@tuteliq/mcp 3.2.0 → 3.2.2

package/dist/src/tools/detection.js

@@ -1,20 +1,17 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerDetectionTools = registerDetectionTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const fs_1 = require("fs");
-const path_1 = require("path");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool, registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+import { severityEmoji, riskEmoji } from '../formatters.js';
 const DETECTION_WIDGET_URI = 'ui://tuteliq/detection-result.html';
 function loadWidget(name) {
-    return (0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../dist-ui', name), 'utf-8');
+    return readFileSync(resolve(__dirname, '../../dist-ui', name), 'utf-8');
 }
-const contextSchema = zod_1.z.object({
-    language: zod_1.z.string().optional(),
-    ageGroup: zod_1.z.string().optional(),
-    relationship: zod_1.z.string().optional(),
-    platform: zod_1.z.string().optional(),
+const contextSchema = z.object({
+    language: z.string().optional(),
+    ageGroup: z.string().optional(),
+    relationship: z.string().optional(),
+    platform: z.string().optional(),
 }).optional();
 const uiMeta = (desc, invoking, invoked) => ({
     ui: { resourceUri: DETECTION_WIDGET_URI },
@@ -22,22 +19,22 @@ const uiMeta = (desc, invoking, invoked) => ({
     'openai/toolInvocation/invoking': invoking,
     'openai/toolInvocation/invoked': invoked,
 });
-function registerDetectionTools(server, client) {
+export function registerDetectionTools(server, client) {
     // Cast needed due to CJS/ESM dual-module type mismatch between MCP SDK and ext-apps
-    (0, server_1.registerAppResource)(server, DETECTION_WIDGET_URI, DETECTION_WIDGET_URI, { mimeType: server_1.RESOURCE_MIME_TYPE }, async () => ({
+    registerAppResource(server, DETECTION_WIDGET_URI, DETECTION_WIDGET_URI, { mimeType: RESOURCE_MIME_TYPE }, async () => ({
         contents: [{
                 uri: DETECTION_WIDGET_URI,
-                mimeType: server_1.RESOURCE_MIME_TYPE,
+                mimeType: RESOURCE_MIME_TYPE,
                 text: loadWidget('detection-result.html'),
             }],
     }));
     // ── detect_bullying ────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'detect_bullying', {
+    registerAppTool(server, 'detect_bullying', {
         title: 'Detect Bullying',
         description: 'Analyze text content to detect bullying, harassment, or harmful language.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze for bullying'),
+            content: z.string().describe('The text content to analyze for bullying'),
             context: contextSchema,
         },
         _meta: uiMeta('Shows bullying detection results with risk indicators', 'Analyzing content for bullying...', 'Bullying analysis complete.'),
@@ -46,7 +43,7 @@ function registerDetectionTools(server, client) {
             content,
             context: context,
         });
-        const emoji = formatters_js_1.severityEmoji[result.severity] || '\u26AA';
+        const emoji = severityEmoji[result.severity] || '\u26AA';
         const text = `## ${result.is_bullying ? '\u26A0\uFE0F Bullying Detected' : '\u2705 No Bullying Detected'}
 
 **Severity:** ${emoji} ${result.severity.charAt(0).toUpperCase() + result.severity.slice(1)}
@@ -66,16 +63,16 @@ ${result.rationale}
         };
     });
     // ── detect_grooming ────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'detect_grooming', {
+    registerAppTool(server, 'detect_grooming', {
         title: 'Detect Grooming',
         description: 'Analyze a conversation for grooming patterns and predatory behavior.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            messages: zod_1.z.array(zod_1.z.object({
-                role: zod_1.z.enum(['adult', 'child', 'unknown']),
-                content: zod_1.z.string(),
+            messages: z.array(z.object({
+                role: z.enum(['adult', 'child', 'unknown']),
+                content: z.string(),
             })).describe('Array of messages in the conversation'),
-            childAge: zod_1.z.number().optional().describe('Age of the child in the conversation'),
+            childAge: z.number().optional().describe('Age of the child in the conversation'),
         },
         _meta: uiMeta('Shows grooming detection results with risk indicators', 'Analyzing conversation for grooming patterns...', 'Grooming analysis complete.'),
     }, async ({ messages, childAge }) => {
@@ -83,7 +80,7 @@ ${result.rationale}
             messages,
             childAge,
         });
-        const emoji = formatters_js_1.riskEmoji[result.grooming_risk] || '\u26AA';
+        const emoji = riskEmoji[result.grooming_risk] || '\u26AA';
         const text = `## ${result.grooming_risk === 'none' ? '\u2705 No Grooming Detected' : '\u26A0\uFE0F Grooming Risk Detected'}
 
