@mcp-ts/sdk 1.3.7 → 1.3.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/LICENSE +21 -21
  2. package/README.md +397 -404
  3. package/dist/adapters/agui-middleware.js.map +1 -1
  4. package/dist/adapters/agui-middleware.mjs.map +1 -1
  5. package/dist/bin/mcp-ts.js +0 -0
  6. package/dist/bin/mcp-ts.js.map +1 -1
  7. package/dist/bin/mcp-ts.mjs +0 -0
  8. package/dist/bin/mcp-ts.mjs.map +1 -1
  9. package/dist/client/index.js.map +1 -1
  10. package/dist/client/index.mjs.map +1 -1
  11. package/dist/client/react.d.mts +10 -28
  12. package/dist/client/react.d.ts +10 -28
  13. package/dist/client/react.js +101 -52
  14. package/dist/client/react.js.map +1 -1
  15. package/dist/client/react.mjs +102 -53
  16. package/dist/client/react.mjs.map +1 -1
  17. package/dist/client/vue.js.map +1 -1
  18. package/dist/client/vue.mjs.map +1 -1
  19. package/dist/index.js +78 -6
  20. package/dist/index.js.map +1 -1
  21. package/dist/index.mjs +73 -6
  22. package/dist/index.mjs.map +1 -1
  23. package/dist/server/index.js +78 -6
  24. package/dist/server/index.js.map +1 -1
  25. package/dist/server/index.mjs +73 -6
  26. package/dist/server/index.mjs.map +1 -1
  27. package/dist/shared/index.js.map +1 -1
  28. package/dist/shared/index.mjs.map +1 -1
  29. package/package.json +185 -185
  30. package/src/adapters/agui-middleware.ts +382 -382
  31. package/src/bin/mcp-ts.ts +102 -102
  32. package/src/client/core/app-host.ts +417 -417
  33. package/src/client/core/sse-client.ts +371 -371
  34. package/src/client/core/types.ts +31 -31
  35. package/src/client/index.ts +27 -27
  36. package/src/client/react/index.ts +20 -16
  37. package/src/client/react/use-app-host.ts +74 -73
  38. package/src/client/react/use-mcp-apps.tsx +224 -214
  39. package/src/client/react/use-mcp.ts +669 -641
  40. package/src/client/vue/index.ts +10 -10
  41. package/src/client/vue/use-mcp.ts +617 -617
  42. package/src/index.ts +11 -11
  43. package/src/server/handlers/nextjs-handler.ts +204 -204
  44. package/src/server/handlers/sse-handler.ts +631 -631
  45. package/src/server/index.ts +57 -57
  46. package/src/server/mcp/multi-session-client.ts +228 -228
  47. package/src/server/mcp/oauth-client.ts +1188 -1188
  48. package/src/server/mcp/storage-oauth-provider.ts +272 -272
  49. package/src/server/storage/crypto.ts +92 -0
  50. package/src/server/storage/file-backend.ts +157 -157
  51. package/src/server/storage/index.ts +176 -176
  52. package/src/server/storage/memory-backend.ts +123 -123
  53. package/src/server/storage/redis-backend.ts +276 -276
  54. package/src/server/storage/redis.ts +160 -160
  55. package/src/server/storage/sqlite-backend.ts +182 -182
  56. package/src/server/storage/supabase-backend.ts +229 -228
  57. package/src/server/storage/types.ts +116 -116
  58. package/src/shared/constants.ts +29 -29
  59. package/src/shared/errors.ts +133 -133
  60. package/src/shared/event-routing.ts +28 -28
  61. package/src/shared/events.ts +180 -180
  62. package/src/shared/index.ts +75 -75
  63. package/src/shared/tool-utils.ts +61 -61
  64. package/src/shared/types.ts +282 -282
  65. package/src/shared/utils.ts +38 -38
  66. package/supabase/migrations/20260330195700_install_mcp_sessions.sql +84 -84
package/src/index.ts CHANGED
@@ -1,11 +1,11 @@
1
- /**
2
- * MCP Redis
3
