@1mcp/agent 0.36.0 → 0.38.0

package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.d.ts

@@ -0,0 +1,14 @@
+import type { ServerManager } from '../../../../core/server/serverManager.js';
+import type { InboundConnectionConfig } from '../../../../core/types/index.js';
+import { LegacyOutboundEraAdapter } from '../../../../gateway/adapters/legacy/legacyOutboundEraAdapter.js';
+export interface ModernInboundLegacyBridge {
+    readonly targetConnectionId: string;
+    readonly outbound: LegacyOutboundEraAdapter;
+    close(): Promise<void>;
+}
+/**
+ * Gives one modern stateless exchange a private connection to the existing
+ * aggregate legacy server. SDK-v1 objects stay inside the legacy island.
+ */
+export declare function createModernInboundLegacyBridge(serverManager: ServerManager, config: InboundConnectionConfig): Promise<ModernInboundLegacyBridge>;
+//# sourceMappingURL=modernInboundLegacyBridge.d.ts.map

package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modernInboundLegacyBridge.d.ts","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/modernInboundLegacyBridge.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAMpG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAsB,+BAA+B,CACnD,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,yBAAyB,CAAC,CAsCpC"}

package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.js

@@ -0,0 +1,50 @@
+import { randomUUID } from 'node:crypto';
+import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js';
+import { LegacyOutboundEraAdapter } from '../../../../gateway/adapters/legacy/legacyOutboundEraAdapter.js';
+import { Client } from '../../../../sdk/legacy/client/index.js';
+import { LegacySdkClientAdapter } from '../../../../sdk/legacy/client/runtime/legacySdkClientAdapter.js';
+const LEGACY_REVISION = '2025-11-25';
+/**
+ * Gives one modern stateless exchange a private connection to the existing
+ * aggregate legacy server. SDK-v1 objects stay inside the legacy island.
+ */
+export async function createModernInboundLegacyBridge(serverManager, config) {
+    const connectionId = `modern-${randomUUID()}`;
+    const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+    const client = new Client({ name: '1mcp-modern-http-bridge', version: '1.0.0' }, { capabilities: {} });
+    const connecting = [
+        serverManager.connectTransport(serverTransport, connectionId, { ...config, requestOnly: true }),
+        client.connect(clientTransport),
+    ];
+    try {
+        await Promise.all(connecting);
+    }
+    catch (error) {
+        await Promise.allSettled([clientTransport.close(), serverTransport.close()]);
+        await Promise.allSettled(connecting);
+        await serverManager.disconnectTransport(connectionId, true).catch(() => undefined);
+        throw error;
+    }
+    const legacy = new LegacySdkClientAdapter(client, clientTransport);
+    try {
+        await legacy.start();
+    }
+    catch (error) {
+        await Promise.allSettled([legacy.close(), serverManager.disconnectTransport(connectionId, true)]);
+        throw error;
+    }
+    let closePromise;
+    return {
+        targetConnectionId: connectionId,
+        outbound: new LegacyOutboundEraAdapter(legacy, { era: 'legacy', revision: LEGACY_REVISION }),
+        close: () => (closePromise ??= Promise.allSettled([
+            legacy.close(),
+            serverManager.disconnectTransport(connectionId, true),
+        ]).then((results) => {
+            const failed = results.find((result) => result.status === 'rejected');
+            if (failed)
+                throw failed.reason;
+        })),
+    };
+}
+//# sourceMappingURL=modernInboundLegacyBridge.js.map

