@skaile/workspaces 4.17.0 → 4.19.0

package/dist/chunk-X5O56UO4.js

@@ -0,0 +1,151 @@
+import { createLogger } from './chunk-BOFL7GIF.js';
+import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';
+import { Ajv2020 } from 'ajv/dist/2020.js';
+
+var TOOL_PROPERTY_KEY_PATTERN = /^[a-zA-Z0-9_.-]{1,64}$/;
+var DRAFT_2020_12_META = "https://json-schema.org/draft/2020-12/schema";
+var PROBE_TIMEOUT_MS = 5e3;
+var metaValidator = null;
+function draft202012MetaValidator() {
+  if (metaValidator) return metaValidator;
+  const ajv = new Ajv2020({ strict: false, validateFormats: false, logger: false });
+  const validate = ajv.getSchema(DRAFT_2020_12_META);
+  if (!validate) throw new Error("ajv draft 2020-12 meta-schema is unavailable");
+  metaValidator = validate;
+  return validate;
+}
+function checkToolPropertyKeys(schema) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) return null;
+  const props = schema.properties;
+  if (!props || typeof props !== "object" || Array.isArray(props)) return null;
+  for (const key of Object.keys(props)) {
+    if (!TOOL_PROPERTY_KEY_PATTERN.test(key)) {
+      return `property key ${JSON.stringify(key)} does not match ${TOOL_PROPERTY_KEY_PATTERN.source}`;
+    }
+  }
+  return null;
+}
+function checkToolInputSchema(schema) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) {
+    return "input schema is not a JSON object";
+  }
+  const keyReason = checkToolPropertyKeys(schema);
+  if (keyReason) return keyReason;
+  const validate = draft202012MetaValidator();
+  if (!validate(schema)) {
+    const first = validate.errors?.[0];
+    const where = first?.instancePath || "/";
+    return `not valid JSON Schema draft 2020-12: ${where} ${first?.message ?? "is invalid"}`;
+  }
+  return null;
+}
+var filteredInstances = /* @__PURE__ */ new WeakMap();
+function sdkInstanceOf(config) {
+  if (!config || typeof config !== "object") return null;
+  const c = config;
+  if (c.type !== "sdk" || !c.instance || typeof c.instance !== "object") return null;
+  const inst = c.instance;
+  return typeof inst.connect === "function" && typeof inst.close === "function" ? inst : null;
+}
+function withTimeout(p, what) {
+  let timer;
+  const timeout = new Promise((_, reject) => {
+    timer = setTimeout(() => reject(new Error(`${what} timed out`)), PROBE_TIMEOUT_MS);
+  });
+  return Promise.race([p, timeout]).finally(() => clearTimeout(timer));
+}
+async function listInProcessTools(instance) {
+  const [clientSide, serverSide] = InMemoryTransport.createLinkedPair();
+  const pending = /* @__PURE__ */ new Map();
+  clientSide.onmessage = (msg) => {
+    const m = msg;
+    const id = typeof m.id === "number" ? m.id : void 0;
+    if (id === void 0) return;
+    pending.get(id)?.(m);
+    pending.delete(id);
+  };
+  let nextId = 1;
+  const call = (method, params) => withTimeout(
+    new Promise((resolve, reject) => {
+      const id = nextId++;
+      pending.set(id, resolve);
+      clientSide.send({ jsonrpc: "2.0", id, method, params }).catch(reject);
+    }),
+    method
+  ).then((res) => {
+    if (res.error) throw new Error(`${method} failed: ${JSON.stringify(res.error)}`);
+    return res.result ?? {};
+  });
+  await clientSide.start();
+  await instance.connect(serverSide);
+  try {
