mcp-tool-bridge 1.1.0

package/dist/types-tss7dg3j.d.cts

@@ -0,0 +1,81 @@
+/**
+ * How much harm a tool can do, from `none` (no side effect at all) to
+ * `critical`. The level drives the confirmation guard and the MCP
+ * `readOnlyHint` annotation; it is never shown to the model as such.
+ */
+declare const SENSITIVITY_LEVELS: readonly ["none", "low", "medium", "high", "critical"];
+type Sensitivity = (typeof SENSITIVITY_LEVELS)[number];
+declare function isSensitivity(value: unknown): value is Sensitivity;
+/** Position of a level on the scale: `none` is 0, `critical` is 4. */
+declare function sensitivityRank(level: Sensitivity): number;
+/**
+ * Who is calling. The bridge only reads `id` (for audit and for binding
+ * confirmations) and `roles` (for access control); anything else the host
+ * needs belongs in its own context.
+ */
+interface Principal {
+    readonly id: string;
+    readonly roles: readonly string[];
+}
+type JsonPrimitive = string | number | boolean | null;
+type JsonValue = JsonPrimitive | readonly JsonValue[] | JsonObject;
+interface JsonObject {
+    readonly [key: string]: JsonValue;
+}
+interface TextContent {
+    readonly type: 'text';
+    readonly text: string;
+}
+interface ImageContent {
+    readonly type: 'image';
+    /** Base64-encoded bytes. */
+    readonly data: string;
+    readonly mimeType: string;
+}
+interface AudioContent {
+    readonly type: 'audio';
+    /** Base64-encoded bytes. */
+    readonly data: string;
+    readonly mimeType: string;
+}
+type ContentBlock = TextContent | ImageContent | AudioContent;
+/** The shape of an MCP `tools/call` result, restricted to what the bridge emits. */
+interface ToolResult {
+    readonly content: readonly ContentBlock[];
+    readonly structuredContent?: JsonObject;
+    readonly isError?: boolean;
+}
+/**
+ * What a handler may return: a plain string (sent as text) or a full result,
+ * usually built with `text()` or `json()`.
+ */
+type ToolOutput = string | ToolResult;
+
+/** A JSON Schema whose root is an object, as MCP requires for tool inputs. */
+interface JsonSchemaObject extends JsonObject {
+    readonly type: 'object';
+}
+/** One reason the arguments were rejected. `path` is a JSON Pointer; the root is `""`. */
+interface ArgIssue {
+    readonly path: string;
+    readonly message: string;
+}
+type ParseResult<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly issues: readonly ArgIssue[];
+};
+/**
+ * The contract every argument schema meets, whatever produced it. `jsonSchema`
+ * is what the model sees; `parse` is what the bridge enforces. Both adapters
+ * shipped with the package derive the two from a single declaration, so they
+ * cannot drift apart.
+ */
+interface ArgsSchema<T> {
+    readonly jsonSchema: JsonSchemaObject;
+    readonly parse: (input: unknown) => ParseResult<T>;
+}
+
+export { type ArgsSchema as A, type ContentBlock as C, type ImageContent as I, type JsonSchemaObject as J, type Principal as P, type Sensitivity as S, type ToolOutput as T, type JsonObject as a, type ArgIssue as b, type JsonValue as c, type ToolResult as d, type AudioContent as e, type JsonPrimitive as f, type ParseResult as g, SENSITIVITY_LEVELS as h, type TextContent as i, isSensitivity as j, sensitivityRank as s };

