@withbuddi/buddi 0.1.0-pre.21 → 0.1.0-pre.22

package/packages/tools/mcp/dist/testing/fake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake.js","sourceRoot":"","sources":["../../src/testing/fake.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAGnG,MAAM,CAAC,MAAM,OAAO,GAAG,8BAA8B,CAAC;AACtD,MAAM,CAAC,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAuBrD,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE;QACvF,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE;gBAC5B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D,EAAE;gBAC/G,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,gCAAgC,EAAE,IAAI,EAAE,SAAS,EAAE;gBACjF,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE;aACtF,EAAE,CAAC;KACL;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;QAC/F,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE;QAC5D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;KAC3F;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QACzE,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;KACvC;CACF,CAAC;AAEF,MAAM,OAAO,IAAI;IAcM;IAbrB,KAAK,CAAa;IACT,KAAK,GAA4E,EAAE,CAAC;IACpF,UAAU,GAAmC,EAAE,CAAC;IAChD,aAAa,GAAkC,EAAE,CAAC;IAC3D,+CAA+C;IAC/C,UAAU,GAAG,UAAU,CAAC;IACxB,4CAA4C;IAC5C,aAAa,GAAG,KAAK,CAAC;IACtB,oEAAoE;IACpE,IAAI,GAAG,KAAK,CAAC;IACb,8DAA8D;IAC9D,KAAK,GAAG,CAAC,CAAC;IACV,MAAM,GAAG,CAAC,CAAC;IACX,YAAqB,UAAuB,EAAE;QAAzB,YAAO,GAAP,OAAO,CAAkB;QAC5C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,aAAa,CAAC;IAC9C,CAAC;IAED,SAAS,GAAkB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,uCAAuC,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC9C,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACpI,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACvD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;gBACzF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAAkC;QACxD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,UAAU,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACpF,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,kHAAkH,EAAE,CAAC,CAAC;QACpK,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9H,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5D,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAU;SACvE,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAU,CAAC;QACnH,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QAClJ,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,CAAM,EAAE,IAAkC;QAClD,IAAI,CAAC,CAAC,QAAQ,KAAK,yCAAyC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC/B,MAAM,EAAE,SAAS;gBACjB,sBAAsB,EAAE,GAAG,SAAS,YAAY;gBAChD,cAAc,EAAE,GAAG,SAAS,QAAQ;gBACpC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,WAAW,EAAE,CAAC;gBAClG,gCAAgC,EAAE,CAAC,MAAM,CAAC;aAC3C,CAAC,CAAC,CAAC;QACN,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAA4B,CAAC;YACtE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,MAAM,CAAC,UAAU,KAAK,oBAAoB,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;YAC9H,IAAI,MAAM,CAAC,UAAU,KAAK,eAAe,IAAI,IAAI,CAAC,aAAa;gBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;YAChH,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;gBAC/B,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI;gBAC/F,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY;aAClG,CAAC,CAAC,CAAC;QACN,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxB,CAAC;CACF;AAED,MAAM,UAAU,KAAK,CAAC,MAAc,EAAE,IAAqB,EAAE,UAAkC,EAAE;IAC/F,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC3F,OAAO;QACL,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QACjC,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;QAC1B,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,EAAE;QACrE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACxC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB;KAClH,CAAC;AACJ,CAAC"}

