synorch 0.2.0 → 0.4.0-beta.0

package/dist/harness/mcp/client.js

@@ -0,0 +1,214 @@
+import { spawn, spawnSync } from "node:child_process";
+import { createWriteStream, mkdirSync, statSync } from "node:fs";
+import path from "node:path";
+import { friendlyFailure, isAuthFailure, McpStartError } from "./errors.js";
+import { hasConfiguredCredentials } from "./oauth.js";
+/** Non-secret variables a spawned server commonly needs beyond the SDK's safe defaults. */
+const EXTRA_PASSTHROUGH = ["PATHEXT", "ComSpec", "COMSPEC", "WINDIR", "SystemRoot", "ProgramData", "ProgramFiles(x86)", "TMP", "TEMP", "TMPDIR", "LANG", "LC_ALL", "HTTP_PROXY", "HTTPS_PROXY", "NO_PROXY", "http_proxy", "https_proxy", "no_proxy", "NODE_EXTRA_CA_CERTS", "XDG_CACHE_HOME", "XDG_CONFIG_HOME", "PLAYWRIGHT_BROWSERS_PATH", "DISPLAY", "WAYLAND_DISPLAY"];
+const LOG_ROTATE_BYTES = 1024 * 1024;
+const STDERR_TAIL_CHARS = 2000;
+export class McpConnection {
+    definition;
+    tools = [];
+    serverVersion;
+    client;
+    transport;
+    /** The stdio transport (pid, stderr), when the server is a local process. */
+    stdio;
+    log;
+    platform;
+    stderrTail = "";
+    closed = false;
+    disposed = false;
+    closeListeners = new Set();
+    constructor(definition, client, transport, log, platform) {
+        this.definition = definition;
+        this.client = client;
+        this.transport = transport;
+        this.stdio = definition.transport === "stdio" ? transport : undefined;
+        this.log = log;
+        this.platform = platform;
+    }
+    /** Connects, initializes and lists the tools; throws with the server's last stderr lines on failure. */
+    static async connect(definition, options) {
+        const platform = options.platform ?? process.platform;
+        const log = openLog(options.logDirectory, definition.name);
+        log?.write(`\n--- ${new Date().toISOString()} connecting ${definition.name} (${definition.transport}) ---\n`);
+        const transport = await createTransport(definition, options);
+        const { Client: ClientClass } = await import("@modelcontextprotocol/sdk/client/index.js");
+        const client = new ClientClass({ name: "synorch", version: options.clientVersion }, { capabilities: {} });
+        const connection = new McpConnection(definition, client, transport, log, platform);
+        connection.stdio?.stderr?.on("data", (chunk) => connection.noteStderr(String(chunk)));
+        client.onclose = () => connection.markClosed("the server closed the connection");
+        client.onerror = (error) => log?.write(`client error: ${error.message}\n`);
+        const timeout = AbortSignal.timeout(definition.startupTimeoutMs);
+        try {
+            await client.connect(transport, { timeout: definition.startupTimeoutMs, signal: timeout });
+            connection.serverVersion = client.getServerVersion()?.version;
+            connection.tools = await connection.listAllTools(timeout);
+        }
+        catch (error) {
+            const tail = connection.stderrTail.trim().split(/\r?\n/).slice(-3).join(" | ");
+            const raw = error instanceof Error ? error.message : String(error);
+            const status = typeof error === "object" && error !== null ? error.code : undefined;
+            const detail = `${raw}${status === undefined ? "" : ` (code ${String(status)})`}${tail === "" ? "" : ` (stderr: ${tail.slice(0, 500)})`}`;
+            log?.write(`start failed: ${detail}\n`);
+            await connection.close().catch(() => undefined);
+            const configured = hasConfiguredCredentials(definition);
+            if (!timeout.aborted && definition.transport !== "stdio" && !configured && isAuthFailure(error))
+                throw new McpStartError(definition.name, "needs-auth", "needs sign-in", detail);
+            const friendly = friendlyFailure(error, { timedOut: timeout.aborted, timeoutMs: definition.startupTimeoutMs, command: definition.command, url: definition.url, configuredCredentials: configured });
+            throw new McpStartError(definition.name, "failed", friendly, detail);
+        }
+        log?.write(`connected; ${connection.tools.length} tool(s)\n`);
+        return connection;
+    }
+    get isClosed() {
+        return this.closed;
+    }
+    get lastStderr() {
+        return this.stderrTail;
+    }
+    onClose(listener) {
+        this.closeListeners.add(listener);
+        return () => this.closeListeners.delete(listener);
+    }
+    async callTool(name, args, signal, timeoutMs) {
+        const result = await this.client.callTool({ name, arguments: { ...args } }, undefined, { signal, timeout: timeoutMs, resetTimeoutOnProgress: true });
+        const content = Array.isArray(result.content) ? result.content : [];
+        const legacy = result.toolResult;
+        return {
+            content: content.length === 0 && legacy !== undefined ? [{ type: "text", text: typeof legacy === "string" ? legacy : JSON.stringify(legacy) }] : content,
+            structuredContent: result.structuredContent,
+            isError: result.isError === true,
+        };
+    }
+    async close() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        const pid = this.stdio?.pid ?? null;
+        this.markClosed("closed by Synorch");
+        // A Windows `npx` server runs under cmd.exe: end the whole tree, or node children outlive it.