package/build/sdk/legacy/transport/http/modernInboundLegacyBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modernInboundLegacyBridge.js","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/modernInboundLegacyBridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAI1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0DAA0D,CAAC;AAElG,MAAM,eAAe,GAAG,YAAY,CAAC;AAQrC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,aAA4B,EAC5B,MAA+B;IAE/B,MAAM,YAAY,GAAG,UAAU,UAAU,EAAE,EAAE,CAAC;IAC9C,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IAEvG,MAAM,UAAU,GAAG;QACjB,aAAa,CAAC,gBAAgB,CAAC,eAAe,EAAE,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/F,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;KAChC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,aAAa,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,aAAa,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,YAAuC,CAAC;IAC5C,OAAO;QACL,kBAAkB,EAAE,YAAY;QAChC,QAAQ,EAAE,IAAI,wBAAwB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;QAC5F,KAAK,EAAE,GAAG,EAAE,CACV,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU,CAAC;YACnC,MAAM,CAAC,KAAK,EAAE;YACd,aAAa,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC;SACtD,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;YACvG,IAAI,MAAM;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;QAClC,CAAC,CAAC,CAAC;KACN,CAAC;AACJ,CAAC"}

package/build/sdk/legacy/transport/http/restorableStreamableTransport.d.ts

@@ -0,0 +1,58 @@
+import { StreamableHTTPServerTransport } from '../../../../sdk/legacy/server/streamableHttp.js';
+/**
+ * Metadata about a transport's restoration state, used for debugging
+ * and monitoring session restoration flow.
+ */
+export interface RestorationInfo {
+    isRestored: boolean;
+    sessionId?: string;
+}
+/**
+ * RestorableStreamableHTTPServerTransport extends the MCP SDK's StreamableHTTPServerTransport
+ * to track whether a transport was restored from persistent storage.
+ *
+ * This is a minimal wrapper that only adds restoration tracking. Session ID management
+ * is handled entirely through the SDK's public `sessionIdGenerator` callback - when
+ * restoring a session, we pass a generator that returns the stored session ID.
+ *
+ * @remarks
+ * The restoration flow works as follows:
+ * 1. Create transport with `sessionIdGenerator: () => storedSessionId`
+ * 2. Connect transport to ServerManager
+ * 3. Call virtualInitialize() which triggers SDK's handleRequest
+ * 4. SDK calls sessionIdGenerator() internally to get the session ID
+ * 5. Call markAsRestored() to indicate successful restoration
+ *
+ * @example
+ * ```typescript
+ * const transport = new RestorableStreamableHTTPServerTransport({
+ *   sessionIdGenerator: () => originalSessionId,
+ * });
+ * // After successful virtual initialize...
+ * transport.markAsRestored();
+ * // Now transport.isRestored() returns true
+ * ```
+ */
+export declare class RestorableStreamableHTTPServerTransport extends StreamableHTTPServerTransport {
+    private _isRestored;
+    /**
+     * Marks this transport as having been restored from persistent storage.
+     *
+     * This should be called after successful virtual initialization to indicate
+     * that the transport is ready to handle requests for a restored session.
+     */
+    markAsRestored(): void;
+    /**
+     * Returns whether this transport was created for a restored session.
+     *
+     * @returns true if the transport was restored from persistent storage, false otherwise
+     */
+    isRestored(): boolean;
+    /**
+     * Gets the restoration status for debugging purposes.
+     *
+     * @returns Object containing restoration metadata
+     */
+    getRestorationInfo(): RestorationInfo;
+}
+//# sourceMappingURL=restorableStreamableTransport.d.ts.map

package/build/sdk/legacy/transport/http/restorableStreamableTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restorableStreamableTransport.d.ts","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/restorableStreamableTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAEzF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,uCAAwC,SAAQ,6BAA6B;IACxF,OAAO,CAAC,WAAW,CAAS;IAE5B;;;;;OAKG;IACH,cAAc,IAAI,IAAI;IAItB;;;;OAIG;IACH,UAAU,IAAI,OAAO;IAIrB;;;;OAIG;IACH,kBAAkB,IAAI,eAAe;CAMtC"}

