@stratusagent/plugin-mcp 0.9.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Stratus Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,143 @@
+# @stratusagent/plugin-mcp
+
+The MCP bridge: mount any [Model Context Protocol](https://modelcontextprotocol.io)
+server's tools as Stratus tools — under the same allowlists, the same risk
+model, and the same approval policy as a tool written for Stratus. Every MCP
+server anyone has already written becomes available to an agent whose soul
+opts in, without that server's author knowing Stratus exists.
+
+## Install and enable
+
+```bash
+npm install -g @stratusagent/plugin-mcp
+```
+
+```jsonc
+// ~/.stratus/config.json — a trusted config only
+{
+  "plugins": {
+    "@stratusagent/plugin-mcp": {
+      "enabled": true,
+      "servers": {
+        // A subprocess server, spoken to over stdio:
+        "linear": {
+          "command": "npx",
+          "args": ["-y", "@linear/mcp-server"],
+          "env": { "LINEAR_API_KEY": "lin_api_…" }
+        },
+        // A remote server, spoken to over Streamable HTTP:
+        "docs": {
+          "url": "https://mcp.example.com/mcp",
+          "headers": { "Authorization": "Bearer …" }
+        }
+      }
+    }
+  }
+}
+```
+
+Then allowlist the tools in a soul, exactly as for any other toolset:
+
+```markdown
+---
+id: ava
+tools: [mcp.linear.*, fs.read]
+---
+```
+
+## Naming: `mcp.<server>.<tool>`
+
+Tools register namespaced by the server's config key: the Linear server's
+`create_issue` becomes `mcp.linear.create_issue`. A soul grants a whole
+server with `mcp.linear.*` (or every bridged server with `mcp.*`), and an
+operator reading a tool list sees at a glance which tools are somebody
+else's code. Server keys become name segments, so they must be lowercase
+`[a-z0-9_-]`; a discovered tool name is folded to the same shape
+(`createIssue` → `mcp.linear.createissue`), and two names that fold to the
+same segment refuse the server rather than letting one silently answer for
+the other.
+
+## Risk: ours, not the server's
+
+MCP has no risk vocabulary, and a remote server's self-description is
+exactly the input the trust model says not to take at face value. So
+**every bridged tool registers `gated`** — a human decides when nobody is
+watching — even when the server describes it as read-only. The package's
+manifest declares the namespace (`toolsDiscovered: [{ "namespace": "mcp.*",
+"risk": "gated" }]`) and the plugin host enforces it at registration, on
+first connect and identically on reconnect.
+
+The override is the operator's, explicit and per tool, through the host's
+`toolRisks` key — sibling to `enabled`, applied by the host rather than by
+this package's code:
+
+```jsonc
+"@stratusagent/plugin-mcp": {
+  "enabled": true,
+  "servers": { "linear": { … } },
+  "toolRisks": {
+    "mcp.linear.get_issue": "safe",      // you read the server; it only reads
+    "mcp.linear.delete_issue": "dangerous"
+  }
+}
+```
+
+## Server settings
+
+| Setting | Applies to | Meaning |
+| --- | --- | --- |
+| `command`, `args`, `cwd` | stdio | The subprocess to spawn. Exactly one of `command` / `url` per server. |
+| `env` | stdio | Variables set outright, name to value — where a server's API key goes. |
+| `passEnv` | stdio | Names forwarded from the daemon's environment. Defaults to `PATH`, `HOME`, `LANG`, `LC_ALL`, `TZ`. |
+| `url` | HTTP | The Streamable HTTP endpoint. |
+| `headers` | HTTP | Headers sent with every request — where a bearer token goes. |
+| `connectTimeoutMs` | both | One budget for the connect handshake *and* the whole tool-discovery walk (default 15000), so a server can stall startup neither by being unreachable nor by paginating slowly. |
+| `callTimeoutMs` | both | Per-call budget (default 60000). |
+
+A setting on the wrong transport kind — `headers` on a stdio server, `env`
+on an HTTP one — is refused at load rather than silently ignored, and so is
+a `passEnv` that is not an array of names: a grant an operator believes is
+in effect must never quietly be nothing.
+
+**The stdio environment is replaced, not extended.** A subprocess MCP
+server is a subprocess, and gets the same treatment `tool-shell`'s commands
+do: exactly what this config granted — the harmless default inheritance,
+`passEnv` names, `env` values — and nothing else. The daemon's environment,
+where `ANTHROPIC_API_KEY` and every other exported key lives, is not there
+to read.
+
+OAuth-authenticated HTTP servers are not modeled yet; a static bearer in
+`headers` is what exists today.
+
+## Lifecycle
+
+- **Connect at startup, degrade when down.** A server that is unreachable
+  leaves the daemon serving everything else, with a log line naming the
+  server and the config block to check; its tools appear when it comes back.
+  Reconnection backs off from one second to a minute.
+- **Discovery is per connect.** Tool descriptors are cached from connect to
+  connect; a server that changes its list mid-run is picked up on
+  reconnect. A tool discovered only then registers normally; one no longer
+  advertised is unregistered — both logged, because an agent's allowlist
+  may no longer mean what it meant.
+- **While a server is down**, calls to its tools fail with a "not
+  connected" error rather than hanging.
+
+## Results
+
+Tool results normalize into plain values:
+
+- Text content comes back as a string (or under `text` when there is more).
+- `structuredContent` passes through as `structured`.
+- **Images, audio, and binary resources are written into the agent's
+  workspace** (`~/.stratus/workspaces/<agent>/mcp/<server>/`) and returned
+  under `files` — the key channels deliver as attachments, so an image from
+  a bridged tool reaches Slack like a screenshot does.
+- Resource links pass through under `resources`.
+- A result the server marks `isError` fails the call, like any failing tool.
+
+## What this is not
+
+Stratus does not become an MCP *server* here (exposing its tools to other
+clients is a different step with a different threat model), and MCP prompts,
+resources, and sampling are out of scope beyond what tool results need.

package/dist/index.d.ts

@@ -0,0 +1,58 @@
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import { type JsonObject, type Plugin } from '@stratusagent/core';
+export { bridgedToolName, normalizeCallResult, sanitizeToolSegment, SERVER_NAME_PATTERN } from './normalize.ts';
+/** What one configured server looks like once its block has been read. */
+export interface McpServerSpec {
+    /** The config key — a name segment, so `mcp.<name>.*` is what a soul writes. */
+    name: string;
+    /** stdio: the executable to spawn. Exactly one of `command` and `url`. */
+    command?: string;
+    args: string[];
+    cwd?: string;
+    /**
+     * The subprocess environment, already resolved: the scrubbed default
+     * inheritance plus whatever the operator granted by name or set
+     * outright. This is the whole environment — the daemon's is not there
+     * to read.
