@alfe.ai/connectwise-screenconnect-mcp 0.1.0

package/dist/screenconnect-client2.cjs

@@ -0,0 +1,357 @@
+let node_dns_promises = require("node:dns/promises");
+let node_net = require("node:net");
+let zod = require("zod");
+let node_https = require("node:https");
+//#region src/boundary.ts
+const PROVIDER = "connectwise-screenconnect";
+const connectionIdField = zod.z.string().regex(/^con_[A-Za-z0-9_-]{1,128}$/u).describe("Exact connectionId from screenconnect_list_connections. Selects one authorized ScreenConnect instance.");
+const sessionIdField = zod.z.uuid();
+const textField = (max = 4096) => zod.z.string().min(1).max(max);
+const customPropertiesField = zod.z.array(zod.z.string().max(4096)).max(8);
+var ScreenConnectError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "ScreenConnectError";
+	}
+};
+/** Only errors created at this boundary are safe to display or capture. */
+function safeErrorMessage(error) {
+	return error instanceof ScreenConnectError ? error.message : "ScreenConnect operation failed. Check the connection and retry reads; reconcile mutations before retrying.";
+}
+function normalizeSiteUrl(value) {
+	if (typeof value !== "string" || value.length > 2048) throw new ScreenConnectError("ScreenConnect site URL is invalid.");
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new ScreenConnectError("ScreenConnect site URL is invalid.");
+	}
+	const host = url.hostname.toLowerCase().replace(/\.$/u, "");
+	if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash || url.pathname !== "/" || (0, node_net.isIP)(host.replace(/^\[|\]$/gu, "")) || !host.includes(".") || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal") || host === "metadata.google.internal" || !/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(host)) throw new ScreenConnectError("ScreenConnect requires a public HTTPS origin without a path or credentials.");
+	url.hostname = host;
+	return url.origin;
+}
+function parseCredentials(value, connectionId) {
+	const parsed = zod.z.object({
+		provider: zod.z.literal(PROVIDER),
+		connectionId: connectionIdField,
+		siteUrl: zod.z.string(),
+		authenticationSecret: zod.z.string().min(1).max(16384).regex(/^[\x21-\x7e]+$/u),
+		apiMode: zod.z.literal("restful-api-manager")
+	}).safeParse(value);
+	if (!parsed.success || parsed.data.connectionId !== connectionId) throw new ScreenConnectError("The selected connection does not contain valid ScreenConnect credentials. Reconnect it in Alfe.");
+	return {
+		siteUrl: normalizeSiteUrl(parsed.data.siteUrl),
+		authenticationSecret: parsed.data.authenticationSecret
+	};
+}
+const blocked = new node_net.BlockList();
+for (const [address, prefix] of [
+	["0.0.0.0", 8],
+	["10.0.0.0", 8],
+	["100.64.0.0", 10],
+	["127.0.0.0", 8],
+	["169.254.0.0", 16],
+	["172.16.0.0", 12],
+	["192.0.0.0", 24],
+	["192.0.2.0", 24],
+	["192.168.0.0", 16],
+	["198.18.0.0", 15],
+	["198.51.100.0", 24],
+	["203.0.113.0", 24],
+	["224.0.0.0", 4],
+	["240.0.0.0", 4]
+]) blocked.addSubnet(address, prefix, "ipv4");
+for (const [address, prefix] of [
+	["::", 96],
+	["64:ff9b::", 96],
+	["64:ff9b:1::", 48],
+	["100::", 64],
+	["2001::", 32],
+	["2001:db8::", 32],
+	["2002::", 16],
+	["fc00::", 7],
+	["fe80::", 10],
+	["ff00::", 8]
+]) blocked.addSubnet(address, prefix, "ipv6");
+async function resolvePublicAddresses(hostname, signal, resolver = (host) => (0, node_dns_promises.lookup)(host, { all: true })) {
+	let onAbort;
+	try {
+		signal.throwIfAborted();
+		const addresses = await Promise.race([resolver(hostname), new Promise((_resolve, reject) => {
+			onAbort = () => {
+				reject(new ScreenConnectError("ScreenConnect request timed out."));
+			};
+			signal.addEventListener("abort", onAbort, { once: true });
+		})]);
+		if (addresses.length === 0 || addresses.length > 64 || addresses.some(({ address, family }) => {
+			const actualFamily = (0, node_net.isIP)(address);
