@novorb/mcp-core 2.1.0

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAE9E,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,iDAAiD,CAAC;AAU9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,4EAA4E;IAC5E,QAAQ,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAA4B;IAChF,iEAAiE;IACjE,eAAe,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAA4B;IACxF,kEAAkE;IAClE,YAAY,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAA4B;IACtF,sDAAsD;IACtD,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAA4B;CACpG,CAAC;AAEX,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAe;IAC3D,OAAO,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1C,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,102 @@
+/**
+ * @novorb/mcp-core — Transport
+ *
+ * Unified transport for MCP servers. Selects between stdio and native Streamable HTTP
+ * based on the MCP_TRANSPORT environment variable.
+ *
+ * HTTP mode is stateless (sessionIdGenerator: undefined) — compatible with MCPize Cloud Run,
+ * Apify Standby, and any other scale-to-zero host. One transport instance is created per
+ * request; the server instance is resolved once and reconnected per request (SDK 1.29+).
+ *
+ * Usage:
+ *   import { startMcpServer } from '@novorb/mcp-core/transport';
+ *
+ *   // Factory (recommended for HTTP — ensures clean state per request):
+ *   await startMcpServer(() => createServer(services));
+ *
+ *   // Server instance (fine for stdio; also works for HTTP in SDK 1.29+):
+ *   await startMcpServer(server);
+ *
+ * Environment variables:
+ *   MCP_TRANSPORT        — 'stdio' (default) | 'http'
+ *   PORT                 — listen port for HTTP transport (default: 8080)
+ *   MCP_HTTP_HOST        — bind address for HTTP (default: '0.0.0.0' for container hosts; set
+ *                          '127.0.0.1' for local-only)
+ *   MCP_API_KEY          — Bearer token for HTTP auth. REQUIRED in HTTP mode unless MCP_AUTH_DISABLED.
+ *   MCP_AUTH_DISABLED    — set 'true' to run HTTP WITHOUT auth (only when a gateway/platform fronts it)
+ *   MCP_MAX_BODY_BYTES   — max accepted POST body size (default: 4 MiB)
+ *   MCP_ALLOWED_HOSTS    — comma-separated Host allowlist; setting it enables DNS-rebinding protection
+ *   MCP_ALLOWED_ORIGINS  — comma-separated Origin allowlist (also enables DNS-rebinding protection)
+ */
+import { IncomingMessage, ServerResponse } from 'node:http';
+/** Accepts both the high-level McpServer and the low-level Server */
+type AnyMcpServer = {
+    connect(transport: unknown): Promise<void>;
+    close?(): Promise<void>;
+};
+/** A server instance or a factory that creates one per request */
+type ServerOrFactory = AnyMcpServer | (() => AnyMcpServer);
+export type TransportMode = 'stdio' | 'http';
+export interface TransportOptions {
+    /** Transport mode. Defaults to MCP_TRANSPORT env var, falling back to 'stdio'. */
+    mode?: TransportMode;
+    /** HTTP listen port. Defaults to PORT env var, falling back to 8080. */
+    port?: number;
+    /**
+     * Optional Bearer token for HTTP auth. When set, all /mcp requests must include
+     * `Authorization: Bearer <apiKey>`. Defaults to MCP_API_KEY env var.
+     * Set to null to EXPLICITLY disable auth (equivalent to MCP_AUTH_DISABLED=true).
+     */
+    apiKey?: string | null;
+}
+/**
+ * Constant-time comparison of the Authorization header against `Bearer <apiKey>`.
+ * Both sides are SHA-256-hashed first so `timingSafeEqual` never throws on a length mismatch and the
+ * token length is not itself a timing oracle.
+ */
+export declare function bearerMatches(authHeader: string, apiKey: string): boolean;
+export interface HttpAuthResolution {
+    /** Whether the Bearer check is enforced on /mcp requests. */
+    authEnabled: boolean;
+    /** The resolved key ('' when auth is explicitly disabled). */
+    apiKey: string;
+}
+/**
+ * Resolve HTTP auth — FAIL CLOSED. `apiKey: null` (programmatic) or MCP_AUTH_DISABLED=true are the
+ * only ways to run open; a missing/empty MCP_API_KEY is treated as "not configured" (not a valid
+ * empty key) and THROWS, so a config typo can't silently downgrade the endpoint to no-auth.
