@uluops/registry-mcp 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,152 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Changed
+
+- Bumps `@uluops/sdk-core` from `^0.9.0` to `0.11.0` (exact pin) and `@uluops/registry-sdk`
+  to `0.30.0` (exact pin). Aligns with the sdk-core schema-removal cascade. The MCP server's
+  own Zod-based tool input parsing is unaffected — it never used sdk-core's `options.schema`.
+
+## [1.14.0] - 2026-05-20
+
+### Changed
+- Custom credential redaction replaced with `sdk-core` `sanitizeString`
+
+## [1.13.0] - 2026-05-18
+
+### Changed
+- `check_forkable` MCP tool renamed to `is_forkable`
+- SDK method calls updated for `registry-sdk` v0.21.0 renames
+
+## [1.12.0] - 2026-05-15
+
+### Changed
+- `forks.getLineage` renamed to `forks.getAncestry` after SDK rename
+
+## [1.11.0] - 2026-05-07
+
+### Added
+- `nextAvailable` version surfaced in 409 conflict MCP response
+
+### Fixed
+- Definition write tool limits bumped to 1MB for large agent YAML files
+
+## [1.10.0] - 2026-04-30
+
+### Added
+- `target` and `model` params on `render_definition` MCP tool
+
+## [1.9.0] - 2026-04-28
+
+### Added
+- 402 `SubscriptionRequired` error handling with `source=mcp` tracking
+
+## [1.8.0] - 2026-04-27
+
+### Added
+- `provenance` input on `create_definition` and `update_definition` tools
+- `authorshipType` filter on `list_definitions` and `search_definitions` tools
+
+## [1.7.0] - 2026-04-15
+
+### Fixed
+- `get_diff_impact` handler parameter access corrected
+
+## [1.6.0] - 2026-04-12
+
+### Added
+- Pagination on `list_versions` tool
+- `format` param on `diff_versions` tool (field-level, unified, summary)
+- Session token authentication as alternative to API keys
+
+## [1.5.0] - 2026-04-09
+
+### Fixed
+- `file_path` resolved before Zod parse in `update_and_publish`
+
+## [1.4.0] - 2026-04-07
+
+### Added
+- `archive_definition` MCP tool
+- `archived` status added to `DefinitionStatusSchema`
+- `is_fork` filter on `list_definitions` and `search_definitions`
+- 8 analytics tools: `get_effectiveness`, `compare_effectiveness`, `get_execution_stats`, `get_evolution`, `get_health`, `get_ecosystem_overview`, `get_translation_analytics`, `get_translator_version`
+
+### Fixed
+- `archive_definition` tool spec added to security registry
+- `isFork` uses camelCase after `normalizeKeys` transformation
+
+## [1.3.0] - 2026-03-29
+
+### Added
+- Org slug support via `ULUOPS_ORG_SLUG` env var
+
+### Fixed
+- Error handling overhauled for actionable agent-facing messages
+
+## [1.2.0] - 2026-03-01
+
+### Added
+- Composite workflow tools: `update_and_publish`, `batch_publish`
+- Summary mode as default for version diff
+- `cognitive-lens` and `explorer` added to domain enum
+- Production URL default so users only need API key
+
+### Fixed
+- String-typed numeric params coerced before Zod validation
+- Symlink traversal prevented in file reads and writes (CWE-59)
+
+## [1.1.0] - 2026-02-21
+
+### Added
+- `file_path` parameter on `create_definition`, `validate_definition`, `update_definition`, and `upgrade_definition` — read YAML from disk
+- `output_path` on `render_definition` for direct file writing
+- Session defaults, richer search, and response field selection
+- Smart version-up on published or missing versions in `update_definition`
+- Mutation tool responses trimmed of `yaml`/`runtimeMd` for conciseness
+- `fields` meta-parameter exposed in MCP tool schemas
+
+### Security
+- Directory containment on `output_path` in `render_definition` (CWE-22)
+- Directory containment on `file_path` in YAML tools (CWE-22)
+
+### Fixed
+- Redundant type assertions removed in `trimDefinitionResponse`
+- Template expression safety for `fsError.code` in `readYamlFile`
+- Double assertion pattern replaced with runtime type guard
+- Dynamic imports replaced with static imports in `render_definition` catch block
+- 70+ ship pipeline validation issues resolved across security, docs, type safety, and tests
+
+## [1.0.0] - 2026-02-16
+
+### Added
+- Initial release of UluOps Registry MCP client
+- 31 tools across 8 domains: definitions, models, versions, dependencies, forks, executions, translation, users
