@mcpolyglot/core 0.1.0

package/dist/server.d.ts

@@ -0,0 +1,117 @@
+import type { Connector, PerEntityConfig } from './connector.js';
+import type { Transport } from './transport.js';
+import { type Scope, type ToolExecLimits, type ToolResult } from './tool.js';
+/**
+ * The non-bypassable pipeline that wraps every tool call. Implementations live in
+ * `@mcpolyglot/security`; consumers usually get one via `defaultSecurityHooks()` and don't
+ * implement this directly.
+ *
+ * Every method here corresponds to a numbered phase in `McpolyglotServer.executeTool`.
+ */
+export interface SecurityHooks {
+    /** Phase 1 — reject if granted scopes don't cover the tool's required scopes. */
+    checkScopes(toolName: string, required: readonly Scope[], granted: ReadonlySet<Scope>): void;
+    /** Phase 2 — token-bucket + concurrency gate. Throws `RateLimitError` on violation. */
+    checkRateLimit(toolName: string, sessionId: string): Promise<void>;
+    /** Phase 5 — strip secrets, drop denied columns. Returns the new result and the redaction count. */
+    redact(toolName: string, result: ToolResult): {
+        result: ToolResult;
+        redactionsApplied: number;
+    };
+    /** Phase 6 — hard cap on serialized output bytes. Truncates and flips `metadata.truncated`. */
+    enforceSize(toolName: string, result: ToolResult, maxBytes: number): ToolResult;
+    /** Phase 7 — wrap the result so the model treats it as data, not instructions. */
+    wrapUntrusted(result: ToolResult): ToolResult;
+    /** Phase 8 — append one JSONL line. Never receives raw args or result rows. */
+    audit(entry: AuditEntry): Promise<void>;
+}
+/** Bundle of security primitives `McpolyglotServer` needs. Built by `defaultSecurityHooks()`. */
+export interface SecurityServices {
+    hooks: SecurityHooks;
+    defaultLimits: ToolExecLimits;
+    defaultScopes: readonly Scope[];
+}
+/**
+ * One entry in the JSONL audit log. Logged for every call, including failed ones.
+ * Args and result rows are deliberately absent — only metadata and a hash of the args.
+ */
+export interface AuditEntry {
+    /** ISO-8601 UTC timestamp. */
+    ts: string;
+    sessionId: string;
+    tool: string;
+    /** First 16 chars of `sha256(JSON.stringify(args))`. Enough for forensics, not for reconstruction. */
+    argsHash: string;
+    scopes: Scope[];
+    durationMs: number;
+    rows?: number;
+    truncated?: boolean;
+    redactionsApplied?: number;
+    error?: {
+        code: string;
+        message: string;
+    };
+}
+/** Constructor options for `McpolyglotServer`. */
+export interface McpolyglotServerOptions {
+    name?: string;
+    version?: string;
+    connectors: Connector[];
+    /** Per-source per-entity configuration. Keyed by `connector.id`. */
+    perEntity?: Record<string, PerEntityConfig>;
+    /** Scopes granted to the calling session. Defaults to `DEFAULT_SCOPES` (read-only). */
+    scopes?: readonly Scope[];
+    security: SecurityServices;
+    logger?: {
+        debug: (msg: string, fields?: Record<string, unknown>) => void;
+        info: (msg: string, fields?: Record<string, unknown>) => void;
