@mseep/safe-omada-mcp 0.17.0

package/dist/server/common.js

@@ -0,0 +1,245 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { ListResourcesRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { z } from 'zod';
+import packageMetadata from '../../package.json' with { type: 'json' };
+import { logger } from '../utils/logger.js';
+// Custom headers schema for optional HTTP headers
+export const customHeadersSchema = z.record(z.string(), z.string()).optional();
+// Reusable MAC address schema for device identifiers (AP, switch, gateway)
+export const deviceMacSchema = z
+    .string()
+    .trim()
+    .regex(/^[0-9A-Fa-f]{2}([:-][0-9A-Fa-f]{2}){5}$/, 'Invalid MAC address format. Expected "AA-BB-CC-DD-EE-FF" or "AA:BB:CC:DD:EE:FF".');
+export const siteInputSchema = z.object({
+    siteId: z
+        .string()
+        .min(1)
+        .optional()
+        .describe('Site ID to target. If omitted, uses the default site from OMADA_SITE_ID config. Use listSites to discover available site IDs.'),
+    customHeaders: customHeadersSchema.describe('Optional HTTP headers to include in the Omada API request (e.g. {"X-Custom-Header": "value"}). Rarely needed.'),
+});
+export const clientIdSchema = siteInputSchema.extend({
+    clientId: z.string().min(1, 'clientId (MAC or client identifier) is required'),
+});
+export const deviceIdSchema = siteInputSchema.extend({
+    deviceId: z.string().min(1, 'deviceId (MAC or device identifier) is required'),
+});
+export const customRequestSchema = z.object({
+    method: z.string().default('GET'),
+    url: z.string().min(1, 'A controller API path is required'),
+    params: z.record(z.string(), z.unknown()).optional(),
+    data: z.unknown().optional(),
+    siteId: z.string().min(1).optional(),
+    customHeaders: customHeadersSchema,
+});
+export const stackIdSchema = siteInputSchema.extend({
+    stackId: z.string().min(1, 'stackId is required'),
+});
+export function toToolResult(value) {
+    const text = typeof value === 'string' ? value : JSON.stringify(value, null, 2);
+    return {
+        content: text ? [{ type: 'text', text }] : [],
+    };
+}
+export function safeSerialize(value) {
+    try {
+        return JSON.stringify(sanitizeForLogs(value));
+    }
+    catch {
+        return '[unserializable]';
+    }
+}
+function sanitizeForLogs(value) {
+    if (value === null || value === undefined) {
+        return value;
+    }
+    if (typeof value === 'string') {
+        return isLikelySensitiveString(value) ? maskValue(value) : value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => sanitizeForLogs(entry));
+    }
+    if (typeof value === 'object') {
+        const sanitized = {};
+        for (const [key, entry] of Object.entries(value)) {
+            sanitized[key] = isSensitiveKey(key) ? maskValue(entry) : sanitizeForLogs(entry);
+        }
+        return sanitized;
+    }
+    return value;
+}
+function isSensitiveKey(key) {
+    const normalized = key.toLowerCase();
+    return (normalized.includes('authorization') ||
+        normalized.includes('token') ||
+        normalized.includes('secret') ||
+        normalized.includes('password') ||
+        normalized.includes('cookie') ||
+        normalized.includes('clientid') ||
+        normalized.includes('client-id') ||
+        normalized.includes('client_id') ||
+        normalized.includes('customheaders'));
+}
+function isLikelySensitiveString(value) {
+    return value.length > 16 && /[A-Za-z0-9+/=._-]{16,}/.test(value);
+}
+function maskValue(value) {
+    if (typeof value === 'string') {
+        if (value.length <= 8) {
+            return '********';
+        }
+        return `${value.slice(0, 4)}…${value.slice(-4)}`;
+    }
+    if (Array.isArray(value)) {
+        return value.map(() => '********');
+    }
+    if (typeof value === 'object' && value !== null) {
+        return '[masked-object]';
+    }
+    return '********';
+}
+function summarizeSuccess(method, result) {
+    if (!result || typeof result !== 'object') {
+        return undefined;
+    }
+    const payload = result;
+    switch (method) {
+        case 'initialize': {
+            const protocolVersion = payload['protocolVersion'];
+            return typeof protocolVersion === 'string' ? { protocolVersion } : undefined;
+        }
+        case 'tools/list': {
+            const tools = Array.isArray(payload['tools']) ? payload['tools'] : undefined;
+            return tools ? { toolCount: tools.length } : undefined;
+        }
+        case 'tools/call': {
+            const name = payload['name'];
+            if (typeof name === 'string') {
+                return { tool: name };
+            }
+            break;
+        }
+        default:
+            break;
+    }
+    return undefined;
+}
+export function wrapToolHandler(name, handler) {
+    return async (args, extra) => {
+        const sessionId = extra.sessionId ?? 'unknown-session';
+        logger.info('Tool invoked', { tool: name, sessionId, args: safeSerialize(args) });
+        try {
+            const result = await handler(args, extra);
+            logger.info('Tool completed', { tool: name, sessionId });
+            return result;
+        }
+        catch (error) {
+            logger.error('Tool failed', {
+                tool: name,
+                sessionId,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    };
+}
+export function toMutationResult(summary) {
+    return toToolResult(summary);
+}
+export function wrapMutationToolHandler(name, summary, handler) {
+    return wrapToolHandler(name, async (args, extra) => {
+        const mode = (args.dryRun === true ? 'dry-run' : 'apply');
+        const result = await handler(args, extra);
+        const mutationSummary = summary(args, result, mode);
+        logger.info('Mutation audit event', {
+            tool: name,
+            sessionId: extra.sessionId ?? 'unknown-session',
+            mutation: safeSerialize(mutationSummary),
+        });
+        return toMutationResult(mutationSummary);
+    });
+}
+function setupServerLogging(server) {
+    const protocol = server.server;
+    const originalSetRequestHandler = protocol.setRequestHandler.bind(protocol);
+    protocol.setRequestHandler = function patchedSetRequestHandler(schema, handler) {
+        const method = schema.shape.method.value;
+        const wrapped = async (request, extra) => {
+            const sessionId = extra.sessionId ?? 'unknown-session';
+            const logFields = { method, sessionId };
+            if ('params' in request) {
+                logFields.params = safeSerialize(request.params);
+            }
+            logger.info('MCP request received', logFields);
+            try {
+                const result = await handler(request, extra);
+                const summary = summarizeSuccess(method, result);
+                logger.info('MCP request handled', summary ? { method, sessionId, ...summary } : { method, sessionId });
+                return result;
+            }
+            catch (error) {
+                logger.error('MCP request failed', {
+                    method,
+                    sessionId,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                throw error;
+            }
+        };
+        return originalSetRequestHandler(schema, wrapped);
+    };
+    server.server.oninitialized = () => {
+        const capabilities = server.server.getCapabilities?.();
+        if (capabilities) {
+            logger.info('Server initialization completed', { capabilities });
+        }
+        else {
+            logger.info('Server initialization completed');
+        }
+    };
+    server.server.onclose = () => {
+        logger.warn('Server connection closed');
+    };
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK doesn't provide types for error handler
+    server.server.onerror = (error) => {
+        logger.error('Server error', { error });
+    };
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK doesn't provide types for request handler
+    // biome-ignore lint/suspicious/useAwait: Handler signature requires async even without await
+    server.server.fallbackRequestHandler = async (request, extra) => {
+        const sessionId = extra.sessionId ?? 'unknown-session';
+        logger.warn('Unhandled request received', {
+            method: request.method,
+            sessionId,
+            params: safeSerialize(request.params),
+        });
+        throw new Error(`Unhandled request: ${request.method}`);
+    };
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK doesn't provide types for notification handler
+    // biome-ignore lint/suspicious/useAwait: Handler signature requires async even without await
+    server.server.fallbackNotificationHandler = async (notification) => {
+        logger.warn('Unhandled notification received', {
+            method: notification.method,
+            params: safeSerialize(notification.params),
+        });
+    };
+}
+export function createServer() {
+    const server = new McpServer({
+        name: 'safe-omada-mcp',
+        version: packageMetadata.version,
+    });
+    setupServerLogging(server);
+    // Register resources capability and resources/list handler to prevent initialization errors
+    // in MCP clients like Claude Desktop. Currently, this server does not expose any resources,
+    // so we return an empty list.
+    server.server.registerCapabilities({
+        resources: {},
+    });
+    server.server.setRequestHandler(ListResourcesRequestSchema, async () => ({
+        resources: [],
+    }));
+    return server;
+}
+export { setupServerLogging };
+//# sourceMappingURL=common.js.map

