@botozap/mcp 0.1.0 → 0.2.1

package/dist/http.js

@@ -0,0 +1,280 @@
+import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
+import { createServer, } from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+import { createClient } from "./client.js";
+import { buildServer } from "./server.js";
+const MAX_BODY_BYTES = 1_048_576;
+/**
+ * Inicia um endpoint MCP remoto stateful. Cada sessão é criada a partir da
+ * chave Bearer do initialize e fica presa ao mesmo fingerprint nos requests
+ * seguintes; a autoridade da Conta continua sendo derivada pela API BotoZap.
+ */
+export async function startStreamableHttpServer(options) {
+    const sessions = new Map();
+    const reservations = { byApiKey: new Map(), total: 0 };
+    const lifecycle = { closing: false };
+    const idleTimeoutMs = Math.max(1, options.sessionIdleTimeoutMs ?? 5 * 60_000);
+    const sweep = setInterval(() => {
+        const now = Date.now();
+        for (const [sessionId, session] of sessions) {
+            if (session.activeRequests === 0 &&
+                now - session.lastActivityAt >= idleTimeoutMs) {
+                void closeSession(sessions, sessionId, session);
+            }
+        }
+    }, Math.max(1, options.sessionSweepIntervalMs ?? 30_000));
+    sweep.unref?.();
+    const http = createServer((request, response) => {
+        void handleRequest(request, response, sessions, reservations, lifecycle, options).catch(() => {
+            if (!response.headersSent) {
+                jsonRpcError(response, 500, -32603, "Erro interno do servidor MCP.");
+            }
+            else if (!response.writableEnded) {
+                response.end();
+            }
+        });
+    });
+    const host = options.host ?? "127.0.0.1";
+    try {
+        await listen(http, options.port ?? 0, host);
+    }
+    catch (error) {
+        clearInterval(sweep);
+        throw error;
+    }
+    const address = http.address();
+    if (!address || typeof address === "string") {
+        clearInterval(sweep);
+        await closeHttp(http);
+        throw new Error("Servidor MCP remoto iniciou sem endereço TCP.");
+    }
+    let closePromise;
+    return {
+        url: new URL(`http://${displayHost(host)}:${address.port}/mcp`),
+        close() {
+            if (closePromise)
+                return closePromise;
+            lifecycle.closing = true;
+            clearInterval(sweep);
+            const httpClosing = closeHttp(http);
+            closePromise = (async () => {
+                await closeAllSessions(sessions);
+                await httpClosing;
+                // Um initialize já autenticado pode ter registrado a sessão enquanto
+                // o servidor HTTP drenava o request. A segunda passagem fecha essa janela.
+                await closeAllSessions(sessions);
+            })();
+            return closePromise;
+        },
+    };
+}
+async function handleRequest(request, response, sessions, reservations, lifecycle, options) {
+    const url = new URL(request.url ?? "/", "http://mcp.invalid");
+    if (url.pathname !== "/mcp") {
+        jsonRpcError(response, 404, -32001, "Endpoint MCP não encontrado.");
+        return;
+    }
+    if (lifecycle.closing) {
+        jsonRpcError(response, 503, -32000, "Servidor MCP em encerramento.");
+        return;
+    }
+    const apiKey = bearerToken(request);
+    if (!apiKey) {
+        response.setHeader("WWW-Authenticate", "Bearer");
+        jsonRpcError(response, 401, -32001, "Autenticação Bearer obrigatória.");
+        return;
+    }
+    const sessionId = singleHeader(request, "mcp-session-id");
+    if (sessionId) {
+        const session = sessions.get(sessionId);
+        if (!session || !sameFingerprint(session.apiKeyFingerprint, apiKey)) {
+            jsonRpcError(response, 404, -32001, "Sessão MCP inválida.");
+            return;
+        }
+        const body = request.method === "POST" ? await readJsonBody(request) : undefined;
+        await handleSessionRequest(session, request, response, body);
+        return;
+    }
+    if (request.method !== "POST") {
+        jsonRpcError(response, 400, -32000, "Inicialize uma sessão MCP primeiro.");
+        return;
+    }
+    const body = await readJsonBody(request);
+    if (!isInitializeRequest(body)) {
+        jsonRpcError(response, 400, -32000, "Requisição initialize obrigatória.");
+        return;
+    }
+    if (!(await authenticatesForEvents(apiKey, options))) {
+        response.setHeader("WWW-Authenticate", "Bearer");
+        jsonRpcError(response, 401, -32001, "Credencial inválida ou sem events:read.");
