@truefoundry/trueforge-core 0.0.0 → 0.1.0-rc.0

package/dist/core/mcp/ClientSideTool.js

@@ -0,0 +1,56 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/mcp/ClientSideTool.ts
+var ClientSideTool_exports = {};
+__export(ClientSideTool_exports, {
+  ClientSideTool: () => ClientSideTool
+});
+module.exports = __toCommonJS(ClientSideTool_exports);
+var import_NoopAgentTracing = require("../tracing/NoopAgentTracing.js");
+var import_LocalToolMCP = require("./LocalToolMCP.js");
+var ClientSideTool = class extends import_LocalToolMCP.LocalToolMCP {
+  // Public so concrete subclasses (AskUserQuestion, …) remain constructable from
+  // factories; abstract class still cannot be instantiated directly.
+  constructor() {
+    super({ tracing: import_NoopAgentTracing.NOOP_AGENT_TRACING });
+  }
+  async callTool(params) {
+    return {
+      clientSideToolRequired: {
+        tool_info: await this.toolCallInfo(params)
+      }
+    };
+  }
+  toolCallInfo(params, _resolveUnderlyingTool) {
+    void _resolveUnderlyingTool;
+    return Promise.resolve({
+      type: "truefoundry-system",
+      original_tool_name: params.name,
+      mcp_server_id: this.mcpServerId,
+      mcp_server_name: this.name,
+      is_client_side: true
+    });
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ClientSideTool
+});
+//# sourceMappingURL=ClientSideTool.js.map

package/dist/core/mcp/ClientSideTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/ClientSideTool.ts"],"sourcesContent":["import type { CallToolRequest } from '@modelcontextprotocol/sdk/types.js';\nimport type { InternalToolCallInfo } from '../llm/LLMTypes';\nimport { NOOP_AGENT_TRACING } from '../tracing/NoopAgentTracing';\nimport type { CallToolResponse } from './IMCPServer';\nimport { LocalToolMCP } from './LocalToolMCP';\n\n// NOTE(agent): ClientSideTool is never executed server-side. When the LLM calls a client-side\n// tool, deriveAgentExecutionState() detects `is_client_side: true` on the tool_info and\n// transitions to `user-input-required` before callTool() is ever reached.\n// The callTool() override exists only as a safety net for impossible states.\nexport abstract class ClientSideTool extends LocalToolMCP {\n  // Public so concrete subclasses (AskUserQuestion, …) remain constructable from\n  // factories; abstract class still cannot be instantiated directly.\n  constructor() {\n    super({ tracing: NOOP_AGENT_TRACING });\n  }\n\n  override async callTool(params: CallToolRequest['params']): Promise<CallToolResponse> {\n    return {\n      clientSideToolRequired: {\n        tool_info: await this.toolCallInfo(params),\n      },\n    };\n  }\n\n  override toolCallInfo(\n    params: CallToolRequest['params'],\n    _resolveUnderlyingTool?: boolean,\n  ): Promise<InternalToolCallInfo> {\n    void _resolveUnderlyingTool;\n    return Promise.resolve({\n      type: 'truefoundry-system',\n      original_tool_name: params.name,\n      mcp_server_id: this.mcpServerId,\n      mcp_server_name: this.name,\n      is_client_side: true,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,8BAAmC;AAEnC,0BAA6B;AAMtB,IAAe,iBAAf,cAAsC,iCAAa;AAAA;AAAA;AAAA,EAGxD,cAAc;AACZ,UAAM,EAAE,SAAS,2CAAmB,CAAC;AAAA,EACvC;AAAA,EAEA,MAAe,SAAS,QAA8D;AACpF,WAAO;AAAA,MACL,wBAAwB;AAAA,QACtB,WAAW,MAAM,KAAK,aAAa,MAAM;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAES,aACP,QACA,wBAC+B;AAC/B,SAAK;AACL,WAAO,QAAQ,QAAQ;AAAA,MACrB,MAAM;AAAA,MACN,oBAAoB,OAAO;AAAA,MAC3B,eAAe,KAAK;AAAA,MACpB,iBAAiB,KAAK;AAAA,MACtB,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/core/mcp/ClientSideTool.mjs

@@ -0,0 +1,31 @@
+// src/core/mcp/ClientSideTool.ts
+import { NOOP_AGENT_TRACING } from "../tracing/NoopAgentTracing.mjs";
+import { LocalToolMCP } from "./LocalToolMCP.mjs";
+var ClientSideTool = class extends LocalToolMCP {
+  // Public so concrete subclasses (AskUserQuestion, …) remain constructable from
+  // factories; abstract class still cannot be instantiated directly.
+  constructor() {
+    super({ tracing: NOOP_AGENT_TRACING });
+  }
+  async callTool(params) {
+    return {
+      clientSideToolRequired: {
+        tool_info: await this.toolCallInfo(params)
+      }
+    };
+  }
+  toolCallInfo(params, _resolveUnderlyingTool) {
+    void _resolveUnderlyingTool;
+    return Promise.resolve({
+      type: "truefoundry-system",
+      original_tool_name: params.name,
+      mcp_server_id: this.mcpServerId,
+      mcp_server_name: this.name,
+      is_client_side: true
+    });
+  }
+};
+export {
+  ClientSideTool
+};
+//# sourceMappingURL=ClientSideTool.mjs.map

package/dist/core/mcp/ClientSideTool.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/ClientSideTool.ts"],"sourcesContent":["import type { CallToolRequest } from '@modelcontextprotocol/sdk/types.js';\nimport type { InternalToolCallInfo } from '../llm/LLMTypes';\nimport { NOOP_AGENT_TRACING } from '../tracing/NoopAgentTracing';\nimport type { CallToolResponse } from './IMCPServer';\nimport { LocalToolMCP } from './LocalToolMCP';\n\n// NOTE(agent): ClientSideTool is never executed server-side. When the LLM calls a client-side\n// tool, deriveAgentExecutionState() detects `is_client_side: true` on the tool_info and\n// transitions to `user-input-required` before callTool() is ever reached.\n// The callTool() override exists only as a safety net for impossible states.\nexport abstract class ClientSideTool extends LocalToolMCP {\n  // Public so concrete subclasses (AskUserQuestion, …) remain constructable from\n  // factories; abstract class still cannot be instantiated directly.\n  constructor() {\n    super({ tracing: NOOP_AGENT_TRACING });\n  }\n\n  override async callTool(params: CallToolRequest['params']): Promise<CallToolResponse> {\n    return {\n      clientSideToolRequired: {\n        tool_info: await this.toolCallInfo(params),\n      },\n    };\n  }\n\n  override toolCallInfo(\n    params: CallToolRequest['params'],\n    _resolveUnderlyingTool?: boolean,\n  ): Promise<InternalToolCallInfo> {\n    void _resolveUnderlyingTool;\n    return Promise.resolve({\n      type: 'truefoundry-system',\n      original_tool_name: params.name,\n      mcp_server_id: this.mcpServerId,\n      mcp_server_name: this.name,\n      is_client_side: true,\n    });\n  }\n}\n"],"mappings":";AAEA,SAAS,0BAA0B;AAEnC,SAAS,oBAAoB;AAMtB,IAAe,iBAAf,cAAsC,aAAa;AAAA;AAAA;AAAA,EAGxD,cAAc;AACZ,UAAM,EAAE,SAAS,mBAAmB,CAAC;AAAA,EACvC;AAAA,EAEA,MAAe,SAAS,QAA8D;AACpF,WAAO;AAAA,MACL,wBAAwB;AAAA,QACtB,WAAW,MAAM,KAAK,aAAa,MAAM;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAES,aACP,QACA,wBAC+B;AAC/B,SAAK;AACL,WAAO,QAAQ,QAAQ;AAAA,MACrB,MAAM;AAAA,MACN,oBAAoB,OAAO;AAAA,MAC3B,eAAe,KAAK;AAAA,MACpB,iBAAiB,KAAK;AAAA,MACtB,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/core/mcp/IMCPServer.d.ts

