@truefoundry/trueforge-core 0.0.0 → 0.1.0

package/dist/core/mcp/remoteMcpClient.js

@@ -0,0 +1,138 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/mcp/remoteMcpClient.ts
+var remoteMcpClient_exports = {};
+__export(remoteMcpClient_exports, {
+  connectRemoteMcp: () => connectRemoteMcp,
+  isSessionExpiredError: () => isSessionExpiredError
+});
+module.exports = __toCommonJS(remoteMcpClient_exports);
+var import_client = require("@modelcontextprotocol/sdk/client/index.js");
+var import_sse = require("@modelcontextprotocol/sdk/client/sse.js");
+var import_streamableHttp = require("@modelcontextprotocol/sdk/client/streamableHttp.js");
+var import_api = require("@opentelemetry/api");
+var import_errors = require("../errors.js");
+var import_promiseUtils = require("../util/promiseUtils.js");
+var CLIENT_INFO = { name: "tfy-agent-mcp-client", version: "1.0.0" };
+var TRANSPORT_PROBE_ORDER = ["streamable-http", "sse"];
+var McpClientWithTimeout = class extends import_client.Client {
+  constructor(requestTimeoutMs) {
+    super(CLIENT_INFO, { capabilities: {} });
+    this.requestTimeoutMs = requestTimeoutMs;
+  }
+  requestTimeoutMs;
+  // SDK Client.request is loosely typed; forward with an explicit timeout.
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- MCP SDK request typing
+  request(req, schema, options) {
+    return super.request(req, schema, { ...options, timeout: this.requestTimeoutMs });
+  }
+};
+function createTransport(type, url, headers, sessionId) {
+  const requestInit = { headers };
+  if (type === "streamable-http") {
+    return new import_streamableHttp.StreamableHTTPClientTransport(url, { requestInit, ...sessionId !== void 0 ? { sessionId } : {} });
+  }
+  return new import_sse.SSEClientTransport(url, { requestInit });
+}
+function isSessionExpiredError(error) {
+  if (!(error instanceof Error)) return false;
+  if ("code" in error && error.code === 404) return true;
+  return error.message.includes("HTTP 404") || error.message.toLowerCase().includes("session");
+}
+function isAuthError(error) {
+  if (!(error instanceof Error)) return false;
+  if ("code" in error && error.code === 401) return true;
+  return error.message.includes("HTTP 401");
+}
+function stampTraceHeaders(headers) {
+  import_api.propagation.inject(import_api.context.active(), headers);
+}
+function getTransportSessionId(transport) {
+  return transport instanceof import_streamableHttp.StreamableHTTPClientTransport ? transport.sessionId ?? null : null;
+}
+function toConnectError(error) {
+  if (error instanceof import_errors.McpConnectionError) return error;
+  if (isAuthError(error)) {
+    return new import_errors.McpConnectionError("upstream returned 401 Unauthorized (check x-tfy-mcp-headers credentials)", 401, {
+      cause: error
+    });
+  }
+  const message = error instanceof Error ? error.message : String(error);
+  return new import_errors.McpConnectionError(message, 502, { cause: error });
+}
+function buildConnection(client, transport, transportType, headers, requestOptions) {
+  return {
+    transportType,
+    sessionId: getTransportSessionId(transport),
+    listTools: async (cursor) => {
+      stampTraceHeaders(headers);
+      const response = await client.listTools(cursor ? { cursor } : void 0, requestOptions);
+      return {
+        tools: response.tools,
+        nextCursor: response.nextCursor
+      };
+    },
+    callTool: async (callParams) => {
+      stampTraceHeaders(headers);
+      return await client.callTool(callParams, void 0, requestOptions);
+    },
+    close: async () => {
+      await client.close().catch(() => {
+      });
+    }
+  };
+}
+async function connectRemoteMcp(params) {
+  const url = new URL(params.url);
+  const requestOptions = { signal: params.signal };
+  const candidates = params.knownTransportType ? [params.knownTransportType, ...TRANSPORT_PROBE_ORDER.filter((t) => t !== params.knownTransportType)] : TRANSPORT_PROBE_ORDER;
+  const failures = [];
+  for (const transportType of candidates) {
+    const transport = createTransport(transportType, url, params.headers, params.sessionId);
+    const client = new McpClientWithTimeout(params.requestTimeoutMs);
+    try {
+      stampTraceHeaders(params.headers);
+      await (0, import_promiseUtils.withTimeout)(
+        // Concrete transports use sessionId: string|undefined; Transport uses an optional
+        // property — exactOptionalPropertyTypes rejects assignability without this cast.
+        client.connect(transport, requestOptions),
+        params.connectTimeoutMs,
+        transportType
+      );
+    } catch (error) {
+      await client.close().catch(() => {
+      });
+      if (isAuthError(error)) throw toConnectError(error);
+      if (params.sessionId && isSessionExpiredError(error)) throw toConnectError(error);
+      failures.push({ transport: transportType, error: error instanceof Error ? error.message.trim() : String(error) });
+      continue;
+    }
+    client.onclose = () => params.onClose?.();
+    client.onerror = (error) => params.onError?.(error);
+    return buildConnection(client, transport, transportType, params.headers, requestOptions);
+  }
+  throw new import_errors.McpConnectionError(`failed to connect (tried ${candidates.join(", ")}): ${JSON.stringify(failures)}`, 502);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  connectRemoteMcp,
+  isSessionExpiredError
+});
+//# sourceMappingURL=remoteMcpClient.js.map