+        return;
+    }
+    if (lifecycle.closing) {
+        jsonRpcError(response, 503, -32000, "Servidor MCP em encerramento.");
+        return;
+    }
+    if (sessions.size + reservations.total >= (options.maxSessions ?? 1_000)) {
+        jsonRpcError(response, 429, -32000, "Limite de sessões MCP atingido.");
+        return;
+    }
+    const apiKeyFingerprint = fingerprint(apiKey);
+    const apiKeyReservationKey = apiKeyFingerprint.toString("base64url");
+    const sessionsForApiKey = [...sessions.values()].filter((candidate) => sameFingerprint(candidate.apiKeyFingerprint, apiKey)).length;
+    const reservedForApiKey = reservations.byApiKey.get(apiKeyReservationKey) ?? 0;
+    if (sessionsForApiKey + reservedForApiKey >=
+        (options.maxSessionsPerApiKey ?? 5)) {
+        jsonRpcError(response, 429, -32000, "Limite de sessões MCP atingido.");
+        return;
+    }
+    reservations.total += 1;
+    reservations.byApiKey.set(apiKeyReservationKey, reservedForApiKey + 1);
+    let reservationReleased = false;
+    const releaseReservation = () => {
+        if (reservationReleased)
+            return;
+        reservationReleased = true;
+        reservations.total -= 1;
+        const remaining = (reservations.byApiKey.get(apiKeyReservationKey) ?? 1) - 1;
+        if (remaining === 0)
+            reservations.byApiKey.delete(apiKeyReservationKey);
+        else
+            reservations.byApiKey.set(apiKeyReservationKey, remaining);
+    };
+    let session;
+    let initializedSessionId;
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: randomUUID,
+        onsessioninitialized: (newSessionId) => {
+            initializedSessionId = newSessionId;
+            if (session)
+                sessions.set(newSessionId, session);
+            releaseReservation();
+        },
+        onsessionclosed: async (closedSessionId) => {
+            const closed = sessions.get(closedSessionId);
+            if (closed)
+                await closeSession(sessions, closedSessionId, closed);
+        },
+    });
+    const server = buildServer({
+        apiKey,
+        baseUrl: options.baseUrl,
+        fetch: options.fetch,
+        eventPollIntervalMs: options.eventPollIntervalMs ?? 15_000,
+        eventSignal: options.eventSignal,
+        maxEventSubscriptions: options.maxEventSubscriptions,
+    });
+    session = {
+        activeRequests: 0,
+        apiKeyFingerprint,
+        lastActivityAt: Date.now(),
+        server,
+        transport,
+    };
+    try {
+        await server.connect(transport);
+        if (lifecycle.closing) {
+            await server.close().catch(() => { });
+            jsonRpcError(response, 503, -32000, "Servidor MCP em encerramento.");
+            return;
+        }
+        await handleSessionRequest(session, request, response, body);
+    }
+    catch (error) {
+        if (initializedSessionId) {
+            await closeSession(sessions, initializedSessionId, session);
+        }
+        else {
+            await server.close().catch(() => { });
+        }
+        throw error;
+    }
+    finally {
+        releaseReservation();
+    }
+}
+async function handleSessionRequest(session, request, response, body) {
+    session.activeRequests += 1;
+    session.lastActivityAt = Date.now();
+    try {
+        await session.transport.handleRequest(request, response, body);
+    }
+    finally {
+        session.activeRequests -= 1;
+        session.lastActivityAt = Date.now();
+    }
+}
+async function closeAllSessions(sessions) {
+    await Promise.allSettled([...sessions].map(([sessionId, session]) => closeSession(sessions, sessionId, session)));
+}
+function closeSession(sessions, sessionId, session) {
+    if (session.closing)
+        return session.closing;
+    if (sessions.get(sessionId) === session)
+        sessions.delete(sessionId);
+    session.closing = session.server.close().catch(() => { });
+    return session.closing;
+}
+async function authenticatesForEvents(apiKey, options) {
+    try {
+        await createClient({
+            apiKey,
+            baseUrl: options.baseUrl,
+            fetch: options.fetch,
+        }).events.list({ after: "0", limit: 1 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function bearerToken(request) {
+    const header = singleHeader(request, "authorization");
+    const match = header?.match(/^Bearer ([^\s,]+)$/i);
+    return match?.[1] ?? null;
+}
+function singleHeader(request, name) {
+    const value = request.headers[name];
+    return typeof value === "string" ? value : null;
+}
