@tianshu-ai/tianshu 0.3.0

package/packages/plugin-sdk/dist/mcp-client.d.ts

@@ -0,0 +1,74 @@
+/**
+ * One entry in an MCP server's tools/list response. Mirrors the
+ * MCP spec's `Tool` shape (we keep the fields we use; ignore
+ * everything else by typing them as unknown).
+ */
+export interface McpToolDescriptor {
+    name: string;
+    description?: string;
+    /** JSON Schema for the tool's arguments. */
+    inputSchema?: Record<string, unknown>;
+    /** MCP 2024-11+ "title" / annotations / etc. — we don't read them
+     *  but propagate them through to admin views. */
+    annotations?: Record<string, unknown>;
+}
+export interface McpToolResult {
+    content?: Array<{
+        type: "text";
+        text: string;
+    } | {
+        type: "image";
+        data: string;
+        mimeType: string;
+    } | {
+        type: "resource";
+        resource: unknown;
+    }>;
+    isError?: boolean;
+    /** Some tools (browser_take_screenshot) return additional fields. */
+    [key: string]: unknown;
+}
+export declare class McpClientError extends Error {
+    readonly code?: number | undefined;
+    constructor(message: string, code?: number | undefined);
+}
+export declare class McpClient {
+    /** e.g. http://localhost:6701 (no trailing slash). */
+    private readonly baseUrl;
+    /** Per-call request timeout. Default 30s. */
+    private readonly timeoutMs;
+    private sessionId;
+    private nextId;
+    private initialised;
+    private readonly host;
+    private readonly port;
+    /** Host header to send. Always the MCP server's bound address
+     *  inside the sandbox (default localhost:3200), regardless of
+     *  whatever forwarded port we connect to from the host. */
+    private readonly hostHeader;
+    constructor(
+    /** e.g. http://localhost:6701 (no trailing slash). */
+    baseUrl: string, 
+    /** Per-call request timeout. Default 30s. */
+    timeoutMs?: number, 
+    /** Override the upstream MCP server's bound Host. Defaults to
+     *  `localhost:3200` which is what the supervisord-managed
+     *  Playwright MCP listens on inside browser.yaml's VM. */
+    upstreamHost?: string);
+    /** One-shot: open an MCP session, call a tool, close. Caller
+     *  doesn't have to manage session lifecycle. */
+    callTool(name: string, args: Record<string, unknown>): Promise<McpToolResult>;
+    /** Returns the registered tools advertised by the server,
+     *  including their JSON-Schema input descriptions. Used by
+     *  McpToolset to reflect remote tools into AgentTools. */
+    listTools(): Promise<{
+        tools: McpToolDescriptor[];
+    }>;
+    private initialise;
+    private request;
+    private notify;
+    /** Send a single POST to /mcp using node:http, with the Host
+     *  header pinned to the upstream MCP's bound address. */
+    private send;
+}
+//# sourceMappingURL=mcp-client.d.ts.map

package/packages/plugin-sdk/dist/mcp-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.d.ts","sourceRoot":"","sources":["../src/mcp-client.ts"],"names":[],"mappings":"AAsDA;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;qDACiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,KAAK,CACX;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GACjD;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAC1C,CAAC;IACF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBADtB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,qBAAa,SAAS;IAYlB,sDAAsD;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAd5B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B;;+DAE2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;;IAGlC,sDAAsD;IACrC,OAAO,EAAE,MAAM;IAChC,6CAA6C;IAC5B,SAAS,GAAE,MAAe;IAC3C;;8DAE0D;IAC1D,YAAY,GAAE,MAAyB;IAQzC;oDACgD;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IASnF;;8DAE0D;IACpD,SAAS,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,iBAAiB,EAAE,CAAA;KAAE,CAAC;YAO5C,UAAU;YAoBV,OAAO;YAyCP,MAAM;IAwBpB;6DACyD;IACzD,OAAO,CAAC,IAAI;CAsCb"}

package/packages/plugin-sdk/dist/mcp-client.js

@@ -0,0 +1,226 @@
+// Minimal MCP client over Streamable HTTP.
