@frontmcp/sdk 0.2.3 → 0.3.0

package/src/transport/flows/handle.streamable-http.flow.d.ts

@@ -0,0 +1,93 @@
+import { httpInputSchema, FlowRunOptions, httpOutputSchema, FlowBase } from '../../common';
+import { z } from 'zod';
+export declare const plan: {
+    readonly pre: ["parseInput", "router"];
+    readonly execute: ["onInitialize", "onMessage", "onElicitResult"];
+    readonly post: [];
+    readonly finalize: ["cleanup"];
+};
+export declare const stateSchema: z.ZodObject<{
+    token: z.ZodString;
+    session: z.ZodObject<{
+        id: z.ZodString;
+        payload: z.ZodObject<{
+            nodeId: z.ZodString;
+            authSig: z.ZodString;
+            uuid: z.ZodString;
+            iat: z.ZodNumber;
+            protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
+        }, "strip", z.ZodTypeAny, {
+            uuid: string;
+            nodeId: string;
+            authSig: string;
+            iat: number;
+            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        }, {
+            uuid: string;
+            nodeId: string;
+            authSig: string;
+            iat: number;
+            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        payload: {
+            uuid: string;
+            nodeId: string;
+            authSig: string;
+            iat: number;
+            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    }, {
+        id: string;
+        payload: {
+            uuid: string;
+            nodeId: string;
+            authSig: string;
+            iat: number;
+            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    }>;
+    requestType: z.ZodOptional<z.ZodEnum<["initialize", "message", "elicitResult"]>>;
+}, "strip", z.ZodTypeAny, {
+    session: {
+        id: string;
+        payload: {
+            uuid: string;
+            nodeId: string;
+            authSig: string;
+            iat: number;
+            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    };
+    token: string;
+    requestType?: "message" | "initialize" | "elicitResult" | undefined;
+}, {
+    session: {
+        id: string;
+        payload: {
+            uuid: string;
+            nodeId: string;
+            authSig: string;
+            iat: number;
+            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    };
+    token: string;
+    requestType?: "message" | "initialize" | "elicitResult" | undefined;
+}>;
+declare const name: "handle:streamable-http";
+declare global {
+    interface ExtendFlows {
+        'handle:streamable-http': FlowRunOptions<HandleStreamableHttpFlow, typeof plan, typeof httpInputSchema, typeof httpOutputSchema, typeof stateSchema>;
+    }
+}
+export default class HandleStreamableHttpFlow extends FlowBase<typeof name> {
+    name: "handle:streamable-http";
+    paseInput(): Promise<void>;
+    router(): Promise<void>;
+    onInitialize(): Promise<void>;
+    onElicitResult(): Promise<void>;
+    onMessage(): Promise<void>;
+}
+export {};

package/src/transport/flows/handle.streamable-http.flow.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stateSchema = exports.plan = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("../../common");
+const zod_1 = require("zod");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const session_id_utils_1 = require("../../auth/session/utils/session-id.utils");
+exports.plan = {
+    pre: [
+        'parseInput',
+        'router',
+    ],
+    execute: [
+        'onInitialize',
+        'onMessage',
+        'onElicitResult',
+    ],
+    post: [],
+    finalize: [
+        'cleanup',
+    ],
+};
+exports.stateSchema = zod_1.z.object({
+    token: zod_1.z.string(),
+    session: common_1.sessionIdSchema,
+    requestType: zod_1.z.enum(['initialize', 'message', 'elicitResult']).optional(),
+});
+const name = 'handle:streamable-http';
+const { Stage } = (0, common_1.FlowHooksOf)(name);
+let HandleStreamableHttpFlow = class HandleStreamableHttpFlow extends common_1.FlowBase {
+    name = name;
+    async paseInput() {
+        const { request } = this.rawInput;
+        let { token, session } = request[common_1.ServerRequestTokens.auth];
+        if (!session) {
+            session = (0, session_id_utils_1.createSessionId)('streamable-http', token);
+            request[common_1.ServerRequestTokens.auth].session = session;
+        }
+        this.state.set(exports.stateSchema.parse({ token, session }));
+    }
+    async router() {
+        const { request } = this.rawInput;
+        if (types_js_1.InitializeRequestSchema.safeParse(request.body).success) {
+            this.state.set('requestType', 'initialize');
+        }
+        else if (types_js_1.ElicitResultSchema.safeParse(request.body).success) {
+            this.state.set('requestType', 'elicitResult');
+        }
+        else if (types_js_1.RequestSchema.safeParse(request.body).success) {
+            this.state.set('requestType', 'message');
+        }
+        else {
+            this.respond(common_1.httpRespond.rpcError('Invalid Request'));
+        }
+    }
+    async onInitialize() {
+        const transportService = this.scope.transportService;
+        const { request, response } = this.rawInput;
+        const { token, session } = this.state.required;
+        const transport = await transportService.createTransporter('streamable-http', token, session.id, response);
+        await transport.initialize(request, response);
+        this.handled();
+    }
+    async onElicitResult() {
+    }
+    async onMessage() {
+        const transportService = this.scope.transportService;
+        const { request, response } = this.rawInput;
+        const { token, session } = this.state.required;
+        const transport = await transportService.getTransporter('streamable-http', token, session.id);
+        if (!transport) {
+            this.respond(common_1.httpRespond.rpcError('session not initialized'));
+            return;
+        }
+        await transport.handleRequest(request, response);
+    }
+};
+tslib_1.__decorate([
+    Stage('parseInput'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], HandleStreamableHttpFlow.prototype, "paseInput", null);
+tslib_1.__decorate([
+    Stage('router'),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], HandleStreamableHttpFlow.prototype, "router", null);
+tslib_1.__decorate([
+    Stage('onInitialize', {
+        filter: ({ state: { requestType } }) => requestType === 'initialize',
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], HandleStreamableHttpFlow.prototype, "onInitialize", null);
+tslib_1.__decorate([
+    Stage('onElicitResult', {
+        filter: ({ state: { requestType } }) => requestType === 'elicitResult',
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], HandleStreamableHttpFlow.prototype, "onElicitResult", null);
+tslib_1.__decorate([
+    Stage('onMessage', {
+        filter: ({ state: { requestType } }) => requestType === 'message',
+    }),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", []),
+    tslib_1.__metadata("design:returntype", Promise)
+], HandleStreamableHttpFlow.prototype, "onMessage", null);
+HandleStreamableHttpFlow = tslib_1.__decorate([
+    (0, common_1.Flow)({
+        name,
+        plan: exports.plan,
+        access: 'authorized',
+        inputSchema: common_1.httpInputSchema,
+        outputSchema: common_1.httpOutputSchema,
+    })
+], HandleStreamableHttpFlow);
+exports.default = HandleStreamableHttpFlow;
+//# sourceMappingURL=handle.streamable-http.flow.js.map

