@frontmcp/testing 0.5.0

package/src/transport/streamable-http.transport.js

@@ -0,0 +1,432 @@
+"use strict";
+/**
+ * @file streamable-http.transport.ts
+ * @description StreamableHTTP transport implementation for MCP Test Client
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StreamableHttpTransport = void 0;
+const DEFAULT_TIMEOUT = 30000;
+/**
+ * StreamableHTTP transport for MCP communication
+ *
+ * This transport uses HTTP POST requests for all communication,
+ * following the MCP StreamableHTTP specification.
+ */
+class StreamableHttpTransport {
+    config;
+    state = 'disconnected';
+    sessionId;
+    authToken;
+    connectionCount = 0;
+    reconnectCount = 0;
+    lastRequestHeaders = {};
+    interceptors;
+    publicMode;
+    constructor(config) {
+        this.config = {
+            baseUrl: config.baseUrl.replace(/\/$/, ''), // Remove trailing slash
+            timeout: config.timeout ?? DEFAULT_TIMEOUT,
+            auth: config.auth ?? {},
+            publicMode: config.publicMode ?? false,
+            debug: config.debug ?? false,
+            interceptors: config.interceptors,
+        };
+        this.authToken = config.auth?.token;
+        this.interceptors = config.interceptors;
+        this.publicMode = config.publicMode ?? false;
+    }
+    async connect() {
+        this.state = 'connecting';
+        this.connectionCount++;
+        try {
+            // Public mode: Skip all authentication - connect without any token
+            if (this.publicMode) {
+                this.log('Public mode: connecting without authentication');
+                this.state = 'connected';
+                return;
+            }
+            // If no auth token provided, request anonymous token from FrontMCP SDK
+            if (!this.authToken) {
+                await this.requestAnonymousToken();
+            }
+            // StreamableHTTP doesn't require an explicit connection step
+            // The session is established on the first request
+            this.state = 'connected';
+            this.log('Connected to StreamableHTTP transport');
+        }
+        catch (error) {
+            this.state = 'error';
+            throw error;
+        }
+    }
+    /**
+     * Request an anonymous token from the FrontMCP OAuth endpoint
+     * This allows the test client to authenticate without user interaction
+     */
+    async requestAnonymousToken() {
+        const clientId = crypto.randomUUID();
+        const tokenUrl = `${this.config.baseUrl}/oauth/token`;
+        this.log(`Requesting anonymous token from ${tokenUrl}`);
+        try {
+            const response = await fetch(tokenUrl, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    grant_type: 'anonymous',
+                    client_id: clientId,
+                    resource: this.config.baseUrl,
+                }),
+            });
+            if (!response.ok) {
+                const errorText = await response.text();
+                this.log(`Failed to get anonymous token: ${response.status} ${errorText}`);
+                // Continue without token - server may allow unauthenticated access
+                return;
+            }
+            const tokenResponse = await response.json();
+            if (tokenResponse.access_token) {
+                this.authToken = tokenResponse.access_token;
+                this.log('Anonymous token acquired successfully');
+            }
+        }
+        catch (error) {
+            this.log(`Error requesting anonymous token: ${error}`);
+            // Continue without token - server may allow unauthenticated access
+        }
+    }
+    async request(message) {
+        this.ensureConnected();
+        const startTime = Date.now();
+        // Process through interceptors if available
+        if (this.interceptors) {
+            const interceptResult = await this.interceptors.processRequest(message, {
+                timestamp: new Date(),
+                transport: 'streamable-http',
+                sessionId: this.sessionId,
+            });
+            switch (interceptResult.type) {
+                case 'mock': {
+                    // Return mock response directly, run through response interceptors
+                    const mockResponse = await this.interceptors.processResponse(message, interceptResult.response, Date.now() - startTime);
+                    return mockResponse;
+                }
+                case 'error':
+                    throw interceptResult.error;
+                case 'continue':
+                    // Use possibly modified request
+                    message = interceptResult.request;
+                    break;
+            }
+        }
+        const headers = this.buildHeaders();
+        this.lastRequestHeaders = headers;
+        const url = `${this.config.baseUrl}/`;
+        this.log(`POST ${url}`, message);
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify(message),
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            // Check for session ID in response headers
+            const newSessionId = response.headers.get('mcp-session-id');
+            if (newSessionId) {
+                this.sessionId = newSessionId;
+            }
+            let jsonResponse;
+            if (!response.ok) {
+                // Handle HTTP errors
+                const errorText = await response.text();
+                this.log(`HTTP Error ${response.status}: ${errorText}`);
+                jsonResponse = {
+                    jsonrpc: '2.0',
+                    id: message.id ?? null,
+                    error: {
+                        code: -32000,
+                        message: `HTTP ${response.status}: ${response.statusText}`,
+                        data: errorText,
+                    },
+                };
+            }
+            else {
+                // Parse response - may be JSON or SSE
+                const contentType = response.headers.get('content-type') ?? '';
+                const text = await response.text();
+                this.log('Response:', text);
+                // Handle empty response (for notifications)
+                if (!text.trim()) {
+                    jsonResponse = {
+                        jsonrpc: '2.0',
+                        id: message.id ?? null,
+                        result: undefined,
+                    };
+                }
+                else if (contentType.includes('text/event-stream')) {
+                    // Parse SSE response - extract data and session ID from event stream
