@warlock.js/ai-tools 5.32.0 → 5.33.0

package/esm/contracts/index.d.mts

@@ -2,5 +2,5 @@ import { FetchUrlExtract, FetchUrlInput, FetchUrlOptions, FetchUrlResult, Search
 import { HttpMethod, HttpRequestInput, HttpRequestOptions, HttpRequestResult } from "./http.type.mjs";
 import { CalculatorInput, CalculatorOptions, CalculatorResult, DateTimeInput, DateTimeOp, DateTimeOptions, DateTimeResult } from "./utility.type.mjs";
 import { JsonRpcError, JsonRpcId, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, JsonRpcVersion, McpClient, McpClientOptions, McpContentBlock, McpToolCallResult, McpToolDescriptor, McpTransport } from "./mcp.type.mjs";
-import { McpGroupedToolSource, McpHttpAuth, McpHttpRequestInfo, McpHttpServeHandle, McpHttpServeTransport, McpPromptArgument, McpPromptMessage, McpServeCallContext, McpServeHandle, McpServeOptions, McpServePrompt, McpServeResource, McpServeSource, McpServeTransport, McpServer, McpToolSource } from "./mcp-serve.type.mjs";
-export type { CalculatorInput, CalculatorOptions, CalculatorResult, DateTimeInput, DateTimeOp, DateTimeOptions, DateTimeResult, FetchUrlExtract, FetchUrlInput, FetchUrlOptions, FetchUrlResult, HttpMethod, HttpRequestInput, HttpRequestOptions, HttpRequestResult, JsonRpcError, JsonRpcId, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, JsonRpcVersion, McpClient, McpClientOptions, McpContentBlock, McpGroupedToolSource, McpHttpAuth, McpHttpRequestInfo, McpHttpServeHandle, McpHttpServeTransport, McpPromptArgument, McpPromptMessage, McpServeCallContext, McpServeHandle, McpServeOptions, McpServePrompt, McpServeResource, McpServeSource, McpServeTransport, McpServer, McpToolCallResult, McpToolDescriptor, McpToolSource, McpTransport, SearchProvider, WebSearchInput, WebSearchOptions, WebSearchResult, WebSearchResultItem };
+import { McpBeforeCall, McpCallRefusal, McpGroupedToolSource, McpHttpAuth, McpHttpRequestInfo, McpHttpServeHandle, McpHttpServeTransport, McpPromptArgument, McpPromptMessage, McpServeCallContext, McpServeHandle, McpServeOptions, McpServePrompt, McpServeResource, McpServeSource, McpServeToolContext, McpServeTransport, McpServer, McpStdioServeTransport, McpToolSource } from "./mcp-serve.type.mjs";
+export type { CalculatorInput, CalculatorOptions, CalculatorResult, DateTimeInput, DateTimeOp, DateTimeOptions, DateTimeResult, FetchUrlExtract, FetchUrlInput, FetchUrlOptions, FetchUrlResult, HttpMethod, HttpRequestInput, HttpRequestOptions, HttpRequestResult, JsonRpcError, JsonRpcId, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, JsonRpcVersion, McpBeforeCall, McpCallRefusal, McpClient, McpClientOptions, McpContentBlock, McpGroupedToolSource, McpHttpAuth, McpHttpRequestInfo, McpHttpServeHandle, McpHttpServeTransport, McpPromptArgument, McpPromptMessage, McpServeCallContext, McpServeHandle, McpServeOptions, McpServePrompt, McpServeResource, McpServeSource, McpServeToolContext, McpServeTransport, McpServer, McpStdioServeTransport, McpToolCallResult, McpToolDescriptor, McpToolSource, McpTransport, SearchProvider, WebSearchInput, WebSearchOptions, WebSearchResult, WebSearchResultItem };

package/esm/contracts/mcp-serve.type.d.mts

@@ -1,4 +1,4 @@
-import { McpContentBlock } from "./mcp.type.mjs";
+import { JsonRpcId, McpContentBlock, McpToolCallResult } from "./mcp.type.mjs";
 import { JsonSchemaTarget, ToolContract, ToolRequestContext } from "@warlock.js/ai";
 //#region ../../packages/ai-tools/src/contracts/mcp-serve.type.d.ts
 /**
@@ -46,8 +46,8 @@ export type McpHttpRequestInfo = ToolRequestContext & {
 };
 /**
  * Authentication for an HTTP-served MCP endpoint. At least one of
- * `bearer` / `authorize` is required; when both are set, a request must
- * pass both. A request that fails gets HTTP 401 before its body is read.