+        warn: (msg: string, fields?: Record<string, unknown>) => void;
+        error: (msg: string, fields?: Record<string, unknown>) => void;
+    };
+}
+/**
+ * MCP server that wires connectors + security hooks + a transport.
+ *
+ * Every `CallTool` request goes through `executeTool`, which runs the same eight
+ * numbered phases (scope → rate-limit → timeout → handler → redact → size cap →
+ * wrap → audit) in the same order — connectors cannot opt out.
+ *
+ * @example
+ * ```ts
+ * import { McpolyglotServer } from '@mcpolyglot/core';
+ * import { StdioTransport } from '@mcpolyglot/core/transports/stdio';
+ * import { defaultSecurityHooks } from '@mcpolyglot/security';
+ *
+ * const server = new McpolyglotServer({
+ *   connectors: [myConnector],
+ *   security: {
+ *     hooks: defaultSecurityHooks(),
+ *     defaultLimits: { rowCap: 200, timeoutMs: 10_000, maxBytes: 256 * 1024 },
+ *     defaultScopes: ['schema:read', 'tables:read'],
+ *   },
+ * });
+ * await server.start(new StdioTransport());
+ * ```
+ */
+export declare class McpolyglotServer {
+    private readonly server;
+    private readonly tools;
+    private readonly connectors;
+    private readonly perEntity;
+    private readonly scopes;
+    private readonly security;
+    private readonly sessionId;
+    private readonly logger;
+    private transport?;
+    constructor(opts: McpolyglotServerOptions);
+    start(transport: Transport): Promise<void>;
+    stop(): Promise<void>;
+    private registerTool;
+    /**
+     * Fixed pipeline: scope check → rate limit → timeout → handler →
+     * redaction → size cap → untrusted-wrap → audit log → response.
+     * Connectors cannot bypass.
+     */
+    private executeTool;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,KAAK,KAAK,EAGV,KAAK,cAAc,EACnB,KAAK,UAAU,EAEhB,MAAM,WAAW,CAAC;AAGnB;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,iFAAiF;IACjF,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC7F,uFAAuF;IACvF,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,oGAAoG;IACpG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;IAChG,+FAA+F;IAC/F,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC;IAChF,kFAAkF;IAClF,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9C,+EAA+E;IAC/E,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,iGAAiG;AACjG,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,aAAa,EAAE,cAAc,CAAC;IAC9B,aAAa,EAAE,SAAS,KAAK,EAAE,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,sGAAsG;IACtG,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,kDAAkD;AAClD,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,uFAAuF;IACvF,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;IAC1B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC/D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC9D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAChE,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAc;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE,OAAO,CAAC,SAAS,CAAC,CAAY;gBAElB,IAAI,EAAE,uBAAuB;IAiCnC,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAsB1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,OAAO,CAAC,YAAY;IAOpB;;;;OAIG;YACW,WAAW;CAkF1B"}

