@thupham/volley-mcp 1.0.1

package/dist/index.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { Session } from "./session.js";
+import { coreVersion } from "./native.js";
+import { registerRequestTools } from "./tools/request.js";
+import { registerStreamTools } from "./tools/stream.js";
+import { registerInspectTool } from "./tools/inspect.js";
+import { registerEnvTools } from "./tools/env.js";
+import { registerCollectionTools } from "./tools/collections.js";
+import { registerImportCurlTool } from "./tools/importCurl.js";
+import { registerGraphqlTools } from "./tools/graphql.js";
+import { registerWsTools } from "./tools/ws.js";
+import { registerSaveTool } from "./tools/save.js";
+import { registerPolicyTool } from "./tools/policy.js";
+import { registerImporterTools } from "./tools/importers.js";
+async function main() {
+    const server = new McpServer({ name: "volley", version: "1.0.1" });
+    const session = new Session();
+    registerRequestTools(server, session);
+    registerStreamTools(server, session);
+    registerInspectTool(server, session);
+    registerEnvTools(server, session);
+    registerCollectionTools(server, session);
+    registerImportCurlTool(server, session);
+    registerGraphqlTools(server, session);
+    registerWsTools(server, session);
+    registerSaveTool(server, session);
+    registerPolicyTool(server, session);
+    registerImporterTools(server);
+    // stdout is reserved for the MCP JSON-RPC stream; log to stderr only.
+    process.stderr.write(`volley starting (core v${coreVersion()})\n`);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((err) => {
+    process.stderr.write(`fatal: ${err instanceof Error ? err.stack ?? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAE9B,sEAAsE;IACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,WAAW,EAAE,KAAK,CAAC,CAAC;IAEnE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/junit.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Serialize a RunReport (from run_collection) into JUnit XML for CI consumption.
+ */
+import type { RunReport } from "./collections.js";
+export declare function toJUnitXml(report: RunReport): string;

package/dist/junit.js

@@ -0,0 +1,30 @@
+function esc(s) {
+    return s
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+export function toJUnitXml(report) {
+    const cases = report.steps
+        .map((s) => {
+        const name = esc(s.id);
+        const time = ""; // timing not tracked per step yet
+        if (s.skipped) {
+            return `    <testcase name="${name}" time="${time}"><skipped/></testcase>`;
+        }
+        if (s.ok) {
+            return `    <testcase name="${name}" time="${time}"/>`;
+        }
+        const failure = s.failures?.map((f) => esc(f)).join("; ") ?? (s.error ? esc(s.error) : "failed");
+        return `    <testcase name="${name}" time="${time}"><failure message="${failure}">${failure}</failure></testcase>`;
+    })
+        .join("\n");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<testsuite name="${esc(report.name)}" tests="${report.steps.length}" failures="${report.failed}" skipped="${report.skipped}">
+${cases}
+</testsuite>
+`;
+}
+//# sourceMappingURL=junit.js.map

package/dist/junit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"junit.js","sourceRoot":"","sources":["../src/junit.ts"],"names":[],"mappings":"AAKA,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAiB;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,kCAAkC;QACnD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,uBAAuB,IAAI,WAAW,IAAI,yBAAyB,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,OAAO,uBAAuB,IAAI,WAAW,IAAI,KAAK,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjG,OAAO,uBAAuB,IAAI,WAAW,IAAI,uBAAuB,OAAO,KAAK,OAAO,uBAAuB,CAAC;IACrH,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;mBACU,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,eAAe,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,OAAO;EACxH,KAAK;;CAEN,CAAC;AACF,CAAC"}

