@theyahia/mcp-core 1.0.0

package/dist/format.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Response formatting utilities.
+ *
+ * Key insight: CSV is 29% more token-efficient than JSON for tabular data.
+ * For 1000 rows, this saves ~13,800 tokens.
+ */
+/**
+ * Formats an array of items for MCP tool responses.
+ * Uses CSV for concise lists (3+ items), JSON for detailed or small results.
+ * Adds truncation info and cursor hint when results exceed maxItems.
+ */
+export declare function formatResponse(items: unknown[], opts?: {
+    maxItems?: number;
+    format?: "concise" | "detailed";
+    cursorField?: string;
+}): string;
+/** Format kopecks to rubles with ₽ symbol (Russian locale) */
+export declare function formatRUB(kopecks: number): string;
+/** Format tiyins to sum with locale (Uzbek) */
+export declare function formatUZS(tiyins: number): string;
+/** Format tenge (Kazakh) */
+export declare function formatKZT(tiyin: number): string;
+/** Format ISO date to Russian long format */
+export declare function formatDate(iso: string): string;
+/** Format number with locale-aware separators */
+export declare function formatNumber(value: number, locale?: string, decimals?: number): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EAAE,EAChB,IAAI,GAAE;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;CACjB,GACL,MAAM,CA6BR;AAoBD,8DAA8D;AAC9D,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKjD;AAED,+CAA+C;AAC/C,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED,4BAA4B;AAC5B,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED,6CAA6C;AAC7C,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED,iDAAiD;AACjD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,MAAM,SAAU,EAChB,QAAQ,SAAI,GACX,MAAM,CAKR"}

package/dist/format.js

@@ -0,0 +1,83 @@
+/**
+ * Response formatting utilities.
+ *
+ * Key insight: CSV is 29% more token-efficient than JSON for tabular data.
+ * For 1000 rows, this saves ~13,800 tokens.
+ */
+/**
+ * Formats an array of items for MCP tool responses.
+ * Uses CSV for concise lists (3+ items), JSON for detailed or small results.
+ * Adds truncation info and cursor hint when results exceed maxItems.
+ */
+export function formatResponse(items, opts = {}) {
+    const { maxItems = 25, format = "concise", cursorField } = opts;
+    const total = items.length;
+    const page = items.slice(0, maxItems);
+    let header = "";
+    if (total > maxItems) {
+        const cursorHint = cursorField
+            ? ` Используйте ${cursorField} последнего элемента как cursor для следующей страницы.`
+            : " Используйте offset/page для следующей страницы.";
+        header = `Показано ${maxItems} из ${total}.${cursorHint}\n`;
+    }
+    if (page.length === 0) {
+        return "Результатов не найдено.";
+    }
+    if (format === "concise" &&
+        page.length > 3 &&
+        typeof page[0] === "object" &&
+        page[0] !== null) {
+        return header + toCSV(page);
+    }
+    return (header + JSON.stringify(page, null, format === "detailed" ? 2 : 0));
+}
+function toCSV(items) {
+    const keys = Object.keys(items[0]);
+    const header = keys.join(",");
+    const rows = items.map((item) => keys
+        .map((k) => {
+        const val = item[k];
+        if (val === null || val === undefined)
+            return "";
+        const str = String(val);
+        return str.includes(",") || str.includes('"') || str.includes("\n")
+            ? `"${str.replace(/"/g, '""')}"`
+            : str;
+    })
+        .join(","));
+    return [header, ...rows].join("\n");
+}
+/** Format kopecks to rubles with ₽ symbol (Russian locale) */
+export function formatRUB(kopecks) {
+    return new Intl.NumberFormat("ru-RU", {
+        style: "currency",
+        currency: "RUB",
+    }).format(kopecks / 100);
+}
+/** Format tiyins to sum with locale (Uzbek) */
+export function formatUZS(tiyins) {
+    return new Intl.NumberFormat("uz-UZ", {
+        style: "currency",
+        currency: "UZS",
+        maximumFractionDigits: 0,
+    }).format(tiyins / 100);
+}
+/** Format tenge (Kazakh) */
+export function formatKZT(tiyin) {
+    return new Intl.NumberFormat("kk-KZ", {
+        style: "currency",
+        currency: "KZT",
+    }).format(tiyin / 100);
+}
+/** Format ISO date to Russian long format */
+export function formatDate(iso) {
+    return new Intl.DateTimeFormat("ru-RU", { dateStyle: "long" }).format(new Date(iso));
+}
+/** Format number with locale-aware separators */
+export function formatNumber(value, locale = "ru-RU", decimals = 2) {
+    return new Intl.NumberFormat(locale, {
+        minimumFractionDigits: decimals,
+        maximumFractionDigits: decimals,
+    }).format(value);
+}
+//# sourceMappingURL=format.js.map