+- 4 resources via `registry://` URI scheme
+- `createToolHandler` factory with Zod validation, snake_case→camelCase normalization, and SDK error mapping
+- Security hardening via `mcp-secure-server` with per-tool rate limits and payload size controls
+- Error sanitization stripping sensitive data (API keys, tokens, stack traces) from MCP responses
+- Test suite with 194 tests covering all tools, resources, and registry config
+
+[Unreleased]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.14.0...HEAD
+[1.14.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.13.0...v1.14.0
+[1.13.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.12.0...v1.13.0
+[1.12.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.11.0...v1.12.0
+[1.11.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.10.0...v1.11.0
+[1.10.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.9.0...v1.10.0
+[1.9.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.8.0...v1.9.0
+[1.8.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.7.0...v1.8.0
+[1.7.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.6.0...v1.7.0
+[1.6.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.5.0...v1.6.0
+[1.5.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.4.0...v1.5.0
+[1.4.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.3.0...v1.4.0
+[1.3.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.2.0...v1.3.0
+[1.2.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.1.0...v1.2.0
+[1.1.0]: https://github.com/Uluops/-uluops-registry-mcp/compare/v1.0.0...v1.1.0
+[1.0.0]: https://github.com/Uluops/-uluops-registry-mcp/releases/tag/v1.0.0

package/README.md

@@ -0,0 +1,228 @@
+# UluOps Registry MCP Client v1.1.0
+
+MCP (Model Context Protocol) client for the UluOps Registry API. Provides **31 tools** and **4 resources** that enable Claude Code to browse, create, validate, and manage AI workflow definitions (agents, commands, workflows, pipelines).
+
+## Quick Setup (30 seconds)
+
+```bash
+git clone git@github.com:Uluops/-uluops-registry-mcp.git
+cd -uluops-registry-mcp
+./setup.sh YOUR_API_KEY
+```
+
+The setup script installs dependencies, builds the project, and prints the `.mcp.json` config snippet to paste into your project or `~/.claude/.mcp.json`.
+
+Or do it manually:
+
+```bash
+npm install && npm run build
+```
+
+Then add to your `.mcp.json`:
+
+```json
+{
+  "mcpServers": {
+    "uluops-registry": {
+      "command": "node",
+      "args": ["/absolute/path/to/registry-uluops-mcp/dist/index.js"],
+      "env": {
+        "ULUOPS_REGISTRY_URL": "http://localhost:3001/api/v1",
+        "ULUOPS_API_KEY": "your-api-key"
+      }
+    }
+  }
+}
+```
+
+Restart Claude Code to pick up the new server.
+
+## Design Philosophy
+
+**Thin Client Pattern**: This MCP client contains **zero business logic**. All data processing, validation, storage, and rendering are handled by the registry API. The client's sole responsibility is protocol translation between MCP's stdio-based JSON-RPC and the backend's REST API.
+
+## Configuration
+
+All configuration is passed via environment variables in the `env` block of `.mcp.json`. No `.env` file needed.
+
+| Variable | Description | Required | Default |
+|----------|-------------|----------|---------|
+| `ULUOPS_REGISTRY_URL` | Registry API URL | Yes | - |
+| `ULUOPS_API_KEY` | API authentication key | Yes | - |
+| `ULUOPS_REGISTRY_TIMEOUT` | Request timeout (ms) | No | 30000 |
+| `ULUOPS_REGISTRY_RETRIES` | Retry attempts | No | 3 |
+| `LOG_LEVEL` | Logging level | No | info |
+| `ENABLE_FILE_LOGGING` | Write logs to disk | No | false |
+| `LOG_DIR` | Log file directory | No | ./logs |
+| `VERBOSE_LOGGING` | Verbose security decision logging | No | false |
+| `LOG_PERFORMANCE_METRICS` | Log performance metrics | No | false |
+| `WORKSPACE_DIR` | Base directory for `file_path` containment (CWE-22 protection) | No | cwd |
+| `OUTPUT_BASE_DIR` | Base directory for `output_path` containment (CWE-22 protection) | No | cwd |
+
+A `.env.example` is included as a template showing available variables. This file is **not** auto-loaded — copy it to `.env` or set variables directly in `.mcp.json`.