@@ -0,0 +1,78 @@
+import type { CallToolRequest, CallToolResult, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';
+import type { RegisteredPassthroughEvent } from '../events/PassthroughEvents';
+import type { AgentInfo, ApprovalDecision, MCPServerAuthInfo, MCPServerInitInfo } from '../events/schema';
+import type { InternalToolCallInfo } from '../llm/LLMTypes';
+import type { SandboxInfo } from '../sandbox/Sandbox';
+export interface MCPAuthRequired {
+    servers: MCPServerAuthInfo[];
+}
+export type ToolSchema = ListToolsResult['tools'][number];
+export interface AgentToolSchema extends ToolSchema {
+    preload: boolean;
+}
+export interface AuthRequiredResponse {
+    authRequired: MCPAuthRequired;
+}
+export declare function isAuthRequired(response: ListToolsResponse | CallToolResponse): response is AuthRequiredResponse;
+export interface ListToolsResolvedResponse {
+    result: {
+        tools: AgentToolSchema[];
+    };
+    wasInitialized: MCPServerInitInfo | undefined;
+}
+export type ListToolsResponse = ListToolsResolvedResponse | AuthRequiredResponse;
+export interface CallToolResolvedResponse {
+    result: CallToolResult;
+    wasInitialized: MCPServerInitInfo | undefined;
+    sandboxCreated?: boolean | undefined;
+    sandboxInfo?: SandboxInfo | undefined;
+    events?: readonly RegisteredPassthroughEvent[] | undefined;
+}
+export type CallToolResultResponse = CallToolResolvedResponse | AuthRequiredResponse;
+export interface CallToolCreateSubAgentResponse {
+    createSubAgent: AgentInfo;
+}
+export interface ApprovalRequiredResponse {
+    approvalRequired: {
+        tool_info: InternalToolCallInfo;
+    };
+}
+export declare function isApprovalRequiredResponse(response: CallToolResponse): response is ApprovalRequiredResponse;
+export interface ClientSideToolRequiredResponse {
+    clientSideToolRequired: {
+        tool_info: InternalToolCallInfo;
+    };
+}
+export declare function isClientSideToolRequiredResponse(response: CallToolResponse): response is ClientSideToolRequiredResponse;
+export type CallToolResponse = CallToolResultResponse | CallToolCreateSubAgentResponse | ApprovalRequiredResponse | ClientSideToolRequiredResponse;
+export declare function isCallToolResponseCreateSubAgent(response: CallToolResponse): response is CallToolCreateSubAgentResponse;
+export declare function isCallToolResponseResult(response: CallToolResponse): response is CallToolResolvedResponse;
+type CallToolResultMetadata = Omit<CallToolResolvedResponse, 'result'>;
+export declare function toolResultResponse(params: {
+    text: string;
+    overrides?: Partial<CallToolResultMetadata> | undefined;
+    isError?: boolean | undefined;
+}): CallToolResolvedResponse;
+/** Narrow public MCP server contract. Private implementations may expose additional members. */
+export interface IToolSet {
+    readonly name: string;
+    readonly id: string;
+    readonly description?: string | undefined;
+    readonly preload: boolean;
+    readonly hasPreloadedTools: boolean;
+    listTools(): Promise<ListToolsResponse>;
+    callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;
+    toolCallInfo(params: CallToolRequest['params'], resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;
+    getAllowedToolNamesForSandbox?(): string[] | undefined;
+}
+/** Policy-free tool provider; a {@link ToolSet} wraps it to layer per-agent selector policy on top. */
+export interface ToolSource {
+    readonly name: string;
+    readonly id: string;
+    readonly description?: string | undefined;
+    listTools(): Promise<ListToolsResolvedResponse | AuthRequiredResponse>;
+    callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;
+    toolCallInfo(params: CallToolRequest['params'], resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;
+}
+export {};
+//# sourceMappingURL=IMCPServer.d.ts.map

package/dist/core/mcp/IMCPServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IMCPServer.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/IMCPServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC3G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAC9E,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1G,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,eAAe,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,QAAQ,IAAI,oBAAoB,CAE/G;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE;QAAE,KAAK,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC;IACrC,cAAc,EAAE,iBAAiB,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,MAAM,iBAAiB,GAAG,yBAAyB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAE9C,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAErC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,SAAS,0BAA0B,EAAE,GAAG,SAAS,CAAC;CAC5D;AAED,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,GAAG,oBAAoB,CAAC;AAErF,MAAM,WAAW,8BAA8B;IAC7C,cAAc,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,EAAE;QAAE,SAAS,EAAE,oBAAoB,CAAA;KAAE,CAAC;CACvD;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,QAAQ,IAAI,wBAAwB,CAE3G;AAED,MAAM,WAAW,8BAA8B;IAC7C,sBAAsB,EAAE;QAAE,SAAS,EAAE,oBAAoB,CAAA;KAAE,CAAC;CAC7D;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,gBAAgB,GACzB,QAAQ,IAAI,8BAA8B,CAE5C;AAED,MAAM,MAAM,gBAAgB,GAC1B,sBAAsB,GAAG,8BAA8B,GAAG,wBAAwB,GAAG,8BAA8B,CAAC;AAEtH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,gBAAgB,GACzB,QAAQ,IAAI,8BAA8B,CAE5C;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,QAAQ,IAAI,wBAAwB,CAEzG;AAED,KAAK,sBAAsB,GAAG,IAAI,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;AAIvE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B,GAAG,wBAAwB,CAM3B;AAED,gGAAgG;AAChG,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAG1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAI1B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAEpC,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAExC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE5G,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAIhH,6BAA6B,CAAC,IAAI,MAAM,EAAE,GAAG,SAAS,CAAC;CACxD;AAED,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,SAAS,IAAI,OAAO,CAAC,yBAAyB,GAAG,oBAAoB,CAAC,CAAC;IAEvE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE5G,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACjH"}