+ */
+export declare function resolveHttpAuth(options: Pick<TransportOptions, 'apiKey'>, env?: NodeJS.ProcessEnv): HttpAuthResolution;
+/** Resolved configuration for the HTTP request handler — everything `startHttp` derives once at boot. */
+export interface RequestHandlerConfig {
+    /** Returns a server instance to connect for a request (fresh per request in the stateless model). */
+    getServer: () => AnyMcpServer;
+    /** Whether the Bearer check is enforced on /mcp requests. */
+    authEnabled: boolean;
+    /** The resolved Bearer key ('' when auth is disabled). */
+    apiKey: string;
+    /** Max accepted POST body size in bytes (→ 413 when exceeded). */
+    maxBodyBytes: number;
+    /** Whether to enable the SDK's DNS-rebinding (Host/Origin) protection. */
+    enableDnsRebindingProtection: boolean;
+    /** Host allowlist (only consulted when DNS-rebinding protection is enabled). */
+    allowedHosts: string[];
+    /** Origin allowlist (only consulted when DNS-rebinding protection is enabled). */
+    allowedOrigins: string[];
+}
+/**
+ * Build the `(req, res)` handler for the HTTP transport. Extracted from `startHttp` so the routing,
+ * auth, content-type/size guards, and error handling are unit-testable with mock req/res — no socket
+ * binding required.
+ */
+export declare function createRequestHandler(cfg: RequestHandlerConfig): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+/**
+ * Start an MCP server with the configured transport.
+ *
+ * For stdio: connects once and keeps the process alive.
+ * For http: starts a stateless HTTP server. GET /health is always available.
+ *           Pass a factory function to get a fresh server instance per request.
+ */
+export declare function startMcpServer(serverOrFactory: ServerOrFactory, options?: TransportOptions): Promise<void>;
+export {};
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EAAgB,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1E,qEAAqE;AACrE,KAAK,YAAY,GAAG;IAClB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB,CAAC;AAEF,kEAAkE;AAClE,KAAK,eAAe,GAAG,YAAY,GAAG,CAAC,MAAM,YAAY,CAAC,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AA8BD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;IACrB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,kBAAkB,CAYpB;AAED,yGAAyG;AACzG,MAAM,WAAW,oBAAoB;IACnC,qGAAqG;IACrG,SAAS,EAAE,MAAM,YAAY,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,4BAA4B,EAAE,OAAO,CAAC;IACtC,gFAAgF;IAChF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kFAAkF;IAClF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,oBAAoB,GACxB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CA0E9D;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/transport.js

@@ -0,0 +1,213 @@
+/**
+ * @novorb/mcp-core — Transport
+ *
+ * Unified transport for MCP servers. Selects between stdio and native Streamable HTTP
+ * based on the MCP_TRANSPORT environment variable.
+ *
+ * HTTP mode is stateless (sessionIdGenerator: undefined) — compatible with MCPize Cloud Run,
+ * Apify Standby, and any other scale-to-zero host. One transport instance is created per
+ * request; the server instance is resolved once and reconnected per request (SDK 1.29+).
+ *
+ * Usage:
+ *   import { startMcpServer } from '@novorb/mcp-core/transport';
+ *
+ *   // Factory (recommended for HTTP — ensures clean state per request):
+ *   await startMcpServer(() => createServer(services));
+ *
+ *   // Server instance (fine for stdio; also works for HTTP in SDK 1.29+):
+ *   await startMcpServer(server);
+ *
+ * Environment variables:
+ *   MCP_TRANSPORT        — 'stdio' (default) | 'http'
+ *   PORT                 — listen port for HTTP transport (default: 8080)
+ *   MCP_HTTP_HOST        — bind address for HTTP (default: '0.0.0.0' for container hosts; set
+ *                          '127.0.0.1' for local-only)
+ *   MCP_API_KEY          — Bearer token for HTTP auth. REQUIRED in HTTP mode unless MCP_AUTH_DISABLED.