+function fingerprint(apiKey) {
+    return createHash("sha256").update(apiKey).digest();
+}
+function sameFingerprint(expected, apiKey) {
+    return timingSafeEqual(expected, fingerprint(apiKey));
+}
+async function readJsonBody(request) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += bytes.length;
+        if (size > MAX_BODY_BYTES)
+            throw new Error("Corpo MCP excede 1 MiB.");
+        chunks.push(bytes);
+    }
+    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+}
+function jsonRpcError(response, status, code, message) {
+    response.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+    response.end(JSON.stringify({ jsonrpc: "2.0", error: { code, message }, id: null }));
+}
+function listen(server, port, host) {
+    return new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, host, () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+}
+function closeHttp(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => (error ? reject(error) : resolve()));
+    });
+}
+function displayHost(host) {
+    return host === "0.0.0.0" || host === "::" ? "127.0.0.1" : host;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,MAAM,cAAc,GAAG,SAAS,CAAC;AA6CjC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,YAAY,GAAwB,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,oBAAoB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC5C,IACE,OAAO,CAAC,cAAc,KAAK,CAAC;gBAC5B,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,aAAa,EAC7C,CAAC;gBACD,KAAK,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,sBAAsB,IAAI,MAAM,CAAC,CAAC,CAAC;IAC1D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC9C,KAAK,aAAa,CAChB,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,OAAO,CACR,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1B,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;YACvE,CAAC;iBAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;gBACnC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,YAAuC,CAAC;IAE5C,OAAO;QACL,GAAG,EAAE,IAAI,GAAG,CAAC,UAAU,WAAW,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,MAAM,CAAC;QAC/D,KAAK;YACH,IAAI,YAAY;gBAAE,OAAO,YAAY,CAAC;YACtC,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;YACzB,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,WAAW,CAAC;gBAClB,qEAAqE;gBACrE,2EAA2E;gBAC3E,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,YAAY,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAwB,EACxB,QAAwB,EACxB,QAA8B,EAC9B,YAAiC,EACjC,SAA0B,EAC1B,OAAoC;IAEpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC5B,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACjD,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC1D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC;YACpE,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,qCAAqC,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QACrD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACjD,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;QACzE,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,iBAAiB,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CACpE,eAAe,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CACrD,CAAC,MAAM,CAAC;IACT,MAAM,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC/E,IACE,iBAAiB,GAAG,iBAAiB;QACrC,CAAC,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC,EACnC,CAAC;QACD,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;IACxB,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,mBAAmB;YAAE,OAAO;QAChC,mBAAmB,GAAG,IAAI,CAAC;QAC3B,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,SAAS,KAAK,CAAC;YAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;;YACnE,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,IAAI,OAA4B,CAAC;IACjC,IAAI,oBAAwC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,UAAU;QAC9B,oBAAoB,EAAE,CAAC,YAAY,EAAE,EAAE;YACrC,oBAAoB,GAAG,YAAY,CAAC;YACpC,IAAI,OAAO;gBAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACjD,kBAAkB,EAAE,CAAC;QACvB,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC7C,IAAI,MAAM;gBAAE,MAAM,YAAY,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QACpE,CAAC;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,MAAM;QAC1D,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;KACrD,CAAC,CAAC;IACH,OAAO,GAAG;QACR,cAAc,EAAE,CAAC;QACjB,iBAAiB;QACjB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;QAC1B,MAAM;QACN,SAAS;KACV,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,YAAY,CAAC,QAAQ,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,kBAAkB,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAgB,EAChB,OAAwB,EACxB,QAAwB,EACxB,IAAa;IAEb,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;QAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAA8B;IAC5D,MAAM,OAAO,CAAC,UAAU,CACtB,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CACzC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAC3C,CACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,QAA8B,EAC9B,SAAiB,EACjB,OAAgB;IAEhB,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO;QAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAAc,EACd,OAA+D;IAE/D,IAAI,CAAC;QACH,MAAM,YAAY,CAAC;YACjB,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAwB;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,OAAwB,EAAE,IAAY;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,MAAc;IACvD,OAAO,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CACnB,QAAwB,EACxB,MAAc,EACd,IAAY,EACZ,OAAe;IAEf,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAClF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC"}

package/dist/index.js

@@ -1,20 +1,63 @@
 #!/usr/bin/env node
 /**
- * Bootstrap do servidor MCP do BotoZap (transporte stdio).
+ * Bootstrap do servidor MCP do BotoZap.
  *
- * Uso: defina `BOTOZAP_API_KEY` (e opcionalmente `BOTOZAP_API_URL`) e rode o
- * binário `botozap-mcp`. O servidor fala MCP por stdin/stdout — não imprima
- * nada em stdout fora do protocolo; logs vão para stderr.
+ * O padrão continua sendo stdio. `BOTOZAP_MCP_TRANSPORT=streamable-http`
+ * inicia o endpoint remoto autenticado por Bearer e o event bus PostgreSQL.
+ * Em stdio, nunca imprima fora do protocolo; todos os logs vão para stderr.
  */
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { connectPostgresEventSignal } from "./event-bus.js";
+import { startStreamableHttpServer } from "./http.js";
+import { DEFAULT_API_URL } from "./client.js";
 import { buildServer, configFromEnv } from "./server.js";
 async function main() {
+    if (process.env.BOTOZAP_MCP_TRANSPORT === "streamable-http") {
+        await startHttpFromEnv();
+        return;
+    }
     const config = configFromEnv();
     const server = buildServer(config);
     const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error("[botozap-mcp] servidor MCP iniciado (stdio).");
 }
+async function startHttpFromEnv() {
+    const connectionString = process.env.BOTOZAP_EVENT_BUS_DATABASE_URL?.trim();
+    if (!connectionString) {
+        throw new Error("BOTOZAP_EVENT_BUS_DATABASE_URL não definida para o transporte streamable-http.");
+    }
+    const port = parsePort(process.env.BOTOZAP_MCP_PORT);
+    const host = process.env.BOTOZAP_MCP_HOST?.trim() || "127.0.0.1";
+    const eventSignal = await connectPostgresEventSignal(connectionString);
+    let remote;
+    try {
+        remote = await startStreamableHttpServer({
+            baseUrl: process.env.BOTOZAP_API_URL?.trim() || DEFAULT_API_URL,
+            eventSignal,
+            host,
+            port,
+        });
+    }
+    catch (error) {
+        await eventSignal.close();
+        throw error;
+    }
+    const shutdown = async () => {
+        await remote.close();
+        await eventSignal.close();
+    };
+    process.once("SIGINT", () => void shutdown().finally(() => process.exit(0)));
+    process.once("SIGTERM", () => void shutdown().finally(() => process.exit(0)));
+    console.error(`[botozap-mcp] servidor MCP iniciado (streamable-http) em ${remote.url.href}`);
+}
+function parsePort(raw) {
+    const value = raw === undefined ? 3001 : Number(raw);
+    if (!Number.isInteger(value) || value < 0 || value > 65_535) {
+        throw new Error("BOTOZAP_MCP_PORT deve ser um inteiro entre 0 e 65535.");
+    }
+    return value;
+}
 main().catch((err) => {
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[botozap-mcp] erro fatal: ${message}`);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;AAChE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,iBAAiB,EAAE,CAAC;QAC5D,MAAM,gBAAgB,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC;IAC5E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC;IACjE,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;YACvC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,eAAe;YAC/D,WAAW;YACX,IAAI;YACJ,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,KAAK,CACX,4DAA4D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAC9E,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/register.d.ts

@@ -3,17 +3,31 @@
  *  1. validar args (zod, feito pelo SDK a partir do `inputSchema`),
  *  2. chamar a API via cliente do `@botozap/sdk`,
  *  3. devolver o JSON cru como conteúdo de texto (JSON pretty),
- *  4. converter `BotoZapError`/exceções em resultado `isError` com mensagem PT-BR.