+     */
+    env: Record<string, string>;
+    /** HTTP: the Streamable HTTP endpoint. */
+    url?: string;
+    /** HTTP: headers sent with every request — where a bearer token goes. */
+    headers: Record<string, string>;
+    connectTimeoutMs: number;
+    callTimeoutMs: number;
+}
+export interface McpPluginOptions {
+    /** The environment `passEnv` grants *from*. Defaults to the daemon's. */
+    processEnv?: NodeJS.ProcessEnv;
+    /**
+     * Transport seam for tests: hand back a connected pair instead of
+     * spawning or dialing. The default builds stdio or Streamable HTTP from
+     * the spec.
+     */
+    transportFor?: (spec: McpServerSpec) => Transport | Promise<Transport>;
+    /**
+     * Reconnect pacing, attempt (0-based) to delay. The default doubles from
+     * one second and caps at one minute; tests shrink it so a reconnect is
+     * an event to await rather than a wall-clock to sleep through.
+     */
+    reconnectDelayMs?: (attempt: number) => number;
+    /**
+     * Called after a server (re)connects and its tools are registered — the
+     * gate a test holds instead of guessing at timers, and a hook a host
+     * could count connections with.
+     */
+    onConnected?: (server: string) => void;
+    log?: (message: string) => void;
+    warn?: (message: string) => void;
+    /**
+     * Clock seam for the discovery deadline: the budget arithmetic only shows
+     * itself when time passes mid-walk, which a real clock makes a race.
+     */
+    now?: () => number;
+}
+export declare const createMcpPlugin: (config?: JsonObject, options?: McpPluginOptions) => Plugin;
+/** The loader's ABI. See `docs/architecture/plugins.md`. */
+export declare const createPlugin: (config: JsonObject) => Plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAE/E,OAAO,EAGL,KAAK,UAAU,EAEf,KAAK,MAAM,EAIZ,MAAM,oBAAoB,CAAC;AAS5B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAiChH,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACvE;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/C;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AA+LD,eAAO,MAAM,eAAe,GAAI,SAAQ,UAAe,EAAE,UAAS,gBAAqB,KAAG,MAkWzF,CAAC;AAEF,4DAA4D;AAC5D,eAAO,MAAM,YAAY,GAAI,QAAQ,UAAU,KAAG,MAAiC,CAAC"}

package/dist/index.js

@@ -0,0 +1,497 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { StreamableHTTPClientTransport, StreamableHTTPError } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
+import { DEFAULT_SUBPROCESS_PASS_ENV, } from '@stratusagent/core';
+import { bridgedToolName, normalizeCallResult, sanitizeToolSegment, SERVER_NAME_PATTERN, } from "./normalize.js";
+export { bridgedToolName, normalizeCallResult, sanitizeToolSegment, SERVER_NAME_PATTERN } from "./normalize.js";
+/**
+ * The MCP bridge: mounts Model Context Protocol servers as Stratus tools.
+ *
+ * Each configured server's tools register as `mcp.<server>.<tool>`, so a
+ * soul allowlists `mcp.linear.*` and an operator can see at a glance which
+ * tools are somebody else's code. Risk is ours, not the server's: the
+ * manifest declares the `mcp.*` namespace `gated`, the registration view
+ * enforces it, and an operator who has read a server lowers a specific
+ * tool through the host's `toolRisks` key — never through anything this
+ * package could do on its own.
+ *
+ * Lifecycle: connect at startup, reconnect with backoff, and a server that
+ * is down degrades to its tools being unavailable rather than failing the
+ * daemon's start. Tool descriptors are built once per connect; a server
+ * that changes its list mid-run is picked up on reconnect, and the change
+ * is logged because an agent's allowlist may no longer mean what it meant.
+ */
+const DEFAULT_CONNECT_TIMEOUT_MS = 15_000;
+const DEFAULT_CALL_TIMEOUT_MS = 60_000;
+const RECONNECT_INITIAL_DELAY_MS = 1_000;
+const RECONNECT_MAX_DELAY_MS = 60_000;
+/**
+ * How many pages of `tools/list` discovery will follow. The per-request
+ * timeout bounds each page, not the walk — a server that always answers
+ * with a nextCursor would otherwise hold `setup()`, and with it the
+ * daemon's start, forever. Which is exactly the kind of say-so this
+ * package's trust model exists to not extend to a remote server.
+ */
+const MAX_TOOL_LIST_PAGES = 100;
+class McpConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'McpConfigError';
+    }
+}
+const isObject = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const asStringRecord = (value, where) => {
+    if (value === undefined) {
+        return {};
+    }
+    if (!isObject(value)) {
+        throw new McpConfigError(`${where} must be an object of string values.`);
+    }
+    const record = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry !== 'string') {
+            throw new McpConfigError(`${where}.${key} must be a string.`);
+        }
+        record[key] = entry;
+    }
+    return record;
+};
+const asTimeout = (value, fallback) => typeof value === 'number' && Number.isFinite(value) && value > 0 ? value : fallback;
+const asStringArray = (value, where) => {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (!Array.isArray(value) || value.some((entry) => typeof entry !== 'string')) {
+        throw new McpConfigError(`${where} must be an array of strings.`);
+    }
+    return value;
+};
+/**
+ * Resolve one server block into a spec, or refuse it. Refusals here are
+ * configuration errors and fail the plugin at load — a mistyped block is
+ * the operator's to fix, unlike a server that is merely down.