+//
+// @playwright/mcp 0.x supports two transports: legacy SSE (GET /sse +
+// POST /messages?sessionId=…) and the newer "Streamable HTTP" single
+// endpoint (POST /mcp). We use the latter — it's a single round-trip
+// per tool call and the server returns either a JSON body or an SSE
+// stream we can read until the response message arrives.
+//
+// We don't pull in the official @modelcontextprotocol/sdk because:
+//   1. it's ~150 KB pulled into the plugin bundle for what is, at
+//      this stage, four method calls (initialize, tools/list,
+//      tools/call, "notifications/initialized");
+//   2. node:http reads SSE chunks in ~30 lines.
+// If we end up calling more MCP servers we'll switch to the SDK.
+//
+// Why node:http and not Node's built-in fetch? Playwright MCP
+// validates the Host request header against its bound address
+// (default "localhost:<port>") and 403's mismatches with
+// `Access is only allowed at localhost:<port>`. We're behind a
+// per-tenant microsandbox port forward, so the upstream host
+// (e.g. 127.0.0.1:58474) is never "localhost:3200". Setting
+// `Host: localhost:3200` is the right answer — but Node's undici
+// fetch implementation silently overrides any caller-supplied Host
+// header with the URL's host (see undici's `Request` validation).
+// node:http lets us set Host explicitly, so we use that. The MCP
+// server itself can stay locked to localhost — no need to widen
+// `--allowed-hosts` in the sandboxfile.
+import { request as httpRequest } from "node:http";
+const PROTOCOL_VERSION = "2025-06-18";
+const CLIENT_INFO = { name: "tianshu-microsandbox", version: "0.1.0" };
+export class McpClientError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = "McpClientError";
+    }
+}
+export class McpClient {
+    baseUrl;
+    timeoutMs;
+    sessionId = null;
+    nextId = 1;
+    initialised = false;
+    host;
+    port;
+    /** Host header to send. Always the MCP server's bound address
+     *  inside the sandbox (default localhost:3200), regardless of
+     *  whatever forwarded port we connect to from the host. */
+    hostHeader;
+    constructor(
+    /** e.g. http://localhost:6701 (no trailing slash). */
+    baseUrl, 
+    /** Per-call request timeout. Default 30s. */
+    timeoutMs = 30_000, 
+    /** Override the upstream MCP server's bound Host. Defaults to
+     *  `localhost:3200` which is what the supervisord-managed
+     *  Playwright MCP listens on inside browser.yaml's VM. */
+    upstreamHost = "localhost:3200") {
+        this.baseUrl = baseUrl;
+        this.timeoutMs = timeoutMs;
+        const u = new URL(baseUrl);
+        this.host = u.hostname;
+        this.port = u.port ? Number(u.port) : u.protocol === "https:" ? 443 : 80;
+        this.hostHeader = upstreamHost;
+    }
+    /** One-shot: open an MCP session, call a tool, close. Caller
+     *  doesn't have to manage session lifecycle. */
+    async callTool(name, args) {
+        if (!this.initialised)
+            await this.initialise();
+        const result = await this.request("tools/call", {
+            name,
+            arguments: args,
+        });
+        return result;
+    }
+    /** Returns the registered tools advertised by the server,
+     *  including their JSON-Schema input descriptions. Used by
+     *  McpToolset to reflect remote tools into AgentTools. */
+    async listTools() {
+        if (!this.initialised)
+            await this.initialise();
+        return this.request("tools/list", {});
+    }
+    // ─── internals ─────────────────────────────────────────────
+    async initialise() {
+        const init = await this.request("initialize", {
+            protocolVersion: PROTOCOL_VERSION,
+            capabilities: { tools: {} },
+            clientInfo: CLIENT_INFO,
+        });
+        if (!init.protocolVersion) {
+            throw new McpClientError(`MCP initialize returned no protocolVersion: ${JSON.stringify(init)}`);
+        }
+        // Send the post-init notification (per MCP spec).