+ *  4. nas tools migradas, validar a saída forte e devolvê-la também como
+ *     `structuredContent`, com `outputSchema` compatível com MCP SDK 1.29,
+ *  5. converter `BotoZapError`/exceções em resultado `isError` com mensagem PT-BR.
  */
 import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import type { ZodRawShape } from "zod";
+import type { AnyZodObject, ZodRawShape } from "zod";
 import { type Client } from "./client.js";
 /** Assinatura do handler de uma ferramenta: recebe o client + args validados. */
 export type ToolHandler<Args> = (client: Client, args: Args) => Promise<unknown>;
+declare const STRUCTURED_RESULT: unique symbol;
+type StructuredToolResult = {
+    [STRUCTURED_RESULT]: true;
+    textFallback: unknown;
+    structuredContent: Record<string, unknown>;
+};
+/** Resultado compatível de uma operação que concluiu sem corpo HTTP. */
+export declare function emptyOperationResult(): StructuredToolResult;
+export interface Register {
+    (name: string, description: string, inputSchema: ZodRawShape, handler: ToolHandler<Record<string, unknown>>): void;
+    (name: string, description: string, inputSchema: ZodRawShape, outputSchema: AnyZodObject, handler: ToolHandler<Record<string, unknown>>): void;
+}
 /**
  * Fábrica que devolve um `register(...)` ligado a um server + client.
  * `inputSchema` é um *raw shape* zod (objeto de schemas), como o
  * `registerTool` do SDK espera.
  */
-export declare function createRegister(server: McpServer, client: Client): (name: string, description: string, inputSchema: ZodRawShape, handler: ToolHandler<Record<string, unknown>>) => void;
-export type Register = ReturnType<typeof createRegister>;
+export declare function createRegister(server: McpServer, client: Client, apiKey?: string): Register;
+export {};

package/dist/register.js

@@ -3,40 +3,105 @@
  *  1. validar args (zod, feito pelo SDK a partir do `inputSchema`),
  *  2. chamar a API via cliente do `@botozap/sdk`,
  *  3. devolver o JSON cru como conteúdo de texto (JSON pretty),
- *  4. converter `BotoZapError`/exceções em resultado `isError` com mensagem PT-BR.
+ *  4. nas tools migradas, validar a saída forte e devolvê-la também como
+ *     `structuredContent`, com `outputSchema` compatível com MCP SDK 1.29,
+ *  5. converter `BotoZapError`/exceções em resultado `isError` com mensagem PT-BR.
  */
 import { BotoZapError } from "./client.js";
+import { compatibleOutputSchema, structuredError, } from "./schemas.js";
+const STRUCTURED_RESULT = Symbol("structured-result");
+/**
+ * Mantém o valor textual legado quando a API não tem corpo, mas permite que a
+ * tool publique um contrato estruturado explícito para clientes novos.
