open-multi-agent-kit 0.99.0 → 1.2.0

package/dist/core/mcp/stdio-transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio-transport.js","sourceRoot":"","sources":["../../../src/core/mcp/stdio-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AAEtF,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAqB1C,MAAM,OAAO,iBAAiB;IACrB,KAAK,CAA6C;IACzC,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAC9B,WAAW,CAAS;IAC7B,UAAU,GAAG,EAAE,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IACf,SAAS,CAA4C;IAC5C,OAAO,CAAwB;IAC/B,QAAQ,CAAyB;IAElD,YAAY,OAA8B,EAAE,QAAgC,EAAE;QAC7E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAAA,CAChE;IAED,iFAAiF;IACjF,IAAI,MAAM,GAAW;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC;IAAA,CACvB;IAED,IAAI,OAAO,GAAY;QACtB,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAAA,CAChD;IAED;;;;OAIG;IACH,KAAK,GAAS;QACb,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClH,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;YACzE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,WAAW,EAAE,IAAI;SACjB,CAAmC,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;YAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,OAAO,CAAC,OAAO;oBAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;qBACzD,IAAI,OAAO,CAAC,KAAK;oBAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtE,CAAC;QAAA,CACD,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAAA,CAC7E,CAAC,CAAC;QAEH,iFAAiF;QACjF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;YACvF,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAAA,CAC5B,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAA,CAClE;IAED,gFAAgF;IAChF,IAAI,CAAC,OAAuB,EAAW;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjE,IAAI,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IAAA,CACD;IAED,0EAA0E;IAC1E,KAAK,GAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAClC,IAAI,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACR,kBAAkB;QACnB,CAAC;QACD,IAAI,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,gBAAgB;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO;QACzC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACR,gBAAgB;YACjB,CAAC;QAAA,CACD,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAAA,CACzB;IAEO,UAAU,CAAC,IAAmB,EAAE,MAAqB,EAAQ;QACpE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAAA,CACvC;CACD","sourcesContent":["/**\n * Child-process stdio transport for MCP.\n *\n * Owns exactly one server process: writes newline-delimited JSON to stdin,\n * decodes stdout into messages, keeps a bounded tail of stderr for diagnostics,\n * and reports exit exactly once. It never interprets MCP semantics — that is\n * the client's job.\n *\n * Every configured OMK MCP server uses a `command`, so stdio is the whole\n * transport surface today. HTTP servers would get a sibling module rather than\n * a flag on this one.\n */\n\nimport type { ChildProcessWithoutNullStreams } from \"node:child_process\";\nimport spawn from \"cross-spawn\";\nimport { createLineDecoder, encodeMessage, type JsonRpcMessage } from \"./protocol.ts\";\n\n/** How much stderr tail to keep per server for error reporting. */\nexport const MAX_STDERR_TAIL_CHARS = 8192;\n/** Grace period between SIGTERM and SIGKILL on close. */\nexport const DEFAULT_KILL_GRACE_MS = 2000;\n\nexport interface StdioTransportOptions {\n\treadonly command: string;\n\treadonly args?: readonly string[];\n\treadonly env?: Readonly<Record<string, string>>;\n\treadonly cwd?: string;\n\t/** Grace period before SIGKILL. */\n\treadonly killGraceMs?: number;\n\t/** Inherit the parent environment. Default `true`. */\n\treadonly inheritEnv?: boolean;\n}\n\nexport interface StdioTransportHandlers {\n\treadonly onMessage: (message: JsonRpcMessage) => void;\n\t/** Malformed frames are surfaced, never silently dropped. */\n\treadonly onDecodeError?: (reason: string) => void;\n\t/** Called at most once, with the exit code or signal. */\n\treadonly onExit: (info: { readonly code: number | null; readonly signal: string | null }) => void;\n}\n\nexport class McpStdioTransport {\n\tprivate child: ChildProcessWithoutNullStreams | undefined;\n\tprivate readonly decoder = createLineDecoder();\n\tprivate readonly killGraceMs: number;\n\tprivate stderrTail = \"\";\n\tprivate exited = false;\n\tprivate killTimer: ReturnType<typeof setTimeout> | undefined;\n\tprivate readonly options: StdioTransportOptions;\n\tprivate readonly handlers: StdioTransportHandlers;\n\n\tconstructor(options: StdioTransportOptions, handlers: StdioTransportHandlers) {\n\t\tthis.options = options;\n\t\tthis.handlers = handlers;\n\t\tthis.killGraceMs = options.killGraceMs ?? DEFAULT_KILL_GRACE_MS;\n\t}\n\n\t/** Bounded tail of the server's stderr. Empty when the server has been quiet. */\n\tget stderr(): string {\n\t\treturn this.stderrTail;\n\t}\n\n\tget running(): boolean {\n\t\treturn this.child !== undefined && !this.exited;\n\t}\n\n\t/**\n\t * Spawn the server process. Throws synchronously only on an invalid\n\t * configuration; a spawn failure surfaces through `onExit`, so callers have\n\t * one failure path instead of two.\n\t */\n\tstart(): void {\n\t\tif (this.child) throw new Error(\"MCP stdio transport already started\");\n\t\tconst env = this.options.inheritEnv === false ? { ...this.options.env } : { ...process.env, ...this.options.env };\n\t\tconst child = spawn(this.options.command, [...(this.options.args ?? [])], {\n\t\t\tcwd: this.options.cwd,\n\t\t\tenv,\n\t\t\tstdio: [\"pipe\", \"pipe\", \"pipe\"],\n\t\t\twindowsHide: true,\n\t\t}) as ChildProcessWithoutNullStreams;\n\t\tthis.child = child;\n\n\t\tchild.stdout.setEncoding(\"utf8\");\n\t\tchild.stdout.on(\"data\", (chunk: string) => {\n\t\t\tfor (const decoded of this.decoder.push(chunk)) {\n\t\t\t\tif (decoded.message) this.handlers.onMessage(decoded.message);\n\t\t\t\telse if (decoded.error) this.handlers.onDecodeError?.(decoded.error);\n\t\t\t}\n\t\t});\n\n\t\tchild.stderr.setEncoding(\"utf8\");\n\t\tchild.stderr.on(\"data\", (chunk: string) => {\n\t\t\tthis.stderrTail = `${this.stderrTail}${chunk}`.slice(-MAX_STDERR_TAIL_CHARS);\n\t\t});\n\n\t\t// A stdin EPIPE after the server exits is expected, not an error worth throwing.\n\t\tchild.stdin.on(\"error\", () => {});\n\t\tchild.on(\"error\", (error: Error) => {\n\t\t\tthis.stderrTail = `${this.stderrTail}${error.message}\\n`.slice(-MAX_STDERR_TAIL_CHARS);\n\t\t\tthis.settleExit(null, null);\n\t\t});\n\t\tchild.on(\"exit\", (code, signal) => this.settleExit(code, signal));\n\t}\n\n\t/** Write one message. Returns `false` when the server is no longer writable. */\n\tsend(message: JsonRpcMessage): boolean {\n\t\tconst child = this.child;\n\t\tif (!child || this.exited || !child.stdin.writable) return false;\n\t\ttry {\n\t\t\tchild.stdin.write(encodeMessage(message));\n\t\t\treturn true;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t}\n\n\t/** Terminate the server: SIGTERM, then SIGKILL after the grace period. */\n\tclose(): void {\n\t\tconst child = this.child;\n\t\tif (!child || this.exited) return;\n\t\ttry {\n\t\t\tchild.stdin.end();\n\t\t} catch {\n\t\t\t// Already closed.\n\t\t}\n\t\ttry {\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t} catch {\n\t\t\t// Already gone.\n\t\t}\n\t\tif (this.killTimer !== undefined) return;\n\t\tthis.killTimer = setTimeout(() => {\n\t\t\tthis.killTimer = undefined;\n\t\t\ttry {\n\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t} catch {\n\t\t\t\t// Already gone.\n\t\t\t}\n\t\t}, this.killGraceMs);\n\t\tthis.killTimer.unref?.();\n\t}\n\n\tprivate settleExit(code: number | null, signal: string | null): void {\n\t\tif (this.exited) return;\n\t\tthis.exited = true;\n\t\tif (this.killTimer !== undefined) {\n\t\t\tclearTimeout(this.killTimer);\n\t\t\tthis.killTimer = undefined;\n\t\t}\n\t\tthis.decoder.reset();\n\t\tthis.handlers.onExit({ code, signal });\n\t}\n}\n"]}
+{"version":3,"file":"stdio-transport.js","sourceRoot":"","sources":["../../../src/core/mcp/stdio-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AAEtF,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,mFAAmF;AACnF,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAuBhE,MAAM,OAAO,iBAAiB;IACrB,KAAK,CAA6C;IACzC,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAC9B,WAAW,CAAS;IAC7B,UAAU,GAAG,EAAE,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IACf,SAAS,CAA4C;IAC7D,qEAAqE;IAC7D,iBAAiB,GAAG,CAAC,CAAC;IACtB,eAAe,GAAG,KAAK,CAAC;IACf,OAAO,CAAwB;IAC/B,QAAQ,CAAyB;IAElD,YAAY,OAA8B,EAAE,QAAgC,EAAE;QAC7E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAAA,CAChE;IAED,iFAAiF;IACjF,IAAI,MAAM,GAAW;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC;IAAA,CACvB;IAED,IAAI,OAAO,GAAY;QACtB,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAAA,CAChD;IAED;;;;OAIG;IACH,KAAK,GAAS;QACb,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClH,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;YACzE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,GAAG;YACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,WAAW,EAAE,IAAI;SACjB,CAAmC,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;YAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,IAAI,OAAO,CAAC,OAAO;oBAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;qBACzD,IAAI,OAAO,CAAC,KAAK;oBAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACtE,CAAC;QAAA,CACD,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAAA,CAC7E,CAAC,CAAC;QAEH,iFAAiF;QACjF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;YACvF,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAAA,CAC5B,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAA,CAClE;IAED;;;;OAIG;IACH,IAAI,CAAC,OAAuB,EAAW;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACjE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,IAAI,+BAA+B,CAAC;QACjF,IAAI,IAAI,CAAC,iBAAiB,GAAG,UAAU,GAAG,GAAG;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,oEAAoE;gBACpE,4DAA4D;gBAC5D,IAAI,CAAC,iBAAiB,IAAI,UAAU,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC3B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;oBAC5B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;wBAC/B,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;wBAC7B,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;oBAAA,CAC3B,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YACD,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IAAA,CACD;IAED,0EAA0E;IAC1E,KAAK,GAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAClC,IAAI,CAAC;YACJ,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACR,kBAAkB;QACnB,CAAC;QACD,IAAI,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACR,gBAAgB;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO;QACzC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC;gBACJ,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACR,gBAAgB;YACjB,CAAC;QAAA,CACD,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAAA,CACzB;IAEO,UAAU,CAAC,IAAmB,EAAE,MAAqB,EAAQ;QACpE,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAAA,CACvC;CACD","sourcesContent":["/**\n * Child-process stdio transport for MCP.\n *\n * Owns exactly one server process: writes newline-delimited JSON to stdin,\n * decodes stdout into messages, keeps a bounded tail of stderr for diagnostics,\n * and reports exit exactly once. It never interprets MCP semantics — that is\n * the client's job.\n *\n * Every configured OMK MCP server uses a `command`, so stdio is the whole\n * transport surface today. HTTP servers would get a sibling module rather than\n * a flag on this one.\n */\n\nimport type { ChildProcessWithoutNullStreams } from \"node:child_process\";\nimport spawn from \"cross-spawn\";\nimport { createLineDecoder, encodeMessage, type JsonRpcMessage } from \"./protocol.ts\";\n\n/** How much stderr tail to keep per server for error reporting. */\nexport const MAX_STDERR_TAIL_CHARS = 8192;\n/** Grace period between SIGTERM and SIGKILL on close. */\nexport const DEFAULT_KILL_GRACE_MS = 2000;\n/** Framed bytes allowed to sit in the child's stdin buffer before sends refuse. */\nexport const DEFAULT_MAX_PENDING_WRITE_BYTES = 16 * 1024 * 1024;\n\nexport interface StdioTransportOptions {\n\treadonly command: string;\n\treadonly args?: readonly string[];\n\treadonly env?: Readonly<Record<string, string>>;\n\treadonly cwd?: string;\n\t/** Grace period before SIGKILL. */\n\treadonly killGraceMs?: number;\n\t/** Inherit the parent environment. Default `true`. */\n\treadonly inheritEnv?: boolean;\n\t/** Framed bytes allowed to sit unwritten before `send` refuses. */\n\treadonly maxPendingWriteBytes?: number;\n}\n\nexport interface StdioTransportHandlers {\n\treadonly onMessage: (message: JsonRpcMessage) => void;\n\t/** Malformed frames are surfaced, never silently dropped. */\n\treadonly onDecodeError?: (reason: string) => void;\n\t/** Called at most once, with the exit code or signal. */\n\treadonly onExit: (info: { readonly code: number | null; readonly signal: string | null }) => void;\n}\n\nexport class McpStdioTransport {\n\tprivate child: ChildProcessWithoutNullStreams | undefined;\n\tprivate readonly decoder = createLineDecoder();\n\tprivate readonly killGraceMs: number;\n\tprivate stderrTail = \"\";\n\tprivate exited = false;\n\tprivate killTimer: ReturnType<typeof setTimeout> | undefined;\n\t/** Framed bytes written but not yet flushed to the child's stdin. */\n\tprivate pendingWriteBytes = 0;\n\tprivate waitingForDrain = false;\n\tprivate readonly options: StdioTransportOptions;\n\tprivate readonly handlers: StdioTransportHandlers;\n\n\tconstructor(options: StdioTransportOptions, handlers: StdioTransportHandlers) {\n\t\tthis.options = options;\n\t\tthis.handlers = handlers;\n\t\tthis.killGraceMs = options.killGraceMs ?? DEFAULT_KILL_GRACE_MS;\n\t}\n\n\t/** Bounded tail of the server's stderr. Empty when the server has been quiet. */\n\tget stderr(): string {\n\t\treturn this.stderrTail;\n\t}\n\n\tget running(): boolean {\n\t\treturn this.child !== undefined && !this.exited;\n\t}\n\n\t/**\n\t * Spawn the server process. Throws synchronously only on an invalid\n\t * configuration; a spawn failure surfaces through `onExit`, so callers have\n\t * one failure path instead of two.\n\t */\n\tstart(): void {\n\t\tif (this.child) throw new Error(\"MCP stdio transport already started\");\n\t\tconst env = this.options.inheritEnv === false ? { ...this.options.env } : { ...process.env, ...this.options.env };\n\t\tconst child = spawn(this.options.command, [...(this.options.args ?? [])], {\n\t\t\tcwd: this.options.cwd,\n\t\t\tenv,\n\t\t\tstdio: [\"pipe\", \"pipe\", \"pipe\"],\n\t\t\twindowsHide: true,\n\t\t}) as ChildProcessWithoutNullStreams;\n\t\tthis.child = child;\n\n\t\tchild.stdout.setEncoding(\"utf8\");\n\t\tchild.stdout.on(\"data\", (chunk: string) => {\n\t\t\tfor (const decoded of this.decoder.push(chunk)) {\n\t\t\t\tif (decoded.message) this.handlers.onMessage(decoded.message);\n\t\t\t\telse if (decoded.error) this.handlers.onDecodeError?.(decoded.error);\n\t\t\t}\n\t\t});\n\n\t\tchild.stderr.setEncoding(\"utf8\");\n\t\tchild.stderr.on(\"data\", (chunk: string) => {\n\t\t\tthis.stderrTail = `${this.stderrTail}${chunk}`.slice(-MAX_STDERR_TAIL_CHARS);\n\t\t});\n\n\t\t// A stdin EPIPE after the server exits is expected, not an error worth throwing.\n\t\tchild.stdin.on(\"error\", () => {});\n\t\tchild.on(\"error\", (error: Error) => {\n\t\t\tthis.stderrTail = `${this.stderrTail}${error.message}\\n`.slice(-MAX_STDERR_TAIL_CHARS);\n\t\t\tthis.settleExit(null, null);\n\t\t});\n\t\tchild.on(\"exit\", (code, signal) => this.settleExit(code, signal));\n\t}\n\n\t/**\n\t * Write one message. Returns `false` when the server is no longer writable\n\t * or the outbound buffer is already saturated — the client treats that as\n\t * a send failure rather than queueing unbounded frames.\n\t */\n\tsend(message: JsonRpcMessage): boolean {\n\t\tconst child = this.child;\n\t\tif (!child || this.exited || !child.stdin.writable) return false;\n\t\tconst frame = encodeMessage(message);\n\t\tconst frameBytes = Buffer.byteLength(frame, \"utf8\");\n\t\tconst cap = this.options.maxPendingWriteBytes ?? DEFAULT_MAX_PENDING_WRITE_BYTES;\n\t\tif (this.pendingWriteBytes + frameBytes > cap) return false;\n\t\ttry {\n\t\t\tconst flushed = child.stdin.write(frame);\n\t\t\tif (!flushed) {\n\t\t\t\t// Kernel/user buffer is saturated: account the frame and release it\n\t\t\t\t// on drain so the pending estimate tracks the real backlog.\n\t\t\t\tthis.pendingWriteBytes += frameBytes;\n\t\t\t\tif (!this.waitingForDrain) {\n\t\t\t\t\tthis.waitingForDrain = true;\n\t\t\t\t\tchild.stdin.once(\"drain\", () => {\n\t\t\t\t\t\tthis.waitingForDrain = false;\n\t\t\t\t\t\tthis.pendingWriteBytes = 0;\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn true;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t}\n\n\t/** Terminate the server: SIGTERM, then SIGKILL after the grace period. */\n\tclose(): void {\n\t\tconst child = this.child;\n\t\tif (!child || this.exited) return;\n\t\ttry {\n\t\t\tchild.stdin.end();\n\t\t} catch {\n\t\t\t// Already closed.\n\t\t}\n\t\ttry {\n\t\t\tchild.kill(\"SIGTERM\");\n\t\t} catch {\n\t\t\t// Already gone.\n\t\t}\n\t\tif (this.killTimer !== undefined) return;\n\t\tthis.killTimer = setTimeout(() => {\n\t\t\tthis.killTimer = undefined;\n\t\t\ttry {\n\t\t\t\tchild.kill(\"SIGKILL\");\n\t\t\t} catch {\n\t\t\t\t// Already gone.\n\t\t\t}\n\t\t}, this.killGraceMs);\n\t\tthis.killTimer.unref?.();\n\t}\n\n\tprivate settleExit(code: number | null, signal: string | null): void {\n\t\tif (this.exited) return;\n\t\tthis.exited = true;\n\t\tthis.pendingWriteBytes = 0;\n\t\tthis.waitingForDrain = false;\n\t\tif (this.killTimer !== undefined) {\n\t\t\tclearTimeout(this.killTimer);\n\t\t\tthis.killTimer = undefined;\n\t\t}\n\t\tthis.decoder.reset();\n\t\tthis.handlers.onExit({ code, signal });\n\t}\n}\n"]}

package/dist/core/mcp-descriptor-injection.d.ts

@@ -0,0 +1,26 @@
+/**
+ * MCP descriptor prompt-injection screen (audit §18). MCP tool descriptions
+ * are untrusted third-party input; this rule-based screen flags suspicious
+ * patterns at import time so the manager can quarantine the tool.
+ */
+/**
+ * Result of {@link detectMcpDescriptorPromptInjection}. `patternSignal` is a
+ * rule score — the count of matched suspicious patterns squashed into
+ * [0.6, 1] — NOT a calibrated probability that the descriptor is an attack.
+ * Callers compare it against {@link MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD};
+ * `score` is kept as a compatibility alias for the same number.
+ */
+export interface McpDescriptorPromptInjectionSignal {
+    readonly patternSignal: number;
+    readonly patternHits: number;
+    /** @deprecated Compatibility alias of {@link patternSignal}. */
+    readonly score: number;
+}
+/**
+ * Any single suspicious-pattern hit crosses the quarantine line
+ * (0.6 + 1*0.25 = 0.85 > 0.7); two or more saturate at 1. The threshold is a
+ * policy boundary, not a probability cut.
+ */
+export declare const MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD = 0.7;
+export declare function detectMcpDescriptorPromptInjection(description: string): McpDescriptorPromptInjectionSignal;
+//# sourceMappingURL=mcp-descriptor-injection.d.ts.map

package/dist/core/mcp-descriptor-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-descriptor-injection.d.ts","sourceRoot":"","sources":["../../src/core/mcp-descriptor-injection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,MAAM,CAAC;AAE3D,wBAAgB,kCAAkC,CAAC,WAAW,EAAE,MAAM,GAAG,kCAAkC,CAa1G","sourcesContent":["/**\n * MCP descriptor prompt-injection screen (audit §18). MCP tool descriptions\n * are untrusted third-party input; this rule-based screen flags suspicious\n * patterns at import time so the manager can quarantine the tool.\n */\n\n/**\n * Result of {@link detectMcpDescriptorPromptInjection}. `patternSignal` is a\n * rule score — the count of matched suspicious patterns squashed into\n * [0.6, 1] — NOT a calibrated probability that the descriptor is an attack.\n * Callers compare it against {@link MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD};\n * `score` is kept as a compatibility alias for the same number.\n */\nexport interface McpDescriptorPromptInjectionSignal {\n\treadonly patternSignal: number;\n\treadonly patternHits: number;\n\t/** @deprecated Compatibility alias of {@link patternSignal}. */\n\treadonly score: number;\n}\n\n/**\n * Any single suspicious-pattern hit crosses the quarantine line\n * (0.6 + 1*0.25 = 0.85 > 0.7); two or more saturate at 1. The threshold is a\n * policy boundary, not a probability cut.\n */\nexport const MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD = 0.7;\n\nexport function detectMcpDescriptorPromptInjection(description: string): McpDescriptorPromptInjectionSignal {\n\tconst normalized = description.toLowerCase();\n\tconst suspiciousPatterns = [\n\t\t/ignore\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/disregard\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/exfiltrat/,\n\t\t/reveal\\s+(?:the\\s+)?(?:system\\s+)?prompt/,\n\t\t/send\\s+(?:me\\s+)?(?:all\\s+)?secrets/,\n\t];\n\tconst patternHits = suspiciousPatterns.filter((pattern) => pattern.test(normalized)).length;\n\tconst patternSignal = patternHits === 0 ? 0 : Math.min(1, 0.6 + patternHits * 0.25);\n\n\treturn { patternSignal, patternHits, score: patternSignal };\n}\n"]}

package/dist/core/mcp-descriptor-injection.js

@@ -0,0 +1,25 @@
+/**
+ * MCP descriptor prompt-injection screen (audit §18). MCP tool descriptions
+ * are untrusted third-party input; this rule-based screen flags suspicious
+ * patterns at import time so the manager can quarantine the tool.
