19#include <nlohmann/json.hpp>
34 const std::filesystem::path& project_dir)
35 : permissions_(permissions.allow, permissions.deny),
36 project_dir_(project_dir) {}
48 const std::vector<std::string>& tier_names,
49 const std::string& data_dir) {
52 tier_names, data_dir));
60 project_dir_, data_dir));
64 project_dir_, data_dir));
68 project_dir_, data_dir));
82 std::unique_ptr<MCPServerBase> server) {
83 auto name = server->name();
84 if (servers_.count(name) > 0) {
85 logger->warn(
"Server '{}' already registered — replacing",
88 servers_[name] = std::move(server);
89 logger->info(
"Registered server: {}", name);
98 logger->info(
"Initializing {} in-process MCP servers",
100 for (
auto& [name, server] : servers_) {
101 logger->info(
"Server '{}' ready", name);
104 initialize_external_servers();
114 auto all = nlohmann::json::array();
117 for (
const auto& [name, server] : servers_) {
118 auto tools_json = server->list_tools();
119 auto tools = nlohmann::json::parse(tools_json);
120 for (
auto& tool : tools) {
121 std::string orig_name = tool[
"name"];
122 tool[
"name"] = name +
"." + orig_name;
123 all.push_back(std::move(tool));
128 for (
const auto& [name, client] : external_clients_) {
129 if (!client->is_connected()) {
132 auto tools_json = client->list_tools();
133 auto tools = nlohmann::json::parse(tools_json);
134 for (
auto& tool : tools) {
135 all.push_back(std::move(tool));
139 logger->info(
"Tool list: {} tools from {} server(s) + {} external",
140 all.size(), servers_.size(),
141 external_clients_.size());
154 const std::string& tool_name,
155 const std::string& args_json) {
158 auto pattern = tool_name +
":" + args_to_pattern(args_json);
159 if (permissions_.
is_denied(tool_name, pattern)) {
160 logger->warn(
"Permission denied: {}", tool_name);
162 resp[
"result"] =
"Error: Permission denied for " + tool_name;
163 resp[
"directives"] = nlohmann::json::array();
167 return route_tool_call(tool_name, args_json);
178 auto it = servers_.find(name);
179 return (it != servers_.end()) ? it->second.get() :
nullptr;
189 std::vector<std::string> names;
190 for (
const auto& [name, _] : servers_) {
191 names.push_back(name);
193 for (
const auto& [name, _] : external_clients_) {
194 names.push_back(name);
207 const std::string& tool_name)
const {
208 auto prefix = extract_prefix(tool_name);
209 auto local_name = extract_local_name(tool_name);
210 auto it = servers_.find(prefix);
211 if (it != servers_.end()) {
212 auto* tool = it->second->registry().get_tool(local_name);
213 if (tool !=
nullptr) {
214 return tool->definition().input_schema;
228std::string ServerManager::route_tool_call(
229 const std::string& tool_name,
230 const std::string& args_json) {
232 auto prefix = extract_prefix(tool_name);
233 auto local_name = extract_local_name(tool_name);
236 auto it = servers_.find(prefix);
237 if (it != servers_.end()) {
238 return it->second->execute(local_name, args_json);
242 auto ext_it = external_clients_.find(prefix);
243 if (ext_it != external_clients_.end()) {
244 return route_external_call(
245 ext_it->second.get(), tool_name, local_name, args_json);
248 logger->warn(
"Unknown server: {}", prefix);
250 resp[
"result"] =
"Error: Unknown server '" + prefix +
"'";
251 resp[
"directives"] = nlohmann::json::array();
265std::string ServerManager::route_external_call(
266 ExternalMCPClient* client,
267 const std::string& tool_name,
268 const std::string& local_name,
269 const std::string& args_json) {
271 if (!client->is_connected()) {
272 auto prefix = extract_prefix(tool_name);
273 return disconnected_error(tool_name, prefix);
275 return client->execute(local_name, args_json);
287 const std::string& tool_name,
288 const std::string& args_json)
const {
289 auto pattern = tool_name +
":" + args_to_pattern(args_json);
290 return permissions_.