+ * `bearer` / `authorize` / `authenticate` is required; all configured checks
+ * must pass, in that order. A request that fails gets HTTP 401 before its body is read.
  */
 export type McpHttpAuth = {
   /**
@@ -64,6 +64,12 @@ export type McpHttpAuth = {
    * request (fails closed).
    */
   authorize?: (request: McpHttpRequestInfo) => boolean | Promise<boolean>;
+  /**
+   * Resolve the caller after Host/Origin, bearer and authorize checks.
+   * Undefined or a thrown/rejected error denies with 401 and a Bearer challenge.
+   * Any other value becomes context.principal (including null or false).
+   */
+  authenticate?: (request: McpHttpRequestInfo) => unknown | Promise<unknown>;
 };
 /**
  * Serve over the MCP Streamable HTTP transport.
@@ -94,7 +100,7 @@ export type McpHttpServeTransport = {
    * @default "/mcp"
    */
   path?: string;
-  /** Bearer token(s) and/or a custom authorize hook. Required off loopback. */
+  /** Bearer, authorize and/or authenticate checks. Required off loopback. */
   auth?: McpHttpAuth;
   /**
    * Extra browser origins allowed to call the endpoint, as full origins
@@ -132,9 +138,15 @@ export type McpHttpServeTransport = {
  * - `"stdio"` — serve JSON-RPC over this process's stdin/stdout.
  * - `"http"` — serve MCP Streamable HTTP (see {@link McpHttpServeTransport}).
  */
-export type McpServeTransport = {
+export type McpServeTransport = McpStdioServeTransport | McpHttpServeTransport;
+/** Local caller identity for the stdio connection. */
+export type McpStdioServeTransport = {
   type: "stdio";
-} | McpHttpServeTransport;
+  /** Static trusted identity; never read from tool arguments. */
+  principal?: unknown;
+  /** Per-request identity provider; takes precedence over principal when set. */
+  principalProvider?: (context: McpServeCallContext) => unknown | Promise<unknown>;
+};
 /**
  * Per-call context handed to resource readers and prompt builders (tools
  * receive the same data on their `ToolContext`).
@@ -142,9 +154,23 @@ export type McpServeTransport = {
 export type McpServeCallContext = {
   /** The inbound HTTP request; absent over stdio. */
   request?: McpHttpRequestInfo;
-  /** Aborted when an HTTP server's `close()` gives up draining. */
+  /** JSON-RPC request id; populated by the serving boundary. */
+  requestId?: JsonRpcId;
+  /** Caller identity from HTTP authenticate or the stdio transport options. */
+  principal?: unknown;
+  /** Aborted on cancellation, client disconnect or server shutdown. */
   signal?: AbortSignal;
 };
+/** Context supplied to beforeCall after successful tool input validation. */
+export type McpServeToolContext = McpServeCallContext & {
+  requestId: JsonRpcId;
+};
+/** Native MCP error result returned by a beforeCall policy hook. */
+export type McpCallRefusal = McpToolCallResult & {
+  isError: true;
+};
+/** Validate policy before execute; a refusal bypasses result serialization. */
+export type McpBeforeCall = (context: McpServeToolContext, tool: ToolContract, input: unknown) => void | McpCallRefusal | Promise<void | McpCallRefusal>;
 /**
  * A static MCP resource served by `resources/list` + `resources/read`.
  */
@@ -236,6 +262,12 @@ export interface McpServeOptions {
    * @default "text"
    */
   results?: "text" | "native";
+  /**
+   * Runs after schema validation and before invocation. Input is the validated
+   * value and should be treated as read-only. Return an isError:true native
+   * result to refuse; throw to answer with a JSON-RPC invalid-params error.
