@wrongstack/mcp 0.285.0 → 0.286.0

package/dist/manage.d.ts

@@ -1,4 +1,4 @@
-import type { MCPServerConfig, Permission } from '@wrongstack/core';
+import type { MCPHealthConfig, MCPServerConfig, Permission } from '@wrongstack/core';
 import type { MCPRegistry } from './registry.js';
 /** Transport values accepted from UI surfaces (UI also offers a bare "http"). */
 type TransportInput = 'stdio' | 'sse' | 'streamable-http' | 'http';
@@ -19,6 +19,8 @@ export interface McpServerInput {
     lazy?: boolean | undefined;
     /** Env var names to forward from parent process at spawn time. */
     passthroughEnv?: string[] | undefined;
+    /** Operational-health thresholds (optional; omitted means no threshold checks). */
+    health?: MCPHealthConfig | undefined;
 }
 /** Projected view of one server, merging disk config with live registry state. */
 export interface McpServerInfo {

package/dist/manage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../src/manage.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,iFAAiF;AACjF,KAAK,cAAc,GAAG,OAAO,GAAG,KAAK,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACpC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CACvC;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,qGAAqG;IACrG,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,sDAAsD;IACtD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,WAAW,CAAC;IACtB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,CAAC;CACvD;AA2HD,kFAAkF;AAClF,wBAAsB,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAK3E;AAED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAwC7F;AAED,iFAAiF;AACjF,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAqBhG;AAED,0DAA0D;AAC1D,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CASvF;AAED,8CAA8C;AAC9C,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAWvF;AAED,8CAA8C;AAC9C,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAexF;AAED,oFAAoF;AACpF,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAiBxF;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAWzF"}
+{"version":3,"file":"manage.d.ts","sourceRoot":"","sources":["../src/manage.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,iFAAiF;AACjF,KAAK,cAAc,GAAG,OAAO,GAAG,KAAK,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAEnE,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACpC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACtC,mFAAmF;IACnF,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC;AAED,kFAAkF;AAClF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,qGAAqG;IACrG,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,sDAAsD;IACtD,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;IACnC,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,WAAW,CAAC;IACtB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,CAAC;CACvD;AA6HD,kFAAkF;AAClF,wBAAsB,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAK3E;AAED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAyC7F;AAED,iFAAiF;AACjF,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAsBhG;AAED,0DAA0D;AAC1D,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAUvF;AAED,8CAA8C;AAC9C,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAWvF;AAED,8CAA8C;AAC9C,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAgBxF;AAED,oFAAoF;AACpF,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAiBxF;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAWzF"}

package/dist/manifest-cache.d.ts

@@ -1,4 +1,12 @@
 import type { MCPTool } from './client.js';
+import { type MCPPrompt, type MCPResource, type MCPResourceTemplate, type MCPServerMetadata } from './protocol.js';
+export interface MCPCapabilityManifest {
+    tools: MCPTool[];
+    serverMetadata?: MCPServerMetadata | undefined;
+    resources?: MCPResource[] | undefined;
+    resourceTemplates?: MCPResourceTemplate[] | undefined;
+    prompts?: MCPPrompt[] | undefined;
+}
 /** Stable hash of the fields that define how/where we connect to a server. */
 export declare function manifestConfigHash(cfg: {
     transport: string;
@@ -11,6 +19,13 @@ export declare function manifestConfigHash(cfg: {
  * stored `configHash` no longer matches (server config changed → stale).
  */
 export declare function readManifest(cacheDir: string, name: string, configHash: string): Promise<MCPTool[] | null>;
+/**
+ * Read a complete capability manifest. Legacy tools-only files are accepted and
+ * upgraded in memory, so existing lazy caches remain valid.
+ */
+export declare function readCapabilityManifest(cacheDir: string, name: string, configHash: string): Promise<MCPCapabilityManifest | null>;
 /** Persist a server's discovered tools. Best-effort — IO errors are swallowed. */
 export declare function writeManifest(cacheDir: string, name: string, configHash: string, tools: MCPTool[]): Promise<void>;
+/** Persist a complete capability manifest using an atomic replace. */
+export declare function writeCapabilityManifest(cacheDir: string, name: string, configHash: string, manifest: MCPCapabilityManifest): Promise<void>;
 //# sourceMappingURL=manifest-cache.d.ts.map

package/dist/manifest-cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-cache.d.ts","sourceRoot":"","sources":["../src/manifest-cache.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAO3C,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,GAAG,MAAM,CAQT;AAQD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAS3B;AAED,kFAAkF;AAClF,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,EAAE,GACf,OAAO,CAAC,IAAI,CAAC,CAWf"}
+{"version":3,"file":"manifest-cache.d.ts","sourceRoot":"","sources":["../src/manifest-cache.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EAKvB,MAAM,eAAe,CAAC;AAYvB,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,cAAc,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC/C,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IACtC,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,GAAG,SAAS,CAAC;IACtD,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;CACnC;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,GAAG,MAAM,CAQT;AAQD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAG3B;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CA4BvC;AAED,kFAAkF;AAClF,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,EAAE,GACf,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,sEAAsE;AACtE,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,qBAAqB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/operations.d.ts