+        if (pid !== null && this.platform === "win32")
+            await killTreeWindows(pid);
+        await this.client.close().catch(() => undefined);
+        this.log?.end();
+    }
+    /** Synchronous best effort for process exit handlers. */
+    killSync() {
+        const pid = this.stdio?.pid ?? null;
+        if (pid === null)
+            return;
+        try {
+            if (this.platform === "win32")
+                spawnSync("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
+            else
+                process.kill(pid, "SIGTERM");
+        }
+        catch {
+            // Already gone.
+        }
+    }
+    async listAllTools(signal) {
+        const tools = [];
+        let cursor;
+        for (let page = 0; page < 50; page += 1) {
+            const result = await this.client.listTools(cursor === undefined ? {} : { cursor }, { signal, timeout: this.definition.startupTimeoutMs });
+            for (const tool of result.tools) {
+                tools.push({
+                    name: tool.name,
+                    description: tool.description,
+                    inputSchema: tool.inputSchema,
+                    annotations: tool.annotations,
+                });
+            }
+            cursor = result.nextCursor;
+            if (cursor === undefined)
+                break;
+        }
+        return tools;
+    }
+    noteStderr(text) {
+        this.log?.write(text);
+        this.stderrTail = `${this.stderrTail}${text}`.slice(-STDERR_TAIL_CHARS);
+    }
+    markClosed(reason) {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.log?.write(`closed: ${reason}\n`);
+        for (const listener of this.closeListeners) {
+            try {
+                listener(reason);
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+}
+async function createTransport(definition, options) {
+    if (definition.transport === "stdio") {
+        const { getDefaultEnvironment, StdioClientTransport } = await import("@modelcontextprotocol/sdk/client/stdio.js");
+        const extra = {};
+        for (const name of EXTRA_PASSTHROUGH) {
+            const value = options.environment[name];
+            if (value !== undefined && value !== "")
+                extra[name] = value;
+        }
+        return new StdioClientTransport({
+            command: definition.command ?? "",
+            args: [...definition.args],
+            env: { ...getDefaultEnvironment(), ...extra, ...definition.env },
+            cwd: definition.cwd ?? options.workspaceRoot,
+            stderr: "pipe",
+        });
+    }
+    const url = new URL(definition.url ?? "");
+    const requestInit = { headers: { ...definition.headers } };
+    const auth = options.authProvider === undefined ? {} : { authProvider: options.authProvider };
+    if (definition.transport === "sse") {
+        const { SSEClientTransport } = await import("@modelcontextprotocol/sdk/client/sse.js");
+        return new SSEClientTransport(url, { requestInit, ...auth });
+    }
+    const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
+    return new StreamableHTTPClientTransport(url, { requestInit, ...auth });
+}
+function openLog(directory, name) {
+    try {
+        mkdirSync(directory, { recursive: true });
+        const file = path.join(directory, `${name}.log`);
+        let flags = "a";
+        try {
+            if (statSync(file).size > LOG_ROTATE_BYTES)
+                flags = "w";
+        }
+        catch {
+            // New file.
