@smthrs/mcp 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/index.js

@@ -0,0 +1,39 @@
+/**
+ * Model Context Protocol client and flow bindings.
+ *
+ * `McpClient` speaks the stdio protocol to a configured MCP server, and
+ * `McpFlows` projects that server's tools into the flow catalog as
+ * `mcp/<server>/<tool>` bindings. `@smthrs/cli` composes both behind
+ * `--mcp-config`.
+ *
+ * ```ts
+ * import { McpFlows } from "@smthrs/mcp"
+ * ```
+ *
+ * @since 1.0.0-rc.0
+ */
+/**
+ * @category services
+ * @since 1.0.0-rc.0
+ * @slop
+ */
+export * as McpClient from "./McpClient.js";
+/**
+ * @category services
+ * @since 1.0.0-rc.0
+ * @slop
+ */
+export * as Diagnostics from "./Diagnostics.js";
+/**
+ * @category errors
+ * @since 1.0.0-rc.0
+ * @slop
+ */
+export * as McpError from "./McpError.js";
+/**
+ * @category services
+ * @since 1.0.0-rc.0
+ * @slop
+ */
+export * as McpFlows from "./McpFlows.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;;GAIG;AACH,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C;;;;GAIG;AACH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA;AAEzC;;;;GAIG;AACH,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA","sourcesContent":["/**\n * Model Context Protocol client and flow bindings.\n *\n * `McpClient` speaks the stdio protocol to a configured MCP server, and\n * `McpFlows` projects that server's tools into the flow catalog as\n * `mcp/<server>/<tool>` bindings. `@smthrs/cli` composes both behind\n * `--mcp-config`.\n *\n * ```ts\n * import { McpFlows } from \"@smthrs/mcp\"\n * ```\n *\n * @since 1.0.0-rc.0\n */\n\n/**\n * @category services\n * @since 1.0.0-rc.0\n * @slop\n */\nexport * as McpClient from \"./McpClient.ts\"\n\n/**\n * @category services\n * @since 1.0.0-rc.0\n * @slop\n */\nexport * as Diagnostics from \"./Diagnostics.ts\"\n\n/**\n * @category errors\n * @since 1.0.0-rc.0\n * @slop\n */\nexport * as McpError from \"./McpError.ts\"\n\n/**\n * @category services\n * @since 1.0.0-rc.0\n * @slop\n */\nexport * as McpFlows from \"./McpFlows.ts\"\n"]}

package/dist/esm/internal/DiagnosticReporter.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Internal optional-observer capture. Every detail is redacted with
+ * `Redaction.redactDiagnostic` and then wrapped in `Redacted`. Stderr is redacted by the
+ * transport, one whole line at a time, before its byte cap.
+ *
+ * @since 1.0.0-rc.0
+ */
+import { Effect } from "effect";
+import * as Diagnostics from "../Diagnostics.ts";
+/**
+ * Captures the optional host observer without introducing a required service.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export declare const make: (server: string) => Effect.Effect<(source: Diagnostics.Event["source"], detail: unknown) => void, never, never>;
+//# sourceMappingURL=DiagnosticReporter.d.ts.map

package/dist/esm/internal/DiagnosticReporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiagnosticReporter.d.ts","sourceRoot":"","sources":["../../../src/internal/DiagnosticReporter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,MAAM,EAAoB,MAAM,QAAQ,CAAA;AACjD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAA;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,IAAI,GAAI,QAAQ,MAAM,4BAGR,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,OAAO,KAAG,IAAI,eAyB3E,CAAA"}

package/dist/esm/internal/DiagnosticReporter.js

@@ -0,0 +1,44 @@
+/**
+ * Internal optional-observer capture. Every detail is redacted with
+ * `Redaction.redactDiagnostic` and then wrapped in `Redacted`. Stderr is redacted by the
+ * transport, one whole line at a time, before its byte cap.
+ *
+ * @since 1.0.0-rc.0
+ */
+import * as Redaction from "@smthrs/journal/Redaction";
+import { Effect, Option, Redacted } from "effect";
+import * as Diagnostics from "../Diagnostics.js";
+/**
+ * Captures the optional host observer without introducing a required service.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export const make = (server) => Effect.map(Effect.serviceOption(Diagnostics.Diagnostics), (observer) => (source, detail) => {
+    if (Option.isNone(observer))
+        return;
+    try {
+        // A remote error can echo a credential and an argument snapshot can
+        // carry one under a secret key, so every source is redacted here.
+        // StdioTransport redacts stderr line by line as it arrives, holding a
+        // value that spans lines until it closes, and caps only the redacted
+        // text to `maxStderrBytes`, so the cap cannot cut a credential's
+        // recognizable prefix. Redacting that capped tail again would regrow
+        // it past the cap.
+        const redacted = source === "stderr" ? detail : Redaction.redactDiagnostic(detail);
+        const text = typeof redacted === "string" ? redacted : JSON.stringify(redacted);
+        const bytes = new TextEncoder().encode(text);
+        const truncated = bytes.byteLength > 16_384;
+        observer.value.report({
+            server,
+            source,
+            detail: Redacted.make(new TextDecoder().decode(bytes.subarray(0, 16_384), { stream: truncated })),
+            truncated
+        });
+    }
+    catch {
+        // Observer failures are not MCP failures. Their messages can themselves
+        // contain the diagnostic, so neither attach nor log the thrown value.
+    }
+});
+//# sourceMappingURL=DiagnosticReporter.js.map

package/dist/esm/internal/DiagnosticReporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DiagnosticReporter.js","sourceRoot":"","sources":["../../../src/internal/DiagnosticReporter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,SAAS,MAAM,2BAA2B,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAA;AACjD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAA;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CACR,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,WAAW,CAAC,EAC7C,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAmC,EAAE,MAAe,EAAQ,EAAE;IAC3E,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAM;IACnC,IAAI,CAAC;QACH,oEAAoE;QACpE,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,iEAAiE;QACjE,qEAAqE;QACrE,mBAAmB;QACnB,MAAM,QAAQ,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QAClF,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC/E,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,CAAA;QAC3C,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YACpB,MAAM;YACN,MAAM;YACN,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACjG,SAAS;SACV,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,sEAAsE;IACxE,CAAC;AACH,CAAC,CACF,CAAA","sourcesContent":["/**\n * Internal optional-observer capture. Every detail is redacted with\n * `Redaction.redactDiagnostic` and then wrapped in `Redacted`. Stderr is redacted by the\n * transport, one whole line at a time, before its byte cap.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as Redaction from \"@smthrs/journal/Redaction\"\nimport { Effect, Option, Redacted } from \"effect\"\nimport * as Diagnostics from \"../Diagnostics.ts\"\n\n/**\n * Captures the optional host observer without introducing a required service.\n *\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const make = (server: string) =>\n  Effect.map(\n    Effect.serviceOption(Diagnostics.Diagnostics),\n    (observer) => (source: Diagnostics.Event[\"source\"], detail: unknown): void => {\n      if (Option.isNone(observer)) return\n      try {\n        // A remote error can echo a credential and an argument snapshot can\n        // carry one under a secret key, so every source is redacted here.\n        // StdioTransport redacts stderr line by line as it arrives, holding a\n        // value that spans lines until it closes, and caps only the redacted\n        // text to `maxStderrBytes`, so the cap cannot cut a credential's\n        // recognizable prefix. Redacting that capped tail again would regrow\n        // it past the cap.\n        const redacted = source === \"stderr\" ? detail : Redaction.redactDiagnostic(detail)\n        const text = typeof redacted === \"string\" ? redacted : JSON.stringify(redacted)\n        const bytes = new TextEncoder().encode(text)\n        const truncated = bytes.byteLength > 16_384\n        observer.value.report({\n          server,\n          source,\n          detail: Redacted.make(new TextDecoder().decode(bytes.subarray(0, 16_384), { stream: truncated })),\n          truncated\n        })\n      } catch {\n        // Observer failures are not MCP failures. Their messages can themselves\n        // contain the diagnostic, so neither attach nor log the thrown value.\n      }\n    }\n  )\n"]}