package/dist/core/mcp/IMCPServer.js

@@ -0,0 +1,63 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/mcp/IMCPServer.ts
+var IMCPServer_exports = {};
+__export(IMCPServer_exports, {
+  isApprovalRequiredResponse: () => isApprovalRequiredResponse,
+  isAuthRequired: () => isAuthRequired,
+  isCallToolResponseCreateSubAgent: () => isCallToolResponseCreateSubAgent,
+  isCallToolResponseResult: () => isCallToolResponseResult,
+  isClientSideToolRequiredResponse: () => isClientSideToolRequiredResponse,
+  toolResultResponse: () => toolResultResponse
+});
+module.exports = __toCommonJS(IMCPServer_exports);
+function isAuthRequired(response) {
+  return "authRequired" in response;
+}
+function isApprovalRequiredResponse(response) {
+  return "approvalRequired" in response;
+}
+function isClientSideToolRequiredResponse(response) {
+  return "clientSideToolRequired" in response;
+}
+function isCallToolResponseCreateSubAgent(response) {
+  return "createSubAgent" in response;
+}
+function isCallToolResponseResult(response) {
+  return "result" in response;
+}
+var EMPTY_METADATA = { wasInitialized: void 0 };
+function toolResultResponse(params) {
+  return {
+    result: { content: [{ type: "text", text: params.text }], ...params.isError && { isError: true } },
+    ...EMPTY_METADATA,
+    ...params.overrides
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  isApprovalRequiredResponse,
+  isAuthRequired,
+  isCallToolResponseCreateSubAgent,
+  isCallToolResponseResult,
+  isClientSideToolRequiredResponse,
+  toolResultResponse
+});
+//# sourceMappingURL=IMCPServer.js.map

package/dist/core/mcp/IMCPServer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/IMCPServer.ts"],"sourcesContent":["import type { CallToolRequest, CallToolResult, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';\nimport type { RegisteredPassthroughEvent } from '../events/PassthroughEvents';\nimport type { AgentInfo, ApprovalDecision, MCPServerAuthInfo, MCPServerInitInfo } from '../events/schema';\nimport type { InternalToolCallInfo } from '../llm/LLMTypes';\nimport type { SandboxInfo } from '../sandbox/Sandbox';\n\nexport interface MCPAuthRequired {\n  servers: MCPServerAuthInfo[];\n}\n\nexport type ToolSchema = ListToolsResult['tools'][number];\n\nexport interface AgentToolSchema extends ToolSchema {\n  preload: boolean;\n}\n\nexport interface AuthRequiredResponse {\n  authRequired: MCPAuthRequired;\n}\n\nexport function isAuthRequired(response: ListToolsResponse | CallToolResponse): response is AuthRequiredResponse {\n  return 'authRequired' in response;\n}\n\nexport interface ListToolsResolvedResponse {\n  result: { tools: AgentToolSchema[] };\n  wasInitialized: MCPServerInitInfo | undefined;\n}\n\nexport type ListToolsResponse = ListToolsResolvedResponse | AuthRequiredResponse;\n\nexport interface CallToolResolvedResponse {\n  result: CallToolResult;\n  wasInitialized: MCPServerInitInfo | undefined;\n  // Set to true on the call that created the sandbox; emits `sandbox.created` upstream.\n  sandboxCreated?: boolean | undefined;\n  // Set on every sandbox-backed call; used for tracing.\n  sandboxInfo?: SandboxInfo | undefined;\n  events?: readonly RegisteredPassthroughEvent[] | undefined;\n}\n\nexport type CallToolResultResponse = CallToolResolvedResponse | AuthRequiredResponse;\n\nexport interface CallToolCreateSubAgentResponse {\n  createSubAgent: AgentInfo;\n}\n\nexport interface ApprovalRequiredResponse {\n  approvalRequired: { tool_info: InternalToolCallInfo };\n}\n\nexport function isApprovalRequiredResponse(response: CallToolResponse): response is ApprovalRequiredResponse {\n  return 'approvalRequired' in response;\n}\n\nexport interface ClientSideToolRequiredResponse {\n  clientSideToolRequired: { tool_info: InternalToolCallInfo };\n}\n\nexport function isClientSideToolRequiredResponse(\n  response: CallToolResponse,\n): response is ClientSideToolRequiredResponse {\n  return 'clientSideToolRequired' in response;\n}\n\nexport type CallToolResponse =\n  CallToolResultResponse | CallToolCreateSubAgentResponse | ApprovalRequiredResponse | ClientSideToolRequiredResponse;\n\nexport function isCallToolResponseCreateSubAgent(\n  response: CallToolResponse,\n): response is CallToolCreateSubAgentResponse {\n  return 'createSubAgent' in response;\n}\n\nexport function isCallToolResponseResult(response: CallToolResponse): response is CallToolResolvedResponse {\n  return 'result' in response;\n}\n\ntype CallToolResultMetadata = Omit<CallToolResolvedResponse, 'result'>;\n\nconst EMPTY_METADATA: CallToolResultMetadata = { wasInitialized: undefined };\n\nexport function toolResultResponse(params: {\n  text: string;\n  overrides?: Partial<CallToolResultMetadata> | undefined;\n  isError?: boolean | undefined;\n}): CallToolResolvedResponse {\n  return {\n    result: { content: [{ type: 'text', text: params.text }], ...(params.isError && { isError: true }) },\n    ...EMPTY_METADATA,\n    ...params.overrides,\n  };\n}\n\n/** Narrow public MCP server contract. Private implementations may expose additional members. */\nexport interface IToolSet {\n  readonly name: string;\n  readonly id: string;\n  readonly description?: string | undefined;\n\n  // True when every exposed tool is eager. DeferredTool uses the inverse.\n  readonly preload: boolean;\n\n  // Outcome-oriented preflight flag: Tool.ts calls listTools() initially when\n  // this is true. It does not expose enable/disable/preload selector policy.\n  readonly hasPreloadedTools: boolean;\n\n  listTools(): Promise<ListToolsResponse>;\n\n  callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;\n\n  toolCallInfo(params: CallToolRequest['params'], resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;\n\n  // Existing synchronous Code Mode allow-list. Optional implementations fall\n  // back to the current unrestricted envelope; callTool still enforces policy.\n  getAllowedToolNamesForSandbox?(): string[] | undefined;\n}\n\n/** Policy-free tool provider; a {@link ToolSet} wraps it to layer per-agent selector policy on top. */\nexport interface ToolSource {\n  readonly name: string;\n  readonly id: string;\n  readonly description?: string | undefined;\n\n  listTools(): Promise<ListToolsResolvedResponse | AuthRequiredResponse>;\n\n  callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;\n\n  toolCallInfo(params: CallToolRequest['params'], resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAoBO,SAAS,eAAe,UAAkF;AAC/G,SAAO,kBAAkB;AAC3B;AA6BO,SAAS,2BAA2B,UAAkE;AAC3G,SAAO,sBAAsB;AAC/B;AAMO,SAAS,iCACd,UAC4C;AAC5C,SAAO,4BAA4B;AACrC;AAKO,SAAS,iCACd,UAC4C;AAC5C,SAAO,oBAAoB;AAC7B;AAEO,SAAS,yBAAyB,UAAkE;AACzG,SAAO,YAAY;AACrB;AAIA,IAAM,iBAAyC,EAAE,gBAAgB,OAAU;AAEpE,SAAS,mBAAmB,QAIN;AAC3B,SAAO;AAAA,IACL,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC,GAAG,GAAI,OAAO,WAAW,EAAE,SAAS,KAAK,EAAG;AAAA,IACnG,GAAG;AAAA,IACH,GAAG,OAAO;AAAA,EACZ;AACF;","names":[]}