package/dist/server/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/server/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAuB,0BAA0B,EAA+C,MAAM,oCAAoC,CAAC;AAClJ,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,eAAe,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEvE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE/E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,yCAAyC,EAAE,kFAAkF,CAAC,CAAC;AAE1I,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,+HAA+H,CAAC;IAC9I,aAAa,EAAE,mBAAmB,CAAC,QAAQ,CACvC,+GAA+G,CAClH;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iDAAiD,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,iDAAiD,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mCAAmC,CAAC;IAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,mBAAmB;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEhF,OAAO;QACH,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;KACzD,CAAC;AACN,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IACxC,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,kBAAkB,CAAC;IAC9B,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CACH,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;QACpC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CACvC,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAe;IACrD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,OAAO,GAAG,MAAiC,CAAC;IAElD,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACnD,OAAO,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC1B,CAAC;YACD,MAAM;QACV,CAAC;QACD;YACI,MAAM;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAcD,MAAM,UAAU,eAAe,CAC3B,IAAY,EACZ,OAAoG;IAEpG,OAAO,KAAK,EAAE,IAA4C,EAAE,KAAgB,EAA2B,EAAE;QACrG,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAElF,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACzD,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;gBACxB,IAAI,EAAE,IAAI;gBACV,SAAS;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACrD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACnC,IAAY,EACZ,OAAsH,EACtH,OAA6F;IAE7F,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,CAAE,IAAgC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAwB,CAAC;QAC9G,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE;YAChC,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,iBAAiB;YAC/C,QAAQ,EAAE,aAAa,CAAC,eAAe,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAiB;IACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IAI/B,MAAM,yBAAyB,GAAG,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5E,QAAQ,CAAC,iBAAiB,GAAG,SAAS,wBAAwB,CAAC,MAAqB,EAAE,OAAwB;QAC1G,MAAM,MAAM,GAAI,MAAmD,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;QACvF,MAAM,OAAO,GAAoB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACtD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,iBAAiB,CAAC;YACvD,MAAM,SAAS,GAA4B,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACjE,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACtB,SAAS,CAAC,MAAM,GAAG,aAAa,CAAE,OAA+B,CAAC,MAAM,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;YAE/C,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC7C,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBACxG,OAAO,MAAM,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;oBAC/B,MAAM;oBACN,SAAS;oBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAChE,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC,CAAC;QAEF,OAAO,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;QAI/B,MAAM,YAAY,GAAI,MAAM,CAAC,MAA4C,CAAC,eAAe,EAAE,EAAE,CAAC;QAC9F,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnD,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;QACzB,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,8FAA8F;IAC9F,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,KAAU,EAAE,EAAE;QACnC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,gGAAgG;IAChG,6FAA6F;IAC7F,MAAM,CAAC,MAAM,CAAC,sBAAsB,GAAG,KAAK,EAAE,OAAY,EAAE,KAAU,EAAE,EAAE;QACtE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACtC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS;YACT,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,qGAAqG;IACrG,6FAA6F;IAC7F,MAAM,CAAC,MAAM,CAAC,2BAA2B,GAAG,KAAK,EAAE,YAAiB,EAAE,EAAE;QACpE,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;YAC3C,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC;SAC7C,CAAC,CAAC;IACP,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,YAAY;IACxB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QACzB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,eAAe,CAAC,OAAO;KACnC,CAAC,CAAC;IAEH,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3B,4FAA4F;IAC5F,4FAA4F;IAC5F,8BAA8B;IAC9B,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAC/B,SAAS,EAAE,EAAE;KAChB,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACrE,SAAS,EAAE,EAAE;KAChB,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/server/http.d.ts

