systemprompt-mcp 0.14.5

Native Model Context Protocol (MCP) implementation for systemprompt.io. Orchestration, per-server OAuth2, RBAC middleware, and tool-call governance — the core of the AI governance pipeline.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133

use crate::error::McpDomainResult;
use tracing::Instrument;

use crate::McpServerConfig;
use crate::services::database::state::get_binary_mtime_for_service;
use crate::services::database::{DatabaseService, ServiceInfo};
use crate::services::process::ProcessService;

pub(super) async fn detect_and_handle_orphaned_processes(
    servers: &[McpServerConfig],
    database: &DatabaseService,
) -> McpDomainResult<usize> {
    let span = systemprompt_logging::SystemSpan::new("mcp_orchestrator");
    async move {
        let mut killed = 0;
        for server in servers {
            if kill_orphaned_process(server, database).await? {
                killed += 1;
            }
        }
        Ok(killed)
    }
    .instrument(span.into())
    .await
}

async fn kill_orphaned_process(
    server: &McpServerConfig,
    database: &DatabaseService,
) -> McpDomainResult<bool> {
    let Some(orphaned_pid) =
        ProcessService::find_process_on_port_with_name(server.port, &server.name)?
    else {
        return Ok(false);
    };

    if database.get_service_by_name(&server.name).await?.is_some() {
        return Ok(false);
    }

    tracing::info!(
        service = %server.name,
        pid = orphaned_pid,
        port = server.port,
        "Found orphaned process"
    );

    ProcessService::terminate_gracefully_verified(orphaned_pid, &server.name).await?;

    tracing::info!(
        service_name = %server.name,
        pid = orphaned_pid,
        port = server.port,
        "Killed orphaned MCP process, will restart fresh"
    );

    Ok(true)
}

pub(super) async fn detect_and_handle_stale_binaries(
    servers: &[McpServerConfig],
    database: &DatabaseService,
) -> McpDomainResult<usize> {
    let span = systemprompt_logging::SystemSpan::new("mcp_orchestrator");
    async move {
        let mut restarted = 0;
        for server in servers {
            if restart_stale_binary(server, database).await? {
                restarted += 1;
            }
        }
        Ok(restarted)
    }
    .instrument(span.into())
    .await
}

async fn restart_stale_binary(
    server: &McpServerConfig,
    database: &DatabaseService,
) -> McpDomainResult<bool> {
    let service_info = match database.get_service_by_name(&server.name).await? {
        Some(info) if info.status == "running" => info,
        _ => return Ok(false),
    };

    let Some((stored_mtime, current_mtime)) =
        get_stale_binary_mtimes(database.app_paths(), &server.name, &service_info)
    else {
        return Ok(false);
    };

    tracing::info!(
        service = %server.name,
        stored_mtime = stored_mtime,
        current_mtime = current_mtime,
        "Binary rebuilt, restarting"
    );

    kill_and_unregister(server, database, &service_info).await?;

    tracing::info!(
        service_name = %server.name,
        pid = ?service_info.pid,
        stored_mtime = stored_mtime,
        current_mtime = current_mtime,
        "Killed stale binary process, will restart with new binary"
    );

    Ok(true)
}

fn get_stale_binary_mtimes(
    paths: &systemprompt_models::AppPaths,
    name: &str,
    service_info: &ServiceInfo,
) -> Option<(i64, i64)> {
    let stored_mtime = service_info.binary_mtime?;
    let current_mtime = get_binary_mtime_for_service(paths, name)?;

    (current_mtime != stored_mtime).then_some((stored_mtime, current_mtime))
}

async fn kill_and_unregister(
    server: &McpServerConfig,
    database: &DatabaseService,
    service_info: &ServiceInfo,
) -> McpDomainResult<()> {
    if let Some(pid) = service_info.pid {
        ProcessService::terminate_gracefully_verified(pid as u32, &server.name).await?;
    }
    database.unregister_service(&server.name).await
}