@tuteliq/mcp 3.2.0 → 3.2.1

package/dist/server.js

@@ -1,29 +1,49 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const express_1 = __importDefault(require("express"));
-const cors_1 = __importDefault(require("cors"));
-const index_js_1 = require("./src/index.js");
-const transport_js_1 = require("./src/transport.js");
-const app = (0, express_1.default)();
+import express from 'express';
+import cors from 'cors';
+import { createServer } from './src/index.js';
+import { createHttpHandlers } from './src/transport.js';
+const app = express();
 const port = parseInt(process.env.PORT || '3001', 10);
-app.use((0, cors_1.default)());
-app.use(express_1.default.json());
-const mcpServer = (0, index_js_1.createServer)();
-const mcpHandler = (0, transport_js_1.createHttpHandler)(mcpServer);
+app.use(cors());
+app.use(express.json());
+const { streamableHandler, sseHandler, messagesHandler, closeAll } = createHttpHandlers(createServer);
+// Streamable HTTP transport (protocol version 2025-11-25)
 app.all('/mcp', (req, res) => {
-    mcpHandler(req, res).catch((err) => {
+    streamableHandler(req, res).catch((err) => {
         console.error('MCP handler error:', err);
         if (!res.headersSent) {
             res.status(500).json({ error: 'Internal server error' });
         }
     });
 });
+// Legacy SSE transport (protocol version 2024-11-05)
+app.get('/sse', (req, res) => {
+    sseHandler(req, res).catch((err) => {
+        console.error('SSE handler error:', err);
+        if (!res.headersSent) {
+            res.status(500).json({ error: 'Internal server error' });
+        }
+    });
+});
+app.post('/messages', (req, res) => {
+    messagesHandler(req, res).catch((err) => {
+        console.error('Messages handler error:', err);
+        if (!res.headersSent) {
+            res.status(500).json({ error: 'Internal server error' });
+        }
+    });
+});
 app.get('/health', (_req, res) => {
-    res.json({ status: 'ok', version: '3.0.0' });
+    res.json({ status: 'ok', version: '3.2.0' });
+});
+const server = app.listen(port, () => {
+    console.error(`Tuteliq MCP server running on http://localhost:${port}`);
+    console.error(`  Streamable HTTP: POST/GET/DELETE /mcp`);
+    console.error(`  Legacy SSE:      GET /sse + POST /messages`);
 });
-app.listen(port, () => {
-    console.error(`Tuteliq MCP App server running on http://localhost:${port}/mcp`);
+process.on('SIGINT', async () => {
+    console.error('Shutting down...');
+    await closeAll();
+    server.close();
+    process.exit(0);
 });

package/dist/src/formatters.js

@@ -1,16 +1,10 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.trendEmoji = exports.riskEmoji = exports.severityEmoji = void 0;
-exports.formatDetectionResult = formatDetectionResult;
-exports.formatMultiResult = formatMultiResult;
-exports.formatVideoResult = formatVideoResult;
-exports.severityEmoji = {
+export const severityEmoji = {
     low: '\u{1F7E1}',
     medium: '\u{1F7E0}',
     high: '\u{1F534}',
     critical: '\u26D4',
 };
-exports.riskEmoji = {
+export const riskEmoji = {
     safe: '\u2705',
     none: '\u2705',
     low: '\u{1F7E1}',
@@ -18,14 +12,14 @@ exports.riskEmoji = {
     high: '\u{1F534}',
     critical: '\u26D4',
 };
-exports.trendEmoji = {
+export const trendEmoji = {
     improving: '\u{1F4C8}',
     stable: '\u27A1\uFE0F',
     worsening: '\u{1F4C9}',
 };
-function formatDetectionResult(result) {
+export function formatDetectionResult(result) {
     const detected = result.detected;
-    const levelEmoji = exports.riskEmoji[result.level] || '\u26AA';
+    const levelEmoji = riskEmoji[result.level] || '\u26AA';
     const label = result.endpoint
         .split('_')
         .map(w => w.charAt(0).toUpperCase() + w.slice(1))
@@ -62,9 +56,9 @@ ${evidence}
 ${messageAnalysis}
 ${calibration}`.trim();
 }
-function formatMultiResult(result) {
+export function formatMultiResult(result) {
     const s = result.summary;
-    const overallEmoji = exports.riskEmoji[s.overall_risk_level] || '\u26AA';
+    const overallEmoji = riskEmoji[s.overall_risk_level] || '\u26AA';
     const summarySection = `## Multi-Endpoint Analysis
 
 **Overall Risk:** ${overallEmoji} ${s.overall_risk_level}
@@ -74,7 +68,7 @@ function formatMultiResult(result) {
 ${result.cross_endpoint_modifier ? `**Cross-Endpoint Modifier:** ${result.cross_endpoint_modifier.toFixed(2)}x` : ''}`;
     const perEndpoint = result.results
         .map(r => {
-        const emoji = r.detected ? (exports.riskEmoji[r.level] || '\u26AA') : '\u2705';
+        const emoji = r.detected ? (riskEmoji[r.level] || '\u26AA') : '\u2705';
         return `### ${emoji} ${r.endpoint}
 **Detected:** ${r.detected ? 'Yes' : 'No'} | **Risk:** ${(r.risk_score * 100).toFixed(0)}% | **Level:** ${r.level}
 ${r.categories.length > 0 ? `**Categories:** ${r.categories.map(c => c.tag).join(', ')}` : ''}
@@ -87,12 +81,12 @@ ${r.rationale}`;
 
 ${perEndpoint}`;
 }
-function formatVideoResult(result) {
-    const emoji = exports.severityEmoji[result.overall_severity] || '\u2705';
+export function formatVideoResult(result) {
+    const emoji = severityEmoji[result.overall_severity] || '\u2705';
     const findingsSection = result.safety_findings.length > 0
         ? result.safety_findings
             .map(f => {
-            const fEmoji = exports.severityEmoji[f.severity <= 0.3 ? 'low' : f.severity <= 0.6 ? 'medium' : f.severity <= 0.85 ? 'high' : 'critical'] || '\u26AA';
+            const fEmoji = severityEmoji[f.severity <= 0.3 ? 'low' : f.severity <= 0.6 ? 'medium' : f.severity <= 0.85 ? 'high' : 'critical'] || '\u26AA';
             return `- \`${f.timestamp.toFixed(1)}s\` (frame ${f.frame_index}) ${fEmoji} ${f.description}\n  Categories: ${f.categories.join(', ')} | Severity: ${(f.severity * 100).toFixed(0)}%`;
         })
             .join('\n')

package/dist/src/index.d.ts

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function createServer(): McpServer;
+export declare function createServer(apiKey?: string): McpServer;
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUpE,wBAAgB,YAAY,IAAI,SAAS,CAsBxC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAUpE,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAsBvD"}

