@unraid-toolkit/mcp 0.2.0

package/dist/tools/shares.js

@@ -0,0 +1,17 @@
+/**
+ * User-share tools. Thin adapter over the SDK share operations.
+ */
+import { listShares } from '@unraid-toolkit/sdk';
+import { formatResult } from '../format.js';
+import { READ_ONLY_ANNOTATIONS } from './annotations.js';
+import { PAGINATION_INPUT } from './pagination.js';
+/** Register user-share tools on the given server. */
+export function registerShareTools(server, ctx) {
+    server.registerTool('unraid_list_shares', {
+        title: 'List Unraid User Shares',
+        description: `List Unraid user shares with capacity (free/used/total, in KB), included/excluded disks, cache setting, allocation policy, and comment. Use limit/offset to page.`,
+        inputSchema: { ...PAGINATION_INPUT },
+        annotations: READ_ONLY_ANNOTATIONS,
+    }, async ({ limit, offset }) => formatResult(await listShares(ctx.client, { limit, offset })));
+}
+//# sourceMappingURL=shares.js.map

package/dist/tools/shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shares.js","sourceRoot":"","sources":["../../src/tools/shares.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,qDAAqD;AACrD,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,GAAkB;IACtE,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,mKAAmK;QAChL,WAAW,EAAE,EAAE,GAAG,gBAAgB,EAAE;QACpC,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC"}

package/dist/tools/system.d.ts

@@ -0,0 +1,9 @@
+/**
+ * System / connection tools. Each handler is a thin adapter: call the SDK
+ * operation, then convert its envelope with {@link formatResult}.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ServerContext } from '../server.js';
+/** Register system/connection tools on the given server. */
+export declare function registerSystemTools(server: McpServer, ctx: ServerContext): void;
+//# sourceMappingURL=system.d.ts.map

package/dist/tools/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../src/tools/system.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAyC/E"}

package/dist/tools/system.js

@@ -0,0 +1,37 @@
+/**
+ * System / connection tools. Each handler is a thin adapter: call the SDK
+ * operation, then convert its envelope with {@link formatResult}.
+ */
+import { getHealth, getSystemInfo, getSystemMetrics } from '@unraid-toolkit/sdk';
+import { formatResult } from '../format.js';
+import { READ_ONLY_ANNOTATIONS } from './annotations.js';
+/** Register system/connection tools on the given server. */
+export function registerSystemTools(server, ctx) {
+    server.registerTool('unraid_connection_health', {
+        title: 'Check Unraid API Connection',
+        description: `Verify that the Unraid GraphQL API is reachable and the configured API key is accepted.
+
+Performs a lightweight probe — it does not read array, Docker, or system data. Use it first to confirm connectivity and authentication, or to diagnose why other tools are failing.
+
+Returns a JSON envelope: on success, the reachable endpoint; on failure, a structured error (auth, network, ...).`,
+        inputSchema: {},
+        annotations: READ_ONLY_ANNOTATIONS,
+    }, async () => formatResult(await getHealth(ctx.client)));
+    server.registerTool('unraid_system_info', {
+        title: 'Get Unraid System Info',
+        description: `Get static system information for the server: OS (distro, release, kernel, hostname, uptime), CPU (model, cores, threads), physical memory layout, motherboard, and software versions (Unraid, API, Docker, etc.).
+
+This is identity/inventory data, not live load. For current CPU/memory utilization use unraid_system_metrics.`,
+        inputSchema: {},
+        annotations: READ_ONLY_ANNOTATIONS,
+    }, async () => formatResult(await getSystemInfo(ctx.client)));
+    server.registerTool('unraid_system_metrics', {
+        title: 'Get Unraid System Metrics',
+        description: `Get live system utilization: overall and per-core CPU load (percent), and memory usage (total/used/free/available and swap, in bytes plus percentages).
+
+This is a point-in-time snapshot. For static hardware/OS details use unraid_system_info.`,
+        inputSchema: {},
+        annotations: READ_ONLY_ANNOTATIONS,
+    }, async () => formatResult(await getSystemMetrics(ctx.client)));
+}
+//# sourceMappingURL=system.js.map