@@ -0,0 +1,100 @@
+import type { MCPHealthThresholds } from '@wrongstack/core';
+import type { ConnectionState } from './client.js';
+/** Operator-facing health state. Intentionally separate from transport lifecycle state. */
+export type MCPHealthState = 'disabled' | 'dormant' | 'connecting' | 'healthy' | 'degraded' | 'failed';
+export type MCPFailureKind = 'transport' | 'protocol' | 'tool';
+export type MCPOperationKind = 'connect' | 'reconnect' | 'discover' | 'call' | 'wake' | 'sleep' | 'restart' | 'stop' | 'failure';
+/**
+ * Safe lifecycle event. `reason` is a bounded code owned by WrongStack, never
+ * a server error message, command, URL, tool name, argument, or token.
+ */
+export interface MCPOperationEvent {
+    serverName: string;
+    kind: MCPOperationKind;
+    at: number;
+    connectionState: ConnectionState;
+    healthState: MCPHealthState;
+    reason?: string | undefined;
+    failureKind?: MCPFailureKind | undefined;
+    durationMs?: number | undefined;
+}
+export interface MCPLatencySummary {
+    count: number;
+    lastMs?: number | undefined;
+    minMs?: number | undefined;
+    maxMs?: number | undefined;
+    p50Ms?: number | undefined;
+    p95Ms?: number | undefined;
+}
+export interface MCPServerOperationalHealth {
+    name: string;
+    connectionState: ConnectionState;
+    healthState: MCPHealthState;
+    lastSuccessAt?: number | undefined;
+    lastFailureAt?: number | undefined;
+    lastFailureKind?: MCPFailureKind | undefined;
+    lastReason?: string | undefined;
+    consecutiveFailures: number;
+    failures: Record<MCPFailureKind, number>;
+    reconnectCount: number;
+    wakeCount: number;
+    sleepCount: number;
+    restartCount: number;
+    connectionLatency: MCPLatencySummary;
+    discoveryLatency: MCPLatencySummary;
+    callLatency: MCPLatencySummary;
+    inFlightCalls: number;
+    peakInFlightCalls: number;
+    recentEvents: MCPOperationEvent[];
+    /** Last evaluation of configured health thresholds; empty if none configured. */
+    healthChecks: MCPHealthCheckResult[];
+}
+/** Result of comparing one operational metric against its configured threshold. */
+export interface MCPHealthCheckResult {
+    name: string;
+    passed: boolean;
+    value?: number | undefined;
+    threshold?: number | undefined;
+}
+export type MCPOperationListener = (event: Readonly<MCPOperationEvent>) => void;
+export declare const MCP_OPERATION_LIMITS: Readonly<{
+    LATENCY_SAMPLES: 128;
+    RECENT_EVENTS: 32;
+    REASON_CHARS: 64;
+}>;
+export interface MCPServerOperationState {
+    lastSuccessAt?: number | undefined;
+    lastFailureAt?: number | undefined;
+    lastFailureKind?: MCPFailureKind | undefined;
+    lastReason?: string | undefined;
+    consecutiveFailures: number;
+    failures: Record<MCPFailureKind, number>;
+    reconnectCount: number;
+    wakeCount: number;
+    sleepCount: number;
+    restartCount: number;
+    connectionSamples: number[];
+    discoverySamples: number[];
+    callSamples: number[];
+    inFlightCalls: number;
+    peakInFlightCalls: number;
+    recentEvents: MCPOperationEvent[];
+}
+export declare function createMCPServerOperationState(): MCPServerOperationState;
+export declare function healthStateFor(connectionState: ConnectionState, operations: MCPServerOperationState, enabled?: boolean): MCPHealthState;
+/**
+ * Compare bounded latency/in-flight samples against configured thresholds.
+ * Returns one check per configured threshold. All thresholds are optional;
+ * omitted thresholds produce no check and cannot mark a server degraded.
+ */
+export declare function evaluateHealthThresholds(operations: MCPServerOperationState, thresholds: MCPHealthThresholds | undefined): MCPHealthCheckResult[];
+/**
+ * Apply threshold checks to a lifecycle-derived health state. Only `healthy`
+ * can be downgraded to `degraded`; existing degraded/failed states are kept
+ * so the original lifecycle reason remains authoritative.
+ */
+export declare function applyHealthThresholds(state: MCPHealthState, checks: readonly MCPHealthCheckResult[]): MCPHealthState;
+export declare function summarizeLatency(samples: readonly number[]): MCPLatencySummary;
+export declare function pushBounded<T>(target: T[], value: T, limit: number): void;
+export declare function safeOperationReason(reason: string): string;
+//# sourceMappingURL=operations.d.ts.map