package/dist/core/mcp/remoteMcpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/remoteMcpClient.ts"],"sourcesContent":["import { Client } from '@modelcontextprotocol/sdk/client/index.js';\n// SSE remains required during the Streamable HTTP migration (some servers still speak SSE only).\n\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport type { CallToolRequest, CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { context, propagation } from '@opentelemetry/api';\nimport { McpConnectionError } from '../errors';\nimport { withTimeout } from '../util/promiseUtils';\nimport type { ToolSchema } from './IMCPServer';\n\n/** Networking for remote (url-based) MCP servers, kept separate so it can be mocked in tests. */\n\nexport type RemoteMcpTransportType = 'streamable-http' | 'sse';\n\nexport interface RemoteMcpConnection {\n  readonly transportType: RemoteMcpTransportType;\n  /** Session id for a stateful server, or null for a stateless one. */\n  readonly sessionId: string | null;\n  listTools(cursor?: string): Promise<{ tools: ToolSchema[]; nextCursor?: string | undefined }>;\n  callTool(params: CallToolRequest['params']): Promise<CallToolResult>;\n  close(): Promise<void>;\n}\n\n// SSE transport type kept for dual-probe support during migration.\n// eslint-disable-next-line @typescript-eslint/no-deprecated -- see TRANSPORT_PROBE_ORDER\ntype McpTransport = StreamableHTTPClientTransport | SSEClientTransport;\n\nconst CLIENT_INFO = { name: 'tfy-agent-mcp-client', version: '1.0.0' } as const;\nconst TRANSPORT_PROBE_ORDER: RemoteMcpTransportType[] = ['streamable-http', 'sse'];\n\nclass McpClientWithTimeout extends Client {\n  constructor(private readonly requestTimeoutMs: number) {\n    super(CLIENT_INFO, { capabilities: {} });\n  }\n\n  // SDK Client.request is loosely typed; forward with an explicit timeout.\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- MCP SDK request typing\n  override request(req: any, schema: any, options?: any): Promise<any> {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-argument -- MCP SDK request typing\n    return super.request(req, schema, { ...options, timeout: this.requestTimeoutMs });\n  }\n}\n\nfunction createTransport(\n  type: RemoteMcpTransportType,\n  url: URL,\n  headers: Record<string, string>,\n  sessionId?: string,\n): McpTransport {\n  const requestInit = { headers };\n  if (type === 'streamable-http') {\n    return new StreamableHTTPClientTransport(url, { requestInit, ...(sessionId !== undefined ? { sessionId } : {}) });\n  }\n  // eslint-disable-next-line @typescript-eslint/no-deprecated -- dual-transport probe; see TRANSPORT_PROBE_ORDER\n  return new SSEClientTransport(url, { requestInit });\n}\n\nexport function isSessionExpiredError(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  if ('code' in error && error.code === 404) return true;\n  return error.message.includes('HTTP 404') || error.message.toLowerCase().includes('session');\n}\n\nfunction isAuthError(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  if ('code' in error && error.code === 401) return true;\n  return error.message.includes('HTTP 401');\n}\n\n/** Inject the active otel trace context so each request propagates its span. */\nfunction stampTraceHeaders(headers: Record<string, string>): void {\n  propagation.inject(context.active(), headers);\n}\n\nfunction getTransportSessionId(transport: McpTransport): string | null {\n  return transport instanceof StreamableHTTPClientTransport ? (transport.sessionId ?? null) : null;\n}\n\nfunction toConnectError(error: unknown): McpConnectionError {\n  if (error instanceof McpConnectionError) return error;\n  if (isAuthError(error)) {\n    return new McpConnectionError('upstream returned 401 Unauthorized (check x-tfy-mcp-headers credentials)', 401, {\n      cause: error,\n    });\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  return new McpConnectionError(message, 502, { cause: error });\n}\n\nfunction buildConnection(\n  client: McpClientWithTimeout,\n  transport: McpTransport,\n  transportType: RemoteMcpTransportType,\n  headers: Record<string, string>,\n  requestOptions: { signal: AbortSignal },\n): RemoteMcpConnection {\n  return {\n    transportType,\n    sessionId: getTransportSessionId(transport),\n    listTools: async (cursor?: string) => {\n      stampTraceHeaders(headers);\n      const response = await client.listTools(cursor ? { cursor } : undefined, requestOptions);\n      return {\n        tools: response.tools,\n        nextCursor: response.nextCursor,\n      };\n    },\n    callTool: async (callParams: CallToolRequest['params']): Promise<CallToolResult> => {\n      stampTraceHeaders(headers);\n      return (await client.callTool(callParams, undefined, requestOptions)) as CallToolResult;\n    },\n    close: async (): Promise<void> => {\n      await client.close().catch(() => {\n        /* no-op */\n      });\n    },\n  };\n}\n\n/**\n * Connect to a remote MCP server, keeping the first transport that connects. `sessionId` is passed to\n * every attempt so a stateful session resumes in place instead of opening a throwaway one.\n *\n * `knownTransportType` is a hint (from a prior connect / persisted state): it's tried first for a fast\n * path, but on failure we still fall back to probing the remaining transports, so a stale or wrong\n * hint (server switched transports, bad resume data) self-heals instead of failing every turn.\n */\nexport async function connectRemoteMcp(params: {\n  url: string;\n  headers: Record<string, string>;\n  sessionId?: string | undefined;\n  knownTransportType?: RemoteMcpTransportType | undefined;\n  requestTimeoutMs: number;\n  connectTimeoutMs: number;\n  signal: AbortSignal;\n  onClose?: (() => void) | undefined;\n  onError?: ((error: Error) => void) | undefined;\n}): Promise<RemoteMcpConnection> {\n  const url = new URL(params.url);\n  const requestOptions = { signal: params.signal };\n  const candidates = params.knownTransportType\n    ? [params.knownTransportType, ...TRANSPORT_PROBE_ORDER.filter(t => t !== params.knownTransportType)]\n    : TRANSPORT_PROBE_ORDER;\n  const failures: { transport: RemoteMcpTransportType; error: string }[] = [];\n\n  for (const transportType of candidates) {\n    const transport = createTransport(transportType, url, params.headers, params.sessionId);\n    const client = new McpClientWithTimeout(params.requestTimeoutMs);\n    try {\n      stampTraceHeaders(params.headers);\n      await withTimeout(\n        // Concrete transports use sessionId: string|undefined; Transport uses an optional\n        // property — exactOptionalPropertyTypes rejects assignability without this cast.\n        client.connect(transport as Parameters<Client['connect']>[0], requestOptions),\n        params.connectTimeoutMs,\n        transportType,\n      );\n    } catch (error) {\n      await client.close().catch(() => {\n        /* no-op */\n      });\n      if (isAuthError(error)) throw toConnectError(error);\n      // A session-expired error means the transport is right but the session is stale: surface it so\n      // the caller reconnects fresh instead of falling through to a different transport.\n      if (params.sessionId && isSessionExpiredError(error)) throw toConnectError(error);\n      failures.push({ transport: transportType, error: error instanceof Error ? error.message.trim() : String(error) });\n      continue;\n    }\n\n    // Set on the client (not the transport) so the SDK's own onclose/onerror cleanup still runs; the\n    // SDK invokes these from inside it. Only wired on the kept connection, so failed attempts stay quiet.\n    client.onclose = () => params.onClose?.();\n    client.onerror = error => params.onError?.(error);\n    return buildConnection(client, transport, transportType, params.headers, requestOptions);\n  }\n\n  throw new McpConnectionError(`failed to connect (tried ${candidates.join(', ')}): ${JSON.stringify(failures)}`, 502);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAuB;AAGvB,iBAAmC;AACnC,4BAA8C;AAE9C,iBAAqC;AACrC,oBAAmC;AACnC,0BAA4B;AAoB5B,IAAM,cAAc,EAAE,MAAM,wBAAwB,SAAS,QAAQ;AACrE,IAAM,wBAAkD,CAAC,mBAAmB,KAAK;AAEjF,IAAM,uBAAN,cAAmC,qBAAO;AAAA,EACxC,YAA6B,kBAA0B;AACrD,UAAM,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;AADZ;AAAA,EAE7B;AAAA,EAF6B;AAAA;AAAA;AAAA,EAMpB,QAAQ,KAAU,QAAa,SAA6B;AAEnE,WAAO,MAAM,QAAQ,KAAK,QAAQ,EAAE,GAAG,SAAS,SAAS,KAAK,iBAAiB,CAAC;AAAA,EAClF;AACF;AAEA,SAAS,gBACP,MACA,KACA,SACA,WACc;AACd,QAAM,cAAc,EAAE,QAAQ;AAC9B,MAAI,SAAS,mBAAmB;AAC9B,WAAO,IAAI,oDAA8B,KAAK,EAAE,aAAa,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC,EAAG,CAAC;AAAA,EAClH;AAEA,SAAO,IAAI,8BAAmB,KAAK,EAAE,YAAY,CAAC;AACpD;AAEO,SAAS,sBAAsB,OAAyB;AAC7D,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,MAAI,UAAU,SAAS,MAAM,SAAS,IAAK,QAAO;AAClD,SAAO,MAAM,QAAQ,SAAS,UAAU,KAAK,MAAM,QAAQ,YAAY,EAAE,SAAS,SAAS;AAC7F;AAEA,SAAS,YAAY,OAAyB;AAC5C,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,MAAI,UAAU,SAAS,MAAM,SAAS,IAAK,QAAO;AAClD,SAAO,MAAM,QAAQ,SAAS,UAAU;AAC1C;AAGA,SAAS,kBAAkB,SAAuC;AAChE,yBAAY,OAAO,mBAAQ,OAAO,GAAG,OAAO;AAC9C;AAEA,SAAS,sBAAsB,WAAwC;AACrE,SAAO,qBAAqB,sDAAiC,UAAU,aAAa,OAAQ;AAC9F;AAEA,SAAS,eAAe,OAAoC;AAC1D,MAAI,iBAAiB,iCAAoB,QAAO;AAChD,MAAI,YAAY,KAAK,GAAG;AACtB,WAAO,IAAI,iCAAmB,4EAA4E,KAAK;AAAA,MAC7G,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,IAAI,iCAAmB,SAAS,KAAK,EAAE,OAAO,MAAM,CAAC;AAC9D;AAEA,SAAS,gBACP,QACA,WACA,eACA,SACA,gBACqB;AACrB,SAAO;AAAA,IACL;AAAA,IACA,WAAW,sBAAsB,SAAS;AAAA,IAC1C,WAAW,OAAO,WAAoB;AACpC,wBAAkB,OAAO;AACzB,YAAM,WAAW,MAAM,OAAO,UAAU,SAAS,EAAE,OAAO,IAAI,QAAW,cAAc;AACvF,aAAO;AAAA,QACL,OAAO,SAAS;AAAA,QAChB,YAAY,SAAS;AAAA,MACvB;AAAA,IACF;AAAA,IACA,UAAU,OAAO,eAAmE;AAClF,wBAAkB,OAAO;AACzB,aAAQ,MAAM,OAAO,SAAS,YAAY,QAAW,cAAc;AAAA,IACrE;AAAA,IACA,OAAO,YAA2B;AAChC,YAAM,OAAO,MAAM,EAAE,MAAM,MAAM;AAAA,MAEjC,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAUA,eAAsB,iBAAiB,QAUN;AAC/B,QAAM,MAAM,IAAI,IAAI,OAAO,GAAG;AAC9B,QAAM,iBAAiB,EAAE,QAAQ,OAAO,OAAO;AAC/C,QAAM,aAAa,OAAO,qBACtB,CAAC,OAAO,oBAAoB,GAAG,sBAAsB,OAAO,OAAK,MAAM,OAAO,kBAAkB,CAAC,IACjG;AACJ,QAAM,WAAmE,CAAC;AAE1E,aAAW,iBAAiB,YAAY;AACtC,UAAM,YAAY,gBAAgB,eAAe,KAAK,OAAO,SAAS,OAAO,SAAS;AACtF,UAAM,SAAS,IAAI,qBAAqB,OAAO,gBAAgB;AAC/D,QAAI;AACF,wBAAkB,OAAO,OAAO;AAChC,gBAAM;AAAA;AAAA;AAAA,QAGJ,OAAO,QAAQ,WAA+C,cAAc;AAAA,QAC5E,OAAO;AAAA,QACP;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,OAAO,MAAM,EAAE,MAAM,MAAM;AAAA,MAEjC,CAAC;AACD,UAAI,YAAY,KAAK,EAAG,OAAM,eAAe,KAAK;AAGlD,UAAI,OAAO,aAAa,sBAAsB,KAAK,EAAG,OAAM,eAAe,KAAK;AAChF,eAAS,KAAK,EAAE,WAAW,eAAe,OAAO,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,EAAE,CAAC;AAChH;AAAA,IACF;AAIA,WAAO,UAAU,MAAM,OAAO,UAAU;AACxC,WAAO,UAAU,WAAS,OAAO,UAAU,KAAK;AAChD,WAAO,gBAAgB,QAAQ,WAAW,eAAe,OAAO,SAAS,cAAc;AAAA,EACzF;AAEA,QAAM,IAAI,iCAAmB,4BAA4B,WAAW,KAAK,IAAI,CAAC,MAAM,KAAK,UAAU,QAAQ,CAAC,IAAI,GAAG;AACrH;","names":[]}