+        }
+        const stream = createWriteStream(file, { flags, mode: 0o600 });
+        stream.on("error", () => undefined);
+        return stream;
+    }
+    catch {
+        return undefined;
+    }
+}
+function killTreeWindows(pid) {
+    return new Promise((resolve) => {
+        try {
+            const killer = spawn("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, stdio: "ignore" });
+            killer.once("error", () => resolve());
+            killer.once("exit", () => resolve());
+        }
+        catch {
+            resolve();
+        }
+    });
+}
+/** Where a server's stderr log lives. */
+export function mcpLogFile(logDirectory, name) {
+    return path.join(logDirectory, `${name}.log`);
+}
+//# sourceMappingURL=client.js.map

package/dist/harness/mcp/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/harness/mcp/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAoB,MAAM,SAAS,CAAC;AACnF,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AA2CtD,2FAA2F;AAC3F,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC3W,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,OAAO,aAAa;IACR,UAAU,CAAsB;IACzC,KAAK,GAA2B,EAAE,CAAC;IACnC,aAAa,CAAqB;IACxB,MAAM,CAAS;IACf,SAAS,CAAY;IACtC,6EAA6E;IAC5D,KAAK,CAAmC;IACxC,GAAG,CAA0B;IAC7B,QAAQ,CAAkB;IACnC,UAAU,GAAG,EAAE,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,KAAK,CAAC;IACR,cAAc,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEtE,YAAoB,UAA+B,EAAE,MAAc,EAAE,SAAoB,EAAE,GAA4B,EAAE,QAAyB;QAChJ,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAE,SAAkC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,wGAAwG;IACjG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAA+B,EAAE,OAA0B;QACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3D,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,SAAS,SAAS,CAAC,CAAC;QAC9G,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnF,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;QACjF,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,iBAAiB,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,UAAU,CAAC,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC;YAC9D,UAAU,CAAC,KAAK,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,MAAM,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YAC1I,GAAG,EAAE,KAAK,CAAC,iBAAiB,MAAM,IAAI,CAAC,CAAC;YACxC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;YACjL,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,CAAC;YACpM,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,EAAE,KAAK,CAAC,cAAc,UAAU,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC;QAC9D,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,IAAW,UAAU;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEM,OAAO,CAAC,QAAkC;QAC/C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAuC,EAAE,MAAmB,EAAE,SAAiB;QACjH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,OAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAI,MAAmC,CAAC,UAAU,CAAC;QAC/D,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;YACxJ,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI;SACjC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;QACrC,8FAA8F;QAC9F,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,yDAAyD;IAClD,QAAQ;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC;QACpC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;;gBAC3H,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAmB;QAC5C,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,IAAI,MAA0B,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC1I,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE,IAAI,CAAC,WAAsC;oBACxD,WAAW,EAAE,IAAI,CAAC,WAAkD;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;YAC3B,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IAEO,UAAU,CAAC,MAAc;QAC/B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,MAAM,IAAI,CAAC,CAAC;QACvC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,eAAe,CAAC,UAA+B,EAAE,OAA0B;IACxF,IAAI,UAAU,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAClH,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,oBAAoB,CAAC;YAC9B,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,EAAE;YACjC,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC;YAC1B,GAAG,EAAE,EAAE,GAAG,qBAAqB,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YAChE,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,OAAO,CAAC,aAAa;YAC5C,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAgB,EAAE,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC9F,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACvF,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAc,CAAC;IAC5E,CAAC;IACD,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,MAAM,CAAC,oDAAoD,CAAC,CAAC;IAC7G,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAc,CAAC;AACvF,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,IAAY;IAC9C,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,gBAAgB;gBAAE,KAAK,GAAG,GAAG,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5G,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,IAAY;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AAChD,CAAC"}

package/dist/harness/mcp/config.d.ts

@@ -0,0 +1,156 @@
+import { z } from "zod";
+import { type AgentRole, type Digest } from "../contracts/index.ts";
+/**
+ * K3 MCP client configuration. Servers come from three places:
+ *
+ *   user     `mcp.servers` in <synorch home>/config.yaml       (trusted: the user wrote it)
+ *   project  `mcp.servers` in <workspace>/.synorch/config.yaml  (repository content: gated)
+ *   project  `mcpServers` in <workspace>/.mcp.json              (the common format; gated)
+ *
+ * A repository layer may only narrow (SEC-C1), so a project server is never spawned until the user
+ * approved exactly that definition once (`syn mcp approve <name>` or `/mcp approve <name>`); the
+ * approval is bound to the definition's digest and lives in the user scope. A user server with the
+ * same name wins over a project one.