+                    const { response: sseResponse, sseSessionId } = this.parseSSEResponseWithSession(text, message.id);
+                    jsonResponse = sseResponse;
+                    // Store session ID from SSE id field (format: sessionId:messageId)
+                    if (sseSessionId && !this.sessionId) {
+                        this.sessionId = sseSessionId;
+                        this.log('Session ID from SSE:', this.sessionId);
+                    }
+                }
+                else {
+                    jsonResponse = JSON.parse(text);
+                }
+            }
+            // Process response through interceptors
+            if (this.interceptors) {
+                jsonResponse = await this.interceptors.processResponse(message, jsonResponse, Date.now() - startTime);
+            }
+            return jsonResponse;
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            if (error instanceof Error && error.name === 'AbortError') {
+                return {
+                    jsonrpc: '2.0',
+                    id: message.id ?? null,
+                    error: {
+                        code: -32000,
+                        message: `Request timeout after ${this.config.timeout}ms`,
+                    },
+                };
+            }
+            throw error;
+        }
+    }
+    async notify(message) {
+        this.ensureConnected();
+        const headers = this.buildHeaders();
+        this.lastRequestHeaders = headers;
+        const url = `${this.config.baseUrl}/`;
+        this.log(`POST ${url} (notification)`, message);
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify(message),
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            // Update session ID if present
+            const newSessionId = response.headers.get('mcp-session-id');
+            if (newSessionId) {
+                this.sessionId = newSessionId;
+            }
+            if (!response.ok) {
+                const errorText = await response.text();
+                this.log(`HTTP Error ${response.status} on notification: ${errorText}`);
+            }
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            if (error instanceof Error && error.name !== 'AbortError') {
+                throw error;
+            }
+        }
+    }
+    async sendRaw(data) {
+        this.ensureConnected();
+        const headers = this.buildHeaders();
+        this.lastRequestHeaders = headers;
+        const url = `${this.config.baseUrl}/`;
+        this.log(`POST ${url} (raw)`, data);
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers,
+                body: data,
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            const text = await response.text();
+            if (!text.trim()) {
+                return {
+                    jsonrpc: '2.0',
+                    id: null,
+                    error: {
+                        code: -32700,
+                        message: 'Parse error',
+                    },
+                };
+            }
+            return JSON.parse(text);
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            return {
+                jsonrpc: '2.0',
+                id: null,
+                error: {
+                    code: -32700,
+                    message: 'Parse error',
+                    data: error instanceof Error ? error.message : 'Unknown error',
+                },
+            };
+        }
+    }
+    async close() {
+        this.state = 'disconnected';
+        this.sessionId = undefined;
+        this.log('StreamableHTTP transport closed');
+    }
+    isConnected() {
+        return this.state === 'connected';
+    }
+    getState() {
+        return this.state;
+    }
+    getSessionId() {
+        return this.sessionId;
+    }
+    setAuthToken(token) {
+        this.authToken = token;
+    }
+    setTimeout(ms) {
+        this.config.timeout = ms;
+    }
+    setInterceptors(interceptors) {
+        this.interceptors = interceptors;
+    }
+    getInterceptors() {
+        return this.interceptors;
+    }
+    getConnectionCount() {
+        return this.connectionCount;
+    }
+    getReconnectCount() {
+        return this.reconnectCount;
+    }
+    getLastRequestHeaders() {
+        return { ...this.lastRequestHeaders };
+    }
+    async simulateDisconnect() {
+        this.state = 'disconnected';
+        this.sessionId = undefined;
+    }
+    async waitForReconnect(timeoutMs) {
+        const deadline = Date.now() + timeoutMs;
+        // Auto-reconnect
+        this.reconnectCount++;
+        await this.connect();
+        while (Date.now() < deadline) {
+            if (this.state === 'connected') {
+                return;
+            }
+            await new Promise((r) => setTimeout(r, 50));
+        }
+        throw new Error('Timeout waiting for reconnection');
+    }
+    // ═══════════════════════════════════════════════════════════════════
+    // PRIVATE HELPERS
+    // ═══════════════════════════════════════════════════════════════════
+    buildHeaders() {
+        const headers = {
+            'Content-Type': 'application/json',
+            Accept: 'application/json, text/event-stream',
+        };
+        // Only add Authorization header if we have a token AND not in public mode
+        // Public mode explicitly skips auth headers for CI/CD and public docs testing
+        if (this.authToken && !this.publicMode) {
+            headers['Authorization'] = `Bearer ${this.authToken}`;
+        }
+        // Always send session ID if we have one (even in public mode - server creates sessions)
+        if (this.sessionId) {
+            headers['mcp-session-id'] = this.sessionId;
+        }
+        // Add custom headers from config (allow override even in public mode)
+        if (this.config.auth.headers) {
+            Object.assign(headers, this.config.auth.headers);
+        }
+        return headers;
+    }
+    ensureConnected() {
+        if (this.state !== 'connected') {
+            throw new Error('Transport not connected. Call connect() first.');
+        }
+    }
+    log(message, data) {
+        if (this.config.debug) {
+            console.log(`[StreamableHTTP] ${message}`, data ?? '');
+        }
+    }
+    /**
+     * Parse SSE (Server-Sent Events) response format with session ID extraction
+     * SSE format is:
+     * event: message
+     * id: sessionId:messageId
+     * data: {"jsonrpc":"2.0",...}
+     *
+     * The id field contains the session ID followed by a colon and the message ID.
