@toolplex/client 0.1.25 → 0.1.27

package/dist/mcp-server/index.js

@@ -20,6 +20,22 @@ const bundledDependencies = {
     uvx: process.env.TOOLPLEX_UVX_PATH,
     git: process.env.TOOLPLEX_GIT_PATH,
 };
+// Parse session resume history for restored chat sessions
+// This allows the enforcement layer to validate save_playbook and submit_feedback
+// based on historical tool usage from the database
+let sessionResumeHistory;
+if (process.env.TOOLPLEX_SESSION_RESUME_HISTORY) {
+    try {
+        sessionResumeHistory = JSON.parse(process.env.TOOLPLEX_SESSION_RESUME_HISTORY);
+        FileLogger.info(`Parsed session resume history - ` +
+            `${sessionResumeHistory?.tool_calls.length || 0} tool calls, ` +
+            `${sessionResumeHistory?.installs.length || 0} installs, ` +
+            `${sessionResumeHistory?.uninstalls.length || 0} uninstalls`);
+    }
+    catch (error) {
+        FileLogger.warn(`Failed to parse session resume history: ${error}`);
+    }
+}
 if (!apiKey) {
     process.exit(1);
 }
@@ -30,6 +46,7 @@ const config = {
     clientName,
     logLevel,
     bundledDependencies,
+    sessionResumeHistory,
 };
 serve(config).catch(() => {
     process.exit(1);

package/dist/mcp-server/policy/callToolObserver.d.ts

@@ -2,6 +2,10 @@ declare class CallToolObserver {
     private serverToolCalls;
     constructor();
     recordCall(serverId: string, toolName: string): void;
+    seedHistory(history: Array<{
+        server_id: string;
+        tool_name: string;
+    }>): void;
     wasServerCalled(serverId: string): boolean;
     wasToolCalled(serverId: string, toolName: string): boolean;
     clear(): void;

package/dist/mcp-server/policy/callToolObserver.js

@@ -9,6 +9,12 @@ class CallToolObserver {
         }
         this.serverToolCalls.get(serverId).add(toolName);
     }
+    // Seed the observer with historical tool calls (for session resume)
+    seedHistory(history) {
+        history.forEach(({ server_id, tool_name }) => {
+            this.recordCall(server_id, tool_name);
+        });
+    }
     // Check if a server was called at all
     wasServerCalled(serverId) {
         return (this.serverToolCalls.has(serverId) &&

package/dist/mcp-server/policy/installObserver.d.ts

@@ -3,6 +3,11 @@ declare class InstallObserver {
     constructor();
     recordInstall(serverId: string): void;
     recordUninstall(serverId: string): void;
+    seedHistory(installs: Array<{
+        server_id: string;
+    }>, uninstalls: Array<{
+        server_id: string;
+    }>): void;
     wasServerInstalled(serverId: string): boolean;
     wasServerUninstalled(serverId: string): boolean;
     clear(): void;

package/dist/mcp-server/policy/installObserver.js

@@ -10,6 +10,15 @@ class InstallObserver {
     recordUninstall(serverId) {
         this.recordAction(serverId, "uninstall");
     }
+    // Seed the observer with historical install/uninstall actions (for session resume)
+    seedHistory(installs, uninstalls) {
+        installs.forEach(({ server_id }) => {
+            this.recordInstall(server_id);
+        });
+        uninstalls.forEach(({ server_id }) => {
+            this.recordUninstall(server_id);
+        });
+    }
     // Check if a server has been installed
     wasServerInstalled(serverId) {
         return (this.serverInstallActions.has(serverId) &&

package/dist/mcp-server/registry.d.ts

@@ -6,7 +6,7 @@ import { PromptsCache } from "./promptsCache.js";
 import { ToolDefinitionsCache } from "./toolDefinitionsCache.js";
 import { ServersCache } from "./serversCache.js";
 import { PolicyEnforcer } from "./policy/policyEnforcer.js";
-import { BundledDependencies } from "../shared/mcpServerTypes.js";
+import { BundledDependencies, ToolplexServerConfig } from "../shared/mcpServerTypes.js";
 /**
  * In-memory global registry for the ToolPlex client.
  * Maintains singleton instances of core services and clients used throughout the application.
@@ -21,6 +21,7 @@ declare class Registry {
     private static _serversCache;
     private static _policyEnforcer;
     private static _bundledDependencies;
+    private static _serverConfig;
     static init(clientContext: ClientContext): Promise<void>;
     static getClientContext(): ClientContext;
     static getToolplexApiService(): ToolplexApiService;
@@ -46,6 +47,14 @@ declare class Registry {
      * Returns undefined if the dependency is not available.
      */
     static getBundledDependencyPath(depName: "node" | "python" | "git" | "uvx" | "npx"): string | undefined;
+    /**
+     * Set the server configuration (includes session resume history).
+     */
+    static setServerConfig(config: ToolplexServerConfig): void;
+    /**
+     * Get the server configuration.
+     */
+    static getServerConfig(): ToolplexServerConfig;
     static reset(): void;
 }
 export default Registry;