package/dist/core/mcp/remoteMcpClient.mjs

@@ -0,0 +1,112 @@
+// src/core/mcp/remoteMcpClient.ts
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { context, propagation } from "@opentelemetry/api";
+import { McpConnectionError } from "../errors.mjs";
+import { withTimeout } from "../util/promiseUtils.mjs";
+var CLIENT_INFO = { name: "tfy-agent-mcp-client", version: "1.0.0" };
+var TRANSPORT_PROBE_ORDER = ["streamable-http", "sse"];
+var McpClientWithTimeout = class extends Client {
+  constructor(requestTimeoutMs) {
+    super(CLIENT_INFO, { capabilities: {} });
+    this.requestTimeoutMs = requestTimeoutMs;
+  }
+  requestTimeoutMs;
+  // SDK Client.request is loosely typed; forward with an explicit timeout.
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- MCP SDK request typing
+  request(req, schema, options) {
+    return super.request(req, schema, { ...options, timeout: this.requestTimeoutMs });
+  }
+};
+function createTransport(type, url, headers, sessionId) {
+  const requestInit = { headers };
+  if (type === "streamable-http") {
+    return new StreamableHTTPClientTransport(url, { requestInit, ...sessionId !== void 0 ? { sessionId } : {} });
+  }
+  return new SSEClientTransport(url, { requestInit });
+}
+function isSessionExpiredError(error) {
+  if (!(error instanceof Error)) return false;
+  if ("code" in error && error.code === 404) return true;
+  return error.message.includes("HTTP 404") || error.message.toLowerCase().includes("session");
+}
+function isAuthError(error) {
+  if (!(error instanceof Error)) return false;
+  if ("code" in error && error.code === 401) return true;
+  return error.message.includes("HTTP 401");
+}
+function stampTraceHeaders(headers) {
+  propagation.inject(context.active(), headers);
+}
+function getTransportSessionId(transport) {
+  return transport instanceof StreamableHTTPClientTransport ? transport.sessionId ?? null : null;
+}
+function toConnectError(error) {
+  if (error instanceof McpConnectionError) return error;
+  if (isAuthError(error)) {
+    return new McpConnectionError("upstream returned 401 Unauthorized (check x-tfy-mcp-headers credentials)", 401, {
+      cause: error
+    });
+  }
+  const message = error instanceof Error ? error.message : String(error);
+  return new McpConnectionError(message, 502, { cause: error });
+}
+function buildConnection(client, transport, transportType, headers, requestOptions) {
+  return {
+    transportType,
+    sessionId: getTransportSessionId(transport),
+    listTools: async (cursor) => {
+      stampTraceHeaders(headers);
+      const response = await client.listTools(cursor ? { cursor } : void 0, requestOptions);
+      return {
+        tools: response.tools,
+        nextCursor: response.nextCursor
+      };
+    },
+    callTool: async (callParams) => {
+      stampTraceHeaders(headers);
+      return await client.callTool(callParams, void 0, requestOptions);
+    },
+    close: async () => {
+      await client.close().catch(() => {
+      });
+    }
+  };
+}
+async function connectRemoteMcp(params) {
+  const url = new URL(params.url);
+  const requestOptions = { signal: params.signal };
+  const candidates = params.knownTransportType ? [params.knownTransportType, ...TRANSPORT_PROBE_ORDER.filter((t) => t !== params.knownTransportType)] : TRANSPORT_PROBE_ORDER;
+  const failures = [];
+  for (const transportType of candidates) {
+    const transport = createTransport(transportType, url, params.headers, params.sessionId);
+    const client = new McpClientWithTimeout(params.requestTimeoutMs);
+    try {
+      stampTraceHeaders(params.headers);
+      await withTimeout(
+        // Concrete transports use sessionId: string|undefined; Transport uses an optional
+        // property — exactOptionalPropertyTypes rejects assignability without this cast.
+        client.connect(transport, requestOptions),
+        params.connectTimeoutMs,
+        transportType
+      );
+    } catch (error) {
+      await client.close().catch(() => {
+      });
+      if (isAuthError(error)) throw toConnectError(error);
+      if (params.sessionId && isSessionExpiredError(error)) throw toConnectError(error);
+      failures.push({ transport: transportType, error: error instanceof Error ? error.message.trim() : String(error) });
+      continue;
+    }
+    client.onclose = () => params.onClose?.();
+    client.onerror = (error) => params.onError?.(error);
+    return buildConnection(client, transport, transportType, params.headers, requestOptions);
+  }
+  throw new McpConnectionError(`failed to connect (tried ${candidates.join(", ")}): ${JSON.stringify(failures)}`, 502);
+}
+export {
+  connectRemoteMcp,
+  isSessionExpiredError
+};
+//# sourceMappingURL=remoteMcpClient.mjs.map