+   */
+  beforeCall?: McpBeforeCall;
   /**
    * Prefix each tool of a grouped source (`{ groups: { … } }`) with its
    * group name. `true` exposes `<group>_<tool>`; a function builds the

package/esm/contracts/mcp-serve.type.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-serve.type.d.mts","names":[],"sources":["../../../../../../../../packages/ai-tools/src/contracts/mcp-serve.type.ts"],"mappings":";;;;;;;;;;;;;YAcY;EAAkB,SAAS;IAAmB;;;;;;;;;YAU9C;;EAEV,QAAQ,eAAe;;;;;;;;YASb,iBAAiB,gBAAgB;;;;;;YAOjC,qBAAqB;;EAE/B;;EAEA;;;;;;;YAQU;;;;;;;;EAQV;;;;;;EAMA,aAAa,SAAS,iCAAiC;;;;;;;;YAS7C;;EAEV;;;;;;;EAOA;;;;;;;EAOA;;;;;;EAMA;;EAEA,OAAO;;;;;;;;;EASP;;;;;;;EAOA;;;;;;EAMA;;;;;;;EAOA;;;;;;;;YASU;EAAsB;IAAkB;;;;;YAMxC;;EAEV,UAAU;;EAEV,SAAS;;;;;YAMC;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;;;;EAKA,KAAK,SAAS,+BAA+B,aAAa,iBAAiB;;;YAIjE;;EAEV;;EAEA;;EAEA;;;YAIU;;EAEV;;EAEA,SAAS;;;;;YAMC;;EAEV;;EAEA;;EAEA;;EAEA,YAAY;;;;;;EAMZ,IACE,MAAM,wBACN,SAAS,+BACC,qBAAqB,iBAAiB;;;;;;iBAOnC;;EAEf;;;;;;EAMA;;;;;;EAMA,YAAY;;;;;;;;EAQZ,eAAe;;;;;;;;;EASf;;;;;;;;EAQA,8BAA8B,eAAe;;EAE7C,YAAY;;EAEZ,UAAU;;;;;;iBAOK;;EAEf;;;;;;EAMA,SAAS;;;iBAIM,2BAA2B;;EAE1C;;;;;iBAMe,UAAU,gBAAgB,iBAAiB;;;;;;EAM1D,SAAS,QAAQ;;EAEjB,QAAQ"}
+{"version":3,"file":"mcp-serve.type.d.mts","names":[],"sources":["../../../../../../../../packages/ai-tools/src/contracts/mcp-serve.type.ts"],"mappings":";;;;;;;;;;;;;YAcY;EAAkB,SAAS;IAAmB;;;;;;;;;YAU9C;;EAEV,QAAQ,eAAe;;;;;;;;YASb,iBAAiB,gBAAgB;;;;;;YAOjC,qBAAqB;;EAE/B;;EAEA;;;;;;;YAQU;;;;;;;;EAQV;;;;;;EAMA,aAAa,SAAS,iCAAiC;;;;;;EAMvD,gBAAgB,SAAS,iCAAiC;;;;;;;;YAShD;;EAEV;;;;;;;EAOA;;;;;;;EAOA;;;;;;EAMA;;EAEA,OAAO;;;;;;;;;EASP;;;;;;;EAOA;;;;;;EAMA;;;;;;;EAOA;;;;;;;;YASU,oBAAoB,yBAAyB;;YAG7C;EACV;;EAEA;;EAEA,qBAAqB,SAAS,kCAAkC;;;;;;YAOtD;;EAEV,UAAU;;EAEV,YAAY;;EAEZ;;EAEA,SAAS;;;YAIC,sBAAsB;EAAwB,WAAW;;;YAGzD,iBAAiB;EAAsB;;;YAGvC,iBACV,SAAS,qBACT,MAAM,cACN,0BACU,iBAAiB,eAAe;;;;YAKhC;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;;;;EAKA,KAAK,SAAS,+BAA+B,aAAa,iBAAiB;;;YAIjE;;EAEV;;EAEA;;EAEA;;;YAIU;;EAEV;;EAEA,SAAS;;;;;YAMC;;EAEV;;EAEA;;EAEA;;EAEA,YAAY;;;;;;EAMZ,IACE,MAAM,wBACN,SAAS,+BACC,qBAAqB,iBAAiB;;;;;;iBAOnC;;EAEf;;;;;;EAMA;;;;;;EAMA,YAAY;;;;;;;;EAQZ,eAAe;;;;;;;;;EASf;;;;;;EAMA,aAAa;;;;;;;;EAQb,8BAA8B,eAAe;;EAE7C,YAAY;;EAEZ,UAAU;;;;;;iBAOK;;EAEf;;;;;;EAMA,SAAS;;;iBAIM,2BAA2B;;EAE1C;;;;;iBAMe,UAAU,gBAAgB,iBAAiB;;;;;;EAM1D,SAAS,QAAQ;;EAEjB,QAAQ"}

package/esm/index.d.mts

@@ -2,7 +2,7 @@ import { FetchUrlExtract, FetchUrlInput, FetchUrlOptions, FetchUrlResult, Search
 import { HttpMethod, HttpRequestInput, HttpRequestOptions, HttpRequestResult } from "./contracts/http.type.mjs";
 import { CalculatorInput, CalculatorOptions, CalculatorResult, DateTimeInput, DateTimeOp, DateTimeOptions, DateTimeResult } from "./contracts/utility.type.mjs";
 import { JsonRpcError, JsonRpcId, JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, JsonRpcVersion, McpClient, McpClientOptions, McpContentBlock, McpToolCallResult, McpToolDescriptor, McpTransport } from "./contracts/mcp.type.mjs";
-import { McpGroupedToolSource, McpHttpAuth, McpHttpRequestInfo, McpHttpServeHandle, McpHttpServeTransport, McpPromptArgument, McpPromptMessage, McpServeCallContext, McpServeHandle, McpServeOptions, McpServePrompt, McpServeResource, McpServeSource, McpServeTransport, McpServer, McpToolSource } from "./contracts/mcp-serve.type.mjs";
