@hypequery/mcp 0.8.6 → 0.10.0

package/dist/utils/http-client/transport.js

@@ -0,0 +1,88 @@
+import { MCPExecutionBudgetError, MCPToolError } from '../../errors.js';
+export function backendUrl(input) {
+    try {
+        const url = new URL(input);
+        const local = ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
+        if (url.protocol !== 'https:' && !(url.protocol === 'http:' && local)
+            || url.username || url.password || url.hash || url.search)
+            throw new Error();
+        return url;
+    }
+    catch {
+        throw new Error('Use an HTTPS discovery URL (HTTP is allowed only on loopback), without credentials, query or fragment.');
+    }
+}
+export async function backendRequest(backend, url, signal, body, schemaHash) {
+    if (url.origin !== backend.discovery.origin)
+        throw new MCPToolError('MCP_EXECUTION_FAILED', 'Backend origin changed.', { retryable: false });
+    try {
+        signal.throwIfAborted();
+        const configured = typeof backend.headers === 'function' ? await backend.headers() : backend.headers;
+        const headers = new Headers(configured);
+        headers.set('accept', 'application/json');
+        if (body)
+            headers.set('content-type', 'application/json');
+        if (schemaHash)
+            headers.set('x-hypequery-client-schema', schemaHash);
+        signal.throwIfAborted();
+        return await backend.fetchFn(url.href, {
+            method: body ? 'POST' : 'GET', headers, body: body ? JSON.stringify(body) : undefined,
+            redirect: 'manual', credentials: 'omit', cache: 'no-store', signal,
+        });
+    }
+    catch {
+        if (signal.aborted)
+            throw signal.reason;
+        throw new MCPToolError('MCP_EXECUTION_FAILED', 'Backend request failed.', { retryable: true });
+    }
+}
+export function discardBackendBody(response) {
+    void response.body?.cancel().catch(() => undefined);
+}
+/** Bound decompressed streamed bytes, including when Content-Length is absent or dishonest. */
+export async function backendText(response, maximum, signal) {
+    const length = response.headers.get('content-length');
+    const type = response.headers.get('content-type')?.split(';', 1)[0].trim().toLowerCase();
+    if (type !== 'application/json' && !/^application\/[a-z0-9.+-]+\+json$/.test(type ?? '')) {
+        discardBackendBody(response);
+        throw new MCPToolError('MCP_EXECUTION_FAILED', 'Backend did not return JSON.', { retryable: false });
+    }
+    if (length !== null && (!/^\d+$/.test(length) || Number(length) > maximum)) {
+        discardBackendBody(response);
+        throw new MCPExecutionBudgetError('MCP_RESULT_TOO_LARGE', 'Backend response exceeds its byte limit.');
+    }
+    const reader = response.body?.getReader();
+    if (!reader)
+        throw new MCPToolError('MCP_EXECUTION_FAILED', 'Backend returned no response body.', { retryable: false });
+    const cancel = () => { void reader.cancel().catch(() => undefined); };
+    signal.addEventListener('abort', cancel, { once: true });
+    const decoder = new TextDecoder('utf-8', { fatal: true });
+    let size = 0;
+    let text = '';
+    try {
+        signal.throwIfAborted();
+        while (true) {
+            const chunk = await reader.read();
+            signal.throwIfAborted();
+            if (chunk.done)
+                break;
+            size += chunk.value.byteLength;
+            if (size > maximum)
+                throw new MCPExecutionBudgetError('MCP_RESULT_TOO_LARGE', 'Backend response exceeds its byte limit.');
+            text += decoder.decode(chunk.value, { stream: true });
+        }
+        return text + decoder.decode();
+    }
+    catch (error) {
+        cancel();
+        if (signal.aborted)
+            throw signal.reason;
+        if (error instanceof MCPExecutionBudgetError)
+            throw error;
+        throw new MCPToolError('MCP_EXECUTION_FAILED', 'Backend response could not be read.', { retryable: false });
+    }
+    finally {
+        signal.removeEventListener('abort', cancel);
+        reader.releaseLock();
+    }
+}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const MCP_PACKAGE_VERSION = "0.8.6";
+export declare const MCP_PACKAGE_VERSION = "0.10.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB,UAAU,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB,WAAW,CAAC"}