+ */
+/**
+ * Any single suspicious-pattern hit crosses the quarantine line
+ * (0.6 + 1*0.25 = 0.85 > 0.7); two or more saturate at 1. The threshold is a
+ * policy boundary, not a probability cut.
+ */
+export const MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD = 0.7;
+export function detectMcpDescriptorPromptInjection(description) {
+    const normalized = description.toLowerCase();
+    const suspiciousPatterns = [
+        /ignore\s+(?:all\s+)?previous\s+instructions/,
+        /disregard\s+(?:all\s+)?previous\s+instructions/,
+        /exfiltrat/,
+        /reveal\s+(?:the\s+)?(?:system\s+)?prompt/,
+        /send\s+(?:me\s+)?(?:all\s+)?secrets/,
+    ];
+    const patternHits = suspiciousPatterns.filter((pattern) => pattern.test(normalized)).length;
+    const patternSignal = patternHits === 0 ? 0 : Math.min(1, 0.6 + patternHits * 0.25);
+    return { patternSignal, patternHits, score: patternSignal };
+}
+//# sourceMappingURL=mcp-descriptor-injection.js.map

package/dist/core/mcp-descriptor-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-descriptor-injection.js","sourceRoot":"","sources":["../../src/core/mcp-descriptor-injection.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgBH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAG,GAAG,CAAC;AAE3D,MAAM,UAAU,kCAAkC,CAAC,WAAmB,EAAsC;IAC3G,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,kBAAkB,GAAG;QAC1B,6CAA6C;QAC7C,gDAAgD;QAChD,WAAW;QACX,0CAA0C;QAC1C,qCAAqC;KACrC,CAAC;IACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5F,MAAM,aAAa,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,WAAW,GAAG,IAAI,CAAC,CAAC;IAEpF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAAA,CAC5D","sourcesContent":["/**\n * MCP descriptor prompt-injection screen (audit §18). MCP tool descriptions\n * are untrusted third-party input; this rule-based screen flags suspicious\n * patterns at import time so the manager can quarantine the tool.\n */\n\n/**\n * Result of {@link detectMcpDescriptorPromptInjection}. `patternSignal` is a\n * rule score — the count of matched suspicious patterns squashed into\n * [0.6, 1] — NOT a calibrated probability that the descriptor is an attack.\n * Callers compare it against {@link MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD};\n * `score` is kept as a compatibility alias for the same number.\n */\nexport interface McpDescriptorPromptInjectionSignal {\n\treadonly patternSignal: number;\n\treadonly patternHits: number;\n\t/** @deprecated Compatibility alias of {@link patternSignal}. */\n\treadonly score: number;\n}\n\n/**\n * Any single suspicious-pattern hit crosses the quarantine line\n * (0.6 + 1*0.25 = 0.85 > 0.7); two or more saturate at 1. The threshold is a\n * policy boundary, not a probability cut.\n */\nexport const MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD = 0.7;\n\nexport function detectMcpDescriptorPromptInjection(description: string): McpDescriptorPromptInjectionSignal {\n\tconst normalized = description.toLowerCase();\n\tconst suspiciousPatterns = [\n\t\t/ignore\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/disregard\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/exfiltrat/,\n\t\t/reveal\\s+(?:the\\s+)?(?:system\\s+)?prompt/,\n\t\t/send\\s+(?:me\\s+)?(?:all\\s+)?secrets/,\n\t];\n\tconst patternHits = suspiciousPatterns.filter((pattern) => pattern.test(normalized)).length;\n\tconst patternSignal = patternHits === 0 ? 0 : Math.min(1, 0.6 + patternHits * 0.25);\n\n\treturn { patternSignal, patternHits, score: patternSignal };\n}\n"]}

package/dist/core/mcp-public-presets.d.ts

@@ -1,3 +1,4 @@
+export { detectMcpDescriptorPromptInjection, MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD, type McpDescriptorPromptInjectionSignal, } from "./mcp-descriptor-injection.ts";
 export type PublicMcpPresetKey = "context7" | "exa" | "githubReadOnly" | "astGrep" | "repomixCodeCompact" | "omkLlmlinguaCompress" | "doclingUnderstand" | "markitdownLite" | "firecrawlWebUnderstand" | "deepwikiRepoUnderstandCandidate" | "insaneSearchCandidate" | "playwrightSandboxed" | "microsoftLearn" | "officialReferenceSafePack";
 export type PublicMcpRisk = "R1" | "R2" | "R3";
 export type PublicMcpLicense = "Apache-2.0" | "Apache-2.0/MIT/CC-BY-4.0" | "MIT" | "Unspecified";
@@ -572,7 +573,4 @@ export declare function listPublicMcpPresets(): PublicMcpPreset[];
 export declare function canonicalMcpPolicyHash(value: PublicMcpHashable): string;
 export declare function canonicalPublicMcpServerIdentity(preset: PublicMcpPreset): string;
 export declare function admitPublicMcpServer(preset: PublicMcpPreset, observed: PublicMcpObservedServer, approved: PublicMcpApprovedServer | undefined): PublicMcpAdmissionDecision;
-export declare function detectMcpDescriptorPromptInjection(description: string): {
-    readonly score: number;
-};
 //# sourceMappingURL=mcp-public-presets.d.ts.map

package/dist/core/mcp-public-presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-public-presets.d.ts","sourceRoot":"","sources":["../../src/core/mcp-public-presets.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,kBAAkB,GAC3B,UAAU,GACV,KAAK,GACL,gBAAgB,GAChB,SAAS,GACT,oBAAoB,GACpB,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,wBAAwB,GACxB,iCAAiC,GACjC,uBAAuB,GACvB,qBAAqB,GACrB,gBAAgB,GAChB,2BAA2B,CAAC;AAE/B,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,0BAA0B,GAAG,KAAK,GAAG,aAAa,CAAC;AACjG,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,GAAG,WAAW,GAAG,cAAc,CAAC;AACzF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,QAAQ,CAAC;AACxD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAC3B;IACA,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACpB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACxB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,CAAC;AAEL,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC3D,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,cAAc,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,qBAAqB,CAAC,EAAE;QAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAC/C,QAAQ,CAAC,+BAA+B,CAAC,EAAE,OAAO,CAAC;IACnD,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,YAAY,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,iBAAiB,GAC1B,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,iBAAiB,EAAE,GAC5B;IACA,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;CACzC,CAAC;AAEL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoeiC,CAAC;AAEjE,eAAO,MAAM,6BAA6B;;;;;CAKhC,CAAC;AAEX,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAExD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAEvE;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAMhF;AAED,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAC3C,0BAA0B,CA2C5B;AAED,wBAAgB,kCAAkC,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAclG","sourcesContent":["import { createHash } from \"node:crypto\";\n\nexport type PublicMcpPresetKey =\n\t| \"context7\"\n\t| \"exa\"\n\t| \"githubReadOnly\"\n\t| \"astGrep\"\n\t| \"repomixCodeCompact\"\n\t| \"omkLlmlinguaCompress\"\n\t| \"doclingUnderstand\"\n\t| \"markitdownLite\"\n\t| \"firecrawlWebUnderstand\"\n\t| \"deepwikiRepoUnderstandCandidate\"\n\t| \"insaneSearchCandidate\"\n\t| \"playwrightSandboxed\"\n\t| \"microsoftLearn\"\n\t| \"officialReferenceSafePack\";\n\nexport type PublicMcpRisk = \"R1\" | \"R2\" | \"R3\";\nexport type PublicMcpLicense = \"Apache-2.0\" | \"Apache-2.0/MIT/CC-BY-4.0\" | \"MIT\" | \"Unspecified\";\nexport type PublicMcpImplementation = \"candidate-wrapper\" | \"omk-owned\" | \"upstream-mcp\";\nexport type PublicMcpReadiness = \"candidate\" | \"stable\";\nexport type PublicMcpUriScheme = \"data\" | \"file\" | \"http\" | \"https\";\nexport type PublicMcpTransport =\n\t| {\n\t\t\treadonly type: \"http\";\n\t\t\treadonly url: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"embedded-python-or-sidecar\";\n\t\t\treadonly package: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"local-package\";\n\t\t\treadonly package: string;\n\t\t\treadonly args?: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly type: \"stdio\";\n\t\t\treadonly command: string;\n\t\t\treadonly args: readonly string[];\n\t  };\n\nexport interface PublicMcpAuthPolicy {\n\treadonly kind: \"bearer\" | \"header\" | \"none\";\n\treadonly header?: string;\n\treadonly secretRef?: string;\n}\n\nexport interface PublicMcpSecretPolicy {\n\treadonly required?: readonly string[];\n\treadonly optional?: readonly string[];\n\treadonly headers?: Readonly<Record<string, string>>;\n}\n\nexport interface PublicMcpToolPolicy {\n\treadonly allow: readonly string[];\n\treadonly conditionalAllow?: readonly string[];\n\treadonly deny?: readonly string[];\n\treadonly denyByDefault: boolean;\n\treadonly denyMutations?: boolean;\n\treadonly disabledByDefault?: readonly string[];\n\treadonly gated?: readonly string[];\n\treadonly requirePostconditions?: readonly string[];\n}\n\nexport interface PublicMcpRuntimePolicy {\n\treadonly absolutePathMustBeUnderWorkspace?: boolean;\n\treadonly allowedUriSchemes?: readonly PublicMcpUriScheme[];\n\treadonly authenticationBoundaryRequired?: boolean;\n\treadonly blockMetadataIp?: boolean;\n\treadonly blockHttpByDefault?: boolean;\n\treadonly blockNetworkUrlsByDefault?: boolean;\n\treadonly blockPrivateNetwork?: boolean;\n\treadonly blockRemoteRepositoryByDefault?: boolean;\n\treadonly cacheDocuments?: boolean;\n\treadonly cacheable?: boolean;\n\treadonly cacheMaterializedOutputs?: boolean;\n\treadonly defaultCompressionRatio?: number;\n\treadonly descriptorHashPinned?: boolean;\n\treadonly distillBeforeMainContext?: boolean;\n\treadonly disableAutoInstall?: boolean;\n\treadonly domainAllowlistOptional?: boolean;\n\treadonly denyYoutubeByDefault?: boolean;\n\treadonly denyZipByDefault?: boolean;\n\treadonly evidenceLedger?: boolean;\n\treadonly filesystemRoot?: string;\n\treadonly fileRoot?: string;\n\treadonly forkContext?: boolean;\n\treadonly ledger?: boolean;\n\treadonly localFilesUnderWorkspaceOnly?: boolean;\n\treadonly localOnly?: boolean;\n\treadonly maxBrowserActions?: number;\n\treadonly maxCompressionRatio?: number;\n\treadonly maxInputBytes?: number;\n\treadonly maxInputTokens?: number;\n\treadonly maxOutputTokens?: number;\n\treadonly maxResults?: number;\n\treadonly maxUrlsPerTask?: number;\n\treadonly markdownFullPageRequiresExplicitNeed?: boolean;\n\treadonly mutationsRequireHumanGate?: boolean;\n\treadonly mutationsRequirePostconditions?: boolean;\n\treadonly noFilesystemReadExceptModelCache?: boolean;\n\treadonly noNetwork?: boolean;\n\treadonly noSecrets?: boolean;\n\treadonly noShell?: boolean;\n\treadonly outputGuard?: boolean;\n\treadonly preferGrepBeforeFullRead?: boolean;\n\treadonly preferIncrementalRead?: boolean;\n\treadonly preferJsonExtraction?: boolean;\n\treadonly privateRepoDeniedByDefault?: boolean;\n\treadonly promptTaint?: \"external-docs\" | \"external-web\" | \"browser\";\n\treadonly publicContentOnly?: boolean;\n\treadonly publicReposOnly?: boolean;\n\treadonly readOnly?: boolean;\n\treadonly recordEvidence?: boolean;\n\treadonly rejectIfCoverageBelow?: {\n\t\treadonly hard: number;\n\t\treadonly high: number;\n\t\treadonly low: number;\n\t\treadonly medium: number;\n\t};\n\treadonly requireCoverageVerification?: boolean;\n\treadonly requireOriginAllowlistForScrape?: boolean;\n\treadonly requiresExplicitPostconditions?: boolean;\n\treadonly requiresOriginAllowlist?: boolean;\n\treadonly requiresSandbox?: boolean;\n\treadonly secretBrokerOnly?: boolean;\n\treadonly secretScanRequired?: boolean;\n\treadonly ssrfGuard?: boolean;\n\treadonly workspaceReadOnly?: boolean;\n}\n\nexport interface PublicMcpPreset {\n\treadonly defaultEnabled?: boolean;\n\treadonly id: string;\n\treadonly key: PublicMcpPresetKey;\n\treadonly license: PublicMcpLicense;\n\treadonly notes: readonly string[];\n\treadonly policy: PublicMcpRuntimePolicy;\n\treadonly implementation?: PublicMcpImplementation;\n\treadonly readiness?: PublicMcpReadiness;\n\treadonly risk: PublicMcpRisk;\n\treadonly sourceUrls: readonly string[];\n\treadonly tools: PublicMcpToolPolicy;\n\treadonly auth?: PublicMcpAuthPolicy;\n\treadonly secrets?: PublicMcpSecretPolicy;\n\treadonly servers?: readonly string[];\n\treadonly transport?: PublicMcpTransport;\n}\n\nexport interface PublicMcpObservedTool {\n\treadonly name: string;\n\treadonly descriptorHash: string;\n\treadonly description: string;\n}\n\nexport interface PublicMcpObservedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: readonly PublicMcpObservedTool[];\n}\n\nexport interface PublicMcpApprovedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: Readonly<Record<string, string>>;\n}\n\nexport type PublicMcpAdmissionStatus = \"allow\" | \"quarantine\";\n\nexport interface PublicMcpAdmissionDecision {\n\treadonly status: PublicMcpAdmissionStatus;\n\treadonly reasons: readonly string[];\n}\n\nexport type PublicMcpHashable =\n\t| null\n\t| boolean\n\t| number\n\t| string\n\t| readonly PublicMcpHashable[]\n\t| {\n\t\t\treadonly [key: string]: PublicMcpHashable;\n\t  };\n\nexport const PUBLIC_MCP_PRESETS = {\n\tcontext7: {\n\t\tid: \"context7\",\n\t\tkey: \"context7\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Documentation retrieval preset; optional API key only raises rate limits.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/upstash/context7\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.context7.com/mcp\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"CONTEXT7_API_KEY\"],\n\t\t\theaders: {\n\t\t\t\tCONTEXT7_API_KEY: \"secret-ref:context7\",\n\t\t\t},\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"resolve-library-id\", \"query-docs\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\texa: {\n\t\tid: \"exa\",\n\t\tkey: \"exa\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Run searches in forked context and return distilled output to the main task.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/exa-labs/exa-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.exa.ai/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"header\",\n\t\t\theader: \"Authorization\",\n\t\t\tsecretRef: \"secret-ref:exa_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"EXA_API_KEY\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"web_search_exa\", \"web_fetch_exa\"],\n\t\t\tconditionalAllow: [\"web_search_advanced_exa\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tdomainAllowlistOptional: true,\n\t\t\tforkContext: true,\n\t\t\tmaxOutputTokens: 5000,\n\t\t\tmaxResults: 10,\n\t\t\tssrfGuard: true,\n\t\t},\n\t},\n\tgithubReadOnly: {\n\t\tid: \"github-readonly\",\n\t\tkey: \"githubReadOnly\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Read-only GitHub MCP profile; mutation tools remain gated for future explicit workflows.\"],\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/github/github-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://api.githubcopilot.com/mcp/\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:github_pat\",\n\t\t},\n\t\tsecrets: {\n\t\t\trequired: [\"GITHUB_PERSONAL_ACCESS_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"actions_list\",\n\t\t\t\t\"get_file_contents\",\n\t\t\t\t\"issue_read\",\n\t\t\t\t\"list_issues\",\n\t\t\t\t\"list_pull_requests\",\n\t\t\t\t\"pull_request_read\",\n\t\t\t\t\"search_code\",\n\t\t\t\t\"search_issues\",\n\t\t\t\t\"search_pull_requests\",\n\t\t\t\t\"search_repositories\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t\trequirePostconditions: [\n\t\t\t\t\"add_comment_to_pending_review\",\n\t\t\t\t\"create_branch\",\n\t\t\t\t\"create_or_update_file\",\n\t\t\t\t\"create_pull_request\",\n\t\t\t\t\"delete_file\",\n\t\t\t\t\"issue_write\",\n\t\t\t\t\"merge_pull_request\",\n\t\t\t\t\"pull_request_review_write\",\n\t\t\t\t\"push_files\",\n\t\t\t\t\"update_pull_request\",\n\t\t\t\t\"update_pull_request_branch\",\n\t\t\t],\n\t\t},\n\t\tpolicy: {\n\t\t\tledger: true,\n\t\t\tmaxOutputTokens: 8000,\n\t\t\tmutationsRequireHumanGate: true,\n\t\t\treadOnly: true,\n\t\t\tsecretBrokerOnly: true,\n\t\t},\n\t},\n\tastGrep: {\n\t\tid: \"ast-grep\",\n\t\tkey: \"astGrep\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Experimental upstream; pin descriptor and wrap execution before broad enablement.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/ast-grep/ast-grep-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from\", \"git+https://github.com/ast-grep/ast-grep-mcp\", \"ast-grep-server\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"dump_syntax_tree\", \"find_code\", \"find_code_by_rule\", \"test_match_code_rule\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tmaxResults: 200,\n\t\t\tnoShell: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\trepomixCodeCompact: {\n\t\tdefaultEnabled: true,\n\t\tid: \"repomix-code-compact\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"repomixCodeCompact\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Codebase packing and compression preset; remote repository packing is disabled until a task explicitly opts in.\",\n\t\t\t\"Use grep/read against packed output before full-context attachment.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/yamadashy/repomix\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"npx\",\n\t\t\targs: [\"-y\", \"repomix\", \"--mcp\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"attach_packed_output\",\n\t\t\t\t\"file_system_read_directory\",\n\t\t\t\t\"grep_repomix_output\",\n\t\t\t\t\"pack_codebase\",\n\t\t\t\t\"read_repomix_output\",\n\t\t\t],\n\t\t\tdisabledByDefault: [\"pack_remote_repository\"],\n\t\t\tgated: [\"file_system_read_file\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tabsolutePathMustBeUnderWorkspace: true,\n\t\t\tblockRemoteRepositoryByDefault: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tmaxOutputTokens: 120_000,\n\t\t\toutputGuard: true,\n\t\t\tpreferGrepBeforeFullRead: true,\n\t\t\tpreferIncrementalRead: true,\n\t\t\tsecretScanRequired: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\tomkLlmlinguaCompress: {\n\t\tdefaultEnabled: true,\n\t\tid: \"omk-llmlingua-compress\",\n\t\timplementation: \"omk-owned\",\n\t\tkey: \"omkLlmlinguaCompress\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"First-party wrapper target for LLMLingua-style prompt and context compression.\",\n\t\t\t\"System prompts, latest user turns, and tool schemas must stay outside lossy compression.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/LLMLingua\", \"https://arxiv.org/abs/2403.12968\"],\n\t\ttransport: {\n\t\t\ttype: \"embedded-python-or-sidecar\",\n\t\t\tpackage: \"llmlingua\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"compress_context_items\",\n\t\t\t\t\"compress_messages\",\n\t\t\t\t\"compress_prompt\",\n\t\t\t\t\"compress_representation_candidate\",\n\t\t\t\t\"verify_compression_coverage\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheMaterializedOutputs: true,\n\t\t\tdefaultCompressionRatio: 3,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalOnly: true,\n\t\t\tmaxCompressionRatio: 8,\n\t\t\tmaxInputTokens: 200_000,\n\t\t\tnoFilesystemReadExceptModelCache: true,\n\t\t\tnoNetwork: true,\n\t\t\toutputGuard: true,\n\t\t\trejectIfCoverageBelow: {\n\t\t\t\thard: 0.95,\n\t\t\t\thigh: 0.8,\n\t\t\t\tmedium: 0.55,\n\t\t\t\tlow: 0.3,\n\t\t\t},\n\t\t\trequireCoverageVerification: true,\n\t\t},\n\t},\n\tdoclingUnderstand: {\n\t\tdefaultEnabled: true,\n\t\tid: \"docling-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"doclingUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Structured document understanding preset for PDFs, Office files, tables, OCR, and layout-sensitive conversions.\",\n\t\t\t\"Parser attack surface requires sandboxing and workspace-only local file access.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/docling-project/docling\", \"https://github.com/docling-project/docling-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from=docling-mcp\", \"docling-mcp-server\", \"--transport\", \"stdio\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_document\", \"export_docling_document_to_json\", \"export_docling_document_to_markdown\"],\n\t\t\tgated: [\"create_new_docling_document\", \"save_docling_document\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockNetworkUrlsByDefault: true,\n\t\t\tcacheDocuments: true,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalFilesUnderWorkspaceOnly: true,\n\t\t\tmaxInputBytes: 80_000_000,\n\t\t\tmaxOutputTokens: 80_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmarkitdownLite: {\n\t\tdefaultEnabled: true,\n\t\tid: \"markitdown-lite\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"markitdownLite\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Lightweight Markdown conversion fallback for local files and data URIs.