package/src/transport/flows/handle.streamable-http.flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.streamable-http.flow.js","sourceRoot":"","sources":["../../../../src/transport/flows/handle.streamable-http.flow.ts"],"names":[],"mappings":";;;;AAAA,yCAGsB;AACtB,6BAAsB;AACtB,iEAA8G;AAE9G,gFAA0E;AAE7D,QAAA,IAAI,GAAG;IAClB,GAAG,EAAE;QACH,YAAY;QACZ,QAAQ;KACT;IACD,OAAO,EAAE;QACP,cAAc;QACd,WAAW;QACX,gBAAgB;KACjB;IACD,IAAI,EAAE,EAAE;IACR,QAAQ,EAAE;QACR,SAAS;KACV;CACkC,CAAC;AAGzB,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,wBAAe;IACxB,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG,wBAAiC,CAAC;AAC/C,MAAM,EAAC,KAAK,EAAC,GAAG,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;AAsBnB,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,iBAAqB;IACzE,IAAI,GAAG,IAAI,CAAC;IAGN,AAAN,KAAK,CAAC,SAAS;QACb,MAAM,EAAC,OAAO,EAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEhC,IAAI,EAAC,KAAK,EAAE,OAAO,EAAC,GAAG,OAAO,CAAC,4BAAmB,CAAC,IAAI,CAAkB,CAAC;QAE1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAA,kCAAe,EAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACpD,OAAO,CAAC,4BAAmB,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAW,CAAC,KAAK,CAAC,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAGK,AAAN,KAAK,CAAC,MAAM;QACV,MAAM,EAAC,OAAO,EAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEhC,IAAI,kCAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,6BAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,wBAAa,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACzD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,oBAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAKK,AAAN,KAAK,CAAC,YAAY;QAChB,MAAM,gBAAgB,GAAI,IAAI,CAAC,KAAe,CAAC,gBAAgB,CAAC;QAEhE,MAAM,EAAC,OAAO,EAAE,QAAQ,EAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1C,MAAM,EAAC,KAAK,EAAE,OAAO,EAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3G,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAKK,AAAN,KAAK,CAAC,cAAc;IAEpB,CAAC;IAKK,AAAN,KAAK,CAAC,SAAS;QACb,MAAM,gBAAgB,GAAI,IAAI,CAAC,KAAe,CAAC,gBAAgB,CAAC;QAEhE,MAAM,EAAC,OAAO,EAAE,QAAQ,EAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1C,MAAM,EAAC,KAAK,EAAE,OAAO,EAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,oBAAW,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;CAGF,CAAA;AAhEO;IADL,KAAK,CAAC,YAAY,CAAC;;;;yDAWnB;AAGK;IADL,KAAK,CAAC,QAAQ,CAAC;;;;sDAaf;AAKK;IAHL,KAAK,CAAC,cAAc,EAAE;QACrB,MAAM,EAAE,CAAC,EAAC,KAAK,EAAE,EAAC,WAAW,EAAC,EAAC,EAAE,EAAE,CAAC,WAAW,KAAK,YAAY;KACjE,CAAC;;;;4DASD;AAKK;IAHL,KAAK,CAAC,gBAAgB,EAAE;QACvB,MAAM,EAAE,CAAC,EAAC,KAAK,EAAE,EAAC,WAAW,EAAC,EAAC,EAAE,EAAE,CAAC,WAAW,KAAK,cAAc;KACnE,CAAC;;;;8DAGD;AAKK;IAHL,KAAK,CAAC,WAAW,EAAE;QAClB,MAAM,EAAE,CAAC,EAAC,KAAK,EAAE,EAAC,WAAW,EAAC,EAAC,EAAE,EAAE,CAAC,WAAW,KAAK,SAAS;KAC9D,CAAC;;;;yDAYD;AAjEkB,wBAAwB;IAP5C,IAAA,aAAI,EAAC;QACJ,IAAI;QACJ,IAAI,EAAJ,YAAI;QACJ,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,wBAAe;QAC5B,YAAY,EAAE,yBAAgB;KAC/B,CAAC;GACmB,wBAAwB,CAoE5C;kBApEoB,wBAAwB","sourcesContent":["import {\n  Flow, httpInputSchema, FlowRunOptions, httpOutputSchema, FlowPlan,\n  FlowBase, FlowHooksOf, sessionIdSchema, httpRespond, ServerRequestTokens, Authorization,\n} from '../../common';\nimport {z} from 'zod';\nimport {ElicitResultSchema, InitializeRequestSchema, RequestSchema} from '@modelcontextprotocol/sdk/types.js';\nimport {Scope} from '../../scope';\nimport {createSessionId} from '../../auth/session/utils/session-id.utils';\n\nexport const plan = {\n  pre: [\n    'parseInput',\n    'router',\n  ],\n  execute: [\n    'onInitialize',\n    'onMessage',\n    'onElicitResult',\n  ],\n  post: [],\n  finalize: [\n    'cleanup',\n  ],\n} as const satisfies FlowPlan<string>;\n\n\nexport const stateSchema = z.object({\n  token: z.string(),\n  session: sessionIdSchema,\n  requestType: z.enum(['initialize', 'message', 'elicitResult']).optional(),\n});\n\nconst name = 'handle:streamable-http' as const;\nconst {Stage} = FlowHooksOf(name);\n\n\ndeclare global {\n  interface ExtendFlows {\n    'handle:streamable-http': FlowRunOptions<\n      HandleStreamableHttpFlow,\n      typeof plan,\n      typeof httpInputSchema,\n      typeof httpOutputSchema,\n      typeof stateSchema\n    >;\n  }\n}\n\n@Flow({\n  name,\n  plan,\n  access: 'authorized',\n  inputSchema: httpInputSchema,\n  outputSchema: httpOutputSchema,\n})\nexport default class HandleStreamableHttpFlow extends FlowBase<typeof name> {\n  name = name;\n\n  @Stage('parseInput')\n  async paseInput() {\n    const {request} = this.rawInput;\n\n    let {token, session} = request[ServerRequestTokens.auth] as Authorization;\n\n    if (!session) {\n      session = createSessionId('streamable-http', token);\n      request[ServerRequestTokens.auth].session = session;\n    }\n    this.state.set(stateSchema.parse({token, session}));\n  }\n\n  @Stage('router')\n  async router() {\n    const {request} = this.rawInput;\n\n    if (InitializeRequestSchema.safeParse(request.body).success) {\n      this.state.set('requestType', 'initialize');\n    } else if (ElicitResultSchema.safeParse(request.body).success) {\n      this.state.set('requestType', 'elicitResult');\n    } else if (RequestSchema.safeParse(request.body).success) {\n      this.state.set('requestType', 'message');\n    } else {\n      this.respond(httpRespond.rpcError('Invalid Request'));\n    }\n  }\n\n  @Stage('onInitialize', {\n    filter: ({state: {requestType}}) => requestType === 'initialize',\n  })\n  async onInitialize() {\n    const transportService = (this.scope as Scope).transportService;\n\n    const {request, response} = this.rawInput;\n    const {token, session} = this.state.required;\n    const transport = await transportService.createTransporter('streamable-http', token, session.id, response);\n    await transport.initialize(request, response);\n    this.handled();\n  }\n\n  @Stage('onElicitResult', {\n    filter: ({state: {requestType}}) => requestType === 'elicitResult',\n  })\n  async onElicitResult() {\n\n  }\n\n  @Stage('onMessage', {\n    filter: ({state: {requestType}}) => requestType === 'message',\n  })\n  async onMessage() {\n    const transportService = (this.scope as Scope).transportService;\n\n    const {request, response} = this.rawInput;\n    const {token, session} = this.state.required;\n    const transport = await transportService.getTransporter('streamable-http', token, session.id);\n    if (!transport) {\n      this.respond(httpRespond.rpcError('session not initialized'));\n      return;\n    }\n    await transport.handleRequest(request, response);\n  }\n\n\n}\n"]}