package/dist/mcp-server/registry.js

@@ -101,6 +101,21 @@ class Registry {
     static getBundledDependencyPath(depName) {
         return this._bundledDependencies[depName];
     }
+    /**
+     * Set the server configuration (includes session resume history).
+     */
+    static setServerConfig(config) {
+        this._serverConfig = config;
+    }
+    /**
+     * Get the server configuration.
+     */
+    static getServerConfig() {
+        if (!this._serverConfig) {
+            throw new Error("ServerConfig not set in Registry");
+        }
+        return this._serverConfig;
+    }
     static reset() {
         this._clientContext = null;
         this._toolplexApiService = null;
@@ -120,6 +135,7 @@ class Registry {
         }
         this._policyEnforcer = null;
         this._bundledDependencies = {};
+        this._serverConfig = null;
     }
 }
 Registry._clientContext = null;
@@ -131,4 +147,5 @@ Registry._toolDefinitionsCache = null;
 Registry._serversCache = null;
 Registry._policyEnforcer = null;
 Registry._bundledDependencies = {};
+Registry._serverConfig = null;
 export default Registry;

package/dist/mcp-server/toolHandlers/initHandler.js

@@ -100,6 +100,21 @@ export async function handleInitialize(params) {
     promptsCache.init(processedPrompts);
     // Init PolicyEnforce after setting permissions and flags
     policyEnforcer.init(clientContext);
+    // Seed enforcement history if provided (for restored sessions)
+    const serverConfig = Registry.getServerConfig();
+    if (serverConfig.sessionResumeHistory) {
+        const { tool_calls, installs, uninstalls } = serverConfig.sessionResumeHistory;
+        await logger.info(`Seeding enforcement history from restored session - ` +
+            `${tool_calls.length} tool calls, ${installs.length} installs, ${uninstalls.length} uninstalls`);
+        const callToolObserver = policyEnforcer.getCallToolObserver();
+        callToolObserver.seedHistory(tool_calls);
+        const installObserver = policyEnforcer.getInstallObserver();
+        installObserver.seedHistory(installs, uninstalls);
+        await logger.info("Enforcement history seeded successfully");
+    }
+    else {
+        await logger.debug("No session resume history provided (new session)");
+    }
     const allSucceeded = serverManagerInitResults.succeeded;
     const allFailures = serverManagerInitResults.failures;
     // Initialize the serversCache with the succeeded servers

package/dist/mcp-server/toolHandlers/installServerHandler.js

@@ -117,8 +117,24 @@ export async function handleInstallServer(params) {
         }
         // Validate server ID format
         validateServerIdOrThrow(server_id);
-        // Validate command is installed before proceeding
-        if (config.command) {
+        // Validate stdio transport configuration early to avoid timeouts
+        if (config.transport === "stdio") {
+            // Validate that command is provided
+            if (!config.command) {
+                throw new Error("Command is required for stdio transport");
+            }
+            // Validate command is installed
+            await RuntimeCheck.validateCommandOrThrow(config.command);
+            // Check that args is provided and not empty for package managers
+            // Package managers like npx, uvx, pnpm dlx, etc. require a package name as first arg
+            const command = config.command.toLowerCase();
+            const requiresPackageName = ["npx", "uvx", "pnpm", "yarn"].some((pm) => command.includes(pm));
+            if (requiresPackageName && (!config.args || config.args.length === 0)) {
+                throw new Error(`Package manager command '${config.command}' requires args to specify package name. Received args: ${config.args ? "[]" : "undefined"}`);
+            }
+        }
+        else if (config.command) {
+            // For non-stdio transports, still validate command if provided
             await RuntimeCheck.validateCommandOrThrow(config.command);
         }
         // Check if server is disallowed using policy enforcer

package/dist/mcp-server/toolplexServer.js

@@ -39,6 +39,8 @@ export async function serve(config) {
         Registry.setBundledDependencies(config.bundledDependencies);
         await logger.debug(`Bundled dependencies registered: ${JSON.stringify(config.bundledDependencies)}`);
     }
+    // Store server config in Registry (includes session resume history)
+    Registry.setServerConfig(config);
     await logger.info(`Starting Toolplex server in ${config.dev ? "development" : "production"} mode`);
     const server = new Server({
         name: "toolplex-server",

