@ni-c/mcp-hub 0.6.4 → 0.7.0

package/dist/transports/docker.js

@@ -0,0 +1,163 @@
+import { buildCreateRequest, containerName } from '../sandbox/container-spec.js';
+import { StreamTransport } from './stream.js';
+/** Guards against a corrupt header turning into a multi-gigabyte allocation. */
+const MAX_FRAME_BYTES = 16 * 1024 * 1024;
+const STDOUT = 1;
+const STDERR = 2;
+/**
+ * Demultiplexes Docker's attach stream.
+ *
+ * Without a TTY the daemon frames every chunk with an 8-byte header —
+ * `[stream, 0, 0, 0, size:uint32be]` — so one connection can carry stdout and
+ * stderr. That is exactly what a sandboxed MCP server needs: stdout stays a
+ * clean protocol channel while the server's log lines still reach the operator.
+ */
+export class DockerFrameDecoder {
+    onFrame;
+    onError;
+    buffer = Buffer.alloc(0);
+    failed = false;
+    constructor(onFrame, onError) {
+        this.onFrame = onFrame;
+        this.onError = onError;
+    }
+    push(chunk) {
+        if (this.failed)
+            return;
+        this.buffer = this.buffer.length === 0 ? chunk : Buffer.concat([this.buffer, chunk]);
+        for (;;) {
+            if (this.buffer.length < 8)
+                return;
+            const size = this.buffer.readUInt32BE(4);
+            if (size > MAX_FRAME_BYTES) {
+                this.failed = true;
+                this.onError(new Error(`docker frame of ${size} bytes exceeds the ${MAX_FRAME_BYTES} byte limit`));
+                this.buffer = Buffer.alloc(0);
+                return;
+            }
+            if (this.buffer.length < 8 + size)
+                return;
+            const stream = this.buffer[0];
+            const payload = this.buffer.subarray(8, 8 + size);
+            this.buffer = this.buffer.subarray(8 + size);
+            this.onFrame(stream, payload);
+        }
+    }
+}
+/**
+ * An MCP server running in its own container, spoken to over the Docker API.
+ *
+ * The isolation is the container's (own filesystem, own credentials, own
+ * network policy, own memory limit); the protocol is plain stdio across the
+ * container boundary. No HTTP listener, no bridge process inside the image, no
+ * shared secret — the things an HTTP upstream forces on a server that only
+ * speaks stdio.
+ *
+ * Order matters: create, then attach, then start. Starting before the attach
+ * is in place loses whatever the server writes in its first milliseconds.
+ */
+export class DockerTransport {
+    server;
+    config;
+    client;
+    writeStderr;
+    onclose;
+    onerror;
+    onmessage;
+    inner;
+    stream;
+    closing = false;
+    stderrTail = '';
+    constructor(server, config, client, writeStderr = line => process.stderr.write(line)) {
+        this.server = server;
+        this.config = config;
+        this.client = client;
+        this.writeStderr = writeStderr;
+    }
+    async start() {
+        const { name, body } = buildCreateRequest(this.server, this.config);
+        await this.ensureImage();
+        // A container of that name can survive an unclean hub exit (AutoRemove
+        // only fires when the container itself stops), and create would then fail
+        // with a name conflict forever.
+        await this.client.removeContainer(name);
+        await this.client.createContainer(name, body);
+        let stream;
+        try {
+            stream = await this.client.attach(name);
+        }
+        catch (error) {
+            await this.client.removeContainer(name).catch(() => { });
+            throw error;
+        }
+        this.stream = stream;
+        const inner = new StreamTransport(stream, false);
+        inner.onmessage = message => this.onmessage?.(message);
+        inner.onerror = error => this.onerror?.(error);
+        inner.onclose = () => {
+            this.onclose?.();
+            // Best effort: with AutoRemove the daemon usually got there first.
+            if (!this.closing)
+                void this.client.removeContainer(name).catch(() => { });
+        };
+        await inner.start();
+        this.inner = inner;
+        const decoder = new DockerFrameDecoder((streamType, payload) => {
+            if (streamType === STDOUT)
+                inner.receive(payload);
+            else if (streamType === STDERR)
+                this.logStderr(payload);
+        }, error => {
+            this.onerror?.(error);
+            // A corrupt length makes frame boundaries unknowable. Closing the
+            // attach stream triggers container cleanup and the supervisor's normal
+            // restart backoff instead of leaving a poisoned stream alive.
+            void inner.close();
+        });
+        stream.on('data', chunk => decoder.push(chunk));
+        try {
+            await this.client.startContainer(name);
+        }
+        catch (error) {
+            await this.client.removeContainer(name).catch(() => { });
+            throw error;
+        }
+    }
+    async send(message) {
+        if (!this.inner)
+            throw new Error(`Server "${this.server}" is not attached`);
+        await this.inner.send(message);
+    }
+    async close() {
+        this.closing = true;
+        await this.inner?.close();
+        this.stream?.destroy();
+        await this.client.removeContainer(containerName(this.server)).catch(() => { });
+    }
+    async ensureImage() {
+        if (await this.client.imageExists(this.config.image))
+            return;
+        if (this.config.pull !== 'missing') {
+            throw new Error(`image "${this.config.image}" is not present and "pull" is "never" — build or pull it first`);
+        }
+        await this.client.pullImage(this.config.image);
+    }
+    /**
+     * Prefix the container's stderr like a stdio child's, and write it straight
+     * to the process's stderr rather than through console: stdio children use
+     * `stderr: 'inherit'` and bypass console too, which is what keeps LOG_FILE
+     * (read by fail2ban) free of server chatter.
+     */
+    logStderr(payload) {
+        this.stderrTail += payload.toString('utf8');
+        const lines = this.stderrTail.split('\n');
+        this.stderrTail = lines.pop() ?? '';
+        for (const line of lines)
+            this.writeStderr(`[${this.server}] ${line}\n`);
+        if (this.stderrTail.length > 64 * 1024) {
+            this.writeStderr(`[${this.server}] ${this.stderrTail}\n`);
+            this.stderrTail = '';
+        }
+    }
+}
+//# sourceMappingURL=docker.js.map