+
+## Quick Start Examples
+
+Once configured, Claude Code can use the registry tools:
+
+```jsonc
+// These are MCP tool calls — Claude Code invokes them automatically.
+
+// Browse published definitions
+list_definitions({ "type": "agent", "status": "published", "limit": 10 })
+
+// Get a specific definition with its rendered YAML
+get_definition({ type: "agent", name: "code-validator", include_yaml: true })
+
+// Search across all definition types
+search_definitions({ query: "validation", type: "agent" })
+
+// Resolve a model alias
+resolve_alias({ alias: "sonnet" })
+
+// Validate YAML before publishing
+validate_definition({ type: "agent", yaml: "..." })
+
+// Or validate from a file path instead of inline YAML
+validate_definition({ type: "agent", file_path: "/path/to/agent.yaml" })
+
+// Create and publish a definition
+create_definition({ type: "agent", name: "my-agent", yaml: "name: my-agent\nversion: 1.0.0\n..." })
+publish_definition({ type: "agent", name: "my-agent", version: "1.0.0" })
+
+// Compare versions — section summary (default)
+diff_versions({ type: "agent", name: "code-validator", from: "1.0.0", to: "1.1.0" })
+
+// Compare versions — structural diff with classification
+diff_versions({ type: "agent", name: "code-validator", from: "1.0.0", to: "1.1.0", format: "fields" })
+// Returns: fields[], classified[], suggestedBump, summary, sections
+
+// Compare versions — unified line diff
+diff_versions({ type: "agent", name: "code-validator", from: "1.0.0", to: "1.1.0", format: "unified" })
+// Returns: unified (git-style diff string)
+```
+
+## Available Tools
+
+### Core Tools (P0)
+| Tool | Description |
+|------|-------------|
+| `list_definitions` | List definitions with filters (type, status, domain, visibility, search, tags, pagination) |
+| `get_definition` | Get a single definition by type+name, optionally with YAML/runtime/refs |
+| `search_definitions` | Search definitions by keyword |
+| `list_models` | List AI models with optional filters |
+| `resolve_alias` | Resolve alias (e.g. "sonnet") to provider+modelId |
+| `validate_definition` | Validate YAML without storing (accepts `yaml` or `file_path`) |
+| `render_definition` | Get rendered markdown for a definition. Use `output_path` to write directly to a file |
+
+### Definition Management Tools (P1)
+| Tool | Description |
+|------|-------------|
+| `create_definition` | Create a new draft definition (accepts `yaml` or `file_path`) |
+| `update_definition` | Update a draft definition (`yaml`/`file_path`, visibility, description, tags). Smart version-up: if the target version is published or doesn't exist and YAML is provided, automatically creates a new draft instead of failing |
+| `publish_definition` | Publish a draft definition |
+| `deprecate_definition` | Deprecate with reason and optional successor |
+| `delete_definition` | Delete a draft (published definitions cannot be deleted) |
+
+### Version & Dependency Tools (P1)
+| Tool | Description |
+|------|-------------|
+| `list_versions` | List all versions of a definition |
+| `diff_versions` | Compare two versions. Supports `format`: `sections` (default summary), `fields` (structural diff with classification + suggested bump), `unified` (git-style line diff) |
+| `get_dependencies` | Forward dependency graph |
+| `get_dependents` | Reverse dependency graph |
+| `get_execution_stats` | Execution statistics for a definition version |
+| `list_forks` | List forks of a definition |
+
+### Fork Tools (P2)
+| Tool | Description |
+|------|-------------|
+| `fork_definition` | Fork a definition |
+| `is_forkable` | Check if a definition version can be forked |
+| `get_fork_lineage` | Fork ancestry chain |
+
+### Translation Tools (P2)
+| Tool | Description |
+|------|-------------|
+| `retranslate_definition` | Retranslate with the latest translator version |
+| `upgrade_definition` | Upgrade a definition from legacy format (accepts `yaml` or `file_path`) |
+| `get_translator_version` | Get current translator version |
+
+### Model Tools (P2)
+| Tool | Description |
+|------|-------------|
+| `get_model` | Get specific model details by provider+modelId |
+| `list_providers` | List AI providers |
+| `list_aliases` | List all model aliases |
+| `sync_models` | Sync model catalog (admin) |
+
+### Execution & User Tools (P2)
+| Tool | Description |
+|------|-------------|
+| `record_execution` | Record a definition execution (idempotent) |
+| `get_user` | Get public user profile |
+| `batch_users` | Batch user lookup (max 100) |
+
+## Available Resources
+
+MCP resources provide read-only access to registry data via the `registry://` URI scheme.
