@vibesdotdev/mcp 0.0.0-stage → 1.0.0-rc.0

package/dist/adapters/mcp/mcp-http-session.d.ts

@@ -0,0 +1,140 @@
+export { jsonRpcError, jsonRpcRequestId } from './json-rpc.ts';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { LoggerImplementation } from '@vibesdotdev/logging';
+import { type RuntimeLifecycle } from '@vibesdotdev/kernel';
+import { type JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import type { McpAuthRequest, McpAuthResult } from '../auth-middleware.ts';
+import { type McpRequestWorkspaceRunner } from './request-context.ts';
+import { type HarnessIdentitySource } from './serve-identity.ts';
+import type { RuntimeInvokeCaller, VerifiedTransportIdentity } from '@vibesdotdev/kernel/schemas/invoke-caller';
+export interface McpHttpSessionHandlerOptions {
+    buildServer: (context?: McpHttpConnectionContext) => McpServer;
+    /**
+     * The serving runtime harness identity resolves against
+     * (`runtime.query('mcp/harness-identity')` at call time). Absent, an
+     * `initialize` clientInfo name implies no agent.
+     */
+    runtime?: HarnessIdentitySource;
+    /** Admit a live transport to its actual serving runtime's membership owner. */
+    bindMembershipOwner?: (transportSessionId: string) => () => void;
+    logger: LoggerImplementation;
+    /**
+     * The serving runtime's lifecycle (`runtime.lifecycle`, RC07). Idle-session
+     * expiry runs per request on every host; a persistent host also sweeps idle
+     * sessions on its runtime-owned `interval`, which a finite host refuses
+     * (`lifecycle-interval-finite`), so there expiry stays per-request only. The
+     * restore lane's event-loop yield is its `delay`.
+     */
+    lifecycle: Pick<RuntimeLifecycle, 'interval' | 'delay'>;
+    /**
+     * Runs a request that names its workspace (`x-vibes-workspace-path`) as an
+     * invocation whose overlay carries it: the serving runtime's
+     * `(workspace, fn) => runtime.runInvocation(fn, { workspace })`. A host
+     * without one refuses such a request with 400.
+     */
+    runInRequestWorkspace?: McpRequestWorkspaceRunner;
+    authenticate?: (req: McpAuthRequest) => Promise<McpAuthResult | null>;
+    /**
+     * The shared local host's relay attestation (RC08 U7): checks the
+     * `Authorization` an `initialize` presents against this host start's secret.
+     * Only an attested connection's declared launch identity is verified; every
+     * other connection's identity stays a declaration, refused at admission.
+     * Absent: no connection is attested.
+     */
+    relayAttestation?: {
+        verify(authorization: string | null): boolean;
+    };
+    /** Preset wire policy only; registered output schemas still validate results. */
+    omitOutputSchema?: boolean;
+    /** Extra fields merged into /health JSON */
+    healthExtras?: JsonObject;
+    maxSessions?: number;
+    sessionTtlMs?: number;
+    /**
+     * A session active within this window is never evicted to make room for a
+     * new one. See DEFAULT_MIN_EVICTION_IDLE_MS.
+     */
+    minEvictionIdleMs?: number;
+    /**
+     * Stateless mode — REQUIRED on serverless/edge isolate runtimes,
+     * where each request may land on a different isolate with no shared memory.
+     * Builds a fresh MCP server + transport per request (sessionIdGenerator:
+     * undefined) instead of persisting sessions in an in-memory Map, so a
+     * follow-up `tools/list` after `initialize` doesn't 400 with "No valid
+     * session ID provided" just because it hit a cold isolate.
+     */
+    stateless?: boolean;
+    /**
+     * Override the session id minted on `initialize` (default: random UUID).
+     * Used by the Durable-Object session host to pin the MCP session id to the
+     * DO instance name, so a client's follow-up requests (carrying that
+     * `mcp-session-id`) route back to the same DO that holds the live session.
+     */
+    sessionIdGenerator?: () => string;
+    /** Accepted HTTP endpoint paths. Defaults to `/mcp` and `/`. */
+    endpointPaths?: readonly string[];
+    /**
+     * Maximum time one durable session restore may hold the shared restore lane
+     * before health fails and the managed host is replaced.
+     */
+    durableRestoreDeadlineMs?: number;
+    /**
+     * Maximum number of authority-preserving receipt restores that may validate
+     * concurrently. Mutation-capable legacy init/status requests remain on the
+     * single writer lane.
+     */
+    maxParallelReceiptRestores?: number;
+    /** Deterministic clock seam for restore-health falsifiers. */
+    now?: () => number;
+    /**
+     * Rebind a replacement HTTP transport from a cached durable receipt without
+     * repeating Session authority mutations. The callback must revalidate the
+     * participant -> session mapping before publishing the in-memory transport
+     * binding.
+     */
+    bindCachedDurableRestore?: (input: {
+        transportSessionId: string;
+        sessionId: string;
+        participantId: string;
+    }) => Promise<void>;
+    /**
+     * Resolve a legacy init/status replay to its unchanged durable receipt. A
+     * non-null result lets the HTTP host execute the canonical read-only status
+     * receipt instead of repeating mutation-capable initialization work.
+     */
+    resolveReadOnlyDurableRestore?: (input: {
+        action: 'init' | 'status';
+        sessionId?: string;
+        participantId?: string;
+        newSession: boolean;
+        transportSessionId: string;
+        clientInfo?: {
+            name: string;
+            version?: string;
+            agentId?: string;
+            harnessSessionId?: string;
+        };
+    }) => Promise<{
+        sessionId: string;
+        participantId: string;
+    } | null>;
+}
+export interface McpHttpConnectionContext {
+    transportSessionId?: string;
+    /** Identity declared at `initialize`, frozen for the connection's life. */
+    identity?: RuntimeInvokeCaller;
+    /** What the host verified about this connection at `initialize` (an attested relay's launch identity). */
+    verified?: VerifiedTransportIdentity;
+    clientInfo?: {
+        name: string;
+        version?: string;
+        agentId?: string;
+        harnessSessionId?: string;
+    };
+}
+export type McpHttpSessionHandle = {
+    handleRequest: (req: Request) => Promise<Response>;
+    dispose: () => void;
+};
+export declare function createMcpHttpSessionHandler(options: McpHttpSessionHandlerOptions): McpHttpSessionHandle;
+//# sourceMappingURL=mcp-http-session.d.ts.map