+			return actualFamily === 0 || actualFamily !== family || family === 6 && address.toLowerCase().startsWith("::ffff:") || blocked.check(address, family === 4 ? "ipv4" : "ipv6");
+		})) throw new ScreenConnectError("ScreenConnect hostname must resolve only to public addresses.");
+		return addresses;
+	} catch (error) {
+		if (error instanceof ScreenConnectError) throw error;
+		throw new ScreenConnectError("ScreenConnect hostname could not be safely resolved.");
+	} finally {
+		if (onAbort) signal.removeEventListener("abort", onAbort);
+	}
+}
+/** Avoid provider error envelopes being reported as successful session data. */
+function parseResponse(text, secret) {
+	if (!text.trim()) return null;
+	const redacted = text.split(secret).join("[REDACTED]");
+	let result;
+	try {
+		result = JSON.parse(redacted);
+	} catch {
+		throw new ScreenConnectError("ScreenConnect returned invalid JSON.");
+	}
+	if (isRecord(result) && ("error" in result || "Error" in result || "ExceptionType" in result || "StackTrace" in result)) throw new ScreenConnectError("ScreenConnect rejected the operation. Check extension settings and permissions.");
+	return result;
+}
+function isRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+//#endregion
+//#region src/screenconnect-client.ts
+const EXTENSION_PATH = "/App_Extensions/2d558935-686a-4bd0-9991-07539f5fe749/Service.ashx/";
+/** Positional contracts from the official RESTful API Manager reference. */
+const methods = {
+	GetSessionsByFilter: {
+		method: "GET",
+		parameters: zod.z.tuple([textField(2048)])
+	},
+	GetSessionsByName: {
+		method: "GET",
+		parameters: zod.z.tuple([textField(256)])
+	},
+	GetSessionBySessionID: {
+		method: "GET",
+		parameters: zod.z.tuple([sessionIdField])
+	},
+	GetSessionDetailsBySessionID: {
+		method: "GET",
+		parameters: zod.z.tuple([sessionIdField])
+	},
+	CreateSession: {
+		method: "POST",
+		parameters: zod.z.tuple([
+			zod.z.enum(["Support", "Meeting"]),
+			textField(256),
+			zod.z.boolean(),
+			zod.z.string().max(128),
+			customPropertiesField
+		])
+	},
+	UpdateSessionName: {
+		method: "POST",
+		parameters: zod.z.tuple([sessionIdField, textField(256)])
+	},
+	UpdateSessionCustomProperties: {
+		method: "POST",
+		parameters: zod.z.tuple([sessionIdField, customPropertiesField])
+	},
+	AddNoteToSession: {
+		method: "POST",
+		parameters: zod.z.tuple([sessionIdField, textField(16384)])
+	},
+	SendMessageToSession: {
+		method: "POST",
+		parameters: zod.z.tuple([
+			sessionIdField,
+			textField(256),
+			textField(16384)
+		])
+	},
+	SendCommandToSession: {
+		method: "POST",
+		parameters: zod.z.tuple([sessionIdField, textField(32768)])
+	},
+	SendToolboxItemToSession: {
+		method: "POST",
+		parameters: zod.z.tuple([sessionIdField, textField(512)])
+	}
+};
+var ScreenConnectClient = class {
+	siteUrl;
+	secret;
+	resolveHost;
+	requestFactory;
+	timeoutMs;
+	constructor(options) {
+		this.siteUrl = normalizeSiteUrl(options.siteUrl);
+		if (typeof options.authenticationSecret !== "string" || !/^[\x21-\x7e]{1,16384}$/u.test(options.authenticationSecret)) throw new ScreenConnectError("ScreenConnect authentication secret is invalid.");
+		this.secret = options.authenticationSecret;
+		this.resolveHost = options.resolveHost;
+		this.requestFactory = options.requestFactory ?? node_https.request;
+		this.timeoutMs = options.requestTimeoutMs ?? 3e4;
+		if (!Number.isInteger(this.timeoutMs) || this.timeoutMs < 1 || this.timeoutMs > 6e4) throw new ScreenConnectError("ScreenConnect request timeout must be between 1 and 60000 milliseconds.");
+	}
+	async call(method, parameters) {
+		if (!Object.hasOwn(methods, method)) throw new ScreenConnectError("Unsupported ScreenConnect operation.");
+		const operation = methods[method];
+		const validated = operation.parameters.safeParse(parameters);
+		if (!validated.success) throw new ScreenConnectError("Invalid parameters for the ScreenConnect operation.");
+		const body = JSON.stringify(validated.data);
+		if (Buffer.byteLength(body) > 131072) throw new ScreenConnectError("ScreenConnect request is too large.");