package/dist/src/index.js

@@ -1,38 +1,35 @@
 #!/usr/bin/env node
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createServer = createServer;
-const mcp_js_1 = require("@modelcontextprotocol/sdk/server/mcp.js");
-const sdk_1 = require("@tuteliq/sdk");
-const detection_js_1 = require("./tools/detection.js");
-const fraud_js_1 = require("./tools/fraud.js");
-const media_js_1 = require("./tools/media.js");
-const analysis_js_1 = require("./tools/analysis.js");
-const admin_js_1 = require("./tools/admin.js");
-const transport_js_1 = require("./transport.js");
-function createServer() {
-    const apiKey = process.env.TUTELIQ_API_KEY;
-    if (!apiKey) {
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { Tuteliq } from '@tuteliq/sdk';
+import { registerDetectionTools } from './tools/detection.js';
+import { registerFraudTools } from './tools/fraud.js';
+import { registerMediaTools } from './tools/media.js';
+import { registerAnalysisTools } from './tools/analysis.js';
+import { registerAdminTools } from './tools/admin.js';
+import { getTransportMode, startStdio } from './transport.js';
+export function createServer(apiKey) {
+    const key = apiKey || process.env.TUTELIQ_API_KEY;
+    if (!key) {
         console.error('Error: TUTELIQ_API_KEY environment variable is required');
         process.exit(1);
     }
-    const client = new sdk_1.Tuteliq(apiKey);
-    const server = new mcp_js_1.McpServer({
+    const client = new Tuteliq(key);
+    const server = new McpServer({
         name: 'tuteliq-mcp',
-        version: '3.0.0',
+        version: '3.2.0',
     });
     // Register all tool groups
-    (0, detection_js_1.registerDetectionTools)(server, client);
-    (0, fraud_js_1.registerFraudTools)(server, client);
-    (0, media_js_1.registerMediaTools)(server, client);
-    (0, analysis_js_1.registerAnalysisTools)(server, client);
-    (0, admin_js_1.registerAdminTools)(server, client);
+    registerDetectionTools(server, client);
+    registerFraudTools(server, client);
+    registerMediaTools(server, client);
+    registerAnalysisTools(server, client);
+    registerAdminTools(server, client);
     return server;
 }
 // Direct execution: stdio mode
-if ((0, transport_js_1.getTransportMode)() === 'stdio') {
+if (getTransportMode() === 'stdio') {
     const server = createServer();
-    (0, transport_js_1.startStdio)(server).catch((error) => {
+    startStdio(server).catch((error) => {
         console.error('Fatal error:', error);
         process.exit(1);
     });

