dsh-desktop-kit 2.2.1 → 2.7.3

package/plugins/dsh-mcp-manager/client.js

@@ -0,0 +1,373 @@
+/**
+ * dsh-mcp-manager — browser half.
+ *
+ * Adds a premium Settings section for MCP connections: live status, tools,
+ * trusted/enabled switches, one-click presets and a manual server form.
+ * Secrets are posted once and stored by the host in ~/.dsh/mcp.secrets.json.
+ */
+window.__ModuleLoader__.load({
+  id: "dsh-mcp-manager",
+  factory: (require) => {
+    var module = { exports: {} };
+    var exports = module.exports;
+    Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+    const React = require("react");
+    const h = React.createElement;
+    const useEffect = React.useEffect;
+    const useState = React.useState;
+
+    const RPC_NS = "dsh-mcp-manager";
+
+    const CSS = `
+      .mcp-root{--mcp-line:var(--dsw-alias-border-l1,rgba(20,40,36,.13));--mcp-soft:var(--dsw-alias-bg-layer-1,#f4f7f5);--mcp-panel:var(--dsw-alias-bg-layer-1,#fff);--mcp-text:var(--dsw-alias-label-primary,#17231f);--mcp-muted:var(--dsw-alias-label-secondary,#61706b);--mcp-accent:var(--dsw-alias-brand-primary,#0f766e);--mcp-accent-soft:color-mix(in srgb,var(--mcp-accent) 9%,transparent);--mcp-warn:#a16207;display:flex;flex-direction:column;gap:20px;max-width:1040px;min-width:0;color:var(--mcp-text)}
+      .mcp-head{display:flex;align-items:flex-end;justify-content:space-between;gap:24px;flex-wrap:wrap}
+      .mcp-eyebrow{font-size:11px;font-weight:700;letter-spacing:.14em;text-transform:uppercase;color:var(--mcp-accent);margin:0 0 6px}
+      .mcp-title{font-size:clamp(24px,2.6vw,32px);line-height:1.12;letter-spacing:-.025em;margin:0;font-weight:680}
+      .mcp-sub{margin:8px 0 0;max-width:64ch;color:var(--mcp-muted);font-size:14px;line-height:1.5}
+      .mcp-toolbar{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
+      .mcp-btn{appearance:none;border:1px solid var(--mcp-line);background:var(--mcp-panel);color:var(--mcp-text);border-radius:10px;padding:9px 13px;font:inherit;font-size:13px;font-weight:600;line-height:1;cursor:pointer;display:inline-flex;align-items:center;gap:7px;min-height:38px;transition:border-color .16s ease,background .16s ease,transform .16s ease}
+      .mcp-btn:hover{border-color:rgba(15,118,110,.4);background:var(--mcp-accent-soft)}
+      .mcp-btn:active{transform:translateY(1px)}
+      .mcp-btn:focus-visible{outline:2px solid var(--mcp-accent);outline-offset:2px}
+      .mcp-btn.primary{background:var(--mcp-accent);border-color:var(--mcp-accent);color:#fff}
+      .mcp-btn.primary:hover{filter:brightness(1.06);background:var(--mcp-accent)}
+      .mcp-btn.danger{color:#9f1239;border-color:rgba(159,18,57,.22)}
+      .mcp-btn.ghost{background:transparent}
+      .mcp-btn[disabled]{opacity:.5;cursor:not-allowed}
+      .mcp-stats{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}
+      .mcp-stat{background:linear-gradient(150deg,var(--mcp-panel),var(--mcp-soft));border:1px solid var(--mcp-line);border-radius:14px;padding:14px 16px;min-width:0}
+      .mcp-stat b{display:block;font-size:24px;letter-spacing:-.03em;line-height:1.1;font-variant-numeric:tabular-nums}
+      .mcp-stat span{display:block;margin-top:5px;color:var(--mcp-muted);font-size:11px;font-weight:650;letter-spacing:.08em;text-transform:uppercase}
+      .mcp-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:12px}
+      .mcp-card{border:1px solid var(--mcp-line);background:var(--mcp-panel);border-radius:16px;padding:16px;min-width:0;display:flex;flex-direction:column;gap:12px;box-shadow:0 1px 0 rgba(20,40,36,.03)}
+      .mcp-card-top{display:flex;align-items:flex-start;gap:10px;justify-content:space-between;min-width:0}
+      .mcp-card-id{display:flex;align-items:center;gap:9px;min-width:0}
+      .mcp-dot{width:8px;height:8px;border-radius:50%;background:#94a3b8;flex:0 0 auto;box-shadow:0 0 0 3px rgba(148,163,184,.16)}
+      .mcp-dot.on{background:#0f9f6e;box-shadow:0 0 0 3px rgba(15,159,110,.14)}
+      .mcp-dot.err{background:#dc2626;box-shadow:0 0 0 3px rgba(220,38,38,.12)}