package/dist/esm/internal/HttpTransport.d.ts

@@ -0,0 +1,67 @@
+/**
+ * JSON-RPC over the MCP Streamable HTTP transport.
+ *
+ * Every client message is one `POST` to the server's endpoint. A notification
+ * is answered with `202 Accepted`; a request is answered either with one
+ * `application/json` reply or with a `text/event-stream` whose events carry
+ * server notifications, server requests, and finally the reply. The server's
+ * `Mcp-Session-Id` from `initialize` is sent on every later message, together
+ * with the negotiated `MCP-Protocol-Version`.
+ *
+ * Requests go through the `HttpClient` in context, which is the host's egress
+ * client: its proxy, pinning, and capability checks apply unchanged, and a
+ * destination the egress policy denies fails with `connection_closed`.
+ *
+ * Out of scope: the optional standalone `GET` event stream, resuming a broken
+ * event stream with `Last-Event-ID`, and OAuth discovery. An expired session
+ * fails rather than re-initializing, so no request is ever replayed.
+ *
+ * @since 1.0.0-rc.1
+ */
+import { Effect, type Redacted, type Scope } from "effect";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import type { McpError } from "../McpError.ts";
+import * as Transport from "./Transport.ts";
+/**
+ * Supplies the bearer credential for a Streamable HTTP server.
+ *
+ * `token` runs once per HTTP message, so a provider can rotate or refresh the
+ * credential between messages. Its failure fails that message unchanged.
+ *
+ * @category models
+ * @since 1.0.0-rc.1
+ */
+export interface AuthProvider {
+    readonly token: Effect.Effect<Redacted.Redacted<string>, McpError>;
+}
+/**
+ * Options accepted by {@link connect}.
+ *
+ * @category models
+ * @since 1.0.0-rc.1
+ */
+export interface ConnectOptions {
+    /** The name this server is known by, for error messages only. */
+    readonly server: string;
+    /** The server's MCP endpoint: an absolute `http:` or `https:` URL without credentials. */
+    readonly url: string;
+    /** Bearer credential source. Omit for a server that needs none. */
+    readonly authProvider?: AuthProvider | undefined;
+    /** Default deadline for a request/reply exchange. See {@link Transport.defaultRequestTimeoutMs}. */
+    readonly requestTimeoutMs?: number | undefined;
+    /** Maximum UTF-8 bytes accepted in one inbound JSON-RPC message. See {@link Transport.defaultMaxFrameBytes}. */
+    readonly maxFrameBytes?: number | undefined;
+    /** Maximum UTF-8 bytes emitted in one JSON-RPC message. See {@link Transport.defaultMaxOutboundFrameBytes}. */
+    readonly maxOutboundFrameBytes?: number | undefined;
+}
+/**
+ * Opens a Streamable HTTP session and returns a live {@link Transport.Transport}.
+ * No message is sent until the first request; the endpoint and limits are
+ * checked first. Closing the calling scope ends the session with a
+ * best-effort `DELETE` and rejects later traffic.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.1
+ */
+export declare const connect: (options: ConnectOptions) => Effect.Effect<Transport.Transport, McpError, HttpClient.HttpClient | Scope.Scope>;
+//# sourceMappingURL=HttpTransport.d.ts.map

package/dist/esm/internal/HttpTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpTransport.d.ts","sourceRoot":"","sources":["../../../src/internal/HttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAY,MAAM,EAAU,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAU,MAAM,QAAQ,CAAA;AACpF,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAG7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAK9C,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAE3C;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;CACnE;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IAChD,oGAAoG;IACpG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9C,gHAAgH;IAChH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3C,+GAA+G;IAC/G,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACpD;AAoBD;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,GAClB,SAAS,cAAc,KACtB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CA8S/E,CAAA"}