package/dist/server.js

@@ -0,0 +1,200 @@
+import { randomUUID, createHash } from 'node:crypto';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { zodToJsonSchema } from 'zod-to-json-schema';
+import { DEFAULT_SCOPES, } from './tool.js';
+import { McpolyglotError, ScopeError, TimeoutError } from './errors.js';
+/**
+ * MCP server that wires connectors + security hooks + a transport.
+ *
+ * Every `CallTool` request goes through `executeTool`, which runs the same eight
+ * numbered phases (scope → rate-limit → timeout → handler → redact → size cap →
+ * wrap → audit) in the same order — connectors cannot opt out.
+ *
+ * @example
+ * ```ts
+ * import { McpolyglotServer } from '@mcpolyglot/core';
+ * import { StdioTransport } from '@mcpolyglot/core/transports/stdio';
+ * import { defaultSecurityHooks } from '@mcpolyglot/security';
+ *
+ * const server = new McpolyglotServer({
+ *   connectors: [myConnector],
+ *   security: {
+ *     hooks: defaultSecurityHooks(),
+ *     defaultLimits: { rowCap: 200, timeoutMs: 10_000, maxBytes: 256 * 1024 },
+ *     defaultScopes: ['schema:read', 'tables:read'],
+ *   },
+ * });
+ * await server.start(new StdioTransport());
+ * ```
+ */
+export class McpolyglotServer {
+    server;
+    tools = new Map();
+    connectors;
+    perEntity;
+    scopes;
+    security;
+    sessionId = randomUUID();
+    logger;
+    transport;
+    constructor(opts) {
+        this.connectors = opts.connectors;
+        this.perEntity = opts.perEntity ?? {};
+        this.scopes = new Set(opts.scopes ?? DEFAULT_SCOPES);
+        this.security = opts.security;
+        this.logger = opts.logger ?? makeNoopLogger();
+        this.server = new Server({ name: opts.name ?? 'mcpolyglot', version: opts.version ?? '0.0.1' }, { capabilities: { tools: {} } });
+        this.server.setRequestHandler(ListToolsRequestSchema, async () => ({
+            tools: Array.from(this.tools.values()).map((t) => ({
+                name: t.name,
+                description: t.description,
+                inputSchema: zodToJsonSchema(t.inputSchema, { target: 'jsonSchema7' }),
+            })),
+        }));
+        this.server.setRequestHandler(CallToolRequestSchema, async (req) => {
+            const def = this.tools.get(req.params.name);
+            if (!def) {
+                throw new McpolyglotError('tool.not_found', `Unknown tool: ${req.params.name}`);
+            }
+            const internal = await this.executeTool(def, req.params.arguments ?? {});
+            return toMcpResult(internal);
+        });
+    }
+    async start(transport) {
+        for (const c of this.connectors) {
+            await c.init({ logger: this.logger });
+            for (const tool of c.listPrimitiveTools()) {
+                this.registerTool(tool);
+            }
+            const cfg = this.perEntity[c.id];
+            if (cfg?.enabled) {
+                for (const tool of c.generatePerEntityTools(cfg)) {
+                    this.registerTool(tool);
+                }
+            }
+        }
+        this.transport = transport;
+        await transport.start(this.server);
+        this.logger.info('mcpolyglot.started', {
+            sessionId: this.sessionId,
+            transport: transport.kind,
+            tools: this.tools.size,
+        });
+    }
+    async stop() {
+        await this.transport?.stop();
+        for (const c of this.connectors) {
+            await c.close();
+        }
+        await this.server.close();
+    }
+    registerTool(tool) {
+        if (this.tools.has(tool.name)) {
+            throw new McpolyglotError('tool.duplicate', `Duplicate tool name: ${tool.name}`);
+        }
+        this.tools.set(tool.name, tool);
+    }
+    /**
+     * Fixed pipeline: scope check → rate limit → timeout → handler →
+     * redaction → size cap → untrusted-wrap → audit log → response.
+     * Connectors cannot bypass.
+     */
+    async executeTool(def, rawArgs) {
+        const started = Date.now();
+        const argsHash = hashArgs(rawArgs);
+        let result;
+        let errorEntry;
+        try {
+            // 1. scope check
+            this.security.hooks.checkScopes(def.name, def.scopes, this.scopes);
+            // 2. rate limit
+            await this.security.hooks.checkRateLimit(def.name, this.sessionId);
+            // 3. timeout
+            const ac = new AbortController();
+            const timer = setTimeout(() => ac.abort(), this.security.defaultLimits.timeoutMs);
+            const ctx = {
+                sessionId: this.sessionId,
+                scopes: this.scopes,
+                signal: ac.signal,
+                limits: this.security.defaultLimits,
+                logger: this.logger,
+            };
+            try {
+                const parsed = def.inputSchema.parse(rawArgs);
+                result = await def.handler(parsed, ctx);
+            }
+            finally {
+                clearTimeout(timer);
+                if (ac.signal.aborted && !result) {
+                    throw new TimeoutError(`Tool ${def.name} exceeded ${ctx.limits.timeoutMs}ms`);
+                }
+            }
+            // 4. redaction
+            const redacted = this.security.hooks.redact(def.name, result);
+            result = redacted.result;
+            // 5. size cap
+            result = this.security.hooks.enforceSize(def.name, result, this.security.defaultLimits.maxBytes);
+            // 6. untrusted-data wrapper