+
+| Resource | URI | Description |
+|----------|-----|-------------|
+| Definitions | `registry://definitions` | Published definitions (up to 100) |
+| Models | `registry://models` | AI model catalog |
+| Definition Types | `registry://definition-types` | Static list: agent, command, workflow, pipeline |
+| Providers | `registry://providers` | AI provider list |
+
+### Resource Usage
+
+```typescript
+// List published definitions
+read_resource("registry://definitions")
+
+// Browse available AI models
+read_resource("registry://models")
+
+// Get supported definition types with descriptions
+read_resource("registry://definition-types")
+```
+
+## Rate Limiting Configuration
+
+This client uses [mcp-secure-server](https://github.com/anthropics/mcp-secure-server) with configuration optimized for Claude Code's usage patterns. Source of truth: `src/index.ts` (global) and `src/config/tool-registry.ts` (per-tool).
+
+| Setting | Value | Notes |
+|---------|-------|-------|
+| Security level | `basic` | |
+| Max requests/min | 120 | Global rate limit |
+| Burst threshold | 15 | Requests within burst window |
+| Burst window | 5000ms | |
+| Automation detection | Disabled | Claude Code is trusted automation |
+
+Per-tool quotas are configured in `src/config/tool-registry.ts`. Read-heavy tools (list, get, search) allow up to 240 req/min. Write tools (create, update, publish) are 30-60 req/min. Admin operations like `sync_models` are tightly limited (10 req/min).
+
+## Development
+
+```bash
+# Install dependencies
+npm install
+
+# Development mode with watch
+npm run dev
+
+# Run tests
+npm test
+
+# Type checking
+npm run typecheck
+
+# Linting
+npm run lint
+
+# Build for production
+npm run build
+```
+
+## License
+
+MIT

package/dist/client/sdk-error-mapper.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Error mapper for converting Registry SDK errors to MCP-safe responses
+ *
+ * Maps @uluops/registry-sdk error hierarchy to sanitized MCP tool responses.
+ * Credential redaction delegated to @uluops/sdk-core's sanitizeString().
+ */
+import { sanitizeString } from '@uluops/sdk-core';
+import type { McpToolResponse } from '../types/index.js';
+/**
+ * Sanitize an error message for safe client exposure.
+ * Delegates to @uluops/sdk-core's sanitizeString() for credential redaction
+ * and truncation.
+ */
+export declare const sanitizeErrorMessage: typeof sanitizeString;
+/**
+ * Map an SDK error to an MCP tool response.
+ *
+ * Preserves error context including:
+ * - Original error messages (with credential redaction only)
+ * - HTTP status codes when available
+ * - Retry-after information for rate limits
+ * - Field-level validation details
+ */
+export declare function mapSdkErrorToMcp(error: unknown): McpToolResponse;
+/**
+ * Map a Zod validation error to an MCP tool response.
+ * Shows all validation errors with field paths and expected values.
+ */
+export declare function mapZodErrorToMcp(error: unknown): McpToolResponse;
+//# sourceMappingURL=sdk-error-mapper.d.ts.map

package/dist/client/sdk-error-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-error-mapper.d.ts","sourceRoot":"","sources":["../../src/client/sdk-error-mapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uBAAiB,CAAC;AAkCnD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAqGhE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAahE"}

package/dist/client/sdk-error-mapper.js

@@ -0,0 +1,129 @@
+/**
+ * Error mapper for converting Registry SDK errors to MCP-safe responses
+ *
+ * Maps @uluops/registry-sdk error hierarchy to sanitized MCP tool responses.