package/dist/native.d.ts

@@ -0,0 +1,56 @@
+export declare function coreVersion(): string;
+/** Standard result document returned by the execution functions. */
+export interface ExecResult {
+    ok: boolean;
+    error: string | null;
+    status?: number | null;
+    statusText?: string;
+    timeMs?: number;
+    headers?: Record<string, string>;
+    bodyJson?: unknown;
+    bodyText?: string | null;
+    bodyBytes?: number;
+    bodyShape?: unknown;
+    bodyPreview?: unknown;
+    assertions?: AssertionReport;
+    extracted?: Record<string, unknown>;
+    graphqlErrors?: unknown;
+    connected?: boolean;
+    frameCount?: number;
+    frames?: unknown[];
+    framesPreview?: unknown;
+    eventCount?: number;
+    events?: unknown[];
+    eventsPreview?: unknown;
+    note?: string | null;
+    schema?: unknown;
+    handle?: string;
+    count?: number;
+    remaining?: number;
+    closed?: boolean;
+}
+export interface AssertionReport {
+    passed: number;
+    failed: number;
+    skipped: number;
+    results: {
+        ok: boolean;
+        skipped?: boolean;
+        desc: string;
+        detail?: string;
+    }[];
+}
+export declare function httpRequest(spec: unknown): Promise<ExecResult>;
+export declare function graphqlRequest(spec: unknown): Promise<ExecResult>;
+export declare function graphqlIntrospect(spec: unknown): Promise<ExecResult>;
+export declare function wsSession(spec: unknown): Promise<ExecResult>;
+export declare function wsOpen(spec: unknown): Promise<ExecResult>;
+export declare function wsSend(handle: string, message: unknown): ExecResult;
+export declare function wsRecv(spec: unknown): Promise<ExecResult>;
+export declare function wsClose(handle: string): ExecResult;
+export declare function sseSession(spec: unknown): Promise<ExecResult>;
+export declare function jsonQuery(document: unknown, path: string): {
+    found: boolean;
+    value: unknown;
+    error?: string;
+};

package/dist/native.js

@@ -0,0 +1,44 @@
+/**
+ * Typed wrapper around the Rust core native addon (`@thupham/volley-core`).
+ *
+ * The addon is CommonJS (generated by napi-rs), so we load it via `createRequire`
+ * from this ES module. The FFI contract is JSON string in / JSON string out; we parse
+ * results here so the rest of the server works with plain objects.
+ */
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const native = require("@thupham/volley-core");
+export function coreVersion() {
+    return native.version();
+}
+export async function httpRequest(spec) {
+    return JSON.parse(await native.httpRequest(JSON.stringify(spec)));
+}
+export async function graphqlRequest(spec) {
+    return JSON.parse(await native.graphqlRequest(JSON.stringify(spec)));
+}
+export async function graphqlIntrospect(spec) {
+    return JSON.parse(await native.graphqlIntrospect(JSON.stringify(spec)));
+}
+export async function wsSession(spec) {
+    return JSON.parse(await native.wsSession(JSON.stringify(spec)));
+}
+export async function wsOpen(spec) {
+    return JSON.parse(await native.wsOpen(JSON.stringify(spec)));
+}
+export function wsSend(handle, message) {
+    return JSON.parse(native.wsSend(handle, JSON.stringify(message)));
+}
+export async function wsRecv(spec) {
+    return JSON.parse(await native.wsRecv(JSON.stringify(spec)));
+}
+export function wsClose(handle) {
+    return JSON.parse(native.wsClose(handle));
+}
+export async function sseSession(spec) {
+    return JSON.parse(await native.sseSession(JSON.stringify(spec)));
+}
+export function jsonQuery(document, path) {
+    return JSON.parse(native.jsonQuery(JSON.stringify(document), path));
+}
+//# sourceMappingURL=native.js.map