package/dist/adapters/mcp/mcp-http-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http-session.d.ts","sourceRoot":"","sources":["../../../src/adapters/mcp/mcp-http-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAM/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAA+E,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACzI,OAAO,EAAqC,KAAK,UAAU,EAAkB,MAAM,kCAAkC,CAAC;AAEtH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3E,OAAO,EAKN,KAAK,yBAAyB,EAC9B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAsB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,KAAK,EACX,mBAAmB,EACnB,yBAAyB,EACzB,MAAM,2CAA2C,CAAC;AAEnD,MAAM,WAAW,4BAA4B;IAC5C,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,wBAAwB,KAAK,SAAS,CAAC;IAC/D;;;;OAIG;IACH,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,CAAC,kBAAkB,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;IACjE,MAAM,EAAE,oBAAoB,CAAC;IAC7B;;;;;;OAMG;IACH,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;IACxD;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,yBAAyB,CAAC;IAClD,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE;QAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAA;KAAE,CAAC;IACrE,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4CAA4C;IAC5C,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;IAClC,gEAAgE;IAChE,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE;QAClC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;KACtB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,CAAC,KAAK,EAAE;QACvC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;QACpB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE;YACZ,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;SAC1B,CAAC;KACF,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,wBAAwB;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,0GAA0G;IAC1G,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC,UAAU,CAAC,EAAE;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACF;AAsUD,MAAM,MAAM,oBAAoB,GAAG;IAClC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,IAAI,CAAC;CACpB,CAAC;AAEF,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,4BAA4B,GACnC,oBAAoB,CAqlBtB"}