package/packages/tools/mcp/dist/tiers.d.ts

@@ -0,0 +1,51 @@
+import type { JSONSchema7 } from '@buddi/core/plugin';
+/** A tool as the server lists it (`tools/list`), the fields buddi reads. */
+export interface ServerTool {
+    name: string;
+    title?: string;
+    description?: string;
+    inputSchema: JSONSchema7;
+    annotations?: {
+        title?: string;
+        readOnlyHint?: boolean;
+        destructiveHint?: boolean;
+        idempotentHint?: boolean;
+        openWorldHint?: boolean;
+    };
+}
+export type ToolTier = 'auto' | 'gated';
+/** The plugin's namespace: `mcp.<connection>.<tool>`. */
+export declare const NAMESPACE = "mcp";
+/**
+ * The tier the review assigns (spec §3): `readOnlyHint: true` is `auto`;
+ * everything else is gated. `destructiveHint: true` is gated and never
+ * remembered; a tool with no annotations is gated like any other write.
+ */
+export declare function tierOf(tool: Pick<ServerTool, 'annotations'>): {
+    tier: ToolTier;
+    destructive: boolean;
+};
+/** Whether the server said anything at all about this tool's effect. */
+export declare function annotated(tool: Pick<ServerTool, 'annotations'>): boolean;
+export declare const SLUG: RegExp;
+/** A slug from a server's name or host: `GitHub MCP Server` → `github`. */
+export declare function suggestSlug(name: string, taken?: ReadonlySet<string>): string;
+/**
+ * The last part of `mcp.<connection>.<tool>`: what a model provider can carry
+ * (letters, digits, `_`, `-`), unique within the connection. The server's own
+ * name is kept beside it and is what a call sends.
+ */
+export declare function localNames(names: readonly string[]): Map<string, string>;
+/** JSON with object keys sorted, so equal values hash equal. */
+export declare function stableJson(value: unknown): string;
+/**
+ * Why an input schema cannot be registered, or null when it can. `compile`
+ * is the registry's own validator (core's `compileJsonSchema`), when the
+ * caller has it; the shape rules are checked here either way.
+ */
+export declare function schemaProblem(schema: unknown, compile?: (schema: JSONSchema7) => void): string | null;
+/** One tool, as reviewed: what changes it changes what the owner read. */
+export declare function toolHash(tool: ServerTool): string;
+/** The whole list, order-free. */
+export declare function listHash(tools: readonly ServerTool[]): string;
+//# sourceMappingURL=tiers.d.ts.map

package/packages/tools/mcp/dist/tiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tiers.d.ts","sourceRoot":"","sources":["../src/tiers.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,CAAC,EAAE;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;CACH;AAED,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAExC,yDAAyD;AACzD,eAAO,MAAM,SAAS,QAAQ,CAAC;AAE/B;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAKtG;AAED,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,OAAO,CAGxE;AAED,eAAO,MAAM,IAAI,QAA4B,CAAC;AAE9C,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,WAAW,CAAC,MAAM,CAAa,GAAG,MAAM,CAUxF;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxE;AAED,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKjD;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,GAAG,IAAI,CAWrG;AAMD,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAOjD;AAED,kCAAkC;AAClC,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,MAAM,CAE7D"}

package/packages/tools/mcp/dist/tiers.js

@@ -0,0 +1,106 @@
+/**
+ * How a server's tool becomes a buddi tool (docs/connections.md, "Review"):
+ * its name under `mcp.<connection>.`, its tier from the server's annotations,
+ * whether its input schema can be used at all, and the hash the review keeps.
+ */
+import { createHash } from 'node:crypto';
+/** The plugin's namespace: `mcp.<connection>.<tool>`. */
+export const NAMESPACE = 'mcp';
+/**
+ * The tier the review assigns (spec §3): `readOnlyHint: true` is `auto`;
+ * everything else is gated. `destructiveHint: true` is gated and never
+ * remembered; a tool with no annotations is gated like any other write.
+ */
+export function tierOf(tool) {
+    const a = tool.annotations;
+    const destructive = a?.destructiveHint === true;
+    if (a?.readOnlyHint === true && !destructive)
+        return { tier: 'auto', destructive: false };
+    return { tier: 'gated', destructive };
+}
+/** Whether the server said anything at all about this tool's effect. */
+export function annotated(tool) {
+    const a = tool.annotations;
+    return a !== undefined && (a.readOnlyHint !== undefined || a.destructiveHint !== undefined || a.idempotentHint !== undefined || a.openWorldHint !== undefined);
+}
+export const SLUG = /^[a-z][a-z0-9_-]{0,23}$/;
+/** A slug from a server's name or host: `GitHub MCP Server` → `github`. */
+export function suggestSlug(name, taken = new Set()) {
+    const words = name.toLowerCase().replace(/\b(mcp|server|remote|official)\b/g, ' ').replace(/[^a-z0-9]+/g, ' ').trim().split(/\s+/).filter(Boolean);
+    let base = (words.join('_') || 'service').replace(/^[^a-z]+/, '').slice(0, 20) || 'service';
+    if (!SLUG.test(base))
+        base = 'service';
+    if (!taken.has(base))
+        return base;
+    for (let n = 2; n < 1000; n++) {
+        const next = `${base}_${n}`;
+        if (!taken.has(next))
+            return next;
+    }
+    return `${base}_${Date.now() % 10000}`;
+}
+/**
+ * The last part of `mcp.<connection>.<tool>`: what a model provider can carry
+ * (letters, digits, `_`, `-`), unique within the connection. The server's own
+ * name is kept beside it and is what a call sends.
+ */
+export function localNames(names) {
+    const out = new Map();
+    const used = new Set();
+    for (const name of names) {
+        let base = name.replace(/[^A-Za-z0-9_-]/g, '_').replace(/^_+|_+$/g, '').slice(0, 64) || 'tool';
+        let local = base;
+        for (let n = 2; used.has(local.toLowerCase()); n++)
+            local = `${base.slice(0, 60)}_${n}`;
+        used.add(local.toLowerCase());
+        out.set(name, local);
+    }
+    return out;
+}
+/** JSON with object keys sorted, so equal values hash equal. */
+export function stableJson(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value) ?? 'null';
+    if (Array.isArray(value))
+        return `[${value.map(stableJson).join(',')}]`;
+    const entries = Object.entries(value).filter(([, v]) => v !== undefined).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${stableJson(v)}`).join(',')}}`;
+}
+/**
+ * Why an input schema cannot be registered, or null when it can. `compile`
+ * is the registry's own validator (core's `compileJsonSchema`), when the
+ * caller has it; the shape rules are checked here either way.
+ */
+export function schemaProblem(schema, compile) {
+    if (schema === null || typeof schema !== 'object' || Array.isArray(schema))
+        return 'its input schema is not an object';
+    const s = schema;
+    if (s.type !== 'object')
+        return 'its input is not an object';
+    if (s.anyOf !== undefined || s.oneOf !== undefined || s.allOf !== undefined)
+        return 'its input is a choice of shapes, which model providers refuse';
+    try {
+        compile?.(s);
+    }
+    catch (err) {
+        return err instanceof Error ? err.message : String(err);
+    }
+    return null;
+}
+function sha256(text) {
+    return createHash('sha256').update(text).digest('hex');
+}
+/** One tool, as reviewed: what changes it changes what the owner read. */
+export function toolHash(tool) {
+    return sha256(stableJson({
+        name: tool.name,
+        description: tool.description ?? '',
+        inputSchema: tool.inputSchema ?? null,
+        annotations: tool.annotations ?? null,
+    }));
+}
+/** The whole list, order-free. */
+export function listHash(tools) {
+    return sha256(tools.map(toolHash).sort().join('\n'));
+}
+//# sourceMappingURL=tiers.js.map

