@defai.digital/ax-cli 4.4.6 → 4.4.10

package/dist/mcp/resources.d.ts

@@ -1,58 +0,0 @@
-/**
- * MCP Resource Management (Phase 4)
- *
- * Enables users to reference MCP-exposed resources using @mcp: syntax
- * Similar to file references, but for database tables, API endpoints, etc.
- *
- * BUG FIX: Updated to use v2 manager's connection state instead of legacy clients Map.
- * The v1 MCPManager now wraps v2 internally, so we access the v2 instance.
- */
-import type { MCPManager } from './client.js';
-import { MCPManagerV2 } from './client-v2.js';
-export interface MCPResource {
-    /** Resource URI (e.g., database://users, api://endpoints/get-user) */
-    uri: string;
-    /** Human-readable name */
-    name: string;
-    /** Resource description */
-    description?: string;
-    /** MIME type if applicable */
-    mimeType?: string;
-    /** Server that provides this resource */
-    serverName: string;
-    /** Full reference string for user input: @mcp:server/uri */
-    reference: string;
-}
-/**
- * List all resources from MCP servers
- */
-export declare function listAllResources(mcpManager: MCPManager | MCPManagerV2): Promise<MCPResource[]>;
-/**
- * List resources from a specific MCP server
- */
-export declare function listServerResources(mcpManager: MCPManager | MCPManagerV2, serverName: string): Promise<MCPResource[]>;
-/**
- * Get resource content from MCP server
- */
-export declare function getResourceContent(mcpManager: MCPManager | MCPManagerV2, serverName: string, uri: string): Promise<string>;
-/**
- * Parse @mcp: reference
- * Format: @mcp:server/uri
- */
-export declare function parseMCPReference(reference: string): {
-    serverName: string;
-    uri: string;
-} | null;
-/**
- * Extract all MCP references from text
- * BUG FIX: Exclude trailing punctuation that could be captured accidentally
- */
-export declare function extractMCPReferences(text: string): string[];
-/**
- * Replace MCP references in text with actual content
- */
-export declare function resolveMCPReferences(text: string, mcpManager: MCPManager | MCPManagerV2): Promise<string>;
-/**
- * Search resources by name or URI
- */
-export declare function searchResources(resources: MCPResource[], query: string): MCPResource[];

