remote-access-mcp 3.1.2 → 4.0.0

package/dist/tools/autonomous.js

@@ -0,0 +1,82 @@
+import { z } from 'zod';
+import { assertToolPermitted } from '../core/policy.js';
+import { AuditLog } from '../core/audit.js';
+import { analyzeSecurity } from '../core/security-analysis.js';
+import { decideAutonomy } from '../core/autonomy.js';
+import { createRecoveryRule, listRecoveryRules, deleteRecoveryRule, listIncidents, claimRecovery, markIncident, resetRecoveryAttempts } from '../core/recovery-engine.js';
+const forbidden = new Set(['task_approve', 'approval_decide', 'plugin_install', 'plugin_remove', 'automation_create', 'automation_enable', 'automation_delete', 'automation_trigger', 'recovery_rule_create', 'recovery_rule_delete', 'recovery_trigger']);
+const fp = (ctx) => AuditLog.fingerprint(ctx.token.token);
+const policy = (ctx) => ({ enabled: process.env.RAMCP_AUTONOMOUS === '1', allowAutonomousHighRisk: process.env.RAMCP_AUTONOMOUS_HIGH_RISK === '1', allowAutonomousCritical: process.env.RAMCP_AUTONOMOUS_CRITICAL === '1' });
+export function registerAutonomousTools(server, ctx) {
+    server.registerTool('security_analysis', { description: 'Run a bounded read-only security posture analysis for the current token.', inputSchema: {} }, async () => {
+        assertToolPermitted({ tool: 'security_analysis', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify(analyzeSecurity({ scopes: ctx.token.scopes, readOnly: ctx.readOnly, shellEnabled: ctx.token.shell_enabled, allowedPaths: ctx.token.allowed_paths, deniedPaths: ctx.token.denied_paths })) }] };
+    });
+    server.registerTool('autonomy_check', { description: 'Evaluate whether an action risk may execute at a requested autonomy level.', inputSchema: { autonomy: z.enum(['readonly', 'safe', 'supervised', 'autonomous']), risk: z.enum(['none', 'low', 'medium', 'high', 'critical']) } }, async ({ autonomy, risk }) => {
+        assertToolPermitted({ tool: 'autonomy_check', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify({ decision: decideAutonomy(autonomy, risk, policy(ctx)), autonomous_enabled: process.env.RAMCP_AUTONOMOUS === '1' }) }] };
+    });
+    server.registerTool('recovery_rule_create', { description: 'Create a bounded token-isolated self-healing rule for one known failure type.', inputSchema: { name: z.string().min(1).max(100), failure_type: z.string().min(1).max(100), risk: z.enum(['low', 'medium', 'high', 'critical']).default('medium'), action: z.object({ tool: z.string().min(1).max(100), args: z.record(z.unknown()).default({}) }), max_attempts: z.number().int().min(1).max(5).default(3), cooldown_seconds: z.number().int().min(30).max(86400).default(300) } }, async ({ name, failure_type, risk, action, max_attempts, cooldown_seconds }) => {
+        assertToolPermitted({ tool: 'recovery_rule_create', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        if (forbidden.has(action.tool))
+            return { content: [{ type: 'text', text: 'Forbidden recovery action.' }], isError: true };
+        if (JSON.stringify(action.args).length > 64 * 1024)
+            return { content: [{ type: 'text', text: 'Recovery action args exceed 64 KiB.' }], isError: true };
+        try {
+            assertToolPermitted({ tool: action.tool, scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: e.message }], isError: true };
+        }
+        const r = createRecoveryRule({ tokenFingerprint: fp(ctx), name, failureType: failure_type, risk, action, enabled: true, maxAttempts: max_attempts, cooldownSeconds: cooldown_seconds });
+        return { content: [{ type: 'text', text: JSON.stringify({ id: r.id, name: r.name, failure_type: r.failureType }) }] };
+    });
