (`structured` when the outputs are exactly one json object). */
+export declare function commandResult(response: CliServerResponse): McpToolResult;
+/** Renders rows (arrays or objects) as `a | b` lines under a header. */
+export declare function renderRows(columns: string[] | null, rows: unknown[]): string;
+//# sourceMappingURL=mcp-render.d.ts.map

package/dist/src/mcp/mcp-render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-render.d.ts","sourceRoot":"","sources":["../../../src/mcp/mcp-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,6HAA6H;AAC7H,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,GAAG,MAAM,CAwBnF;AAED,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,iBAAiB,GAAG,aAAa,CAUxE;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAkB5E"}

package/dist/src/mcp/mcp-render.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderOutputsAsText = renderOutputsAsText;
+exports.commandResult = commandResult;
+exports.renderRows = renderRows;
+/** Renders command outputs as plain text (text as-is, tables `a | b`, lists one per line, json pretty, key-value `k: v`). */
+function renderOutputsAsText(outputs) {
+    const blocks = [];
+    for (const output of outputs ?? []) {
+        switch (output?.type) {
+            case 'text':
+                blocks.push(output.value ?? '');
+                break;
+            case 'table':
+                blocks.push([(output.headers ?? []).join(' | '), ...(output.rows ?? []).map((r) => (r ?? []).join(' | '))].join('\n'));
+                break;
+            case 'list':
+                blocks.push((output.items ?? []).join('\n'));
+                break;
+            case 'json':
+                blocks.push(JSON.stringify(output.value, null, 2) ?? 'null');
+                break;
+            case 'key-value':
+                blocks.push((output.entries ?? []).map((e) => `${e.key}: ${e.value}`).join('\n'));
+                break;
+            default:
+                blocks.push(JSON.stringify(output));
+        }
+    }
+    return blocks.join('\n');
+}
+/** Tool result of a command response (`structured` when the outputs are exactly one json object). */
+function commandResult(response) {
+    const outputs = response.outputs ?? [];
+    const result = { text: renderOutputsAsText(outputs), isError: response.exitCode !== 0 };
+    if (outputs.length === 1 && outputs[0].type === 'json') {
+        const value = outputs[0].value;
+        if (value !== null && typeof value === 'object' && !Array.isArray(value)) {
+            result.structured = value;
+        }
+    }
+    return result;
+}
+/** Renders rows (arrays or objects) as `a | b` lines under a header. */
+function renderRows(columns, rows) {
+    const cell = (v) => (v === null || v === undefined ? '' : typeof v === 'object' ? JSON.stringify(v) : String(v));
+    let headers = columns ?? [];
+    if (headers.length === 0 && rows.length > 0 && rows[0] && typeof rows[0] === 'object' && !Array.isArray(rows[0])) {
+        headers = Object.keys(rows[0]);
+    }
+    const lines = headers.length > 0 ? [headers.join(' | ')] : [];
+    for (const row of rows) {
+        if (Array.isArray(row)) {
+            lines.push(row.map(cell).join(' | '));
+        }
+        else if (row && typeof row === 'object') {
+            const obj = row;
+            lines.push((headers.length > 0 ? headers : Object.keys(obj)).map((h) => cell(obj[h])).join(' | '));
+        }
+        else {
+            lines.push(cell(row));
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=mcp-render.js.map

package/dist/src/mcp/mcp-render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-render.js","sourceRoot":"","sources":["../../../src/mcp/mcp-render.ts"],"names":[],"mappings":";;AAKA,kDAwBC;AAGD,sCAUC;AAGD,gCAkBC;AA3DD,6HAA6H;AAC7H,SAAgB,mBAAmB,CAAC,OAAuC;IACvE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QACjC,QAAQ,MAAM,EAAE,IAAI,EAAE,CAAC;YACnB,KAAK,MAAM;gBACP,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAChC,MAAM;YACV,KAAK,OAAO;gBACR,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvH,MAAM;YACV,KAAK,MAAM;gBACP,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACV,KAAK,MAAM;gBACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;gBAC7D,MAAM;YACV,KAAK,WAAW;gBACZ,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClF,MAAM;YACV;gBACI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,qGAAqG;AACrG,SAAgB,aAAa,CAAC,QAA2B;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAkB,EAAE,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,UAAU,GAAG,KAAgC,CAAC;QACzD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,SAAgB,UAAU,CAAC,OAAwB,EAAE,IAAe;IAChE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,IAAI,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,GAA8B,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACvG,CAAC;aAAM,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/src/mcp/mcp-schema.d.ts

