@obov/mext 0.0.0-stage → 0.1.0

package/dist/mcp/mrtr.js

@@ -0,0 +1,130 @@
+import { createHash, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { inputDeclined } from "../errors.js";
+export const ASK_KEY_PREFIX = "ask-";
+/** confirm 요청의 requestedSchema. 승인 = action accept + content.confirm === true */
+export const CONFIRM_REQUESTED_SCHEMA = {
+    type: "object",
+    properties: { confirm: { type: "boolean", title: "Confirm", description: "true to proceed" } },
+    required: ["confirm"],
+};
+/** requestState 유효 기간 (사람이 답하는 시간) */
+export const REQUEST_STATE_TTL_MS = 600_000;
+const STATE_VERSION = "m1";
+export function createRequestStateSigner(options = {}) {
+    const key = options.key === undefined ? randomBytes(32) : Buffer.from(options.key);
+    if (key.length < 32)
+        throw new RangeError("requestStateKey must be at least 32 bytes");
+    const ttlMs = options.ttlMs ?? REQUEST_STATE_TTL_MS;
+    const now = options.now ?? Date.now;
+    const mac = (body) => createHmac("sha256", key).update(`mext.requestState:${body}`).digest();
+    return {
+        mint(answers, binding) {
+            const body = b64url(JSON.stringify({ exp: now() + ttlMs, b: bindingDigest(binding), a: answers }));
+            return `${STATE_VERSION}.${body}.${b64url(mac(body))}`;
+        },
+        verify(state, binding) {
+            const [version, body, signature, ...rest] = state.split(".");
+            if (version !== STATE_VERSION || body === undefined || signature === undefined || rest.length > 0)
+                return undefined;
+            const expected = mac(body);
+            const given = Buffer.from(signature, "base64url");
+            if (given.length !== expected.length || !timingSafeEqual(given, expected))
+                return undefined;
+            let payload;
+            try {
+                payload = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+            }
+            catch {
+                return undefined;
+            }
+            if (typeof payload.exp !== "number" || payload.exp < now())
+                return undefined;
+            if (payload.b !== bindingDigest(binding))
+                return undefined;
+            return isPlainObject(payload.a) ? payload.a : undefined;
+        },
+    };
+}
+/** 대기 요청이 생겨 라운드를 멈출 때 ask 가 던지는 값. 핸들러가 잡아도 결과는 InputRequiredResult */
+export class InputRequiredSignal extends Error {
+    constructor() {
+        super("Input required: this round stops and the client retries with inputResponses.");
+        this.name = "InputRequiredSignal";
+    }
+}
+/** 한 라운드의 ask 세션. answers = 재시도의 inputResponses + 검증된 requestState 의 답 */
+export function createAskSession(answers) {
+    const controller = new AbortController();
+    const pending = {};
+    const used = {};
+    let index = 0;
+    const ask = async (request) => {
+        const key = `${ASK_KEY_PREFIX}${index++}`;
+        const response = elicitResult(answers[key]);
+        if (response === undefined) {
+            pending[key] = elicitation(request);
+            const signal = new InputRequiredSignal();
+            controller.abort(signal);
+            throw signal;
+        }
+        used[key] = answers[key];
+        if (request.kind === "confirm")
+            return response.action === "accept" && response.content?.confirm === true;
+        if (response.action !== "accept")
+            throw inputDeclined(request.command, "input");
+        return response.content ?? {};
+    };
+    return { ask, pending, used, signal: controller.signal };
+}
+export function hasPending(session) {
+    return Object.keys(session.pending).length > 0;
+}
+/** 대기 요청 → InputRequiredResult. 사용한 답이 있으면 서명한 requestState 로 다음 라운드에 넘긴다 */
+export function inputRequiredResult(session, signer, binding) {
+    const result = { resultType: "input_required", inputRequests: { ...session.pending } };
+    if (Object.keys(session.used).length > 0)
+        result.requestState = signer.mint({ ...session.used }, binding);
+    return result;
+}
+/** elicitation 결과 형태 (action) 만 답으로 인정. 그 외 = 답 없음 → 다시 요청 */
+function elicitResult(value) {
+    if (!isPlainObject(value))
+        return undefined;
+    const { action, content } = value;
+    if (action !== "accept" && action !== "decline" && action !== "cancel")
+        return undefined;
+    return isPlainObject(content) ? { action, content } : { action };
+}
+function elicitation(request) {
+    const requestedSchema = request.kind === "confirm" ? CONFIRM_REQUESTED_SCHEMA : elicitationSchema(request.requestedSchema);
+    return { method: "elicitation/create", params: { mode: "form", message: request.message, requestedSchema } };
+}
+/** elicitation requestedSchema 는 $schema 를 제외한 평탄 객체 스키마 */
+function elicitationSchema(schema) {
+    const { $schema: _schema, ...rest } = schema;
+    return rest;
+}
+function bindingDigest(binding) {
+    const text = stableStringify([binding.principal, binding.tool, binding.command, binding.args ?? {}]);
+    return createHash("sha256").update(text).digest("base64url");
+}
+/** 키 정렬 JSON (args 다이제스트용) */
+function stableStringify(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(",")}]`;
+    if (isPlainObject(value)) {
+        const entries = Object.keys(value)
+            .sort()
+            .filter((k) => value[k] !== undefined)
+            .map((k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`);
+        return `{${entries.join(",")}}`;
+    }
+    return JSON.stringify(value) ?? "null";
+}
+function b64url(value) {
+    return Buffer.from(value).toString("base64url");
+}
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=mrtr.js.map

package/dist/mcp/mrtr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mrtr.js","sourceRoot":"","sources":["../../src/mcp/mrtr.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAyC5C,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAA;AAEpC,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAe;IAClD,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE;IAC9F,QAAQ,EAAE,CAAC,SAAS,CAAC;CACtB,CAAA;AAED,sCAAsC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAA;AAuB3C,MAAM,aAAa,GAAG,IAAI,CAAA;AAE1B,MAAM,UAAU,wBAAwB,CAAC,OAAO,GAA8B,EAAE;IAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAClF,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAA;IACtF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,oBAAoB,CAAA;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IACpG,OAAO;QACL,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;YAClG,OAAO,GAAG,aAAa,IAAI,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAA;QACxD,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,OAAO;YACnB,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC5D,IAAI,OAAO,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAA;YACnH,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACjD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC3F,IAAI,OAAoD,CAAA;YACxD,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE;gBAAE,OAAO,SAAS,CAAA;YAC5E,IAAI,OAAO,CAAC,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC1D,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzD,CAAC;KACF,CAAA;AACH,CAAC;AAaD,wEAAwE;AACxE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CAAC,8EAA8E,CAAC,CAAA;QACrF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAuC,EAAE,CAAA;IACtD,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,GAAG,GAAe,KAAK,EAAE,OAAO,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,GAAG,cAAc,GAAG,KAAK,EAAE,EAAE,CAAA;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAA;YACxC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACxB,MAAM,MAAM,CAAA;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAA;QACzG,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC/E,OAAO,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAA;IAC/B,CAAC,CAAA;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAmB;IAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAChD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CACjC,OAAmB,EACnB,MAA0B,EAC1B,OAA4B;IAE5B,MAAM,MAAM,GAAwB,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAA;IAC3G,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;IACzG,OAAO,MAAM,CAAA;AACf,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;IACjC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACxF,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAA;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B;IAC7C,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1H,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAA;AAC9G,CAAC;AAED,4DAA4D;AAC5D,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;IAC5C,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,aAAa,CAAC,OAA4B;IACjD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;IACpG,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAC9D,CAAC;AAED,8BAA8B;AAC9B,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IAC5E,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC/B,IAAI,EAAE;aACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAClE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAA;AACxC,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC","sourcesContent":["import { createHash, createHmac, randomBytes, timingSafeEqual } from \"node:crypto\"\nimport { inputDeclined } from \"../errors.ts\"\nimport type { AskHandler, AskHandlerRequest } from \"../invoke.ts\"\nimport type { JsonSchema } from \"../registry.ts\"\n\n/**\n * ctx.ask 의 MCP 구현: Multi Round-Trip Requests (MCP 2026-07-28, basic/patterns/mrtr). transport · SDK 무관.\n *\n * stateless: 라운드마다 핸들러를 처음부터 다시 실행한다. ctx.ask 는 호출 순서대로 키 ask-0 · ask-1 · … 를 받고,\n * 답 (재시도의 inputResponses · 이전 라운드의 requestState) 이 있으면 그 값으로 resolve, 없으면 라운드를 멈추고\n * InputRequiredResult (elicitation/create form) 를 돌려준다. 서버 메모리에 대기 상태를 두지 않는다.\n * 그래서 ctx.ask 이전의 핸들러 코드는 라운드마다 다시 실행된다 (부작용은 ask 뒤에 둔다).\n *\n * requestState = 이전 라운드에서 받은 답 (2번째 이후 ask 에만 필요). HMAC-SHA256 서명 · 만료 · 바인딩\n * (principal · 도구 · 명령어 · args 다이제스트). 서명만 (암호화 아님): 클라이언트 자신의 답만 담는다.\n */\n\n/** 임베드 elicitation 요청 (InputRequests 의 값) */\nexport interface ElicitationRequest {\n  method: \"elicitation/create\"\n  params: { mode: \"form\"; message: string; requestedSchema: JsonSchema }\n}\n\n/** MCP InputRequiredResult (tools/call 결과). SDK 타입 비의존 */\nexport interface InputRequiredResult {\n  resultType: \"input_required\"\n  /** 키 = ask-<호출 순서>. 클라이언트는 같은 키로 inputResponses 를 채워 같은 tools/call 을 재시도 */\n  inputRequests: Record<string, ElicitationRequest>\n  /** 있으면 재시도에 그대로 echo */\n  requestState?: string\n}\n\n/** 한 라운드의 MRTR 입력. transport 가 요청에서 채운다 */\nexport interface InputRound {\n  /** 요청의 clientCapabilities 에 elicitation (form) 선언. false = ctx.ask → INPUT_UNAVAILABLE */\n  elicitation: boolean\n  /** 재시도의 inputResponses (bare ElicitResult). 첫 호출 = undefined */\n  inputResponses?: Record<string, unknown>\n  /** 재시도의 requestState 원문 */\n  requestState?: string\n}\n\nexport const ASK_KEY_PREFIX = \"ask-\"\n\n/** confirm 요청의 requestedSchema. 승인 = action accept + content.confirm === true */\nexport const CONFIRM_REQUESTED_SCHEMA: JsonSchema = {\n  type: \"object\",\n  properties: { confirm: { type: \"boolean\", title: \"Confirm\", description: \"true to proceed\" } },\n  required: [\"confirm\"],\n}\n\n/** requestState 유효 기간 (사람이 답하는 시간) */\nexport const REQUEST_STATE_TTL_MS = 600_000\n\n/** requestState 가 묶이는 호출. 다른 주체 · 도구 · 명령어 · args 에서 제시하면 거부 */\nexport interface RequestStateBinding {\n  principal: string\n  tool: string\n  command: string\n  args: unknown\n}\n\nexport interface RequestStateSigner {\n  mint(answers: Record<string, unknown>, binding: RequestStateBinding): string\n  /** 검증된 답. 서명 · 만료 · 바인딩 불일치 · 형식 오류 = undefined */\n  verify(state: string, binding: RequestStateBinding): Record<string, unknown> | undefined\n}\n\nexport interface RequestStateSignerOptions {\n  /** HMAC 키, 32바이트 이상. 기본 = 프로세스별 임의 키 (여러 인스턴스 배포는 공유 키 필요) */\n  key?: string | Uint8Array\n  ttlMs?: number\n  now?: () => number\n}\n\nconst STATE_VERSION = \"m1\"\n\nexport function createRequestStateSigner(options: RequestStateSignerOptions = {}): RequestStateSigner {\n  const key = options.key === undefined ? randomBytes(32) : Buffer.from(options.key)\n  if (key.length < 32) throw new RangeError(\"requestStateKey must be at least 32 bytes\")\n  const ttlMs = options.ttlMs ?? REQUEST_STATE_TTL_MS\n  const now = options.now ?? Date.now\n  const mac = (body: string) => createHmac(\"sha256\", key).update(`mext.requestState:${body}`).digest()\n  return {\n    mint(answers, binding) {\n      const body = b64url(JSON.stringify({ exp: now() + ttlMs, b: bindingDigest(binding), a: answers }))\n      return `${STATE_VERSION}.${body}.${b64url(mac(body))}`\n    },\n    verify(state, binding) {\n      const [version, body, signature, ...rest] = state.split(\".\")\n      if (version !== STATE_VERSION || body === undefined || signature === undefined || rest.length > 0) return undefined\n      const expected = mac(body)\n      const given = Buffer.from(signature, \"base64url\")\n      if (given.length !== expected.length || !timingSafeEqual(given, expected)) return undefined\n      let payload: { exp?: unknown; b?: unknown; a?: unknown }\n      try {\n        payload = JSON.parse(Buffer.from(body, \"base64url\").toString(\"utf8\"))\n      } catch {\n        return undefined\n      }\n      if (typeof payload.exp !== \"number\" || payload.exp < now()) return undefined\n      if (payload.b !== bindingDigest(binding)) return undefined\n      return isPlainObject(payload.a) ? payload.a : undefined\n    },\n  }\n}\n\nexport interface AskSession {\n  /** invoke 의 ask 로 주입 */\n  ask: AskHandler\n  /** 답이 없어 이번 라운드를 멈춘 요청 */\n  readonly pending: Record<string, ElicitationRequest>\n  /** 이번 라운드에서 사용한 답 (다음 requestState 에 실림) */\n  readonly used: Record<string, unknown>\n  /** 대기 요청이 생기면 abort (핸들러 signal 에 연결) */\n  readonly signal: AbortSignal\n}\n\n/** 대기 요청이 생겨 라운드를 멈출 때 ask 가 던지는 값. 핸들러가 잡아도 결과는 InputRequiredResult */\nexport class InputRequiredSignal extends Error {\n  constructor() {\n    super(\"Input required: this round stops and the client retries with inputResponses.