package/packages/tools/mcp/dist/tiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tiers.js","sourceRoot":"","sources":["../src/tiers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAoBzC,yDAAyD;AACzD,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,IAAqC;IAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAC3B,MAAM,WAAW,GAAG,CAAC,EAAE,eAAe,KAAK,IAAI,CAAC;IAChD,IAAI,CAAC,EAAE,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC1F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,IAAqC;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAC3B,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC;AACjK,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,yBAAyB,CAAC;AAE9C,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAA6B,IAAI,GAAG,EAAE;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnJ,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;IAC5F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,SAAS,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAwB;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;QAC/F,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE;YAAE,KAAK,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrJ,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe,EAAE,OAAuC;IACpF,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,mCAAmC,CAAC;IACvH,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,4BAA4B,CAAC;IAC7D,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,+DAA+D,CAAC;IACpJ,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,QAAQ,CAAC,IAAgB;IACvC,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;KACtC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,QAAQ,CAAC,KAA4B;IACnD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/packages/tools/mcp/dist/tokens.d.ts

@@ -0,0 +1,35 @@
+/**
+ * A connection's tokens: one vault entry, the shared `OAuthTokens` envelope
+ * (docs/connections.md, "Tokens"), refreshed under the shared discipline.
+ *
+ * The entry is `MCP_CONNECTION_<id>`. Its `extra.tokenEndpoint` says where a
+ * refresh goes, so a refresh needs no discovery. Nothing here returns a token
+ * to anything but the fetch that puts it in a header, and no error carries one.
+ */
+import type { Pool } from 'pg';
+import type { OAuthPort, OAuthTokens, VaultPort } from './ports.js';
+/** The vault name for a connection: environment-variable shaped, as every vault name is. */
+export declare function vaultRefFor(connectionId: string): string;
+/** The tokens are gone, expired without a refresh, or refused: the owner signs in again. */
+export declare class ReconnectNeeded extends Error {
+    readonly name = "ReconnectNeeded";
+}
+export interface TokenKeeperOptions {
+    vault: VaultPort | undefined;
+    oauth: OAuthPort;
+    /** For the cross-process refresh lock. Without one, only this process is serialised. */
+    pool?: Pick<Pool, 'connect'>;
+    /** A token was saved or removed: the output scrubber rebuilds. */
+    changed?: () => void;
+}
+export declare class TokenKeeper {
+    #private;
+    readonly options: TokenKeeperOptions;
+    constructor(options: TokenKeeperOptions);
+    get available(): boolean;
+    save(ref: string, tokens: OAuthTokens): Promise<void>;
+    remove(ref: string): Promise<void>;
+    /** A fresh access token for `ref`, renewed first when it expires within five minutes. */
+    accessToken(ref: string): Promise<string>;
+}
+//# sourceMappingURL=tokens.d.ts.map