package/dist/esm/internal/HttpTransport.js

@@ -0,0 +1,266 @@
+/**
+ * JSON-RPC over the MCP Streamable HTTP transport.
+ *
+ * Every client message is one `POST` to the server's endpoint. A notification
+ * is answered with `202 Accepted`; a request is answered either with one
+ * `application/json` reply or with a `text/event-stream` whose events carry
+ * server notifications, server requests, and finally the reply. The server's
+ * `Mcp-Session-Id` from `initialize` is sent on every later message, together
+ * with the negotiated `MCP-Protocol-Version`.
+ *
+ * Requests go through the `HttpClient` in context, which is the host's egress
+ * client: its proxy, pinning, and capability checks apply unchanged, and a
+ * destination the egress policy denies fails with `connection_closed`.
+ *
+ * Out of scope: the optional standalone `GET` event stream, resuming a broken
+ * event stream with `Last-Event-ID`, and OAuth discovery. An expired session
+ * fails rather than re-initializing, so no request is ever replayed.
+ *
+ * @since 1.0.0-rc.1
+ */
+import { isRecord } from "@smthrs/canonical/Record";
+import * as KernelHttpClient from "@smthrs/kernel/HttpClient";
+import { Deferred, Effect, Option, Stream } from "effect";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+import * as DiagnosticReporter from "./DiagnosticReporter.js";
+import * as JsonLimits from "./JsonLimits.js";
+import * as Limits from "./Limits.js";
+import * as Rpc from "./Rpc.js";
+import * as Transport from "./Transport.js";
+/** Deadline for the best-effort `DELETE` that ends a session on scope close. */
+const sessionCloseMs = 1_000;
+/** A session id is visible ASCII only (0x21-0x7E). */
+const validSessionId = /^[\x21-\x7e]+$/;
+const endpointOf = (url) => {
+    if (!URL.canParse(url))
+        return undefined;
+    const parsed = new URL(url);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:")
+        return undefined;
+    if (parsed.username !== "" || parsed.password !== "")
+        return undefined;
+    return parsed;
+};
+const utf8 = new TextEncoder();
+const mediaType = (header) => (header ?? "").split(";")[0].trim().toLowerCase();
+/**
+ * Opens a Streamable HTTP session and returns a live {@link Transport.Transport}.
+ * No message is sent until the first request; the endpoint and limits are
+ * checked first. Closing the calling scope ends the session with a
+ * best-effort `DELETE` and rejects later traffic.
+ *
+ * @category constructors
+ * @since 1.0.0-rc.1
+ */
+export const connect = (options) => Effect.gen(function* () {
+    const server = options.server;
+    const diagnostic = yield* DiagnosticReporter.make(server);
+    const requestTimeoutMs = options.requestTimeoutMs ?? Transport.defaultRequestTimeoutMs;
+    const maxFrameBytes = options.maxFrameBytes ?? Transport.defaultMaxFrameBytes;
+    const maxOutboundFrameBytes = options.maxOutboundFrameBytes ?? Transport.defaultMaxOutboundFrameBytes;
+    yield* Limits.checkPositiveIntegers(server, [
+        ["requestTimeoutMs", requestTimeoutMs],
+        ["maxFrameBytes", maxFrameBytes],
+        ["maxOutboundFrameBytes", maxOutboundFrameBytes]
+    ]);
+    const endpoint = endpointOf(options.url);
+    if (endpoint === undefined) {
+        return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" url must be an absolute http or https URL without credentials`));
+    }
+    // Each message runs in its own scope, which aborts the HTTP request and
+    // releases its body however the exchange ends.
+    const client = HttpClient.withScope(yield* HttpClient.HttpClient);
+    const scope = yield* Effect.scope;
+    const closing = yield* Deferred.make();
+    let open = true;
+    let sessionId;
+    let protocolVersion;
+    let nextId = 0;
+    const unreachable = (error) => {
+        diagnostic("transport", error.message);
+        return Option.isSome(KernelHttpClient.fromHttpClientError(error))
+            ? Transport.closed(server, "is not reachable: egress to its URL is not granted")
+            : Transport.closed(server, "is not reachable; transport details withheld");
+    };
+    const frameOf = (method, message) => {
+        // Rpc.encode appends the stdio line terminator; an HTTP body has none.
+        const frame = Rpc.encode(message).subarray(0, -1);
+        return frame.byteLength <= maxOutboundFrameBytes
+            ? Effect.succeed(frame)
+            : Effect.fail(Limits.protocolError(server, `MCP server "${server}" tried to send a ${method} frame larger than ${maxOutboundFrameBytes} bytes`));
+    };
+    const withSession = (request) => {
+        let next = request;
+        if (sessionId !== undefined)
+            next = HttpClientRequest.setHeader(next, "mcp-session-id", sessionId);
+        if (protocolVersion !== undefined) {
+            next = HttpClientRequest.setHeader(next, "mcp-protocol-version", protocolVersion);
+        }
+        return next;
+    };
+    /** Reads a whole body, failing once it passes `maxFrameBytes`. */
+    const readBody = (stream) => stream.pipe(Stream.mapError(unreachable), Stream.runFoldEffect(() => ({ chunks: [], bytes: 0 }), (body, chunk) => {
+        body.bytes += chunk.byteLength;
+        if (body.bytes > maxFrameBytes) {
+            return Effect.fail(Limits.protocolError(server, `MCP frame exceeded ${maxFrameBytes} bytes`));
+        }
+        body.chunks.push(chunk);
+        return Effect.succeed(body);
+    }), Effect.map((body) => {
+        const joined = new Uint8Array(body.bytes);
+        let offset = 0;
+        for (const chunk of body.chunks) {
+            joined.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        return new TextDecoder().decode(joined);
+    }));
+    const authorize = (request) => options.authProvider === undefined
+        ? Effect.succeed(request)
+        : Effect.map(options.authProvider.token, (token) => HttpClientRequest.bearerToken(request, token));
+    /**
+     * Sends one message and returns the raw response, or fails with a
+     * transport, status, or session failure.
+     */
+    const post = (method, message, dispatched) => Effect.gen(function* () {
+        if (!open)
+            return yield* Effect.fail(Transport.closed(server, "connection scope closed"));
+        const body = yield* frameOf(method, message);
+        const request = yield* authorize(withSession(HttpClientRequest.post(endpoint).pipe(HttpClientRequest.setHeader("accept", "application/json, text/event-stream"), HttpClientRequest.bodyUint8Array(body, "application/json"))));
+        const sentSession = sessionId !== undefined;
+        if (dispatched !== undefined)
+            dispatched.value = true;
+        const response = yield* Effect.mapError(client.execute(request), unreachable);
+        if (response.status === 404 && sentSession) {
+            return yield* Effect.fail(Transport.closed(server, "ended the session; reconnect to continue"));
+        }
+        if (response.status < 200 || response.status > 299) {
+            diagnostic("remote-error", { status: response.status });
+            return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" answered ${method} with HTTP ${response.status}`));
+        }
+        return response;
+    });
+    /** Sends a notification or a reply to a server request; the body is ignored. */
+    const deliver = (method, message) => Effect.scoped(Effect.flatMap(post(method, message), (response) => Effect.asVoid(readBody(response.stream))));
+    /** Fails `effect` with `connection_closed`, interrupting it, when the scope closes first. */
+    const untilClosed = (effect) => Effect.raceFirst(effect, Effect.andThen(Deferred.await(closing), Effect.fail(Transport.closed(server, "connection scope closed"))));
+    /**
+     * Handles one inbound JSON-RPC message during request `id`: server
+     * requests are answered, notifications dropped, and the reply returned.
+     */
+    const receive = (method, id, text) => Effect.gen(function* () {
+        const message = Rpc.parse(text);
+        if (message === undefined) {
+            return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" sent a message that is not JSON-RPC`));
+        }
+        const jsonIssue = JsonLimits.checkParsed(message);
+        if (jsonIssue !== undefined) {
+            return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" sent invalid JSON: ${jsonIssue}`));
+        }
+        const reply = Rpc.classify(message);
+        switch (reply._tag) {
+            case "Notification":
+                return Option.none();
+            case "Request": {
+                yield* deliver("server-response", reply.method === "ping"
+                    ? { jsonrpc: "2.0", id: reply.id, result: {} }
+                    : { jsonrpc: "2.0", id: reply.id, error: { code: -32_601, message: "Method not found" } });
+                return Option.none();
+            }
+            case "Malformed":
+                return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" sent a malformed JSON-RPC reply: ${reply.reason}`));
+            case "UncorrelatedError":
+                diagnostic("remote-error", { code: reply.code, message: reply.message, data: reply.data });
+                return Option.none();
+        }
+        if (reply.id !== id) {
+            return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" answered ${method} with a reply to another request`));
+        }
+        if (reply._tag === "Error") {
+            diagnostic("remote-error", { code: reply.code, message: reply.message, data: reply.data });
+            return yield* Effect.fail(Transport.replyError(server, method, reply));
+        }
+        return Option.some(reply.result);
+    });
+    /** Collects `data:` lines into events; a blank line ends one. */
+    const events = (stream) => Transport.lines(server, maxFrameBytes, Stream.mapError(stream, unreachable), { crTerminates: true }).pipe(Stream.mapAccumEffect(() => ({ data: undefined, bytes: 0 }), (event, line) => {
+        if (line === "") {
+            const data = event.data;
+            event.data = undefined;
+            event.bytes = 0;
+            return Effect.succeed([event, data === undefined ? [] : [data]]);
+        }
+        if (!line.startsWith("data:"))
+            return Effect.succeed([event, []]);
+        const value = line.slice(line.startsWith("data: ") ? 6 : 5);
+        event.bytes += utf8.encode(value).byteLength + (event.data === undefined ? 0 : 1);
+        event.data = event.data === undefined ? value : `${event.data}\n${value}`;
+        return event.bytes > maxFrameBytes
+            ? Effect.fail(Limits.protocolError(server, `MCP frame exceeded ${maxFrameBytes} bytes`))
+            : Effect.succeed([event, []]);
+    }));
+    const exchange = (method, params, id, dispatched) => Effect.scoped(Effect.gen(function* () {
+        const response = yield* post(method, { jsonrpc: "2.0", id, method, params }, dispatched);
+        if (method === "initialize") {
+            const header = response.headers["mcp-session-id"];
+            if (header !== undefined && !validSessionId.test(header)) {
+                return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" sent an invalid session id`));
+            }
+            sessionId = header;
+        }
+        const type = mediaType(response.headers["content-type"]);
+        let result;
+        if (type === "application/json") {
+            result = yield* Effect.flatMap(readBody(response.stream), (text) => receive(method, id, text));
+        }
+        else if (type === "text/event-stream") {
+            result = Option.flatten(yield* events(response.stream).pipe(Stream.mapEffect((data) => receive(method, id, data)), Stream.filter(Option.isSome), Stream.runHead));
+        }
+        else {
+            return yield* Effect.fail(Limits.protocolError(server, `MCP server "${server}" answered ${method} with an unsupported content type`));
+        }
+        if (Option.isNone(result)) {
+            return yield* Effect.fail(Transport.closed(server, `closed its response before answering ${method}`));
+        }
+        if (method === "initialize" && isRecord(result.value) && typeof result.value.protocolVersion === "string") {
+            protocolVersion = result.value.protocolVersion;
+        }
+        return result.value;
+    }));
+    const notify = (method, params, timeoutMs = requestTimeoutMs) => Limits.isPositiveInteger(timeoutMs)
+        ? untilClosed(deliver(method, { jsonrpc: "2.0", method, params })).pipe(Effect.timeoutOrElse({
+            duration: timeoutMs,
+            orElse: () => Effect.fail(Transport.timeout(server, method, timeoutMs))
+        }))
+        : Effect.fail(Limits.protocolError(server, "MCP notification timeout must be a positive integer"));
+    const request = (method, params, timeoutMs = requestTimeoutMs) => Effect.suspend(() => {
+        if (!Limits.isPositiveInteger(timeoutMs)) {
+            return Effect.fail(Limits.protocolError(server, "MCP request timeout must be a positive integer"));
+        }
+        const id = ++nextId;
+        const dispatched = { value: false };
+        return exchange(method, params, id, dispatched).pipe(
+        // Closing the HTTP response is not a cancellation in MCP; tell the
+        // server explicitly, without delaying the deadline being reported.
+        Effect.onInterrupt(() => dispatched.value && open && method !== "initialize"
+            ? Effect.asVoid(Effect.forkIn(Effect.ignore(notify("notifications/cancelled", {
+                requestId: id,
+                reason: Transport.cancellationReason
+            })), scope))
+            : Effect.void), untilClosed, Effect.timeoutOrElse({
+            duration: timeoutMs,
+            orElse: () => Effect.fail(Transport.timeout(server, method, timeoutMs))
+        }));
+    });
+    yield* Effect.addFinalizer(() => Effect.suspend(() => {
+        open = false;
+        const ended = Deferred.succeed(closing, undefined);
+        if (sessionId === undefined)
+            return ended;
+        return Effect.andThen(ended, Effect.scoped(Effect.flatMap(authorize(withSession(HttpClientRequest.delete(endpoint))), client.execute))
+            .pipe(Effect.timeout(sessionCloseMs), Effect.ignore));
+    }));
+    return { request, notify };
+});
+//# sourceMappingURL=HttpTransport.js.map