\")\n    this.name = \"InputRequiredSignal\"\n  }\n}\n\n/** 한 라운드의 ask 세션. answers = 재시도의 inputResponses + 검증된 requestState 의 답 */\nexport function createAskSession(answers: Record<string, unknown>): AskSession {\n  const controller = new AbortController()\n  const pending: Record<string, ElicitationRequest> = {}\n  const used: Record<string, unknown> = {}\n  let index = 0\n  const ask: AskHandler = async (request) => {\n    const key = `${ASK_KEY_PREFIX}${index++}`\n    const response = elicitResult(answers[key])\n    if (response === undefined) {\n      pending[key] = elicitation(request)\n      const signal = new InputRequiredSignal()\n      controller.abort(signal)\n      throw signal\n    }\n    used[key] = answers[key]\n    if (request.kind === \"confirm\") return response.action === \"accept\" && response.content?.confirm === true\n    if (response.action !== \"accept\") throw inputDeclined(request.command, \"input\")\n    return response.content ?? {}\n  }\n  return { ask, pending, used, signal: controller.signal }\n}\n\nexport function hasPending(session: AskSession): boolean {\n  return Object.keys(session.pending).length > 0\n}\n\n/** 대기 요청 → InputRequiredResult. 사용한 답이 있으면 서명한 requestState 로 다음 라운드에 넘긴다 */\nexport function inputRequiredResult(\n  session: AskSession,\n  signer: RequestStateSigner,\n  binding: RequestStateBinding,\n): InputRequiredResult {\n  const result: InputRequiredResult = { resultType: \"input_required\", inputRequests: { ...session.pending } }\n  if (Object.keys(session.used).length > 0) result.requestState = signer.mint({ ...session.used }, binding)\n  return result\n}\n\n/** elicitation 결과 형태 (action) 만 답으로 인정. 그 외 = 답 없음 → 다시 요청 */\nfunction elicitResult(value: unknown): { action: \"accept\" | \"decline\" | \"cancel\"; content?: Record<string, unknown> } | undefined {\n  if (!isPlainObject(value)) return undefined\n  const { action, content } = value\n  if (action !== \"accept\" && action !== \"decline\" && action !== \"cancel\") return undefined\n  return isPlainObject(content) ? { action, content } : { action }\n}\n\nfunction elicitation(request: AskHandlerRequest): ElicitationRequest {\n  const requestedSchema = request.kind === \"confirm\" ? CONFIRM_REQUESTED_SCHEMA : elicitationSchema(request.requestedSchema)\n  return { method: \"elicitation/create\", params: { mode: \"form\", message: request.message, requestedSchema } }\n}\n\n/** elicitation requestedSchema 는 $schema 를 제외한 평탄 객체 스키마 */\nfunction elicitationSchema(schema: JsonSchema): JsonSchema {\n  const { $schema: _schema, ...rest } = schema\n  return rest\n}\n\nfunction bindingDigest(binding: RequestStateBinding): string {\n  const text = stableStringify([binding.principal, binding.tool, binding.command, binding.args ?? {}])\n  return createHash(\"sha256\").update(text).digest(\"base64url\")\n}\n\n/** 키 정렬 JSON (args 다이제스트용) */\nfunction stableStringify(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(stableStringify).join(\",\")}]`\n  if (isPlainObject(value)) {\n    const entries = Object.keys(value)\n      .sort()\n      .filter((k) => value[k] !== undefined)\n      .map((k) => `${JSON.stringify(k)}:${stableStringify(value[k])}`)\n    return `{${entries.join(\",\")}}`\n  }\n  return JSON.stringify(value) ?? \"null\"\n}\n\nfunction b64url(value: string | Buffer): string {\n  return Buffer.from(value).toString(\"base64url\")\n}\n\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n"]}

package/dist/mcp/server.d.ts

@@ -0,0 +1,58 @@
+import { type AuthInfo, type McpRequestContext, type McpServerFactory } from "@modelcontextprotocol/server";
+import type { MextApp } from "../command.ts";
+import type { Instrumentation, Transport } from "../instrumentation.ts";
+import { type Principal } from "../principal.ts";
+import type { Registry } from "../registry.ts";
+import { type ToolExposure } from "./dispatch.ts";
+/** tools/list · server/discover 캐시 힌트. 도구 정의는 principal 과 무관하게 고정 → public */
+export declare const TOOLS_LIST_CACHE: {
+    readonly ttlMs: 300000;
+    readonly cacheScope: "public";
+};
+/**
+ * progressToken 있는 요청의 주기 progress 간격 (ms). 마지막 알림 후 이 시간 동안 알림이 없으면 보낸다.
+ * TS SDK 클라이언트 기본 타임아웃 60초 · 프록시 유휴 타임아웃 (보통 60초) 보다 충분히 짧게
+ */
+export declare const PROGRESS_INTERVAL_MS = 15000;
+export interface McpCoreOptions {
+    registry: Registry;
+    /** ctx.app 생성. 처음 필요할 때 한 번 호출 (실패하면 다음 요청에서 재시도) */
+    app?: () => MextApp | Promise<MextApp>;
+    /** 기본 execute */
+    tools?: ToolExposure;
+    /** serverInfo.name. 기본 "mext" */
+    name?: string;
+    /** serverInfo.version. 기본 mext 버전 */
+    version?: string;
+    /**
+     * 요청 주체. 기본 = HTTP transport 가 authInfo 로 넘긴 principal, 없으면 ANONYMOUS.
+     * stdio = localPrincipal()
+     */
+    principal?: Principal | ((ctx: McpRequestContext) => Principal);
+    /**
+     * MRTR requestState 서명 키 (HMAC-SHA256, 32바이트 이상). requestState 는 2번째 이후 ctx.ask 에서만 쓴다.
+     * 기본 = 프로세스별 임의 키. 여러 인스턴스 · 재시작을 넘는 재시도에는 공유 키를 지정한다
+     */
+    requestStateKey?: string | Uint8Array;
+    /** 주기 progress 간격 (ms). 기본 PROGRESS_INTERVAL_MS, 0 = 끔 */
+    progressInterval?: number;
+    /** loadInstrumentation 결과 (onCommandError · span) */
+    instrumentation?: Instrumentation;
+    /** onCommandError · span 의 transport. HTTP · stdio 어댑터가 지정 */
+    transport?: Transport;
+    /**
+     * _meta["dev.mext/manifestHash"] 값. 기본 = registry 명령어로 계산 (mext dev = 스캔 결과).
+     * mext start = manifest.json 의 manifestHash (같은 함수로 계산한 값)
+     */
+    manifestHash?: string;
+}
+/**
+ * Registry → MCP 서버 factory (SDK McpServerFactory). 요청 (HTTP) · 연결 (stdio) 마다 새 McpServer.
+ * HTTP 의 createMcpHandler 와 stdio 의 serveStdio 가 같은 factory 를 쓴다.
+ */
+export declare function createMcpServerFactory(options: McpCoreOptions): McpServerFactory;
+/** registry 명령어 메타데이터의 manifestHash (빌드 manifest 와 같은 계산) */
+export declare function registryManifestHash(registry: Registry): string;
+/** HTTP transport: 검증된 principal → SDK authInfo (토큰 원문은 담지 않는다) */
+export declare function principalAuthInfo(principal: Principal): AuthInfo;
+export declare function principalFromAuthInfo(authInfo: AuthInfo | undefined): Principal | undefined;

package/dist/mcp/server.js

@@ -0,0 +1,204 @@
+import { CLIENT_CAPABILITIES_META_KEY, McpServer, } from "@modelcontextprotocol/server";
+import { ANONYMOUS } from "../principal.js";
+import { VERSION } from "../index.js";
+import { describeCommand, manifestHash } from "../manifest.js";
+import { MANIFEST_HASH_META_KEY } from "./constants.js";
+import { callDispatcher, dispatcherTools } from "./dispatch.js";
+import { createRequestStateSigner } from "./mrtr.js";
+/** tools/list · server/discover 캐시 힌트. 도구 정의는 principal 과 무관하게 고정 → public */
+export const TOOLS_LIST_CACHE = { ttlMs: 300_000, cacheScope: "public" };
+/**
+ * progressToken 있는 요청의 주기 progress 간격 (ms). 마지막 알림 후 이 시간 동안 알림이 없으면 보낸다.
+ * TS SDK 클라이언트 기본 타임아웃 60초 · 프록시 유휴 타임아웃 (보통 60초) 보다 충분히 짧게
+ */
+export const PROGRESS_INTERVAL_MS = 15_000;
+/**
+ * Registry → MCP 서버 factory (SDK McpServerFactory). 요청 (HTTP) · 연결 (stdio) 마다 새 McpServer.
+ * HTTP 의 createMcpHandler 와 stdio 의 serveStdio 가 같은 factory 를 쓴다.