package/dist/version.js

@@ -2,4 +2,4 @@
 //
 // Resolved at build time rather than read from package.json at import time, so
 // importing this package touches no filesystem and survives bundling.
-export const MCP_PACKAGE_VERSION = '0.8.6';
+export const MCP_PACKAGE_VERSION = '0.10.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/mcp",
-  "version": "0.8.6",
+  "version": "0.10.0",
   "description": "Governed ClickHouse MCP server for semantic metrics, datasets, Claude, Cursor, and AI agents",
   "keywords": [
     "mcp",
@@ -30,18 +30,24 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "!dist/**/*.test.*",
+    "!dist/**/*.type-test.*",
+    "!dist/**/__tests__/**",
+    "!dist/**/tests/**",
+    "!dist/**/type-tests/**"
   ],
   "dependencies": {
-    "@hypequery/datasets": "^0.22.0",
-    "@modelcontextprotocol/sdk": "^1.30.1",
-    "zod": "^3.23.8"
+    "@hypequery/datasets": "^0.24.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "zod": "^4.6.6",
+    "@hypequery/protocol": "0.21.0"
   },
   "devDependencies": {
     "@types/node": "^20.11.30",
-    "typescript": "^5.7.3",
-    "vitest": "^5.0.2",
-    "@hypequery/clickhouse": "2.13.0"
+    "typescript": "^6.0.3",
+    "vitest": "^5.0.5",
+    "@hypequery/clickhouse": "2.14.0"
   },
   "repository": {
     "type": "git",

package/dist/api.type-test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=api.type-test.d.ts.map

package/dist/api.type-test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.type-test.d.ts","sourceRoot":"","sources":["../src/api.type-test.ts"],"names":[],"mappings":""}

package/dist/api.type-test.js

@@ -1,31 +0,0 @@
-import { expectTypeOf, it } from 'vitest';
-import { dataset, dimension, measure } from '@hypequery/datasets';
-import { HypequeryMCPExecutor, HypequeryMCPProtocolServer, HypequeryMCPServer, MCPToolError, connectMCPServerStdio, createMCPExecutor, createMCPProtocolServer, createMCPServer, startStdioMCPServer, } from './index.js';
-it('exports the transport-neutral and backwards-compatible MCP APIs', () => {
-    expectTypeOf(HypequeryMCPExecutor).toBeConstructibleWith({});
-    expectTypeOf(HypequeryMCPProtocolServer).toBeConstructibleWith({});
-    expectTypeOf(HypequeryMCPServer).toBeConstructibleWith({});
-    expectTypeOf(createMCPExecutor).returns.toMatchTypeOf();
-    expectTypeOf(createMCPProtocolServer).returns.toMatchTypeOf();
-    expectTypeOf(connectMCPServerStdio).returns.toMatchTypeOf();
-    expectTypeOf(startStdioMCPServer).returns.toMatchTypeOf();
-    expectTypeOf(createMCPServer).returns.toMatchTypeOf();
-    expectTypeOf(new MCPToolError('MCP_UNAUTHORIZED', 'Forbidden').code)
-        .toMatchTypeOf();
-});
-it('accepts segments in the exported query argument types', () => {
-    expectTypeOf().toEqualTypeOf();
-    expectTypeOf().toEqualTypeOf();
-    const _orders = dataset('orders', {
-        source: 'orders',
-        dimensions: { status: dimension.string() },
-        measures: { revenue: measure.sum('amount') },
-        segments: { paid: { filters: [{ field: 'status', operator: 'eq', value: 'paid' }] } },
-    });
-    expectTypeOf()
-        .toEqualTypeOf();
-    expectTypeOf()
-        .toEqualTypeOf();
-    expectTypeOf().toEqualTypeOf();
-    expectTypeOf().toEqualTypeOf();
-});