@@ -0,0 +1,18 @@
+import type { IncomingHttpHeaders, IncomingMessage, ServerResponse } from 'node:http';
+import type { EnvironmentConfig } from '../config.js';
+declare function getRequestUrl(req: IncomingMessage, fallbackPort: number): URL | undefined;
+declare function sendJson(res: ServerResponse, statusCode: number, body: unknown): void;
+declare function sanitizeHeaders(headers: IncomingHttpHeaders): Record<string, unknown>;
+declare function sanitizeHeaderValue(key: string, value: string): string;
+declare function sanitizePayload(payload: unknown): unknown;
+declare function isSensitiveKey(key: string): boolean;
+declare function isLikelySensitiveString(value: string): boolean;
+declare function maskValue(value: unknown): unknown;
+declare function createShutdownHandler(signal: NodeJS.Signals, closeHttp: () => Promise<void>, closeSessions: () => Promise<void>): Promise<void>;
+/**
+ * Starts the HTTP server with the Streamable HTTP transport.
+ * Omada credentials are resolved per-connection/session from env vars (always win)
+ * and request headers (x-omada-client-id, x-omada-client-secret, x-omada-omadac-id).
+ */
+export declare function startHttpServer(config: EnvironmentConfig): Promise<void>;
+export { getRequestUrl, sendJson, sanitizeHeaders, sanitizeHeaderValue, sanitizePayload, isSensitiveKey, isLikelySensitiveString, maskValue, createShutdownHandler, };

