crosscheck-mcp 0.1.11 → 0.1.13

package/dist/node-stdio.d.cts

@@ -1,6 +1,31 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
+/** A live bridge to a Python crosscheck-agent child. */
+interface BridgeHandle {
+    /** Names of the tools exposed by the Python child (from its
+     *  `tools/list` response). */
+    readonly toolNames: ReadonlySet<string>;
+    /** PID of the spawned Python child process, or `null` if the
+     *  transport hasn't started yet / has already closed. Useful for
+     *  shutdown verification and host-side diagnostics. */
+    readonly pid: number | null;
+    /** Forward a `tools/call` to the Python child and return the result
+     *  envelope verbatim. */
+    callTool(name: string, args: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: boolean;
+    }>;
+    /** Re-fetch the tool list (in case the child surfaces new tools mid-
+     *  session). Returns the new tool names. */
+    refreshTools(): Promise<ReadonlySet<string>>;
+    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
+    close(): Promise<void>;
+}
+
 /** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
 interface NodeCacheCfg {
     /** Master enable flag. Defaults to true when the cfg block exists
@@ -332,31 +357,6 @@ interface BreakerCfg {
     max_dag_depth?: number;
 }
 
-/** A live bridge to a Python crosscheck-agent child. */
-interface BridgeHandle {
-    /** Names of the tools exposed by the Python child (from its
-     *  `tools/list` response). */
-    readonly toolNames: ReadonlySet<string>;
-    /** PID of the spawned Python child process, or `null` if the
-     *  transport hasn't started yet / has already closed. Useful for
-     *  shutdown verification and host-side diagnostics. */
-    readonly pid: number | null;
-    /** Forward a `tools/call` to the Python child and return the result
-     *  envelope verbatim. */
-    callTool(name: string, args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-        isError?: boolean;
-    }>;
-    /** Re-fetch the tool list (in case the child surfaces new tools mid-
-     *  session). Returns the new tool names. */
-    refreshTools(): Promise<ReadonlySet<string>>;
-    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
-    close(): Promise<void>;
-}
-
 interface PricingDoc {
     /** `<provider>` -> `<model>` -> ModelRates. */
     [provider: string]: unknown;
@@ -438,6 +438,16 @@ interface ConfigPinningConfig {
     reject_drift?: boolean;
 }
 
+interface FetchConfig {
+    enabled?: boolean;
+    url_allowlist?: readonly string[];
+    max_bytes?: number;
+    max_bytes_per_session?: number;
+    max_unique_hosts_per_session?: number;
+    timeout_s?: number;
+    evidence_dir?: string;
+}
+
 declare const SERVER_NAME = "crosscheck-agent";
 declare const SERVER_VERSION: string;
 interface CreateServerOptions {
@@ -483,6 +493,15 @@ interface CreateServerOptions {
     /** PR-7: env-equivalent of CROSSCHECK_REJECT_CONFIG_DRIFT=1.
      *  When true, drift gate fires regardless of \`configPinning.reject_drift\`. */
     rejectConfigDriftEnv?: boolean;
+    /** CFG.fetch — fetch tool allowlist + egress caps + evidence dir. Without
+     *  it, the fetch tool's allowlist is empty (deny-all). */
+    fetchConfig?: FetchConfig;
+    /** CFG.moderator — default moderator/synthesis provider (lowercased). */
+    moderatorDefault?: string;
+    /** CFG.bench.goldens_dir — default goldens directory for the bench tool. */
+    benchGoldensDir?: string;
+    /** CFG.events_log — path for the structured-event ND-JSON sink (scoreboard). */
+    eventsPath?: string;
 }
 /**
  * Create a not-yet-connected MCP server with the current tool surface

package/dist/node-stdio.d.ts

@@ -1,6 +1,31 @@
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 
+/** A live bridge to a Python crosscheck-agent child. */
+interface BridgeHandle {
+    /** Names of the tools exposed by the Python child (from its
+     *  `tools/list` response). */
+    readonly toolNames: ReadonlySet<string>;
+    /** PID of the spawned Python child process, or `null` if the
+     *  transport hasn't started yet / has already closed. Useful for
+     *  shutdown verification and host-side diagnostics. */
+    readonly pid: number | null;
+    /** Forward a `tools/call` to the Python child and return the result
+     *  envelope verbatim. */
+    callTool(name: string, args: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: boolean;
+    }>;
+    /** Re-fetch the tool list (in case the child surfaces new tools mid-
+     *  session). Returns the new tool names. */
+    refreshTools(): Promise<ReadonlySet<string>>;
+    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
+    close(): Promise<void>;
+}
+
 /** Per-call node-cache config block. Mirrors Python's CFG.node_cache. */
 interface NodeCacheCfg {
     /** Master enable flag. Defaults to true when the cfg block exists
@@ -332,31 +357,6 @@ interface BreakerCfg {
     max_dag_depth?: number;
 }
 
-/** A live bridge to a Python crosscheck-agent child. */
-interface BridgeHandle {
-    /** Names of the tools exposed by the Python child (from its
-     *  `tools/list` response). */
-    readonly toolNames: ReadonlySet<string>;
-    /** PID of the spawned Python child process, or `null` if the
-     *  transport hasn't started yet / has already closed. Useful for
-     *  shutdown verification and host-side diagnostics. */
-    readonly pid: number | null;
-    /** Forward a `tools/call` to the Python child and return the result
-     *  envelope verbatim. */
-    callTool(name: string, args: Record<string, unknown>): Promise<{
-        content: {
-            type: string;
-            text: string;
-        }[];
-        isError?: boolean;
-    }>;
-    /** Re-fetch the tool list (in case the child surfaces new tools mid-
-     *  session). Returns the new tool names. */
-    refreshTools(): Promise<ReadonlySet<string>>;
-    /** Tear down the bridge cleanly. Idempotent — repeat calls are no-ops. */
-    close(): Promise<void>;
-}
-
 interface PricingDoc {
     /** `<provider>` -> `<model>` -> ModelRates. */
     [provider: string]: unknown;
@@ -438,6 +438,16 @@ interface ConfigPinningConfig {
     reject_drift?: boolean;
 }
 
+interface FetchConfig {
+    enabled?: boolean;
+    url_allowlist?: readonly string[];
+    max_bytes?: number;
+    max_bytes_per_session?: number;
+    max_unique_hosts_per_session?: number;
+    timeout_s?: number;
+    evidence_dir?: string;
+}
+
 declare const SERVER_NAME = "crosscheck-agent";
 declare const SERVER_VERSION: string;
 interface CreateServerOptions {
@@ -483,6 +493,15 @@ interface CreateServerOptions {
     /** PR-7: env-equivalent of CROSSCHECK_REJECT_CONFIG_DRIFT=1.
      *  When true, drift gate fires regardless of \`configPinning.reject_drift\`. */
     rejectConfigDriftEnv?: boolean;
+    /** CFG.fetch — fetch tool allowlist + egress caps + evidence dir. Without
+     *  it, the fetch tool's allowlist is empty (deny-all). */
+    fetchConfig?: FetchConfig;
+    /** CFG.moderator — default moderator/synthesis provider (lowercased). */
+    moderatorDefault?: string;
+    /** CFG.bench.goldens_dir — default goldens directory for the bench tool. */
+    benchGoldensDir?: string;
+    /** CFG.events_log — path for the structured-event ND-JSON sink (scoreboard). */
+    eventsPath?: string;
 }
 /**
  * Create a not-yet-connected MCP server with the current tool surface