package/dist/core/mcp/remoteMcpClient.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/remoteMcpClient.ts"],"sourcesContent":["import { Client } from '@modelcontextprotocol/sdk/client/index.js';\n// SSE remains required during the Streamable HTTP migration (some servers still speak SSE only).\n\nimport { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';\nimport type { CallToolRequest, CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { context, propagation } from '@opentelemetry/api';\nimport { McpConnectionError } from '../errors';\nimport { withTimeout } from '../util/promiseUtils';\nimport type { ToolSchema } from './IMCPServer';\n\n/** Networking for remote (url-based) MCP servers, kept separate so it can be mocked in tests. */\n\nexport type RemoteMcpTransportType = 'streamable-http' | 'sse';\n\nexport interface RemoteMcpConnection {\n  readonly transportType: RemoteMcpTransportType;\n  /** Session id for a stateful server, or null for a stateless one. */\n  readonly sessionId: string | null;\n  listTools(cursor?: string): Promise<{ tools: ToolSchema[]; nextCursor?: string | undefined }>;\n  callTool(params: CallToolRequest['params']): Promise<CallToolResult>;\n  close(): Promise<void>;\n}\n\n// SSE transport type kept for dual-probe support during migration.\n// eslint-disable-next-line @typescript-eslint/no-deprecated -- see TRANSPORT_PROBE_ORDER\ntype McpTransport = StreamableHTTPClientTransport | SSEClientTransport;\n\nconst CLIENT_INFO = { name: 'tfy-agent-mcp-client', version: '1.0.0' } as const;\nconst TRANSPORT_PROBE_ORDER: RemoteMcpTransportType[] = ['streamable-http', 'sse'];\n\nclass McpClientWithTimeout extends Client {\n  constructor(private readonly requestTimeoutMs: number) {\n    super(CLIENT_INFO, { capabilities: {} });\n  }\n\n  // SDK Client.request is loosely typed; forward with an explicit timeout.\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- MCP SDK request typing\n  override request(req: any, schema: any, options?: any): Promise<any> {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-argument -- MCP SDK request typing\n    return super.request(req, schema, { ...options, timeout: this.requestTimeoutMs });\n  }\n}\n\nfunction createTransport(\n  type: RemoteMcpTransportType,\n  url: URL,\n  headers: Record<string, string>,\n  sessionId?: string,\n): McpTransport {\n  const requestInit = { headers };\n  if (type === 'streamable-http') {\n    return new StreamableHTTPClientTransport(url, { requestInit, ...(sessionId !== undefined ? { sessionId } : {}) });\n  }\n  // eslint-disable-next-line @typescript-eslint/no-deprecated -- dual-transport probe; see TRANSPORT_PROBE_ORDER\n  return new SSEClientTransport(url, { requestInit });\n}\n\nexport function isSessionExpiredError(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  if ('code' in error && error.code === 404) return true;\n  return error.message.includes('HTTP 404') || error.message.toLowerCase().includes('session');\n}\n\nfunction isAuthError(error: unknown): boolean {\n  if (!(error instanceof Error)) return false;\n  if ('code' in error && error.code === 401) return true;\n  return error.message.includes('HTTP 401');\n}\n\n/** Inject the active otel trace context so each request propagates its span. */\nfunction stampTraceHeaders(headers: Record<string, string>): void {\n  propagation.inject(context.active(), headers);\n}\n\nfunction getTransportSessionId(transport: McpTransport): string | null {\n  return transport instanceof StreamableHTTPClientTransport ? (transport.sessionId ?? null) : null;\n}\n\nfunction toConnectError(error: unknown): McpConnectionError {\n  if (error instanceof McpConnectionError) return error;\n  if (isAuthError(error)) {\n    return new McpConnectionError('upstream returned 401 Unauthorized (check x-tfy-mcp-headers credentials)', 401, {\n      cause: error,\n    });\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  return new McpConnectionError(message, 502, { cause: error });\n}\n\nfunction buildConnection(\n  client: McpClientWithTimeout,\n  transport: McpTransport,\n  transportType: RemoteMcpTransportType,\n  headers: Record<string, string>,\n  requestOptions: { signal: AbortSignal },\n): RemoteMcpConnection {\n  return {\n    transportType,\n    sessionId: getTransportSessionId(transport),\n    listTools: async (cursor?: string) => {\n      stampTraceHeaders(headers);\n      const response = await client.listTools(cursor ? { cursor } : undefined, requestOptions);\n      return {\n        tools: response.tools,\n        nextCursor: response.nextCursor,\n      };\n    },\n    callTool: async (callParams: CallToolRequest['params']): Promise<CallToolResult> => {\n      stampTraceHeaders(headers);\n      return (await client.callTool(callParams, undefined, requestOptions)) as CallToolResult;\n    },\n    close: async (): Promise<void> => {\n      await client.close().catch(() => {\n        /* no-op */\n      });\n    },\n  };\n}\n\n/**\n * Connect to a remote MCP server, keeping the first transport that connects. `sessionId` is passed to\n * every attempt so a stateful session resumes in place instead of opening a throwaway one.\n *\n * `knownTransportType` is a hint (from a prior connect / persisted state): it's tried first for a fast\n * path, but on failure we still fall back to probing the remaining transports, so a stale or wrong\n * hint (server switched transports, bad resume data) self-heals instead of failing every turn.\n */\nexport async function connectRemoteMcp(params: {\n  url: string;\n  headers: Record<string, string>;\n  sessionId?: string | undefined;\n  knownTransportType?: RemoteMcpTransportType | undefined;\n  requestTimeoutMs: number;\n  connectTimeoutMs: number;\n  signal: AbortSignal;\n  onClose?: (() => void) | undefined;\n  onError?: ((error: Error) => void) | undefined;\n}): Promise<RemoteMcpConnection> {\n  const url = new URL(params.url);\n  const requestOptions = { signal: params.signal };\n  const candidates = params.knownTransportType\n    ? [params.knownTransportType, ...TRANSPORT_PROBE_ORDER.filter(t => t !== params.knownTransportType)]\n    : TRANSPORT_PROBE_ORDER;\n  const failures: { transport: RemoteMcpTransportType; error: string }[] = [];\n\n  for (const transportType of candidates) {\n    const transport = createTransport(transportType, url, params.headers, params.sessionId);\n    const client = new McpClientWithTimeout(params.requestTimeoutMs);\n    try {\n      stampTraceHeaders(params.headers);\n      await withTimeout(\n        // Concrete transports use sessionId: string|undefined; Transport uses an optional\n        // property — exactOptionalPropertyTypes rejects assignability without this cast.\n        client.connect(transport as Parameters<Client['connect']>[0], requestOptions),\n        params.connectTimeoutMs,\n        transportType,\n      );\n    } catch (error) {\n      await client.close().catch(() => {\n        /* no-op */\n      });\n      if (isAuthError(error)) throw toConnectError(error);\n      // A session-expired error means the transport is right but the session is stale: surface it so\n      // the caller reconnects fresh instead of falling through to a different transport.\n      if (params.sessionId && isSessionExpiredError(error)) throw toConnectError(error);\n      failures.push({ transport: transportType, error: error instanceof Error ? error.message.trim() : String(error) });\n      continue;\n    }\n\n    // Set on the client (not the transport) so the SDK's own onclose/onerror cleanup still runs; the\n    // SDK invokes these from inside it. Only wired on the kept connection, so failed attempts stay quiet.\n    client.onclose = () => params.onClose?.();\n    client.onerror = error => params.onError?.(error);\n    return buildConnection(client, transport, transportType, params.headers, requestOptions);\n  }\n\n  throw new McpConnectionError(`failed to connect (tried ${candidates.join(', ')}): ${JSON.stringify(failures)}`, 502);\n}\n"],"mappings":";AAAA,SAAS,cAAc;AAGvB,SAAS,0BAA0B;AACnC,SAAS,qCAAqC;AAE9C,SAAS,SAAS,mBAAmB;AACrC,SAAS,0BAA0B;AACnC,SAAS,mBAAmB;AAoB5B,IAAM,cAAc,EAAE,MAAM,wBAAwB,SAAS,QAAQ;AACrE,IAAM,wBAAkD,CAAC,mBAAmB,KAAK;AAEjF,IAAM,uBAAN,cAAmC,OAAO;AAAA,EACxC,YAA6B,kBAA0B;AACrD,UAAM,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;AADZ;AAAA,EAE7B;AAAA,EAF6B;AAAA;AAAA;AAAA,EAMpB,QAAQ,KAAU,QAAa,SAA6B;AAEnE,WAAO,MAAM,QAAQ,KAAK,QAAQ,EAAE,GAAG,SAAS,SAAS,KAAK,iBAAiB,CAAC;AAAA,EAClF;AACF;AAEA,SAAS,gBACP,MACA,KACA,SACA,WACc;AACd,QAAM,cAAc,EAAE,QAAQ;AAC9B,MAAI,SAAS,mBAAmB;AAC9B,WAAO,IAAI,8BAA8B,KAAK,EAAE,aAAa,GAAI,cAAc,SAAY,EAAE,UAAU,IAAI,CAAC,EAAG,CAAC;AAAA,EAClH;AAEA,SAAO,IAAI,mBAAmB,KAAK,EAAE,YAAY,CAAC;AACpD;AAEO,SAAS,sBAAsB,OAAyB;AAC7D,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,MAAI,UAAU,SAAS,MAAM,SAAS,IAAK,QAAO;AAClD,SAAO,MAAM,QAAQ,SAAS,UAAU,KAAK,MAAM,QAAQ,YAAY,EAAE,SAAS,SAAS;AAC7F;AAEA,SAAS,YAAY,OAAyB;AAC5C,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,MAAI,UAAU,SAAS,MAAM,SAAS,IAAK,QAAO;AAClD,SAAO,MAAM,QAAQ,SAAS,UAAU;AAC1C;AAGA,SAAS,kBAAkB,SAAuC;AAChE,cAAY,OAAO,QAAQ,OAAO,GAAG,OAAO;AAC9C;AAEA,SAAS,sBAAsB,WAAwC;AACrE,SAAO,qBAAqB,gCAAiC,UAAU,aAAa,OAAQ;AAC9F;AAEA,SAAS,eAAe,OAAoC;AAC1D,MAAI,iBAAiB,mBAAoB,QAAO;AAChD,MAAI,YAAY,KAAK,GAAG;AACtB,WAAO,IAAI,mBAAmB,4EAA4E,KAAK;AAAA,MAC7G,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,IAAI,mBAAmB,SAAS,KAAK,EAAE,OAAO,MAAM,CAAC;AAC9D;AAEA,SAAS,gBACP,QACA,WACA,eACA,SACA,gBACqB;AACrB,SAAO;AAAA,IACL;AAAA,IACA,WAAW,sBAAsB,SAAS;AAAA,IAC1C,WAAW,OAAO,WAAoB;AACpC,wBAAkB,OAAO;AACzB,YAAM,WAAW,MAAM,OAAO,UAAU,SAAS,EAAE,OAAO,IAAI,QAAW,cAAc;AACvF,aAAO;AAAA,QACL,OAAO,SAAS;AAAA,QAChB,YAAY,SAAS;AAAA,MACvB;AAAA,IACF;AAAA,IACA,UAAU,OAAO,eAAmE;AAClF,wBAAkB,OAAO;AACzB,aAAQ,MAAM,OAAO,SAAS,YAAY,QAAW,cAAc;AAAA,IACrE;AAAA,IACA,OAAO,YAA2B;AAChC,YAAM,OAAO,MAAM,EAAE,MAAM,MAAM;AAAA,MAEjC,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAUA,eAAsB,iBAAiB,QAUN;AAC/B,QAAM,MAAM,IAAI,IAAI,OAAO,GAAG;AAC9B,QAAM,iBAAiB,EAAE,QAAQ,OAAO,OAAO;AAC/C,QAAM,aAAa,OAAO,qBACtB,CAAC,OAAO,oBAAoB,GAAG,sBAAsB,OAAO,OAAK,MAAM,OAAO,kBAAkB,CAAC,IACjG;AACJ,QAAM,WAAmE,CAAC;AAE1E,aAAW,iBAAiB,YAAY;AACtC,UAAM,YAAY,gBAAgB,eAAe,KAAK,OAAO,SAAS,OAAO,SAAS;AACtF,UAAM,SAAS,IAAI,qBAAqB,OAAO,gBAAgB;AAC/D,QAAI;AACF,wBAAkB,OAAO,OAAO;AAChC,YAAM;AAAA;AAAA;AAAA,QAGJ,OAAO,QAAQ,WAA+C,cAAc;AAAA,QAC5E,OAAO;AAAA,QACP;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,OAAO,MAAM,EAAE,MAAM,MAAM;AAAA,MAEjC,CAAC;AACD,UAAI,YAAY,KAAK,EAAG,OAAM,eAAe,KAAK;AAGlD,UAAI,OAAO,aAAa,sBAAsB,KAAK,EAAG,OAAM,eAAe,KAAK;AAChF,eAAS,KAAK,EAAE,WAAW,eAAe,OAAO,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,EAAE,CAAC;AAChH;AAAA,IACF;AAIA,WAAO,UAAU,MAAM,OAAO,UAAU;AACxC,WAAO,UAAU,WAAS,OAAO,UAAU,KAAK;AAChD,WAAO,gBAAgB,QAAQ,WAAW,eAAe,OAAO,SAAS,cAAc;AAAA,EACzF;AAEA,QAAM,IAAI,mBAAmB,4BAA4B,WAAW,KAAK,IAAI,CAAC,MAAM,KAAK,UAAU,QAAQ,CAAC,IAAI,GAAG;AACrH;","names":[]}