package/packages/tools/mcp/dist/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEpE,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,4FAA4F;AAC5F,qBAAa,eAAgB,SAAQ,KAAK;IACxC,SAAkB,IAAI,qBAAqB;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,wFAAwF;IACxF,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7B,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAWD,qBAAa,WAAW;;IAEV,QAAQ,CAAC,OAAO,EAAE,kBAAkB;gBAA3B,OAAO,EAAE,kBAAkB;IAEhD,IAAI,SAAS,IAAI,OAAO,CAA6C;IAO/D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxC,yFAAyF;IACnF,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAiChD"}

package/packages/tools/mcp/dist/tokens.js

@@ -0,0 +1,75 @@
+/** The vault name for a connection: environment-variable shaped, as every vault name is. */
+export function vaultRefFor(connectionId) {
+    return `MCP_CONNECTION_${connectionId.replace(/-/g, '')}`;
+}
+/** The tokens are gone, expired without a refresh, or refused: the owner signs in again. */
+export class ReconnectNeeded extends Error {
+    name = 'ReconnectNeeded';
+}
+const MESSAGES = {
+    invalid: 'The saved sign-in for this connection cannot be read. Reconnect it.',
+    missing: 'This connection has no sign-in. Reconnect it.',
+    interrupted: 'The last renewal of this connection\'s sign-in did not finish. Reconnect it.',
+    refreshFailed: 'The service refused to renew this connection\'s sign-in. Reconnect it.',
+    unsaved: 'The renewed sign-in could not be saved. Reconnect this connection.',
+    cannotRenew: 'This sign-in cannot be renewed. Reconnect this connection.',
+};
+export class TokenKeeper {
+    options;
+    #inflight = new Map();
+    constructor(options) {
+        this.options = options;
+    }
+    get available() { return this.options.vault !== undefined; }
+    #vault() {
+        if (!this.options.vault)
+            throw new Error('This installation has no vault, so a connection cannot keep its sign-in. Turn the vault on first.');
+        return this.options.vault;
+    }
+    async save(ref, tokens) {
+        await this.#vault().set(ref, JSON.stringify({ ...tokens, state: 'ready' }));
+        this.options.changed?.();
+    }
+    async remove(ref) {
+        await this.#vault().delete(ref);
+        this.options.changed?.();
+    }
+    /** A fresh access token for `ref`, renewed first when it expires within five minutes. */
+    async accessToken(ref) {
+        let running = this.#inflight.get(ref);
+        if (!running) {
+            running = this.#fresh(ref).finally(() => this.#inflight.delete(ref));
+            this.#inflight.set(ref, running);
+        }
+        return (await running).accessToken;
+    }
+    async #fresh(ref) {
+        const run = () => this.options.oauth.fresh(this.#vault(), ref, MESSAGES);
+        try {
+            if (!this.options.pool)
+                return await run();
+            const client = await this.options.pool.connect();
+            try {
+                await client.query('begin');
+                await client.query("select pg_advisory_xact_lock(hashtext('buddi-mcp-oauth'), hashtext($1))", [ref]);
+                const out = await run();
+                await client.query('commit');
+                return out;
+            }
+            catch (error) {
+                await client.query('rollback').catch(() => { });
+                throw error;
+            }
+            finally {
+                client.release();
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error && Object.values(MESSAGES).includes(error.message)
+                ? error.message
+                : 'This connection\'s sign-in could not be read. Reconnect it.';
+            throw new ReconnectNeeded(message);
+        }
+    }
+}
+//# sourceMappingURL=tokens.js.map