package/dist/tools/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/tools/system.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGzD,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAkB;IACvE,MAAM,CAAC,YAAY,CACjB,0BAA0B,EAC1B;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE;;;;kHAI+F;QAC5G,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CACtD,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE;;8GAE2F;QACxG,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAC1D,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE;;yFAEsE;QACnF,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC"}

package/dist/tools/ups.d.ts

@@ -0,0 +1,8 @@
+/**
+ * UPS tools. Thin adapter over the SDK UPS operations.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ServerContext } from '../server.js';
+/** Register UPS tools on the given server. */
+export declare function registerUpsTools(server: McpServer, ctx: ServerContext): void;
+//# sourceMappingURL=ups.d.ts.map

package/dist/tools/ups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ups.d.ts","sourceRoot":"","sources":["../../src/tools/ups.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,8CAA8C;AAC9C,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAW5E"}

package/dist/tools/ups.js

@@ -0,0 +1,17 @@
+/**
+ * UPS tools. Thin adapter over the SDK UPS operations.
+ */
+import { getUpsStatus } from '@unraid-toolkit/sdk';
+import { formatResult } from '../format.js';
+import { READ_ONLY_ANNOTATIONS } from './annotations.js';
+import { PAGINATION_INPUT } from './pagination.js';
+/** Register UPS tools on the given server. */
+export function registerUpsTools(server, ctx) {
+    server.registerTool('unraid_ups_status', {
+        title: 'Get Unraid UPS Status',
+        description: `List connected UPS devices with battery telemetry (charge %, estimated runtime, health) and power telemetry (input/output voltage, load %, current/nominal watts). Use limit/offset if multiple UPS units are attached.`,
+        inputSchema: { ...PAGINATION_INPUT },
+        annotations: READ_ONLY_ANNOTATIONS,
+    }, async ({ limit, offset }) => formatResult(await getUpsStatus(ctx.client, { limit, offset })));
+}
+//# sourceMappingURL=ups.js.map

package/dist/tools/ups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ups.js","sourceRoot":"","sources":["../../src/tools/ups.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,8CAA8C;AAC9C,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,GAAkB;IACpE,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,yNAAyN;QACtO,WAAW,EAAE,EAAE,GAAG,gBAAgB,EAAE;QACpC,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC"}

package/dist/tools/vm.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Virtual machine tools. Thin adapters over the SDK VM operations — a read-only
+ * list plus the Phase 2 safe lifecycle controls (start/stop/pause/resume), each
+ * gated by the read-only policy floor.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ServerContext } from '../server.js';
+/** Register VM tools on the given server. */
+export declare function registerVmTools(server: McpServer, ctx: ServerContext): void;
+//# sourceMappingURL=vm.d.ts.map

package/dist/tools/vm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm.d.ts","sourceRoot":"","sources":["../../src/tools/vm.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAwBzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAwBlD,6CAA6C;AAC7C,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CA6C3E"}