\",\n\t\t\t\"HTTP, ZIP, and YouTube inputs stay blocked until a task explicitly needs them.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\n\t\t\t\"https://github.com/microsoft/markitdown\",\n\t\t\t\"https://github.com/microsoft/markitdown/tree/main/packages/markitdown-mcp\",\n\t\t],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"markitdown-mcp\",\n\t\t\targs: [],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_to_markdown\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tallowedUriSchemes: [\"file\", \"data\"],\n\t\t\tblockHttpByDefault: true,\n\t\t\tdenyYoutubeByDefault: true,\n\t\t\tdenyZipByDefault: true,\n\t\t\tevidenceLedger: true,\n\t\t\tfileRoot: \"workspaceRoot\",\n\t\t\tmaxInputBytes: 30_000_000,\n\t\t\tmaxOutputTokens: 50_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tfirecrawlWebUnderstand: {\n\t\tdefaultEnabled: false,\n\t\tid: \"firecrawl-web-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"firecrawlWebUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Opt-in live web understanding preset; search and scrape are the only default-admissible tools.\",\n\t\t\t\"Prefer JSON extraction over full-page Markdown to protect the context budget.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/firecrawl/firecrawl-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.firecrawl.dev/v2/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:firecrawl_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"FIRECRAWL_API_KEY\", \"FIRECRAWL_OAUTH_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"firecrawl_scrape\", \"firecrawl_search\"],\n\t\t\tdisabledByDefault: [\"firecrawl_agent\", \"firecrawl_crawl\", \"firecrawl_interact\", \"firecrawl_monitor\"],\n\t\t\tgated: [\"firecrawl_extract\", \"firecrawl_map\", \"firecrawl_research\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmarkdownFullPageRequiresExplicitNeed: true,\n\t\t\tmaxOutputTokens: 40_000,\n\t\t\tmaxUrlsPerTask: 10,\n\t\t\toutputGuard: true,\n\t\t\tpreferJsonExtraction: true,\n\t\t\trequireOriginAllowlistForScrape: true,\n\t\t},\n\t},\n\tdeepwikiRepoUnderstandCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"deepwiki-repo-understand\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"deepwikiRepoUnderstandCandidate\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\n\t\t\t\"Candidate only until an official MCP endpoint, tool schema, auth model, and retention boundary are verified.\",\n\t\t\t\"Remote repository indexing is public-repo-only by default.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://deepwiki.com/\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tnoSecrets: true,\n\t\t\toutputGuard: true,\n\t\t\tprivateRepoDeniedByDefault: true,\n\t\t\tpublicReposOnly: true,\n\t\t},\n\t},\n\tinsaneSearchCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"insane-search-public-reader\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"insaneSearchCandidate\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Candidate only: upstream is a Claude Code plugin, not a verified standalone MCP transport.\",\n\t\t\t\"Any OMK integration must be a sandboxed first-party wrapper around public-content reads, with auto-install disabled.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/fivetaku/insane-search\"],\n\t\ttools: {\n\t\t\tallow: [\"insane_search_public_read\"],\n\t\t\tdisabledByDefault: [\"insane_search_auto_install_dependencies\"],\n\t\t\tgated: [\"insane_search_browser_escalation\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tauthenticationBoundaryRequired: true,\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdisableAutoInstall: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmaxBrowserActions: 20,\n\t\t\tmaxOutputTokens: 30_000,\n\t\t\toutputGuard: true,\n\t\t\tpublicContentOnly: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tplaywrightSandboxed: {\n\t\tid: \"playwright-sandboxed\",\n\t\tkey: \"playwrightSandboxed\",\n\t\tlicense: \"Apache-2.0\",\n\t\tnotes: [\"Browser automation preset; enable only with sandbox and origin controls.\"],\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/microsoft/playwright-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"local-package\",\n\t\t\tpackage: \"@playwright/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"browser_close\",\n\t\t\t\t\"browser_click\",\n\t\t\t\t\"browser_navigate\",\n\t\t\t\t\"browser_snapshot\",\n\t\t\t\t\"browser_type\",\n\t\t\t\t\"browser_wait_for\",\n\t\t\t],\n\t\t\tdeny: [\"browser_console_messages\", \"browser_file_upload\", \"browser_pdf_save\", \"browser_press_key\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tledger: true,\n\t\t\tmaxBrowserActions: 40,\n\t\t\trecordEvidence: true,\n\t\t\trequiresExplicitPostconditions: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmicrosoftLearn: {\n\t\tid: \"microsoft-learn\",\n\t\tkey: \"microsoftLearn\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\"Microsoft official remote documentation endpoint from the Microsoft MCP catalog.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://learn.microsoft.com/api/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"*\"],\n\t\t\tdenyByDefault: true,\n\t\t\tdenyMutations: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\tofficialReferenceSafePack: {\n\t\tid: \"official-reference-safe-pack\",\n\t\tkey: \"officialReferenceSafePack\",\n\t\tlicense: \"Apache-2.0/MIT/CC-BY-4.0\",\n\t\tnotes: [\"Reference implementations only; wrap before production use.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/modelcontextprotocol/servers\"],\n\t\tservers: [\"time\", \"memory\", \"sequential-thinking\", \"git-readonly\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tfilesystemRoot: \"workspaceRoot\",\n\t\t\tmutationsRequirePostconditions: true,\n\t\t},\n\t},\n} as const satisfies Record<PublicMcpPresetKey, PublicMcpPreset>;\n\nexport const OMK_PUBLIC_CONTEXT_MCP_BUNDLE = {\n\tstableDefaults: [\"repomix-code-compact\", \"docling-understand\", \"markitdown-lite\", \"omk-llmlingua-compress\"],\n\toptInResearchWeb: [\"firecrawl-web-understand\"],\n\tcandidatesNeedVerification: [\"deepwiki-repo-understand\", \"insane-search-public-reader\"],\n\tinternalRouters: [\"mcp-tool-rag-router\"],\n} as const;\n\nexport function listPublicMcpPresets(): PublicMcpPreset[] {\n\treturn Object.values(PUBLIC_MCP_PRESETS).map((preset) => clonePublicMcpPreset(preset));\n}\n\nexport function canonicalMcpPolicyHash(value: PublicMcpHashable): string {\n\treturn createHash(\"sha256\").update(canonicalStringify(value)).digest(\"hex\");\n}\n\nexport function canonicalPublicMcpServerIdentity(preset: PublicMcpPreset): string {\n\treturn canonicalMcpPolicyHash({\n\t\tid: preset.id,\n\t\tservers: preset.servers ?? null,\n\t\ttransport: preset.transport ?? null,\n\t});\n}\n\nexport function admitPublicMcpServer(\n\tpreset: PublicMcpPreset,\n\tobserved: PublicMcpObservedServer,\n\tapproved: PublicMcpApprovedServer | undefined,\n): PublicMcpAdmissionDecision {\n\tif (!approved) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_not_approved\"],\n\t\t};\n\t}\n\n\tif (approved.serverIdentity !== observed.serverIdentity) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_identity_changed\"],\n\t\t};\n\t}\n\n\tconst reasons: string[] = [];\n\n\tfor (const tool of observed.tools) {\n\t\tconst approvedDescriptorHash = approved.tools[tool.name];\n\n\t\tif (!approvedDescriptorHash) {\n\t\t\treasons.push(`new_tool:${tool.name}`);\n\t\t} else if (approvedDescriptorHash !== tool.descriptorHash) {\n\t\t\treasons.push(`descriptor_changed:${tool.name}`);\n\t\t}\n\n\t\tif (!isToolAllowed(preset.tools, tool.name)) {\n\t\t\treasons.push(`tool_not_allowed:${tool.name}`);\n\t\t}\n\n\t\tif (shouldDenyMutationLikeTool(preset, tool.name)) {\n\t\t\treasons.push(`mutation_tool_denied:${tool.name}`);\n\t\t}\n\n\t\tif (detectMcpDescriptorPromptInjection(tool.description).score > 0.7) {\n\t\t\treasons.push(`descriptor_prompt_injection:${tool.name}`);\n\t\t}\n\t}\n\n\treturn {\n\t\tstatus: reasons.length === 0 ? \"allow\" : \"quarantine\",\n\t\treasons,\n\t};\n}\n\nexport function detectMcpDescriptorPromptInjection(description: string): { readonly score: number } {\n\tconst normalized = description.toLowerCase();\n\tconst suspiciousPatterns = [\n\t\t/ignore\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/disregard\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/exfiltrat/,\n\t\t/reveal\\s+(?:the\\s+)?(?:system\\s+)?prompt/,\n\t\t/send\\s+(?:me\\s+)?(?:all\\s+)?secrets/,\n\t];\n\tconst hits = suspiciousPatterns.filter((pattern) => pattern.test(normalized)).length;\n\n\treturn {\n\t\tscore: hits === 0 ? 0 : Math.min(1, 0.6 + hits * 0.25),\n\t};\n}\n\nfunction clonePublicMcpPreset(preset: PublicMcpPreset): PublicMcpPreset {\n\treturn {\n\t\t...preset,\n\t\tauth: preset.auth ? { ...preset.auth } : undefined,\n\t\tdefaultEnabled: preset.defaultEnabled,\n\t\timplementation: preset.implementation,\n\t\tnotes: [...preset.notes],\n\t\tpolicy: cloneRuntimePolicy(preset.policy),\n\t\treadiness: preset.readiness,\n\t\tsecrets: preset.secrets\n\t\t\t? {\n\t\t\t\t\theaders: preset.secrets.headers ? { ...preset.secrets.headers } : undefined,\n\t\t\t\t\toptional: preset.secrets.optional ? [...preset.secrets.optional] : undefined,\n\t\t\t\t\trequired: preset.secrets.required ? [...preset.secrets.required] : undefined,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\tservers: preset.servers ? [...preset.servers] : undefined,\n\t\tsourceUrls: [...preset.sourceUrls],\n\t\ttools: {\n\t\t\tallow: [...preset.tools.allow],\n\t\t\tconditionalAllow: preset.tools.conditionalAllow ? [...preset.tools.conditionalAllow] : undefined,\n\t\t\tdeny: preset.tools.deny ? [...preset.tools.deny] : undefined,\n\t\t\tdenyByDefault: preset.tools.denyByDefault,\n\t\t\tdenyMutations: preset.tools.denyMutations,\n\t\t\tdisabledByDefault: preset.tools.disabledByDefault ? [...preset.tools.disabledByDefault] : undefined,\n\t\t\tgated: preset.tools.gated ? [...preset.tools.gated] : undefined,\n\t\t\trequirePostconditions: preset.tools.requirePostconditions\n\t\t\t\t? [...preset.tools.requirePostconditions]\n\t\t\t\t: undefined,\n\t\t},\n\t\ttransport: preset.transport ? cloneTransport(preset.transport) : undefined,\n\t};\n}\n\nfunction cloneTransport(transport: PublicMcpTransport): PublicMcpTransport {\n\tif (transport.type === \"stdio\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: [...transport.args],\n\t\t};\n\t}\n\n\tif (transport.type === \"local-package\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: transport.args ? [...transport.args] : undefined,\n\t\t};\n\t}\n\n\tif (transport.type === \"embedded-python-or-sidecar\") {\n\t\treturn { ...transport };\n\t}\n\n\treturn { ...transport };\n}\n\nfunction cloneRuntimePolicy(policy: PublicMcpRuntimePolicy): PublicMcpRuntimePolicy {\n\treturn {\n\t\t...policy,\n\t\tallowedUriSchemes: policy.allowedUriSchemes ? [...policy.allowedUriSchemes] : undefined,\n\t\trejectIfCoverageBelow: policy.rejectIfCoverageBelow ? { ...policy.rejectIfCoverageBelow } : undefined,\n\t};\n}\n\nfunction isToolAllowed(policy: PublicMcpToolPolicy, toolName: string): boolean {\n\tif (policy.deny?.includes(toolName)) {\n\t\treturn false;\n\t}\n\n\tif (policy.allow.includes(\"*\")) {\n\t\treturn true;\n\t}\n\n\treturn policy.allow.includes(toolName);\n}\n\nfunction shouldDenyMutationLikeTool(preset: PublicMcpPreset, toolName: string): boolean {\n\tif (!preset.tools.allow.includes(\"*\")) {\n\t\treturn false;\n\t}\n\n\tif (!preset.tools.denyMutations && !preset.policy.readOnly && !preset.policy.mutationsRequirePostconditions) {\n\t\treturn false;\n\t}\n\n\treturn isMutationLikeToolName(toolName);\n}\n\nfunction isMutationLikeToolName(toolName: string): boolean {\n\treturn /(?:^|[_-])(add|approve|archive|cancel|close|create|delete|dismiss|merge|post|push|remove|send|submit|update|upload|write)(?:$|[_-])/.test(\n\t\ttoolName.toLowerCase(),\n\t);\n}\n\nfunction canonicalStringify(value: PublicMcpHashable): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"number\" || typeof value === \"string\") {\n\t\treturn JSON.stringify(value);\n\t}\n\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((item) => canonicalStringify(item)).join(\",\")}]`;\n\t}\n\n\tconst record = value as { readonly [key: string]: PublicMcpHashable };\n\tconst keys = Object.keys(record).sort();\n\treturn `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`).join(\",\")}}`;\n}\n"]}
+{"version":3,"file":"mcp-public-presets.d.ts","sourceRoot":"","sources":["../../src/core/mcp-public-presets.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,kCAAkC,EAClC,uCAAuC,EACvC,KAAK,kCAAkC,GACvC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,MAAM,kBAAkB,GAC3B,UAAU,GACV,KAAK,GACL,gBAAgB,GAChB,SAAS,GACT,oBAAoB,GACpB,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,wBAAwB,GACxB,iCAAiC,GACjC,uBAAuB,GACvB,qBAAqB,GACrB,gBAAgB,GAChB,2BAA2B,CAAC;AAE/B,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,0BAA0B,GAAG,KAAK,GAAG,aAAa,CAAC;AACjG,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,GAAG,WAAW,GAAG,cAAc,CAAC;AACzF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,QAAQ,CAAC;AACxD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAC3B;IACA,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACpB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACxB,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,CAAC;AAEL,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC3D,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oCAAoC,CAAC,EAAE,OAAO,CAAC;IACxD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,GAAG,cAAc,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,qBAAqB,CAAC,EAAE;QAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAC/C,QAAQ,CAAC,+BAA+B,CAAC,EAAE,OAAO,CAAC;IACnD,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;IAClD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACjD;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,YAAY,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,iBAAiB,GAC1B,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,iBAAiB,EAAE,GAC5B;IACA,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;CACzC,CAAC;AAEL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoeiC,CAAC;AAEjE,eAAO,MAAM,6BAA6B;;;;;CAKhC,CAAC;AAEX,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAExD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAEvE;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAMhF;AAED,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,uBAAuB,EACjC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAC3C,0BAA0B,CA6C5B","sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n\tdetectMcpDescriptorPromptInjection,\n\tMCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD,\n} from \"./mcp-descriptor-injection.ts\";\n\nexport {\n\tdetectMcpDescriptorPromptInjection,\n\tMCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD,\n\ttype McpDescriptorPromptInjectionSignal,\n} from \"./mcp-descriptor-injection.ts\";\n\nexport type PublicMcpPresetKey =\n\t| \"context7\"\n\t| \"exa\"\n\t| \"githubReadOnly\"\n\t| \"astGrep\"\n\t| \"repomixCodeCompact\"\n\t| \"omkLlmlinguaCompress\"\n\t| \"doclingUnderstand\"\n\t| \"markitdownLite\"\n\t| \"firecrawlWebUnderstand\"\n\t| \"deepwikiRepoUnderstandCandidate\"\n\t| \"insaneSearchCandidate\"\n\t| \"playwrightSandboxed\"\n\t| \"microsoftLearn\"\n\t| \"officialReferenceSafePack\";\n\nexport type PublicMcpRisk = \"R1\" | \"R2\" | \"R3\";\nexport type PublicMcpLicense = \"Apache-2.0\" | \"Apache-2.0/MIT/CC-BY-4.0\" | \"MIT\" | \"Unspecified\";\nexport type PublicMcpImplementation = \"candidate-wrapper\" | \"omk-owned\" | \"upstream-mcp\";\nexport type PublicMcpReadiness = \"candidate\" | \"stable\";\nexport type PublicMcpUriScheme = \"data\" | \"file\" | \"http\" | \"https\";\nexport type PublicMcpTransport =\n\t| {\n\t\t\treadonly type: \"http\";\n\t\t\treadonly url: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"embedded-python-or-sidecar\";\n\t\t\treadonly package: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"local-package\";\n\t\t\treadonly package: string;\n\t\t\treadonly args?: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly type: \"stdio\";\n\t\t\treadonly command: string;\n\t\t\treadonly args: readonly string[];\n\t  };\n\nexport interface PublicMcpAuthPolicy {\n\treadonly kind: \"bearer\" | \"header\" | \"none\";\n\treadonly header?: string;\n\treadonly secretRef?: string;\n}\n\nexport interface PublicMcpSecretPolicy {\n\treadonly required?: readonly string[];\n\treadonly optional?: readonly string[];\n\treadonly headers?: Readonly<Record<string, string>>;\n}\n\nexport interface PublicMcpToolPolicy {\n\treadonly allow: readonly string[];\n\treadonly conditionalAllow?: readonly string[];\n\treadonly deny?: readonly string[];\n\treadonly denyByDefault: boolean;\n\treadonly denyMutations?: boolean;\n\treadonly disabledByDefault?: readonly string[];\n\treadonly gated?: readonly string[];\n\treadonly requirePostconditions?: readonly string[];\n}\n\nexport interface PublicMcpRuntimePolicy {\n\treadonly absolutePathMustBeUnderWorkspace?: boolean;\n\treadonly allowedUriSchemes?: readonly PublicMcpUriScheme[];\n\treadonly authenticationBoundaryRequired?: boolean;\n\treadonly blockMetadataIp?: boolean;\n\treadonly blockHttpByDefault?: boolean;\n\treadonly blockNetworkUrlsByDefault?: boolean;\n\treadonly blockPrivateNetwork?: boolean;\n\treadonly blockRemoteRepositoryByDefault?: boolean;\n\treadonly cacheDocuments?: boolean;\n\treadonly cacheable?: boolean;\n\treadonly cacheMaterializedOutputs?: boolean;\n\treadonly defaultCompressionRatio?: number;\n\treadonly descriptorHashPinned?: boolean;\n\treadonly distillBeforeMainContext?: boolean;\n\treadonly disableAutoInstall?: boolean;\n\treadonly domainAllowlistOptional?: boolean;\n\treadonly denyYoutubeByDefault?: boolean;\n\treadonly denyZipByDefault?: boolean;\n\treadonly evidenceLedger?: boolean;\n\treadonly filesystemRoot?: string;\n\treadonly fileRoot?: string;\n\treadonly forkContext?: boolean;\n\treadonly ledger?: boolean;\n\treadonly localFilesUnderWorkspaceOnly?: boolean;\n\treadonly localOnly?: boolean;\n\treadonly maxBrowserActions?: number;\n\treadonly maxCompressionRatio?: number;\n\treadonly maxInputBytes?: number;\n\treadonly maxInputTokens?: number;\n\treadonly maxOutputTokens?: number;\n\treadonly maxResults?: number;\n\treadonly maxUrlsPerTask?: number;\n\treadonly markdownFullPageRequiresExplicitNeed?: boolean;\n\treadonly mutationsRequireHumanGate?: boolean;\n\treadonly mutationsRequirePostconditions?: boolean;\n\treadonly noFilesystemReadExceptModelCache?: boolean;\n\treadonly noNetwork?: boolean;\n\treadonly noSecrets?: boolean;\n\treadonly noShell?: boolean;\n\treadonly outputGuard?: boolean;\n\treadonly preferGrepBeforeFullRead?: boolean;\n\treadonly preferIncrementalRead?: boolean;\n\treadonly preferJsonExtraction?: boolean;\n\treadonly privateRepoDeniedByDefault?: boolean;\n\treadonly promptTaint?: \"external-docs\" | \"external-web\" | \"browser\";\n\treadonly publicContentOnly?: boolean;\n\treadonly publicReposOnly?: boolean;\n\treadonly readOnly?: boolean;\n\treadonly recordEvidence?: boolean;\n\treadonly rejectIfCoverageBelow?: {\n\t\treadonly hard: number;\n\t\treadonly high: number;\n\t\treadonly low: number;\n\t\treadonly medium: number;\n\t};\n\treadonly requireCoverageVerification?: boolean;\n\treadonly requireOriginAllowlistForScrape?: boolean;\n\treadonly requiresExplicitPostconditions?: boolean;\n\treadonly requiresOriginAllowlist?: boolean;\n\treadonly requiresSandbox?: boolean;\n\treadonly secretBrokerOnly?: boolean;\n\treadonly secretScanRequired?: boolean;\n\treadonly ssrfGuard?: boolean;\n\treadonly workspaceReadOnly?: boolean;\n}\n\nexport interface PublicMcpPreset {\n\treadonly defaultEnabled?: boolean;\n\treadonly id: string;\n\treadonly key: PublicMcpPresetKey;\n\treadonly license: PublicMcpLicense;\n\treadonly notes: readonly string[];\n\treadonly policy: PublicMcpRuntimePolicy;\n\treadonly implementation?: PublicMcpImplementation;\n\treadonly readiness?: PublicMcpReadiness;\n\treadonly risk: PublicMcpRisk;\n\treadonly sourceUrls: readonly string[];\n\treadonly tools: PublicMcpToolPolicy;\n\treadonly auth?: PublicMcpAuthPolicy;\n\treadonly secrets?: PublicMcpSecretPolicy;\n\treadonly servers?: readonly string[];\n\treadonly transport?: PublicMcpTransport;\n}\n\nexport interface PublicMcpObservedTool {\n\treadonly name: string;\n\treadonly descriptorHash: string;\n\treadonly description: string;\n}\n\nexport interface PublicMcpObservedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: readonly PublicMcpObservedTool[];\n}\n\nexport interface PublicMcpApprovedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: Readonly<Record<string, string>>;\n}\n\nexport type PublicMcpAdmissionStatus = \"allow\" | \"quarantine\";\n\nexport interface PublicMcpAdmissionDecision {\n\treadonly status: PublicMcpAdmissionStatus;\n\treadonly reasons: readonly string[];\n}\n\nexport type PublicMcpHashable =\n\t| null\n\t| boolean\n\t| number\n\t| string\n\t| readonly PublicMcpHashable[]\n\t| {\n\t\t\treadonly [key: string]: PublicMcpHashable;\n\t  };\n\nexport const PUBLIC_MCP_PRESETS = {\n\tcontext7: {\n\t\tid: \"context7\",\n\t\tkey: \"context7\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Documentation retrieval preset; optional API key only raises rate limits.