@tmcp/transport-http 0.4.1 → 0.5.0

package/package.json

@@ -1,19 +1,22 @@
 {
   "name": "@tmcp/transport-http",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "description": "Transport for TMCP using HTTP",
   "type": "module",
   "main": "src/index.js",
-  "types": "src/index.d.ts",
+  "types": "src/types/index.d.ts",
   "exports": {
     ".": {
-      "types": "./src/index.d.ts",
+      "types": "./src/types/index.d.ts",
       "default": "./src/index.js"
     },
     "./package.json": "./package.json"
   },
+  "files": [
+    "src/**/*"
+  ],
   "peerDependencies": {
-    "tmcp": "^1.7.1"
+    "tmcp": "^1.9.0"
   },
   "keywords": [
     "tmcp",
@@ -26,15 +29,22 @@
     "directory": "packages/transport-http"
   },
   "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.16.0",
     "@types/node": "^24.0.15",
+    "dts-buddy": "^0.6.2",
     "publint": "^0.3.12",
-    "tmcp": "^1.7.1"
+    "valibot": "^1.1.0",
+    "vitest": "^3.2.4",
+    "@tmcp/adapter-valibot": "^0.1.3",
+    "@tmcp/auth": "^0.1.1",
+    "tmcp": "^1.9.0"
   },
   "publishConfig": {
     "access": "public"
   },
   "scripts": {
-    "generate:types": "tsc ./src/*.js --declaration --emitDeclarationOnly --target esnext --allowJs --moduleresolution nodenext --module nodenext && publint",
-    "prepublish": "pnpm generate:types"
+    "generate:types": "dts-buddy && publint",
+    "prepublish": "pnpm generate:types",
+    "test": "vitest --run"
   }
 }

package/src/index.js

@@ -1,16 +1,17 @@
 /**
- * @import { McpServer, ClientCapabilities } from "tmcp";
+ * @import { AuthInfo, McpServer } from "tmcp";
+ * @import { OAuth  } from "@tmcp/auth";
  */
 
 /**
  * @typedef {{
  * 	getSessionId?: () => string
  * 	path?: string
+ * 	oauth?: OAuth<"built">
  * }} HttpTransportOptions
  */
 
 import { AsyncLocalStorage } from 'node:async_hooks';
-
 export class HttpTransport {
 	/**
 	 * @type {McpServer<any>}
@@ -18,7 +19,7 @@ export class HttpTransport {
 	#server;
 
 	/**
-	 * @type {Required<HttpTransportOptions>}
+	 * @type {Required<Omit<HttpTransportOptions, 'oauth'>>}
 	 */
 	#options;
 
@@ -41,6 +42,11 @@ export class HttpTransport {
 	 */
 	#controller_storage = new AsyncLocalStorage();
 
+	/**
+	 * @type {OAuth<"built"> | undefined}
+	 */
+	#oauth;
+
 	/**
 	 *
 	 * @param {McpServer<any>} server
@@ -48,10 +54,18 @@ export class HttpTransport {
 	 */
 	constructor(server, options) {
 		this.#server = server;
-		const { getSessionId = () => crypto.randomUUID(), path = '/mcp' } =
-			options ?? {
-				getSessionId: () => crypto.randomUUID(),
-			};
+		const {
+			getSessionId = () => crypto.randomUUID(),
+			path = '/mcp',
+			oauth,
+		} = options ?? {
+			getSessionId: () => crypto.randomUUID(),
+		};
+
+		if (oauth) {
+			this.#oauth = oauth;
+		}
+
 		this.#options = { getSessionId, path };
 		this.#path = path;
 		this.#server.on('send', ({ request, context: { sessions } }) => {
@@ -150,8 +164,9 @@ export class HttpTransport {
 	 *
 	 * @param {string} session_id
 	 * @param {Request} request
+	 * @param {AuthInfo | null} auth_info
 	 */
-	async #handle_post(session_id, request) {
+	async #handle_post(session_id, request, auth_info) {
 		// Check Content-Type header
 		const content_type = request.headers.get('content-type');
 		if (!content_type || !content_type.includes('application/json')) {
@@ -192,7 +207,11 @@ export class HttpTransport {
 			const handle = async () => {
 				const response = await this.#controller_storage.run(
 					controller,
-					() => this.#server.receive(body, session_id),
+					() =>
+						this.#server.receive(body, {
+							sessionId: session_id,
+							auth: auth_info ?? undefined,
+						}),
 				);
 
 				controller?.enqueue(
@@ -274,10 +293,38 @@ export class HttpTransport {
 	async respond(request) {
 		const url = new URL(request.url);
 