package/dist/tools/vm.js

@@ -0,0 +1,64 @@
+/**
+ * Virtual machine tools. Thin adapters over the SDK VM operations — a read-only
+ * list plus the Phase 2 safe lifecycle controls (start/stop/pause/resume), each
+ * gated by the read-only policy floor.
+ */
+import { z } from 'zod';
+import { listVms, startVm, stopVm, pauseVm, resumeVm, forceStopVm, rebootVm, resetVm, } from '@unraid-toolkit/sdk';
+import { formatResult } from '../format.js';
+import { READ_ONLY_ANNOTATIONS, SAFE_WRITE_ANNOTATIONS, DESTRUCTIVE_ANNOTATIONS, } from './annotations.js';
+import { PAGINATION_INPUT } from './pagination.js';
+import { CONFIRM_TOKEN_INPUT } from './confirm.js';
+import { readOnlyBlock } from './policy.js';
+import { runDestructive } from './destructive.js';
+/** The Phase 2 VM lifecycle actions, each a `(client, id)` SDK operation. */
+const VM_ACTIONS = [
+    { tool: 'unraid_vm_start', title: 'Start Unraid VM', verb: 'Start', op: startVm },
+    { tool: 'unraid_vm_stop', title: 'Stop Unraid VM', verb: 'Gracefully stop', op: stopVm },
+    { tool: 'unraid_vm_pause', title: 'Pause Unraid VM', verb: 'Pause', op: pauseVm },
+    { tool: 'unraid_vm_resume', title: 'Resume Unraid VM', verb: 'Resume', op: resumeVm },
+];
+/** The Phase 3 destructive VM actions (ungraceful — risk guest data loss). */
+const VM_DESTRUCTIVE_ACTIONS = [
+    {
+        tool: 'unraid_vm_force_stop',
+        title: 'Force-Stop Unraid VM',
+        verb: 'Force-stop',
+        op: forceStopVm,
+    },
+    { tool: 'unraid_vm_reboot', title: 'Reboot Unraid VM', verb: 'Reboot', op: rebootVm },
+    { tool: 'unraid_vm_reset', title: 'Reset Unraid VM', verb: 'Hard-reset', op: resetVm },
+];
+/** Register VM tools on the given server. */
+export function registerVmTools(server, ctx) {
+    server.registerTool('unraid_list_vms', {
+        title: 'List Unraid Virtual Machines',
+        description: `List the virtual machines (libvirt domains) known to Unraid with their id, name, and current run state (RUNNING/SHUTOFF/PAUSED/...). Use limit/offset to page.`,
+        inputSchema: { ...PAGINATION_INPUT },
+        annotations: READ_ONLY_ANNOTATIONS,
+    }, async ({ limit, offset }) => formatResult(await listVms(ctx.client, { limit, offset })));
+    for (const { tool, title, verb, op } of VM_ACTIONS) {
+        server.registerTool(tool, {
+            title,
+            description: `${verb} the virtual machine with the given id. Returns whether the hypervisor accepted the request.`,
+            inputSchema: { id: z.string().describe('The VM id (PrefixedID)') },
+            annotations: SAFE_WRITE_ANNOTATIONS,
+        }, async ({ id }) => readOnlyBlock(ctx) ?? formatResult(await op(ctx.client, id)));
+    }
+    // --- Phase 3: destructive VM control ---
+    for (const { tool, title, verb, op } of VM_DESTRUCTIVE_ACTIONS) {
+        server.registerTool(tool, {
+            title,
+            description: `${verb} the virtual machine with the given id (ungraceful — may cause data loss in the guest). Destructive — requires human approval.`,
+            inputSchema: { id: z.string().describe('The VM id (PrefixedID)'), ...CONFIRM_TOKEN_INPUT },
+            annotations: DESTRUCTIVE_ANNOTATIONS,
+        }, async ({ id, confirm_token }) => runDestructive(server, ctx, {
+            tool,
+            summary: `${verb} VM ${id}`,
+            targets: [id],
+            token: confirm_token,
+            run: () => op(ctx.client, id),
+        }));
+    }
+}
+//# sourceMappingURL=vm.js.map