+ *   MCP_AUTH_DISABLED    — set 'true' to run HTTP WITHOUT auth (only when a gateway/platform fronts it)
+ *   MCP_MAX_BODY_BYTES   — max accepted POST body size (default: 4 MiB)
+ *   MCP_ALLOWED_HOSTS    — comma-separated Host allowlist; setting it enables DNS-rebinding protection
+ *   MCP_ALLOWED_ORIGINS  — comma-separated Origin allowlist (also enables DNS-rebinding protection)
+ */
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createServer } from 'node:http';
+import { createHash, timingSafeEqual } from 'node:crypto';
+function resolve(s) {
+    return typeof s === 'function' ? s() : s;
+}
+/** Marker error so the request handler can answer 413 rather than 500. */
+class BodyTooLargeError extends Error {
+    constructor() { super('Request body too large'); this.name = 'BodyTooLargeError'; }
+}
+/** Read the request body, rejecting (and destroying the socket) once it exceeds `maxBytes`. */
+function readBody(req, maxBytes) {
+    return new Promise((res, rej) => {
+        const chunks = [];
+        let size = 0;
+        req.on('data', (c) => {
+            size += c.length;
+            if (size > maxBytes) {
+                rej(new BodyTooLargeError());
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on('end', () => res(Buffer.concat(chunks).toString('utf8')));
+        req.on('error', rej);
+    });
+}
+/**
+ * Constant-time comparison of the Authorization header against `Bearer <apiKey>`.
+ * Both sides are SHA-256-hashed first so `timingSafeEqual` never throws on a length mismatch and the
+ * token length is not itself a timing oracle.
+ */
+export function bearerMatches(authHeader, apiKey) {
+    const a = createHash('sha256').update(authHeader).digest();
+    const b = createHash('sha256').update(`Bearer ${apiKey}`).digest();
+    return timingSafeEqual(a, b);
+}
+/**
+ * Resolve HTTP auth — FAIL CLOSED. `apiKey: null` (programmatic) or MCP_AUTH_DISABLED=true are the
+ * only ways to run open; a missing/empty MCP_API_KEY is treated as "not configured" (not a valid
+ * empty key) and THROWS, so a config typo can't silently downgrade the endpoint to no-auth.
+ */
+export function resolveHttpAuth(options, env = process.env) {
+    const explicitlyDisabled = options.apiKey === null || env.MCP_AUTH_DISABLED === 'true';
+    const apiKey = (options.apiKey !== undefined && options.apiKey !== null)
+        ? options.apiKey
+        : (env.MCP_API_KEY || '');
+    if (!explicitlyDisabled && apiKey.length === 0) {
+        throw new Error('[mcp-core] HTTP transport refused to start without auth: set MCP_API_KEY to a non-empty token, ' +
+            'or set MCP_AUTH_DISABLED=true to run open (only when a gateway/platform fronts authentication).');
+    }
+    return { authEnabled: apiKey.length > 0, apiKey };
+}
+/**
+ * Build the `(req, res)` handler for the HTTP transport. Extracted from `startHttp` so the routing,
+ * auth, content-type/size guards, and error handling are unit-testable with mock req/res — no socket
+ * binding required.
+ */
+export function createRequestHandler(cfg) {
+    const { getServer, authEnabled, apiKey, maxBodyBytes, enableDnsRebindingProtection, allowedHosts, allowedOrigins, } = cfg;
+    return async (req, res) => {
+        try {
+            // Health probe — no auth required
+            if (req.method === 'GET' && req.url === '/health') {
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ status: 'healthy' }));
+                return;
+            }
+            // Bearer token auth (constant-time)
+            if (authEnabled) {
+                const auth = req.headers['authorization'] ?? '';
+                if (!bearerMatches(auth, apiKey)) {
+                    res.writeHead(401, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Unauthorized' }));
+                    return;
+                }
+            }
+            // MCP endpoint — stateless: new server + transport per request
+            if (req.url === '/mcp' || req.url?.startsWith('/mcp?')) {
+                let body;
+                if (req.method === 'POST') {
+                    // Require JSON content type (the body is parsed below).