package/dist/core/mcp/toolNames.d.ts

@@ -0,0 +1,6 @@
+export declare const MAX_DUP_SUFFIX = 50;
+export declare function getUniqueSanitizedToolName(toolName: string, existingNames: Set<string>): {
+    name: string;
+    hadCollision: boolean;
+};
+//# sourceMappingURL=toolNames.d.ts.map

package/dist/core/mcp/toolNames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolNames.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/toolNames.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,KAAK,CAAC;AASjC,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GACzB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAmBzC"}

package/dist/core/mcp/toolNames.js

@@ -0,0 +1,59 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/mcp/toolNames.ts
+var toolNames_exports = {};
+__export(toolNames_exports, {
+  MAX_DUP_SUFFIX: () => MAX_DUP_SUFFIX,
+  getUniqueSanitizedToolName: () => getUniqueSanitizedToolName
+});
+module.exports = __toCommonJS(toolNames_exports);
+var import_errors = require("../errors.js");
+var VALID_TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]+$/;
+var MAX_TOOL_NAME_LENGTH = 64;
+var MAX_DUP_SUFFIX = 50;
+function sanitizeToolName(toolName) {
+  if (VALID_TOOL_NAME_PATTERN.test(toolName)) {
+    return toolName;
+  }
+  return toolName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+function getUniqueSanitizedToolName(toolName, existingNames) {
+  const sanitized = sanitizeToolName(toolName);
+  const truncated = sanitized.substring(0, MAX_TOOL_NAME_LENGTH);
+  if (!existingNames.has(truncated)) {
+    return { name: truncated, hadCollision: false };
+  }
+  const nameBase = sanitized.substring(0, MAX_TOOL_NAME_LENGTH - 2);
+  for (let suffix = 1; suffix <= MAX_DUP_SUFFIX; suffix++) {
+    const candidate = `${nameBase}${String(suffix)}`;
+    if (!existingNames.has(candidate)) {
+      return { name: candidate, hadCollision: true };
+    }
+  }
+  throw new import_errors.ToolNameCollisionError(
+    `Tool name collision limit exceeded for "${toolName}": more than ${String(MAX_DUP_SUFFIX)} duplicates across MCP servers`
+  );
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  MAX_DUP_SUFFIX,
+  getUniqueSanitizedToolName
+});
+//# sourceMappingURL=toolNames.js.map

