kubeview-mcp 1.1.0 → 1.3.0

package/CHANGELOG.md

@@ -5,6 +5,33 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.0] - 2025-11-27
+
+### Added
+- **Code-Mode Execution**: Added sandboxed TypeScript code execution runtime following Anthropic's code execution with MCP approach
+- **RunCodeTool**: Implemented `run_code` tool for executing TypeScript code in a sandboxed Node.js VM environment
+- **Code-Mode CLI**: Added `kubeview-mcp-code-mode` binary and `npm run code-mode` script for standalone code execution
+- **TypeScript Transpilation**: Integrated TypeScript compiler for runtime transpilation of agent code (ES2022 target)
+- **Global Type Definitions**: Added `/sys/global.d.ts` resource providing TypeScript type definitions for all available tools
+- **Tool Executor**: Implemented tool executor allowing sandboxed code to call MCP tools internally
+- **Helper Functions**: Added `callMCPTool()`, `searchTools()`, and `getToolHelp()` helper functions for progressive tool discovery
+- **Code-Mode Configuration**: Added `CodeModeConfig` with configurable sandbox limits (memory, timeout) and workspace settings
+- **Dual Mode Support**: Added `NODE_MODE=code` environment variable to run server in code-mode (exposes only `run_code` tool)
+
+### Changed
+- **Plugin Architecture**: Removed version property from various tools plugins and MCPServer for simplified plugin management
+- **Dependencies**: Added TypeScript as a runtime dependency (previously dev-only) for code-mode transpilation
+- **Tool Manifest**: Enhanced tool manifest system to support dynamic tool generation for agent code execution
+
+### Fixed
+- **Type Definitions**: Fixed TypeScript typing for generated global DTS resources and resource registration
+
+## [1.2.0] - 2025-08-19
+
+### Changed
+- **Changed variable naming**
+- **Diabled logging by default**
+
 ## [1.1.0] - 2025-08-09
 
 ### Added
@@ -80,4 +107,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Integration guides for Cursor IDE
 - API documentation for developers
 
-[1.0.0]: https://github.com/mikhae1/kubeview-mcp/releases/tag/v1.0.0
+[1.0.0]: https://github.com/mikhae1/kubeview-mcp/releases/tag/v1.0.0

package/README.md

@@ -4,7 +4,7 @@
 [![Node.js Version](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen)](https://nodejs.org/)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.8+-blue)](https://www.typescriptlang.org/)
 
-KubeView MCP is a read-only Model Context Protocol (MCP) server that exposes AI-friendly tools for safe Kubernetes, Helm, Argo Workflows, and Argo CD introspection. It pairs with Cursor IDE, Claude Desktop, and other MCP clients to let you inspect, diagnose, and debug clusters via natural language—without any write operations.
+KubeView MCP is a read-only Model Context Protocol (MCP) server that exposes AI-friendly tools for safe Kubernetes, Helm, Argo Workflows, and Argo CD introspection. It pairs with Cursor IDE, Claude Code/Desktop, and other MCP clients to let you inspect, diagnose, and debug clusters via natural language and without any write operations.
 
 ---
 
@@ -22,13 +22,23 @@ KubeView MCP is a read-only Model Context Protocol (MCP) server that exposes AI-
 
 ## 🚀 Quick Start
 
-### Zero-install via npx
+Add to your MCP client config:
 
-```bash
-npx -y https://github.com/mikhae1/kubeview-mcp
+```json
+{
+  "mcpServers": {
+    "kubeview-mcp": {
+      "command": "npx",
+      "args": ["-y", "https://github.com/mikhae1/kubeview-mcp"],
+      "env": {
+        "KUBECONFIG": "$HOME/.kube/config"
+      }
+    }
+  }
+}
 ```
 
-Add to your MCP client config (for Cursor, `~/.cursor/mcp.json`):
+If you want to use code-mode only (heavy context tasks, like logs parsing, etc.):
 