- * Redis-backed MCP client with OAuth 2.1 and real-time SSE connections
4
- *
5
- * @packageDocumentation
6
- */
7
-
8
- // Re-export everything from subpackages
9
- export * from './server';
10
- export * from './client';
11
- export * from './shared';
1
+ /**
2
+ * MCP Redis
3
+ * Redis-backed MCP client with OAuth 2.1 and real-time SSE connections
4
+ *
5
+ * @packageDocumentation
6
+ */
7
+
8
+ // Re-export everything from subpackages
9
+ export * from './server';
10
+ export * from './client';
11
+ export * from './shared';
@@ -1,204 +1,204 @@
1
- /**
2
- * Next.js App Router Handler for MCP
3
- * Stateless transport for serverless environments:
4
- * - POST + `Accept: text/event-stream` streams progress + rpc-response
5
- * - POST + JSON accepts direct RPC result response
6
- */
7
-
8
- import { SSEConnectionManager, type ClientMetadata } from './sse-handler.js';
9
- import type { McpConnectionEvent, McpObservabilityEvent } from '../../shared/events.js';
10
- import { isConnectionEvent, isRpcResponseEvent } from '../../shared/event-routing.js';
11
- import type { McpRpcResponse } from '../../shared/types.js';
12
-
13
- export interface NextMcpHandlerOptions {
14
- /**
15
- * Extract identity from request (default: from 'identity' query param)
16
- */
17
- getIdentity?: (request: Request) => string | null;
18
-
19
- /**
20
- * Extract auth token from request (default: from 'token' query param or Authorization header)
21
- */
22
- getAuthToken?: (request: Request) => string | null;
23
-
24
- /**
25
- * Authenticate user and verify access (optional)
26
- * Return true if user is authenticated, false otherwise
27
- */
28
- authenticate?: (identity: string, token: string | null) => Promise<boolean> | boolean;
29
-
30
- /**
31
- * Heartbeat interval in milliseconds (default: 30000)
32
- */
33
- heartbeatInterval?: number;
34
-
35
- /**
36
- * Static OAuth client metadata defaults (for all connections)
37
- */
38
- clientDefaults?: ClientMetadata;
39
-
40
- /**
41
- * Dynamic OAuth client metadata getter (per-request)
42
- */
43
- getClientMetadata?: (request: Request) => ClientMetadata | Promise<ClientMetadata>;
44
- }
45
-
46
- export function createNextMcpHandler(options: NextMcpHandlerOptions = {}) {
47
- const {
48
- getIdentity = (request: Request) => new URL(request.url).searchParams.get('identity'),
49
- getAuthToken = (request: Request) => {
50
- const url = new URL(request.url);
51
- return url.searchParams.get('token') || request.headers.get('authorization');
52
- },
53
- authenticate = () => true,
54
- heartbeatInterval = 30000,
55
- clientDefaults,
56
- getClientMetadata,
57
- } = options;
58
-
59
- const toManagerOptions = (identity: string, resolvedClientMetadata?: ClientMetadata) => ({
60
- identity,
61
- heartbeatInterval,
62
- clientDefaults: resolvedClientMetadata,
63
- });
64
-
65
- async function resolveClientMetadata(request: Request): Promise<ClientMetadata | undefined> {
66
- return getClientMetadata ? await getClientMetadata(request) : clientDefaults;
67
- }
68
-
69
- async function GET(): Promise<Response> {
70
- return Response.json(
71
- {
72
- error: {
73
- code: 'METHOD_NOT_ALLOWED',
74
- message: 'Use POST /api/mcp. For streaming use Accept: text/event-stream.',
75
- },
76
- },
77
- { status: 405 }
78
- );
79
- }
80
-
81
- async function POST(request: Request): Promise<Response> {