is_allowed(tool_name, pattern);
302 const std::string& tool_name,
303 const std::string& args_json)
const {
304 auto prefix = extract_prefix(tool_name);
305 auto it = servers_.find(prefix);
306 if (it != servers_.end()) {
307 return it->second->get_permission_pattern(
308 tool_name, args_json);
321 const std::string& tool_name)
const {
322 auto prefix = extract_prefix(tool_name);
323 auto it = servers_.find(prefix);
324 if (it != servers_.end()) {
325 auto local = extract_local_name(tool_name);
326 return it->second->skip_duplicate_check(local);
339 const std::string& tool_name)
const {
340 auto prefix = extract_prefix(tool_name);
341 auto it = servers_.find(prefix);
342 if (it != servers_.end()) {
343 auto local = extract_local_name(tool_name);
344 auto* tool = it->second->registry().get_tool(local);
345 if (tool !=
nullptr) {
346 return tool->required_access_level();
360 const std::string& pattern,
bool allow) {
371 if (health_monitor_) {
372 health_monitor_->stop();
376 for (
auto& [name, client] : external_clients_) {
377 client->disconnect();
379 external_clients_.clear();
382 logger->info(
"Shutting down {} MCP servers", servers_.size());
384 server_info_.clear();
394std::string ServerManager::extract_prefix(
395 const std::string& tool_name) {
396 auto dot = tool_name.find(
'.');
397 if (dot == std::string::npos) {
400 return tool_name.substr(0, dot);
410std::string ServerManager::extract_local_name(
411 const std::string& tool_name) {
412 auto dot = tool_name.find(
'.');
413 if (dot == std::string::npos) {
416 return tool_name.substr(dot + 1);
426std::string ServerManager::args_to_pattern(
427 const std::string& args_json) {
428 if (args_json.empty() || args_json ==
"{}") {
432 auto j = nlohmann::json::parse(args_json);
433 if (j.is_object() && !j.empty()) {
434 auto first = j.begin();
435 if (first->is_string()) {
436 return first->get<std::string>();
454 mcp_config_ = config;
468 for (
auto& [_, client] : external_clients_) {
469 if (client) { client->interrupt(); }
478void ServerManager::initialize_external_servers() {
480 mcp_json_discovery_ = std::make_unique<MCPJsonDiscovery>(
484 for (
const auto& [name, entry] : mcp_config_.external_servers) {
485 auto client = create_external_client(name, entry);
486 connect_and_register_external(name, std::move(client),
492 std::set<std::string> existing;
493 for (
const auto& [name, _] : servers_) {
494 existing.insert(name);
496 for (
const auto& [name, _] : external_clients_) {
497 existing.insert(name);
500 auto discovered = mcp_json_discovery_->discover(existing);
501 for (
const auto& cfg : discovered) {
502 auto client = create_external_client(cfg);
503 connect_and_register_external(cfg.name, std::move(client),
509 health_monitor_ = std::make_unique<HealthMonitor>(
513 for (
auto& [name, client] : external_clients_) {
514 health_monitor_->watch(name, client.get());
516 if (!external_clients_.empty()) {
517 health_monitor_->start();
520 logger->info(
"External MCP: {} servers connected",
521 external_clients_.size());
534void ServerManager::connect_and_register_external(
535 const std::string& name,
536 std::unique_ptr<ExternalMCPClient> client,
537 const std::string& source,
538 const std::string& url,
539 const std::string& command) {
543 info.transport = url.empty() ?
"stdio" :
"sse";
545 info.command = command;
546 info.source = source;
547 info.status =
"disconnected";
549 bool ok = client->connect();
551 info.status =
"connected";
552 info.connected_at = std::chrono::system_clock::now();
554 info.status =
"error";
555 logger->error(
"Failed to connect external server '{}'", name);
558 server_info_[name] = info;
559 external_clients_[name] = std::move(client);
573std::unique_ptr<Transport> ServerManager::make_transport(
574 const ExternalServerConfig& spec) {
575 bool prefer_sse = (spec.transport ==
"sse")
576 || (!spec.url.empty() && spec.command.empty());
578 return std::make_unique<SSETransport>(spec.url);
584 return std::make_unique<StdioTransport>(
585 spec.name, spec.command, spec.args, spec.env,
601 if (servers_.count(spec.
name) > 0 ||
602 external_clients_.count(spec.
name) > 0) {
603 logger->warn(
"Server '{}' already registered", spec.
name);
607 auto client = std::make_unique<ExternalMCPClient>(
608 spec.
name, make_transport(spec));
610 connect_and_register_external(spec.
name, std::move(client),
613 auto& registered = external_clients_[spec.
name];
614 if (health_monitor_) {
615 health_monitor_->watch(spec.
name, registered.get());
619 std::vector<std::string> tool_names;
620 auto tools_json = registered->list_tools();
622 auto tools = nlohmann::json::parse(tools_json);
623 for (
const auto& t : tools) {
624 tool_names.push_back(t[
"name"].get<std::string>());
641 const std::string& name,
642 const std::string& command,
643 const std::vector<std::string>& args,
644 const std::string& url) {
660 const std::string& name) {
662 auto it = external_clients_.find(name);
663 if (it == external_clients_.end()) {
664 logger->warn(
"External server '{}' not found", name);
668 if (health_monitor_) {
669 health_monitor_->unwatch(name);
672 it->second->disconnect();
673 external_clients_.erase(it);
674 server_info_.erase(name);
676 logger->info(
"External server '{}' disconnected", name);
685std::map<std::string, ServerInfo>
687 auto result = server_info_;
690 for (
const auto& [name, _] : servers_) {
691 if (result.count(name) == 0) {
694 info.transport =
"in_process";
695 info.status =
"connected";
696 info.source =
"builtin";
709 if (health_monitor_) {
710 health_monitor_->process_events();
728std::unique_ptr<ExternalMCPClient>
729ServerManager::create_external_client(
730 const std::string& name,
736 spec.
env = std::map<std::string, std::string>(
737 entry.
env.begin(), entry.
env.end());
740 return std::make_unique<ExternalMCPClient>(
741 name, make_transport(spec));
754std::unique_ptr<ExternalMCPClient>
755ServerManager::create_external_client(
756 const ExternalServerConfig& config) {
757 return std::make_unique<ExternalMCPClient>(
758 config.name, make_transport(config));
769std::string ServerManager::disconnected_error(
770 const std::string& tool_name,
771 const std::string& server_name) {
774 resp[
"result"] =
"Server '" + server_name +
775 "' is disconnected. Tool '" + tool_name +
776 "' is unavailable. Use a different approach "
777 "or try again later.";
778 resp[
"directives"] = nlohmann::json::array();
779 resp[
"is_error"] =
true;
Bash MCP server — shell command execution.
