use std::sync::{Arc, OnceLock};
use rmcp::model::{Prompt, Tool, ToolAnnotations};
use schemars::schema_for;
use serde_json::Value;
use super::outcomes::{CodeMapToolResultEnvelope, ToolResultEnvelope};
use crate::tool_policy::ToolPolicy;
use crate::types::{
BashCommand, CodeMap, ContextSave, FileWriteOrEdit, Initialize, MultiFileEdit, ReadFiles,
ReadImage, UndoEdit,
};
/// Convert a schemars schema into the MCP tool input-schema representation.
pub(super) fn schema_to_input_schema<T: schemars::JsonSchema>(
) -> Arc<serde_json::Map<String, Value>> {
let schema = schema_for!(T);
let mut value = serde_json::to_value(schema).unwrap_or(Value::Object(serde_json::Map::new()));
// schemars stamps a redundant `title` (usually just the type/field name) on
// every schema node; the LLM pays tokens for it on every tool call for zero
// signal. Strip it — context-aware, so a user data field literally named
// "title" is never touched.
strip_schema_titles(&mut value);
strip_unsupported_schema_formats(&mut value);
match value {
Value::Object(map) => Arc::new(map),
_ => Arc::new(serde_json::Map::new()),
}
}
/// Remove integer formats that are valid JSON Schema annotations but rejected
/// by some MCP clients (notably Claude Code's schema compiler).
fn strip_unsupported_schema_formats(value: &mut Value) {
match value {
Value::Object(map) => {
let unsupported_integer_format =
map.get("format").and_then(Value::as_str).is_some_and(|format| {
format.starts_with("uint")
|| matches!(
format,
"int8" | "int16" | "int32" | "int64" | "isize" | "usize"
)
});
if unsupported_integer_format {
map.remove("format");
}
for child in map.values_mut() {
strip_unsupported_schema_formats(child);
}
}
Value::Array(items) => {
for item in items {
strip_unsupported_schema_formats(item);
}
}
_ => {}
}
}
/// Recursively remove `title` keys from JSON-Schema nodes only.
///
/// A dict is treated as a schema node when it carries a schema-shaped key
/// (`type`/`$ref`/`properties`/`items`/`enum`/`const`/`anyOf`/`allOf`/`oneOf`/
/// `additionalProperties`). This mirrors wcgw's `recursive_purge_dict_key` so a
/// property whose *name* is "title" keeps its value.
pub(super) fn strip_schema_titles(value: &mut Value) {
match value {
Value::Object(map) => {
const SCHEMA_KEYS: &[&str] = &[
"type",
"$ref",
"properties",
"items",
"additionalProperties",
"enum",
"const",
"anyOf",
"allOf",
"oneOf",
];
if SCHEMA_KEYS.iter().any(|key| map.contains_key(*key)) {
map.remove("title");
}
for child in map.values_mut() {
strip_schema_titles(child);
}
}
Value::Array(items) => {
for item in items {
strip_schema_titles(item);
}
}
_ => {}
}
}
fn mcp_tool<T: schemars::JsonSchema>(
name: &'static str,
description: &'static str,
annotations: ToolAnnotations,
) -> Tool {
Tool::new(name, description, schema_to_input_schema::<T>()).with_annotations(annotations)
}
const WORKSPACE_ROOT_DESCRIPTION: &str =
"Exact canonical workspace_root returned by Initialize. Before every call, confirm it matches the project in the user's current task; if uncertain, Initialize that project. Use it only with the thread_id returned by the same Initialize call. It identifies the project session and is not a filesystem sandbox: target paths may be outside it when WINX_ALLOW_PATHS and the active mode permit. Never infer it from a target file path.";
fn with_workspace_binding(
schema: Arc<serde_json::Map<String, Value>>,
) -> Arc<serde_json::Map<String, Value>> {
let mut schema = Arc::unwrap_or_clone(schema);
let properties = schema
.entry("properties".to_string())
.or_insert_with(|| Value::Object(serde_json::Map::new()));
if let Value::Object(properties) = properties {
properties.insert(
"workspace_root".to_string(),
serde_json::json!({
"type": "string",
"minLength": 1,
"description": WORKSPACE_ROOT_DESCRIPTION,
}),
);
if let Some(Value::Object(thread_id)) = properties.get_mut("thread_id") {
thread_id.insert(
"description".to_string(),
Value::String(
"Exact thread_id returned by the same Initialize call as workspace_root. Select it only after confirming workspace_root matches the user's current project. Never borrow it from another chat or project."