package/dist/server/http.js

@@ -0,0 +1,255 @@
+import http from 'node:http';
+import { normalizePath, resolvePort } from '../utils/config-validations.js';
+import { logger } from '../utils/logger.js';
+import { closeAllStreamSessions, handleStreamRequest } from './stream.js';
+const DEFAULT_PORT = 3000;
+const HEALTH_PATH = '/healthz';
+function getRequestUrl(req, fallbackPort) {
+    if (!req.url) {
+        return undefined;
+    }
+    const host = req.headers.host ?? `localhost:${fallbackPort}`;
+    try {
+        return new URL(req.url, `http://${host}`);
+    }
+    catch {
+        return undefined;
+    }
+}
+function sendJson(res, statusCode, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(statusCode, {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(payload),
+    });
+    res.end(payload);
+}
+function sanitizeHeaders(headers) {
+    const sanitized = {};
+    for (const [key, value] of Object.entries(headers)) {
+        if (value === undefined) {
+            continue;
+        }
+        if (Array.isArray(value)) {
+            sanitized[key] = value.map((entry) => sanitizeHeaderValue(key, entry));
+        }
+        else {
+            sanitized[key] = sanitizeHeaderValue(key, value);
+        }
+    }
+    return sanitized;
+}
+function sanitizeHeaderValue(key, value) {
+    const sanitized = isSensitiveKey(key) ? maskValue(value) : value;
+    return typeof sanitized === 'string' ? sanitized : String(sanitized);
+}
+function sanitizePayload(payload) {
+    if (payload === null || payload === undefined) {
+        return payload;
+    }
+    if (typeof payload === 'string') {
+        return isLikelySensitiveString(payload) ? maskValue(payload) : payload;
+    }
+    if (Array.isArray(payload)) {
+        return payload.map((entry) => sanitizePayload(entry));
+    }
+    if (typeof payload === 'object') {
+        const sanitized = {};
+        for (const [key, value] of Object.entries(payload)) {
+            sanitized[key] = isSensitiveKey(key) ? maskValue(value) : sanitizePayload(value);
+        }
+        return sanitized;
+    }
+    return payload;
+}
+function isSensitiveKey(key) {
+    const normalized = key.toLowerCase();
+    return (normalized.includes('authorization') ||
+        normalized.includes('token') ||
+        normalized.includes('secret') ||
+        normalized.includes('password') ||
+        normalized.includes('cookie') ||
+        normalized.includes('client-id'));
+}
+function isLikelySensitiveString(value) {
+    return value.length > 16 && /[A-Za-z0-9+/=]{16,}/.test(value);
+}
+function maskValue(value) {
+    if (typeof value === 'string') {
+        if (value.length <= 8) {
+            return '********';
+        }
+        return `${value.slice(0, 4)}…${value.slice(-4)}`;
+    }
+    if (Array.isArray(value)) {
+        return value.map(() => '********');
+    }
+    if (typeof value === 'object' && value !== null) {
+        return '[masked-object]';
+    }
+    return '********';
+}
+async function createShutdownHandler(signal, closeHttp, closeSessions) {
+    logger.warn('Received shutdown signal', { signal });
+    try {
+        await closeSessions();
+    }
+    catch (error) {
+        logger.error('Error closing MCP sessions', { error });
+    }
+    try {
+        await closeHttp();
+    }
+    catch (error) {
+        logger.error('Error closing HTTP server', { error });
+    }
+}
+/**
+ * Starts the HTTP server with the Streamable HTTP transport.
+ * Omada credentials are resolved per-connection/session from env vars (always win)
+ * and request headers (x-omada-client-id, x-omada-client-secret, x-omada-omadac-id).
+ */
+export async function startHttpServer(config) {
+    const transport = config.httpTransport;
+    logger.info('Starting HTTP server', { transport });
+    logger.warn('HTTP transport is unsupported for the safe baseline and should only be used in isolated lab environments.');
+    const omadaConfig = {
+        baseUrl: config.baseUrl,
+        clientId: config.clientId,
+        clientSecret: config.clientSecret,
+        omadacId: config.omadacId,
+        siteId: config.siteId,
+        strictSsl: config.strictSsl,
+        requestTimeout: config.requestTimeout,
+    };
+    const port = resolvePort(config.httpPort, DEFAULT_PORT);
+    const host = config.httpBindAddr ?? '127.0.0.1';
+    const endpointPath = normalizePath(config.httpPath ?? '/mcp');
+    const streamSessions = new Map();
+    const httpServer = http.createServer((req, res) => {
+        void (async () => {
+            const url = getRequestUrl(req, port);
+            if (!url) {
+                logger.warn('HTTP request rejected', {
+                    reason: 'invalid-url',
+                    method: req.method,
+                    url: req.url,
+                });
+                sendJson(res, 400, { error: 'Invalid request URL.' });
