@polpo-ai/connect-server 0.15.144 → 0.16.0

package/dist/mcp-runner-broker.js

@@ -0,0 +1,181 @@
+import { ConnectionSelectionError, createToolInvocationContext, McpRunnerRequestSchema, McpRunnerInventorySchema, MAX_MCP_RUNNER_REQUEST_BYTES, MAX_MCP_RUNNER_RESPONSE_BYTES, MCP_RUNNER_REQUEST_TIMEOUT_MS, } from "@polpo-ai/core";
+import { isDeepStrictEqual } from "node:util";
+import { ConnectError } from "@polpo-ai/connect";
+export class McpRunnerBrokerError extends Error {
+    status;
+    constructor(status) {
+        super("MCP broker request failed");
+        this.status = status;
+        this.name = "McpRunnerBrokerError";
+    }
+}
+/** HTTP-neutral server entry, reusable by OSS hosts and managed adapters. The
+ * host owns opaque token storage, tenant identity and the run lifecycle. */
+export function createMcpRunnerBroker(options) {
+    const report = (error) => {
+        try {
+            void Promise.resolve(options.onError?.(error)).catch(() => undefined);
+        }
+        catch { /* host diagnostics */ }
+    };
+    const json = (data, status = 200) => {
+        const body = JSON.stringify(data);
+        if (new TextEncoder().encode(body).byteLength > MAX_MCP_RUNNER_RESPONSE_BYTES)
+            throw new McpRunnerBrokerError(413);
+        return new Response(body, { status, headers: { "content-type": "application/json", "cache-control": "no-store" } });
+    };
+    return async (request) => {
+        if (request.method !== "POST")
+            return json({ ok: false, error: { code: "mcp_broker_denied" } }, 405);
+        const controller = new AbortController();
+        const abort = () => controller.abort();
+        request.signal.addEventListener("abort", abort, { once: true });
+        if (request.signal.aborted)
+            abort();
+        const timer = setTimeout(abort, MCP_RUNNER_REQUEST_TIMEOUT_MS);
+        const bounded = (work) => new Promise((resolve, reject) => {
+            if (controller.signal.aborted) {
+                reject(new McpRunnerBrokerError(408));
+                return;
+            }
+            const cancelled = () => reject(new McpRunnerBrokerError(408));
+            controller.signal.addEventListener("abort", cancelled, { once: true });
+            Promise.resolve().then(() => {
+                if (controller.signal.aborted)
+                    throw new McpRunnerBrokerError(408);
+                return work();
+            }).then(resolve, reject).finally(() => controller.signal.removeEventListener("abort", cancelled));
+        });
+        let acquired;
+        const disposed = new WeakSet();
+        const dispose = async (capability) => {
+            if (disposed.has(capability))
+                return;
+            disposed.add(capability);
+            let cleanupTimer;
+            try {
+                await Promise.race([
+                    Promise.resolve().then(() => capability.dispose()),
+                    new Promise(resolve => { cleanupTimer = setTimeout(resolve, 1_000); }),
+                ]);
+            }
+            catch (error) {
+                report(error);
+            }
+            finally {
+                clearTimeout(cleanupTimer);
+            }
+        };
+        try {
+            const token = /^Bearer ([A-Za-z0-9_-]+)$/.exec(request.headers.get("authorization") ?? "")?.[1];
+            const sandboxId = request.headers.get("x-polpo-sandbox-id");
+            if (!token || token.length > 512 || !sandboxId || sandboxId.length > 512)
+                throw new McpRunnerBrokerError(401);
+            const lease = await bounded(() => options.authorize(token, sandboxId));
+            await bounded(() => lease.assertActive());
+            if (Number(request.headers.get("content-length")) > MAX_MCP_RUNNER_REQUEST_BYTES)
+                throw new McpRunnerBrokerError(413);
+            if (!request.body)
+                throw new McpRunnerBrokerError(400);
+            const reader = request.body.getReader();
+            const chunks = [];
+            let size = 0;
+            try {
+                while (true) {
+                    const chunk = await bounded(() => reader.read());
+                    if (chunk.done)
+                        break;
+                    size += chunk.value.byteLength;
+                    if (size > MAX_MCP_RUNNER_REQUEST_BYTES)
+                        throw new McpRunnerBrokerError(413);
+                    chunks.push(chunk.value);
+                }
+            }
+            finally {
+                void reader.cancel().catch(() => undefined);
+            }
+            const bytes = new Uint8Array(size);
+            let offset = 0;
+            for (const chunk of chunks) {
+                bytes.set(chunk, offset);
+                offset += chunk.byteLength;
+            }
+            let raw;
+            try {
+                raw = JSON.parse(new TextDecoder().decode(bytes));
+            }
+            catch {
+                throw new McpRunnerBrokerError(400);
+            }
+            const parsed = McpRunnerRequestSchema.safeParse(raw);
+            if (!parsed.success)
+                throw new McpRunnerBrokerError(400);
+            const inventory = McpRunnerInventorySchema.safeParse(lease.inventory);
+            if (!inventory.success)
+                throw new McpRunnerBrokerError(403);
+            const invocation = createToolInvocationContext(lease.invocation);
+            if (!invocation.agent || invocation.agent.name !== lease.agentName)
+                throw new McpRunnerBrokerError(403);
+            const operation = parsed.data;
+            if (operation.operation === "inventory")
+                return json({ ok: true, data: inventory.data });
+            let selected;
+            for (const entry of inventory.data)
+                for (const tool of entry.tools) {
+                    if (`mcp__${entry.serverName}__${tool.name}` === operation.capability)
+                        selected = { serverName: entry.serverName, tool };
+                }
+            if (!selected)
+                throw new McpRunnerBrokerError(403);
+            await bounded(() => lease.claimCall(operation.toolCallId));
+            const providers = await bounded(() => lease.resolveCapabilities({ agentName: lease.agentName, invocation, signal: controller.signal }));
+            const provider = Object.hasOwn(providers, selected.serverName) ? providers[selected.serverName] : undefined;
+            const currentTool = provider?.tools.find(tool => tool.name === selected.tool.name);
+            if (!provider || !currentTool || currentTool.name !== selected.tool.name
+                || currentTool.description !== selected.tool.description
+                || !isDeepStrictEqual(currentTool.inputSchema, selected.tool.inputSchema))
+                throw new McpRunnerBrokerError(403);
+            await bounded(() => lease.assertActive());
+            const selectedName = selected.serverName;
+            const selectedTool = selected.tool.name;
+            await bounded(async () => {
+                const capability = await provider.resolver.resolve({ serverName: selectedName, toolName: selectedTool,
+                    toolCallId: operation.toolCallId, invocation, signal: controller.signal });
+                // Register before returning through bounded(): cancellation can win the
+                // outer promise between this continuation and the caller's assignment.
+                acquired = capability;
+                if (controller.signal.aborted) {
+                    void dispose(capability);
+                    throw new McpRunnerBrokerError(408);
+                }
+                return capability;
+            });
+            await bounded(() => lease.assertActive());
+            const capability = acquired;
+            if (!capability)
+                throw new McpRunnerBrokerError(503);
+            const result = await bounded(() => capability.call(operation.arguments));
+            return json({ ok: true, data: result ?? null });
+        }
+        catch (error) {
+            report(error);
+            if (error instanceof ConnectError && error.code === "rate_limited" && error.status === 429) {
+                const value = error.details?.retryAfterSeconds;
+                const retryAfterSeconds = typeof value === "number" && Number.isSafeInteger(value) && value >= 1 && value <= 86400 ? value : 60;
+                const response = json({ ok: false, error: { code: "rate_limited", message: "Connection request limit exceeded", retryAfterSeconds } }, 429);
+                response.headers.set("retry-after", String(retryAfterSeconds));
+                return response;
+            }
+            const status = error instanceof McpRunnerBrokerError ? error.status : error instanceof ConnectionSelectionError ? 403 : 503;
+            return json({ ok: false, error: { code: "mcp_broker_denied", message: "MCP broker request failed" } }, status);
+        }
+        finally {
+            clearTimeout(timer);
+            request.signal.removeEventListener("abort", abort);
+            controller.abort();
+            if (acquired)
+                await dispose(acquired);
+        }
+    };
+}
+//# sourceMappingURL=mcp-runner-broker.js.map

