@novorb/mcp-core 2.1.1 → 3.0.0

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,EAAgB,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG1E,qEAAqE;AACrE,KAAK,YAAY,GAAG;IAClB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB,CAAC;AAEF,kEAAkE;AAClE,KAAK,eAAe,GAAG,YAAY,GAAG,CAAC,MAAM,YAAY,CAAC,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AA8BD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;IACrB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,kBAAkB,CAYpB;AAED,yGAAyG;AACzG,MAAM,WAAW,oBAAoB;IACnC,qGAAqG;IACrG,SAAS,EAAE,MAAM,YAAY,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,4BAA4B,EAAE,OAAO,CAAC;IACtC,gFAAgF;IAChF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kFAAkF;IAClF,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,oBAAoB,GACxB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CA0E9D;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAQf"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAEpF,OAAO,EACL,KAAK,QAAQ,EAGb,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,MAAM,EACX,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC9B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAA+B,KAAK,eAAe,EAAoB,MAAM,WAAW,CAAC;AAIhG;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAE/C;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,SAAS,GAAG,MAAM,CAAC;AAExE,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,wGAAwG;IACxG,GAAG,EAAE,cAAc,CAAC;IACpB,4FAA4F;IAC5F,MAAM,EAAE,cAAc,CAAC;IACvB,2FAA2F;IAC3F,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,oEAAoE;AACpE,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;AAEjE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;OAGG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;OAGG;IACH,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAKD,yDAAyD;AACzD,eAAO,MAAM,sBAAsB,QAAkB,CAAC;AA8CtD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;IACrB,wFAAwF;IACxF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,MAAM,CAAC,EAClD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,kBAAkB,CAWpB;AAED,wGAAwG;AACxG,MAAM,WAAW,oBAAoB;IACnC,sGAAsG;IACtG,SAAS,EAAE,aAAa,CAAC;IACzB,oGAAoG;IACpG,WAAW,EAAE,OAAO,CAAC;IACrB,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,4BAA4B,EAAE,OAAO,CAAC;IACtC,4FAA4F;IAC5F,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,iGAAiG;IACjG,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kGAAkG;IAClG,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED,8FAA8F;AAC9F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG;IAC/F,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQtD;AAED,oDAAoD;AACpD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAK7D;AAMD,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzE;;;GAGG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,oBAAoB,EACzB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,wBAAwB,GAAG,SAAS,GACzC,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,4GAA4G;AAC5G,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAG3D;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,oBAAoB,GAAG,iBAAiB,CAiFjF;AAUD,gGAAgG;AAChG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,oBAM3G;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,GAAG,aAAa,CAM3F"}

package/dist/transport.js

@@ -1,54 +1,73 @@
 /**
- * @novorb/mcp-core — Transport
+ * @novorb/mcp-core - Transport
  *
- * Unified transport for MCP servers. Selects between stdio and native Streamable HTTP
- * based on the MCP_TRANSPORT environment variable.
+ * Unified transport for MCP servers on SDK v2. Selects between stdio and Streamable HTTP from the
+ * MCP_TRANSPORT environment variable; both legs take the SAME server factory.
  *
- * HTTP mode is stateless (sessionIdGenerator: undefined) — compatible with MCPize Cloud Run,
- * Apify Standby, and any other scale-to-zero host. One transport instance is created per
- * request; the server instance is resolved once and reconnected per request (SDK 1.29+).
+ * - stdio: `serveStdio(factory)` from `@modelcontextprotocol/server/stdio` (one instance per
+ *   connection; the client's opening message picks the protocol era).
+ * - http: `createMcpHandler(factory, { legacy: 'stateless' })` (the SDK default `responseMode: 'auto'`:
+ *   one JSON body unless the handler emits progress or log notifications first, then SSE) adapted with
+ *   `toNodeHandler` from `@modelcontextprotocol/node`, behind mcp-core's own `node:http` server that
+ *   adds `/health`, the fail-closed Bearer gate (the SDK's `verifyBearerToken` over the static key or a
+ *   pluggable verifier, `req.auth` set for the SDK), Host/Origin allow-lists and the 415/413 guards.
+ *   Stateless: a fresh instance per request, 2025-era clients served by the SDK's stateless fallback.
  *
  * Usage:
  *   import { startMcpServer } from '@novorb/mcp-core/transport';
+ *   await startMcpServer(() => buildServer());
  *
- *   // Factory (recommended for HTTP — ensures clean state per request):
- *   await startMcpServer(() => createServer(services));
- *
- *   // Server instance (fine for stdio; also works for HTTP in SDK 1.29+):
- *   await startMcpServer(server);
- *
- * Environment variables:
- *   MCP_TRANSPORT        — 'stdio' (default) | 'http'
- *   PORT                 — listen port for HTTP transport (default: 8080)
- *   MCP_HTTP_HOST        — bind address for HTTP (default: '0.0.0.0' for container hosts; set
- *                          '127.0.0.1' for local-only)
- *   MCP_API_KEY          — Bearer token for HTTP auth. REQUIRED in HTTP mode unless MCP_AUTH_DISABLED.