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/upstash/context7\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.context7.com/mcp\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"CONTEXT7_API_KEY\"],\n\t\t\theaders: {\n\t\t\t\tCONTEXT7_API_KEY: \"secret-ref:context7\",\n\t\t\t},\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"resolve-library-id\", \"query-docs\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\texa: {\n\t\tid: \"exa\",\n\t\tkey: \"exa\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Run searches in forked context and return distilled output to the main task.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/exa-labs/exa-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.exa.ai/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"header\",\n\t\t\theader: \"Authorization\",\n\t\t\tsecretRef: \"secret-ref:exa_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"EXA_API_KEY\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"web_search_exa\", \"web_fetch_exa\"],\n\t\t\tconditionalAllow: [\"web_search_advanced_exa\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tdomainAllowlistOptional: true,\n\t\t\tforkContext: true,\n\t\t\tmaxOutputTokens: 5000,\n\t\t\tmaxResults: 10,\n\t\t\tssrfGuard: true,\n\t\t},\n\t},\n\tgithubReadOnly: {\n\t\tid: \"github-readonly\",\n\t\tkey: \"githubReadOnly\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Read-only GitHub MCP profile; mutation tools remain gated for future explicit workflows.\"],\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/github/github-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://api.githubcopilot.com/mcp/\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:github_pat\",\n\t\t},\n\t\tsecrets: {\n\t\t\trequired: [\"GITHUB_PERSONAL_ACCESS_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"actions_list\",\n\t\t\t\t\"get_file_contents\",\n\t\t\t\t\"issue_read\",\n\t\t\t\t\"list_issues\",\n\t\t\t\t\"list_pull_requests\",\n\t\t\t\t\"pull_request_read\",\n\t\t\t\t\"search_code\",\n\t\t\t\t\"search_issues\",\n\t\t\t\t\"search_pull_requests\",\n\t\t\t\t\"search_repositories\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t\trequirePostconditions: [\n\t\t\t\t\"add_comment_to_pending_review\",\n\t\t\t\t\"create_branch\",\n\t\t\t\t\"create_or_update_file\",\n\t\t\t\t\"create_pull_request\",\n\t\t\t\t\"delete_file\",\n\t\t\t\t\"issue_write\",\n\t\t\t\t\"merge_pull_request\",\n\t\t\t\t\"pull_request_review_write\",\n\t\t\t\t\"push_files\",\n\t\t\t\t\"update_pull_request\",\n\t\t\t\t\"update_pull_request_branch\",\n\t\t\t],\n\t\t},\n\t\tpolicy: {\n\t\t\tledger: true,\n\t\t\tmaxOutputTokens: 8000,\n\t\t\tmutationsRequireHumanGate: true,\n\t\t\treadOnly: true,\n\t\t\tsecretBrokerOnly: true,\n\t\t},\n\t},\n\tastGrep: {\n\t\tid: \"ast-grep\",\n\t\tkey: \"astGrep\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Experimental upstream; pin descriptor and wrap execution before broad enablement.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/ast-grep/ast-grep-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from\", \"git+https://github.com/ast-grep/ast-grep-mcp\", \"ast-grep-server\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"dump_syntax_tree\", \"find_code\", \"find_code_by_rule\", \"test_match_code_rule\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tmaxResults: 200,\n\t\t\tnoShell: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\trepomixCodeCompact: {\n\t\tdefaultEnabled: true,\n\t\tid: \"repomix-code-compact\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"repomixCodeCompact\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Codebase packing and compression preset; remote repository packing is disabled until a task explicitly opts in.\",\n\t\t\t\"Use grep/read against packed output before full-context attachment.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/yamadashy/repomix\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"npx\",\n\t\t\targs: [\"-y\", \"repomix\", \"--mcp\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"attach_packed_output\",\n\t\t\t\t\"file_system_read_directory\",\n\t\t\t\t\"grep_repomix_output\",\n\t\t\t\t\"pack_codebase\",\n\t\t\t\t\"read_repomix_output\",\n\t\t\t],\n\t\t\tdisabledByDefault: [\"pack_remote_repository\"],\n\t\t\tgated: [\"file_system_read_file\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tabsolutePathMustBeUnderWorkspace: true,\n\t\t\tblockRemoteRepositoryByDefault: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tmaxOutputTokens: 120_000,\n\t\t\toutputGuard: true,\n\t\t\tpreferGrepBeforeFullRead: true,\n\t\t\tpreferIncrementalRead: true,\n\t\t\tsecretScanRequired: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\tomkLlmlinguaCompress: {\n\t\tdefaultEnabled: true,\n\t\tid: \"omk-llmlingua-compress\",\n\t\timplementation: \"omk-owned\",\n\t\tkey: \"omkLlmlinguaCompress\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"First-party wrapper target for LLMLingua-style prompt and context compression.\",\n\t\t\t\"System prompts, latest user turns, and tool schemas must stay outside lossy compression.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/LLMLingua\", \"https://arxiv.org/abs/2403.12968\"],\n\t\ttransport: {\n\t\t\ttype: \"embedded-python-or-sidecar\",\n\t\t\tpackage: \"llmlingua\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"compress_context_items\",\n\t\t\t\t\"compress_messages\",\n\t\t\t\t\"compress_prompt\",\n\t\t\t\t\"compress_representation_candidate\",\n\t\t\t\t\"verify_compression_coverage\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheMaterializedOutputs: true,\n\t\t\tdefaultCompressionRatio: 3,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalOnly: true,\n\t\t\tmaxCompressionRatio: 8,\n\t\t\tmaxInputTokens: 200_000,\n\t\t\tnoFilesystemReadExceptModelCache: true,\n\t\t\tnoNetwork: true,\n\t\t\toutputGuard: true,\n\t\t\trejectIfCoverageBelow: {\n\t\t\t\thard: 0.95,\n\t\t\t\thigh: 0.8,\n\t\t\t\tmedium: 0.55,\n\t\t\t\tlow: 0.3,\n\t\t\t},\n\t\t\trequireCoverageVerification: true,\n\t\t},\n\t},\n\tdoclingUnderstand: {\n\t\tdefaultEnabled: true,\n\t\tid: \"docling-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"doclingUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Structured document understanding preset for PDFs, Office files, tables, OCR, and layout-sensitive conversions.\",\n\t\t\t\"Parser attack surface requires sandboxing and workspace-only local file access.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/docling-project/docling\", \"https://github.com/docling-project/docling-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from=docling-mcp\", \"docling-mcp-server\", \"--transport\", \"stdio\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_document\", \"export_docling_document_to_json\", \"export_docling_document_to_markdown\"],\n\t\t\tgated: [\"create_new_docling_document\", \"save_docling_document\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockNetworkUrlsByDefault: true,\n\t\t\tcacheDocuments: true,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalFilesUnderWorkspaceOnly: true,\n\t\t\tmaxInputBytes: 80_000_000,\n\t\t\tmaxOutputTokens: 80_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmarkitdownLite: {\n\t\tdefaultEnabled: true,\n\t\tid: \"markitdown-lite\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"markitdownLite\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Lightweight Markdown conversion fallback for local files and data URIs.\",\n\t\t\t\"HTTP, ZIP, and YouTube inputs stay blocked until a task explicitly needs them.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\n\t\t\t\"https://github.com/microsoft/markitdown\",\n\t\t\t\"https://github.com/microsoft/markitdown/tree/main/packages/markitdown-mcp\",\n\t\t],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"markitdown-mcp\",\n\t\t\targs: [],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_to_markdown\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tallowedUriSchemes: [\"file\", \"data\"],\n\t\t\tblockHttpByDefault: true,\n\t\t\tdenyYoutubeByDefault: true,\n\t\t\tdenyZipByDefault: true,\n\t\t\tevidenceLedger: true,\n\t\t\tfileRoot: \"workspaceRoot\",\n\t\t\tmaxInputBytes: 30_000_000,\n\t\t\tmaxOutputTokens: 50_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tfirecrawlWebUnderstand: {\n\t\tdefaultEnabled: false,\n\t\tid: \"firecrawl-web-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"firecrawlWebUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Opt-in live web understanding preset; search and scrape are the only default-admissible tools.\",\n\t\t\t\"Prefer JSON extraction over full-page Markdown to protect the context budget.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/firecrawl/firecrawl-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.firecrawl.dev/v2/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:firecrawl_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"FIRECRAWL_API_KEY\", \"FIRECRAWL_OAUTH_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"firecrawl_scrape\", \"firecrawl_search\"],\n\t\t\tdisabledByDefault: [\"firecrawl_agent\", \"firecrawl_crawl\", \"firecrawl_interact\", \"firecrawl_monitor\"],\n\t\t\tgated: [\"firecrawl_extract\", \"firecrawl_map\", \"firecrawl_research\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmarkdownFullPageRequiresExplicitNeed: true,\n\t\t\tmaxOutputTokens: 40_000,\n\t\t\tmaxUrlsPerTask: 10,\n\t\t\toutputGuard: true,\n\t\t\tpreferJsonExtraction: true,\n\t\t\trequireOriginAllowlistForScrape: true,\n\t\t},\n\t},\n\tdeepwikiRepoUnderstandCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"deepwiki-repo-understand\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"deepwikiRepoUnderstandCandidate\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\n\t\t\t\"Candidate only until an official MCP endpoint, tool schema, auth model, and retention boundary are verified.\",\n\t\t\t\"Remote repository indexing is public-repo-only by default.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://deepwiki.com/\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tnoSecrets: true,\n\t\t\toutputGuard: true,\n\t\t\tprivateRepoDeniedByDefault: true,\n\t\t\tpublicReposOnly: true,\n\t\t},\n\t},\n\tinsaneSearchCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"insane-search-public-reader\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"insaneSearchCandidate\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Candidate only: upstream is a Claude Code plugin, not a verified standalone MCP transport.\",\n\t\t\t\"Any OMK integration must be a sandboxed first-party wrapper around public-content reads, with auto-install disabled.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/fivetaku/insane-search\"],\n\t\ttools: {\n\t\t\tallow: [\"insane_search_public_read\"],\n\t\t\tdisabledByDefault: [\"insane_search_auto_install_dependencies\"],\n\t\t\tgated: [\"insane_search_browser_escalation\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tauthenticationBoundaryRequired: true,\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdisableAutoInstall: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmaxBrowserActions: 20,\n\t\t\tmaxOutputTokens: 30_000,\n\t\t\toutputGuard: true,\n\t\t\tpublicContentOnly: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tplaywrightSandboxed: {\n\t\tid: \"playwright-sandboxed\",\n\t\tkey: \"playwrightSandboxed\",\n\t\tlicense: \"Apache-2.0\",\n\t\tnotes: [\"Browser automation preset; enable only with sandbox and origin controls.\"],\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/microsoft/playwright-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"local-package\",\n\t\t\tpackage: \"@playwright/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"browser_close\",\n\t\t\t\t\"browser_click\",\n\t\t\t\t\"browser_navigate\",\n\t\t\t\t\"browser_snapshot\",\n\t\t\t\t\"browser_type\",\n\t\t\t\t\"browser_wait_for\",\n\t\t\t],\n\t\t\tdeny: [\"browser_console_messages\", \"browser_file_upload\", \"browser_pdf_save\", \"browser_press_key\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tledger: true,\n\t\t\tmaxBrowserActions: 40,\n\t\t\trecordEvidence: true,\n\t\t\trequiresExplicitPostconditions: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmicrosoftLearn: {\n\t\tid: \"microsoft-learn\",\n\t\tkey: \"microsoftLearn\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\"Microsoft official remote documentation endpoint from the Microsoft MCP catalog.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://learn.microsoft.com/api/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"*\"],\n\t\t\tdenyByDefault: true,\n\t\t\tdenyMutations: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\tofficialReferenceSafePack: {\n\t\tid: \"official-reference-safe-pack\",\n\t\tkey: \"officialReferenceSafePack\",\n\t\tlicense: \"Apache-2.0/MIT/CC-BY-4.0\",\n\t\tnotes: [\"Reference implementations only; wrap before production use.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/modelcontextprotocol/servers\"],\n\t\tservers: [\"time\", \"memory\", \"sequential-thinking\", \"git-readonly\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tfilesystemRoot: \"workspaceRoot\",\n\t\t\tmutationsRequirePostconditions: true,\n\t\t},\n\t},\n} as const satisfies Record<PublicMcpPresetKey, PublicMcpPreset>;\n\nexport const OMK_PUBLIC_CONTEXT_MCP_BUNDLE = {\n\tstableDefaults: [\"repomix-code-compact\", \"docling-understand\", \"markitdown-lite\", \"omk-llmlingua-compress\"],\n\toptInResearchWeb: [\"firecrawl-web-understand\"],\n\tcandidatesNeedVerification: [\"deepwiki-repo-understand\", \"insane-search-public-reader\"],\n\tinternalRouters: [\"mcp-tool-rag-router\"],\n} as const;\n\nexport function listPublicMcpPresets(): PublicMcpPreset[] {\n\treturn Object.values(PUBLIC_MCP_PRESETS).map((preset) => clonePublicMcpPreset(preset));\n}\n\nexport function canonicalMcpPolicyHash(value: PublicMcpHashable): string {\n\treturn createHash(\"sha256\").update(canonicalStringify(value)).digest(\"hex\");\n}\n\nexport function canonicalPublicMcpServerIdentity(preset: PublicMcpPreset): string {\n\treturn canonicalMcpPolicyHash({\n\t\tid: preset.id,\n\t\tservers: preset.servers ?? null,\n\t\ttransport: preset.transport ?? null,\n\t});\n}\n\nexport function admitPublicMcpServer(\n\tpreset: PublicMcpPreset,\n\tobserved: PublicMcpObservedServer,\n\tapproved: PublicMcpApprovedServer | undefined,\n): PublicMcpAdmissionDecision {\n\tif (!approved) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_not_approved\"],\n\t\t};\n\t}\n\n\tif (approved.serverIdentity !== observed.serverIdentity) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_identity_changed\"],\n\t\t};\n\t}\n\n\tconst reasons: string[] = [];\n\n\tfor (const tool of observed.tools) {\n\t\tconst approvedDescriptorHash = approved.tools[tool.name];\n\n\t\tif (!approvedDescriptorHash) {\n\t\t\treasons.push(`new_tool:${tool.name}`);\n\t\t} else if (approvedDescriptorHash !== tool.descriptorHash) {\n\t\t\treasons.push(`descriptor_changed:${tool.name}`);\n\t\t}\n\n\t\tif (!isToolAllowed(preset.tools, tool.name)) {\n\t\t\treasons.push(`tool_not_allowed:${tool.name}`);\n\t\t}\n\n\t\tif (shouldDenyMutationLikeTool(preset, tool.name)) {\n\t\t\treasons.push(`mutation_tool_denied:${tool.name}`);\n\t\t}\n\n\t\tif (\n\t\t\tdetectMcpDescriptorPromptInjection(tool.description).patternSignal > MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD\n\t\t) {\n\t\t\treasons.push(`descriptor_prompt_injection:${tool.name}`);\n\t\t}\n\t}\n\n\treturn {\n\t\tstatus: reasons.length === 0 ? \"allow\" : \"quarantine\",\n\t\treasons,\n\t};\n}\n\nfunction clonePublicMcpPreset(preset: PublicMcpPreset): PublicMcpPreset {\n\treturn {\n\t\t...preset,\n\t\tauth: preset.auth ? { ...preset.auth } : undefined,\n\t\tdefaultEnabled: preset.defaultEnabled,\n\t\timplementation: preset.implementation,\n\t\tnotes: [...preset.notes],\n\t\tpolicy: cloneRuntimePolicy(preset.policy),\n\t\treadiness: preset.readiness,\n\t\tsecrets: preset.secrets\n\t\t\t? {\n\t\t\t\t\theaders: preset.secrets.headers ? { ...preset.secrets.headers } : undefined,\n\t\t\t\t\toptional: preset.secrets.optional ? [...preset.secrets.optional] : undefined,\n\t\t\t\t\trequired: preset.secrets.required ? [...preset.secrets.required] : undefined,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\tservers: preset.servers ? [...preset.servers] : undefined,\n\t\tsourceUrls: [...preset.sourceUrls],\n\t\ttools: {\n\t\t\tallow: [...preset.tools.allow],\n\t\t\tconditionalAllow: preset.tools.conditionalAllow ? [...preset.tools.conditionalAllow] : undefined,\n\t\t\tdeny: preset.tools.deny ? [...preset.tools.deny] : undefined,\n\t\t\tdenyByDefault: preset.tools.denyByDefault,\n\t\t\tdenyMutations: preset.tools.denyMutations,\n\t\t\tdisabledByDefault: preset.tools.disabledByDefault ? [...preset.tools.disabledByDefault] : undefined,\n\t\t\tgated: preset.tools.gated ? [...preset.tools.gated] : undefined,\n\t\t\trequirePostconditions: preset.tools.requirePostconditions\n\t\t\t\t? [...preset.tools.requirePostconditions]\n\t\t\t\t: undefined,\n\t\t},\n\t\ttransport: preset.transport ? cloneTransport(preset.transport) : undefined,\n\t};\n}\n\nfunction cloneTransport(transport: PublicMcpTransport): PublicMcpTransport {\n\tif (transport.type === \"stdio\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: [...transport.args],\n\t\t};\n\t}\n\n\tif (transport.type === \"local-package\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: transport.args ? [...transport.args] : undefined,\n\t\t};\n\t}\n\n\tif (transport.type === \"embedded-python-or-sidecar\") {\n\t\treturn { ...transport };\n\t}\n\n\treturn { ...transport };\n}\n\nfunction cloneRuntimePolicy(policy: PublicMcpRuntimePolicy): PublicMcpRuntimePolicy {\n\treturn {\n\t\t...policy,\n\t\tallowedUriSchemes: policy.allowedUriSchemes ? [...policy.allowedUriSchemes] : undefined,\n\t\trejectIfCoverageBelow: policy.rejectIfCoverageBelow ? { ...policy.rejectIfCoverageBelow } : undefined,\n\t};\n}\n\nfunction isToolAllowed(policy: PublicMcpToolPolicy, toolName: string): boolean {\n\tif (policy.deny?.includes(toolName)) {\n\t\treturn false;\n\t}\n\n\tif (policy.allow.includes(\"*\")) {\n\t\treturn true;\n\t}\n\n\treturn policy.allow.includes(toolName);\n}\n\nfunction shouldDenyMutationLikeTool(preset: PublicMcpPreset, toolName: string): boolean {\n\tif (!preset.tools.allow.includes(\"*\")) {\n\t\treturn false;\n\t}\n\n\tif (!preset.tools.denyMutations && !preset.policy.readOnly && !preset.policy.mutationsRequirePostconditions) {\n\t\treturn false;\n\t}\n\n\treturn isMutationLikeToolName(toolName);\n}\n\nfunction isMutationLikeToolName(toolName: string): boolean {\n\treturn /(?:^|[_-])(add|approve|archive|cancel|close|create|delete|dismiss|merge|post|push|remove|send|submit|update|upload|write)(?:$|[_-])/.test(\n\t\ttoolName.toLowerCase(),\n\t);\n}\n\nfunction canonicalStringify(value: PublicMcpHashable): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"number\" || typeof value === \"string\") {\n\t\treturn JSON.stringify(value);\n\t}\n\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((item) => canonicalStringify(item)).join(\",\")}]`;\n\t}\n\n\tconst record = value as { readonly [key: string]: PublicMcpHashable };\n\tconst keys = Object.keys(record).sort();\n\treturn `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`).join(\",\")}}`;\n}\n"]}

package/dist/core/mcp-public-presets.js

@@ -1,4 +1,6 @@
 import { createHash } from "node:crypto";