 **Risk Level:** ${emoji} ${result.grooming_risk.charAt(0).toUpperCase() + result.grooming_risk.slice(1)}
@@ -103,12 +100,12 @@ ${result.rationale}
         };
     });
     // ── detect_unsafe ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'detect_unsafe', {
+    registerAppTool(server, 'detect_unsafe', {
         title: 'Detect Unsafe Content',
         description: 'Detect unsafe content including self-harm, violence, drugs, explicit material.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze for unsafe content'),
+            content: z.string().describe('The text content to analyze for unsafe content'),
             context: contextSchema,
         },
         _meta: uiMeta('Shows unsafe content detection results', 'Analyzing content for safety concerns...', 'Safety analysis complete.'),
@@ -117,7 +114,7 @@ ${result.rationale}
             content,
             context: context,
         });
-        const emoji = formatters_js_1.severityEmoji[result.severity] || '\u26AA';
+        const emoji = severityEmoji[result.severity] || '\u26AA';
         const text = `## ${result.unsafe ? '\u26A0\uFE0F Unsafe Content Detected' : '\u2705 Content is Safe'}
 
 **Severity:** ${emoji} ${result.severity.charAt(0).toUpperCase() + result.severity.slice(1)}
@@ -137,18 +134,18 @@ ${result.rationale}
         };
     });
     // ── analyze (quick combined) ───────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze', {
+    registerAppTool(server, 'analyze', {
         title: 'Quick Safety Analysis',
         description: 'Quick comprehensive safety analysis that checks for both bullying and unsafe content.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            content: zod_1.z.string().describe('The text content to analyze'),
-            include: zod_1.z.array(zod_1.z.enum(['bullying', 'unsafe'])).optional().describe('Which checks to run (default: both)'),
+            content: z.string().describe('The text content to analyze'),
+            include: z.array(z.enum(['bullying', 'unsafe'])).optional().describe('Which checks to run (default: both)'),
         },
         _meta: uiMeta('Shows combined safety analysis results', 'Running safety analysis...', 'Safety analysis complete.'),
     }, async ({ content, include }) => {
         const result = await client.analyze({ content, include });
-        const emoji = formatters_js_1.riskEmoji[result.risk_level] || '\u26AA';
+        const emoji = riskEmoji[result.risk_level] || '\u26AA';
         const text = `## Safety Analysis Results
 