package/dist/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAgB,EAChB,OAII,EAAE;IAEN,MAAM,EAAE,QAAQ,GAAG,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,WAAW;YAC5B,CAAC,CAAC,gBAAgB,WAAW,yDAAyD;YACtF,CAAC,CAAC,kDAAkD,CAAC;QACvD,MAAM,GAAG,YAAY,QAAQ,OAAO,KAAK,IAAI,UAAU,IAAI,CAAC;IAC9D,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,yBAAyB,CAAC;IACnC,CAAC;IAED,IACE,MAAM,KAAK,SAAS;QACpB,IAAI,CAAC,MAAM,GAAG,CAAC;QACf,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC3B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAChB,CAAC;QACD,OAAO,MAAM,GAAG,KAAK,CAAC,IAAiC,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CACL,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAgC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9B,IAAI;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjE,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG;YAChC,CAAC,CAAC,GAAG,CAAC;IACV,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CACb,CAAC;IACF,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;QACpC,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;QACpC,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK;QACf,qBAAqB,EAAE,CAAC;KACzB,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;QACpC,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CACnE,IAAI,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,MAAM,GAAG,OAAO,EAChB,QAAQ,GAAG,CAAC;IAEZ,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;QACnC,qBAAqB,EAAE,QAAQ;QAC/B,qBAAqB,EAAE,QAAQ;KAChC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @theyahia/mcp-core — shared library for MCP servers
+ *
+ * Provides: error handling, formatting, logging, HTTP client,
+ * auth strategies, server factory with dual transport.
+ */
+export { createToolError, withErrorHandling } from "./errors.js";
+export type { ErrorCategory, ApiErrorInfo } from "./errors.js";
+export { formatResponse, formatRUB, formatUZS, formatKZT, formatDate, formatNumber, } from "./format.js";
+export { createLogger } from "./logging.js";
+export type { Logger, LogLevel } from "./logging.js";
+export { BaseHttpClient, RateLimitedClient, TokenBucketLimiter, ApiError, } from "./client.js";
+export type { BaseClientOptions, RequestOptions } from "./client.js";
+export { ApiKeyStrategy, BasicAuthStrategy, OAuthStrategy, DualAuthStrategy, NoAuthStrategy, } from "./auth/index.js";
+export type { AuthStrategy } from "./auth/index.js";
+export { sanitizeApiResponse, truncateResponse } from "./sanitize.js";
+export { runServer, startStdio, startHttp } from "./server.js";
+export type { ServerConfig, HttpServerConfig } from "./server.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,YAAY,GACb,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGrD,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,GACT,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGrE,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGpD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGtE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/D,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,21 @@
+/**
+ * @theyahia/mcp-core — shared library for MCP servers
+ *
+ * Provides: error handling, formatting, logging, HTTP client,
+ * auth strategies, server factory with dual transport.
+ */
+// Errors
+export { createToolError, withErrorHandling } from "./errors.js";
+// Formatting
+export { formatResponse, formatRUB, formatUZS, formatKZT, formatDate, formatNumber, } from "./format.js";
+// Logging
+export { createLogger } from "./logging.js";
+// HTTP Client
+export { BaseHttpClient, RateLimitedClient, TokenBucketLimiter, ApiError, } from "./client.js";
+// Auth Strategies
+export { ApiKeyStrategy, BasicAuthStrategy, OAuthStrategy, DualAuthStrategy, NoAuthStrategy, } from "./auth/index.js";
+// Sanitization
+export { sanitizeApiResponse, truncateResponse } from "./sanitize.js";
+// Server Factory
+export { runServer, startStdio, startHttp } from "./server.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,SAAS;AACT,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGjE,aAAa;AACb,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,SAAS,EACT,UAAU,EACV,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,UAAU;AACV,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,cAAc;AACd,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,QAAQ,GACT,MAAM,aAAa,CAAC;AAGrB,kBAAkB;AAClB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAGzB,eAAe;AACf,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtE,iBAAiB;AACjB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/logging.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Structured logging for MCP servers.
+ *
+ * CRITICAL: When using stdio transport, stdout is reserved for JSON-RPC.
+ * ALL logs MUST go to stderr. console.log() will break the MCP protocol.
+ *
+ * This module provides a lightweight structured logger that writes to stderr
+ * with JSON format for easy parsing by log aggregators.
+ */
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export interface Logger {
+    debug(msg: string, data?: Record<string, unknown>): void;
+    info(msg: string, data?: Record<string, unknown>): void;
+    warn(msg: string, data?: Record<string, unknown>): void;
+    error(msg: string, data?: Record<string, unknown>): void;
+}
+/**
+ * Creates a structured logger for an MCP server.
+ * All output goes to stderr to avoid breaking stdio JSON-RPC.
+ */
+export declare function createLogger(serverName: string): Logger;
+//# sourceMappingURL=logging.d.ts.map