+ */
+function structuredToolResult(textFallback, structuredContent) {
+    return { [STRUCTURED_RESULT]: true, textFallback, structuredContent };
+}
+/** Resultado compatível de uma operação que concluiu sem corpo HTTP. */
+export function emptyOperationResult() {
+    return structuredToolResult(null, { success: true });
+}
+const API_KEY_PATTERN = /\bbz_(?:live|sandbox)_[A-Za-z0-9._-]+\b/g;
+const BEARER_PATTERN = /\bBearer\s+\S+/gi;
+function safeMessage(value, apiKey) {
+    let message = String(value).replace(BEARER_PATTERN, "Bearer [credencial removida]");
+    if (apiKey)
+        message = message.split(apiKey).join("[credencial removida]");
+    return message.replace(API_KEY_PATTERN, "[credencial removida]");
+}
+function errorResult(err, apiKey) {
+    if (err instanceof BotoZapError) {
+        const message = safeMessage(err.message, apiKey);
+        return {
+            text: `Erro [${err.code}]: ${message}`,
+            structured: structuredError(err.code, message, err.status),
+        };
+    }
+    const message = safeMessage(err instanceof Error ? err.message : err, apiKey);
+    return {
+        text: `Erro: ${message}`,
+        structured: structuredError("tool_error", message, 0),
+    };
+}
+function isObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isStructuredToolResult(value) {
+    return isObject(value) && Reflect.get(value, STRUCTURED_RESULT) === true;
+}
 /**
  * Fábrica que devolve um `register(...)` ligado a um server + client.
  * `inputSchema` é um *raw shape* zod (objeto de schemas), como o
  * `registerTool` do SDK espera.
  */
-export function createRegister(server, client) {
-    return function register(name, description, inputSchema, handler) {
-        server.registerTool(name, { description, inputSchema }, async (args) => {
+export function createRegister(server, client, apiKey) {
+    const register = function register(name, description, inputSchema, outputOrHandler, maybeHandler) {
+        const outputSchema = maybeHandler ? outputOrHandler : undefined;
+        const handler = maybeHandler ?? outputOrHandler;
+        server.registerTool(name, {
+            description,
+            inputSchema,
+            ...(outputSchema
+                ? { outputSchema: compatibleOutputSchema(outputSchema) }
+                : {}),
+        }, async (args) => {
             try {
-                const data = await handler(client, (args ?? {}));
+                const handlerResult = await handler(client, (args ?? {}));
+                const data = isStructuredToolResult(handlerResult)
+                    ? handlerResult.structuredContent
+                    : handlerResult;
+                const textFallback = isStructuredToolResult(handlerResult)
+                    ? handlerResult.textFallback
+                    : handlerResult;
+                const content = [
+                    { type: "text", text: JSON.stringify(textFallback, null, 2) },
+                ];
+                if (!outputSchema)
+                    return { content };
+                if (!isObject(data)) {
+                    throw new Error(`Resposta de ${name} viola o output schema: era esperado um objeto.`);
+                }
+                const parsed = await outputSchema.safeParseAsync(data);
+                if (!parsed.success) {
+                    throw new Error(`Resposta de ${name} viola o output schema: ${parsed.error.issues
+                        .map((issue) => issue.message)
+                        .join(" ")}`);
+                }
                 return {
-                    content: [{ type: "text", text: JSON.stringify(data, null, 2) }],
+                    content,
+                    structuredContent: data,
                 };
             }
             catch (err) {
-                let message;
-                if (err instanceof BotoZapError) {
-                    message = `Erro [${err.code}]: ${err.message}`;
-                }
-                else if (err instanceof Error) {
-                    message = `Erro: ${err.message}`;
-                }
-                else {
-                    message = `Erro: ${String(err)}`;
-                }
+                const result = errorResult(err, apiKey);
                 return {