+    await call("initialize", {
+      protocolVersion: "2025-06-18",
+      capabilities: {},
+      clientInfo: { name: "skaile-tool-schema-filter", version: "1.0.0" }
+    });
+    await clientSide.send({ jsonrpc: "2.0", method: "notifications/initialized" });
+    const tools = [];
+    let cursor;
+    do {
+      const page = await call("tools/list", cursor ? { cursor } : {});
+      tools.push(...page.tools ?? []);
+      cursor = typeof page.nextCursor === "string" ? page.nextCursor : void 0;
+    } while (cursor);
+    return tools;
+  } finally {
+    await instance.close().catch(() => {
+    });
+  }
+}
+var defaultLog = createLogger({ kind: "mcp", subkind: "tool-schema-filter" });
+async function filterInProcessMcpServerTools(server, config, log = defaultLog) {
+  const instance = sdkInstanceOf(config);
+  if (!instance) return [];
+  const cached = filteredInstances.get(instance);
+  if (cached) return cached;
+  const registered = instance._registeredTools;
+  if (!registered || Object.keys(registered).length === 0) return [];
+  if (instance.isConnected?.()) {
+    log.debug("in-process MCP server already connected; schema check skipped", { server });
+    return [];
+  }
+  let wireTools;
+  try {
+    wireTools = await listInProcessTools(instance);
+  } catch (err) {
+    log.warn("could not inspect in-process MCP server tools; passing it unchanged", {
+      server,
+      error: err instanceof Error ? err.message : String(err)
+    });
+    return [];
+  }
+  const dropped = [];
+  for (const tool of wireTools) {
+    const reason = checkToolInputSchema(tool.inputSchema);
+    if (!reason) continue;
+    const handle = registered[tool.name];
+    if (typeof handle?.disable !== "function") {
+      log.warn("MCP tool has an invalid input schema but cannot be disabled", {
+        server,
+        tool: tool.name,
+        reason
+      });
+      continue;
+    }
+    handle.disable();
+    dropped.push({ server, tool: tool.name, reason });
+    log.warn("MCP tool dropped: invalid input schema", { server, tool: tool.name, reason });
+  }
+  filteredInstances.set(instance, dropped);
+  return dropped;
+}
+function formatDroppedToolsNotice(dropped) {
+  if (dropped.length === 0) return null;
+  const items = dropped.map((d) => `${d.tool} (server ${d.server}: ${d.reason})`).join("; ");
+  return `Some MCP tools were not loaded because the Claude API would reject their input schema: ${items}. Do not try to call them.`;
+}
+
+export { checkToolInputSchema, checkToolPropertyKeys, filterInProcessMcpServerTools, formatDroppedToolsNotice };
+//# sourceMappingURL=chunk-X5O56UO4.js.map
+//# sourceMappingURL=chunk-X5O56UO4.js.map

package/dist/chunk-X5O56UO4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/mcp-tool-schema-filter.ts"],"names":[],"mappings":";;;;AAuBO,IAAM,yBAAA,GAA4B,wBAAA;AAEzC,IAAM,kBAAA,GAAqB,8CAAA;AAC3B,IAAM,gBAAA,GAAmB,GAAA;AAYzB,IAAI,aAAA,GAAyC,IAAA;AAE7C,SAAS,wBAAA,GAA6C;AACpD,EAAA,IAAI,eAAe,OAAO,aAAA;AAG1B,EAAA,MAAM,GAAA,GAAM,IAAI,OAAA,CAAQ,EAAE,MAAA,EAAQ,OAAO,eAAA,EAAiB,KAAA,EAAO,MAAA,EAAQ,KAAA,EAAO,CAAA;AAChF,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,SAAA,CAAU,kBAAkB,CAAA;AACjD,EAAA,IAAI,CAAC,QAAA,EAAU,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAC7E,EAAA,aAAA,GAAgB,QAAA;AAChB,EAAA,OAAO,QAAA;AACT;AAOO,SAAS,sBAAsB,MAAA,EAAgC;AACpE,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG,OAAO,IAAA;AAC3E,EAAA,MAAM,QAAS,MAAA,CAAoC,UAAA;AACnD,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA,KAAU,YAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,IAAA;AACxE,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,EAAG;AACpC,IAAA,IAAI,CAAC,yBAAA,CAA0B,IAAA,CAAK,GAAG,CAAA,EAAG;AACxC,MAAA,OAAO,gBAAgB,IAAA,CAAK,SAAA,CAAU,GAAG,CAAC,CAAA,gBAAA,EAAmB,0BAA0B,MAAM,CAAA,CAAA;AAAA,IAC/F;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,qBAAqB,MAAA,EAAgC;AACnE,EAAA,IAAI,CAAC,UAAU,OAAO,MAAA,KAAW,YAAY,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClE,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,sBAAsB,MAAM,CAAA;AAC9C,EAAA,IAAI,WAAW,OAAO,SAAA;AAKtB,EAAA,MAAM,WAAW,wBAAA,EAAyB;AAC1C,EAAA,IAAI,CAAC,QAAA,CAAS,MAAM,CAAA,EAAG;AACrB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AACjC,IAAA,MAAM,KAAA,GAAQ,OAAO,YAAA,IAAgB,GAAA;AACrC,IAAA,OAAO,CAAA,qCAAA,EAAwC,KAAK,CAAA,CAAA,EAAI,KAAA,EAAO,WAAW,YAAY,CAAA,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,IAAA;AACT;AAsBA,IAAM,iBAAA,uBAAwB,OAAA,EAAkC;AAEhE,SAAS,cAAc,MAAA,EAA+C;AACpE,EAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,KAAW,UAAU,OAAO,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,MAAA;AACV,EAAA,IAAI,CAAA,CAAE,IAAA,KAAS,KAAA,IAAS,CAAC,CAAA,CAAE,YAAY,OAAO,CAAA,CAAE,QAAA,KAAa,QAAA,EAAU,OAAO,IAAA;AAC9E,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,OAAO,OAAO,KAAK,OAAA,KAAY,UAAA,IAAc,OAAO,IAAA,CAAK,KAAA,KAAU,aAAa,IAAA,GAAO,IAAA;AACzF;AAEA,SAAS,WAAA,CAAe,GAAe,IAAA,EAA0B;AAC/D,EAAA,IAAI,KAAA;AACJ,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAe,CAAC,GAAG,MAAA,KAAW;AAChD,IAAA,KAAA,GAAQ,UAAA,CAAW,MAAM,MAAA,CAAO,IAAI,KAAA,CAAM,GAAG,IAAI,CAAA,UAAA,CAAY,CAAC,CAAA,EAAG,gBAAgB,CAAA;AAAA,EACnF,CAAC,CAAA;AACD,EAAA,OAAO,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,EAAG,OAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,MAAM,YAAA,CAAa,KAAK,CAAC,CAAA;AACrE;AAOA,eAAe,mBAAmB,QAAA,EAAsD;AACtF,EAAA,MAAM,CAAC,UAAA,EAAY,UAAU,CAAA,GAAI,kBAAkB,gBAAA,EAAiB;AACpE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAoD;AACxE,EAAA,UAAA,CAAW,SAAA,GAAY,CAAC,GAAA,KAAQ;AAC9B,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,MAAM,KAAK,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,GAAW,EAAE,EAAA,GAAK,MAAA;AAC7C,IAAA,IAAI,OAAO,MAAA,EAAW;AACtB,IAAA,OAAA,CAAQ,GAAA,CAAI,EAAE,CAAA,GAAI,CAAC,CAAA;AACnB,IAAA,OAAA,CAAQ,OAAO,EAAE,CAAA;AAAA,EACnB,CAAA;AACA,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,EAAgB,MAAA,KAC5B,WAAA;AAAA,IACE,IAAI,OAAA,CAAiC,CAAC,OAAA,EAAS,MAAA,KAAW;AACxD,MAAA,MAAM,EAAA,GAAK,MAAA,EAAA;AACX,MAAA,OAAA,CAAQ,GAAA,CAAI,IAAI,OAAO,CAAA;AACvB,MAAA,UAAA,CAAW,IAAA,CAAK,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,QAAQ,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,MAAM,CAAA;AAAA,IACtE,CAAC,CAAA;AAAA,IACD;AAAA,GACF,CAAE,IAAA,CAAK,CAAC,GAAA,KAAQ;AACd,IAAA,IAAI,GAAA,CAAI,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,KAAK,CAAC,CAAA,CAAE,CAAA;AAC/E,IAAA,OAAQ,GAAA,CAAI,UAAU,EAAC;AAAA,EACzB,CAAC,CAAA;AAEH,EAAA,MAAM,WAAW,KAAA,EAAM;AACvB,EAAA,MAAM,QAAA,CAAS,QAAQ,UAAU,CAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,YAAA,EAAc;AAAA,MACvB,eAAA,EAAiB,YAAA;AAAA,MACjB,cAAc,EAAC;AAAA,MACf,UAAA,EAAY,EAAE,IAAA,EAAM,2BAAA,EAA6B,SAAS,OAAA;AAAQ,KACnE,CAAA;AACD,IAAA,MAAM,WAAW,IAAA,CAAK,EAAE,SAAS,KAAA,EAAO,MAAA,EAAQ,6BAA6B,CAAA;AAC7E,IAAA,MAAM,QAAoB,EAAC;AAC3B,IAAA,IAAI,MAAA;AACJ,IAAA,GAAG;AACD,MAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,YAAA,EAAc,SAAS,EAAE,MAAA,EAAO,GAAI,EAAE,CAAA;AAC9D,MAAA,KAAA,CAAM,IAAA,CAAK,GAAK,IAAA,CAAK,KAAA,IAAoC,EAAG,CAAA;AAC5D,MAAA,MAAA,GAAS,OAAO,IAAA,CAAK,UAAA,KAAe,QAAA,GAAW,KAAK,UAAA,GAAa,KAAA,CAAA;AAAA,IACnE,CAAA,QAAS,MAAA;AACT,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,SAAE;AAEA,IAAA,MAAM,QAAA,CAAS,KAAA,EAAM,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACvC;AACF;AAEA,IAAM,aAAa,YAAA,CAAa,EAAE,MAAM,KAAA,EAAO,OAAA,EAAS,sBAAsB,CAAA;AAe9E,eAAsB,6BAAA,CACpB,MAAA,EACA,MAAA,EACA,GAAA,GAAc,UAAA,EACa;AAC3B,EAAA,MAAM,QAAA,GAAW,cAAc,MAAM,CAAA;AACrC,EAAA,IAAI,CAAC,QAAA,EAAU,OAAO,EAAC;AACvB,EAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,GAAA,CAAI,QAAQ,CAAA;AAC7C,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,aAAa,QAAA,CAAS,gBAAA;AAC5B,EAAA,IAAI,CAAC,cAAc,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA,CAAE,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AACjE,EAAA,IAAI,QAAA,CAAS,eAAc,EAAG;AAG5B,IAAA,GAAA,CAAI,KAAA,CAAM,+DAAA,EAAiE,EAAE,MAAA,EAAQ,CAAA;AACrF,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,MAAM,mBAAmB,QAAQ,CAAA;AAAA,EAC/C,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,KAAK,qEAAA,EAAuE;AAAA,MAC9E,MAAA;AAAA,MACA,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACvD,CAAA;AACD,IAAA,OAAO,EAAC;AAAA,EACV;AAEA,EAAA,MAAM,UAA4B,EAAC;AACnC,EAAA,KAAA,MAAW,QAAQ,SAAA,EAAW;AAC5B,IAAA,MAAM,MAAA,GAAS,oBAAA,CAAqB,IAAA,CAAK,WAAW,CAAA;AACpD,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,MAAM,MAAA,GAAS,UAAA,CAAW,IAAA,CAAK,IAAI,CAAA;AACnC,IAAA,IAAI,OAAO,MAAA,EAAQ,OAAA,KAAY,UAAA,EAAY;AACzC,MAAA,GAAA,CAAI,KAAK,6DAAA,EAA+D;AAAA,QACtE,MAAA;AAAA,QACA,MAAM,IAAA,CAAK,IAAA;AAAA,QACX;AAAA,OACD,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,MAAA,CAAO,OAAA,EAAQ;AACf,IAAA,OAAA,CAAQ,KAAK,EAAE,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AAChD,IAAA,GAAA,CAAI,IAAA,CAAK,0CAA0C,EAAE,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AAAA,EACxF;AACA,EAAA,iBAAA,CAAkB,GAAA,CAAI,UAAU,OAAO,CAAA;AACvC,EAAA,OAAO,OAAA;AACT;AAMO,SAAS,yBAAyB,OAAA,EAAmD;AAC1F,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AACjC,EAAA,MAAM,QAAQ,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAI,CAAA,SAAA,EAAY,CAAA,CAAE,MAAM,CAAA,EAAA,EAAK,CAAA,CAAE,MAAM,CAAA,CAAA,CAAG,CAAA,CAAE,KAAK,IAAI,CAAA;AACzF,EAAA,OAAO,0FAA0F,KAAK,CAAA,0BAAA,CAAA;AACxG","file":"chunk-X5O56UO4.js","sourcesContent":["/**\n * Drop MCP tools whose input schema the Claude API would reject.\n *\n * The API refuses a whole request when any one tool fails either check below,\n * so a single bad tool turns every turn of the session into a 400. The Claude\n * CLI drops such tools itself, but only after it has fetched its remote\n * feature flags; with flag fetching off (`DISABLE_TELEMETRY=1` and friends)\n * it sends them as they are. The driver therefore runs both checks itself\n * before any tool reaches the CLI:\n *\n *   1. every top-level property key matches {@link TOOL_PROPERTY_KEY_PATTERN};\n *   2. the schema is valid JSON Schema draft 2020-12 (ajv's meta-schema).