package/dist/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAgB/C,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAe,CAAC;AAE7D,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AA0CD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAa;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AAClF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAa;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AACrF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAa;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AACxF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAa;IAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AAChF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAa;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AAC7E,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,OAAgB;IACrD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAe,CAAC;AAClF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAa;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AAC7E,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,MAAc;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAe,CAAC;AAC1D,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAa;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC;AACjF,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,QAAiB,EAAE,IAAY;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/session.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Per-process session state: environments, extracted (chained) variables, and the
+ * response store used by `inspect_response`. Also owns secret redaction.
+ */
+import type { ExecResult } from "./native.js";
+export type Verbosity = "summary" | "headers" | "full";
+export interface Policy {
+    allow: string[];
+    deny: string[];
+    dryRun: boolean;
+}
+export declare class Session {
+    private envs;
+    private activeEnv;
+    private extracted;
+    private store;
+    private secretValues;
+    private counter;
+    private lastRequest;
+    policy: Policy;
+    setEnv(name: string, vars: Record<string, unknown>): void;
+    listEnvs(): string[];
+    /** Env variables (masked) for display. */
+    describeEnv(name?: string): Record<string, unknown>;
+    /** Merge env values + extracted vars into the map the Rust templating consumes. */
+    mergedVars(envName?: string): Record<string, unknown>;
+    applyExtracted(map: Record<string, unknown> | undefined): void;
+    /**
+     * Validate a URL against the active policy. Returns an error string if the URL is denied,
+     * or a synthetic dry-run result object when dryRun is enabled. Returns null when the request
+     * should proceed normally.
+     */
+    checkPolicy(url: string): {
+        blocked: true;
+        error: string;
+    } | {
+        dryRun: true;
+        result: import("./native.js").ExecResult;
+    } | null;
+    private trackSecret;
+    /** Redact any known secret substrings from a payload. */
+    redact<T>(payload: T): T;
+    storeResponse(result: ExecResult): string;
+    getStored(handle: string): ExecResult | undefined;
+    recordRequest(type: string, request: Record<string, unknown>, assert?: unknown[], extract?: Record<string, string>): void;
+    consumeLastRequest(): {
+        type: string;
+        request: Record<string, unknown>;
+        assert?: unknown[];
+        extract?: Record<string, string>;
+    } | undefined;
+}