package/build/sdk/legacy/transport/http/restorableStreamableTransport.js

@@ -0,0 +1,59 @@
+import { StreamableHTTPServerTransport } from '../../../../sdk/legacy/server/streamableHttp.js';
+/**
+ * RestorableStreamableHTTPServerTransport extends the MCP SDK's StreamableHTTPServerTransport
+ * to track whether a transport was restored from persistent storage.
+ *
+ * This is a minimal wrapper that only adds restoration tracking. Session ID management
+ * is handled entirely through the SDK's public `sessionIdGenerator` callback - when
+ * restoring a session, we pass a generator that returns the stored session ID.
+ *
+ * @remarks
+ * The restoration flow works as follows:
+ * 1. Create transport with `sessionIdGenerator: () => storedSessionId`
+ * 2. Connect transport to ServerManager
+ * 3. Call virtualInitialize() which triggers SDK's handleRequest
+ * 4. SDK calls sessionIdGenerator() internally to get the session ID
+ * 5. Call markAsRestored() to indicate successful restoration
+ *
+ * @example
+ * ```typescript
+ * const transport = new RestorableStreamableHTTPServerTransport({
+ *   sessionIdGenerator: () => originalSessionId,
+ * });
+ * // After successful virtual initialize...
+ * transport.markAsRestored();
+ * // Now transport.isRestored() returns true
+ * ```
+ */
+export class RestorableStreamableHTTPServerTransport extends StreamableHTTPServerTransport {
+    _isRestored = false;
+    /**
+     * Marks this transport as having been restored from persistent storage.
+     *
+     * This should be called after successful virtual initialization to indicate
+     * that the transport is ready to handle requests for a restored session.
+     */
+    markAsRestored() {
+        this._isRestored = true;
+    }
+    /**
+     * Returns whether this transport was created for a restored session.
+     *
+     * @returns true if the transport was restored from persistent storage, false otherwise
+     */
+    isRestored() {
+        return this._isRestored;
+    }
+    /**
+     * Gets the restoration status for debugging purposes.
+     *
+     * @returns Object containing restoration metadata
+     */
+    getRestorationInfo() {
+        return {
+            isRestored: this._isRestored,
+            sessionId: this.sessionId,
+        };
+    }
+}
+//# sourceMappingURL=restorableStreamableTransport.js.map

package/build/sdk/legacy/transport/http/restorableStreamableTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restorableStreamableTransport.js","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/restorableStreamableTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAWzF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,uCAAwC,SAAQ,6BAA6B;IAChF,WAAW,GAAG,KAAK,CAAC;IAE5B;;;;;OAKG;IACH,cAAc;QACZ,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/build/sdk/legacy/transport/http/routes/sseRoutes.d.ts

@@ -0,0 +1,5 @@
+import { AsyncLoadingOrchestrator } from '../../../../../core/capabilities/asyncLoadingOrchestrator.js';
+import { ServerManager } from '../../../../../core/server/serverManager.js';
+import { RequestHandler, Router } from 'express';
+export declare function setupSseRoutes(router: Router, serverManager: ServerManager, authMiddleware: RequestHandler, availabilityMiddleware?: RequestHandler, asyncOrchestrator?: AsyncLoadingOrchestrator, customTemplate?: string): void;
+//# sourceMappingURL=sseRoutes.d.ts.map

package/build/sdk/legacy/transport/http/routes/sseRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sseRoutes.d.ts","sourceRoot":"","sources":["../../../../../../src/sdk/legacy/transport/http/routes/sseRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAclE,OAAO,EAAW,cAAc,EAAY,MAAM,EAAE,MAAM,SAAS,CAAC;AAEpE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,aAAa,EAC5B,cAAc,EAAE,cAAc,EAC9B,sBAAsB,CAAC,EAAE,cAAc,EACvC,iBAAiB,CAAC,EAAE,wBAAwB,EAC5C,cAAc,CAAC,EAAE,MAAM,GACtB,IAAI,CAyGN"}