+		const signal = AbortSignal.timeout(this.timeoutMs);
+		const url = new URL(`${EXTENSION_PATH}${method}`, this.siteUrl);
+		const addresses = await resolvePublicAddresses(url.hostname, signal, this.resolveHost);
+		const result = parseResponse(await this.send(url, operation.method, body, addresses, signal), this.secret);
+		if (method === "GetSessionsByFilter" || method === "GetSessionsByName") {
+			if (!Array.isArray(result) || !result.every(isRecord)) throw new ScreenConnectError("ScreenConnect returned a malformed session list.");
+		} else if (operation.method === "POST" && method !== "CreateSession") {
+			if (result !== null) throw new ScreenConnectError("ScreenConnect returned an unexpected action response. Check session details before retrying.");
+		} else if (result !== null && !isRecord(result) && !(Array.isArray(result) && result.every(isRecord))) throw new ScreenConnectError("ScreenConnect returned malformed session data.");
+		return result;
+	}
+	send(url, method, body, addresses, signal) {
+		return new Promise((resolve, reject) => {
+			const fail = (error) => {
+				reject(error instanceof ScreenConnectError ? error : new ScreenConnectError(signal.aborted ? "ScreenConnect request timed out." : "ScreenConnect request failed. Verify extension settings and connectivity."));
+			};
+			try {
+				const request = this.requestFactory(url, {
+					method,
+					agent: false,
+					lookup: pinnedLookup(addresses),
+					signal,
+					headers: {
+						"Content-Type": "application/json",
+						Accept: "application/json",
+						"Accept-Encoding": "identity",
+						"Content-Length": Buffer.byteLength(body),
+						CTRLAuthHeader: this.secret,
+						Origin: this.siteUrl
+					}
+				}, (response) => {
+					readResponse(response).then(resolve, fail);
+				});
+				request.once("error", fail);
+				request.end(body);
+			} catch (error) {
+				fail(error);
+			}
+		});
+	}
+};
+/** No second DNS resolution is allowed between validation and connection. */
+function pinnedLookup(addresses) {
+	return (_hostname, options, callback) => {
+		if (options.all) callback(null, addresses.map((entry) => ({ ...entry })));
+		else {
+			const address = addresses.find((entry) => !options.family || entry.family === options.family);
+			if (!address) callback(/* @__PURE__ */ new Error("No validated address for requested family"), "", 4);
+			else callback(null, address.address, address.family);
+		}
+	};
+}
+async function readResponse(response) {
+	const status = response.statusCode ?? 0;
+	if (status < 200 || status >= 300) {
+		response.destroy();
+		if (status === 401 || status === 403) throw new ScreenConnectError("ScreenConnect rejected authentication. Check the secret, RESTfulAllowedOrigin, and extension user permissions.");
+		if (status === 404) throw new ScreenConnectError("ScreenConnect RESTful API Manager endpoint was not found. Install or update the extension.");
+		throw new ScreenConnectError(`ScreenConnect returned HTTP ${String(status)}. The operation was not retried.`);
+	}
+	const length = response.headers["content-length"];
+	if (length !== void 0 && (!/^\d+$/u.test(length) || Number(length) > 5242880)) {
+		response.destroy();
+		throw new ScreenConnectError("ScreenConnect response exceeded the 5 MiB limit. Narrow the session filter.");
+	}
+	const chunks = [];
+	let bytes = 0;
+	for await (const chunk of response) {
+		if (!(chunk instanceof Uint8Array) && typeof chunk !== "string") {
+			response.destroy();
+			throw new ScreenConnectError("ScreenConnect returned an invalid response stream.");
+		}
+		const buffer = Buffer.from(chunk);
+		bytes += buffer.byteLength;
+		if (bytes > 5242880) {
+			response.destroy();
+			throw new ScreenConnectError("ScreenConnect response exceeded the 5 MiB limit. Narrow the session filter.");
+		}
+		chunks.push(buffer);
+	}
+	return Buffer.concat(chunks, bytes).toString("utf8");
+}
+//#endregion
+Object.defineProperty(exports, "EXTENSION_PATH", {