+      .mcp-name{font-size:15px;font-weight:680;letter-spacing:-.01em;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+      .mcp-badge{font-size:10px;font-weight:700;letter-spacing:.07em;text-transform:uppercase;color:var(--mcp-muted);border:1px solid var(--mcp-line);border-radius:999px;padding:3px 7px;white-space:nowrap}
+      .mcp-meta{display:flex;gap:10px;flex-wrap:wrap;color:var(--mcp-muted);font-size:12px;line-height:1.45}
+      .mcp-meta code{font:inherit;color:var(--mcp-text);background:var(--mcp-soft);border-radius:5px;padding:1px 5px;max-width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+      .mcp-error{color:#9f1239;background:rgba(159,18,57,.06);border:1px solid rgba(159,18,57,.16);border-radius:9px;padding:8px 10px;font-size:12px;line-height:1.4;word-break:break-word}
+      .mcp-controls{display:flex;align-items:center;gap:12px;flex-wrap:wrap;border-top:1px solid var(--mcp-line);padding-top:10px;margin-top:auto}
+      .mcp-switch{display:inline-flex;align-items:center;gap:7px;font-size:12px;color:var(--mcp-muted);cursor:pointer;min-height:32px}
+      .mcp-switch input{position:absolute;opacity:0;width:1px;height:1px}
+      .mcp-switch i{width:30px;height:18px;border-radius:999px;background:#cbd5e1;position:relative;transition:background .16s ease;flex:0 0 auto}
+      .mcp-switch i:after{content:"";position:absolute;width:14px;height:14px;left:2px;top:2px;border-radius:50%;background:#fff;box-shadow:0 1px 2px rgba(0,0,0,.2);transition:transform .16s ease}
+      .mcp-switch input:checked+i{background:var(--mcp-accent)}
+      .mcp-switch input:checked+i:after{transform:translateX(12px)}
+      .mcp-switch input:focus-visible+i{outline:2px solid var(--mcp-accent);outline-offset:2px}
+      .mcp-actions{display:flex;gap:6px;margin-left:auto;flex-wrap:wrap}
+      .mcp-actions .mcp-btn{padding:7px 9px;min-height:32px;font-size:12px}
+      .mcp-tools{border-top:1px dashed var(--mcp-line);padding-top:10px;display:flex;flex-direction:column;gap:6px}
+      .mcp-tool{display:flex;gap:8px;align-items:baseline;font-size:12px;line-height:1.45;min-width:0}
+      .mcp-tool code{color:var(--mcp-accent);font:inherit;font-weight:650;white-space:nowrap}
+      .mcp-tool span{color:var(--mcp-muted);overflow:hidden;text-overflow:ellipsis}
+      .mcp-empty{border:1px dashed var(--mcp-line);border-radius:18px;padding:26px;background:linear-gradient(160deg,var(--mcp-soft),transparent 75%);display:flex;flex-direction:column;gap:12px;align-items:flex-start}
+      .mcp-empty h3{margin:0;font-size:18px;letter-spacing:-.015em}
+      .mcp-empty p{margin:0;color:var(--mcp-muted);font-size:13px;line-height:1.5;max-width:60ch}
+      .mcp-presets{display:flex;gap:8px;flex-wrap:wrap}
+      .mcp-preset{border:1px solid var(--mcp-line);background:var(--mcp-panel);border-radius:12px;padding:10px 12px;cursor:pointer;text-align:left;min-width:150px;font:inherit;color:inherit}
+      .mcp-preset:hover{border-color:rgba(15,118,110,.4);background:var(--mcp-accent-soft)}
+      .mcp-preset b{display:block;font-size:13px}
+      .mcp-preset small{display:block;color:var(--mcp-muted);font-size:11px;line-height:1.35;margin-top:3px}
+      .mcp-note{color:var(--mcp-muted);font-size:11px;line-height:1.45;margin:0}
+      .mcp-loading{color:var(--mcp-muted);font-size:13px;padding:18px 0}
+      .mcp-overlay{position:fixed;inset:0;background:rgba(10,20,18,.42);backdrop-filter:blur(4px);z-index:80;display:flex;align-items:center;justify-content:center;padding:20px}
+      .mcp-modal{width:min(640px,100%);max-height:min(86vh,820px);overflow:auto;background:var(--mcp-panel);border:1px solid var(--mcp-line);border-radius:20px;box-shadow:0 24px 80px rgba(10,20,18,.24);padding:22px;display:flex;flex-direction:column;gap:16px}
+      .mcp-modal-head{display:flex;justify-content:space-between;gap:12px;align-items:flex-start}
+      .mcp-modal h2{margin:0;font-size:20px;letter-spacing:-.02em}
+      .mcp-modal p{margin:4px 0 0;color:var(--mcp-muted);font-size:13px;line-height:1.45}
+      .mcp-form{display:grid;grid-template-columns:1fr 1fr;gap:12px}
+      .mcp-field{display:flex;flex-direction:column;gap:5px;min-width:0}
+      .mcp-field.wide{grid-column:1/-1}