+                    const contentType = (req.headers['content-type'] ?? '').toLowerCase();
+                    if (!contentType.includes('application/json')) {
+                        res.writeHead(415, { 'Content-Type': 'application/json' });
+                        res.end(JSON.stringify({ error: 'Unsupported Media Type: Content-Type must be application/json' }));
+                        return;
+                    }
+                    let raw;
+                    try {
+                        raw = await readBody(req, maxBodyBytes);
+                    }
+                    catch (e) {
+                        if (e instanceof BodyTooLargeError) {
+                            res.writeHead(413, { 'Content-Type': 'application/json' });
+                            res.end(JSON.stringify({ error: 'Payload Too Large' }));
+                            return;
+                        }
+                        throw e;
+                    }
+                    if (raw.trim()) {
+                        try {
+                            body = JSON.parse(raw);
+                        }
+                        catch { /* let transport surface the error */ }
+                    }
+                }
+                const server = getServer();
+                const transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: undefined, // stateless — no Mcp-Session-Id
+                    enableJsonResponse: true,
+                    ...(enableDnsRebindingProtection ? { enableDnsRebindingProtection: true, allowedHosts, allowedOrigins } : {}),
+                });
+                await server.connect(transport);
+                await transport.handleRequest(req, res, body);
+                return;
+            }
+            res.writeHead(404, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Not found' }));
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`[mcp-core] request error: ${msg}\n`);
+            if (!res.headersSent) {
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Internal server error' }));
+            }
+        }
+    };
+}
+/**
+ * Start an MCP server with the configured transport.
+ *
+ * For stdio: connects once and keeps the process alive.
+ * For http: starts a stateless HTTP server. GET /health is always available.
+ *           Pass a factory function to get a fresh server instance per request.
+ */
+export async function startMcpServer(serverOrFactory, options = {}) {
+    const mode = options.mode ?? process.env.MCP_TRANSPORT ?? 'stdio';
+    if (mode === 'stdio') {
+        const server = resolve(serverOrFactory);
+        await server.connect(new StdioServerTransport());
+        return;
+    }
+    await startHttp(serverOrFactory, options);
+}
+async function startHttp(serverOrFactory, options) {
+    const port = options.port ?? parseInt(process.env.PORT ?? '8080', 10);
+    const host = process.env.MCP_HTTP_HOST || '0.0.0.0';
+    const maxBodyBytes = Number(process.env.MCP_MAX_BODY_BYTES) || 4 * 1024 * 1024;
+    // Auth resolution: FAIL CLOSED (throws when http + no key + not explicitly disabled).
+    const { authEnabled, apiKey } = resolveHttpAuth(options);
+    if (!authEnabled) {
+        process.stderr.write('[mcp-core] WARNING: HTTP transport running WITHOUT auth (MCP_AUTH_DISABLED). ' +
+            'Ensure a gateway/platform fronts authentication.\n');
+    }
+    // --- DNS-rebinding / Host+Origin protection (opt-in via allowlist envs) --------------------------
+    const allowedHosts = (process.env.MCP_ALLOWED_HOSTS || '').split(',').map(s => s.trim()).filter(Boolean);
+    const allowedOrigins = (process.env.MCP_ALLOWED_ORIGINS || '').split(',').map(s => s.trim()).filter(Boolean);
+    const enableDnsRebindingProtection = allowedHosts.length > 0 || allowedOrigins.length > 0;
+    // Wrap a plain instance so getServer() always returns a callable factory
+    const getServer = typeof serverOrFactory === 'function' ? serverOrFactory : () => serverOrFactory;
+    const httpServer = createServer(createRequestHandler({
+        getServer, authEnabled, apiKey, maxBodyBytes,
+        enableDnsRebindingProtection, allowedHosts, allowedOrigins,
+    }));
+    await new Promise((ok, fail) => {
+        httpServer.listen(port, host, ok);
+        httpServer.once('error', fail);
+    });
+    process.stderr.write(`[mcp-core] HTTP server listening on http://${host}:${port}/mcp\n`);
+    // Block until signal
+    await new Promise(done => {
+        const shutdown = () => {
+            httpServer.close(() => done());
+        };
+        process.once('SIGTERM', shutdown);
+        process.once('SIGINT', shutdown);
+    });