+	enumerable: true,
+	get: function() {
+		return EXTENSION_PATH;
+	}
+});
+Object.defineProperty(exports, "PROVIDER", {
+	enumerable: true,
+	get: function() {
+		return PROVIDER;
+	}
+});
+Object.defineProperty(exports, "ScreenConnectClient", {
+	enumerable: true,
+	get: function() {
+		return ScreenConnectClient;
+	}
+});
+Object.defineProperty(exports, "ScreenConnectError", {
+	enumerable: true,
+	get: function() {
+		return ScreenConnectError;
+	}
+});
+Object.defineProperty(exports, "connectionIdField", {
+	enumerable: true,
+	get: function() {
+		return connectionIdField;
+	}
+});
+Object.defineProperty(exports, "customPropertiesField", {
+	enumerable: true,
+	get: function() {
+		return customPropertiesField;
+	}
+});
+Object.defineProperty(exports, "isRecord", {
+	enumerable: true,
+	get: function() {
+		return isRecord;
+	}
+});
+Object.defineProperty(exports, "normalizeSiteUrl", {
+	enumerable: true,
+	get: function() {
+		return normalizeSiteUrl;
+	}
+});
+Object.defineProperty(exports, "parseCredentials", {
+	enumerable: true,
+	get: function() {
+		return parseCredentials;
+	}
+});
+Object.defineProperty(exports, "pinnedLookup", {
+	enumerable: true,
+	get: function() {
+		return pinnedLookup;
+	}
+});
+Object.defineProperty(exports, "safeErrorMessage", {
+	enumerable: true,
+	get: function() {
+		return safeErrorMessage;
+	}
+});
+Object.defineProperty(exports, "sessionIdField", {
+	enumerable: true,
+	get: function() {
+		return sessionIdField;
+	}
+});
+Object.defineProperty(exports, "textField", {
+	enumerable: true,
+	get: function() {
+		return textField;
+	}
+});

package/dist/screenconnect-client2.d.cts

@@ -0,0 +1,2 @@
+import { a as ScreenConnectClientOptions, i as ScreenConnectClient, n as RequestFactory, o as ScreenConnectMethod, r as ScreenConnectApi, s as pinnedLookup, t as EXTENSION_PATH } from "./screenconnect-client.cjs";
+export { EXTENSION_PATH, RequestFactory, ScreenConnectApi, ScreenConnectClient, ScreenConnectClientOptions, ScreenConnectMethod, pinnedLookup };

package/dist/screenconnect-client2.d.ts

@@ -0,0 +1,2 @@
+import { a as ScreenConnectClientOptions, i as ScreenConnectClient, n as RequestFactory, o as ScreenConnectMethod, r as ScreenConnectApi, s as pinnedLookup, t as EXTENSION_PATH } from "./screenconnect-client.js";
+export { EXTENSION_PATH, RequestFactory, ScreenConnectApi, ScreenConnectClient, ScreenConnectClientOptions, ScreenConnectMethod, pinnedLookup };

package/dist/screenconnect-client2.js

@@ -0,0 +1,280 @@
+import { lookup } from "node:dns/promises";
+import { BlockList, isIP } from "node:net";
+import { z } from "zod";
+import { request } from "node:https";
+//#region src/boundary.ts
+const PROVIDER = "connectwise-screenconnect";
+const connectionIdField = z.string().regex(/^con_[A-Za-z0-9_-]{1,128}$/u).describe("Exact connectionId from screenconnect_list_connections. Selects one authorized ScreenConnect instance.");
+const sessionIdField = z.uuid();
+const textField = (max = 4096) => z.string().min(1).max(max);
+const customPropertiesField = z.array(z.string().max(4096)).max(8);
+var ScreenConnectError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "ScreenConnectError";
+	}
+};
+/** Only errors created at this boundary are safe to display or capture. */
+function safeErrorMessage(error) {
+	return error instanceof ScreenConnectError ? error.message : "ScreenConnect operation failed. Check the connection and retry reads; reconcile mutations before retrying.";
+}
+function normalizeSiteUrl(value) {
+	if (typeof value !== "string" || value.length > 2048) throw new ScreenConnectError("ScreenConnect site URL is invalid.");
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new ScreenConnectError("ScreenConnect site URL is invalid.");
+	}
+	const host = url.hostname.toLowerCase().replace(/\.$/u, "");