package/dist/core/mcp/toolNames.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/toolNames.ts"],"sourcesContent":["import { ToolNameCollisionError } from '../errors';\n\nconst VALID_TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]+$/;\nconst MAX_TOOL_NAME_LENGTH = 64;\nexport const MAX_DUP_SUFFIX = 50;\n\nfunction sanitizeToolName(toolName: string): string {\n  if (VALID_TOOL_NAME_PATTERN.test(toolName)) {\n    return toolName;\n  }\n  return toolName.replace(/[^a-zA-Z0-9_-]/g, '_');\n}\n\nexport function getUniqueSanitizedToolName(\n  toolName: string,\n  existingNames: Set<string>,\n): { name: string; hadCollision: boolean } {\n  const sanitized = sanitizeToolName(toolName);\n  const truncated = sanitized.substring(0, MAX_TOOL_NAME_LENGTH);\n\n  if (!existingNames.has(truncated)) {\n    return { name: truncated, hadCollision: false };\n  }\n\n  const nameBase = sanitized.substring(0, MAX_TOOL_NAME_LENGTH - 2);\n  for (let suffix = 1; suffix <= MAX_DUP_SUFFIX; suffix++) {\n    const candidate = `${nameBase}${String(suffix)}`;\n    if (!existingNames.has(candidate)) {\n      return { name: candidate, hadCollision: true };\n    }\n  }\n\n  throw new ToolNameCollisionError(\n    `Tool name collision limit exceeded for \"${toolName}\": more than ${String(MAX_DUP_SUFFIX)} duplicates across MCP servers`,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAuC;AAEvC,IAAM,0BAA0B;AAChC,IAAM,uBAAuB;AACtB,IAAM,iBAAiB;AAE9B,SAAS,iBAAiB,UAA0B;AAClD,MAAI,wBAAwB,KAAK,QAAQ,GAAG;AAC1C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,mBAAmB,GAAG;AAChD;AAEO,SAAS,2BACd,UACA,eACyC;AACzC,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,YAAY,UAAU,UAAU,GAAG,oBAAoB;AAE7D,MAAI,CAAC,cAAc,IAAI,SAAS,GAAG;AACjC,WAAO,EAAE,MAAM,WAAW,cAAc,MAAM;AAAA,EAChD;AAEA,QAAM,WAAW,UAAU,UAAU,GAAG,uBAAuB,CAAC;AAChE,WAAS,SAAS,GAAG,UAAU,gBAAgB,UAAU;AACvD,UAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,MAAM,CAAC;AAC9C,QAAI,CAAC,cAAc,IAAI,SAAS,GAAG;AACjC,aAAO,EAAE,MAAM,WAAW,cAAc,KAAK;AAAA,IAC/C;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR,2CAA2C,QAAQ,gBAAgB,OAAO,cAAc,CAAC;AAAA,EAC3F;AACF;","names":[]}

package/dist/core/mcp/toolNames.mjs

@@ -0,0 +1,33 @@
+// src/core/mcp/toolNames.ts
+import { ToolNameCollisionError } from "../errors.mjs";
+var VALID_TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]+$/;
+var MAX_TOOL_NAME_LENGTH = 64;
+var MAX_DUP_SUFFIX = 50;
+function sanitizeToolName(toolName) {
+  if (VALID_TOOL_NAME_PATTERN.test(toolName)) {
+    return toolName;
+  }
+  return toolName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
+function getUniqueSanitizedToolName(toolName, existingNames) {
+  const sanitized = sanitizeToolName(toolName);
+  const truncated = sanitized.substring(0, MAX_TOOL_NAME_LENGTH);
+  if (!existingNames.has(truncated)) {
+    return { name: truncated, hadCollision: false };
+  }
+  const nameBase = sanitized.substring(0, MAX_TOOL_NAME_LENGTH - 2);
+  for (let suffix = 1; suffix <= MAX_DUP_SUFFIX; suffix++) {
+    const candidate = `${nameBase}${String(suffix)}`;
+    if (!existingNames.has(candidate)) {
+      return { name: candidate, hadCollision: true };
+    }
+  }
+  throw new ToolNameCollisionError(
+    `Tool name collision limit exceeded for "${toolName}": more than ${String(MAX_DUP_SUFFIX)} duplicates across MCP servers`
+  );
+}
+export {
+  MAX_DUP_SUFFIX,
+  getUniqueSanitizedToolName
+};
+//# sourceMappingURL=toolNames.mjs.map

package/dist/core/mcp/toolNames.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/toolNames.ts"],"sourcesContent":["import { ToolNameCollisionError } from '../errors';\n\nconst VALID_TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]+$/;\nconst MAX_TOOL_NAME_LENGTH = 64;\nexport const MAX_DUP_SUFFIX = 50;\n\nfunction sanitizeToolName(toolName: string): string {\n  if (VALID_TOOL_NAME_PATTERN.test(toolName)) {\n    return toolName;\n  }\n  return toolName.replace(/[^a-zA-Z0-9_-]/g, '_');\n}\n\nexport function getUniqueSanitizedToolName(\n  toolName: string,\n  existingNames: Set<string>,\n): { name: string; hadCollision: boolean } {\n  const sanitized = sanitizeToolName(toolName);\n  const truncated = sanitized.substring(0, MAX_TOOL_NAME_LENGTH);\n\n  if (!existingNames.has(truncated)) {\n    return { name: truncated, hadCollision: false };\n  }\n\n  const nameBase = sanitized.substring(0, MAX_TOOL_NAME_LENGTH - 2);\n  for (let suffix = 1; suffix <= MAX_DUP_SUFFIX; suffix++) {\n    const candidate = `${nameBase}${String(suffix)}`;\n    if (!existingNames.has(candidate)) {\n      return { name: candidate, hadCollision: true };\n    }\n  }\n\n  throw new ToolNameCollisionError(\n    `Tool name collision limit exceeded for \"${toolName}\": more than ${String(MAX_DUP_SUFFIX)} duplicates across MCP servers`,\n  );\n}\n"],"mappings":";AAAA,SAAS,8BAA8B;AAEvC,IAAM,0BAA0B;AAChC,IAAM,uBAAuB;AACtB,IAAM,iBAAiB;AAE9B,SAAS,iBAAiB,UAA0B;AAClD,MAAI,wBAAwB,KAAK,QAAQ,GAAG;AAC1C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,mBAAmB,GAAG;AAChD;AAEO,SAAS,2BACd,UACA,eACyC;AACzC,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,YAAY,UAAU,UAAU,GAAG,oBAAoB;AAE7D,MAAI,CAAC,cAAc,IAAI,SAAS,GAAG;AACjC,WAAO,EAAE,MAAM,WAAW,cAAc,MAAM;AAAA,EAChD;AAEA,QAAM,WAAW,UAAU,UAAU,GAAG,uBAAuB,CAAC;AAChE,WAAS,SAAS,GAAG,UAAU,gBAAgB,UAAU;AACvD,UAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,MAAM,CAAC;AAC9C,QAAI,CAAC,cAAc,IAAI,SAAS,GAAG;AACjC,aAAO,EAAE,MAAM,WAAW,cAAc,KAAK;AAAA,IAC/C;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR,2CAA2C,QAAQ,gBAAgB,OAAO,cAAc,CAAC;AAAA,EAC3F;AACF;","names":[]}