\n *\n * In-process servers are inspected through their own `tools/list`, over an\n * in-memory transport, so the checked schema is byte-for-byte what the CLI\n * would receive (zod shape → JSON Schema exactly as the server converts it).\n */\nimport { InMemoryTransport } from \"@modelcontextprotocol/sdk/inMemory.js\";\nimport { createLogger } from \"@skaile/workspaces/core/logging\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport { Ajv2020, type ValidateFunction } from \"ajv/dist/2020.js\";\n\n/** The Claude API's rule for top-level `input_schema.properties` keys. */\nexport const TOOL_PROPERTY_KEY_PATTERN = /^[a-zA-Z0-9_.-]{1,64}$/;\n\nconst DRAFT_2020_12_META = \"https://json-schema.org/draft/2020-12/schema\";\nconst PROBE_TIMEOUT_MS = 5_000;\n\n/** One tool removed before it reached the CLI. */\nexport interface DroppedMcpTool {\n  /** MCP server name as passed to the SDK (`skaile-capabilities`, `skaile-connectors`, ...). */\n  server: string;\n  /** Tool name on that server. */\n  tool: string;\n  /** Human-readable reason; safe to show to the agent. */\n  reason: string;\n}\n\nlet metaValidator: ValidateFunction | null = null;\n\nfunction draft202012MetaValidator(): ValidateFunction {\n  if (metaValidator) return metaValidator;\n  // Only the bundled meta-schema is compiled; tool schemas are validated as\n  // data. validateFormats:false — the API checks structure, not `format` strings.\n  const ajv = new Ajv2020({ strict: false, validateFormats: false, logger: false });\n  const validate = ajv.getSchema(DRAFT_2020_12_META);\n  if (!validate) throw new Error(\"ajv draft 2020-12 meta-schema is unavailable\");\n  metaValidator = validate;\n  return validate;\n}\n\n/**\n * Check only the property-key rule (rule 1).\n *\n * @returns `null` when every top-level property key is acceptable, otherwise the reason.\n */\nexport function checkToolPropertyKeys(schema: unknown): string | null {\n  if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) return null;\n  const props = (schema as { properties?: unknown }).properties;\n  if (!props || typeof props !== \"object\" || Array.isArray(props)) return null;\n  for (const key of Object.keys(props)) {\n    if (!TOOL_PROPERTY_KEY_PATTERN.test(key)) {\n      return `property key ${JSON.stringify(key)} does not match ${TOOL_PROPERTY_KEY_PATTERN.source}`;\n    }\n  }\n  return null;\n}\n\n/**\n * Check one tool input schema, as it goes on the wire, against both API rules.\n *\n * @returns `null` when the schema is acceptable, otherwise the reason it is not.\n */\nexport function checkToolInputSchema(schema: unknown): string | null {\n  if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) {\n    return \"input schema is not a JSON object\";\n  }\n  const keyReason = checkToolPropertyKeys(schema);\n  if (keyReason) return keyReason;\n  // Validated against the 2020-12 meta-schema regardless of the schema's own\n  // `$schema` (the MCP SDK stamps draft-07 on every in-process tool), because\n  // the API names 2020-12 in its 400. Deliberate consequence: a draft-07-only\n  // construct such as a tuple's `items: [...]` (`z.tuple()`) is dropped too.\n  const validate = draft202012MetaValidator();\n  if (!validate(schema)) {\n    const first = validate.errors?.