@tankpkg/mcp-server 0.14.4 → 0.15.1

package/dist/index.js

@@ -279,6 +279,32 @@ z.object({
 	visibility: z.enum(["public", "private"]).optional(),
 	audit: z.object({ min_score: z.number().min(0).max(10) }).strict().optional()
 }).strict();
+const commandSchema$1 = z.string().min(1, "command must not be empty");
+const argSchema$1 = z.array(z.string()).default([]);
+const envSchema$1 = z.record(z.string(), z.string()).optional();
+const remoteUrlSchema$1 = z.string().url("remote must be a valid URL");
+const localMcpServerSchema = z.object({
+	command: commandSchema$1,
+	args: argSchema$1,
+	env: envSchema$1,
+	requires_auth: z.literal(false).optional()
+}).strict();
+const remoteMcpServerSchema = z.object({
+	remote: remoteUrlSchema$1,
+	requires_auth: z.boolean().default(false),
+	env: envSchema$1
+}).strict();
+const mcpServerSchema$1 = z.union([localMcpServerSchema, remoteMcpServerSchema]);
+const perToolOverrideSchema$1 = z.object({
+	scan: z.boolean().optional(),
+	blockOnMatch: z.boolean().optional()
+}).strict();
+z.object({
+	perfBudgetMs: z.number().positive().optional(),
+	blockOnMatch: z.boolean().optional(),
+	resetPinsOnMismatch: z.boolean().optional(),
+	perTool: z.record(z.string(), perToolOverrideSchema$1).optional()
+}).strict();
 const baseManifestFields$1 = {
 	name: z.string().min(1, "Name must not be empty").max(214, `Name must be 214 characters or fewer`).regex(/^@[a-z0-9-]+\/[a-z0-9][a-z0-9-]*$/, "Name must be scoped (@org/name), lowercase alphanumeric and hyphens"),
 	version: z.string().regex(/^\d+\.\d+\.\d+(-[a-zA-Z0-9.-]+)?(\+[a-zA-Z0-9.-]+)?$/, "Version must be valid semver"),
@@ -287,7 +313,8 @@ const baseManifestFields$1 = {
 	permissions: permissionsSchema$1.optional(),
 	repository: z.string().url("Repository must be a valid URL").optional(),
 	visibility: z.enum(["public", "private"]).optional(),
-	audit: z.object({ min_score: z.number().min(0).max(10) }).strict().optional()
+	audit: z.object({ min_score: z.number().min(0).max(10) }).strict().optional(),
+	mcp_server: mcpServerSchema$1.optional()
 };
 /** Legacy skills.json schema — strict, no atoms. Used for backward-compatible consumers. */
 const skillsJsonSchema = z.object(baseManifestFields$1).strict();
@@ -4510,6 +4537,30 @@ object({
 	visibility: _enum(["public", "private"]).optional(),
 	audit: object({ min_score: number().min(0).max(10) }).strict().optional()
 }).strict();
+const commandSchema = string().min(1, "command must not be empty");
+const argSchema = array(string()).default([]);
+const envSchema = record(string(), string()).optional();
+const remoteUrlSchema = string().url("remote must be a valid URL");
+const mcpServerSchema = union([object({
+	command: commandSchema,
+	args: argSchema,
+	env: envSchema,
+	requires_auth: literal(false).optional()
+}).strict(), object({
+	remote: remoteUrlSchema,
+	requires_auth: boolean().default(false),
+	env: envSchema
+}).strict()]);
+const perToolOverrideSchema = object({
+	scan: boolean().optional(),
+	blockOnMatch: boolean().optional()
+}).strict();
+object({
+	perfBudgetMs: number().positive().optional(),
+	blockOnMatch: boolean().optional(),
+	resetPinsOnMismatch: boolean().optional(),
+	perTool: record(string(), perToolOverrideSchema).optional()
+}).strict();
 const baseManifestFields = {
 	name: string().min(1, "Name must not be empty").max(214, `Name must be 214 characters or fewer`).regex(/^@[a-z0-9-]+\/[a-z0-9][a-z0-9-]*$/, "Name must be scoped (@org/name), lowercase alphanumeric and hyphens"),
 	version: string().regex(/^\d+\.\d+\.\d+(-[a-zA-Z0-9.-]+)?(\+[a-zA-Z0-9.-]+)?$/, "Version must be valid semver"),
@@ -4518,7 +4569,8 @@ const baseManifestFields = {
 	permissions: permissionsSchema.optional(),
 	repository: string().url("Repository must be a valid URL").optional(),
 	visibility: _enum(["public", "private"]).optional(),
-	audit: object({ min_score: number().min(0).max(10) }).strict().optional()
+	audit: object({ min_score: number().min(0).max(10) }).strict().optional(),
+	mcp_server: mcpServerSchema.optional()
 };
 object(baseManifestFields).strict();
 object({
@@ -6123,6 +6175,8 @@ var require_subset = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		rcompareIdentifiers: identifiers.rcompareIdentifiers
 	};
 })))();
+const ALPHANUMERIC$1 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+`${ALPHANUMERIC$1}`, `${ALPHANUMERIC$1}`, `${ALPHANUMERIC$1}`, `${ALPHANUMERIC$1}`;
 //#endregion
 //#region src/lib/config.ts
 const DEFAULT_CONFIG = { registry: "https://www.tankpkg.dev" };
@@ -6624,6 +6678,8 @@ function registerInitSkillTool(server) {
 }
 //#endregion
 //#region ../internals-helpers/dist/index.js
+const ALPHANUMERIC = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+`${ALPHANUMERIC}`, `${ALPHANUMERIC}`, `${ALPHANUMERIC}`, `${ALPHANUMERIC}`;
 function resolve(range, versions) {
 	try {
 		if (!range || !semver.validRange(range)) return null;
@@ -7490,7 +7546,7 @@ function registerSearchSkillsTool(server) {
 		}] };
 		const header = "| Skill | Score | Downloads | Description |\n|-------|-------|-----------|-------------|";
 		const rows = results.map((skill) => {
-			const score = skill.auditScore !== null ? skill.auditScore.toFixed(1) : "-";
+			const score = typeof skill.auditScore === "number" && Number.isFinite(skill.auditScore) ? skill.auditScore.toFixed(1) : "-";
 			const downloads = skill.downloads > 1e3 ? `${(skill.downloads / 1e3).toFixed(1)}k` : skill.downloads.toString();
 			const desc = skill.description?.slice(0, 50) ?? "No description";
 			return `| ${skill.name} | ${score} | ${downloads} | ${desc} |`;