package/dist/core/mcp/toolSelectors.d.ts

@@ -0,0 +1,28 @@
+import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js';
+/** Tags allowed on `enable_tools`, `disable_tools`, and `preload_tools`. */
+export declare const TOOLS_SELECTOR_TAGS: readonly ["@all", "@read-only"];
+/** Tags allowed on `require_approval_for_tools`. */
+export declare const REQUIRE_APPROVAL_TOOLS_SELECTOR_TAGS: readonly ["@all", "@write", "@destructive"];
+export declare const DEFAULT_ENABLE_TOOLS: string[];
+export declare const DEFAULT_DISABLE_TOOLS: string[];
+export declare const DEFAULT_PRELOAD_TOOLS: string[];
+export declare const DEFAULT_REQUIRE_APPROVAL_FOR_TOOLS: string[];
+/** True if the tool matches any selector (tag or literal name). */
+export declare function toolMatchesAnySelector(toolName: string, annotations: ToolAnnotations | undefined, selectors: readonly string[] | undefined): boolean;
+/**
+ * Whether the tool requires human approval before execution.
+ * Matches `@write`, `@destructive`, `@all`, or explicit tool names against annotations.
+ * Unannotated tools are exempt unless named in `require_approval_for_tools` or covered by `@all`.
+ */
+export declare function toolRequiresApproval(toolName: string, annotations: ToolAnnotations | undefined, selectors: readonly string[] | undefined): boolean;
+/** True if the tool is enabled and not disabled. */
+export declare function isToolAllowed(params: {
+    toolName: string;
+    annotations: ToolAnnotations | undefined;
+    enableSelectors: readonly string[];
+    disableSelectors: readonly string[];
+}): boolean;
+/** Non-tag names from a selector list (for upfront validation / sandbox allow-lists). */
+export declare function literalToolNames(selectors: readonly string[] | undefined): string[];
+export declare function selectorsIncludeAll(selectors: readonly string[] | undefined): boolean;
+//# sourceMappingURL=toolSelectors.d.ts.map

package/dist/core/mcp/toolSelectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolSelectors.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/toolSelectors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAkB1E,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,iCAA8C,CAAC;AAE/E,oDAAoD;AACpD,eAAO,MAAM,oCAAoC,6CAAgE,CAAC;AAElH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAAmB,CAAC;AAC7D,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAAO,CAAC;AAClD,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAAO,CAAC;AAClD,eAAO,MAAM,kCAAkC,EAAE,MAAM,EAA2C,CAAC;AA+BnG,mEAAmE;AACnE,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,GAAG,SAAS,EACxC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACvC,OAAO,CAWT;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,GAAG,SAAS,EACxC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACvC,OAAO,CAGT;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,MAAM,EAAE;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,eAAe,GAAG,SAAS,CAAC;IACzC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,OAAO,CAKV;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,CAGnF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAErF"}

package/dist/core/mcp/toolSelectors.js

@@ -0,0 +1,113 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/mcp/toolSelectors.ts
+var toolSelectors_exports = {};
+__export(toolSelectors_exports, {
+  DEFAULT_DISABLE_TOOLS: () => DEFAULT_DISABLE_TOOLS,
+  DEFAULT_ENABLE_TOOLS: () => DEFAULT_ENABLE_TOOLS,
+  DEFAULT_PRELOAD_TOOLS: () => DEFAULT_PRELOAD_TOOLS,
+  DEFAULT_REQUIRE_APPROVAL_FOR_TOOLS: () => DEFAULT_REQUIRE_APPROVAL_FOR_TOOLS,
+  REQUIRE_APPROVAL_TOOLS_SELECTOR_TAGS: () => REQUIRE_APPROVAL_TOOLS_SELECTOR_TAGS,
+  TOOLS_SELECTOR_TAGS: () => TOOLS_SELECTOR_TAGS,
+  isToolAllowed: () => isToolAllowed,
+  literalToolNames: () => literalToolNames,
+  selectorsIncludeAll: () => selectorsIncludeAll,
+  toolMatchesAnySelector: () => toolMatchesAnySelector,
+  toolRequiresApproval: () => toolRequiresApproval
+});
+module.exports = __toCommonJS(toolSelectors_exports);
+var TOOL_TAG_ALL = "@all";
+var TOOL_TAG_READ_ONLY = "@read-only";
+var TOOL_TAG_WRITE = "@write";
+var TOOL_TAG_DESTRUCTIVE = "@destructive";
+var TOOL_TAGS = [TOOL_TAG_ALL, TOOL_TAG_READ_ONLY, TOOL_TAG_WRITE, TOOL_TAG_DESTRUCTIVE];
+var TOOLS_SELECTOR_TAGS = [TOOL_TAG_ALL, TOOL_TAG_READ_ONLY];
+var REQUIRE_APPROVAL_TOOLS_SELECTOR_TAGS = [TOOL_TAG_ALL, TOOL_TAG_WRITE, TOOL_TAG_DESTRUCTIVE];
+var DEFAULT_ENABLE_TOOLS = [TOOL_TAG_ALL];
+var DEFAULT_DISABLE_TOOLS = [];
+var DEFAULT_PRELOAD_TOOLS = [];
+var DEFAULT_REQUIRE_APPROVAL_FOR_TOOLS = [TOOL_TAG_WRITE, TOOL_TAG_DESTRUCTIVE];
+function isToolTag(selector) {
+  return TOOL_TAGS.includes(selector);
+}
+function isReadOnly(annotations) {
+  return annotations?.readOnlyHint === true;
+}
+function isWrite(annotations) {
+  return annotations?.readOnlyHint === false && annotations.destructiveHint !== true;
+}
+function isDestructive(annotations) {
+  return annotations?.destructiveHint === true;
+}
+function toolMatchesTag(tag, annotations) {
+  switch (tag) {
+    case TOOL_TAG_ALL:
+      return true;
+    case TOOL_TAG_READ_ONLY:
+      return isReadOnly(annotations);
+    case TOOL_TAG_WRITE:
+      return isWrite(annotations);
+    case TOOL_TAG_DESTRUCTIVE:
+      return isDestructive(annotations);
+  }
+}
+function toolMatchesAnySelector(toolName, annotations, selectors) {
+  if (!selectors?.length) return false;
+  for (const selector of selectors) {
+    if (isToolTag(selector)) {
+      if (toolMatchesTag(selector, annotations)) return true;
+    } else if (selector === toolName) {
+      return true;
+    }
+  }
+  return false;
+}
+function toolRequiresApproval(toolName, annotations, selectors) {
+  if (!selectors?.length) return false;
+  return toolMatchesAnySelector(toolName, annotations, selectors);
+}
+function isToolAllowed(params) {
+  const { toolName, annotations, enableSelectors, disableSelectors } = params;
+  if (!toolMatchesAnySelector(toolName, annotations, enableSelectors)) return false;
+  if (toolMatchesAnySelector(toolName, annotations, disableSelectors)) return false;
+  return true;
+}
+function literalToolNames(selectors) {
+  if (!selectors) return [];
+  return selectors.filter((s) => !isToolTag(s));
+}
+function selectorsIncludeAll(selectors) {
+  return !!selectors?.includes(TOOL_TAG_ALL);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_DISABLE_TOOLS,
+  DEFAULT_ENABLE_TOOLS,
+  DEFAULT_PRELOAD_TOOLS,
+  DEFAULT_REQUIRE_APPROVAL_FOR_TOOLS,
+  REQUIRE_APPROVAL_TOOLS_SELECTOR_TAGS,
+  TOOLS_SELECTOR_TAGS,
+  isToolAllowed,
+  literalToolNames,
+  selectorsIncludeAll,
+  toolMatchesAnySelector,
+  toolRequiresApproval
+});
+//# sourceMappingURL=toolSelectors.js.map