+ */
+export declare const MCP_SERVER_NAME_PATTERN: RegExp;
+export declare const MCP_TRUST_LEVELS: readonly ["full", "read-only"];
+export type McpTrust = (typeof MCP_TRUST_LEVELS)[number];
+export declare const MCP_STARTUP_MODES: readonly ["lazy", "session"];
+export type McpStartup = (typeof MCP_STARTUP_MODES)[number];
+export declare const DEFAULT_MCP_STARTUP_TIMEOUT_MS = 60000;
+export declare const DEFAULT_MCP_TOOL_TIMEOUT_MS = 120000;
+/** One server entry, Synorch YAML form (also accepts the `.mcp.json` keys: `type`, `command`, `url`…). */
+export declare const mcpServerEntrySchema: z.ZodObject<{
+    type: z.ZodOptional<z.ZodEnum<{
+        stdio: "stdio";
+        http: "http";
+        "streamable-http": "streamable-http";
+        sse: "sse";
+    }>>;
+    command: z.ZodOptional<z.ZodString>;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+    url: z.ZodOptional<z.ZodString>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    trust: z.ZodOptional<z.ZodEnum<{
+        full: "full";
+        "read-only": "read-only";
+    }>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    startup: z.ZodOptional<z.ZodEnum<{
+        lazy: "lazy";
+        session: "session";
+    }>>;
+    startup_timeout_ms: z.ZodOptional<z.ZodInt>;
+    timeout_ms: z.ZodOptional<z.ZodInt>;
+    roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        orchestrator: "orchestrator";
+        explorer: "explorer";
+        implementer: "implementer";
+        debugger: "debugger";
+        reviewer: "reviewer";
+        session: "session";
+    }>>>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type McpServerEntry = z.infer<typeof mcpServerEntrySchema>;
+/** The `mcp` block of a Synorch config file. */
+export declare const mcpConfigSchema: z.ZodObject<{
+    startup: z.ZodOptional<z.ZodEnum<{
+        lazy: "lazy";
+        session: "session";
+    }>>;
+    servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        type: z.ZodOptional<z.ZodEnum<{
+            stdio: "stdio";
+            http: "http";
+            "streamable-http": "streamable-http";
+            sse: "sse";
+        }>>;
+        command: z.ZodOptional<z.ZodString>;
+        args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodString>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        trust: z.ZodOptional<z.ZodEnum<{
+            full: "full";
+            "read-only": "read-only";
+        }>>;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        startup: z.ZodOptional<z.ZodEnum<{
+            lazy: "lazy";
+            session: "session";
+        }>>;
+        startup_timeout_ms: z.ZodOptional<z.ZodInt>;
+        timeout_ms: z.ZodOptional<z.ZodInt>;
+        roles: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            orchestrator: "orchestrator";
+            explorer: "explorer";
+            implementer: "implementer";
+            debugger: "debugger";
+            reviewer: "reviewer";
+            session: "session";
+        }>>>;
+        description: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type McpConfig = z.infer<typeof mcpConfigSchema>;
+/** `plugin`: a plugin the user installed with `syn plugin install`; `claude-plugin`: a plugin enabled in Claude Code (K7). */
+export type McpSource = "user" | "project" | "mcp.json" | "plugin" | "claude-plugin";
+/** A server as the client runs it: transport details with `${VAR}` expanded, policy hints resolved. */
+export interface McpServerDefinition {
+    readonly name: string;
+    readonly source: McpSource;
+    /** Where it was declared (for `syn mcp list`). */
+    readonly file: string;
+    readonly transport: "stdio" | "http" | "sse";
+    readonly command: string | undefined;
+    readonly args: readonly string[];
+    readonly env: Readonly<Record<string, string>>;
+    readonly cwd: string | undefined;
+    readonly url: string | undefined;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly trust: McpTrust;
+    readonly enabled: boolean;
+    readonly startup: McpStartup;
+    readonly startupTimeoutMs: number;
+    readonly timeoutMs: number;
+    readonly roles: readonly AgentRole[];
+    /** Digest of the definition as written (before expansion): project approvals bind to it. */
+    readonly digest: Digest;
+    /** Variables `${VAR}` referenced but not set (reported, expanded to ""). */
+    readonly missingVariables: readonly string[];
+    /** A `claude-plugin` server's name inside Claude Code (`plugin:<plugin>:<server>`, tools `mcp__plugin_<plugin>_<server>__*`). */
+    readonly claudeName?: string;
+}
+/** Roles that see a server's tools by default: read-only servers reach every role but the orchestrator. */
