wicked-crew 0.7.39 → 0.7.45

package/dist/api/mcp.d.ts

@@ -0,0 +1,282 @@
+/**
+ * The `/api/v1/mcp/*` registry routes (DES-MCP-TOOLS-001 §8; slice S2).
+ *
+ *   GET    /mcp/servers                 upstreams, their tools (class, subject, status), health,
+ *                                       auth state, and the servers discovered in CLI homes (names only)
+ *   POST   /mcp/servers/preview         probe (10 s, hardened env): tools, classes and a previewHash
+ *                                       (`kind: "rest"`, slice S5a: the tools of an OpenAPI 3 document,
+ *                                       each pinned to the base `url`; see `mcp/rest.ts`)
+ *   POST   /mcp/servers                 save: `{previewHash}` only; missing, unknown or expired → 409
+ *   PATCH  /mcp/servers/:name           `{enabled}`
+ *   DELETE /mcp/servers/:name           remove the server and the keychain secret it owns
+ *   POST   /mcp/servers/:name/test      probe again: health plus the tool diff
+ *   PATCH  /mcp/tools/:subject          `{enabled?, classOverride?}`; `:subject` is `mcp:<server>/<tool>`, URL-encoded
+ *   PUT    /mcp/servers/:name/secret    `{value}` → the OS keychain; answers `{ref, set: true}`, never the value.
+ *                                       RE-KEY only (crew#719): the server must already reference
+ *                                       `keychain:wicked-mcp/<name>`. A new server's secret rides
+ *                                       `secret` on the PREVIEW body and is written by the save.
+ *   POST   /mcp/call                    the broker (§6, slice S3): `{token, subject, args?}` from the garden
+ *                                       shim; judged, budgeted, invoked, scrubbed, output-judged, recorded
+ *   POST   /mcp/tools                   `{token}` from the garden shim's `list` (slice S4): the tools the
+ *                                       token's unit may try, judged with no arguments, recorded nowhere
+ *
+ * Slice S6 (the policy preview and the approvals, `mcp/policies.ts`):
+ *
+ *   POST   /mcp/policies/preview        `{subject?, server?, phaseRole?, seat?, mode?, phaseId?}` → each
+ *                                       tool's decision per role × seat × mode; nothing is recorded
+ *   GET    /mcp/approvals               the approved subjects, the tools that would ask, the two ledgers
+ *   POST   /mcp/approvals               `{subject}`: a server joins `MCP-FIRST-USE` excludes; a tool joins
+ *                                       that and `MCP-POSTURE-WRITE` (audited rule upserts)
+ *   DELETE /mcp/approvals/:subject      removes it from both (`:subject` URL-encoded)
+ *
+ * Slice S7 (the usage fold, `mcp/usage.ts`):
+ *
+ *   GET    /mcp/usage                   `?days=1-30&subject&seat&decision` → counts, the decision split
+ *                                       (allow / ask / deny / guard_error), error rate, p50/p95/p99,
+ *                                       per-tool, per-server, tool × seat × run, chains, per day
+ *
+ * `POST /mcp/servers/preview` also answers the matrix (`policies`); a save that changes a saved
+ * tool's schema, and a removal, withdraw the approvals that named it, BEFORE the registry changes.
+ *
+ * The secret value is in no response, log, audit entry or file (D-2); tests/mcp-registry.test.ts
+ * scans all of them, a malformed secret body included.
+ */
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import type { Actor } from '../core/types.js';
+import type { McpBroker } from '../mcp/broker.js';
+import type { McpPolicies } from '../mcp/policies.js';
+import { type McpRegistry } from '../mcp/registry.js';
+import type { McpCallRecordSource } from '../mcp/call-records.js';
+import type { AuditLog } from './audit.js';
+export declare const McpServerConfigSchema: z.ZodEffects<z.ZodObject<{
+    name: z.ZodString;
+    kind: z.ZodEnum<["mcp-stdio", "mcp-http", "rest"]>;
+    command: z.ZodOptional<z.ZodString>;
+    args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    url: z.ZodOptional<z.ZodString>;
+    auth: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        ref: z.ZodEffects<z.ZodString, string, string>;
+        env: z.ZodOptional<z.ZodString>;
+        header: z.ZodOptional<z.ZodString>;
+        prefix: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        ref: string;
+        env?: string | undefined;
+        header?: string | undefined;
+        prefix?: string | undefined;
+    }, {
+        ref: string;
+        env?: string | undefined;
+        header?: string | undefined;
+        prefix?: string | undefined;
+    }>>>;
+    openapiUrl: z.ZodOptional<z.ZodString>;
+    openapi: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnknown>, Record<string, unknown>, Record<string, unknown>>>;
+    operations: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /**
+     * (crew#719) The secret VALUE this server's keychain entry will hold. The preview is probed
+     * with it and it is held with the preview; `POST /mcp/servers` writes it to the OS store as
+     * part of the save, so the secret and the registry row commit together. Requires
+     * `auth.ref` = `keychain:wicked-mcp/<name>`. It is in no response, log, audit entry or file.