package/dist/mcp/resources.js

@@ -1,144 +0,0 @@
-/**
- * MCP Resource Management (Phase 4)
- *
- * Enables users to reference MCP-exposed resources using @mcp: syntax
- * Similar to file references, but for database tables, API endpoints, etc.
- *
- * BUG FIX: Updated to use v2 manager's connection state instead of legacy clients Map.
- * The v1 MCPManager now wraps v2 internally, so we access the v2 instance.
- */
-import { MCPManagerV2, createServerName } from './client-v2.js';
-import { extractErrorMessage } from '../utils/error-handler.js';
-/**
- * Get the v2 manager from either v1 or v2 instance
- */
-function getV2Manager(mcpManager) {
-    // If it's already v2, return it directly
-    if (mcpManager instanceof MCPManagerV2) {
-        return mcpManager;
-    }
-    // Otherwise, it's v1 wrapper - access the internal v2 instance
-    return mcpManager.v2;
-}
-/**
- * List all resources from MCP servers
- */
-export async function listAllResources(mcpManager) {
-    const resources = [];
-    const v2 = getV2Manager(mcpManager);
-    const servers = v2.getServers();
-    for (const serverName of servers) {
-        try {
-            const serverResources = await listServerResources(mcpManager, String(serverName));
-            resources.push(...serverResources);
-        }
-        catch {
-            // Silently skip servers that don't support resources
-            console.warn(`Server "${serverName}" does not support resources or failed to list them`);
-        }
-    }
-    return resources;
-}
-/**
- * List resources from a specific MCP server
- */
-export async function listServerResources(mcpManager, serverName) {
-    const v2 = getV2Manager(mcpManager);
-    const brandedServerName = createServerName(serverName);
-    if (!brandedServerName) {
-        return [];
-    }
-    // Use the v2 manager's listResources method
-    const result = await v2.listResources(brandedServerName);
-    if (!result.success) {
-        return [];
-    }
-    // Convert to our resource format
-    return result.value.map(resource => ({
-        uri: resource.uri,
-        name: resource.name || resource.uri,
-        description: resource.description,
-        mimeType: resource.mimeType,
-        serverName,
-        reference: `@mcp:${serverName}/${resource.uri}`
-    }));
-}
-/**
- * Get resource content from MCP server
- */
-export async function getResourceContent(mcpManager, serverName, uri) {
-    const v2 = getV2Manager(mcpManager);
-    const brandedServerName = createServerName(serverName);
-    if (!brandedServerName) {
-        throw new Error(`Invalid server name: "${serverName}"`);
-    }
-    const result = await v2.readResource(brandedServerName, uri);
-    if (!result.success) {
-        throw new Error(`Failed to read resource ${uri}: ${extractErrorMessage(result.error)}`);
-    }
-    return result.value;
-}
-/**
- * Parse @mcp: reference
- * Format: @mcp:server/uri
- */
-export function parseMCPReference(reference) {
-    if (!reference.startsWith('@mcp:')) {
-        return null;
-    }
-    const withoutPrefix = reference.substring(5); // Remove '@mcp:'
-    const slashIndex = withoutPrefix.indexOf('/');
-    if (slashIndex === -1) {
-        return null;
-    }
-    const serverName = withoutPrefix.substring(0, slashIndex);
-    const uri = withoutPrefix.substring(slashIndex + 1);
-    // BUG FIX: Validate that both serverName and uri are non-empty
-    if (!serverName || !uri) {
-        return null;
-    }
-    return { serverName, uri };
-}
-/**
- * Extract all MCP references from text
- * BUG FIX: Exclude trailing punctuation that could be captured accidentally
- */
-export function extractMCPReferences(text) {
-    // Pattern captures @mcp:server/uri but excludes trailing punctuation
-    // [^\s.,;:!?)\]}>] ensures we don't capture sentence-ending punctuation
-    const pattern = /@mcp:[a-z0-9_-]+\/[^\s.,;:!?)\]}>]+/gi;
-    const matches = text.match(pattern);
-    return matches || [];
-}
-/**
- * Replace MCP references in text with actual content
- */
-export async function resolveMCPReferences(text, mcpManager) {
-    const references = extractMCPReferences(text);
-    let result = text;
-    for (const reference of references) {
-        const parsed = parseMCPReference(reference);
-        if (!parsed)
-            continue;
-        try {
-            const content = await getResourceContent(mcpManager, parsed.serverName, parsed.uri);
-            // Replace reference with content (with context)
-            result = result.replace(reference, `\n--- Resource: ${reference} ---\n${content}\n--- End Resource ---\n`);
-        }
-        catch {
-            // Replace with error message
-            result = result.replace(reference, `[Error: Could not load resource ${reference}]`);
-        }
-    }
-    return result;
-}
-/**
- * Search resources by name or URI
- */
-export function searchResources(resources, query) {
-    const lowerQuery = query.toLowerCase();
-    return resources.filter(resource => resource.name.toLowerCase().includes(lowerQuery) ||
-        resource.uri.toLowerCase().includes(lowerQuery) ||
-        (resource.description && resource.description.toLowerCase().includes(lowerQuery)));
-}
-//# sourceMappingURL=resources.js.map

package/dist/mcp/resources.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/mcp/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAiBhE;;GAEG;AACH,SAAS,YAAY,CAAC,UAAqC;IACzD,yCAAyC;IACzC,IAAI,UAAU,YAAY,YAAY,EAAE,CAAC;QACvC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,+DAA+D;IAC/D,OAAQ,UAAkB,CAAC,EAAkB,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAqC;IAC1E,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;IAEhC,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAClF,SAAS,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,OAAO,CAAC,IAAI,CAAC,WAAW,UAAU,qDAAqD,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAqC,EACrC,UAAkB;IAElB,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,4CAA4C;IAC5C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAEzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iCAAiC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnC,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG;QACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU;QACV,SAAS,EAAE,QAAQ,UAAU,IAAI,QAAQ,CAAC,GAAG,EAAE;KAChD,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAqC,EACrC,UAAkB,EAClB,GAAW;IAEX,MAAM,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEvD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAE7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,KAAK,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;IAC/D,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAEpD,+DAA+D;IAC/D,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,OAAO,GAAG,uCAAuC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,OAAO,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,UAAqC;IAErC,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,GAAG,IAAI,CAAC;IAElB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACpF,gDAAgD;YAChD,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,SAAS,EACT,mBAAmB,SAAS,SAAS,OAAO,0BAA0B,CACvE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;YAC7B,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,SAAS,EACT,mCAAmC,SAAS,GAAG,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAwB,EAAE,KAAa;IACrE,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CACjC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QAChD,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/C,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAClF,CAAC;AACJ,CAAC"}