package/dist/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../src/operations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,2FAA2F;AAC3F,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,SAAS,GACT,YAAY,GACZ,SAAS,GACT,UAAU,GACV,QAAQ,CAAC;AAEb,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE/D,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,WAAW,GACX,UAAU,GACV,MAAM,GACN,MAAM,GACN,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,cAAc,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,WAAW,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,cAAc,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,iFAAiF;IACjF,YAAY,EAAE,oBAAoB,EAAE,CAAC;CACtC;AAED,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;AAEhF,eAAO,MAAM,oBAAoB;;;;EAI/B,CAAC;AAuBH,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAED,wBAAgB,6BAA6B,IAAI,uBAAuB,CAevE;AAED,wBAAgB,cAAc,CAC5B,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,uBAAuB,EACnC,OAAO,UAAO,GACb,cAAc,CAahB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,uBAAuB,EACnC,UAAU,EAAE,mBAAmB,GAAG,SAAS,GAC1C,oBAAoB,EAAE,CAuCxB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,SAAS,oBAAoB,EAAE,GACtC,cAAc,CAGhB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,iBAAiB,CAW9E;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAGzE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI1D"}

package/dist/protocol.d.ts

@@ -0,0 +1,91 @@
+/** Typed MCP protocol surface for server discovery, resources, and prompts. */
+export interface MCPImplementationInfo {
+    name: string;
+    version: string;
+    title?: string | undefined;
+}
+export interface MCPServerCapabilities {
+    tools?: {
+        listChanged?: boolean | undefined;
+    } | undefined;
+    resources?: {
+        subscribe?: boolean | undefined;
+        listChanged?: boolean | undefined;
+    } | undefined;
+    prompts?: {
+        listChanged?: boolean | undefined;
+    } | undefined;
+    logging?: Record<string, never> | undefined;
+    [capability: string]: unknown;
+}
+export interface MCPServerMetadata {
+    protocolVersion: string;
+    capabilities: MCPServerCapabilities;
+    serverInfo: MCPImplementationInfo;
+    instructions?: string | undefined;
+}
+export interface MCPResource {
+    uri: string;
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    mimeType?: string | undefined;
+    size?: number | undefined;
+    annotations?: Record<string, unknown> | undefined;
+}
+export interface MCPResourceTemplate {
+    uriTemplate: string;
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    mimeType?: string | undefined;
+    annotations?: Record<string, unknown> | undefined;
+}
+export interface MCPResourceContents {
+    uri: string;
+    mimeType?: string | undefined;
+    text?: string | undefined;
+    blob?: string | undefined;
+}
+export interface MCPPromptArgument {
+    name: string;
+    description?: string | undefined;
+    required?: boolean | undefined;
+}
+export interface MCPPrompt {
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    arguments?: MCPPromptArgument[] | undefined;
+}
+export interface MCPPromptMessage {
+    role: 'user' | 'assistant';
+    /** Preserve text, image, audio, embedded-resource, and resource-link blocks. */
+    content: unknown;
+}
+export interface MCPListResourcesResult {
+    resources: MCPResource[];
+    nextCursor?: string | undefined;
+}
+export interface MCPListResourceTemplatesResult {
+    resourceTemplates: MCPResourceTemplate[];
+    nextCursor?: string | undefined;
+}
+export interface MCPReadResourceResult {
+    contents: MCPResourceContents[];
+}
+export interface MCPListPromptsResult {
+    prompts: MCPPrompt[];
+    nextCursor?: string | undefined;
+}
+export interface MCPGetPromptResult {
+    description?: string | undefined;
+    messages: MCPPromptMessage[];
+}
+export declare function parseServerMetadata(value: unknown): MCPServerMetadata;
+export declare function parseListResourcesResult(value: unknown): MCPListResourcesResult;
+export declare function parseListResourceTemplatesResult(value: unknown): MCPListResourceTemplatesResult;
+export declare function parseReadResourceResult(value: unknown): MCPReadResourceResult;
+export declare function parseListPromptsResult(value: unknown): MCPListPromptsResult;
+export declare function parseGetPromptResult(value: unknown): MCPGetPromptResult;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IAC1D,SAAS,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IAC/F,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,CAAC;IAC5C,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,qBAAqB,CAAC;IACpC,UAAU,EAAE,qBAAqB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,gFAAgF;IAChF,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,8BAA8B;IAC7C,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;IACzC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AA+BD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAcrE;AAyBD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAS/E;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAwC/F;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAqB7E;AA2BD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAwB3E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAmBvE"}