package/dist/esm/internal/HttpTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpTransport.js","sourceRoot":"","sources":["../../../src/internal/HttpTransport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnD,OAAO,KAAK,gBAAgB,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAA6B,MAAM,EAAE,MAAM,QAAQ,CAAA;AACpF,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAE7D,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAA;AAE3E,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA;AAC7D,OAAO,KAAK,UAAU,MAAM,iBAAiB,CAAA;AAC7C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AACrC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAA;AAC/B,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAA;AAoC3C,gFAAgF;AAChF,MAAM,cAAc,GAAG,KAAK,CAAA;AAE5B,sDAAsD;AACtD,MAAM,cAAc,GAAG,gBAAgB,CAAA;AAEvC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAmB,EAAE;IAClD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACtE,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAA;AAE9B,MAAM,SAAS,GAAG,CAAC,MAA0B,EAAU,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAE5G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,OAAuB,EAC4D,EAAE,CACrF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACzD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,SAAS,CAAC,uBAAuB,CAAA;IACtF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,SAAS,CAAC,oBAAoB,CAAA;IAC7E,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,SAAS,CAAC,4BAA4B,CAAA;IACrG,KAAK,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE;QAC1C,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;QACtC,CAAC,eAAe,EAAE,aAAa,CAAC;QAChC,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;KACjD,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC5C,MAAM,EACN,eAAe,MAAM,iEAAiE,CACvF,CAAC,CAAA;IACJ,CAAC;IACD,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAA;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAQ,CAAA;IAE5C,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,IAAI,SAA6B,CAAA;IACjC,IAAI,eAAmC,CAAA;IACvC,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,MAAM,WAAW,GAAG,CAAC,KAAsC,EAAY,EAAE;QACvE,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;QACtC,OAAO,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC/D,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,oDAAoD,CAAC;YAChF,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,8CAA8C,CAAC,CAAA;IAC9E,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,OAA4B,EAAuC,EAAE;QACpG,uEAAuE;QACvE,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACjD,OAAO,KAAK,CAAC,UAAU,IAAI,qBAAqB;YAC9C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAChC,MAAM,EACN,eAAe,MAAM,qBAAqB,MAAM,sBAAsB,qBAAqB,QAAQ,CACpG,CAAC,CAAA;IACN,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,CAAC,OAA4C,EAAuC,EAAE;QACxG,IAAI,IAAI,GAAG,OAAO,CAAA;QAClB,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAA;QAClG,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAA;QACnF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,kEAAkE;IAClE,MAAM,QAAQ,GAAG,CAAC,MAAkE,EAAE,EAAE,CACtF,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC5B,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EACrD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACd,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;QAC9B,IAAI,IAAI,CAAC,KAAK,GAAG,aAAa,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,sBAAsB,aAAa,QAAQ,CAAC,CAAC,CAAA;QAC/F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvB,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,CAAC,CACF,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;YACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;QAC5B,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,CAAC,CAAC,CACH,CAAA;IAEH,MAAM,SAAS,GAAG,CAAC,OAA4C,EAAE,EAAE,CACjE,OAAO,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;IAEtG;;;OAGG;IACH,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAA4B,EAAE,UAA+B,EAAE,EAAE,CAC7F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAA;QACzF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAC1C,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,qCAAqC,CAAC,EAC5E,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAC3D,CACF,CAAC,CAAA;QACF,MAAM,WAAW,GAAG,SAAS,KAAK,SAAS,CAAA;QAC3C,IAAI,UAAU,KAAK,SAAS;YAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAA;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAA;QAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACnD,UAAU,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;YACvD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC5C,MAAM,EACN,eAAe,MAAM,cAAc,MAAM,cAAc,QAAQ,CAAC,MAAM,EAAE,CACzE,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC,CAAC,CAAA;IAEJ,gFAAgF;IAChF,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,OAA4B,EAAE,EAAE,CAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAE9G,6FAA6F;IAC7F,MAAM,WAAW,GAAG,CAAI,MAAkC,EAAE,EAAE,CAC5D,MAAM,CAAC,SAAS,CACd,MAAM,EACN,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAC1G,CAAA;IAEH;;;OAGG;IACH,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,EAAU,EAAE,IAAY,EAAmD,EAAE,CAC5G,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,MAAM,uCAAuC,CAAC,CAC3F,CAAA;QACH,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,MAAM,wBAAwB,SAAS,EAAE,CAAC,CACvF,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACnC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,cAAc;gBACjB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;YACtB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,KAAK,CAAC,CAAC,OAAO,CACZ,iBAAiB,EACjB,KAAK,CAAC,MAAM,KAAK,MAAM;oBACrB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;oBAC9C,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAC5F,CAAA;gBACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;YACtB,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC5C,MAAM,EACN,eAAe,MAAM,sCAAsC,KAAK,CAAC,MAAM,EAAE,CAC1E,CAAC,CAAA;YACJ,KAAK,mBAAmB;gBACtB,UAAU,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC1F,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;QACxB,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC5C,MAAM,EACN,eAAe,MAAM,cAAc,MAAM,kCAAkC,CAC5E,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,UAAU,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1F,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEJ,iEAAiE;IACjE,MAAM,MAAM,GAAG,CAAC,MAAkE,EAAE,EAAE,CACpF,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACvG,MAAM,CAAC,cAAc,CACnB,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAA+B,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAC3D,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;YACvB,KAAK,CAAC,IAAI,GAAG,SAAS,CAAA;YACtB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAA;YACf,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAU,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAU,CAAC,CAAA;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3D,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjF,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAA;QACzE,OAAO,KAAK,CAAC,KAAK,GAAG,aAAa;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,sBAAsB,aAAa,QAAQ,CAAC,CAAC;YACxF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAU,CAAC,CAAA;IAC1C,CAAC,CACF,CACF,CAAA;IAEH,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,MAAe,EAAE,EAAU,EAAE,UAA8B,EAAE,EAAE,CAC/F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,CAAA;QACxF,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;YACjD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,MAAM,8BAA8B,CAAC,CAAC,CAAA;YAC9G,CAAC;YACD,SAAS,GAAG,MAAM,CAAA;QACpB,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA;QACxD,IAAI,MAA8B,CAAA;QAClC,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAChC,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;QAChG,CAAC;aAAM,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,OAAO,CACrB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,EACrD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5B,MAAM,CAAC,OAAO,CACf,CACF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAC5C,MAAM,EACN,eAAe,MAAM,cAAc,MAAM,mCAAmC,CAC7E,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,wCAAwC,MAAM,EAAE,CAAC,CAAC,CAAA;QACvG,CAAC;QACD,IAAI,MAAM,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YAC1G,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAA;QAChD,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAA;IACrB,CAAC,CAAC,CAAC,CAAA;IAEL,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,MAAgB,EAAE,SAAS,GAAG,gBAAgB,EAAiC,EAAE,CAC/G,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC;QACjC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;SACxE,CAAC,CACH;QACD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC,CAAA;IAEtG,MAAM,OAAO,GAAG,CACd,MAAc,EACd,MAAgB,EAChB,SAAS,GAAG,gBAAgB,EACM,EAAE,CACpC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QAClB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC,CAAA;QACpG,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,MAAM,CAAA;QACnB,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACnC,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,IAAI;QAClD,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CACtB,UAAU,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,KAAK,YAAY;YACjD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE;gBAC9C,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,SAAS,CAAC,kBAAkB;aACrC,CAAC,CAAC,EACH,KAAK,CACN,CAAC;YACF,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,EACD,WAAW,EACX,MAAM,CAAC,aAAa,CAAC;YACnB,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;SACxE,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAC9B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QAClB,IAAI,GAAG,KAAK,CAAA;QACZ,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAClD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACzC,OAAO,MAAM,CAAC,OAAO,CACnB,KAAK,EACL,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;aACtG,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAC9B,MAAM,CAAC,MAAM,CACd,CACJ,CAAA;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;AAC5B,CAAC,CAAC,CAAA","sourcesContent":["/**\n * JSON-RPC over the MCP Streamable HTTP transport.