+	if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash || url.pathname !== "/" || isIP(host.replace(/^\[|\]$/gu, "")) || !host.includes(".") || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal") || host === "metadata.google.internal" || !/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(host)) throw new ScreenConnectError("ScreenConnect requires a public HTTPS origin without a path or credentials.");
+	url.hostname = host;
+	return url.origin;
+}
+function parseCredentials(value, connectionId) {
+	const parsed = z.object({
+		provider: z.literal(PROVIDER),
+		connectionId: connectionIdField,
+		siteUrl: z.string(),
+		authenticationSecret: z.string().min(1).max(16384).regex(/^[\x21-\x7e]+$/u),
+		apiMode: z.literal("restful-api-manager")
+	}).safeParse(value);
+	if (!parsed.success || parsed.data.connectionId !== connectionId) throw new ScreenConnectError("The selected connection does not contain valid ScreenConnect credentials. Reconnect it in Alfe.");
+	return {
+		siteUrl: normalizeSiteUrl(parsed.data.siteUrl),
+		authenticationSecret: parsed.data.authenticationSecret
+	};
+}
+const blocked = new BlockList();
+for (const [address, prefix] of [
+	["0.0.0.0", 8],
+	["10.0.0.0", 8],
+	["100.64.0.0", 10],
+	["127.0.0.0", 8],
+	["169.254.0.0", 16],
+	["172.16.0.0", 12],
+	["192.0.0.0", 24],
+	["192.0.2.0", 24],
+	["192.168.0.0", 16],
+	["198.18.0.0", 15],
+	["198.51.100.0", 24],
+	["203.0.113.0", 24],
+	["224.0.0.0", 4],
+	["240.0.0.0", 4]
+]) blocked.addSubnet(address, prefix, "ipv4");
+for (const [address, prefix] of [
+	["::", 96],
+	["64:ff9b::", 96],
+	["64:ff9b:1::", 48],
+	["100::", 64],
+	["2001::", 32],
+	["2001:db8::", 32],
+	["2002::", 16],
+	["fc00::", 7],
+	["fe80::", 10],
+	["ff00::", 8]
+]) blocked.addSubnet(address, prefix, "ipv6");
+async function resolvePublicAddresses(hostname, signal, resolver = (host) => lookup(host, { all: true })) {
+	let onAbort;
+	try {
+		signal.throwIfAborted();
+		const addresses = await Promise.race([resolver(hostname), new Promise((_resolve, reject) => {
+			onAbort = () => {
+				reject(new ScreenConnectError("ScreenConnect request timed out."));
+			};
+			signal.addEventListener("abort", onAbort, { once: true });
+		})]);
+		if (addresses.length === 0 || addresses.length > 64 || addresses.some(({ address, family }) => {
+			const actualFamily = isIP(address);
+			return actualFamily === 0 || actualFamily !== family || family === 6 && address.toLowerCase().startsWith("::ffff:") || blocked.check(address, family === 4 ? "ipv4" : "ipv6");
+		})) throw new ScreenConnectError("ScreenConnect hostname must resolve only to public addresses.");
+		return addresses;
+	} catch (error) {
+		if (error instanceof ScreenConnectError) throw error;
+		throw new ScreenConnectError("ScreenConnect hostname could not be safely resolved.");
+	} finally {
+		if (onAbort) signal.removeEventListener("abort", onAbort);
+	}
+}
+/** Avoid provider error envelopes being reported as successful session data. */
+function parseResponse(text, secret) {
+	if (!text.trim()) return null;
+	const redacted = text.split(secret).join("[REDACTED]");
+	let result;
+	try {
+		result = JSON.parse(redacted);
+	} catch {
+		throw new ScreenConnectError("ScreenConnect returned invalid JSON.");
+	}
+	if (isRecord(result) && ("error" in result || "Error" in result || "ExceptionType" in result || "StackTrace" in result)) throw new ScreenConnectError("ScreenConnect rejected the operation. Check extension settings and permissions.");
+	return result;
+}
+function isRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+//#endregion
+//#region src/screenconnect-client.ts
+const EXTENSION_PATH = "/App_Extensions/2d558935-686a-4bd0-9991-07539f5fe749/Service.ashx/";
+/** Positional contracts from the official RESTful API Manager reference. */
+const methods = {
+	GetSessionsByFilter: {
+		method: "GET",
+		parameters: z.tuple([textField(2048)])
+	},
+	GetSessionsByName: {
+		method: "GET",
+		parameters: z.tuple([textField(256)])
+	},
+	GetSessionBySessionID: {
+		method: "GET",
+		parameters: z.tuple([sessionIdField])
+	},