package/src/transport/legacy/legacy.sse.tranporter.d.ts

@@ -0,0 +1,75 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+import { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import { JSONRPCMessage, MessageExtraInfo } from '@modelcontextprotocol/sdk/types.js';
+import { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';
+/**
+ * Configuration options for SSEServerTransport.
+ */
+export interface SSEServerTransportOptions {
+    /**
+     * List of allowed host header values for DNS rebinding protection.
+     * If not specified, host validation is disabled.
+     */
+    allowedHosts?: string[];
+    /**
+     * List of allowed origin header values for DNS rebinding protection.
+     * If not specified, origin validation is disabled.
+     */
+    allowedOrigins?: string[];
+    /**
+     * Enable DNS rebinding protection (requires allowedHosts and/or allowedOrigins to be configured).
+     * Default is false for backwards compatibility.
+     */
+    enableDnsRebindingProtection?: boolean;
+    sessionId?: string;
+}
+/**
+ * Server transport for SSE: this will send messages over an SSE connection and receive messages from HTTP POST requests.
+ *
+ * This transport is only available in Node.js environments.
+ */
+export declare class SSEServerTransport implements Transport {
+    private _endpoint;
+    private res;
+    private _sseResponse?;
+    private _sessionId;
+    private _options;
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    onmessage?: (message: JSONRPCMessage, extra?: MessageExtraInfo) => void;
+    /**
+     * Creates a new SSE server transport, which will direct the client to POST messages to the relative or absolute URL identified by `_endpoint`.
+     */
+    constructor(_endpoint: string, res: ServerResponse, options?: SSEServerTransportOptions);
+    /**
+     * Validates request headers for DNS rebinding protection.
+     * @returns Error message if validation fails, undefined if validation passes.
+     */
+    private validateRequestHeaders;
+    /**
+     * Handles the initial SSE connection request.
+     *
+     * This should be called when a GET request is made to establish the SSE stream.
+     */
+    start(): Promise<void>;
+    /**
+     * Handles incoming POST messages.
+     *
+     * This should be called when a POST request is made to send a message to the server.
+     */
+    handlePostMessage(req: IncomingMessage & {
+        auth?: AuthInfo;
+    }, res: ServerResponse, parsedBody?: unknown): Promise<void>;
+    /**
+     * Handle a client message, regardless of how it arrived. This can be used to inform the server of messages that arrive via a means different than HTTP POST.
+     */
+    handleMessage(message: unknown, extra?: MessageExtraInfo): Promise<void>;
+    close(): Promise<void>;
+    send(message: JSONRPCMessage): Promise<void>;
+    /**
+     * Returns the session ID for this transport.
+     *
+     * This can be used to route incoming POST requests.
+     */
+    get sessionId(): string;
+}