+import { detectMcpDescriptorPromptInjection, MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD, } from "./mcp-descriptor-injection.js";
+export { detectMcpDescriptorPromptInjection, MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD, } from "./mcp-descriptor-injection.js";
 export const PUBLIC_MCP_PRESETS = {
     context7: {
         id: "context7",
@@ -531,7 +533,7 @@ export function admitPublicMcpServer(preset, observed, approved) {
         if (shouldDenyMutationLikeTool(preset, tool.name)) {
             reasons.push(`mutation_tool_denied:${tool.name}`);
         }
-        if (detectMcpDescriptorPromptInjection(tool.description).score > 0.7) {
+        if (detectMcpDescriptorPromptInjection(tool.description).patternSignal > MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD) {
             reasons.push(`descriptor_prompt_injection:${tool.name}`);
         }
     }
@@ -540,20 +542,6 @@ export function admitPublicMcpServer(preset, observed, approved) {
         reasons,
     };
 }
-export function detectMcpDescriptorPromptInjection(description) {
-    const normalized = description.toLowerCase();
-    const suspiciousPatterns = [
-        /ignore\s+(?:all\s+)?previous\s+instructions/,
-        /disregard\s+(?:all\s+)?previous\s+instructions/,
-        /exfiltrat/,
-        /reveal\s+(?:the\s+)?(?:system\s+)?prompt/,
-        /send\s+(?:me\s+)?(?:all\s+)?secrets/,
-    ];
-    const hits = suspiciousPatterns.filter((pattern) => pattern.test(normalized)).length;
-    return {
-        score: hits === 0 ? 0 : Math.min(1, 0.6 + hits * 0.25),
-    };
-}
 function clonePublicMcpPreset(preset) {
     return {
         ...preset,

package/dist/core/mcp-public-presets.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-public-presets.js","sourceRoot":"","sources":["../../src/core/mcp-public-presets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwLzC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,QAAQ,EAAE;QACT,EAAE,EAAE,UAAU;QACd,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,2EAA2E,CAAC;QACpF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,qCAAqC,CAAC;QACnD,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,8BAA8B;SACnC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,kBAAkB,CAAC;YAC9B,OAAO,EAAE;gBACR,gBAAgB,EAAE,qBAAqB;aACvC;SACD;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,oBAAoB,EAAE,YAAY,CAAC;YAC3C,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,eAAe;YAC5B,QAAQ,EAAE,IAAI;SACd;KACD;IACD,GAAG,EAAE;QACJ,EAAE,EAAE,KAAK;QACT,GAAG,EAAE,KAAK;QACV,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,8EAA8E,CAAC;QACvF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,4CAA4C,CAAC;QAC1D,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,wBAAwB;SAC7B;QACD,IAAI,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,eAAe;YACvB,SAAS,EAAE,wBAAwB;SACnC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,aAAa,CAAC;SACzB;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;YAC1C,gBAAgB,EAAE,CAAC,yBAAyB,CAAC;YAC7C,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,IAAI;YAC9B,uBAAuB,EAAE,IAAI;YAC7B,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,IAAI;SACf;KACD;IACD,cAAc,EAAE;QACf,EAAE,EAAE,iBAAiB;QACrB,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,0FAA0F,CAAC;QACnG,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,6CAA6C,CAAC;QAC3D,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,oCAAoC;SACzC;QACD,IAAI,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,uBAAuB;SAClC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,8BAA8B,CAAC;SAC1C;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,cAAc;gBACd,mBAAmB;gBACnB,YAAY;gBACZ,aAAa;gBACb,oBAAoB;gBACpB,mBAAmB;gBACnB,aAAa;gBACb,eAAe;gBACf,sBAAsB;gBACtB,qBAAqB;aACrB;YACD,aAAa,EAAE,IAAI;YACnB,qBAAqB,EAAE;gBACtB,+BAA+B;gBAC/B,eAAe;gBACf,uBAAuB;gBACvB,qBAAqB;gBACrB,aAAa;gBACb,aAAa;gBACb,oBAAoB;gBACpB,2BAA2B;gBAC3B,YAAY;gBACZ,qBAAqB;gBACrB,4BAA4B;aAC5B;SACD;QACD,MAAM,EAAE;YACP,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,yBAAyB,EAAE,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;SACtB;KACD;IACD,OAAO,EAAE;QACR,EAAE,EAAE,UAAU;QACd,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,mFAAmF,CAAC;QAC5F,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,0CAA0C,CAAC;QACxD,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,8CAA8C,EAAE,iBAAiB,CAAC;SACnF;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;YACrF,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,oBAAoB,EAAE,IAAI;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;SACvB;KACD;IACD,kBAAkB,EAAE;QACnB,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,sBAAsB;QAC1B,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,oBAAoB;QACzB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,iHAAiH;YACjH,qEAAqE;SACrE;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,sCAAsC,CAAC;QACpD,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;SAChC;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,sBAAsB;gBACtB,4BAA4B;gBAC5B,qBAAqB;gBACrB,eAAe;gBACf,qBAAqB;aACrB;YACD,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;YAC7C,KAAK,EAAE,CAAC,uBAAuB,CAAC;YAChC,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,gCAAgC,EAAE,IAAI;YACtC,8BAA8B,EAAE,IAAI;YACpC,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,OAAO;YACxB,WAAW,EAAE,IAAI;YACjB,wBAAwB,EAAE,IAAI;YAC9B,qBAAqB,EAAE,IAAI;YAC3B,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,IAAI;SACvB;KACD;IACD,oBAAoB,EAAE;QACrB,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,wBAAwB;QAC5B,cAAc,EAAE,WAAW;QAC3B,GAAG,EAAE,sBAAsB;QAC3B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,gFAAgF;YAChF,0FAA0F;SAC1F;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,wCAAwC,EAAE,kCAAkC,CAAC;QAC1F,SAAS,EAAE;YACV,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,WAAW;SACpB;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,wBAAwB;gBACxB,mBAAmB;gBACnB,iBAAiB;gBACjB,mCAAmC;gBACnC,6BAA6B;aAC7B;YACD,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,wBAAwB,EAAE,IAAI;YAC9B,uBAAuB,EAAE,CAAC;YAC1B,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,OAAO;YACvB,gCAAgC,EAAE,IAAI;YACtC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,qBAAqB,EAAE;gBACtB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,GAAG;aACR;YACD,2BAA2B,EAAE,IAAI;SACjC;KACD;IACD,iBAAiB,EAAE;QAClB,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,oBAAoB;QACxB,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,mBAAmB;QACxB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,iHAAiH;YACjH,iFAAiF;SACjF;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,4CAA4C,EAAE,gDAAgD,CAAC;QAC5G,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,aAAa,EAAE,OAAO,CAAC;SAC1E;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,qCAAqC,CAAC;YACrG,KAAK,EAAE,CAAC,6BAA6B,EAAE,uBAAuB,CAAC;YAC/D,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,yBAAyB,EAAE,IAAI;YAC/B,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,4BAA4B,EAAE,IAAI;YAClC,aAAa,EAAE,UAAU;YACzB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;SACrB;KACD;IACD,cAAc,EAAE;QACf,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,iBAAiB;QACrB,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,yEAAyE;YACzE,gFAAgF;SAChF;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE;YACX,yCAAyC;YACzC,2EAA2E;SAC3E;QACD,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,EAAE;SACR;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,qBAAqB,CAAC;YAC9B,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACnC,kBAAkB,EAAE,IAAI;YACxB,oBAAoB,EAAE,IAAI;YAC1B,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,eAAe;YACzB,aAAa,EAAE,UAAU;YACzB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;SACrB;KACD;IACD,sBAAsB,EAAE;QACvB,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,0BAA0B;QAC9B,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,wBAAwB;QAC7B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,gGAAgG;YAChG,+EAA+E;SAC/E;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,mDAAmD,CAAC;QACjE,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,kCAAkC;SACvC;QACD,IAAI,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,8BAA8B;SACzC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;SACxD;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;YAC/C,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;YACpG,KAAK,EAAE,CAAC,mBAAmB,EAAE,eAAe,EAAE,oBAAoB,CAAC;YACnE,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,IAAI;YAC9B,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,IAAI;YACjB,oCAAoC,EAAE,IAAI;YAC1C,eAAe,EAAE,MAAM;YACvB,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,IAAI;YAC1B,+BAA+B,EAAE,IAAI;SACrC;KACD;IACD,+BAA+B,EAAE;QAChC,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,0BAA0B;QAC9B,cAAc,EAAE,mBAAmB;QACnC,GAAG,EAAE,iCAAiC;QACtC,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE;YACN,8GAA8G;YAC9G,4DAA4D;SAC5D;QACD,SAAS,EAAE,WAAW;QACtB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,uBAAuB,CAAC;QACrC,KAAK,EAAE;YACN,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,0BAA0B,EAAE,IAAI;YAChC,eAAe,EAAE,IAAI;SACrB;KACD;IACD,qBAAqB,EAAE;QACtB,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,6BAA6B;QACjC,cAAc,EAAE,mBAAmB;QACnC,GAAG,EAAE,uBAAuB;QAC5B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,4FAA4F;YAC5F,sHAAsH;SACtH;QACD,SAAS,EAAE,WAAW;QACtB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,2CAA2C,CAAC;QACzD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,2BAA2B,CAAC;YACpC,iBAAiB,EAAE,CAAC,yCAAyC,CAAC;YAC9D,KAAK,EAAE,CAAC,kCAAkC,CAAC;YAC3C,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,8BAA8B,EAAE,IAAI;YACpC,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,IAAI;YACzB,kBAAkB,EAAE,IAAI;YACxB,wBAAwB,EAAE,IAAI;YAC9B,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,EAAE;YACrB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,IAAI;YACvB,uBAAuB,EAAE,IAAI;YAC7B,eAAe,EAAE,IAAI;SACrB;KACD;IACD,mBAAmB,EAAE;QACpB,EAAE,EAAE,sBAAsB;QAC1B,GAAG,EAAE,qBAAqB;QAC1B,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,CAAC,0EAA0E,CAAC;QACnF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,6CAA6C,CAAC;QAC3D,SAAS,EAAE;YACV,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,iBAAiB;SAC1B;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,eAAe;gBACf,eAAe;gBACf,kBAAkB;gBAClB,kBAAkB;gBAClB,cAAc;gBACd,kBAAkB;aAClB;YACD,IAAI,EAAE,CAAC,0BAA0B,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;YAClG,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,IAAI;YACzB,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,EAAE;YACrB,cAAc,EAAE,IAAI;YACpB,8BAA8B,EAAE,IAAI;YACpC,uBAAuB,EAAE,IAAI;YAC7B,eAAe,EAAE,IAAI;SACrB;KACD;IACD,cAAc,EAAE;QACf,EAAE,EAAE,iBAAiB;QACrB,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,CAAC,kFAAkF,CAAC;QAC3F,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,kCAAkC,CAAC;QAChD,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,qCAAqC;SAC1C;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,GAAG,CAAC;YACZ,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,eAAe;YAC5B,QAAQ,EAAE,IAAI;SACd;KACD;IACD,yBAAyB,EAAE;QAC1B,EAAE,EAAE,8BAA8B;QAClC,GAAG,EAAE,2BAA2B;QAChC,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,CAAC,6DAA6D,CAAC;QACtE,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,iDAAiD,CAAC;QAC/D,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,qBAAqB,EAAE,cAAc,CAAC;QAClE,KAAK,EAAE;YACN,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,mBAAmB,EAAE,IAAI;YACzB,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,eAAe;YAC/B,8BAA8B,EAAE,IAAI;SACpC;KACD;CAC8D,CAAC;AAEjE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC5C,cAAc,EAAE,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,wBAAwB,CAAC;IAC3G,gBAAgB,EAAE,CAAC,0BAA0B,CAAC;IAC9C,0BAA0B,EAAE,CAAC,0BAA0B,EAAE,6BAA6B,CAAC;IACvF,eAAe,EAAE,CAAC,qBAAqB,CAAC;CAC/B,CAAC;AAEX,MAAM,UAAU,oBAAoB,GAAsB;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CACvF;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAwB,EAAU;IACxE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAuB,EAAU;IACjF,OAAO,sBAAsB,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;KACnC,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,CACnC,MAAuB,EACvB,QAAiC,EACjC,QAA6C,EAChB;IAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;YACN,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,CAAC,qBAAqB,CAAC;SAChC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;QACzD,OAAO;YACN,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,sBAAsB,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,sBAAsB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,kCAAkC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;QACrD,OAAO;KACP,CAAC;AAAA,CACF;AAED,MAAM,UAAU,kCAAkC,CAAC,WAAmB,EAA8B;IACnG,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,kBAAkB,GAAG;QAC1B,6CAA6C;QAC7C,gDAAgD;QAChD,WAAW;QACX,0CAA0C;QAC1C,qCAAqC;KACrC,CAAC;IACF,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IAErF,OAAO;QACN,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;KACtD,CAAC;AAAA,CACF;AAED,SAAS,oBAAoB,CAAC,MAAuB,EAAmB;IACvE,OAAO;QACN,GAAG,MAAM;QACT,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAClD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACtB,CAAC,CAAC;gBACA,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;gBAC3E,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC5E,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAC5E;YACF,CAAC,CAAC,SAAS;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;QAClC,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC9B,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;YAChG,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;YACnG,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB;gBACxD,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBACzC,CAAC,CAAC,SAAS;SACZ;QACD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,SAA6B,EAAsB;IAC1E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO;YACN,GAAG,SAAS;YACZ,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;SACzB,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACxC,OAAO;YACN,GAAG,SAAS;YACZ,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACrD,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;AAAA,CACxB;AAED,SAAS,kBAAkB,CAAC,MAA8B,EAA0B;IACnF,OAAO;QACN,GAAG,MAAM;QACT,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QACvF,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,SAAS;KACrG,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,MAA2B,EAAE,QAAgB,EAAW;IAC9E,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAAA,CACvC;AAED,SAAS,0BAA0B,CAAC,MAAuB,EAAE,QAAgB,EAAW;IACvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,CAAC;QAC7G,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAAA,CACxC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAW;IAC1D,OAAO,qIAAqI,CAAC,IAAI,CAChJ,QAAQ,CAAC,WAAW,EAAE,CACtB,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAAC,KAAwB,EAAU;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5G,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,KAAsD,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CACvG","sourcesContent":["import { createHash } from \"node:crypto\";\n\nexport type PublicMcpPresetKey =\n\t| \"context7\"\n\t| \"exa\"\n\t| \"githubReadOnly\"\n\t| \"astGrep\"\n\t| \"repomixCodeCompact\"\n\t| \"omkLlmlinguaCompress\"\n\t| \"doclingUnderstand\"\n\t| \"markitdownLite\"\n\t| \"firecrawlWebUnderstand\"\n\t| \"deepwikiRepoUnderstandCandidate\"\n\t| \"insaneSearchCandidate\"\n\t| \"playwrightSandboxed\"\n\t| \"microsoftLearn\"\n\t| \"officialReferenceSafePack\";\n\nexport type PublicMcpRisk = \"R1\" | \"R2\" | \"R3\";\nexport type PublicMcpLicense = \"Apache-2.0\" | \"Apache-2.0/MIT/CC-BY-4.0\" | \"MIT\" | \"Unspecified\";\nexport type PublicMcpImplementation = \"candidate-wrapper\" | \"omk-owned\" | \"upstream-mcp\";\nexport type PublicMcpReadiness = \"candidate\" | \"stable\";\nexport type PublicMcpUriScheme = \"data\" | \"file\" | \"http\" | \"https\";\nexport type PublicMcpTransport =\n\t| {\n\t\t\treadonly type: \"http\";\n\t\t\treadonly url: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"embedded-python-or-sidecar\";\n\t\t\treadonly package: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"local-package\";\n\t\t\treadonly package: string;\n\t\t\treadonly args?: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly type: \"stdio\";\n\t\t\treadonly command: string;\n\t\t\treadonly args: readonly string[];\n\t  };\n\nexport interface PublicMcpAuthPolicy {\n\treadonly kind: \"bearer\" | \"header\" | \"none\";\n\treadonly header?: string;\n\treadonly secretRef?: string;\n}\n\nexport interface PublicMcpSecretPolicy {\n\treadonly required?: readonly string[];\n\treadonly optional?: readonly string[];\n\treadonly headers?: Readonly<Record<string, string>>;\n}\n\nexport interface PublicMcpToolPolicy {\n\treadonly allow: readonly string[];\n\treadonly conditionalAllow?: readonly string[];\n\treadonly deny?: readonly string[];\n\treadonly denyByDefault: boolean;\n\treadonly denyMutations?: boolean;\n\treadonly disabledByDefault?: readonly string[];\n\treadonly gated?: readonly string[];\n\treadonly requirePostconditions?: readonly string[];\n}\n\nexport interface PublicMcpRuntimePolicy {\n\treadonly absolutePathMustBeUnderWorkspace?: boolean;\n\treadonly allowedUriSchemes?: readonly PublicMcpUriScheme[];\n\treadonly authenticationBoundaryRequired?: boolean;\n\treadonly blockMetadataIp?: boolean;\n\treadonly blockHttpByDefault?: boolean;\n\treadonly blockNetworkUrlsByDefault?: boolean;\n\treadonly blockPrivateNetwork?: boolean;\n\treadonly blockRemoteRepositoryByDefault?: boolean;\n\treadonly cacheDocuments?: boolean;\n\treadonly cacheable?: boolean;\n\treadonly cacheMaterializedOutputs?: boolean;\n\treadonly defaultCompressionRatio?: number;\n\treadonly descriptorHashPinned?: boolean;\n\treadonly distillBeforeMainContext?: boolean;\n\treadonly disableAutoInstall?: boolean;\n\treadonly domainAllowlistOptional?: boolean;\n\treadonly denyYoutubeByDefault?: boolean;\n\treadonly denyZipByDefault?: boolean;\n\treadonly evidenceLedger?: boolean;\n\treadonly filesystemRoot?: string;\n\treadonly fileRoot?: string;\n\treadonly forkContext?: boolean;\n\treadonly ledger?: boolean;\n\treadonly localFilesUnderWorkspaceOnly?: boolean;\n\treadonly localOnly?: boolean;\n\treadonly maxBrowserActions?: number;\n\treadonly maxCompressionRatio?: number;\n\treadonly maxInputBytes?: number;\n\treadonly maxInputTokens?: number;\n\treadonly maxOutputTokens?: number;\n\treadonly maxResults?: number;\n\treadonly maxUrlsPerTask?: number;\n\treadonly markdownFullPageRequiresExplicitNeed?: boolean;\n\treadonly mutationsRequireHumanGate?: boolean;\n\treadonly mutationsRequirePostconditions?: boolean;\n\treadonly noFilesystemReadExceptModelCache?: boolean;\n\treadonly noNetwork?: boolean;\n\treadonly noSecrets?: boolean;\n\treadonly noShell?: boolean;\n\treadonly outputGuard?: boolean;\n\treadonly preferGrepBeforeFullRead?: boolean;\n\treadonly preferIncrementalRead?: boolean;\n\treadonly preferJsonExtraction?: boolean;\n\treadonly privateRepoDeniedByDefault?: boolean;\n\treadonly promptTaint?: \"external-docs\" | \"external-web\" | \"browser\";\n\treadonly publicContentOnly?: boolean;\n\treadonly publicReposOnly?: boolean;\n\treadonly readOnly?: boolean;\n\treadonly recordEvidence?: boolean;\n\treadonly rejectIfCoverageBelow?: {\n\t\treadonly hard: number;\n\t\treadonly high: number;\n\t\treadonly low: number;\n\t\treadonly medium: number;\n\t};\n\treadonly requireCoverageVerification?: boolean;\n\treadonly requireOriginAllowlistForScrape?: boolean;\n\treadonly requiresExplicitPostconditions?: boolean;\n\treadonly requiresOriginAllowlist?: boolean;\n\treadonly requiresSandbox?: boolean;\n\treadonly secretBrokerOnly?: boolean;\n\treadonly secretScanRequired?: boolean;\n\treadonly ssrfGuard?: boolean;\n\treadonly workspaceReadOnly?: boolean;\n}\n\nexport interface PublicMcpPreset {\n\treadonly defaultEnabled?: boolean;\n\treadonly id: string;\n\treadonly key: PublicMcpPresetKey;\n\treadonly license: PublicMcpLicense;\n\treadonly notes: readonly string[];\n\treadonly policy: PublicMcpRuntimePolicy;\n\treadonly implementation?: PublicMcpImplementation;\n\treadonly readiness?: PublicMcpReadiness;\n\treadonly risk: PublicMcpRisk;\n\treadonly sourceUrls: readonly string[];\n\treadonly tools: PublicMcpToolPolicy;\n\treadonly auth?: PublicMcpAuthPolicy;\n\treadonly secrets?: PublicMcpSecretPolicy;\n\treadonly servers?: readonly string[];\n\treadonly transport?: PublicMcpTransport;\n}\n\nexport interface PublicMcpObservedTool {\n\treadonly name: string;\n\treadonly descriptorHash: string;\n\treadonly description: string;\n}\n\nexport interface PublicMcpObservedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: readonly PublicMcpObservedTool[];\n}\n\nexport interface PublicMcpApprovedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: Readonly<Record<string, string>>;\n}\n\nexport type PublicMcpAdmissionStatus = \"allow\" | \"quarantine\";\n\nexport interface PublicMcpAdmissionDecision {\n\treadonly status: PublicMcpAdmissionStatus;\n\treadonly reasons: readonly string[];\n}\n\nexport type PublicMcpHashable =\n\t| null\n\t| boolean\n\t| number\n\t| string\n\t| readonly PublicMcpHashable[]\n\t| {\n\t\t\treadonly [key: string]: PublicMcpHashable;\n\t  };\n\nexport const PUBLIC_MCP_PRESETS = {\n\tcontext7: {\n\t\tid: \"context7\",\n\t\tkey: \"context7\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Documentation retrieval preset; optional API key only raises rate limits.