.to_string(),
),
);
}
}
let required = schema.entry("required".to_string()).or_insert_with(|| Value::Array(Vec::new()));
if let Value::Array(required) = required {
for field in ["thread_id", "workspace_root"] {
if !required.iter().any(|item| item.as_str() == Some(field)) {
required.push(Value::String(field.to_string()));
}
}
}
Arc::new(schema)
}
fn mcp_session_tool<T: schemars::JsonSchema>(
name: &'static str,
description: &'static str,
annotations: ToolAnnotations,
) -> Tool {
Tool::new(name, description, with_workspace_binding(schema_to_input_schema::<T>()))
.with_annotations(annotations)
}
/// `wait_policy` belongs to the MCP adapter rather than the stable public
/// `BashCommand` Rust struct. Inject it only into the advertised wire schema so
/// existing library callers do not acquire a new required struct field.
fn bash_command_input_schema() -> Arc<serde_json::Map<String, Value>> {
let mut schema = (*schema_to_input_schema::<BashCommand>()).clone();
let properties = schema
.entry("properties".to_string())
.or_insert_with(|| Value::Object(serde_json::Map::new()));
if let Value::Object(properties) = properties {
if let Some(Value::Object(wait)) = properties.get_mut("wait_for_seconds") {
wait.insert(
"description".to_string(),
Value::String(
"Requested inline wait in seconds. Adaptive defaults to 15 seconds without Tasks and uses a short promotion window with Tasks; return_early is capped at 5 seconds; the synchronous until_complete fallback uses 60 seconds. The selected wait_policy always supplies the final cap."
.to_string(),
),
);
}
properties.insert(
"wait_policy".to_string(),
serde_json::json!({
"type": "string",
"enum": ["adaptive", "return_early", "until_complete"],
"default": "adaptive",
"description": "Execution delivery policy. Adaptive is bounded inline and may promote a foreground Command to an MCP Task; return_early never creates a Task; until_complete is valid only for a foreground Command, creates a Task when safely supported, and otherwise waits synchronously for at most 60 seconds."
}),
);
}
with_workspace_binding(Arc::new(schema))
}
/// Optional edit verification is implemented by the MCP adapter so the stable
/// public Rust edit structs remain source-compatible for library callers.
fn edit_input_schema<T: schemars::JsonSchema>() -> Arc<serde_json::Map<String, Value>> {
let mut schema = (*schema_to_input_schema::<T>()).clone();
let properties = schema
.entry("properties".to_string())
.or_insert_with(|| Value::Object(serde_json::Map::new()));
if let Value::Object(properties) = properties {
properties.insert(
"verify_command".to_string(),
serde_json::json!({
"type": "string",
"minLength": 1,
"description": "Optional finite foreground shell command to run immediately after a successful edit. Compose related fail-fast checks with &&. The edit remains applied if verification exits non-zero. Uses the same mode command policy as BashCommand."
}),
);
properties.insert(
"verify_wait_for_seconds".to_string(),
serde_json::json!({
"type": "number",
"minimum": 0,
"maximum": 60,
"default": 15,
"description": "Inline wait for verify_command. If it is still running, the result supplies a BashCommand status_check next action."
}),
);
}
with_workspace_binding(Arc::new(schema))
}
fn with_output_schema<T: schemars::JsonSchema>(mut tool: Tool) -> Tool {
tool.output_schema = Some(schema_to_input_schema::<T>());
tool
}
const INITIALIZE_DESCRIPTION: &str =
"Open one project workspace before stateful tools, unless MCP Roots already did so. Set any_workspace_path from the user's project or file and normally use first_call + wcgw. Preserve the returned thread_id/workspace_root pair in this conversation; workspace_root is identity, not a path sandbox. Do not call Initialize again with a valid pair: use user_asked_mode_change only for an explicit mode change and reset_shell only after repeated shell failure. A different project identity requires a new conversation. temporary_artifact_dir is the only location for non-canonical derived helpers.";
const BASH_COMMAND_DESCRIPTION: &str =
"Run shell commands, tests, builds, servers, and TUIs after Initialize. Combine related finite checks with &&. adaptive is default; until_complete is only for a finite foreground command, and return_early gives prompt control. Incompatible policies return corrected next_action arguments. For running results, wait retry_after_ms and execute next_action/status_check; never resubmit the command. Read dropped_output_file only when output_truncated history matters. Use background and interactive actions for long-lived work, and file tools for canonical reads/edits. Keep shell-derived helpers under $WINX_TEMP_DIR, reuse stable names, and never create CodeMap-only carriers. Winx audits its budget after Bash; explicitly clean obsolete helpers when directed.";
const READ_FILES_DESCRIPTION: &str =
"Read exact canonical text from one or more absolute paths and record visible coverage required by edit tools. Prefer this over cat/head/tail. Use :start-end suffixes for targeted ranges; omitted bounds are allowed. Token truncation never records unseen lines. Use ReadImage for images and do not read binary files.";
const FILE_WRITE_OR_EDIT_DESCRIPTION: &str =