[0];\n    const where = first?.instancePath || \"/\";\n    return `not valid JSON Schema draft 2020-12: ${where} ${first?.message ?? \"is invalid\"}`;\n  }\n  return null;\n}\n\n// ── In-process (type: \"sdk\") servers ─────────────────────────────────────────\n\ninterface RegisteredToolLike {\n  enabled?: boolean;\n  disable?: () => void;\n}\n\ninterface McpServerInstanceLike {\n  connect(transport: unknown): Promise<void>;\n  close(): Promise<void>;\n  isConnected?: () => boolean;\n  _registeredTools?: Record<string, RegisteredToolLike>;\n}\n\ninterface WireTool {\n  name: string;\n  inputSchema?: unknown;\n}\n\n/** Instances already filtered; their bad tools stay disabled for good. */\nconst filteredInstances = new WeakMap<object, DroppedMcpTool[]>();\n\nfunction sdkInstanceOf(config: unknown): McpServerInstanceLike | null {\n  if (!config || typeof config !== \"object\") return null;\n  const c = config as { type?: unknown; instance?: unknown };\n  if (c.type !== \"sdk\" || !c.instance || typeof c.instance !== \"object\") return null;\n  const inst = c.instance as McpServerInstanceLike;\n  return typeof inst.connect === \"function\" && typeof inst.close === \"function\" ? inst : null;\n}\n\nfunction withTimeout<T>(p: Promise<T>, what: string): Promise<T> {\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const timeout = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => reject(new Error(`${what} timed out`)), PROBE_TIMEOUT_MS);\n  });\n  return Promise.race([p, timeout]).finally(() => clearTimeout(timer));\n}\n\n/**\n * Speak just enough JSON-RPC to read the server's `tools/list`. A hand-rolled\n * exchange rather than the SDK `Client`, whose result validation would reject\n * the whole list over the one malformed tool this exists to find.\n */\nasync function listInProcessTools(instance: McpServerInstanceLike): Promise<WireTool[]> {\n  const [clientSide, serverSide] = InMemoryTransport.createLinkedPair();\n  const pending = new Map<number, (msg: Record<string, unknown>) => void>();\n  clientSide.onmessage = (msg) => {\n    const m = msg as Record<string, unknown>;\n    const id = typeof m.id === \"number\" ? m.id : undefined;\n    if (id === undefined) return;\n    pending.get(id)?.(m);\n    pending.delete(id);\n  };\n  let nextId = 1;\n  const call = (method: string, params: Record<string, unknown>) =>\n    withTimeout(\n      new Promise<Record<string, unknown>>((resolve, reject) => {\n        const id = nextId++;\n        pending.set(id, resolve);\n        clientSide.send({ jsonrpc: \"2.0\", id, method, params }).catch(reject);\n      }),\n      method,\n    ).then((res) => {\n      if (res.error) throw new Error(`${method} failed: ${JSON.stringify(res.error)}`);\n      return (res.result ?? {}) as Record<string, unknown>;\n    });\n\n  await clientSide.start();\n  await instance.connect(serverSide);\n  try {\n    await call(\"initialize\", {\n      protocolVersion: \"2025-06-18\",\n      capabilities: {},\n      clientInfo: { name: \"skaile-tool-schema-filter\", version: \"1.0.0\" },\n    });\n    await clientSide.send({ jsonrpc: \"2.0\", method: \"notifications/initialized\" });\n    const tools: WireTool[] = [];\n    let cursor: string | undefined;\n    do {\n      const page = await call(\"tools/list\", cursor ? { cursor } : {});\n      tools.push(...