package/dist/mcp-runner-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-runner-broker.js","sourceRoot":"","sources":["../src/mcp-runner-broker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAAE,2BAA2B,EACrD,sBAAsB,EAAE,wBAAwB,EAChD,4BAA4B,EAAE,6BAA6B,EAAE,6BAA6B,GAG3F,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACxB;IAArB,YAAqB,MAAqD;QACxE,KAAK,CAAC,2BAA2B,CAAC,CAAC;QADhB,WAAM,GAAN,MAAM,CAA+C;QAExE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAiBD;4EAC4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,OAGrC;IACC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;QAChC,IAAI,CAAC;YAAC,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACjH,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,6BAA6B;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACtH,CAAC,CAAC;IACF,OAAO,KAAK,EAAC,OAAO,EAAC,EAAE;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACrG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,CAAI,IAA0B,EAAc,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7F,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACjF,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBACnE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QACpG,CAAC,CAAC,CAAC;QACH,IAAI,QAA2C,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAyB,CAAC;QACtD,MAAM,OAAO,GAAG,KAAK,EAAE,UAAiC,EAAE,EAAE;YAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,OAAO;YACrC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzB,IAAI,YAAuD,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAAC;oBACjB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBAClD,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;oBAC1B,CAAC;gBAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAAC,CAAC;QACzC,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChG,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC9G,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACvE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,4BAA4B;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACtH,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;oBACjD,IAAI,KAAK,CAAC,IAAI;wBAAE,MAAM;oBACtB,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC/B,IAAI,IAAI,GAAG,4BAA4B;wBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBAC7E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;oBAAS,CAAC;gBAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;YAAC,CAAC;YACrF,IAAI,GAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YACzG,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACxG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC9B,IAAI,SAAS,CAAC,SAAS,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YACzF,IAAI,QAAqE,CAAC;YAC1E,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,IAAI;gBAAE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBACnE,IAAI,QAAQ,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,UAAU;wBAAE,QAAQ,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;gBAC3H,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxI,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,MAAM,WAAW,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI;mBACnE,WAAW,CAAC,WAAW,KAAK,QAAQ,CAAC,IAAI,CAAC,WAAW;mBACrD,CAAC,iBAAiB,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACjH,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1C,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC;YACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;gBACvB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY;oBACnG,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7E,wEAAwE;gBACxE,uEAAuE;gBACvE,QAAQ,GAAG,UAAU,CAAC;gBACtB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAAC,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;oBAAC,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBACjG,OAAO,UAAU,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC;YAC5B,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,CAAC;YACd,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC3F,MAAM,KAAK,GAAI,KAAK,CAAC,OAAuD,EAAE,iBAAiB,CAAC;gBAChG,MAAM,iBAAiB,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChI,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mCAAmC,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5I,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC/D,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,YAAY,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5H,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACjH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,QAAQ;gBAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/mcp-setup-clients.d.ts