+import { McpBeforeCall, McpCallRefusal, McpGroupedToolSource, McpHttpAuth, McpHttpRequestInfo, McpHttpServeHandle, McpHttpServeTransport, McpPromptArgument, McpPromptMessage, McpServeCallContext, McpServeHandle, McpServeOptions, McpServePrompt, McpServeResource, McpServeSource, McpServeToolContext, McpServeTransport, McpServer, McpStdioServeTransport, McpToolSource } from "./contracts/mcp-serve.type.mjs";
 import "./contracts/index.mjs";
 import { McpServeRequestHandler, createServeHandler, serve } from "./mcp/serve.mjs";
 import { SUPPORTED_PROTOCOL_VERSIONS } from "./mcp/protocol.mjs";
@@ -20,6 +20,6 @@ import { calculatorTool } from "./utility/calculator.mjs";
 import { dateTimeTool } from "./utility/date-time.mjs";
 import "./utility/index.mjs";
 import { CalculatorError, CalculatorErrorOptions, CalculatorFailure, DateTimeError, DateTimeErrorOptions, DateTimeFailure, HttpPolicyError, HttpPolicyErrorOptions, HttpPolicyFailure, McpServeError, McpServeErrorOptions, McpServeFailure, McpTransportError, McpTransportErrorOptions, McpTransportFailure, WebToolError, WebToolErrorOptions, WebToolFailure } from "./errors.mjs";
-export { type AiToolsNamespace, CalculatorError, type CalculatorErrorOptions, type CalculatorFailure, type CalculatorInput, type CalculatorOptions, type CalculatorResult, DateTimeError, type DateTimeErrorOptions, type DateTimeFailure, type DateTimeInput, type DateTimeOp, type DateTimeOptions, type DateTimeResult, type FetchUrlExtract, type FetchUrlInput, type FetchUrlOptions, type FetchUrlResult, type HttpMethod, HttpPolicyError, type HttpPolicyErrorOptions, type HttpPolicyFailure, type HttpRequestInput, type HttpRequestOptions, type HttpRequestResult, type JsonRpcClientHandle, type JsonRpcError, type JsonRpcId, type JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest, type JsonRpcResponse, type JsonRpcVersion, type McpClient, type McpClientOptions, type McpContentBlock, type McpFactory, type McpGroupedToolSource, type McpHttpAuth, type McpHttpRequestInfo, type McpHttpServeHandle, type McpHttpServeTransport, type McpNativeResult, type McpPromptArgument, type McpPromptMessage, type McpServeCallContext, McpServeError, type McpServeErrorOptions, type McpServeFailure, type McpServeHandle, type McpServeOptions, type McpServePrompt, type McpServeRequestHandler, type McpServeResource, type McpServeSource, type McpServeTransport, type McpServer, type McpToolCallResult, type McpToolDescriptor, type McpToolSource, type McpTransport, type McpTransportClient, McpTransportError, type McpTransportErrorOptions, type McpTransportFailure, SUPPORTED_PROTOCOL_VERSIONS, type SearchProvider, type WebSearchInput, type WebSearchOptions, type WebSearchResult, type WebSearchResultItem, WebToolError, type WebToolErrorOptions, type WebToolFailure, calculatorTool, createJsonRpcClient, createServeHandler, createTransport, dateTimeTool, fetchUrlTool, httpRequestTool, jsonSchemaToStandard, mcp, mcpResult, serve, webSearchTool };
+export { type AiToolsNamespace, CalculatorError, type CalculatorErrorOptions, type CalculatorFailure, type CalculatorInput, type CalculatorOptions, type CalculatorResult, DateTimeError, type DateTimeErrorOptions, type DateTimeFailure, type DateTimeInput, type DateTimeOp, type DateTimeOptions, type DateTimeResult, type FetchUrlExtract, type FetchUrlInput, type FetchUrlOptions, type FetchUrlResult, type HttpMethod, HttpPolicyError, type HttpPolicyErrorOptions, type HttpPolicyFailure, type HttpRequestInput, type HttpRequestOptions, type HttpRequestResult, type JsonRpcClientHandle, type JsonRpcError, type JsonRpcId, type