((page.tools as WireTool[] | undefined) ?? []));\n      cursor = typeof page.nextCursor === \"string\" ? page.nextCursor : undefined;\n    } while (cursor);\n    return tools;\n  } finally {\n    // Leaves the instance unconnected so the SDK can attach its own transport.\n    await instance.close().catch(() => {});\n  }\n}\n\nconst defaultLog = createLogger({ kind: \"mcp\", subkind: \"tool-schema-filter\" });\n\n/**\n * Disable every tool on an in-process MCP server whose wire input schema\n * fails {@link checkToolInputSchema}. Valid tools on the same server stay.\n *\n * Mutates the server in place (`RegisteredTool.disable()` hides a tool from\n * `tools/list` and refuses calls to it). Non-`sdk` configs (stdio/sse/http)\n * are returned untouched: the CLI spawns those, so the bridge cannot see\n * their tools. Fails open — a server that cannot be inspected is passed\n * through and a warning is logged, because blocking it would cost the\n * session every one of its valid tools.\n *\n * @returns the tools dropped from this server (empty when none or not inspectable).\n */\nexport async function filterInProcessMcpServerTools(\n  server: string,\n  config: unknown,\n  log: Logger = defaultLog,\n): Promise<DroppedMcpTool[]> {\n  const instance = sdkInstanceOf(config);\n  if (!instance) return [];\n  const cached = filteredInstances.get(instance);\n  if (cached) return cached;\n  const registered = instance._registeredTools;\n  if (!registered || Object.keys(registered).length === 0) return [];\n  if (instance.isConnected?.()) {\n    // Already attached to a live query; it was either filtered when first\n    // passed or belongs to someone else's transport. Do not steal it.\n    log.debug(\"in-process MCP server already connected; schema check skipped\", { server });\n    return [];\n  }\n\n  let wireTools: WireTool[];\n  try {\n    wireTools = await listInProcessTools(instance);\n  } catch (err) {\n    log.warn(\"could not inspect in-process MCP server tools; passing it unchanged\", {\n      server,\n      error: err instanceof Error ? err.message : String(err),\n    });\n    return [];\n  }\n\n  const dropped: DroppedMcpTool[] = [];\n  for (const tool of wireTools) {\n    const reason = checkToolInputSchema(tool.inputSchema);\n    if (!reason) continue;\n    const handle = registered[tool.name];\n    if (typeof handle?.disable !== \"function\") {\n      log.warn(\"MCP tool has an invalid input schema but cannot be disabled\", {\n        server,\n        tool: tool.name,\n        reason,\n      });\n      continue;\n    }\n    handle.disable();\n    dropped.push({ server, tool: tool.name, reason });\n    log.warn(\"MCP tool dropped: invalid input schema\", { server, tool: tool.name, reason });\n  }\n  filteredInstances.set(instance, dropped);\n  return dropped;\n}\n\n/**\n * The line the agent reads about dropped tools, mirroring what the CLI\n * reports when it drops them itself. `null` when nothing was dropped.\n */\nexport function formatDroppedToolsNotice(dropped: readonly DroppedMcpTool[]): string | null {\n  if (dropped.length === 0) return null;\n  const items = dropped.map((d) => `${d.tool} (server ${d.server}: ${d.reason})`).join(\"; \");\n  return `Some MCP tools were not loaded because the Claude API would reject their input schema: ${items}. Do not try to call them.`;\n}\n"]}