 **Overall Risk:** ${emoji} ${result.risk_level.charAt(0).toUpperCase() + result.risk_level.slice(1)}

package/dist/src/tools/fraud.js

@@ -1,9 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerFraudTools = registerFraudTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool } from '@modelcontextprotocol/ext-apps/server';
+import { formatDetectionResult } from '../formatters.js';
 const DETECTION_WIDGET_URI = 'ui://tuteliq/detection-result.html';
 const FRAUD_TOOLS = [
     {
@@ -72,15 +69,15 @@ const FRAUD_TOOLS = [
     },
 ];
 const fraudInputSchema = {
-    content: zod_1.z.string().describe('Text content to analyze'),
-    context: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional().describe('Optional analysis context'),
-    include_evidence: zod_1.z.boolean().optional().describe('Include supporting evidence excerpts'),
-    external_id: zod_1.z.string().optional().describe('External tracking ID'),
-    customer_id: zod_1.z.string().optional().describe('Customer identifier'),
+    content: z.string().describe('Text content to analyze'),
+    context: z.record(z.string(), z.unknown()).optional().describe('Optional analysis context'),
+    include_evidence: z.boolean().optional().describe('Include supporting evidence excerpts'),
+    external_id: z.string().optional().describe('External tracking ID'),
+    customer_id: z.string().optional().describe('Customer identifier'),
 };
-function registerFraudTools(server, client) {
+export function registerFraudTools(server, client) {
     for (const tool of FRAUD_TOOLS) {
-        (0, server_1.registerAppTool)(server, tool.name, {
+        registerAppTool(server, tool.name, {
             title: tool.title,
             description: tool.description,
             annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
@@ -102,7 +99,7 @@ function registerFraudTools(server, client) {
             });
             return {
                 structuredContent: { toolName: tool.name, result, branding: { appName: 'Tuteliq' } },
-                content: [{ type: 'text', text: (0, formatters_js_1.formatDetectionResult)(result) }],
+                content: [{ type: 'text', text: formatDetectionResult(result) }],
             };
         });
     }

package/dist/src/tools/media.js

@@ -1,36 +1,33 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerMediaTools = registerMediaTools;
-const zod_1 = require("zod");
-const server_1 = require("@modelcontextprotocol/ext-apps/server");
-const fs_1 = require("fs");
-const path_1 = require("path");
-const formatters_js_1 = require("../formatters.js");
+import { z } from 'zod';
+import { registerAppTool, registerAppResource, RESOURCE_MIME_TYPE } from '@modelcontextprotocol/ext-apps/server';
+import { readFileSync } from 'fs';
+import { resolve } from 'path';
+import { severityEmoji, trendEmoji, formatVideoResult } from '../formatters.js';
 const MEDIA_WIDGET_URI = 'ui://tuteliq/media-result.html';
 function loadWidget(name) {
-    return (0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../dist-ui', name), 'utf-8');
+    return readFileSync(resolve(__dirname, '../../dist-ui', name), 'utf-8');
 }
 function filenameFromPath(filePath) {
     return filePath.split('/').pop() || filePath;
 }
-function registerMediaTools(server, client) {
-    (0, server_1.registerAppResource)(server, MEDIA_WIDGET_URI, MEDIA_WIDGET_URI, { mimeType: server_1.RESOURCE_MIME_TYPE }, async () => ({
+export function registerMediaTools(server, client) {
+    registerAppResource(server, MEDIA_WIDGET_URI, MEDIA_WIDGET_URI, { mimeType: RESOURCE_MIME_TYPE }, async () => ({
         contents: [{
                 uri: MEDIA_WIDGET_URI,
-                mimeType: server_1.RESOURCE_MIME_TYPE,
+                mimeType: RESOURCE_MIME_TYPE,
                 text: loadWidget('media-result.html'),
             }],
     }));
     // ── analyze_voice ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_voice', {
+    registerAppTool(server, 'analyze_voice', {
         title: 'Analyze Voice',
         description: 'Analyze an audio file for safety concerns. Transcribes the audio via Whisper, then runs safety analysis on the transcript. Supports mp3, wav, m4a, ogg, flac, webm, mp4.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            file_path: zod_1.z.string().describe('Absolute path to the audio file on disk'),
-            analysis_type: zod_1.z.enum(['bullying', 'unsafe', 'grooming', 'emotions', 'all']).optional().describe('Type of analysis to run on the transcript (default: all)'),
-            child_age: zod_1.z.number().optional().describe('Child age (used for grooming analysis)'),
-            language: zod_1.z.string().optional().describe('Language hint for transcription (e.g., "en", "es")'),
+            file_path: z.string().describe('Absolute path to the audio file on disk'),
+            analysis_type: z.enum(['bullying', 'unsafe', 'grooming', 'emotions', 'all']).optional().describe('Type of analysis to run on the transcript (default: all)'),
+            child_age: z.number().optional().describe('Child age (used for grooming analysis)'),
+            language: z.string().optional().describe('Language hint for transcription (e.g., "en", "es")'),
         },
         _meta: {
             ui: { resourceUri: MEDIA_WIDGET_URI },
@@ -39,7 +36,7 @@ function registerMediaTools(server, client) {
             'openai/toolInvocation/invoked': 'Voice analysis complete.',
         },
     }, async ({ file_path, analysis_type, child_age, language }) => {
-        const buffer = (0, fs_1.readFileSync)(file_path);
+        const buffer = readFileSync(file_path);
         const filename = filenameFromPath(file_path);
         const result = await client.analyzeVoice({
             file: buffer,
@@ -48,7 +45,7 @@ function registerMediaTools(server, client) {
             language,
             childAge: child_age,
         });
-        const emoji = formatters_js_1.severityEmoji[result.overall_severity] || '\u2705';
+        const emoji = severityEmoji[result.overall_severity] || '\u2705';
         const segmentLines = result.transcription.segments
             .slice(0, 20)
             .map(s => `\`${s.start.toFixed(1)}s\u2013${s.end.toFixed(1)}s\` ${s.text}`)
@@ -64,7 +61,7 @@ function registerMediaTools(server, client) {
             analysisLines.push(`**Grooming:** ${result.analysis.grooming.grooming_risk !== 'none' ? '\u26A0\uFE0F ' + result.analysis.grooming.grooming_risk : '\u2705 Clear'} (${(result.analysis.grooming.risk_score * 100).toFixed(0)}%)`);
         }
         if (result.analysis.emotions) {
-            analysisLines.push(`**Emotions:** ${result.analysis.emotions.dominant_emotions.join(', ')} (${formatters_js_1.trendEmoji[result.analysis.emotions.trend] || ''} ${result.analysis.emotions.trend})`);
+            analysisLines.push(`**Emotions:** ${result.analysis.emotions.dominant_emotions.join(', ')} (${trendEmoji[result.analysis.emotions.trend] || ''} ${result.analysis.emotions.trend})`);
         }
         const text = `## \u{1F399}\uFE0F Voice Analysis
 
