npxc 0.2.0

Sandboxed npm execution for MCP servers via Apple container
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115

use std::collections::HashMap;

use super::{
    global::NpxcConfig,
    package::{MountConfig, PackageConfig, StorageConfig},
};

/// The fully-resolved, ready-to-use configuration for a single invocation.
///
/// Produced by [`merge`] from a [`NpxcConfig`] and an optional
/// [`PackageConfig`].  All values are concrete strings — no more `Option`
/// indirection for fields that have a global default.
#[derive(Debug, Clone)]
pub struct EffectiveConfig {
    // ── Image / runtime ──────────────────────────────────────────────────────
    pub node_image: String,
    pub container_cli: String,
    pub network: String,
    pub memory: String,
    pub cpus: String,
    pub mount_mode: String,
    pub log_level: String,

    // ── Path-resolution strategies ───────────────────────────────────────────
    pub strategies: Vec<String>,
    pub heuristic_absolute_prefix: bool,
    pub heuristic_home_prefix: bool,
    pub heuristic_uri_prefix: Vec<String>,

    // ── Per-package fields (empty / None when no package config exists) ──────
    /// Pinned version from the package config file (before CLI-spec override).
    pub version: Option<String>,
    /// Tool → path-argument names mapping from the package config.
    pub path_arguments: HashMap<String, Vec<String>>,
    /// Tool → non-path-argument names mapping from the package config.
    pub non_path_arguments: HashMap<String, Vec<String>>,

    /// Literal environment variables to inject into the container (`-e K=V`).
    pub env: HashMap<String, String>,
    /// Names of environment variables to forward from npxc's process env
    /// into the container (`-e K`).
    pub env_passthrough: Vec<String>,

    /// Persistent and writable storage options from the package config.
    pub storage: Option<StorageConfig>,

    /// Extra filesystem mounts from the package config.
    pub mounts: Vec<MountConfig>,
}

/// Merge a global config with optional per-package overrides into a single
/// [`EffectiveConfig`].
///
/// Resolution order for resource fields:
/// 1. Package `[runtime]` override (if present and not `None`)
/// 2. Global `[defaults]`
#[must_use]
pub fn merge(global: &NpxcConfig, pkg: Option<&PackageConfig>) -> EffectiveConfig {
    let d = &global.defaults;
    let p = &global.paths;

    // Resolve memory / cpus / network: package runtime wins over global defaults.
    let (network, memory, cpus) = match pkg.and_then(|c| c.runtime.as_ref()) {
        Some(rt) => (
            rt.network.clone().unwrap_or_else(|| d.network.clone()),
            rt.memory.clone().unwrap_or_else(|| d.memory.clone()),
            rt.cpus.clone().unwrap_or_else(|| d.cpus.clone()),
        ),
        None => (d.network.clone(), d.memory.clone(), d.cpus.clone()),
    };

    // Pull per-package fields (defaults are empty/None when no config exists).
    let (version, path_arguments, non_path_arguments, env, env_passthrough, storage, mounts) =
        match pkg {
            Some(c) => (
                c.version.clone(),
                c.path_arguments.clone(),
                c.non_path_arguments.clone(),
                c.env.clone(),
                c.env_passthrough.clone(),
                c.storage.clone(),
                c.mounts.clone(),
            ),
            None => (
                None,
                HashMap::new(),
                HashMap::new(),
                HashMap::new(),
                Vec::new(),
                None,
                Vec::new(),
            ),
        };

    EffectiveConfig {
        node_image: d.node_image.clone(),
        container_cli: d.container_cli.clone(),
        network,
        memory,
        cpus,
        mount_mode: d.mount_mode.clone(),
        log_level: d.log_level.clone(),
        strategies: p.strategies.clone(),
        heuristic_absolute_prefix: p.heuristic.absolute_prefix,
        heuristic_home_prefix: p.heuristic.home_prefix,
        heuristic_uri_prefix: p.heuristic.uri_prefix.clone(),
        version,
        path_arguments,
        non_path_arguments,
        env,
        env_passthrough,
        storage,
        mounts,
    }
}