package/packages/tools/mcp/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAWA,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,YAAoB;IAC9C,OAAO,kBAAkB,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,4FAA4F;AAC5F,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACtB,IAAI,GAAG,iBAAiB,CAAC;CAC5C;AAWD,MAAM,QAAQ,GAAG;IACf,OAAO,EAAE,qEAAqE;IAC9E,OAAO,EAAE,+CAA+C;IACxD,WAAW,EAAE,8EAA8E;IAC3F,aAAa,EAAE,wEAAwE;IACvF,OAAO,EAAE,oEAAoE;IAC7E,WAAW,EAAE,4DAA4D;CAC1E,CAAC;AAEF,MAAM,OAAO,WAAW;IAED;IADZ,SAAS,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC7D,YAAqB,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAEpD,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;IAErE,MAAM;QACJ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;QAC9I,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,MAAmB;QACzC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,WAAW,CAAC,GAAW;QAC3B,IAAI,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,MAAM,OAAO,CAAC,CAAC,WAAW,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,GAAG,GAAG,GAAyB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/F,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,OAAO,MAAM,GAAG,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,yEAAyE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrG,MAAM,GAAG,GAAG,MAAM,GAAG,EAAE,CAAC;gBACxB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvF,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,6DAA6D,CAAC;YAClE,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;CACF"}

package/packages/tools/mcp/migrations/001_connections.sql

@@ -0,0 +1,49 @@
+-- Connections (docs/connections.md): remote MCP servers the owner connected,
+-- and the tools each one brought, as the owner reviewed them.
+-- Applied with search_path = mcp, public.
+--
+-- No token is ever here. A connection's OAuth envelope lives in the vault
+-- under `vault_ref` (`MCP_CONNECTION_<id>`); this schema holds only its name.
+
+create table if not exists connections (
+  id uuid primary key default gen_random_uuid(),
+  -- The `<connection>` of `mcp.<connection>.<tool>`: chosen at review, unique.
+  -- Null until the owner has reviewed the connection's tools.
+  slug text unique check (slug is null or slug ~ '^[a-z][a-z0-9_-]{0,23}$'),
+  name text not null,
+  url text not null,
+  host text not null,
+  state text not null default 'pending-review'
+    check (state in ('connected', 'needs-reconnect', 'unreachable', 'pending-review')),
+  auth_kind text not null default 'none' check (auth_kind in ('none', 'oauth')),
+  -- The client id buddi registered (or the owner typed) at the authorization server.
+  client_id text,
+  -- Whether `client_id` came from dynamic registration or from the owner.
+  client_source text check (client_source is null or client_source in ('dynamic', 'manual')),
+  vault_ref text,
+  server_name text,
+  server_version text,
+  -- sha256 over the reviewed tool list (name, description, schema, annotations).
+  reviewed_hash text,
+  reviewed_at timestamptz,
+  created_at timestamptz not null default now(),
+  updated_at timestamptz not null default now()
+);
+
+create table if not exists tools (
+  connection_id uuid not null references connections (id) on delete cascade,
+  -- The server's own name for the tool, as it is called.
+  name text not null,
+  -- The last part of `mcp.<connection>.<tool>`: the name made safe for a model.
+  local_name text not null,
+  description text not null default '',
+  input_schema jsonb not null,
+  annotations jsonb,
+  tier text not null check (tier in ('auto', 'gated')),
+  destructive boolean not null default false,
+  enabled boolean not null default true,
+  -- sha256 over this tool as it was reviewed.
+  reviewed_hash text not null,
+  primary key (connection_id, name),
+  unique (connection_id, local_name)
+);

package/packages/tools/mcp/migrations/002_review_again.sql

@@ -0,0 +1,15 @@
+-- Connections, slice 3 (docs/connections.md, "Review again" and "Unreachable").
+-- Applied with search_path = mcp, public.
+
+-- A server whose tool list changed since the owner's review waits in
+-- `needs-review`: its unchanged tools keep working, the rest wait.
+alter table connections drop constraint if exists connections_state_check;
+alter table connections add constraint connections_state_check
+  check (state in ('connected', 'needs-reconnect', 'unreachable', 'pending-review', 'needs-review'));
+
+-- When the connection stopped answering; null while it answers.
+alter table connections add column if not exists unreachable_since timestamptz;
+
+-- A reviewed tool the server changed or dropped since the review: not
+-- registered until the owner reviews the connection again.
+alter table tools add column if not exists changed boolean not null default false;

package/packages/tools/mcp/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@buddi/tool-mcp",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing/fake.d.ts",
+      "default": "./dist/testing/fake.js"
+    }
+  },
+  "buddi": {
+    "uses": [],
+    "hostApi": "^1.7"
+  },
+  "scripts": {},
+  "dependencies": {
+    "@buddi/core": "file:../../core",
+    "@modelcontextprotocol/sdk": "1.30.1",
+    "pg": "^8.13.1",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {},
+  "files": [
+    "dist",
+    "migrations"
+  ]
+}