package/dist/registry.d.ts

@@ -1,5 +1,10 @@
 import type { EventBus, Logger, MCPServerConfig, ToolRegistry } from '@wrongstack/core';
+import type { MCPAuthorizationProvider } from './authorization.js';
+import type { MCPAuthorizationManager, MCPAuthorizationStartResult, MCPAuthorizationStatus } from './authorization-manager.js';
 import { type ConnectionState, MCPClient } from './client.js';
+import { type MCPInsertionPolicy, type MCPPromptInsertion, type MCPResourceInsertion } from './content-selection.js';
+import { type MCPOperationListener, type MCPServerOperationalHealth } from './operations.js';
+import type { MCPGetPromptResult, MCPPrompt, MCPReadResourceResult, MCPResource, MCPResourceTemplate, MCPServerMetadata } from './protocol.js';
 export interface MCPRegistryOptions {
     toolRegistry: ToolRegistry;
     events: EventBus;
@@ -26,19 +31,53 @@ export interface MCPRegistryOptions {
      * Default: false.
      */
     lazyMode?: boolean | undefined;
+    /** Resolve host-owned, vault-backed OAuth state for an HTTP server. */
+    authorizationProviderFactory?: ((server: Readonly<MCPServerConfig>) => MCPAuthorizationProvider | undefined) | undefined;
+    /** Coordinate manual/headless OAuth start, completion, status, and logout. */
+    authorizationManager?: MCPAuthorizationManager | undefined;
+}
+export interface MCPRegistryCatalog {
+    name: string;
+    state: ConnectionState;
+    serverMetadata?: MCPServerMetadata | undefined;
+    resources?: MCPResource[] | undefined;
+    resourceTemplates?: MCPResourceTemplate[] | undefined;
+    prompts?: MCPPrompt[] | undefined;
 }
 export declare class MCPRegistry {
     private readonly servers;
+    /** Configured-off servers are tracked without creating a transport/client. */
+    private readonly disabledServers;
     private readonly toolRegistry;
     private readonly events;
     private readonly log;
     private readonly lazyMode;
     private readonly cacheDir?;
     private readonly idleTimeoutMs;
+    private readonly authorizationProviderFactory?;
+    private readonly authorizationManager?;
+    private readonly operationListeners;
     /** Single shared idle sweep timer (started lazily; unref'd; cleared on stopAll). */
     private idleTimer?;
     constructor(opts: MCPRegistryOptions);
+    private requireSlot;
+    beginAuthorization(name: string, input: {
+        clientId: string;
+        redirectUri: string;
+        scopes?: readonly string[] | undefined;
+        challengeHeader?: string | null | undefined;
+        signal?: AbortSignal | undefined;
+    }): Promise<MCPAuthorizationStartResult>;
+    completeAuthorization(name: string, callbackUrl: string, signal?: AbortSignal | undefined): Promise<MCPAuthorizationStatus>;
+    authorizationStatus(name: string): Promise<MCPAuthorizationStatus>;
+    disconnectAuthorization(name: string): Promise<boolean>;
+    private requireAuthorizationManager;
+    private requireHttpServerConfig;
     start(cfg: MCPServerConfig): Promise<void>;
+    /** Record an intentionally disabled configuration without opening a transport. */
+    markDisabled(cfg: MCPServerConfig): void;
+    /** Remove residual operational/configuration state after a management delete. */
+    forget(name: string): void;
     /**
      * Boot a lazy server WITHOUT spawning it. If a tool manifest is cached (from a
      * prior connect with matching config), register resolver-backed wrappers and
@@ -75,6 +114,29 @@ export declare class MCPRegistry {
         toolCount: number;
         tools: string[];
     }[];
+    /**
+     * Subscribe to payload-free operational signals. Callers must still avoid
+     * using `serverName` as an unbounded metric label.
+     */
+    onOperation(listener: MCPOperationListener): () => void;
+    /** Detailed, defensively-copied operational snapshots for CLI/WebUI/HQ. */
+    operationalHealth(): MCPServerOperationalHealth[];
+    getCatalog(name: string): MCPRegistryCatalog | undefined;
+    listResources(name: string, opts?: {
+        refresh?: boolean;
+    }): Promise<MCPResource[]>;
+    listResourceTemplates(name: string, opts?: {
+        refresh?: boolean;
+    }): Promise<MCPResourceTemplate[]>;
+    readResource(name: string, uri: string): Promise<MCPReadResourceResult>;
+    selectResourceForInsertion(name: string, uri: string, policy?: MCPInsertionPolicy | undefined): Promise<MCPResourceInsertion>;
+    subscribeResource(name: string, uri: string): Promise<void>;
+    unsubscribeResource(name: string, uri: string): Promise<void>;
+    listPrompts(name: string, opts?: {
+        refresh?: boolean;
+    }): Promise<MCPPrompt[]>;
+    getPrompt(serverName: string, promptName: string, args?: Record<string, string> | undefined): Promise<MCPGetPromptResult>;
+    selectPromptForInsertion(serverName: string, promptName: string, args?: Record<string, string> | undefined, policy?: MCPInsertionPolicy | undefined): Promise<MCPPromptInsertion>;
     /**
      * Resolve the live tool names for a slot — the registered names in normal
      * mode, or the cached lazy-tool names when running in lazy mode (where
@@ -89,6 +151,8 @@ export declare class MCPRegistry {
      * the existing registrations rather than churning the tool list).
      */
     private applyTools;
+    private discoverCapabilities;
+    private persistCapabilityManifest;
     /** Start the shared idle sweep timer once (unref'd so it never holds the process). */
     private ensureIdleSweep;
     /** Auto-sleep connected lazy servers that have been idle past the timeout. */
@@ -130,6 +194,10 @@ export declare class MCPRegistry {
      * In lazy mode, only update the internal cache without registering.
      */
     private readonly onToolsChanged;
+    private readonly onResourcesChanged;
+    private readonly onPromptsChanged;
+    private addCatalogListeners;
+    private removeCatalogListeners;
     private readonly onChildExit;
     /** Handles SSE / streamable-http disconnect — same recovery as stdio child exit. */
     private readonly onTransportDisconnect;
@@ -146,6 +214,11 @@ export declare class MCPRegistry {
     private static readonly MAX_RECONNECT_DELAY_MS;
     private scheduleReconnect;
     private attemptReconnect;
+    private recordSuccess;
+    private recordFailure;
+    private recordOperation;
+    /** Keeps private-method unit fixtures from needing to duplicate every slot field. */
+    private operationsFor;