+export declare function defaultMcpRoles(trust: McpTrust): AgentRole[];
+/** `${VAR}` and `${VAR:-default}` (the `.mcp.json` convention), from `environment`. */
+export declare function expandVariables(text: string, environment: Readonly<Record<string, string | undefined>>, missing: Set<string>): string;
+export declare function toDefinition(name: string, entry: McpServerEntry, source: McpSource, file: string, environment: Readonly<Record<string, string | undefined>>, defaults?: {
+    readonly startup?: McpStartup | undefined;
+    readonly baseDir?: string | undefined;
+}): McpServerDefinition;
+export interface McpConfigProblem {
+    readonly file: string;
+    readonly message: string;
+}
+export interface McpDiscovery {
+    readonly servers: readonly McpServerDefinition[];
+    readonly problems: readonly McpConfigProblem[];
+}
+/** Reads `<root>/.mcp.json` leniently: each valid server is kept, each invalid one reported. */
+export declare function readMcpJson(root: string, environment: Readonly<Record<string, string | undefined>>): Promise<McpDiscovery>;
+/** One `.mcp.json`-style server entry (unknown keys dropped): the entry, or the reason it is invalid. */
+export declare function parseMcpServerEntry(value: unknown): {
+    readonly entry: McpServerEntry;
+} | {
+    readonly error: string;
+};
+/** Every configured server: user entries first (they win a name clash), then plugin servers (K7), project and `.mcp.json`. */
+export declare function mergeServers(user: McpConfig | undefined, userFile: string, project: McpConfig | undefined, projectFile: string, mcpJson: McpDiscovery, environment: Readonly<Record<string, string | undefined>>, workspaceRoot: string, plugins?: readonly McpServerDefinition[]): McpDiscovery;
+/** A tool name as the model sees it: `mcp__<server>__<tool>`, snake case, at most 64 characters. */
+export declare function modelToolName(server: string, tool: string): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/harness/mcp/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/harness/mcp/config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA0C,KAAK,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE5G;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,uBAAuB,QAAkC,CAAC;AACvE,eAAO,MAAM,gBAAgB,gCAAiC,CAAC;AAC/D,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,eAAO,MAAM,iBAAiB,8BAA+B,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D,eAAO,MAAM,8BAA8B,QAAS,CAAC;AACrD,eAAO,MAAM,2BAA2B,SAAU,CAAC;AAInD,0GAA0G;AAC1G,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0B7B,CAAC;AACL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,gDAAgD;AAChD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,8HAA8H;AAC9H,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,eAAe,CAAC;AAErF,uGAAuG;AACvG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4EAA4E;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,iIAAiI;IACjI,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,EAAE,CAE5D;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAQrI;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,QAAQ,GAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAClG,mBAAmB,CA8BrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAChD;AAID,gGAAgG;AAChG,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CA+BhI;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAGnH;AASD,8HAA8H;AAC9H,wBAAgB,YAAY,CAC1B,IAAI,EAAE,SAAS,GAAG,SAAS,EAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,SAAS,GAAG,SAAS,EAC9B,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACzD,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,SAAS,mBAAmB,EAAO,GAC3C,YAAY,CAUd;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlE"}

package/dist/harness/mcp/config.js

@@ -0,0 +1,180 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { z } from "zod";
+import { AGENT_ROLES, agentRoleSchema, digestOf } from "../contracts/index.js";
+/**
+ * K3 MCP client configuration. Servers come from three places:
+ *
+ *   user     `mcp.servers` in <synorch home>/config.yaml       (trusted: the user wrote it)
+ *   project  `mcp.servers` in <workspace>/.synorch/config.yaml  (repository content: gated)
+ *   project  `mcpServers` in <workspace>/.mcp.json              (the common format; gated)
+ *
+ * A repository layer may only narrow (SEC-C1), so a project server is never spawned until the user
+ * approved exactly that definition once (`syn mcp approve <name>` or `/mcp approve <name>`); the
+ * approval is bound to the definition's digest and lives in the user scope. A user server with the
+ * same name wins over a project one.