package/dist/src/tools/admin.js

@@ -1,9 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerAdminTools = registerAdminTools;
-const zod_1 = require("zod");
-const formatters_js_1 = require("../formatters.js");
-function registerAdminTools(server, client) {
+import { z } from 'zod';
+import { severityEmoji } from '../formatters.js';
+export function registerAdminTools(server, client) {
     // =========================================================================
     // Webhook Management
     // =========================================================================
@@ -16,9 +13,9 @@ function registerAdminTools(server, client) {
         return { content: [{ type: 'text', text: `## Webhooks\n\n${lines}` }] };
     });
     server.tool('create_webhook', 'Create a new webhook endpoint.', {
-        name: zod_1.z.string().describe('Display name for the webhook'),
-        url: zod_1.z.string().describe('HTTPS URL to receive webhook payloads'),
-        events: zod_1.z.array(zod_1.z.string()).describe('Event types to subscribe to'),
+        name: z.string().describe('Display name for the webhook'),
+        url: z.string().describe('HTTPS URL to receive webhook payloads'),
+        events: z.array(z.string()).describe('Event types to subscribe to'),
     }, async ({ name, url, events }) => {
         const result = await client.createWebhook({
             name,
@@ -28,11 +25,11 @@ function registerAdminTools(server, client) {
         return { content: [{ type: 'text', text: `## \u2705 Webhook Created\n\n**ID:** ${result.id}\n**Name:** ${result.name}\n**URL:** ${result.url}\n**Events:** ${result.events.join(', ')}\n\n\u26A0\uFE0F **Secret (save this \u2014 shown only once):**\n\`${result.secret}\`` }] };
     });
     server.tool('update_webhook', 'Update an existing webhook configuration.', {
-        id: zod_1.z.string().describe('Webhook ID'),
-        name: zod_1.z.string().optional().describe('New display name'),
-        url: zod_1.z.string().optional().describe('New HTTPS URL'),
-        events: zod_1.z.array(zod_1.z.string()).optional().describe('New event subscriptions'),
-        is_active: zod_1.z.boolean().optional().describe('Enable or disable the webhook'),
+        id: z.string().describe('Webhook ID'),
+        name: z.string().optional().describe('New display name'),
+        url: z.string().optional().describe('New HTTPS URL'),
+        events: z.array(z.string()).optional().describe('New event subscriptions'),
+        is_active: z.boolean().optional().describe('Enable or disable the webhook'),
     }, async ({ id, name, url, events, is_active }) => {
         const result = await client.updateWebhook(id, {
             name,
@@ -42,15 +39,15 @@ function registerAdminTools(server, client) {
         });
         return { content: [{ type: 'text', text: `## \u2705 Webhook Updated\n\n**ID:** ${result.id}\n**Name:** ${result.name}\n**Active:** ${result.is_active ? '\u{1F7E2} Yes' : '\u26AA No'}` }] };
     });
-    server.tool('delete_webhook', 'Permanently delete a webhook.', { id: zod_1.z.string().describe('Webhook ID to delete') }, async ({ id }) => {
+    server.tool('delete_webhook', 'Permanently delete a webhook.', { id: z.string().describe('Webhook ID to delete') }, async ({ id }) => {
         await client.deleteWebhook(id);
         return { content: [{ type: 'text', text: `## \u2705 Webhook Deleted\n\nWebhook \`${id}\` has been permanently deleted.` }] };
     });
-    server.tool('test_webhook', 'Send a test payload to a webhook to verify it is working correctly.', { id: zod_1.z.string().describe('Webhook ID to test') }, async ({ id }) => {
+    server.tool('test_webhook', 'Send a test payload to a webhook to verify it is working correctly.', { id: z.string().describe('Webhook ID to test') }, async ({ id }) => {
         const result = await client.testWebhook(id);
         return { content: [{ type: 'text', text: `## ${result.success ? '\u2705' : '\u274C'} Webhook Test\n\n**Success:** ${result.success}\n**Status Code:** ${result.status_code}\n**Latency:** ${result.latency_ms}ms${result.error ? `\n**Error:** ${result.error}` : ''}` }] };
     });
-    server.tool('regenerate_webhook_secret', 'Regenerate a webhook signing secret.', { id: zod_1.z.string().describe('Webhook ID') }, async ({ id }) => {
+    server.tool('regenerate_webhook_secret', 'Regenerate a webhook signing secret.', { id: z.string().describe('Webhook ID') }, async ({ id }) => {
         const result = await client.regenerateWebhookSecret(id);
         return { content: [{ type: 'text', text: `## \u2705 Secret Regenerated\n\nThe old secret has been invalidated.\n\n\u26A0\uFE0F **New Secret (save this \u2014 shown only once):**\n\`${result.secret}\`` }] };
     });
@@ -70,7 +67,7 @@ function registerAdminTools(server, client) {
     // =========================================================================
     // Usage & Billing
     // =========================================================================
-    server.tool('get_usage_history', 'Get daily usage history for the past N days.', { days: zod_1.z.number().optional().describe('Number of days to retrieve (1-30, default: 7)') }, async ({ days }) => {
+    server.tool('get_usage_history', 'Get daily usage history for the past N days.', { days: z.number().optional().describe('Number of days to retrieve (1-30, default: 7)') }, async ({ days }) => {
         const result = await client.getUsageHistory(days);
         if (result.days.length === 0) {
             return { content: [{ type: 'text', text: 'No usage data available.' }] };
@@ -78,7 +75,7 @@ function registerAdminTools(server, client) {
         const lines = result.days.map(d => `| ${d.date} | ${d.total_requests} | ${d.success_requests} | ${d.error_requests} |`).join('\n');
         return { content: [{ type: 'text', text: `## Usage History\n\n| Date | Total | Success | Errors |\n|------|-------|---------|--------|\n${lines}` }] };
     });
-    server.tool('get_usage_by_tool', 'Get usage broken down by tool/endpoint for a specific date.', { date: zod_1.z.string().optional().describe('Date in YYYY-MM-DD format (default: today)') }, async ({ date }) => {
+    server.tool('get_usage_by_tool', 'Get usage broken down by tool/endpoint for a specific date.', { date: z.string().optional().describe('Date in YYYY-MM-DD format (default: today)') }, async ({ date }) => {
         const result = await client.getUsageByTool(date);
         const toolLines = Object.entries(result.tools).map(([tool, count]) => `- **${tool}:** ${count}`).join('\n');
         const endpointLines = Object.entries(result.endpoints).map(([ep, count]) => `- **${ep}:** ${count}`).join('\n');
@@ -111,10 +108,10 @@ ${result.recommendations ? `### Recommendation\n${result.recommendations.reason}
         const collections = Object.keys(result.data).join(', ');
         return { content: [{ type: 'text', text: `## \u{1F4E6} Account Data Export\n\n**User ID:** ${result.userId}\n**Exported At:** ${result.exportedAt}\n**Collections:** ${collections}\n\n\`\`\`json\n${JSON.stringify(result.data, null, 2).slice(0, 5000)}\n\`\`\`` }] };
     });
-    const consentTypeEnum = zod_1.z.enum(['data_processing', 'analytics', 'marketing', 'third_party_sharing', 'child_safety_monitoring']);
+    const consentTypeEnum = z.enum(['data_processing', 'analytics', 'marketing', 'third_party_sharing', 'child_safety_monitoring']);
     server.tool('record_consent', 'Record user consent for data processing (GDPR Article 7).', {
         consent_type: consentTypeEnum.describe('Type of consent to record'),
-        version: zod_1.z.string().describe('Policy version the user is consenting to'),
+        version: z.string().describe('Policy version the user is consenting to'),
     }, async ({ consent_type, version }) => {
         const result = await client.recordConsent({ consent_type: consent_type, version });
         return { content: [{ type: 'text', text: `## \u2705 Consent Recorded\n\n**Type:** ${result.consent.consent_type}\n**Status:** ${result.consent.status}\n**Version:** ${result.consent.version}` }] };
@@ -132,16 +129,16 @@ ${result.recommendations ? `### Recommendation\n${result.recommendations.reason}
         return { content: [{ type: 'text', text: `## \u26A0\uFE0F Consent Withdrawn\n\n**Type:** ${result.consent.consent_type}\n**Status:** ${result.consent.status}` }] };
     });
     server.tool('rectify_data', 'Rectify (correct) user data (GDPR Right to Rectification).', {
-        collection: zod_1.z.string().describe('Firestore collection name'),
-        document_id: zod_1.z.string().describe('Document ID to rectify'),
-        fields: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).describe('Fields to update'),
+        collection: z.string().describe('Firestore collection name'),
+        document_id: z.string().describe('Document ID to rectify'),
+        fields: z.record(z.string(), z.unknown()).describe('Fields to update'),
     }, async ({ collection, document_id, fields }) => {
         const result = await client.rectifyData({ collection, document_id, fields: fields });
         return { content: [{ type: 'text', text: `## \u2705 Data Rectified\n\n**Message:** ${result.message}\n**Updated Fields:** ${result.updated_fields.join(', ')}` }] };
     });
     server.tool('get_audit_logs', 'Get audit trail of data operations.', {
-        action: zod_1.z.enum(['data_access', 'data_export', 'data_deletion', 'data_rectification', 'consent_granted', 'consent_withdrawn', 'breach_notification']).optional().describe('Filter by action type'),
-        limit: zod_1.z.number().optional().describe('Maximum number of results'),
+        action: z.enum(['data_access', 'data_export', 'data_deletion', 'data_rectification', 'consent_granted', 'consent_withdrawn', 'breach_notification']).optional().describe('Filter by action type'),
+        limit: z.number().optional().describe('Maximum number of results'),
     }, async ({ action, limit }) => {
         const result = await client.getAuditLogs({ action: action, limit });
         if (result.audit_logs.length === 0) {
@@ -154,12 +151,12 @@ ${result.recommendations ? `### Recommendation\n${result.recommendations.reason}
     // Breach Management
     // =========================================================================
     server.tool('log_breach', 'Log a new data breach (GDPR Article 33/34).', {
-        title: zod_1.z.string().describe('Brief title of the breach'),
-        description: zod_1.z.string().describe('Detailed description'),
-        severity: zod_1.z.enum(['low', 'medium', 'high', 'critical']).describe('Breach severity'),
-        affected_user_ids: zod_1.z.array(zod_1.z.string()).describe('List of affected user IDs'),
-        data_categories: zod_1.z.array(zod_1.z.string()).describe('Categories of data affected'),
-        reported_by: zod_1.z.string().describe('Who reported the breach'),
+        title: z.string().describe('Brief title of the breach'),
+        description: z.string().describe('Detailed description'),
+        severity: z.enum(['low', 'medium', 'high', 'critical']).describe('Breach severity'),
+        affected_user_ids: z.array(z.string()).describe('List of affected user IDs'),
+        data_categories: z.array(z.string()).describe('Categories of data affected'),
+        reported_by: z.string().describe('Who reported the breach'),
     }, async ({ title, description, severity, affected_user_ids, data_categories, reported_by }) => {
         const result = await client.logBreach({
             title,
@@ -170,30 +167,30 @@ ${result.recommendations ? `### Recommendation\n${result.recommendations.reason}
             reported_by,
         });
         const b = result.breach;
-        return { content: [{ type: 'text', text: `## \u26A0\uFE0F Breach Logged\n\n**ID:** ${b.id}\n**Title:** ${b.title}\n**Severity:** ${formatters_js_1.severityEmoji[b.severity] || '\u26AA'} ${b.severity}\n**Status:** ${b.status}\n**Notification Deadline:** ${b.notification_deadline}\n**Affected Users:** ${b.affected_user_ids.length}\n**Data Categories:** ${b.data_categories.join(', ')}` }] };
+        return { content: [{ type: 'text', text: `## \u26A0\uFE0F Breach Logged\n\n**ID:** ${b.id}\n**Title:** ${b.title}\n**Severity:** ${severityEmoji[b.severity] || '\u26AA'} ${b.severity}\n**Status:** ${b.status}\n**Notification Deadline:** ${b.notification_deadline}\n**Affected Users:** ${b.affected_user_ids.length}\n**Data Categories:** ${b.data_categories.join(', ')}` }] };
     });
-    const breachStatusEnum = zod_1.z.enum(['detected', 'investigating', 'contained', 'reported', 'resolved']);
+    const breachStatusEnum = z.enum(['detected', 'investigating', 'contained', 'reported', 'resolved']);
     server.tool('list_breaches', 'List all data breaches.', {
         status: breachStatusEnum.optional().describe('Filter by status'),
-        limit: zod_1.z.number().optional().describe('Maximum number of results'),
+        limit: z.number().optional().describe('Maximum number of results'),
     }, async ({ status, limit }) => {
         const result = await client.listBreaches({ status: status, limit });
         if (result.breaches.length === 0) {
             return { content: [{ type: 'text', text: 'No breaches found.' }] };
         }
-        const breachLines = result.breaches.map(b => `- ${formatters_js_1.severityEmoji[b.severity] || '\u26AA'} **${b.title}** \u2014 ${b.status} _(${b.id})_`).join('\n');
+        const breachLines = result.breaches.map(b => `- ${severityEmoji[b.severity] || '\u26AA'} **${b.title}** \u2014 ${b.status} _(${b.id})_`).join('\n');
         return { content: [{ type: 'text', text: `## Data Breaches\n\n${breachLines}` }] };
     });
-    server.tool('get_breach', 'Get details of a specific data breach.', { id: zod_1.z.string().describe('Breach ID') }, async ({ id }) => {
+    server.tool('get_breach', 'Get details of a specific data breach.', { id: z.string().describe('Breach ID') }, async ({ id }) => {
         const result = await client.getBreach(id);
         const b = result.breach;
-        return { content: [{ type: 'text', text: `## Breach Details\n\n**ID:** ${b.id}\n**Title:** ${b.title}\n**Severity:** ${formatters_js_1.severityEmoji[b.severity] || '\u26AA'} ${b.severity}\n**Status:** ${b.status}\n**Notification:** ${b.notification_status}\n**Reported By:** ${b.reported_by}\n**Deadline:** ${b.notification_deadline}\n**Created:** ${b.created_at}\n**Updated:** ${b.updated_at}\n\n### Description\n${b.description}\n\n**Affected Users:** ${b.affected_user_ids.join(', ')}\n**Data Categories:** ${b.data_categories.join(', ')}` }] };
+        return { content: [{ type: 'text', text: `## Breach Details\n\n**ID:** ${b.id}\n**Title:** ${b.title}\n**Severity:** ${severityEmoji[b.severity] || '\u26AA'} ${b.severity}\n**Status:** ${b.status}\n**Notification:** ${b.notification_status}\n**Reported By:** ${b.reported_by}\n**Deadline:** ${b.notification_deadline}\n**Created:** ${b.created_at}\n**Updated:** ${b.updated_at}\n\n### Description\n${b.description}\n\n**Affected Users:** ${b.affected_user_ids.join(', ')}\n**Data Categories:** ${b.data_categories.join(', ')}` }] };
     });
     server.tool('update_breach_status', 'Update a breach status and notification progress.', {
-        id: zod_1.z.string().describe('Breach ID'),
+        id: z.string().describe('Breach ID'),
         status: breachStatusEnum.describe('New breach status'),
-        notification_status: zod_1.z.enum(['pending', 'users_notified', 'dpa_notified', 'completed']).optional().describe('Notification progress'),
-        notes: zod_1.z.string().optional().describe('Additional notes'),
+        notification_status: z.enum(['pending', 'users_notified', 'dpa_notified', 'completed']).optional().describe('Notification progress'),
+        notes: z.string().optional().describe('Additional notes'),
     }, async ({ id, status, notification_status, notes }) => {
         const result = await client.updateBreachStatus(id, {
             status: status,