JsonRpcMessage, type JsonRpcNotification, type JsonRpcRequest, type JsonRpcResponse, type JsonRpcVersion, type McpBeforeCall, type McpCallRefusal, type McpClient, type McpClientOptions, type McpContentBlock, type McpFactory, type McpGroupedToolSource, type McpHttpAuth, type McpHttpRequestInfo, type McpHttpServeHandle, type McpHttpServeTransport, type McpNativeResult, type McpPromptArgument, type McpPromptMessage, type McpServeCallContext, McpServeError, type McpServeErrorOptions, type McpServeFailure, type McpServeHandle, type McpServeOptions, type McpServePrompt, type McpServeRequestHandler, type McpServeResource, type McpServeSource, type McpServeToolContext, type McpServeTransport, type McpServer, type McpStdioServeTransport, type McpToolCallResult, type McpToolDescriptor, type McpToolSource, type McpTransport, type McpTransportClient, McpTransportError, type McpTransportErrorOptions, type McpTransportFailure, SUPPORTED_PROTOCOL_VERSIONS, type SearchProvider, type WebSearchInput, type WebSearchOptions, type WebSearchResult, type WebSearchResultItem, WebToolError, type WebToolErrorOptions, type WebToolFailure, calculatorTool, createJsonRpcClient, createServeHandler, createTransport, dateTimeTool, fetchUrlTool, httpRequestTool, jsonSchemaToStandard, mcp, mcpResult, serve, webSearchTool };
 import "./mcp/index.mjs";
 import "./register.mjs";

package/esm/mcp/serve-http.mjs

@@ -1,5 +1,6 @@
 import { McpServeError } from "../errors.mjs";
 import { SUPPORTED_PROTOCOL_VERSIONS } from "./protocol.mjs";
+import { McpServeRequests } from "./serve-requests.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 import { createServer } from "node:http";
 import { isIPv4, isIPv6 } from "node:net";
@@ -101,9 +102,9 @@ function resolveSettings(transport) {
 	const tokens = auth?.bearer === void 0 ? [] : typeof auth.bearer === "string" ? [auth.bearer] : [...auth.bearer];
 	if (tokens.some((token) => token.length === 0)) throw new McpServeError("MCP http auth.bearer tokens must be non-empty strings.", { type: "config" });
 	if (auth && auth.bearer !== void 0 && tokens.length === 0) throw new McpServeError("MCP http auth.bearer needs at least one token.", { type: "config" });
-	if (auth && tokens.length === 0 && !auth.authorize) throw new McpServeError("MCP http auth needs `bearer` and/or `authorize`.", { type: "config" });
-	const authRequired = tokens.length > 0 || auth?.authorize !== void 0;
-	if (!loopback && !authRequired) throw new McpServeError(`Refusing to serve MCP over http on non-loopback host "${host}" without auth. Set transport.auth ({ bearer } or { authorize }), or bind 127.0.0.1.`, {
+	if (auth && tokens.length === 0 && !auth.authorize && !auth.authenticate) throw new McpServeError("MCP http auth needs `bearer`, `authorize` and/or `authenticate`.", { type: "config" });
+	const authRequired = tokens.length > 0 || auth?.authorize !== void 0 || auth?.authenticate !== void 0;
+	if (!loopback && !authRequired) throw new McpServeError(`Refusing to serve MCP over http on non-loopback host "${host}" without auth. Set transport.auth ({ bearer }, { authorize } or { authenticate }), or bind 127.0.0.1.`, {
 		type: "config",
 		context: { host }
 	});
@@ -116,6 +117,7 @@ function resolveSettings(transport) {
 		drainTimeoutMs,
 		tokenDigests: tokens.map(digest),
 		authorize: auth?.authorize,
+		authenticate: auth?.authenticate,
 		authRequired,
 		allowedOrigins: new Set((transport.allowedOrigins ?? []).map(normalizeOrigin)),