 ```json
 {
@@ -37,7 +47,8 @@ Add to your MCP client config (for Cursor, `~/.cursor/mcp.json`):
       "command": "npx",
       "args": ["-y", "https://github.com/mikhae1/kubeview-mcp"],
       "env": {
-        "KUBECONFIG": "$HOME/.kube/config"
+        "KUBECONFIG": "$HOME/.kube/config",
+        "NODE_MODE": "code"
       }
     }
   }
@@ -48,10 +59,18 @@ Add to your MCP client config (for Cursor, `~/.cursor/mcp.json`):
 
 - Node.js ≥ 18
 - Access to a Kubernetes cluster (kubeconfig)
-- Optional CLIs on PATH when using those plugins: `helm`, `argo`, `argocd`
+- Optional CLIs on PATH if you want to use those plugins: `helm`, `argo`, `argocd`
 
 ### Local install
 
+#### npx
+
+```bash
+npx -y https://github.com/mikhae1/kubeview-mcp
+```
+
+#### git
+
 ```bash
 git clone https://github.com/mikhae1/kubeview-mcp.git
 cd kubeview-mcp
@@ -70,9 +89,66 @@ npm start
 
 # Or use the bundled binary wrapper
 kubeview-mcp serve
+
+# Launch the code-mode runtime (see section below)
+npm run code-mode
 ```
 
----
+## 🧠 Code-Mode Execution
+
+Inspired by [Code execution with MCP](https://www.anthropic.com/engineering/code-execution-with-mcp), KubeView now ships with a code-mode runtime that lets agents explore generated TypeScript API, search tools progressively, and run sandboxed workflows without piping giant schemas through the model context.
+
+### What it provides
+
+- **MCP bridge layer** – connects to MCP server tools.
+- **Schema→TypeScript codegen** – converts every tool schema into `generated/servers/<server>/<tool>.ts` wrappers plus runtime helpers (`generated/runtime/*`), so agents can `import` strongly-typed helpers instead of copying JSON schemas.
+- **Tool search utilities** – manifests + runtime helpers (`toolSearch.ts`, `search_tools` MCP tool) let agents progressively discover servers and tools without loading everything upfront.
+- **Sandboxed execution** – `isolated-vm` powers a locked-down Node.js-like environment with controlled `console`, MCP tool access, and a scoped filesystem bridge.
+- **Stateful workspace & skills** – the sandbox exposes a safe filesystem rooted at `./workspace`, including a `skills/` folder with a `SKILL.md` convention for reusable snippets.
+
+### How to use
+
+#### Exposing only the code-mode entry tool
+
+To present a single `run_code` tool to your MCP client (and force all heavy work through the filesystem runtime), start the server with `NODE_MODE=code`, e.g.:
+
+```bash
+NODE_MODE=code npx -y https://github.com/mikhae1/kubeview-mcp
+```
+
+In this mode the server registers only the `run_code` tool, which accepts the following parameters:
+
+```ts
+{
+  code: string;          // required – snippet you plan to execute in the sandbox
+  input?: string;        // optional stdin payload
+}
+```
+
+Calling `run_code` doesn’t execute anything inside the MCP process; instead it returns the generated filesystem tree (`generated/servers/...`, `generated/runtime/...`) plus instructions for launching `kubeview-mcp-code-mode` / `npm run code-mode`, keeping the MCP handshake tiny while the real work happens inside the sandbox.
+
+### Manually setting up the sandbox
+
+1. Copy the sample config and edit it for your environment:
+   ```bash
+   cp kube-mcp.code-mode.example.json kube-mcp.code-mode.json
+   ```
+2. Build the project so the CLI wrapper can import the compiled entrypoint:
+   ```bash
+   npm run build
+   ```
+3. Edit `workspace/main.ts` (auto-created on first run) to import generated helpers:
+
+4. Run the runtime (or use the new `kubeview-mcp-code-mode` binary):
+   ```bash
+   npm run code-mode
+   # or
+   kubeview-mcp-code-mode
+   ```
+
+Generated modules call back into real MCP servers via the sandbox bridge, so large responses stay in the execution environment and only summaries hit the model context.
+
+The runtime writes everything under `generated/` and `workspace/`. Clean them up at any time to force regeneration.
 