+ * Credential redaction delegated to @uluops/sdk-core's sanitizeString().
+ */
+import { isRegistryApiError, isNotFoundError, isRateLimitError, isValidationError, UnauthorizedError, ForbiddenError, isConflictError, isUnprocessableError, } from '@uluops/registry-sdk/errors';
+import { sanitizeString } from '@uluops/sdk-core';
+/**
+ * Sanitize an error message for safe client exposure.
+ * Delegates to @uluops/sdk-core's sanitizeString() for credential redaction
+ * and truncation.
+ */
+export const sanitizeErrorMessage = sanitizeString;
+/** Safely extract a message from an unknown error value */
+function getErrorMessage(error, fallback) {
+    if (error instanceof Error)
+        return error.message;
+    if (typeof error === 'object' && error !== null && 'message' in error) {
+        return String(error.message);
+    }
+    return fallback;
+}
+/** Extract HTTP status code from SDK errors when available */
+function getStatusCode(error) {
+    if (error && typeof error === 'object' && 'statusCode' in error) {
+        return error.statusCode;
+    }
+    return undefined;
+}
+/** Build a structured error response with optional metadata */
+function buildErrorResponse(message, metadata) {
+    const payload = { error: message };
+    if (metadata) {
+        Object.assign(payload, metadata);
+    }
+    return {
+        content: [{ type: 'text', text: JSON.stringify(payload) }],
+        isError: true,
+    };
+}
+/**
+ * Map an SDK error to an MCP tool response.
+ *
+ * Preserves error context including:
+ * - Original error messages (with credential redaction only)
+ * - HTTP status codes when available
+ * - Retry-after information for rate limits
+ * - Field-level validation details
+ */
+export function mapSdkErrorToMcp(error) {
+    const statusCode = getStatusCode(error);
+    if (isNotFoundError(error)) {
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Resource not found')), statusCode ? { status: statusCode } : undefined);
+    }
+    if (isRateLimitError(error)) {
+        const retryAfter = error.retryAfter;
+        return buildErrorResponse(retryAfter
+            ? `Rate limit exceeded. Retry after ${String(retryAfter)} seconds.`
+            : 'Rate limit exceeded, please retry later.', { status: 429, ...(retryAfter ? { retry_after_seconds: retryAfter } : {}) });
+    }
+    if (isValidationError(error)) {
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Invalid request parameters')), statusCode ? { status: statusCode } : undefined);
+    }
+    if (error instanceof UnauthorizedError) {
+        return buildErrorResponse('Authentication required. Verify ULUOPS_API_KEY is set to a valid ulr_* key.', { status: 401 });
+    }
+    if (error instanceof ForbiddenError) {
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Access denied')), { status: 403 });
+    }
+    // 402 Subscription Required — content gating (spec Section 9.2)
+    if (statusCode === 402) {
+        const details = error.details ?? {};
+        const requiredTier = details.requiredTier;
+        const currentTier = details.currentTier;
+        const def = details.definition;
+        const upgradeUrl = details.upgradeUrl;
+        const sep = upgradeUrl?.includes('?') ? '&' : '?';
+        const trackedUrl = upgradeUrl ? `${upgradeUrl}${sep}source=mcp` : undefined;
+        const defLabel = def?.name ? `${def.type ?? 'definition'}/${def.name}` : 'this definition';
+        const tierLabel = requiredTier ? ` Requires ${requiredTier} tier or higher.` : '';
+        const currentLabel = currentTier ? ` Your current tier: ${currentTier}.` : '';
+        return buildErrorResponse(`Subscription required to access ${defLabel}.${tierLabel}${currentLabel}` +
+            (trackedUrl ? ` Upgrade: ${trackedUrl}` : ''), {
+            status: 402,
+            ...(requiredTier ? { required_tier: requiredTier } : {}),
+            ...(currentTier ? { current_tier: currentTier } : {}),
+            ...(def ? { definition: def } : {}),
+            ...(trackedUrl ? { upgrade_url: trackedUrl } : {}),
+        });
+    }
+    if (isConflictError(error)) {
+        // Extract details (e.g. nextAvailable version) from SDK ConflictError
+        const details = 'details' in error
+            ? error.details
+            : undefined;
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Resource conflict')), {
+            ...(statusCode ? { status: statusCode } : {}),
+            ...(details?.nextAvailable ? { nextAvailable: details.nextAvailable } : {}),
+        });
+    }
+    if (isUnprocessableError(error)) {
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Unprocessable request')), statusCode ? { status: statusCode } : undefined);
+    }
+    if (isRegistryApiError(error)) {
+        return buildErrorResponse(sanitizeErrorMessage(getErrorMessage(error, 'Internal server error')), statusCode ? { status: statusCode } : undefined);
+    }
+    if (error instanceof Error) {
+        return buildErrorResponse(sanitizeErrorMessage(error.message));
+    }
+    return buildErrorResponse('An unexpected error occurred');
+}
+/**
+ * Map a Zod validation error to an MCP tool response.
