@onyxsecurity/mcp-gateway 2.1.39 → 2.1.41

package/dist/main-Cw-GpTlP.js

@@ -0,0 +1,6 @@
+import{AccessControlBlockError as e,ConfigurationError as t,ProtocolEraMismatchError as n,ProxyConnectionError as r,Server as i,StdioServerTransport as a,compressClientInfo as o,getSessionData as s,initializeTrafficMirror as c,logRequestCounts as l,proxyServer as u,redactCliArgs as d,serveStdio as f,startHTTPServer as ee,upstreamVersionNegotiation as te}from"./upstreamNegotiation-DXOdQ605.js";import{config as p}from"./env-DvKbtn5P.js";import{chownToRealUser as m,extractTraceIdFromHeaders as ne,flushLogs as re,logger as h}from"./logger-C9UQmiLF.js";import{Client as ie,ProtocolError as g,ReadBuffer as _,UnauthorizedError as v,createParser as y,normalizeUrl as b,serializeMessage as x}from"./normalizeUrl-DoppHGlo.js";import{emitKeychainOutcomeLog as ae,emitProxySetupLog as oe,hideBin as se,yargs_default as ce}from"./helpers-BLNSu673.js";import"./providers-ITwJPvLY.js";import{initializeOAuthProviders as le}from"./oauthProvidersClient-DBwig3Kv.js";import"./pkce-DKfQXsGm.js";import{connectWithTransportFallback as ue,discoverAuthServer as de,performOAuthFlow as fe,tryRefreshCachedToken as S}from"./transportDetection-di7mtGu9.js";import{join as pe}from"node:path";import{createHash as me}from"node:crypto";import{chmod as he,mkdir as ge,readFile as _e,rm as C,writeFile as w}from"node:fs/promises";import{StringDecoder as ve}from"node:string_decoder";import{clearInterval as T,setInterval as ye,setTimeout as be}from"node:timers";import xe from"node:util";import{execFileSync as Se,spawn as Ce,spawnSync as we}from"node:child_process";import{createInterface as E}from"node:readline";import{PassThrough as D,Transform as O}from"node:stream";var Te=class extends Event{constructor(e,t){super(e),this.code=t?.code??void 0,this.message=t?.message??void 0}[Symbol.for(`nodejs.util.inspect.custom`)](e,t,n){return n(A(this),t)}[Symbol.for(`Deno.customInspect`)](e,t){return e(A(this),t)}};function Ee(e){let t=globalThis.DOMException;return typeof t==`function`?new t(e,`SyntaxError`):SyntaxError(e)}function k(e){return e instanceof Error?`errors`in e&&Array.isArray(e.errors)?e.errors.map(k).join(`, `):`cause`in e&&e.cause instanceof Error?`${e}: ${k(e.cause)}`:e.message:`${e}`}function A(e){return{type:e.type,message:e.message,code:e.code,defaultPrevented:e.defaultPrevented,cancelable:e.cancelable,timeStamp:e.timeStamp}}var j=e=>{throw TypeError(e)},M=(e,t,n)=>t.has(e)||j(`Cannot `+n),N=(e,t,n)=>(M(e,t,`read from private field`),n?n.call(e):t.get(e)),P=(e,t,n)=>t.has(e)?j(`Cannot add the same private member more than once`):t instanceof WeakSet?t.add(e):t.set(e,n),F=(e,t,n,r)=>(M(e,t,`write to private field`),t.set(e,n),n),I=(e,t,n)=>(M(e,t,`access private method`),n),L,R,z,B,De,V,H,U,W,G,K,q,J,Y,Oe,ke,Ae,je,Me,Ne,X,Pe,Fe,Ie=class extends EventTarget{constructor(e,t){super(),P(this,Y),this.CONNECTING=0,this.OPEN=1,this.CLOSED=2,P(this,L),P(this,R),P(this,z),P(this,B),P(this,De),P(this,V),P(this,H),P(this,U,null),P(this,W),P(this,G),P(this,K,null),P(this,q,null),P(this,J,null),P(this,ke,async e=>{var t;N(this,G).reset();let{body:n,redirected:r,status:i,headers:a}=e;if(i===204){I(this,Y,X).call(this,`Server sent HTTP 204, not reconnecting`,204),this.close();return}if(r?F(this,z,new URL(e.url)):F(this,z,void 0),i!==200){I(this,Y,X).call(this,`Non-200 status code (${i})`,i);return}if(!(a.get(`content-type`)||``).startsWith(`text/event-stream`)){I(this,Y,X).call(this,`Invalid content type, expected "text/event-stream"`,i);return}if(N(this,L)===this.CLOSED)return;F(this,L,this.OPEN);let o=new Event(`open`);if((t=N(this,J))==null||t.call(this,o),this.dispatchEvent(o),typeof n!=`object`||!n||!(`getReader`in n)){I(this,Y,X).call(this,`Invalid response body, expected a web ReadableStream`,i),this.close();return}let s=new TextDecoder,c=n.getReader(),l=!0;do{let{done:e,value:t}=await c.read();t&&N(this,G).feed(s.decode(t,{stream:!e})),e&&(l=!1,N(this,G).reset(),I(this,Y,Pe).call(this))}while(l)}),P(this,Ae,e=>{F(this,W,void 0),!(e.name===`AbortError`||e.type===`aborted`)&&I(this,Y,Pe).call(this,k(e))}),P(this,Me,e=>{typeof e.id==`string`&&F(this,U,e.id);let t=new MessageEvent(e.event||`message`,{data:e.data,origin:N(this,z)?N(this,z).origin:N(this,R).origin,lastEventId:e.id||``});N(this,q)&&(!e.event||e.event===`message`)&&N(this,q).call(this,t),this.dispatchEvent(t)}),P(this,Ne,e=>{F(this,V,e)}),P(this,Fe,()=>{F(this,H,void 0),N(this,L)===this.CONNECTING&&I(this,Y,Oe).call(this)});try{if(e instanceof URL)F(this,R,e);else if(typeof e==`string`)F(this,R,new URL(e,Le()));else throw Error(`Invalid URL`)}catch{throw Ee(`An invalid or illegal string was specified`)}F(this,G,y({onEvent:N(this,Me),onRetry:N(this,Ne)})),F(this,L,this.CONNECTING),F(this,V,3e3),F(this,De,t?.fetch??globalThis.fetch),F(this,B,t?.withCredentials??!1),I(this,Y,Oe).call(this)}get readyState(){return N(this,L)}get url(){return N(this,R).href}get withCredentials(){return N(this,B)}get onerror(){return N(this,K)}set onerror(e){F(this,K,e)}get onmessage(){return N(this,q)}set onmessage(e){F(this,q,e)}get onopen(){return N(this,J)}set onopen(e){F(this,J,e)}addEventListener(e,t,n){let r=t;super.addEventListener(e,r,n)}removeEventListener(e,t,n){let r=t;super.removeEventListener(e,r,n)}close(){N(this,H)&&clearTimeout(N(this,H)),N(this,L)!==this.CLOSED&&(N(this,W)&&N(this,W).abort(),F(this,L,this.CLOSED),F(this,W,void 0))}};L=new WeakMap,R=new WeakMap,z=new WeakMap,B=new WeakMap,De=new WeakMap,V=new WeakMap,H=new WeakMap,U=new WeakMap,W=new WeakMap,G=new WeakMap,K=new WeakMap,q=new WeakMap,J=new WeakMap,Y=new WeakSet,Oe=function(){F(this,L,this.CONNECTING),F(this,W,new AbortController),N(this,De)(N(this,R),I(this,Y,je).call(this)).then(N(this,ke)).catch(N(this,Ae))},ke=new WeakMap,Ae=new WeakMap,je=function(){let e={mode:`cors`,redirect:`follow`,headers:{Accept:`text/event-stream`,...N(this,U)?