@@ -87,13 +84,13 @@ ${analysisLines.join('\n')}`;
         };
     });
     // ── analyze_image ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_image', {
+    registerAppTool(server, 'analyze_image', {
         title: 'Analyze Image',
         description: 'Analyze an image for visual safety concerns and OCR text extraction. Supports png, jpg, jpeg, gif, webp.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            file_path: zod_1.z.string().describe('Absolute path to the image file on disk'),
-            analysis_type: zod_1.z.enum(['bullying', 'unsafe', 'emotions', 'all']).optional().describe('Type of analysis to run on extracted text (default: all)'),
+            file_path: z.string().describe('Absolute path to the image file on disk'),
+            analysis_type: z.enum(['bullying', 'unsafe', 'emotions', 'all']).optional().describe('Type of analysis to run on extracted text (default: all)'),
         },
         _meta: {
             ui: { resourceUri: MEDIA_WIDGET_URI },
@@ -102,14 +99,14 @@ ${analysisLines.join('\n')}`;
             'openai/toolInvocation/invoked': 'Image analysis complete.',
         },
     }, async ({ file_path, analysis_type }) => {
-        const buffer = (0, fs_1.readFileSync)(file_path);
+        const buffer = readFileSync(file_path);
         const filename = filenameFromPath(file_path);
         const result = await client.analyzeImage({
             file: buffer,
             filename,
             analysisType: analysis_type || 'all',
         });
-        const emoji = formatters_js_1.severityEmoji[result.overall_severity] || '\u2705';
+        const emoji = severityEmoji[result.overall_severity] || '\u2705';
         const textAnalysisLines = [];
         if (result.text_analysis?.bullying) {
             textAnalysisLines.push(`**Bullying:** ${result.text_analysis.bullying.is_bullying ? '\u26A0\uFE0F Detected' : '\u2705 Clear'} (${(result.text_analysis.bullying.risk_score * 100).toFixed(0)}%)`);
@@ -127,7 +124,7 @@ ${analysisLines.join('\n')}`;
 