+	GetSessionDetailsBySessionID: {
+		method: "GET",
+		parameters: z.tuple([sessionIdField])
+	},
+	CreateSession: {
+		method: "POST",
+		parameters: z.tuple([
+			z.enum(["Support", "Meeting"]),
+			textField(256),
+			z.boolean(),
+			z.string().max(128),
+			customPropertiesField
+		])
+	},
+	UpdateSessionName: {
+		method: "POST",
+		parameters: z.tuple([sessionIdField, textField(256)])
+	},
+	UpdateSessionCustomProperties: {
+		method: "POST",
+		parameters: z.tuple([sessionIdField, customPropertiesField])
+	},
+	AddNoteToSession: {
+		method: "POST",
+		parameters: z.tuple([sessionIdField, textField(16384)])
+	},
+	SendMessageToSession: {
+		method: "POST",
+		parameters: z.tuple([
+			sessionIdField,
+			textField(256),
+			textField(16384)
+		])
+	},
+	SendCommandToSession: {
+		method: "POST",
+		parameters: z.tuple([sessionIdField, textField(32768)])
+	},
+	SendToolboxItemToSession: {
+		method: "POST",
+		parameters: z.tuple([sessionIdField, textField(512)])
+	}
+};
+var ScreenConnectClient = class {
+	siteUrl;
+	secret;
+	resolveHost;
+	requestFactory;
+	timeoutMs;
+	constructor(options) {
+		this.siteUrl = normalizeSiteUrl(options.siteUrl);
+		if (typeof options.authenticationSecret !== "string" || !/^[\x21-\x7e]{1,16384}$/u.test(options.authenticationSecret)) throw new ScreenConnectError("ScreenConnect authentication secret is invalid.");
+		this.secret = options.authenticationSecret;
+		this.resolveHost = options.resolveHost;
+		this.requestFactory = options.requestFactory ?? request;
+		this.timeoutMs = options.requestTimeoutMs ?? 3e4;
+		if (!Number.isInteger(this.timeoutMs) || this.timeoutMs < 1 || this.timeoutMs > 6e4) throw new ScreenConnectError("ScreenConnect request timeout must be between 1 and 60000 milliseconds.");
+	}
+	async call(method, parameters) {
+		if (!Object.hasOwn(methods, method)) throw new ScreenConnectError("Unsupported ScreenConnect operation.");
+		const operation = methods[method];
+		const validated = operation.parameters.safeParse(parameters);
+		if (!validated.success) throw new ScreenConnectError("Invalid parameters for the ScreenConnect operation.");
+		const body = JSON.stringify(validated.data);
+		if (Buffer.byteLength(body) > 131072) throw new ScreenConnectError("ScreenConnect request is too large.");
+		const signal = AbortSignal.timeout(this.timeoutMs);
+		const url = new URL(`${EXTENSION_PATH}${method}`, this.siteUrl);
+		const addresses = await resolvePublicAddresses(url.hostname, signal, this.resolveHost);
+		const result = parseResponse(await this.send(url, operation.method, body, addresses, signal), this.secret);
+		if (method === "GetSessionsByFilter" || method === "GetSessionsByName") {
+			if (!Array.isArray(result) || !result.every(isRecord)) throw new ScreenConnectError("ScreenConnect returned a malformed session list.");
+		} else if (operation.method === "POST" && method !== "CreateSession") {
+			if (result !== null) throw new ScreenConnectError("ScreenConnect returned an unexpected action response. Check session details before retrying.");
+		} else if (result !== null && !isRecord(result) && !(Array.isArray(result) && result.every(isRecord))) throw new ScreenConnectError("ScreenConnect returned malformed session data.");
+		return result;
+	}
+	send(url, method, body, addresses, signal) {
+		return new Promise((resolve, reject) => {
+			const fail = (error) => {
+				reject(error instanceof ScreenConnectError ? error : new ScreenConnectError(signal.aborted ? "ScreenConnect request timed out." : "ScreenConnect request failed. Verify extension settings and connectivity."));
+			};
+			try {
+				const request = this.requestFactory(url, {
+					method,
+					agent: false,
+					lookup: pinnedLookup(addresses),
+					signal,
+					headers: {
+						"Content-Type": "application/json",
+						Accept: "application/json",
+						"Accept-Encoding": "identity",
+						"Content-Length": Buffer.byteLength(body),
+						CTRLAuthHeader: this.secret,
+						Origin: this.siteUrl