+     */
+    secret: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    kind: "mcp-stdio" | "mcp-http" | "rest";
+    url?: string | undefined;
+    auth?: {
+        ref: string;
+        env?: string | undefined;
+        header?: string | undefined;
+        prefix?: string | undefined;
+    } | null | undefined;
+    secret?: string | undefined;
+    command?: string | undefined;
+    args?: string[] | undefined;
+    operations?: string[] | undefined;
+    openapi?: Record<string, unknown> | undefined;
+    openapiUrl?: string | undefined;
+}, {
+    name: string;
+    kind: "mcp-stdio" | "mcp-http" | "rest";
+    url?: string | undefined;
+    auth?: {
+        ref: string;
+        env?: string | undefined;
+        header?: string | undefined;
+        prefix?: string | undefined;
+    } | null | undefined;
+    secret?: string | undefined;
+    command?: string | undefined;
+    args?: string[] | undefined;
+    operations?: string[] | undefined;
+    openapi?: Record<string, unknown> | undefined;
+    openapiUrl?: string | undefined;
+}>, {
+    name: string;
+    kind: "mcp-stdio" | "mcp-http" | "rest";
+    url?: string | undefined;
+    auth?: {
+        ref: string;
+        env?: string | undefined;
+        header?: string | undefined;
+        prefix?: string | undefined;
+    } | null | undefined;
+    secret?: string | undefined;
+    command?: string | undefined;
+    args?: string[] | undefined;
+    operations?: string[] | undefined;
+    openapi?: Record<string, unknown> | undefined;
+    openapiUrl?: string | undefined;
+}, {
+    name: string;
+    kind: "mcp-stdio" | "mcp-http" | "rest";
+    url?: string | undefined;
+    auth?: {
+        ref: string;
+        env?: string | undefined;
+        header?: string | undefined;
+        prefix?: string | undefined;
+    } | null | undefined;
+    secret?: string | undefined;
+    command?: string | undefined;
+    args?: string[] | undefined;
+    operations?: string[] | undefined;
+    openapi?: Record<string, unknown> | undefined;
+    openapiUrl?: string | undefined;
+}>;
+export declare const SaveMcpServerSchema: z.ZodObject<{
+    previewHash: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    previewHash?: string | undefined;
+}, {
+    previewHash?: string | undefined;
+}>;
+export declare const PatchMcpServerSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+}, {
+    enabled: boolean;
+}>;
+export declare const PatchMcpToolSchema: z.ZodEffects<z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    classOverride: z.ZodOptional<z.ZodNullable<z.ZodEnum<["read", "write", "destructive"]>>>;
+}, "strict", z.ZodTypeAny, {
+    enabled?: boolean | undefined;
+    classOverride?: "read" | "write" | "destructive" | null | undefined;
+}, {
+    enabled?: boolean | undefined;
+    classOverride?: "read" | "write" | "destructive" | null | undefined;
+}>, {
+    enabled?: boolean | undefined;
+    classOverride?: "read" | "write" | "destructive" | null | undefined;
+}, {
+    enabled?: boolean | undefined;
+    classOverride?: "read" | "write" | "destructive" | null | undefined;
+}>;
+export declare const PutMcpSecretSchema: z.ZodObject<{
+    value: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    value: string;
+}, {
+    value: string;
+}>;
+export declare const McpCallSchema: z.ZodObject<{
+    token: z.ZodString;
+    subject: z.ZodString;
+    args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strict", z.ZodTypeAny, {
+    subject: string;
+    token: string;
+    args?: Record<string, unknown> | undefined;
+}, {
+    subject: string;
+    token: string;
+    args?: Record<string, unknown> | undefined;
+}>;
+export declare const McpToolsSchema: z.ZodObject<{
+    token: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    token: string;
+}, {
+    token: string;
+}>;
+export declare const McpPolicyPreviewSchema: z.ZodEffects<z.ZodObject<{
+    subject: z.ZodOptional<z.ZodString>;
+    server: z.ZodOptional<z.ZodString>;
+    phaseRole: z.ZodOptional<z.ZodEnum<[string, ...string[]]>>;