 ## 📟 Tool Index (CLI)
 
@@ -135,12 +211,14 @@ npm run command -- <tool_name> [--param=value ...]
 Provide env vars via your MCP client config or shell.
 
 - **KUBECONFIG**: Path to kubeconfig (default: `$HOME/.kube/config`)
-- **LOG_LEVEL**: `error|warn|info|debug` (server logs also write to `kubeview-mcp.log`)
-- **TIMEOUT**: Global per-tool timeout in ms (applies to all tools)
-- CLI timeouts: **HELM_TIMEOUT**, **ARGO_TIMEOUT**, **ARGOCD_TIMEOUT** (ms)
-- CLI executable overrides: **HELM_PATH**, **ARGO_PATH**, **ARGOCD_PATH**
-- Plugin toggles: **DISABLE_KUBERNETES_PLUGIN**, **DISABLE_HELM_PLUGIN**, **DISABLE_ARGO_PLUGIN**, **DISABLE_ARGOCD_PLUGIN** (`true|1` to disable)
-- Kubernetes options: **KUBE_CONTEXT**, **K8S_SKIP_TLS_VERIFY** (`true|1`)
+- **MCP_LOG_LEVEL**: `error|warn|info|debug`
+- **MCP_LOG_ENABLE**: `true|1` to enable server file logging (default: disabled)
+- **MCP_LOG_FILE**: Path to server log file (default when enabled: `kubeview-mcp.log`)
+- **MCP_TIMEOUT**: Global per-tool timeout in ms (applies to all tools)
+- CLI timeouts: **MCP_HELM_TIMEOUT**, **MCP_ARGO_TIMEOUT**, **MCP_ARGOCD_TIMEOUT** (ms)
+- CLI executable overrides: **MCP_HELM_PATH**, **MCP_ARGO_PATH**, **MCP_ARGOCD_PATH**
+- Plugin toggles: **MCP_DISABLE_KUBERNETES_PLUGIN**, **MCP_DISABLE_HELM_PLUGIN**, **MCP_DISABLE_ARGO_PLUGIN**, **MCP_DISABLE_ARGOCD_PLUGIN** (`true|1` to disable)
+- Kubernetes options: **MCP_KUBE_CONTEXT**, **MCP_K8S_SKIP_TLS_VERIFY** (`true|1`)
 
 Example (Cursor `mcp.json`):
 
@@ -152,9 +230,9 @@ Example (Cursor `mcp.json`):
       "args": ["-y", "https://github.com/mikhae1/kubeview-mcp"],
       "env": {
         "KUBECONFIG": "$HOME/.kube/config",
-        "LOG_LEVEL": "info",
-        "HELM_TIMEOUT": "45000",
-        "DISABLE_ARGO_PLUGIN": "1"
+        "MCP_LOG_LEVEL": "info",
+        "MCP_HELM_TIMEOUT": "45000",
+        "MCP_DISABLE_ARGO_PLUGIN": "1"
       }
     }
   }
@@ -167,8 +245,8 @@ Example (Cursor `mcp.json`):
 
 Global masking prevents accidental disclosure of secrets (enabled when any of the flags below are set):
 
-- Enable: `MCP_HIDE_SENSITIVE` or `HIDE_SENSITIVE_DATA` or `MASK_SENSITIVE_DATA` → `true|1|yes|on`
-- Mask text override: `SENSITIVE_MASK` (default: `*** FILTERED ***`)
+- Enable: `MCP_HIDE_SENSITIVE` or `MCP_HIDE_SENSITIVE_DATA` or `MCP_MASK_SENSITIVE_DATA` → `true|1|yes|on`
+- Mask text override: `MCP_SENSITIVE_MASK` (default: `*** FILTERED ***`)
 
 Effects:
 
@@ -216,34 +294,10 @@ npm run command -- kube_net --sourcePod=api-0 --namespace=prod --targetService=d
 
