@runpod/mcp-server 4.8.0 → 4.9.0

package/dist/http.d.ts

@@ -1,77 +1,5 @@
-import { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
-import { ServerProfile } from './specgen/profile.js';
-import { IncomingMessage, ServerResponse } from 'node:http';
-
-type CredentialVerdict = {
-    status: 'valid';
-    accountId?: string;
-} | {
-    status: 'invalid';
-    reason: string;
-} | {
-    status: 'unknown';
-};
-type CredentialChecker = (token: string) => Promise<CredentialVerdict>;
-interface CredentialCheckerHandle {
-    verify: CredentialChecker;
-    invalidate: (token: string) => void;
-}
-
-declare const ONCE_PER_ACCOUNT_ROUTES: readonly ["referral"];
-type OncePerAccountRoute = (typeof ONCE_PER_ACCOUNT_ROUTES)[number];
-
-interface HandleMcpRequestOptions {
-    serverVersion?: string;
-    verifyCredential?: CredentialChecker;
-    invalidateCredential?: (token: string) => void;
-    /** Once-per-account lookup behind the referral ask (src/alp/answered.ts).
-     *  Resolve, never reject: a rejection is treated as an unknown verdict. */
-    hasAnswered?: (identity: string, route: OncePerAccountRoute) => Promise<boolean | null>;
-}
-interface RpcSummary {
-    rpc?: string;
-    client?: string;
-}
-
-/**
- * Extract the bearer token from an HTTP request's Authorization header.
- * Returns null if the header is missing or malformed.
- */
-declare function extractBearerToken(req: IncomingMessage): string | null;
-declare function getBaseUrl(req: {
-    headers: {
-        host?: string;
-        'x-forwarded-proto'?: string | string[];
-    };
-}): string;
-declare function requestProfile(req: {
-    url?: string;
-}): ServerProfile;
-declare const defaultCredentialChecker: CredentialCheckerHandle;
-declare function parseMcpMessages(body: unknown): JSONRPCMessage[];
-declare function bodyIsCheckable(body: unknown): boolean;
-declare function prefersJsonResponse(messages: JSONRPCMessage[]): boolean;
-declare function requestLogSampleRate(env?: NodeJS.ProcessEnv): number;
-declare function summarizeRpc(messages: JSONRPCMessage[]): RpcSummary;
-/**
- * Handle an incoming HTTP request as a streamable MCP session.
- *
- * Each request gets its own McpServer + transport. The caller's Bearer token
- * is forwarded directly to the Runpod API as the credential — it may be a
- * Runpod API key (set manually by the caller) or a token obtained through the
- * OAuth "Sign in with Runpod" flow. The server holds no credential of its own
- * and never shares one across users.
- *
- * The token is pre-flight verified (cached) before the MCP request is
- * handled: a dead credential — e.g. an OAuth-minted key revoked mid-session —
- * must surface as an HTTP 401 + WWW-Authenticate so
- * OAuth-capable clients re-run their auth flow automatically. Without this,
- * the upstream 401 is wrapped into a 200 JSON-RPC tool error and the client
- * never re-authenticates. Set MCP_SKIP_CREDENTIAL_CHECK=true to disable.
- *
- * The gate also self-disables when the REST hosts are overridden without a
- * matching RUNPOD_AUTHED_GRAPHQL_URL — see credentialCheckMayBeWrongEnvironment.
- */
-declare function handleMcpRequest(req: IncomingMessage, res: ServerResponse, opts?: HandleMcpRequestOptions): Promise<void>;
-
-export { bodyIsCheckable, defaultCredentialChecker, extractBearerToken, getBaseUrl, handleMcpRequest, parseMcpMessages, prefersJsonResponse, requestLogSampleRate, requestProfile, summarizeRpc };
+import '@modelcontextprotocol/sdk/types.js';
+export { b as bodyIsCheckable, d as defaultCredentialChecker, e as extractBearerToken, g as getBaseUrl, h as handleMcpRequest, p as parseMcpMessages, a as prefersJsonResponse, c as requestLogSampleRate, r as requestProfile, s as summarizeRpc } from './http-BcFDW7LG.js';
+import './specgen/profile.js';
+import 'node:http';
+import './sink-Cm8lp16D.js';