+            result = this.security.hooks.wrapUntrusted(result);
+            result.metadata = {
+                ...result.metadata,
+                durationMs: Date.now() - started,
+                redactionsApplied: redacted.redactionsApplied,
+            };
+            return result;
+        }
+        catch (err) {
+            const e = err;
+            errorEntry = { code: e.code ?? 'internal_error', message: e.message };
+            if (err instanceof ScopeError || err instanceof TimeoutError) {
+                return {
+                    content: [{ type: 'text', text: e.message }],
+                    isError: true,
+                    metadata: { durationMs: Date.now() - started },
+                };
+            }
+            throw err;
+        }
+        finally {
+            await this.security.hooks.audit({
+                ts: new Date().toISOString(),
+                sessionId: this.sessionId,
+                tool: def.name,
+                argsHash,
+                scopes: Array.from(this.scopes),
+                durationMs: Date.now() - started,
+                rows: result?.metadata?.rows,
+                truncated: result?.metadata?.truncated,
+                redactionsApplied: result?.metadata?.redactionsApplied,
+                error: errorEntry,
+            });
+        }
+    }
+}
+function hashArgs(args) {
+    return createHash('sha256')
+        .update(JSON.stringify(args ?? {}))
+        .digest('hex')
+        .slice(0, 16);
+}
+/** Translate mcpolyglot's internal ToolResult into the MCP CallToolResult shape. */
+function toMcpResult(r) {
+    return {
+        content: r.content.map((b) => {
+            if (b.type === 'text')
+                return { type: 'text', text: b.text ?? '' };
+            return { type: 'text', text: JSON.stringify(b.data ?? null, null, 2) };
+        }),
+        ...(r.isError ? { isError: true } : {}),
+    };
+}
+function makeNoopLogger() {
+    return {
+        debug: () => { },
+        info: () => { },
+        warn: () => { },
+        error: () => { },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EAML,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoExE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAS;IACf,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,UAAU,CAAc;IACxB,SAAS,CAAkC;IAC3C,MAAM,CAAa;IACnB,QAAQ,CAAmB;IAC3B,SAAS,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,CAAiD;IAChE,SAAS,CAAa;IAE9B,YAAY,IAA6B;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;QAE9C,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CACtB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,EACrE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACjE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjD,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAGpE;aACF,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACzE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAoB;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;gBACjB,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,YAAY,CAAC,IAAoB;QACvC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,wBAAwB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CAAC,GAAmB,EAAE,OAAgB;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAA8B,CAAC;QACnC,IAAI,UAA+B,CAAC;QAEpC,IAAI,CAAC;YACH,iBAAiB;YACjB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnE,gBAAgB;YAChB,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAEnE,aAAa;YACb,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAElF,MAAM,GAAG,GAAgB;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9C,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,IAAI,YAAY,CAAC,QAAQ,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;YAED,eAAe;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9D,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAEzB,cAAc;YACd,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CACtC,GAAG,CAAC,IAAI,EACR,MAAM,EACN,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CACrC,CAAC;YAEF,4BAA4B;YAC5B,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAEnD,MAAM,CAAC,QAAQ,GAAG;gBAChB,GAAG,MAAM,CAAC,QAAQ;gBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAChC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC9C,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAgC,CAAC;YAC3C,UAAU,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACtE,IAAI,GAAG,YAAY,UAAU,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;gBAC7D,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC5C,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE;iBAC/C,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC9B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ;gBACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC/B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAChC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI;gBAC5B,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS;gBACtC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB;gBACtD,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAa;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SAClC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,CAAa;IAIhC,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACnE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,CAAC,CAAC;QACF,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;QACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;KAChB,CAAC;AACJ,CAAC"}