- *   MCP_AUTH_DISABLED    — set 'true' to run HTTP WITHOUT auth (only when a gateway/platform fronts it)
- *   MCP_MAX_BODY_BYTES   — max accepted POST body size (default: 4 MiB)
- *   MCP_ALLOWED_HOSTS    — comma-separated Host allowlist; setting it enables DNS-rebinding protection
- *   MCP_ALLOWED_ORIGINS  — comma-separated Origin allowlist (also enables DNS-rebinding protection)
+ * Environment variables (an explicit option wins):
+ *   MCP_TRANSPORT        - 'stdio' (default) | 'http'; any other value throws
+ *   PORT                 - listen port for HTTP transport (default: 8080)
+ *   MCP_HTTP_HOST        - bind address for HTTP (default: '0.0.0.0'; set '127.0.0.1' for local-only)
+ *   MCP_API_KEY          - Bearer token for HTTP auth. REQUIRED in HTTP mode unless MCP_AUTH_DISABLED or
+ *                          a `verifier` is passed.
+ *   MCP_AUTH_DISABLED    - set 'true' to run HTTP WITHOUT auth (only when a gateway/platform fronts it)
+ *   MCP_MAX_BODY_BYTES   - max accepted POST body size (default: 4 MiB)
+ *   MCP_ALLOWED_HOSTS    - comma-separated Host allowlist; setting it enables DNS-rebinding protection
+ *   MCP_ALLOWED_ORIGINS  - comma-separated Origin allowlist (also enables DNS-rebinding protection)
  */
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { createServer } from 'node:http';
 import { createHash, timingSafeEqual } from 'node:crypto';
-function resolve(s) {
-    return typeof s === 'function' ? s() : s;
+import { createServer } from 'node:http';
+import { hostHeaderValidation, originValidation, toNodeHandler } from '@modelcontextprotocol/node';
+import { createMcpHandler, isJsonContentType, } from '@modelcontextprotocol/server';
+import { serveStdio } from '@modelcontextprotocol/server/stdio';
+import { authenticate, bearerOptions, writeWebResponse } from './auth.js';
+import { attachNotifications, createNotifier, processBus } from './notifications.js';
+import { getLogger } from './utils/logger.js';
+const HTTP_FACTORY_REQUIRED = '[mcp-core] HTTP transport requires a server factory; one McpServer serves one connection in SDK v2';
+/** Default POST body cap (the SDK's own default too). */
+export const DEFAULT_MAX_BODY_BYTES = 4 * 1024 * 1024;
+function reportError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    getLogger().error(`request error: ${message}`, 'mcp-core');
 }
 /** Marker error so the request handler can answer 413 rather than 500. */
 class BodyTooLargeError extends Error {
-    constructor() { super('Request body too large'); this.name = 'BodyTooLargeError'; }
+    constructor() {
+        super('Request body too large');
+        this.name = 'BodyTooLargeError';
+    }
 }
-/** Read the request body, rejecting (and destroying the socket) once it exceeds `maxBytes`. */
+/**
+ * Read the request body, rejecting once it exceeds `maxBytes`. The rest of the body is drained and
+ * discarded (never buffered) instead of destroying the socket, so the client actually receives the 413
+ * the handler writes; that response carries `Connection: close`.
+ */
 function readBody(req, maxBytes) {
     return new Promise((res, rej) => {
         const chunks = [];
         let size = 0;
+        let tooLarge = false;
         req.on('data', (c) => {
+            if (tooLarge)
+                return;
             size += c.length;
             if (size > maxBytes) {
+                tooLarge = true;
+                chunks.length = 0;
                 rej(new BodyTooLargeError());
-                req.destroy();
                 return;
             }
             chunks.push(c);
@@ -57,10 +76,15 @@ function readBody(req, maxBytes) {
         req.on('error', rej);
     });
 }
+function sendJson(res, status, payload, headers = {}) {
+    res.writeHead(status, { 'Content-Type': 'application/json', ...headers });
+    res.end(JSON.stringify(payload));
+}
 /**
  * Constant-time comparison of the Authorization header against `Bearer <apiKey>`.
  * Both sides are SHA-256-hashed first so `timingSafeEqual` never throws on a length mismatch and the
- * token length is not itself a timing oracle.
+ * token length is not itself a timing oracle. (The transport itself now verifies through the SDK's
+ * `verifyBearerToken` with `apiKeyVerifier`, which compares the same way.)