+      .mcp-field label{font-size:11px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--mcp-muted)}
+      .mcp-field input,.mcp-field select,.mcp-field textarea{width:100%;box-sizing:border-box;border:1px solid var(--mcp-line);border-radius:9px;background:var(--mcp-panel);color:var(--mcp-text);font:inherit;font-size:13px;padding:9px 10px;min-height:38px}
+      .mcp-field textarea{min-height:74px;resize:vertical;line-height:1.45}
+      .mcp-field input:focus,.mcp-field select:focus,.mcp-field textarea:focus{outline:2px solid var(--mcp-accent);outline-offset:1px;border-color:transparent}
+      .mcp-check{display:flex;gap:8px;align-items:flex-start;font-size:12px;color:var(--mcp-muted);line-height:1.4}
+      .mcp-check input{margin-top:2px}
+      .mcp-form-actions{display:flex;justify-content:flex-end;gap:8px;flex-wrap:wrap;border-top:1px solid var(--mcp-line);padding-top:14px}
+      .mcp-toast{font-size:12px;border-radius:9px;padding:8px 10px;background:var(--mcp-accent-soft);color:var(--mcp-accent);border:1px solid rgba(15,118,110,.18)}
+      @media (max-width:860px){.mcp-grid{grid-template-columns:1fr}.mcp-stats{grid-template-columns:1fr 1fr}.mcp-form{grid-template-columns:1fr}.mcp-field.wide{grid-column:auto}}
+      @media (max-width:520px){.mcp-stats{grid-template-columns:repeat(3,minmax(0,1fr));gap:8px}.mcp-stat{padding:10px 12px}.mcp-stat b{font-size:20px}.mcp-stat span{font-size:9px;letter-spacing:.04em}.mcp-head{align-items:flex-start}.mcp-actions{margin-left:0;width:100%}.mcp-root{gap:16px}.mcp-modal{padding:18px;border-radius:16px}.mcp-overlay{padding:10px}}
+      @media (prefers-reduced-motion:reduce){.mcp-btn,.mcp-switch i,.mcp-switch i:after{transition:none}}
+    `;
+
+    const PRESETS = [
+      { id: "github", title: "GitHub", subtitle: "Issues, PR и код", transport: "stdio", command: "npx", args: "-y\n@modelcontextprotocol/server-github", tokenEnv: "GITHUB_TOKEN", tokenLabel: "GitHub token", trusted: true },
+      { id: "postgres", title: "PostgreSQL", subtitle: "Схема и read-only запросы", transport: "stdio", command: "npx", args: "-y\n@modelcontextprotocol/server-postgres\npostgresql://readonly@localhost:5432/postgres", tokenEnv: "PGPASSWORD", tokenLabel: "Пароль read-only роли", trusted: true },
+      { id: "filesystem", title: "Filesystem", subtitle: "Папка проекта, без токена", transport: "stdio", command: "npx", args: "-y\n@modelcontextprotocol/server-filesystem\n.", trusted: true },
+    ];
+
+    function call(ctx, operation, payload, timeout = 60000) {
+      let signal;
+      try { signal = AbortSignal.timeout(timeout); } catch { signal = undefined; }
+      return ctx.connection.rpc.call("/api", `${RPC_NS}/${operation}`, payload ?? {}, signal).then((result) => {
+        if (!result || result.ok !== true) throw new Error(result?.error?.message || "Ошибка RPC");
+        return result.value;
+      });
+    }
+
+    function Toggle({ checked, onChange, label, disabled }) {
+      return h("label", { className: "mcp-switch" },
+        h("input", { type: "checkbox", checked, disabled, onChange: (event) => onChange(event.target.checked) }),
+        h("i", { "aria-hidden": "true" }),
+        label,
+      );
+    }
+
+    function ServerCard({ server, busy, onToggle, onTest, onTools, onRemove, tools }) {
+      const [open, setOpen] = useState(false);
+      const connected = server.connected;
+      const status = connected ? "on" : (server.error ? "err" : "off");
+      return h("article", { className: "mcp-card" },
+        h("div", { className: "mcp-card-top" },
+          h("div", { className: "mcp-card-id" },
+            h("span", { className: `mcp-dot ${status}`, "aria-hidden": "true" }),
+            h("span", { className: "mcp-name", title: server.id }, server.id),
+            h("span", { className: "mcp-badge" }, server.scope === "project" ? "проект" : "глобально"),
+          ),
+          h("span", { className: "mcp-badge" }, server.transport === "http" ? "HTTP" : "stdio"),
+        ),
+        h("div", { className: "mcp-meta" },
+          h("span", null, connected ? `подключён · ${server.tools} tools` : server.error ? "ошибка" : "не запущен"),