package/dist/tool.d.ts

@@ -0,0 +1,91 @@
+import type { ZodTypeAny, infer as ZodInfer } from 'zod';
+/** Every scope mcpolyglot understands. New scopes must be added here so the Zod config schema accepts them. */
+export declare const ALL_SCOPES: readonly ["schema:read", "tables:read", "tables:write", "query:raw", "http:call"];
+/** A capability a tool requires from the calling session. Checked by `ScopeGuard`. */
+export type Scope = (typeof ALL_SCOPES)[number];
+/** Scopes granted to a session by default. Excludes anything write-shaped. */
+export declare const DEFAULT_SCOPES: readonly Scope[];
+/** One block in a `ToolResult.content`. Either pre-rendered text or structured JSON. */
+export interface ContentBlock {
+    type: 'text' | 'json';
+    text?: string;
+    data?: unknown;
+}
+/** What a tool handler returns. Goes through redact → size-cap → wrap before reaching the model. */
+export interface ToolResult {
+    content: ContentBlock[];
+    /** Set when the handler intentionally surfaces an error (e.g., scope failure rendered as a tool result). */
+    isError?: boolean;
+    metadata?: {
+        rows?: number;
+        /** `true` if the size cap or row cap had to truncate the result. */
+        truncated?: boolean;
+        /** Filled in by the pipeline; handlers don't need to set this. */
+        durationMs?: number;
+        /** Filled in by the pipeline; handlers don't need to set this. */
+        redactionsApplied?: number;
+    };
+}
+/** Per-call execution limits. Pulled from config; can be tightened per-source. */
+export interface ToolExecLimits {
+    /** Max rows a SQL/Mongo handler may return before truncation. */
+    rowCap: number;
+    /** Wall-clock budget for the handler. Enforced via `AbortSignal`. */
+    timeoutMs: number;
+    /** Hard cap on the serialized output size, in bytes. */
+    maxBytes: number;
+}
+/** Runtime context handed to a tool handler on every call. */
+export interface ToolExecCtx {
+    /** Stable id for the calling session. Used by the rate limiter and audit log. */
+    sessionId: string;
+    /** Scopes granted to this session. The pipeline already checked the tool's `scopes` against these. */
+    scopes: Set<Scope>;
+    /** Aborted when `limits.timeoutMs` elapses. Pass to driver-level cancel APIs where supported. */
+    signal: AbortSignal;
+    limits: ToolExecLimits;
+    logger: {
+        debug: (msg: string, fields?: Record<string, unknown>) => void;
+        info: (msg: string, fields?: Record<string, unknown>) => void;
+        warn: (msg: string, fields?: Record<string, unknown>) => void;
+        error: (msg: string, fields?: Record<string, unknown>) => void;
+    };
+}
+/**
+ * Handler signature for a tool. Args are pre-validated against `ToolDefinition.inputSchema`,
+ * so the function receives a parsed, typed value — no defensive validation needed.
+ */
+export type ToolHandler<S extends ZodTypeAny = ZodTypeAny> = (args: ZodInfer<S>, ctx: ToolExecCtx) => Promise<ToolResult>;
+/**
+ * The contract every connector returns from `listPrimitiveTools()` /
+ * `generatePerEntityTools()`. The `handler` is the only point where the connector
+ * touches the data source — everything else (auth, redaction, audit) is the pipeline's job.
+ *
+ * @example
+ * ```ts
+ * import { z } from 'zod';
+ *
+ * const tool: ToolDefinition = {
+ *   name: 'pg.main.describe_table',
+ *   description: 'Describe one Postgres table.',
+ *   inputSchema: z.object({ name: z.string() }).strict(),
+ *   scopes: ['schema:read'],
+ *   readOnly: true,
+ *   handler: async ({ name }, ctx) => ({ content: [{ type: 'json', data: { name } }] }),
+ * };
+ * ```
+ */
+export interface ToolDefinition<S extends ZodTypeAny = ZodTypeAny> {
+    /** Globally-unique tool name. By convention: `<connector.id>.<verb>`. */
+    name: string;
+    /** Human-readable description shown to the model in `tools/list`. */
+    description: string;
+    /** Zod schema for the args. Used both for validation and to render JSON Schema for MCP clients. */
+    inputSchema: S;
+    /** Scopes the calling session must have. Enforced before the handler runs. */
+    scopes: readonly Scope[];
+    /** `true` if the handler never mutates the source. Hosts may use this for UI hints. */
+    readOnly: boolean;
+    handler: ToolHandler<S>;
+}
+//# sourceMappingURL=tool.d.ts.map

package/dist/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,KAAK,CAAC;AAEzD,+GAA+G;AAC/G,eAAO,MAAM,UAAU,mFAMb,CAAC;AAEX,sFAAsF;AACtF,MAAM,MAAM,KAAK,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,cAAc,EAAE,SAAS,KAAK,EAAmC,CAAC;AAE/E,wFAAwF;AACxF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,oGAAoG;AACpG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,oEAAoE;QACpE,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,kEAAkE;QAClE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kEAAkE;QAClE,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8DAA8D;AAC9D,MAAM,WAAW,WAAW;IAC1B,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,iGAAiG;IACjG,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE;QACN,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC/D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC9D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAChE,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,IAAI,CAC3D,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EACjB,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,UAAU,CAAC,CAAC;AAEzB;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU;IAC/D,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,WAAW,EAAE,MAAM,CAAC;IACpB,mGAAmG;IACnG,WAAW,EAAE,CAAC,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,SAAS,KAAK,EAAE,CAAC;IACzB,uFAAuF;IACvF,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;CACzB"}