package/build/sdk/legacy/transport/http/routes/sseRoutes.js

@@ -0,0 +1,105 @@
+import { MESSAGES_ENDPOINT, SSE_ENDPOINT } from '../../../../../constants.js';
+import logger from '../../../../../logger/logger.js';
+import { SSEServerTransport } from '../../../../../sdk/legacy/server/sse.js';
+import { ErrorCode } from '../../../../../sdk/legacy/types.js';
+import { LoggingSSEServerTransport } from '../../../../../transport/http/loggingSseTransport.js';
+import { getPresetName, getTagExpression, getTagFilterMode, getTagQuery, getValidatedTags, } from '../../../../../transport/http/middlewares/scopeAuthMiddleware.js';
+import tagsExtractor from '../../../../../transport/http/middlewares/tagsExtractor.js';
+export function setupSseRoutes(router, serverManager, authMiddleware, availabilityMiddleware, asyncOrchestrator, customTemplate) {
+    const middlewares = [tagsExtractor, authMiddleware];
+    // Add availability middleware if provided
+    if (availabilityMiddleware) {
+        middlewares.push(availabilityMiddleware);
+    }
+    router.get(SSE_ENDPOINT, ...middlewares, async (req, res) => {
+        try {
+            const transport = new LoggingSSEServerTransport(MESSAGES_ENDPOINT, res);
+            // Use validated tags and tag expression from scope auth middleware
+            const tags = getValidatedTags(res);
+            const tagExpression = getTagExpression(res);
+            const tagFilterMode = getTagFilterMode(res);
+            const tagQuery = getTagQuery(res);
+            const presetName = getPresetName(res);
+            // Connect the transport using the server manager
+            await serverManager.connectTransport(transport, transport.sessionId, {
+                tags,
+                tagExpression,
+                tagFilterMode,
+                tagQuery,
+                presetName,
+                enablePagination: req.query.pagination === 'true',
+                customTemplate,
+            });
+            // Initialize notifications for async loading if enabled
+            if (asyncOrchestrator) {
+                const inboundConnection = serverManager.getServer(transport.sessionId);
+                if (inboundConnection) {
+                    asyncOrchestrator.initializeNotifications(inboundConnection);
+                    logger.debug(`Async loading notifications initialized for SSE session ${transport.sessionId}`);
+                }
+            }
+            // Set up heartbeat to detect disconnected clients
+            const heartbeatInterval = setInterval(() => {
+                try {
+                    // Send a comment as heartbeat (SSE clients ignore comments)
+                    res.write(': heartbeat\n\n');
+                }
+                catch (_error) {
+                    // If write fails, the connection is likely broken
+                    logger.debug(`SSE heartbeat failed for session ${transport.sessionId}, closing connection`);
+                    clearInterval(heartbeatInterval);
+                    serverManager.disconnectTransport(transport.sessionId);
+                }
+            }, 30000); // Send heartbeat every 30 seconds
+            transport.onclose = () => {
+                clearInterval(heartbeatInterval);
+                serverManager.disconnectTransport(transport.sessionId);
+                // Note: ServerManager already logs the disconnection
+            };
+            transport.onerror = (error) => {
+                clearInterval(heartbeatInterval);
+                logger.error(`SSE transport error for session ${transport.sessionId}:`, error);
+                serverManager.recordInboundConnectionError(transport.sessionId, error);
+            };
+        }
+        catch (error) {
+            logger.error('SSE connection error:', error);
+            res.status(500).end();
+        }
+    });
+    router.post(MESSAGES_ENDPOINT, ...middlewares, async (req, res) => {
+        try {
+            const sessionId = req.query.sessionId;
+            if (!sessionId) {
+                res.status(400).json({
+                    error: {
+                        code: ErrorCode.InvalidParams,
+                        message: 'Invalid params: sessionId is required',
+                    },
+                });
+                return;
+            }
+            const transport = serverManager.getTransport(sessionId);
+            if (transport instanceof SSEServerTransport) {
+                await transport.handlePostMessage(req, res, req.body);
+                return;
+            }
+            res.status(404).json({
+                error: {
+                    code: ErrorCode.InvalidParams,
+                    message: 'Transport not found',
+                },
+            });
+        }
+        catch (error) {
+            logger.error('Message handling error:', error);
+            res.status(500).json({
+                error: {
+                    code: ErrorCode.InternalError,
+                    message: 'Internal server error',
+                },
+            });
+        }
+    });
+}
+//# sourceMappingURL=sseRoutes.js.map