package/dist/session.js

@@ -0,0 +1,135 @@
+export class Session {
+    envs = new Map();
+    activeEnv;
+    extracted = {};
+    store = new Map();
+    secretValues = new Set();
+    counter = 0;
+    lastRequest;
+    policy = { allow: [], deny: [], dryRun: false };
+    setEnv(name, vars) {
+        const normalized = {};
+        for (const [k, v] of Object.entries(vars)) {
+            if (v && typeof v === "object" && "value" in v) {
+                const ev = v;
+                normalized[k] = { value: ev.value, secret: ev.secret };
+                if (ev.secret)
+                    this.trackSecret(ev.value);
+            }
+            else {
+                normalized[k] = { value: v };
+            }
+        }
+        this.envs.set(name, normalized);
+        this.activeEnv = name;
+    }
+    listEnvs() {
+        return [...this.envs.keys()];
+    }
+    /** Env variables (masked) for display. */
+    describeEnv(name) {
+        const env = this.envs.get(name ?? this.activeEnv ?? "");
+        if (!env)
+            return {};
+        const out = {};
+        for (const [k, v] of Object.entries(env))
+            out[k] = v.secret ? "***" : v.value;
+        return out;
+    }
+    /** Merge env values + extracted vars into the map the Rust templating consumes. */
+    mergedVars(envName) {
+        const merged = {};
+        const env = this.envs.get(envName ?? this.activeEnv ?? "");
+        if (env)
+            for (const [k, v] of Object.entries(env))
+                merged[k] = v.value;
+        Object.assign(merged, this.extracted);
+        // Expose env under `env.NAME` too (collections reference {{env.X}}).
+        merged.env = env
+            ? Object.fromEntries(Object.entries(env).map(([k, v]) => [k, v.value]))
+            : {};
+        return merged;
+    }
+    applyExtracted(map) {
+        if (map)
+            Object.assign(this.extracted, map);
+    }
+    /**
+     * Validate a URL against the active policy. Returns an error string if the URL is denied,
+     * or a synthetic dry-run result object when dryRun is enabled. Returns null when the request
+     * should proceed normally.
+     */
+    checkPolicy(url) {
+        let host = "";
+        try {
+            host = new URL(url).hostname;
+        }
+        catch {
+            host = url;
+        }
+        const denied = this.policy.deny.some((p) => matchHost(host, p));
+        if (denied)
+            return { blocked: true, error: `host '${host}' is denied by policy` };
+        const allowed = this.policy.allow.length === 0 || this.policy.allow.some((p) => matchHost(host, p));
+        if (!allowed)
+            return { blocked: true, error: `host '${host}' is not in the allow-list` };
+        if (this.policy.dryRun) {
+            return {
+                dryRun: true,
+                result: {
+                    ok: true,
+                    error: null,
+                    status: null,
+                    statusText: "DRY RUN",
+                    note: "dry-run: request not sent",
+                },
+            };
+        }
+        return null;
+    }
+    trackSecret(value) {
+        if (typeof value === "string" && value.length >= 3)
+            this.secretValues.add(value);
+    }
+    /** Redact any known secret substrings from a payload. */
+    redact(payload) {
+        if (this.secretValues.size === 0)
+            return payload;
+        let text = JSON.stringify(payload);
+        for (const s of this.secretValues) {
+            text = text.split(s).join("***");
+        }
+        return JSON.parse(text);
+    }
+    storeResponse(result) {
+        const handle = `resp_${(++this.counter).toString(36)}`;
+        this.store.set(handle, result);
+        // Bound the store so long sessions don't grow unbounded.
+        if (this.store.size > 50) {
+            const oldest = this.store.keys().next().value;
+            if (oldest)
+                this.store.delete(oldest);
+        }
+        return handle;
+    }
+    getStored(handle) {
+        return this.store.get(handle);
+    }
+    recordRequest(type, request, assert, extract) {
+        this.lastRequest = { type, request, assert, extract };
+    }
+    consumeLastRequest() {
+        return this.lastRequest;
+    }
+}
+/** Glob-style host match: `*` matches any, `*.example.com` matches subdomains. */
+function matchHost(host, pattern) {
+    if (pattern === "*")
+        return true;
+    if (pattern.startsWith("*.")) {
+        const suffix = pattern.slice(1); // ".example.com"
+        return host.endsWith(suffix) || host === suffix.slice(1);
+    }
+    return host === pattern;
+}
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAmBA,MAAM,OAAO,OAAO;IACV,IAAI,GAAG,IAAI,GAAG,EAAkC,CAAC;IACjD,SAAS,CAAqB;IAC9B,SAAS,GAA4B,EAAE,CAAC;IACxC,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,OAAO,GAAG,CAAC,CAAC;IACZ,WAAW,CAAuH;IAC1I,MAAM,GAAW,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAExD,MAAM,CAAC,IAAY,EAAE,IAA6B;QAChD,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAK,CAAY,EAAE,CAAC;gBAC3D,MAAM,EAAE,GAAG,CAAW,CAAC;gBACvB,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;gBACvD,IAAI,EAAE,CAAC,MAAM;oBAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,0CAA0C;IAC1C,WAAW,CAAC,IAAa;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mFAAmF;IACnF,UAAU,CAAC,OAAgB;QACzB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,GAAG;YAAE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,qEAAqE;QACrE,MAAM,CAAC,GAAG,GAAG,GAAG;YACd,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,GAAwC;QACrD,IAAI,GAAG;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,GAAW;QACrB,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,GAAG,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,uBAAuB,EAAE,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,4BAA4B,EAAE,CAAC;QACzF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,IAAI;oBACZ,UAAU,EAAE,SAAS;oBACrB,IAAI,EAAE,2BAA2B;iBAClC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,KAAc;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;IAED,yDAAyD;IACzD,MAAM,CAAI,OAAU;QAClB,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACjD,IAAI,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAClC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAED,aAAa,CAAC,MAAkB;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,yDAAyD;QACzD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,OAAgC,EAAE,MAAkB,EAAE,OAAgC;QAChH,IAAI,CAAC,WAAW,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxD,CAAC;IAED,kBAAkB;QAGhB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC9C,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,KAAK,OAAO,CAAC;AAC1B,CAAC"}

package/dist/tools/collections.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Session } from "../session.js";
+export declare function registerCollectionTools(server: McpServer, session: Session): void;