+ */
+const resolveServerSpec = (name, block, processEnv) => {
+    const where = `servers.${name}`;
+    if (!SERVER_NAME_PATTERN.test(name)) {
+        throw new McpConfigError(`Server name ${JSON.stringify(name)} is not usable: it becomes a tool-name segment (mcp.${name}.*), so it must be lowercase [a-z0-9_-] starting with a letter or digit.`);
+    }
+    if (!isObject(block)) {
+        throw new McpConfigError(`${where} must be an object.`);
+    }
+    const command = typeof block.command === 'string' && block.command.length > 0 ? block.command : undefined;
+    const url = typeof block.url === 'string' && block.url.length > 0 ? block.url : undefined;
+    if ((command === undefined) === (url === undefined)) {
+        throw new McpConfigError(`${where} must set exactly one of "command" (stdio) or "url" (HTTP).`);
+    }
+    if (url !== undefined) {
+        try {
+            void new URL(url);
+        }
+        catch {
+            throw new McpConfigError(`${where}.url is not a URL: ${url}`);
+        }
+    }
+    // A setting on the wrong transport kind is refused, not quietly unused:
+    // an operator who wrote `headers` for a server that turned out to be
+    // stdio believes a bearer token is being sent, and the mistyped grant
+    // that silently does nothing is the failure mode the toolRisks parser
+    // already refuses by design.
+    for (const key of ['args', 'cwd', 'env', 'passEnv']) {
+        if (url !== undefined && block[key] !== undefined) {
+            throw new McpConfigError(`${where}.${key} only applies to a stdio server ("command"); this server sets "url".`);
+        }
+    }
+    if (command !== undefined && block.headers !== undefined) {
+        throw new McpConfigError(`${where}.headers only applies to an HTTP server ("url"); this server sets "command".`);
+    }
+    // The replacement-environment treatment: the child gets exactly what was
+    // granted — the harmless default inheritance, names the operator
+    // forwarded, values the operator set — and nothing else. The daemon's
+    // environment holds every key an operator exported, and a subprocess MCP
+    // server is a subprocess: ANTHROPIC_API_KEY must not be there to read.
+    const env = {};
+    const passEnv = asStringArray(block.passEnv, `${where}.passEnv`) ?? [...DEFAULT_SUBPROCESS_PASS_ENV];
+    for (const key of passEnv) {
+        const value = processEnv[key];
+        if (value !== undefined) {
+            env[key] = value;
+        }
+    }
+    Object.assign(env, asStringRecord(block.env, `${where}.env`));
+    return {
+        name,
+        ...(command !== undefined ? { command } : {}),
+        args: asStringArray(block.args, `${where}.args`) ?? [],
+        ...(typeof block.cwd === 'string' && block.cwd.length > 0 ? { cwd: block.cwd } : {}),
+        env,
+        ...(url !== undefined ? { url } : {}),
+        headers: asStringRecord(block.headers, `${where}.headers`),
+        connectTimeoutMs: asTimeout(block.connectTimeoutMs, DEFAULT_CONNECT_TIMEOUT_MS),
+        callTimeoutMs: asTimeout(block.callTimeoutMs, DEFAULT_CALL_TIMEOUT_MS),
+    };
+};
+/**
+ * Whether a failed call means the *connection* failed, as opposed to the
+ * tool. A stdio server dying fires `client.onclose`, but a Streamable HTTP
+ * server that restarted or expired its session reports the loss only on
+ * the request path — the stale `mcp-session-id` gets an HTTP error, and
+ * nothing ever closes the transport — so without classifying rejections
+ * here, every later call would keep reusing the dead session until the
+ * daemon restarted.
+ *
+ * - `StreamableHTTPError` is the transport's own word for an HTTP-level
+ *   failure (a 404 on a stale session, a 5xx).
+ * - `ErrorCode.ConnectionClosed` is a request rejected because the
+ *   transport went away under it.
+ * - A `TypeError` is how `fetch` reports a network failure (the server is
+ *   simply gone); no JSON-RPC error from a live server arrives as one.
+ *
+ * Everything else — the server answering with a tool error, invalid
+ * params, a timeout on a slow tool — is a live connection and no reason
+ * to tear it down.
+ */
+const isConnectionFailure = (error) => error instanceof StreamableHTTPError
+    || (error instanceof McpError && error.code === ErrorCode.ConnectionClosed)
+    || error instanceof TypeError;
+const buildTransport = (spec) => {
+    if (spec.command !== undefined) {
+        return new StdioClientTransport({
+            command: spec.command,
+            args: spec.args,
+            ...(spec.cwd !== undefined ? { cwd: spec.cwd } : {}),
+            env: spec.env,
+        });
+    }
+    // The assertion papers over the SDK's own optional-property types not
+    // being written for exactOptionalPropertyTypes; the object is a Transport.
+    return new StreamableHTTPClientTransport(new URL(spec.url), {
+        requestInit: { headers: spec.headers },
+    });
+};
+export const createMcpPlugin = (config = {}, options = {}) => {
+    const log = options.log ?? ((message) => console.error(`[plugin-mcp] ${message}`));
+    const warn = options.warn ?? ((message) => console.error(`[plugin-mcp] ${message}`));
+    const processEnv = options.processEnv ?? process.env;
+    const delayFor = options.reconnectDelayMs
+        ?? ((attempt) => Math.min(RECONNECT_INITIAL_DELAY_MS * 2 ** attempt, RECONNECT_MAX_DELAY_MS));
+    const workspaceRoot = typeof config.workspaceRoot === 'string' ? config.workspaceRoot : undefined;
+    if (!isObject(config.servers)) {
+        throw new McpConfigError('plugins["@stratusagent/plugin-mcp"] needs a "servers" object — one entry per MCP server, keyed by the name its tools mount under.');
+    }
+    const states = Object.entries(config.servers).map(([name, block]) => ({
+        spec: resolveServerSpec(name, block, processEnv),
+        client: undefined,
+        pending: undefined,
+        connected: false,
+        connecting: false,
+        attempt: 0,
+        timer: undefined,
+        tools: new Map(),
+    }));
+    let view;
+    let disposed = false;
+    const proxyTool = (state, registeredName, info) => ({
+        name: registeredName,
+        description: info.description ?? `Tool ${info.mcpName} on the MCP server ${state.spec.name}.`,
+        ...(info.parameters ? { parameters: info.parameters } : {}),
+        // No risk claim, deliberately: what a bridged tool registers at is the
+        // namespace's declared risk (and any operator override), applied by
+        // the manifest-bound view — the server's opinion of itself never
+        // enters, and neither does this package's.
+        async execute(input, session, context) {
+            const client = state.connected ? state.client : undefined;
+            if (!client) {
+                throw new Error(`MCP server ${state.spec.name} is not connected; ${registeredName} is unavailable until it comes back.`);
+            }
+            // Identity, not equality, against the live map: syncTools keeps the
+            // same descriptor object across a reconnect exactly when nothing
+            // about the tool changed. A call can be held between issue and
+            // execution — parked on a human's approval — and a reconnect that
+            // swapped the definition underneath it must fail the call rather
+            // than run the replacement with input approved for the original.