+ */
+export const MCP_SERVER_NAME_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]{0,31}$/;
+export const MCP_TRUST_LEVELS = ["full", "read-only"];
+export const MCP_STARTUP_MODES = ["lazy", "session"];
+export const DEFAULT_MCP_STARTUP_TIMEOUT_MS = 60_000;
+export const DEFAULT_MCP_TOOL_TIMEOUT_MS = 120_000;
+const stringMap = z.record(z.string().min(1).max(200), z.string().max(8000));
+/** One server entry, Synorch YAML form (also accepts the `.mcp.json` keys: `type`, `command`, `url`…). */
+export const mcpServerEntrySchema = z
+    .strictObject({
+    type: z.enum(["stdio", "http", "streamable-http", "sse"]).optional(),
+    command: z.string().min(1).max(1000).optional(),
+    args: z.array(z.string().max(8000)).max(256).optional(),
+    env: stringMap.optional(),
+    cwd: z.string().min(1).max(1000).optional(),
+    url: z.string().min(1).max(2000).optional(),
+    headers: stringMap.optional(),
+    /** `full` (default): tools may change things (the `exec` effect); `read-only`: tools only read (the `read` effect). */
+    trust: z.enum(MCP_TRUST_LEVELS).optional(),
+    enabled: z.boolean().optional(),
+    /** `lazy` (default): spawn on first use when the tool list is cached; `session`: connect when the session starts. */
+    startup: z.enum(MCP_STARTUP_MODES).optional(),
+    startup_timeout_ms: z.int().min(1000).max(600_000).optional(),
+    timeout_ms: z.int().min(1000).max(3_600_000).optional(),
+    /** Which agent roles see the server's tools (narrows the default by trust). */
+    roles: z.array(agentRoleSchema).min(1).optional(),
+    /** Free text kept for `.mcp.json` compatibility. */
+    description: z.string().max(2000).optional(),
+})
+    .superRefine((entry, context) => {
+    const remote = entry.url !== undefined;
+    if (remote === (entry.command !== undefined))
+        context.addIssue({ code: "custom", message: "a server needs exactly one of command (stdio) or url (http)" });
+    if (entry.type === "stdio" && remote)
+        context.addIssue({ code: "custom", path: ["type"], message: "type stdio needs command, not url" });
+    if (entry.type !== undefined && entry.type !== "stdio" && !remote)
+        context.addIssue({ code: "custom", path: ["type"], message: `type ${entry.type} needs url` });
+});
+/** The `mcp` block of a Synorch config file. */
+export const mcpConfigSchema = z.strictObject({
+    startup: z.enum(MCP_STARTUP_MODES).optional(),
+    servers: z.record(z.string().regex(MCP_SERVER_NAME_PATTERN, "server names are 1-32 letters, digits, - or _"), mcpServerEntrySchema).optional(),
+});
+/** Roles that see a server's tools by default: read-only servers reach every role but the orchestrator. */
+export function defaultMcpRoles(trust) {
+    return trust === "read-only" ? ["session", "implementer", "debugger", "explorer", "reviewer"] : ["session", "implementer", "debugger"];
+}
+/** `${VAR}` and `${VAR:-default}` (the `.mcp.json` convention), from `environment`. */
+export function expandVariables(text, environment, missing) {
+    return text.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\}/g, (_match, name, fallback) => {
+        const value = environment[name];
+        if (value !== undefined && value !== "")
+            return value;
+        if (fallback !== undefined)
+            return fallback;
+        missing.add(name);
+        return "";
+    });
+}
+export function toDefinition(name, entry, source, file, environment, defaults = {}) {
+    const missing = new Set();
+    const expand = (text) => expandVariables(text, environment, missing);
+    const expandMap = (map) => Object.fromEntries(Object.entries(map ?? {}).map(([key, value]) => [key, expand(value)]));
+    const trust = entry.trust ?? "full";
+    const transport = entry.url === undefined ? "stdio" : entry.type === "sse" ? "sse" : "http";
+    const cwd = entry.cwd === undefined ? undefined : path.resolve(defaults.baseDir ?? process.cwd(), expand(entry.cwd));
+    const allowed = defaultMcpRoles(trust);
+    const roles = entry.roles === undefined ? allowed : entry.roles.filter((role) => AGENT_ROLES.includes(role));
+    return {
+        name,
+        source,
+        file,
+        transport,
+        command: entry.command === undefined ? undefined : expand(entry.command),
+        args: (entry.args ?? []).map(expand),
+        env: expandMap(entry.env),
+        cwd,
+        url: entry.url === undefined ? undefined : expand(entry.url),
+        headers: expandMap(entry.headers),
+        trust,
+        enabled: entry.enabled ?? true,
+        startup: entry.startup ?? defaults.startup ?? "lazy",
+        startupTimeoutMs: entry.startup_timeout_ms ?? DEFAULT_MCP_STARTUP_TIMEOUT_MS,
+        timeoutMs: entry.timeout_ms ?? DEFAULT_MCP_TOOL_TIMEOUT_MS,
+        roles,