package/dist/server-manager/serverManager.d.ts

@@ -12,12 +12,17 @@ export declare class ServerManager {
     private config;
     private installationPromises;
     private configLock;
+    private static readonly MAX_STDERR_LINES;
     constructor();
     private loadConfig;
     private saveConfig;
     initialize(): Promise<InitializeResult>;
     getServerName(serverId: string): Promise<string>;
-    connectWithHandshakeTimeout(client: Client, transport: SSEClientTransport | StdioClientTransport, ms?: number): Promise<{
+    /**
+     * Helper to attach stderr listener as soon as transport starts
+     */
+    private attachStderrListener;
+    connectWithHandshakeTimeout(client: Client, transport: SSEClientTransport | StdioClientTransport, ms?: number, stderrBuffer?: string[], serverId?: string): Promise<{
         tools?: Tool[];
     }>;
     install(serverId: string, serverName: string, description: string, config: ServerConfig): Promise<void>;

package/dist/server-manager/serverManager.js

@@ -136,13 +136,51 @@ export class ServerManager {
         await logger.debug(`Getting name for server ${serverId}`);
         return this.serverNames.get(serverId) || serverId;
     }
-    async connectWithHandshakeTimeout(client, transport, ms = 60000) {
+    /**
+     * Helper to attach stderr listener as soon as transport starts
+     */
+    async attachStderrListener(transport, serverId, stderrBuffer, maxLines) {
+        // Poll for stderr availability (it becomes available after transport.start())
+        const maxAttempts = 100; // 1 second total
+        const pollInterval = 10; // 10ms between checks
+        for (let i = 0; i < maxAttempts; i++) {
+            if (transport.stderr) {
+                transport.stderr.on("data", (chunk) => {
+                    const lines = chunk
+                        .toString()
+                        .split("\n")
+                        .filter((l) => l.trim());
+                    stderrBuffer.push(...lines);
+                    // Keep only the last maxLines to prevent memory issues
+                    if (stderrBuffer.length > maxLines) {
+                        stderrBuffer.splice(0, stderrBuffer.length - maxLines);
+                    }
+                    // Also log stderr in real-time for debugging
+                    lines.forEach((line) => {
+                        logger.debug(`[${serverId} stderr] ${line}`);
+                    });
+                });
+                return;
+            }
+            await new Promise((resolve) => setTimeout(resolve, pollInterval));
+        }
+        // If stderr never became available, that's okay (might be SSE transport)
+    }
+    async connectWithHandshakeTimeout(client, transport, ms = 60000, stderrBuffer, serverId) {
         let connectTimeout;
         let listToolsTimeout;
         try {
+            // Start stderr monitoring in parallel for stdio transports
+            const stderrMonitoring = transport instanceof StdioClientTransport && stderrBuffer && serverId
+                ? this.attachStderrListener(transport, serverId, stderrBuffer, ServerManager.MAX_STDERR_LINES)
+                : Promise.resolve();
             // Race connect() with timeout
             await Promise.race([
-                client.connect(transport),
+                (async () => {
+                    await client.connect(transport);
+                    // Ensure stderr listener is attached after connection starts
+                    await stderrMonitoring;
+                })(),
                 new Promise((_, reject) => {
                     connectTimeout = setTimeout(() => reject(new Error(`connect() timed out in ${ms} ms`)), ms);
                 }),
@@ -195,6 +233,7 @@ export class ServerManager {
             await this.removeServer(serverId);
         }
         let transport;
+        const stderrBuffer = [];
         if (config.transport === "sse") {
             if (!config.url)
                 throw new Error("URL is required for SSE transport");
@@ -226,7 +265,7 @@ export class ServerManager {
         }
         const client = new Client({ name: serverId, version: "1.0.0" }, { capabilities: { prompts: {}, resources: {}, tools: {} } });
         try {
-            const toolsResponse = await this.connectWithHandshakeTimeout(client, transport, 60000);
+            const toolsResponse = await this.connectWithHandshakeTimeout(client, transport, 60000, stderrBuffer, serverId);
             const tools = toolsResponse.tools || [];
             this.sessions.set(serverId, client);
             this.tools.set(serverId, tools);
@@ -258,7 +297,18 @@ export class ServerManager {
                     await logger.warn(`Failed to close transport during cleanup: ${closeErr}`);
                 }
             }
-            throw err;
+            // Enhance error message with stderr output if available
+            const baseError = err instanceof Error ? err.message : String(err);
+            let enhancedError = baseError;
+            if (stderrBuffer.length > 0) {
+                const stderrPreview = stderrBuffer.join("\n");
+                enhancedError = `${baseError}\n\nServer stderr output:\n${stderrPreview}`;
+                await logger.error(`Installation failed for ${serverId}. Error: ${baseError}. Stderr: ${stderrPreview}`);
+            }
+            else {
+                await logger.error(`Installation failed for ${serverId}: ${baseError}`);
+            }
+            throw new Error(enhancedError);
         }
     }
     async callTool(serverId, toolName, 
@@ -411,3 +461,5 @@ export class ServerManager {
         this.installationPromises.clear();
     }
 }
+// Maximum number of stderr lines to capture during installation
+ServerManager.MAX_STDERR_LINES = 50;