Concrete base class for MCP servers (80% logic).
bool is_denied(const std::string &tool_name, const std::string &pattern) const
Check if a tool call is explicitly denied.
void add_permission(const std::string &pattern, bool allow)
Add a permission pattern at runtime.
bool is_allowed(const std::string &tool_name, const std::string &pattern) const
Check if a tool call is explicitly allowed (skip prompting).
std::vector< std::string > connect_external_server(const ExternalServerConfig &spec)
Connect to an external MCP server at runtime (canonical spec-based API).
MCPAccessLevel get_required_access_level(const std::string &tool_name) const
Get the required access level for a tool.
bool is_explicitly_allowed(const std::string &tool_name, const std::string &args_json) const
Check if tool is explicitly allowed (skip prompting).
std::map< std::string, ServerInfo > list_server_info() const
Get snapshot of all servers with current status.
std::vector< std::string > server_names() const
List registered server names (in-process + external).
void process_health_events()
Process pending health events (call from engine loop).
MCPServerBase * get_server(const std::string &name) const
Get a registered in-process server by name.
std::string list_tools() const
List all tools from all connected servers.
ServerManager(const PermissionsConfig &permissions, const std::filesystem::path &project_dir)
Construct with permission config and project directory.
void register_server(std::unique_ptr< MCPServerBase > server)
Register a built-in server (in-process, ownership transferred).
void add_permission(const std::string &pattern, bool allow)
Add a runtime permission pattern.
bool skip_duplicate_check(const std::string &tool_name) const
Check if tool should skip duplicate detection.
void init_builtins(const MCPConfig &mcp_config, const std::vector< std::string > &tier_names, const std::string &data_dir)
Register built-in servers based on config flags.
std::string get_permission_pattern(const std::string &tool_name, const std::string &args_json) const
Generate permission pattern via server class delegation.
std::string get_tool_schema(const std::string &tool_name) const
Get the JSON Schema for a tool's input parameters.
void interrupt_external_tools()
Abort in-flight tool calls across every external MCP client.
std::string execute(const std::string &tool_name, const std::string &args_json)
Execute a tool call via the appropriate server.
void set_mcp_config(const MCPConfig &config)
Set MCP config for external server initialization.
void shutdown()
Shutdown all servers (in-process + external).
void disconnect_external_server(const std::string &name)
Disconnect and remove an external server.
void initialize()
Initialize all registered servers.
Diagnostics MCP server — LSP client for code diagnostics.
Entropic MCP server — engine-level tools including introspection.
Filesystem MCP server — read/write/edit/glob/grep/list_directory.
Git MCP server — version control operations.
spdlog initialization and logger access.
ENTROPIC_EXPORT std::shared_ptr< spdlog::logger > get(const std::string &name)
Get or create a named logger.
Activate model on GPU (WARM → ACTIVE).
@ ok
Tool dispatched, returned non-empty content.
MCPAccessLevel
MCP tool access level for per-identity authorization.
@ WRITE
Read + write operations (e.g., write_file, execute)
MCP server lifecycle management and tool routing.
Parsed server entry from .mcp.json.
std::string name
Server name.
std::map< std::string, std::string > env
Stdio env vars.
std::string command
Stdio command (empty for SSE)
std::string transport
"stdio" | "sse"
std::vector< std::string > args
Stdio command args.
std::string url
SSE URL (empty for stdio)
Configuration for a single external MCP server entry.
std::string command
Stdio command (empty for SSE)
std::vector< std::string > args
Stdio command arguments.
std::string url
SSE endpoint URL (empty for stdio)
std::unordered_map< std::string, std::string > env
Stdio environment variables.
MCP server configuration.
ReconnectConfig reconnect
Reconnection backoff policy.
bool enable_entropic
Enable entropic internal server (handoff, delegate, pipeline)
FilesystemConfig filesystem
Filesystem server config.
bool enable_filesystem
Enable filesystem server.
bool enable_git
Enable git server.
bool enable_diagnostics
Enable diagnostics server.
uint32_t health_check_interval_ms
Ping interval (0 = disabled)
bool enable_bash
Enable bash server.
bool enable_web
Enable web server.
Tool permission configuration.
Runtime state of a connected MCP server.
SSE transport for external MCP servers.
Stdio transport for external MCP servers.
Web MCP server — web_fetch + web_search.