package/src/transport/legacy/legacy.sse.tranporter.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SSEServerTransport = void 0;
+const tslib_1 = require("tslib");
+const node_crypto_1 = require("node:crypto");
+const raw_body_1 = tslib_1.__importDefault(require("raw-body"));
+const content_type_1 = tslib_1.__importDefault(require("content-type"));
+const url_1 = require("url");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const MAXIMUM_MESSAGE_SIZE = '4mb';
+/**
+ * Server transport for SSE: this will send messages over an SSE connection and receive messages from HTTP POST requests.
+ *
+ * This transport is only available in Node.js environments.
+ */
+class SSEServerTransport {
+    _endpoint;
+    res;
+    _sseResponse;
+    _sessionId;
+    _options;
+    onclose;
+    onerror;
+    onmessage;
+    /**
+     * Creates a new SSE server transport, which will direct the client to POST messages to the relative or absolute URL identified by `_endpoint`.
+     */
+    constructor(_endpoint, res, options) {
+        this._endpoint = _endpoint;
+        this.res = res;
+        this._sessionId = options?.sessionId ?? (0, node_crypto_1.randomUUID)();
+        this._options = options || { enableDnsRebindingProtection: false };
+    }
+    /**
+     * Validates request headers for DNS rebinding protection.
+     * @returns Error message if validation fails, undefined if validation passes.
+     */
+    validateRequestHeaders(req) {
+        // Skip validation if protection is not enabled
+        if (!this._options.enableDnsRebindingProtection) {
+            return undefined;
+        }
+        // Validate Host header if allowedHosts is configured
+        if (this._options.allowedHosts && this._options.allowedHosts.length > 0) {
+            const hostHeader = req.headers.host;
+            if (!hostHeader || !this._options.allowedHosts.includes(hostHeader)) {
+                return `Invalid Host header: ${hostHeader}`;
+            }
+        }
+        // Validate Origin header if allowedOrigins is configured
+        if (this._options.allowedOrigins && this._options.allowedOrigins.length > 0) {
+            const originHeader = req.headers.origin;
+            if (!originHeader || !this._options.allowedOrigins.includes(originHeader)) {
+                return `Invalid Origin header: ${originHeader}`;
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Handles the initial SSE connection request.
+     *
+     * This should be called when a GET request is made to establish the SSE stream.
+     */
+    async start() {
+        if (this._sseResponse) {
+            throw new Error('SSEServerTransport already started! If using Server class, note that connect() calls start() automatically.');
+        }
+        this.res.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache, no-transform',
+            Connection: 'keep-alive',
+        });
+        // Send the endpoint event
+        // Use a dummy base URL because this._endpoint is relative.
+        // This allows using URL/URLSearchParams for robust parameter handling.
+        const dummyBase = 'http://localhost'; // Any valid base works
+        const endpointUrl = new url_1.URL(this._endpoint, dummyBase);
+        endpointUrl.searchParams.set('sessionId', this._sessionId);
+        // Reconstruct the relative URL string (pathname + search + hash)
+        const relativeUrlWithSession = endpointUrl.pathname + endpointUrl.search + endpointUrl.hash;
+        this.res.write(`event: endpoint\ndata: ${relativeUrlWithSession}\n\n`);
+        this._sseResponse = this.res;
+        this.res.on('close', () => {
+            this._sseResponse = undefined;
+            this.onclose?.();
+        });
+    }
+    /**
+     * Handles incoming POST messages.
+     *
+     * This should be called when a POST request is made to send a message to the server.
+     */
+    async handlePostMessage(req, res, parsedBody) {
+        if (!this._sseResponse) {
+            const message = 'SSE connection not established';
+            res.writeHead(500).end(message);
+            throw new Error(message);
+        }
+        // Validate request headers for DNS rebinding protection
+        const validationError = this.validateRequestHeaders(req);
+        if (validationError) {
+            res.writeHead(403).end(validationError);
+            this.onerror?.(new Error(validationError));
+            return;
+        }
+        const authInfo = req.auth;
+        const requestInfo = { headers: req.headers };
+        let body;
+        try {
+            const ct = content_type_1.default.parse(req.headers['content-type'] ?? '');
+            if (ct.type !== 'application/json') {
+                throw new Error(`Unsupported content-type: ${ct.type}`);
+            }
+            body =
+                parsedBody ??
+                    (await (0, raw_body_1.default)(req, {
+                        limit: MAXIMUM_MESSAGE_SIZE,
+                        encoding: ct.parameters.charset ?? 'utf-8',
+                    }));
+        }
+        catch (error) {
+            res.writeHead(400).end(String(error));
+            this.onerror?.(error);
+            return;
+        }
+        try {
+            await this.handleMessage(typeof body === 'string' ? JSON.parse(body) : body, { requestInfo, authInfo });
+        }
+        catch {
+            res.writeHead(400).end(`Invalid message: ${body}`);
+            return;
+        }
+        res.writeHead(202).end('Accepted');
+    }
+    /**
+     * Handle a client message, regardless of how it arrived. This can be used to inform the server of messages that arrive via a means different than HTTP POST.
+     */
+    async handleMessage(message, extra) {
+        let parsedMessage;
+        try {
+            parsedMessage = types_js_1.JSONRPCMessageSchema.parse(message);
+        }
+        catch (error) {
+            this.onerror?.(error);
+            throw error;
+        }
+        this.onmessage?.(parsedMessage, extra);
+    }
+    async close() {
+        this._sseResponse?.end();
+        this._sseResponse = undefined;
+        this.onclose?.();
+    }
+    async send(message) {
+        if (!this._sseResponse) {
+            throw new Error('Not connected');
+        }
+        this._sseResponse.write(`event: message\ndata: ${JSON.stringify(message)}\n\n`);
+    }
+    /**
+     * Returns the session ID for this transport.
+     *
+     * This can be used to route incoming POST requests.
+     */
+    get sessionId() {
+        return this._sessionId;
+    }
+}
+exports.SSEServerTransport = SSEServerTransport;
+//# sourceMappingURL=legacy.sse.tranporter.js.map