@@ -0,0 +1,8 @@
+import { McpInputSchema } from './mcp-types';
+/**
+ * Validates tool arguments against an input schema (types of the declared
+ * properties, array item types, unknown properties, required properties).
+ * Returns the reason when invalid. `null` counts as absent.
+ */
+export declare function validateMcpArguments(schema: McpInputSchema, args: Record<string, unknown>): string | undefined;
+//# sourceMappingURL=mcp-schema.d.ts.map

package/dist/src/mcp/mcp-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-schema.d.ts","sourceRoot":"","sources":["../../../src/mcp/mcp-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAqB,MAAM,aAAa,CAAC;AAyChE;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAa9G"}

package/dist/src/mcp/mcp-schema.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateMcpArguments = validateMcpArguments;
+function typeMatches(type, value) {
+    switch (type) {
+        case 'string':
+            return typeof value === 'string';
+        case 'number':
+            return typeof value === 'number' && Number.isFinite(value);
+        case 'integer':
+            return typeof value === 'number' && Number.isInteger(value);
+        case 'boolean':
+            return typeof value === 'boolean';
+        case 'object':
+            return value !== null && typeof value === 'object' && !Array.isArray(value);
+        case 'array':
+            return Array.isArray(value);
+        default:
+            return true;
+    }
+}
+const TYPE_LABEL = {
+    string: 'a string',
+    number: 'a number',
+    integer: 'an integer',
+    boolean: 'a boolean',
+    object: 'an object',
+    array: 'an array',
+};
+function checkProperty(key, prop, value) {
+    if (!typeMatches(prop.type, value)) {
+        if (prop.type === 'array' && prop.items?.type)
+            return `argument '${key}' must be an array of ${prop.items.type}s`;
+        return `argument '${key}' must be ${TYPE_LABEL[prop.type] ?? prop.type}`;
+    }
+    if (prop.type === 'array' && prop.items?.type && value.some((v) => !typeMatches(prop.items.type, v))) {
+        return `argument '${key}' must be an array of ${prop.items.type}s`;
+    }
+    return undefined;
+}
+/**
+ * Validates tool arguments against an input schema (types of the declared
+ * properties, array item types, unknown properties, required properties).
+ * Returns the reason when invalid. `null` counts as absent.
+ */
+function validateMcpArguments(schema, args) {
+    const properties = schema.properties ?? {};
+    for (const [key, value] of Object.entries(args)) {
+        const prop = Object.prototype.hasOwnProperty.call(properties, key) ? properties[key] : undefined;
+        if (!prop)
+            return `unknown argument '${key}'`;
+        if (value === null || value === undefined)
+            continue;
+        const reason = checkProperty(key, prop, value);
+        if (reason)
+            return reason;
+    }
+    for (const key of schema.required ?? []) {
+        if (args[key] === undefined || args[key] === null)
+            return `missing required argument '${key}'`;
+    }
+    return undefined;
+}
+//# sourceMappingURL=mcp-schema.js.map

package/dist/src/mcp/mcp-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-schema.js","sourceRoot":"","sources":["../../../src/mcp/mcp-schema.ts"],"names":[],"mappings":";;AA8CA,oDAaC;AAzDD,SAAS,WAAW,CAAC,IAAwB,EAAE,KAAc;IACzD,QAAQ,IAAI,EAAE,CAAC;QACX,KAAK,QAAQ;YACT,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrC,KAAK,QAAQ;YACT,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/D,KAAK,SAAS;YACV,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChE,KAAK,SAAS;YACV,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACtC,KAAK,QAAQ;YACT,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChF,KAAK,OAAO;YACR,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC;YACI,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,GAA2B;IACvC,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,KAAK,EAAE,UAAU;CACpB,CAAC;AAEF,SAAS,aAAa,CAAC,GAAW,EAAE,IAAuB,EAAE,KAAc;IACvE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,OAAO,aAAa,GAAG,yBAAyB,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;QAClH,OAAO,aAAa,GAAG,aAAa,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,IAAK,KAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnH,OAAO,aAAa,GAAG,yBAAyB,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,MAAsB,EAAE,IAA6B;IACtF,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,IAAI,CAAC,IAAI;YAAE,OAAO,qBAAqB,GAAG,GAAG,CAAC;QAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QACpD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,OAAO,8BAA8B,GAAG,GAAG,CAAC;IACnG,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/dist/src/mcp/mcp-types.d.ts