  */
 export function bearerMatches(authHeader, apiKey) {
     const a = createHash('sha256').update(authHeader).digest();
@@ -68,146 +92,305 @@ export function bearerMatches(authHeader, apiKey) {
     return timingSafeEqual(a, b);
 }
 /**
- * Resolve HTTP auth — FAIL CLOSED. `apiKey: null` (programmatic) or MCP_AUTH_DISABLED=true are the
+ * Resolve HTTP auth - FAIL CLOSED. `apiKey: null` (programmatic) or MCP_AUTH_DISABLED=true are the
  * only ways to run open; a missing/empty MCP_API_KEY is treated as "not configured" (not a valid
- * empty key) and THROWS, so a config typo can't silently downgrade the endpoint to no-auth.
+ * empty key) and THROWS, so a config typo can't silently downgrade the endpoint to no-auth. A passed
+ * `auth.verifier` always enforces auth (it wins over every "disabled" switch).
  */
 export function resolveHttpAuth(options, env = process.env) {
+    if (options.auth?.verifier)
+        return { authEnabled: true, apiKey: '' };
     const explicitlyDisabled = options.apiKey === null || env.MCP_AUTH_DISABLED === 'true';
-    const apiKey = (options.apiKey !== undefined && options.apiKey !== null)
-        ? options.apiKey
-        : (env.MCP_API_KEY || '');
+    const apiKey = options.apiKey !== undefined && options.apiKey !== null ? options.apiKey : env.MCP_API_KEY || '';
     if (!explicitlyDisabled && apiKey.length === 0) {
         throw new Error('[mcp-core] HTTP transport refused to start without auth: set MCP_API_KEY to a non-empty token, ' +
             'or set MCP_AUTH_DISABLED=true to run open (only when a gateway/platform fronts authentication).');
     }
     return { authEnabled: apiKey.length > 0, apiKey };
 }
+/** `host` or `host:port` -> the bare hostname the SDK's port-agnostic Host validation compares. */
+export function toHostname(entry) {
+    try {
+        return new URL(`http://${entry}`).hostname || entry;
+    }
+    catch {
+        return entry;
+    }
+}
+/**
+ * A full origin (`https://app.example.com:443`) -> its hostname; bare hostnames and `<scheme>://*`
+ * entries pass unchanged. The SDK honours a lowercase `<scheme>://*` entry (for example
+ * `chrome-extension://*`) as "every origin of that scheme", but never `http://*` or `https://*`.
+ */
+export function toOriginHostname(entry) {
+    if (/^[a-z][a-z0-9+.-]*:\/\/\*$/i.test(entry))
+        return entry;
+    if (!entry.includes('://'))
+        return toHostname(entry);
+    try {
+        return new URL(entry).hostname || entry;
+    }
+    catch {
+        return entry;
+    }
+}
+/** Split a comma-separated allow-list env value. */
+export function parseList(value) {
+    return (value || '')
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+function isMcpPath(url) {
+    return url === '/mcp' || (url?.startsWith('/mcp?') ?? false);
+}
+/**
+ * Run the Bearer gate: answers the SDK challenge (401/403 with `WWW-Authenticate`) and returns false,
+ * or sets `req.auth` and returns true. With no gate configured it lets the request through.
+ */
+export async function runBearerGate(req, res, gate) {
+    if (!gate)
+        return true;
+    const outcome = await authenticate(req.headers.authorization, gate);
+    if (!outcome.ok) {
+        await writeWebResponse(res, outcome.response);
+        return false;
+    }
+    req.auth = outcome.authInfo;
+    return true;
+}
+/** The content-type check: the SDK's media-type essence comparison (`application/json`, params allowed). */
+export function isJsonRequest(req) {
+    const header = req.headers['content-type'];
+    return typeof header === 'string' && isJsonContentType(header);
+}
 /**
  * Build the `(req, res)` handler for the HTTP transport. Extracted from `startHttp` so the routing,
- * auth, content-type/size guards, and error handling are unit-testable with mock req/res — no socket
- * binding required.
+ * auth, content-type/size guards, and error handling are unit-testable with mock req/res, no socket
+ * binding required. Order: `/health`, Bearer check, path check, Host/Origin allow-lists, 415, 413,
+ * then the SDK handler.