+                return;
+            }
+            logger.debug('HTTP request headers', {
+                method: req.method,
+                path: url.pathname,
+                headers: sanitizeHeaders(req.headers),
+            });
+            const bodyChunks = [];
+            const shouldCaptureBody = (req.method ?? 'GET').toUpperCase() !== 'GET';
+            if (shouldCaptureBody) {
+                req.on('data', (chunk) => {
+                    const bufferChunk = typeof chunk === 'string' ? Buffer.from(chunk, 'utf8') : chunk;
+                    bodyChunks.push(bufferChunk);
+                });
+                await new Promise((resolve) => {
+                    req.on('end', () => resolve());
+                });
+            }
+            logger.info('HTTP request received', {
+                method: req.method,
+                path: url.pathname,
+                query: url.search,
+                sessionId: req.headers['mcp-session-id'] ?? undefined,
+            });
+            // Health check endpoint
+            if (config.httpEnableHealthcheck && url.pathname === (config.httpHealthcheckPath ?? HEALTH_PATH)) {
+                logger.debug('Health check request served');
+                sendJson(res, 200, { status: 'ok' });
+                return;
+            }
+            let parsedBody = null;
+            if (shouldCaptureBody && bodyChunks.length > 0) {
+                const rawBody = Buffer.concat(bodyChunks).toString('utf8');
+                if (rawBody.length > 0) {
+                    try {
+                        parsedBody = JSON.parse(rawBody);
+                    }
+                    catch {
+                        parsedBody = rawBody;
+                    }
+                    logger.debug('HTTP request body', {
+                        method: req.method,
+                        path: url.pathname,
+                        length: rawBody.length,
+                        body: sanitizePayload(parsedBody),
+                    });
+                }
+            }
+            try {
+                // Streamable HTTP Transport handling
+                if (url.pathname === endpointPath) {
+                    await handleStreamRequest(config, omadaConfig, req, res, parsedBody, streamSessions);
+                }
+                else {
+                    sendJson(res, 404, { error: 'Not Found' });
+                }
+                logger.info('MCP request handled successfully', {
+                    path: url.pathname,
+                    method: req.method,
+                });
+            }
+            catch (error) {
+                logger.error('Failed to handle MCP HTTP request', { error });
+                if (!res.headersSent) {
+                    sendJson(res, 500, {
+                        jsonrpc: '2.0',
+                        error: { code: -32000, message: 'Internal server error' },
+                        id: null,
+                    });
+                }
+                else {
+                    res.end();
+                }
+            }
+        })();
+    });
+    httpServer.on('clientError', (error, socket) => {
+        logger.error('HTTP client error', { error });
+        socket.end('HTTP/1.1 400 Bad Request\r\n\r\n');
+    });
+    await new Promise((resolve) => {
+        httpServer.listen(port, host, () => {
+            const displayHost = host === '0.0.0.0' ? 'localhost' : host;
+            logger.info('HTTP server listening', {
+                endpoint: `http://${displayHost}:${port}${endpointPath}`,
+                transport,
+            });
+            if (config.httpEnableHealthcheck) {
+                logger.info('HTTP health check available', {
+                    endpoint: `http://${displayHost}:${port}${config.httpHealthcheckPath ?? HEALTH_PATH}`,
+                });
+            }
+            logger.info('HTTP server ready');
+            resolve();
+        });
+    });
+    if (config.httpNgrokEnabled) {
+        logger.warn('MCP_HTTP_NGROK_ENABLED is ignored in the safe baseline. Public tunnel support is intentionally disabled.');
+    }
+    let shuttingDown = false;
+    const closeHttp = () => new Promise((resolve) => {
+        httpServer.close(() => resolve());
+    });
+    const closeSessions = async () => {
+        await closeAllStreamSessions(streamSessions);
+    };
+    for (const signal of ['SIGINT', 'SIGTERM']) {
+        process.on(signal, () => {
+            if (!shuttingDown) {
+                shuttingDown = true;
+                void createShutdownHandler(signal, closeHttp, closeSessions);
+            }
+        });
+    }
+}
+export { getRequestUrl, sendJson, sanitizeHeaders, sanitizeHeaderValue, sanitizePayload, isSensitiveKey, isLikelySensitiveString, maskValue, createShutdownHandler, };
+//# sourceMappingURL=http.js.map

package/dist/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAE1E,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,WAAW,GAAG,UAAU,CAAC;AAI/B,SAAS,aAAa,CAAC,GAAoB,EAAE,YAAoB;IAC7D,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,aAAa,YAAY,EAAE,CAAC;IAC7D,IAAI,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,UAAkB,EAAE,IAAa;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;QACtB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC/C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,OAA4B;IACjD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,SAAS;QACb,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACJ,SAAS,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,KAAa;IACnD,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACrC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3E,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,CACH,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;QACpC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CACnC,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,MAAsB,EAAE,SAA8B,EAAE,aAAkC;IAC3H,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACD,MAAM,SAAS,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAyB;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC;IACvC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,2GAA2G,CAAC,CAAC;IAEzH,MAAM,WAAW,GAA0B;QACvC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAkB;QACnC,YAAY,EAAE,MAAM,CAAC,YAAsB;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAkB;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,IAAI,WAAW,CAAC;IAChD,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;IAE9D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgC,CAAC;IAE/D,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBACjC,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;iBACf,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACtD,OAAO;YACX,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;aACxC,CAAC,CAAC;YAEH,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,iBAAiB,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;YACxE,IAAI,iBAAiB,EAAE,CAAC;gBACpB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACrB,MAAM,WAAW,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBACnF,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC;gBAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAChC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;YACP,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,KAAK,EAAE,GAAG,CAAC,MAAM;gBACjB,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,SAAS;aACxD,CAAC,CAAC;YAEH,wBAAwB;YACxB,IAAI,MAAM,CAAC,qBAAqB,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,MAAM,CAAC,mBAAmB,IAAI,WAAW,CAAC,EAAE,CAAC;gBAC/F,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,OAAO;YACX,CAAC;YAED,IAAI,UAAU,GAAY,IAAI,CAAC;YAC/B,IAAI,iBAAiB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,IAAI,CAAC;wBACD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrC,CAAC;oBAAC,MAAM,CAAC;wBACL,UAAU,GAAG,OAAO,CAAC;oBACzB,CAAC;oBAED,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;wBAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,IAAI,EAAE,GAAG,CAAC,QAAQ;wBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC;qBACpC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,IAAI,CAAC;gBACD,qCAAqC;gBACrC,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBAChC,MAAM,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;gBACzF,CAAC;qBAAM,CAAC;oBACJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBAC5C,IAAI,EAAE,GAAG,CAAC,QAAQ;oBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;iBACrB,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACnB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACf,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;wBACzD,EAAE,EAAE,IAAI;qBACX,CAAC,CAAC;gBACP,CAAC;qBAAM,CAAC;oBACJ,GAAG,CAAC,GAAG,EAAE,CAAC;gBACd,CAAC;YACL,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAChC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC/B,MAAM,WAAW,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACjC,QAAQ,EAAE,UAAU,WAAW,IAAI,IAAI,GAAG,YAAY,EAAE;gBACxD,SAAS;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBACvC,QAAQ,EAAE,UAAU,WAAW,IAAI,IAAI,GAAG,MAAM,CAAC,mBAAmB,IAAI,WAAW,EAAE;iBACxF,CAAC,CAAC;YACP,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,YAAY,GAAY,KAAK,CAAC;IAClC,MAAM,SAAS,GAAoB,GAAG,EAAE,CACpC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACpB,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACP,MAAM,aAAa,GAAoB,KAAK,IAAI,EAAE;QAC9C,MAAM,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QAClD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChB,YAAY,GAAG,IAAI,CAAC;gBACpB,KAAK,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YACjE,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,OAAO,EACH,aAAa,EACb,QAAQ,EACR,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,SAAS,EACT,qBAAqB,GACxB,CAAC"}

package/dist/server/stdio.d.ts

@@ -0,0 +1,3 @@
+import type { ToolCategory, ToolPermission } from '../config.js';
+import type { OmadaClient } from '../omadaClient/index.js';
+export declare function startStdioServer(client: OmadaClient, activeCategories?: Map<ToolCategory, Set<ToolPermission>>): Promise<void>;

package/dist/server/stdio.js

@@ -0,0 +1,14 @@
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { registerAllTools } from '../tools/index.js';
+import { logger } from '../utils/logger.js';
+import { createServer } from './common.js';
+export async function startStdioServer(client, activeCategories) {
+    logger.info('Starting stdio server');
+    const server = createServer();
+    registerAllTools(server, client, activeCategories);
+    const transport = new StdioServerTransport();
+    logger.info('Connecting stdio server');
+    await server.connect(transport);
+    logger.info('Stdio server connected');
+}
+//# sourceMappingURL=stdio.js.map

package/dist/server/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/server/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAIjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAmB,EAAE,gBAAyD;IACjH,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AAC1C,CAAC"}

package/dist/server/stream.d.ts

@@ -0,0 +1,30 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import type { EnvironmentConfig, OmadaConnectionConfig } from '../config.js';
+import { OmadaClient } from '../omadaClient/index.js';
+import { createServer } from './common.js';
+export interface StreamTransportState {
+    transport: StreamableHTTPServerTransport;
+    server: ReturnType<typeof createServer>;
+    connected: boolean;
+    closed: boolean;
+    lastAccessed: number;
+}
+type StreamSessionMap = Map<string, StreamTransportState>;
+interface StreamLifecycleHooks {
+    onSessionInitialized?: (sessionId: string) => void;
+    onSessionClosed?: (sessionId: string) => void;
+}
+/**
+ * Creates a Streamable HTTP transport
+ * This implements the MCP protocol version 2025-03-26
+ */
+export declare function createStreamTransport(client: OmadaClient, config: EnvironmentConfig, hooks?: StreamLifecycleHooks): StreamTransportState;
+/**
+ * Handles incoming Streamable HTTP requests (GET, POST, DELETE) using persistent session state.
+ * For new sessions, resolves Omada credentials from env config (wins) and request headers (fallback).
+ * Existing sessions reuse the OmadaClient that was created when the session was initialized.
+ */
+export declare function handleStreamRequest(config: EnvironmentConfig, omadaConfig: OmadaConnectionConfig, req: IncomingMessage, res: ServerResponse, parsedBody: unknown | undefined, sessions: StreamSessionMap): Promise<void>;
+export declare function closeAllStreamSessions(sessions: StreamSessionMap): Promise<void>;
+export {};