\n *\n * Every client message is one `POST` to the server's endpoint. A notification\n * is answered with `202 Accepted`; a request is answered either with one\n * `application/json` reply or with a `text/event-stream` whose events carry\n * server notifications, server requests, and finally the reply. The server's\n * `Mcp-Session-Id` from `initialize` is sent on every later message, together\n * with the negotiated `MCP-Protocol-Version`.\n *\n * Requests go through the `HttpClient` in context, which is the host's egress\n * client: its proxy, pinning, and capability checks apply unchanged, and a\n * destination the egress policy denies fails with `connection_closed`.\n *\n * Out of scope: the optional standalone `GET` event stream, resuming a broken\n * event stream with `Last-Event-ID`, and OAuth discovery. An expired session\n * fails rather than re-initializing, so no request is ever replayed.\n *\n * @since 1.0.0-rc.1\n */\n\nimport { isRecord } from \"@smthrs/canonical/Record\"\nimport * as KernelHttpClient from \"@smthrs/kernel/HttpClient\"\nimport { Deferred, Effect, Option, type Redacted, type Scope, Stream } from \"effect\"\nimport * as HttpClient from \"effect/unstable/http/HttpClient\"\nimport type * as HttpClientError from \"effect/unstable/http/HttpClientError\"\nimport * as HttpClientRequest from \"effect/unstable/http/HttpClientRequest\"\nimport type { McpError } from \"../McpError.ts\"\nimport * as DiagnosticReporter from \"./DiagnosticReporter.ts\"\nimport * as JsonLimits from \"./JsonLimits.ts\"\nimport * as Limits from \"./Limits.ts\"\nimport * as Rpc from \"./Rpc.ts\"\nimport * as Transport from \"./Transport.ts\"\n\n/**\n * Supplies the bearer credential for a Streamable HTTP server.\n *\n * `token` runs once per HTTP message, so a provider can rotate or refresh the\n * credential between messages. Its failure fails that message unchanged.\n *\n * @category models\n * @since 1.0.0-rc.1\n */\nexport interface AuthProvider {\n  readonly token: Effect.Effect<Redacted.Redacted<string>, McpError>\n}\n\n/**\n * Options accepted by {@link connect}.\n *\n * @category models\n * @since 1.0.0-rc.1\n */\nexport interface ConnectOptions {\n  /** The name this server is known by, for error messages only. */\n  readonly server: string\n  /** The server's MCP endpoint: an absolute `http:` or `https:` URL without credentials. */\n  readonly url: string\n  /** Bearer credential source. Omit for a server that needs none. */\n  readonly authProvider?: AuthProvider | undefined\n  /** Default deadline for a request/reply exchange. See {@link Transport.defaultRequestTimeoutMs}. */\n  readonly requestTimeoutMs?: number | undefined\n  /** Maximum UTF-8 bytes accepted in one inbound JSON-RPC message. See {@link Transport.defaultMaxFrameBytes}. */\n  readonly maxFrameBytes?: number | undefined\n  /** Maximum UTF-8 bytes emitted in one JSON-RPC message. See {@link Transport.defaultMaxOutboundFrameBytes}. */\n  readonly maxOutboundFrameBytes?: number | undefined\n}\n\n/** Deadline for the best-effort `DELETE` that ends a session on scope close. */\nconst sessionCloseMs = 1_000\n\n/** A session id is visible ASCII only (0x21-0x7E). */\nconst validSessionId = /^[\\x21-\\x7e]+$/\n\nconst endpointOf = (url: string): URL | undefined => {\n  if (!URL.canParse(url)) return undefined\n  const parsed = new URL(url)\n  if (parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") return undefined\n  if (parsed.username !== \"\" || parsed.password !== \"\") return undefined\n  return parsed\n}\n\nconst utf8 = new TextEncoder()\n\nconst mediaType = (header: string | undefined): string => (header ?? \"\").split(\";\")[0]!.trim().toLowerCase()\n\n/**\n * Opens a Streamable HTTP session and returns a live {@link Transport.Transport}.\n * No message is sent until the first request; the endpoint and limits are\n * checked first. Closing the calling scope ends the session with a\n * best-effort `DELETE` and rejects later traffic.\n *\n * @category constructors\n * @since 1.0.0-rc.1\n */\nexport const connect = (\n  options: ConnectOptions\n): Effect.Effect<Transport.Transport, McpError, HttpClient.HttpClient | Scope.Scope> =>\n  Effect.gen(function*() {\n    const server = options.server\n    const diagnostic = yield* DiagnosticReporter.make(server)\n    const requestTimeoutMs = options.requestTimeoutMs ?? Transport.defaultRequestTimeoutMs\n    const maxFrameBytes = options.maxFrameBytes ?? Transport.defaultMaxFrameBytes\n    const maxOutboundFrameBytes = options.maxOutboundFrameBytes ?? Transport.defaultMaxOutboundFrameBytes\n    yield* Limits.checkPositiveIntegers(server, [\n      [\"requestTimeoutMs\", requestTimeoutMs],\n      [\"maxFrameBytes\", maxFrameBytes],\n      [\"maxOutboundFrameBytes\", maxOutboundFrameBytes]\n    ])\n    const endpoint = endpointOf(options.url)\n    if (endpoint === undefined) {\n      return yield* Effect.fail(Limits.protocolError(\n        server,\n        `MCP server \"${server}\" url must be an absolute http or https URL without credentials`\n      ))\n    }\n    // Each message runs in its own scope, which aborts the HTTP request and\n    // releases its body however the exchange ends.\n    const client = HttpClient.withScope(yield* HttpClient.HttpClient)\n    const scope = yield* Effect.scope\n    const closing = yield* Deferred.make<void>()\n\n    let open = true\n    let sessionId: string | undefined\n    let protocolVersion: string | undefined\n    let nextId = 0\n\n    const unreachable = (error: HttpClientError.HttpClientError): McpError => {\n      diagnostic(\"transport\", error.message)\n      return Option.isSome(KernelHttpClient.fromHttpClientError(error))\n        ? Transport.closed(server, \"is not reachable: egress to its URL is not granted\")\n        : Transport.closed(server, \"is not reachable; transport details withheld\")\n    }\n\n    const frameOf = (method: string, message: Rpc.OutboundMessage): Effect.Effect<Uint8Array, McpError> => {\n      // Rpc.encode appends the stdio line terminator; an HTTP body has none.\n      const frame = Rpc.encode(message).subarray(0, -1)\n      return frame.byteLength <= maxOutboundFrameBytes\n        ? Effect.succeed(frame)\n        : Effect.fail(Limits.protocolError(\n          server,\n          `MCP server \"${server}\" tried to send a ${method} frame larger than ${maxOutboundFrameBytes} bytes`\n        ))\n    }\n\n    const withSession = (request: HttpClientRequest.HttpClientRequest): HttpClientRequest.HttpClientRequest => {\n      let next = request\n      if (sessionId !== undefined) next = HttpClientRequest.setHeader(next, \"mcp-session-id\", sessionId)\n      if (protocolVersion !== undefined) {\n        next = HttpClientRequest.setHeader(next, \"mcp-protocol-version\", protocolVersion)\n      }\n      return next\n    }\n\n    /** Reads a whole body, failing once it passes `maxFrameBytes`. */\n    const readBody = (stream: Stream.Stream<Uint8Array, HttpClientError.HttpClientError>) =>\n      stream.pipe(\n        Stream.mapError(unreachable),\n        Stream.runFoldEffect(\n          () => ({ chunks: [] as Array<Uint8Array>, bytes: 0 }),\n          (body, chunk) => {\n            body.bytes += chunk.byteLength\n            if (body.bytes > maxFrameBytes) {\n              return Effect.fail(Limits.protocolError(server, `MCP frame exceeded ${maxFrameBytes} bytes`))\n            }\n            body.chunks.push(chunk)\n            return Effect.succeed(body)\n          }\n        ),\n        Effect.map((body) => {\n          const joined = new Uint8Array(body.bytes)\n          let offset = 0\n          for (const chunk of body.chunks) {\n            joined.set(chunk, offset)\n            offset += chunk.byteLength\n          }\n          return new TextDecoder().decode(joined)\n        })\n      )\n\n    const authorize = (request: HttpClientRequest.HttpClientRequest) =>\n      options.authProvider === undefined\n        ? Effect.succeed(request)\n        : Effect.map(options.authProvider.token, (token) => HttpClientRequest.bearerToken(request, token))\n\n    /**\n     * Sends one message and returns the raw response, or fails with a\n     * transport, status, or session failure.