+        digest: digestOf({ name, type: entry.type, command: entry.command, args: entry.args, env: entry.env, cwd: entry.cwd, url: entry.url, headers: entry.headers }),
+        missingVariables: [...missing],
+    };
+}
+const mcpJsonSchema = z.object({ mcpServers: z.record(z.string(), z.unknown()).optional() });
+/** Reads `<root>/.mcp.json` leniently: each valid server is kept, each invalid one reported. */
+export async function readMcpJson(root, environment) {
+    const file = path.join(root, ".mcp.json");
+    let text;
+    try {
+        text = await readFile(file, "utf8");
+    }
+    catch {
+        return { servers: [], problems: [] };
+    }
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (error) {
+        return { servers: [], problems: [{ file, message: `not valid JSON: ${error instanceof Error ? error.message : String(error)}` }] };
+    }
+    const parsed = mcpJsonSchema.safeParse(raw);
+    if (!parsed.success)
+        return { servers: [], problems: [{ file, message: "expected {\"mcpServers\": {...}}" }] };
+    const servers = [];
+    const problems = [];
+    for (const [name, value] of Object.entries(parsed.data.mcpServers ?? {})) {
+        if (!MCP_SERVER_NAME_PATTERN.test(name)) {
+            problems.push({ file, message: `server ${name}: names are 1-32 letters, digits, - or _` });
+            continue;
+        }
+        const entry = mcpServerEntrySchema.safeParse(stripUnknown(value));
+        if (!entry.success) {
+            problems.push({ file, message: `server ${name}: ${entry.error.issues.map((issue) => issue.message).join("; ")}` });
+            continue;
+        }
+        servers.push(toDefinition(name, entry.data, "mcp.json", file, environment, { baseDir: root }));
+    }
+    return { servers, problems };
+}
+/** One `.mcp.json`-style server entry (unknown keys dropped): the entry, or the reason it is invalid. */
+export function parseMcpServerEntry(value) {
+    const parsed = mcpServerEntrySchema.safeParse(stripUnknown(value));
+    return parsed.success ? { entry: parsed.data } : { error: parsed.error.issues.map((issue) => issue.message).join("; ") };
+}
+/** `.mcp.json` entries written for other clients may carry keys Synorch does not know; they are dropped. */
+function stripUnknown(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return value;
+    const known = new Set(["type", "command", "args", "env", "cwd", "url", "headers", "trust", "enabled", "startup", "startup_timeout_ms", "timeout_ms", "roles", "description"]);
+    return Object.fromEntries(Object.entries(value).filter(([key]) => known.has(key)));
+}
+/** Every configured server: user entries first (they win a name clash), then plugin servers (K7), project and `.mcp.json`. */
+export function mergeServers(user, userFile, project, projectFile, mcpJson, environment, workspaceRoot, plugins = []) {
+    const byName = new Map();
+    const add = (definition) => {
+        if (!byName.has(definition.name))
+            byName.set(definition.name, definition);
+    };
+    for (const [name, entry] of Object.entries(user?.servers ?? {}))
+        add(toDefinition(name, entry, "user", userFile, environment, { startup: user?.startup, baseDir: workspaceRoot }));
+    for (const definition of plugins)
+        add(definition);
+    for (const [name, entry] of Object.entries(project?.servers ?? {}))
+        add(toDefinition(name, entry, "project", projectFile, environment, { startup: project?.startup, baseDir: workspaceRoot }));
+    for (const definition of mcpJson.servers)
+        add(definition);
+    return { servers: [...byName.values()], problems: mcpJson.problems };
+}
+/** A tool name as the model sees it: `mcp__<server>__<tool>`, snake case, at most 64 characters. */
+export function modelToolName(server, tool) {
+    const clean = (text) => text.toLowerCase().replace(/[^a-z0-9_]+/g, "_").replace(/^_+|_+$/g, "") || "x";
+    const name = `mcp__${clean(server)}__${clean(tool)}`;
+    if (name.length <= 64)
+        return name;
+    const suffix = digestOf(`${server}/${tool}`).slice(-6);
+    return `${name.slice(0, 57)}_${suffix}`;
+}
+//# sourceMappingURL=config.js.map

package/dist/harness/mcp/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/harness/mcp/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAA+B,MAAM,uBAAuB,CAAC;AAE5G;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAU,CAAC;AAE/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,SAAS,CAAU,CAAC;AAG9D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAEnD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAE7E,0GAA0G;AAC1G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,YAAY,CAAC;IACZ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC/C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvD,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;IACzB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE;IAC7B,uHAAuH;IACvH,