package/dist/shared/mcpServerTypes.d.ts

@@ -21,6 +21,18 @@ export interface ToolplexServerConfig {
     clientName: string;
     logLevel: LogLevel;
     bundledDependencies?: BundledDependencies;
+    sessionResumeHistory?: {
+        tool_calls: Array<{
+            server_id: string;
+            tool_name: string;
+        }>;
+        installs: Array<{
+            server_id: string;
+        }>;
+        uninstalls: Array<{
+            server_id: string;
+        }>;
+    };
 }
 export declare const TransportTypeSchema: z.ZodEnum<["stdio", "sse"]>;
 export type TransportType = z.infer<typeof TransportTypeSchema>;

package/dist/src/mcp-server/policy/callToolObserver.js

@@ -9,6 +9,12 @@ class CallToolObserver {
         }
         this.serverToolCalls.get(serverId).add(toolName);
     }
+    // Seed the observer with historical tool calls (for session resume)
+    seedHistory(history) {
+        history.forEach(({ server_id, tool_name }) => {
+            this.recordCall(server_id, tool_name);
+        });
+    }
     // Check if a server was called at all
     wasServerCalled(serverId) {
         return (this.serverToolCalls.has(serverId) &&

package/dist/src/mcp-server/policy/installObserver.js

@@ -10,6 +10,15 @@ class InstallObserver {
     recordUninstall(serverId) {
         this.recordAction(serverId, "uninstall");
     }
+    // Seed the observer with historical install/uninstall actions (for session resume)
+    seedHistory(installs, uninstalls) {
+        installs.forEach(({ server_id }) => {
+            this.recordInstall(server_id);
+        });
+        uninstalls.forEach(({ server_id }) => {
+            this.recordUninstall(server_id);
+        });
+    }
     // Check if a server has been installed
     wasServerInstalled(serverId) {
         return (this.serverInstallActions.has(serverId) &&

package/dist/src/mcp-server/registry.js

@@ -101,6 +101,21 @@ class Registry {
     static getBundledDependencyPath(depName) {
         return this._bundledDependencies[depName];
     }
+    /**
+     * Set the server configuration (includes session resume history).
+     */
+    static setServerConfig(config) {
+        this._serverConfig = config;
+    }
+    /**
+     * Get the server configuration.
+     */
+    static getServerConfig() {
+        if (!this._serverConfig) {
+            throw new Error("ServerConfig not set in Registry");
+        }
+        return this._serverConfig;
+    }
     static reset() {
         this._clientContext = null;
         this._toolplexApiService = null;
@@ -120,6 +135,7 @@ class Registry {
         }
         this._policyEnforcer = null;
         this._bundledDependencies = {};
+        this._serverConfig = null;
     }
 }
 Registry._clientContext = null;
@@ -131,4 +147,5 @@ Registry._toolDefinitionsCache = null;
 Registry._serversCache = null;
 Registry._policyEnforcer = null;
 Registry._bundledDependencies = {};
+Registry._serverConfig = null;
 export default Registry;

package/dist/src/mcp-server/toolHandlers/initHandler.js

@@ -100,6 +100,21 @@ export async function handleInitialize(params) {
     promptsCache.init(processedPrompts);
     // Init PolicyEnforce after setting permissions and flags
     policyEnforcer.init(clientContext);
+    // Seed enforcement history if provided (for restored sessions)
+    const serverConfig = Registry.getServerConfig();
+    if (serverConfig.sessionResumeHistory) {
+        const { tool_calls, installs, uninstalls } = serverConfig.sessionResumeHistory;
+        await logger.info(`Seeding enforcement history from restored session - ` +
+            `${tool_calls.length} tool calls, ${installs.length} installs, ${uninstalls.length} uninstalls`);
+        const callToolObserver = policyEnforcer.getCallToolObserver();
+        callToolObserver.seedHistory(tool_calls);
+        const installObserver = policyEnforcer.getInstallObserver();
+        installObserver.seedHistory(installs, uninstalls);
+        await logger.info("Enforcement history seeded successfully");
+    }
+    else {
+        await logger.debug("No session resume history provided (new session)");
+    }
     const allSucceeded = serverManagerInitResults.succeeded;
     const allFailures = serverManagerInitResults.failures;
     // Initialize the serversCache with the succeeded servers

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const version = "0.1.25";
+export declare const version = "0.1.27";

package/dist/version.js

@@ -1 +1 @@
-export const version = '0.1.25';
+export const version = '0.1.27';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@toolplex/client",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "author": "ToolPlex LLC",
   "license": "SEE LICENSE IN LICENSE",
   "description": "The official ToolPlex client for AI agent tool discovery and execution",