package/dist/types-tss7dg3j.d.ts

@@ -0,0 +1,81 @@
+/**
+ * How much harm a tool can do, from `none` (no side effect at all) to
+ * `critical`. The level drives the confirmation guard and the MCP
+ * `readOnlyHint` annotation; it is never shown to the model as such.
+ */
+declare const SENSITIVITY_LEVELS: readonly ["none", "low", "medium", "high", "critical"];
+type Sensitivity = (typeof SENSITIVITY_LEVELS)[number];
+declare function isSensitivity(value: unknown): value is Sensitivity;
+/** Position of a level on the scale: `none` is 0, `critical` is 4. */
+declare function sensitivityRank(level: Sensitivity): number;
+/**
+ * Who is calling. The bridge only reads `id` (for audit and for binding
+ * confirmations) and `roles` (for access control); anything else the host
+ * needs belongs in its own context.
+ */
+interface Principal {
+    readonly id: string;
+    readonly roles: readonly string[];
+}
+type JsonPrimitive = string | number | boolean | null;
+type JsonValue = JsonPrimitive | readonly JsonValue[] | JsonObject;
+interface JsonObject {
+    readonly [key: string]: JsonValue;
+}
+interface TextContent {
+    readonly type: 'text';
+    readonly text: string;
+}
+interface ImageContent {
+    readonly type: 'image';
+    /** Base64-encoded bytes. */
+    readonly data: string;
+    readonly mimeType: string;
+}
+interface AudioContent {
+    readonly type: 'audio';
+    /** Base64-encoded bytes. */
+    readonly data: string;
+    readonly mimeType: string;
+}
+type ContentBlock = TextContent | ImageContent | AudioContent;
+/** The shape of an MCP `tools/call` result, restricted to what the bridge emits. */
+interface ToolResult {
+    readonly content: readonly ContentBlock[];
+    readonly structuredContent?: JsonObject;
+    readonly isError?: boolean;
+}
+/**
+ * What a handler may return: a plain string (sent as text) or a full result,
+ * usually built with `text()` or `json()`.
+ */
+type ToolOutput = string | ToolResult;
+
+/** A JSON Schema whose root is an object, as MCP requires for tool inputs. */
+interface JsonSchemaObject extends JsonObject {
+    readonly type: 'object';
+}
+/** One reason the arguments were rejected. `path` is a JSON Pointer; the root is `""`. */
+interface ArgIssue {
+    readonly path: string;
+    readonly message: string;
+}
+type ParseResult<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly issues: readonly ArgIssue[];
+};
+/**
+ * The contract every argument schema meets, whatever produced it. `jsonSchema`
+ * is what the model sees; `parse` is what the bridge enforces. Both adapters
+ * shipped with the package derive the two from a single declaration, so they
+ * cannot drift apart.
+ */
+interface ArgsSchema<T> {
+    readonly jsonSchema: JsonSchemaObject;
+    readonly parse: (input: unknown) => ParseResult<T>;
+}
+
+export { type ArgsSchema as A, type ContentBlock as C, type ImageContent as I, type JsonSchemaObject as J, type Principal as P, type Sensitivity as S, type ToolOutput as T, type JsonObject as a, type ArgIssue as b, type JsonValue as c, type ToolResult as d, type AudioContent as e, type JsonPrimitive as f, type ParseResult as g, SENSITIVITY_LEVELS as h, type TextContent as i, isSensitivity as j, sensitivityRank as s };

package/dist/zod.cjs

@@ -0,0 +1,51 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } }
+
+
+
+
+
+
+
+var _chunkXMYSMKGRcjs = require('./chunk-XMYSMKGR.cjs');
+
+// src/schema/zod.ts
+var _zod = require('zod'); var z = _interopRequireWildcard(_zod);
+function zodSchema(schema) {
+  let generated;
+  try {
+    generated = z.toJSONSchema(schema, {
+      target: "draft-2020-12",
+      io: "input",
+      unrepresentable: "throw"
+    });
+  } catch (error) {
+    throw new (0, _chunkXMYSMKGRcjs.ToolDefinitionError)(
+      "invalid_schema",
+      `this Zod schema has no JSON Schema equivalent: ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error }
+    );
+  }
+  const root = _chunkXMYSMKGRcjs.freezeRootSchema.call(void 0, withoutDialect(generated));
+  const parse = (input) => {
+    const copy = _chunkXMYSMKGRcjs.cloneJson.call(void 0, input);
+    if (!copy.ok) return { ok: false, issues: [_chunkXMYSMKGRcjs.NOT_JSON_ISSUE] };
+    const result = schema.safeParse(copy.value);
+    if (result.success) return { ok: true, value: result.data };
+    return { ok: false, issues: toIssues(result.error.issues) };
+  };
+  return Object.freeze({ jsonSchema: root, parse });
+}
+function withoutDialect(generated) {
+  const copy = _chunkXMYSMKGRcjs.cloneJson.call(void 0, generated);
+  if (!copy.ok || !_chunkXMYSMKGRcjs.isJsonObject.call(void 0, copy.value)) return generated;
+  return Object.fromEntries(Object.entries(copy.value).filter(([keyword]) => keyword !== "$schema"));
+}
+function toIssues(issues) {
+  return issues.slice(0, _chunkXMYSMKGRcjs.MAX_ISSUES).map((issue) => ({
+    path: issue.path.map((segment) => `/${_chunkXMYSMKGRcjs.pointerSegment.call(void 0, String(segment))}`).join(""),
+    message: issue.message
+  }));
+}
+
+
+exports.zodSchema = zodSchema;

package/dist/zod.d.cts

@@ -0,0 +1,18 @@
+import * as z from 'zod';
+import { A as ArgsSchema } from './types-tss7dg3j.cjs';
+
+/**
+ * Wraps a Zod (v4) object schema. The JSON Schema shown to the model is
+ * generated from the *input* side of the schema, so transforms and defaults
+ * describe what the model must send, while the handler receives the parsed
+ * output.
+ *
+ * Types that JSON cannot carry (dates, bigints, custom checks with no JSON
+ * Schema equivalent) fail at startup. Refinements that do not translate to
+ * JSON Schema are still enforced by `parse`, but the model is not told about
+ * them: put the rule in the field's `.describe()` too. Async refinements are
+ * not supported.
+ */
+declare function zodSchema<S extends z.ZodObject>(schema: S): ArgsSchema<z.output<S>>;
+
+export { zodSchema };