package/dist/mcp/schema-validator.d.ts

@@ -1,82 +0,0 @@
-/**
- * MCP Tool Output Schema Validation
- *
- * Validates tool outputs against their declared JSON schemas using Ajv.
- * Uses the MCP SDK's AjvJsonSchemaValidator for consistency.
- *
- * MCP Specification: Tool Output Schemas (2025-06-18)
- *
- * @module mcp/schema-validator
- */
-/**
- * Schema validation result status
- */
-export type SchemaValidationStatus = 'valid' | 'invalid' | 'no-schema';
-/**
- * Schema validation result
- */
-export interface SchemaValidationResult {
-    /** Validation status */
-    status: SchemaValidationStatus;
-    /** Validation errors (if status is 'invalid') */
-    errors?: string[];
-    /** The schema that was used for validation */
-    schema?: unknown;
-}
-/**
- * Tool Output Schema Validator
- *
- * Validates MCP tool outputs against their declared JSON schemas.
- *
- * @example
- * ```typescript
- * const validator = new ToolOutputValidator();
- *
- * // Validate tool output
- * const result = validator.validate(outputSchema, toolOutput);
- *
- * if (result.status === 'invalid') {
- *   console.warn('Tool output validation failed:', result.errors);
- * }
- * ```
- */
-export declare class ToolOutputValidator {
-    private validator;
-    constructor();
-    /**
-     * Validate tool output against schema
-     *
-     * @param schema - JSON schema to validate against (or undefined if no schema)
-     * @param output - Tool output to validate
-     * @returns Validation result
-     */
-    validate(schema: unknown, output: unknown): SchemaValidationResult;
-    /**
-     * Validate tool output content array
-     *
-     * MCP tool results return an array of content items.
-     * This method validates the extracted content.
-     *
-     * BUG FIX: Handles multiple text content items correctly by:
-     * 1. First trying direct concatenation (for chunked JSON from streaming)
-     * 2. If that fails, try parsing each item individually
-     * 3. If all items are valid JSON, validate as array of JSON objects
-     *
-     * @param schema - JSON schema
-     * @param content - MCP tool result content array
-     * @returns Validation result
-     */
-    validateContent(schema: unknown, content: Array<{
-        type: string;
-        text?: string;
-        [key: string]: unknown;
-    }>): SchemaValidationResult;
-}
-/**
- * Get the singleton validator instance
- */
-export declare function getToolOutputValidator(): ToolOutputValidator;
-/**
- * Reset the validator (for testing)
- */
-export declare function resetToolOutputValidator(): void;