package/dist/tools/collections.js

@@ -0,0 +1,50 @@
+import { z } from "zod";
+import { writeFileSync } from "node:fs";
+import { listCollectionFiles, loadCollection, runCollection } from "../collections.js";
+import { toJUnitXml } from "../junit.js";
+export function registerCollectionTools(server, session) {
+    server.registerTool("list_collections", {
+        title: "List collections",
+        description: "Find collection files (.yaml/.yml/.json) under a directory.",
+        inputSchema: {
+            dir: z.string().optional().describe("Directory to scan. Defaults to the current working directory."),
+        },
+    }, async ({ dir }) => {
+        const files = listCollectionFiles(dir ?? process.cwd());
+        const items = files.map((path) => {
+            try {
+                const col = loadCollection(path);
+                return { path, name: col.name, steps: col.steps?.length ?? 0 };
+            }
+            catch {
+                return { path, error: "failed to parse" };
+            }
+        });
+        return { content: [{ type: "text", text: JSON.stringify(items, null, 2) }] };
+    });
+    server.registerTool("run_collection", {
+        title: "Run a collection",
+        description: "Run declarative collection file. Threads extracted vars between steps. Optional JUnit XML export.",
+        inputSchema: {
+            path: z.string().describe("Path to the collection file."),
+            env: z.string().optional().describe("Environment to resolve variables from."),
+            only: z.array(z.string()).optional().describe("Only run steps with these ids."),
+            tags: z.array(z.string()).optional().describe("Only run steps having any of these tags."),
+            junitPath: z.string().optional().describe("Write a JUnit XML report to this path."),
+        },
+    }, async ({ path, env, only, tags, junitPath }) => {
+        try {
+            const report = await runCollection(session, path, { env, only, tags });
+            if (junitPath)
+                writeFileSync(junitPath, toJUnitXml(report), "utf8");
+            return { content: [{ type: "text", text: JSON.stringify(session.redact(report), null, 2) }] };
+        }
+        catch (e) {
+            return {
+                isError: true,
+                content: [{ type: "text", text: `run_collection failed: ${e instanceof Error ? e.message : String(e)}` }],
+            };
+        }
+    });
+}
+//# sourceMappingURL=collections.js.map

package/dist/tools/collections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.js","sourceRoot":"","sources":["../../src/tools/collections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,OAAgB;IACzE,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;SACrG;KACF,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,mGAAmG;QAChH,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YACzD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAC7E,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC/E,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACzF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SACpF;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,SAAS;gBAAE,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0BAA0B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;aACnH,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/env.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Session } from "../session.js";
+export declare function registerEnvTools(server: McpServer, session: Session): void;

package/dist/tools/env.js

@@ -0,0 +1,33 @@
+import { z } from "zod";
+export function registerEnvTools(server, session) {
+    server.registerTool("set_env", {
+        title: "Set environment variables",
+        description: "Create/update named env. Values may be {value, secret:true}. Use via {{name}}.",
+        inputSchema: {
+            name: z.string().describe("Environment name, e.g. 'dev'."),
+            vars: z
+                .record(z.string(), z.any())
+                .describe("Map of variables. Use { value, secret: true } to mark secrets."),
+        },
+    }, async ({ name, vars }) => {
+        session.setEnv(name, vars);
+        return {
+            content: [
+                { type: "text", text: JSON.stringify({ env: name, vars: session.describeEnv(name) }, null, 2) },
+            ],
+        };
+    });
+    server.registerTool("list_envs", {
+        title: "List environments",
+        description: "List env names and (masked) variables of the active or specified one.",
+        inputSchema: { name: z.string().optional().describe("Show variables for this env.") },
+    }, async ({ name }) => ({
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify({ envs: session.listEnvs(), vars: session.describeEnv(name) }, null, 2),
+            },
+        ],
+    }));
+}
+//# sourceMappingURL=env.js.map

package/dist/tools/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/tools/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,OAAgB;IAClE,MAAM,CAAC,YAAY,CACjB,SAAS,EACT;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;YAC1D,IAAI,EAAE,CAAC;iBACJ,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;iBAC3B,QAAQ,CAAC,gEAAgE,CAAC;SAC9E;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACvB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAA+B,CAAC,CAAC;QACtD,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;aACzG;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,uEAAuE;QACpF,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE;KACtF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnB,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;aAC7F;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/tools/graphql.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Session } from "../session.js";
+export declare function registerGraphqlTools(server: McpServer, session: Session): void;