package/dist/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAS3D,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAgCD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAiCvD"}

package/dist/logging.js

@@ -0,0 +1,73 @@
+/**
+ * Structured logging for MCP servers.
+ *
+ * CRITICAL: When using stdio transport, stdout is reserved for JSON-RPC.
+ * ALL logs MUST go to stderr. console.log() will break the MCP protocol.
+ *
+ * This module provides a lightweight structured logger that writes to stderr
+ * with JSON format for easy parsing by log aggregators.
+ */
+const LEVEL_ORDER = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+const SENSITIVE_KEYS = new Set([
+    "token",
+    "password",
+    "secret",
+    "api_key",
+    "apikey",
+    "authorization",
+    "client_secret",
+    "access_token",
+    "refresh_token",
+    "private_key",
+]);
+/** Recursively mask sensitive fields in log data */
+function maskSensitive(obj) {
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (SENSITIVE_KEYS.has(key.toLowerCase())) {
+            result[key] = "***";
+        }
+        else if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+            result[key] = maskSensitive(value);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+/**
+ * Creates a structured logger for an MCP server.
+ * All output goes to stderr to avoid breaking stdio JSON-RPC.
+ */
+export function createLogger(serverName) {
+    const minLevel = process.env.LOG_LEVEL || "info";
+    const minOrder = LEVEL_ORDER[minLevel] ?? LEVEL_ORDER.info;
+    function log(level, msg, data) {
+        if (LEVEL_ORDER[level] < minOrder)
+            return;
+        const entry = {
+            ts: new Date().toISOString(),
+            level,
+            server: serverName,
+            msg,
+        };
+        if (data) {
+            Object.assign(entry, maskSensitive(data));
+        }
+        // Always stderr — stdout is reserved for MCP JSON-RPC
+        process.stderr.write(JSON.stringify(entry) + "\n");
+    }
+    return {
+        debug: (msg, data) => log("debug", msg, data),
+        info: (msg, data) => log("info", msg, data),
+        warn: (msg, data) => log("warn", msg, data),
+        error: (msg, data) => log("error", msg, data),
+    };
+}
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AASF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,eAAe;IACf,eAAe;IACf,cAAc;IACd,eAAe;IACf,aAAa;CACd,CAAC,CAAC;AAEH,oDAAoD;AACpD,SAAS,aAAa,CACpB,GAA4B;IAE5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAgC,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,MAAM,QAAQ,GACX,OAAO,CAAC,GAAG,CAAC,SAAkC,IAAI,MAAM,CAAC;IAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC;IAE3D,SAAS,GAAG,CACV,KAAe,EACf,GAAW,EACX,IAA8B;QAE9B,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,QAAQ;YAAE,OAAO;QAE1C,MAAM,KAAK,GAA4B;YACrC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK;YACL,MAAM,EAAE,UAAU;YAClB,GAAG;SACJ,CAAC;QAEF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,sDAAsD;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC7C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/sanitize.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Output sanitization for API responses.
+ *
+ * Protects against prompt injection attacks where malicious content
+ * in API responses could manipulate LLM behavior.
+ */
+/**
+ * Sanitizes text returned from external APIs before passing to LLM.
+ * Strips potential prompt injection patterns.
+ */
+export declare function sanitizeApiResponse(text: string): string;
+/**
+ * Truncates response text if it exceeds maxLength.
+ * Appends a note about truncation for the LLM.
+ */
+export declare function truncateResponse(text: string, maxLength?: number): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMxD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,SAAS,GAAE,MAAe,GACzB,MAAM,CAMR"}