package/dist/transports/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/transports/docker.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,gFAAgF;AAChF,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,MAAM,GAAG,CAAC,CAAC;AACjB,MAAM,MAAM,GAAG,CAAC,CAAC;AAEjB;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAkB;IAKV,OAAO;IACP,OAAO;IALlB,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,OAAkD,EAClD,OAA+B;uBAD/B,OAAO;uBACP,OAAO;IACvB,CAAC;IAEJ,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACrF,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,IAAI,GAAG,eAAe,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,sBAAsB,eAAe,aAAa,CAAC,CAAC,CAAC;gBACnG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI;gBAAE,OAAO;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IAWP,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IAb9B,OAAO,CAAc;IACrB,OAAO,CAA0B;IACjC,SAAS,CAAqC;IAEtC,KAAK,CAAmB;IACxB,MAAM,CAAU;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,UAAU,GAAG,EAAE,CAAC;IAExB,YACmB,MAAc,EACd,MAA0B,EAC1B,MAAoB,EACpB,WAAW,GAA2B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;sBAHxE,MAAM;sBACN,MAAM;sBACN,MAAM;2BACN,WAAW;IAC3B,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,uEAAuE;QACvE,0EAA0E;QAC1E,gCAAgC;QAChC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE9C,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACjD,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACvD,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACjB,mEAAmE;YACnE,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,KAAK,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC;QACF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,MAAM,OAAO,GAAG,IAAI,kBAAkB,CACpC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;YACtB,IAAI,UAAU,KAAK,MAAM;gBAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;iBAC7C,IAAI,UAAU,KAAK,MAAM;gBAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC,EACD,KAAK,CAAC,EAAE;YACN,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YACtB,kEAAkE;YAClE,uEAAuE;YACvE,8DAA8D;YAC9D,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CACF,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC,CAAC;QAE1D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACxD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,iEAAiE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACK,SAAS,CAAC,OAAe;QAC/B,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;CACF"}