+    server.registerTool('recovery_rule_list', { description: 'List recovery rules owned by the current token.', inputSchema: {} }, async () => {
+        assertToolPermitted({ tool: 'recovery_rule_list', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify(listRecoveryRules(fp(ctx)).map(({ tokenFingerprint: _x, ...r }) => r)) }] };
+    });
+    server.registerTool('recovery_rule_delete', { description: 'Delete an owned recovery rule.', inputSchema: { id: z.string().uuid() } }, async ({ id }) => {
+        assertToolPermitted({ tool: 'recovery_rule_delete', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return deleteRecoveryRule(fp(ctx), id) ? { content: [{ type: 'text', text: `Deleted ${id}` }] } : { content: [{ type: 'text', text: 'Recovery rule not found.' }], isError: true };
+    });
+    server.registerTool('recovery_incidents', { description: 'List token-isolated self-healing incidents.', inputSchema: {} }, async () => {
+        assertToolPermitted({ tool: 'recovery_incidents', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify(listIncidents(fp(ctx)).map(({ tokenFingerprint: _x, ...r }) => r)) }] };
+    });
+    server.registerTool('recovery_trigger', { description: 'Run one owned recovery rule once, subject to cooldown, attempt limits, autonomy, and normal tool policy.', inputSchema: { id: z.string().uuid() } }, async ({ id }) => {
+        assertToolPermitted({ tool: 'recovery_trigger', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        if (ctx.readOnly)
+            return { content: [{ type: 'text', text: 'Read-only mode blocks recovery execution.' }], isError: true };
+        const r = listRecoveryRules(fp(ctx)).find(x => x.id === id);
+        if (!r)
+            return { content: [{ type: 'text', text: 'Recovery rule not found.' }], isError: true };
+        const decision = decideAutonomy('autonomous', r.risk, policy(ctx));
+        if (decision !== 'allow')
+            return { content: [{ type: 'text', text: `Recovery denied: ${decision}. Enable autonomous operations explicitly or use supervised approval outside this trigger.` }], isError: true };
+        const claimed = claimRecovery(fp(ctx), id);
+        if (!claimed)
+            return { content: [{ type: 'text', text: 'Recovery is rate-limited, exhausted, disabled, or already claimed.' }], isError: true };
+        markIncident(fp(ctx), claimed, 'open');
+        try {
+            if (forbidden.has(claimed.action.tool))
+                throw new Error('Forbidden recovery action');
+            if (!ctx.invokeTool)
+                throw new Error('Tool invocation is unavailable');
+            const result = await ctx.invokeTool(claimed.action.tool, claimed.action.args);
+            if (result?.isError)
+                throw new Error('Recovery action returned an error');
+            markIncident(fp(ctx), claimed, 'recovered');
+            return { content: [{ type: 'text', text: JSON.stringify({ recovered: true, id }) }] };
+        }
+        catch (e) {
+            markIncident(fp(ctx), claimed, 'failed', e.message || String(e));
+            return { content: [{ type: 'text', text: e.message || String(e) }], isError: true };
+        }
+    });
+    server.registerTool('recovery_reset', { description: 'Reset the bounded attempt counter of an owned recovery rule.', inputSchema: { id: z.string().uuid() } }, async ({ id }) => {
+        assertToolPermitted({ tool: 'recovery_rule_delete', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        resetRecoveryAttempts(fp(ctx), id);
+        return { content: [{ type: 'text', text: `Reset ${id}` }] };
+    });
+}
+//# sourceMappingURL=autonomous.js.map