package/dist/mcp/schema-validator.js

@@ -1,161 +0,0 @@
-/**
- * MCP Tool Output Schema Validation
- *
- * Validates tool outputs against their declared JSON schemas using Ajv.
- * Uses the MCP SDK's AjvJsonSchemaValidator for consistency.
- *
- * MCP Specification: Tool Output Schemas (2025-06-18)
- *
- * @module mcp/schema-validator
- */
-import { AjvJsonSchemaValidator } from '@modelcontextprotocol/sdk/validation/ajv';
-import { extractErrorMessage } from '../utils/error-handler.js';
-/**
- * Tool Output Schema Validator
- *
- * Validates MCP tool outputs against their declared JSON schemas.
- *
- * @example
- * ```typescript
- * const validator = new ToolOutputValidator();
- *
- * // Validate tool output
- * const result = validator.validate(outputSchema, toolOutput);
- *
- * if (result.status === 'invalid') {
- *   console.warn('Tool output validation failed:', result.errors);
- * }
- * ```
- */
-export class ToolOutputValidator {
-    validator;
-    constructor() {
-        this.validator = new AjvJsonSchemaValidator();
-    }
-    /**
-     * Validate tool output against schema
-     *
-     * @param schema - JSON schema to validate against (or undefined if no schema)
-     * @param output - Tool output to validate
-     * @returns Validation result
-     */
-    validate(schema, output) {
-        // No schema defined
-        if (schema === undefined || schema === null) {
-            return { status: 'no-schema' };
-        }
-        // Empty schema (matches anything)
-        if (typeof schema === 'object' && Object.keys(schema).length === 0) {
-            return { status: 'valid', schema };
-        }
-        try {
-            // Use the SDK's validator - getValidator returns a function
-            const validateFn = this.validator.getValidator(schema);
-            const result = validateFn(output);
-            if (result.valid) {
-                return { status: 'valid', schema };
-            }
-            // Extract error message
-            return {
-                status: 'invalid',
-                errors: result.errorMessage ? [result.errorMessage] : ['Validation failed'],
-                schema,
-            };
-        }
-        catch (error) {
-            // Schema compilation error
-            return {
-                status: 'invalid',
-                errors: [`Schema compilation error: ${extractErrorMessage(error)}`],
-                schema,
-            };
-        }
-    }
-    /**
-     * Validate tool output content array
-     *
-     * MCP tool results return an array of content items.
-     * This method validates the extracted content.
-     *
-     * BUG FIX: Handles multiple text content items correctly by:
-     * 1. First trying direct concatenation (for chunked JSON from streaming)
-     * 2. If that fails, try parsing each item individually
-     * 3. If all items are valid JSON, validate as array of JSON objects
-     *
-     * @param schema - JSON schema
-     * @param content - MCP tool result content array
-     * @returns Validation result
-     */
-    validateContent(schema, content) {
-        if (schema === undefined || schema === null) {
-            return { status: 'no-schema' };
-        }
-        // Extract text content items
-        const textItems = content
-            .filter((item) => item.type === 'text' && item.text)
-            .map((item) => item.text);
-        if (textItems.length === 0) {
-            // No text content to validate
-            return { status: 'valid', schema };
-        }
-        // Single item - simple case
-        if (textItems.length === 1) {
-            let parsedOutput;
-            try {
-                parsedOutput = JSON.parse(textItems[0]);
-            }
-            catch {
-                // Not JSON - validate as string if schema allows
-                parsedOutput = textItems[0];
-            }
-            return this.validate(schema, parsedOutput);
-        }
-        // Multiple text items - try direct concatenation first
-        // This handles streaming chunked JSON like {"com" + "plete":true}
-        const directConcat = textItems.join('');
-        try {
-            const parsedOutput = JSON.parse(directConcat);
-            return this.validate(schema, parsedOutput);
-        }
-        catch {
-            // Direct concatenation didn't produce valid JSON
-        }
-        // BUG FIX: Try parsing each item individually
-        // If all parse successfully, validate as array of JSON objects
-        const parsedItems = [];
-        let allJson = true;
-        for (const text of textItems) {
-            try {
-                parsedItems.push(JSON.parse(text));
-            }
-            catch {
-                allJson = false;
-                break;
-            }
-        }
-        if (allJson) {
-            // All items are valid JSON - validate as array (or single if only one)
-            return this.validate(schema, parsedItems.length === 1 ? parsedItems[0] : parsedItems);
-        }
-        // Not JSON - validate the concatenated text as string
-        return this.validate(schema, directConcat);
-    }
-}
-// Singleton instance
-let validatorInstance = null;
-/**
- * Get the singleton validator instance
- */
-export function getToolOutputValidator() {
-    if (!validatorInstance) {
-        validatorInstance = new ToolOutputValidator();
-    }
-    return validatorInstance;
-}
-/**
- * Reset the validator (for testing)
- */
-export function resetToolOutputValidator() {
-    validatorInstance = null;
-}
-//# sourceMappingURL=schema-validator.js.map