\n     */\n    const post = (method: string, message: Rpc.OutboundMessage, dispatched?: { value: boolean }) =>\n      Effect.gen(function*() {\n        if (!open) return yield* Effect.fail(Transport.closed(server, \"connection scope closed\"))\n        const body = yield* frameOf(method, message)\n        const request = yield* authorize(withSession(\n          HttpClientRequest.post(endpoint).pipe(\n            HttpClientRequest.setHeader(\"accept\", \"application/json, text/event-stream\"),\n            HttpClientRequest.bodyUint8Array(body, \"application/json\")\n          )\n        ))\n        const sentSession = sessionId !== undefined\n        if (dispatched !== undefined) dispatched.value = true\n        const response = yield* Effect.mapError(client.execute(request), unreachable)\n        if (response.status === 404 && sentSession) {\n          return yield* Effect.fail(Transport.closed(server, \"ended the session; reconnect to continue\"))\n        }\n        if (response.status < 200 || response.status > 299) {\n          diagnostic(\"remote-error\", { status: response.status })\n          return yield* Effect.fail(Limits.protocolError(\n            server,\n            `MCP server \"${server}\" answered ${method} with HTTP ${response.status}`\n          ))\n        }\n        return response\n      })\n\n    /** Sends a notification or a reply to a server request; the body is ignored. */\n    const deliver = (method: string, message: Rpc.OutboundMessage) =>\n      Effect.scoped(Effect.flatMap(post(method, message), (response) => Effect.asVoid(readBody(response.stream))))\n\n    /** Fails `effect` with `connection_closed`, interrupting it, when the scope closes first. */\n    const untilClosed = <A>(effect: Effect.Effect<A, McpError>) =>\n      Effect.raceFirst(\n        effect,\n        Effect.andThen(Deferred.await(closing), Effect.fail(Transport.closed(server, \"connection scope closed\")))\n      )\n\n    /**\n     * Handles one inbound JSON-RPC message during request `id`: server\n     * requests are answered, notifications dropped, and the reply returned.\n     */\n    const receive = (method: string, id: number, text: string): Effect.Effect<Option.Option<unknown>, McpError> =>\n      Effect.gen(function*() {\n        const message = Rpc.parse(text)\n        if (message === undefined) {\n          return yield* Effect.fail(\n            Limits.protocolError(server, `MCP server \"${server}\" sent a message that is not JSON-RPC`)\n          )\n        }\n        const jsonIssue = JsonLimits.checkParsed(message)\n        if (jsonIssue !== undefined) {\n          return yield* Effect.fail(\n            Limits.protocolError(server, `MCP server \"${server}\" sent invalid JSON: ${jsonIssue}`)\n          )\n        }\n        const reply = Rpc.classify(message)\n        switch (reply._tag) {\n          case \"Notification\":\n            return Option.none()\n          case \"Request\": {\n            yield* deliver(\n              \"server-response\",\n              reply.method === \"ping\"\n                ? { jsonrpc: \"2.0\", id: reply.id, result: {} }\n                : { jsonrpc: \"2.0\", id: reply.id, error: { code: -32_601, message: \"Method not found\" } }\n            )\n            return Option.none()\n          }\n          case \"Malformed\":\n            return yield* Effect.fail(Limits.protocolError(\n              server,\n              `MCP server \"${server}\" sent a malformed JSON-RPC reply: ${reply.reason}`\n            ))\n          case \"UncorrelatedError\":\n            diagnostic(\"remote-error\", { code: reply.code, message: reply.message, data: reply.data })\n            return Option.none()\n        }\n        if (reply.id !== id) {\n          return yield* Effect.fail(Limits.protocolError(\n            server,\n            `MCP server \"${server}\" answered ${method} with a reply to another request`\n          ))\n        }\n        if (reply._tag === \"Error\") {\n          diagnostic(\"remote-error\", { code: reply.code, message: reply.message, data: reply.data })\n          return yield* Effect.fail(Transport.replyError(server, method, reply))\n        }\n        return Option.some(reply.result)\n      })\n\n    /** Collects `data:` lines into events; a blank line ends one. */\n    const events = (stream: Stream.Stream<Uint8Array, HttpClientError.HttpClientError>) =>\n      Transport.lines(server, maxFrameBytes, Stream.mapError(stream, unreachable), { crTerminates: true }).pipe(\n        Stream.mapAccumEffect(\n          () => ({ data: undefined as string | undefined, bytes: 0 }),\n          (event, line) => {\n            if (line === \"\") {\n              const data = event.data\n              event.data = undefined\n              event.bytes = 0\n              return Effect.succeed([event, data === undefined ? [] : [data]] as const)\n            }\n            if (!line.startsWith(\"data:\")) return Effect.succeed([event, []] as const)\n            const value = line.slice(line.startsWith(\"data: \") ? 6 : 5)\n            event.bytes += utf8.encode(value).byteLength + (event.data === undefined ? 0 : 1)\n            event.data = event.data === undefined ? value : `${event.data}\\n${value}`\n            return event.bytes > maxFrameBytes\n              ? Effect.fail(Limits.protocolError(server, `MCP frame exceeded ${maxFrameBytes} bytes`))\n              : Effect.succeed([event, []] as const)\n          }\n        )\n      )\n\n    const exchange = (method: string, params: unknown, id: number, dispatched: { value: boolean }) =>\n      Effect.scoped(Effect.gen(function*() {\n        const response = yield* post(method, { jsonrpc: \"2.0\", id, method, params }, dispatched)\n        if (method === \"initialize\") {\n          const header = response.headers[\"mcp-session-id\"]\n          if (header !== undefined && !validSessionId.test(header)) {\n            return yield* Effect.fail(Limits.protocolError(server, `MCP server \"${server}\" sent an invalid session id`))\n          }\n          sessionId = header\n        }\n        const type = mediaType(response.headers[\"content-type\"])\n        let result: Option.Option<unknown>\n        if (type === \"application/json\") {\n          result = yield* Effect.flatMap(readBody(response.stream), (text) => receive(method, id, text))\n        } else if (type === \"text/event-stream\") {\n          result = Option.flatten(\n            yield* events(response.stream).pipe(\n              Stream.mapEffect((data) => receive(method, id, data)),\n              Stream.filter(Option.isSome),\n              Stream.runHead\n            )\n          )\n        } else {\n          return yield* Effect.fail(Limits.protocolError(\n            server,\n            `MCP server \"${server}\" answered ${method} with an unsupported content type`\n          ))\n        }\n        if (Option.isNone(result)) {\n          return yield* Effect.fail(Transport.closed(server, `closed its response before answering ${method}`))\n        }\n        if (method === \"initialize\" && isRecord(result.value) && typeof result.value.protocolVersion === \"string\") {\n          protocolVersion = result.value.protocolVersion\n        }\n        return result.value\n      }))\n\n    const notify = (method: string, params?: unknown, timeoutMs = requestTimeoutMs): Effect.Effect<void, McpError> =>\n      Limits.isPositiveInteger(timeoutMs)\n        ? untilClosed(deliver(method, { jsonrpc: \"2.0\", method, params })).pipe(\n          Effect.timeoutOrElse({\n            duration: timeoutMs,\n            orElse: () => Effect.fail(Transport.timeout(server, method, timeoutMs))\n          })\n        )\n        : Effect.fail(Limits.protocolError(server, \"MCP notification timeout must be a positive integer\"))\n\n    const request = (\n      method: string,\n      params?: unknown,\n      timeoutMs = requestTimeoutMs\n    ): Effect.Effect<unknown, McpError> =>\n      Effect.suspend(() => {\n        if (!Limits.isPositiveInteger(timeoutMs)) {\n          return Effect.fail(Limits.protocolError(server, \"MCP request timeout must be a positive integer\"))\n        }\n        const id = ++nextId\n        const dispatched = { value: false }\n        return exchange(method, params, id, dispatched).pipe(\n          // Closing the HTTP response is not a cancellation in MCP; tell the\n          // server explicitly, without delaying the deadline being reported.\n          Effect.onInterrupt(() =>\n            dispatched.value && open && method !== \"initialize\"\n              ? Effect.asVoid(Effect.forkIn(\n                Effect.ignore(notify(\"notifications/cancelled\", {\n                  requestId: id,\n                  reason: Transport.cancellationReason\n                })),\n                scope\n              ))\n              : Effect.void\n          ),\n          untilClosed,\n          Effect.timeoutOrElse({\n            duration: timeoutMs,\n            orElse: () => Effect.fail(Transport.timeout(server, method, timeoutMs))\n          })\n        )\n      })\n\n    yield* Effect.addFinalizer(() =>\n      Effect.suspend(() => {\n        open = false\n        const ended = Deferred.succeed(closing, undefined)\n        if (sessionId === undefined) return ended\n        return Effect.andThen(\n          ended,\n          Effect.scoped(Effect.flatMap(authorize(withSession(HttpClientRequest.delete(endpoint))), client.execute))\n            .pipe(\n              Effect.timeout(sessionCloseMs),\n              Effect.ignore\n            )\n        )\n      })\n    )\n\n    return { request, notify }\n  })\n"]}