package/src/transport/legacy/legacy.sse.tranporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy.sse.tranporter.js","sourceRoot":"","sources":["../../../../src/transport/legacy/legacy.sse.tranporter.ts"],"names":[],"mappings":";;;;AAAA,6CAAyC;AAEzC,gEAAkC;AAClC,wEAAuC;AACvC,6BAA0B;AAE1B,iEAA4G;AAG5G,MAAM,oBAAoB,GAAG,KAAK,CAAC;AA2BnC;;;;GAIG;AACH,MAAa,kBAAkB;IAWT;IAA2B;IAVvC,YAAY,CAAkB;IAC9B,UAAU,CAAS;IACnB,QAAQ,CAA4B;IAC5C,OAAO,CAAc;IACrB,OAAO,CAA0B;IACjC,SAAS,CAA+D;IAExE;;OAEG;IACH,YAAoB,SAAiB,EAAU,GAAmB,EAAE,OAAmC;QAAnF,cAAS,GAAT,SAAS,CAAQ;QAAU,QAAG,GAAH,GAAG,CAAgB;QAChE,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,SAAS,IAAI,IAAA,wBAAU,GAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,OAAO,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,CAAC;IACrE,CAAC;IAED;;;OAGG;IACK,sBAAsB,CAAC,GAAoB;QACjD,+CAA+C;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,4BAA4B,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,qDAAqD;QACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACpC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACpE,OAAO,wBAAwB,UAAU,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,yDAAyD;QACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YACxC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1E,OAAO,0BAA0B,YAAY,EAAE,CAAC;YAClD,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,6GAA6G,CAC9G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QAEH,0BAA0B;QAC1B,2DAA2D;QAC3D,uEAAuE;QACvE,MAAM,SAAS,GAAG,kBAAkB,CAAC,CAAC,uBAAuB;QAC7D,MAAM,WAAW,GAAG,IAAI,SAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACvD,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAE3D,iEAAiE;QACjE,MAAM,sBAAsB,GAAG,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC;QAE5F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,sBAAsB,MAAM,CAAC,CAAC;QAEvE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;YAC9B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,GAA0C,EAC1C,GAAmB,EACnB,UAAoB;QAEpB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,gCAAgC,CAAC;YACjD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,wDAAwD;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,eAAe,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAyB,GAAG,CAAC,IAAI,CAAC;QAChD,MAAM,WAAW,GAAgB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAS,CAAC;QAEjE,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,sBAAW,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,EAAE,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI;gBACF,UAAU;oBACV,CAAC,MAAM,IAAA,kBAAU,EAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,oBAAoB;wBAC3B,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,IAAI,OAAO;qBAC3C,CAAC,CAAC,CAAC;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAS,CAAC,CAAC;QACjH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB,EAAE,KAAwB;QAC5D,IAAI,aAA6B,CAAC;QAClC,IAAI,CAAC;YACH,aAAa,GAAG,+BAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;IAED;;;;OAIG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AA/KD,gDA+KC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport { IncomingMessage, ServerResponse } from 'node:http';\nimport getRawBody from 'raw-body';\nimport contentType from 'content-type';\nimport { URL } from 'url';\nimport { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';\nimport { JSONRPCMessage, JSONRPCMessageSchema, MessageExtraInfo } from '@modelcontextprotocol/sdk/types.js';\nimport { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';\n\nconst MAXIMUM_MESSAGE_SIZE = '4mb';\n\n/**\n * Configuration options for SSEServerTransport.\n */\nexport interface SSEServerTransportOptions {\n  /**\n   * List of allowed host header values for DNS rebinding protection.\n   * If not specified, host validation is disabled.\n   */\n  allowedHosts?: string[];\n\n  /**\n   * List of allowed origin header values for DNS rebinding protection.\n   * If not specified, origin validation is disabled.\n   */\n  allowedOrigins?: string[];\n\n  /**\n   * Enable DNS rebinding protection (requires allowedHosts and/or allowedOrigins to be configured).\n   * Default is false for backwards compatibility.\n   */\n  enableDnsRebindingProtection?: boolean;\n\n  sessionId?: string;\n}\n\n/**\n * Server transport for SSE: this will send messages over an SSE connection and receive messages from HTTP POST requests.\n *\n * This transport is only available in Node.js environments.\n */\nexport class SSEServerTransport implements Transport {\n  private _sseResponse?: ServerResponse;\n  private _sessionId: string;\n  private _options: SSEServerTransportOptions;\n  onclose?: () => void;\n  onerror?: (error: Error) => void;\n  onmessage?: (message: JSONRPCMessage, extra?: MessageExtraInfo) => void;\n\n  /**\n   * Creates a new SSE server transport, which will direct the client to POST messages to the relative or absolute URL identified by `_endpoint`.\n   */\n  constructor(private _endpoint: string, private res: ServerResponse, options?: SSEServerTransportOptions) {\n    this._sessionId = options?.sessionId ?? randomUUID();\n    this._options = options || { enableDnsRebindingProtection: false };\n  }\n\n  /**\n   * Validates request headers for DNS rebinding protection.