package/dist/tools/autonomous.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomous.js","sourceRoot":"","sources":["../../src/tools/autonomous.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,qBAAqB,EAAqB,MAAM,4BAA4B,CAAC;AAE7L,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAC,iBAAiB,EAAC,gBAAgB,EAAC,eAAe,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,oBAAoB,EAAC,sBAAsB,EAAC,sBAAsB,EAAC,kBAAkB,CAAC,CAAC,CAAC;AACjP,MAAM,EAAE,GAAG,CAAC,GAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvE,MAAM,MAAM,GAAG,CAAC,GAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC,CAAC;AAE1O,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,GAAgB;IACzE,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,WAAW,EAAE,0EAA0E,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QAChK,mBAAmB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACzP,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,4EAA4E,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAC,MAAM,EAAC,YAAY,EAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAC,KAAK,EAAC,QAAQ,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;QAC3S,mBAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACpL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE,EAAE,WAAW,EAAE,+EAA+E,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,QAAQ,EAAC,MAAM,EAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,EAAE;QAC1lB,mBAAmB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxG,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1H,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvJ,IAAI,CAAC;YAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAAC,CAAC;QAChM,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxL,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACxH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,iDAAiD,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QACxI,mBAAmB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtI,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,sBAAsB,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACtJ,mBAAmB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxG,OAAO,kBAAkB,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,oBAAoB,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;QACpI,mBAAmB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClI,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,0GAA0G,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC5N,mBAAmB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3H,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,QAAQ,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,QAAQ,4FAA4F,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChN,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oEAAoE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChJ,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9E,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC1E,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACxF,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,YAAY,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtF,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,8DAA8D,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QAC9K,mBAAmB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxG,qBAAqB,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/browser.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolContext } from '../core/context.js';
+export declare function registerBrowserTools(server: McpServer, ctx: ToolContext): void;
+//# sourceMappingURL=browser.d.ts.map