  */
 export function createRequestHandler(cfg) {
-    const { getServer, authEnabled, apiKey, maxBodyBytes, enableDnsRebindingProtection, allowedHosts, allowedOrigins, } = cfg;
-    return async (req, res) => {
+    const { getServer, authEnabled, apiKey, maxBodyBytes, enableDnsRebindingProtection, allowedHosts, allowedOrigins } = cfg;
+    const mcpHandler = createMcpHandler(getServer, {
+        legacy: 'stateless',
+        onerror: reportError,
+        bus: cfg.bus ?? processBus(),
+    });
+    const nodeHandler = toNodeHandler(mcpHandler, { onerror: reportError });
+    const gate = authEnabled ? bearerOptions(cfg.auth, apiKey || undefined) : undefined;
+    if (authEnabled && !gate)
+        throw new Error('[mcp-core] HTTP auth is enabled but neither an API key nor a verifier is set');
+    const guards = [];
+    if (enableDnsRebindingProtection && allowedHosts.length > 0) {
+        guards.push(hostHeaderValidation(allowedHosts.map(toHostname)));
+    }
+    if (enableDnsRebindingProtection && allowedOrigins.length > 0) {
+        guards.push(originValidation(allowedOrigins.map(toOriginHostname)));
+    }
+    const handle = async (req, res) => {
         try {
-            // Health probe — no auth required
+            // Health probe: no auth required
             if (req.method === 'GET' && req.url === '/health') {
-                res.writeHead(200, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ status: 'healthy' }));
+                sendJson(res, 200, { status: 'healthy' });
+                return;
+            }
+            // Bearer gate (the SDK's verifyBearerToken; constant-time key compare); sets req.auth.
+            if (!(await runBearerGate(req, res, gate)))
+                return;
+            if (!isMcpPath(req.url)) {
+                sendJson(res, 404, { error: 'Not found' });
                 return;
             }
-            // Bearer token auth (constant-time)
-            if (authEnabled) {
-                const auth = req.headers['authorization'] ?? '';
-                if (!bearerMatches(auth, apiKey)) {
-                    res.writeHead(401, { 'Content-Type': 'application/json' });
-                    res.end(JSON.stringify({ error: 'Unauthorized' }));
+            // DNS-rebinding protection: each SDK guard answers 403 itself and returns false.
+            for (const guard of guards) {
+                if (!guard(req, res))
                     return;
-                }
             }
-            // MCP endpoint — stateless: new server + transport per request
-            if (req.url === '/mcp' || req.url?.startsWith('/mcp?')) {
-                let body;
-                if (req.method === 'POST') {
-                    // Require JSON content type (the body is parsed below).
-                    const contentType = (req.headers['content-type'] ?? '').toLowerCase();
-                    if (!contentType.includes('application/json')) {
-                        res.writeHead(415, { 'Content-Type': 'application/json' });
-                        res.end(JSON.stringify({ error: 'Unsupported Media Type: Content-Type must be application/json' }));
+            let body;
+            if (req.method === 'POST') {
+                if (!isJsonRequest(req)) {
+                    sendJson(res, 415, { error: 'Unsupported Media Type: Content-Type must be application/json' });
+                    return;
+                }
+                let raw;
+                try {
+                    raw = await readBody(req, maxBodyBytes);
+                }
+                catch (e) {
+                    if (e instanceof BodyTooLargeError) {
+                        sendJson(res, 413, { error: 'Payload Too Large' }, { Connection: 'close' });
                         return;
                     }
-                    let raw;
-                    try {
-                        raw = await readBody(req, maxBodyBytes);
-                    }
-                    catch (e) {
-                        if (e instanceof BodyTooLargeError) {
-                            res.writeHead(413, { 'Content-Type': 'application/json' });
-                            res.end(JSON.stringify({ error: 'Payload Too Large' }));
-                            return;
-                        }
-                        throw e;
-                    }
-                    if (raw.trim()) {
-                        try {
-                            body = JSON.parse(raw);
-                        }
-                        catch { /* let transport surface the error */ }
-                    }
+                    throw e;
+                }
+                try {
+                    body = JSON.parse(raw);
+                }
+                catch {
+                    sendJson(res, 400, {
+                        jsonrpc: '2.0',
+                        error: { code: -32700, message: 'Parse error: Invalid JSON' },
+                        id: null,
+                    });
+                    return;
                 }
-                const server = getServer();
-                const transport = new StreamableHTTPServerTransport({
-                    sessionIdGenerator: undefined, // stateless — no Mcp-Session-Id
-                    enableJsonResponse: true,
-                    ...(enableDnsRebindingProtection ? { enableDnsRebindingProtection: true, allowedHosts, allowedOrigins } : {}),
-                });
-                await server.connect(transport);
-                await transport.handleRequest(req, res, body);
-                return;
             }
-            res.writeHead(404, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'Not found' }));
+            await nodeHandler(req, res, body);
         }
         catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            process.stderr.write(`[mcp-core] request error: ${msg}\n`);
+            reportError(err);
             if (!res.headersSent) {
-                res.writeHead(500, { 'Content-Type': 'application/json' });
-                res.end(JSON.stringify({ error: 'Internal server error' }));
+                sendJson(res, 500, { error: 'Internal server error' });
             }
         }
     };
+    return Object.assign(handle, { close: () => mcpHandler.close() });
+}
+function onceAsync(fn) {
+    let pending;
+    return () => {
+        pending ??= fn();
+        return pending;
+    };
+}
+/** The transport mode from the option, else MCP_TRANSPORT, else stdio; anything else throws. */
+export function resolveTransportMode(option, env = process.env) {
+    const mode = option ?? (env.MCP_TRANSPORT || 'stdio');
+    if (mode !== 'stdio' && mode !== 'http') {
+        throw new Error(`[mcp-core] MCP_TRANSPORT must be 'stdio' or 'http' (got '${mode}')`);
+    }
+    return mode;
 }
 /**
- * Start an MCP server with the configured transport.