package/dist/sanitize.js

@@ -0,0 +1,35 @@
+/**
+ * Output sanitization for API responses.
+ *
+ * Protects against prompt injection attacks where malicious content
+ * in API responses could manipulate LLM behavior.
+ */
+/** Patterns that attempt to override LLM instructions */
+const INJECTION_PATTERNS = [
+    /\b(ignore|forget|disregard|override)\s+(all\s+)?(previous|prior|above|earlier|system)\s+(instructions?|prompts?|rules?|context|constraints?)/gi,
+    /\b(you\s+are\s+now|act\s+as|pretend\s+to\s+be|switch\s+to|new\s+instructions?:)/gi,
+    /\bsystem\s*:\s*you\s+(are|must|should|will)/gi,
+    /<\/?system>/gi,
+];
+/**
+ * Sanitizes text returned from external APIs before passing to LLM.
+ * Strips potential prompt injection patterns.
+ */
+export function sanitizeApiResponse(text) {
+    let result = text;
+    for (const pattern of INJECTION_PATTERNS) {
+        result = result.replace(pattern, "[filtered]");
+    }
+    return result;
+}
+/**
+ * Truncates response text if it exceeds maxLength.
+ * Appends a note about truncation for the LLM.
+ */
+export function truncateResponse(text, maxLength = 50_000) {
+    if (text.length <= maxLength)
+        return text;
+    return (text.slice(0, maxLength) +
+        `\n\n[Truncated: response was ${text.length} chars, showing first ${maxLength}. Use pagination or filters to narrow results.]`);
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,yDAAyD;AACzD,MAAM,kBAAkB,GAAG;IACzB,gJAAgJ;IAChJ,mFAAmF;IACnF,+CAA+C;IAC/C,eAAe;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,YAAoB,MAAM;IAE1B,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;QACxB,gCAAgC,IAAI,CAAC,MAAM,yBAAyB,SAAS,iDAAiD,CAC/H,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Server factory with dual transport support (stdio + Streamable HTTP).
+ *
+ * Consolidates the transport setup pattern from CDEK and MoySklad
+ * into a reusable factory. Includes graceful shutdown and health endpoint.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { Logger } from "./logging.js";
+export interface ServerConfig {
+    name: string;
+    version: string;
+    /** Number of tools (shown in health endpoint) */
+    toolCount?: number;
+    logger?: Logger;
+}
+export interface HttpServerConfig {
+    port: number;
+    /** CORS allowed origins. Use ["*"] for development only. */
+    corsOrigins?: string[];
+}
+/**
+ * Starts the MCP server with stdio transport (default for Claude Desktop/Cursor).
+ */
+export declare function startStdio(server: McpServer, config: ServerConfig): Promise<void>;
+/**
+ * Starts the MCP server with Streamable HTTP transport.
+ * Includes CORS, health endpoint, session management.
+ */
+export declare function startHttp(createServer: () => McpServer, config: ServerConfig & HttpServerConfig): Promise<void>;
+/**
+ * Detects transport mode from CLI args / env and runs the appropriate server.
+ *
+ * Usage in server entry points:
+ * ```ts
+ * runServer(createMyServer, { name: "my-mcp", version: "1.0.0", toolCount: 5 });
+ * ```
+ */
+export declare function runServer(createServer: () => McpServer, config: ServerConfig): Promise<void>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,YAAY,EAAE,MAAM,SAAS,EAC7B,MAAM,EAAE,YAAY,GAAG,gBAAgB,GACtC,OAAO,CAAC,IAAI,CAAC,CAkJf;AAqBD;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAC7B,YAAY,EAAE,MAAM,SAAS,EAC7B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/server.js