package/build/sdk/legacy/transport/http/routes/sseRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sseRoutes.js","sourceRoot":"","sources":["../../../../../../src/sdk/legacy/transport/http/routes/sseRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGpE,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,gBAAgB,GACjB,MAAM,wDAAwD,CAAC;AAChE,OAAO,aAAa,MAAM,kDAAkD,CAAC;AAI7E,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,aAA4B,EAC5B,cAA8B,EAC9B,sBAAuC,EACvC,iBAA4C,EAC5C,cAAuB;IAEvB,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAEpD,0CAA0C;IAC1C,IAAI,sBAAsB,EAAE,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,yBAAyB,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAExE,mEAAmE;YACnE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAEtC,iDAAiD;YACjD,MAAM,aAAa,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;gBACnE,IAAI;gBACJ,aAAa;gBACb,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM;gBACjD,cAAc;aACf,CAAC,CAAC;YAEH,wDAAwD;YACxD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,iBAAiB,GAAG,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACvE,IAAI,iBAAiB,EAAE,CAAC;oBACtB,iBAAiB,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;oBAC7D,MAAM,CAAC,KAAK,CAAC,2DAA2D,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;gBACjG,CAAC;YACH,CAAC;YAED,kDAAkD;YAClD,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;gBACzC,IAAI,CAAC;oBACH,4DAA4D;oBAC5D,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,kDAAkD;oBAClD,MAAM,CAAC,KAAK,CAAC,oCAAoC,SAAS,CAAC,SAAS,sBAAsB,CAAC,CAAC;oBAC5F,aAAa,CAAC,iBAAiB,CAAC,CAAC;oBACjC,aAAa,CAAC,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,kCAAkC;YAE7C,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACvB,aAAa,CAAC,iBAAiB,CAAC,CAAC;gBACjC,aAAa,CAAC,mBAAmB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACvD,qDAAqD;YACvD,CAAC,CAAC;YAEF,SAAS,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;gBAC5B,aAAa,CAAC,iBAAiB,CAAC,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,mCAAmC,SAAS,CAAC,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC/E,aAAa,CAAC,4BAA4B,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzE,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACnF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAmB,CAAC;YAChD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE;wBACL,IAAI,EAAE,SAAS,CAAC,aAAa;wBAC7B,OAAO,EAAE,uCAAuC;qBACjD;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YAExD,IAAI,SAAS,YAAY,kBAAkB,EAAE,CAAC;gBAC5C,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,aAAa;oBAC7B,OAAO,EAAE,qBAAqB;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,IAAI,EAAE,SAAS,CAAC,aAAa;oBAC7B,OAAO,EAAE,uBAAuB;iBACjC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/sdk/legacy/transport/http/server.d.ts