-                    content: [{ type: "text", text: message }],
+                    content: [{ type: "text", text: result.text }],
+                    ...(outputSchema ? { structuredContent: result.structured } : {}),
                     isError: true,
                 };
             }
         });
     };
+    return register;
 }
 //# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AAQxD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE,MAAc;IAC9D,OAAO,SAAS,QAAQ,CACtB,IAAY,EACZ,WAAmB,EACnB,WAAwB,EACxB,OAA6C;QAE7C,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,KAAK,EAAE,IAAI,EAA2B,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC;gBAC5E,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;iBACjE,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,OAAe,CAAC;gBACpB,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;oBAChC,OAAO,GAAG,SAAS,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;qBAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;oBAChC,OAAO,GAAG,SAAS,GAAG,CAAC,OAAO,EAAE,CAAC;gBACnC,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,SAAS,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;oBAC1C,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,sBAAsB,EACtB,eAAe,GAEhB,MAAM,cAAc,CAAC;AAQtB,MAAM,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAQtD;;;GAGG;AACH,SAAS,oBAAoB,CAC3B,YAAqB,EACrB,iBAA0C;IAE1C,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;AACxE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,oBAAoB;IAClC,OAAO,oBAAoB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAkBD,MAAM,eAAe,GAAG,0CAA0C,CAAC;AACnE,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C,SAAS,WAAW,CAAC,KAAc,EAAE,MAAe;IAClD,IAAI,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CACjC,cAAc,EACd,8BAA8B,CAC/B,CAAC;IACF,IAAI,MAAM;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,MAAe;IAIhD,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,SAAS,GAAG,CAAC,IAAI,MAAM,OAAO,EAAE;YACtC,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9E,OAAO;QACL,IAAI,EAAE,SAAS,OAAO,EAAE;QACxB,UAAU,EAAE,eAAe,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,IAAI,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAiB,EACjB,MAAc,EACd,MAAe;IAEf,MAAM,QAAQ,GAAa,SAAS,QAAQ,CAC1C,IAAY,EACZ,WAAmB,EACnB,WAAwB,EACxB,eAAoE,EACpE,YAAmD;QAEnD,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAE,eAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,OAAO,GAAG,YAAY,IAAK,eAAwD,CAAC;QAC1F,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;YACE,WAAW;YACX,WAAW;YACX,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC,EAAE,YAAY,EAAE,sBAAsB,CAAC,YAAY,CAAC,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;SACR,EACD,KAAK,EAAE,IAAI,EAA2B,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,OAAO,CACjC,MAAM,EACN,CAAC,IAAI,IAAI,EAAE,CAA4B,CACxC,CAAC;gBACF,MAAM,IAAI,GAAG,sBAAsB,CAAC,aAAa,CAAC;oBAChD,CAAC,CAAC,aAAa,CAAC,iBAAiB;oBACjC,CAAC,CAAC,aAAa,CAAC;gBAClB,MAAM,YAAY,GAAG,sBAAsB,CAAC,aAAa,CAAC;oBACxD,CAAC,CAAC,aAAa,CAAC,YAAY;oBAC5B,CAAC,CAAC,aAAa,CAAC;gBAClB,MAAM,OAAO,GAAG;oBACd,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;iBACvE,CAAC;gBACF,IAAI,CAAC,YAAY;oBAAE,OAAO,EAAE,OAAO,EAAE,CAAC;gBAEtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,iDAAiD,CACrE,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,2BAA2B,MAAM,CAAC,KAAK,CAAC,MAAM;yBAC9D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;yBAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,CACf,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,OAAO;oBACP,iBAAiB,EAAE,IAAI;iBACxB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;oBAC9C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/resources/events.d.ts

@@ -0,0 +1,12 @@
+import { type McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Client } from "../client.js";
+export declare const EVENTS_URI_TEMPLATE = "botozap://events{?after,limit}";
+export interface EventSignalSource {
+    subscribe(listener: () => void): () => void;
+}
+export interface RegisterEventResourcesOptions {
+    maxSubscriptions?: number;
+    pollIntervalMs: number;
+    eventSignal?: EventSignalSource;
+}
+export declare function registerEventResources(server: McpServer, client: Client, options: RegisterEventResourcesOptions): () => void;