@@ -0,0 +1,24 @@
+import { type McpOAuthClientResolver, type McpOAuthClientResolverInput, type ResolvedMcpOAuthClient } from "@polpo-ai/connect";
+export interface McpOAuthSetupClientReference {
+    id: string;
+    fingerprint: string;
+}
+/** Host configuration lookup only: no provider I/O and no browser-owned identity. */
+export declare function resolveMcpOAuthSetupClient(resolver: McpOAuthClientResolver, input: McpOAuthClientResolverInput): Promise<{
+    client: ResolvedMcpOAuthClient;
+    reference: {
+        id: string;
+        fingerprint: string;
+    };
+    registrationNamespace: string;
+}>;
+/** Re-resolve before start/callback/activation; a saved ID is not permanent authorization. */
+export declare function verifyMcpOAuthSetupClient(resolver: McpOAuthClientResolver, reference: McpOAuthSetupClientReference): Promise<{
+    client: ResolvedMcpOAuthClient;
+    reference: {
+        id: string;
+        fingerprint: string;
+    };
+    registrationNamespace: string;
+}>;
+//# sourceMappingURL=mcp-setup-clients.d.ts.map

package/dist/mcp-setup-clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-setup-clients.d.ts","sourceRoot":"","sources":["../src/mcp-setup-clients.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,sBAAsB,EAAE,KAAK,2BAA2B,EAAE,KAAK,sBAAsB,EAC3F,MAAM,mBAAmB,CAAC;AAG3B,MAAM,WAAW,4BAA4B;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAgEjF,qFAAqF;AACrF,wBAAsB,0BAA0B,CAAC,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,2BAA2B;;;;;;;GAWpH;AAED,8FAA8F;AAC9F,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,4BAA4B;;;;;;;GAMxH"}