@@ -0,0 +1,70 @@
+import type { Request } from 'express';
+import type { CliServerAuthContext } from '../auth/cli-server-auth';
+/** JSON Schema of a property in a tool's input schema (the subset validated by the server). */
+export interface McpPropertySchema {
+    type: 'string' | 'number' | 'integer' | 'boolean' | 'array' | 'object';
+    items?: {
+        type: 'string' | 'number' | 'integer' | 'boolean';
+    };
+    description?: string;
+    default?: unknown;
+    [keyword: string]: unknown;
+}
+/** JSON Schema of a tool's arguments: always an object without additional properties. */
+export interface McpInputSchema {
+    type: 'object';
+    properties: Record<string, McpPropertySchema>;
+    required: string[];
+    additionalProperties: false;
+}
+/** MCP tool annotations (hints for clients). */
+export interface McpToolAnnotations {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+}
+/** Context of a tool call. */
+export interface McpToolCallContext {
+    /** The caller (when an auth provider protects the server). */
+    auth?: CliServerAuthContext;
+    /** Aborted when the client disconnects. */
+    signal: AbortSignal;
+    /** The HTTP request carrying the call. */
+    request: Request;
+}
+/** Result of a tool call: `text` becomes the text content, `structured` the `structuredContent`. */
+export interface McpToolResult {
+    text: string;
+    structured?: Record<string, unknown>;
+    isError: boolean;
+}
+/** A tool exposed by the MCP endpoint. */
+export interface McpTool {
+    /** `[a-z0-9_-]`, at most 64 characters. */
+    name: string;
+    description: string;
+    inputSchema: McpInputSchema;
+    /** Checked for `tools/list` and `tools/call` when an auth provider protects the server. */
+    requiredPermissions: string[];
+    annotations?: McpToolAnnotations;
+    /** Called with arguments already validated against `inputSchema`. */
+    call(args: Record<string, unknown>, context: McpToolCallContext): Promise<McpToolResult>;
+}
+/**
+ * Supplies MCP tools. Providers are asked for their tools on every request, so
+ * registrations, enabled features and permissions are always current.
+ */
+export interface McpToolProvider {
+    /** Provider name (used in logs). */
+    readonly name: string;
+    getTools(): McpTool[] | Promise<McpTool[]>;
+}
+/** MCP tool name rule: `[a-z0-9_-]`, 1-64 characters. */
+export declare const MCP_TOOL_NAME_RE: RegExp;
+/** Builds an input schema from properties and required names. */
+export declare function mcpObjectSchema(properties?: Record<string, McpPropertySchema>, required?: string[]): McpInputSchema;
+/** Error result with a message. */
+export declare function mcpError(message: string): McpToolResult;
+/** Success result with a structured object rendered as pretty JSON text. */
+export declare function mcpJson(value: Record<string, unknown>, text?: string): McpToolResult;
+//# sourceMappingURL=mcp-types.d.ts.map

package/dist/src/mcp/mcp-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-types.d.ts","sourceRoot":"","sources":["../../../src/mcp/mcp-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,+FAA+F;AAC/F,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IACvE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC9B;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,EAAE,KAAK,CAAC;CAC/B;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,8BAA8B;AAC9B,MAAM,WAAW,kBAAkB;IAC/B,8DAA8D;IAC9D,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,WAAW,CAAC;IACpB,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,oGAAoG;AACpG,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,0CAA0C;AAC1C,MAAM,WAAW,OAAO;IACpB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,CAAC;IAC5B,2FAA2F;IAC3F,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,qEAAqE;IACrE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5F;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC5B,oCAAoC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,IAAI,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CAC9C;AAED,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,QAAuB,CAAC;AAErD,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAM,EAAE,QAAQ,GAAE,MAAM,EAAO,GAAG,cAAc,CAE3H;AAED,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAEvD;AAED,4EAA4E;AAC5E,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAEpF"}

package/dist/src/mcp/mcp-types.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_TOOL_NAME_RE = void 0;
+exports.mcpObjectSchema = mcpObjectSchema;
+exports.mcpError = mcpError;
+exports.mcpJson = mcpJson;
+/** MCP tool name rule: `[a-z0-9_-]`, 1-64 characters. */
+exports.MCP_TOOL_NAME_RE = /^[a-z0-9_-]{1,64}$/;
+/** Builds an input schema from properties and required names. */
+function mcpObjectSchema(properties = {}, required = []) {
+    return { type: 'object', properties, required, additionalProperties: false };
+}
+/** Error result with a message. */
+function mcpError(message) {
+    return { text: message, isError: true };
+}
+/** Success result with a structured object rendered as pretty JSON text. */
+function mcpJson(value, text) {
+    return { text: text ?? JSON.stringify(value, null, 2), structured: value, isError: false };
+}
+//# sourceMappingURL=mcp-types.js.map