package/dist/tool.js

@@ -0,0 +1,11 @@
+/** Every scope mcpolyglot understands. New scopes must be added here so the Zod config schema accepts them. */
+export const ALL_SCOPES = [
+    'schema:read',
+    'tables:read',
+    'tables:write',
+    'query:raw',
+    'http:call',
+];
+/** Scopes granted to a session by default. Excludes anything write-shaped. */
+export const DEFAULT_SCOPES = ['schema:read', 'tables:read'];
+//# sourceMappingURL=tool.js.map

package/dist/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../src/tool.ts"],"names":[],"mappings":"AAEA,+GAA+G;AAC/G,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,aAAa;IACb,aAAa;IACb,cAAc;IACd,WAAW;IACX,WAAW;CACH,CAAC;AAKX,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAqB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,14 @@
+import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+/**
+ * Carries an `McpolyglotServer`'s JSON-RPC traffic. Two implementations ship today —
+ * `StdioTransport` (Claude Desktop / Cursor / Claude Code) and
+ * `StreamableHttpTransport` (long-lived HTTP service with bearer auth).
+ */
+export interface Transport {
+    readonly kind: 'stdio' | 'http';
+    /** Wire the transport to the MCP server and start accepting traffic. */
+    start(server: Server): Promise<void>;
+    /** Stop accepting traffic and close any underlying sockets. Must be idempotent. */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,wEAAwE;IACxE,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,mFAAmF;IACnF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB"}

package/dist/transport.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":""}

package/dist/transports/stdio.d.ts

@@ -0,0 +1,9 @@
+import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { Transport } from '../transport.js';
+export declare class StdioTransport implements Transport {
+    readonly kind: "stdio";
+    private inner?;
+    start(server: Server): Promise<void>;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=stdio.d.ts.map

package/dist/transports/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,qBAAa,cAAe,YAAW,SAAS;IAC9C,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IACjC,OAAO,CAAC,KAAK,CAAC,CAAuB;IAE/B,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAI5B"}

package/dist/transports/stdio.js

@@ -0,0 +1,14 @@
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+export class StdioTransport {
+    kind = 'stdio';
+    inner;
+    async start(server) {
+        this.inner = new StdioServerTransport();
+        await server.connect(this.inner);
+    }
+    async stop() {
+        await this.inner?.close();
+        this.inner = undefined;
+    }
+}
+//# sourceMappingURL=stdio.js.map

package/dist/transports/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAIjF,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,OAAgB,CAAC;IACzB,KAAK,CAAwB;IAErC,KAAK,CAAC,KAAK,CAAC,MAAc;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF"}

package/dist/transports/streamable-http.d.ts

@@ -0,0 +1,28 @@
+import type { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';
+import type { Transport } from '../transport.js';
+export interface StreamableHttpTransportOptions {
+    host: string;
+    port: number;
+    /** Bearer token required on the Authorization header. Auto-generated if omitted. */
+    bearerToken?: string;
+    /** Where to log server startup banner / auth-failure events. Stderr by default. */
+    logger?: {
+        info: (msg: string, fields?: Record<string, unknown>) => void;
+        warn: (msg: string, fields?: Record<string, unknown>) => void;
+    };
+}
+export declare class StreamableHttpTransport implements Transport {
+    readonly kind: "http";
+    readonly bearerToken: string;
+    private readonly host;
+    private readonly port;
+    private readonly logger;
+    private inner?;
+    private httpServer?;
+    constructor(opts: StreamableHttpTransportOptions);
+    start(server: McpServer): Promise<void>;
+    stop(): Promise<void>;
+    private handle;
+    private checkAuth;
+}
+//# sourceMappingURL=streamable-http.d.ts.map

package/dist/transports/streamable-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-http.d.ts","sourceRoot":"","sources":["../../src/transports/streamable-http.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAC/D,CAAC;CACH;AAED,qBAAa,uBAAwB,YAAW,SAAS;IACvD,QAAQ,CAAC,IAAI,EAAG,MAAM,CAAU;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwD;IAC/E,OAAO,CAAC,KAAK,CAAC,CAAgC;IAC9C,OAAO,CAAC,UAAU,CAAC,CAAa;gBAEpB,IAAI,EAAE,8BAA8B;IAY1C,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA0CvC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YASb,MAAM;IAwBpB,OAAO,CAAC,SAAS;CAQlB"}

package/dist/transports/streamable-http.js

@@ -0,0 +1,108 @@
+import { createServer, } from 'node:http';
+import { timingSafeEqual, randomBytes } from 'node:crypto';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+export class StreamableHttpTransport {
+    kind = 'http';
+    bearerToken;
+    host;
+    port;
+    logger;
+    inner;
+    httpServer;
+    constructor(opts) {
+        this.host = opts.host;
+        this.port = opts.port;
+        this.bearerToken = opts.bearerToken ?? generateToken();
+        this.logger = opts.logger ?? {
+            info: (msg, fields) => process.stderr.write(JSON.stringify({ level: 'info', msg, ...(fields ?? {}) }) + '\n'),
+            warn: (msg, fields) => process.stderr.write(JSON.stringify({ level: 'warn', msg, ...(fields ?? {}) }) + '\n'),
+        };
+    }
+    async start(server) {
+        this.inner = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+        this.inner.onerror = (err) => {
+            this.logger.warn('http.transport.error', { error: err.message });
+        };
+        await server.connect(this.inner);
+        this.httpServer = createServer((req, res) => {
+            this.handle(req, res).catch((err) => {
+                this.logger.warn('http.handler.error', {
+                    error: err.message,
+                    stack: err.stack,
+                });
+                if (!res.headersSent) {
+                    res.statusCode = 500;
+                    res.end();
+                }
+            });
+        });
+        await new Promise((resolve, reject) => {
+            this.httpServer.once('error', reject);
+            this.httpServer.listen(this.port, this.host, () => {
+                this.httpServer.off('error', reject);
+                resolve();
+            });
+        });
+        this.logger.info('http.listening', {
+            host: this.host,
+            port: this.port,
+            // Tokens are sensitive; emit a fingerprint not the token itself.
+            tokenFingerprint: fingerprint(this.bearerToken),
+        });
+        if (!isLoopback(this.host)) {
+            this.logger.warn('http.bound_non_loopback', {
+                host: this.host,
+                recommendation: 'put behind a reverse proxy with TLS',
+            });
+        }
+    }
+    async stop() {
+        if (this.httpServer) {
+            await new Promise((resolve) => this.httpServer.close(() => resolve()));
+            this.httpServer = undefined;
+        }
+        await this.inner?.close();
+        this.inner = undefined;
+    }
+    async handle(req, res) {
+        if (req.method === 'GET' && req.url === '/healthz') {
+            res.statusCode = 200;
+            res.setHeader('content-type', 'application/json');
+            res.end(JSON.stringify({ ok: true }));
+            return;
+        }
+        if (!this.checkAuth(req)) {
+            res.statusCode = 401;
+            res.setHeader('WWW-Authenticate', 'Bearer realm="mcpolyglot"');
+            res.setHeader('content-type', 'application/json');
+            res.end(JSON.stringify({ error: 'unauthorized' }));
+            return;
+        }
+        if (!this.inner) {
+            res.statusCode = 503;
+            res.end();
+            return;
+        }
+        await this.inner.handleRequest(req, res);
+    }
+    checkAuth(req) {
+        const header = req.headers.authorization ?? '';
+        const expected = `Bearer ${this.bearerToken}`;
+        const a = Buffer.from(header);
+        const b = Buffer.from(expected);
+        if (a.length !== b.length)
+            return false;
+        return timingSafeEqual(a, b);
+    }
+}
+function generateToken() {
+    return randomBytes(24).toString('base64url');
+}
+function fingerprint(token) {
+    // first 4 + last 4 — enough to recognize, not enough to recover
+    return token.slice(0, 4) + '…' + token.slice(-4);
+}
+function isLoopback(host) {
+    return host === '127.0.0.1' || host === '::1' || host === 'localhost';
+}
+//# sourceMappingURL=streamable-http.js.map