@nitrostack/core 1.0.14 → 1.0.16

package/dist/core/protocol/features/trace-context.js

@@ -0,0 +1,45 @@
+/**
+ * SEP-414 W3C Trace Context propagation.
+ *
+ * On the 2026-07-28 revision, distributed-tracing keys travel in the per-request
+ * `_meta` envelope under fixed names: `traceparent`, `tracestate`, `baggage`.
+ * NitroStack lifts them into `ExecutionContext.trace` so guards, interceptors,
+ * and loggers can correlate a tool call across the host, this server, and any
+ * downstream call — without NitroStack introducing its own tracing backend.
+ *
+ * @module
+ */
+const TRACEPARENT_KEY = 'io.modelcontextprotocol/traceparent';
+const TRACESTATE_KEY = 'io.modelcontextprotocol/tracestate';
+const BAGGAGE_KEY = 'io.modelcontextprotocol/baggage';
+/**
+ * Extract a `TraceContext` from an envelope/meta object, or `undefined` when no
+ * trace keys are present. Accepts either the lifted `_meta` envelope
+ * (`ctx.mcpReq.envelope`) or a raw `_meta` record; both the bare
+ * (`traceparent`) and reverse-DNS (`io.modelcontextprotocol/traceparent`)
+ * forms are recognized.
+ */
+export function extractTraceContext(source) {
+    if (!source || typeof source !== 'object') {
+        return undefined;
+    }
+    const pick = (bare, prefixed) => {
+        const v = source[prefixed] ?? source[bare];
+        return typeof v === 'string' && v.length > 0 ? v : undefined;
+    };
+    const traceparent = pick('traceparent', TRACEPARENT_KEY);
+    const tracestate = pick('tracestate', TRACESTATE_KEY);
+    const baggage = pick('baggage', BAGGAGE_KEY);
+    if (!traceparent && !tracestate && !baggage) {
+        return undefined;
+    }
+    const trace = {};
+    if (traceparent)
+        trace.traceparent = traceparent;
+    if (tracestate)
+        trace.tracestate = tracestate;
+    if (baggage)
+        trace.baggage = baggage;
+    return trace;
+}
+//# sourceMappingURL=trace-context.js.map