+ * Shows all validation errors with field paths and expected values.
+ */
+export function mapZodErrorToMcp(error) {
+    let message = 'Invalid input parameters';
+    if (error instanceof Error && 'issues' in error) {
+        const zodError = error;
+        const details = zodError.issues
+            .map((e) => `${e.path.join('.')}: ${e.message}`)
+            .join('; ');
+        const count = zodError.issues.length;
+        message = `Validation failed (${String(count)} error${count > 1 ? 's' : ''}): ${details}`;
+    }
+    return buildErrorResponse(message, { status: 400 });
+}
+//# sourceMappingURL=sdk-error-mapper.js.map

package/dist/client/sdk-error-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-error-mapper.js","sourceRoot":"","sources":["../../src/client/sdk-error-mapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIlD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD,2DAA2D;AAC3D,SAAS,eAAe,CAAC,KAAc,EAAE,QAAgB;IACvD,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACtE,OAAO,MAAM,CAAE,KAA8B,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8DAA8D;AAC9D,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;QAChE,OAAQ,KAAgC,CAAC,UAAU,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+DAA+D;AAC/D,SAAS,kBAAkB,CACzB,OAAe,EACf,QAAkC;IAElC,MAAM,OAAO,GAA4B,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC,EAClE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAI,KAAiC,CAAC,UAAU,CAAC;QACjE,OAAO,kBAAkB,CACvB,UAAU;YACR,CAAC,CAAC,oCAAoC,MAAM,CAAC,UAAU,CAAC,WAAW;YACnE,CAAC,CAAC,0CAA0C,EAC9C,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC,EAC1E,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,kBAAkB,CACvB,6EAA6E,EAC7E,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,EAC7D,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAI,KAA+C,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,YAAkC,CAAC;QAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAiC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,UAA0D,CAAC;QAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAgC,CAAC;QAC5D,MAAM,GAAG,GAAG,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,MAAM,QAAQ,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,YAAY,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3F,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,YAAY,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,uBAAuB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9E,OAAO,kBAAkB,CACvB,mCAAmC,QAAQ,IAAI,SAAS,GAAG,YAAY,EAAE;YACzE,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7C;YACE,MAAM,EAAE,GAAG;YACX,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CACF,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,sEAAsE;QACtE,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK;YAChC,CAAC,CAAE,KAA+C,CAAC,OAAO;YAC1D,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,EACjE;YACE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CACF,CAAC;IACJ,CAAC;IAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EACrE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,kBAAkB,CACvB,oBAAoB,CAAC,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC,EACrE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,kBAAkB,CAAC,8BAA8B,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,GAAG,0BAA0B,CAAC;IAEzC,IAAI,KAAK,YAAY,KAAK,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,KAA0B,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACrC,OAAO,GAAG,sBAAsB,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/config/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Configuration loader for registry MCP client
+ *
+ * Loads configuration from environment variables with sensible defaults.
+ */
+import type { RegistryMcpConfig } from '../types/index.js';
+/** Package version read from package.json at module load time. */
+export declare const VERSION: string;
+/**
+ * Load configuration from environment variables.