 ### Vision Results
 **Description:** ${result.vision.visual_description}
-**Visual Severity:** ${formatters_js_1.severityEmoji[result.vision.visual_severity] || '\u2705'} ${result.vision.visual_severity}
+**Visual Severity:** ${severityEmoji[result.vision.visual_severity] || '\u2705'} ${result.vision.visual_severity}
 **Visual Confidence:** ${(result.vision.visual_confidence * 100).toFixed(0)}%
 **Contains Text:** ${result.vision.contains_text ? 'Yes' : 'No'}
 **Contains Faces:** ${result.vision.contains_faces ? 'Yes' : 'No'}
@@ -142,13 +139,13 @@ ${textAnalysisLines.length > 0 ? `### Text Analysis Results\n${textAnalysisLines
         };
     });
     // ── analyze_video ──────────────────────────────────────────────────────────
-    (0, server_1.registerAppTool)(server, 'analyze_video', {
+    registerAppTool(server, 'analyze_video', {
         title: 'Analyze Video',
         description: 'Analyze a video file for safety concerns. Extracts key frames and runs safety classification. Supports mp4, mov, avi, webm, mkv.',
         annotations: { readOnlyHint: true, openWorldHint: true, destructiveHint: false },
         inputSchema: {
-            file_path: zod_1.z.string().describe('Absolute path to the video file on disk'),
-            age_group: zod_1.z.string().optional().describe('Age group for calibrated analysis (e.g., "child", "teen", "adult")'),
+            file_path: z.string().describe('Absolute path to the video file on disk'),
+            age_group: z.string().optional().describe('Age group for calibrated analysis (e.g., "child", "teen", "adult")'),
         },
         _meta: {
             ui: { resourceUri: MEDIA_WIDGET_URI },
@@ -157,7 +154,7 @@ ${textAnalysisLines.length > 0 ? `### Text Analysis Results\n${textAnalysisLines
             'openai/toolInvocation/invoked': 'Video analysis complete.',
         },
     }, async ({ file_path, age_group }) => {
-        const buffer = (0, fs_1.readFileSync)(file_path);
+        const buffer = readFileSync(file_path);
         const filename = filenameFromPath(file_path);
         const result = await client.analyzeVideo({
             file: buffer,
@@ -166,7 +163,7 @@ ${textAnalysisLines.length > 0 ? `### Text Analysis Results\n${textAnalysisLines
         });
         return {
             structuredContent: { toolName: 'analyze_video', result, branding: { appName: 'Tuteliq' } },
-            content: [{ type: 'text', text: (0, formatters_js_1.formatVideoResult)(result) }],
+            content: [{ type: 'text', text: formatVideoResult(result) }],
         };
     });
 }

package/dist/src/transport.d.ts

@@ -3,5 +3,10 @@ import type { Request, Response } from 'express';
 export type TransportMode = 'http' | 'stdio';
 export declare function getTransportMode(): TransportMode;
 export declare function startStdio(server: McpServer): Promise<void>;
-export declare function createHttpHandler(server: McpServer): (req: Request, res: Response) => Promise<void>;
+export declare function createHttpHandlers(createServer: () => McpServer): {
+    streamableHandler: (req: Request, res: Response) => Promise<void>;
+    sseHandler: (req: Request, res: Response) => Promise<void>;
+    messagesHandler: (req: Request, res: Response) => Promise<void>;
+    closeAll: () => Promise<void>;
+};
 //# sourceMappingURL=transport.d.ts.map

package/dist/src/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C,wBAAgB,gBAAgB,IAAI,aAAa,CAIhD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,IAGnC,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC,CAqC1D"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAU7C,wBAAgB,gBAAgB,IAAI,aAAa,CAIhD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjE;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,SAAS;6BAmCxB,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC;sBA6E7C,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC;2BAajC,OAAO,OAAO,QAAQ,KAAG,OAAO,CAAC,IAAI,CAAC;oBAa/C,OAAO,CAAC,IAAI,CAAC;EAazC"}