+            if (state.tools.get(registeredName) !== info) {
+                throw new Error(`${registeredName} changed on MCP server ${state.spec.name} after this call was issued — the server now advertises a different definition, or none. Call it again to run the updated tool.`);
+            }
+            let result;
+            try {
+                result = await client.callTool({ name: info.mcpName, arguments: input }, undefined, {
+                    timeout: state.spec.callTimeoutMs,
+                    ...(context?.signal ? { signal: context.signal } : {}),
+                });
+            }
+            catch (error) {
+                // A session-loss surfaces here, not on onclose — see
+                // isConnectionFailure. Guarded on the client this call used, so a
+                // reconnect that already replaced it is left alone.
+                if (isConnectionFailure(error) && state.client === client) {
+                    dropConnection(state, error);
+                }
+                throw error;
+            }
+            return normalizeCallResult(result, {
+                server: state.spec.name,
+                tool: info.mcpName,
+                agentId: session.agent.id,
+                ...(workspaceRoot !== undefined ? { workspaceRoot } : {}),
+            });
+        },
+    });
+    /** Every page of `tools/list`, not just the first. */
+    const listAllTools = async (client, spec, remainingMs) => {
+        const tools = [];
+        let cursor;
+        let pages = 0;
+        do {
+            pages += 1;
+            if (pages > MAX_TOOL_LIST_PAGES) {
+                throw new Error(`MCP server ${spec.name} returned more than ${MAX_TOOL_LIST_PAGES} pages of tools/list; refusing discovery rather than following its cursors forever.`);
+            }
+            // One budget for the whole walk, not one per page: a fresh timeout
+            // for every request would let a slowly paginating server multiply
+            // the advertised connect bound by its page count, holding setup —
+            // and daemon start — for minutes on end.
+            const budget = remainingMs();
+            if (budget <= 0) {
+                throw new Error(`MCP server ${spec.name} did not finish tool discovery within its ${spec.connectTimeoutMs}ms connect budget.`);
+            }
+            // A cursor is the server's opaque string, the empty string included —
+            // dropped on truthiness, an "" cursor would refetch the first page
+            // until the page guard condemned a compliant server.
+            const page = await client.listTools(cursor !== undefined ? { cursor } : undefined, { timeout: budget });
+            tools.push(...page.tools);
+            cursor = page.nextCursor;
+        } while (cursor !== undefined);
+        return tools;
+    };
+    /**
+     * Reconcile what a server advertises with what is registered — first
+     * connect and reconnect run the identical path, through the identical
+     * manifest-bound gate. Every difference is logged: a tool appearing,
+     * disappearing, or changing shape changes what an agent's allowlist
+     * selects.
+     */
+    const syncTools = (state, advertised, firstConnect) => {
+        if (!view) {
+            return;
+        }
+        const next = new Map();
+        for (const tool of advertised) {
+            const segment = sanitizeToolSegment(tool.name);
+            if (segment === undefined) {
+                throw new McpConfigError(`MCP server ${state.spec.name} advertises a tool named ${JSON.stringify(tool.name)}, which leaves nothing usable as a name segment.`);
+            }
+            const registered = bridgedToolName(state.spec.name, segment);
+            if (next.has(registered)) {
+                // Folding two of the server's names into one registered name would
+                // make the second silently answer calls meant for the first —
+                // refused, the same reason any collision is.
+                throw new McpConfigError(`MCP server ${state.spec.name} advertises two tools that both bridge to ${registered} (one of them ${JSON.stringify(tool.name)}). Rename one on the server.`);
+            }
+            next.set(registered, {
+                mcpName: tool.name,
+                ...(typeof tool.description === 'string' ? { description: tool.description } : {}),
+                ...(isObject(tool.inputSchema) ? { parameters: tool.inputSchema } : {}),
+            });
+        }
+        for (const registered of state.tools.keys()) {
+            if (!next.has(registered)) {
+                view.unregister(registered);
+                log(`mcp server ${state.spec.name} no longer advertises ${registered} — unregistered; souls allowlisting it select nothing until it returns`);
+            }
+        }
+        for (const [registered, info] of next) {
+            const existing = state.tools.get(registered);
+            const changed = existing !== undefined
+                && (existing.mcpName !== info.mcpName
+                    || existing.description !== info.description
+                    || JSON.stringify(existing.parameters) !== JSON.stringify(info.parameters));
+            if (existing !== undefined && !changed) {
+                // The identical descriptor keeps its identity across the
+                // reconnect, on purpose: the proxy's staleness check compares the
+                // object it captured against this map, and only an actual change
+                // may fail a call that was issued — or approved — before it.
+                next.set(registered, existing);
+                continue;
+            }
+            if (changed) {
+                view.unregister(registered);
+            }
+            try {
+                view.register(proxyTool(state, registered, info));
+            }
+            catch (error) {
+                // On first connect this is a load-time refusal and propagates; on
+                // reconnect there is no load to refuse, so the one colliding tool
+                // is skipped, named, and everything else keeps working.
+                if (firstConnect) {
+                    throw error;
+                }
+                next.delete(registered);
+                warn(`mcp server ${state.spec.name}: ${registered} was not registered: ${error instanceof Error ? error.message : String(error)}`);
+                continue;
+            }
+            if (!firstConnect) {
+                log(`mcp server ${state.spec.name} ${changed ? 'changed' : 'added'} ${registered}${changed ? '' : ' — an allowlist naming mcp.' + state.spec.name + '.* now grants it'}`);
+            }
+        }
+        state.tools = next;
+    };
+    /**
+     * Treat a server whose connection failed mid-call as down: further calls
+     * refuse with "not connected" instead of re-sending into a dead session,
+     * and the reconnect loop brings it back. The onclose handler is keyed to
+     * `state.client`, already cleared here, so closing cannot schedule a
+     * second reconnect.