package/dist/mcp-setup-clients.js

@@ -0,0 +1,113 @@
+import { createHash } from "node:crypto";
+import { ConnectError, connectorHostnameIsUnsafe, } from "@polpo-ai/connect";
+import { normalizeMcpOAuthRedirect } from "./mcp-oauth-redirect.js";
+function invalid() {
+    throw new ConnectError("setup_invalid", "MCP OAuth client configuration is unavailable or changed; restart setup");
+}
+function text(value) {
+    if (typeof value !== "string" || !value.trim() || value.length > 2048)
+        invalid();
+    return value.trim();
+}
+function https(value, document = false) {
+    let url;
+    try {
+        url = new URL(text(value));
+    }
+    catch {
+        invalid();
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.hash || connectorHostnameIsUnsafe(url.hostname)
+        || (document && url.pathname === "/"))
+        invalid();
+    for (const key of url.searchParams.keys()) {
+        if (/^(access_token|refresh_token|client_secret|api[_-]?key|authorization|password|token|secret|code|state)$/i.test(key))
+            invalid();
+    }
+    return url.toString();
+}
+function canonical(value, depth = 0) {
+    if (depth > 32)
+        invalid();
+    if (Array.isArray(value))
+        return value.map(item => canonical(item, depth + 1));
+    if (value && typeof value === "object")
+        return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => [key, canonical(item, depth + 1)]));
+    return value;
+}
+function normalize(client) {
+    if (!client || !client.owner || !["project", "org", "platform", "instance"].includes(client.owner.type)
+        || !["http", "sse"].includes(client.transport) || !client.registration)
+        invalid();
+    const registration = client.registration;
+    let normalized;
+    if (registration.mode === "dynamic")
+        normalized = { mode: "dynamic", clientName: text(registration.clientName),
+            ...(registration.clientUri ? { clientUri: https(registration.clientUri) } : {}) };
+    else if (registration.mode === "metadata_document")
+        normalized = { mode: "metadata_document", clientMetadataUrl: https(registration.clientMetadataUrl, true) };
+    else if (registration.mode === "pre_registered") {
+        if (!registration.client || typeof registration.client !== "object" || Array.isArray(registration.client))
+            invalid();
+        let serialized;
+        try {
+            serialized = JSON.stringify(registration.client);
+        }
+        catch {
+            invalid();
+        }
+        if (serialized.length > 16_384)
+            invalid();
+        normalized = { mode: "pre_registered", client: { ...JSON.parse(serialized), client_id: text(registration.client.client_id) } };
+    }
+    else
+        invalid();
+    let redirectUri;
+    try {
+        redirectUri = normalizeMcpOAuthRedirect(text(client.redirectUri));
+    }
+    catch {
+        invalid();
+    }
+    return { id: text(client.id), providerId: text(client.providerId),
+        ...(client.authenticationId ? { authenticationId: text(client.authenticationId) } : {}),
+        owner: { type: client.owner.type, id: text(client.owner.id) }, resourceUrl: https(client.resourceUrl),
+        transport: client.transport, redirectUri, registration: normalized };
+}
+function resolved(raw) {
+    const client = normalize(raw);
+    const registration = structuredClone(client.registration);
+    if (registration.mode === "pre_registered") {
+        // Secret rotation keeps the registered client identity. It is resolved live.
+        delete registration.client.client_secret;
+        delete registration.client.client_secret_expires_at;
+    }
+    const fingerprint = createHash("sha256").update(JSON.stringify(canonical({ ...client, registration }))).digest("hex");
+    return { client, reference: { id: client.id, fingerprint }, registrationNamespace: fingerprint };
+}
+/** Host configuration lookup only: no provider I/O and no browser-owned identity. */
+export async function resolveMcpOAuthSetupClient(resolver, input) {
+    const result = resolved(await resolver.resolve(input));
+    const client = result.client;
+    if (client.providerId !== input.providerId || (input.authenticationId && client.authenticationId !== input.authenticationId)
+        || (input.configurationId && client.id !== input.configurationId))
+        invalid();
+    const mode = input.mode ?? "managed";
+    const ownerAllowed = mode === "customer"
+        ? (client.owner.type === "project" && client.owner.id === input.projectId) || (client.owner.type === "org" && client.owner.id === input.orgId)
+        : mode === "instance" ? client.owner.type === "instance" : mode === "managed" && client.owner.type === "platform";
+    if (!ownerAllowed)
+        invalid();
+    return result;
+}
+/** Re-resolve before start/callback/activation; a saved ID is not permanent authorization. */
+export async function verifyMcpOAuthSetupClient(resolver, reference) {
+    const client = await resolver.resolveById(reference.id);
+    if (!client)
+        invalid();
+    const result = resolved(client);
+    if (result.reference.id !== reference.id || result.reference.fingerprint !== reference.fingerprint)
+        invalid();
+    return result;
+}
+//# sourceMappingURL=mcp-setup-clients.js.map