package/dist/tools/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA0CtD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CA+C9E"}

package/dist/tools/browser.js

@@ -0,0 +1,99 @@
+import { createRequire } from 'node:module';
+import { z } from 'zod';
+import { assertAllowed, assertToolPermitted } from '../core/policy.js';
+import net from 'node:net';
+const require = createRequire(import.meta.url);
+const MAX_TEXT = 120_000;
+function blockedHost(hostname) {
+    if (net.isIPv4(hostname)) {
+        const [a, b] = hostname.split('.').map(Number);
+        return a === 0 || a === 10 || a === 127 || (a === 172 && b >= 16 && b <= 31) || (a === 192 && b === 168) || (a === 169 && b === 254);
+    }
+    if (net.isIPv6(hostname)) {
+        const h = hostname.toLowerCase();
+        return h === '::' || h === '::1' || h.startsWith('fe80') || h.startsWith('fc') || h.startsWith('fd');
+    }
+    return ['localhost', 'metadata.google.internal', 'instance-data'].some(n => hostname === n || hostname.endsWith(`.${n}`));
+}
+function assertPublicUrl(raw) {
+    const url = new URL(raw);
+    if (!['http:', 'https:'].includes(url.protocol))
+        throw new Error('Only HTTP(S) URLs are allowed');
+    if (blockedHost(url.hostname))
+        throw new Error(`Refusing browser access to internal/private host ${url.hostname}`);
+    return url;
+}
+function playwright() {
+    try {
+        return require('playwright');
+    }
+    catch {
+        try {
+            return require('playwright-core');
+        }
+        catch {
+            throw new Error('Browser integration is unavailable: install Playwright or playwright-core on the host');
+        }
+    }
+}
+async function withBrowser(fn) {
+    const pw = playwright();
+    const browser = await pw.chromium.launch({ headless: true });
+    try {
+        const page = await browser.newPage({ javaScriptEnabled: true });
+        page.setDefaultTimeout(20_000);
+        return await fn(page);
+    }
+    finally {
+        await browser.close();
+    }
+}
+export function registerBrowserTools(server, ctx) {
+    server.registerTool('browser_open', {
+        description: 'Open a public web page in a headless browser and return its title, URL, and visible text. SSRF-guarded.',
+        inputSchema: { url: z.string().url(), wait_ms: z.number().int().min(0).max(10_000).optional().default(500) },
+    }, async ({ url, wait_ms }) => {
+        assertToolPermitted({ tool: 'browser_open', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const target = assertPublicUrl(url);
+        return { content: [{ type: 'text', text: await withBrowser(async (page) => {
+                        await page.goto(target.toString(), { waitUntil: 'domcontentloaded' });
+                        if (wait_ms)
+                            await page.waitForTimeout(wait_ms);
+                        const title = await page.title();
+                        const text = (await page.locator('body').innerText()).slice(0, MAX_TEXT);
+                        return `url: ${page.url()}\ntitle: ${title}\n\n${text}`;
+                    }) }] };
+    });
+    server.registerTool('browser_extract', {
+        description: 'Extract structured links and metadata from a public page using a headless browser.',
+        inputSchema: { url: z.string().url(), max_links: z.number().int().min(1).max(100).optional().default(30) },
+    }, async ({ url, max_links }) => {
+        assertToolPermitted({ tool: 'browser_extract', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const target = assertPublicUrl(url);
+        return { content: [{ type: 'text', text: await withBrowser(async (page) => {
+                        await page.goto(target.toString(), { waitUntil: 'domcontentloaded' });
+                        const data = await page.evaluate((limit) => {
+                            const doc = globalThis.document;
+                            return {
+                                title: doc.title,
+                                description: doc.querySelector('meta[name="description"]')?.getAttribute('content') || '',
+                                links: Array.from(doc.querySelectorAll('a[href]')).slice(0, limit).map((a) => ({ text: (a.textContent || '').trim().slice(0, 200), href: a.href })),
+                            };
+                        }, max_links);
+                        return JSON.stringify(data, null, 2);
+                    }) }] };
+    });
+    server.registerTool('browser_screenshot', {
+        description: 'Capture a screenshot of a public web page to a policy-allowed local path.',
+        inputSchema: { url: z.string().url(), output_path: z.string().min(1).max(1000), full_page: z.boolean().optional().default(false) },
+    }, async ({ url, output_path, full_page }) => {
+        assertToolPermitted({ tool: 'browser_screenshot', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        if (ctx.readOnly)
+            throw new Error('browser_screenshot requires mutation permission because it writes a file');
+        assertAllowed({ allowed_paths: ctx.token.allowed_paths, denied_paths: ctx.token.denied_paths, shell_enabled: ctx.token.shell_enabled, read_only: ctx.readOnly }, output_path);
+        const target = assertPublicUrl(url);
+        await withBrowser(async (page) => { await page.goto(target.toString(), { waitUntil: 'networkidle' }); await page.screenshot({ path: output_path, fullPage: full_page }); });
+        return { content: [{ type: 'text', text: `Screenshot written to ${output_path}` }] };
+    });
+}
+//# sourceMappingURL=browser.js.map

package/dist/tools/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,CAAC,WAAW,EAAE,0BAA0B,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClG,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QAAC,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAC3C,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAAC,CAAC;IAChK,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,EAA6B;IACzD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,GAAgB;IACtE,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE;QAClC,WAAW,EAAE,yGAAyG;QACtH,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;KAC7G,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE;QAC5B,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;wBACtE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBACtE,IAAI,OAAO;4BAAE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;wBAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;wBACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;wBACzE,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,IAAI,EAAE,CAAC;oBAC1D,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,iBAAiB,EAAE;QACrC,WAAW,EAAE,oFAAoF;QACjG,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE;KAC3G,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE;QAC9B,mBAAmB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;wBACtE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAa,EAAE,EAAE;4BACjD,MAAM,GAAG,GAAI,UAAkB,CAAC,QAAQ,CAAC;4BACzC,OAAO;gCACL,KAAK,EAAE,GAAG,CAAC,KAAK;gCAChB,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,0BAA0B,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE;gCACzF,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;6BAClK,CAAC;wBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;wBACd,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,oBAAoB,EAAE;QACxC,WAAW,EAAE,2EAA2E;QACxF,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;KACnI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE;QAC3C,mBAAmB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtG,IAAI,GAAG,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9G,aAAa,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAC;QAC9K,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,WAAW,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1K,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/context.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolContext } from '../core/context.js';
+export declare function registerContextTools(server: McpServer, ctx: ToolContext): void;
+//# sourceMappingURL=context.d.ts.map