+        await this.notify("notifications/initialized", {});
+        this.initialised = true;
+    }
+    async request(method, params) {
+        const id = this.nextId++;
+        const body = { jsonrpc: "2.0", id, method, params };
+        const headers = {
+            "Content-Type": "application/json",
+            Accept: "application/json, text/event-stream",
+        };
+        if (this.sessionId)
+            headers["Mcp-Session-Id"] = this.sessionId;
+        const { res, status, headers: respHeaders } = await this.send(headers, JSON.stringify(body));
+        if (status < 200 || status >= 300) {
+            const text = await drain(res).catch(() => "");
+            throw new McpClientError(`MCP HTTP ${status}: ${text.slice(0, 400)}`, status);
+        }
+        // Server returns Mcp-Session-Id on the initialize response.
+        const newSession = respHeaders["mcp-session-id"];
+        if (typeof newSession === "string")
+            this.sessionId = newSession;
+        const ct = (respHeaders["content-type"] ?? "");
+        let envelope;
+        if (ct.includes("text/event-stream")) {
+            envelope = await readJsonRpcFromSse(res, id);
+        }
+        else {
+            const buf = await drain(res);
+            envelope = JSON.parse(buf);
+        }
+        if ("error" in envelope) {
+            throw new McpClientError(envelope.error.message, envelope.error.code);
+        }
+        return envelope.result;
+    }
+    async notify(method, params) {
+        const headers = {
+            "Content-Type": "application/json",
+            Accept: "application/json, text/event-stream",
+        };
+        if (this.sessionId)
+            headers["Mcp-Session-Id"] = this.sessionId;
+        // Notifications have no id, no response needed; we still wait
+        // for the HTTP 202/200 to make sure the server saw it before
+        // we send the next request.
+        const { res, status } = await this.send(headers, JSON.stringify({ jsonrpc: "2.0", method, params }));
+        if (status < 200 || status >= 300) {
+            const text = await drain(res).catch(() => "");
+            throw new McpClientError(`MCP notify HTTP ${status}: ${text.slice(0, 200)}`, status);
+        }
+        // Drain body so the connection can be reused.
+        await drain(res).catch(() => "");
+    }
+    /** Send a single POST to /mcp using node:http, with the Host
+     *  header pinned to the upstream MCP's bound address. */
+    send(headers, body) {
+        return new Promise((resolve, reject) => {
+            const req = httpRequest({
+                host: this.host,
+                port: this.port,
+                path: "/mcp",
+                method: "POST",
+                headers: {
+                    Host: this.hostHeader,
+                    "Content-Length": Buffer.byteLength(body),
+                    ...headers,
+                },
+            }, (res) => {
+                resolve({
+                    res,
+                    status: res.statusCode ?? 0,
+                    headers: res.headers,
+                });
+            });
+            req.on("error", reject);
+            const timer = setTimeout(() => {
+                req.destroy(new Error(`MCP request timed out after ${this.timeoutMs}ms`));
+            }, this.timeoutMs);
+            req.on("close", () => clearTimeout(timer));
+            req.write(body);
+            req.end();
+        });
+    }
+}
+async function drain(res) {
+    const chunks = [];
+    for await (const chunk of res) {
+        chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+/**
+ * Read an SSE stream and return the first jsonrpc envelope whose `id`
+ * matches the request we sent. The server may emit progress events
+ * (notifications/progress) before the final response; we skip those.
+ */
+async function readJsonRpcFromSse(res, expectId) {
+    let buf = "";
+    for await (const chunk of res) {
+        buf += typeof chunk === "string" ? chunk : chunk.toString("utf8");
+        let blockEnd;
+        // eslint-disable-next-line no-cond-assign
+        while ((blockEnd = buf.indexOf("\n\n")) >= 0) {
+            const block = buf.slice(0, blockEnd);
+            buf = buf.slice(blockEnd + 2);
+            const dataLines = block
+                .split("\n")
+                .filter((l) => l.startsWith("data:"))
+                .map((l) => l.slice(5).trimStart());
+            if (dataLines.length === 0)
+                continue;
+            const payload = dataLines.join("\n");
+            try {
+                const env = JSON.parse(payload);
+                if (env.id === expectId) {
+                    // Drop the connection so the server stops streaming.
