MCP Integration — Plugin Protocol

import type { Client } from '@modelcontextprotocol/sdk/client/index.js'

import type {

  Resource,

  ServerCapabilities,

} from '@modelcontextprotocol/sdk/types.js'

import { z } from 'zod/v4'

import { lazySchema } from '../../utils/lazySchema.js'

// Configuration schemas and types

export const ConfigScopeSchema = lazySchema(() =>

  z.enum([

    'local',

    'user',

    'project',

    'dynamic',

    'enterprise',

    'claudeai',

    'managed',

  ]),

)

export type ConfigScope = z.infer<ReturnType<typeof ConfigScopeSchema>>

export const TransportSchema = lazySchema(() =>

  z.enum(['stdio', 'sse', 'sse-ide', 'http', 'ws', 'sdk']),

)

export type Transport = z.infer<ReturnType<typeof TransportSchema>>

export const McpStdioServerConfigSchema = lazySchema(() =>

  z.object({

    type: z.literal('stdio').optional(), // Optional for backwards compatibility

    command: z.string().min(1, 'Command cannot be empty'),

    args: z.array(z.string()).default([]),

    env: z.record(z.string(), z.string()).optional(),

  }),

)

// Cross-App Access (XAA / SEP-990): just a per-server flag. IdP connection

// details (issuer, clientId, callbackPort) come from settings.xaaIdp — configured

// once, shared across all XAA-enabled servers. clientId/clientSecret (parent

// oauth config + keychain slot) are for the MCP server's AS.

const McpXaaConfigSchema = lazySchema(() => z.boolean())

const McpOAuthConfigSchema = lazySchema(() =>

  z.object({

    clientId: z.string().optional(),

    callbackPort: z.number().int().positive().optional(),

    authServerMetadataUrl: z

      .string()

      .url()

      .startsWith('https://', {

        message: 'authServerMetadataUrl must use https://',

      })

      .optional(),

    xaa: McpXaaConfigSchema().optional(),

  }),

)

export const McpSSEServerConfigSchema = lazySchema(() =>

  z.object({

    type: z.literal('sse'),

    url: z.string(),

    headers: z.record(z.string(), z.string()).optional(),

    headersHelper: z.string().optional(),

    oauth: McpOAuthConfigSchema().optional(),

  }),

)

// Internal-only server type for IDE extensions

export const McpSSEIDEServerConfigSchema = lazySchema(() =>

  z.object({

    type: z.literal('sse-ide'),

    url: z.string(),

    ideName: z.string(),

    ideRunningInWindows: z.boolean().optional(),

  }),

)

// Internal-only server type for IDE extensions

export const McpWebSocketIDEServerConfigSchema = lazySchema(() =>

  z.object({