package/dist/transports/socket.js

@@ -0,0 +1,59 @@
+import net from 'node:net';
+import { StreamTransport } from './stream.js';
+const CONNECT_TIMEOUT_MS = 10_000;
+/**
+ * Connects to a server that already listens on a Unix socket or a TCP port and
+ * speaks stdio-framed JSON-RPC there.
+ *
+ * This is the sandboxing route that costs the hub no privileges at all: the
+ * container is started by whoever owns the Compose file, and a Unix socket in
+ * a shared volume reaches it even with `network_mode: none` — something an
+ * HTTP upstream can never offer, because HTTP needs an interface to listen on.
+ */
+export class SocketTransport extends StreamTransport {
+    config;
+    constructor(config) {
+        // The socket is created here but connected in start(); an unconnected
+        // net.Socket is a perfectly ordinary Duplex until then.
+        super(new net.Socket());
+        this.config = config;
+    }
+    async start() {
+        const socket = this.stream;
+        await new Promise((resolve, reject) => {
+            const onError = (error) => {
+                socket.destroy();
+                reject(new Error(`cannot connect to ${this.describe()}: ${error.message}`));
+            };
+            const onTimeout = () => {
+                socket.destroy();
+                reject(new Error(`timed out connecting to ${this.describe()}`));
+            };
+            socket.once('error', onError);
+            socket.once('timeout', onTimeout);
+            socket.setTimeout(CONNECT_TIMEOUT_MS);
+            socket.once('connect', () => {
+                // Hand the socket over cleanly: the connect-phase handlers must not
+                // survive, or a later error would destroy the socket behind the
+                // transport's back instead of being reported through onerror. And the
+                // connect timeout must not linger as an idle timeout — an MCP session
+                // is idle most of the time and would be torn down mid-use.
+                socket.off('error', onError);
+                socket.off('timeout', onTimeout);
+                socket.setTimeout(0);
+                if (this.config.transport === 'tcp')
+                    socket.setNoDelay(true);
+                resolve();
+            });
+            if (this.config.transport === 'unix')
+                socket.connect({ path: this.config.socketPath });
+            else
+                socket.connect({ host: this.config.host, port: this.config.port });
+        });
+        await super.start();
+    }
+    describe() {
+        return this.config.transport === 'unix' ? this.config.socketPath : `${this.config.host}:${this.config.port}`;
+    }
+}
+//# sourceMappingURL=socket.js.map

package/dist/transports/socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.js","sourceRoot":"","sources":["../../src/transports/socket.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,eAAe;IACrB,MAAM;IAAnC,YAA6B,MAA0B;QACrD,sEAAsE;QACtE,wDAAwD;QACxD,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;sBAHG,MAAM;IAInC,CAAC;IAEQ,KAAK,CAAC,KAAK;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAoB,CAAC;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC/B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,QAAQ,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClC,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC1B,oEAAoE;gBACpE,gEAAgE;gBAChE,sEAAsE;gBACtE,sEAAsE;gBACtE,2DAA2D;gBAC3D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACrB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK;oBAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAC7D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM;gBAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,UAAW,EAAE,CAAC,CAAC;;gBACnF,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAK,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAK,EAAE,CAAC;IAClH,CAAC;CACF"}

package/dist/transports/stream.js

@@ -0,0 +1,102 @@
+import { ReadBuffer, serializeMessage } from '@modelcontextprotocol/sdk/shared/stdio.js';
+/**
+ * MCP over any reliable bidirectional byte stream, using the stdio framing.
+ *
+ * The specification says exactly this about custom transports: they may run
+ * over other channels (a Unix socket, a TCP connection, a container's attached
+ * stdio) and SHOULD reuse the stdio binding's newline-delimited JSON rather
+ * than invent a framing. So this class is only plumbing — ReadBuffer and
+ * serializeMessage are the SDK's own stdio codec, byte for byte.
+ *
+ * Reading is separated from the stream on purpose: an attached container
+ * multiplexes stdout and stderr over one connection, so the caller decodes the
+ * frames and feeds only the stdout payload in via `receive()`.
+ */
+export class StreamTransport {
+    stream;
+    feedFromStream;
+    onclose;
+    onerror;
+    onmessage;
+    readBuffer = new ReadBuffer();
+    started = false;
+    closed = false;
+    reportedClose = false;
+    /**
+     * @param stream        the duplex carrying the protocol
+     * @param feedFromStream whether stream data is plain protocol bytes. False
+     *                       when the caller demultiplexes first (Docker attach).
+     */
+    constructor(stream, feedFromStream = true) {
+        this.stream = stream;
+        this.feedFromStream = feedFromStream;
+    }
+    async start() {
+        if (this.started)
+            throw new Error('StreamTransport already started');
+        this.started = true;
+        if (this.feedFromStream)
+            this.stream.on('data', chunk => this.receive(chunk));
+        this.stream.on('error', error => this.onerror?.(error));
+        // 'close' rather than 'end': a half-open socket whose peer vanished never
+        // emits 'end', and the supervisor must learn about the death either way.
+        this.stream.on('close', () => this.reportClosed());
+    }
+    /** Feed protocol bytes that were read out of band (demultiplexed stdout). */
+    receive(chunk) {
+        try {
+            this.readBuffer.append(chunk);
+        }
+        catch (error) {
+            // The SDK caps the buffer at 10 MB and throws when a peer keeps sending
+            // without ever writing a newline. This runs inside a 'data' handler, so
+            // an escaping throw would reach process.on('uncaughtException') and take
+            // the entire hub down — every other server with it — because one
+            // sandboxed server misbehaved. The stream is desynchronised anyway:
+            // report it, end this connection, let the supervisor restart it.
+            this.onerror?.(error);
+            void this.close();
+            return;
+        }
+        for (;;) {
+            let message;
+            try {
+                message = this.readBuffer.readMessage();
+            }
+            catch (error) {
+                // One malformed line must not kill the connection: report it and let
+                // the buffer continue with the bytes after the newline.
+                this.onerror?.(error);
+                continue;
+            }
+            if (message === null)
+                return;
+            this.onmessage?.(message);
+        }
+    }
+    async send(message) {
+        if (this.closed)
+            throw new Error('Transport is closed');
+        const payload = serializeMessage(message);
+        // The write callback fires once the chunk has left the buffer, so awaiting
+        // it respects backpressure: a server that stops reading slows us down
+        // instead of letting the socket buffer grow without bound.
+        await new Promise((resolve, reject) => {
+            this.stream.write(payload, error => (error ? reject(error) : resolve()));
+        });
+    }
+    async close() {
+        this.closed = true;
+        this.stream.destroy();
+        this.reportClosed();
+    }
+    reportClosed() {
+        if (this.reportedClose)
+            return;
+        this.reportedClose = true;
+        this.closed = true;
+        this.readBuffer.clear();
+        this.onclose?.();
+    }
+}
+//# sourceMappingURL=stream.js.map

package/dist/transports/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/transports/stream.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAIzF;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,eAAe;IAgBL,MAAM;IACR,cAAc;IAhBjC,OAAO,CAAc;IACrB,OAAO,CAA0B;IACjC,SAAS,CAAqC;IAE7B,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACvC,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IACf,aAAa,GAAG,KAAK,CAAC;IAE9B;;;;OAIG;IACH,YACqB,MAAc,EAChB,cAAc,GAAG,IAAI;sBADnB,MAAM;8BACR,cAAc;IAC9B,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAe,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC,CAAC;QACjE,0EAA0E;QAC1E,yEAAyE;QACzE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,iEAAiE;YACjE,oEAAoE;YACpE,iEAAiE;YACjE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;YAC/B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QACD,SAAS,CAAC;YACR,IAAI,OAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,qEAAqE;gBACrE,wDAAwD;gBACxD,IAAI,CAAC,OAAO,EAAE,CAAC,KAAc,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO;YAC7B,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,sEAAsE;QACtE,2DAA2D;QAC3D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ni-c/mcp-hub",
-  "version": "0.6.4",
+  "version": "0.7.0",
   "description": "Serve multiple stdio MCP servers from one container: Claude-Code-style mcpServers config, path-based routing, hub meta-tools, and OAuth 2.1 + API tokens for ChatGPT, Claude and any Streamable-HTTP MCP client.",
   "keywords": [
     "mcp",
@@ -22,12 +22,13 @@
   },
   "homepage": "https://mcp-hub.ni-c.de",
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "main": "dist/index.js",
   "bin": {
     "mcp-hub": "dist/index.js",
-    "mcp-hub-admin": "dist/admin.js"
+    "mcp-hub-admin": "dist/admin.js",
+    "mcp-hub-docker-proxy": "dist/docker-proxy/index.js"
   },
   "files": [
     "dist",