@@ -0,0 +1,90 @@
+import { AsyncLoadingOrchestrator } from '../../../../core/capabilities/asyncLoadingOrchestrator.js';
+import { McpLoadingManager } from '../../../../core/loading/mcpLoadingManager.js';
+import { AgentConfigManager } from '../../../../core/server/agentConfig.js';
+import { ServerManager } from '../../../../core/server/serverManager.js';
+export declare function createModernHttpRequestPolicy(configManager: AgentConfigManager): {
+    allowsHost: (host: string | undefined) => boolean;
+    allowsOrigin: (origin: string | undefined, host: string | undefined) => boolean;
+};
+/**
+ * ExpressServer orchestrates the HTTP/SSE transport layer for the MCP server.
+ *
+ * This class manages the Express application, authentication, and route setup.
+ * It provides both HTTP and SSE transport options with optional OAuth 2.1 authentication.
+ *
+ * @example
+ * ```typescript
+ * const serverManager = await setupServer();
+ * const expressServer = new ExpressServer(serverManager);
+ * expressServer.start(3050, 'localhost');
+ * ```
+ */
+export declare class ExpressServer {
+    private app;
+    private serverManager;
+    private loadingManager?;
+    private asyncOrchestrator?;
+    private oauthProvider;
+    private configManager;
+    private customTemplate?;
+    private streamableSessionRepository;
+    private runtimeIdentityService;
+    private adminLock?;
+    /**
+     * Creates a new ExpressServer instance.
+     *
+     * Initializes the Express application, sets up middleware, authentication,
+     * and configures all routes for MCP transport and OAuth endpoints.
+     *
+     * @param serverManager - The server manager instance for handling MCP operations
+     * @param loadingManager - Optional loading manager for async MCP server initialization
+     * @param asyncOrchestrator - Optional async loading orchestrator for listChanged notifications
+     * @param customTemplate - Optional custom template for instructions
+     */
+    constructor(serverManager: ServerManager, loadingManager?: McpLoadingManager, asyncOrchestrator?: AsyncLoadingOrchestrator, customTemplate?: string);
+    /**
+     * Sets up Express middleware including CORS, body parsing, and error handling.
+     *
+     * Configures the basic middleware stack required for the MCP server:
+     * - Enhanced security middleware (conditional based on feature flag)
+     * - HTTP request logging for all requests
+     * - Context extraction middleware for template processing
+     * - CORS for cross-origin requests
+     * - JSON body parsing
+     * - Global error handling
+     */
+    private setupMiddleware;
+    /**
+     * Sets up all application routes including OAuth and MCP transport endpoints.
+     *
+     * Configures the following route groups:
+     * - OAuth 2.1 endpoints (always available, auth can be disabled)
+     * - Streamable HTTP transport routes with authentication middleware
+     * - SSE transport routes with authentication middleware
+     *
+     * Logs the authentication status for debugging purposes.
+     */
+    private setupRoutes;
+    /**
+     * Starts the Express server on the specified port and host.
+     *
+     * Binds the Express application to the network interface and logs
+     * the server status including authentication configuration.
+     *
+     * @param port - The port number to listen on
+     * @param host - The host address to bind to
+     */
+    start(): void;
+    /**
+     * Performs graceful shutdown of the Express server.
+     *
+     * Cleans up resources including:
+     * - Authentication manager shutdown
+     * - Session cleanup
+     * - Timer cleanup
+     * - Streamable session repository flush
+     */
+    shutdown(): void;
+    private acquireAdminMutationAvailability;
+}
+//# sourceMappingURL=server.d.ts.map

package/build/sdk/legacy/transport/http/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../../src/sdk/legacy/transport/http/server.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oDAAoD,CAAC;AAE9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAE3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAwNlE,wBAAgB,6BAA6B,CAAC,aAAa,EAAE,kBAAkB;uBAExD,MAAM,GAAG,SAAS;2BAKd,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,SAAS;EAYtE;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,cAAc,CAAC,CAAoB;IAC3C,OAAO,CAAC,iBAAiB,CAAC,CAA2B;IACrD,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,2BAA2B,CAA8B;IACjE,OAAO,CAAC,sBAAsB,CAAyB;IACvD,OAAO,CAAC,SAAS,CAAC,CAA8B;IAEhD;;;;;;;;;;OAUG;gBAED,aAAa,EAAE,aAAa,EAC5B,cAAc,CAAC,EAAE,iBAAiB,EAClC,iBAAiB,CAAC,EAAE,wBAAwB,EAC5C,cAAc,CAAC,EAAE,MAAM;IAsCzB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe;IAwBvB;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAsMnB;;;;;;;;OAQG;IACI,KAAK,IAAI,IAAI;IASpB;;;;;;;;OAQG;IACI,QAAQ,IAAI,IAAI;IAOvB,OAAO,CAAC,gCAAgC;CAoBzC"}