package/dist/tools/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/tools/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAsD9E"}

package/dist/tools/context.js

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+import { assertToolPermitted } from '../core/policy.js';
+export function registerContextTools(server, ctx) {
+    const engine = ctx.contextEngine;
+    if (!engine)
+        return;
+    server.registerTool('context_stats', {
+        description: 'Show context-engine mode, cache, memory and byte-saving statistics for the current token.',
+        inputSchema: {},
+    }, async () => {
+        assertToolPermitted({ tool: 'context_stats', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify(engine.getStats()) }] };
+    });
+    server.registerTool('context_memory', {
+        description: 'Return recent compact task memory for the current token only.',
+        inputSchema: { limit: z.number().int().min(1).max(64).optional() },
+    }, async ({ limit }) => {
+        assertToolPermitted({ tool: 'context_memory', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify(engine.recentMemory(limit)) }] };
+    });
+    server.registerTool('context_snapshot', {
+        description: 'Save a context snapshot for the current token and return a short snapshot id.',
+        inputSchema: { text: z.string().describe('Text to snapshot') },
+    }, async ({ text }) => {
+        assertToolPermitted({ tool: 'context_snapshot', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: JSON.stringify({ id: engine.snapshot(text) }) }] };
+    });
+    server.registerTool('context_diff', {
+        description: 'Compare text with a saved context snapshot and return a compact line diff.',
+        inputSchema: { id: z.string(), text: z.string() },
+    }, async ({ id, text }) => {
+        assertToolPermitted({ tool: 'context_diff', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const diff = engine.diffSnapshot(id, text);
+        return { content: [{ type: 'text', text: JSON.stringify(diff) }], isError: !diff.found };
+    });
+    server.registerTool('context_budget', {
+        description: 'Compact arbitrary text to an explicit context-character budget.',
+        inputSchema: { text: z.string(), max_chars: z.number().int().min(1).max(1_000_000) },
+    }, async ({ text, max_chars }) => {
+        assertToolPermitted({ tool: 'context_budget', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const result = engine.fitBudget({ content: [{ type: 'text', text }] }, max_chars);
+        return { content: result.content };
+    });
+    server.registerTool('context_clear', {
+        description: 'Clear this token\'s local context cache and task memory.',
+        inputSchema: {},
+    }, async () => {
+        assertToolPermitted({ tool: 'context_clear', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        engine.clear();
+        return { content: [{ type: 'text', text: 'Context cache and memory cleared for this token.' }] };
+    });
+}
+//# sourceMappingURL=context.js.map

package/dist/tools/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/tools/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,GAAgB;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE;QACnC,WAAW,EAAE,2FAA2F;QACxG,WAAW,EAAE,EAAE;KAChB,EAAE,KAAK,IAAI,EAAE;QACZ,mBAAmB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE;KACnE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACrB,mBAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,kBAAkB,EAAE;QACtC,WAAW,EAAE,+EAA+E;QAC5F,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;KAC/D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACpB,mBAAmB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE;QAClC,WAAW,EAAE,4EAA4E;QACzF,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;KAClD,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACxB,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;KACrF,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/B,mBAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClF,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE;QACnC,WAAW,EAAE,0DAA0D;QACvE,WAAW,EAAE,EAAE;KAChB,EAAE,KAAK,IAAI,EAAE;QACZ,mBAAmB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kDAAkD,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/index.d.ts