package/dist/core/mcp/IMCPServer.mjs

@@ -0,0 +1,33 @@
+// src/core/mcp/IMCPServer.ts
+function isAuthRequired(response) {
+  return "authRequired" in response;
+}
+function isApprovalRequiredResponse(response) {
+  return "approvalRequired" in response;
+}
+function isClientSideToolRequiredResponse(response) {
+  return "clientSideToolRequired" in response;
+}
+function isCallToolResponseCreateSubAgent(response) {
+  return "createSubAgent" in response;
+}
+function isCallToolResponseResult(response) {
+  return "result" in response;
+}
+var EMPTY_METADATA = { wasInitialized: void 0 };
+function toolResultResponse(params) {
+  return {
+    result: { content: [{ type: "text", text: params.text }], ...params.isError && { isError: true } },
+    ...EMPTY_METADATA,
+    ...params.overrides
+  };
+}
+export {
+  isApprovalRequiredResponse,
+  isAuthRequired,
+  isCallToolResponseCreateSubAgent,
+  isCallToolResponseResult,
+  isClientSideToolRequiredResponse,
+  toolResultResponse
+};
+//# sourceMappingURL=IMCPServer.mjs.map

package/dist/core/mcp/IMCPServer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/IMCPServer.ts"],"sourcesContent":["import type { CallToolRequest, CallToolResult, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';\nimport type { RegisteredPassthroughEvent } from '../events/PassthroughEvents';\nimport type { AgentInfo, ApprovalDecision, MCPServerAuthInfo, MCPServerInitInfo } from '../events/schema';\nimport type { InternalToolCallInfo } from '../llm/LLMTypes';\nimport type { SandboxInfo } from '../sandbox/Sandbox';\n\nexport interface MCPAuthRequired {\n  servers: MCPServerAuthInfo[];\n}\n\nexport type ToolSchema = ListToolsResult['tools'][number];\n\nexport interface AgentToolSchema extends ToolSchema {\n  preload: boolean;\n}\n\nexport interface AuthRequiredResponse {\n  authRequired: MCPAuthRequired;\n}\n\nexport function isAuthRequired(response: ListToolsResponse | CallToolResponse): response is AuthRequiredResponse {\n  return 'authRequired' in response;\n}\n\nexport interface ListToolsResolvedResponse {\n  result: { tools: AgentToolSchema[] };\n  wasInitialized: MCPServerInitInfo | undefined;\n}\n\nexport type ListToolsResponse = ListToolsResolvedResponse | AuthRequiredResponse;\n\nexport interface CallToolResolvedResponse {\n  result: CallToolResult;\n  wasInitialized: MCPServerInitInfo | undefined;\n  // Set to true on the call that created the sandbox; emits `sandbox.created` upstream.\n  sandboxCreated?: boolean | undefined;\n  // Set on every sandbox-backed call; used for tracing.\n  sandboxInfo?: SandboxInfo | undefined;\n  events?: readonly RegisteredPassthroughEvent[] | undefined;\n}\n\nexport type CallToolResultResponse = CallToolResolvedResponse | AuthRequiredResponse;\n\nexport interface CallToolCreateSubAgentResponse {\n  createSubAgent: AgentInfo;\n}\n\nexport interface ApprovalRequiredResponse {\n  approvalRequired: { tool_info: InternalToolCallInfo };\n}\n\nexport function isApprovalRequiredResponse(response: CallToolResponse): response is ApprovalRequiredResponse {\n  return 'approvalRequired' in response;\n}\n\nexport interface ClientSideToolRequiredResponse {\n  clientSideToolRequired: { tool_info: InternalToolCallInfo };\n}\n\nexport function isClientSideToolRequiredResponse(\n  response: CallToolResponse,\n): response is ClientSideToolRequiredResponse {\n  return 'clientSideToolRequired' in response;\n}\n\nexport type CallToolResponse =\n  CallToolResultResponse | CallToolCreateSubAgentResponse | ApprovalRequiredResponse | ClientSideToolRequiredResponse;\n\nexport function isCallToolResponseCreateSubAgent(\n  response: CallToolResponse,\n): response is CallToolCreateSubAgentResponse {\n  return 'createSubAgent' in response;\n}\n\nexport function isCallToolResponseResult(response: CallToolResponse): response is CallToolResolvedResponse {\n  return 'result' in response;\n}\n\ntype CallToolResultMetadata = Omit<CallToolResolvedResponse, 'result'>;\n\nconst EMPTY_METADATA: CallToolResultMetadata = { wasInitialized: undefined };\n\nexport function toolResultResponse(params: {\n  text: string;\n  overrides?: Partial<CallToolResultMetadata> | undefined;\n  isError?: boolean | undefined;\n}): CallToolResolvedResponse {\n  return {\n    result: { content: [{ type: 'text', text: params.text }], ...(params.isError && { isError: true }) },\n    ...EMPTY_METADATA,\n    ...params.overrides,\n  };\n}\n\n/** Narrow public MCP server contract. Private implementations may expose additional members. */\nexport interface IToolSet {\n  readonly name: string;\n  readonly id: string;\n  readonly description?: string | undefined;\n\n  // True when every exposed tool is eager. DeferredTool uses the inverse.\n  readonly preload: boolean;\n\n  // Outcome-oriented preflight flag: Tool.ts calls listTools() initially when\n  // this is true. It does not expose enable/disable/preload selector policy.\n  readonly hasPreloadedTools: boolean;\n\n  listTools(): Promise<ListToolsResponse>;\n\n  callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;\n\n  toolCallInfo(params: CallToolRequest['params'], resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;\n\n  // Existing synchronous Code Mode allow-list. Optional implementations fall\n  // back to the current unrestricted envelope; callTool still enforces policy.\n  getAllowedToolNamesForSandbox?(): string[] | undefined;\n}\n\n/** Policy-free tool provider; a {@link ToolSet} wraps it to layer per-agent selector policy on top. */\nexport interface ToolSource {\n  readonly name: string;\n  readonly id: string;\n  readonly description?: string | undefined;\n\n  listTools(): Promise<ListToolsResolvedResponse | AuthRequiredResponse>;\n\n  callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;\n\n  toolCallInfo(params: CallToolRequest['params'], resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;\n}\n"],"mappings":";AAoBO,SAAS,eAAe,UAAkF;AAC/G,SAAO,kBAAkB;AAC3B;AA6BO,SAAS,2BAA2B,UAAkE;AAC3G,SAAO,sBAAsB;AAC/B;AAMO,SAAS,iCACd,UAC4C;AAC5C,SAAO,4BAA4B;AACrC;AAKO,SAAS,iCACd,UAC4C;AAC5C,SAAO,oBAAoB;AAC7B;AAEO,SAAS,yBAAyB,UAAkE;AACzG,SAAO,YAAY;AACrB;AAIA,IAAM,iBAAyC,EAAE,gBAAgB,OAAU;AAEpE,SAAS,mBAAmB,QAIN;AAC3B,SAAO;AAAA,IACL,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC,GAAG,GAAI,OAAO,WAAW,EAAE,SAAS,KAAK,EAAG;AAAA,IACnG,GAAG;AAAA,IACH,GAAG,OAAO;AAAA,EACZ;AACF;","names":[]}