+ * Start an MCP server with the configured transport. Resolves with a `TransportHandle` once serving:
  *
- * For stdio: connects once and keeps the process alive.
- * For http: starts a stateless HTTP server. GET /health is always available.
- *           Pass a factory function to get a fresh server instance per request.
+ * For stdio: serves the process' stdin/stdout. An instance is accepted and wrapped as `() => instance`.
+ *            With `handleSignals` (default) SIGINT/SIGTERM close the connection and re-raise the signal
+ *            when no other listener remains. `closed` resolves when the client closes stdin.
+ * For http:  starts a stateless HTTP server and resolves once the listener is bound (the process stays
+ *            alive on the listener). With `handleSignals` (default) SIGINT/SIGTERM close it. Requires a
+ *            factory (a fresh instance per request).
  */
 export async function startMcpServer(serverOrFactory, options = {}) {
-    const mode = options.mode ?? process.env.MCP_TRANSPORT ?? 'stdio';
+    const mode = resolveTransportMode(options.mode);
+    const handleSignals = options.handleSignals !== false;
+    const bus = options.bus ?? processBus();
     if (mode === 'stdio') {
-        const server = resolve(serverOrFactory);
-        await server.connect(new StdioServerTransport());
-        return;
+        return startStdio(typeof serverOrFactory === 'function' ? serverOrFactory : () => serverOrFactory, handleSignals, bus);
+    }
+    if (typeof serverOrFactory !== 'function') {
+        throw new Error(HTTP_FACTORY_REQUIRED);
+    }
+    return startHttp(serverOrFactory, { ...options, bus }, handleSignals);
+}
+/** A factory whose instances forward the bus's change events (a stdio connection is long-lived). */
+export function notifyingFactory(factory, bus) {
+    return (ctx) => {
+        const server = factory(ctx);
+        attachNotifications(server, ctx.era, bus);
+        return server;
+    };
+}
+function startStdio(factory, handleSignals, bus) {
+    const stdio = serveStdio(notifyingFactory(factory, bus), { onerror: reportError });
+    let markClosed = () => undefined;
+    const closed = new Promise((resolve) => {
+        markClosed = resolve;
+    });
+    // The SDK's stdio transport closes itself when stdin ends; mirror that so the host can dispose and
+    // exit (keep-alive handles from `setup` would otherwise orphan the process).
+    const onStdinEnd = () => {
+        close().catch(reportError);
+    };
+    const onSignal = (signal) => {
+        process.off('SIGINT', onSignal);
+        process.off('SIGTERM', onSignal);
+        close()
+            .catch(reportError)
+            .finally(() => {
+            // Restore the default "signal terminates the process" unless the host app handles it itself.
+            if (process.listenerCount(signal) === 0)
+                process.kill(process.pid, signal);
+        });
+    };
+    const close = onceAsync(async () => {
+        process.off('SIGINT', onSignal);
+        process.off('SIGTERM', onSignal);
+        process.stdin.off('end', onStdinEnd);
+        process.stdin.off('close', onStdinEnd);
+        try {
+            await stdio.close();
+        }
+        finally {
+            markClosed();
+        }
+    });
+    process.stdin.once('end', onStdinEnd);
+    process.stdin.once('close', onStdinEnd);
+    if (handleSignals) {
+        process.on('SIGINT', onSignal);
+        process.on('SIGTERM', onSignal);
     }
-    await startHttp(serverOrFactory, options);
+    return { mode: 'stdio', closed, bus, notify: createNotifier(bus), close };
 }
-async function startHttp(serverOrFactory, options) {
+async function startHttp(factory, options, handleSignals) {
     const port = options.port ?? parseInt(process.env.PORT ?? '8080', 10);
-    const host = process.env.MCP_HTTP_HOST || '0.0.0.0';
-    const maxBodyBytes = Number(process.env.MCP_MAX_BODY_BYTES) || 4 * 1024 * 1024;
-    // Auth resolution: FAIL CLOSED (throws when http + no key + not explicitly disabled).