package/dist/mcp-setup-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-setup-clients.js","sourceRoot":"","sources":["../src/mcp-setup-clients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,YAAY,EAAE,yBAAyB,GAExC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAIpE,SAAS,OAAO;IACd,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,yEAAyE,CAAC,CAAC;AACrH,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,EAAE,CAAC;IACjF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,QAAQ,GAAG,KAAK;IAC7C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC;WAC/G,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,0GAA0G,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IACtI,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC1C,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChM,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAA8B;IAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;WAClG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IACpF,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,IAAI,UAAkD,CAAC;IACvD,IAAI,YAAY,CAAC,IAAI,KAAK,SAAS;QAAE,UAAU,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAC5G,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;SAC/E,IAAI,YAAY,CAAC,IAAI,KAAK,mBAAmB;QAAE,UAAU,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC;SAC1J,IAAI,YAAY,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAChD,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,OAAO,YAAY,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACrH,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAC9E,IAAI,UAAU,CAAC,MAAM,GAAG,MAAM;YAAE,OAAO,EAAE,CAAC;QAC1C,UAAU,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;IACjI,CAAC;;QAAM,OAAO,EAAE,CAAC;IACjB,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QAAC,WAAW,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAC/F,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QAC/D,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;QACrG,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,GAA2B;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,YAAY,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC3C,6EAA6E;QAC7E,OAAO,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC;QACzC,OAAO,YAAY,CAAC,MAAM,CAAC,wBAAwB,CAAC;IACtD,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;AACnG,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAgC,EAAE,KAAkC;IACnH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,CAAC;WACvH,CAAC,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;IACrC,MAAM,YAAY,GAAG,IAAI,KAAK,UAAU;QACtC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC;QAC9I,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;IACpH,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,QAAgC,EAAE,SAAuC;IACvH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC9G,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/mcp-transport.d.ts

@@ -0,0 +1,20 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+export interface RemoteMcpTransportInput {
+    url: string;
+    transport?: "http" | "sse";
+    /** Host-resolved credentials; never expose these as model tool arguments. */
+    headers?: Record<string, string>;
+    /** Host authorization and current credentials, rechecked before EVERY HTTP send. */
+    authorize?: () => Promise<HeadersInit | undefined>;
+    /** Host budget debit, after authorization and before each actual HTTP send. */
+    beforeDispatch?: (input: {
+        method: string;
+    }) => Promise<void>;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    /** An injected host transport must provide equivalent DNS/socket enforcement. */
+    fetch?: typeof globalThis.fetch;
+}
+/** Bounded native MCP lifecycle shared by verification and authorized execution. */
+export declare function withRemoteMcpClient<T>(input: RemoteMcpTransportInput, run: (client: Client, signal: AbortSignal) => Promise<T>): Promise<T>;
+//# sourceMappingURL=mcp-transport.d.ts.map

package/dist/mcp-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-transport.d.ts","sourceRoot":"","sources":["../src/mcp-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAOnE,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC3B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IACnD,+EAA+E;IAC/E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC;AAQD,oFAAoF;AACpF,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,EACzE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CA0HtE"}