package/dist/esm/internal/JsonLimits.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Resource bounds checked before recursive JSON consumers see server data.
+ *
+ * @since 1.0.0-rc.0
+ */
+/**
+ * Maximum nested containers, counting the wire envelope as the first one.
+ *
+ * @category constants
+ * @since 1.0.0-rc.0
+ */
+export declare const maxDepth = 128;
+/**
+ * Checks a JSON.parse result iteratively. This is not for arbitrary JS objects
+ * with executable accessors; outbound arguments use guarded descriptors.
+ *
+ * @category validation
+ * @since 1.0.0-rc.0
+ */
+export declare const checkParsed: (value: unknown) => string | undefined;
+/**
+ * Freezes validated acyclic catalog data before it is exposed to consumers.
+ * The private dispatcher and public catalog must retain the same contract.
+ *
+ * @category utils
+ * @since 1.0.0-rc.0
+ */
+export declare const freezeParsed: (value: unknown) => void;
+//# sourceMappingURL=JsonLimits.d.ts.map

package/dist/esm/internal/JsonLimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonLimits.d.ts","sourceRoot":"","sources":["../../../src/internal/JsonLimits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,MAAM,CAAA;AAE3B;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,MAAM,GAAG,SAcrD,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,IAQ7C,CAAA"}