+     */
+    const dropConnection = (state, cause) => {
+        const client = state.client;
+        if (!client || disposed) {
+            return;
+        }
+        state.client = undefined;
+        state.connected = false;
+        warn(`mcp server ${state.spec.name} connection failed mid-call — its tools are unavailable until it reconnects: `
+            + `${cause instanceof Error ? cause.message : String(cause)}`);
+        void client.close().catch(() => { });
+        scheduleReconnect(state);
+    };
+    const scheduleReconnect = (state) => {
+        if (disposed || state.timer !== undefined || state.connecting) {
+            return;
+        }
+        const delay = delayFor(state.attempt);
+        state.attempt += 1;
+        state.timer = setTimeout(() => {
+            state.timer = undefined;
+            void connect(state, false).catch((error) => {
+                warn(`mcp server ${state.spec.name} reconnect failed: ${error instanceof Error ? error.message : String(error)}`);
+                scheduleReconnect(state);
+            });
+        }, delay);
+        // A daemon holds the process open anyway; a one-shot CLI run must not
+        // be kept alive by a server that is never coming back.
+        state.timer.unref?.();
+    };
+    const connect = async (state, firstConnect) => {
+        if (disposed || state.connecting) {
+            return;
+        }
+        state.connecting = true;
+        try {
+            const transport = await (options.transportFor ?? buildTransport)(state.spec);
+            // `disposed` is re-checked after every await from here on: dispose()
+            // closes state.client, and a connect still in flight when it runs —
+            // one server's load failing while another is mid-handshake — would
+            // otherwise finish afterwards and strand a connected client, which
+            // for a stdio server is an orphaned subprocess holding granted env.
+            if (disposed) {
+                await transport.close().catch(() => { });
+                return;
+            }
+            // Tracked from here until the connect settles (the finally below),
+            // so dispose() can cut a handshake short instead of waiting for
+            // these awaits to notice `disposed` on their own.
+            state.pending = transport;
+            const client = new Client({ name: '@stratusagent/plugin-mcp', version: '0.9.0' });
+            // A close that lands before this client is published cannot be
+            // dropped: the identity guard below would discard it, and connect()
+            // would then mark an already-closed client connected — leaving the
+            // first tool call to fail for nothing and recovery to the call-path
+            // classifier.
+            let closedBeforePublish = false;
+            client.onclose = () => {
+                if (disposed) {
+                    return;
+                }
+                if (state.client !== client) {
+                    closedBeforePublish = true;
+                    return;
+                }
+                state.connected = false;
+                state.client = undefined;
+                warn(`mcp server ${state.spec.name} disconnected — its tools are unavailable until it comes back`);
+                scheduleReconnect(state);
+            };
+            // One deadline for the handshake and the whole discovery walk — see
+            // listAllTools for why the walk must not get a fresh budget per page.
+            const clock = options.now ?? Date.now;
+            const deadline = clock() + state.spec.connectTimeoutMs;
+            await client.connect(transport, { timeout: state.spec.connectTimeoutMs });
+            try {
+                const advertised = await listAllTools(client, state.spec, () => deadline - clock());
+                if (disposed) {
+                    throw new Error(`disposed while discovering ${state.spec.name}`);
+                }
+                if (closedBeforePublish) {
+                    throw new Error(`MCP server ${state.spec.name} closed the connection during discovery.`);
+                }
+                syncTools(state, advertised, firstConnect);
+            }
+            catch (error) {
+                // The client is connected but not yet stored, so nothing else will
+                // ever close it — for a stdio server that is a spawned subprocess
+                // left running. Let go before reporting the failure.
+                await client.close().catch(() => { });
+                throw error;
+            }
+            state.client = client;
+            state.connected = true;
+            state.attempt = 0;
+            log(`mcp server ${state.spec.name} connected — ${state.tools.size} tool${state.tools.size === 1 ? '' : 's'} under mcp.${state.spec.name}.*`);
+            options.onConnected?.(state.spec.name);
+        }
+        finally {
+            state.connecting = false;
+            state.pending = undefined;
+        }
+    };
+    return {
+        name: '@stratusagent/plugin-mcp',
+        async setup(context) {
+            view = context.tools;
+            await Promise.all(states.map(async (state) => {
+                try {
+                    await connect(state, true);
+                }
+                catch (error) {
+                    // A configuration or trust refusal fails the plugin at load; a
+                    // server that is merely unreachable must not — the daemon goes
+                    // on serving every other agent, and this server's tools appear
+                    // when it does.
+                    if (error instanceof McpConfigError || error?.name === 'PluginManifestError') {
+                        throw error;
+                    }
+                    warn(`mcp server ${state.spec.name} is unreachable — starting without its tools; they register when it comes back. `
+                        + `Check ${state.spec.command !== undefined ? `the command (${state.spec.command})` : `the endpoint (${state.spec.url})`} `
+                        + `under plugins["@stratusagent/plugin-mcp"].servers.${state.spec.name}. `
+                        + `(${error instanceof Error ? error.message : String(error)})`);
+                    scheduleReconnect(state);
+                }
+            }));
+        },
+        async dispose() {
+            disposed = true;
+            await Promise.allSettled(states.map(async (state) => {
+                if (state.timer !== undefined) {
+                    clearTimeout(state.timer);
+                    state.timer = undefined;
+                }
+                // A connect still mid-handshake first: closing its transport kills
+                // the child and rejects the in-flight awaits, so shutdown does not
+                // wait out a connect timeout on a server that is never answering.