{"Last-Event-ID":N(this,U)}:void 0},cache:`no-store`,signal:N(this,W)?.signal};return`window`in globalThis&&(e.credentials=this.withCredentials?`include`:`same-origin`),e},Me=new WeakMap,Ne=new WeakMap,X=function(e,t){var n;N(this,L)!==this.CLOSED&&F(this,L,this.CLOSED);let r=new Te(`error`,{code:t,message:e});(n=N(this,K))==null||n.call(this,r),this.dispatchEvent(r)},Pe=function(e,t){var n;if(N(this,L)===this.CLOSED)return;F(this,L,this.CONNECTING);let r=new Te(`error`,{code:t,message:e});(n=N(this,K))==null||n.call(this,r),this.dispatchEvent(r),F(this,H,setTimeout(N(this,Fe),N(this,V)))},Fe=new WeakMap,Ie.CONNECTING=0,Ie.OPEN=1,Ie.CLOSED=2;function Le(){let e=`document`in globalThis?globalThis.document:void 0;return e&&typeof e==`object`&&`baseURI`in e&&typeof e.baseURI==`string`?e.baseURI:void 0}var Re=class{client;enabled;lastBlockReason;serverName;constructor(e){this.enabled=e.enabled,this.client=e.client,this.serverName=e.serverName,h.info(`AccessControlAuthorizer initialized`,{enabled:this.enabled,hasClient:!!this.client,serverName:this.serverName})}getBlockReason(){return this.lastBlockReason?this.lastBlockReason:`MCP server${this.serverName?` '${this.serverName}'`:``} is not authorized for use in your organization and has been blocked by Onyx.`}async isAllowed(){if(!this.enabled)return!0;if(this.client)try{let e=await this.client.authorize();return e.action===`block`?(e.reason?this.lastBlockReason=e.reason:this.lastBlockReason=`MCP server${this.serverName?` '${this.serverName}'`:``} is not authorized for use in your organization and has been blocked by Onyx.`,!1):!0}catch(e){return h.error(`Access control authorization failed with unexpected error`,{error:String(e)}),!0}return h.warn(`No access control client configured, allowing by default`),!0}},ze=class{clientInfoBase64;config;constructor(e){this.config=e,this.clientInfoBase64=this.getClientInfoBase64(),h.info(`AccessControlClient initialized`,{timeoutMs:e.timeoutMs,url:e.url})}async authorize(){try{let e=await this.sendAuthorizeRequest();return h.debug(`Access control check successful`,{action:e.action}),e}catch(e){return h.warn(`Access control check failed, failing open (allowing by default)`,{error:String(e)}),{action:`allow`}}}getClientInfoBase64(){return o(this.config.sessionData)}async sendAuthorizeRequest(){let e=new AbortController,t=setTimeout(()=>e.abort(),this.config.timeoutMs);try{let t=`${this.config.url}/${this.config.apiKey}/mcp/${this.clientInfoBase64}`,n=await fetch(t,{headers:{...this.config.headers},method:`POST`,signal:e.signal});if(!n.ok)throw Error(`Access control service returned ${n.status}: ${n.statusText}`);let r=await n.json();if(!r.action||![`allow`,`block`].includes(r.action))throw Error(`Invalid access control response format: action="${r.action}"`);return r}catch(e){throw e instanceof Error&&e.name===`AbortError`?Error(`Access control check timed out after ${this.config.timeoutMs}ms`):e}finally{clearTimeout(t)}}},Be=class{storageDir;constructor(e){this.storageDir=e.storageDir}async delete(e){let t=b(e),n=this.getFilePath(t);try{await C(n),h.debug(`Deleted stored credentials`,{filePath:n,serverUrl:t})}catch(e){e.code!==`ENOENT`&&h.warn(`Failed to delete stored credentials`,{error:String(e),filePath:n,serverUrl:t})}}hasRefreshToken(e){return!!e.tokens?.refresh_token}hasValidAccessToken(e){return!!e.tokens?.access_token&&!this.isAccessTokenExpired(e)}isAccessTokenExpired(e){if(!e.tokens||!e.tokensObtainedAt)return!0;let{expires_in:t}=e.tokens;if(!t)return!1;let n=new Date(e.tokensObtainedAt).getTime()+t*1e3,r=Date.now(),i=r>=n-3e4;return h.debug(`Checked access token expiration`,{expiresAt:new Date(n).toISOString(),expiresIn:t,isExpired:i,now:new Date(r).toISOString(),obtainedAt:e.tokensObtainedAt}),i}async load(e){let t=b(e),n=this.getFilePath(t);try{let e=await _e(n,`utf-8`),r=JSON.parse(e);if(b(r.serverUrl)!==t){h.warn(`Credential file server URL mismatch`,{expected:t,filePath:n,found:r.serverUrl});return}return h.debug(`Loaded stored credentials`,{clientId:r.clientInfo?.client_id,hasRefreshToken:!!r.tokens?.refresh_token,hasTokens:!!r.tokens,serverUrl:t}),r}catch(e){if(e.code===`ENOENT`){h.debug(`No stored credentials found`,{serverUrl:t});return}h.warn(`Failed to load stored credentials`,{error:String(e),filePath:n,serverUrl:t});return}}async save(e){await this.ensureStorageDir();let t=this.getFilePath(e.serverUrl),n=JSON.stringify(e,null,2);try{await w(t,n,{encoding:`utf-8`,mode:384}),await he(t,384),h.debug(`Saved credentials to disk`,{clientId:e.clientInfo?.client_id,filePath:t,hasTokens:!!e.tokens,serverUrl:e.serverUrl})}catch(n){throw h.error(`Failed to save credentials`,{error:String(n),filePath:t,serverUrl:e.serverUrl}),n}}async update(e,t){let n=b(e),r=await this.load(n),i=new Date().toISOString(),a=r?{...r,...t,serverUrl:n,updatedAt:i}:{createdAt:i,serverUrl:n,updatedAt:i,...t};return await this.save(a),a}async ensureStorageDir(){try{await ge(this.storageDir,{mode:448,recursive:!0})}catch(e){if(e.code!==`EEXIST`)throw e}try{await m(this.storageDir)}catch(e){h.warn(`Failed to fix OAuth storage directory ownership`,{error:String(e),storageDir:this.storageDir})}}generateKey(e){return me(`sha256`).update(e).digest(`hex`).substring(0,16)}getFilePath(e){let t=this.generateKey(e);return pe(this.storageDir,`${t}.json`)}};function Ve(e,t=(...e)=>globalThis.fetch(...e)){return async(n,r)=>{let i=new Headers(r?.headers).has(`Authorization`),a=e=>{let t=new Headers(r?.headers);return e?t.set(`Authorization`,`Bearer ${e}`):i||t.delete(`Authorization`),{...r,headers:t}},o=e.getCurrentBearer(),s=await t(n,a(o));if(!s.ok){let e=``;try{e=(await s.clone().text()).slice(0,500)}catch{}let t={bodySnippet:e,contentType:s.headers.get(`content-type`)??void 0,eventType:`mcp_upstream_non_2xx`,method:String(r?.method??