     private attemptConnect;
 }
 //# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAQ,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE9F,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAgB,MAAM,aAAa,CAAC;AAsD5E,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,QAAQ,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,oFAAoF;IACpF,OAAO,CAAC,SAAS,CAAC,CAA6C;IAE/D,YAAY,IAAI,EAAE,kBAAkB,EAOnC;IAEK,KAAK,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC/C;IAED;;;;;OAKG;YACW,SAAS;IAsBvB;;;OAGG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAuBtD;IAED;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAmBjC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBrC;IAED;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGjC;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BtC;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzC;IAED,IAAI,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAUrF;IAED;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAyBlB,sFAAsF;IACtF,OAAO,CAAC,eAAe;IASvB,8EAA8E;YAChE,SAAS;IAevB;;;;OAIG;YACW,SAAS;IAsBvB;;;;;OAKG;IACH,QAAQ,IAAI;QACV,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,eAAe,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,EAAE,CAWF;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ7B;IAED;;;OAGG;IACH,MAAM,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,CAK3E;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CA0B7B;IAEF,OAAO,CAAC,QAAQ,CAAC,WAAW,CA8B1B;IAEF,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAqBpC;IAEF;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAsC;IAClF,gEAAgE;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAyC;IACxF,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IAExD,OAAO,CAAC,iBAAiB;YAsCX,gBAAgB;YAMhB,cAAc;CA+G7B"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAQ,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE9F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EACV,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,eAAe,EAAE,SAAS,EAAgB,MAAM,aAAa,CAAC;AAE5E,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAG1B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EASL,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAKhC,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,eAAe,CAAC;AA4DvB,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,QAAQ,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,uEAAuE;IACvE,4BAA4B,CAAC,EACzB,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,KAAK,wBAAwB,GAAG,SAAS,CAAC,GAC7E,SAAS,CAAC;IACd,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC5D;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,cAAc,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC/C,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IACtC,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,GAAG,SAAS,CAAC;IACtD,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;CACnC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAqD;IACnG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAsC;IAC5E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAmC;IACtE,oFAAoF;IACpF,OAAO,CAAC,SAAS,CAAC,CAA6C;IAE/D,YAAY,IAAI,EAAE,kBAAkB,EASnC;IAED,OAAO,CAAC,WAAW;IAMb,kBAAkB,CACtB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;QACvC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QAC5C,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;KAClC,GACA,OAAO,CAAC,2BAA2B,CAAC,CAQtC;IAEK,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAIjC;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAIvE;IAEK,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAI5D;IAED,OAAO,CAAC,2BAA2B;IAOnC,OAAO,CAAC,uBAAuB;IASzB,KAAK,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC/C;IAED,kFAAkF;IAClF,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAGvC;IAED,iFAAiF;IACjF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGzB;IAED;;;;;OAKG;YACW,SAAS;IA0BvB;;;OAGG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CA4BtD;IAED;;;;OAIG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAmBjC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBrC;IAED;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGjC;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCtC;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASzC;IAED,IAAI,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAUrF;IAED;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI,CAGtD;IAED,2EAA2E;IAC3E,iBAAiB,IAAI,0BAA0B,EAAE,CAkDhD;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAIvD;IAEK,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAW1F;IAEK,qBAAqB,CACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC/B,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAWhC;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAE5E;IAEK,0BAA0B,CAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAE/B;IAEK,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhE;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAElE;IAEK,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAWtF;IAEK,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GACxC,OAAO,CAAC,kBAAkB,CAAC,CAE7B;IAEK,wBAAwB,CAC5B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACzC,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAQ7B;IAED;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;YAgDJ,oBAAoB;YAgDpB,yBAAyB;IAkBvC,sFAAsF;IACtF,OAAO,CAAC,eAAe;IASvB,8EAA8E;YAChE,SAAS;IAevB;;;;OAIG;YACW,SAAS;IAyBvB;;;;;OAKG;IACH,QAAQ,IAAI;QACV,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,eAAe,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,EAAE,CAmBF;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAS7B;IAED;;;OAGG;IACH,MAAM,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,CAK3E;IAED;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAwB7B;IAEF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAOjC;IAEF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAM/B;IAEF,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,sBAAsB;IAK9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAoC1B;IAEF,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CA2BpC;IAEF;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAsC;IAClF,gEAAgE;IAChE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAyC;IACxF,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAU;IAExD,OAAO,CAAC,iBAAiB;YAuCX,gBAAgB;IAQ9B,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,eAAe;IAiCvB,qFAAqF;IACrF,OAAO,CAAC,aAAa;YAKP,cAAc;CA6H7B"}

package/dist/server.d.ts

@@ -1,3 +1,4 @@
+import type { MCPPromptArgument, MCPPromptMessage, MCPResourceContents } from './protocol.js';
 /**
  * Server-side MCP. The mirror image of `MCPClient`: instead of consuming a
  * remote MCP server, this lets WrongStack *be* an MCP server — exposing its
@@ -29,6 +30,24 @@ export interface MCPServerToolHost {
     listTools(): MCPServerTool[] | Promise<MCPServerTool[]>;
     callTool(name: string, args: Record<string, unknown>): Promise<MCPServerCallResult>;
 }
+export interface MCPServerResource {
+    uri: string;
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    mimeType?: string | undefined;
+    size?: number | undefined;
+    contents: MCPResourceContents[];
+}
+export interface MCPServerPrompt {
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    arguments?: MCPPromptArgument[] | undefined;
+    /** Static rich messages, or a text template using {{argument}} placeholders. */
+    messages?: MCPPromptMessage[] | undefined;
+    template?: string | undefined;
+}
 export interface MCPServerLogger {
     warn?(msg: string): void;
     info?(msg: string): void;
@@ -41,11 +60,17 @@ export interface MCPServerOptions {
         version: string;
     };
     logger?: MCPServerLogger | undefined;
+    /** Explicit allowlist only; omitted means this server exposes no resources. */
+    resources?: MCPServerResource[] | undefined;
+    /** Explicit allowlist only; omitted means this server exposes no prompts. */
+    prompts?: MCPServerPrompt[] | undefined;
 }
 export declare class MCPServer {
     private readonly host;
     private readonly serverInfo;
     private readonly logger?;
+    private readonly resources;
+    private readonly prompts;
     constructor(opts: MCPServerOptions);
     /**
      * Handle one raw JSON-RPC line. Returns the response JSON string for

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AAEH,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qFAAqF;IACrF,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC;AAeD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA8B;IAEtD,YAAY,IAAI,EAAE,gBAAgB,EAOjC;IAED;;;;OAIG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuCvD;YAEa,QAAQ;IA+BtB,OAAO,CAAC,WAAW;CAGpB;AAID,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYvF;AAWD,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,KAAK,IAAI,IAAI,CAAC;IACd,iDAAiD;IACjD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;CAC5C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,GAAE,iBAAsB,GAAG,gBAAgB,CA6H5F;AAMD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAqC1B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC9F;;;;;;;;;;GAUG;AAEH,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC5C,gFAAgF;IAChF,QAAQ,CAAC,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qFAAqF;IACrF,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACrC,+EAA+E;IAC/E,SAAS,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC5C,6EAA6E;IAC7E,OAAO,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;CACzC;AAeD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAE5C,YAAY,IAAI,EAAE,gBAAgB,EASjC;IAED;;;;OAIG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuCvD;YAEa,QAAQ;IAuFtB,OAAO,CAAC,WAAW;CAGpB;AA2DD,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYvF;AAWD,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,KAAK,IAAI,IAAI,CAAC;IACd,iDAAiD;IACjD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;CAC5C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,GAAE,iBAAsB,GAAG,gBAAgB,CA6H5F;AAMD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAqC1B"}

package/dist/token-store.d.ts

@@ -0,0 +1,56 @@
+import type { MCPServerConfig, SecretVault } from '@wrongstack/core';
+import { type MCPAuthorizationChallenge, type MCPAuthorizationContext, type MCPAuthorizationProvider, type MCPAuthorizationServerMetadata, type MCPTokenSet } from './authorization.js';
+export interface MCPStoredAuthorization {
+    serverName: string;
+    resource: string;
+    clientId: string;
+    authorizationServer: MCPAuthorizationServerMetadata;
+    tokenSet: MCPTokenSet;
+    updatedAt: string;
+}
+export interface MCPAuthorizationStateEvent {
+    serverName: string;
+    state: 'authorized' | 'refreshed' | 'reauth_required' | 'removed';
+    resource: string;
+    expiresAt?: number | undefined;
+    scopes?: string[] | undefined;
+}
+export interface MCPRefreshingAuthorizationProviderOptions {
+    serverName: string;
+    resource: string;
+    store: MCPVaultTokenStore;
+    refreshSkewMs?: number | undefined;
+    onStateChange?: ((event: MCPAuthorizationStateEvent) => void) | undefined;
+}
+export interface MCPVaultProviderFactoryOptions {
+    store: MCPVaultTokenStore;
+    refreshSkewMs?: number | undefined;
+    onStateChange?: ((event: MCPAuthorizationStateEvent) => void) | undefined;
+}
+export declare class MCPVaultTokenStore {
+    private readonly filePath;
+    private readonly vault;
+    constructor(filePath: string, vault: SecretVault);
+    load(serverName: string, resource: string): Promise<MCPStoredAuthorization | undefined>;
+    save(value: MCPStoredAuthorization): Promise<void>;
+    remove(serverName: string, resource: string): Promise<boolean>;
+    private readFile;
+    private writeFile;
+    private encryptEntry;
+    private decryptEntry;
+}
+export declare class MCPRefreshingAuthorizationProvider implements MCPAuthorizationProvider {
+    private readonly options;
+    private refreshPromise?;
+    private readonly resource;
+    private readonly refreshSkewMs;
+    constructor(options: MCPRefreshingAuthorizationProviderOptions);
+    getAccessToken(context: MCPAuthorizationContext): Promise<MCPTokenSet | undefined>;
+    handleUnauthorized(challenge: MCPAuthorizationChallenge, context: MCPAuthorizationContext): Promise<boolean>;
+    private refresh;
+    private refreshInner;
+    private assertContext;
+    private emit;
+}
+export declare function createVaultBackedMcpAuthorizationProviderFactory(options: MCPVaultProviderFactoryOptions): (server: Readonly<MCPServerConfig>) => MCPAuthorizationProvider | undefined;
+//# sourceMappingURL=token-store.d.ts.map

package/dist/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,WAAW,EAGjB,MAAM,oBAAoB,CAAC;AAO5B,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,8BAA8B,CAAC;IACpD,QAAQ,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAqBD,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,yCAAyC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3E;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,kBAAkB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3E;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFxB,YACmB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,EACjC;IAEE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAU5F;IAEK,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAavD;IAEK,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAWnE;YAEa,QAAQ;YAmBR,SAAS;IASvB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,YAAY;CAwBrB;AAED,qBAAa,kCAAmC,YAAW,wBAAwB;IAKrE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,cAAc,CAAC,CAA0D;IACjF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAA6B,OAAO,EAAE,yCAAyC,EAG9E;IAEK,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAiBvF;IAEK,kBAAkB,CACtB,SAAS,EAAE,yBAAyB,EACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,OAAO,CAAC,CASlB;IAED,OAAO,CAAC,OAAO;YAWD,YAAY;IA0B1B,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,IAAI;CASb;AAED,wBAAgB,gDAAgD,CAC9D,OAAO,EAAE,8BAA8B,GACtC,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,KAAK,wBAAwB,GAAG,SAAS,CAmB7E"}

package/dist/transport.d.ts

@@ -1,5 +1,7 @@
 import * as https from 'node:https';
+import { type MCPAuthorizationProvider } from './authorization.js';
 import type { ConnectionState, JsonRpcResponse, MCPTool, ToolCallResult } from './client.js';
+import { type MCPServerMetadata } from './protocol.js';
 export type JsonRpcResult = {
     jsonrpc: string;
     id?: number | undefined;
@@ -16,6 +18,7 @@ export interface HttpTransportOptions {
     headers?: Record<string, string> | undefined;
     startupTimeoutMs?: number | undefined;
     requestTimeoutMs?: number | undefined;
+    authorizationProvider?: MCPAuthorizationProvider | undefined;
     /**
      * Per-request TLS configuration. When set, an https.Agent is created
      * and passed to fetch via the `dispatch` option. This avoids globally
@@ -51,14 +54,7 @@ export declare class SSEReader {
     private dispatch;
     reset(): void;
 }
-/**
- * Extract JSON-RPC envelopes from a streamable-http response body. Handles BOTH
- * plain NDJSON (one JSON object per line) AND SSE framing
- * (`event: message\ndata: {...}` blocks) — modern MCP servers (e.g. Context7)
- * reply with `text/event-stream` even on a single POST, so the data must be
- * un-prefixed before parsing. Multi-line `data:` values within one event are
- * joined per the SSE spec.
- */
+/** Extract only response envelopes; notifications and server requests are not responses. */
 export declare function extractJsonRpcResults(text: string): JsonRpcResult[];
 /**
  * Fields and methods shared by all HTTP-based MCP transports.
@@ -70,22 +66,35 @@ export declare abstract class BaseHTTPTransport {
     protected readonly headers: Record<string, string>;
     protected readonly timeout: number;
     protected readonly requestTimeout: number;
+    protected readonly name: string;
+    protected readonly authorizationProvider?: MCPAuthorizationProvider | undefined;
+    protected readonly authorizationResource: string;
     /** Per-request TLS agent — created once from HttpTransportOptions.tls */
     protected readonly tlsAgent?: https.Agent | undefined;
     protected readonly tools: MCPTool[];
+    protected serverMetadata?: MCPServerMetadata | undefined;
     protected abortController?: AbortController | undefined;
     protected readonly disconnectHandlers: Array<() => void>;
     protected readonly toolsChangedListeners: Set<(tools: MCPTool[]) => void>;
+    protected readonly resourcesChangedListeners: Set<() => void>;
+    protected readonly promptsChangedListeners: Set<() => void>;
+    protected protocolVersion?: string | undefined;
     constructor(opts: HttpTransportOptions, transportName: string);
     getState(): ConnectionState;
+    protected fetchWithAuthorization(input: string, init: RequestInit, signal?: AbortSignal | undefined): Promise<Response>;
     listTools(): MCPTool[];
+    getServerMetadata(): MCPServerMetadata | undefined;
     onDisconnect(cb: () => void): () => void;
     onToolsChanged(cb: (tools: MCPTool[]) => void): () => void;
+    onResourcesChanged(cb: () => void): () => void;
+    onPromptsChanged(cb: () => void): () => void;
     /**
      * Fire all disconnect handlers. Subclasses call this when the connection
      * drops so the registry can schedule reconnects.
      */
     protected notifyDisconnect(): void;
+    protected notifyResourcesChanged(): void;
+    protected notifyPromptsChanged(): void;
     /**
      * Apply the pinned TLS agent (if configured) to a `RequestInit` object.
      * Uses `HttpDispatcher` from `@wrongstack/core`'s dispatcher-types shim,
@@ -120,7 +129,9 @@ export declare class SSETransport extends BaseHTTPTransport {
         signal?: AbortSignal | undefined;
     }): Promise<ToolCallResult>;
     /** Generic JSON-RPC request — used by MCPClient.request() for SSE transports. */
-    request(method: string, params: unknown, timeoutMs?: number): Promise<JsonRpcResponse>;
+    request(method: string, params: unknown, timeoutMs?: number, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<JsonRpcResponse>;
     close(): Promise<void>;
 }
 /**
@@ -133,10 +144,15 @@ export declare class StreamableHTTPTransport extends BaseHTTPTransport {
     private sessionId?;
     constructor(opts: HttpTransportOptions);
     protected genId(): number;
+    private consumeResponseText;
+    private handleNotification;
+    private refreshTools;
     connect(): Promise<void>;
     private postRaw;
     /** Generic JSON-RPC request — used by MCPClient.request() for SSE/streamable-http transports. */
-    request(method: string, params: unknown, timeoutMs?: number): Promise<JsonRpcResponse>;
+    request(method: string, params: unknown, timeoutMs?: number, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<JsonRpcResponse>;
     callTool(name: string, input: unknown, opts?: {
         signal?: AbortSignal | undefined;
     }): Promise<ToolCallResult>;