\n   * @returns Error message if validation fails, undefined if validation passes.\n   */\n  private validateRequestHeaders(req: IncomingMessage): string | undefined {\n    // Skip validation if protection is not enabled\n    if (!this._options.enableDnsRebindingProtection) {\n      return undefined;\n    }\n\n    // Validate Host header if allowedHosts is configured\n    if (this._options.allowedHosts && this._options.allowedHosts.length > 0) {\n      const hostHeader = req.headers.host;\n      if (!hostHeader || !this._options.allowedHosts.includes(hostHeader)) {\n        return `Invalid Host header: ${hostHeader}`;\n      }\n    }\n\n    // Validate Origin header if allowedOrigins is configured\n    if (this._options.allowedOrigins && this._options.allowedOrigins.length > 0) {\n      const originHeader = req.headers.origin;\n      if (!originHeader || !this._options.allowedOrigins.includes(originHeader)) {\n        return `Invalid Origin header: ${originHeader}`;\n      }\n    }\n\n    return undefined;\n  }\n\n  /**\n   * Handles the initial SSE connection request.\n   *\n   * This should be called when a GET request is made to establish the SSE stream.\n   */\n  async start(): Promise<void> {\n    if (this._sseResponse) {\n      throw new Error(\n        'SSEServerTransport already started! If using Server class, note that connect() calls start() automatically.',\n      );\n    }\n\n    this.res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache, no-transform',\n      Connection: 'keep-alive',\n    });\n\n    // Send the endpoint event\n    // Use a dummy base URL because this._endpoint is relative.\n    // This allows using URL/URLSearchParams for robust parameter handling.\n    const dummyBase = 'http://localhost'; // Any valid base works\n    const endpointUrl = new URL(this._endpoint, dummyBase);\n    endpointUrl.searchParams.set('sessionId', this._sessionId);\n\n    // Reconstruct the relative URL string (pathname + search + hash)\n    const relativeUrlWithSession = endpointUrl.pathname + endpointUrl.search + endpointUrl.hash;\n\n    this.res.write(`event: endpoint\\ndata: ${relativeUrlWithSession}\\n\\n`);\n\n    this._sseResponse = this.res;\n    this.res.on('close', () => {\n      this._sseResponse = undefined;\n      this.onclose?.();\n    });\n  }\n\n  /**\n   * Handles incoming POST messages.\n   *\n   * This should be called when a POST request is made to send a message to the server.\n   */\n  async handlePostMessage(\n    req: IncomingMessage & { auth?: AuthInfo },\n    res: ServerResponse,\n    parsedBody?: unknown,\n  ): Promise<void> {\n    if (!this._sseResponse) {\n      const message = 'SSE connection not established';\n      res.writeHead(500).end(message);\n      throw new Error(message);\n    }\n\n    // Validate request headers for DNS rebinding protection\n    const validationError = this.validateRequestHeaders(req);\n    if (validationError) {\n      res.writeHead(403).end(validationError);\n      this.onerror?.(new Error(validationError));\n      return;\n    }\n\n    const authInfo: AuthInfo | undefined = req.auth;\n    const requestInfo: RequestInfo = { headers: req.headers } as any;\n\n    let body: string | unknown;\n    try {\n      const ct = contentType.parse(req.headers['content-type'] ?? '');\n      if (ct.type !== 'application/json') {\n        throw new Error(`Unsupported content-type: ${ct.type}`);\n      }\n\n      body =\n        parsedBody ??\n        (await getRawBody(req, {\n          limit: MAXIMUM_MESSAGE_SIZE,\n          encoding: ct.parameters.charset ?? 'utf-8',\n        }));\n    } catch (error) {\n      res.writeHead(400).end(String(error));\n      this.onerror?.(error as Error);\n      return;\n    }\n\n    try {\n      await this.handleMessage(typeof body === 'string' ? JSON.parse(body) : body, { requestInfo, authInfo } as any);\n    } catch {\n      res.writeHead(400).end(`Invalid message: ${body}`);\n      return;\n    }\n\n    res.writeHead(202).end('Accepted');\n  }\n\n  /**\n   * Handle a client message, regardless of how it arrived. This can be used to inform the server of messages that arrive via a means different than HTTP POST.\n   */\n  async handleMessage(message: unknown, extra?: MessageExtraInfo): Promise<void> {\n    let parsedMessage: JSONRPCMessage;\n    try {\n      parsedMessage = JSONRPCMessageSchema.parse(message);\n    } catch (error) {\n      this.onerror?.(error as Error);\n      throw error;\n    }\n\n    this.onmessage?.(parsedMessage, extra);\n  }\n\n  async close(): Promise<void> {\n    this._sseResponse?.end();\n    this._sseResponse = undefined;\n    this.onclose?.();\n  }\n\n  async send(message: JSONRPCMessage): Promise<void> {\n    if (!this._sseResponse) {\n      throw new Error('Not connected');\n    }\n\n    this._sseResponse.write(`event: message\\ndata: ${JSON.stringify(message)}\\n\\n`);\n  }\n\n  /**\n   * Returns the session ID for this transport.\n   *\n   * This can be used to route incoming POST requests.\n   */\n  get sessionId(): string {\n    return this._sessionId;\n  }\n}\n"]}