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAmC,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0B1D,SAAS,OAAO,CAAC,CAAkB;IACjC,OAAO,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,0EAA0E;AAC1E,MAAM,iBAAkB,SAAQ,KAAK;IACnC,gBAAgB,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC;CACpF;AAED,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;gBAC7B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,MAAc;IAC9D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAyC,EACzC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC;IACvF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QACtE,CAAC,CAAC,OAAO,CAAC,MAAM;QAChB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iGAAiG;YACjG,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAoBD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAyB;IAEzB,MAAM,EACJ,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAC5C,4BAA4B,EAAE,YAAY,EAAE,cAAc,GAC3D,GAAG,GAAG,CAAC;IAER,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACxE,IAAI,CAAC;YACH,kCAAkC;YAClC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAwB,IAAI,EAAE,CAAC;gBACxE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,IAAI,IAAa,CAAC;gBAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,wDAAwD;oBACxD,MAAM,WAAW,GAAG,CAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAwB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC9F,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC,CAAC,CAAC;wBACpG,OAAO;oBACT,CAAC;oBACD,IAAI,GAAW,CAAC;oBAChB,IAAI,CAAC;wBACH,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;oBAC1C,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,IAAI,CAAC,YAAY,iBAAiB,EAAE,CAAC;4BACnC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;4BACxD,OAAO;wBACT,CAAC;wBACD,MAAM,CAAC,CAAC;oBACV,CAAC;oBACD,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;wBACf,IAAI,CAAC;4BAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC;gBAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;oBAClD,kBAAkB,EAAE,SAAS,EAAE,gCAAgC;oBAC/D,kBAAkB,EAAE,IAAI;oBACxB,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9G,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAgC,EAChC,UAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAK,OAAO,CAAC,GAAG,CAAC,aAA2C,IAAI,OAAO,CAAC;IACjG,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,eAAgC,EAAE,OAAyB;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAE/E,sFAAsF;IACtF,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+EAA+E;YAC/E,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzG,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7G,MAAM,4BAA4B,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1F,yEAAyE;IACzE,MAAM,SAAS,GAAG,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC;IAElG,MAAM,UAAU,GAAG,YAAY,CAAC,oBAAoB,CAAC;QACnD,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY;QAC5C,4BAA4B,EAAE,YAAY,EAAE,cAAc;KAC3D,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QACnC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC;IAEzF,qBAAqB;IACrB,MAAM,IAAI,OAAO,CAAO,IAAI,CAAC,EAAE;QAC7B,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,86 @@
+{
+  "name": "@novorb/mcp-core",
+  "version": "2.1.0",
+  "description": "Shared utilities for MCP servers — logger, HTTP client, retry, pagination, transport",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js",
+    "./logger": "./dist/logger.js",
+    "./retry": "./dist/retry.js",
+    "./pagination": "./dist/pagination.js",
+    "./http-client": "./dist/http-client.js",
+    "./transport": "./dist/transport.js",
+    "./server": "./dist/server.js"
+  },
+  "typesVersions": {
+    "*": {
+      "logger": [
+        "dist/logger.d.ts"
+      ],
+      "retry": [
+        "dist/retry.d.ts"
+      ],
+      "pagination": [
+        "dist/pagination.d.ts"
+      ],
+      "http-client": [
+        "dist/http-client.d.ts"
+      ],
+      "transport": [
+        "dist/transport.d.ts"
+      ],
+      "server": [
+        "dist/server.d.ts"
+      ]
+    }
+  },
+  "keywords": [
+    "mcp",
+    "utilities",
+    "logger",
+    "http-client",
+    "retry",
+    "pagination"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Novorb/mcp-core.git"
+  },
+  "homepage": "https://github.com/Novorb/mcp-core#readme",
+  "bugs": {
+    "url": "https://github.com/Novorb/mcp-core/issues"
+  },
+  "author": "novorb",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "axios": "^1.16.0",
+    "axios-retry": "^4.5.0"
+  },
+  "devDependencies": {
+    "@jest/globals": "^29.7.0",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^20.19.33",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.4.6",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "NODE_OPTIONS=--experimental-vm-modules jest",
+    "test:watch": "NODE_OPTIONS=--experimental-vm-modules jest --watch",
+    "test:coverage": "NODE_OPTIONS=--experimental-vm-modules jest --coverage",
+    "clean": "rm -rf dist"
+  }
+}