"Edit one previously read file; use MultiFileEdit across files. For <=50% change, send exact concise SEARCH/REPLACE blocks and optional @line anchors; for larger changes, read and provide the complete file. On needs_read, stale, missing, or ambiguous results, perform required_reads/next_action before a corrected retry. Temporary helpers must use temporary_artifact_dir. verify_command runs one bounded post-edit check; a failed check does not roll back the edit.";
const MULTI_FILE_EDIT_DESCRIPTION: &str =
"Validate and edit 2+ previously read files as one batch. Search matching is computed before writing, so validation failure writes nothing; a rare filesystem failure reports any already-written files. Entries use FileWriteOrEdit semantics and paths must be unique. Optional verify_command runs after commit and never rolls edits back.";
const UNDO_EDIT_DESCRIPTION: &str =
"Restore one file to its previous Winx edit checkpoint in this session. Repeated calls walk backward per file. Undo is refused after an external change and cannot remove a newly created file.";
const CONTEXT_SAVE_DESCRIPTION: &str =
"Save a concise description and selected file/glob contents as one context artifact. Use the user's id when provided, otherwise a short unique id.";
const CODE_MAP_DESCRIPTION: &str =
"Navigate syntax-aware code structure in 13 languages. outline on a file returns definitions; on a directory it returns a query/activity-ranked, byte-budgeted page. Pass a concise query and continue truncated maps with next_cursor using the same path/query. references requires an exact name and returns definitions before uses. Results are gitignore-aware and contain symbols, not source. For exact text or unsupported languages, use the structured fallback to ReadFiles; plain-text search belongs to rg via BashCommand; never transform source solely to make CodeMap parse it or turn command output into a carrier. A genuinely useful derived helper must be one existing file in temporary_artifact_dir returned by Initialize; reuse stable names because helper maps have smaller per-response, unique-file, and aggregate-call budgets while canonical maps remain unrestricted.";
static WINX_TOOLS: OnceLock<Vec<Tool>> = OnceLock::new();
static WINX_PROMPTS: OnceLock<Vec<Prompt>> = OnceLock::new();
pub(super) fn winx_tools() -> Vec<Tool> {
WINX_TOOLS.get_or_init(build_winx_tools).clone()
}
pub(super) fn winx_tools_for_policy(policy: ToolPolicy) -> Vec<Tool> {
WINX_TOOLS
.get_or_init(build_winx_tools)
.iter()
.filter(|tool| policy.allows(tool.name.as_ref()))
.cloned()
.collect()
}
fn build_winx_tools() -> Vec<Tool> {
vec![
with_output_schema::<ToolResultEnvelope>(mcp_tool::<Initialize>(
"Initialize",
INITIALIZE_DESCRIPTION,
ToolAnnotations::new().read_only(true).open_world(false),
)),
with_output_schema::<ToolResultEnvelope>(
Tool::new("BashCommand", BASH_COMMAND_DESCRIPTION, bash_command_input_schema())
.with_annotations(ToolAnnotations::new().destructive(true).open_world(true)),
),
with_output_schema::<ToolResultEnvelope>(mcp_session_tool::<ReadFiles>(
"ReadFiles",
READ_FILES_DESCRIPTION,
ToolAnnotations::new().read_only(true).open_world(false),
)),
with_output_schema::<ToolResultEnvelope>(
Tool::new(
"FileWriteOrEdit",
FILE_WRITE_OR_EDIT_DESCRIPTION,
edit_input_schema::<FileWriteOrEdit>(),
)
.with_annotations(ToolAnnotations::new().destructive(true).open_world(true)),
),
with_output_schema::<ToolResultEnvelope>(
Tool::new(
"MultiFileEdit",
MULTI_FILE_EDIT_DESCRIPTION,
edit_input_schema::<MultiFileEdit>(),
)
.with_annotations(ToolAnnotations::new().destructive(true).open_world(true)),
),
with_output_schema::<ToolResultEnvelope>(mcp_session_tool::<UndoEdit>(
"UndoEdit",
UNDO_EDIT_DESCRIPTION,
ToolAnnotations::new().destructive(true).open_world(false),
)),
with_output_schema::<ToolResultEnvelope>(mcp_session_tool::<ContextSave>(
"ContextSave",
CONTEXT_SAVE_DESCRIPTION,
ToolAnnotations::new().destructive(false).open_world(false),
)),
with_output_schema::<ToolResultEnvelope>(mcp_session_tool::<ReadImage>(
"ReadImage",
"Read validated JPEG/PNG/GIF/WebP as native MCP image content. Large images are bounded; unchanged session repeats return a compact reference. Set force=true only for an intentional resend.",
ToolAnnotations::new().read_only(true).open_world(false),
)),
with_output_schema::<CodeMapToolResultEnvelope>(mcp_session_tool::<CodeMap>(
"CodeMap",
CODE_MAP_DESCRIPTION,
ToolAnnotations::new().read_only(true).open_world(false),
)),
]
}
pub(super) fn winx_prompts() -> Vec<Prompt> {
WINX_PROMPTS
.get_or_init(|| {
vec![Prompt::new(
"KnowledgeTransfer",
Some("Summarize current Winx state, workspace context, and handoff notes."),
None,
)]
})
.clone()
}
/// Server icon (96x96 PNG) as a self-contained data URI, per MCP 2026-07-28.
/// A data URI works over stdio and HTTP alike — no extra endpoint or auth
/// exemption is needed for clients to fetch it.
pub(super) fn server_icon_data_uri() -> &'static str {
static URI: OnceLock<String> = OnceLock::new();
URI.get_or_init(|| {
use base64::Engine as _;
let png = include_bytes!("../../.github/assets/icon-96.png");
format!("data:image/png;base64,{}", base64::engine::general_purpose::STANDARD.encode(png))
})
}