+ */
+export function createMcpServerFactory(options) {
+    const tools = dispatcherTools(options.registry, options.tools ?? "execute");
+    const getApp = memoizeApp(options.app);
+    const serverInfo = { name: options.name ?? "mext", version: options.version ?? VERSION };
+    const signer = createRequestStateSigner(options.requestStateKey === undefined ? {} : { key: options.requestStateKey });
+    const meta = { [MANIFEST_HASH_META_KEY]: options.manifestHash ?? registryManifestHash(options.registry) };
+    return (requestContext) => {
+        const principal = resolvePrincipal(options.principal, requestContext);
+        const server = new McpServer(serverInfo, {
+            capabilities: { tools: { listChanged: false } },
+            cacheHints: { "tools/list": TOOLS_LIST_CACHE, "server/discover": TOOLS_LIST_CACHE },
+        });
+        withDiscoverMeta(server, meta);
+        for (const tool of tools) {
+            server.registerTool(tool.name, {
+                title: tool.annotations.title,
+                description: tool.description,
+                inputSchema: passthroughSchema(tool.inputSchema),
+                annotations: tool.annotations,
+            }, async (args, ctx) => withMeta(await runTool(options, tools, tool, args, ctx, principal, getApp, signer), meta));
+        }
+        return server;
+    };
+}
+/** registry 명령어 메타데이터의 manifestHash (빌드 manifest 와 같은 계산) */
+export function registryManifestHash(registry) {
+    return manifestHash([...registry.commands.values()].map(describeCommand));
+}
+/** 결과 _meta 에 mext 키 추가 (SDK 의 serverInfo 등 기존 _meta 유지) */
+function withMeta(result, meta) {
+    return { ...result, _meta: { ...result._meta, ...meta } };
+}
+/**
+ * server/discover 결과에 _meta 추가. SDK 의 discover handler 는 McpServer 생성 후 transport 진입점이
+ * (재)설치하고 매번 server._ondiscover() 를 부르므로 인스턴스 메서드를 감싼다 (공개 API 에 discover _meta 옵션 없음)
+ */
+function withDiscoverMeta(server, meta) {
+    const inner = server.server;
+    const original = inner._ondiscover;
+    if (typeof original !== "function")
+        return;
+    inner._ondiscover = function () {
+        return withMeta(original.call(inner), meta);
+    };
+}
+async function runTool(options, tools, tool, args, ctx, principal, getApp, signer) {
+    const progress = progressReporter(ctx, options.progressInterval ?? PROGRESS_INTERVAL_MS);
+    try {
+        const app = await getApp();
+        const result = await callDispatcher(options.registry, tool, args, {
+            principal,
+            signal: ctx.mcpReq.signal,
+            ...(progress ? { progress: progress.report } : {}),
+            app,
+            tools,
+            input: { ...inputRound(ctx), signer },
+            ...(options.instrumentation ? { instrumentation: options.instrumentation, traceContext: traceCarrier(ctx) } : {}),
+            ...(options.transport ? { transport: options.transport } : {}),
+        });
+        return result;
+    }
+    finally {
+        progress?.stop();
+    }
+}
+/** 요청의 MRTR 입력: elicitation (form) 선언 · inputResponses · requestState (SDK 가 params 에서 분리) */
+function inputRound(ctx) {
+    const envelope = ctx.mcpReq.envelope;
+    const capabilities = envelope?.[CLIENT_CAPABILITIES_META_KEY];
+    const state = ctx.mcpReq.requestState();
+    return {
+        elicitation: declaresFormElicitation(capabilities?.elicitation),
+        ...(ctx.mcpReq.inputResponses ? { inputResponses: ctx.mcpReq.inputResponses } : {}),
+        ...(typeof state === "string" ? { requestState: state } : {}),
+    };
+}
+/** D6: params._meta 의 W3C trace context (traceparent · tracestate · baggage). 등록된 propagator 가 해석 */
+function traceCarrier(ctx) {
+    const meta = ctx.mcpReq._meta;
+    let carrier;
+    for (const key of ["traceparent", "tracestate", "baggage"]) {
+        const value = meta?.[key];
+        if (typeof value === "string")
+            (carrier ??= {})[key] = value;
+    }
+    return carrier;
+}
+/** elicitation.form 선언 또는 mode 없는 elicitation: {} (SDK 와 같은 해석). 2025 레거시 요청 = envelope 없음 → false */
+function declaresFormElicitation(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const modes = value;
+    return modes.form !== undefined || modes.url === undefined;
+}
+/**
+ * ctx.progress → notifications/progress. 요청에 progressToken 이 있을 때만 (없으면 undefined = 무시).
+ * HTTP 는 progressToken 이 있는 요청을 SSE 로 응답하므로 알림이 스트림으로 간다.
+ * 주기 progress: 마지막 알림 후 intervalMs 동안 알림이 없으면 마지막 total · message 를 다시 보낸다 (keepalive).
+ * progress 값은 항상 증가 (사양 MUST): 증가하지 않는 값 · keepalive 는 직전 값에 아주 작은 값을 더한다.
+ */
+function progressReporter(ctx, intervalMs) {
+    const token = ctx.mcpReq._meta?.progressToken;
+    if (token === undefined)
+        return undefined;
+    let last;
+    let timer;
+    let stopped = false;
+    const schedule = () => {
+        if (timer !== undefined)
+            clearTimeout(timer);
+        if (intervalMs > 0 && !stopped)
+            timer = setTimeout(() => report({ ...(last ?? { progress: 0 }) }), intervalMs);
+    };
+    const report = (update) => {
+        if (stopped || ctx.mcpReq.signal.aborted)
+            return;
+        const progress = last === undefined || update.progress > last.progress ? update.progress : increase(last.progress);
+        last = { progress, ...(update.total !== undefined ? { total: update.total } : {}), ...(update.message !== undefined ? { message: update.message } : {}) };
+        const params = { progressToken: token, ...last };
+        void ctx.mcpReq.notify({ method: "notifications/progress", params }).catch(() => { });
+        schedule();
+    };
+    schedule();
+    return {
+        report,
+        stop() {
+            stopped = true;
+            if (timer !== undefined)
+                clearTimeout(timer);
+        },
+    };
+}
+/** 직전 값보다 큰 가장 가까운 값 (표시에는 드러나지 않는 크기) */
+function increase(value) {
+    return value + Math.max(Math.abs(value), 1) * 1e-9;
+}
+/* principal 은 SDK 의 pass-through authInfo 로 transport → factory 에 전달 */
+const PRINCIPAL_KEY = "mext.principal";
+/** HTTP transport: 검증된 principal → SDK authInfo (토큰 원문은 담지 않는다) */
+export function principalAuthInfo(principal) {
+    return { token: "", clientId: principal.id, scopes: [...principal.scopes], extra: { [PRINCIPAL_KEY]: principal } };
+}
+export function principalFromAuthInfo(authInfo) {
+    const value = authInfo?.extra?.[PRINCIPAL_KEY];
+    return isPrincipal(value) ? value : undefined;
+}
+function resolvePrincipal(option, ctx) {
+    if (typeof option === "function")
+        return option(ctx);
+    if (option)
+        return option;
+    return principalFromAuthInfo(ctx.authInfo) ?? ANONYMOUS;
+}
+function isPrincipal(value) {
+    const p = value;
+    return typeof p?.id === "string" && typeof p.kind === "string" && Array.isArray(p.scopes);
+}
+function memoizeApp(factory) {
+    if (!factory)
+        return async () => ({});
+    let pending;
+    return () => {
+        pending ??= Promise.resolve()
+            .then(factory)
+            .catch((error) => {
+            pending = undefined;
+            throw error;
+        });
+        return pending;
+    };
+}
+/**
+ * 고정 JSON Schema 를 그대로 광고하고 검증은 하지 않는 Standard Schema.
+ * dispatcher 인자 검증은 callDispatcher 가 구조화 오류 (INVALID_ARGUMENT) 로 수행한다.