package/dist/esm/internal/JsonLimits.js

@@ -0,0 +1,55 @@
+/**
+ * Resource bounds checked before recursive JSON consumers see server data.
+ *
+ * @since 1.0.0-rc.0
+ */
+/**
+ * Maximum nested containers, counting the wire envelope as the first one.
+ *
+ * @category constants
+ * @since 1.0.0-rc.0
+ */
+export const maxDepth = 128;
+/**
+ * Checks a JSON.parse result iteratively. This is not for arbitrary JS objects
+ * with executable accessors; outbound arguments use guarded descriptors.
+ *
+ * @category validation
+ * @since 1.0.0-rc.0
+ */
+export const checkParsed = (value) => {
+    const pending = [{ value, depth: 1 }];
+    while (pending.length > 0) {
+        const current = pending.pop();
+        if (typeof current.value === "number" && !Number.isFinite(current.value)) {
+            return "a JSON number is outside the finite range";
+        }
+        if (typeof current.value !== "object" || current.value === null)
+            continue;
+        if (current.depth > maxDepth)
+            return `JSON nesting exceeds ${maxDepth} containers`;
+        for (const member of Object.values(current.value)) {
+            pending.push({ value: member, depth: current.depth + 1 });
+        }
+    }
+    return undefined;
+};
+/**
+ * Freezes validated acyclic catalog data before it is exposed to consumers.
+ * The private dispatcher and public catalog must retain the same contract.
+ *
+ * @category utils
+ * @since 1.0.0-rc.0
+ */
+export const freezeParsed = (value) => {
+    const pending = [value];
+    while (pending.length > 0) {
+        const current = pending.pop();
+        if (typeof current !== "object" || current === null)
+            continue;
+        Object.freeze(current);
+        for (const member of Object.values(current))
+            pending.push(member);
+    }
+};
+//# sourceMappingURL=JsonLimits.js.map

package/dist/esm/internal/JsonLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonLimits.js","sourceRoot":"","sources":["../../../src/internal/JsonLimits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAA;AAE3B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAsB,EAAE;IAChE,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IACrC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAG,CAAA;QAC9B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,OAAO,2CAA2C,CAAA;QACpD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;YAAE,SAAQ;QACzE,IAAI,OAAO,CAAC,KAAK,GAAG,QAAQ;YAAE,OAAO,wBAAwB,QAAQ,aAAa,CAAA;QAClF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAQ,EAAE;IACnD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAA;IACvB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;QAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,SAAQ;QAC7D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACtB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnE,CAAC;AACH,CAAC,CAAA","sourcesContent":["/**\n * Resource bounds checked before recursive JSON consumers see server data.\n *\n * @since 1.0.0-rc.0\n */\n\n/**\n * Maximum nested containers, counting the wire envelope as the first one.\n *\n * @category constants\n * @since 1.0.0-rc.0\n */\nexport const maxDepth = 128\n\n/**\n * Checks a JSON.parse result iteratively. This is not for arbitrary JS objects\n * with executable accessors; outbound arguments use guarded descriptors.\n *\n * @category validation\n * @since 1.0.0-rc.0\n */\nexport const checkParsed = (value: unknown): string | undefined => {\n  const pending = [{ value, depth: 1 }]\n  while (pending.length > 0) {\n    const current = pending.pop()!\n    if (typeof current.value === \"number\" && !Number.isFinite(current.value)) {\n      return \"a JSON number is outside the finite range\"\n    }\n    if (typeof current.value !== \"object\" || current.value === null) continue\n    if (current.depth > maxDepth) return `JSON nesting exceeds ${maxDepth} containers`\n    for (const member of Object.values(current.value)) {\n      pending.push({ value: member, depth: current.depth + 1 })\n    }\n  }\n  return undefined\n}\n\n/**\n * Freezes validated acyclic catalog data before it is exposed to consumers.\n * The private dispatcher and public catalog must retain the same contract.\n *\n * @category utils\n * @since 1.0.0-rc.0\n */\nexport const freezeParsed = (value: unknown): void => {\n  const pending = [value]\n  while (pending.length > 0) {\n    const current = pending.pop()\n    if (typeof current !== \"object\" || current === null) continue\n    Object.freeze(current)\n    for (const member of Object.values(current)) pending.push(member)\n  }\n}\n"]}