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/upstash/context7\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.context7.com/mcp\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"CONTEXT7_API_KEY\"],\n\t\t\theaders: {\n\t\t\t\tCONTEXT7_API_KEY: \"secret-ref:context7\",\n\t\t\t},\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"resolve-library-id\", \"query-docs\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\texa: {\n\t\tid: \"exa\",\n\t\tkey: \"exa\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Run searches in forked context and return distilled output to the main task.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/exa-labs/exa-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.exa.ai/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"header\",\n\t\t\theader: \"Authorization\",\n\t\t\tsecretRef: \"secret-ref:exa_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"EXA_API_KEY\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"web_search_exa\", \"web_fetch_exa\"],\n\t\t\tconditionalAllow: [\"web_search_advanced_exa\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tdomainAllowlistOptional: true,\n\t\t\tforkContext: true,\n\t\t\tmaxOutputTokens: 5000,\n\t\t\tmaxResults: 10,\n\t\t\tssrfGuard: true,\n\t\t},\n\t},\n\tgithubReadOnly: {\n\t\tid: \"github-readonly\",\n\t\tkey: \"githubReadOnly\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Read-only GitHub MCP profile; mutation tools remain gated for future explicit workflows.\"],\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/github/github-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://api.githubcopilot.com/mcp/\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:github_pat\",\n\t\t},\n\t\tsecrets: {\n\t\t\trequired: [\"GITHUB_PERSONAL_ACCESS_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"actions_list\",\n\t\t\t\t\"get_file_contents\",\n\t\t\t\t\"issue_read\",\n\t\t\t\t\"list_issues\",\n\t\t\t\t\"list_pull_requests\",\n\t\t\t\t\"pull_request_read\",\n\t\t\t\t\"search_code\",\n\t\t\t\t\"search_issues\",\n\t\t\t\t\"search_pull_requests\",\n\t\t\t\t\"search_repositories\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t\trequirePostconditions: [\n\t\t\t\t\"add_comment_to_pending_review\",\n\t\t\t\t\"create_branch\",\n\t\t\t\t\"create_or_update_file\",\n\t\t\t\t\"create_pull_request\",\n\t\t\t\t\"delete_file\",\n\t\t\t\t\"issue_write\",\n\t\t\t\t\"merge_pull_request\",\n\t\t\t\t\"pull_request_review_write\",\n\t\t\t\t\"push_files\",\n\t\t\t\t\"update_pull_request\",\n\t\t\t\t\"update_pull_request_branch\",\n\t\t\t],\n\t\t},\n\t\tpolicy: {\n\t\t\tledger: true,\n\t\t\tmaxOutputTokens: 8000,\n\t\t\tmutationsRequireHumanGate: true,\n\t\t\treadOnly: true,\n\t\t\tsecretBrokerOnly: true,\n\t\t},\n\t},\n\tastGrep: {\n\t\tid: \"ast-grep\",\n\t\tkey: \"astGrep\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Experimental upstream; pin descriptor and wrap execution before broad enablement.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/ast-grep/ast-grep-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from\", \"git+https://github.com/ast-grep/ast-grep-mcp\", \"ast-grep-server\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"dump_syntax_tree\", \"find_code\", \"find_code_by_rule\", \"test_match_code_rule\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tmaxResults: 200,\n\t\t\tnoShell: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\trepomixCodeCompact: {\n\t\tdefaultEnabled: true,\n\t\tid: \"repomix-code-compact\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"repomixCodeCompact\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Codebase packing and compression preset; remote repository packing is disabled until a task explicitly opts in.\",\n\t\t\t\"Use grep/read against packed output before full-context attachment.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/yamadashy/repomix\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"npx\",\n\t\t\targs: [\"-y\", \"repomix\", \"--mcp\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"attach_packed_output\",\n\t\t\t\t\"file_system_read_directory\",\n\t\t\t\t\"grep_repomix_output\",\n\t\t\t\t\"pack_codebase\",\n\t\t\t\t\"read_repomix_output\",\n\t\t\t],\n\t\t\tdisabledByDefault: [\"pack_remote_repository\"],\n\t\t\tgated: [\"file_system_read_file\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tabsolutePathMustBeUnderWorkspace: true,\n\t\t\tblockRemoteRepositoryByDefault: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tmaxOutputTokens: 120_000,\n\t\t\toutputGuard: true,\n\t\t\tpreferGrepBeforeFullRead: true,\n\t\t\tpreferIncrementalRead: true,\n\t\t\tsecretScanRequired: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\tomkLlmlinguaCompress: {\n\t\tdefaultEnabled: true,\n\t\tid: \"omk-llmlingua-compress\",\n\t\timplementation: \"omk-owned\",\n\t\tkey: \"omkLlmlinguaCompress\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"First-party wrapper target for LLMLingua-style prompt and context compression.\",\n\t\t\t\"System prompts, latest user turns, and tool schemas must stay outside lossy compression.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/LLMLingua\", \"https://arxiv.org/abs/2403.12968\"],\n\t\ttransport: {\n\t\t\ttype: \"embedded-python-or-sidecar\",\n\t\t\tpackage: \"llmlingua\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"compress_context_items\",\n\t\t\t\t\"compress_messages\",\n\t\t\t\t\"compress_prompt\",\n\t\t\t\t\"compress_representation_candidate\",\n\t\t\t\t\"verify_compression_coverage\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheMaterializedOutputs: true,\n\t\t\tdefaultCompressionRatio: 3,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalOnly: true,\n\t\t\tmaxCompressionRatio: 8,\n\t\t\tmaxInputTokens: 200_000,\n\t\t\tnoFilesystemReadExceptModelCache: true,\n\t\t\tnoNetwork: true,\n\t\t\toutputGuard: true,\n\t\t\trejectIfCoverageBelow: {\n\t\t\t\thard: 0.95,\n\t\t\t\thigh: 0.8,\n\t\t\t\tmedium: 0.55,\n\t\t\t\tlow: 0.3,\n\t\t\t},\n\t\t\trequireCoverageVerification: true,\n\t\t},\n\t},\n\tdoclingUnderstand: {\n\t\tdefaultEnabled: true,\n\t\tid: \"docling-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"doclingUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Structured document understanding preset for PDFs, Office files, tables, OCR, and layout-sensitive conversions.\",\n\t\t\t\"Parser attack surface requires sandboxing and workspace-only local file access.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/docling-project/docling\", \"https://github.com/docling-project/docling-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from=docling-mcp\", \"docling-mcp-server\", \"--transport\", \"stdio\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_document\", \"export_docling_document_to_json\", \"export_docling_document_to_markdown\"],\n\t\t\tgated: [\"create_new_docling_document\", \"save_docling_document\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockNetworkUrlsByDefault: true,\n\t\t\tcacheDocuments: true,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalFilesUnderWorkspaceOnly: true,\n\t\t\tmaxInputBytes: 80_000_000,\n\t\t\tmaxOutputTokens: 80_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmarkitdownLite: {\n\t\tdefaultEnabled: true,\n\t\tid: \"markitdown-lite\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"markitdownLite\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Lightweight Markdown conversion fallback for local files and data URIs.\",\n\t\t\t\"HTTP, ZIP, and YouTube inputs stay blocked until a task explicitly needs them.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\n\t\t\t\"https://github.com/microsoft/markitdown\",\n\t\t\t\"https://github.com/microsoft/markitdown/tree/main/packages/markitdown-mcp\",\n\t\t],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"markitdown-mcp\",\n\t\t\targs: [],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_to_markdown\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tallowedUriSchemes: [\"file\", \"data\"],\n\t\t\tblockHttpByDefault: true,\n\t\t\tdenyYoutubeByDefault: true,\n\t\t\tdenyZipByDefault: true,\n\t\t\tevidenceLedger: true,\n\t\t\tfileRoot: \"workspaceRoot\",\n\t\t\tmaxInputBytes: 30_000_000,\n\t\t\tmaxOutputTokens: 50_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tfirecrawlWebUnderstand: {\n\t\tdefaultEnabled: false,\n\t\tid: \"firecrawl-web-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"firecrawlWebUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Opt-in live web understanding preset; search and scrape are the only default-admissible tools.\",\n\t\t\t\"Prefer JSON extraction over full-page Markdown to protect the context budget.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/firecrawl/firecrawl-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.firecrawl.dev/v2/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:firecrawl_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"FIRECRAWL_API_KEY\", \"FIRECRAWL_OAUTH_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"firecrawl_scrape\", \"firecrawl_search\"],\n\t\t\tdisabledByDefault: [\"firecrawl_agent\", \"firecrawl_crawl\", \"firecrawl_interact\", \"firecrawl_monitor\"],\n\t\t\tgated: [\"firecrawl_extract\", \"firecrawl_map\", \"firecrawl_research\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmarkdownFullPageRequiresExplicitNeed: true,\n\t\t\tmaxOutputTokens: 40_000,\n\t\t\tmaxUrlsPerTask: 10,\n\t\t\toutputGuard: true,\n\t\t\tpreferJsonExtraction: true,\n\t\t\trequireOriginAllowlistForScrape: true,\n\t\t},\n\t},\n\tdeepwikiRepoUnderstandCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"deepwiki-repo-understand\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"deepwikiRepoUnderstandCandidate\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\n\t\t\t\"Candidate only until an official MCP endpoint, tool schema, auth model, and retention boundary are verified.\",\n\t\t\t\"Remote repository indexing is public-repo-only by default.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://deepwiki.com/\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tnoSecrets: true,\n\t\t\toutputGuard: true,\n\t\t\tprivateRepoDeniedByDefault: true,\n\t\t\tpublicReposOnly: true,\n\t\t},\n\t},\n\tinsaneSearchCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"insane-search-public-reader\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"insaneSearchCandidate\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Candidate only: upstream is a Claude Code plugin, not a verified standalone MCP transport.\",\n\t\t\t\"Any OMK integration must be a sandboxed first-party wrapper around public-content reads, with auto-install disabled.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/fivetaku/insane-search\"],\n\t\ttools: {\n\t\t\tallow: [\"insane_search_public_read\"],\n\t\t\tdisabledByDefault: [\"insane_search_auto_install_dependencies\"],\n\t\t\tgated: [\"insane_search_browser_escalation\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tauthenticationBoundaryRequired: true,\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdisableAutoInstall: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmaxBrowserActions: 20,\n\t\t\tmaxOutputTokens: 30_000,\n\t\t\toutputGuard: true,\n\t\t\tpublicContentOnly: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tplaywrightSandboxed: {\n\t\tid: \"playwright-sandboxed\",\n\t\tkey: \"playwrightSandboxed\",\n\t\tlicense: \"Apache-2.0\",\n\t\tnotes: [\"Browser automation preset; enable only with sandbox and origin controls.\"],\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/microsoft/playwright-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"local-package\",\n\t\t\tpackage: \"@playwright/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"browser_close\",\n\t\t\t\t\"browser_click\",\n\t\t\t\t\"browser_navigate\",\n\t\t\t\t\"browser_snapshot\",\n\t\t\t\t\"browser_type\",\n\t\t\t\t\"browser_wait_for\",\n\t\t\t],\n\t\t\tdeny: [\"browser_console_messages\", \"browser_file_upload\", \"browser_pdf_save\", \"browser_press_key\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tledger: true,\n\t\t\tmaxBrowserActions: 40,\n\t\t\trecordEvidence: true,\n\t\t\trequiresExplicitPostconditions: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmicrosoftLearn: {\n\t\tid: \"microsoft-learn\",\n\t\tkey: \"microsoftLearn\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\"Microsoft official remote documentation endpoint from the Microsoft MCP catalog.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://learn.microsoft.com/api/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"*\"],\n\t\t\tdenyByDefault: true,\n\t\t\tdenyMutations: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\tofficialReferenceSafePack: {\n\t\tid: \"official-reference-safe-pack\",\n\t\tkey: \"officialReferenceSafePack\",\n\t\tlicense: \"Apache-2.0/MIT/CC-BY-4.0\",\n\t\tnotes: [\"Reference implementations only; wrap before production use.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/modelcontextprotocol/servers\"],\n\t\tservers: [\"time\", \"memory\", \"sequential-thinking\", \"git-readonly\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tfilesystemRoot: \"workspaceRoot\",\n\t\t\tmutationsRequirePostconditions: true,\n\t\t},\n\t},\n} as const satisfies Record<PublicMcpPresetKey, PublicMcpPreset>;\n\nexport const OMK_PUBLIC_CONTEXT_MCP_BUNDLE = {\n\tstableDefaults: [\"repomix-code-compact\", \"docling-understand\", \"markitdown-lite\", \"omk-llmlingua-compress\"],\n\toptInResearchWeb: [\"firecrawl-web-understand\"],\n\tcandidatesNeedVerification: [\"deepwiki-repo-understand\", \"insane-search-public-reader\"],\n\tinternalRouters: [\"mcp-tool-rag-router\"],\n} as const;\n\nexport function listPublicMcpPresets(): PublicMcpPreset[] {\n\treturn Object.values(PUBLIC_MCP_PRESETS).map((preset) => clonePublicMcpPreset(preset));\n}\n\nexport function canonicalMcpPolicyHash(value: PublicMcpHashable): string {\n\treturn createHash(\"sha256\").update(canonicalStringify(value)).digest(\"hex\");\n}\n\nexport function canonicalPublicMcpServerIdentity(preset: PublicMcpPreset): string {\n\treturn canonicalMcpPolicyHash({\n\t\tid: preset.id,\n\t\tservers: preset.servers ?? null,\n\t\ttransport: preset.transport ?? null,\n\t});\n}\n\nexport function admitPublicMcpServer(\n\tpreset: PublicMcpPreset,\n\tobserved: PublicMcpObservedServer,\n\tapproved: PublicMcpApprovedServer | undefined,\n): PublicMcpAdmissionDecision {\n\tif (!approved) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_not_approved\"],\n\t\t};\n\t}\n\n\tif (approved.serverIdentity !== observed.serverIdentity) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_identity_changed\"],\n\t\t};\n\t}\n\n\tconst reasons: string[] = [];\n\n\tfor (const tool of observed.tools) {\n\t\tconst approvedDescriptorHash = approved.tools[tool.name];\n\n\t\tif (!approvedDescriptorHash) {\n\t\t\treasons.push(`new_tool:${tool.name}`);\n\t\t} else if (approvedDescriptorHash !== tool.descriptorHash) {\n\t\t\treasons.push(`descriptor_changed:${tool.name}`);\n\t\t}\n\n\t\tif (!isToolAllowed(preset.tools, tool.name)) {\n\t\t\treasons.push(`tool_not_allowed:${tool.name}`);\n\t\t}\n\n\t\tif (shouldDenyMutationLikeTool(preset, tool.name)) {\n\t\t\treasons.push(`mutation_tool_denied:${tool.name}`);\n\t\t}\n\n\t\tif (detectMcpDescriptorPromptInjection(tool.description).score > 0.7) {\n\t\t\treasons.push(`descriptor_prompt_injection:${tool.name}`);\n\t\t}\n\t}\n\n\treturn {\n\t\tstatus: reasons.length === 0 ? \"allow\" : \"quarantine\",\n\t\treasons,\n\t};\n}\n\nexport function detectMcpDescriptorPromptInjection(description: string): { readonly score: number } {\n\tconst normalized = description.toLowerCase();\n\tconst suspiciousPatterns = [\n\t\t/ignore\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/disregard\\s+(?:all\\s+)?previous\\s+instructions/,\n\t\t/exfiltrat/,\n\t\t/reveal\\s+(?:the\\s+)?(?:system\\s+)?prompt/,\n\t\t/send\\s+(?:me\\s+)?(?:all\\s+)?secrets/,\n\t];\n\tconst hits = suspiciousPatterns.filter((pattern) => pattern.test(normalized)).length;\n\n\treturn {\n\t\tscore: hits === 0 ? 0 : Math.min(1, 0.6 + hits * 0.25),\n\t};\n}\n\nfunction clonePublicMcpPreset(preset: PublicMcpPreset): PublicMcpPreset {\n\treturn {\n\t\t...preset,\n\t\tauth: preset.auth ? { ...preset.auth } : undefined,\n\t\tdefaultEnabled: preset.defaultEnabled,\n\t\timplementation: preset.implementation,\n\t\tnotes: [...preset.notes],\n\t\tpolicy: cloneRuntimePolicy(preset.policy),\n\t\treadiness: preset.readiness,\n\t\tsecrets: preset.secrets\n\t\t\t? {\n\t\t\t\t\theaders: preset.secrets.headers ? { ...preset.secrets.headers } : undefined,\n\t\t\t\t\toptional: preset.secrets.optional ? [...preset.secrets.optional] : undefined,\n\t\t\t\t\trequired: preset.secrets.required ? [...preset.secrets.required] : undefined,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\tservers: preset.servers ? [...preset.servers] : undefined,\n\t\tsourceUrls: [...preset.sourceUrls],\n\t\ttools: {\n\t\t\tallow: [...preset.tools.allow],\n\t\t\tconditionalAllow: preset.tools.conditionalAllow ? [...preset.tools.conditionalAllow] : undefined,\n\t\t\tdeny: preset.tools.deny ? [...preset.tools.deny] : undefined,\n\t\t\tdenyByDefault: preset.tools.denyByDefault,\n\t\t\tdenyMutations: preset.tools.denyMutations,\n\t\t\tdisabledByDefault: preset.tools.disabledByDefault ? [...preset.tools.disabledByDefault] : undefined,\n\t\t\tgated: preset.tools.gated ? [...preset.tools.gated] : undefined,\n\t\t\trequirePostconditions: preset.tools.requirePostconditions\n\t\t\t\t? [...preset.tools.requirePostconditions]\n\t\t\t\t: undefined,\n\t\t},\n\t\ttransport: preset.transport ? cloneTransport(preset.transport) : undefined,\n\t};\n}\n\nfunction cloneTransport(transport: PublicMcpTransport): PublicMcpTransport {\n\tif (transport.type === \"stdio\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: [...transport.args],\n\t\t};\n\t}\n\n\tif (transport.type === \"local-package\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: transport.args ? [...transport.args] : undefined,\n\t\t};\n\t}\n\n\tif (transport.type === \"embedded-python-or-sidecar\") {\n\t\treturn { ...transport };\n\t}\n\n\treturn { ...transport };\n}\n\nfunction cloneRuntimePolicy(policy: PublicMcpRuntimePolicy): PublicMcpRuntimePolicy {\n\treturn {\n\t\t...policy,\n\t\tallowedUriSchemes: policy.allowedUriSchemes ? [...policy.allowedUriSchemes] : undefined,\n\t\trejectIfCoverageBelow: policy.rejectIfCoverageBelow ? { ...policy.rejectIfCoverageBelow } : undefined,\n\t};\n}\n\nfunction isToolAllowed(policy: PublicMcpToolPolicy, toolName: string): boolean {\n\tif (policy.deny?.includes(toolName)) {\n\t\treturn false;\n\t}\n\n\tif (policy.allow.includes(\"*\")) {\n\t\treturn true;\n\t}\n\n\treturn policy.allow.includes(toolName);\n}\n\nfunction shouldDenyMutationLikeTool(preset: PublicMcpPreset, toolName: string): boolean {\n\tif (!preset.tools.allow.includes(\"*\")) {\n\t\treturn false;\n\t}\n\n\tif (!preset.tools.denyMutations && !preset.policy.readOnly && !preset.policy.mutationsRequirePostconditions) {\n\t\treturn false;\n\t}\n\n\treturn isMutationLikeToolName(toolName);\n}\n\nfunction isMutationLikeToolName(toolName: string): boolean {\n\treturn /(?:^|[_-])(add|approve|archive|cancel|close|create|delete|dismiss|merge|post|push|remove|send|submit|update|upload|write)(?:$|[_-])/.test(\n\t\ttoolName.toLowerCase(),\n\t);\n}\n\nfunction canonicalStringify(value: PublicMcpHashable): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"number\" || typeof value === \"string\") {\n\t\treturn JSON.stringify(value);\n\t}\n\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((item) => canonicalStringify(item)).join(\",\")}]`;\n\t}\n\n\tconst record = value as { readonly [key: string]: PublicMcpHashable };\n\tconst keys = Object.keys(record).sort();\n\treturn `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`).join(\",\")}}`;\n}\n"]}