`GET`).toUpperCase(),requestAccept:new Headers(r?.headers).get(`accept`)??void 0,requestHadAuth:!!o||i,status:s.status,url:Ue(n),wwwAuthenticate:s.headers.get(`www-authenticate`)??void 0};s.status===401?h.info(`Upstream returned non-2xx (auth challenge)`,t):h.warn(`Upstream returned non-2xx`,t)}if(s.status===401&&o){h.info(`Upstream returned 401; attempting mid-session silent refresh`,{eventType:`mcp_auth_mid_session_refresh_attempt`});let r=await e.refreshIfPossible(o);r&&r!==o?(h.info(`Silent refresh succeeded mid-session; retrying request`,{eventType:`mcp_auth_mid_session_refresh_succeeded`}),s=await t(n,a(r))):h.warn(`Silent refresh produced no new bearer; passing 401 through`,{eventType:`mcp_auth_mid_session_refresh_failed`})}return s}}function He(e,t,n){let r=n,i=null;return{getCurrentBearer:()=>r,refreshIfPossible:n=>i||(i=(async()=>{try{let i=(await t.load(e))?.tokens?.access_token;if(i&&i!==n)return h.info(`Adopting newer access_token from disk (other process refreshed)`,{eventType:`mcp_auth_disk_bearer_adopted`,serverUrl:e}),r=i,i;let a=await S(e,t);return a?.tokens.access_token?(r=a.tokens.access_token,r):void 0}finally{i=null}})(),i),setBearer:e=>{r=e}}}function Ue(e){try{let t=typeof e==`string`?e:String(e),n=new URL(t);return`${n.origin}${n.pathname}`}catch{return`[unparseable-url]`}}function We(e){if(typeof e!=`object`||!e)return;let t=e.code;return typeof t==`number`?t:void 0}function Z(e){return e instanceof Error?e.message??``:typeof e==`string`?e:e&&typeof e==`object`&&`message`in e?String(e.message??``):``}const Q=[`2024-11-05`,`2025-03-26`,`2025-06-18`,`2025-11-25`],Ge=-32601,Ke=new Set([-32004,-32022]),qe=/\binitialize\b/i,Je=/method not found[^\w]*\binitialize\b|\binitialize\b[^\w]*method not found/,Ye=/unsupported protocol version|protocol version is not supported/,Xe=e=>RegExp(`${Je.source}|${Ye.source}`,`i`).test(e);function Ze(e,t){let n=`this gateway speaks the handshake era (${Q[0]} … ${Q[Q.length-1]})`;return t===void 0||$e(t)?`the MCP server at ${e} does not implement the \`initialize\` handshake, which means it speaks only protocol revision 2026-07-28 or later (the stateless "modern era" removed \`initialize\`), while ${n}`:`the MCP server at ${e} rejected the protocol revision this gateway offered (${Z(t)||`no detail given`}); ${n}`}function Qe(e){let t=Z(e),n=We(e);return n!==void 0&&Ke.has(n)||n===Ge&&qe.test(t)?!0:t.length>0&&Xe(t)}function $e(e){let t=Z(e);return We(e)===Ge&&qe.test(t)?!0:new RegExp(Je.source,`i`).test(t)}const et=/^(ctx7sk|tvly|sk|pat|gh[posu]|github_pat|glpat|xox[abprs]|AKIA|Bearer)[-_]/i,tt=e=>e.length>=12||et.test(e),nt=e=>{try{return decodeURIComponent(e)}catch{return``}},rt=e=>{try{return encodeURIComponent(e)}catch{return``}},it=e=>{try{return new URL(e).origin}catch{return e}},at=e=>{let t;try{t=new URL(e)}catch{return[e]}let n=new Set([e]);t.username&&n.add(t.username),t.password&&n.add(t.password);let r=e=>{for(let t of[e,nt(e),rt(e)])t&&tt(t)&&n.add(t)};if(t.search){let e=t.search.replace(/^\?/,``);n.add(e);for(let t of e.split(`&`)){let e=t.indexOf(`=`);e>=0&&r(t.slice(e+1))}for(let e of t.searchParams.values())r(e)}if(t.pathname&&t.pathname!==`/`){n.add(`${t.pathname}${t.search}`),n.add(t.pathname);for(let e of t.pathname.split(`/`))e&&r(e)}return[...n].filter(e=>e.length>0).sort((e,t)=>t.length-e.length)},ot=(e,t)=>{if(!t)return e;let n=it(t),r=`\0onyx-origin\0`,i=n?e.split(n).join(r):e;for(let e of at(t)){if(e===n)continue;i=i.split(e).join(`[REDACTED]`)}return i.split(r).join(n)};async function st(e,t={}){let n=t.code??-32603,r=t.timeoutMs??4e3,i=t.input??process.stdin,a=t.output??process.stdout;return i.isTTY?!1:new Promise(t=>{let o=!1,s=!1,c=!1,l=E({input:i}),u=()=>{o||(o=!0,clearTimeout(d),l.removeAllListeners(`line`),l.close(),t(s))},d=setTimeout(u,r);d.unref?.(),l.on(`line`,t=>{if(c)return;let r=t.trim();if(!r)return;let i;try{i=JSON.parse(r)}catch{return}i&&i.id!==void 0&&i.id!==null&&(c=!0,s=!0,l.removeAllListeners(`line`),a.write(`${JSON.stringify({error:{code:n,message:e},id:i.id,jsonrpc:`2.0`})}\n`,()=>{u()}))}),i.once(`end`,u),i.once(`error`,u)})}const ct=new Set([`EAI_AGAIN`,`ECONNABORTED`,`ECONNREFUSED`,`ECONNRESET`,`EHOSTDOWN`,`EHOSTUNREACH`,`ENETDOWN`,`ENETUNREACH`,`ENOTFOUND`,`EPIPE`,`EPROTO`,`ETIMEDOUT`,`UND_ERR_BODY_TIMEOUT`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_HEADERS_TIMEOUT`,`UND_ERR_SOCKET`]),lt=new Set([`EAI_AGAIN`,`ECONNREFUSED`,`EHOSTDOWN`,`EHOSTUNREACH`,`ENETDOWN`,`ENETUNREACH`,`ENOTFOUND`,`UND_ERR_CONNECT_TIMEOUT`]),ut=/\bfetch failed\b|socket hang up|other side closed|\bterminated\b|network (?:error|is unreachable)|econnrefused|econnreset|econnaborted|etimedout|enotfound|eai_again|enetunreach|ehostunreach|und_err|not connected|transport (?:is )?closed|connection closed/i,dt=/\bnot connected\b|transport (?:is )?closed/i,ft=/session (?:not found|expired|has expired|is invalid|invalid|mismatch|does not|no longer)|no valid session|unknown session|mcp-session-id/i,pt=/no valid session|unknown session|mcp-session-id|session not found/i;function $(e){return yt(e,new WeakSet)}function mt(e){return bt(e,new WeakSet)}function ht(e){if(e instanceof v)return!0;if(e&&typeof e==`object`){let t=e.status,n=e.code,r=e.message;if(t===401||n===401||r&&/\bunauthorized\b|\b(?:http|status)(?:\s+(?:status|code))?\s*[:=]?