+     *
+     * @param text - The raw SSE response text
+     * @param requestId - The original request ID
+     * @returns Object with parsed JSON-RPC response and session ID (if found)
+     */
+    parseSSEResponseWithSession(text, requestId) {
+        const lines = text.split('\n');
+        const dataLines = [];
+        let sseSessionId;
+        // Collect all data lines and extract session ID from id: field
+        for (const line of lines) {
+            if (line.startsWith('data: ')) {
+                dataLines.push(line.slice(6)); // Remove 'data: ' prefix
+            }
+            else if (line === 'data:') {
+                // Empty data line represents a newline in the data
+                dataLines.push('');
+            }
+            else if (line.startsWith('id: ')) {
+                // Extract session ID from id field (format: sessionId:messageId)
+                const idValue = line.slice(4);
+                const colonIndex = idValue.lastIndexOf(':');
+                if (colonIndex > 0) {
+                    sseSessionId = idValue.substring(0, colonIndex);
+                }
+                else {
+                    // No colon, use the whole id as session ID
+                    sseSessionId = idValue;
+                }
+            }
+        }
+        if (dataLines.length > 0) {
+            const jsonData = dataLines.join('\n');
+            try {
+                return {
+                    response: JSON.parse(jsonData),
+                    sseSessionId,
+                };
+            }
+            catch {
+                this.log('Failed to parse SSE data as JSON:', jsonData);
+            }
+        }
+        // Fallback: return error response
+        return {
+            response: {
+                jsonrpc: '2.0',
+                id: requestId ?? null,
+                error: {
+                    code: -32700,
+                    message: 'Failed to parse SSE response',
+                    data: text,
+                },
+            },
+            sseSessionId,
+        };
+    }
+}
+exports.StreamableHttpTransport = StreamableHttpTransport;
+//# sourceMappingURL=streamable-http.transport.js.map

package/src/transport/streamable-http.transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-http.transport.js","sourceRoot":"","sources":["../../../src/transport/streamable-http.transport.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAWH,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;GAKG;AACH,MAAa,uBAAuB;IACjB,MAAM,CAAwF;IACvG,KAAK,GAAmB,cAAc,CAAC;IACvC,SAAS,CAAqB;IAC9B,SAAS,CAAqB;IAC9B,eAAe,GAAG,CAAC,CAAC;IACpB,cAAc,GAAG,CAAC,CAAC;IACnB,kBAAkB,GAA2B,EAAE,CAAC;IAChD,YAAY,CAAoB;IACvB,UAAU,CAAU;IAErC,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,wBAAwB;YACpE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,eAAe;YAC1C,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;QAC1B,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,IAAI,CAAC;YACH,mEAAmE;YACnE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;gBAC3D,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACrC,CAAC;YAED,6DAA6D;YAC7D,kDAAkD;YAClD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;YACrB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,cAAc,CAAC;QAEtD,IAAI,CAAC,GAAG,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,UAAU,EAAE,WAAW;oBACvB,SAAS,EAAE,QAAQ;oBACnB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;iBAC9B,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,kCAAkC,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC3E,mEAAmE;gBACnE,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,aAAa,CAAC,YAAY,EAAE,CAAC;gBAC/B,IAAI,CAAC,SAAS,GAAG,aAAa,CAAC,YAAY,CAAC;gBAC5C,IAAI,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;YACvD,mEAAmE;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAc,OAAuB;QAChD,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,4CAA4C;QAC5C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,OAAO,EAAE;gBACtE,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,SAAS,EAAE,iBAAiB;gBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YAEH,QAAQ,eAAe,CAAC,IAAI,EAAE,CAAC;gBAC7B,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,mEAAmE;oBACnE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAC1D,OAAO,EACP,eAAe,CAAC,QAAQ,EACxB,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CACvB,CAAC;oBACF,OAAO,YAAgD,CAAC;gBAC1D,CAAC;gBAED,KAAK,OAAO;oBACV,MAAM,eAAe,CAAC,KAAK,CAAC;gBAE9B,KAAK,UAAU;oBACb,gCAAgC;oBAChC,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC;oBAClC,MAAM;YACV,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QAEjC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,2CAA2C;YAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC5D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;YAChC,CAAC;YAED,IAAI,YAA6B,CAAC;YAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,qBAAqB;gBACrB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC,CAAC;gBAExD,YAAY,GAAG;oBACb,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;oBACtB,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;wBAC1D,IAAI,EAAE,SAAS;qBAChB;iBACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;gBAE5B,4CAA4C;gBAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBACjB,YAAY,GAAG;wBACb,OAAO,EAAE,KAAK;wBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;wBACtB,MAAM,EAAE,SAAS;qBAClB,CAAC;gBACJ,CAAC;qBAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBACrD,qEAAqE;oBACrE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBACnG,YAAY,GAAG,WAAW,CAAC;oBAC3B,mEAAmE;oBACnE,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;wBACpC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;wBAC9B,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,wCAAwC;YACxC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YACxG,CAAC;YAED,OAAO,YAAgD,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI;oBACtB,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,yBAAyB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI;qBAC1D;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAuB;QAClC,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,+BAA+B;YAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC5D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;YAChC,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,qBAAqB,SAAS,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC;QAElC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,aAAa;qBACvB;iBACF,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,aAAa;oBACtB,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAC/D;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC9C,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC;IACpC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,YAAY,CAAC,KAAa;QACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,eAAe,CAAC,YAA8B;QAC5C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,qBAAqB;QACnB,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,iBAAiB;QACjB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAErB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,sEAAsE;IACtE,kBAAkB;IAClB,sEAAsE;IAE9D,YAAY;QAClB,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,qCAAqC;SAC9C,CAAC;QAEF,0EAA0E;QAC1E,8EAA8E;QAC9E,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QACxD,CAAC;QAED,wFAAwF;QACxF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7C,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,GAAG,CAAC,OAAe,EAAE,IAAc;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,2BAA2B,CACjC,IAAY,EACZ,SAAsC;QAEtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,YAAgC,CAAC;QAErC,+DAA+D;QAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB;YAC1D,CAAC;iBAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,mDAAmD;gBACnD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnC,iEAAiE;gBACjE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACnB,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,2CAA2C;oBAC3C,YAAY,GAAG,OAAO,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO;oBACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAoB;oBACjD,YAAY;iBACb,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,OAAO;YACL,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,SAAS,IAAI,IAAI;gBACrB,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,8BAA8B;oBACvC,IAAI,EAAE,IAAI;iBACX;aACF;YACD,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAxeD,0DAweC","sourcesContent":["/**\n * @file streamable-http.transport.ts\n * @description StreamableHTTP transport implementation for MCP Test Client\n */\n\nimport type {\n  McpTransport,\n  TransportConfig,\n  TransportState,\n  JsonRpcRequest,\n  JsonRpcResponse,\n} from './transport.interface';\nimport type { InterceptorChain } from '../interceptor';\n\nconst DEFAULT_TIMEOUT = 30000;\n\n/**\n * StreamableHTTP transport for MCP communication\n *\n * This transport uses HTTP POST requests for all communication,\n * following the MCP StreamableHTTP specification.\n */\nexport class StreamableHttpTransport implements McpTransport {\n  private readonly config: Required<Omit<TransportConfig, 'interceptors'>> & { interceptors?: InterceptorChain };\n  private state: TransportState = 'disconnected';\n  private sessionId: string | undefined;\n  private authToken: string | undefined;\n  private connectionCount = 0;\n  private reconnectCount = 0;\n  private lastRequestHeaders: Record<string, string> = {};\n  private interceptors?: InterceptorChain;\n  private readonly publicMode: boolean;\n\n  constructor(config: TransportConfig) {\n    this.config = {\n      baseUrl: config.baseUrl.replace(/\\/$/, ''), // Remove trailing slash\n      timeout: config.timeout ?? DEFAULT_TIMEOUT,\n      auth: config.auth ?? {},\n      publicMode: config.publicMode ?? false,\n      debug: config.debug ?? false,\n      interceptors: config.interceptors,\n    };\n\n    this.authToken = config.auth?.token;\n    this.interceptors = config.interceptors;\n    this.publicMode = config.publicMode ?? false;\n  }\n\n  async connect(): Promise<void> {\n    this.state = 'connecting';\n    this.connectionCount++;\n\n    try {\n      // Public mode: Skip all authentication - connect without any token\n      if (this.publicMode) {\n        this.log('Public mode: connecting without authentication');\n        this.state = 'connected';\n        return;\n      }\n\n      // If no auth token provided, request anonymous token from FrontMCP SDK\n      if (!this.authToken) {\n        await this.requestAnonymousToken();\n      }\n\n      // StreamableHTTP doesn't require an