Module: Riffer::Mcp::AuthenticatedTool

Extended by:
AuthenticatedTool
Included in:
AuthenticatedTool
Defined in:
lib/riffer/mcp/authenticated_tool.rb

Overview

Wraps MCP-generated tool classes so tools/call resolves Riffer.config.mcp.credentials per invocation, copying metadata from the inner class at wrap time.

Instance Method Summary collapse

Instance Method Details

#wrap_all(tool_classes, manifest, matched_tags) ⇒ Object

Returns one wrapper class per inner tool, sharing manifest and matched_tags.

– : (Array, Riffer::Mcp::Manifest, Array) -> Array



14
15
16
 
# File 'lib/riffer/mcp/authenticated_tool.rb', line 14

def wrap_all(tool_classes, manifest, matched_tags)
  tool_classes.map { |tc| wrap_one(tc, manifest, matched_tags) }
end

#wrap_one(inner_class, manifest, matched_tags) ⇒ Object

– : (singleton(Riffer::Mcp::Tool), Riffer::Mcp::Manifest, Array) -> singleton(Riffer::Mcp::Tool)



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
 
# File 'lib/riffer/mcp/authenticated_tool.rb', line 20

def wrap_one(inner_class, manifest, matched_tags)
  inner = inner_class
  man = manifest
  tags = matched_tags

  # steep does not model Class.new's class_eval semantics — the block body
  # typechecks against the enclosing module, so the ivar assignments and the
  # define_method bodies are unresolvable.
  Class.new(Riffer::Mcp::Tool) do
    # steep:ignore:start
    @identifier = inner.identifier
    @description = inner.description
    @input_schema = inner.parameters_schema
    @mcp_server_tool_name = inner.mcp_server_tool_name

    # Creates a fresh client per +tools/call+ so headers from the credentials
    # proc stay current.
    # TODO: A per-headers cache would reduce connection churn under load, and
    # requires a follow-up investigation to determine how to invalidate failing
    # clients.
    define_method(:build_call_client) do |endpoint, headers|
      Riffer::Mcp::Client.new(endpoint: endpoint, headers: headers)
    end
    private :build_call_client

    define_method(:call) do |context:, **kwargs|
      cred = Riffer.config.mcp.credentials
      unless cred
        next inner.new.call(context: context, **kwargs)
      end

      headers = cred.call(manifest: man, matched_tags: tags, context: context)
      if headers.nil?
        raise Riffer::Mcp::CredentialsDeniedError,
          "MCP credentials returned nil for server '#{man.name}' during tools/call"
      end

      client = build_call_client(man.endpoint, headers)
      text(client.tools_call(self.class.mcp_server_tool_name, kwargs))
    end
    # steep:ignore:end
  end #: singleton(Riffer::Mcp::Tool)
end