+                    res.destroy();
+                    return env;
+                }
+                // Otherwise it's a notification (id missing) or another
+                // request we don't care about; keep reading.
+            }
+            catch {
+                // Malformed event; ignore and keep reading.
+            }
+        }
+    }
+    throw new McpClientError("MCP SSE stream ended before response arrived");
+}
+//# sourceMappingURL=mcp-client.js.map

package/packages/plugin-sdk/dist/mcp-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.js","sourceRoot":"","sources":["../src/mcp-client.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,yDAAyD;AACzD,EAAE;AACF,mEAAmE;AACnE,kEAAkE;AAClE,8DAA8D;AAC9D,iDAAiD;AACjD,gDAAgD;AAChD,iEAAiE;AACjE,EAAE;AACF,8DAA8D;AAC9D,8DAA8D;AAC9D,yDAAyD;AACzD,+DAA+D;AAC/D,6DAA6D;AAC7D,4DAA4D;AAC5D,iEAAiE;AACjE,mEAAmE;AACnE,kEAAkE;AAClE,iEAAiE;AACjE,gEAAgE;AAChE,wCAAwC;AAExC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAwB,MAAM,WAAW,CAAC;AAEzE,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAiDvE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG5B;IAFX,YACE,OAAe,EACN,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,SAAI,GAAJ,IAAI,CAAS;QAGtB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IAaD;IAEA;IAdX,SAAS,GAAkB,IAAI,CAAC;IAChC,MAAM,GAAG,CAAC,CAAC;IACX,WAAW,GAAG,KAAK,CAAC;IACX,IAAI,CAAS;IACb,IAAI,CAAS;IAC9B;;+DAE2D;IAC1C,UAAU,CAAS;IAEpC;IACE,sDAAsD;IACrC,OAAe;IAChC,6CAA6C;IAC5B,YAAoB,MAAM;IAC3C;;8DAE0D;IAC1D,eAAuB,gBAAgB;QANtB,YAAO,GAAP,OAAO,CAAQ;QAEf,cAAS,GAAT,SAAS,CAAiB;QAM3C,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC;IACjC,CAAC;IAED;oDACgD;IAChD,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QACxD,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAgB,YAAY,EAAE;YAC7D,IAAI;YACJ,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;8DAE0D;IAC1D,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,8DAA8D;IAEtD,KAAK,CAAC,UAAU;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAI5B,YAAY,EAAE;YACf,eAAe,EAAE,gBAAgB;YACjC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,IAAI,cAAc,CACtB,+CAA+C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;QACD,kDAAkD;QAClD,MAAM,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,MAAe;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpE,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,qCAAqC;SAC9C,CAAC;QACF,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/D,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAC3D,OAAO,EACP,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;QAEF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,cAAc,CACtB,YAAY,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAC3C,MAAM,CACP,CAAC;QACJ,CAAC;QAED,4DAA4D;QAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC;QAEhE,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,CAAW,CAAC;QACzD,IAAI,QAA4B,CAAC;QACjC,IAAI,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACrC,QAAQ,GAAG,MAAM,kBAAkB,CAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7B,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACnD,CAAC;QAED,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,MAAe;QAClD,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,qCAAqC;SAC9C,CAAC;QACF,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/D,8DAA8D;QAC9D,6DAA6D;QAC7D,4BAA4B;QAC5B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CACrC,OAAO,EACP,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CACnD,CAAC;QACF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,cAAc,CACtB,mBAAmB,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAClD,MAAM,CACP,CAAC;QACJ,CAAC;QACD,8CAA8C;QAC9C,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;6DACyD;IACjD,IAAI,CACV,OAA+B,EAC/B,IAAY;QAMZ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,WAAW,CACrB;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,IAAI,EAAE,IAAI,CAAC,UAAU;oBACrB,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;oBACzC,GAAG,OAAO;iBACX;aACF,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,OAAO,CAAC;oBACN,GAAG;oBACH,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YAC5E,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,KAAK,UAAU,KAAK,CAAC,GAAoB;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,GAAoB,EACpB,QAAyB;IAEzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,GAAG,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,QAAgB,CAAC;QACrB,0CAA0C;QAC1C,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,KAAK;iBACpB,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;iBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACrC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0C,CAAC;gBACzE,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACxB,qDAAqD;oBACrD,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,OAAO,GAAG,CAAC;gBACb,CAAC;gBACD,wDAAwD;gBACxD,6CAA6C;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;AAC3E,CAAC"}

package/packages/plugin-sdk/dist/mcp-fetch.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Build a fetch-shaped function that routes requests through
+ * `node:http` so that a caller-supplied `Host` header is preserved.