package/dist/src/tools/analysis.js

@@ -1,19 +1,16 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerAnalysisTools = registerAnalysisTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const fs_1 = require("fs");
-const path_1 = require("path");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool, registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+import { trendEmoji, riskEmoji, formatMultiResult } from '../formatters.js';
 const EMOTIONS_WIDGET_URI = 'ui://tuteliq/emotions-result.html';
 const ACTION_PLAN_WIDGET_URI = 'ui://tuteliq/action-plan.html';
 const REPORT_WIDGET_URI = 'ui://tuteliq/report-result.html';
 const MULTI_WIDGET_URI = 'ui://tuteliq/multi-result.html';
 function loadWidget(name) {
-    return (0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../dist-ui', name), 'utf-8');
+    return readFileSync(resolve(__dirname, '../../dist-ui', name), 'utf-8');
 }
-function registerAnalysisTools(server, client) {
+export function registerAnalysisTools(server, client) {
     const resources = [
         { uri: EMOTIONS_WIDGET_URI, file: 'emotions-result.html' },
         { uri: ACTION_PLAN_WIDGET_URI, file: 'action-plan.html' },
@@ -21,21 +18,21 @@ function registerAnalysisTools(server, client) {
         { uri: MULTI_WIDGET_URI, file: 'multi-result.html' },
     ];
     for (const r of resources) {
-        (0, server_1.registerAppResource)(server, r.uri, r.uri, { mimeType: server_1.RESOURCE_MIME_TYPE }, async () => ({
+        registerAppResource(server, r.uri, r.uri, { mimeType: RESOURCE_MIME_TYPE }, async () => ({
             contents: [{
                     uri: r.uri,
-                    mimeType: server_1.RESOURCE_MIME_TYPE,
+                    mimeType: RESOURCE_MIME_TYPE,
                     text: loadWidget(r.file),
                 }],
         }));
     }
     // ── analyze_emotions ───────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_emotions', {
+    registerAppTool(server, 'analyze_emotions', {
         title: 'Analyze Emotions',
         description: 'Analyze emotional content and mental state indicators. Identifies dominant emotions, trends, and provides follow-up recommendations.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze for emotions'),
+            content: z.string().describe('The text content to analyze for emotions'),
         },
         _meta: {
             ui: { resourceUri: EMOTIONS_WIDGET_URI },
@@ -45,7 +42,7 @@ function registerAnalysisTools(server, client) {
         },
     }, async ({ content }) => {
         const result = await client.analyzeEmotions({ content });
-        const emoji = formatters_js_1.trendEmoji[result.trend] || '\u27A1\uFE0F';
+        const emoji = trendEmoji[result.trend] || '\u27A1\uFE0F';
         const emotionScoresList = Object.entries(result.emotion_scores)
             .sort((a, b) => b[1] - a[1])
             .map(([emotion, score]) => `- ${emotion}: ${(score * 100).toFixed(0)}%`)
@@ -69,15 +66,15 @@ ${result.recommended_followup}`;
         };
     });
     // ── get_action_plan ────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'get_action_plan', {
+    registerAppTool(server, 'get_action_plan', {
         title: 'Get Action Plan',
         description: 'Generate age-appropriate guidance and action steps for handling a safety situation.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            situation: zod_1.z.string().describe('Description of the situation needing guidance'),
-            childAge: zod_1.z.number().optional().describe('Age of the child involved'),
-            audience: zod_1.z.enum(['child', 'parent', 'educator', 'platform']).optional().describe('Who the guidance is for (default: parent)'),
-            severity: zod_1.z.enum(['low', 'medium', 'high', 'critical']).optional().describe('Severity of the situation'),
+            situation: z.string().describe('Description of the situation needing guidance'),
+            childAge: z.number().optional().describe('Age of the child involved'),
+            audience: z.enum(['child', 'parent', 'educator', 'platform']).optional().describe('Who the guidance is for (default: parent)'),
+            severity: z.enum(['low', 'medium', 'high', 'critical']).optional().describe('Severity of the situation'),
         },
         _meta: {
             ui: { resourceUri: ACTION_PLAN_WIDGET_URI },
@@ -101,17 +98,17 @@ ${result.steps.map((step, i) => `${i + 1}. ${step}`).join('\n')}`;
         };
     });
     // ── generate_report ────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'generate_report', {
+    registerAppTool(server, 'generate_report', {
         title: 'Generate Report',
         description: 'Generate a comprehensive incident report from a conversation.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            messages: zod_1.z.array(zod_1.z.object({
-                sender: zod_1.z.string().describe('Name/ID of sender'),
-                content: zod_1.z.string().describe('Message content'),
+            messages: z.array(z.object({
+                sender: z.string().describe('Name/ID of sender'),
+                content: z.string().describe('Message content'),
             })).describe('Array of messages in the incident'),
-            childAge: zod_1.z.number().optional().describe('Age of the child involved'),
-            incidentType: zod_1.z.string().optional().describe('Type of incident (e.g., bullying, grooming)'),
+            childAge: z.number().optional().describe('Age of the child involved'),
+            incidentType: z.string().optional().describe('Type of incident (e.g., bullying, grooming)'),
         },
         _meta: {
             ui: { resourceUri: REPORT_WIDGET_URI },
@@ -125,7 +122,7 @@ ${result.steps.map((step, i) => `${i + 1}. ${step}`).join('\n')}`;
             childAge,
             incident: incidentType ? { type: incidentType } : undefined,
         });
-        const emoji = formatters_js_1.riskEmoji[result.risk_level] || '\u26AA';
+        const emoji = riskEmoji[result.risk_level] || '\u26AA';
         const text = `## \u{1F4CB} Incident Report
 