82
- const identity = getIdentity(request);
83
- const authToken = getAuthToken(request);
84
- const acceptsEventStream = (request.headers.get('accept') || '').toLowerCase().includes('text/event-stream');
85
-
86
- if (!identity) {
87
- return Response.json({ error: { code: 'MISSING_IDENTITY', message: 'Missing identity' } }, { status: 400 });
88
- }
89
-
90
- const isAuthorized = await authenticate(identity, authToken);
91
- if (!isAuthorized) {
92
- return Response.json({ error: { code: 'UNAUTHORIZED', message: 'Unauthorized' } }, { status: 401 });
93
- }
94
-
95
- let rawBody = '';
96
- try {
97
- rawBody = await request.text();
98
- const body = rawBody ? JSON.parse(rawBody) : null;
99
-
100
- if (!body || typeof body !== 'object') {
101
- return Response.json(
102
- {
103
- error: {
104
- code: 'INVALID_REQUEST',
105
- message: 'Invalid JSON-RPC request body',
106
- },
107
- },
108
- { status: 400 }
109
- );
110
- }
111
-
112
- const resolvedClientMetadata = await resolveClientMetadata(request);
113
-
114
- if (!acceptsEventStream) {
115
- const manager = new SSEConnectionManager(
116
- toManagerOptions(identity, resolvedClientMetadata),
117
- () => { }
118
- );
119
- try {
120
- const response = await manager.handleRequest(body as any);
121
- return Response.json(response);
122
- } finally {
123
- manager.dispose();
124
- }
125
- }
126
-
127
- const stream = new TransformStream();
128
- const writer = stream.writable.getWriter();
129
- const encoder = new TextEncoder();
130
- let streamWritable = true;
131
-
132
- const sendSSE = (event: string, data: unknown) => {
133
- if (!streamWritable) return;
134
- const message = `event: ${event}\ndata: ${JSON.stringify(data)}\n\n`;
135
- writer.write(encoder.encode(message)).catch(() => {
136
- streamWritable = false;
137
- });
138
- };
139
-
140
- const manager = new SSEConnectionManager(
141
- toManagerOptions(identity, resolvedClientMetadata),
142
- (event: McpConnectionEvent | McpObservabilityEvent | McpRpcResponse) => {
143
- if (isRpcResponseEvent(event)) {
144
- sendSSE('rpc-response', event);
145
- } else if (isConnectionEvent(event)) {
146
- sendSSE('connection', event);
147
- } else {
148
- sendSSE('observability', event);
149
- }
150
- }
151
- );
152
-
153
- sendSSE('connected', { timestamp: Date.now() });
154
-
155
- void (async () => {
156
- try {
157
- await manager.handleRequest(body as any);
158
- } catch (error) {
159
- const err = error instanceof Error ? error : new Error('Unknown error');
160
- sendSSE('rpc-response', {
161
- id: (body as any).id || 'unknown',
162
- error: {
163
- code: 'EXECUTION_ERROR',
164
- message: err.message,
165
- },
166
- } satisfies McpRpcResponse);
167
- } finally {
168
- streamWritable = false;
169
- manager.dispose();
170
- writer.close().catch(() => { });
171
- }
172
- })();
173
-
174
- return new Response(stream.readable, {
175
- status: 200,
176
- headers: {
177
- 'Content-Type': 'text/event-stream',
178
- 'Cache-Control': 'no-cache, no-transform',
179
- 'Connection': 'keep-alive',
180
- 'X-Accel-Buffering': 'no',
181
- },
182
- });
183
- } catch (error) {
184
- const err = error instanceof Error ? error : new Error('Unknown error');
185
- console.error('[MCP Next Handler] Failed to handle RPC', {
186
- identity,
187
- message: err.message,
188
- stack: err.stack,
