@usestratus/mcp-aws 0.1.0

package/dist/index.js

@@ -0,0 +1,28 @@
+// ── Server ──────────────────────────────────────────────────────────
+export { McpServer } from "./server.js";
+// ── Errors ──────────────────────────────────────────────────────────
+export { McpAwsError, GateDeniedError, AuthenticationError, SessionNotFoundError, ToolExecutionError, ToolTimeoutError, } from "./errors.js";
+// ── Auth ────────────────────────────────────────────────────────────
+export { apiKey, ApiKeyAuth } from "./auth/api-key.js";
+export { cognito, CognitoAuth } from "./auth/cognito.js";
+export { chainAuth } from "./auth/index.js";
+export { buildResourceMetadata, buildWwwAuthenticateHeader, } from "./auth/metadata.js";
+// ── Gating ──────────────────────────────────────────────────────────
+export { role, check, requires, rateLimit } from "./gating/gates.js";
+export { all, any } from "./gating/combinators.js";
+// ── Sessions ────────────────────────────────────────────────────────
+export { MemorySessionStore } from "./session/memory.js";
+export { DynamoSessionStore } from "./session/dynamo.js";
+// ── Disclosure ──────────────────────────────────────────────────────
+export { SearchIndex } from "./disclosure/search.js";
+// ── Code Mode ───────────────────────────────────────────────────────
+export { FunctionExecutor, WorkerExecutor } from "./codemode/executor.js";
+// ── Context (AsyncLocalStorage) ─────────────────────────────────────
+export { getAuthContext, getSession } from "./context.js";
+// ── SSRF Protection ─────────────────────────────────────────────────
+export { isBlockedUrl, assertSafeUrl } from "./ssrf.js";
+// ── Composition ─────────────────────────────────────────────────────
+export { codeMcpServer, createMcpHandler } from "./compose.js";
+// ── Deploy ──────────────────────────────────────────────────────────
+export { deploy, destroy, } from "./deploy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAA2D,MAAM,aAAa,CAAC;AA2BjG,uEAAuE;AACvE,OAAO,EACN,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,GAChB,MAAM,aAAa,CAAC;AAErB,uEAAuE;AACvE,OAAO,EAAE,MAAM,EAAE,UAAU,EAA2C,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,WAAW,EAA0B,MAAM,mBAAmB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAuC,MAAM,iBAAiB,CAAC;AACjF,OAAO,EACN,qBAAqB,EACrB,0BAA0B,GAG1B,MAAM,oBAAoB,CAAC;AAE5B,uEAAuE;AACvE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAEnD,uEAAuE;AACvE,OAAO,EAAE,kBAAkB,EAAiC,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAiC,MAAM,qBAAqB,CAAC;AAKxF,uEAAuE;AACvE,OAAO,EAAE,WAAW,EAAqB,MAAM,wBAAwB,CAAC;AAExE,uEAAuE;AACvE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG1E,uEAAuE;AACvE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1D,uEAAuE;AACvE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAKxD,uEAAuE;AACvE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAA2D,MAAM,cAAc,CAAC;AAExH,uEAAuE;AACvE,OAAO,EACN,MAAM,EACN,OAAO,GAKP,MAAM,aAAa,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,161 @@
+import { z } from "zod";
+import type { ResourceMetadataConfig } from "./auth/metadata.js";
+import type { AuthProvider } from "./auth/types.js";
+import { type SearchResult } from "./disclosure/index.js";
+import { type McpEventMap, type McpEventName } from "./events.js";
+import { type McpServerConfig, type McpSession, type SessionStore, type ToolConfig, type ToolHandler, type ToolOptions } from "./types.js";
+export type LambdaTransportConfig = {
+    sessionStore?: SessionStore;
+    baseUrl?: string;
+    resourceMetadata?: ResourceMetadataConfig;
+};
+export type ExpressTransportConfig = {
+    sessionStore?: SessionStore;
+    baseUrl?: string;
+    resourceMetadata?: ResourceMetadataConfig;
+    mcpPath?: string;
+};
+/** Structural type for Express-like app. Matches express.Application. */
+export type ExpressLikeApp = {
+    get(path: string, ...handlers: ((...args: unknown[]) => void)[]): void;
+    post(path: string, ...handlers: ((...args: unknown[]) => void)[]): void;
+    delete(path: string, ...handlers: ((...args: unknown[]) => void)[]): void;
+};
+export declare class McpServer {
+    #private;
+    /**
+     * Create an MCP server.
+     *
+     * @example
+     * ```ts
+     * const server = new McpServer("my-server@1.0.0");
+     * const server = new McpServer({ name: "my-server", version: "1.0.0" });
+     * ```
+     */
+    constructor(config: string | McpServerConfig);
+    /**
+     * Set the auth provider. Multiple calls or args chain automatically.
+     *
+     * @example
+     * ```ts
+     * server.auth(apiKey({ "sk-123": { roles: ["admin"] } }));
+     * server.auth(cognito({ userPoolId: "...", region: "us-east-1" }));
+     * ```
+     */
+    auth(...providers: AuthProvider[]): this;
+    /**
+     * Subscribe to server lifecycle events.
+     *
+     * @example
+     * ```ts
+     * server.on("tool:call", (e) => console.log(`${e.toolName} called`));
+     * server.on("auth:failure", () => metrics.increment("auth.failures"));
+     * ```
+     */
+    on<K extends McpEventName>(event: K, listener: (data: McpEventMap[K]) => void): this;
+    off<K extends McpEventName>(event: K, listener: (data: McpEventMap[K]) => void): this;
+    /**
+     * Register a tool. Returns `this` for chaining.