 **Risk Level:** ${emoji} ${result.risk_level.charAt(0).toUpperCase() + result.risk_level.slice(1)}
@@ -144,17 +141,17 @@ ${result.recommended_next_steps.map((step, i) => `${i + 1}. ${step}`).join('\n')
         };
     });
     // ── analyse_multi ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyse_multi', {
+    registerAppTool(server, 'analyse_multi', {
         title: 'Multi-Endpoint Analysis',
         description: 'Run multiple detection endpoints on a single piece of text.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('Text content to analyze'),
-            endpoints: zod_1.z.array(zod_1.z.string()).describe('Detection endpoints to run'),
-            context: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional().describe('Optional analysis context'),
-            include_evidence: zod_1.z.boolean().optional().describe('Include supporting evidence'),
-            external_id: zod_1.z.string().optional().describe('External tracking ID'),
-            customer_id: zod_1.z.string().optional().describe('Customer identifier'),
+            content: z.string().describe('Text content to analyze'),
+            endpoints: z.array(z.string()).describe('Detection endpoints to run'),
+            context: z.record(z.string(), z.unknown()).optional().describe('Optional analysis context'),
+            include_evidence: z.boolean().optional().describe('Include supporting evidence'),
+            external_id: z.string().optional().describe('External tracking ID'),
+            customer_id: z.string().optional().describe('Customer identifier'),
         },
         _meta: {
             ui: { resourceUri: MULTI_WIDGET_URI },
@@ -173,7 +170,7 @@ ${result.recommended_next_steps.map((step, i) => `${i + 1}. ${step}`).join('\n')
         });
         return {
             structuredContent: { toolName: 'analyse_multi', result, branding: { appName: 'Tuteliq' } },
-            content: [{ type: 'text', text: (0, formatters_js_1.formatMultiResult)(result) }],
+            content: [{ type: 'text', text: formatMultiResult(result) }],
         };
     });
 }

package/dist/src/tools/detection.js

@@ -1,20 +1,17 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerDetectionTools = registerDetectionTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const fs_1 = require("fs");
-const path_1 = require("path");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool, registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+import { severityEmoji, riskEmoji } from '../formatters.js';
 const DETECTION_WIDGET_URI = 'ui://tuteliq/detection-result.html';
 function loadWidget(name) {
-    return (0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../dist-ui', name), 'utf-8');
+    return readFileSync(resolve(__dirname, '../../dist-ui', name), 'utf-8');
 }
-const contextSchema = zod_1.z.object({
-    language: zod_1.z.string().optional(),
-    ageGroup: zod_1.z.string().optional(),
-    relationship: zod_1.z.string().optional(),
-    platform: zod_1.z.string().optional(),
+const contextSchema = z.object({
+    language: z.string().optional(),
+    ageGroup: z.string().optional(),
+    relationship: z.string().optional(),
+    platform: z.string().optional(),
 }).optional();
 const uiMeta = (desc, invoking, invoked) => ({
     ui: { resourceUri: DETECTION_WIDGET_URI },
@@ -22,22 +19,22 @@ const uiMeta = (desc, invoking, invoked) => ({
     'openai/toolInvocation/invoking': invoking,
     'openai/toolInvocation/invoked': invoked,
 });
-function registerDetectionTools(server, client) {
+export function registerDetectionTools(server, client) {
     // Cast needed due to CJS/ESM dual-module type mismatch between MCP SDK and ext-apps
-    (0, server_1.registerAppResource)(server, DETECTION_WIDGET_URI, DETECTION_WIDGET_URI, { mimeType: server_1.RESOURCE_MIME_TYPE }, async () => ({
+    registerAppResource(server, DETECTION_WIDGET_URI, DETECTION_WIDGET_URI, { mimeType: RESOURCE_MIME_TYPE }, async () => ({
         contents: [{
                 uri: DETECTION_WIDGET_URI,
-                mimeType: server_1.RESOURCE_MIME_TYPE,
+                mimeType: RESOURCE_MIME_TYPE,
                 text: loadWidget('detection-result.html'),
             }],
     }));
     // ── detect_bullying ────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'detect_bullying', {
+    registerAppTool(server, 'detect_bullying', {
         title: 'Detect Bullying',
         description: 'Analyze text content to detect bullying, harassment, or harmful language.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze for bullying'),
+            content: z.string().describe('The text content to analyze for bullying'),
             context: contextSchema,
         },
         _meta: uiMeta('Shows bullying detection results with risk indicators', 'Analyzing content for bullying...', 'Bullying analysis complete.'),
@@ -46,7 +43,7 @@ function registerDetectionTools(server, client) {
             content,
             context: context,
         });
-        const emoji = formatters_js_1.severityEmoji[result.severity] || '\u26AA';
+        const emoji = severityEmoji[result.severity] || '\u26AA';
         const text = `## ${result.is_bullying ? '\u26A0\uFE0F Bullying Detected' : '\u2705 No Bullying Detected'}
 