package/dist/mcp/schema-validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema-validator.js","sourceRoot":"","sources":["../../src/mcp/schema-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAElF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAmBhE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,mBAAmB;IACtB,SAAS,CAAyB;IAE1C;QACE,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,MAAe,EAAE,MAAe;QACvC,oBAAoB;QACpB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QAED,kCAAkC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,4DAA4D;YAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAwB,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAElC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACrC,CAAC;YAED,wBAAwB;YACxB,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAC3E,MAAM;aACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2BAA2B;YAC3B,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,CAAC,6BAA6B,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnE,MAAM;aACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,eAAe,CACb,MAAe,EACf,OAAuE;QAEvE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACjC,CAAC;QAED,6BAA6B;QAC7B,MAAM,SAAS,GAAG,OAAO;aACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC;aACnD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC;QAEtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,8BAA8B;YAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACrC,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,YAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,iDAAiD;gBACjD,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QAED,uDAAuD;QACvD,kEAAkE;QAClE,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;QAED,8CAA8C;QAC9C,+DAA+D;QAC/D,MAAM,WAAW,GAAc,EAAE,CAAC;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC;QAEnB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,KAAK,CAAC;gBAChB,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,uEAAuE;YACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACxF,CAAC;QAED,sDAAsD;QACtD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,qBAAqB;AACrB,IAAI,iBAAiB,GAA+B,IAAI,CAAC;AAEzD;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,iBAAiB,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,iBAAiB,GAAG,IAAI,CAAC;AAC3B,CAAC"}

package/dist/mcp/ssrf-protection.d.ts

@@ -1,86 +0,0 @@
-/**
- * SSRF Protection for HTTP/SSE Transports (REQ-SEC-011)
- *
- * Prevents Server-Side Request Forgery attacks by validating URLs
- * Blocks:
- * - Private IP addresses (RFC 1918, loopback, link-local)
- * - DNS rebinding attacks
- * - Cloud metadata endpoints
- * - Dangerous protocols
- *
- * Security: CVSS 8.6 (High Priority)
- */
-/**
- * URL validation result
- */
-export interface SSRFValidationResult {
-    valid: boolean;
-    error?: string;
-    category?: SSRFThreatCategory;
-    resolvedIp?: string;
-}
-/**
- * SSRF threat categories
- */
-export declare enum SSRFThreatCategory {
-    PRIVATE_IP = "PRIVATE_IP",
-    BLOCKED_HOSTNAME = "BLOCKED_HOSTNAME",
-    INVALID_PROTOCOL = "INVALID_PROTOCOL",
-    INVALID_URL = "INVALID_URL",
-    DNS_REBINDING = "DNS_REBINDING"
-}
-/**
- * Validate URL against SSRF threats
- *
- * @param urlString - URL to validate
- * @returns Validation result
- *
- * @example
- * ```typescript
- * const result = validateURL('https://api.example.com');
- * if (!result.valid) {
- *   console.error(`SSRF threat detected: ${result.error}`);
- * }
- * ```
- */
-export declare function validateURL(urlString: string): SSRFValidationResult;
-/**
- * Validate MCP HTTP/SSE transport URL
- *
- * @param url - Transport URL
- * @param transportType - Transport type ('http' or 'sse')
- * @returns Validation result
- */
-export declare function validateTransportURL(url: string, transportType: 'http' | 'sse'): SSRFValidationResult;
-/**
- * Safe URL wrapper for HTTP requests
- *
- * @param url - URL to validate and wrap
- * @returns Validated URL or throws error
- *
- * @example
- * ```typescript
- * try {
- *   const safeUrl = safeURL('https://api.example.com');
- *   await fetch(safeUrl);
- * } catch (error) {
- *   console.error('SSRF protection blocked request:', error);
- * }
- * ```
- */
-export declare function safeURL(url: string): string;
-/**
- * Batch validate multiple URLs
- *
- * @param urls - Array of URLs to validate
- * @returns Array of validation results
- */
-export declare function validateURLs(urls: string[]): SSRFValidationResult[];
-/**
- * Get SSRF protection statistics
- */
-export declare function getSSRFStats(): {
-    blockedHostnames: number;
-    privateIPRanges: number;
-    allowedProtocols: number;
-};