package/dist/tools/graphql.js

@@ -0,0 +1,44 @@
+import { z } from "zod";
+import { graphqlIntrospect } from "../native.js";
+const authSchema = z
+    .object({
+    type: z.enum(["bearer", "basic", "apikey"]),
+    token: z.string().optional(),
+    username: z.string().optional(),
+    password: z.string().optional(),
+    key: z.string().optional(),
+    value: z.string().optional(),
+    in: z.enum(["header", "query"]).optional(),
+})
+    .optional();
+export function registerGraphqlTools(server, session) {
+    server.registerTool("graphql_introspect", {
+        title: "GraphQL introspection",
+        description: "Introspect GraphQL endpoint, return summarized schema with field signatures (args + return types) and input types.",
+        inputSchema: {
+            url: z.string().describe("GraphQL endpoint URL."),
+            headers: z.record(z.string(), z.any()).optional(),
+            auth: authSchema,
+            env: z.string().optional(),
+            timeoutMs: z.number().int().positive().optional(),
+        },
+    }, async (args) => {
+        const spec = { ...args, vars: session.mergedVars(args.env) };
+        const result = await graphqlIntrospect(spec);
+        const handle = session.storeResponse(result);
+        const out = result.error
+            ? { ok: false, error: result.error }
+            : {
+                ok: result.ok,
+                status: result.status,
+                schema: result.schema,
+                graphqlErrors: result.graphqlErrors,
+                responseHandle: handle,
+                hint: "Use inspect_response with this handle to drill into the raw introspection payload.",
+            };
+        return {
+            content: [{ type: "text", text: JSON.stringify(session.redact(out), null, 2) }],
+        };
+    });
+}
+//# sourceMappingURL=graphql.js.map

package/dist/tools/graphql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../../src/tools/graphql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,OAAgB;IACtE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,oHAAoH;QACjI,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACjD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;YACjD,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAClD;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK;YACtB,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;YACpC,CAAC,CAAC;gBACE,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,cAAc,EAAE,MAAM;gBACtB,IAAI,EAAE,oFAAoF;aAC3F,CAAC;QACN,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACzF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/importCurl.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Session } from "../session.js";
+export declare function registerImportCurlTool(server: McpServer, session: Session): void;

package/dist/tools/importCurl.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+import { parseCurl } from "../curl.js";
+import { httpRequest } from "../native.js";
+import { formatHttp } from "../format.js";
+export function registerImportCurlTool(server, session) {
+    server.registerTool("import_curl", {
+        title: "Import a curl command",
+        description: "Parse curl into structured request. Optionally execute it.",
+        inputSchema: {
+            curl: z.string().describe("The full curl command, e.g. \"curl -X POST https://... -H '...' -d '...'\"."),
+            execute: z.boolean().optional().describe("If true, run the parsed request and return the result."),
+            verbosity: z.enum(["summary", "headers", "full"]).optional(),
+        },
+    }, async ({ curl, execute, verbosity }) => {
+        const parsed = parseCurl(curl);
+        if (!execute) {
+            return { content: [{ type: "text", text: JSON.stringify({ parsed }, null, 2) }] };
+        }
+        const policy = session.checkPolicy(parsed.url);
+        if (policy && "blocked" in policy) {
+            return { content: [{ type: "text", text: JSON.stringify({ ok: false, error: policy.error }, null, 2) }] };
+        }
+        if (policy && "dryRun" in policy) {
+            const handle = session.storeResponse(policy.result);
+            const formatted = formatHttp(policy.result, verbosity ?? "summary", handle);
+            return { content: [{ type: "text", text: JSON.stringify(session.redact({ parsed, result: formatted }), null, 2) }] };
+        }
+        const result = await httpRequest({ ...parsed, vars: session.mergedVars() });
+        const handle = session.storeResponse(result);
+        const formatted = formatHttp(result, verbosity ?? "summary", handle);
+        return {
+            content: [{ type: "text", text: JSON.stringify(session.redact({ parsed, result: formatted }), null, 2) }],
+        };
+    });
+}
+//# sourceMappingURL=importCurl.js.map

package/dist/tools/importCurl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"importCurl.js","sourceRoot":"","sources":["../../src/tools/importCurl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,OAAgB;IACxE,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;YACxG,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;YAClG,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC7D;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,MAAM,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACrH,CAAC;QACD,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAG,SAAuB,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAG,SAAuB,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;QACpF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnH,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/importers.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerImporterTools(server: McpServer): void;