189
- rawBody: rawBody.slice(0, 500),
190
- });
191
- return Response.json(
192
- {
193
- error: {
194
- code: 'EXECUTION_ERROR',
195
- message: err.message,
196
- },
197
- },
198
- { status: 500 }
199
- );
200
- }
201
- }
202
-
203
- return { GET, POST };
204
- }
1
+ /**
2
+ * Next.js App Router Handler for MCP
3
+ * Stateless transport for serverless environments:
4
+ * - POST + `Accept: text/event-stream` streams progress + rpc-response
5
+ * - POST + JSON accepts direct RPC result response
6
+ */
7
+
8
+ import { SSEConnectionManager, type ClientMetadata } from './sse-handler.js';
9
+ import type { McpConnectionEvent, McpObservabilityEvent } from '../../shared/events.js';
10
+ import { isConnectionEvent, isRpcResponseEvent } from '../../shared/event-routing.js';
11
+ import type { McpRpcResponse } from '../../shared/types.js';
12
+
13
+ export interface NextMcpHandlerOptions {
14
+ /**
15
+ * Extract identity from request (default: from 'identity' query param)
16
+ */
17
+ getIdentity?: (request: Request) => string | null;
18
+
19
+ /**
20
+ * Extract auth token from request (default: from 'token' query param or Authorization header)
21
+ */
22
+ getAuthToken?: (request: Request) => string | null;
23
+
24
+ /**
25
+ * Authenticate user and verify access (optional)
26
+ * Return true if user is authenticated, false otherwise
27
+ */
28
+ authenticate?: (identity: string, token: string | null) => Promise<boolean> | boolean;
29
+
30
+ /**
31
+ * Heartbeat interval in milliseconds (default: 30000)
32
+ */
33
+ heartbeatInterval?: number;
34
+
35
+ /**
36
+ * Static OAuth client metadata defaults (for all connections)
37
+ */
38
+ clientDefaults?: ClientMetadata;
39
+
40
+ /**
41
+ * Dynamic OAuth client metadata getter (per-request)
42
+ */
43
+ getClientMetadata?: (request: Request) => ClientMetadata | Promise<ClientMetadata>;
44
+ }
45
+
46
+ export function createNextMcpHandler(options: NextMcpHandlerOptions = {}) {
47
+ const {
48
+ getIdentity = (request: Request) => new URL(request.url).searchParams.get('identity'),
49
+ getAuthToken = (request: Request) => {
50
+ const url = new URL(request.url);
51
+ return url.searchParams.get('token') || request.headers.get('authorization');
52
+ },
53
+ authenticate = () => true,
54
+ heartbeatInterval = 30000,
55
+ clientDefaults,
56
+ getClientMetadata,
57
+ } = options;
58
+
59
+ const toManagerOptions = (identity: string, resolvedClientMetadata?: ClientMetadata) => ({
60
+ identity,
61
+ heartbeatInterval,
62
+ clientDefaults: resolvedClientMetadata,
63
+ });
64
+
65
+ async function resolveClientMetadata(request: Request): Promise<ClientMetadata | undefined> {
66
+ return getClientMetadata ? await getClientMetadata(request) : clientDefaults;
67
+ }
68
+
69
+ async function GET(): Promise<Response> {
70
+ return Response.json(
71
+ {
72
+ error: {
73
+ code: 'METHOD_NOT_ALLOWED',
74
+ message: 'Use POST /api/mcp. For streaming use Accept: text/event-stream.',
75
+ },
76
+ },
77
+ { status: 405 }
78
+ );
79
+ }
80
+
81
+ async function POST(request: Request): Promise<Response> {
82
+ const identity = getIdentity(request);
83
+ const authToken = getAuthToken(request);
84
+ const acceptsEventStream = (request.headers.get('accept') || '').toLowerCase().includes('text/event-stream');
85
+
86
+ if (!identity) {
87