@@ -4,5 +4,5 @@ import type { ToolContext } from '../core/context.js';
  * Register every tool suite for this request's token context.
  * Fresh registration per request → policy mutations apply instantly.
  */
-export declare function registerAllTools(server: McpServer, ctx: ToolContext): Promise<void>;
+export declare function registerAllTools(server: McpServer, ctx: ToolContext, includeIntegrations?: boolean): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA2BtD;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCzF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAoCtD;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,mBAAmB,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA0CrH"}

package/dist/tools/index.js

@@ -23,11 +23,20 @@ import { registerDatabaseTools } from './database.js';
 import { registerChangeTools } from './changes.js';
 import { registerResourcesAndPrompts } from './resources-prompts.js';
 import { registerPluginTools, registerInstalledPlugins } from './plugins.js';
+import { registerContextTools } from './context.js';
+import { registerRouterTools } from './router.js';
+import { registerTaskTools } from './tasks.js';
+import { registerAgentTools } from './agent.js';
+import { registerIntelligenceTools } from './intelligence.js';
+import { registerAutomationTools } from './automation.js';
+import { registerBrowserTools } from './browser.js';
+import { registerInfrastructureTools } from './infrastructure.js';
+import { registerAutonomousTools } from './autonomous.js';
 /**
  * Register every tool suite for this request's token context.
  * Fresh registration per request → policy mutations apply instantly.
  */
-export async function registerAllTools(server, ctx) {
+export async function registerAllTools(server, ctx, includeIntegrations = true) {
     registerSystemTools(server, ctx);
     registerFilesystemTools(server, ctx);
     registerShellTools(server, ctx);
@@ -51,12 +60,21 @@ export async function registerAllTools(server, ctx) {
     registerDatabaseTools(server, ctx);
     registerChangeTools(server, ctx);
     registerResourcesAndPrompts(server, ctx);
+    registerContextTools(server, ctx);
+    registerRouterTools(server, ctx);
+    registerTaskTools(server, ctx);
+    registerAgentTools(server, ctx);
+    registerIntelligenceTools(server, ctx);
+    registerAutomationTools(server, ctx);
+    registerBrowserTools(server, ctx);
+    registerInfrastructureTools(server, ctx);
+    registerAutonomousTools(server, ctx);
     registerPluginTools(server, ctx);
     await registerInstalledPlugins(server, ctx);
     // Integration subprocesses are disabled in the unit-test environment so
     // core transport/auth tests stay deterministic. Production loads them
     // before the MCP transport connects, so the initial tools/list is complete.
-    if (process.env.NODE_ENV !== 'test' && !process.env.VITEST) {
+    if (includeIntegrations && process.env.NODE_ENV !== 'test' && !process.env.VITEST) {
         await registerIntegrationTools(server, ctx);
     }
 }

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAiB,EAAE,GAAgB;IACxE,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5C,wEAAwE;IACxE,sEAAsE;IACtE,4EAA4E;IAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAiB,EAAE,GAAgB,EAAE,mBAAmB,GAAG,IAAI;IACpG,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9B,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,2BAA2B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5C,wEAAwE;IACxE,sEAAsE;IACtE,4EAA4E;IAC5E,IAAI,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAClF,MAAM,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/tools/infrastructure.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolContext } from '../core/context.js';
+export declare function registerInfrastructureTools(server: McpServer, ctx: ToolContext): void;
+//# sourceMappingURL=infrastructure.d.ts.map

package/dist/tools/infrastructure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.d.ts","sourceRoot":"","sources":["../../src/tools/infrastructure.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAiCtD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAqFrF"}