package/dist/zod.d.ts

@@ -0,0 +1,18 @@
+import * as z from 'zod';
+import { A as ArgsSchema } from './types-tss7dg3j.js';
+
+/**
+ * Wraps a Zod (v4) object schema. The JSON Schema shown to the model is
+ * generated from the *input* side of the schema, so transforms and defaults
+ * describe what the model must send, while the handler receives the parsed
+ * output.
+ *
+ * Types that JSON cannot carry (dates, bigints, custom checks with no JSON
+ * Schema equivalent) fail at startup. Refinements that do not translate to
+ * JSON Schema are still enforced by `parse`, but the model is not told about
+ * them: put the rule in the field's `.describe()` too. Async refinements are
+ * not supported.
+ */
+declare function zodSchema<S extends z.ZodObject>(schema: S): ArgsSchema<z.output<S>>;
+
+export { zodSchema };

package/dist/zod.js

@@ -0,0 +1,51 @@
+import {
+  MAX_ISSUES,
+  NOT_JSON_ISSUE,
+  ToolDefinitionError,
+  cloneJson,
+  freezeRootSchema,
+  isJsonObject,
+  pointerSegment
+} from "./chunk-YGJJEZXI.js";
+
+// src/schema/zod.ts
+import * as z from "zod";
+function zodSchema(schema) {
+  let generated;
+  try {
+    generated = z.toJSONSchema(schema, {
+      target: "draft-2020-12",
+      io: "input",
+      unrepresentable: "throw"
+    });
+  } catch (error) {
+    throw new ToolDefinitionError(
+      "invalid_schema",
+      `this Zod schema has no JSON Schema equivalent: ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error }
+    );
+  }
+  const root = freezeRootSchema(withoutDialect(generated));
+  const parse = (input) => {
+    const copy = cloneJson(input);
+    if (!copy.ok) return { ok: false, issues: [NOT_JSON_ISSUE] };
+    const result = schema.safeParse(copy.value);
+    if (result.success) return { ok: true, value: result.data };
+    return { ok: false, issues: toIssues(result.error.issues) };
+  };
+  return Object.freeze({ jsonSchema: root, parse });
+}
+function withoutDialect(generated) {
+  const copy = cloneJson(generated);
+  if (!copy.ok || !isJsonObject(copy.value)) return generated;
+  return Object.fromEntries(Object.entries(copy.value).filter(([keyword]) => keyword !== "$schema"));
+}
+function toIssues(issues) {
+  return issues.slice(0, MAX_ISSUES).map((issue) => ({
+    path: issue.path.map((segment) => `/${pointerSegment(String(segment))}`).join(""),
+    message: issue.message
+  }));
+}
+export {
+  zodSchema
+};

package/package.json

@@ -0,0 +1,99 @@
+{
+  "name": "mcp-tool-bridge",
+  "version": "1.1.0",
+  "description": "A generic MCP server that exposes a declared tool catalog to a model, with role-based filtering and a server-side confirmation guard.",
+  "license": "MIT",
+  "author": "Julien",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/julien-simplogic/mcp-tool-bridge.git"
+  },
+  "homepage": "https://github.com/julien-simplogic/mcp-tool-bridge#readme",
+  "bugs": {
+    "url": "https://github.com/julien-simplogic/mcp-tool-bridge/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "llm",
+    "tools",
+    "agents",
+    "rbac",
+    "confirmation"
+  ],
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./zod": {
+      "import": {
+        "types": "./dist/zod.d.ts",
+        "default": "./dist/zod.js"
+      },
+      "require": {
+        "types": "./dist/zod.d.cts",
+        "default": "./dist/zod.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.cts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "check:dist": "node scripts/check-dist.mjs && node scripts/check-dist.cjs",
+    "check:mutations": "node scripts/check-mutations.mjs",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build && npm run check:dist"
+  },
+  "peerDependencies": {
+    "zod": "^4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "zod": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.31.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "json-schema-to-ts": "^3.1.1"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^20.19.43",
+    "eslint": "^10.11.0",
+    "eslint-config-prettier": "^10.1.8",
+    "prettier": "^3.9.9",
+    "tsup": "^8.5.1",
+    "tsx": "^4.23.15",
+    "typescript": "~6.0.3",
+    "typescript-eslint": "^8.71.0",
+    "vitest": "^4.1.11",
+    "zod": "^4.6.5"
+  }
+}