@@ -0,0 +1,187 @@
+/**
+ * Server factory with dual transport support (stdio + Streamable HTTP).
+ *
+ * Consolidates the transport setup pattern from CDEK and MoySklad
+ * into a reusable factory. Includes graceful shutdown and health endpoint.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+/**
+ * Starts the MCP server with stdio transport (default for Claude Desktop/Cursor).
+ */
+export async function startStdio(server, config) {
+    const transport = new StdioServerTransport();
+    setupGracefulShutdown(config.logger);
+    await server.connect(transport);
+    config.logger?.info("Server started (stdio)", {
+        tools: config.toolCount,
+    });
+}
+/**
+ * Starts the MCP server with Streamable HTTP transport.
+ * Includes CORS, health endpoint, session management.
+ */
+export async function startHttp(createServer, config) {
+    const { randomUUID } = await import("node:crypto");
+    let StreamableHTTPServerTransport;
+    let isInitializeRequest;
+    let express;
+    try {
+        const sdkServer = await import("@modelcontextprotocol/sdk/server/streamableHttp.js");
+        StreamableHTTPServerTransport = sdkServer.StreamableHTTPServerTransport;
+        const types = await import("@modelcontextprotocol/sdk/types.js");
+        isInitializeRequest = types.isInitializeRequest;
+    }
+    catch {
+        throw new Error("Failed to import StreamableHTTPServerTransport. Ensure @modelcontextprotocol/sdk >= 1.12.0");
+    }
+    try {
+        // express is an optional peer dependency — only needed for HTTP transport
+        // @ts-expect-error express may not be installed
+        express = (await import("express")).default;
+    }
+    catch {
+        throw new Error("express is required for HTTP transport. Install it: pnpm add express");
+    }
+    const app = express();
+    app.use(express.json());
+    // CORS
+    const origins = config.corsOrigins ?? ["*"];
+    app.use((_req, res, next) => {
+        const origin = origins.includes("*") ? "*" : origins[0];
+        res.header("Access-Control-Allow-Origin", origin);
+        res.header("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
+        res.header("Access-Control-Allow-Headers", "Content-Type, mcp-session-id");
+        if (_req.method === "OPTIONS")
+            return res.sendStatus(204);
+        next();
+    });
+    // Health endpoint
+    app.get("/health", (_req, res) => {
+        res.json({
+            status: "ok",
+            server: config.name,
+            version: config.version,
+            uptime: Math.round(process.uptime()),
+            memory_mb: Math.round(process.memoryUsage().rss / 1024 / 1024),
+            tools: config.toolCount ?? 0,
+        });
+    });
+    // Session management
+    const transports = {};
+    // MCP POST
+    app.post("/mcp", async (req, res) => {
+        const sessionId = req.headers["mcp-session-id"];
+        try {
+            if (sessionId && transports[sessionId]) {
+                await transports[sessionId].handleRequest(req, res, req.body);
+                return;
+            }
+            if (!sessionId && isInitializeRequest(req.body)) {
+                const transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => randomUUID(),
+                    onsessioninitialized: (sid) => {
+                        transports[sid] = transport;
+                    },
+                });
+                transport.onclose = () => {
+                    const sid = transport.sessionId;
+                    if (sid)
+                        delete transports[sid];
+                };
+                const server = createServer();
+                await server.connect(transport);
+                await transport.handleRequest(req, res, req.body);
+                return;
+            }
+            res.status(400).json({
+                jsonrpc: "2.0",
+                error: { code: -32000, message: "Bad Request: No valid session ID" },
+                id: null,
+            });
+        }
+        catch (error) {
+            config.logger?.error("HTTP request error", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            if (!res.headersSent) {
+                res.status(500).json({
+                    jsonrpc: "2.0",
+                    error: { code: -32603, message: "Internal server error" },
+                    id: null,
+                });
+            }
+        }
+    });
+    // MCP GET (SSE streams)
+    app.get("/mcp", async (req, res) => {
+        const sessionId = req.headers["mcp-session-id"];
+        if (!sessionId || !transports[sessionId]) {
+            return res.status(400).send("Invalid or missing session ID");
+        }
+        await transports[sessionId].handleRequest(req, res);
+    });
+    // MCP DELETE (session termination)
+    app.delete("/mcp", async (req, res) => {
+        const sessionId = req.headers["mcp-session-id"];
+        if (!sessionId || !transports[sessionId]) {
+            return res.status(400).send("Invalid or missing session ID");
+        }
+        await transports[sessionId].handleRequest(req, res);
+    });
+    app.listen(config.port, () => {
+        config.logger?.info(`HTTP server listening`, {
+            port: config.port,
+            tools: config.toolCount,
+        });
+    });
+    // Graceful shutdown for HTTP
+    const shutdown = async (signal) => {