\s*401\b/i.test(String(r)))return!0}return!1}function gt(e){if(e instanceof g)return!1;let t=$(e);return t&&lt.has(t)||vt(e)?!0:dt.test(Z(e))}function _t(t){if(t instanceof e||t instanceof n||Qe(t)||ht(t))return!1;let r=$(t);if(r&&ct.has(r)||vt(t))return!0;let i=mt(t);if(i!==void 0&&i>=500)return!0;let a=Z(t);return!!(a.length>0&&ut.test(a))}function vt(e){let t=Z(e);if(e instanceof g)return pt.test(t);let n=mt(e);return n===404||n===400&&ft.test(t)?!0:ft.test(t)}function yt(e,t){if(typeof e!=`object`||!e||t.has(e))return;t.add(e);let n=e.code;if(typeof n==`string`&&/^[A-Z][A-Z0-9_]*$/.test(n))return n;for(let n of[`cause`,`response`,`data`,`body`]){let r=yt(e[n],t);if(r)return r}}function bt(e,t){if(typeof e!=`object`||!e||t.has(e))return;t.add(e);let n=e instanceof g?[`status`,`statusCode`]:[`status`,`statusCode`,`code`];for(let t of n){let n=e[t];if(typeof n==`number`&&n>=100&&n<=599)return n}for(let n of[`cause`,`response`,`data`,`body`]){let r=bt(e[n],t);if(r!==void 0)return r}}const xt=e=>new Promise(t=>setTimeout(t,e));async function St(e,t,n={}){let r=n.isRetryable??_t,i=n.sleep??xt,a=n.now??Date.now,o=a(),s=0;for(;;)try{return await e()}catch(e){if(s+=1,s>t.maxRetries||!r(e))throw e;let c=Ct(s,t);if(t.maxElapsedMs>0){let n=t.maxElapsedMs-(a()-o);if(n<=0)throw e;c=Math.min(c,n)}n.onRetry?.({attempt:s,delayMs:c,error:e}),await i(c)}}function Ct(e,t){let n=Math.min(t.initialDelayMs*2**(e-1),t.maxDelayMs),r=n*.2*(Math.random()*2-1);return Math.max(0,Math.round(n+r))}function wt(e){let t=e.now??Date.now,n=e.initial,r=0,i=-1/0,a=null,o=!1,s=!1,c=[],l=async()=>{h.info(`Upstream connection lost mid-session; reconnecting`,{eventType:`mcp_upstream_reconnect_attempt`}),s&&h.warn(`Reconnecting with resource subscriptions active; they will not survive the new session`,{eventType:`mcp_upstream_reconnect_subscriptions_dropped`});try{let t=await e.reconnect();if(o)return await Promise.resolve().then(()=>t.close()).catch(()=>{}),!1;for(let e of c)t.setNotificationHandler(...e);let i=n;return n=t,r+=1,Promise.resolve().then(()=>i.close()).catch(()=>{}),h.info(`Upstream reconnected`,{eventType:`mcp_upstream_reconnect_succeeded`}),!0}catch(e){return h.warn(`Upstream reconnect failed`,{errno:$(e),error:e instanceof Error?e.message:String(e),eventType:`mcp_upstream_reconnect_failed`}),!1}},u=n=>r>n?Promise.resolve(!0):a||(t()-i<e.cooldownMs?Promise.resolve(!1):(i=t(),a=l().finally(()=>{a=null}),a)),d=async(e,t)=>{let i=r;try{return await t(n)}catch(a){if(o||!(r>i)&&!_t(a))throw a;if(await u(i)&&(e||gt(a)))return await t(n);throw a}};return{callTool:(...e)=>d(!1,t=>t.callTool(...e)),close:(...e)=>(o=!0,n.close(...e)),complete:(...e)=>d(!0,t=>t.complete(...e)),getPrompt:(...e)=>d(!0,t=>t.getPrompt(...e)),listPrompts:(...e)=>d(!0,t=>t.listPrompts(...e)),listResources:(...e)=>d(!0,t=>t.listResources(...e)),listResourceTemplates:(...e)=>d(!0,t=>t.listResourceTemplates(...e)),listTools:(...e)=>d(!0,t=>t.listTools(...e)),notification:(...e)=>d(!1,t=>t.notification(...e)),readResource:(...e)=>d(!0,t=>t.readResource(...e)),setNotificationHandler:(...e)=>(c.push(e),n.setNotificationHandler(...e)),subscribeResource:(...e)=>(s=!0,d(!0,t=>t.subscribeResource(...e))),unsubscribeResource:(...e)=>d(!0,t=>t.unsubscribeResource(...e))}}var Tt=class extends O{buffer=``;droppedLinesLogged=0;constructor(){super({objectMode:!1})}_flush(e){this.buffer.trim().startsWith(`{`)?e(null,Buffer.from(this.buffer)):(this.buffer.trim().length>0&&this.logDroppedLine(this.buffer),e(null,null))}_transform(e,t,n){this.buffer+=e.toString();let r=this.buffer.split(`
+`);this.buffer=r.pop()||``;let i=[];for(let e of r)e.trim().startsWith(`{`)?i.push(e):e.trim().length>0&&this.logDroppedLine(e);if(i.length>0){let e=`${i.join(`
+`)}\n`;n(null,Buffer.from(e))}else n(null,null)}logDroppedLine(e){if(!(this.droppedLinesLogged>50)){if(this.droppedLinesLogged===50){this.droppedLinesLogged+=1,h.info(`Suppressing further non-JSON stdout lines`,{eventType:`mcp_server_stdout_dropped_suppressed`,loggedSoFar:50});return}this.droppedLinesLogged+=1,h.info(`MCP server stdout (non-JSON, dropped)`,{eventType:`mcp_server_stdout_dropped`,line:e.length>1024?`${e.slice(0,1024)}…`:e})}}},Et=class{onclose;onerror;onmessage;get pid(){return this._process?.pid??null}get spawnedServerPid(){return this._spawnedPid}get spawnedServerStartedAt(){return this._spawnedAt}get stderr(){return this._stderrStream?this._stderrStream:this._process?.stderr??null}_abortController=new AbortController;_process;_readBuffer=new _;_serverParams;_spawnedAt;_spawnedPid;_stderrStream=null;onEvent;constructor(e){this._serverParams=e,(e.stderr===`pipe`||e.stderr===`overlapped`)&&(this._stderrStream=new D),this.onEvent=e.onEvent}async close(){if(this.onEvent?.({type:`close`}),this._process?.pid)try{if(process.platform===`win32`){let e=we(`taskkill`,[`/PID`,String(this._process.pid),`/T`,`/F`],{stdio:`ignore`});if(e.error)throw e.error;if(e.status!==0)throw Error(`taskkill exited with status ${e.status}`)}else process.kill(-this._process.pid,`SIGTERM`)}catch(e){h.debug(`Process tree cleanup failed (process may already be dead)`,{error:e.message,pid:this._process.pid})}this._abortController.abort(),this._process=void 0,this._readBuffer.clear()}send(e){return new Promise(t=>{if(!this._process?.stdin)throw Error(`Not connected`);let n=x(e);this._process.stdin.write(n)?t():this._process.stdin.once(`drain`,t)})}async start(){if(this._process)throw Error(`StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.`);return new Promise((e,t)=>{let n=this._serverParams.shell??!1,r=n&&process.platform===`win32`,i=r?Dt(this._serverParams.command):this._serverParams.command,a=r?(this._serverParams.args??[]).map(Dt):this._serverParams.args??[];this._process=Ce(i,a,{cwd:this._serverParams.cwd,detached:process.platform!