+ *
+ * @param hostHeader Value to set on every outbound request's Host
+ *                   header. Most callers want their upstream MCP
+ *                   server's bound address (e.g. `localhost:3200`).
+ */
+export declare function makeNodeHttpFetch(hostHeader: string): (input: string | URL, init?: RequestInit) => Promise<Response>;
+//# sourceMappingURL=mcp-fetch.d.ts.map

package/packages/plugin-sdk/dist/mcp-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-fetch.d.ts","sourceRoot":"","sources":["../src/mcp-fetch.ts"],"names":[],"mappings":"AA4BA;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,IAEhD,OAAO,MAAM,GAAG,GAAG,EACnB,OAAM,WAAgB,KACrB,OAAO,CAAC,QAAQ,CAAC,CAiErB"}

package/packages/plugin-sdk/dist/mcp-fetch.js

@@ -0,0 +1,130 @@
+// Node.js-backed fetch shim so MCP transports can pin the upstream
+// Host header.
+//
+// Why we need this: Playwright MCP (and most MCP servers) bind to
+// `localhost:<port>` and validate the inbound `Host` header against
+// that bound address. From the host process we connect through a
+// per-tenant microsandbox port forward, so the upstream IP/host is
+// e.g. `127.0.0.1:58474` — never `localhost:3200`. The fix is to
+// override the Host header — but Node's built-in fetch (undici)
+// silently overrides any caller-supplied Host header with the URL's
+// host (see undici Request validation), so the override gets
+// discarded.
+//
+// The MCP SDK's StreamableHTTPClientTransport accepts a
+// `fetch?: FetchLike` opt that fully replaces fetch. We feed it a
+// shim built on `node:http` (where the Host header is honoured),
+// preserving the SDK's native call shape so reconnect logic, SSE
+// streaming, auth, and retries continue to work.
+//
+// Streams: the SDK reads `response.body` as a ReadableStream for
+// SSE responses. We bridge node:http's IncomingMessage into a Web
+// ReadableStream. JSON responses are read via `await resp.text()`
+// or `.json()` so a buffered fallback works just as well.
+import { request as httpRequest } from "node:http";
+import { request as httpsRequest } from "node:https";
+import { Readable } from "node:stream";
+/**
+ * Build a fetch-shaped function that routes requests through
+ * `node:http` so that a caller-supplied `Host` header is preserved.
+ *
+ * @param hostHeader Value to set on every outbound request's Host
+ *                   header. Most callers want their upstream MCP
+ *                   server's bound address (e.g. `localhost:3200`).
+ */
+export function makeNodeHttpFetch(hostHeader) {
+    return async function fetchViaNodeHttp(input, init = {}) {
+        const url = typeof input === "string" || input instanceof URL ? new URL(input) : input;
+        const transport = url.protocol === "https:" ? httpsRequest : httpRequest;
+        // Normalise `init.headers` → plain dict.
+        const headerDict = {};
+        if (init.headers) {
+            // Headers can be Headers/array/object — coerce via Headers.
+            const h = new Headers(init.headers);
+            h.forEach((v, k) => {
+                headerDict[k] = v;
+            });
+        }
+        // Force our Host header. node:http actually honours this
+        // (unlike undici's fetch).
+        headerDict["host"] = hostHeader;
+        delete headerDict["Host"]; // case-insensitive — only keep one
+        // Body coercion. The SDK only sends string / undefined bodies
+        // for JSON-RPC, but support common shapes defensively.