 **Severity:** ${emoji} ${result.severity.charAt(0).toUpperCase() + result.severity.slice(1)}
@@ -66,16 +63,16 @@ ${result.rationale}
         };
     });
     // ── detect_grooming ────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'detect_grooming', {
+    registerAppTool(server, 'detect_grooming', {
         title: 'Detect Grooming',
         description: 'Analyze a conversation for grooming patterns and predatory behavior.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            messages: zod_1.z.array(zod_1.z.object({
-                role: zod_1.z.enum(['adult', 'child', 'unknown']),
-                content: zod_1.z.string(),
+            messages: z.array(z.object({
+                role: z.enum(['adult', 'child', 'unknown']),
+                content: z.string(),
             })).describe('Array of messages in the conversation'),
-            childAge: zod_1.z.number().optional().describe('Age of the child in the conversation'),
+            childAge: z.number().optional().describe('Age of the child in the conversation'),
         },
         _meta: uiMeta('Shows grooming detection results with risk indicators', 'Analyzing conversation for grooming patterns...', 'Grooming analysis complete.'),
     }, async ({ messages, childAge }) => {
@@ -83,7 +80,7 @@ ${result.rationale}
             messages,
             childAge,
         });
-        const emoji = formatters_js_1.riskEmoji[result.grooming_risk] || '\u26AA';
+        const emoji = riskEmoji[result.grooming_risk] || '\u26AA';
         const text = `## ${result.grooming_risk === 'none' ? '\u2705 No Grooming Detected' : '\u26A0\uFE0F Grooming Risk Detected'}
 
 **Risk Level:** ${emoji} ${result.grooming_risk.charAt(0).toUpperCase() + result.grooming_risk.slice(1)}
@@ -103,12 +100,12 @@ ${result.rationale}
         };
     });
     // ── detect_unsafe ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'detect_unsafe', {
+    registerAppTool(server, 'detect_unsafe', {
         title: 'Detect Unsafe Content',
         description: 'Detect unsafe content including self-harm, violence, drugs, explicit material.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze for unsafe content'),
+            content: z.string().describe('The text content to analyze for unsafe content'),
             context: contextSchema,
         },
         _meta: uiMeta('Shows unsafe content detection results', 'Analyzing content for safety concerns...', 'Safety analysis complete.'),
@@ -117,7 +114,7 @@ ${result.rationale}
             content,
             context: context,
         });
-        const emoji = formatters_js_1.severityEmoji[result.severity] || '\u26AA';
+        const emoji = severityEmoji[result.severity] || '\u26AA';
         const text = `## ${result.unsafe ? '\u26A0\uFE0F Unsafe Content Detected' : '\u2705 Content is Safe'}
 
 **Severity:** ${emoji} ${result.severity.charAt(0).toUpperCase() + result.severity.slice(1)}
@@ -137,18 +134,18 @@ ${result.rationale}
         };
     });
     // ── analyze (quick combined) ───────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze', {
+    registerAppTool(server, 'analyze', {
         title: 'Quick Safety Analysis',
         description: 'Quick comprehensive safety analysis that checks for both bullying and unsafe content.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze'),
-            include: zod_1.z.array(zod_1.z.enum(['bullying', 'unsafe'])).optional().describe('Which checks to run (default: both)'),
+            content: z.string().describe('The text content to analyze'),
+            include: z.array(z.enum(['bullying', 'unsafe'])).optional().describe('Which checks to run (default: both)'),
         },
         _meta: uiMeta('Shows combined safety analysis results', 'Running safety analysis...', 'Safety analysis complete.'),
     }, async ({ content, include }) => {
         const result = await client.analyze({ content, include });
-        const emoji = formatters_js_1.riskEmoji[result.risk_level] || '\u26AA';
+        const emoji = riskEmoji[result.risk_level] || '\u26AA';
         const text = `## Safety Analysis Results
 
 **Overall Risk:** ${emoji} ${result.risk_level.charAt(0).toUpperCase() + result.risk_level.slice(1)}

package/dist/src/tools/fraud.js

@@ -1,9 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerFraudTools = registerFraudTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool } from '@modelcontextprotocol/ext-apps/server';
+import { formatDetectionResult } from '../formatters.js';
 const DETECTION_WIDGET_URI = 'ui://tuteliq/detection-result.html';
 const FRAUD_TOOLS = [
     {
@@ -72,15 +69,15 @@ const FRAUD_TOOLS = [
     },
 ];
 const fraudInputSchema = {
-    content: zod_1.z.string().describe('Text content to analyze'),
-    context: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional().describe('Optional analysis context'),
-    include_evidence: zod_1.z.boolean().optional().describe('Include supporting evidence excerpts'),
-    external_id: zod_1.z.string().optional().describe('External tracking ID'),
-    customer_id: zod_1.z.string().optional().describe('Customer identifier'),
+    content: z.string().describe('Text content to analyze'),
+    context: z.record(z.string(), z.unknown()).optional().describe('Optional analysis context'),
+    include_evidence: z.boolean().optional().describe('Include supporting evidence excerpts'),
+    external_id: z.string().optional().describe('External tracking ID'),
+    customer_id: z.string().optional().describe('Customer identifier'),
 };
-function registerFraudTools(server, client) {
+export function registerFraudTools(server, client) {
     for (const tool of FRAUD_TOOLS) {
-        (0, server_1.registerAppTool)(server, tool.name, {
+        registerAppTool(server, tool.name, {
             title: tool.title,
             description: tool.description,
             annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
@@ -102,7 +99,7 @@ function registerFraudTools(server, client) {
             });
             return {
                 structuredContent: { toolName: tool.name, result, branding: { appName: 'Tuteliq' } },
-                content: [{ type: 'text', text: (0, formatters_js_1.formatDetectionResult)(result) }],
+                content: [{ type: 'text', text: formatDetectionResult(result) }],
             };
         });
     }