package/dist/tools/infrastructure.js

@@ -0,0 +1,124 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { z } from 'zod';
+import { assertToolPermitted } from '../core/policy.js';
+const execFileAsync = promisify(execFile);
+const MAX_OUTPUT = 128 * 1024;
+function cleanOutput(stdout, stderr) {
+    const out = `${stdout}${stderr ? `\n${stderr}` : ''}`.trim();
+    return out.slice(0, MAX_OUTPUT);
+}
+async function fixedExec(file, args, timeout = 20_000) {
+    try {
+        const r = await execFileAsync(file, args, { timeout, maxBuffer: MAX_OUTPUT * 2, windowsHide: true });
+        return cleanOutput(r.stdout, r.stderr);
+    }
+    catch (e) {
+        const detail = cleanOutput(String(e?.stdout || ''), String(e?.stderr || ''));
+        if (e?.code === 'ENOENT')
+            throw new Error(`${file} is not installed or not in PATH`);
+        throw new Error(`${file} failed${detail ? `: ${detail}` : ` (exit ${e?.code ?? 'unknown'})`}`);
+    }
+}
+function name(value) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(value))
+        throw new Error('Invalid resource name');
+    return value;
+}
+function namespace(value) {
+    if (!value)
+        return [];
+    if (!/^[A-Za-z0-9][A-Za-z0-9_.-]{0,62}$/.test(value))
+        throw new Error('Invalid namespace');
+    return ['-n', value];
+}
+export function registerInfrastructureTools(server, ctx) {
+    server.registerTool('infra_probe', {
+        description: 'Probe availability and versions of Docker, kubectl, and cloudflared without changing the host.',
+        inputSchema: {},
+    }, async () => {
+        assertToolPermitted({ tool: 'infra_probe', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const tools = ['docker', 'kubectl', 'cloudflared'];
+        const result = {};
+        for (const tool of tools) {
+            try {
+                result[tool] = await fixedExec(tool, ['--version'], 5_000);
+            }
+            catch (e) {
+                result[tool] = `unavailable: ${e.message}`;
+            }
+        }
+        return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+    });
+    server.registerTool('docker_ps', {
+        description: 'List Docker containers. Read-only and shell-free.',
+        inputSchema: { all: z.boolean().optional().default(true) },
+    }, async ({ all }) => {
+        assertToolPermitted({ tool: 'docker_ps', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: await fixedExec('docker', ['ps', '--no-trunc', ...(all ? ['-a'] : [])]) }] };
+    });
+    server.registerTool('docker_inspect', {
+        description: 'Inspect one Docker container by name or ID.',
+        inputSchema: { container: z.string().min(1).max(128) },
+    }, async ({ container }) => {
+        assertToolPermitted({ tool: 'docker_inspect', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: await fixedExec('docker', ['inspect', name(container)]) }] };
+    });
+    server.registerTool('docker_logs', {
+        description: 'Read recent Docker container logs.',
+        inputSchema: { container: z.string().min(1).max(128), tail: z.number().int().min(1).max(5000).optional().default(200) },
+    }, async ({ container, tail }) => {
+        assertToolPermitted({ tool: 'docker_logs', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: await fixedExec('docker', ['logs', '--tail', String(tail), name(container)]) }] };
+    });
+    server.registerTool('docker_action', {
+        description: 'Start, stop, or restart one Docker container. Requires mutation permission.',
+        inputSchema: { action: z.enum(['start', 'stop', 'restart']), container: z.string().min(1).max(128) },
+    }, async ({ action, container }) => {
+        assertToolPermitted({ tool: 'docker_action', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: await fixedExec('docker', [action, name(container)]) }] };
+    });
+    server.registerTool('kubernetes_get', {
+        description: 'Read Kubernetes resources with kubectl get. No arbitrary kubectl flags.',
+        inputSchema: { resource: z.enum(['pods', 'deployments', 'services', 'statefulsets', 'daemonsets', 'jobs', 'cronjobs', 'nodes', 'namespaces']), namespace: z.string().max(63).optional(), name: z.string().max(128).optional() },
+    }, async ({ resource, namespace: ns, name: item }) => {
+        assertToolPermitted({ tool: 'kubernetes_get', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const args = ['get', resource, '-o', 'wide', ...namespace(ns)];
+        if (item)
+            args.push(name(item));
+        return { content: [{ type: 'text', text: await fixedExec('kubectl', args) }] };
+    });
+    server.registerTool('kubernetes_describe', {
+        description: 'Describe a Kubernetes resource using a fixed kubectl command.',
+        inputSchema: { resource: z.enum(['pod', 'deployment', 'service', 'statefulset', 'daemonset', 'job', 'cronjob']), name: z.string().min(1).max(128), namespace: z.string().max(63).optional() },
+    }, async ({ resource, name: item, namespace: ns }) => {
+        assertToolPermitted({ tool: 'kubernetes_describe', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        return { content: [{ type: 'text', text: await fixedExec('kubectl', ['describe', resource, name(item), ...namespace(ns)]) }] };
+    });
+    server.registerTool('kubernetes_logs', {
+        description: 'Read recent logs from a Kubernetes pod/container.',
+        inputSchema: { pod: z.string().min(1).max(128), container: z.string().max(128).optional(), namespace: z.string().max(63).optional(), tail: z.number().int().min(1).max(5000).optional().default(200) },
+    }, async ({ pod, container, namespace: ns, tail }) => {
+        assertToolPermitted({ tool: 'kubernetes_logs', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const args = ['logs', name(pod), '--tail', String(tail), ...namespace(ns)];
+        if (container)
+            args.push('-c', name(container));
+        return { content: [{ type: 'text', text: await fixedExec('kubectl', args) }] };
+    });
+    server.registerTool('cloudflare_status', {
+        description: 'Inspect cloudflared version and configured tunnel visibility. Never returns credentials.',
+        inputSchema: {},
+    }, async () => {
+        assertToolPermitted({ tool: 'cloudflare_status', scopes: ctx.token.scopes, readOnly: ctx.readOnly });
+        const version = await fixedExec('cloudflared', ['--version']);
+        let tunnels = 'tunnel list unavailable';
+        try {
+            tunnels = await fixedExec('cloudflared', ['tunnel', 'list'], 15_000);
+        }
+        catch (e) {
+            tunnels = e.message;
+        }
+        return { content: [{ type: 'text', text: `version:\n${version}\n\ntunnels:\n${tunnels}` }] };
+    });
+}
+//# sourceMappingURL=infrastructure.js.map