+					}
+				}, (response) => {
+					readResponse(response).then(resolve, fail);
+				});
+				request.once("error", fail);
+				request.end(body);
+			} catch (error) {
+				fail(error);
+			}
+		});
+	}
+};
+/** No second DNS resolution is allowed between validation and connection. */
+function pinnedLookup(addresses) {
+	return (_hostname, options, callback) => {
+		if (options.all) callback(null, addresses.map((entry) => ({ ...entry })));
+		else {
+			const address = addresses.find((entry) => !options.family || entry.family === options.family);
+			if (!address) callback(/* @__PURE__ */ new Error("No validated address for requested family"), "", 4);
+			else callback(null, address.address, address.family);
+		}
+	};
+}
+async function readResponse(response) {
+	const status = response.statusCode ?? 0;
+	if (status < 200 || status >= 300) {
+		response.destroy();
+		if (status === 401 || status === 403) throw new ScreenConnectError("ScreenConnect rejected authentication. Check the secret, RESTfulAllowedOrigin, and extension user permissions.");
+		if (status === 404) throw new ScreenConnectError("ScreenConnect RESTful API Manager endpoint was not found. Install or update the extension.");
+		throw new ScreenConnectError(`ScreenConnect returned HTTP ${String(status)}. The operation was not retried.`);
+	}
+	const length = response.headers["content-length"];
+	if (length !== void 0 && (!/^\d+$/u.test(length) || Number(length) > 5242880)) {
+		response.destroy();
+		throw new ScreenConnectError("ScreenConnect response exceeded the 5 MiB limit. Narrow the session filter.");
+	}
+	const chunks = [];
+	let bytes = 0;
+	for await (const chunk of response) {
+		if (!(chunk instanceof Uint8Array) && typeof chunk !== "string") {
+			response.destroy();
+			throw new ScreenConnectError("ScreenConnect returned an invalid response stream.");
+		}
+		const buffer = Buffer.from(chunk);
+		bytes += buffer.byteLength;
+		if (bytes > 5242880) {
+			response.destroy();
+			throw new ScreenConnectError("ScreenConnect response exceeded the 5 MiB limit. Narrow the session filter.");
+		}
+		chunks.push(buffer);
+	}
+	return Buffer.concat(chunks, bytes).toString("utf8");
+}
+//#endregion
+export { ScreenConnectError as a, isRecord as c, safeErrorMessage as d, sessionIdField as f, PROVIDER as i, normalizeSiteUrl as l, ScreenConnectClient as n, connectionIdField as o, textField as p, pinnedLookup as r, customPropertiesField as s, EXTENSION_PATH as t, parseCredentials as u };

package/dist/server.cjs

@@ -0,0 +1,6 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_server = require("./server2.cjs");
+exports.SERVER_NAME = require_server.SERVER_NAME;
+exports.SERVER_VERSION = require_server.SERVER_VERSION;
+exports.createServer = require_server.createServer;
+exports.startServer = require_server.startServer;

package/dist/server.d.cts

@@ -0,0 +1,24 @@
+import { r as ScreenConnectApi } from "./screenconnect-client.cjs";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+
+//#region src/tools.d.ts
+interface ConnectApi {
+  getConnectProviderAccounts(provider: string): Promise<unknown>;
+  getConnectionCredentials(connectionId: string): Promise<unknown>;
+}
+interface ToolDependencies {
+  createClient?: (credentials: {
+    siteUrl: string;
+    authenticationSecret: string;
+  }) => ScreenConnectApi;
+  /** Receives only a static sanitized error and operation name, never credentials or provider bodies. */
+  captureError?: (error: Error, operation: string) => void;
+}
+//#endregion
+//#region src/server.d.ts
+declare const SERVER_VERSION: string;
+declare const SERVER_NAME = "connectwise-screenconnect-mcp";
+declare function createServer(api: ConnectApi, dependencies?: ToolDependencies): McpServer;
+declare function startServer(api?: ConnectApi, dependencies?: ToolDependencies): Promise<McpServer>;
+//#endregion
+export { type ConnectApi, SERVER_NAME, SERVER_VERSION, type ToolDependencies, createServer, startServer };