systemprompt-runtime 0.20.0

Application runtime for systemprompt.io AI governance infrastructure. AppContext, lifecycle builder, extension registry, and module wiring for the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

use std::path::Path;
use systemprompt_loader::ExtensionRegistry as McpExtensionRegistry;
use systemprompt_models::mcp::McpServerType;
use systemprompt_models::{Config, ServicesConfig};
use systemprompt_traits::validation_report::ValidationError;
use systemprompt_traits::{StartupValidationReport, ValidationReport};

pub(super) fn validate_mcp_manifests(
    config: &Config,
    services_config: &ServicesConfig,
    report: &mut StartupValidationReport,
) {
    let registry = McpExtensionRegistry::build(
        Path::new(&config.system_path),
        config.is_cloud,
        &config.bin_path,
    );

    let mcp_errors = collect_manifest_errors(services_config, config.is_cloud, |binary| {
        registry
            .get_path(binary)
            .map(|_| ())
            .map_err(|e| e.to_string())
    });

    merge_mcp_errors(report, mcp_errors);
}

/// Resolve every enabled Internal MCP deployment against `resolve` and collect
/// a [`ValidationError`] for each binary whose manifest cannot be located.
///
/// External servers (reached at their endpoint) and, on cloud, `dev_only`
/// servers are skipped. `resolve` maps a deployment binary to `Ok(())` when its
/// manifest exists or `Err(reason)` otherwise; the serve boot path binds it to
/// the extension registry, tests bind a stub so the branch matrix is drivable
/// without a manifest tree.
pub fn collect_manifest_errors<F>(
    services_config: &ServicesConfig,
    is_cloud: bool,
    resolve: F,
) -> Vec<ValidationError>
where
    F: Fn(&str) -> Result<(), String>,
{
    let mut mcp_errors: Vec<ValidationError> = Vec::new();

    for (name, deployment) in &services_config.mcp_servers {
        if !deployment.enabled {
            continue;
        }
        if deployment.dev_only && is_cloud {
            continue;
        }
        // External servers carry an empty `binary` and are reached at their
        // endpoint; only Internal servers resolve to an extension manifest.
        if !matches!(deployment.server_type, McpServerType::Internal) {
            continue;
        }

        if let Err(e) = resolve(&deployment.binary) {
            mcp_errors.push(
                ValidationError::new(
                    format!("mcp_servers.{}.binary", name),
                    format!(
                        "Manifest not found for binary '{}': {}",
                        deployment.binary, e
                    ),
                )
                .with_suggestion(format!(
                    "Ensure manifest.yaml exists at extensions/mcp/{}/manifest.yaml",
                    deployment.binary
                )),
            );
        }
    }

    mcp_errors
}

/// Fold collected MCP manifest errors into `report`.
///
/// Appends to the existing `mcp` domain report when the domain-validation pass
/// already produced one and creates a fresh `mcp` domain otherwise. A no-op
/// when `mcp_errors` is empty.
pub fn merge_mcp_errors(report: &mut StartupValidationReport, mcp_errors: Vec<ValidationError>) {
    if mcp_errors.is_empty() {
        return;
    }

    if let Some(mcp_report) = report.domains.iter_mut().find(|d| d.domain == "mcp") {
        for error in mcp_errors {
            mcp_report.add_error(error);
        }
    } else {
        let mut mcp_report = ValidationReport::new("mcp");
        for error in mcp_errors {
            mcp_report.add_error(error);
        }
        report.add_domain(mcp_report);
    }
}