+ */
+function passthroughSchema(schema) {
+    return {
+        "~standard": {
+            version: 1,
+            vendor: "mext",
+            validate: (value) => ({ value: value }),
+            jsonSchema: { input: () => schema, output: () => schema },
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,SAAS,GAQV,MAAM,8BAA8B,CAAA;AAGrC,OAAO,EAAE,SAAS,EAAkB,MAAM,iBAAiB,CAAA;AAE3D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,eAAe,EAA0C,MAAM,eAAe,CAAA;AACvG,OAAO,EAAE,wBAAwB,EAA4C,MAAM,WAAW,CAAA;AAE9F,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAW,CAAA;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAA;AAoC1C;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAuB;IAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,CAAA;IACxF,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;IACtH,MAAM,IAAI,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAA;IACzG,OAAO,CAAC,cAAc,EAAE,EAAE;QACxB,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE;YACvC,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE;YAC/C,UAAU,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE;SACpF,CAAC,CAAA;QACF,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;gBACE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC;gBAChD,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,EACD,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAC/G,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,QAAkB;IACrD,OAAO,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,4DAA4D;AAC5D,SAAS,QAAQ,CAAgD,MAAS,EAAE,IAA6B;IACvG,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,CAAA;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAiB,EAAE,IAA6B;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAoE,CAAA;IACzF,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAA;IAClC,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAM;IAC1C,KAAK,CAAC,WAAW,GAAG;QAClB,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAwC,EAAE,IAAI,CAAC,CAAA;IACpF,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAuB,EACvB,KAAgC,EAChC,IAAoB,EACpB,IAAa,EACb,GAAkB,EAClB,SAAoB,EACpB,MAA8B,EAC9B,MAA0B;IAE1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAA;IACxF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAA;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;YAChE,SAAS;YACT,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;YACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG;YACH,KAAK;YACL,KAAK,EAAE,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE;YACrC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjH,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAA;QACF,OAAO,MAA8C,CAAA;IACvD,CAAC;YAAS,CAAC;QACT,QAAQ,EAAE,IAAI,EAAE,CAAA;IAClB,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,SAAS,UAAU,CAAC,GAAkB;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAA+C,CAAA;IAC3E,MAAM,YAAY,GAAG,QAAQ,EAAE,CAAC,4BAA4B,CAA0C,CAAA;IACtG,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAA;IACvC,OAAO;QACL,WAAW,EAAE,uBAAuB,CAAC,YAAY,EAAE,WAAW,CAAC;QAC/D,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAA;AACH,CAAC;AAED,qGAAqG;AACrG,SAAS,YAAY,CAAC,GAAkB;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAA4C,CAAA;IACpE,IAAI,OAA2C,CAAA;IAC/C,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAC9D,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,sGAAsG;AACtG,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,MAAM,KAAK,GAAG,KAA0C,CAAA;IACxD,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,GAAkB,EAClB,UAAkB;IAElB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,IAAI,IAAgC,CAAA;IACpC,IAAI,KAAgD,CAAA;IACpD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC5C,IAAI,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO;YAAE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAA;IAChH,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAE,EAAE;QACxC,IAAI,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YAAE,OAAM;QAChD,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClH,IAAI,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QACzJ,MAAM,MAAM,GAA4B,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAA;QACzE,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpF,QAAQ,EAAE,CAAA;IACZ,CAAC,CAAA;IACD,QAAQ,EAAE,CAAA;IACV,OAAO;QACL,MAAM;QACN,IAAI;YACF,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9C,CAAC;KACF,CAAA;AACH,CAAC;AAED,0CAA0C;AAC1C,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;AACpD,CAAC;AAED,wEAAwE;AAExE,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAEtC,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,SAAoB;IACpD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,EAAE,CAAA;AACpH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAA8B;IAClE,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,CAAA;IAC9C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAmC,EAAE,GAAsB;IACnF,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,OAAO,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,CAAC,GAAG,KAAuC,CAAA;IACjD,OAAO,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAC3F,CAAC;AAED,SAAS,UAAU,CAAC,OAA8B;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAY,CAAA;IAChD,IAAI,OAAqC,CAAA;IACzC,OAAO,GAAG,EAAE;QACV,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE;aAC1B,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACJ,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,OAAO;QACL,WAAW,EAAE;YACX,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC;YAC3E,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;SAC1D;KACF,CAAA;AACH,CAAC","sourcesContent":["import {\n  CLIENT_CAPABILITIES_META_KEY,\n  McpServer,\n  type AuthInfo,\n  type CallToolResult,\n  type InputRequiredResult,\n  type McpRequestContext,\n  type McpServerFactory,\n  type ServerContext,\n  type StandardSchemaWithJSON,\n} from \"@modelcontextprotocol/server\"\nimport type { MextApp, ProgressUpdate } from \"../command.ts\"\nimport type { Instrumentation, Transport } from \"../instrumentation.ts\"\nimport { ANONYMOUS, type Principal } from \"../principal.ts\"\nimport type { JsonSchema, Registry } from \"../registry.ts\"\nimport { VERSION } from \"../index.ts\"\nimport { describeCommand, manifestHash } from \"../manifest.ts\"\nimport { MANIFEST_HASH_META_KEY } from \"./constants.ts\"\nimport { callDispatcher, dispatcherTools, type DispatcherTool, type ToolExposure } from \"./dispatch.ts\"\nimport { createRequestStateSigner, type InputRound, type RequestStateSigner } from \"./mrtr.ts\"\n\n/** tools/list · server/discover 캐시 힌트. 도구 정의는 principal 과 무관하게 고정 → public */\nexport const TOOLS_LIST_CACHE = { ttlMs: 300_000, cacheScope: \"public\" } as const\n\n/**\n * progressToken 있는 요청의 주기 progress 간격 (ms). 마지막 알림 후 이 시간 동안 알림이 없으면 보낸다.\n * TS SDK 클라이언트 기본 타임아웃 60초 · 프록시 유휴 타임아웃 (보통 60초) 보다 충분히 짧게\n */\nexport const PROGRESS_INTERVAL_MS = 15_000\n\n\nexport interface McpCoreOptions {\n  registry: Registry\n  /** ctx.app 생성. 처음 필요할 때 한 번 호출 (실패하면 다음 요청에서 재시도) */\n  app?: () => MextApp | Promise<MextApp>\n  /** 기본 execute */\n  tools?: ToolExposure\n  /** serverInfo.name. 기본 \"mext\" */\n  name?: string\n  /** serverInfo.version. 기본 mext 버전 */\n  version?: string\n  /**\n   * 요청 주체. 기본 = HTTP transport 가 authInfo 로 넘긴 principal, 없으면 ANONYMOUS.\n   * stdio = localPrincipal()\n   */\n  principal?: Principal | ((ctx: McpRequestContext) => Principal)\n  /**\n   * MRTR requestState 서명 키 (HMAC-SHA256, 32바이트 이상). requestState 는 2번째 이후 ctx.ask 에서만 쓴다.\n   * 기본 = 프로세스별 임의 키. 여러 인스턴스 · 재시작을 넘는 재시도에는 공유 키를 지정한다\n   */\n  requestStateKey?: string | Uint8Array\n  /** 주기 progress 간격 (ms). 기본 PROGRESS_INTERVAL_MS, 0 = 끔 */\n  progressInterval?: number\n  /** loadInstrumentation 결과 (onCommandError · span) */\n  instrumentation?: Instrumentation\n  /** onCommandError · span 의 transport. HTTP · stdio 어댑터가 지정 */\n  transport?: Transport\n  /**\n   * _meta[\"dev.mext/manifestHash\"] 값. 기본 = registry 명령어로 계산 (mext dev = 스캔 결과).\n   * mext start = manifest.json 의 manifestHash (같은 함수로 계산한 값)\n   */\n  manifestHash?: string\n}\n\n/**\n * Registry → MCP 서버 factory (SDK McpServerFactory). 요청 (HTTP) · 연결 (stdio) 마다 새 McpServer.\n * HTTP 의 createMcpHandler 와 stdio 의 serveStdio 가 같은 factory 를 쓴다.\n */\nexport function createMcpServerFactory(options: McpCoreOptions): McpServerFactory {\n  const tools = dispatcherTools(options.registry, options.tools ?? \"execute\")\n  const getApp = memoizeApp(options.app)\n  const serverInfo = { name: options.name ?? \"mext\", version: options.version ?? VERSION }\n  const signer = createRequestStateSigner(options.requestStateKey === undefined ? {} : { key: options.requestStateKey })\n  const meta = { [MANIFEST_HASH_META_KEY]: options.manifestHash ?? registryManifestHash(options.registry) }\n  return (requestContext) => {\n    const principal = resolvePrincipal(options.principal, requestContext)\n    const server = new McpServer(serverInfo, {\n      capabilities: { tools: { listChanged: false } },\n      cacheHints: { \"tools/list\": TOOLS_LIST_CACHE, \"server/discover\": TOOLS_LIST_CACHE },\n    })\n    withDiscoverMeta(server, meta)\n    for (const tool of tools) {\n      server.registerTool(\n        tool.name,\n        {\n          title: tool.annotations.title,\n          description: tool.description,\n          inputSchema: passthroughSchema(tool.inputSchema),\n          annotations: tool.annotations,\n        },\n        async (args, ctx) => withMeta(await runTool(options, tools, tool, args, ctx, principal, getApp, signer), meta),\n      )\n    }\n    return server\n  }\n}\n\n/** registry 명령어 메타데이터의 manifestHash (빌드 manifest 와 같은 계산) */\nexport function registryManifestHash(registry: Registry): string {\n  return manifestHash([...registry.commands.values()].map(describeCommand))\n}\n\n/** 결과 _meta 에 mext 키 추가 (SDK 의 serverInfo 등 기존 _meta 유지) */\nfunction withMeta<T extends { _meta?: Record<string, unknown> }>(result: T, meta: Record<string, unknown>): T {\n  return { ...result, _meta: { ...result._meta, ...meta } }\n}\n\n/**\n * server/discover 결과에 _meta 추가. SDK 의 discover handler 는 McpServer 생성 후 transport 진입점이\n * (재)설치하고 매번 server._ondiscover() 를 부르므로 인스턴스 메서드를 감싼다 (공개 API 에 discover _meta 옵션 없음)\n */\nfunction withDiscoverMeta(server: McpServer, meta: Record<string, unknown>): void {\n  const inner = server.server as unknown as { _ondiscover?: () => Record<string, unknown> }\n  const original = inner._ondiscover\n  if (typeof original !== \"function\") return\n  inner._ondiscover = function (this: unknown) {\n    return withMeta(original.call(inner) as { _meta?: Record<string, unknown> }, meta)\n  }\n}\n\nasync function runTool(\n  options: McpCoreOptions,\n  tools: readonly DispatcherTool[],\n  tool: DispatcherTool,\n  args: unknown,\n  ctx: ServerContext,\n  principal: Principal,\n  getApp: () => Promise<MextApp>,\n  signer: RequestStateSigner,\n): Promise<CallToolResult | InputRequiredResult> {\n  const progress = progressReporter(ctx, options.progressInterval ?? PROGRESS_INTERVAL_MS)\n  try {\n    const app = await getApp()\n    const result = await callDispatcher(options.registry, tool, args, {\n      principal,\n      signal: ctx.mcpReq.signal,\n      ...(progress ? { progress: progress.report } : {}),\n      app,\n      tools,\n      input: { ...inputRound(ctx), signer },\n      ...(options.instrumentation ? { instrumentation: options.instrumentation, traceContext: traceCarrier(ctx) } : {}),\n      ...(options.transport ? { transport: options.transport } : {}),\n    })\n    return result as CallToolResult | InputRequiredResult\n  } finally {\n    progress?.stop()\n  }\n}\n\n/** 요청의 MRTR 입력: elicitation (form) 선언 · inputResponses · requestState (SDK 가 params 에서 분리) */\nfunction inputRound(ctx: ServerContext): InputRound {\n  const envelope = ctx.mcpReq.envelope as Record<string, unknown> | undefined\n  const capabilities = envelope?.[CLIENT_CAPABILITIES_META_KEY] as { elicitation?: unknown } | undefined\n  const state = ctx.mcpReq.requestState()\n  return {\n    elicitation: declaresFormElicitation(capabilities?.elicitation),\n    ...(ctx.mcpReq.inputResponses ? { inputResponses: ctx.mcpReq.inputResponses } : {}),\n    ...(typeof state === \"string\" ? { requestState: state } : {}),\n  }\n}\n\n/** D6: params._meta 의 W3C trace context (traceparent · tracestate · baggage). 등록된 propagator 가 해석 */\nfunction traceCarrier(ctx: ServerContext): Record<string, string> | undefined {\n  const meta = ctx.mcpReq._meta as Record<string, unknown> | undefined\n  let carrier: Record<string, string> | undefined\n  for (const key of [\"traceparent\", \"tracestate\", \"baggage\"]) {\n    const value = meta?.[key]\n    if (typeof value === \"string\") (carrier ??= {})[key] = value\n  }\n  return carrier\n}\n\n/** elicitation.form 선언 또는 mode 없는 elicitation: {} (SDK 와 같은 해석). 2025 레거시 요청 = envelope 없음 → false */\nfunction declaresFormElicitation(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\" || Array.isArray(value)) return false\n  const modes = value as { form?: unknown; url?: unknown }\n  return modes.form !== undefined || modes.url === undefined\n}\n\n/**\n * ctx.progress → notifications/progress. 요청에 progressToken 이 있을 때만 (없으면 undefined = 무시).\n * HTTP 는 progressToken 이 있는 요청을 SSE 로 응답하므로 알림이 스트림으로 간다.\n * 주기 progress: 마지막 알림 후 intervalMs 동안 알림이 없으면 마지막 total · message 를 다시 보낸다 (keepalive).\n * progress 값은 항상 증가 (사양 MUST): 증가하지 않는 값 · keepalive 는 직전 값에 아주 작은 값을 더한다.\n */\nfunction progressReporter(\n  ctx: ServerContext,\n  intervalMs: number,\n): { report: (update: ProgressUpdate) => void; stop: () => void } | undefined {\n  const token = ctx.mcpReq._meta?.progressToken\n  if (token === undefined) return undefined\n  let last: ProgressUpdate | undefined\n  let timer: ReturnType<typeof setTimeout> | undefined\n  let stopped = false\n  const schedule = () => {\n    if (timer !== undefined) clearTimeout(timer)\n    if (intervalMs > 0 && !stopped) timer = setTimeout(() => report({ ...(last ?? { progress: 0 }) }), intervalMs)\n  }\n  const report = (update: ProgressUpdate) => {\n    if (stopped || ctx.mcpReq.signal.aborted) return\n    const progress = last === undefined || update.progress > last.progress ? update.progress : increase(last.progress)\n    last = { progress, ...(update.total !== undefined ? { total: update.total } : {}), ...(update.message !== undefined ? { message: update.message } : {}) }\n    const params: Record<string, unknown> = { progressToken: token, ...last }\n    void ctx.mcpReq.notify({ method: \"notifications/progress\", params }).catch(() => {})\n    schedule()\n  }\n  schedule()\n  return {\n    report,\n    stop() {\n      stopped = true\n      if (timer !== undefined) clearTimeout(timer)\n    },\n  }\n}\n\n/** 직전 값보다 큰 가장 가까운 값 (표시에는 드러나지 않는 크기) */\nfunction increase(value: number): number {\n  return value + Math.max(Math.abs(value), 1) * 1e-9\n}\n\n/* principal 은 SDK 의 pass-through authInfo 로 transport → factory 에 전달 */\n\nconst PRINCIPAL_KEY = \"mext.principal\"\n\n/** HTTP transport: 검증된 principal → SDK authInfo (토큰 원문은 담지 않는다) */\nexport function principalAuthInfo(principal: Principal): AuthInfo {\n  return { token: \"\", clientId: principal.id, scopes: [...principal.scopes], extra: { [PRINCIPAL_KEY]: principal } }\n}\n\nexport function principalFromAuthInfo(authInfo: AuthInfo | undefined): Principal | undefined {\n  const value = authInfo?.extra?.[PRINCIPAL_KEY]\n  return isPrincipal(value) ? value : undefined\n}\n\nfunction resolvePrincipal(option: McpCoreOptions[\"principal\"], ctx: McpRequestContext): Principal {\n  if (typeof option === \"function\") return option(ctx)\n  if (option) return option\n  return principalFromAuthInfo(ctx.authInfo) ?? ANONYMOUS\n}\n\nfunction isPrincipal(value: unknown): value is Principal {\n  const p = value as Partial<Principal> | undefined\n  return typeof p?.id === \"string\" && typeof p.kind === \"string\" && Array.isArray(p.scopes)\n}\n\nfunction memoizeApp(factory: McpCoreOptions[\"app\"]): () => Promise<MextApp> {\n  if (!factory) return async () => ({}) as MextApp\n  let pending: Promise<MextApp> | undefined\n  return () => {\n    pending ??= Promise.resolve()\n      .then(factory)\n      .catch((error: unknown) => {\n        pending = undefined\n        throw error\n      })\n    return pending\n  }\n}\n\n/**\n * 고정 JSON Schema 를 그대로 광고하고 검증은 하지 않는 Standard Schema.\n * dispatcher 인자 검증은 callDispatcher 가 구조화 오류 (INVALID_ARGUMENT) 로 수행한다.\n */\nfunction passthroughSchema(schema: JsonSchema): StandardSchemaWithJSON<Record<string, unknown>> {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"mext\",\n      validate: (value: unknown) => ({ value: value as Record<string, unknown> }),\n      jsonSchema: { input: () => schema, output: () => schema },\n    },\n  }\n}\n"]}

package/dist/mcp/stdio.d.ts

@@ -0,0 +1,57 @@
+import type { Readable } from "node:stream";
+import { Writable } from "node:stream";
+import type { MextApp } from "../command.ts";
+import { type Principal } from "../principal.ts";
+import type { Registry } from "../registry.ts";
+import type { Instrumentation } from "../instrumentation.ts";
+import type { ToolExposure } from "./dispatch.ts";
+import { type McpCoreOptions } from "./server.ts";
+export interface McpStdioOptions {
+    registry: Registry;
+    app?: () => MextApp | Promise<MextApp>;
+    tools?: ToolExposure;
+    /** serverInfo.name. 기본 "mext" */
+    name?: string;
+    /** 연결 주체 (로컬 모드). 기본 localPrincipal() */
+    principal?: Principal;
+    /** 기본 process.stdin */
+    stdin?: Readable;
+    /**
+     * MCP 메시지 출력. 기본 process.stdout.
+     * D4: process.stdout 을 쓰는 경우 redirectStdout() 의 wire 를 넘겨 핸들러 출력이 메시지와 섞이지 않게 한다
+     */
+    stdout?: Writable;
+    /** 응답에 영향 없는 오류 보고 (SDK 내부 오류 · 깨진 메시지) */
+    onerror?: (error: Error) => void;
+    /** MRTR requestState 서명 키 (createMcpServerFactory 와 같음) */
+    requestStateKey?: McpCoreOptions["requestStateKey"];
+    /** 주기 progress 간격 (ms). 0 = 끔 */
+    progressInterval?: number;
+    /** loadInstrumentation 결과 (onCommandError · span, transport = "stdio") */
+    instrumentation?: Instrumentation;
+    /** _meta["dev.mext/manifestHash"]. McpCoreOptions.manifestHash (기본 = registry 로 계산) */
+    manifestHash?: string;
+}
+export interface McpStdioServer {
+    /** stdin EOF · stdout 오류 · close() 로 연결이 끝나면 resolve */
+    closed: Promise<void>;
+    close(): Promise<void>;
+}
+/**
+ * MCP stdio (2026-07-28 · 2025 레거시 모두 SDK serveStdio). 줄 단위 JSON-RPC, 연결 하나 = McpServer 하나.
+ * notifications/cancelled → ctx.signal abort (SDK). stdin EOF = 연결 종료, 진행 중 요청은 abort 되고 응답하지 않는다.
+ * 헤더 검증 · Origin · 바인딩 · Authorization 은 해당 없음. 주체 = 로컬 (kind local).
+ */
+export declare function serveMcpStdio(options: McpStdioOptions): McpStdioServer;
+export interface StdoutRedirect {
+    /** 원래 process.stdout 으로 쓰는 스트림. MCP transport 전용 */
+    wire: Writable;
+    /** process.stdout.write 원복 */
+    restore(): void;
+}
+/**
+ * D4: stdio 모드에서 transport 외의 stdout 쓰기 (console.log · process.stdout.write) 를 stderr 로 돌린다.
+ * 반환된 wire 만 실제 stdout 에 쓴다. 명령어 모듈 import 전에 호출해야 top-level 출력도 막는다.
+ * 자식 프로세스 · fd 1 직접 쓰기 (fs.writeSync(1)) 는 막지 못한다.
+ */
+export declare function redirectStdout(): StdoutRedirect;

package/dist/mcp/stdio.js

@@ -0,0 +1,79 @@
+import { Writable } from "node:stream";
+import { serveStdio, StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import { localPrincipal } from "../principal.js";
+import { createMcpServerFactory } from "./server.js";
+/**
+ * MCP stdio (2026-07-28 · 2025 레거시 모두 SDK serveStdio). 줄 단위 JSON-RPC, 연결 하나 = McpServer 하나.
+ * notifications/cancelled → ctx.signal abort (SDK). stdin EOF = 연결 종료, 진행 중 요청은 abort 되고 응답하지 않는다.
+ * 헤더 검증 · Origin · 바인딩 · Authorization 은 해당 없음. 주체 = 로컬 (kind local).
+ */
+export function serveMcpStdio(options) {
+    const factory = createMcpServerFactory({
+        registry: options.registry,
+        principal: options.principal ?? localPrincipal(),
+        ...(options.app ? { app: options.app } : {}),
+        ...(options.tools ? { tools: options.tools } : {}),
+        ...(options.name ? { name: options.name } : {}),
+        ...(options.requestStateKey !== undefined ? { requestStateKey: options.requestStateKey } : {}),
+        ...(options.progressInterval !== undefined ? { progressInterval: options.progressInterval } : {}),
+        ...(options.instrumentation ? { instrumentation: options.instrumentation } : {}),
+        ...(options.manifestHash !== undefined ? { manifestHash: options.manifestHash } : {}),
+        transport: "stdio",
+    });
+    const transport = new StdioServerTransport(options.stdin, options.stdout);
+    let resolveClosed;
+    const closed = new Promise((resolve) => {
+        resolveClosed = resolve;
+    });
+    const handle = serveStdio(factory, options.onerror ? { transport, onerror: options.onerror } : { transport });
+    // serveStdio 가 onclose 를 동기적으로 설정한 뒤 감싼다 (stdin 이벤트는 비동기)
+    const sdkOnClose = transport.onclose;
+    transport.onclose = () => {
+        try {
+            sdkOnClose?.();
+        }
+        finally {
+            resolveClosed();
+        }
+    };
+    return {
+        closed,
+        async close() {
+            await handle.close();
+            resolveClosed();
+        },
+    };
+}
+/**
+ * D4: stdio 모드에서 transport 외의 stdout 쓰기 (console.log · process.stdout.write) 를 stderr 로 돌린다.
+ * 반환된 wire 만 실제 stdout 에 쓴다. 명령어 모듈 import 전에 호출해야 top-level 출력도 막는다.
+ * 자식 프로세스 · fd 1 직접 쓰기 (fs.writeSync(1)) 는 막지 못한다.
+ */
+export function redirectStdout() {
+    const stdout = process.stdout;
+    const original = stdout.write;
+    const toStderr = (...args) => process.stderr.write.apply(process.stderr, args);
+    stdout.write = toStderr;
+    // EPIPE 등은 wire 의 write 콜백으로 transport 에 전달된다. process.stdout 의 미처리 error 로 죽지 않게
+    const ignore = () => { };
+    stdout.on("error", ignore);
+    const wire = new Writable({
+        write(chunk, _encoding, callback) {
+            const write = original;
+            write.call(stdout, chunk, (error) => callback(error ?? null));
+        },
+    });
+    let restored = false;
+    return {
+        wire,
+        restore() {
+            if (restored)
+                return;
+            restored = true;
+            if (stdout.write === toStderr)
+                stdout.write = original;
+            stdout.off("error", ignore);
+        },
+    };
+}
+//# sourceMappingURL=stdio.js.map

package/dist/mcp/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/mcp/stdio.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAA;AAErF,OAAO,EAAE,cAAc,EAAkB,MAAM,iBAAiB,CAAA;AAIhE,OAAO,EAAE,sBAAsB,EAAuB,MAAM,aAAa,CAAA;AAmCzE;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc,EAAE;QAChD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,SAAS,EAAE,OAAO;KACnB,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IACzE,IAAI,aAA0B,CAAA;IAC9B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC3C,aAAa,GAAG,OAAO,CAAA;IACzB,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IAC7G,0DAA0D;IAC1D,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAA;IACpC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,IAAI,CAAC;YACH,UAAU,EAAE,EAAE,CAAA;QAChB,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,CAAA;QACjB,CAAC;IACH,CAAC,CAAA;IACD,OAAO;QACL,MAAM;QACN,KAAK,CAAC,KAAK;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,aAAa,EAAE,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAA;IAC7B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAe,EAAW,EAAE,CAC9C,OAAO,CAAC,MAAM,CAAC,KAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACpF,MAAM,CAAC,KAAK,GAAG,QAA+B,CAAA;IAC9C,kFAAkF;IAClF,MAAM,MAAM,GAAG,GAAS,EAAE,GAAE,CAAC,CAAA;IAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC1B,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC;QACxB,KAAK,CAAC,KAAsB,EAAE,SAAS,EAAE,QAAQ;YAC/C,MAAM,KAAK,GAAG,QAAqF,CAAA;YACnG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAA;QAC/D,CAAC;KACF,CAAC,CAAA;IACF,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,OAAO;QACL,IAAI;QACJ,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,MAAM,CAAC,KAAK,KAAM,QAAgC;gBAAE,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAA;YAC/E,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["import type { Readable } from \"node:stream\"\nimport { Writable } from \"node:stream\"\nimport { serveStdio, StdioServerTransport } from \"@modelcontextprotocol/server/stdio\"\nimport type { MextApp } from \"../command.ts\"\nimport { localPrincipal, type Principal } from \"../principal.ts\"\nimport type { Registry } from \"../registry.ts\"\nimport type { Instrumentation } from \"../instrumentation.ts\"\nimport type { ToolExposure } from \"./dispatch.ts\"\nimport { createMcpServerFactory, type McpCoreOptions } from \"./server.ts\"\n\nexport interface McpStdioOptions {\n  registry: Registry\n  app?: () => MextApp | Promise<MextApp>\n  tools?: ToolExposure\n  /** serverInfo.name. 기본 \"mext\" */\n  name?: string\n  /** 연결 주체 (로컬 모드). 기본 localPrincipal() */\n  principal?: Principal\n  /** 기본 process.stdin */\n  stdin?: Readable\n  /**\n   * MCP 메시지 출력. 기본 process.stdout.\n   * D4: process.stdout 을 쓰는 경우 redirectStdout() 의 wire 를 넘겨 핸들러 출력이 메시지와 섞이지 않게 한다\n   */\n  stdout?: Writable\n  /** 응답에 영향 없는 오류 보고 (SDK 내부 오류 · 깨진 메시지) */\n  onerror?: (error: Error) => void\n  /** MRTR requestState 서명 키 (createMcpServerFactory 와 같음) */\n  requestStateKey?: McpCoreOptions[\"requestStateKey\"]\n  /** 주기 progress 간격 (ms). 0 = 끔 */\n  progressInterval?: number\n  /** loadInstrumentation 결과 (onCommandError · span, transport = \"stdio\") */\n  instrumentation?: Instrumentation\n  /** _meta[\"dev.mext/manifestHash\"]. McpCoreOptions.manifestHash (기본 = registry 로 계산) */\n  manifestHash?: string\n}\n\nexport interface McpStdioServer {\n  /** stdin EOF · stdout 오류 · close() 로 연결이 끝나면 resolve */\n  closed: Promise<void>\n  close(): Promise<void>\n}\n\n/**\n * MCP stdio (2026-07-28 · 2025 레거시 모두 SDK serveStdio). 줄 단위 JSON-RPC, 연결 하나 = McpServer 하나.\n * notifications/cancelled → ctx.signal abort (SDK). stdin EOF = 연결 종료, 진행 중 요청은 abort 되고 응답하지 않는다.\n * 헤더 검증 · Origin · 바인딩 · Authorization 은 해당 없음. 주체 = 로컬 (kind local).\n */\nexport function serveMcpStdio(options: McpStdioOptions): McpStdioServer {\n  const factory = createMcpServerFactory({\n    registry: options.registry,\n    principal: options.principal ?? localPrincipal(),\n    ...(options.app ? { app: options.app } : {}),\n    ...(options.tools ? { tools: options.tools } : {}),\n    ...(options.name ? { name: options.name } : {}),\n    ...(options.requestStateKey !== undefined ? { requestStateKey: options.requestStateKey } : {}),\n    ...(options.progressInterval !== undefined ? { progressInterval: options.progressInterval } : {}),\n    ...(options.instrumentation ? { instrumentation: options.instrumentation } : {}),\n    ...(options.manifestHash !== undefined ? { manifestHash: options.manifestHash } : {}),\n    transport: \"stdio\",\n  })\n  const transport = new StdioServerTransport(options.stdin, options.stdout)\n  let resolveClosed!: () => void\n  const closed = new Promise<void>((resolve) => {\n    resolveClosed = resolve\n  })\n  const handle = serveStdio(factory, options.onerror ? { transport, onerror: options.onerror } : { transport })\n  // serveStdio 가 onclose 를 동기적으로 설정한 뒤 감싼다 (stdin 이벤트는 비동기)\n  const sdkOnClose = transport.onclose\n  transport.onclose = () => {\n    try {\n      sdkOnClose?.()\n    } finally {\n      resolveClosed()\n    }\n  }\n  return {\n    closed,\n    async close() {\n      await handle.close()\n      resolveClosed()\n    },\n  }\n}\n\nexport interface StdoutRedirect {\n  /** 원래 process.stdout 으로 쓰는 스트림. MCP transport 전용 */\n  wire: Writable\n  /** process.stdout.write 원복 */\n  restore(): void\n}\n\n/**\n * D4: stdio 모드에서 transport 외의 stdout 쓰기 (console.log · process.stdout.write) 를 stderr 로 돌린다.\n * 반환된 wire 만 실제 stdout 에 쓴다. 명령어 모듈 import 전에 호출해야 top-level 출력도 막는다.\n * 자식 프로세스 · fd 1 직접 쓰기 (fs.writeSync(1)) 는 막지 못한다.\n */\nexport function redirectStdout(): StdoutRedirect {\n  const stdout = process.stdout\n  const original = stdout.write\n  const toStderr = (...args: unknown[]): boolean =>\n    (process.stderr.write as (...a: unknown[]) => boolean).apply(process.stderr, args)\n  stdout.write = toStderr as typeof stdout.write\n  // EPIPE 등은 wire 의 write 콜백으로 transport 에 전달된다. process.stdout 의 미처리 error 로 죽지 않게\n  const ignore = (): void => {}\n  stdout.on(\"error\", ignore)\n  const wire = new Writable({\n    write(chunk: Buffer | string, _encoding, callback) {\n      const write = original as (chunk: Buffer | string, done: (error?: Error | null) => void) => boolean\n      write.call(stdout, chunk, (error) => callback(error ?? null))\n    },\n  })\n  let restored = false\n  return {\n    wire,\n    restore() {\n      if (restored) return\n      restored = true\n      if (stdout.write === (toStderr as typeof stdout.write)) stdout.write = original\n      stdout.off(\"error\", ignore)\n    },\n  }\n}\n"]}

package/dist/principal.d.ts

@@ -0,0 +1,16 @@
+/** 요청 주체. 서버가 요청마다 생성 (HTTP · CLI 원격), 로컬 · stdio = kind local */
+export interface Principal {
+    /** "local:obov" | "user_123" | "anonymous" */
+    id: string;
+    kind: "local" | "token" | "anonymous";
+    /** "*" = 전체 */
+    scopes: string[];
+    /** 검증된 토큰 내용. 토큰 원문은 포함하지 않는다 */
+    claims?: Record<string, unknown>;
+}
+/** 인증 없는 주체. scopes 없음 → readOnly 명령어만 */
+export declare const ANONYMOUS: Principal;
+/** 로컬 · stdio 실행의 기본 주체: { id: "local:<OS 사용자>", kind: "local", scopes: ["*"] } */
+export declare function localPrincipal(user?: string): Principal;
+/** "*" = 전체 */
+export declare function hasScope(principal: Principal, scope: string): boolean;