+{"version":3,"file":"mcp-public-presets.js","sourceRoot":"","sources":["../../src/core/mcp-public-presets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,kCAAkC,EAClC,uCAAuC,GACvC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACN,kCAAkC,EAClC,uCAAuC,GAEvC,MAAM,+BAA+B,CAAC;AAwLvC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IACjC,QAAQ,EAAE;QACT,EAAE,EAAE,UAAU;QACd,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,2EAA2E,CAAC;QACpF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,qCAAqC,CAAC;QACnD,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,8BAA8B;SACnC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,kBAAkB,CAAC;YAC9B,OAAO,EAAE;gBACR,gBAAgB,EAAE,qBAAqB;aACvC;SACD;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,oBAAoB,EAAE,YAAY,CAAC;YAC3C,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,eAAe;YAC5B,QAAQ,EAAE,IAAI;SACd;KACD;IACD,GAAG,EAAE;QACJ,EAAE,EAAE,KAAK;QACT,GAAG,EAAE,KAAK;QACV,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,8EAA8E,CAAC;QACvF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,4CAA4C,CAAC;QAC1D,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,wBAAwB;SAC7B;QACD,IAAI,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,eAAe;YACvB,SAAS,EAAE,wBAAwB;SACnC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,aAAa,CAAC;SACzB;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC;YAC1C,gBAAgB,EAAE,CAAC,yBAAyB,CAAC;YAC7C,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,IAAI;YAC9B,uBAAuB,EAAE,IAAI;YAC7B,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,IAAI;SACf;KACD;IACD,cAAc,EAAE;QACf,EAAE,EAAE,iBAAiB;QACrB,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,0FAA0F,CAAC;QACnG,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,6CAA6C,CAAC;QAC3D,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,oCAAoC;SACzC;QACD,IAAI,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,uBAAuB;SAClC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,8BAA8B,CAAC;SAC1C;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,cAAc;gBACd,mBAAmB;gBACnB,YAAY;gBACZ,aAAa;gBACb,oBAAoB;gBACpB,mBAAmB;gBACnB,aAAa;gBACb,eAAe;gBACf,sBAAsB;gBACtB,qBAAqB;aACrB;YACD,aAAa,EAAE,IAAI;YACnB,qBAAqB,EAAE;gBACtB,+BAA+B;gBAC/B,eAAe;gBACf,uBAAuB;gBACvB,qBAAqB;gBACrB,aAAa;gBACb,aAAa;gBACb,oBAAoB;gBACpB,2BAA2B;gBAC3B,YAAY;gBACZ,qBAAqB;gBACrB,4BAA4B;aAC5B;SACD;QACD,MAAM,EAAE;YACP,MAAM,EAAE,IAAI;YACZ,eAAe,EAAE,IAAI;YACrB,yBAAyB,EAAE,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;SACtB;KACD;IACD,OAAO,EAAE;QACR,EAAE,EAAE,UAAU;QACd,GAAG,EAAE,SAAS;QACd,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,mFAAmF,CAAC;QAC5F,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,0CAA0C,CAAC;QACxD,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,8CAA8C,EAAE,iBAAiB,CAAC;SACnF;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,CAAC;YACrF,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,oBAAoB,EAAE,IAAI;YAC1B,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;SACvB;KACD;IACD,kBAAkB,EAAE;QACnB,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,sBAAsB;QAC1B,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,oBAAoB;QACzB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,iHAAiH;YACjH,qEAAqE;SACrE;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,sCAAsC,CAAC;QACpD,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;SAChC;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,sBAAsB;gBACtB,4BAA4B;gBAC5B,qBAAqB;gBACrB,eAAe;gBACf,qBAAqB;aACrB;YACD,iBAAiB,EAAE,CAAC,wBAAwB,CAAC;YAC7C,KAAK,EAAE,CAAC,uBAAuB,CAAC;YAChC,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,gCAAgC,EAAE,IAAI;YACtC,8BAA8B,EAAE,IAAI;YACpC,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,OAAO;YACxB,WAAW,EAAE,IAAI;YACjB,wBAAwB,EAAE,IAAI;YAC9B,qBAAqB,EAAE,IAAI;YAC3B,kBAAkB,EAAE,IAAI;YACxB,iBAAiB,EAAE,IAAI;SACvB;KACD;IACD,oBAAoB,EAAE;QACrB,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,wBAAwB;QAC5B,cAAc,EAAE,WAAW;QAC3B,GAAG,EAAE,sBAAsB;QAC3B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,gFAAgF;YAChF,0FAA0F;SAC1F;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,wCAAwC,EAAE,kCAAkC,CAAC;QAC1F,SAAS,EAAE;YACV,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,WAAW;SACpB;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,wBAAwB;gBACxB,mBAAmB;gBACnB,iBAAiB;gBACjB,mCAAmC;gBACnC,6BAA6B;aAC7B;YACD,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,wBAAwB,EAAE,IAAI;YAC9B,uBAAuB,EAAE,CAAC;YAC1B,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,CAAC;YACtB,cAAc,EAAE,OAAO;YACvB,gCAAgC,EAAE,IAAI;YACtC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,qBAAqB,EAAE;gBACtB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,GAAG;aACR;YACD,2BAA2B,EAAE,IAAI;SACjC;KACD;IACD,iBAAiB,EAAE;QAClB,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,oBAAoB;QACxB,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,mBAAmB;QACxB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,iHAAiH;YACjH,iFAAiF;SACjF;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,4CAA4C,EAAE,gDAAgD,CAAC;QAC5G,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,aAAa,EAAE,OAAO,CAAC;SAC1E;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,qCAAqC,CAAC;YACrG,KAAK,EAAE,CAAC,6BAA6B,EAAE,uBAAuB,CAAC;YAC/D,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,yBAAyB,EAAE,IAAI;YAC/B,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,4BAA4B,EAAE,IAAI;YAClC,aAAa,EAAE,UAAU;YACzB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;SACrB;KACD;IACD,cAAc,EAAE;QACf,cAAc,EAAE,IAAI;QACpB,EAAE,EAAE,iBAAiB;QACrB,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,yEAAyE;YACzE,gFAAgF;SAChF;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE;YACX,yCAAyC;YACzC,2EAA2E;SAC3E;QACD,SAAS,EAAE;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,EAAE;SACR;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,qBAAqB,CAAC;YAC9B,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACnC,kBAAkB,EAAE,IAAI;YACxB,oBAAoB,EAAE,IAAI;YAC1B,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,QAAQ,EAAE,eAAe;YACzB,aAAa,EAAE,UAAU;YACzB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,eAAe,EAAE,IAAI;SACrB;KACD;IACD,sBAAsB,EAAE;QACvB,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,0BAA0B;QAC9B,cAAc,EAAE,cAAc;QAC9B,GAAG,EAAE,wBAAwB;QAC7B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,gGAAgG;YAChG,+EAA+E;SAC/E;QACD,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,mDAAmD,CAAC;QACjE,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,kCAAkC;SACvC;QACD,IAAI,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,8BAA8B;SACzC;QACD,OAAO,EAAE;YACR,QAAQ,EAAE,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;SACxD;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;YAC/C,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;YACpG,KAAK,EAAE,CAAC,mBAAmB,EAAE,eAAe,EAAE,oBAAoB,CAAC;YACnE,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,IAAI;YACzB,wBAAwB,EAAE,IAAI;YAC9B,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,IAAI;YACjB,oCAAoC,EAAE,IAAI;YAC1C,eAAe,EAAE,MAAM;YACvB,cAAc,EAAE,EAAE;YAClB,WAAW,EAAE,IAAI;YACjB,oBAAoB,EAAE,IAAI;YAC1B,+BAA+B,EAAE,IAAI;SACrC;KACD;IACD,+BAA+B,EAAE;QAChC,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,0BAA0B;QAC9B,cAAc,EAAE,mBAAmB;QACnC,GAAG,EAAE,iCAAiC;QACtC,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE;YACN,8GAA8G;YAC9G,4DAA4D;SAC5D;QACD,SAAS,EAAE,WAAW;QACtB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,uBAAuB,CAAC;QACrC,KAAK,EAAE;YACN,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,IAAI;YACjB,0BAA0B,EAAE,IAAI;YAChC,eAAe,EAAE,IAAI;SACrB;KACD;IACD,qBAAqB,EAAE;QACtB,cAAc,EAAE,KAAK;QACrB,EAAE,EAAE,6BAA6B;QACjC,cAAc,EAAE,mBAAmB;QACnC,GAAG,EAAE,uBAAuB;QAC5B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACN,4FAA4F;YAC5F,sHAAsH;SACtH;QACD,SAAS,EAAE,WAAW;QACtB,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,2CAA2C,CAAC;QACzD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,2BAA2B,CAAC;YACpC,iBAAiB,EAAE,CAAC,yCAAyC,CAAC;YAC9D,KAAK,EAAE,CAAC,kCAAkC,CAAC;YAC3C,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,8BAA8B,EAAE,IAAI;YACpC,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,IAAI;YACzB,kBAAkB,EAAE,IAAI;YACxB,wBAAwB,EAAE,IAAI;YAC9B,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,EAAE;YACrB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,IAAI;YACvB,uBAAuB,EAAE,IAAI;YAC7B,eAAe,EAAE,IAAI;SACrB;KACD;IACD,mBAAmB,EAAE;QACpB,EAAE,EAAE,sBAAsB;QAC1B,GAAG,EAAE,qBAAqB;QAC1B,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,CAAC,0EAA0E,CAAC;QACnF,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,6CAA6C,CAAC;QAC3D,SAAS,EAAE;YACV,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,iBAAiB;SAC1B;QACD,KAAK,EAAE;YACN,KAAK,EAAE;gBACN,eAAe;gBACf,eAAe;gBACf,kBAAkB;gBAClB,kBAAkB;gBAClB,cAAc;gBACd,kBAAkB;aAClB;YACD,IAAI,EAAE,CAAC,0BAA0B,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;YAClG,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,eAAe,EAAE,IAAI;YACrB,mBAAmB,EAAE,IAAI;YACzB,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,EAAE;YACrB,cAAc,EAAE,IAAI;YACpB,8BAA8B,EAAE,IAAI;YACpC,uBAAuB,EAAE,IAAI;YAC7B,eAAe,EAAE,IAAI;SACrB;KACD;IACD,cAAc,EAAE;QACf,EAAE,EAAE,iBAAiB;QACrB,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,CAAC,kFAAkF,CAAC;QAC3F,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,kCAAkC,CAAC;QAChD,SAAS,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,qCAAqC;SAC1C;QACD,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,GAAG,CAAC;YACZ,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,SAAS,EAAE,IAAI;YACf,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,eAAe;YAC5B,QAAQ,EAAE,IAAI;SACd;KACD;IACD,yBAAyB,EAAE;QAC1B,EAAE,EAAE,8BAA8B;QAClC,GAAG,EAAE,2BAA2B;QAChC,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,CAAC,6DAA6D,CAAC;QACtE,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,CAAC,iDAAiD,CAAC;QAC/D,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,qBAAqB,EAAE,cAAc,CAAC;QAClE,KAAK,EAAE;YACN,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI;SACnB;QACD,MAAM,EAAE;YACP,mBAAmB,EAAE,IAAI;YACzB,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,eAAe;YAC/B,8BAA8B,EAAE,IAAI;SACpC;KACD;CAC8D,CAAC;AAEjE,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC5C,cAAc,EAAE,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,wBAAwB,CAAC;IAC3G,gBAAgB,EAAE,CAAC,0BAA0B,CAAC;IAC9C,0BAA0B,EAAE,CAAC,0BAA0B,EAAE,6BAA6B,CAAC;IACvF,eAAe,EAAE,CAAC,qBAAqB,CAAC;CAC/B,CAAC;AAEX,MAAM,UAAU,oBAAoB,GAAsB;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;AAAA,CACvF;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAwB,EAAU;IACxE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAuB,EAAU;IACjF,OAAO,sBAAsB,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;KACnC,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,oBAAoB,CACnC,MAAuB,EACvB,QAAiC,EACjC,QAA6C,EAChB;IAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;YACN,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,CAAC,qBAAqB,CAAC;SAChC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,EAAE,CAAC;QACzD,OAAO;YACN,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,CAAC,yBAAyB,CAAC;SACpC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,sBAAsB,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,sBAAsB,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IACC,kCAAkC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,GAAG,uCAAuC,EAC3G,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;QACrD,OAAO;KACP,CAAC;AAAA,CACF;AAED,SAAS,oBAAoB,CAAC,MAAuB,EAAmB;IACvE,OAAO;QACN,GAAG,MAAM;QACT,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAClD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACxB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACtB,CAAC,CAAC;gBACA,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;gBAC3E,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC5E,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAC5E;YACF,CAAC,CAAC,SAAS;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;QAClC,KAAK,EAAE;YACN,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC9B,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;YAChG,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5D,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;YACnG,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB;gBACxD,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBACzC,CAAC,CAAC,SAAS;SACZ;QACD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,SAA6B,EAAsB;IAC1E,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO;YACN,GAAG,SAAS;YACZ,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;SACzB,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACxC,OAAO;YACN,GAAG,SAAS;YACZ,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACrD,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC;AAAA,CACxB;AAED,SAAS,kBAAkB,CAAC,MAA8B,EAA0B;IACnF,OAAO;QACN,GAAG,MAAM;QACT,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;QACvF,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,SAAS;KACrG,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,MAA2B,EAAE,QAAgB,EAAW;IAC9E,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAAA,CACvC;AAED,SAAS,0BAA0B,CAAC,MAAuB,EAAE,QAAgB,EAAW;IACvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,CAAC;QAC7G,OAAO,KAAK,CAAC;IACd,CAAC;IAED,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAAA,CACxC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAW;IAC1D,OAAO,qIAAqI,CAAC,IAAI,CAChJ,QAAQ,CAAC,WAAW,EAAE,CACtB,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAAC,KAAwB,EAAU;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5G,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,KAAsD,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAAA,CACvG","sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n\tdetectMcpDescriptorPromptInjection,\n\tMCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD,\n} from \"./mcp-descriptor-injection.ts\";\n\nexport {\n\tdetectMcpDescriptorPromptInjection,\n\tMCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD,\n\ttype McpDescriptorPromptInjectionSignal,\n} from \"./mcp-descriptor-injection.ts\";\n\nexport type PublicMcpPresetKey =\n\t| \"context7\"\n\t| \"exa\"\n\t| \"githubReadOnly\"\n\t| \"astGrep\"\n\t| \"repomixCodeCompact\"\n\t| \"omkLlmlinguaCompress\"\n\t| \"doclingUnderstand\"\n\t| \"markitdownLite\"\n\t| \"firecrawlWebUnderstand\"\n\t| \"deepwikiRepoUnderstandCandidate\"\n\t| \"insaneSearchCandidate\"\n\t| \"playwrightSandboxed\"\n\t| \"microsoftLearn\"\n\t| \"officialReferenceSafePack\";\n\nexport type PublicMcpRisk = \"R1\" | \"R2\" | \"R3\";\nexport type PublicMcpLicense = \"Apache-2.0\" | \"Apache-2.0/MIT/CC-BY-4.0\" | \"MIT\" | \"Unspecified\";\nexport type PublicMcpImplementation = \"candidate-wrapper\" | \"omk-owned\" | \"upstream-mcp\";\nexport type PublicMcpReadiness = \"candidate\" | \"stable\";\nexport type PublicMcpUriScheme = \"data\" | \"file\" | \"http\" | \"https\";\nexport type PublicMcpTransport =\n\t| {\n\t\t\treadonly type: \"http\";\n\t\t\treadonly url: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"embedded-python-or-sidecar\";\n\t\t\treadonly package: string;\n\t  }\n\t| {\n\t\t\treadonly type: \"local-package\";\n\t\t\treadonly package: string;\n\t\t\treadonly args?: readonly string[];\n\t  }\n\t| {\n\t\t\treadonly type: \"stdio\";\n\t\t\treadonly command: string;\n\t\t\treadonly args: readonly string[];\n\t  };\n\nexport interface PublicMcpAuthPolicy {\n\treadonly kind: \"bearer\" | \"header\" | \"none\";\n\treadonly header?: string;\n\treadonly secretRef?: string;\n}\n\nexport interface PublicMcpSecretPolicy {\n\treadonly required?: readonly string[];\n\treadonly optional?: readonly string[];\n\treadonly headers?: Readonly<Record<string, string>>;\n}\n\nexport interface PublicMcpToolPolicy {\n\treadonly allow: readonly string[];\n\treadonly conditionalAllow?: readonly string[];\n\treadonly deny?: readonly string[];\n\treadonly denyByDefault: boolean;\n\treadonly denyMutations?: boolean;\n\treadonly disabledByDefault?: readonly string[];\n\treadonly gated?: readonly string[];\n\treadonly requirePostconditions?: readonly string[];\n}\n\nexport interface PublicMcpRuntimePolicy {\n\treadonly absolutePathMustBeUnderWorkspace?: boolean;\n\treadonly allowedUriSchemes?: readonly PublicMcpUriScheme[];\n\treadonly authenticationBoundaryRequired?: boolean;\n\treadonly blockMetadataIp?: boolean;\n\treadonly blockHttpByDefault?: boolean;\n\treadonly blockNetworkUrlsByDefault?: boolean;\n\treadonly blockPrivateNetwork?: boolean;\n\treadonly blockRemoteRepositoryByDefault?: boolean;\n\treadonly cacheDocuments?: boolean;\n\treadonly cacheable?: boolean;\n\treadonly cacheMaterializedOutputs?: boolean;\n\treadonly defaultCompressionRatio?: number;\n\treadonly descriptorHashPinned?: boolean;\n\treadonly distillBeforeMainContext?: boolean;\n\treadonly disableAutoInstall?: boolean;\n\treadonly domainAllowlistOptional?: boolean;\n\treadonly denyYoutubeByDefault?: boolean;\n\treadonly denyZipByDefault?: boolean;\n\treadonly evidenceLedger?: boolean;\n\treadonly filesystemRoot?: string;\n\treadonly fileRoot?: string;\n\treadonly forkContext?: boolean;\n\treadonly ledger?: boolean;\n\treadonly localFilesUnderWorkspaceOnly?: boolean;\n\treadonly localOnly?: boolean;\n\treadonly maxBrowserActions?: number;\n\treadonly maxCompressionRatio?: number;\n\treadonly maxInputBytes?: number;\n\treadonly maxInputTokens?: number;\n\treadonly maxOutputTokens?: number;\n\treadonly maxResults?: number;\n\treadonly maxUrlsPerTask?: number;\n\treadonly markdownFullPageRequiresExplicitNeed?: boolean;\n\treadonly mutationsRequireHumanGate?: boolean;\n\treadonly mutationsRequirePostconditions?: boolean;\n\treadonly noFilesystemReadExceptModelCache?: boolean;\n\treadonly noNetwork?: boolean;\n\treadonly noSecrets?: boolean;\n\treadonly noShell?: boolean;\n\treadonly outputGuard?: boolean;\n\treadonly preferGrepBeforeFullRead?: boolean;\n\treadonly preferIncrementalRead?: boolean;\n\treadonly preferJsonExtraction?: boolean;\n\treadonly privateRepoDeniedByDefault?: boolean;\n\treadonly promptTaint?: \"external-docs\" | \"external-web\" | \"browser\";\n\treadonly publicContentOnly?: boolean;\n\treadonly publicReposOnly?: boolean;\n\treadonly readOnly?: boolean;\n\treadonly recordEvidence?: boolean;\n\treadonly rejectIfCoverageBelow?: {\n\t\treadonly hard: number;\n\t\treadonly high: number;\n\t\treadonly low: number;\n\t\treadonly medium: number;\n\t};\n\treadonly requireCoverageVerification?: boolean;\n\treadonly requireOriginAllowlistForScrape?: boolean;\n\treadonly requiresExplicitPostconditions?: boolean;\n\treadonly requiresOriginAllowlist?: boolean;\n\treadonly requiresSandbox?: boolean;\n\treadonly secretBrokerOnly?: boolean;\n\treadonly secretScanRequired?: boolean;\n\treadonly ssrfGuard?: boolean;\n\treadonly workspaceReadOnly?: boolean;\n}\n\nexport interface PublicMcpPreset {\n\treadonly defaultEnabled?: boolean;\n\treadonly id: string;\n\treadonly key: PublicMcpPresetKey;\n\treadonly license: PublicMcpLicense;\n\treadonly notes: readonly string[];\n\treadonly policy: PublicMcpRuntimePolicy;\n\treadonly implementation?: PublicMcpImplementation;\n\treadonly readiness?: PublicMcpReadiness;\n\treadonly risk: PublicMcpRisk;\n\treadonly sourceUrls: readonly string[];\n\treadonly tools: PublicMcpToolPolicy;\n\treadonly auth?: PublicMcpAuthPolicy;\n\treadonly secrets?: PublicMcpSecretPolicy;\n\treadonly servers?: readonly string[];\n\treadonly transport?: PublicMcpTransport;\n}\n\nexport interface PublicMcpObservedTool {\n\treadonly name: string;\n\treadonly descriptorHash: string;\n\treadonly description: string;\n}\n\nexport interface PublicMcpObservedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: readonly PublicMcpObservedTool[];\n}\n\nexport interface PublicMcpApprovedServer {\n\treadonly serverIdentity: string;\n\treadonly tools: Readonly<Record<string, string>>;\n}\n\nexport type PublicMcpAdmissionStatus = \"allow\" | \"quarantine\";\n\nexport interface PublicMcpAdmissionDecision {\n\treadonly status: PublicMcpAdmissionStatus;\n\treadonly reasons: readonly string[];\n}\n\nexport type PublicMcpHashable =\n\t| null\n\t| boolean\n\t| number\n\t| string\n\t| readonly PublicMcpHashable[]\n\t| {\n\t\t\treadonly [key: string]: PublicMcpHashable;\n\t  };\n\nexport const PUBLIC_MCP_PRESETS = {\n\tcontext7: {\n\t\tid: \"context7\",\n\t\tkey: \"context7\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Documentation retrieval preset; optional API key only raises rate limits.