package/dist/src/transport.js

@@ -1,53 +1,119 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getTransportMode = getTransportMode;
-exports.startStdio = startStdio;
-exports.createHttpHandler = createHttpHandler;
-const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
-const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
-function getTransportMode() {
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';
+import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
+const SESSION_TTL_MS = 30 * 60 * 1000; // 30 minutes
+const CLEANUP_INTERVAL_MS = 5 * 60 * 1000; // check every 5 minutes
+export function getTransportMode() {
     const env = process.env.TUTELIQ_MCP_TRANSPORT?.toLowerCase();
     if (env === 'stdio')
         return 'stdio';
     return 'http';
 }
-async function startStdio(server) {
-    const transport = new stdio_js_1.StdioServerTransport();
+export async function startStdio(server) {
+    const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error('Tuteliq MCP server running on stdio');
 }
-function createHttpHandler(server) {
-    const transports = new Map();
-    return async (req, res) => {
+export function createHttpHandlers(createServer) {
+    const sessions = new Map();
+    function addSession(id, transport) {
+        sessions.set(id, { transport, lastActivity: Date.now() });
+    }
+    function removeSession(id) {
+        sessions.delete(id);
+    }
+    function getTransport(id) {
+        const entry = sessions.get(id);
+        if (entry) {
+            entry.lastActivity = Date.now();
+            return entry.transport;
+        }
+        return undefined;
+    }
+    // Periodic cleanup of stale sessions
+    const cleanupTimer = setInterval(async () => {
+        const now = Date.now();
+        for (const [id, entry] of sessions) {
+            if (now - entry.lastActivity > SESSION_TTL_MS) {
+                try {
+                    await entry.transport.close();
+                }
+                catch { /* already closed */ }
+                sessions.delete(id);
+            }
+        }
+    }, CLEANUP_INTERVAL_MS);
+    cleanupTimer.unref();
+    // Streamable HTTP handler — POST /mcp, GET /mcp, DELETE /mcp
+    const streamableHandler = async (req, res) => {
         const sessionId = req.headers['mcp-session-id'];
         if (req.method === 'POST') {
-            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
-                sessionIdGenerator: () => crypto.randomUUID(),
-                onsessioninitialized: (id) => {
-                    transports.set(id, transport);
-                },
+            if (sessionId) {
+                const existing = getTransport(sessionId);
+                if (existing) {
+                    if (existing instanceof StreamableHTTPServerTransport) {
+                        await existing.handleRequest(req, res, req.body);
+                        return;
+                    }
+                    res.status(400).json({
+                        jsonrpc: '2.0',
+                        error: { code: -32000, message: 'Session uses a different transport protocol' },
+                        id: null,
+                    });
+                    return;
+                }
+            }
+            if (!sessionId && isInitializeRequest(req.body)) {
+                const transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => crypto.randomUUID(),
+                    onsessioninitialized: (id) => {
+                        addSession(id, transport);
+                    },
+                });
+                transport.onclose = () => {
+                    const sid = transport.sessionId;
+                    if (sid)
+                        removeSession(sid);
+                };
+                const server = createServer();
+                await server.connect(transport);
+                await transport.handleRequest(req, res, req.body);
+                return;
+            }
+            res.status(400).json({
+                jsonrpc: '2.0',
+                error: { code: -32000, message: 'Bad Request: No valid session ID provided' },
+                id: null,
             });
-            transport.onclose = () => {
-                const id = [...transports.entries()].find(([, t]) => t === transport)?.[0];
-                if (id)
-                    transports.delete(id);
-            };
-            await server.connect(transport);
-            await transport.handleRequest(req, res, req.body);
         }
         else if (req.method === 'GET') {
-            if (!sessionId || !transports.has(sessionId)) {
+            if (!sessionId) {
                 res.status(400).json({ error: 'Invalid or missing session ID' });
                 return;
             }
-            const transport = transports.get(sessionId);
-            await transport.handleRequest(req, res);
+            const transport = getTransport(sessionId);
+            if (!transport) {
+                res.status(400).json({ error: 'Invalid or missing session ID' });
+                return;
+            }
+            if (transport instanceof StreamableHTTPServerTransport) {
+                await transport.handleRequest(req, res);
+            }
+            else {
+                res.status(400).json({ error: 'Session uses a different transport protocol' });
+            }
         }
         else if (req.method === 'DELETE') {
-            if (sessionId && transports.has(sessionId)) {
-                const transport = transports.get(sessionId);
-                await transport.handleRequest(req, res);
-                transports.delete(sessionId);
+            if (sessionId) {
+                const transport = getTransport(sessionId);
+                if (transport && transport instanceof StreamableHTTPServerTransport) {
+                    await transport.handleRequest(req, res);
+                    removeSession(sessionId);
+                }
+                else {
+                    res.status(400).json({ error: 'Invalid or missing session ID' });
+                }
             }
             else {
                 res.status(400).json({ error: 'Invalid or missing session ID' });
@@ -57,4 +123,38 @@ function createHttpHandler(server) {
             res.status(405).json({ error: 'Method not allowed' });
         }
     };
+    // Legacy SSE handler — GET /sse
+    const sseHandler = async (req, res) => {
+        const transport = new SSEServerTransport('/messages', res);
+        addSession(transport.sessionId, transport);
+        res.on('close', () => {
+            removeSession(transport.sessionId);
+        });
+        const server = createServer();
+        await server.connect(transport);
+    };
+    // Legacy message handler — POST /messages?sessionId=...
+    const messagesHandler = async (req, res) => {
+        const sessionId = req.query.sessionId;
+        const transport = getTransport(sessionId);
+        if (!transport || !(transport instanceof SSEServerTransport)) {
+            res.status(400).json({ error: 'Invalid or missing session ID' });
+            return;
+        }
+        await transport.handlePostMessage(req, res, req.body);
+    };
+    // Graceful shutdown
+    const closeAll = async () => {
+        clearInterval(cleanupTimer);
+        for (const [id, entry] of sessions) {
+            try {
+                await entry.transport.close();
+                sessions.delete(id);
+            }
+            catch (error) {
+                console.error(`Error closing transport ${id}:`, error);
+            }
+        }
+    };
+    return { streamableHandler, sseHandler, messagesHandler, closeAll };
 }