package/dist/tools/infrastructure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infrastructure.js","sourceRoot":"","sources":["../../src/tools/infrastructure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC;AAE9B,SAAS,WAAW,CAAC,MAAc,EAAE,MAAc;IACjD,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAc,EAAE,OAAO,GAAG,MAAM;IACrE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,GAAG,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACrG,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC3F,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAiB,EAAE,GAAgB;IAC7E,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE;QACjC,WAAW,EAAE,gGAAgG;QAC7G,WAAW,EAAE,EAAE;KAChB,EAAE,KAAK,IAAI,EAAE;QACZ,mBAAmB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACnD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YACnE,OAAO,CAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;QAC/B,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;KAC3D,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACnB,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,WAAW,EAAE,6CAA6C;QAC1D,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;KACvD,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACzB,mBAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE;QACjC,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;KACxH,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/B,mBAAmB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7H,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE;QACnC,WAAW,EAAE,6EAA6E;QAC1F,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;KACrG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;QACjC,mBAAmB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE;QACpC,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;KAChO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACnD,mBAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,qBAAqB,EAAE;QACzC,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE;KAC9L,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE;QACnD,mBAAmB,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjI,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,iBAAiB,EAAE;QACrC,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;KACvM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACnD,mBAAmB,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE;QACvC,WAAW,EAAE,0FAA0F;QACvG,WAAW,EAAE,EAAE;KAChB,EAAE,KAAK,IAAI,EAAE;QACZ,mBAAmB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,GAAG,yBAAyB,CAAC;QACxC,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAAC,CAAC;QACrH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,OAAO,iBAAiB,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/intelligence.d.ts

@@ -0,0 +1,9 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolContext } from '../core/context.js';
+export declare function impactAnalysisForTest(root: string, changed: string[]): Promise<{
+    changed: string[];
+    impacted: string[];
+    edges: number;
+}>;
+export declare function registerIntelligenceTools(server: McpServer, ctx: ToolContext): void;
+//# sourceMappingURL=intelligence.d.ts.map

package/dist/tools/intelligence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"intelligence.d.ts","sourceRoot":"","sources":["../../src/tools/intelligence.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAkCtD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;;;;GAM1E;AAQD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CAanF"}