+        let body;
+        if (init.body !== undefined && init.body !== null) {
+            if (typeof init.body === "string")
+                body = Buffer.from(init.body);
+            else if (init.body instanceof Uint8Array)
+                body = Buffer.from(init.body);
+            else if (init.body instanceof ArrayBuffer)
+                body = Buffer.from(new Uint8Array(init.body));
+            else
+                body = Buffer.from(String(init.body));
+        }
+        if (body)
+            headerDict["content-length"] = String(body.length);
+        const port = url.port
+            ? Number(url.port)
+            : url.protocol === "https:"
+                ? 443
+                : 80;
+        return new Promise((resolve, reject) => {
+            const req = transport({
+                host: url.hostname,
+                port,
+                path: `${url.pathname}${url.search}`,
+                method: (init.method ?? "GET").toUpperCase(),
+                headers: headerDict,
+            }, (res) => {
+                resolve(buildWebResponse(res));
+            });
+            req.on("error", reject);
+            // Honour AbortSignal so the SDK's timeout / disconnect path
+            // works.
+            const signal = init.signal;
+            if (signal) {
+                if (signal.aborted) {
+                    req.destroy(abortError(signal));
+                }
+                else {
+                    const onAbort = () => req.destroy(abortError(signal));
+                    signal.addEventListener("abort", onAbort, { once: true });
+                    req.on("close", () => signal.removeEventListener("abort", onAbort));
+                }
+            }
+            if (body)
+                req.write(body);
+            req.end();
+        });
+    };
+}
+function abortError(signal) {
+    // Surface signal.reason when available (most modern callers set
+    // a DOMException). Fall back to a plain AbortError for older
+    // runtimes.
+    const reason = signal.reason;
+    if (reason instanceof Error)
+        return reason;
+    const err = new Error("aborted");
+    err.name = "AbortError";
+    return err;
+}
+function buildWebResponse(res) {
+    const headers = new Headers();
+    for (const [k, v] of Object.entries(res.headers)) {
+        if (Array.isArray(v))
+            v.forEach((vv) => headers.append(k, vv));
+        else if (typeof v === "string")
+            headers.set(k, v);
+    }
+    // Convert IncomingMessage → ReadableStream so the SDK can pipe
+    // the SSE body through eventsource-parser.
+    const stream = Readable.toWeb(res);
+    return new Response(stream, {
+        status: res.statusCode ?? 0,
+        statusText: res.statusMessage ?? "",
+        headers,
+    });
+}
+//# sourceMappingURL=mcp-fetch.js.map

package/packages/plugin-sdk/dist/mcp-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-fetch.js","sourceRoot":"","sources":["../src/mcp-fetch.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,eAAe;AACf,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,iEAAiE;AACjE,mEAAmE;AACnE,iEAAiE;AACjE,gEAAgE;AAChE,oEAAoE;AACpE,6DAA6D;AAC7D,aAAa;AACb,EAAE;AACF,wDAAwD;AACxD,kEAAkE;AAClE,iEAAiE;AACjE,iEAAiE;AACjE,iDAAiD;AACjD,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,kEAAkE;AAClE,0DAA0D;AAE1D,OAAO,EAAE,OAAO,IAAI,WAAW,EAAwB,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,KAAK,UAAU,gBAAgB,CACpC,KAAmB,EACnB,OAAoB,EAAE;QAEtB,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QACzE,yCAAyC;QACzC,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,4DAA4D;YAC5D,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACjB,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,yDAAyD;QACzD,2BAA2B;QAC3B,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;QAChC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,mCAAmC;QAE9D,8DAA8D;QAC9D,uDAAuD;QACvD,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAClD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBAC5D,IAAI,IAAI,CAAC,IAAI,YAAY,UAAU;gBAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACnE,IAAI,IAAI,CAAC,IAAI,YAAY,WAAW;gBAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;;gBACpF,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI;YAAE,UAAU,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE7D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI;YACnB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAClB,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBACzB,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,EAAE,CAAC;QAET,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,MAAM,GAAG,GAAG,SAAS,CACnB;gBACE,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,IAAI;gBACJ,IAAI,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE;gBACpC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;gBAC5C,OAAO,EAAE,UAAU;aACpB,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,4DAA4D;YAC5D,SAAS;YACT,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;oBACtD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YACD,IAAI,IAAI;gBAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,gEAAgE;IAChE,6DAA6D;IAC7D,YAAY;IACZ,MAAM,MAAM,GAAI,MAA0C,CAAC,MAAM,CAAC;IAClE,IAAI,MAAM,YAAY,KAAK;QAAE,OAAO,MAAM,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAoB;IAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;aAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,+DAA+D;IAC/D,2CAA2C;IAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA0C,CAAC;IAC5E,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;QAC3B,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;QACnC,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/packages/plugin-sdk/dist/mcp-toolset.d.ts

@@ -0,0 +1,128 @@
+import type { AgentTool } from "./server.js";
+/** One entry from an MCP server's tools/list response. We keep the
+ *  fields the host actually surfaces in the admin MCP page; the SDK
+ *  exposes more (`annotations`, `outputSchema`) which we ignore. */
+export interface McpToolDescriptor {
+    name: string;
+    description?: string;
+    inputSchema?: Record<string, unknown>;
+    annotations?: Record<string, unknown>;
+}
+/** Resolver for the upstream MCP base URL. Returns undefined when
+ *  the upstream isn't ready yet (e.g. sandbox still booting). */
+export type McpEndpointResolver = () => string | undefined | Promise<string | undefined>;
+export interface McpToolFilter {
+    /** Inclusive allowlist by upstream tool name. */
+    allow?: string[];
+    /** Exclusive denylist by upstream tool name. Applied after allow. */
+    deny?: string[];
+    /** Arbitrary predicate. Wins after allow + deny. */
+    filter?(t: McpToolDescriptor): boolean;
+}
+export interface McpToolsetOptions {
+    /** Display name of this MCP server, e.g. "playwright" or
+     *  "filesystem". Surfaced through the admin MCP servers view. */
+    name: string;
+    /** Prefix prepended to every reflected tool name to avoid
+     *  collisions. Defaults to `<name>_`. Pass `""` to disable
+     *  prefixing (e.g. when upstream already namespaces its tools). */
+    prefix?: string;
+    /** Resolves the base URL of the upstream MCP server. Returns
+     *  undefined when the server isn't reachable yet. The URL should
+     *  point at the Streamable HTTP endpoint; for Playwright MCP that
+     *  is `<base>/mcp`. */
+    resolve: McpEndpointResolver;
+    /** Override the upstream Host header. Most MCP servers bind to
+     *  `localhost:<port>` and validate the Host header against it.
+     *  When the host process connects via a port forward the URL host
+     *  doesn't match, so callers pin the upstream's bound address
+     *  here. Defaults to undefined (use whatever the URL implies,
+     *  i.e. trust Node fetch). */
+    upstreamHost?: string;
+    /** Optional name allowlist/denylist/predicate. Applied to the
+     *  raw MCP tool list before reflection. */
+    filter?: McpToolFilter;
+    /** Optional per-tool description override. Returning undefined
+     *  means "keep upstream description as-is". */
+    describe?(t: McpToolDescriptor): string | undefined;
+    /** Per-call request timeout in ms. Used for both refresh and
+     *  callTool. Default 60s. */
+    callTimeoutMs?: number;
+    /** Client identity for the MCP handshake. Defaults to
+     *  `{ name: "tianshu", version: "0" }`. */
+    clientInfo?: {
+        name: string;
+        version: string;
+    };
+}
+/** Snapshot of one tool exposed by this toolset. */
+export interface McpToolsetEntry {
+    /** Reflected `prefix + upstream.name`. This is what the model sees. */
+    toolName: string;
+    /** Raw upstream descriptor, untouched. */
+    upstream: McpToolDescriptor;
+}
+/** Snapshot of toolset health for diagnostics + admin views. */
+export interface McpToolsetSnapshot {
+    name: string;
+    prefix: string;
+    /** Resolved upstream URL on the last refresh. Undefined while the
+     *  upstream is unreachable. */
+    endpoint: string | undefined;
+    /** Tools advertised on the last successful refresh. Empty until
+     *  the first refresh succeeds. */
+    tools: McpToolsetEntry[];
+    /** ms since epoch of the last refresh attempt. */
+    lastRefreshAt: number | undefined;
+    /** Last refresh error. Cleared after a successful refresh. */
+    lastError: string | undefined;
+}
+/**
+ * The host calls `listTools()` every turn. Provider interface kept
+ * narrow so a plugin can supply a static AgentTool[] provider too
+ * without coupling to McpToolset.