package/src/transport/mcp-handlers/Initialized-notification.hanlder.d.ts

@@ -0,0 +1,3 @@
+import { InitializedNotification, Result } from '@modelcontextprotocol/sdk/types.js';
+import { McpHandler, McpHandlerOptions } from './mcp-handlers.types';
+export default function initializedNotificationHandler(options: McpHandlerOptions): McpHandler<InitializedNotification, Result>;

package/src/transport/mcp-handlers/Initialized-notification.hanlder.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = initializedNotificationHandler;
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+function initializedNotificationHandler(options) {
+    return {
+        requestSchema: types_js_1.InitializedNotificationSchema,
+        handler: async (request, ctx) => {
+            // check session
+            return {};
+        },
+    };
+}
+//# sourceMappingURL=Initialized-notification.hanlder.js.map

package/src/transport/mcp-handlers/Initialized-notification.hanlder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Initialized-notification.hanlder.js","sourceRoot":"","sources":["../../../../src/transport/mcp-handlers/Initialized-notification.hanlder.ts"],"names":[],"mappings":";;AASA,iDAUC;AAnBD,iEAM4C;AAG5C,SAAwB,8BAA8B,CACpD,OAA0B;IAE1B,OAAO;QACL,aAAa,EAAE,wCAA6B;QAC5C,OAAO,EAAE,KAAK,EAAE,OAAgC,EAAE,GAAG,EAAmB,EAAE;YACxE,gBAAgB;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  isInitializedNotification,\n  InitializedNotificationSchema,\n  InitializeResultSchema,\n  InitializedNotification,\n  Result,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { McpHandler, McpHandlerOptions } from './mcp-handlers.types';\n\nexport default function initializedNotificationHandler(\n  options: McpHandlerOptions\n): McpHandler<InitializedNotification, Result> {\n  return {\n    requestSchema: InitializedNotificationSchema,\n    handler: async (request: InitializedNotification, ctx): Promise<Result> => {\n      // check session\n      return {};\n    },\n  };\n}\n"]}

package/src/transport/mcp-handlers/call-tool-request.handler.d.ts

@@ -0,0 +1,3 @@
+import { CallToolRequest, CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import { McpHandler, McpHandlerOptions } from './mcp-handlers.types';
+export default function callToolRequestHandler({ scope }: McpHandlerOptions): McpHandler<CallToolRequest, CallToolResult>;

package/src/transport/mcp-handlers/call-tool-request.handler.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = callToolRequestHandler;
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+function callToolRequestHandler({ scope }) {
+    return {
+        requestSchema: types_js_1.CallToolRequestSchema,
+        handler: async (request, ctx) => {
+            const result = await scope.runFlowForOutput('tools:call-tool', { request, ctx });
+            console.log(result);
+            return result;
+        }
+    };
+}
+//# sourceMappingURL=call-tool-request.handler.js.map

package/src/transport/mcp-handlers/call-tool-request.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-tool-request.handler.js","sourceRoot":"","sources":["../../../../src/transport/mcp-handlers/call-tool-request.handler.ts"],"names":[],"mappings":";;AAOA,yCAaC;AApBD,iEAI4C;AAG5C,SAAwB,sBAAsB,CAC5C,EAAC,KAAK,EAAoB;IAE1B,OAAO;QACL,aAAa,EAAE,gCAAqB;QACpC,OAAO,EAAE,KAAK,EAAE,OAAwB,EAAE,GAAG,EAAE,EAAE;YAE/C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,EAAC,OAAO,EAAE,GAAG,EAAC,CAAC,CAAA;YAC9E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACnB,OAAO,MAAM,CAAC;QAChB,CAAC;KACoD,CAAA;AAEzD,CAAC","sourcesContent":["import {\n  CallToolRequestSchema,\n  CallToolRequest,\n  CallToolResult,\n} from '@modelcontextprotocol/sdk/types.js';\nimport {McpHandler, McpHandlerOptions} from './mcp-handlers.types';\n\nexport default function callToolRequestHandler(\n  {scope}: McpHandlerOptions,\n): McpHandler<CallToolRequest, CallToolResult> {\n  return {\n    requestSchema: CallToolRequestSchema,\n    handler: async (request: CallToolRequest, ctx) =>{\n\n      const result = await scope.runFlowForOutput('tools:call-tool', {request, ctx})\n      console.log(result)\n      return result;\n    }\n  } satisfies McpHandler<CallToolRequest, CallToolResult>\n\n}\n"]}