mcpbroker

type Broker interface {
	Name() string
	Call(ctx context.Context, req Request) (Result, error)
}

type Registry struct {
	Path string
}

type Request struct {
	Island string
	Agent  string
	Server string
	Method string
	Params json.RawMessage
}

type Result struct {
	Output  json.RawMessage
	IsError bool
}

type ServerSpec struct {
	// Name is the handle a grant and a call address. Validated as a single safe
	// token (see ValidateServerName) — no separators, bounded length.
	Name string `toml:"name"`
	// Transport is the MCP transport. Only "stdio" in V1 (the dominant transport,
	// and the one with no network surface — the broker spawns the program and
	// speaks JSON-RPC over its pipes). Empty defaults to "stdio".
	Transport string `toml:"transport,omitempty"`
	// Command is the server program. The operator vouches for it by listing it in
	// the trust-checked registry; the broker execs it with a fixed argv and never
	// through a shell.
	Command string `toml:"command"`
	// Args is the fixed argv passed to Command. Never interpolated with request
	// data — request params travel as JSON-RPC on stdin.
	Args []string `toml:"args,omitempty"`
	// Env is an explicit "K=V" passthrough (e.g. an API key the server needs).
	// Only these — plus a minimal PATH and the island identity — reach the
	// process; the daemon's own environment is never inherited.
	Env []string `toml:"env,omitempty"`
}

type StdioBroker struct {
	Registry  *Registry
	Timeout   time.Duration // 0 → defaultCallTimeout
	MaxOutput int64         // 0 → defaultMaxOutput
}