package/dist/{chunk-RAHLV6QG.js → chunk-XAKGLR4Y.js}

@@ -1,5 +1,5 @@
-import { openLibraryManager, createFullRegistry } from './chunk-4RKCOURU.js';
-import { logErr, logInfo, logWarn, logOk, S } from './chunk-WOE4LPGF.js';
+import { openLibraryManager, createFullRegistry } from './chunk-6V3DMJPL.js';
+import { logErr, logInfo, logWarn, logOk, S } from './chunk-S4R3WNRF.js';
 import { getStoreManifestsDir, LocalCatalogSource, writeCuratedManifest } from './chunk-UFWADBG6.js';
 import { computeDeterministicHash, discoverAssetsInTree } from './chunk-HGPSZXZP.js';
 import { WorkspaceYamlEditor } from './chunk-UWU572Q6.js';
@@ -313,12 +313,12 @@ function addSourceManifestCommands(src) {
   ).option("-C, --project-dir <dir>", "Project directory", process.cwd()).option("--publisher <name>", "Override the publisher (--overwrite only)").option("--dev", "Include assets under the source's dev_paths", false).option("--overwrite", "Discard curation and re-scan the full inventory", false).action((arg, opts) => runRebuild(arg, opts));
   manifest.command("verify <src>").description("Verify hashes, deps, and schema (read-only)").option("-C, --project-dir <dir>", "Project directory", process.cwd()).option("--strict", "Fail on advisory checks (warnings force a nonzero exit)", false).action((arg, opts) => runVerify(arg, opts));
   manifest.command("publish <src>").description("Push the curated sidecar manifest and publish it to the store").option("-C, --project-dir <dir>", "Project directory", process.cwd()).option("--as <namespace>", "Publisher namespace (default: your store username)").option("--sidecar-repo <url>", "Public GitHub repo you own to hold the curated manifest").option("--ref <gitref>", "Foreign source ref to ingest (branch/sha; default: main)").option("--dry-run", "Print the publish plan without pushing or calling the store", false).action(async (arg, opts) => {
-    const { runPublish } = await import('./source-manifest-publish-IJLVR3IL.js');
+    const { runPublish } = await import('./source-manifest-publish-UKWCZA2M.js');
     await runPublish(arg, opts);
   });
   manifest.command("propose <src>").description("Open a PR to upstream with the sidecar manifest").action(() => notWired("propose"));
   manifest.command("yank <src>").description("Retract the source's published assets from the store").option("-C, --project-dir <dir>", "Project directory", process.cwd()).option("--asset <ref>", "Yank only the asset matching this ref/name").action(async (arg, opts) => {
-    const { runYank } = await import('./source-manifest-publish-IJLVR3IL.js');
+    const { runYank } = await import('./source-manifest-publish-UKWCZA2M.js');
     await runYank(arg, opts);
   });
 }
@@ -684,5 +684,5 @@ function makeSourceCommand() {
 }
 
 export { autoSyncForSearch, ensureClone, findCacheKeyCollision, indexingHadFailures, legacySourceConfigHint, makeSourceCommand, normalizeSourceUrl, readProjectSources, resolveSourceArg, sourceClonePath, sourceMatchesKey, syncProjectSources };
-//# sourceMappingURL=chunk-RAHLV6QG.js.map
-//# sourceMappingURL=chunk-RAHLV6QG.js.map
+//# sourceMappingURL=chunk-XAKGLR4Y.js.map
+//# sourceMappingURL=chunk-XAKGLR4Y.js.map