+                const pending = state.pending;
+                state.pending = undefined;
+                await pending?.close().catch(() => { });
+                const client = state.client;
+                state.client = undefined;
+                state.connected = false;
+                await client?.close();
+            }));
+        },
+    };
+};
+/** The loader's ABI. See `docs/architecture/plugins.md`. */
+export const createPlugin = (config) => createMcpPlugin(config);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,oDAAoD,CAAC;AACxH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EACL,2BAA2B,GAQ5B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAEhH;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AACzC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAuDhC,MAAM,cAAe,SAAQ,KAAK;IAChC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,cAAc,GAAG,CAAC,KAAc,EAAE,KAAa,EAA0B,EAAE;IAC/E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,IAAI,GAAG,oBAAoB,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,QAAgB,EAAU,EAAE,CAC7D,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAEtF,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,KAAa,EAAwB,EAAE;IAC5E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CACxB,IAAY,EACZ,KAAc,EACd,UAA6B,EACd,EAAE;IACjB,MAAM,KAAK,GAAG,WAAW,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,cAAc,CACtB,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uDAAuD,IAAI,0EAA0E,CACzK,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1F,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,6DAA6D,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,sBAAsB,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,sEAAsE;IACtE,sEAAsE;IACtE,6BAA6B;IAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAU,EAAE,CAAC;QAC7D,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,IAAI,GAAG,sEAAsE,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,cAAc,CAAC,GAAG,KAAK,8EAA8E,CAAC,CAAC;IACnH,CAAC;IAED,yEAAyE;IACzE,iEAAiE;IACjE,sEAAsE;IACtE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,CAAC;IACrG,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC;IAE9D,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,EAAE;QACtD,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG;QACH,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,CAAC;QAC1D,gBAAgB,EAAE,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;QAC/E,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,uBAAuB,CAAC;KACvE,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAW,EAAE,CACtD,KAAK,YAAY,mBAAmB;OACjC,CAAC,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,gBAAgB,CAAC;OACxE,KAAK,YAAY,SAAS,CAAC;AAEhC,MAAM,cAAc,GAAG,CAAC,IAAmB,EAAa,EAAE;IACxD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,oBAAoB,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,OAAO,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAa,CAAC,EAAE;QACpE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;KACvC,CAAyB,CAAC;AAC7B,CAAC,CAAC;AAoCF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAqB,EAAE,EAAE,UAA4B,EAAE,EAAU,EAAE;IACjG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB;WACpC,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,GAAG,CAAC,IAAI,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxG,MAAM,aAAa,GAAG,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAElG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,cAAc,CACtB,mIAAmI,CACpI,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAkB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,IAAI,GAAG,EAAE;KACjB,CAAC,CAAC,CAAC;IAEJ,IAAI,IAA8B,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAE,cAAsB,EAAE,IAAoB,EAAQ,EAAE,CAAC,CAAC;QAC7F,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,QAAQ,IAAI,CAAC,OAAO,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG;QAC7F,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,uEAAuE;QACvE,oEAAoE;QACpE,iEAAiE;QACjE,2CAA2C;QAC3C,KAAK,CAAC,OAAO,CAAC,KAAiB,EAAE,OAAgB,EAAE,OAA0B;YAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,sBAAsB,cAAc,sCAAsC,CACxG,CAAC;YACJ,CAAC;YACD,oEAAoE;YACpE,iEAAiE;YACjE,+DAA+D;YAC/D,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,GAAG,cAAc,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,iIAAiI,CAC5L,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE;oBAClF,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa;oBACjC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qDAAqD;gBACrD,kEAAkE;gBAClE,oDAAoD;gBACpD,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1D,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,mBAAmB,CAAC,MAAM,EAAE;gBACjC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBACvB,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;gBACzB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,YAAY,GAAG,KAAK,EACxB,MAAc,EACd,IAAmB,EACnB,WAAyB,EACE,EAAE;QAC7B,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,IAAI,MAA0B,CAAC;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,GAAG,CAAC;YACF,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,CAAC,IAAI,uBAAuB,mBAAmB,qFAAqF,CACvJ,CAAC;YACJ,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,yCAAyC;YACzC,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;YAC7B,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,cAAc,IAAI,CAAC,IAAI,6CAA6C,IAAI,CAAC,gBAAgB,oBAAoB,CAC9G,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,mEAAmE;YACnE,qDAAqD;YACrD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACxG,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC3B,CAAC,QAAQ,MAAM,KAAK,SAAS,EAAE;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,SAAS,GAAG,CAChB,KAAkB,EAClB,UAA4B,EAC5B,YAAqB,EACf,EAAE;QACR,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,cAAc,CACtB,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD,CACrI,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzB,mEAAmE;gBACnE,8DAA8D;gBAC9D,6CAA6C;gBAC7C,MAAM,IAAI,cAAc,CACtB,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,6CAA6C,UAAU,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAC7J,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE;gBACnB,OAAO,EAAE,IAAI,CAAC,IAAI;gBAClB,GAAG,CAAC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,WAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC5B,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,yBAAyB,UAAU,wEAAwE,CAAC,CAAC;YAChJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS;mBACjC,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;uBAChC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;uBACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAChF,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,yDAAyD;gBACzD,kEAAkE;gBAClE,iEAAiE;gBACjE,6DAA6D;gBAC7D,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,kEAAkE;gBAClE,kEAAkE;gBAClE,wDAAwD;gBACxD,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACxB,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACnI,SAAS;YACX,CAAC;YACD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC,CAAC;YAC5K,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,cAAc,GAAG,CAAC,KAAkB,EAAE,KAAc,EAAQ,EAAE;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,IAAI,CACF,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,+EAA+E;cAC1G,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,CAAC,KAAkB,EAAQ,EAAE;QACrD,IAAI,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;YACxB,KAAK,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzC,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAClH,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,KAAK,CAAC,CAAC;QACV,sEAAsE;QACtE,uDAAuD;QACvD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,KAAkB,EAAE,YAAqB,EAAiB,EAAE;QACjF,IAAI,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7E,qEAAqE;YACrE,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,oEAAoE;YACpE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YACD,mEAAmE;YACnE,gEAAgE;YAChE,kDAAkD;YAClD,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAClF,+DAA+D;YAC/D,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,cAAc;YACd,IAAI,mBAAmB,GAAG,KAAK,CAAC;YAChC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;gBACpB,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC5B,mBAAmB,GAAG,IAAI,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,+DAA+D,CAAC,CAAC;gBACnG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC;YACF,oEAAoE;YACpE,sEAAsE;YACtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC;gBACpF,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,mBAAmB,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,0CAA0C,CAAC,CAAC;gBAC3F,CAAC;gBACD,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mEAAmE;gBACnE,kEAAkE;gBAClE,qDAAqD;gBACrD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YACvB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;YAClB,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YAC7I,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;YACzB,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,0BAA0B;QAEhC,KAAK,CAAC,KAAK,CAAC,OAAO;YACjB,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;YACrB,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC3C,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,+DAA+D;oBAC/D,+DAA+D;oBAC/D,+DAA+D;oBAC/D,gBAAgB;oBAChB,IAAI,KAAK,YAAY,cAAc,IAAK,KAA2B,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;wBACpG,MAAM,KAAK,CAAC;oBACd,CAAC;oBACD,IAAI,CACF,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,kFAAkF;0BAC7G,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG;0BACzH,qDAAqD,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI;0BACxE,IAAI,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAChE,CAAC;oBACF,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,OAAO;YACX,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAClD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC9B,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1B,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;gBAC1B,CAAC;gBACD,mEAAmE;gBACnE,mEAAmE;gBACnE,kEAAkE;gBAClE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC9B,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC;gBAC1B,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC5B,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;gBACzB,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;gBACxB,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC"}

package/dist/normalize.d.ts

@@ -0,0 +1,57 @@
+import type { JsonValue } from '@stratusagent/core';
+/**
+ * Turning what an MCP server sends back into what a Stratus tool returns:
+ * `JsonValue` out, files on disk where a content block is binary. Split
+ * from the client lifecycle because this half is pure enough to test
+ * without a connection.