+		/**
+		 * @type {AuthInfo | null}
+		 */
+		let auth_info = null;
+
+		// Check if OAuth helper should handle this request
+		if (this.#oauth) {
+			try {
+				const response = await this.#oauth.respond(request);
+				if (response) {
+					return response;
+				}
+			} catch (error) {
+				return new Response(
+					JSON.stringify({
+						error: 'server_error',
+						error_description: /** @type {Error} */ (error).message,
+					}),
+					{
+						status: 500,
+						headers: { 'Content-Type': 'application/json' },
+					},
+				);
+			}
+			auth_info = await this.#oauth.verify(request);
+		}
+
 		// Check if the request path matches the configured MCP path
 		if (url.pathname !== this.#path) {
 			return null;
 		}
+
 		const method = request.method;
 		const session_id =
 			request.headers.get('mcp-session-id') ||
@@ -295,7 +342,7 @@ export class HttpTransport {
 
 		// Handle POST request - process message and respond through event stream
 		if (method === 'POST') {
-			return this.#handle_post(session_id, request);
+			return this.#handle_post(session_id, request, auth_info);
 		}
 
 		// Method not supported

package/src/types/index.d.ts

@@ -0,0 +1,20 @@
+declare module '@tmcp/transport-http' {
+	import type { McpServer } from 'tmcp';
+	import type { OAuth } from '@tmcp/auth';
+	export class HttpTransport {
+		
+		constructor(server: McpServer<any>, options?: HttpTransportOptions);
+		
+		respond(request: Request): Promise<Response | null>;
+		#private;
+	}
+	export type HttpTransportOptions = {
+		getSessionId?: () => string;
+		path?: string;
+		oauth?: OAuth<"built">;
+	};
+
+	export {};
+}
+
+//# sourceMappingURL=index.d.ts.map

package/src/types/index.d.ts.map

@@ -0,0 +1,15 @@
+{
+	"version": 3,
+	"file": "index.d.ts",
+	"names": [
+		"HttpTransport"
+	],
+	"sources": [
+		"../index.js"
+	],
+	"sourcesContent": [
+		null
+	],
+	"mappings": ";;;cAcaA,aAAaA",
+	"ignoreList": []
+}

package/CHANGELOG.md

@@ -1,49 +0,0 @@
-# @tmcp/transport-http
-
-## 0.4.1
-
-### Patch Changes
-
-- 77d3257: fix: respond immediately to allow for requests from the server
-
-## 0.4.0
-
-### Minor Changes
-
-- 8f09cd2: fix: send requests back on the same stream if available
-
-## 0.3.0
-
-### Minor Changes
-
-- 3847654: fix: answer with conflict for second SSE connection
-
-### Patch Changes
-
-- Updated dependencies [1b50780]
-    - tmcp@1.7.1
-
-## 0.2.1
-
-### Patch Changes
-
-- f5d8390: fix: optional `getSessionId`
-
-## 0.2.0
-
-### Minor Changes
-
-- d12964e: breaking: correctly handle http requests
-
-### Patch Changes
-
-- Updated dependencies [d921480]
-    - tmcp@1.7.0
-
-## 0.1.1
-
-### Patch Changes
-
-- 41fb096: fix: use new sessions management
-- Updated dependencies [41fb096]
-    - tmcp@1.4.0

package/jsconfig.json

@@ -1,16 +0,0 @@
-{
-	"compilerOptions": {
-		"target": "esnext",
-		"module": "nodenext",
-		"moduleResolution": "nodenext",
-		"allowJs": true,
-		"checkJs": true,
-		"declaration": true,
-		"emitDeclarationOnly": false,
-		"strict": true,
-		"noEmit": true,
-		"skipLibCheck": true
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}

package/src/index.d.ts

@@ -1,20 +0,0 @@
-export class HttpTransport {
-    /**
-     *
-     * @param {McpServer<any>} server
-     * @param {HttpTransportOptions} [options]
-     */
-    constructor(server: McpServer<any>, options?: HttpTransportOptions);
-    /**
-     *
-     * @param {Request} request
-     * @returns {Promise<Response | null>}
-     */
-    respond(request: Request): Promise<Response | null>;
-    #private;
-}
-export type HttpTransportOptions = {
-    getSessionId?: () => string;
-    path?: string;
-};
-import type { McpServer } from "tmcp";