+     *
+     * @example
+     * ```ts
+     * // Simple: name + handler (no params)
+     * server.tool("ping", async () => "pong");
+     *
+     * // With params: name + Zod schema + handler
+     * server.tool("greet", z.object({ name: z.string() }), async ({ name }) => {
+     *   return `Hello, ${name}!`;
+     * });
+     *
+     * // Full config: name + options + handler
+     * server.tool("admin_reset", {
+     *   description: "Reset user account",
+     *   params: z.object({ userId: z.string() }),
+     *   tier: "hidden",
+     *   gate: role("admin"),
+     * }, async ({ userId }) => {
+     *   return { reset: true, userId };
+     * });
+     * ```
+     */
+    tool(name: string, handler: ToolHandler<undefined>): this;
+    tool<T extends z.ZodType>(name: string, params: T, handler: ToolHandler<z.infer<T>>): this;
+    tool<T extends z.ZodType>(name: string, options: ToolOptions<T>, handler: ToolHandler<z.infer<T>>): this;
+    searchTools(query: string, maxResults?: number): SearchResult[];
+    getVisibleTools(session: McpSession): ToolConfig[];
+    /**
+     * Connect to stdio transport. For local dev with Claude Desktop.
+     */
+    stdio(): Promise<void>;
+    /**
+     * Create a Lambda handler for Function URLs or API Gateway v2.
+     * Uses WebStandard transport: Request in → Response out.
+     * Stateless per-request MCP server isolation.
+     *
+     * @example
+     * ```ts
+     * // Lambda Function URL handler
+     * export default server.lambda();
+     *
+     * // Or with config
+     * export const handler = server.lambda({
+     *   baseUrl: "https://abc.lambda-url.us-east-1.on.aws",
+     * });
+     * ```
+     */
+    lambda(config?: LambdaTransportConfig): (event: unknown) => Promise<unknown>;
+    /**
+     * Create Express route handlers. Call `setup(app)` to mount.
+     *
+     * @example
+     * ```ts
+     * import express from "express";
+     * const app = express();
+     * app.use(express.json());
+     * server.express().setup(app);
+     * app.listen(3000);
+     * ```
+     */
+    express(config?: ExpressTransportConfig): {
+        setup: (app: ExpressLikeApp) => void;
+    };
+    /**
+     * Start a Bun HTTP server. Zero dependencies — uses Bun.serve() natively.
+     *
+     * @example
+     * ```ts
+     * server.bun({ port: 3000 });
+     * // MCP server running at http://localhost:3000/mcp
+     * ```
+     */
+    bun(config?: {
+        port?: number;
+        hostname?: string;
+        mcpPath?: string;
+    }): {
+        stop: () => void;
+        url: string;
+    };
+    get config(): McpServerConfig;
+    get toolCount(): number;
+    getToolConfig(name: string): ToolConfig | undefined;
+    /**
+     * Deploy this server to AWS Lambda with a Function URL.
+     * Returns the live HTTPS endpoint URL.
+     *
+     * @example
+     * ```ts
+     * const server = new McpServer("my-tools@1.0.0")
+     *   .tool("ping", async () => "pong");
+     *
+     * const { url } = await server.deploy({ entry: "./src/server.ts" });
+     * console.log(`Live at: ${url}`);
+     * ```
+     */
+    deploy(config: import("./deploy.js").DeployConfig): Promise<import("./deploy.js").DeployResult>;
+    /**
+     * Destroy a previously deployed Lambda function.
+     */
+    destroy(functionName?: string, region?: string): Promise<import("./deploy.js").DestroyResult>;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAUpD,OAAO,EAEN,KAAK,YAAY,EAIjB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAmB,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAEnF,OAAO,EAKN,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,UAAU,EAEf,KAAK,WAAW,EAEhB,KAAK,WAAW,EAIhB,MAAM,YAAY,CAAC;AAkDpB,MAAM,MAAM,qBAAqB,GAAG;IACnC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACpC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG;IAC5B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;IACvE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;CAC1E,CAAC;AAIF,qBAAa,SAAS;;IAYrB;;;;;;;;OAQG;gBACS,MAAM,EAAE,MAAM,GAAG,eAAe;IAW5C;;;;;;;;OAQG;IACH,IAAI,CAAC,GAAG,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI;IAaxC;;;;;;;;OAQG;IACH,EAAE,CAAC,CAAC,SAAS,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAKpF,GAAG,CAAC,CAAC,SAAS,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAOrF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,GAAG,IAAI;IACzD,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAC1F,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EACvB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EACvB,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAC9B,IAAI;IAiDP,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,YAAY,EAAE;IAI/D,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,EAAE;IAmWlD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;IA2I5E;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,MAAM,CAAC,EAAE,sBAAsB,GAAG;QACzC,KAAK,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;KACrC;IAkFD;;;;;;;;OAQG;IACH,GAAG,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QACrE,IAAI,EAAE,MAAM,IAAI,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC;KACZ;IAgED,IAAI,MAAM,IAAI,eAAe,CAE5B;IAED,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAMnD;;;;;;;;;;;;OAYG;IACG,MAAM,CACX,MAAM,EAAE,OAAO,aAAa,EAAE,YAAY,GACxC,OAAO,CAAC,OAAO,aAAa,EAAE,YAAY,CAAC;IAQ9C;;OAEG;IACG,OAAO,CACZ,YAAY,CAAC,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,aAAa,EAAE,aAAa,CAAC;CAI/C"}