explicit connection step\n      // The session is established on the first request\n      this.state = 'connected';\n      this.log('Connected to StreamableHTTP transport');\n    } catch (error) {\n      this.state = 'error';\n      throw error;\n    }\n  }\n\n  /**\n   * Request an anonymous token from the FrontMCP OAuth endpoint\n   * This allows the test client to authenticate without user interaction\n   */\n  private async requestAnonymousToken(): Promise<void> {\n    const clientId = crypto.randomUUID();\n    const tokenUrl = `${this.config.baseUrl}/oauth/token`;\n\n    this.log(`Requesting anonymous token from ${tokenUrl}`);\n\n    try {\n      const response = await fetch(tokenUrl, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({\n          grant_type: 'anonymous',\n          client_id: clientId,\n          resource: this.config.baseUrl,\n        }),\n      });\n\n      if (!response.ok) {\n        const errorText = await response.text();\n        this.log(`Failed to get anonymous token: ${response.status} ${errorText}`);\n        // Continue without token - server may allow unauthenticated access\n        return;\n      }\n\n      const tokenResponse = await response.json();\n      if (tokenResponse.access_token) {\n        this.authToken = tokenResponse.access_token;\n        this.log('Anonymous token acquired successfully');\n      }\n    } catch (error) {\n      this.log(`Error requesting anonymous token: ${error}`);\n      // Continue without token - server may allow unauthenticated access\n    }\n  }\n\n  async request<T = unknown>(message: JsonRpcRequest): Promise<JsonRpcResponse & { result?: T }> {\n    this.ensureConnected();\n\n    const startTime = Date.now();\n\n    // Process through interceptors if available\n    if (this.interceptors) {\n      const interceptResult = await this.interceptors.processRequest(message, {\n        timestamp: new Date(),\n        transport: 'streamable-http',\n        sessionId: this.sessionId,\n      });\n\n      switch (interceptResult.type) {\n        case 'mock': {\n          // Return mock response directly, run through response interceptors\n          const mockResponse = await this.interceptors.processResponse(\n            message,\n            interceptResult.response,\n            Date.now() - startTime,\n          );\n          return mockResponse as JsonRpcResponse & { result?: T };\n        }\n\n        case 'error':\n          throw interceptResult.error;\n\n        case 'continue':\n          // Use possibly modified request\n          message = interceptResult.request;\n          break;\n      }\n    }\n\n    const headers = this.buildHeaders();\n    this.lastRequestHeaders = headers;\n\n    const url = `${this.config.baseUrl}/`;\n    this.log(`POST ${url}`, message);\n\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);\n\n    try {\n      const response = await fetch(url, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(message),\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n\n      // Check for session ID in response headers\n      const newSessionId = response.headers.get('mcp-session-id');\n      if (newSessionId) {\n        this.sessionId = newSessionId;\n      }\n\n      let jsonResponse: JsonRpcResponse;\n\n      if (!response.ok) {\n        // Handle HTTP errors\n        const errorText = await response.text();\n        this.log(`HTTP Error ${response.status}: ${errorText}`);\n\n        jsonResponse = {\n          jsonrpc: '2.0',\n          id: message.id ?? null,\n          error: {\n            code: -32000,\n            message: `HTTP ${response.status}: ${response.statusText}`,\n            data: errorText,\n          },\n        };\n      } else {\n        // Parse response - may be JSON or SSE\n        const contentType = response.headers.get('content-type') ?? '';\n        const text = await response.text();\n        this.log('Response:', text);\n\n        // Handle empty response (for notifications)\n        if (!text.trim()) {\n          jsonResponse = {\n            jsonrpc: '2.0',\n            id: message.id ?? null,\n            result: undefined,\n          };\n        } else if (contentType.includes('text/event-stream')) {\n          // Parse SSE response - extract data and session ID from event stream\n          const { response: sseResponse, sseSessionId } = this.parseSSEResponseWithSession(text, message.id);\n          jsonResponse = sseResponse;\n          // Store session ID from SSE id field (format: sessionId:messageId)\n          if (sseSessionId && !this.sessionId) {\n            this.sessionId = sseSessionId;\n            this.log('Session ID from SSE:', this.sessionId);\n          }\n        } else {\n          jsonResponse = JSON.parse(text) as JsonRpcResponse;\n        }\n      }\n\n      // Process response through interceptors\n      if (this.interceptors) {\n        jsonResponse = await this.interceptors.processResponse(message, jsonResponse, Date.now() - startTime);\n      }\n\n      return jsonResponse as JsonRpcResponse & { result?: T };\n    } catch (error) {\n      clearTimeout(timeoutId);\n\n      if (error instanceof Error && error.name === 'AbortError') {\n        return {\n          jsonrpc: '2.0',\n          id: message.id ?? null,\n          error: {\n            code: -32000,\n            message: `Request timeout after ${this.config.timeout}ms`,\n          },\n        };\n      }\n\n      throw error;\n    }\n  }\n\n  async notify(message: JsonRpcRequest): Promise<void> {\n    this.ensureConnected();\n\n    const headers = this.buildHeaders();\n    this.lastRequestHeaders = headers;\n\n    const url = `${this.config.baseUrl}/`;\n    this.log(`POST ${url} (notification)`, message);\n\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);\n\n    try {\n      const response = await fetch(url, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(message),\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n\n      // Update session ID if present\n      const newSessionId = response.headers.get('mcp-session-id');\n      if (newSessionId) {\n        this.sessionId = newSessionId;\n      }\n\n      if (!response.ok) {\n        const errorText = await response.text();\n        this.log(`HTTP Error ${response.status} on notification: ${errorText}`);\n      }\n    } catch (error) {\n      clearTimeout(timeoutId);\n\n      if (error instanceof Error && error.name !== 'AbortError') {\n        throw error;\n      }\n    }\n  }\n\n  async sendRaw(data: string): Promise<JsonRpcResponse> {\n    this.ensureConnected();\n\n    const headers = this.buildHeaders();\n    this.lastRequestHeaders = headers;\n\n    const url = `${this.config.baseUrl}/`;\n    this.log(`POST ${url} (raw)`, data);\n\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);\n\n    try {\n      const response = await fetch(url, {\n        method: 'POST',\n        headers,\n        body: data,\n        signal: controller.signal,\n      });\n\n      clearTimeout(timeoutId);\n\n      const text = await response.text();\n\n      if (!text.trim()) {\n        return {\n          jsonrpc: '2.0',\n          id: null,\n          error: {\n            code: -32700,\n            message: 'Parse error',\n          },\n        };\n      }\n\n      return JSON.parse(text) as JsonRpcResponse;\n    } catch (error) {\n      clearTimeout(timeoutId);\n\n      return {\n        jsonrpc: '2.0',\n        id: null,\n        error: {\n          code: -32700,\n          message: 'Parse error',\n          data: error instanceof Error ? error.message : 'Unknown error',\n        },\n      };\n    }\n  }\n\n  async close(): Promise<void> {\n    this.state = 'disconnected';\n    this.sessionId = undefined;\n    this.log('StreamableHTTP transport closed');\n  }\n\n  isConnected(): boolean {\n    return this.state === 'connected';\n  }\n\n  getState(): TransportState {\n    return this.state;\n  }\n\n  getSessionId(): string | undefined {\n    return this.sessionId;\n  }\n\n  setAuthToken(token: string): void {\n    this.authToken = token;\n  }\n\n  setTimeout(ms: number): void {\n    this.config.timeout = ms;\n  }\n\n  setInterceptors(interceptors: InterceptorChain): void {\n    this.interceptors = interceptors;\n  }\n\n  getInterceptors(): InterceptorChain | undefined {\n    return this.interceptors;\n  }\n\n  getConnectionCount(): number {\n    return this.connectionCount;\n  }\n\n  getReconnectCount(): number {\n    return this.reconnectCount;\n  }\n\n  getLastRequestHeaders(): Record<string, string> {\n    return { ...this.lastRequestHeaders };\n  }\n\n  async simulateDisconnect(): Promise<void> {\n    this.state = 'disconnected';\n    this.sessionId = undefined;\n  }\n\n  async waitForReconnect(timeoutMs: number): Promise<void> {\n    const deadline = Date.now() + timeoutMs;\n\n    // Auto-reconnect\n    this.reconnectCount++;\n    await this.connect();\n\n    while (Date.now() < deadline) {\n      if (this.state === 'connected') {\n        return;\n      }\n      await new Promise((r) => setTimeout(r, 50));\n    }\n\n    throw new Error('Timeout waiting for reconnection');\n  }\n\n  // ═══════════════════════════════════════════════════════════════════\n  // PRIVATE HELPERS\n  // ═══════════════════════════════════════════════════════════════════\n\n  private buildHeaders(): Record<string, string> {\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Accept: 'application/json, text/event-stream',\n    };\n\n    // Only add Authorization header if we have a token AND not in public mode\n    // Public mode explicitly skips auth headers for CI/CD and public docs testing\n    if (this.authToken && !this.publicMode) {\n      headers['Authorization'] = `Bearer ${this.authToken}`;\n    }\n\n    // Always send session ID if we have one (even in public mode - server creates sessions)\n    if (this.sessionId) {\n      headers['mcp-session-id'] = this.sessionId;\n    }\n\n    // Add custom headers from config (allow override even in public mode)\n    if (this.config.auth.headers) {\n      Object.assign(headers, this.config.auth.headers);\n    }\n\n    return headers;\n  }\n\n  private ensureConnected(): void {\n    if (this.state !== 'connected') {\n      throw new Error('Transport not connected. Call connect() first.');\n    }\n  }\n\n  private log(message: string, data?: unknown): void {\n    if (this.config.debug) {\n      console.log(`[StreamableHTTP] ${message}`, data ?? '');\n    }\n  }\n\n  /**\n   * Parse SSE (Server-Sent Events) response format with session ID extraction\n   * SSE format is:\n   * event: message\n   * id: sessionId:messageId\n   * data: {\"jsonrpc\":\"2.0\",...