+        config.logger?.info(`${signal} received, shutting down`);
+        for (const sid of Object.keys(transports)) {
+            await transports[sid].close();
+            delete transports[sid];
+        }
+        process.exit(0);
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+}
+/**
+ * Sets up graceful shutdown handlers for stdio mode.
+ */
+function setupGracefulShutdown(logger) {
+    process.on("SIGINT", () => {
+        logger?.info("SIGINT received, exiting");
+        process.exit(0);
+    });
+    process.on("SIGTERM", () => {
+        logger?.info("SIGTERM received, exiting");
+        process.exit(0);
+    });
+    process.on("unhandledRejection", (err) => {
+        logger?.error("Unhandled rejection", {
+            error: err instanceof Error ? err.message : String(err),
+        });
+    });
+}
+/**
+ * Detects transport mode from CLI args / env and runs the appropriate server.
+ *
+ * Usage in server entry points:
+ * ```ts
+ * runServer(createMyServer, { name: "my-mcp", version: "1.0.0", toolCount: 5 });
+ * ```
+ */
+export async function runServer(createServer, config) {
+    const useHttp = process.argv.includes("--http") || !!process.env.HTTP_PORT;
+    if (useHttp) {
+        const port = parseInt(process.env.HTTP_PORT ?? "3000", 10);
+        await startHttp(createServer, { ...config, port });
+    }
+    else {
+        const server = createServer();
+        await startStdio(server, config);
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAiBjF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAiB,EACjB,MAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE;QAC5C,KAAK,EAAE,MAAM,CAAC,SAAS;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAA6B,EAC7B,MAAuC;IAEvC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEnD,IAAI,6BAAkC,CAAC;IACvC,IAAI,mBAAwB,CAAC;IAC7B,IAAI,OAAY,CAAC;IAEjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAC5B,oDAAoD,CACrD,CAAC;QACF,6BAA6B,GAAG,SAAS,CAAC,6BAA6B,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;QACjE,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,0EAA0E;QAC1E,gDAAgD;QAChD,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,OAAO;IACP,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;QACzE,GAAG,CAAC,MAAM,CACR,8BAA8B,EAC9B,8BAA8B,CAC/B,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAS,EAAE,GAAQ,EAAE,EAAE;QACzC,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;YAC9D,KAAK,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,UAAU,GAAwB,EAAE,CAAC;IAE3C,WAAW;IACX,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAEtE,IAAI,CAAC;YACH,IAAI,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;oBAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;oBACtC,oBAAoB,EAAE,CAAC,GAAW,EAAE,EAAE;wBACpC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBAC9B,CAAC;iBACF,CAAC,CAAC;gBACH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;oBACvB,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC;oBAChC,IAAI,GAAG;wBAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;gBAClC,CAAC,CAAC;gBAEF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE;gBACpE,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACzC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;oBACzD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,mCAAmC;IACnC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,SAAS;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,0BAA0B,CAAC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,MAAe;IAC5C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,MAAM,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,MAAM,EAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;QACvC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE;YACnC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAA6B,EAC7B,MAAoB;IAEpB,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAE7D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/testing/smoke.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Shared E2E smoke test utilities for MCP servers.
+ *
+ * Uses StdioClientTransport from the MCP SDK to connect to a compiled
+ * server binary and verify it starts, lists tools, and has quality descriptions.
+ */
+export interface SmokeTestConfig {
+    /** Path to the compiled server entry point (e.g., "dist/index.js") */
+    serverPath: string;
+    /** Expected minimum number of tools */
+    expectedToolCount: number;
+    /** Environment variables to pass to the server process */
+    env?: Record<string, string>;
+    /** Timeout in ms (default: 10_000) */
+    timeout?: number;
+}
+export interface SmokeTestResult {
+    connected: boolean;
+    toolCount: number;
+    tools: Array<{
+        name: string;
+        description: string;
+        descriptionLength: number;
+        hasInputSchema: boolean;
+    }>;
+    errors: string[];
+}
+/**
+ * Runs a smoke test against a compiled MCP server.
+ *
+ * 1. Spawns the server via StdioClientTransport
+ * 2. Connects and sends initialize
+ * 3. Lists tools and validates descriptions
+ * 4. Closes cleanly
+ */
+export declare function runSmokeTest(config: SmokeTestConfig): Promise<SmokeTestResult>;
+//# sourceMappingURL=smoke.d.ts.map

package/dist/testing/smoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke.d.ts","sourceRoot":"","sources":["../../src/testing/smoke.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,eAAe,CAAC,CAyE1B"}