package/dist/core/protocol/features/trace-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-context.js","sourceRoot":"","sources":["../../../../src/core/protocol/features/trace-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAcH,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAC5D,MAAM,WAAW,GAAG,iCAAiC,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAkD;IAElD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAsB,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAE7C,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,WAAW;QAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IACjD,IAAI,UAAU;QAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;IAC9C,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/protocol/modern-v2.adapter.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Modern (2026-07-28) protocol adapter.
+ *
+ * Binds the NitroStack registry to the official `@modelcontextprotocol/server`
+ * v2 engine:
+ *
+ * - HTTP: `createMcpHandler(() => buildServer())` wrapped with
+ *   `toNodeHandler(...)` from `@modelcontextprotocol/node`, mounted on the
+ *   Express app. Stateless per-request serving, `server/discover`, per-request
+ *   `_meta` envelope, `Mcp-Method`/`Mcp-Name` headers, and cache hints are all
+ *   provided by the SDK.
+ * - stdio: `serveStdio(() => buildServer())` from `@modelcontextprotocol/server/stdio`.
+ *
+ * The SDK stamps `_meta['io.modelcontextprotocol/serverInfo']` on every 2026
+ * response from the `Implementation` handed to `new McpServer(...)`.
+ *
+ * The v2 packages are loaded lazily (dynamic `import`) so a default (legacy)
+ * install never touches them and existing Jest suites never load v2. The SDK's
+ * types use minified re-exports, so this file types the SDK surface loosely at
+ * the boundary while keeping NitroStack's own objects strongly typed.
+ *
+ * @module
+ */
+import type { Express, Request as ExpressRequest, Response as ExpressResponse } from 'express';
+import type { ProtocolAdapter, ProtocolRegistry, ProtocolTransportOptions } from './adapter.js';
+import { TaskManager, type TaskData } from '../task.js';
+type AnyRecord = Record<string, any>;
+export interface ModernProtocolAdapterOptions {
+    legacyMode?: 'stateless' | 'reject';
+    taskManager?: TaskManager;
+}
+export declare class ModernProtocolAdapter implements ProtocolAdapter {
+    private readonly registry;
+    private readonly options;
+    readonly era: "modern";
+    private handler?;
+    private stdioHandle?;
+    private serverSdkPromise?;
+    private readonly taskManager?;
+    constructor(registry: ProtocolRegistry, options?: ModernProtocolAdapterOptions);
+    private loadServerSdk;
+    private buildServer;
+    /** Server-level per-operation cache hints for list/discover results. */
+    private buildServerCacheHints;
+    private registerTools;
+    private registerResources;
+    private registerPrompts;
+    private runTool;
+    /**
+     * Translate a NitroStack/handler error into an SDK error carrying the right
+     * JSON-RPC code for the modern era. Prefers the v2 SDK error classes (so the
+     * SDK serializes `error.code` correctly); falls back to a plain `Error` with
+     * a numeric `code` property the SDK also recognizes.
+     */
+    private toSdkError;
+    private readResource;
+    private buildContext;
+    private mapAuthInfo;
+    private toModernSchema;
+    /**
+     * Build the stateless per-request Node HTTP handler for the modern engine.
+     * Returned so an existing Express host (NitroStack's `StreamableHttpTransport`)
+     * can route its `/mcp` endpoint to it, keeping one Express app and one set of
+     * OAuth/docs routes.
+     */
+    /**
+     * Build (once) the web-standard v2 handler `{ fetch, close, notify, bus }`
+     * returned by `createMcpHandler`. Idempotent: repeated calls reuse the same
+     * handler so a single notify bus backs `subscriptions/listen`.
+     */
+    getHttpHandler(): Promise<AnyRecord>;
+    private extractAccessContext;
+    private handleTaskPreDispatch;
+    createNodeHandler(): Promise<(req: ExpressRequest, res: ExpressResponse) => void>;
+    attachHttp(app: Express, options: ProtocolTransportOptions): Promise<void>;
+    /**
+     * SEP-2243/SEP-2575 CORS: expose and allow the new required request headers
+     * (`MCP-Protocol-Version`, `Mcp-Method`, `Mcp-Name`, and `Mcp-Param-*`).
+     */
+    private applyCorsHeaders;
+    serveStdio(): Promise<void>;
+    notifyToolsListChanged(): void;
+    notifyResourcesListChanged(): void;
+    notifyPromptsListChanged(): void;
+    notifyResourceUpdated(uri: string): void;
+    notifyTaskStatus(taskData: TaskData): void;
+    close(): Promise<void>;
+    /** The extensions map this adapter would advertise (for diagnostics/notes). */
+    advertisedExtensions(): Record<string, Record<string, unknown>>;
+}
+export {};
+//# sourceMappingURL=modern-v2.adapter.d.ts.map

package/dist/core/protocol/modern-v2.adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modern-v2.adapter.d.ts","sourceRoot":"","sources":["../../../src/core/protocol/modern-v2.adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAWhG,OAAO,EAAE,WAAW,EAA8C,KAAK,QAAQ,EAA0B,MAAM,YAAY,CAAC;AAG5H,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAwBrC,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IACpC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,qBAAsB,YAAW,eAAe;IASzD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B,QAAQ,CAAC,GAAG,EAAG,QAAQ,CAAU;IAEjC,OAAO,CAAC,OAAO,CAAC,CAAY;IAC5B,OAAO,CAAC,WAAW,CAAC,CAAY;IAChC,OAAO,CAAC,gBAAgB,CAAC,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;gBAGxB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,GAAE,4BAAuD;IAKnF,OAAO,CAAC,aAAa;YAWP,WAAW;IAsBzB,wEAAwE;IACxE,OAAO,CAAC,qBAAqB;YAKf,aAAa;YAqEb,iBAAiB;YAgHjB,eAAe;YAkEf,OAAO;IAiFrB;;;;;OAKG;IACH,OAAO,CAAC,UAAU;YAuBJ,YAAY;IAsC1B,OAAO,CAAC,YAAY;IAmHpB,OAAO,CAAC,WAAW;YAcL,cAAc;IAqB5B;;;;;OAKG;IACH;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,SAAS,CAAC;IAsD1C,OAAO,CAAC,oBAAoB;YAad,qBAAqB;IA4J7B,iBAAiB,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,KAAK,IAAI,CAAC;IAiEjF,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBhF;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAoBlB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAUjC,sBAAsB,IAAI,IAAI;IAG9B,0BAA0B,IAAI,IAAI;IAGlC,wBAAwB,IAAI,IAAI;IAGhC,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAGxC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IASpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAe5B,+EAA+E;IAC/E,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAMhE"}