package/dist/core/mcp/toolSelectors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/mcp/toolSelectors.ts"],"sourcesContent":["import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js';\n\n/**\n * MCP server tool selectors are either a special tag or a literal tool name.\n *\n *   @all          — every tool on the server\n *   @read-only    — readOnlyHint === true\n *   @write        — readOnlyHint === false and not destructive\n *   @destructive   — destructiveHint === true\n */\nconst TOOL_TAG_ALL = '@all';\nconst TOOL_TAG_READ_ONLY = '@read-only';\nconst TOOL_TAG_WRITE = '@write';\nconst TOOL_TAG_DESTRUCTIVE = '@destructive';\n\nconst TOOL_TAGS = [TOOL_TAG_ALL, TOOL_TAG_READ_ONLY, TOOL_TAG_WRITE, TOOL_TAG_DESTRUCTIVE] as const;\ntype ToolTag = (typeof TOOL_TAGS)[number];\n\n/** Tags allowed on `enable_tools`, `disable_tools`, and `preload_tools`. */\nexport const TOOLS_SELECTOR_TAGS = [TOOL_TAG_ALL, TOOL_TAG_READ_ONLY] as const;\n\n/** Tags allowed on `require_approval_for_tools`. */\nexport const REQUIRE_APPROVAL_TOOLS_SELECTOR_TAGS = [TOOL_TAG_ALL, TOOL_TAG_WRITE, TOOL_TAG_DESTRUCTIVE] as const;\n\nexport const DEFAULT_ENABLE_TOOLS: string[] = [TOOL_TAG_ALL];\nexport const DEFAULT_DISABLE_TOOLS: string[] = [];\nexport const DEFAULT_PRELOAD_TOOLS: string[] = [];\nexport const DEFAULT_REQUIRE_APPROVAL_FOR_TOOLS: string[] = [TOOL_TAG_WRITE, TOOL_TAG_DESTRUCTIVE];\n\nfunction isToolTag(selector: string): selector is ToolTag {\n  return TOOL_TAGS.includes(selector as ToolTag);\n}\n\nfunction isReadOnly(annotations?: ToolAnnotations): boolean {\n  return annotations?.readOnlyHint === true;\n}\n\nfunction isWrite(annotations?: ToolAnnotations): boolean {\n  return annotations?.readOnlyHint === false && annotations.destructiveHint !== true;\n}\n\nfunction isDestructive(annotations?: ToolAnnotations): boolean {\n  return annotations?.destructiveHint === true;\n}\n\nfunction toolMatchesTag(tag: ToolTag, annotations: ToolAnnotations | undefined): boolean {\n  switch (tag) {\n    case TOOL_TAG_ALL:\n      return true;\n    case TOOL_TAG_READ_ONLY:\n      return isReadOnly(annotations);\n    case TOOL_TAG_WRITE:\n      return isWrite(annotations);\n    case TOOL_TAG_DESTRUCTIVE:\n      return isDestructive(annotations);\n  }\n}\n\n/** True if the tool matches any selector (tag or literal name). */\nexport function toolMatchesAnySelector(\n  toolName: string,\n  annotations: ToolAnnotations | undefined,\n  selectors: readonly string[] | undefined,\n): boolean {\n  if (!selectors?.length) return false;\n\n  for (const selector of selectors) {\n    if (isToolTag(selector)) {\n      if (toolMatchesTag(selector, annotations)) return true;\n    } else if (selector === toolName) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Whether the tool requires human approval before execution.\n * Matches `@write`, `@destructive`, `@all`, or explicit tool names against annotations.\n * Unannotated tools are exempt unless named in `require_approval_for_tools` or covered by `@all`.\n */\nexport function toolRequiresApproval(\n  toolName: string,\n  annotations: ToolAnnotations | undefined,\n  selectors: readonly string[] | undefined,\n): boolean {\n  if (!selectors?.length) return false;\n  return toolMatchesAnySelector(toolName, annotations, selectors);\n}\n\n/** True if the tool is enabled and not disabled. */\nexport function isToolAllowed(params: {\n  toolName: string;\n  annotations: ToolAnnotations | undefined;\n  enableSelectors: readonly string[];\n  disableSelectors: readonly string[];\n}): boolean {\n  const { toolName, annotations, enableSelectors, disableSelectors } = params;\n  if (!toolMatchesAnySelector(toolName, annotations, enableSelectors)) return false;\n  if (toolMatchesAnySelector(toolName, annotations, disableSelectors)) return false;\n  return true;\n}\n\n/** Non-tag names from a selector list (for upfront validation / sandbox allow-lists). */\nexport function literalToolNames(selectors: readonly string[] | undefined): string[] {\n  if (!selectors) return [];\n  return selectors.filter(s => !isToolTag(s));\n}\n\nexport function selectorsIncludeAll(selectors: readonly string[] | undefined): boolean {\n  return !!selectors?.includes(TOOL_TAG_ALL);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,IAAM,eAAe;AACrB,IAAM,qBAAqB;AAC3B,IAAM,iBAAiB;AACvB,IAAM,uBAAuB;AAE7B,IAAM,YAAY,CAAC,cAAc,oBAAoB,gBAAgB,oBAAoB;AAIlF,IAAM,sBAAsB,CAAC,cAAc,kBAAkB;AAG7D,IAAM,uCAAuC,CAAC,cAAc,gBAAgB,oBAAoB;AAEhG,IAAM,uBAAiC,CAAC,YAAY;AACpD,IAAM,wBAAkC,CAAC;AACzC,IAAM,wBAAkC,CAAC;AACzC,IAAM,qCAA+C,CAAC,gBAAgB,oBAAoB;AAEjG,SAAS,UAAU,UAAuC;AACxD,SAAO,UAAU,SAAS,QAAmB;AAC/C;AAEA,SAAS,WAAW,aAAwC;AAC1D,SAAO,aAAa,iBAAiB;AACvC;AAEA,SAAS,QAAQ,aAAwC;AACvD,SAAO,aAAa,iBAAiB,SAAS,YAAY,oBAAoB;AAChF;AAEA,SAAS,cAAc,aAAwC;AAC7D,SAAO,aAAa,oBAAoB;AAC1C;AAEA,SAAS,eAAe,KAAc,aAAmD;AACvF,UAAQ,KAAK;AAAA,IACX,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,WAAW,WAAW;AAAA,IAC/B,KAAK;AACH,aAAO,QAAQ,WAAW;AAAA,IAC5B,KAAK;AACH,aAAO,cAAc,WAAW;AAAA,EACpC;AACF;AAGO,SAAS,uBACd,UACA,aACA,WACS;AACT,MAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,aAAW,YAAY,WAAW;AAChC,QAAI,UAAU,QAAQ,GAAG;AACvB,UAAI,eAAe,UAAU,WAAW,EAAG,QAAO;AAAA,IACpD,WAAW,aAAa,UAAU;AAChC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAOO,SAAS,qBACd,UACA,aACA,WACS;AACT,MAAI,CAAC,WAAW,OAAQ,QAAO;AAC/B,SAAO,uBAAuB,UAAU,aAAa,SAAS;AAChE;AAGO,SAAS,cAAc,QAKlB;AACV,QAAM,EAAE,UAAU,aAAa,iBAAiB,iBAAiB,IAAI;AACrE,MAAI,CAAC,uBAAuB,UAAU,aAAa,eAAe,EAAG,QAAO;AAC5E,MAAI,uBAAuB,UAAU,aAAa,gBAAgB,EAAG,QAAO;AAC5E,SAAO;AACT;AAGO,SAAS,iBAAiB,WAAoD;AACnF,MAAI,CAAC,UAAW,QAAO,CAAC;AACxB,SAAO,UAAU,OAAO,OAAK,CAAC,UAAU,CAAC,CAAC;AAC5C;AAEO,SAAS,oBAAoB,WAAmD;AACrF,SAAO,CAAC,CAAC,WAAW,SAAS,YAAY;AAC3C;","names":[]}