 # Helm release values (masked)
 npm run command -- helm_get --what=values --releaseName=my-release --namespace=default --allValues=true
-
-# Argo CD app resources
-npm run command -- argocd_app --operation=resources --appName=my-app --outputFormat=json
 ```
 
 ---
 
-## 🤝 Contributing
-
-1. Fork the repo
-2. Create a feature branch: `git checkout -b feat/my-awesome-feature`
-3. Commit: `git commit -m "feat: add my awesome feature"`
-4. Push: `git push origin feat/my-awesome-feature`
-5. Open a Pull Request
-
-Tip: run `npm run lint` and `npm run test` locally before submitting.
-
----
-
 ## 📄 License
 
 MIT – see `LICENSE`.
-
----
-
-## 🙏 Acknowledgments
-
-- Model Context Protocol SDK
-- Kubernetes JavaScript Client
-- Winston
-- TypeScript

package/bin/kubeview-mcp-code-mode.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+
+import { fileURLToPath } from 'url';
+import path from 'path';
+import fs from 'fs';
+import { spawn, execSync } from 'child_process';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const projectRoot = path.resolve(__dirname, '..');
+
+function ensureBuild() {
+  const distDir = path.join(projectRoot, 'dist');
+  const cliPath = path.join(distDir, 'src', 'cli', 'code-mode.js');
+  if (fs.existsSync(cliPath)) {
+    return cliPath;
+  }
+
+  console.error('[kubeview-mcp] Building project for code-mode CLI...');
+  try {
+    execSync('npm run build', { cwd: projectRoot, stdio: 'inherit' });
+  } catch (error) {
+    console.error('Failed to build project for code-mode CLI.');
+    console.error(error);
+    process.exit(1);
+  }
+
+  if (!fs.existsSync(cliPath)) {
+    console.error('code-mode CLI not found after build. Expected at:', cliPath);
+    process.exit(1);
+  }
+
+  return cliPath;
+}
+
+function runCodeMode() {
+  const cliPath = ensureBuild();
+  // Pass all arguments to the CLI
+  const args = process.argv.slice(2);
+
+  const child = spawn('node', [cliPath, ...args], {
+    cwd: projectRoot,
+    stdio: 'inherit',
+    env: {
+      ...process.env,
+      KUBE_MCP_FORCE_VM_SANDBOX: '1',
+    },
+  });
+
+  child.on('close', (code) => {
+    process.exit(code ?? 0);
+  });
+
+  child.on('error', (error) => {
+    console.error('Failed to start code-mode CLI:', error);
+    process.exit(1);
+  });
+}
+
+runCodeMode();

package/bin/setup.js

@@ -173,9 +173,9 @@ class SetupManager {
       env: {
         KUBECONFIG: process.env.KUBECONFIG || this.defaultKubeconfig,
         // Disable optional plugins if their CLIs are not present to prevent startup failures in hosts like Claude
-        ...(helmAvailable ? {} : { DISABLE_HELM_PLUGIN: '1' }),
-        ...(argoAvailable ? {} : { DISABLE_ARGO_PLUGIN: '1' }),
-        ...(argocdAvailable ? {} : { DISABLE_ARGOCD_PLUGIN: '1' }),
+        ...(helmAvailable ? {} : { MCP_DISABLE_HELM_PLUGIN: '1' }),
+        ...(argoAvailable ? {} : { MCP_DISABLE_ARGO_PLUGIN: '1' }),
+        ...(argocdAvailable ? {} : { MCP_DISABLE_ARGOCD_PLUGIN: '1' }),
       }
     };
   }
@@ -227,14 +227,14 @@ class SetupManager {
     console.log(`  Entry point: ${serverConfig.args[0]}`);
     console.log(`  Kubeconfig: ${serverConfig.env.KUBECONFIG}`);
 
-    if (serverConfig.env.LOG_LEVEL) {
-      console.log(`  Log level: ${serverConfig.env.LOG_LEVEL}`);
+    if (serverConfig.env.MCP_LOG_LEVEL) {
+      console.log(`  Log level: ${serverConfig.env.MCP_LOG_LEVEL}`);
     }
 
     // Show optional plugin status
-    const helmDisabled = serverConfig.env.DISABLE_HELM_PLUGIN === '1' || serverConfig.env.DISABLE_HELM_PLUGIN === 'true';
-    const argoDisabled = serverConfig.env.DISABLE_ARGO_PLUGIN === '1' || serverConfig.env.DISABLE_ARGO_PLUGIN === 'true';
-    const argocdDisabled = serverConfig.env.DISABLE_ARGOCD_PLUGIN === '1' || serverConfig.env.DISABLE_ARGOCD_PLUGIN === 'true';
+    const helmDisabled = serverConfig.env.MCP_DISABLE_HELM_PLUGIN === '1' || serverConfig.env.MCP_DISABLE_HELM_PLUGIN === 'true';