+          server.url ? h("code", { title: server.url }, server.url) : h("code", { title: server.command }, server.command || "—"),
+        ),
+        server.error ? h("div", { className: "mcp-error" }, server.error) : null,
+        h("div", { className: "mcp-controls" },
+          h(Toggle, { checked: server.enabled, label: "Включён", disabled: busy, onChange: (value) => onToggle(server.id, { enabled: value }) }),
+          h(Toggle, { checked: server.trusted, label: "Доверен", disabled: busy, onChange: (value) => onToggle(server.id, { trusted: value }) }),
+          h("div", { className: "mcp-actions" },
+            h("button", { className: "mcp-btn ghost", disabled: busy, onClick: () => onTest(server.id) }, "Проверить"),
+            h("button", { className: "mcp-btn ghost", disabled: busy, onClick: () => { setOpen(!open); if (!open) onTools(server.id); } }, open ? "Скрыть" : "Tools"),
+            h("button", { className: "mcp-btn danger ghost", disabled: busy, onClick: () => onRemove(server.id) }, "Удалить"),
+          ),
+        ),
+        open ? h("div", { className: "mcp-tools" },
+          tools === undefined ? h("div", { className: "mcp-meta" }, "Загрузка…")
+            : tools.length === 0 ? h("div", { className: "mcp-meta" }, "Нет tools.")
+              : tools.map((tool) => h("div", { className: "mcp-tool", key: tool.name },
+                h("code", null, tool.name),
+                h("span", { title: tool.description }, tool.description || "без описания"),
+              )),
+        ) : null,
+      );
+    }
+
+    function ServerForm({ initial, busy, onCancel, onSave }) {
+      const [form, setForm] = useState(initial);
+      const set = (patch) => setForm((current) => ({ ...current, ...patch }));
+      const submit = (event) => {
+        event.preventDefault();
+        onSave({
+          ...form,
+          args: String(form.args ?? "").split(/\r?\n/u).map((line) => line.trim()).filter(Boolean),
+        });
+      };
+      return h("div", { className: "mcp-overlay", onMouseDown: (event) => { if (event.target === event.currentTarget) onCancel(); } },
+        h("form", { className: "mcp-modal", role: "dialog", "aria-modal": "true", "aria-label": "Добавить MCP-сервер", onSubmit: submit },
+          h("div", { className: "mcp-modal-head" },
+            h("div", null,
+              h("h2", null, initial.edit ? "Настроить сервер" : "Новый MCP-сервер"),
+              h("p", null, "Один раз добавьте подключение — дальше агент сам увидит его инструменты."),
+            ),
+            h("button", { type: "button", className: "mcp-btn ghost", onClick: onCancel, "aria-label": "Закрыть" }, "Закрыть"),
+          ),
+          h("div", { className: "mcp-form" },
+            h("div", { className: "mcp-field" },
+              h("label", { htmlFor: "mcp-id" }, "ID"),
+              h("input", { id: "mcp-id", value: form.id, disabled: initial.edit, placeholder: "github", onChange: (event) => set({ id: event.target.value.toLowerCase().replace(/[^a-z0-9_-]/gu, "-") }) }),
+            ),
+            h("div", { className: "mcp-field" },
+              h("label", { htmlFor: "mcp-transport" }, "Транспорт"),
+              h("select", { id: "mcp-transport", value: form.transport, onChange: (event) => set({ transport: event.target.value }) },
+                h("option", { value: "stdio" }, "stdio — локальная команда"),
+                h("option", { value: "http" }, "HTTP — удалённый сервер"),
+              ),
+            ),
+            form.transport === "stdio" ? h(React.Fragment, null,
+              h("div", { className: "mcp-field wide" },
+                h("label", { htmlFor: "mcp-command" }, "Команда"),
+                h("input", { id: "mcp-command", value: form.command, placeholder: "npx", onChange: (event) => set({ command: event.target.value }) }),
+              ),
+              h("div", { className: "mcp-field wide" },
+                h("label", { htmlFor: "mcp-args" }, "Аргументы — по одному в строке"),
+                h("textarea", { id: "mcp-args", value: form.args, placeholder: "-y\n@modelcontextprotocol/server-github", onChange: (event) => set({ args: event.target.value }) }),