==`win32`,env:this._serverParams.env,shell:n,signal:this._abortController.signal,stdio:[`pipe`,`pipe`,this._serverParams.stderr??`inherit`]}),this._process.on(`error`,e=>{if(e.name===`AbortError`){this.onclose?.();return}h.error(`Process spawn error`,{args:this._serverParams.args?d(this._serverParams.args):void 0,command:this._serverParams.command,cwd:this._serverParams.cwd,error:e.message,errorCode:e.code,errorErrno:e.errno,errorSyscall:e.syscall,operation:`spawn`,shell:this._serverParams.shell,transportType:`stdio`}),t(e),this.onerror?.(e)});let o,s;this._process.on(`spawn`,()=>{o=Date.now(),s=this._process?.pid,this._spawnedAt=o,this._spawnedPid=s,h.info(`MCP server process spawned`,{argCount:this._serverParams.args?.length,command:this._serverParams.command,eventType:`mcp_server_process_spawned`,pid:s}),e()}),this._process.on(`close`,(e,t)=>{let n=o===void 0?void 0:Date.now()-o;h[e===0&&t===null?`info`:`warn`](`MCP server process closed`,{argCount:this._serverParams.args?.length,code:e,command:this._serverParams.command,eventType:`mcp_server_process_closed`,pid:s,signal:t,uptimeMs:n}),this.onEvent?.({type:`close`}),this._process=void 0,this.onclose?.()}),this._process.stdin?.on(`error`,e=>{h.error(`Stdin error`,{command:this._serverParams.command,error:e.message,operation:`write`,pid:this._process?.pid,transportType:`stdio`}),this.onEvent?.({error:e,type:`error`}),this.onerror?.(e)});let c=new Tt;this._process.stdout?.pipe(c),c.on(`data`,e=>{this.onEvent?.({chunk:e.toString(),type:`data`}),this._readBuffer.append(e),this.processReadBuffer()}),c.on(`error`,e=>{h.error(`JSON filter error`,{command:this._serverParams.command,error:e.message,operation:`parse`,pid:this._process?.pid,transportType:`stdio`}),this.onEvent?.({error:e,type:`error`}),this.onerror?.(e)}),this._stderrStream&&this._process.stderr&&this._process.stderr.pipe(this._stderrStream)})}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onEvent?.({message:e,type:`message`}),this.onmessage?.(e)}catch(e){let t=`unknown`;try{let e=this._readBuffer.readMessage();e&&(t=typeof e)}catch{}h.error(`Message processing error`,{command:this._serverParams.command,error:e.message,messageType:t,operation:`process`,pid:this._process?.pid,transportType:`stdio`}),this.onEvent?.({error:e,type:`error`}),this.onerror?.(e)}}};function Dt(e){return e.length===0||!/[\s"&|<>^()]/.test(e)?e:`"${e.replace(/"/g,`""`).replace(/(\\+)$/,`$1$1`)}"`}const Ot=[`$`,"`",`;`,`|`,`&`,`>`,`<`,`(`,`)`,`{`,`}`,`'`,`"`,`\\`,`!`,`*`,`?`,`~`,`#`],kt=`[a-z0-9]+`,At=`${kt}(?:(?:[._]|__|-+)${kt})*`,jt=`(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])`,Mt=`(?:${`(?:${`${jt}(?:\\.${jt})*`}|\\[[a-fA-F0-9:]+\\])(?::[0-9]+)?`}/)?${At}(?:/${At})*`,Nt=RegExp(`^${Mt}(?::[A-Za-z0-9_][A-Za-z0-9_.-]{0,127})?(?:@[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[0-9a-fA-F]{32,})?$`);function Pt(e){return typeof e!=`string`||e.trim()===``?{reason:`empty image reference`,valid:!1}:e.length>512?{reason:`image reference longer than 512 characters`,valid:!1}:Nt.test(e)?{valid:!0}:{reason:Ft(e),valid:!1}}function Ft(e){if(/[\u0000-\u001f\u007f]/.test(e))return`contains a control character`;if(/\s/.test(e))return`contains whitespace`;let t=Ot.find(t=>e.includes(t));return t?`contains the shell metacharacter ${t}`:e.startsWith(`-`)?`starts with '-' and would be parsed as a runtime option`:`does not match the OCI image-reference grammar`}function It(e){let t=e.toLowerCase().split(/[/\\]/).pop()||``;return t===`docker`||t===`docker.exe`?`docker`:t===`podman`||t===`podman.exe`?`podman`:t===`nerdctl`||t===`nerdctl.exe`?`nerdctl`:t===`finch`||t===`finch.exe`?`finch`:`unknown`}function Lt(e){let t=e.indexOf(`run`);if(t===-1)return;let n=e.slice(t+1),r=new Set(`--add-host.--annotation.--arch.--attach.--blkio-weight.--blkio-weight-device.--cap-add.--cap-drop.--cgroup-parent.--cgroupns.--cidfile.--cosign-key.--cpu-period.--cpu-quota.--cpu-rt-period.--cpu-rt-runtime.--cpu-shares.--cpus.--cpuset-cpus.--cpuset-mems.--decryption-key.--device.--device-cgroup-rule.--device-read-bps.--device-read-iops.--device-write-bps.--device-write-iops.--dns.--dns-option.--dns-search.--domainname.--entrypoint.--env.--env-file.--env-host.--expose.--gidmap.--gpus.--group-add.--health-cmd.--health-interval.--health-retries.--health-start-period.--health-timeout.--hostname.--image-volume.--ip.--ip6.--ipc.--isolation.--kernel-memory.--label.--label-file.--link.--link-local-ip.--log-driver.--log-opt.--mac-address.--memory.--memory-reservation.--memory-swap.--memory-swappiness.--mount.--name.--network.--network-alias.--oom-kill-disable.--oom-score-adj.--os.--pid.--pidfile.--pids-limit.--platform.--pod.--privileged.--publish.--publish-all.--pull.--requires.--restart.--rootfs.--runtime.--secret.--security-opt.--shm-size.--stop-signal.--stop-timeout.--storage-opt.--subgidname.--subuidname.--sysctl.--systemd.--timeout.--tmpfs.--tz.--uidmap.--ulimit.--user.--userns.--uts.--variant.--volume.--volume-driver.--volumes-from.--workdir.-a.-c.-e.-h.-l.-m.-p.-P.-u.-v.-w`.split(`.`)),i=0;for(;i<n.length;){let e=n[i];if(e.startsWith(`-`)){if(e.includes(`=`)){i++;continue}if(r.has(e)){i+=2;continue}i++;continue}return e}}function Rt(e,t){let n=It(e);if(n===`unknown`)return{imageName:``,isContainerMCP:!1,runtime:`unknown`};if(!t||!t.includes(`run`))return{imageName:``,isContainerMCP:!1,runtime:n};let r=Lt(t);return r?{imageName:r,isContainerMCP:!0,runtime:n}:(h.debug(`Container command detected but could not extract image name`,{args:t,command:e,runtime:n}),{imageName:``,isContainerMCP:!0,runtime:n})}function zt(e,t){let n=t===`unknown`?