package/dist/mcp-transport.js

@@ -0,0 +1,163 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
+import { ConnectionSelectionError } from "@polpo-ai/core";
+import { ConnectError, connectorHostnameIsUnsafe } from "@polpo-ai/connect";
+import { publicNetworkFetch } from "./public-network.js";
+const MAX_RESPONSE_BYTES = 2 * 1024 * 1024;
+const failed = (category, providerStatus) => new ConnectError("http_error", "MCP request failed", {
+    details: { category, ...(providerStatus === undefined ? {} : { providerStatus }) },
+});
+const denied = () => new ConnectError("policy_denied", "MCP destination is not allowed");
+/** Bounded native MCP lifecycle shared by verification and authorized execution. */
+export async function withRemoteMcpClient(input, run) {
+    let endpoint;
+    try {
+        endpoint = new URL(input.url);
+    }
+    catch {
+        throw denied();
+    }
+    if (endpoint.protocol !== "https:" || endpoint.username || endpoint.password || endpoint.hash || connectorHostnameIsUnsafe(endpoint.hostname))
+        throw denied();
+    const controller = new AbortController();
+    const client = new Client({ name: "polpo-connect", version: "1" }, { capabilities: {} });
+    const readers = new Set();
+    const safeError = (error) => error instanceof ConnectError || error instanceof ConnectionSelectionError ? error : failed("transport_failed");
+    let failure;
+    let rejectDeadline = () => { };
+    const deadline = new Promise((_, reject) => { rejectDeadline = reject; });
+    const stop = (error) => {
+        failure ??= error;
+        rejectDeadline(failure);
+        controller.abort();
+        for (const reader of readers)
+            void reader.cancel().catch(() => undefined);
+        void client.close().catch(() => undefined);
+    };
+    const abort = () => stop(failed("aborted"));
+    const timeout = setTimeout(abort, Math.min(Math.max(input.timeoutMs ?? 30_000, 1), 30_000));
+    input.signal?.addEventListener("abort", abort, { once: true });
+    const fetchBounded = async (resource, init) => {
+        try {
+            if (controller.signal.aborted)
+                throw failure ?? failed("aborted");
+            const url = new URL(resource instanceof Request ? resource.url : String(resource));
+            // SSE can advertise a POST path, but it cannot redirect credentials to
+            // another origin. The public transport pins DNS for the actual socket.
+            if (url.origin !== endpoint.origin || url.username || url.password || url.hash
+                || (input.transport !== "sse" && (url.pathname !== endpoint.pathname || url.search !== endpoint.search)))
+                throw denied();
+            const headers = new Headers(init?.headers);
+            if (input.authorize) {
+                const authorizedHeaders = new Headers(await input.authorize());
+                authorizedHeaders.forEach((value, name) => headers.set(name, value));
+            }
+            if (controller.signal.aborted)
+                throw failure ?? failed("aborted");
+            await input.beforeDispatch?.({ method: init?.method ?? (resource instanceof Request ? resource.method : "GET") });
+            if (controller.signal.aborted)
+                throw failure ?? failed("aborted");
+            const response = await (input.fetch ?? publicNetworkFetch)(resource, {
+                ...init, headers, redirect: "error", signal: controller.signal,
+            });
+            if (controller.signal.aborted) {
+                void response.body?.cancel().catch(() => undefined);
+                throw failure ?? failed("aborted");
+            }
+            // Streamable HTTP may reject its optional listening GET or session DELETE.
+            if (!response.ok && !((init?.method === "GET" || init?.method === "DELETE") && response.status === 405)) {
+                void response.body?.cancel().catch(() => undefined);
+                throw failed("provider_rejected", response.status);
+            }
+            if (Number(response.headers.get("content-length")) > MAX_RESPONSE_BYTES) {
+                void response.body?.cancel().catch(() => undefined);
+                throw failed("response_too_large");
+            }
+            if (!response.body)
+                return response;
+            const reader = response.body.getReader();
+            readers.add(reader);
+            let size = 0;
+            let cancelled = false;
+            const body = new ReadableStream({
+                async pull(stream) {
+                    try {
+                        const { value, done } = await reader.read();
+                        if (cancelled)
+                            return;
+                        if (done) {
+                            readers.delete(reader);
+                            stream.close();
+                            return;
+                        }
+                        size += value.byteLength;
+                        if (size > MAX_RESPONSE_BYTES)
+                            throw failed("response_too_large");
+                        stream.enqueue(value);
+                    }
+                    catch (error) {
+                        // The SDK cancels a Streamable HTTP SSE body once its response is
+                        // received. A pending pull must not turn that normal close into a
+                        // failure of the following tools/list request.
+                        if (cancelled || controller.signal.aborted)
+                            return;
+                        const safe = safeError(error);
+                        stream.error(safe);
+                        stop(safe);
+                    }
+                },
+                cancel() { cancelled = true; readers.delete(reader); return reader.cancel().catch(() => undefined); },
+            });
+            return new Response(body, { status: response.status, statusText: response.statusText, headers: response.headers });
+        }
+        catch (error) {
+            const safe = safeError(error);
+            stop(safe);
+            throw safe;
+        }
+    };
+    const requestInit = { headers: input.authorize ? undefined : input.headers, redirect: "error" };
+    const transport = input.transport === "sse"
+        ? new SSEClientTransport(endpoint, { fetch: fetchBounded, requestInit })
+        : new StreamableHTTPClientTransport(endpoint, { fetch: fetchBounded, requestInit,
+            reconnectionOptions: { maxRetries: 0, initialReconnectionDelay: 1000, maxReconnectionDelay: 1000, reconnectionDelayGrowFactor: 1 } });
+    try {
+        if (input.signal?.aborted)
+            abort();
+        return await Promise.race([deadline, (async () => {
+                if (controller.signal.aborted)
+                    throw failure ?? failed("aborted");
+                await client.connect(transport);
+                return run(client, controller.signal);
+            })()]);
+    }
+    catch (error) {
+        throw failure ?? (error instanceof ConnectError || error instanceof ConnectionSelectionError ? error : failed("invalid_response"));
+    }
+    finally {
+        // close() only tears down the local transport. A stateful HTTP server also
+        // needs DELETE. Reauthorize it like every send, and never turn a completed
+        // mutation into an apparent failure if remote cleanup is unavailable.
+        if (transport instanceof StreamableHTTPClientTransport && transport.sessionId && !controller.signal.aborted) {
+            let cleanupTimeout;
+            try {
+                await Promise.race([
+                    transport.terminateSession().catch(() => undefined),
+                    new Promise(resolve => { cleanupTimeout = setTimeout(() => { controller.abort(); resolve(); }, 1000); }),
+                    deadline.catch(() => undefined),
+                ]);
+            }
+            finally {
+                clearTimeout(cleanupTimeout);
+            }
+        }
+        clearTimeout(timeout);
+        input.signal?.removeEventListener("abort", abort);
+        controller.abort();
+        for (const reader of readers)
+            void reader.cancel().catch(() => undefined);
+        await client.close().catch(() => undefined);
+    }
+}
+//# sourceMappingURL=mcp-transport.js.map