+              ),
+              h("div", { className: "mcp-field" },
+                h("label", { htmlFor: "mcp-token-env" }, "Переменная токена"),
+                h("input", { id: "mcp-token-env", value: form.tokenEnv, placeholder: "GITHUB_TOKEN", onChange: (event) => set({ tokenEnv: event.target.value }) }),
+              ),
+            ) : h(React.Fragment, null,
+              h("div", { className: "mcp-field wide" },
+                h("label", { htmlFor: "mcp-url" }, "URL"),
+                h("input", { id: "mcp-url", value: form.url, placeholder: "https://example.com/mcp", onChange: (event) => set({ url: event.target.value }) }),
+              ),
+              h("div", { className: "mcp-field" },
+                h("label", { htmlFor: "mcp-token-header" }, "Заголовок токена"),
+                h("input", { id: "mcp-token-header", value: form.tokenHeader, placeholder: "Authorization", onChange: (event) => set({ tokenHeader: event.target.value }) }),
+              ),
+            ),
+            h("div", { className: "mcp-field wide" },
+              h("label", { htmlFor: "mcp-token" }, form.tokenLabel || "Токен / пароль"),
+              h("input", { id: "mcp-token", type: "password", value: form.token, placeholder: form.tokenPlaceholder || "оставьте пустым, если не нужен", autoComplete: "off", onChange: (event) => set({ token: event.target.value }) }),
+            ),
+            h("label", { className: "mcp-check wide" },
+              h("input", { type: "checkbox", checked: form.trusted, onChange: (event) => set({ trusted: event.target.checked }) }),
+              h("span", null, "Я доверяю этому серверу. Он сможет выполнять команды и читать данные, к которым у него есть доступ."),
+            ),
+          ),
+          h("p", { className: "mcp-note" }, "Секрет сохраняется в ~/.dsh/mcp.secrets.json с правами 0600 и не попадает в mcp.json или лог."),
+          h("div", { className: "mcp-form-actions" },
+            h("button", { type: "button", className: "mcp-btn", onClick: onCancel }, "Отмена"),
+            h("button", { type: "submit", className: "mcp-btn primary", disabled: busy }, busy ? "Сохраняем…" : "Сохранить и подключить"),
+          ),
+        ),
+      );
+    }
+
+    function McpSection() {
+      const [data, setData] = useState(null);
+      const [error, setError] = useState(null);
+      const [busy, setBusy] = useState(false);
+      const [form, setForm] = useState(null);
+      const [tools, setTools] = useState({});
+      const [toast, setToast] = useState("");
+
+      const load = async () => {
+        try {
+          const value = await call(window.__DSH_MCP_CTX__, "status");
+          setData(value);
+          setError(null);
+        } catch (cause) {
+          setError(cause instanceof Error ? cause.message : String(cause));
+        }
+      };
+
+      useEffect(() => { void load(); }, []);
+
+      const run = async (operation, payload, message) => {
+        setBusy(true);
+        setError(null);
+        try {
+          await call(window.__DSH_MCP_CTX__, operation, payload);
+          await load();
+          if (message) { setToast(message); setTimeout(() => setToast(""), 3000); }
+        } catch (cause) {
+          setError(cause instanceof Error ? cause.message : String(cause));
+        } finally {
+          setBusy(false);
+        }
+      };
+
+      const presets = PRESETS;
+      const openPreset = (preset) => setForm({
+        edit: false,
+        id: preset.id,
+        transport: preset.transport,
+        command: preset.command || "",
+        args: preset.args || "",
+        url: "",
+        tokenEnv: preset.tokenEnv || "",
+        tokenHeader: "Authorization",
+        tokenLabel: preset.tokenLabel || "Токен",
+        tokenPlaceholder: preset.tokenPlaceholder || "",
+        token: "",
+        trusted: preset.trusted === true,
+      });
+      const openManual = () => setForm({ edit: false, id: "", transport: "stdio", command: "npx", args: "-y\n", url: "", tokenEnv: "MCP_TOKEN", tokenHeader: "Authorization", tokenLabel: "Токен", tokenPlaceholder: "", token: "", trusted: false });