package/dist/core/mcp/LocalToolMCP.d.ts

@@ -0,0 +1,39 @@
+import type { CallToolRequest, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';
+import { z } from 'zod';
+import type { ApprovalDecision } from '../events/schema';
+import type { InternalToolCallInfo } from '../llm/LLMTypes';
+import type { AgentTracing } from '../tracing/AgentTracing';
+import { type CallToolResponse, type IToolSet, type ListToolsResolvedResponse } from './IMCPServer';
+export type ToolDefinition = ListToolsResult['tools'][number] & {
+    execute: (raw: unknown, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>;
+};
+export declare function defineTool<T extends z.ZodType>(config: {
+    name: string;
+    description: string;
+    schema: T;
+    handler: (input: z.infer<T>, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>;
+}): ToolDefinition;
+/**
+ * In-process {@link IToolSet} base for local tools: static tool list, allow-all (never filtered or
+ * approval-gated), executed in-process within a local trace span. Base for all local/client-side tools.
+ */
+export declare abstract class LocalToolMCP implements IToolSet {
+    abstract readonly name: string;
+    abstract readonly displayName: string;
+    readonly description: string;
+    readonly preload: boolean;
+    readonly hasPreloadedTools: boolean;
+    readonly tracingEnabled: boolean;
+    private readonly tracing;
+    protected constructor(options: {
+        tracing: AgentTracing;
+    });
+    get id(): string;
+    protected get mcpServerId(): string;
+    protected abstract getTools(): ToolDefinition[];
+    listTools(): Promise<ListToolsResolvedResponse>;
+    callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse>;
+    toolCallInfo(params: CallToolRequest['params'], _resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo>;
+    private executeTool;
+}
+//# sourceMappingURL=LocalToolMCP.d.ts.map

package/dist/core/mcp/LocalToolMCP.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalToolMCP.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/LocalToolMCP.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,QAAQ,EACb,KAAK,yBAAyB,EAE/B,MAAM,cAAc,CAAC;AAkBtB,MAAM,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG;IAC9D,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC3F,CAAC;AAIF,wBAAgB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,CAAC;IAGV,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAChG,GAAG,cAAc,CAUjB;AAED;;;GAGG;AACH,8BAAsB,YAAa,YAAW,QAAQ;IACpD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAM;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAQ;IACjC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAQ;IAC3C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAQ;IAExC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IAEvC,SAAS,aAAa,OAAO,EAAE;QAAE,OAAO,EAAE,YAAY,CAAA;KAAE,EAEvD;IAED,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,SAAS,KAAK,WAAW,IAAI,MAAM,CAElC;IAED,SAAS,CAAC,QAAQ,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IAEhD,SAAS,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAY9C;IAEK,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiBhH;IAID,YAAY,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAS/G;YAEa,WAAW;CAU1B"}

package/dist/core/mcp/LocalToolMCP.js

@@ -0,0 +1,121 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/mcp/LocalToolMCP.ts
+var LocalToolMCP_exports = {};
+__export(LocalToolMCP_exports, {
+  LocalToolMCP: () => LocalToolMCP,
+  defineTool: () => defineTool
+});
+module.exports = __toCommonJS(LocalToolMCP_exports);
+var import_zod = require("zod");
+var import_IMCPServer = require("./IMCPServer.js");
+function withValidatedInput(schema, fn) {
+  return async (raw, approvalDecision) => {
+    const parsed = schema.safeParse(raw);
+    if (!parsed.success) {
+      return (0, import_IMCPServer.toolResultResponse)({
+        text: JSON.stringify({ error: "Validation failed", details: import_zod.z.treeifyError(parsed.error) }),
+        isError: true
+      });
+    }
+    return fn(parsed.data, approvalDecision);
+  };
+}
+function defineTool(config) {
+  const jsonSchema = config.schema.toJSONSchema({ io: "input" });
+  return {
+    name: config.name,
+    description: config.description,
+    inputSchema: jsonSchema,
+    execute: withValidatedInput(config.schema, config.handler)
+  };
+}
+var LocalToolMCP = class {
+  description = "";
+  preload = true;
+  hasPreloadedTools = true;
+  tracingEnabled = true;
+  tracing;
+  constructor(options) {
+    this.tracing = options.tracing;
+  }
+  get id() {
+    return this.mcpServerId;
+  }
+  get mcpServerId() {
+    return this.name;
+  }
+  listTools() {
+    return Promise.resolve({
+      result: {
+        tools: this.getTools().map((t) => ({
+          name: t.name,
+          description: t.description,
+          inputSchema: t.inputSchema,
+          preload: true
+        }))
+      },
+      wasInitialized: void 0
+    });
+  }
+  async callTool(params, approvalDecision) {
+    return this.tracing.withLocalToolSpan(
+      {
+        displayName: this.displayName,
+        toolName: params.name,
+        input: JSON.stringify(params.arguments),
+        enabled: this.tracingEnabled
+      },
+      async (span) => {
+        const response = await this.executeTool(params, approvalDecision);
+        span.setOutput(JSON.stringify(response));
+        if ((0, import_IMCPServer.isCallToolResponseResult)(response) && response.sandboxInfo) {
+          span.setSandboxId(response.sandboxInfo.sandbox_id);
+        }
+        return response;
+      }
+    );
+  }
+  // Local tools are not approval gated by default.
+  // Second arg kept for IToolSet / DeferredTool compatibility (unused here).
+  toolCallInfo(params, _resolveUnderlyingTool) {
+    void _resolveUnderlyingTool;
+    return Promise.resolve({
+      type: "truefoundry-system",
+      mcp_server_id: this.mcpServerId,
+      mcp_server_name: this.name,
+      original_tool_name: params.name,
+      is_approval_required: false
+    });
+  }
+  async executeTool(params, approvalDecision) {
+    const tool = this.getTools().find((t) => t.name === params.name);
+    if (!tool) {
+      return (0, import_IMCPServer.toolResultResponse)({ text: JSON.stringify({ error: `Unknown tool: ${params.name}` }), isError: true });
+    }
+    return tool.execute(params.arguments, approvalDecision);
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  LocalToolMCP,
+  defineTool
+});
+//# sourceMappingURL=LocalToolMCP.js.map

package/dist/core/mcp/LocalToolMCP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/LocalToolMCP.ts"],"sourcesContent":["import type { CallToolRequest, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport type { ApprovalDecision } from '../events/schema';\nimport type { InternalToolCallInfo } from '../llm/LLMTypes';\nimport type { AgentTracing } from '../tracing/AgentTracing';\nimport {\n  type CallToolResponse,\n  isCallToolResponseResult,\n  type IToolSet,\n  type ListToolsResolvedResponse,\n  toolResultResponse,\n} from './IMCPServer';\n\nfunction withValidatedInput<T extends z.ZodType>(\n  schema: T,\n  fn: (input: z.infer<T>, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>,\n) {\n  return async (raw: unknown, approvalDecision?: ApprovalDecision): Promise<CallToolResponse> => {\n    const parsed = schema.safeParse(raw);\n    if (!parsed.success) {\n      return toolResultResponse({\n        text: JSON.stringify({ error: 'Validation failed', details: z.treeifyError(parsed.error) }),\n        isError: true,\n      });\n    }\n    return fn(parsed.data, approvalDecision);\n  };\n}\n\nexport type ToolDefinition = ListToolsResult['tools'][number] & {\n  execute: (raw: unknown, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>;\n};\n\ntype ToolInputSchema = ListToolsResult['tools'][number]['inputSchema'];\n\nexport function defineTool<T extends z.ZodType>(config: {\n  name: string;\n  description: string;\n  schema: T;\n  // Handlers may opt into the approvalDecision (forwarded by the agent loop after the\n  // user approves an approval-gated tool). Handlers that don't declare it ignore it.\n  handler: (input: z.infer<T>, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>;\n}): ToolDefinition {\n  // Advertise the *input* shape: fields with `.default()` are optional to callers\n  // (Zod 4's default `io: \"output\"` would mark them required after defaults apply).\n  const jsonSchema = config.schema.toJSONSchema({ io: 'input' }) as ToolInputSchema;\n  return {\n    name: config.name,\n    description: config.description,\n    inputSchema: jsonSchema,\n    execute: withValidatedInput(config.schema, config.handler),\n  };\n}\n\n/**\n * In-process {@link IToolSet} base for local tools: static tool list, allow-all (never filtered or\n * approval-gated), executed in-process within a local trace span. Base for all local/client-side tools.\n */\nexport abstract class LocalToolMCP implements IToolSet {\n  abstract readonly name: string;\n  abstract readonly displayName: string;\n  readonly description: string = '';\n  readonly preload: boolean = true;\n  readonly hasPreloadedTools: boolean = true;\n  readonly tracingEnabled: boolean = true;\n\n  private readonly tracing: AgentTracing;\n\n  protected constructor(options: { tracing: AgentTracing }) {\n    this.tracing = options.tracing;\n  }\n\n  get id(): string {\n    return this.mcpServerId;\n  }\n\n  protected get mcpServerId(): string {\n    return this.name;\n  }\n\n  protected abstract getTools(): ToolDefinition[];\n\n  listTools(): Promise<ListToolsResolvedResponse> {\n    return Promise.resolve({\n      result: {\n        tools: this.getTools().map(t => ({\n          name: t.name,\n          description: t.description,\n          inputSchema: t.inputSchema,\n          preload: true,\n        })),\n      },\n      wasInitialized: undefined,\n    });\n  }\n\n  async callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse> {\n    return this.tracing.withLocalToolSpan(\n      {\n        displayName: this.displayName,\n        toolName: params.name,\n        input: JSON.stringify(params.arguments),\n        enabled: this.tracingEnabled,\n      },\n      async span => {\n        const response = await this.executeTool(params, approvalDecision);\n        span.setOutput(JSON.stringify(response));\n        if (isCallToolResponseResult(response) && response.sandboxInfo) {\n          span.setSandboxId(response.sandboxInfo.sandbox_id);\n        }\n        return response;\n      },\n    );\n  }\n\n  // Local tools are not approval gated by default.\n  // Second arg kept for IToolSet / DeferredTool compatibility (unused here).\n  toolCallInfo(params: CallToolRequest['params'], _resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo> {\n    void _resolveUnderlyingTool;\n    return Promise.resolve({\n      type: 'truefoundry-system',\n      mcp_server_id: this.mcpServerId,\n      mcp_server_name: this.name,\n      original_tool_name: params.name,\n      is_approval_required: false,\n    });\n  }\n\n  private async executeTool(\n    params: CallToolRequest['params'],\n    approvalDecision?: ApprovalDecision,\n  ): Promise<CallToolResponse> {\n    const tool = this.getTools().find(t => t.name === params.name);\n    if (!tool) {\n      return toolResultResponse({ text: JSON.stringify({ error: `Unknown tool: ${params.name}` }), isError: true });\n    }\n    return tool.execute(params.arguments, approvalDecision);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,iBAAkB;AAIlB,wBAMO;AAEP,SAAS,mBACP,QACA,IACA;AACA,SAAO,OAAO,KAAc,qBAAmE;AAC7F,UAAM,SAAS,OAAO,UAAU,GAAG;AACnC,QAAI,CAAC,OAAO,SAAS;AACnB,iBAAO,sCAAmB;AAAA,QACxB,MAAM,KAAK,UAAU,EAAE,OAAO,qBAAqB,SAAS,aAAE,aAAa,OAAO,KAAK,EAAE,CAAC;AAAA,QAC1F,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,WAAO,GAAG,OAAO,MAAM,gBAAgB;AAAA,EACzC;AACF;AAQO,SAAS,WAAgC,QAO7B;AAGjB,QAAM,aAAa,OAAO,OAAO,aAAa,EAAE,IAAI,QAAQ,CAAC;AAC7D,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,aAAa,OAAO;AAAA,IACpB,aAAa;AAAA,IACb,SAAS,mBAAmB,OAAO,QAAQ,OAAO,OAAO;AAAA,EAC3D;AACF;AAMO,IAAe,eAAf,MAAgD;AAAA,EAG5C,cAAsB;AAAA,EACtB,UAAmB;AAAA,EACnB,oBAA6B;AAAA,EAC7B,iBAA0B;AAAA,EAElB;AAAA,EAEP,YAAY,SAAoC;AACxD,SAAK,UAAU,QAAQ;AAAA,EACzB;AAAA,EAEA,IAAI,KAAa;AACf,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAc,cAAsB;AAClC,WAAO,KAAK;AAAA,EACd;AAAA,EAIA,YAAgD;AAC9C,WAAO,QAAQ,QAAQ;AAAA,MACrB,QAAQ;AAAA,QACN,OAAO,KAAK,SAAS,EAAE,IAAI,QAAM;AAAA,UAC/B,MAAM,EAAE;AAAA,UACR,aAAa,EAAE;AAAA,UACf,aAAa,EAAE;AAAA,UACf,SAAS;AAAA,QACX,EAAE;AAAA,MACJ;AAAA,MACA,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,QAAmC,kBAAgE;AAChH,WAAO,KAAK,QAAQ;AAAA,MAClB;AAAA,QACE,aAAa,KAAK;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,OAAO,KAAK,UAAU,OAAO,SAAS;AAAA,QACtC,SAAS,KAAK;AAAA,MAChB;AAAA,MACA,OAAM,SAAQ;AACZ,cAAM,WAAW,MAAM,KAAK,YAAY,QAAQ,gBAAgB;AAChE,aAAK,UAAU,KAAK,UAAU,QAAQ,CAAC;AACvC,gBAAI,4CAAyB,QAAQ,KAAK,SAAS,aAAa;AAC9D,eAAK,aAAa,SAAS,YAAY,UAAU;AAAA,QACnD;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIA,aAAa,QAAmC,wBAAiE;AAC/G,SAAK;AACL,WAAO,QAAQ,QAAQ;AAAA,MACrB,MAAM;AAAA,MACN,eAAe,KAAK;AAAA,MACpB,iBAAiB,KAAK;AAAA,MACtB,oBAAoB,OAAO;AAAA,MAC3B,sBAAsB;AAAA,IACxB,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,YACZ,QACA,kBAC2B;AAC3B,UAAM,OAAO,KAAK,SAAS,EAAE,KAAK,OAAK,EAAE,SAAS,OAAO,IAAI;AAC7D,QAAI,CAAC,MAAM;AACT,iBAAO,sCAAmB,EAAE,MAAM,KAAK,UAAU,EAAE,OAAO,iBAAiB,OAAO,IAAI,GAAG,CAAC,GAAG,SAAS,KAAK,CAAC;AAAA,IAC9G;AACA,WAAO,KAAK,QAAQ,OAAO,WAAW,gBAAgB;AAAA,EACxD;AACF;","names":[]}

package/dist/core/mcp/LocalToolMCP.mjs

@@ -0,0 +1,98 @@
+// src/core/mcp/LocalToolMCP.ts
+import { z } from "zod";
+import {
+  isCallToolResponseResult,
+  toolResultResponse
+} from "./IMCPServer.mjs";
+function withValidatedInput(schema, fn) {
+  return async (raw, approvalDecision) => {
+    const parsed = schema.safeParse(raw);
+    if (!parsed.success) {
+      return toolResultResponse({
+        text: JSON.stringify({ error: "Validation failed", details: z.treeifyError(parsed.error) }),
+        isError: true
+      });
+    }
+    return fn(parsed.data, approvalDecision);
+  };
+}
+function defineTool(config) {
+  const jsonSchema = config.schema.toJSONSchema({ io: "input" });
+  return {
+    name: config.name,
+    description: config.description,
+    inputSchema: jsonSchema,
+    execute: withValidatedInput(config.schema, config.handler)
+  };
+}
+var LocalToolMCP = class {
+  description = "";
+  preload = true;
+  hasPreloadedTools = true;
+  tracingEnabled = true;
+  tracing;
+  constructor(options) {
+    this.tracing = options.tracing;
+  }
+  get id() {
+    return this.mcpServerId;
+  }
+  get mcpServerId() {
+    return this.name;
+  }
+  listTools() {
+    return Promise.resolve({
+      result: {
+        tools: this.getTools().map((t) => ({
+          name: t.name,
+          description: t.description,
+          inputSchema: t.inputSchema,
+          preload: true
+        }))
+      },
+      wasInitialized: void 0
+    });
+  }
+  async callTool(params, approvalDecision) {
+    return this.tracing.withLocalToolSpan(
+      {
+        displayName: this.displayName,
+        toolName: params.name,
+        input: JSON.stringify(params.arguments),
+        enabled: this.tracingEnabled
+      },
+      async (span) => {
+        const response = await this.executeTool(params, approvalDecision);
+        span.setOutput(JSON.stringify(response));
+        if (isCallToolResponseResult(response) && response.sandboxInfo) {
+          span.setSandboxId(response.sandboxInfo.sandbox_id);
+        }
+        return response;
+      }
+    );
+  }
+  // Local tools are not approval gated by default.
+  // Second arg kept for IToolSet / DeferredTool compatibility (unused here).
+  toolCallInfo(params, _resolveUnderlyingTool) {
+    void _resolveUnderlyingTool;
+    return Promise.resolve({
+      type: "truefoundry-system",
+      mcp_server_id: this.mcpServerId,
+      mcp_server_name: this.name,
+      original_tool_name: params.name,
+      is_approval_required: false
+    });
+  }
+  async executeTool(params, approvalDecision) {
+    const tool = this.getTools().find((t) => t.name === params.name);
+    if (!tool) {
+      return toolResultResponse({ text: JSON.stringify({ error: `Unknown tool: ${params.name}` }), isError: true });
+    }
+    return tool.execute(params.arguments, approvalDecision);
+  }
+};
+export {
+  LocalToolMCP,
+  defineTool
+};
+//# sourceMappingURL=LocalToolMCP.mjs.map

package/dist/core/mcp/LocalToolMCP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/LocalToolMCP.ts"],"sourcesContent":["import type { CallToolRequest, ListToolsResult } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport type { ApprovalDecision } from '../events/schema';\nimport type { InternalToolCallInfo } from '../llm/LLMTypes';\nimport type { AgentTracing } from '../tracing/AgentTracing';\nimport {\n  type CallToolResponse,\n  isCallToolResponseResult,\n  type IToolSet,\n  type ListToolsResolvedResponse,\n  toolResultResponse,\n} from './IMCPServer';\n\nfunction withValidatedInput<T extends z.ZodType>(\n  schema: T,\n  fn: (input: z.infer<T>, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>,\n) {\n  return async (raw: unknown, approvalDecision?: ApprovalDecision): Promise<CallToolResponse> => {\n    const parsed = schema.safeParse(raw);\n    if (!parsed.success) {\n      return toolResultResponse({\n        text: JSON.stringify({ error: 'Validation failed', details: z.treeifyError(parsed.error) }),\n        isError: true,\n      });\n    }\n    return fn(parsed.data, approvalDecision);\n  };\n}\n\nexport type ToolDefinition = ListToolsResult['tools'][number] & {\n  execute: (raw: unknown, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>;\n};\n\ntype ToolInputSchema = ListToolsResult['tools'][number]['inputSchema'];\n\nexport function defineTool<T extends z.ZodType>(config: {\n  name: string;\n  description: string;\n  schema: T;\n  // Handlers may opt into the approvalDecision (forwarded by the agent loop after the\n  // user approves an approval-gated tool). Handlers that don't declare it ignore it.\n  handler: (input: z.infer<T>, approvalDecision?: ApprovalDecision) => Promise<CallToolResponse>;\n}): ToolDefinition {\n  // Advertise the *input* shape: fields with `.default()` are optional to callers\n  // (Zod 4's default `io: \"output\"` would mark them required after defaults apply).\n  const jsonSchema = config.schema.toJSONSchema({ io: 'input' }) as ToolInputSchema;\n  return {\n    name: config.name,\n    description: config.description,\n    inputSchema: jsonSchema,\n    execute: withValidatedInput(config.schema, config.handler),\n  };\n}\n\n/**\n * In-process {@link IToolSet} base for local tools: static tool list, allow-all (never filtered or\n * approval-gated), executed in-process within a local trace span. Base for all local/client-side tools.\n */\nexport abstract class LocalToolMCP implements IToolSet {\n  abstract readonly name: string;\n  abstract readonly displayName: string;\n  readonly description: string = '';\n  readonly preload: boolean = true;\n  readonly hasPreloadedTools: boolean = true;\n  readonly tracingEnabled: boolean = true;\n\n  private readonly tracing: AgentTracing;\n\n  protected constructor(options: { tracing: AgentTracing }) {\n    this.tracing = options.tracing;\n  }\n\n  get id(): string {\n    return this.mcpServerId;\n  }\n\n  protected get mcpServerId(): string {\n    return this.name;\n  }\n\n  protected abstract getTools(): ToolDefinition[];\n\n  listTools(): Promise<ListToolsResolvedResponse> {\n    return Promise.resolve({\n      result: {\n        tools: this.getTools().map(t => ({\n          name: t.name,\n          description: t.description,\n          inputSchema: t.inputSchema,\n          preload: true,\n        })),\n      },\n      wasInitialized: undefined,\n    });\n  }\n\n  async callTool(params: CallToolRequest['params'], approvalDecision?: ApprovalDecision): Promise<CallToolResponse> {\n    return this.tracing.withLocalToolSpan(\n      {\n        displayName: this.displayName,\n        toolName: params.name,\n        input: JSON.stringify(params.arguments),\n        enabled: this.tracingEnabled,\n      },\n      async span => {\n        const response = await this.executeTool(params, approvalDecision);\n        span.setOutput(JSON.stringify(response));\n        if (isCallToolResponseResult(response) && response.sandboxInfo) {\n          span.setSandboxId(response.sandboxInfo.sandbox_id);\n        }\n        return response;\n      },\n    );\n  }\n\n  // Local tools are not approval gated by default.\n  // Second arg kept for IToolSet / DeferredTool compatibility (unused here).\n  toolCallInfo(params: CallToolRequest['params'], _resolveUnderlyingTool?: boolean): Promise<InternalToolCallInfo> {\n    void _resolveUnderlyingTool;\n    return Promise.resolve({\n      type: 'truefoundry-system',\n      mcp_server_id: this.mcpServerId,\n      mcp_server_name: this.name,\n      original_tool_name: params.name,\n      is_approval_required: false,\n    });\n  }\n\n  private async executeTool(\n    params: CallToolRequest['params'],\n    approvalDecision?: ApprovalDecision,\n  ): Promise<CallToolResponse> {\n    const tool = this.getTools().find(t => t.name === params.name);\n    if (!tool) {\n      return toolResultResponse({ text: JSON.stringify({ error: `Unknown tool: ${params.name}` }), isError: true });\n    }\n    return tool.execute(params.arguments, approvalDecision);\n  }\n}\n"],"mappings":";AACA,SAAS,SAAS;AAIlB;AAAA,EAEE;AAAA,EAGA;AAAA,OACK;AAEP,SAAS,mBACP,QACA,IACA;AACA,SAAO,OAAO,KAAc,qBAAmE;AAC7F,UAAM,SAAS,OAAO,UAAU,GAAG;AACnC,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,mBAAmB;AAAA,QACxB,MAAM,KAAK,UAAU,EAAE,OAAO,qBAAqB,SAAS,EAAE,aAAa,OAAO,KAAK,EAAE,CAAC;AAAA,QAC1F,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,WAAO,GAAG,OAAO,MAAM,gBAAgB;AAAA,EACzC;AACF;AAQO,SAAS,WAAgC,QAO7B;AAGjB,QAAM,aAAa,OAAO,OAAO,aAAa,EAAE,IAAI,QAAQ,CAAC;AAC7D,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,aAAa,OAAO;AAAA,IACpB,aAAa;AAAA,IACb,SAAS,mBAAmB,OAAO,QAAQ,OAAO,OAAO;AAAA,EAC3D;AACF;AAMO,IAAe,eAAf,MAAgD;AAAA,EAG5C,cAAsB;AAAA,EACtB,UAAmB;AAAA,EACnB,oBAA6B;AAAA,EAC7B,iBAA0B;AAAA,EAElB;AAAA,EAEP,YAAY,SAAoC;AACxD,SAAK,UAAU,QAAQ;AAAA,EACzB;AAAA,EAEA,IAAI,KAAa;AACf,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAc,cAAsB;AAClC,WAAO,KAAK;AAAA,EACd;AAAA,EAIA,YAAgD;AAC9C,WAAO,QAAQ,QAAQ;AAAA,MACrB,QAAQ;AAAA,QACN,OAAO,KAAK,SAAS,EAAE,IAAI,QAAM;AAAA,UAC/B,MAAM,EAAE;AAAA,UACR,aAAa,EAAE;AAAA,UACf,aAAa,EAAE;AAAA,UACf,SAAS;AAAA,QACX,EAAE;AAAA,MACJ;AAAA,MACA,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,QAAmC,kBAAgE;AAChH,WAAO,KAAK,QAAQ;AAAA,MAClB;AAAA,QACE,aAAa,KAAK;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,OAAO,KAAK,UAAU,OAAO,SAAS;AAAA,QACtC,SAAS,KAAK;AAAA,MAChB;AAAA,MACA,OAAM,SAAQ;AACZ,cAAM,WAAW,MAAM,KAAK,YAAY,QAAQ,gBAAgB;AAChE,aAAK,UAAU,KAAK,UAAU,QAAQ,CAAC;AACvC,YAAI,yBAAyB,QAAQ,KAAK,SAAS,aAAa;AAC9D,eAAK,aAAa,SAAS,YAAY,UAAU;AAAA,QACnD;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAIA,aAAa,QAAmC,wBAAiE;AAC/G,SAAK;AACL,WAAO,QAAQ,QAAQ;AAAA,MACrB,MAAM;AAAA,MACN,eAAe,KAAK;AAAA,MACpB,iBAAiB,KAAK;AAAA,MACtB,oBAAoB,OAAO;AAAA,MAC3B,sBAAsB;AAAA,IACxB,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,YACZ,QACA,kBAC2B;AAC3B,UAAM,OAAO,KAAK,SAAS,EAAE,KAAK,OAAK,EAAE,SAAS,OAAO,IAAI;AAC7D,QAAI,CAAC,MAAM;AACT,aAAO,mBAAmB,EAAE,MAAM,KAAK,UAAU,EAAE,OAAO,iBAAiB,OAAO,IAAI,GAAG,CAAC,GAAG,SAAS,KAAK,CAAC;AAAA,IAC9G;AACA,WAAO,KAAK,QAAQ,OAAO,WAAW,gBAAgB;AAAA,EACxD;AACF;","names":[]}