}\n   *\n   * The id field contains the session ID followed by a colon and the message ID.\n   *\n   * @param text - The raw SSE response text\n   * @param requestId - The original request ID\n   * @returns Object with parsed JSON-RPC response and session ID (if found)\n   */\n  private parseSSEResponseWithSession(\n    text: string,\n    requestId: string | number | undefined,\n  ): { response: JsonRpcResponse; sseSessionId?: string } {\n    const lines = text.split('\\n');\n    const dataLines: string[] = [];\n    let sseSessionId: string | undefined;\n\n    // Collect all data lines and extract session ID from id: field\n    for (const line of lines) {\n      if (line.startsWith('data: ')) {\n        dataLines.push(line.slice(6)); // Remove 'data: ' prefix\n      } else if (line === 'data:') {\n        // Empty data line represents a newline in the data\n        dataLines.push('');\n      } else if (line.startsWith('id: ')) {\n        // Extract session ID from id field (format: sessionId:messageId)\n        const idValue = line.slice(4);\n        const colonIndex = idValue.lastIndexOf(':');\n        if (colonIndex > 0) {\n          sseSessionId = idValue.substring(0, colonIndex);\n        } else {\n          // No colon, use the whole id as session ID\n          sseSessionId = idValue;\n        }\n      }\n    }\n\n    if (dataLines.length > 0) {\n      const jsonData = dataLines.join('\\n');\n      try {\n        return {\n          response: JSON.parse(jsonData) as JsonRpcResponse,\n          sseSessionId,\n        };\n      } catch {\n        this.log('Failed to parse SSE data as JSON:', jsonData);\n      }\n    }\n\n    // Fallback: return error response\n    return {\n      response: {\n        jsonrpc: '2.0',\n        id: requestId ?? null,\n        error: {\n          code: -32700,\n          message: 'Failed to parse SSE response',\n          data: text,\n        },\n      },\n      sseSessionId,\n    };\n  }\n}\n"]}

package/src/transport/transport.interface.d.ts

@@ -0,0 +1,124 @@
+/**
+ * @file transport.interface.ts
+ * @description Interface for MCP transport implementations
+ */
+export interface JsonRpcRequest {
+    jsonrpc: '2.0';
+    id?: string | number;
+    method: string;
+    params?: Record<string, unknown>;
+}
+export interface JsonRpcResponse {
+    jsonrpc: '2.0';
+    id: string | number | null;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+export type TransportState = 'disconnected' | 'connecting' | 'connected' | 'error';
+/**
+ * Interface that all MCP transports must implement
+ */
+export interface McpTransport {
+    /**
+     * Connect to the MCP server
+     */
+    connect(): Promise<void>;
+    /**
+     * Send a JSON-RPC request and wait for response
+     */
+    request<T = unknown>(message: JsonRpcRequest): Promise<JsonRpcResponse & {
+        result?: T;
+    }>;
+    /**
+     * Send a notification (no response expected)
+     */
+    notify(message: JsonRpcRequest): Promise<void>;
+    /**
+     * Send raw string data (for error testing)
+     */
+    sendRaw(data: string): Promise<JsonRpcResponse>;
+    /**
+     * Close the connection
+     */
+    close(): Promise<void>;
+    /**
+     * Check if transport is connected
+     */
+    isConnected(): boolean;
+    /**
+     * Get current transport state
+     */
+    getState(): TransportState;
+    /**
+     * Get the session ID (if applicable)
+     */
+    getSessionId(): string | undefined;
+    /**
+     * Set the authentication token
+     */
+    setAuthToken(token: string): void;
+    /**
+     * Set the request timeout
+     */
+    setTimeout(ms: number): void;
+    /**
+     * Get the message endpoint URL (SSE transport)
+     */
+    getMessageEndpoint?(): string | undefined;
+    /**
+     * Get number of connections made
+     */
+    getConnectionCount?(): number;
+    /**
+     * Get number of reconnections
+     */
+    getReconnectCount?(): number;
+    /**
+     * Get the headers from the last request
+     */
+    getLastRequestHeaders?(): Record<string, string>;
+    /**
+     * Simulate a disconnect (for testing reconnection)
+     */
+    simulateDisconnect?(): Promise<void>;
+    /**
+     * Wait for reconnection to complete
+     */
+    waitForReconnect?(timeoutMs: number): Promise<void>;
+    /**
+     * Set interceptor chain for request/response interception
+     */
+    setInterceptors?(interceptors: import('../interceptor').InterceptorChain): void;
+    /**
+     * Get the current interceptor chain
+     */
+    getInterceptors?(): import('../interceptor').InterceptorChain | undefined;
+}
+/**
+ * Configuration for transport implementations
+ */
+export interface TransportConfig {
+    /** Base URL of the MCP server */
+    baseUrl: string;
+    /** Request timeout in milliseconds */
+    timeout?: number;
+    /** Authentication configuration */
+    auth?: {
+        token?: string;
+        headers?: Record<string, string>;
+    };
+    /**
+     * Enable public mode - skip authentication entirely.
+     * When true, no Authorization header is sent and anonymous token is not requested.
+     * Use this for testing public/unauthenticated endpoints in CI/CD pipelines.