+
+      const servers = data?.servers ?? [];
+      const connected = servers.filter((server) => server.connected).length;
+      const totalTools = servers.reduce((sum, server) => sum + (Number(server.tools) || 0), 0);
+
+      return h("section", { className: "mcp-root", "aria-label": "MCP-подключения" },
+        h("div", { className: "mcp-head" },
+          h("div", null,
+            h("p", { className: "mcp-eyebrow" }, "MCP · Model Context Protocol"),
+            h("h2", { className: "mcp-title" }, "Подключения"),
+            h("p", { className: "mcp-sub" }, "Внешние системы для агента: GitHub, PostgreSQL, файлы и любые MCP-серверы. Добавьте один раз — инструменты появятся в новом чате."),
+          ),
+          h("div", { className: "mcp-toolbar" },
+            h("button", { className: "mcp-btn primary", onClick: openManual, disabled: busy }, "Добавить сервер"),
+          ),
+        ),
+        error ? h("div", { className: "mcp-error", role: "alert" }, error) : null,
+        toast ? h("div", { className: "mcp-toast", role: "status" }, toast) : null,
+        h("div", { className: "mcp-stats" },
+          h("div", { className: "mcp-stat" }, h("b", null, servers.length), h("span", null, "серверов")),
+          h("div", { className: "mcp-stat" }, h("b", null, connected), h("span", null, "подключено")),
+          h("div", { className: "mcp-stat" }, h("b", null, totalTools), h("span", null, "инструментов")),
+        ),
+        data === null ? h("div", { className: "mcp-loading" }, "Загружаем подключения…") : null,
+        data !== null && servers.length === 0 ? h("div", { className: "mcp-empty" },
+          h("h3", null, "Пока пусто — но это быстро"),
+          h("p", null, "Начните с готового пресета. Понадобится только токен, если он нужен серверу; для Filesystem — ничего."),
+          h("div", { className: "mcp-presets" }, presets.map((preset) => h("button", { key: preset.id, className: "mcp-preset", onClick: () => openPreset(preset) },
+            h("b", null, preset.title), h("small", null, preset.subtitle),
+          ))),
+          h("button", { className: "mcp-btn ghost", onClick: openManual }, "Настроить вручную"),
+        ) : null,
+        servers.length > 0 ? h("div", { className: "mcp-grid" }, servers.map((server) => h(ServerCard, {
+          key: server.id,
+          server,
+          busy,
+          tools: tools[server.id],
+          onToggle: (id, flags) => run("toggle", { id, ...flags }, "Настройки сервера обновлены"),
+          onTest: async (id) => {
+            setBusy(true);
+            try {
+              const result = await call(window.__DSH_MCP_CTX__, "test", { id });
+              setToast(result.connected ? `Подключён · ${result.tools} tools` : `Ошибка: ${result.error}`);
+              setTimeout(() => setToast(""), 4000);
+              await load();
+            } catch (cause) { setError(cause instanceof Error ? cause.message : String(cause)); }
+            finally { setBusy(false); }
+          },
+          onTools: async (id) => {
+            try {
+              const result = await call(window.__DSH_MCP_CTX__, "tools", { id });
+              setTools((current) => ({ ...current, [id]: result.tools }));
+              if (result.error) setError(result.error);
+            } catch (cause) { setError(cause instanceof Error ? cause.message : String(cause)); }
+          },
+          onRemove: (id) => {
+            if (window.confirm(`Удалить MCP-сервер «${id}»?`)) void run("remove", { id }, "Сервер удалён");
+          },
+        }))) : null,
+        servers.length > 0 ? h("p", { className: "mcp-note" }, `Секреты: ${data?.secretsFile || "~/.dsh/mcp.secrets.json"} · новые tools появятся в новом чате после подключения.`) : null,
+        form ? h(ServerForm, {
+          initial: form,
+          busy,
+          onCancel: () => setForm(null),
+          onSave: async (payload) => {
+            await run("save", payload, "Сервер сохранён и подключён");
+            setForm(null);
+          },
+        }) : null,
+      );
+    }
+
+    function apply(ctx) {