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/upstash/context7\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.context7.com/mcp\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"CONTEXT7_API_KEY\"],\n\t\t\theaders: {\n\t\t\t\tCONTEXT7_API_KEY: \"secret-ref:context7\",\n\t\t\t},\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"resolve-library-id\", \"query-docs\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\texa: {\n\t\tid: \"exa\",\n\t\tkey: \"exa\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Run searches in forked context and return distilled output to the main task.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/exa-labs/exa-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.exa.ai/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"header\",\n\t\t\theader: \"Authorization\",\n\t\t\tsecretRef: \"secret-ref:exa_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"EXA_API_KEY\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"web_search_exa\", \"web_fetch_exa\"],\n\t\t\tconditionalAllow: [\"web_search_advanced_exa\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tdomainAllowlistOptional: true,\n\t\t\tforkContext: true,\n\t\t\tmaxOutputTokens: 5000,\n\t\t\tmaxResults: 10,\n\t\t\tssrfGuard: true,\n\t\t},\n\t},\n\tgithubReadOnly: {\n\t\tid: \"github-readonly\",\n\t\tkey: \"githubReadOnly\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Read-only GitHub MCP profile; mutation tools remain gated for future explicit workflows.\"],\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/github/github-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://api.githubcopilot.com/mcp/\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:github_pat\",\n\t\t},\n\t\tsecrets: {\n\t\t\trequired: [\"GITHUB_PERSONAL_ACCESS_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"actions_list\",\n\t\t\t\t\"get_file_contents\",\n\t\t\t\t\"issue_read\",\n\t\t\t\t\"list_issues\",\n\t\t\t\t\"list_pull_requests\",\n\t\t\t\t\"pull_request_read\",\n\t\t\t\t\"search_code\",\n\t\t\t\t\"search_issues\",\n\t\t\t\t\"search_pull_requests\",\n\t\t\t\t\"search_repositories\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t\trequirePostconditions: [\n\t\t\t\t\"add_comment_to_pending_review\",\n\t\t\t\t\"create_branch\",\n\t\t\t\t\"create_or_update_file\",\n\t\t\t\t\"create_pull_request\",\n\t\t\t\t\"delete_file\",\n\t\t\t\t\"issue_write\",\n\t\t\t\t\"merge_pull_request\",\n\t\t\t\t\"pull_request_review_write\",\n\t\t\t\t\"push_files\",\n\t\t\t\t\"update_pull_request\",\n\t\t\t\t\"update_pull_request_branch\",\n\t\t\t],\n\t\t},\n\t\tpolicy: {\n\t\t\tledger: true,\n\t\t\tmaxOutputTokens: 8000,\n\t\t\tmutationsRequireHumanGate: true,\n\t\t\treadOnly: true,\n\t\t\tsecretBrokerOnly: true,\n\t\t},\n\t},\n\tastGrep: {\n\t\tid: \"ast-grep\",\n\t\tkey: \"astGrep\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\"Experimental upstream; pin descriptor and wrap execution before broad enablement.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/ast-grep/ast-grep-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from\", \"git+https://github.com/ast-grep/ast-grep-mcp\", \"ast-grep-server\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"dump_syntax_tree\", \"find_code\", \"find_code_by_rule\", \"test_match_code_rule\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tmaxResults: 200,\n\t\t\tnoShell: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\trepomixCodeCompact: {\n\t\tdefaultEnabled: true,\n\t\tid: \"repomix-code-compact\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"repomixCodeCompact\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Codebase packing and compression preset; remote repository packing is disabled until a task explicitly opts in.\",\n\t\t\t\"Use grep/read against packed output before full-context attachment.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/yamadashy/repomix\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"npx\",\n\t\t\targs: [\"-y\", \"repomix\", \"--mcp\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"attach_packed_output\",\n\t\t\t\t\"file_system_read_directory\",\n\t\t\t\t\"grep_repomix_output\",\n\t\t\t\t\"pack_codebase\",\n\t\t\t\t\"read_repomix_output\",\n\t\t\t],\n\t\t\tdisabledByDefault: [\"pack_remote_repository\"],\n\t\t\tgated: [\"file_system_read_file\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tabsolutePathMustBeUnderWorkspace: true,\n\t\t\tblockRemoteRepositoryByDefault: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tmaxOutputTokens: 120_000,\n\t\t\toutputGuard: true,\n\t\t\tpreferGrepBeforeFullRead: true,\n\t\t\tpreferIncrementalRead: true,\n\t\t\tsecretScanRequired: true,\n\t\t\tworkspaceReadOnly: true,\n\t\t},\n\t},\n\tomkLlmlinguaCompress: {\n\t\tdefaultEnabled: true,\n\t\tid: \"omk-llmlingua-compress\",\n\t\timplementation: \"omk-owned\",\n\t\tkey: \"omkLlmlinguaCompress\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"First-party wrapper target for LLMLingua-style prompt and context compression.\",\n\t\t\t\"System prompts, latest user turns, and tool schemas must stay outside lossy compression.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/LLMLingua\", \"https://arxiv.org/abs/2403.12968\"],\n\t\ttransport: {\n\t\t\ttype: \"embedded-python-or-sidecar\",\n\t\t\tpackage: \"llmlingua\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"compress_context_items\",\n\t\t\t\t\"compress_messages\",\n\t\t\t\t\"compress_prompt\",\n\t\t\t\t\"compress_representation_candidate\",\n\t\t\t\t\"verify_compression_coverage\",\n\t\t\t],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheMaterializedOutputs: true,\n\t\t\tdefaultCompressionRatio: 3,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalOnly: true,\n\t\t\tmaxCompressionRatio: 8,\n\t\t\tmaxInputTokens: 200_000,\n\t\t\tnoFilesystemReadExceptModelCache: true,\n\t\t\tnoNetwork: true,\n\t\t\toutputGuard: true,\n\t\t\trejectIfCoverageBelow: {\n\t\t\t\thard: 0.95,\n\t\t\t\thigh: 0.8,\n\t\t\t\tmedium: 0.55,\n\t\t\t\tlow: 0.3,\n\t\t\t},\n\t\t\trequireCoverageVerification: true,\n\t\t},\n\t},\n\tdoclingUnderstand: {\n\t\tdefaultEnabled: true,\n\t\tid: \"docling-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"doclingUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Structured document understanding preset for PDFs, Office files, tables, OCR, and layout-sensitive conversions.\",\n\t\t\t\"Parser attack surface requires sandboxing and workspace-only local file access.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/docling-project/docling\", \"https://github.com/docling-project/docling-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"uvx\",\n\t\t\targs: [\"--from=docling-mcp\", \"docling-mcp-server\", \"--transport\", \"stdio\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_document\", \"export_docling_document_to_json\", \"export_docling_document_to_markdown\"],\n\t\t\tgated: [\"create_new_docling_document\", \"save_docling_document\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockNetworkUrlsByDefault: true,\n\t\t\tcacheDocuments: true,\n\t\t\tevidenceLedger: true,\n\t\t\tlocalFilesUnderWorkspaceOnly: true,\n\t\t\tmaxInputBytes: 80_000_000,\n\t\t\tmaxOutputTokens: 80_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmarkitdownLite: {\n\t\tdefaultEnabled: true,\n\t\tid: \"markitdown-lite\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"markitdownLite\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Lightweight Markdown conversion fallback for local files and data URIs.\",\n\t\t\t\"HTTP, ZIP, and YouTube inputs stay blocked until a task explicitly needs them.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\n\t\t\t\"https://github.com/microsoft/markitdown\",\n\t\t\t\"https://github.com/microsoft/markitdown/tree/main/packages/markitdown-mcp\",\n\t\t],\n\t\ttransport: {\n\t\t\ttype: \"stdio\",\n\t\t\tcommand: \"markitdown-mcp\",\n\t\t\targs: [],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"convert_to_markdown\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tallowedUriSchemes: [\"file\", \"data\"],\n\t\t\tblockHttpByDefault: true,\n\t\t\tdenyYoutubeByDefault: true,\n\t\t\tdenyZipByDefault: true,\n\t\t\tevidenceLedger: true,\n\t\t\tfileRoot: \"workspaceRoot\",\n\t\t\tmaxInputBytes: 30_000_000,\n\t\t\tmaxOutputTokens: 50_000,\n\t\t\toutputGuard: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tfirecrawlWebUnderstand: {\n\t\tdefaultEnabled: false,\n\t\tid: \"firecrawl-web-understand\",\n\t\timplementation: \"upstream-mcp\",\n\t\tkey: \"firecrawlWebUnderstand\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Opt-in live web understanding preset; search and scrape are the only default-admissible tools.\",\n\t\t\t\"Prefer JSON extraction over full-page Markdown to protect the context budget.\",\n\t\t],\n\t\treadiness: \"stable\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://github.com/firecrawl/firecrawl-mcp-server\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://mcp.firecrawl.dev/v2/mcp\",\n\t\t},\n\t\tauth: {\n\t\t\tkind: \"bearer\",\n\t\t\tsecretRef: \"secret-ref:firecrawl_api_key\",\n\t\t},\n\t\tsecrets: {\n\t\t\toptional: [\"FIRECRAWL_API_KEY\", \"FIRECRAWL_OAUTH_TOKEN\"],\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"firecrawl_scrape\", \"firecrawl_search\"],\n\t\t\tdisabledByDefault: [\"firecrawl_agent\", \"firecrawl_crawl\", \"firecrawl_interact\", \"firecrawl_monitor\"],\n\t\t\tgated: [\"firecrawl_extract\", \"firecrawl_map\", \"firecrawl_research\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmarkdownFullPageRequiresExplicitNeed: true,\n\t\t\tmaxOutputTokens: 40_000,\n\t\t\tmaxUrlsPerTask: 10,\n\t\t\toutputGuard: true,\n\t\t\tpreferJsonExtraction: true,\n\t\t\trequireOriginAllowlistForScrape: true,\n\t\t},\n\t},\n\tdeepwikiRepoUnderstandCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"deepwiki-repo-understand\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"deepwikiRepoUnderstandCandidate\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\n\t\t\t\"Candidate only until an official MCP endpoint, tool schema, auth model, and retention boundary are verified.\",\n\t\t\t\"Remote repository indexing is public-repo-only by default.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R2\",\n\t\tsourceUrls: [\"https://deepwiki.com/\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tdescriptorHashPinned: true,\n\t\t\tevidenceLedger: true,\n\t\t\tnoSecrets: true,\n\t\t\toutputGuard: true,\n\t\t\tprivateRepoDeniedByDefault: true,\n\t\t\tpublicReposOnly: true,\n\t\t},\n\t},\n\tinsaneSearchCandidate: {\n\t\tdefaultEnabled: false,\n\t\tid: \"insane-search-public-reader\",\n\t\timplementation: \"candidate-wrapper\",\n\t\tkey: \"insaneSearchCandidate\",\n\t\tlicense: \"MIT\",\n\t\tnotes: [\n\t\t\t\"Candidate only: upstream is a Claude Code plugin, not a verified standalone MCP transport.\",\n\t\t\t\"Any OMK integration must be a sandboxed first-party wrapper around public-content reads, with auto-install disabled.\",\n\t\t],\n\t\treadiness: \"candidate\",\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/fivetaku/insane-search\"],\n\t\ttools: {\n\t\t\tallow: [\"insane_search_public_read\"],\n\t\t\tdisabledByDefault: [\"insane_search_auto_install_dependencies\"],\n\t\t\tgated: [\"insane_search_browser_escalation\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tauthenticationBoundaryRequired: true,\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdisableAutoInstall: true,\n\t\t\tdistillBeforeMainContext: true,\n\t\t\tevidenceLedger: true,\n\t\t\tforkContext: true,\n\t\t\tmaxBrowserActions: 20,\n\t\t\tmaxOutputTokens: 30_000,\n\t\t\toutputGuard: true,\n\t\t\tpublicContentOnly: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tplaywrightSandboxed: {\n\t\tid: \"playwright-sandboxed\",\n\t\tkey: \"playwrightSandboxed\",\n\t\tlicense: \"Apache-2.0\",\n\t\tnotes: [\"Browser automation preset; enable only with sandbox and origin controls.\"],\n\t\trisk: \"R3\",\n\t\tsourceUrls: [\"https://github.com/microsoft/playwright-mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"local-package\",\n\t\t\tpackage: \"@playwright/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\n\t\t\t\t\"browser_close\",\n\t\t\t\t\"browser_click\",\n\t\t\t\t\"browser_navigate\",\n\t\t\t\t\"browser_snapshot\",\n\t\t\t\t\"browser_type\",\n\t\t\t\t\"browser_wait_for\",\n\t\t\t],\n\t\t\tdeny: [\"browser_console_messages\", \"browser_file_upload\", \"browser_pdf_save\", \"browser_press_key\"],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockMetadataIp: true,\n\t\t\tblockPrivateNetwork: true,\n\t\t\tledger: true,\n\t\t\tmaxBrowserActions: 40,\n\t\t\trecordEvidence: true,\n\t\t\trequiresExplicitPostconditions: true,\n\t\t\trequiresOriginAllowlist: true,\n\t\t\trequiresSandbox: true,\n\t\t},\n\t},\n\tmicrosoftLearn: {\n\t\tid: \"microsoft-learn\",\n\t\tkey: \"microsoftLearn\",\n\t\tlicense: \"Unspecified\",\n\t\tnotes: [\"Microsoft official remote documentation endpoint from the Microsoft MCP catalog.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/microsoft/mcp\"],\n\t\ttransport: {\n\t\t\ttype: \"http\",\n\t\t\turl: \"https://learn.microsoft.com/api/mcp\",\n\t\t},\n\t\ttools: {\n\t\t\tallow: [\"*\"],\n\t\t\tdenyByDefault: true,\n\t\t\tdenyMutations: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tcacheable: true,\n\t\t\tmaxOutputTokens: 6000,\n\t\t\toutputGuard: true,\n\t\t\tpromptTaint: \"external-docs\",\n\t\t\treadOnly: true,\n\t\t},\n\t},\n\tofficialReferenceSafePack: {\n\t\tid: \"official-reference-safe-pack\",\n\t\tkey: \"officialReferenceSafePack\",\n\t\tlicense: \"Apache-2.0/MIT/CC-BY-4.0\",\n\t\tnotes: [\"Reference implementations only; wrap before production use.\"],\n\t\trisk: \"R1\",\n\t\tsourceUrls: [\"https://github.com/modelcontextprotocol/servers\"],\n\t\tservers: [\"time\", \"memory\", \"sequential-thinking\", \"git-readonly\"],\n\t\ttools: {\n\t\t\tallow: [],\n\t\t\tdenyByDefault: true,\n\t\t},\n\t\tpolicy: {\n\t\t\tblockPrivateNetwork: true,\n\t\t\tdescriptorHashPinned: true,\n\t\t\tfilesystemRoot: \"workspaceRoot\",\n\t\t\tmutationsRequirePostconditions: true,\n\t\t},\n\t},\n} as const satisfies Record<PublicMcpPresetKey, PublicMcpPreset>;\n\nexport const OMK_PUBLIC_CONTEXT_MCP_BUNDLE = {\n\tstableDefaults: [\"repomix-code-compact\", \"docling-understand\", \"markitdown-lite\", \"omk-llmlingua-compress\"],\n\toptInResearchWeb: [\"firecrawl-web-understand\"],\n\tcandidatesNeedVerification: [\"deepwiki-repo-understand\", \"insane-search-public-reader\"],\n\tinternalRouters: [\"mcp-tool-rag-router\"],\n} as const;\n\nexport function listPublicMcpPresets(): PublicMcpPreset[] {\n\treturn Object.values(PUBLIC_MCP_PRESETS).map((preset) => clonePublicMcpPreset(preset));\n}\n\nexport function canonicalMcpPolicyHash(value: PublicMcpHashable): string {\n\treturn createHash(\"sha256\").update(canonicalStringify(value)).digest(\"hex\");\n}\n\nexport function canonicalPublicMcpServerIdentity(preset: PublicMcpPreset): string {\n\treturn canonicalMcpPolicyHash({\n\t\tid: preset.id,\n\t\tservers: preset.servers ?? null,\n\t\ttransport: preset.transport ?? null,\n\t});\n}\n\nexport function admitPublicMcpServer(\n\tpreset: PublicMcpPreset,\n\tobserved: PublicMcpObservedServer,\n\tapproved: PublicMcpApprovedServer | undefined,\n): PublicMcpAdmissionDecision {\n\tif (!approved) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_not_approved\"],\n\t\t};\n\t}\n\n\tif (approved.serverIdentity !== observed.serverIdentity) {\n\t\treturn {\n\t\t\tstatus: \"quarantine\",\n\t\t\treasons: [\"server_identity_changed\"],\n\t\t};\n\t}\n\n\tconst reasons: string[] = [];\n\n\tfor (const tool of observed.tools) {\n\t\tconst approvedDescriptorHash = approved.tools[tool.name];\n\n\t\tif (!approvedDescriptorHash) {\n\t\t\treasons.push(`new_tool:${tool.name}`);\n\t\t} else if (approvedDescriptorHash !== tool.descriptorHash) {\n\t\t\treasons.push(`descriptor_changed:${tool.name}`);\n\t\t}\n\n\t\tif (!isToolAllowed(preset.tools, tool.name)) {\n\t\t\treasons.push(`tool_not_allowed:${tool.name}`);\n\t\t}\n\n\t\tif (shouldDenyMutationLikeTool(preset, tool.name)) {\n\t\t\treasons.push(`mutation_tool_denied:${tool.name}`);\n\t\t}\n\n\t\tif (\n\t\t\tdetectMcpDescriptorPromptInjection(tool.description).patternSignal > MCP_QUARANTINE_PATTERN_SIGNAL_THRESHOLD\n\t\t) {\n\t\t\treasons.push(`descriptor_prompt_injection:${tool.name}`);\n\t\t}\n\t}\n\n\treturn {\n\t\tstatus: reasons.length === 0 ? \"allow\" : \"quarantine\",\n\t\treasons,\n\t};\n}\n\nfunction clonePublicMcpPreset(preset: PublicMcpPreset): PublicMcpPreset {\n\treturn {\n\t\t...preset,\n\t\tauth: preset.auth ? { ...preset.auth } : undefined,\n\t\tdefaultEnabled: preset.defaultEnabled,\n\t\timplementation: preset.implementation,\n\t\tnotes: [...preset.notes],\n\t\tpolicy: cloneRuntimePolicy(preset.policy),\n\t\treadiness: preset.readiness,\n\t\tsecrets: preset.secrets\n\t\t\t? {\n\t\t\t\t\theaders: preset.secrets.headers ? { ...preset.secrets.headers } : undefined,\n\t\t\t\t\toptional: preset.secrets.optional ? [...preset.secrets.optional] : undefined,\n\t\t\t\t\trequired: preset.secrets.required ? [...preset.secrets.required] : undefined,\n\t\t\t\t}\n\t\t\t: undefined,\n\t\tservers: preset.servers ? [...preset.servers] : undefined,\n\t\tsourceUrls: [...preset.sourceUrls],\n\t\ttools: {\n\t\t\tallow: [...preset.tools.allow],\n\t\t\tconditionalAllow: preset.tools.conditionalAllow ? [...preset.tools.conditionalAllow] : undefined,\n\t\t\tdeny: preset.tools.deny ? [...preset.tools.deny] : undefined,\n\t\t\tdenyByDefault: preset.tools.denyByDefault,\n\t\t\tdenyMutations: preset.tools.denyMutations,\n\t\t\tdisabledByDefault: preset.tools.disabledByDefault ? [...preset.tools.disabledByDefault] : undefined,\n\t\t\tgated: preset.tools.gated ? [...preset.tools.gated] : undefined,\n\t\t\trequirePostconditions: preset.tools.requirePostconditions\n\t\t\t\t? [...preset.tools.requirePostconditions]\n\t\t\t\t: undefined,\n\t\t},\n\t\ttransport: preset.transport ? cloneTransport(preset.transport) : undefined,\n\t};\n}\n\nfunction cloneTransport(transport: PublicMcpTransport): PublicMcpTransport {\n\tif (transport.type === \"stdio\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: [...transport.args],\n\t\t};\n\t}\n\n\tif (transport.type === \"local-package\") {\n\t\treturn {\n\t\t\t...transport,\n\t\t\targs: transport.args ? [...transport.args] : undefined,\n\t\t};\n\t}\n\n\tif (transport.type === \"embedded-python-or-sidecar\") {\n\t\treturn { ...transport };\n\t}\n\n\treturn { ...transport };\n}\n\nfunction cloneRuntimePolicy(policy: PublicMcpRuntimePolicy): PublicMcpRuntimePolicy {\n\treturn {\n\t\t...policy,\n\t\tallowedUriSchemes: policy.allowedUriSchemes ? [...policy.allowedUriSchemes] : undefined,\n\t\trejectIfCoverageBelow: policy.rejectIfCoverageBelow ? { ...policy.rejectIfCoverageBelow } : undefined,\n\t};\n}\n\nfunction isToolAllowed(policy: PublicMcpToolPolicy, toolName: string): boolean {\n\tif (policy.deny?.includes(toolName)) {\n\t\treturn false;\n\t}\n\n\tif (policy.allow.includes(\"*\")) {\n\t\treturn true;\n\t}\n\n\treturn policy.allow.includes(toolName);\n}\n\nfunction shouldDenyMutationLikeTool(preset: PublicMcpPreset, toolName: string): boolean {\n\tif (!preset.tools.allow.includes(\"*\")) {\n\t\treturn false;\n\t}\n\n\tif (!preset.tools.denyMutations && !preset.policy.readOnly && !preset.policy.mutationsRequirePostconditions) {\n\t\treturn false;\n\t}\n\n\treturn isMutationLikeToolName(toolName);\n}\n\nfunction isMutationLikeToolName(toolName: string): boolean {\n\treturn /(?:^|[_-])(add|approve|archive|cancel|close|create|delete|dismiss|merge|post|push|remove|send|submit|update|upload|write)(?:$|[_-])/.test(\n\t\ttoolName.toLowerCase(),\n\t);\n}\n\nfunction canonicalStringify(value: PublicMcpHashable): string {\n\tif (value === null || typeof value === \"boolean\" || typeof value === \"number\" || typeof value === \"string\") {\n\t\treturn JSON.stringify(value);\n\t}\n\n\tif (Array.isArray(value)) {\n\t\treturn `[${value.map((item) => canonicalStringify(item)).join(\",\")}]`;\n\t}\n\n\tconst record = value as { readonly [key: string]: PublicMcpHashable };\n\tconst keys = Object.keys(record).sort();\n\treturn `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`).join(\",\")}}`;\n}\n"]}