+ */
+/**
+ * One segment of a bridged tool's registered name — lowercased, everything
+ * that is not `[a-z0-9_-]` folded to `_`, leading punctuation stripped.
+ * `undefined` when nothing survives, which the caller must treat as a
+ * refusal rather than inventing a name.
+ *
+ * Folding is what makes a collision possible (`createIssue` and
+ * `create_issue` both become `create_issue`), which is why the caller
+ * checks for one and refuses it rather than letting the second tool
+ * silently answer calls meant for the first.
+ */
+export declare const sanitizeToolSegment: (raw: string) => string | undefined;
+/** Server keys are operator-chosen and become a name segment; held to the segment shape outright. */
+export declare const SERVER_NAME_PATTERN: RegExp;
+/** The registered name a server's tool bridges to: `mcp.<server>.<segment>`. */
+export declare const bridgedToolName: (server: string, segment: string) => string;
+export interface NormalizeOptions {
+    /** The bridged server's config key — part of where a binary block lands. */
+    server: string;
+    /** The server-side tool name — part of the written file's name. */
+    tool: string;
+    /**
+     * The workspace root the host supplied. Binary content lands under
+     * `<workspaceRoot>/<agentId>/mcp/<server>/` — per agent, same as
+     * screenshots, so two agents never read each other's files.
+     */
+    workspaceRoot?: string;
+    agentId: string;
+    /** Clock seam for deterministic file names in tests. */
+    now?: () => number;
+}
+/**
+ * Normalize one MCP `tools/call` result into a `JsonValue`.
+ *
+ * - Text blocks join into one `text` string.
+ * - Image and audio blocks (and embedded blob resources) are decoded into
+ *   the agent's workspace and returned under `files` — the key a channel
+ *   treats as "deliver this as an attachment", which is how an image from a
+ *   bridged tool reaches Slack.
+ * - Embedded text resources join the text, labeled by uri; resource links
+ *   pass through under `resources` — a link is an offer, not content.
+ * - `structuredContent` passes through as `structured`.
+ * - A result the server marked `isError` becomes a thrown error, so it
+ *   lands in `ToolResult.error` like any other failing tool.
+ *
+ * A result that is only text returns the string itself — the shape the
+ * model reads best — and anything richer returns an object.
+ */
+export declare const normalizeCallResult: (result: unknown, options: NormalizeOptions) => Promise<JsonValue>;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../src/normalize.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;;;GAKG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,SAI1D,CAAC;AAEF,qGAAqG;AACrG,eAAO,MAAM,mBAAmB,QAA0B,CAAC;AAE3D,gFAAgF;AAChF,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,EAAE,SAAS,MAAM,KAAG,MAAoC,CAAC;AAkCvG,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,GAC9B,QAAQ,OAAO,EACf,SAAS,gBAAgB,KACxB,OAAO,CAAC,SAAS,CA8FnB,CAAC"}

package/dist/normalize.js

@@ -0,0 +1,161 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+/**
+ * Turning what an MCP server sends back into what a Stratus tool returns:
+ * `JsonValue` out, files on disk where a content block is binary. Split
+ * from the client lifecycle because this half is pure enough to test
+ * without a connection.
+ */
+/**
+ * One segment of a bridged tool's registered name — lowercased, everything
+ * that is not `[a-z0-9_-]` folded to `_`, leading punctuation stripped.
+ * `undefined` when nothing survives, which the caller must treat as a
+ * refusal rather than inventing a name.
+ *
+ * Folding is what makes a collision possible (`createIssue` and
+ * `create_issue` both become `create_issue`), which is why the caller
+ * checks for one and refuses it rather than letting the second tool
+ * silently answer calls meant for the first.
+ */
+export const sanitizeToolSegment = (raw) => {
+    const folded = raw.toLowerCase().replace(/[^a-z0-9_-]+/g, '_');
+    const trimmed = folded.replace(/^[^a-z0-9]+/, '');
+    return trimmed.length > 0 ? trimmed : undefined;
+};
+/** Server keys are operator-chosen and become a name segment; held to the segment shape outright. */
+export const SERVER_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]*$/;
+/** The registered name a server's tool bridges to: `mcp.<server>.<segment>`. */
+export const bridgedToolName = (server, segment) => `mcp.${server}.${segment}`;
+const EXTENSION_BY_MIME = {
+    'image/png': 'png',
+    'image/jpeg': 'jpg',
+    'image/gif': 'gif',
+    'image/webp': 'webp',
+    'image/svg+xml': 'svg',
+    'audio/wav': 'wav',
+    'audio/mpeg': 'mp3',
+    'application/pdf': 'pdf',
+};
+const extensionFor = (mimeType) => {
+    if (!mimeType) {
+        return 'bin';
+    }
+    const known = EXTENSION_BY_MIME[mimeType];
+    if (known) {
+        return known;
+    }
+    const subtype = mimeType.split('/')[1]?.replace(/[^a-z0-9]/gi, '');
+    return subtype && subtype.length > 0 ? subtype.toLowerCase() : 'bin';
+};
+const isObject = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+// Distinguishes every written file within one process. A timestamp alone
+// is not enough: two calls in the same millisecond (parallel tool calls in
+// one turn) would produce the same path, and the first result's `files`
+// entry would silently point at the second call's bytes.
+let fileSerial = 0;
+/**
+ * Normalize one MCP `tools/call` result into a `JsonValue`.
+ *
+ * - Text blocks join into one `text` string.
+ * - Image and audio blocks (and embedded blob resources) are decoded into
+ *   the agent's workspace and returned under `files` — the key a channel
+ *   treats as "deliver this as an attachment", which is how an image from a
+ *   bridged tool reaches Slack.
+ * - Embedded text resources join the text, labeled by uri; resource links
+ *   pass through under `resources` — a link is an offer, not content.
+ * - `structuredContent` passes through as `structured`.
+ * - A result the server marked `isError` becomes a thrown error, so it
+ *   lands in `ToolResult.error` like any other failing tool.
+ *
+ * A result that is only text returns the string itself — the shape the
+ * model reads best — and anything richer returns an object.