package/package.json

@@ -1,25 +1,33 @@
 {
   "name": "@tuteliq/mcp",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "description": "MCP App server for Tuteliq - AI-powered child safety analysis with interactive UI widgets for Claude, ChatGPT, and other MCP hosts",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "type": "module",
+  "main": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/src/index.js",
+      "types": "./dist/src/index.d.ts"
+    }
+  },
   "bin": {
-    "tuteliq-mcp": "./dist/index.js"
+    "tuteliq-mcp": "./dist/src/index.js"
   },
   "files": [
     "dist",
     "dist-ui"
   ],
   "scripts": {
+    "clean": "rm -rf dist",
     "build:server": "tsc",
     "build:ui": "rm -rf dist-ui && WIDGET=detection-result vite build && WIDGET=multi-result vite build && WIDGET=emotions-result vite build && WIDGET=media-result vite build && WIDGET=action-plan vite build && WIDGET=report-result vite build",
     "build": "npm run build:ui && npm run build:server",
     "dev:server": "tsx watch server.ts",
     "dev:ui": "vite build --watch",
     "start": "node dist/server.js",
-    "start:stdio": "TUTELIQ_MCP_TRANSPORT=stdio node dist/index.js",
-    "prepublishOnly": "npm run build"
+    "start:stdio": "TUTELIQ_MCP_TRANSPORT=stdio node dist/src/index.js",
+    "prepublishOnly": "npm run clean && npm run build"
   },
   "keywords": [
     "tuteliq",

package/dist/index.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}