+ */
+export interface ToolsetProvider {
+    readonly name: string;
+    snapshot?(): McpToolsetSnapshot;
+    listTools(): AgentTool[];
+}
+/** Reflective MCP toolset. Holds a short-lived SDK Client per
+ *  refresh / call (so we don't keep an idle SSE stream open). */
+export declare class McpToolset implements ToolsetProvider {
+    readonly name: string;
+    readonly prefix: string;
+    private readonly resolve;
+    private readonly upstreamHost;
+    private readonly filter;
+    private readonly describe;
+    private readonly callTimeoutMs;
+    private readonly clientInfo;
+    private endpoint;
+    private entries;
+    private lastRefreshAt;
+    private lastError;
+    private refreshing;
+    constructor(opts: McpToolsetOptions);
+    snapshot(): McpToolsetSnapshot;
+    /** Cheap, no-network. Returns the last successfully reflected
+     *  tool list. */
+    listTools(): AgentTool[];
+    /** Pull a fresh `tools/list` from upstream. Single-flight; errors
+     *  are recorded but don't yank previously-reflected tools out. */
+    refresh(): Promise<void>;
+    private includes;
+    private entryToAgentTool;
+    private callRemote;
+    /** Open a short-lived MCP Client + transport, run `fn`, close.
+     *  Connection cost is dominated by the JSON-RPC `initialize` round
+     *  trip; for our use case (one tools/list per refresh, one
+     *  tools/call per agent action) re-handshaking is fine and avoids
+     *  the headache of long-lived SSE state across plugin reloads. */
+    private withClient;
+}
+/** Pull text content blocks out of an MCP tool result. Inline image
+ *  / resource blocks are summarised so the agent at least sees the
+ *  shape; structured payload is preserved on `data` by the caller. */
+export declare function textOfMcpContent(content: unknown): string;
+//# sourceMappingURL=mcp-toolset.d.ts.map

package/packages/plugin-sdk/dist/mcp-toolset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-toolset.d.ts","sourceRoot":"","sources":["../src/mcp-toolset.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,SAAS,EAGV,MAAM,aAAa,CAAC;AAMrB;;oEAEoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;iEACiE;AACjE,MAAM,MAAM,mBAAmB,GAAG,MAC9B,MAAM,GACN,SAAS,GACT,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEhC,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oDAAoD;IACpD,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC;qEACiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb;;uEAEmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;2BAGuB;IACvB,OAAO,EAAE,mBAAmB,CAAC;IAC7B;;;;;kCAK8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;+CAC2C;IAC3C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;mDAC+C;IAC/C,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD;iCAC6B;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;+CAC2C;IAC3C,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AAED,gEAAgE;AAChE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf;mCAC+B;IAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;sCACkC;IAClC,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,kDAAkD;IAClD,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,8DAA8D;IAC9D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,kBAAkB,CAAC;IAChC,SAAS,IAAI,SAAS,EAAE,CAAC;CAC1B;AAED;iEACiE;AACjE,qBAAa,UAAW,YAAW,eAAe;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAEX;IACd,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAE/D,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,UAAU,CAA8B;gBAEpC,IAAI,EAAE,iBAAiB;IAWnC,QAAQ,IAAI,kBAAkB;IAW9B;qBACiB;IACjB,SAAS,IAAI,SAAS,EAAE;IAIxB;sEACkE;IAC5D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAiC9B,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,gBAAgB;YAsBV,UAAU;IAsDxB;;;;sEAIkE;YACpD,UAAU;CA0BzB;AAED;;sEAEsE;AACtE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAiBzD"}