package/dist/tools/vm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm.js","sourceRoot":"","sources":["../../src/tools/vm.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,OAAO,EACP,OAAO,EACP,MAAM,EACN,OAAO,EACP,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,OAAO,GAIR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKlD,6EAA6E;AAC7E,MAAM,UAAU,GAAG;IACjB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;IACjF,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE;IACxF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;IACjF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE;CACA,CAAC;AAExF,8EAA8E;AAC9E,MAAM,sBAAsB,GAAG;IAC7B;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,WAAW;KAChB;IACD,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE;IACrF,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE;CACD,CAAC;AAExF,6CAA6C;AAC7C,MAAM,UAAU,eAAe,CAAC,MAAiB,EAAE,GAAkB;IACnE,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,gKAAgK;QAC7K,WAAW,EAAE,EAAE,GAAG,gBAAgB,EAAE;QACpC,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CACxF,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC;QACnD,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;YACE,KAAK;YACL,WAAW,EAAE,GAAG,IAAI,8FAA8F;YAClH,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;YAClE,WAAW,EAAE,sBAAsB;SACpC,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAC/E,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,sBAAsB,EAAE,CAAC;QAC/D,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;YACE,KAAK;YACL,WAAW,EAAE,GAAG,IAAI,gIAAgI;YACpJ,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,GAAG,mBAAmB,EAAE;YAC1F,WAAW,EAAE,uBAAuB;SACrC,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAC9B,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;YAC1B,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,OAAO,EAAE,EAAE;YAC3B,OAAO,EAAE,CAAC,EAAE,CAAC;YACb,KAAK,EAAE,aAAa;YACpB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;SAC9B,CAAC,CACL,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/transports/http.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Streamable HTTP transport runner — the primary transport for a hosted Unraid
+ * "App". Runs a stateless JSON endpoint at `POST /mcp` plus a `GET /healthz`
+ * liveness probe. Validates the `Origin` header (DNS-rebinding protection) and
+ * optionally enforces a bearer token, since this transport is network-exposed.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { McpConfig } from '../config.js';
+import type { Logger } from '../log.js';
+/** Factory that produces a fresh server instance per request (stateless mode). */
+export type ServerFactory = () => McpServer;
+/**
+ * Start the Streamable HTTP transport server.
+ *
+ * @returns A function that gracefully closes the HTTP server.
+ */
+export declare function startHttp(serverFactory: ServerFactory, config: McpConfig, logger: Logger): Promise<() => Promise<void>>;
+//# sourceMappingURL=http.d.ts.map

package/dist/transports/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC;AAc5C;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,aAAa,EAAE,aAAa,EAC5B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CA0B9B"}

package/dist/transports/http.js

@@ -0,0 +1,92 @@
+/**
+ * Streamable HTTP transport runner — the primary transport for a hosted Unraid
+ * "App". Runs a stateless JSON endpoint at `POST /mcp` plus a `GET /healthz`
+ * liveness probe. Validates the `Origin` header (DNS-rebinding protection) and
+ * optionally enforces a bearer token, since this transport is network-exposed.
+ */
+import express, {} from 'express';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+const JSONRPC_AUTH_ERROR = {
+    jsonrpc: '2.0',
+    error: { code: -32001, message: 'Unauthorized' },
+    id: null,
+};
+const JSONRPC_ORIGIN_ERROR = {
+    jsonrpc: '2.0',
+    error: { code: -32001, message: 'Forbidden: cross-origin request rejected' },
+    id: null,
+};
+/**
+ * Start the Streamable HTTP transport server.
+ *
+ * @returns A function that gracefully closes the HTTP server.
+ */
+export async function startHttp(serverFactory, config, logger) {
+    const app = express();
+    app.use(express.json());
+    app.get('/healthz', (_req, res) => {
+        res.json({ status: 'ok' });
+    });
+    app.post('/mcp', (req, res) => {
+        void handleMcpRequest(req, res, serverFactory, config, logger);
+    });
+    return new Promise((resolve) => {
+        const httpServer = app.listen(config.httpPort, () => {
+            logger.info(`MCP server listening on http://0.0.0.0:${String(config.httpPort)}/mcp`);
+            resolve(() => new Promise((res, rej) => {
+                httpServer.close((err) => {
+                    if (err)
+                        rej(err);
+                    else
+                        res();
+                });
+            }));
+        });
+    });
+}
+async function handleMcpRequest(req, res, serverFactory, config, logger) {
+    // DNS-rebinding protection: reject any request carrying a browser Origin.
+    // Legitimate MCP clients connect server-to-server and omit Origin.
+    const origin = req.headers.origin;
+    if (typeof origin === 'string' && origin.length > 0) {
+        res.status(403).json(JSONRPC_ORIGIN_ERROR);
+        return;
+    }
+    if (config.httpAuthToken !== undefined && !hasValidBearer(req, config.httpAuthToken)) {
+        res.status(401).json(JSONRPC_AUTH_ERROR);
+        return;
+    }
+    // Stateless: a fresh server + transport per request avoids cross-request
+    // state and request-ID collisions.
+    const server = serverFactory();
+    const transport = new StreamableHTTPServerTransport({ enableJsonResponse: true });
+    res.on('close', () => {
+        void transport.close();
+        void server.close();
+    });
+    try {
+        await server.connect(transport);
+        await transport.handleRequest(req, res, req.body);
+    }
+    catch (error) {
+        logger.error('Error handling MCP request', {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        if (!res.headersSent) {
+            res.status(500).json({
+                jsonrpc: '2.0',
+                error: { code: -32603, message: 'Internal server error' },
+                id: null,
+            });
+        }
+    }
+}
+/** Check for a matching `Authorization: Bearer <token>` header. */
+function hasValidBearer(req, expected) {
+    const header = req.headers.authorization;
+    if (typeof header !== 'string')
+        return false;
+    const match = /^Bearer\s+(.+)$/i.exec(header);
+    return match?.[1] === expected;
+}
+//# sourceMappingURL=http.js.map