+ return Response.json({ error: { code: 'MISSING_IDENTITY', message: 'Missing identity' } }, { status: 400 });
88
+ }
89
+
90
+ const isAuthorized = await authenticate(identity, authToken);
91
+ if (!isAuthorized) {
92
+ return Response.json({ error: { code: 'UNAUTHORIZED', message: 'Unauthorized' } }, { status: 401 });
93
+ }
94
+
95
+ let rawBody = '';
96
+ try {
97
+ rawBody = await request.text();
98
+ const body = rawBody ? JSON.parse(rawBody) : null;
99
+
100
+ if (!body || typeof body !== 'object') {
101
+ return Response.json(
102
+ {
103
+ error: {
104
+ code: 'INVALID_REQUEST',
105
+ message: 'Invalid JSON-RPC request body',
106
+ },
107
+ },
108
+ { status: 400 }
109
+ );
110
+ }
111
+
112
+ const resolvedClientMetadata = await resolveClientMetadata(request);
113
+
114
+ if (!acceptsEventStream) {
115
+ const manager = new SSEConnectionManager(
116
+ toManagerOptions(identity, resolvedClientMetadata),
117
+ () => { }
118
+ );
119
+ try {
120
+ const response = await manager.handleRequest(body as any);
121
+ return Response.json(response);
122
+ } finally {
123
+ manager.dispose();
124
+ }
125
+ }
126
+
127
+ const stream = new TransformStream();
128
+ const writer = stream.writable.getWriter();
129
+ const encoder = new TextEncoder();
130
+ let streamWritable = true;
131
+
132
+ const sendSSE = (event: string, data: unknown) => {
133
+ if (!streamWritable) return;
134
+ const message = `event: ${event}\ndata: ${JSON.stringify(data)}\n\n`;
135
+ writer.write(encoder.encode(message)).catch(() => {
136
+ streamWritable = false;
137
+ });
138
+ };
139
+
140
+ const manager = new SSEConnectionManager(
141
+ toManagerOptions(identity, resolvedClientMetadata),
142
+ (event: McpConnectionEvent | McpObservabilityEvent | McpRpcResponse) => {
143
+ if (isRpcResponseEvent(event)) {
144
+ sendSSE('rpc-response', event);
145
+ } else if (isConnectionEvent(event)) {
146
+ sendSSE('connection', event);
147
+ } else {
148
+ sendSSE('observability', event);
149
+ }
150
+ }
151
+ );
152
+
153
+ sendSSE('connected', { timestamp: Date.now() });
154
+
155
+ void (async () => {
156
+ try {
157
+ await manager.handleRequest(body as any);
158
+ } catch (error) {
159
+ const err = error instanceof Error ? error : new Error('Unknown error');
160
+ sendSSE('rpc-response', {
161
+ id: (body as any).id || 'unknown',
162
+ error: {
163
+ code: 'EXECUTION_ERROR',
164
+ message: err.message,
165
+ },
166
+ } satisfies McpRpcResponse);
167
+ } finally {
168
+ streamWritable = false;
169
+ manager.dispose();
170
+ writer.close().catch(() => { });
171
+ }
172
+ })();
173
+
174
+ return new Response(stream.readable, {
175
+ status: 200,
176
+ headers: {
177
+ 'Content-Type': 'text/event-stream',
178
+ 'Cache-Control': 'no-cache, no-transform',
179
+ 'Connection': 'keep-alive',
180
+ 'X-Accel-Buffering': 'no',
181
+ },
182
+ });
183
+ } catch (error) {
184
+ const err = error instanceof Error ? error : new Error('Unknown error');
185
+ console.error('[MCP Next Handler] Failed to handle RPC', {
186
+ identity,
187
+ message: err.message,
188
+ stack: err.stack,
189
+ rawBody: rawBody.slice(0, 500),
190
+ });
191
+ return Response.json(
192
+ {
193
+ error: {
194
+ code: 'EXECUTION_ERROR',
195
+ message: err.message,
196
+ },
197
+ },
198
+ { status: 500 }
199
+ );
200
+ }
201
+ }
202
+
203
+ return { GET, POST };
204
+ }