+ */
+export const normalizeCallResult = async (result, options) => {
+    const shaped = isObject(result) ? result : {};
+    const content = Array.isArray(shaped.content) ? shaped.content : [];
+    const texts = [];
+    const files = [];
+    const resources = [];
+    // Settled before anything touches the disk: a failing result's binary
+    // blocks would otherwise land as server-controlled files in the
+    // workspace that nothing references, delivers, or cleans up.
+    if (shaped.isError === true) {
+        const message = content
+            .filter(isObject)
+            .filter((block) => block.type === 'text' && typeof block.text === 'string')
+            .map((block) => block.text)
+            .join('\n\n');
+        throw new Error(message || `MCP server ${options.server} reported an error for ${options.tool} with no message.`);
+    }
+    const writeBlock = async (data, mimeType) => {
+        if (typeof data !== 'string') {
+            return;
+        }
+        if (!options.workspaceRoot) {
+            texts.push(`[binary ${typeof mimeType === 'string' ? mimeType : 'content'} dropped: no workspaceRoot is configured for @stratusagent/plugin-mcp]`);
+            return;
+        }
+        const directory = path.join(options.workspaceRoot, options.agentId, 'mcp', options.server);
+        await mkdir(directory, { recursive: true });
+        const stamp = (options.now ?? Date.now)();
+        fileSerial += 1;
+        // The tool name is the server's own string, so it is folded to the
+        // name-segment shape before it becomes part of a path: interpolated
+        // raw, a tool named `../../…` would be an arbitrary-directory write
+        // steered by whoever runs the server.
+        const file = path.join(directory, `${sanitizeToolSegment(options.tool) ?? 'tool'}-${stamp}-${fileSerial}.${extensionFor(typeof mimeType === 'string' ? mimeType : undefined)}`);
+        await writeFile(file, Buffer.from(data, 'base64'));
+        files.push(file);
+    };
+    for (const block of content) {
+        if (!isObject(block)) {
+            continue;
+        }
+        switch (block.type) {
+            case 'text':
+                if (typeof block.text === 'string') {
+                    texts.push(block.text);
+                }
+                break;
+            case 'image':
+            case 'audio':
+                await writeBlock(block.data, block.mimeType);
+                break;
+            case 'resource': {
+                const resource = isObject(block.resource) ? block.resource : {};
+                if (typeof resource.text === 'string') {
+                    const uri = typeof resource.uri === 'string' ? resource.uri : undefined;
+                    texts.push(uri ? `${uri}:\n${resource.text}` : resource.text);
+                }
+                else {
+                    await writeBlock(resource.blob, resource.mimeType);
+                }
+                break;
+            }
+            case 'resource_link': {
+                const link = {};
+                for (const key of ['uri', 'name', 'title', 'description', 'mimeType']) {
+                    if (typeof block[key] === 'string') {
+                        link[key] = block[key];
+                    }
+                }
+                resources.push(link);
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    const structured = isObject(shaped.structuredContent) ? shaped.structuredContent : undefined;
+    const text = texts.length > 0 ? texts.join('\n\n') : undefined;
+    if (structured === undefined && files.length === 0 && resources.length === 0) {
+        return text ?? '';
+    }
+    return {
+        ...(text !== undefined ? { text } : {}),
+        ...(structured !== undefined ? { structured } : {}),
+        ...(files.length > 0 ? { files } : {}),
+        ...(resources.length > 0 ? { resources } : {}),
+    };
+};
+//# sourceMappingURL=normalize.js.map

package/dist/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../src/normalize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B;;;;;GAKG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAsB,EAAE;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC,CAAC;AAEF,qGAAqG;AACrG,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAE,OAAe,EAAU,EAAE,CAAC,OAAO,MAAM,IAAI,OAAO,EAAE,CAAC;AAEvG,MAAM,iBAAiB,GAA2B;IAChD,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,MAAM;IACpB,eAAe,EAAE,KAAK;IACtB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,QAA4B,EAAU,EAAE;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,yEAAyE;AACzE,2EAA2E;AAC3E,wEAAwE;AACxE,yDAAyD;AACzD,IAAI,UAAU,GAAG,CAAC,CAAC;AAkBnB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,MAAe,EACf,OAAyB,EACL,EAAE;IACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAiB,EAAE,CAAC;IAEnC,sEAAsE;IACtE,gEAAgE;IAChE,6DAA6D;IAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO;aACpB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;aAC1E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAc,CAAC;aACpC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,cAAc,OAAO,CAAC,MAAM,0BAA0B,OAAO,CAAC,IAAI,mBAAmB,CAAC,CAAC;IACpH,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,IAAa,EAAE,QAAiB,EAAiB,EAAE;QAC3E,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,wEAAwE,CAAC,CAAC;YACnJ,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,UAAU,IAAI,CAAC,CAAC;QAChB,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,sCAAsC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,SAAS,EACT,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI,KAAK,IAAI,UAAU,IAAI,YAAY,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAC7I,CAAC;QACF,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBACD,MAAM;YACR,KAAK,OAAO,CAAC;YACb,KAAK,OAAO;gBACV,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7C,MAAM;YACR,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBACxE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAe,EAAE,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,CAAU,EAAE,CAAC;oBAC/E,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACnC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,iBAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/D,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;IACD,OAAO;QACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@stratusagent/plugin-mcp",
+  "version": "0.9.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22.13 <23 || >=23.4"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@stratusagent/core": "0.9.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.6.0",
+    "typescript": "^5.9.3",
+    "zod": "^4.4.3",
+    "@stratusagent/plugins": "0.9.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/stratuslabs/agent.git",
+    "directory": "packages/plugin-mcp"
+  },
+  "description": "The MCP bridge for Stratus Agent: mounts any Model Context Protocol server's tools as mcp.<server>.<tool>, under the same allowlists, risk model, and approval policy as native tools",
+  "keywords": [
+    "stratus",
+    "agent",
+    "ai",
+    "llm",
+    "stratus-plugin",
+    "mcp",
+    "model-context-protocol",
+    "tools"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "stratus": {
+    "pluginVersion": 1,
+    "contributes": {
+      "toolsDiscovered": [
+        {
+          "namespace": "mcp.*",
+          "risk": "gated"
+        }
+      ]
+    },
+    "config": {
+      "type": "object",
+      "properties": {
+        "servers": {
+          "type": "object"
+        },
+        "workspaceRoot": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "servers"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc --noEmit --project tsconfig.test.json",
+    "test": "node --test --experimental-strip-types"
+  }
+}