+    seat: z.ZodOptional<z.ZodString>;
+    mode: z.ZodOptional<z.ZodEnum<[string, ...string[]]>>;
+    phaseId: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    mode?: string | undefined;
+    server?: string | undefined;
+    subject?: string | undefined;
+    seat?: string | undefined;
+    phaseId?: string | undefined;
+    phaseRole?: string | undefined;
+}, {
+    mode?: string | undefined;
+    server?: string | undefined;
+    subject?: string | undefined;
+    seat?: string | undefined;
+    phaseId?: string | undefined;
+    phaseRole?: string | undefined;
+}>, {
+    mode?: string | undefined;
+    server?: string | undefined;
+    subject?: string | undefined;
+    seat?: string | undefined;
+    phaseId?: string | undefined;
+    phaseRole?: string | undefined;
+}, {
+    mode?: string | undefined;
+    server?: string | undefined;
+    subject?: string | undefined;
+    seat?: string | undefined;
+    phaseId?: string | undefined;
+    phaseRole?: string | undefined;
+}>;
+export declare const McpApprovalSchema: z.ZodObject<{
+    subject: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    subject: string;
+}, {
+    subject: string;
+}>;
+export declare const McpUsageQuerySchema: z.ZodObject<{
+    days: z.ZodOptional<z.ZodNumber>;
+    subject: z.ZodOptional<z.ZodString>;
+    seat: z.ZodOptional<z.ZodString>;
+    decision: z.ZodOptional<z.ZodEnum<[string, ...string[]]>>;
+}, "strict", z.ZodTypeAny, {
+    subject?: string | undefined;
+    seat?: string | undefined;
+    decision?: string | undefined;
+    days?: number | undefined;
+}, {
+    subject?: string | undefined;
+    seat?: string | undefined;
+    decision?: string | undefined;
+    days?: number | undefined;
+}>;
+export interface McpRouteDeps {
+    /** Absent = a directly-driven route set with no registry seam → 503. */
+    registry?: McpRegistry;
+    /** The broker's call path (S3). Absent → `POST /mcp/call` answers 503. */
+    broker?: McpBroker;
+    /** `Core.listMcpTools` for `POST /mcp/tools` (S4), read per request. Absent → that route answers 503. */
+    toolLister?: () => ((requestJson: string) => Promise<string>) | null;
+    /** The preview and approvals (S6). Absent → those routes answer 503; the S2 routes are unchanged. */
+    policies?: McpPolicies;
+    /** The call records the usage fold reads (S7). Absent → `GET /mcp/usage` answers 503. */
+    usage?: McpCallRecordSource;
+    /** The usage window's end; tests pin it. Default `Date.now`. */
+    now?: () => number;
+    audit: Pick<AuditLog, 'record'>;
+    actorOf: (req: FastifyRequest) => Actor;
+}
+export declare function registerMcpRoutes(app: FastifyInstance, deps: McpRouteDeps): void;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/api/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/api/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAgB,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,KAAK,EAA8E,MAAM,kBAAkB,CAAC;AAE1H,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIxE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAKlE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAsB3C,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;IAc9B;;;;;OAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2CH,CAAC;AACL,eAAO,MAAM,mBAAmB;;;;;;EAA4E,CAAC;AAC7G,eAAO,MAAM,oBAAoB;;;;;;EAA8C,CAAC;AAChF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAG8F,CAAC;AAC9H,eAAO,MAAM,kBAAkB;;;;;;EAA4C,CAAC;AAE5E,eAAO,MAAM,aAAa;;;;;;;;;;;;EAMf,CAAC;AACZ,eAAO,MAAM,cAAc;;;;;;EAA2D,CAAC;AACvF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUiF,CAAC;AACrH,eAAO,MAAM,iBAAiB;;;;;;EAA6D,CAAC;AAC5F,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAOrB,CAAC;AAEZ,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,yGAAyG;IACzG,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IACrE,qGAAqG;IACrG,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,yFAAyF;IACzF,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,KAAK,CAAC;CACzC;AA0CD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAyUhF"}