`docker`:t,r=Pt(e);if(!r.valid)return h.warn(`Rejected container image reference; skipping digest lookup`,{eventType:`mcp_container_image_ref_rejected`,imageName:e,reason:r.reason,runtime:n}),[];let i;try{i=Se(n,[`image`,`inspect`,`--format`,`{{json .RepoDigests}}`,e],{encoding:`utf-8`,stdio:[`pipe`,`pipe`,`pipe`],timeout:5e3})}catch(t){return h.warn(`Container image digest lookup failed`,{error:t instanceof Error?t.message:String(t),eventType:`mcp_container_image_digest_lookup_failed`,imageName:e,runtime:n}),[]}let a=i.trim(),o;try{o=JSON.parse(a)}catch{return h.warn(`Could not parse RepoDigests JSON`,{eventType:`mcp_container_image_digest_lookup_failed`,imageName:e,result:a,runtime:n}),[]}if(!Array.isArray(o))return h.warn(`RepoDigests was not a JSON array`,{eventType:`mcp_container_image_digest_lookup_failed`,imageName:e,result:a,runtime:n}),[];let s=o,c=[];for(let e of s){if(typeof e!=`string`)continue;let t=e.match(/sha256:[a-f0-9]{64}/i);t&&c.push(t[0])}return c.length>0?(h.info(`Container image digests resolved`,{digests:c,eventType:`mcp_container_image_digests_resolved`,imageName:e,runtime:n}),c):(h.info(`No container image digests available (image may be locally built)`,{eventType:`mcp_container_image_digests_empty`,imageName:e,runtime:n}),[])}let Bt;const Vt=()=>({pid:Bt?.spawnedServerPid,startedAtMs:Bt?.spawnedServerStartedAt});xe.inspect.defaultOptions.depth=8,`EventSource`in global||(global.EventSource=Ie);const Ht=async e=>{h.error(e.logMessage,e.meta),await new Promise(t=>{process.stderr.write(`${e.stderrLine}\n`,()=>t())}),e.respondToClient&&await st(e.reason);let t=ye(()=>{},50);try{await re(2e3)}catch{}finally{T(t)}process.exit(e.exitCode)},Ut=e=>{let t=e.header?`HTTP header "${e.header}"`:`the bearer token`,n=`Onyx MCP gateway: required auth env var "${e.envVar}" for ${t} is empty or unset. Export the source value your agent config references (e.g. the {env:...} / \${...} token) in the launch environment.`;return Ht({exitCode:78,logMessage:e.logMessage,meta:{envVar:e.envVar,eventType:e.eventType,...e.header?{header:e.header}:{}},reason:n,respondToClient:e.respondToClient,stderrLine:`[mcp-gateway] FATAL: ${n}`})},Wt=e=>{let t=Z(e.error),r=it(e.subject),i=t=>ot(t,e.url),a=i(t),o=Object.fromEntries(Object.entries(e.extra??{}).map(([e,t])=>[e,typeof t==`string`?i(it(t)):t]));throw h.error(e.logMessage,{eventType:`mcp_protocol_era_mismatch`,originalError:a,supportedEra:`${Q[0]}..${Q[Q.length-1]}`,...o}),new n(i(Ze(r,e.error)),e.url,{originalError:a,...o})},Gt=async()=>{oe(h),ae(h);let o=await ce(se(process.argv)).scriptName(`mcp-gateway`).command(`stdio [command] [args...]`,`Run a local command with stdio transport (default)`,e=>e.positional(`command`,{describe:`The command to run`,type:`string`}).positional(`args`,{array:!0,describe:`The arguments to pass to the command`,type:`string`})).command(`remote`,`Connect to a remote MCP server`,e=>e.options({"bearer-token-env":{describe:`Environment variable name containing a bearer token for remote authentication`,type:`string`},"env-http-headers":{describe:`HTTP headers resolved from environment variables (format: HeaderName:ENV_VAR_NAME)`,string:!0,type:`array`},headers:{deprecated:`Use --env-http-headers with env var names instead. --headers exposes values in process listings.`,describe:`Legacy: headers with literal values (format: key:value)`,string:!0,type:`array`},"remote-transport":{choices:[`sse`,`stream`],deprecated:`Transport is now auto-detected per MCP spec. This option is ignored.`,describe:`(Deprecated) The transport type - now auto-detected`,type:`string`},url:{demandOption:!0,describe:`The URL of the remote MCP server`,type:`string`}})).command(`$0 [command] [args...]`,`Run a command with MCP arguments (backward compatible)`,e=>e.positional(`command`,{describe:`The command to run`,type:`string`}).positional(`args`,{array:!0,describe:`The arguments to pass to the command`,type:`string`})).env(`MCP_GATEWAY`).parserConfiguration({"populate--":!0,"unknown-options-as-args":!0}).options({"access-control-url":{describe:`URL of the access control service (overrides MCP_GATEWAY_ACCESS_CONTROL_URL)`,type:`string`},debug:{default:!1,describe:`Enable debug logging`,type:`boolean`},env:{describe:`Environment variables to pass to the command (format: KEY=value)`,string:!0,type:`array`},gracefulShutdownTimeout:{default:5e3,describe:`The timeout (in milliseconds) for graceful shutdown`,type:`number`},"oauth-providers-url":{describe:`URL of the OAuth providers config endpoint (overrides MCP_GATEWAY_OAUTH_PROVIDERS_URL)`,type:`string`},port:{describe:`Run as HTTP server on the specified port instead of stdio`,type:`number`},"scanner-api-key":{describe:`API key for scanner authentication (overrides MCP_GATEWAY_SCANNER_API_KEY)`,type:`string`},"scanner-fail-open":{describe:`Allow requests when scanner is unavailable (overrides MCP_GATEWAY_SCANNER_FAIL_OPEN)`,type:`boolean`},"scanner-timeout-ms":{describe:`Scanner request timeout in milliseconds (overrides MCP_GATEWAY_SCANNER_TIMEOUT_MS)`,type:`number`},"scanner-url":{describe:`URL of the scanner/evaluator service (overrides MCP_GATEWAY_SCANNER_URL)`,type:`string`},shell:{default:process.platform===`win32`,describe:`Spawn the server via the user's shell (defaults to true on Windows)`,type:`boolean`}}).help().parseAsync();await le(p.oauthProviders);let m,g=!1,_,v,y,x,S={},pe={};if(o.env)for(let e of o.env){let[t,...n]=e.split(`=`);t&&n.length>0&&(pe[t.trim()]=n.join(`=`).trim())}let me=e=>{if(e.includes("${")){let t,n=e.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,(e,n)=>process.env[n]||(t=n,``));return t?{missingVar:t,resolved:``}:{resolved:n}}let t=process.env[e];return t?{resolved:t}:{missingVar:e,resolved:``}};if(o.headers)for(let e of o.headers){let[t,...n]=e.split(`:`);t&&n.length>0&&(S[t.trim()]=n.join(`:`).trim())}if(o.bearerTokenEnv){let e=o.bearerTokenEnv,{missingVar:t,resolved:n}=me(e);t&&await Ut({envVar:t,eventType:`mcp_auth_bearer_env_missing`,logMessage:`Bearer token env var specified but not set`,respondToClient:!o.port}),S.Authorization=`Bearer ${n}`,h.info(`Bearer token loaded from environment variable`,{authType:`bearer_token`,envVar:e,eventType:`mcp_auth_bearer_env`,remoteUrl:o.url})}if(o.envHttpHeaders)for(let e of o.envHttpHeaders){let[t,...n]=e.split(`:`),r=n.join(`:`).trim();if(t&&r){let e=t.trim(),{missingVar:n,resolved:i}=me(r);n&&await Ut({envVar:n,eventType:`mcp_auth_env_header_missing`,header:e,logMessage:`Env var for HTTP header not set`,respondToClient:!o.port}),S[e]=i,h.info(`HTTP header loaded from environment`,{eventType:`mcp_auth_env_header`,header:e,remoteUrl:o.url})}}let he=ne(S);if(he&&h.setTraceId(he),S.Authorization){let e=S.Authorization.startsWith(`Bearer `)?`bearer_token`:S.Authorization.startsWith(`Basic `)?`basic`:`api_key`;h.info(`Authorization header provided`,{authType:e,eventType:`mcp_auth_header_provided`,remoteUrl:o.url})}let ge={...p.scanner.headers};h.debug(`Initializing traffic scanner`,{failOpen:p.scanner.failOpen,hasApiKey:!!p.scanner.apiKey,scannerEnabled:p.scanner.enabled,scannerUrl:p.scanner.url,timeoutMs:p.scanner.timeoutMs});let _e=async i=>{let a=!o.port&&!g,s=y?(()=>{try{return new URL(y).origin}catch{return`[invalid remote URL]`}})():void 0,c=e=>y&&s?e.split(y).join(s):e;if(i instanceof e){let e=i.message||`This MCP server has been blocked by your organization's Onyx access-control policy. Contact your administrator if you believe this is an error.`,t=[``,`❌ ACCESS DENIED`,`━`.repeat(60),e,`Please contact your administrator if you believe this is an error.`,``].join(`
+`);return Ht({exitCode:1,logMessage:`MCP server blocked by access control policy`,meta:{error:i.message,eventType:`mcp_access_control_block`,reason:i.reason},reason:e,respondToClient:a,stderrLine:t})}let l=c(i instanceof t?`Onyx MCP gateway: configuration error — ${i.message}`:i instanceof n?`Onyx MCP gateway: unsupported MCP protocol era — ${i.message}`:i instanceof r?`Onyx MCP gateway: cannot reach the upstream MCP server${s?` at ${s}`:``} — ${i.message}`:`Onyx MCP gateway: failed to start — ${i instanceof Error?i.message:String(i)}`);return Ht({exitCode:1,logMessage:`MCP server failed to start`,meta:{args:v?d(v):void 0,command:_,errno:$(i),error:c(`Could not start the proxy: ${i}`),eventType:`mcp_server_start_failed`,proxyType:m,remoteUrl:s,transport:x},reason:l,respondToClient:a,stderrLine:`[mcp-gateway] FATAL: ${l}`})};if(o._[0]===`remote`){m=`remote`,o[`remote-transport`]&&h.warn(`The --remote-transport option is deprecated and will be ignored. Transport is now auto-detected per MCP spec (Streamable HTTP with SSE fallback).`,{providedTransport:o[`remote-transport`]});let e=o.url;e||await _e(new t(`Remote URL is required for remote proxy type`,`url`)),y=b(e),y!==e&&h.debug(`Normalized remote URL`,{normalizedUrl:y,originalUrl:e})}else{if(m=`stdio`,o[`--`]&&o[`--`].length>0){let e=o[`--`];_=e[0],v=e.slice(1).map(String)}else _=o.command,v=(o.args||[]).map(String);_||await _e(new t(`No command specified for stdio proxy`,`command`))}let C;m===`stdio`&&_&&(C=Rt(_,v),C.isContainerMCP&&h.info(`Container MCP detected`,{imageName:C.imageName,runtime:C.runtime}));let w,T,ye=async()=>{T??=s(),h.setSessionData({...await T,proxyType:m})},xe=async()=>{w!==void 0||!C?.isContainerMCP||!C.imageName||(await ye(),w=zt(C.imageName,C.runtime))},Se=()=>m===`stdio`?{args:v,command:_,dockerImageDigests:w,dockerImageName:C?.imageName,proxyType:m}:{proxyType:m,url:y},Ce;if(p.accessControl.url&&p.scanner.apiKey){let e=Se();await ye();let t=await T,n=e.proxyType===`stdio`?{...t,proxyType:`stdio`,stdioCliArgs:{...e,args:d(e.args)}}:{...t,proxyType:`remote`,remoteCliArgs:e};Ce=new ze({apiKey:p.scanner.apiKey,headers:p.accessControl.headers,sessionData:n,timeoutMs:p.accessControl.timeoutMs,url:p.accessControl.url})}let we=m===`remote`?y:_,E=new Re({client:Ce,enabled:p.accessControl.enabled,serverName:we}),D=new Be({storageDir:p.oauthDir}),O=()=>new ie({name:`mcp-gateway`,version:p.appVersion},{capabilities:{},versionNegotiation:te()}),Te=async(t,{allowInteractiveAuth:i=!0}={})=>{if(!await E.isAllowed()){let t=E.getBlockReason();throw h.warn(`MCP server blocked by access control`,{proxyType:m,reason:t}),new e(t,`policy_block`)}if(h.info(`MCP server allowed by access control`),await xe(),m===`stdio`){let e={...process.env,...pe},n=new Et({args:v,command:_,env:e,onEvent:e=>{o.debug&&h.debug(`Transport event`,{event:e})},shell:o.shell,stderr:`pipe`});Bt=n;let i=1024;i*8;let a=e=>e.length>i?`${e.slice(0,i)}…`:e,s=``,c=[],l=e=>{let t=a(e);c.push(t),c.length>100&&c.shift(),h.info(`MCP server stderr`,{command:_,eventType:`mcp_server_stderr`,line:t})},u=()=>{s.length!==0&&(l(s),s=``)},d=new ve(`utf8`),f=!1,ee=()=>{if(f)return;f=!0;let e=d.end();e&&(s+=e),u()};n.stderr?.on(`data`,e=>{process.stderr.write(e),s+=d.write(e);let t=s.split(`