+    const argoDisabled = serverConfig.env.MCP_DISABLE_ARGO_PLUGIN === '1' || serverConfig.env.MCP_DISABLE_ARGO_PLUGIN === 'true';
+    const argocdDisabled = serverConfig.env.MCP_DISABLE_ARGOCD_PLUGIN === '1' || serverConfig.env.MCP_DISABLE_ARGOCD_PLUGIN === 'true';
     console.log('  Optional plugins:');
     console.log(`    Helm:   ${helmDisabled ? 'disabled (helm CLI not found)' : 'enabled'}`);
     console.log(`    Argo:   ${argoDisabled ? 'disabled (argo CLI not found)' : 'enabled'}`);

package/dist/agent/bridge/MCPBridge.d.ts

@@ -0,0 +1,41 @@
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { Logger } from 'winston';
+export interface MCPServerConfig {
+    name: string;
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    timeoutMs?: number;
+}
+export interface ToolRegistration {
+    qualifiedName: string;
+    server: string;
+    toolName: string;
+    tool: Tool;
+}
+export interface MCPBridgeOptions {
+    enablePII?: boolean;
+    logger?: Logger;
+    defaultTimeoutMs?: number;
+}
+export declare class MCPBridge {
+    private readonly configs;
+    private readonly options;
+    private clients;
+    private toolRegistry;
+    private piiTokenizer?;
+    private toolDiscoveryCache;
+    private configByServer;
+    constructor(configs: MCPServerConfig[], options?: MCPBridgeOptions);
+    initialize(): Promise<void>;
+    private initializeServer;
+    private cacheToolMetadata;
+    getRegisteredTools(): ToolRegistration[];
+    getToolMetadata(qualifiedName: string): ToolRegistration | undefined;
+    listServers(): string[];
+    listToolsForServer(serverName: string): Tool[];
+    callTool<T = any>(qualifiedName: string, args: any): Promise<T>;
+    close(): Promise<void>;
+    private withTimeout;
+}
+//# sourceMappingURL=MCPBridge.d.ts.map

package/dist/agent/bridge/MCPBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCPBridge.d.ts","sourceRoot":"","sources":["../../../src/agent/bridge/MCPBridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAmB,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGtC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,SAAS;IAQlB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAR1B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,YAAY,CAA4C;IAChE,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,kBAAkB,CAAkC;IAC5D,OAAO,CAAC,cAAc,CAA2C;gBAG9C,OAAO,EAAE,eAAe,EAAE,EAC1B,OAAO,GAAE,gBAAqB;IAOpC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAU1B,gBAAgB;IAmC9B,OAAO,CAAC,iBAAiB;IAclB,kBAAkB,IAAI,gBAAgB,EAAE;IAIxC,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAIpE,WAAW,IAAI,MAAM,EAAE;IAIvB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE;IAIxC,QAAQ,CAAC,CAAC,GAAG,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC;IA+B/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YASrB,WAAW;CAiB1B"}

package/dist/agent/bridge/MCPBridge.js

@@ -0,0 +1,127 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { PIITokenizer } from '../security/PIITokenizer.js';
+export class MCPBridge {
+    configs;
+    options;
+    clients = new Map();
+    toolRegistry = new Map();
+    piiTokenizer;
+    toolDiscoveryCache = new Map();
+    configByServer = new Map();
+    constructor(configs, options = {}) {
+        this.configs = configs;
+        this.options = options;
+        if (options.enablePII) {
+            this.piiTokenizer = new PIITokenizer();
+        }
+    }
+    async initialize() {
+        for (const config of this.configs) {
+            if (this.configByServer.has(config.name)) {
+                throw new Error(`Duplicate MCP server name: ${config.name}`);
+            }
+            this.configByServer.set(config.name, config);
+            await this.initializeServer(config);
+        }
+    }
+    async initializeServer(config) {
+        const envEntries = Object.entries({
+            ...process.env,
+            ...config.env,
+        }).filter((entry) => typeof entry[1] === 'string');