package/dist/src/tools/media.js

@@ -1,36 +1,33 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerMediaTools = registerMediaTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const fs_1 = require("fs");
-const path_1 = require("path");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool, registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+import { severityEmoji, trendEmoji, formatVideoResult } from '../formatters.js';
 const MEDIA_WIDGET_URI = 'ui://tuteliq/media-result.html';
 function loadWidget(name) {
-    return (0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../dist-ui', name), 'utf-8');
+    return readFileSync(resolve(__dirname, '../../dist-ui', name), 'utf-8');
 }
 function filenameFromPath(filePath) {
     return filePath.split('/').pop() || filePath;
 }
-function registerMediaTools(server, client) {
-    (0, server_1.registerAppResource)(server, MEDIA_WIDGET_URI, MEDIA_WIDGET_URI, { mimeType: server_1.RESOURCE_MIME_TYPE }, async () => ({
+export function registerMediaTools(server, client) {
+    registerAppResource(server, MEDIA_WIDGET_URI, MEDIA_WIDGET_URI, { mimeType: RESOURCE_MIME_TYPE }, async () => ({
         contents: [{
                 uri: MEDIA_WIDGET_URI,
-                mimeType: server_1.RESOURCE_MIME_TYPE,
+                mimeType: RESOURCE_MIME_TYPE,
                 text: loadWidget('media-result.html'),
             }],
     }));
     // ── analyze_voice ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_voice', {
+    registerAppTool(server, 'analyze_voice', {
         title: 'Analyze Voice',
         description: 'Analyze an audio file for safety concerns. Transcribes the audio via Whisper, then runs safety analysis on the transcript. Supports mp3, wav, m4a, ogg, flac, webm, mp4.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            file_path: zod_1.z.string().describe('Absolute path to the audio file on disk'),
-            analysis_type: zod_1.z.enum(['bullying', 'unsafe', 'grooming', 'emotions', 'all']).optional().describe('Type of analysis to run on the transcript (default: all)'),
-            child_age: zod_1.z.number().optional().describe('Child age (used for grooming analysis)'),
-            language: zod_1.z.string().optional().describe('Language hint for transcription (e.g., "en", "es")'),
+            file_path: z.string().describe('Absolute path to the audio file on disk'),
+            analysis_type: z.enum(['bullying', 'unsafe', 'grooming', 'emotions', 'all']).optional().describe('Type of analysis to run on the transcript (default: all)'),
+            child_age: z.number().optional().describe('Child age (used for grooming analysis)'),
+            language: z.string().optional().describe('Language hint for transcription (e.g., "en", "es")'),
         },
         _meta: {
             ui: { resourceUri: MEDIA_WIDGET_URI },
@@ -39,7 +36,7 @@ function registerMediaTools(server, client) {
             'openai/toolInvocation/invoked': 'Voice analysis complete.',
         },
     }, async ({ file_path, analysis_type, child_age, language }) => {
-        const buffer = (0, fs_1.readFileSync)(file_path);
+        const buffer = readFileSync(file_path);
         const filename = filenameFromPath(file_path);
         const result = await client.analyzeVoice({
             file: buffer,
@@ -48,7 +45,7 @@ function registerMediaTools(server, client) {
             language,
             childAge: child_age,
         });
-        const emoji = formatters_js_1.severityEmoji[result.overall_severity] || '\u2705';
+        const emoji = severityEmoji[result.overall_severity] || '\u2705';
         const segmentLines = result.transcription.segments
             .slice(0, 20)
             .map(s => `\`${s.start.toFixed(1)}s\u2013${s.end.toFixed(1)}s\` ${s.text}`)
@@ -64,7 +61,7 @@ function registerMediaTools(server, client) {
             analysisLines.push(`**Grooming:** ${result.analysis.grooming.grooming_risk !== 'none' ? '\u26A0\uFE0F ' + result.analysis.grooming.grooming_risk : '\u2705 Clear'} (${(result.analysis.grooming.risk_score * 100).toFixed(0)}%)`);
         }
         if (result.analysis.emotions) {
-            analysisLines.push(`**Emotions:** ${result.analysis.emotions.dominant_emotions.join(', ')} (${formatters_js_1.trendEmoji[result.analysis.emotions.trend] || ''} ${result.analysis.emotions.trend})`);
+            analysisLines.push(`**Emotions:** ${result.analysis.emotions.dominant_emotions.join(', ')} (${trendEmoji[result.analysis.emotions.trend] || ''} ${result.analysis.emotions.trend})`);
         }
         const text = `## \u{1F399}\uFE0F Voice Analysis
 
@@ -87,13 +84,13 @@ ${analysisLines.join('\n')}`;
         };
     });
     // ── analyze_image ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_image', {
+    registerAppTool(server, 'analyze_image', {
         title: 'Analyze Image',
         description: 'Analyze an image for visual safety concerns and OCR text extraction. Supports png, jpg, jpeg, gif, webp.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            file_path: zod_1.z.string().describe('Absolute path to the image file on disk'),
-            analysis_type: zod_1.z.enum(['bullying', 'unsafe', 'emotions', 'all']).optional().describe('Type of analysis to run on extracted text (default: all)'),
+            file_path: z.string().describe('Absolute path to the image file on disk'),
+            analysis_type: z.enum(['bullying', 'unsafe', 'emotions', 'all']).optional().describe('Type of analysis to run on extracted text (default: all)'),
         },
         _meta: {
             ui: { resourceUri: MEDIA_WIDGET_URI },
@@ -102,14 +99,14 @@ ${analysisLines.join('\n')}`;
             'openai/toolInvocation/invoked': 'Image analysis complete.',
         },
     }, async ({ file_path, analysis_type }) => {
-        const buffer = (0, fs_1.readFileSync)(file_path);
+        const buffer = readFileSync(file_path);
         const filename = filenameFromPath(file_path);
         const result = await client.analyzeImage({
             file: buffer,
             filename,
             analysisType: analysis_type || 'all',
         });
-        const emoji = formatters_js_1.severityEmoji[result.overall_severity] || '\u2705';
+        const emoji = severityEmoji[result.overall_severity] || '\u2705';
         const textAnalysisLines = [];
         if (result.text_analysis?.bullying) {
             textAnalysisLines.push(`**Bullying:** ${result.text_analysis.bullying.is_bullying ? '\u26A0\uFE0F Detected' : '\u2705 Clear'} (${(result.text_analysis.bullying.risk_score * 100).toFixed(0)}%)`);
@@ -127,7 +124,7 @@ ${analysisLines.join('\n')}`;
 
 ### Vision Results
 **Description:** ${result.vision.visual_description}
-**Visual Severity:** ${formatters_js_1.severityEmoji[result.vision.visual_severity] || '\u2705'} ${result.vision.visual_severity}
+**Visual Severity:** ${severityEmoji[result.vision.visual_severity] || '\u2705'} ${result.vision.visual_severity}
 **Visual Confidence:** ${(result.vision.visual_confidence * 100).toFixed(0)}%
 **Contains Text:** ${result.vision.contains_text ? 'Yes' : 'No'}
 **Contains Faces:** ${result.vision.contains_faces ? 'Yes' : 'No'}
@@ -142,13 +139,13 @@ ${textAnalysisLines.length > 0 ? `### Text Analysis Results\n${textAnalysisLines
         };
     });
     // ── analyze_video ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_video', {
+    registerAppTool(server, 'analyze_video', {
         title: 'Analyze Video',
         description: 'Analyze a video file for safety concerns. Extracts key frames and runs safety classification. Supports mp4, mov, avi, webm, mkv.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            file_path: zod_1.z.string().describe('Absolute path to the video file on disk'),
-            age_group: zod_1.z.string().optional().describe('Age group for calibrated analysis (e.g., "child", "teen", "adult")'),
+            file_path: z.string().describe('Absolute path to the video file on disk'),
+            age_group: z.string().optional().describe('Age group for calibrated analysis (e.g., "child", "teen", "adult")'),
         },
         _meta: {
             ui: { resourceUri: MEDIA_WIDGET_URI },
@@ -157,7 +154,7 @@ ${textAnalysisLines.length > 0 ? `### Text Analysis Results\n${textAnalysisLines
             'openai/toolInvocation/invoked': 'Video analysis complete.',
         },
     }, async ({ file_path, age_group }) => {
-        const buffer = (0, fs_1.readFileSync)(file_path);
+        const buffer = readFileSync(file_path);
         const filename = filenameFromPath(file_path);
         const result = await client.analyzeVideo({
             file: buffer,
@@ -166,7 +163,7 @@ ${textAnalysisLines.length > 0 ? `### Text Analysis Results\n${textAnalysisLines
         });
         return {
             structuredContent: { toolName: 'analyze_video', result, branding: { appName: 'Tuteliq' } },
-            content: [{ type: 'text', text: (0, formatters_js_1.formatVideoResult)(result) }],
+            content: [{ type: 'text', text: formatVideoResult(result) }],
         };
     });
 }