package/dist/mcp-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-transport.js","sourceRoot":"","sources":["../src/mcp-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAiBzD,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,cAAuB,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,YAAY,EAAE,oBAAoB,EAAE;IACjH,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;CACnF,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,eAAe,EAAE,gCAAgC,CAAC,CAAC;AAEzF,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAI,KAA8B,EACzE,GAAwD;IACxD,IAAI,QAAa,CAAC;IAClB,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,MAAM,EAAE,CAAC;IAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,IAAI,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,MAAM,EAAE,CAAC;IAC9J,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IAEnE,MAAM,SAAS,GAAG,CAAC,KAAc,EAAa,EAAE,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACjK,IAAI,OAA8B,CAAC;IACnC,IAAI,cAAc,GAA+B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,KAAgB,EAAE,EAAE;QAChC,OAAO,KAAK,KAAK,CAAC;QAClB,cAAc,CAAC,OAAO,CAAC,CAAC;QACxB,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5F,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAiB,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAC1D,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,YAAY,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnF,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;mBACzE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,MAAM,EAAE,CAAC;YAC3H,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC/D,iBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,QAAQ,YAAY,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,kBAAkB,CAAC,CAAC,QAAQ,EAAE;gBACnE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC/D,CAAC,CAAC;YACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpD,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YACD,2EAA2E;YAC3E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,IAAI,IAAI,EAAE,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;gBACxG,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpD,MAAM,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,kBAAkB,EAAE,CAAC;gBACxE,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACpD,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,OAAO,QAAQ,CAAC;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,cAAc,CAAa;gBAC1C,KAAK,CAAC,IAAI,CAAC,MAAM;oBACf,IAAI,CAAC;wBACH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBAC5C,IAAI,SAAS;4BAAE,OAAO;wBACtB,IAAI,IAAI,EAAE,CAAC;4BAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;4BAAC,MAAM,CAAC,KAAK,EAAE,CAAC;4BAAC,OAAO;wBAAC,CAAC;wBAC7D,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;wBACzB,IAAI,IAAI,GAAG,kBAAkB;4BAAE,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;wBAClE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACxB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,kEAAkE;wBAClE,kEAAkE;wBAClE,+CAA+C;wBAC/C,IAAI,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;4BAAE,OAAO;wBACnD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;wBAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,CAAC;oBACb,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,SAAS,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;aACtG,CAAC,CAAC;YACH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACrH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,CAAC;YACX,MAAM,IAAI,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE,CAAC;IACzG,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK;QACzC,CAAC,CAAC,IAAI,kBAAkB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QACxE,CAAC,CAAC,IAAI,6BAA6B,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW;YAC5E,mBAAmB,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACnC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,IAAI,EAAE;gBAC/C,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClE,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,OAAO,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,IAAI,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,YAAY,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACrI,CAAC;YAAS,CAAC;QACT,2EAA2E;QAC3E,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,SAAS,YAAY,6BAA6B,IAAI,SAAS,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5G,IAAI,cAAyD,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,CAAC;oBACjB,SAAS,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;oBACnD,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9G,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAAC,CAAC;QAC7C,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClD,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/memory-store.d.ts