+        const mergedEnv = Object.fromEntries(envEntries);
+        const transport = new StdioClientTransport({
+            command: config.command,
+            args: config.args ?? [],
+            env: mergedEnv,
+        });
+        const client = new Client({
+            name: 'kube-mcp-code-mode-client',
+            version: '1.0.0',
+        }, {
+            capabilities: {},
+        });
+        if (this.options.logger) {
+            this.options.logger.info(`Connecting to MCP server '${config.name}'`);
+        }
+        await client.connect(transport);
+        this.clients.set(config.name, client);
+        const toolsResponse = await client.listTools();
+        this.cacheToolMetadata(config.name, toolsResponse);
+    }
+    cacheToolMetadata(serverName, toolsResponse) {
+        this.toolDiscoveryCache.set(serverName, toolsResponse.tools);
+        for (const tool of toolsResponse.tools) {
+            const qualifiedName = `${serverName}__${tool.name}`;
+            this.toolRegistry.set(qualifiedName, {
+                qualifiedName,
+                server: serverName,
+                toolName: tool.name,
+                tool,
+            });
+        }
+    }
+    getRegisteredTools() {
+        return Array.from(this.toolRegistry.values());
+    }
+    getToolMetadata(qualifiedName) {
+        return this.toolRegistry.get(qualifiedName);
+    }
+    listServers() {
+        return Array.from(this.clients.keys());
+    }
+    listToolsForServer(serverName) {
+        return this.toolDiscoveryCache.get(serverName) ?? [];
+    }
+    async callTool(qualifiedName, args) {
+        const registration = this.toolRegistry.get(qualifiedName);
+        if (!registration) {
+            throw new Error(`Tool ${qualifiedName} not found`);
+        }
+        const client = this.clients.get(registration.server);
+        if (!client) {
+            throw new Error(`Server ${registration.server} not connected`);
+        }
+        const sanitizedArgs = this.piiTokenizer ? this.piiTokenizer.tokenize(args) : args;
+        const timeoutMs = this.configByServer.get(registration.server)?.timeoutMs ?? this.options.defaultTimeoutMs;
+        const callPromise = client.callTool({
+            name: registration.toolName,
+            arguments: sanitizedArgs,
+        });
+        let result;
+        if (timeoutMs && timeoutMs > 0) {
+            result = await this.withTimeout(callPromise, timeoutMs, qualifiedName);
+        }
+        else {
+            result = await callPromise;
+        }
+        const detokenized = this.piiTokenizer ? this.piiTokenizer.detokenize(result) : result;
+        return detokenized;
+    }
+    async close() {
+        for (const client of this.clients.values()) {
+            await client.close();
+        }
+        this.clients.clear();
+        this.toolRegistry.clear();
+        this.toolDiscoveryCache.clear();
+    }
+    async withTimeout(promise, timeoutMs, label) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                reject(new Error(`${label} timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            promise
+                .then((value) => {
+                clearTimeout(timer);
+                resolve(value);
+            })
+                .catch((err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+        });
+    }
+}
+//# sourceMappingURL=MCPBridge.js.map