+ */
+export declare function loadConfig(): RegistryMcpConfig;
+/**
+ * Validate that required configuration is present and well-formed.
+ */
+export declare function validateConfig(config: RegistryMcpConfig): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAY,MAAM,mBAAmB,CAAC;AAKrE,kEAAkE;AAClE,eAAO,MAAM,OAAO,QAAa,CAAC;AA0BlC;;GAEG;AACH,wBAAgB,UAAU,IAAI,iBAAiB,CA2B9C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CA4B9D"}

package/dist/config/index.js

@@ -0,0 +1,92 @@
+/**
+ * Configuration loader for registry MCP client
+ *
+ * Loads configuration from environment variables with sensible defaults.
+ */
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+const { version: pkgVersion } = require('../../package.json');
+/** Package version read from package.json at module load time. */
+export const VERSION = pkgVersion;
+const DEFAULT_BASE_URL = 'https://api.uluops.ai/api/v1/registry';
+const DEFAULT_TIMEOUT = 30000;
+const DEFAULT_RETRIES = 3;
+const DEFAULT_LOG_LEVEL = 'info';
+function parseLogLevel(value) {
+    const validLevels = ['debug', 'info', 'warn', 'error'];
+    if (value !== undefined && value !== '' && validLevels.includes(value)) {
+        return value;
+    }
+    return DEFAULT_LOG_LEVEL;
+}
+function parseBoolean(value, defaultValue) {
+    if (value === undefined)
+        return defaultValue;
+    return value.toLowerCase() === 'true' || value === '1';
+}
+function parseInteger(value, defaultValue) {
+    if (value === undefined)
+        return defaultValue;
+    const parsed = parseInt(value, 10);
+    return isNaN(parsed) ? defaultValue : parsed;
+}
+/**
+ * Load configuration from environment variables.
+ */
+export function loadConfig() {
+    // Treat both unset (undefined) and empty string as "use default" — the test
+    // suite documents this intent. `??` alone would keep empty string as a value.
+    const apiUrl = process.env['ULUOPS_REGISTRY_URL'] || DEFAULT_BASE_URL; // eslint-disable-line @typescript-eslint/prefer-nullish-coalescing
+    const apiKey = process.env['ULUOPS_API_KEY'];
+    const orgSlug = process.env['ULUOPS_ORG_SLUG'];
+    return {
+        api: {
+            baseUrl: apiUrl,
+            apiKey,
+            orgSlug,
+            timeout: parseInteger(process.env['ULUOPS_REGISTRY_TIMEOUT'], DEFAULT_TIMEOUT),
+            retries: parseInteger(process.env['ULUOPS_REGISTRY_RETRIES'], DEFAULT_RETRIES),
+        },
+        server: {
+            name: 'uluops-registry-client',
+            version: pkgVersion,
+        },
+        security: {
+            logLevel: parseLogLevel(process.env['LOG_LEVEL']),
+            enableLogging: parseBoolean(process.env['ENABLE_FILE_LOGGING'], false),
+            logDir: process.env['LOG_DIR'],
+            verboseLogging: parseBoolean(process.env['VERBOSE_LOGGING'], false),
+            logPerformanceMetrics: parseBoolean(process.env['LOG_PERFORMANCE_METRICS'], false),
+        },
+    };
+}
+/**
+ * Validate that required configuration is present and well-formed.
+ */
+export function validateConfig(config) {
+    if (!config.api.baseUrl) {
+        throw new Error('Registry API base URL is required');
+    }
+    try {
+        const parsed = new URL(config.api.baseUrl);
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+            throw new Error(`Registry API URL must use http or https scheme, got: ${parsed.protocol}`);
+        }
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.includes('scheme')) {
+            throw error;
+        }
+        throw new Error(`Invalid Registry API URL: ${config.api.baseUrl}`);
+    }
+    if (config.api.apiKey === undefined || config.api.apiKey === '') {
+        throw new Error('API key is required. Set ULUOPS_API_KEY');
+    }
+    if (config.api.timeout <= 0) {
+        throw new Error('Timeout must be a positive number');
+    }
+    if (config.api.retries < 0) {
+        throw new Error('Retries must be a non-negative number');
+    }
+}
+//# sourceMappingURL=index.js.map