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,qHAAqH;IACrH,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC7C,kBAAkB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC7D,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IACvD,+EAA+E;IAC/E,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,oDAAoD;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC;IACvC,IAAI,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC,CAAC;IAC3J,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACzI,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;AACnK,CAAC,CAAC,CAAC;AAGL,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,EAAE,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CAC/I,CAAC,CAAC;AAiCH,2GAA2G;AAC3G,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;AACzI,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,WAAyD,EAAE,OAAoB;IAC3H,OAAO,IAAI,CAAC,OAAO,CAAC,+CAA+C,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,QAA4B,EAAE,EAAE;QAC1H,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,KAAqB,EACrB,MAAiB,EACjB,IAAY,EACZ,WAAyD,EACzD,WAAiG,EAAE;IAEnG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,CAAC,GAAiD,EAA0B,EAAE,CAC9F,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAE,WAAiC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpI,OAAO;QACL,IAAI;QACJ,MAAM;QACN,IAAI;QACJ,SAAS;QACT,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACxE,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACpC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;QACzB,GAAG;QACH,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QAC5D,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QACjC,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,MAAM;QACpD,gBAAgB,EAAE,KAAK,CAAC,kBAAkB,IAAI,8BAA8B;QAC5E,SAAS,EAAE,KAAK,CAAC,UAAU,IAAI,2BAA2B;QAC1D,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9J,gBAAgB,EAAE,CAAC,GAAG,OAAO,CAAC;KAC/B,CAAC;AACJ,CAAC;AAYD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAE7F,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,WAAyD;IACvG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACrI,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,CAAC;IAC/G,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,0CAA0C,EAAE,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACnH,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED,4GAA4G;AAC5G,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9K,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAChH,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,YAAY,CAC1B,IAA2B,EAC3B,QAAgB,EAChB,OAA8B,EAC9B,WAAmB,EACnB,OAAqB,EACrB,WAAyD,EACzD,aAAqB,EACrB,UAA0C,EAAE;IAE5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,UAA+B,EAAQ,EAAE;QACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACnL,KAAK,MAAM,UAAU,IAAI,OAAO;QAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAC/L,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,OAAO;QAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1D,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACvH,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/harness/mcp/errors.d.ts

@@ -0,0 +1,24 @@
+/**
+ * MCP start failures in words a person reads at a glance. The raw error (protocol text, JSON-RPC
+ * bodies, stderr) goes to the server's log and the `/mcp` detail view, never to the first screen.
+ */
+export type McpFailureKind = "needs-auth" | "failed";
+export declare class McpStartError extends Error {
+    readonly kind: McpFailureKind;
+    /** Short, human text: "command not found (npx)", "needs sign-in". */
+    readonly friendly: string;
+    /** Everything known (raw message, status, stderr tail), for `/mcp <name>` and the log. */
+    readonly detail: string;
+    constructor(server: string, kind: McpFailureKind, friendly: string, detail: string);
+}
+/** True when a start failure means "the server wants credentials" rather than "it is broken". */
+export declare function isAuthFailure(error: unknown): boolean;
+/** One short reason for a failure that is not about sign-in. */
+export declare function friendlyFailure(error: unknown, context: {
+    readonly timedOut: boolean;
+    readonly timeoutMs: number;
+    readonly command?: string | undefined;
+    readonly url?: string | undefined;
+    readonly configuredCredentials: boolean;
+}): string;
+//# sourceMappingURL=errors.d.ts.map

package/dist/harness/mcp/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/harness/mcp/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC;AAErD,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,IAAI,EAAE,cAAc,CAAC;IACrC,qEAAqE;IACrE,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,0FAA0F;IAC1F,SAAgB,MAAM,EAAE,MAAM,CAAC;gBAEZ,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO1F;AAID,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASrD;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAc9O"}