+`);s=t.pop()??``;for(let e of t){if(e.length===0)continue;l(e)}s.length>8192&&u()}),n.stderr?.once(`end`,ee),n.stderr?.once(`close`,ee);try{return await t.connect(n),t}catch(e){throw ee(),h.warn(`Failed original server access`,{command:_,errno:$(e),error:e instanceof Error?e.message:String(e),eventType:`mcp_server_access_failed`,proxyType:m,stderrTail:c.slice(-20)}),await n.close().catch(()=>{}),Qe(e)&&Wt({error:e,extra:{command:_},logMessage:`Spawned MCP server speaks a different protocol era; cannot negotiate a session`,subject:_??`the spawned MCP server`}),new r(`Failed to connect to stdio process: ${e}`,void 0,`stdio`,{argCount:v?.length,command:_},e)}}else if(m===`remote`){let e=y,t=()=>{let e={...S};return Object.keys(e).length>0?{headers:e}:void 0},a=async()=>{let t=await fe(e,{credentialStore:D});return h.info(`Authentication performed`,{authType:`oauth`,eventType:`mcp_auth_performed`,fromCache:t.fromCache,remoteUrl:e}),t.tokens.access_token},o;try{let n=await D.load(e),r=n&&D.hasValidAccessToken(n)?n.tokens?.access_token:void 0,s=He(e,D,r),c=Ve(s),l=!1;try{let n=await ue(O,e,t(),c);o=n.client,x=n.transportType,h.info(`Connected to remote server`,{hasAuth:!!r,transport:x})}catch(n){if(Qe(n)&&Wt({error:n,extra:{remoteUrl:e},logMessage:`Upstream speaks a different MCP protocol era; cannot negotiate a session`,subject:e,url:e}),ht(n)){if(l)throw n;if(s.getCurrentBearer()??r?(h.info(`Cached + refresh both rejected; falling back to full OAuth flow`),await D.update(e,{tokensObtainedAt:void 0})):h.info(`Server requires OAuth, starting authentication flow...`),!i)throw h.info(`Skipping interactive OAuth on reconnect; surfacing 401`,{eventType:`mcp_reconnect_skip_interactive_auth`}),n;let u=await a();s.setBearer(u),l=!0;let d=await ue(O,e,t(),c);o=d.client,x=d.transportType,h.info(`Connected to remote server with OAuth`,{transport:x})}else if(!l&&!(s.getCurrentBearer()??r)&&!new Headers(S).has(`Authorization`)){let r=!1,u;try{let{authMetadata:t}=await de(new URL(e),{logger:h});r=!!t}catch(e){u=e instanceof Error?e.message:String(e)}if(!r)throw h.warn(`Non-401 failure and no discoverable OAuth metadata; propagating original error`,{discoveryError:u,eventType:`mcp_non401_no_oauth_discovery`,originalError:n instanceof Error?n.message:String(n),remoteUrl:e}),n;if(h.info(`Cold-start non-401 but server advertises OAuth; attempting OAuth flow`,{originalError:n instanceof Error?n.message:String(n)}),!i)throw h.info(`Skipping interactive OAuth on reconnect; surfacing error`,{eventType:`mcp_reconnect_skip_interactive_auth`}),n;let d=await a();s.setBearer(d),l=!0;let f=await ue(O,e,t(),c);o=f.client,x=f.transportType,h.info(`Connected to remote server with OAuth (recovered from non-401)`,{transport:x})}else throw n}return o}catch(t){throw h.warn(`Failed original server access`,{errno:$(t),error:t instanceof Error?t.message:String(t),eventType:`mcp_server_access_failed`,proxyType:m,remoteUrl:e}),t instanceof r||t instanceof n?t:(Qe(t)&&Wt({error:t,extra:{remoteUrl:e},logMessage:`Upstream speaks a different MCP protocol era; cannot negotiate a session`,subject:e,url:e}),new r(`Failed to connect to remote server: ${t instanceof Error?t.message:String(t)}`,e,x,{headerCount:Object.keys(S).length},t))}}return t},Ee=()=>St(()=>Te(O()),p.upstream.connect,{onRetry:({attempt:e,delayMs:t,error:n})=>{h.warn(`Upstream connect failed; retrying`,{attempt:e,delayMs:t,errno:$(n),error:n instanceof Error?n.message:String(n),eventType:`mcp_upstream_connect_retry`,proxyType:m})}}),k=m===`remote`?p.upstream.reconnect.enabled:p.upstream.reconnect.enabledForStdio,A=e=>k?wt({cooldownMs:p.upstream.reconnect.cooldownMs,initial:e,reconnect:()=>Te(O(),{allowInteractiveAuth:!1})}):e,j,M=()=>(j??=c({cliArgs:Se(),scanApiKey:p.scanner.apiKey,scanEnabled:p.scanner.enabled,scanFailOpen:p.scanner.failOpen,scanHeaders:ge,scanTimeoutMs:p.scanner.timeoutMs,scanUrl:p.scanner.url||``,spawnedServerInfoProvider:Vt}),j),N=e=>{h.info(`Upstream protocol era negotiated`,{era:e.getProtocolEra(),eventType:`mcp_upstream_era_negotiated`,negotiation:p.supportNewMcpProtocol?`auto`:`legacy`,protocolVersion:e.getNegotiatedProtocolVersion()})},P=async()=>{if(o.port){let e,t=await ee({createServer:async()=>{let t=await Ee();N(t),await M();let n=t.getServerVersion(),r=t.getServerCapabilities();e=A(t);let a=new i(n,{capabilities:r});return u({authorizer:E,client:e,server:a,serverCapabilities:r}),a},onClose:async t=>{e&&await e.close(),await t.close()},port:o.port});return h.info(`MCP gateway started`,{eventType:`mcp_gateway_started`,mode:`http`,port:o.port,proxyType:m}),m===`stdio`?h.info(`MCP server configuration`,{args:d(v??[]).join(` `),command:_,eventType:`mcp_server_config`,proxyType:m}):h.info(`MCP server configuration`,{eventType:`mcp_server_config`,proxyType:m,remoteUrl:y}),{close:()=>t.close()}}let e=await Ee();N(e);let t=e.getServerVersion(),n=e.getServerCapabilities(),r=A(e),s=new i(t,{capabilities:n});u({authorizer:E,client:r,server:s,serverCapabilities:n}),await M();let c=()=>{h.info(`MCP gateway started`,{eventType:`mcp_gateway_started`,mode:`stdio`,proxyType:m}),h.info(`MCP server configuration`,{capabilities:Object.keys(n||{}),eventType:`mcp_server_config`,proxyType:m,serverName:t?.name,serverVersion:t?.version,...m===`stdio`?{args:d(v??[]).join(` `),command:_}:{remoteUrl:y,transport:x}})};if(p.supportNewMcpProtocol){let e=f(()=>s,{legacy:`serve`});return g=!0,c(),{close:async()=>{await e.close(),await r.close()}}}let l=new a;return await s.connect(l),g=!0,c(),{close:()=>r.close()}},F=({server:e,timeout:t})=>{let n=!1,r=async r=>{if(!n){n=!0,h.info(`MCP gateway stopping`,{eventType:`mcp_gateway_stopping`,signal:r});try{await e.close(),l(),await re(2e3),process.exit(0)}catch(e){let n=`Error during shutdown: ${e}`;h.error(`Error during shutdown`,{error:n,eventType:`mcp_gateway_stopped`,shutdownTimeout:t}),await re(2e3),process.exit(1)}}},i=e=>async()=>{be(()=>{h.error(`Graceful shutdown timeout exceeded, forcing exit`),process.exit(1)},t).unref(),await r(e)};return process.once(`SIGTERM`,i(`SIGTERM`)),process.once(`SIGINT`,i(`SIGINT`)),process.stdin.once(`end`,i(`stdin-end`)),()=>e.close()};h.info(`MCP gateway starting`,{command:_,eventType:`mcp_gateway_starting`,proxyType:m,transport:m===`remote`?`auto-detect`:`stdio`,url:y});try{let e=await P();F({server:e,timeout:o.gracefulShutdownTimeout})}catch(e){await _e(e)}};export{Gt as main};
+//# sourceMappingURL=main-Cw-GpTlP.js.map