+      window.__DSH_MCP_CTX__ = ctx;
+      ctx.effect(() => {
+        const style = document.createElement("style");
+        style.id = "dsh-mcp-manager";
+        style.textContent = CSS;
+        document.head.appendChild(style);
+        return () => style.remove();
+      }, "mcp-manager: styles");
+      ctx.effect(() => ctx.slots.inject("settings.section", () => ctx.slots.register({
+        name: "settings.section",
+        id: "mcp-manager",
+        order: 35,
+        label: () => "MCP",      }, McpSection)), "mcp-manager: settings");
+    }
+
+    exports.apply = apply;
+    exports.inject = ["slots", "connection"];
+    return module.exports;
+  }
+});

package/plugins/dsh-mcp-manager/index.js

@@ -0,0 +1,159 @@
+/**
+ * dsh-mcp-manager — MCP servers for DSH, without an SDK dependency.
+ *
+ * Global config: `~/.dsh/mcp.json`
+ * Project config: `<project>/.dsh/mcp.json` (used by `/mcp`, not auto-started)
+ *
+ * A server runs only when `trusted: true`. Tools appear as
+ * `mcp__<server>__<tool>`; project servers can be inspected and called through
+ * `/mcp` even when their tools were not part of the current agent toolset.
+ */
+import path from "node:path";
+import fs from "node:fs";
+import { loadConfig, writeTemplate, globalConfigPath } from "./lib/config.js";
+import { McpManager } from "./lib/manager.js";
+import { registerApi } from "./lib/api.js";
+
+export const inject = ["tools", "connection"];
+
+function serverList(config) {
+  return config.servers.map((server) => {
+    let transport;
+    if (server.url) {
+      try { transport = `HTTP ${new URL(server.url).origin}`; } catch { transport = "HTTP (invalid url)"; }
+    } else {
+      transport = `stdio ${server.command} (${server.args.length} args)`;
+    }
+    return `- ${server.id} [${server.scope}] ${server.enabled ? "enabled" : "disabled"} ${server.trusted ? "trusted" : "UNTRUSTED"} · ${transport}`;
+  });
+}
+
+function formatStatus(manager) {
+  const rows = manager.status();
+  if (rows.length === 0) return "MCP: нет подключённых серверов.";
+  return rows
+    .map((row) => `- ${row.id}: ${row.connected ? `connected, tools ${row.tools}` : `not connected${row.error ? ` — ${row.error}` : ""}`}${row.serverInfo ? ` · ${row.serverInfo.name ?? ""} ${row.serverInfo.version ?? ""}`.trimEnd() : ""}`)
+    .join("\n");
+}
+
+function commandCwd(ctx) {
+  try {
+    return ctx.get?.("agents")?.currentInitiator?.()?.session?.header?.cwd || process.cwd();
+  } catch {
+    return process.cwd();
+  }
+}
+
+function registerCommand(ctx, manager) {
+  ctx.commands.register({
+    name: "mcp",
+    description: "MCP-серверы: список, инструменты, вызов, resources, reload",
+    input: { hint: "list | trust | untrust | tools [server] | call <server> <tool> [json] | resources <server> | read <server> <uri> | reload | init" },
+    recordInput: false,
+    async handler({ rawInput }) {
+      const input = String(rawInput ?? "").trim();
+      const [action = "list", ...rest] = input.split(/\s+/u);
+      try {
+        if (action === "init") {
+          const result = writeTemplate();
+          return { kind: "success", text: result.created ? `Создан ${result.file}` : `Уже существует: ${result.file}` };
+        }
+        const config = loadConfig({ cwd: commandCwd(ctx) });
+        if (action === "trust" || action === "untrust") {
+          if (!config.projectConfig) return { kind: "error", text: "Нет .dsh/mcp.json в проекте." };
+          const marker = path.join(path.dirname(config.projectConfig), "mcp.trusted");
+          if (action === "trust") {
+            fs.writeFileSync(marker, `${new Date().toISOString()}\n`, "utf8");
+            return { kind: "success", text: `Доверие к проектным MCP-серверам включено: ${marker}` };
+          }
+          fs.rmSync(marker, { force: true });
+          return { kind: "success", text: "Доверие к проектным MCP-серверам снято." };
+        }
+        if (action === "list") {
+          const lines = [
+            `Global: ${globalConfigPath()}`,
+            `Project: ${config.projectConfig ?? "нет"}`,
+            "",