package/dist/transports/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,OAAO,EAAE,EAA+B,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAQnG,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,KAAc;IACvB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE;IAChD,EAAE,EAAE,IAAI;CACT,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,OAAO,EAAE,KAAc;IACvB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE;IAC5E,EAAE,EAAE,IAAI;CACT,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,aAA4B,EAC5B,MAAiB,EACjB,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QACnD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/C,KAAK,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;QAClD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrF,OAAO,CACL,GAAG,EAAE,CACH,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC7B,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACvB,IAAI,GAAG;wBAAE,GAAG,CAAC,GAAG,CAAC,CAAC;;wBACb,GAAG,EAAE,CAAC;gBACb,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAY,EACZ,GAAa,EACb,aAA4B,EAC5B,MAAiB,EACjB,MAAc;IAEd,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IAElF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;YACzC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;gBACzD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAS,cAAc,CAAC,GAAY,EAAE,QAAgB;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;AACjC,CAAC"}

package/dist/transports/stdio.d.ts

@@ -0,0 +1,10 @@
+/**
+ * stdio transport runner — for local MCP clients that spawn the server as a
+ * child process. All logging goes to stderr so stdout stays a clean JSON-RPC
+ * stream.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Logger } from '../log.js';
+/** Connect the given server to a stdio transport. */
+export declare function startStdio(server: McpServer, logger: Logger): Promise<void>;
+//# sourceMappingURL=stdio.d.ts.map

package/dist/transports/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,qDAAqD;AACrD,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjF"}

package/dist/transports/stdio.js

@@ -0,0 +1,13 @@
+/**
+ * stdio transport runner — for local MCP clients that spawn the server as a
+ * child process. All logging goes to stderr so stdout stays a clean JSON-RPC
+ * stream.
+ */
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+/** Connect the given server to a stdio transport. */
+export async function startStdio(server, logger) {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    logger.info('MCP server listening on stdio');
+}
+//# sourceMappingURL=stdio.js.map

package/dist/transports/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/transports/stdio.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAIjF,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAiB,EAAE,MAAc;IAChE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;AAC/C,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@unraid-toolkit/mcp",
+  "version": "0.2.0",
+  "description": "Model Context Protocol server for the Unraid GraphQL API, built on @unraid-toolkit/sdk.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mike-north/unraid-toolkit.git",
+    "directory": "packages/mcp"
+  },
+  "homepage": "https://github.com/mike-north/unraid-toolkit#readme",
+  "bugs": "https://github.com/mike-north/unraid-toolkit/issues",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "unraid-mcp": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "express": "^5.2.1",
+    "zod": "^4.4.3",
+    "@unraid-toolkit/sdk": "0.2.0"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0"
+  },
+  "scripts": {
+    "test": "vitest run --passWithNoTests"
+  }
+}