+     */
+    publicMode?: boolean;
+    /** Enable debug logging */
+    debug?: boolean;
+    /** Interceptor chain for request/response interception */
+    interceptors?: import('../interceptor').InterceptorChain;
+}

package/src/transport/transport.interface.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * @file transport.interface.ts
+ * @description Interface for MCP transport implementations
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=transport.interface.js.map

package/src/transport/transport.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.interface.js","sourceRoot":"","sources":["../../../src/transport/transport.interface.ts"],"names":[],"mappings":";AAAA;;;GAGG","sourcesContent":["/**\n * @file transport.interface.ts\n * @description Interface for MCP transport implementations\n */\n\n// Simplified JSON-RPC types for transport layer\nexport interface JsonRpcRequest {\n  jsonrpc: '2.0';\n  id?: string | number;\n  method: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface JsonRpcResponse {\n  jsonrpc: '2.0';\n  id: string | number | null;\n  result?: unknown;\n  error?: {\n    code: number;\n    message: string;\n    data?: unknown;\n  };\n}\n\nexport type TransportState = 'disconnected' | 'connecting' | 'connected' | 'error';\n\n/**\n * Interface that all MCP transports must implement\n */\nexport interface McpTransport {\n  /**\n   * Connect to the MCP server\n   */\n  connect(): Promise<void>;\n\n  /**\n   * Send a JSON-RPC request and wait for response\n   */\n  request<T = unknown>(message: JsonRpcRequest): Promise<JsonRpcResponse & { result?: T }>;\n\n  /**\n   * Send a notification (no response expected)\n   */\n  notify(message: JsonRpcRequest): Promise<void>;\n\n  /**\n   * Send raw string data (for error testing)\n   */\n  sendRaw(data: string): Promise<JsonRpcResponse>;\n\n  /**\n   * Close the connection\n   */\n  close(): Promise<void>;\n\n  /**\n   * Check if transport is connected\n   */\n  isConnected(): boolean;\n\n  /**\n   * Get current transport state\n   */\n  getState(): TransportState;\n\n  /**\n   * Get the session ID (if applicable)\n   */\n  getSessionId(): string | undefined;\n\n  /**\n   * Set the authentication token\n   */\n  setAuthToken(token: string): void;\n\n  /**\n   * Set the request timeout\n   */\n  setTimeout(ms: number): void;\n\n  // Optional methods for testing\n\n  /**\n   * Get the message endpoint URL (SSE transport)\n   */\n  getMessageEndpoint?(): string | undefined;\n\n  /**\n   * Get number of connections made\n   */\n  getConnectionCount?(): number;\n\n  /**\n   * Get number of reconnections\n   */\n  getReconnectCount?(): number;\n\n  /**\n   * Get the headers from the last request\n   */\n  getLastRequestHeaders?(): Record<string, string>;\n\n  /**\n   * Simulate a disconnect (for testing reconnection)\n   */\n  simulateDisconnect?(): Promise<void>;\n\n  /**\n   * Wait for reconnection to complete\n   */\n  waitForReconnect?(timeoutMs: number): Promise<void>;\n\n  /**\n   * Set interceptor chain for request/response interception\n   */\n  setInterceptors?(interceptors: import('../interceptor').InterceptorChain): void;\n\n  /**\n   * Get the current interceptor chain\n   */\n  getInterceptors?(): import('../interceptor').InterceptorChain | undefined;\n}\n\n/**\n * Configuration for transport implementations\n */\nexport interface TransportConfig {\n  /** Base URL of the MCP server */\n  baseUrl: string;\n  /** Request timeout in milliseconds */\n  timeout?: number;\n  /** Authentication configuration */\n  auth?: {\n    token?: string;\n    headers?: Record<string, string>;\n  };\n  /**\n   * Enable public mode - skip authentication entirely.\n   * When true, no Authorization header is sent and anonymous token is not requested.\n   * Use this for testing public/unauthenticated endpoints in CI/CD pipelines.\n   */\n  publicMode?: boolean;\n  /** Enable debug logging */\n  debug?: boolean;\n  /** Interceptor chain for request/response interception */\n  interceptors?: import('../interceptor').InterceptorChain;\n}\n"]}

package/src/ui/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @file index.ts
+ * @description Barrel exports for UI testing utilities
+ *
+ * @example
+ * ```typescript
+ * import { uiMatchers, UIAssertions } from '@frontmcp/testing';
+ *
+ * // Use matchers with expect.extend
+ * expect.extend(uiMatchers);
+ *
+ * // Or use assertion helpers directly
+ * const html = UIAssertions.assertRenderedUI(result);
+ * ```
+ */
+export { uiMatchers } from './ui-matchers';
+export { UIAssertions } from './ui-assertions';

package/src/ui/index.js

@@ -0,0 +1,23 @@
+"use strict";
+/**
+ * @file index.ts
+ * @description Barrel exports for UI testing utilities
+ *
+ * @example
+ * ```typescript
+ * import { uiMatchers, UIAssertions } from '@frontmcp/testing';
+ *
+ * // Use matchers with expect.extend
+ * expect.extend(uiMatchers);
+ *
+ * // Or use assertion helpers directly
+ * const html = UIAssertions.assertRenderedUI(result);
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UIAssertions = exports.uiMatchers = void 0;
+var ui_matchers_1 = require("./ui-matchers");
+Object.defineProperty(exports, "uiMatchers", { enumerable: true, get: function () { return ui_matchers_1.uiMatchers; } });
+var ui_assertions_1 = require("./ui-assertions");
+Object.defineProperty(exports, "UIAssertions", { enumerable: true, get: function () { return ui_assertions_1.UIAssertions; } });
+//# sourceMappingURL=index.js.map