@@ -1,4 +1,4 @@
-import { type ConnectStore, type ConnectionLink, type ConnectionLinkListFilter, type ConnectionLinkStore, type ConnectionListFilter, type ConnectionRecord, type ConnectionSetupSession, type ConnectionSetupSessionStore, type OAuthStateRecord } from "@polpo-ai/connect";
+import { type McpOAuthConnectionCommit, type McpOAuthSetupCommit, type McpOAuthSetupFailure, type ConnectionSetupCompletionIntent, type ConnectionSetupOutcome, type OAuthReconnectSnapshot, type OAuthCredentialReplacement, type ConnectStore, type ConnectionLink, type ConnectionLinkListFilter, type ConnectionLinkStore, type ConnectionListFilter, type ConnectionRecord, type ConnectionSetupSession, type ConnectionSetupSessionStore, type OAuthStateRecord } from "@polpo-ai/connect";
 export declare class MemoryConnectStore implements ConnectStore, ConnectionLinkStore, ConnectionSetupSessionStore {
     private readonly connections;
     private readonly oauthStates;
@@ -9,9 +9,13 @@ export declare class MemoryConnectStore implements ConnectStore, ConnectionLinkS
     upsertConnection(record: ConnectionRecord): Promise<ConnectionRecord>;
     updateConnection(id: string, patch: Partial<Omit<ConnectionRecord, "id" | "createdAt">>): Promise<ConnectionRecord>;
     deleteConnection(id: string): Promise<void>;
+    replaceOAuthCredential(expected: OAuthReconnectSnapshot, replacement: OAuthCredentialReplacement): Promise<ConnectionRecord | null>;
     saveOAuthState(record: OAuthStateRecord): Promise<void>;
     consumeOAuthState(state: string): Promise<OAuthStateRecord | null>;
     getOAuthState(state: string): Promise<OAuthStateRecord | null>;
+    commitMcpOAuthConnection(input: McpOAuthConnectionCommit): Promise<ConnectionRecord | null>;
+    commitMcpOAuthSetup(input: McpOAuthSetupCommit): Promise<ConnectionRecord | null>;
+    failMcpOAuthSetup(input: McpOAuthSetupFailure): Promise<ConnectionSetupSession | null>;
     claimOAuthState(state: string, claimToken: string, claimExpiresAt: string, now: string): Promise<OAuthStateRecord | null>;
     completeOAuthState(state: string, claimToken: string, connectionId: string): Promise<OAuthStateRecord | null>;
     releaseOAuthState(state: string, claimToken: string, errorCode: string): Promise<OAuthStateRecord | null>;
@@ -21,6 +25,11 @@ export declare class MemoryConnectStore implements ConnectStore, ConnectionLinkS
     updateConnectionLink(id: string, patch: Partial<Omit<ConnectionLink, "id" | "createdAt">>): Promise<ConnectionLink>;
     saveConnectionSetupSession(session: ConnectionSetupSession): Promise<void>;
     getConnectionSetupSession(id: string): Promise<ConnectionSetupSession | null>;
-    consumeConnectionSetupSession(id: string, consumedAt: string): Promise<ConnectionSetupSession | null>;
+    getConnectionSetupSessionByReference(reference: string): Promise<ConnectionSetupSession | null>;
+    consumeConnectionSetupSession(id: string, consumedAt: string, authorizationExpiresAt?: string): Promise<ConnectionSetupSession | null>;
+    cancelConnectionSetupSession(id: string, cancelledAt: string): Promise<ConnectionSetupSession | null>;
+    prepareConnectionSetupCompletion(reference: string, intent: ConnectionSetupCompletionIntent): Promise<ConnectionSetupSession | null>;
+    reconcileConnectionSetupSession(reference: string): Promise<ConnectionSetupSession | null>;
+    finishConnectionSetupSession(reference: string, outcome: ConnectionSetupOutcome, _finishedAt: string): Promise<ConnectionSetupSession | null>;
 }
 //# sourceMappingURL=memory-store.d.ts.map

package/dist/memory-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../src/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,qBAAa,kBAAmB,YAAW,YAAY,EAAE,mBAAmB,EAAE,2BAA2B;IACvG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAErE,eAAe,CAAC,MAAM,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAI/E,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK3D,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKrE,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQnH,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMlE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK9D,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAmB7B,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAe7B,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc7B,mBAAmB,CAAC,MAAM,GAAE,wBAA6B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAQrF,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAK7D,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAKnE,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GACvD,OAAO,CAAC,cAAc,CAAC;IAQpB,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1E,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAK7E,6BAA6B,CACjC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;CAO1C"}
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../src/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAMzB,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACtB,MAAM,mBAAmB,CAAC;AAE3B,qBAAa,kBAAmB,YAAW,YAAY,EAAE,mBAAmB,EAAE,2BAA2B;IACvG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuC;IACnE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;IAC3D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAErE,eAAe,CAAC,MAAM,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAI/E,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK3D,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKrE,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAQnH,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3C,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,WAAW,EAAE,0BAA0B,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQnI,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMlE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAK9D,wBAAwB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAS3F,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAYjF,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAStF,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAmB7B,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAe7B,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAc7B,mBAAmB,CAAC,MAAM,GAAE,wBAA6B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAQrF,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAK7D,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAKnE,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,CAAC,CAAC,GACvD,OAAO,CAAC,cAAc,CAAC;IAQpB,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1E,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAKnF,oCAAoC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAIzF,6BAA6B,CACjC,EAAE,EAAE,MAAM,EACV,UAAU,EAAE,MAAM,EAClB,sBAAsB,CAAC,EAAE,MAAM,GAC9B,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQnC,4BAA4B,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQrG,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQpI,+BAA+B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAU1F,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;CAOpJ"}