package/dist/agent/bridge/MCPBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MCPBridge.js","sourceRoot":"","sources":["../../../src/agent/bridge/MCPBridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAGjF,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAuB3D,MAAM,OAAO,SAAS;IAQD;IACA;IARX,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,YAAY,GAAkC,IAAI,GAAG,EAAE,CAAC;IACxD,YAAY,CAAgB;IAC5B,kBAAkB,GAAwB,IAAI,GAAG,EAAE,CAAC;IACpD,cAAc,GAAiC,IAAI,GAAG,EAAE,CAAC;IAEjE,YACmB,OAA0B,EAC1B,UAA4B,EAAE;QAD9B,YAAO,GAAP,OAAO,CAAmB;QAC1B,YAAO,GAAP,OAAO,CAAuB;QAE/C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,UAAU;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAuB;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC;YAChC,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,MAAM,CAAC,GAAG;SACd,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAE9E,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACzC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;YACE,IAAI,EAAE,2BAA2B;YACjC,OAAO,EAAE,OAAO;SACjB,EACD;YACE,YAAY,EAAE,EAAE;SACjB,CACF,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAEtC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAC/C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAEO,iBAAiB,CAAC,UAAkB,EAAE,aAA8B;QAC1E,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;QAE7D,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,aAAa,GAAG,GAAG,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE;gBACnC,aAAa;gBACb,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,kBAAkB;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAEM,eAAe,CAAC,aAAqB;QAC1C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAEM,WAAW;QAChB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAEM,kBAAkB,CAAC,UAAkB;QAC1C,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAU,aAAqB,EAAE,IAAS;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,QAAQ,aAAa,YAAY,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,CAAC,MAAM,gBAAgB,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAElF,MAAM,SAAS,GACb,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC3F,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC;YAClC,IAAI,EAAE,YAAY,CAAC,QAAQ;YAC3B,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;QAEH,IAAI,MAAmD,CAAC;QACxD,IAAI,SAAS,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,WAAW,CAAC;QAC7B,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,OAAO,WAAgB,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAI,OAAmB,EAAE,SAAiB,EAAE,KAAa;QAChF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC/D,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,OAAO;iBACJ,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/agent/codegen/CodegenManager.d.ts

@@ -0,0 +1,26 @@
+import { ToolSchemaIntrospector } from './ToolSchemaIntrospector.js';
+export interface CodegenManagerOptions {
+    outputDir: string;
+    runtimeImportPath?: string;
+    manifestPath?: string;
+}
+export declare class CodegenManager {
+    private readonly introspector;
+    private readonly mapper;
+    private readonly printer;
+    private readonly options;
+    constructor(introspector: ToolSchemaIntrospector, options?: Partial<CodegenManagerOptions>);
+    generate(): Promise<void>;
+    private groupByServer;
+    private writeToolFile;
+    private createRuntimeImport;
+    private createToolFunction;
+    private writeServerIndex;
+    private writeRootIndex;
+    private writeManifest;
+    private ensureRuntimeHelpers;
+    private printStatements;
+    private toPascalCase;
+    private toCamelCase;
+}
+//# sourceMappingURL=CodegenManager.d.ts.map

package/dist/agent/codegen/CodegenManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodegenManager.d.ts","sourceRoot":"","sources":["../../../src/agent/codegen/CodegenManager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAIrE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAQD,qBAAa,cAAc;IAMvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAL/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0D;IAClF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;gBAG7B,YAAY,EAAE,sBAAsB,EACrD,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC;IAK7B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBtC,OAAO,CAAC,aAAa;YAWP,aAAa;IAsB3B,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,kBAAkB;YAwDZ,gBAAgB;YAqBhB,cAAc;YAcd,aAAa;YAeb,oBAAoB;IAiGlC,OAAO,CAAC,eAAe;IAavB,OAAO,CAAC,YAAY;IAOpB,OAAO,CAAC,WAAW;CAIpB"}