+    const host = options.host || process.env.MCP_HTTP_HOST || '0.0.0.0';
+    const maxBodyBytes = options.maxBodyBytes ?? (Number(process.env.MCP_MAX_BODY_BYTES) || DEFAULT_MAX_BODY_BYTES);
+    // Auth resolution: FAIL CLOSED (throws when http + no key + no verifier + not explicitly disabled).
     const { authEnabled, apiKey } = resolveHttpAuth(options);
     if (!authEnabled) {
         process.stderr.write('[mcp-core] WARNING: HTTP transport running WITHOUT auth (MCP_AUTH_DISABLED). ' +
             'Ensure a gateway/platform fronts authentication.\n');
     }
-    // --- DNS-rebinding / Host+Origin protection (opt-in via allowlist envs) --------------------------
-    const allowedHosts = (process.env.MCP_ALLOWED_HOSTS || '').split(',').map(s => s.trim()).filter(Boolean);
-    const allowedOrigins = (process.env.MCP_ALLOWED_ORIGINS || '').split(',').map(s => s.trim()).filter(Boolean);
+    // DNS-rebinding / Host+Origin protection (opt-in via allowlist envs)
+    const allowedHosts = options.allowedHosts ?? parseList(process.env.MCP_ALLOWED_HOSTS);
+    const allowedOrigins = options.allowedOrigins ?? parseList(process.env.MCP_ALLOWED_ORIGINS);
     const enableDnsRebindingProtection = allowedHosts.length > 0 || allowedOrigins.length > 0;
-    // Wrap a plain instance so getServer() always returns a callable factory
-    const getServer = typeof serverOrFactory === 'function' ? serverOrFactory : () => serverOrFactory;
-    const httpServer = createServer(createRequestHandler({
-        getServer, authEnabled, apiKey, maxBodyBytes,
-        enableDnsRebindingProtection, allowedHosts, allowedOrigins,
-    }));
+    const handler = createRequestHandler({
+        getServer: factory,
+        authEnabled,
+        apiKey,
+        ...(options.auth ? { auth: options.auth } : {}),
+        maxBodyBytes,
+        enableDnsRebindingProtection,
+        allowedHosts,
+        allowedOrigins,
+        ...(options.bus ? { bus: options.bus } : {}),
+    });
+    const httpServer = createServer(handler);
+    const bus = options.bus ?? processBus();
     await new Promise((ok, fail) => {
-        httpServer.listen(port, host, ok);
         httpServer.once('error', fail);
+        httpServer.listen(port, host, ok);
     });
-    process.stderr.write(`[mcp-core] HTTP server listening on http://${host}:${port}/mcp\n`);
-    // Block until signal
-    await new Promise(done => {
-        const shutdown = () => {
+    const address = httpServer.address();
+    const boundPort = typeof address === 'object' && address ? address.port : port;
+    const url = `http://${host}:${boundPort}/mcp`;
+    process.stderr.write(`[mcp-core] HTTP server listening on ${url}\n`);
+    let markClosed = () => undefined;
+    const closed = new Promise((resolve) => {
+        markClosed = resolve;
+    });
+    // Close the SDK handler (aborts in-flight exchanges), then the listener.
+    const shutdown = () => {
+        close().catch(reportError);
+    };
+    const close = onceAsync(async () => {
+        process.off('SIGINT', shutdown);
+        process.off('SIGTERM', shutdown);
+        await handler.close().catch(reportError);
+        await new Promise((done) => {
             httpServer.close(() => done());
-        };
-        process.once('SIGTERM', shutdown);
-        process.once('SIGINT', shutdown);
+            httpServer.closeAllConnections?.();
+        });
+        markClosed();
     });
+    if (handleSignals) {
+        process.on('SIGINT', shutdown);
+        process.on('SIGTERM', shutdown);
+    }
+    return { mode: 'http', host, port: boundPort, url, closed, bus, notify: createNotifier(bus), close };
 }
 //# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAmC,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0B1D,SAAS,OAAO,CAAC,CAAkB;IACjC,OAAO,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,0EAA0E;AAC1E,MAAM,iBAAkB,SAAQ,KAAK;IACnC,gBAAgB,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC;CACpF;AAED,+FAA+F;AAC/F,SAAS,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;gBAC7B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,MAAc;IAC9D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAyC,EACzC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC;IACvF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QACtE,CAAC,CAAC,OAAO,CAAC,MAAM;QAChB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iGAAiG;YACjG,iGAAiG,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAoBD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAyB;IAEzB,MAAM,EACJ,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAC5C,4BAA4B,EAAE,YAAY,EAAE,cAAc,GAC3D,GAAG,GAAG,CAAC;IAER,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACxE,IAAI,CAAC;YACH,kCAAkC;YAClC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAwB,IAAI,EAAE,CAAC;gBACxE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,IAAI,IAAa,CAAC;gBAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,wDAAwD;oBACxD,MAAM,WAAW,GAAG,CAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAwB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC9F,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;wBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC,CAAC,CAAC;wBACpG,OAAO;oBACT,CAAC;oBACD,IAAI,GAAW,CAAC;oBAChB,IAAI,CAAC;wBACH,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;oBAC1C,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,IAAI,CAAC,YAAY,iBAAiB,EAAE,CAAC;4BACnC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;4BACxD,OAAO;wBACT,CAAC;wBACD,MAAM,CAAC,CAAC;oBACV,CAAC;oBACD,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;wBACf,IAAI,CAAC;4BAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC;gBAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;oBAClD,kBAAkB,EAAE,SAAS,EAAE,gCAAgC;oBAC/D,kBAAkB,EAAE,IAAI;oBACxB,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9G,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAgC,EAChC,UAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAK,OAAO,CAAC,GAAG,CAAC,aAA2C,IAAI,OAAO,CAAC;IACjG,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,MAAM,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,eAAgC,EAAE,OAAyB;IAClF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAE/E,sFAAsF;IACtF,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+EAA+E;YAC/E,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzG,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7G,MAAM,4BAA4B,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1F,yEAAyE;IACzE,MAAM,SAAS,GAAG,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC;IAElG,MAAM,UAAU,GAAG,YAAY,CAAC,oBAAoB,CAAC;QACnD,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY;QAC5C,4BAA4B,EAAE,YAAY,EAAE,cAAc;KAC3D,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QACnC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC;IAEzF,qBAAqB;IACrB,MAAM,IAAI,OAAO,CAAO,IAAI,CAAC,EAAE;QAC7B,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAEL,gBAAgB,EAChB,iBAAiB,GAOlB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAwB,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AA6E9C,MAAM,qBAAqB,GACzB,oGAAoG,CAAC;AAEvG,yDAAyD;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,SAAS,EAAE,CAAC,KAAK,CAAC,kBAAkB,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAC7D,CAAC;AAED,0EAA0E;AAC1E,MAAM,iBAAkB,SAAQ,KAAK;IACnC;QACE,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClB,GAAG,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAgB,EAAE,UAAkC,EAAE;IAC3G,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,MAAc;IAC9D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAkD,EAClD,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrE,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAChH,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,iGAAiG;YAC/F,iGAAiG,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AA6BD,mGAAmG;AACnG,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,SAAS,CAAC,KAAyB;IACjD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,OAAO,GAAG,KAAK,MAAM,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC;AAC/D,CAAC;AAKD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAyB,EACzB,GAAmB,EACnB,IAA0C;IAE1C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,aAAa,CAAC,GAAoB;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAyB;IAC5D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,4BAA4B,EAAE,YAAY,EAAE,cAAc,EAAE,GAChH,GAAG,CAAC;IAEN,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,EAAE;QAC7C,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,WAAW;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,UAAU,EAAE;KAC7B,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,WAAW,IAAI,CAAC,IAAI;QACtB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAElG,MAAM,MAAM,GAAkE,EAAE,CAAC;IACjF,IAAI,4BAA4B,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,4BAA4B,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QAChF,IAAI,CAAC;YACH,iCAAiC;YACjC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAClD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,uFAAuF;YACvF,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAAE,OAAO;YAEnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,iFAAiF;YACjF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;oBAAE,OAAO;YAC/B,CAAC;YAED,IAAI,IAAa,CAAC;YAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+DAA+D,EAAE,CAAC,CAAC;oBAC/F,OAAO;gBACT,CAAC;gBACD,IAAI,GAAW,CAAC;gBAChB,IAAI,CAAC;oBACH,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,YAAY,iBAAiB,EAAE,CAAC;wBACnC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC5E,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,CAAC;gBACV,CAAC;gBACD,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACjB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE;wBAC7D,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAkB,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAC,EAAuB;IACxC,IAAI,OAAkC,CAAC;IACvC,OAAO,GAAG,EAAE;QACV,OAAO,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAAC,MAAiC,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC1G,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,IAAI,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAgC,EAChC,UAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;IACxC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,UAAU,CACf,OAAO,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,eAAe,EAC/E,aAAa,EACb,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,SAAS,CAAC,eAAe,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAC,OAAsB,EAAE,GAAmB;IAC1E,OAAO,CAAC,GAAmB,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAsB,EAAE,aAAsB,EAAE,GAAmB;IACrF,MAAM,KAAK,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,IAAI,UAAU,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC3C,UAAU,GAAG,OAAO,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,mGAAmG;IACnG,6EAA6E;IAC7E,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,KAAK,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjC,KAAK,EAAE;aACJ,KAAK,CAAC,WAAW,CAAC;aAClB,OAAO,CAAC,GAAG,EAAE;YACZ,6FAA6F;YAC7F,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,UAAU,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACxC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAAsB,EACtB,OAAyB,EACzB,aAAsB;IAEtB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC;IACpE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,sBAAsB,CAAC,CAAC;IAEhH,oGAAoG;IACpG,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+EAA+E;YAC7E,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACtF,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5F,MAAM,4BAA4B,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAE1F,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,SAAS,EAAE,OAAO;QAClB,WAAW;QACX,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,YAAY;QACZ,4BAA4B;QAC5B,YAAY;QACZ,cAAc;QACd,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;IAExC,MAAM,IAAI,OAAO,CAAO,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QACnC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,MAAM,GAAG,GAAG,UAAU,IAAI,IAAI,SAAS,MAAM,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,IAAI,CAAC,CAAC;IAErE,IAAI,UAAU,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC3C,UAAU,GAAG,OAAO,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,yEAAyE;IACzE,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,KAAK,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;YAC/B,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,UAAU,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,UAAU,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;AACvG,CAAC"}

package/dist/url-path.d.ts

@@ -0,0 +1,49 @@
+/**
+ * @novorb/mcp-core - Upstream URL path segments
+ *
+ * `encodeURIComponent` alone is not enough to put a caller value (an id, a name) into an upstream URL
+ * path: it leaves `.` and `..` intact and the URL parser collapses them (`/repositories/..` addresses
+ * the parent resource). `pathSegment` encodes one value as exactly one segment and refuses what would
+ * not stay one, as the most lenient upstream would read it: empty, `.`, `..`, their percent-encoded
+ * forms (also double-encoded, for upstreams that decode twice), overlong UTF-8 dots (`%c0%ae`), unicode
+ * dot forms after NFKC normalisation (fullwidth, small, one-dot leader, ideographic full stop), and C0 /
+ * C1 control characters, DEL, U+2028 and U+2029 (raw or encoded).
+ *
+ * The error (`InvalidPathSegmentError`) names the argument and never echoes the value; `registerTools`
+ * turns it into an actionable isError (`Invalid <name>: ...`) whatever the server's `mapError` does.
+ *
+ *   const path = buildPath`/repositories/${{ name: 'repository', value: args.repository }}/components`;
+ *   const same = joinPath('repositories', { name: 'repository', value: args.repository }, 'components');
+ */
+/** What was wrong with a path segment. */
+export type PathSegmentProblem = 'empty' | 'dot-segment' | 'control' | 'invalid';
+/** A value that cannot be one upstream path segment. The message names the argument, never the value. */
+export declare class InvalidPathSegmentError extends Error {
+    /** The argument name (`options.name`, default `path segment`). */
+    readonly argument: string;
+    readonly problem: PathSegmentProblem;
+    constructor(argument: string, problem: PathSegmentProblem);
+}
+export interface PathSegmentOptions {
+    /** The argument name used in the error (for example the tool argument `repository`). */
+    name?: string;
+}
+/** A value for `buildPath` / `joinPath`: a bare value, or one carrying its argument name for the error. */
+export type PathValue = string | number | {
+    name: string;
+    value: string | number;
+};
+/**
+ * Encode `value` as exactly one URL path segment (`encodeURIComponent`), refusing empty, dot segments in
+ * every encoded, overlong and unicode form, and control characters. Throws `InvalidPathSegmentError`
+ * naming `options.name`.
+ */
+export declare function pathSegment(value: string | number, options?: PathSegmentOptions): string;
+/**
+ * Tagged template: the literal parts are kept as written, every interpolated value goes through
+ * `pathSegment` (pass `{ name, value }` to name the argument in the error).
+ */
+export declare function buildPath(template: TemplateStringsArray, ...values: PathValue[]): string;
+/** Join segments, each through `pathSegment`, with one leading slash (`/` for none). */
+export declare function joinPath(...segments: PathValue[]): string;
+//# sourceMappingURL=url-path.d.ts.map

package/dist/url-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-path.d.ts","sourceRoot":"","sources":["../src/url-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AASjF,yGAAyG;AACzG,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;gBACzB,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB;CAM1D;AAED,MAAM,WAAW,kBAAkB;IACjC,wFAAwF;IACxF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,2GAA2G;AAC3G,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,CAAC;AAiFnF;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,MAAM,CAkB5F;AAOD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAMxF;AAED,wFAAwF;AACxF,wBAAgB,QAAQ,CAAC,GAAG,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,CAEzD"}