package/dist/src/transport.d.ts

@@ -3,5 +3,10 @@ import type { Request, Response } from 'express';
 export type TransportMode = 'http' | 'stdio';
 export declare function getTransportMode(): TransportMode;
 export declare function startStdio(server: McpServer): Promise<void>;
-export declare function createHttpHandler(server: McpServer): (req: Request, res: Response) => Promise<void>;
+export declare function createHttpHandlers(createServer: () => McpServer): {
+    streamableHandler: (req: Request, res: Response) => Promise<void>;
+    sseHandler: (req: Request, res: Response) => Promise<void>;
+    messagesHandler: (req: Request, res: Response) => Promise<void>;
+    closeAll: () => Promise<void>;
+};
 //# sourceMappingURL=transport.d.ts.map

package/dist/src/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C,wBAAgB,gBAAgB,IAAI,aAAa,CAIhD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,IAGnC,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAqC1D"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAU7C,wBAAgB,gBAAgB,IAAI,aAAa,CAIhD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjE;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,SAAS;6BAmCxB,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC;sBA6E7C,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC;2BAajC,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC;oBAa/C,OAAO,CAAC,IAAI,CAAC;EAazC"}

package/dist/src/transport.js

@@ -1,53 +1,119 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTransportMode = getTransportMode;
-exports.startStdio = startStdio;
-exports.createHttpHandler = createHttpHandler;
-const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
-const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
-function getTransportMode() {
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';
+import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
+const SESSION_TTL_MS = 30 * 60 * 1000; // 30 minutes
+const CLEANUP_INTERVAL_MS = 5 * 60 * 1000; // check every 5 minutes
+export function getTransportMode() {
     const env = process.env.TUTELIQ_MCP_TRANSPORT?.toLowerCase();
     if (env === 'stdio')
         return 'stdio';
     return 'http';
 }
-async function startStdio(server) {
-    const transport = new stdio_js_1.StdioServerTransport();
+export async function startStdio(server) {
+    const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error('Tuteliq MCP server running on stdio');
 }
-function createHttpHandler(server) {
-    const transports = new Map();
-    return async (req, res) => {
+export function createHttpHandlers(createServer) {
+    const sessions = new Map();
+    function addSession(id, transport) {
+        sessions.set(id, { transport, lastActivity: Date.now() });
+    }
+    function removeSession(id) {
+        sessions.delete(id);
+    }
+    function getTransport(id) {
+        const entry = sessions.get(id);
+        if (entry) {
+            entry.lastActivity = Date.now();
+            return entry.transport;
+        }
+        return undefined;
+    }
+    // Periodic cleanup of stale sessions
+    const cleanupTimer = setInterval(async () => {
+        const now = Date.now();
+        for (const [id, entry] of sessions) {
+            if (now - entry.lastActivity > SESSION_TTL_MS) {
+                try {
+                    await entry.transport.close();
+                }
+                catch { /* already closed */ }
+                sessions.delete(id);
+            }
+        }
+    }, CLEANUP_INTERVAL_MS);
+    cleanupTimer.unref();
+    // Streamable HTTP handler — POST /mcp, GET /mcp, DELETE /mcp
+    const streamableHandler = async (req, res) => {
         const sessionId = req.headers['mcp-session-id'];
         if (req.method === 'POST') {
-            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
-                sessionIdGenerator: () => crypto.randomUUID(),
-                onsessioninitialized: (id) => {
-                    transports.set(id, transport);
-                },
+            if (sessionId) {
+                const existing = getTransport(sessionId);
+                if (existing) {
+                    if (existing instanceof StreamableHTTPServerTransport) {
+                        await existing.handleRequest(req, res, req.body);
+                        return;
+                    }
+                    res.status(400).json({
+                        jsonrpc: '2.0',
+                        error: { code: -32000, message: 'Session uses a different transport protocol' },
+                        id: null,
+                    });
+                    return;
+                }
+            }
+            if (!sessionId && isInitializeRequest(req.body)) {
+                const transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => crypto.randomUUID(),
+                    onsessioninitialized: (id) => {
+                        addSession(id, transport);
+                    },
+                });
+                transport.onclose = () => {
+                    const sid = transport.sessionId;
+                    if (sid)
+                        removeSession(sid);
+                };
+                const server = createServer();
+                await server.connect(transport);
+                await transport.handleRequest(req, res, req.body);
+                return;
+            }
+            res.status(400).json({
+                jsonrpc: '2.0',
+                error: { code: -32000, message: 'Bad Request: No valid session ID provided' },
+                id: null,
             });
-            transport.onclose = () => {
-                const id = [...transports.entries()].find(([, t]) => t === transport)?.[0];
-                if (id)
-                    transports.delete(id);
-            };
-            await server.connect(transport);
-            await transport.handleRequest(req, res, req.body);
         }
         else if (req.method === 'GET') {
-            if (!sessionId || !transports.has(sessionId)) {
+            if (!sessionId) {
                 res.status(400).json({ error: 'Invalid or missing session ID' });
                 return;
             }
-            const transport = transports.get(sessionId);
-            await transport.handleRequest(req, res);
+            const transport = getTransport(sessionId);
+            if (!transport) {
+                res.status(400).json({ error: 'Invalid or missing session ID' });
+                return;
+            }
+            if (transport instanceof StreamableHTTPServerTransport) {
+                await transport.handleRequest(req, res);
+            }
+            else {
+                res.status(400).json({ error: 'Session uses a different transport protocol' });
+            }
         }
         else if (req.method === 'DELETE') {
-            if (sessionId && transports.has(sessionId)) {
-                const transport = transports.get(sessionId);
-                await transport.handleRequest(req, res);
-                transports.delete(sessionId);
+            if (sessionId) {
+                const transport = getTransport(sessionId);
+                if (transport && transport instanceof StreamableHTTPServerTransport) {
+                    await transport.handleRequest(req, res);
+                    removeSession(sessionId);
+                }
+                else {
+                    res.status(400).json({ error: 'Invalid or missing session ID' });
+                }
             }
             else {
                 res.status(400).json({ error: 'Invalid or missing session ID' });
@@ -57,4 +123,38 @@ function createHttpHandler(server) {
             res.status(405).json({ error: 'Method not allowed' });
         }
     };
+    // Legacy SSE handler — GET /sse
+    const sseHandler = async (req, res) => {
+        const transport = new SSEServerTransport('/messages', res);
+        addSession(transport.sessionId, transport);
+        res.on('close', () => {
+            removeSession(transport.sessionId);
+        });
+        const server = createServer();
+        await server.connect(transport);
+    };
+    // Legacy message handler — POST /messages?sessionId=...
+    const messagesHandler = async (req, res) => {
+        const sessionId = req.query.sessionId;
+        const transport = getTransport(sessionId);
+        if (!transport || !(transport instanceof SSEServerTransport)) {
+            res.status(400).json({ error: 'Invalid or missing session ID' });
+            return;
+        }
+        await transport.handlePostMessage(req, res, req.body);
+    };
+    // Graceful shutdown
+    const closeAll = async () => {
+        clearInterval(cleanupTimer);
+        for (const [id, entry] of sessions) {
+            try {
+                await entry.transport.close();
+                sessions.delete(id);
+            }
+            catch (error) {
+                console.error(`Error closing transport ${id}:`, error);
+            }
+        }
+    };
+    return { streamableHandler, sseHandler, messagesHandler, closeAll };
 }

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@tuteliq/mcp",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "description": "MCP App server for Tuteliq - AI-powered child safety analysis with interactive UI widgets for Claude, ChatGPT, and other MCP hosts",
+  "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {