@defai.digital/ax-cli 4.4.6 → 4.4.10

package/dist/mcp/ssrf-protection.js

@@ -1,311 +0,0 @@
-/**
- * SSRF Protection for HTTP/SSE Transports (REQ-SEC-011)
- *
- * Prevents Server-Side Request Forgery attacks by validating URLs
- * Blocks:
- * - Private IP addresses (RFC 1918, loopback, link-local)
- * - DNS rebinding attacks
- * - Cloud metadata endpoints
- * - Dangerous protocols
- *
- * Security: CVSS 8.6 (High Priority)
- */
-import { getAuditLogger, AuditCategory } from '../utils/audit-logger.js';
-/**
- * Private IP ranges (RFC 1918 and special-use addresses)
- */
-const PRIVATE_IP_RANGES = [
-    // IPv4 Private Ranges
-    { start: '10.0.0.0', end: '10.255.255.255', name: 'RFC1918 Class A' },
-    { start: '172.16.0.0', end: '172.31.255.255', name: 'RFC1918 Class B' },
-    { start: '192.168.0.0', end: '192.168.255.255', name: 'RFC1918 Class C' },
-    // Loopback
-    { start: '127.0.0.0', end: '127.255.255.255', name: 'Loopback' },
-    // Link-local
-    { start: '169.254.0.0', end: '169.254.255.255', name: 'Link-local' },
-    // Multicast
-    { start: '224.0.0.0', end: '239.255.255.255', name: 'Multicast' },
-    // Reserved
-    { start: '240.0.0.0', end: '255.255.255.255', name: 'Reserved' },
-    // Broadcast
-    { start: '255.255.255.255', end: '255.255.255.255', name: 'Broadcast' },
-];
-/**
- * Blocked hostnames (cloud metadata endpoints, etc.)
- */
-const BLOCKED_HOSTNAMES = [
-    // AWS/Azure metadata (same IP)
-    '169.254.169.254',
-    'metadata.google.internal',
-    // GCP metadata
-    'metadata.goog',
-    // Kubernetes metadata
-    'kubernetes.default.svc',
-    // Special addresses
-    'localhost',
-    'localhost.localdomain',
-    '0.0.0.0',
-    '::1',
-    '::',
-    // DNS rebinding targets
-    '0x7f000001', // 127.0.0.1 in hex
-    '2130706433', // 127.0.0.1 in decimal
-];
-/**
- * Allowed protocols
- */
-const ALLOWED_PROTOCOLS = ['http:', 'https:'];
-/**
- * SSRF threat categories
- */
-export var SSRFThreatCategory;
-(function (SSRFThreatCategory) {
-    SSRFThreatCategory["PRIVATE_IP"] = "PRIVATE_IP";
-    SSRFThreatCategory["BLOCKED_HOSTNAME"] = "BLOCKED_HOSTNAME";
-    SSRFThreatCategory["INVALID_PROTOCOL"] = "INVALID_PROTOCOL";
-    SSRFThreatCategory["INVALID_URL"] = "INVALID_URL";
-    SSRFThreatCategory["DNS_REBINDING"] = "DNS_REBINDING";
-})(SSRFThreatCategory || (SSRFThreatCategory = {}));
-/**
- * Convert IP address string to number (unsigned 32-bit)
- */
-function ipToNumber(ip) {
-    const parts = ip.split('.').map(p => parseInt(p, 10));
-    if (parts.length !== 4 || parts.some(p => isNaN(p) || p < 0 || p > 255)) {
-        return -1;
-    }
-    // Use unsigned 32-bit arithmetic (>>> 0 converts to unsigned)
-    return ((parts[0] << 24) + (parts[1] << 16) + (parts[2] << 8) + parts[3]) >>> 0;
-}
-/**
- * Check if IP is in private range
- */
-function isPrivateIP(ip) {
-    const ipNum = ipToNumber(ip);
-    if (ipNum === -1) {
-        return { isPrivate: false };
-    }
-    for (const range of PRIVATE_IP_RANGES) {
-        const startNum = ipToNumber(range.start);
-        const endNum = ipToNumber(range.end);
-        if (ipNum >= startNum && ipNum <= endNum) {
-            return { isPrivate: true, range: range.name };
-        }
-    }
-    return { isPrivate: false };
-}
-/**
- * Check if hostname is blocked
- */
-function isBlockedHostname(hostname) {
-    const normalized = hostname.toLowerCase().trim();
-    // Check exact matches
-    if (BLOCKED_HOSTNAMES.includes(normalized)) {
-        return true;
-    }
-    // Check for localhost variations
-    if (normalized.startsWith('localhost') ||
-        normalized.endsWith('.localhost') ||
-        normalized === '0.0.0.0' ||
-        normalized === '::1') {
-        return true;
-    }
-    return false;
-}
-/**
- * Validate URL against SSRF threats
- *
- * @param urlString - URL to validate
- * @returns Validation result
- *
- * @example
- * ```typescript
- * const result = validateURL('https://api.example.com');
- * if (!result.valid) {
- *   console.error(`SSRF threat detected: ${result.error}`);
- * }
- * ```
- */
-export function validateURL(urlString) {
-    const auditLogger = getAuditLogger();
-    // Parse URL
-    let url;
-    try {
-        url = new URL(urlString);
-    }
-    catch {
-        const result = {
-            valid: false,
-            error: 'Invalid URL format',
-            category: SSRFThreatCategory.INVALID_URL,
-        };
-        auditLogger.logWarning({
-            category: AuditCategory.INPUT_VALIDATION,
-            action: 'ssrf_validation_failed',
-            resource: urlString,
-            outcome: 'failure',
-            error: result.error,
-            details: { category: result.category },
-        });
-        return result;
-    }
-    // Validate protocol
-    if (!ALLOWED_PROTOCOLS.includes(url.protocol)) {
-        const result = {
-            valid: false,
-            error: `Protocol not allowed: ${url.protocol}. Only HTTP(S) allowed.`,
-            category: SSRFThreatCategory.INVALID_PROTOCOL,
-        };
-        auditLogger.logCritical({
-            category: AuditCategory.INPUT_VALIDATION,
-            action: 'ssrf_invalid_protocol',
-            resource: urlString,
-            outcome: 'failure',
-            error: result.error,
-            details: { protocol: url.protocol, category: result.category },
-        });
-        return result;
-    }
-    // Validate hostname
-    const hostname = url.hostname.toLowerCase();
-    // Check for IPv6 addresses (they include brackets in hostname)
-    if (hostname.startsWith('[') && hostname.endsWith(']')) {
-        const result = {
-            valid: false,
-            error: `IPv6 addresses are not allowed: ${hostname}`,
-            category: SSRFThreatCategory.BLOCKED_HOSTNAME,
-        };
-        auditLogger.logCritical({
-            category: AuditCategory.INPUT_VALIDATION,
-            action: 'ssrf_ipv6_blocked',
-            resource: urlString,
-            outcome: 'failure',
-            error: result.error,
-            details: { hostname, category: result.category },
-        });
-        return result;
-    }
-    // Check if hostname is an IPv4 address (to get proper category)
-    const ipMatch = hostname.match(/^(\d{1,3}\.){3}\d{1,3}$/);
-    if (ipMatch) {
-        const privateCheck = isPrivateIP(hostname);
-        if (privateCheck.isPrivate) {
-            const result = {
-                valid: false,
-                error: `Private IP address not allowed: ${hostname} (${privateCheck.range})`,
-                category: SSRFThreatCategory.PRIVATE_IP,
-                resolvedIp: hostname,
-            };
-            auditLogger.logCritical({
-                category: AuditCategory.INPUT_VALIDATION,
-                action: 'ssrf_private_ip',
-                resource: urlString,
-                outcome: 'failure',
-                error: result.error,
-                details: {
-                    ip: hostname,
-                    range: privateCheck.range,
-                    category: result.category,
-                },
-            });
-            return result;
-        }
-    }
-    // Check blocked hostnames (non-IP addresses)
-    if (isBlockedHostname(hostname)) {
-        const result = {
-            valid: false,
-            error: `Blocked hostname: ${hostname}`,
-            category: SSRFThreatCategory.BLOCKED_HOSTNAME,
-        };
-        auditLogger.logCritical({
-            category: AuditCategory.INPUT_VALIDATION,
-            action: 'ssrf_blocked_hostname',
-            resource: urlString,
-            outcome: 'failure',
-            error: result.error,
-            details: { hostname, category: result.category },
-        });
-        return result;
-    }
-    // URL is valid
-    auditLogger.logInfo({
-        category: AuditCategory.INPUT_VALIDATION,
-        action: 'ssrf_validation_passed',
-        resource: urlString,
-        outcome: 'success',
-        details: {
-            hostname,
-            protocol: url.protocol,
-        },
-    });
-    return { valid: true };
-}
-/**
- * Validate MCP HTTP/SSE transport URL
- *
- * @param url - Transport URL
- * @param transportType - Transport type ('http' or 'sse')
- * @returns Validation result
- */
-export function validateTransportURL(url, transportType) {
-    const auditLogger = getAuditLogger();
-    const result = validateURL(url);
-    if (!result.valid) {
-        auditLogger.logCritical({
-            category: AuditCategory.MCP_OPERATION,
-            action: 'mcp_transport_ssrf_blocked',
-            resource: url,
-            outcome: 'failure',
-            error: result.error,
-            details: {
-                transportType,
-                category: result.category,
-            },
-        });
-    }
-    return result;
-}
-/**
- * Safe URL wrapper for HTTP requests
- *
- * @param url - URL to validate and wrap
- * @returns Validated URL or throws error
- *
- * @example
- * ```typescript
- * try {
- *   const safeUrl = safeURL('https://api.example.com');
- *   await fetch(safeUrl);
- * } catch (error) {
- *   console.error('SSRF protection blocked request:', error);
- * }
- * ```
- */
-export function safeURL(url) {
-    const result = validateURL(url);
-    if (!result.valid) {
-        throw new Error(`SSRF protection: ${result.error}`);
-    }
-    return url;
-}
-/**
- * Batch validate multiple URLs
- *
- * @param urls - Array of URLs to validate
- * @returns Array of validation results
- */
-export function validateURLs(urls) {
-    return urls.map(url => validateURL(url));
-}
-/**
- * Get SSRF protection statistics
- */
-export function getSSRFStats() {
-    return {
-        blockedHostnames: BLOCKED_HOSTNAMES.length,
-        privateIPRanges: PRIVATE_IP_RANGES.length,
-        allowedProtocols: ALLOWED_PROTOCOLS.length,
-    };
-}
-//# sourceMappingURL=ssrf-protection.js.map

package/dist/mcp/ssrf-protection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ssrf-protection.js","sourceRoot":"","sources":["../../src/mcp/ssrf-protection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzE;;GAEG;AACH,MAAM,iBAAiB,GAAG;IACxB,sBAAsB;IACtB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACrE,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACvE,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAEzE,WAAW;IACX,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE;IAEhE,aAAa;IACb,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE;IAEpE,YAAY;IACZ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE;IAEjE,WAAW;IACX,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE;IAEhE,YAAY;IACZ,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE;CAC/D,CAAC;AAEX;;GAEG;AACH,MAAM,iBAAiB,GAAsB;IAC3C,+BAA+B;IAC/B,iBAAiB;IACjB,0BAA0B;IAE1B,eAAe;IACf,eAAe;IAEf,sBAAsB;IACtB,wBAAwB;IAExB,oBAAoB;IACpB,WAAW;IACX,uBAAuB;IACvB,SAAS;IACT,KAAK;IACL,IAAI;IAEJ,wBAAwB;IACxB,YAAY,EAAE,mBAAmB;IACjC,YAAY,EAAE,uBAAuB;CACtC,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAYvD;;GAEG;AACH,MAAM,CAAN,IAAY,kBAMX;AAND,WAAY,kBAAkB;IAC5B,+CAAyB,CAAA;IACzB,2DAAqC,CAAA;IACrC,2DAAqC,CAAA;IACrC,iDAA2B,CAAA;IAC3B,qDAA+B,CAAA;AACjC,CAAC,EANW,kBAAkB,KAAlB,kBAAkB,QAM7B;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IACD,8DAA8D;IAC9D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACzC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEjD,sBAAsB;IACtB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,YAAY;IACZ,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,GAAyB;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE,kBAAkB,CAAC,WAAW;SACzC,CAAC;QAEF,WAAW,CAAC,UAAU,CAAC;YACrB,QAAQ,EAAE,aAAa,CAAC,gBAAgB;YACxC,MAAM,EAAE,wBAAwB;YAChC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;SACvC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oBAAoB;IACpB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAe,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAyB;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,yBAAyB,GAAG,CAAC,QAAQ,yBAAyB;YACrE,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB;SAC9C,CAAC;QAEF,WAAW,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,aAAa,CAAC,gBAAgB;YACxC,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;SAC/D,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE5C,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAyB;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,mCAAmC,QAAQ,EAAE;YACpD,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB;SAC9C,CAAC;QAEF,WAAW,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,aAAa,CAAC,gBAAgB;YACxC,MAAM,EAAE,mBAAmB;YAC3B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;SACjD,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gEAAgE;IAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,YAAY,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAyB;gBACnC,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mCAAmC,QAAQ,KAAK,YAAY,CAAC,KAAK,GAAG;gBAC5E,QAAQ,EAAE,kBAAkB,CAAC,UAAU;gBACvC,UAAU,EAAE,QAAQ;aACrB,CAAC;YAEF,WAAW,CAAC,WAAW,CAAC;gBACtB,QAAQ,EAAE,aAAa,CAAC,gBAAgB;gBACxC,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE;oBACP,EAAE,EAAE,QAAQ;oBACZ,KAAK,EAAE,YAAY,CAAC,KAAK;oBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;aACF,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAyB;YACnC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,qBAAqB,QAAQ,EAAE;YACtC,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB;SAC9C,CAAC;QAEF,WAAW,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,aAAa,CAAC,gBAAgB;YACxC,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;SACjD,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe;IACf,WAAW,CAAC,OAAO,CAAC;QAClB,QAAQ,EAAE,aAAa,CAAC,gBAAgB;QACxC,MAAM,EAAE,wBAAwB;QAChC,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE;YACP,QAAQ;YACR,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,aAA6B;IAE7B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAEhC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,WAAW,CAAC,WAAW,CAAC;YACtB,QAAQ,EAAE,aAAa,CAAC,aAAa;YACrC,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,GAAG;YACb,OAAO,EAAE,SAAS;YAClB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE;gBACP,aAAa;gBACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAEhC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAK1B,OAAO;QACL,gBAAgB,EAAE,iBAAiB,CAAC,MAAM;QAC1C,eAAe,EAAE,iBAAiB,CAAC,MAAM;QACzC,gBAAgB,EAAE,iBAAiB,CAAC,MAAM;KAC3C,CAAC;AACJ,CAAC"}

package/dist/mcp/subscriptions.d.ts

@@ -1,168 +0,0 @@
-/**
- * MCP Resource Subscriptions
- *
- * Enables clients to subscribe to resource changes and receive notifications
- * when resources are updated.
- *
- * MCP Specification:
- * - resources/subscribe - Subscribe to a resource
- * - resources/unsubscribe - Unsubscribe from a resource
- * - notifications/resources/updated - Resource update notification
- * - notifications/resources/list_changed - Resource list change notification
- *
- * @module mcp/subscriptions
- */
-import { EventEmitter } from 'events';
-import type { ServerName } from './type-safety.js';
-import { Result } from './type-safety.js';
-/**
- * Resource subscription information
- */
-export interface ResourceSubscription {
-    /** Resource URI */
-    uri: string;
-    /** Server providing the resource */
-    serverName: ServerName;
-    /** When the subscription was created */
-    subscribedAt: Date;
-}
-/**
- * Callback for sending subscription requests to server
- */
-export type SendSubscriptionRequest = (serverName: ServerName, method: 'resources/subscribe' | 'resources/unsubscribe', uri: string) => Promise<Result<void, Error>>;
-/**
- * Callback for checking server capabilities
- */
-export type CheckServerCapabilities = (serverName: ServerName) => Promise<{
-    supportsSubscriptions: boolean;
-}>;
-/**
- * Subscription Manager
- *
- * Manages resource subscriptions across MCP servers.
- *
- * @example
- * ```typescript
- * const manager = new SubscriptionManager();
- *
- * // Subscribe to a resource
- * await manager.subscribe('filesystem', 'file:///config.json');
- *
- * // Listen for updates
- * manager.on('resource-updated', (uri, serverName) => {
- *   console.log(`Resource updated: ${uri} from ${serverName}`);
- * });
- *
- * // Unsubscribe
- * await manager.unsubscribe('filesystem', 'file:///config.json');
- * ```
- */
-export declare class SubscriptionManager extends EventEmitter {
-    private subscriptions;
-    private sendRequest;
-    private checkCapabilities;
-    /**
-     * Set the request sender function
-     * Called by MCPManagerV2 to wire up the request mechanism
-     */
-    setSendRequest(fn: SendSubscriptionRequest): void;
-    /**
-     * Set the capabilities checker function
-     * Called by MCPManagerV2 to wire up capability checking
-     */
-    setCheckCapabilities(fn: CheckServerCapabilities): void;
-    /**
-     * Get subscription key for internal storage
-     */
-    private getKey;
-    /**
-     * Subscribe to a resource
-     *
-     * @param serverName - Server providing the resource
-     * @param uri - Resource URI to subscribe to
-     * @returns Result indicating success or error
-     */
-    subscribe(serverName: ServerName, uri: string): Promise<Result<void, Error>>;
-    /**
-     * Unsubscribe from a resource
-     *
-     * @param serverName - Server providing the resource
-     * @param uri - Resource URI to unsubscribe from
-     * @returns Result indicating success or error
-     */
-    unsubscribe(serverName: ServerName, uri: string): Promise<Result<void, Error>>;
-    /**
-     * Handle resource update notification from server
-     *
-     * @param serverName - Server that sent the notification
-     * @param uri - Updated resource URI
-     */
-    handleResourceUpdated(serverName: ServerName, uri: string): void;
-    /**
-     * Handle resource list change notification from server
-     *
-     * @param serverName - Server that sent the notification
-     */
-    handleResourceListChanged(serverName: ServerName): void;
-    /**
-     * Get all active subscriptions
-     *
-     * @returns Array of active subscriptions
-     */
-    getActiveSubscriptions(): ResourceSubscription[];
-    /**
-     * Get subscriptions for a specific server
-     *
-     * @param serverName - Server to get subscriptions for
-     * @returns Array of subscriptions for the server
-     */
-    getSubscriptionsForServer(serverName: ServerName): ResourceSubscription[];
-    /**
-     * Check if subscribed to a resource
-     *
-     * @param serverName - Server providing the resource
-     * @param uri - Resource URI
-     * @returns true if subscribed
-     */
-    isSubscribed(serverName: ServerName, uri: string): boolean;
-    /**
-     * Get the number of active subscriptions
-     *
-     * @returns Number of active subscriptions
-     */
-    getSubscriptionCount(): number;
-    /**
-     * Resubscribe all subscriptions for a server
-     * Called after server reconnection
-     *
-     * @param serverName - Server to resubscribe for
-     * @returns Results of resubscription attempts
-     */
-    resubscribeForServer(serverName: ServerName): Promise<Array<{
-        uri: string;
-        result: Result<void, Error>;
-    }>>;
-    /**
-     * Unsubscribe from all resources on a server
-     * Called during server disconnection
-     *
-     * @param serverName - Server to unsubscribe from
-     */
-    unsubscribeAllForServer(serverName: ServerName): void;
-    /**
-     * Cleanup all subscriptions
-     */
-    cleanupAll(): void;
-    /**
-     * Clean up resources and remove all event listeners.
-     */
-    destroy(): void;
-}
-/**
- * Get the singleton subscription manager instance
- */
-export declare function getSubscriptionManager(): SubscriptionManager;
-/**
- * Reset the subscription manager (for testing)
- */
-export declare function resetSubscriptionManager(): void;