+            ...(serverList(config).length > 0 ? serverList(config) : ["Нет серверов в mcp.json."]),
+            "",
+            formatStatus(manager),
+          ];
+          return { kind: "success", text: lines.join("\n") };
+        }
+        if (action === "reload") {
+          await manager.close();
+          const results = await manager.connectAll(config.servers.filter((server) => server.enabled && server.trusted));
+          manager.registerTools();
+          return { kind: "success", text: `MCP reload: ${results.filter((r) => r.status === "fulfilled" && r.value.client).length}/${results.length} подключено.\n${formatStatus(manager)}` };
+        }
+        const server = config.servers.find((item) => item.id === rest[0]);
+        if (["tools", "call", "resources", "read"].includes(action) && !rest[0]) {
+          return { kind: "error", text: `/mcp ${action}: укажите сервер` };
+        }
+        if (["tools", "call", "resources", "read"].includes(action) && !server) {
+          return { kind: "error", text: `MCP-сервер не найден: ${rest[0]}` };
+        }
+        if (!server.trusted) return { kind: "error", text: `MCP ${server.id}: trusted=false; включите доверие в mcp.json` };
+        const record = await manager.connect(server);
+        if (!record.client) return { kind: "error", text: `MCP ${server.id}: ${record.error}` };
+        if (action === "tools") {
+          return {
+            kind: "success",
+            text: record.tools.length
+              ? record.tools.map((tool) => `- ${tool.name}${tool.description ? ` — ${tool.description}` : ""}`).join("\n")
+              : "У сервера нет tools.",
+          };
+        }
+        if (action === "call") {
+          const toolName = rest[1];
+          if (!toolName) return { kind: "error", text: "/mcp call: укажите tool" };
+          const args = rest[2] ? JSON.parse(rest.slice(2).join(" ")) : {};
+          const text = await manager.call(server.id, toolName, args);
+          return { kind: "success", text: text || "(пустой результат)" };
+        }
+        if (action === "resources") {
+          const resources = await manager.resources(server.id);
+          return { kind: "success", text: resources.length ? resources.map((item) => `- ${item.uri}${item.name ? ` — ${item.name}` : ""}`).join("\n") : "Нет resources." };
+        }
+        if (action === "read") {
+          const uri = rest.slice(1).join(" ");
+          if (!uri) return { kind: "error", text: "/mcp read: укажите uri" };
+          const result = await manager.readResource(server.id, uri);
+          const contents = Array.isArray(result?.contents) ? result.contents : [];
+          const text = contents.map((item) => item.text ?? `[${item.mimeType ?? "resource"}] ${item.uri ?? ""}`).join("\n");
+          return { kind: "success", text: text || "(пустой resource)" };
+        }
+        return { kind: "error", text: `Неизвестное действие /mcp ${action}` };
+      } catch (error) {
+        return { kind: "error", text: `/mcp ${action}: ${error instanceof Error ? error.message : String(error)}` };
+      }
+    },
+  });
+}
+
+export function apply(ctx) {
+  const manager = new McpManager(ctx);
+  ctx.effect(() => () => manager.close(), "dsh-mcp-manager: connections");
+  try {
+    registerApi(ctx, manager);
+  } catch (error) {
+    ctx.logger?.warn?.(`[mcp] settings API skipped: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  try {
+    ctx.inject(["commands"], (child) => registerCommand(child, manager));
+  } catch (error) {
+    ctx.logger?.warn?.(`[mcp] command skipped: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  void (async () => {
+    try {
+      const config = loadConfig({ cwd: process.cwd() });
+      const auto = config.servers.filter((server) => server.scope === "global" && server.enabled && server.trusted);
+      if (auto.length === 0) return;
+      await manager.connectAll(auto);
+      manager.registerTools();
+      ctx.logger?.info?.(`[mcp] auto-connected ${auto.length} global server(s)`);
+    } catch (error) {
+      ctx.logger?.warn?.(`[mcp] auto-start skipped: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  })();
+}