 		allowedHosts: new Set((transport.allowedHosts ?? []).map((name) => hostnameOf(name)))
@@ -174,6 +176,7 @@ function sendEmpty(response, status, headers = {}) {
 async function startHttpServer(transport, dispatch) {
 	const settings = resolveSettings(transport);
 	const shutdown = new AbortController();
+	const requests = new McpServeRequests();
 	const inFlight = /* @__PURE__ */ new Set();
 	let closing;
 	const server = createServer((request, response) => {
@@ -181,7 +184,7 @@ async function startHttpServer(transport, dispatch) {
 			sendRefusal(response, 503, JSON_RPC_SERVER_ERROR, "Server is shutting down.", { connection: "close" });
 			return;
 		}
-		const work = handleRequest(request, response, settings, dispatch, shutdown.signal).catch(() => {
+		const work = handleRequest(request, response, settings, dispatch, shutdown.signal, requests).catch(() => {
 			sendRefusal(response, 500, JSON_RPC_SERVER_ERROR, "Internal server error.");
 		});
 		inFlight.add(work);
@@ -243,7 +246,7 @@ async function startHttpServer(transport, dispatch) {
 * Validate and answer one HTTP request: path → Host / Origin → auth →
 * method → headers → body → JSON-RPC dispatch.
 */
-async function handleRequest(request, response, settings, dispatch, signal) {
+async function handleRequest(request, response, settings, dispatch, signal, requests) {
 	const headers = flattenHeaders(request.headers);
 	const method = (request.method ?? "GET").toUpperCase();
 	const path = new URL(request.url ?? "/", "http://localhost").pathname;
@@ -265,8 +268,9 @@ async function handleRequest(request, response, settings, dispatch, signal) {
 		headers
 	};
 	if (request.socket.remoteAddress !== void 0) info.remoteAddress = request.socket.remoteAddress;
-	if (!await authorized(info, settings)) {
-		const challenge = settings.tokenDigests.length > 0 ? { "www-authenticate": "Bearer realm=\"mcp\"" } : {};
+	const authentication = await authorized(info, settings);
+	if (!authentication.allowed) {
+		const challenge = settings.tokenDigests.length > 0 || settings.authenticate ? { "www-authenticate": "Bearer realm=\"mcp\"" } : {};
 		sendRefusal(response, 401, JSON_RPC_SERVER_ERROR, "Unauthorized.", challenge);
 		return;
 	}
@@ -311,6 +315,7 @@ async function handleRequest(request, response, settings, dispatch, signal) {
 	const id = record.id;
 	if (typeof record.method === "string") {
 		if (typeof id !== "string" && typeof id !== "number") {
+			requests.cancel(record, cancellationScope(info));
 			sendEmpty(response, 202);
 			return;
 		}
@@ -320,10 +325,20 @@ async function handleRequest(request, response, settings, dispatch, signal) {
 			method: record.method
 		};
 		if (record.params !== void 0) rpcRequest.params = record.params;
-		sendJson(response, 200, await dispatch(rpcRequest, {
-			request: info,
-			signal
-		}));
+		const disconnected = new AbortController();
+		const onClose = () => disconnected.abort();
+		response.once("close", onClose);
+		try {
+			const rpcResponse = await requests.run(rpcRequest, {
+				request: info,
+				principal: authentication.principal,
+				signal: AbortSignal.any([signal, disconnected.signal])
+			}, (context) => dispatch(rpcRequest, context), cancellationScope(info));
+			if (rpcResponse === void 0) sendEmpty(response, 202);
+			else sendJson(response, 200, rpcResponse);
+		} finally {
+			response.off("close", onClose);
+		}
 		return;
 	}
 	if ((typeof id === "string" || typeof id === "number") && ("result" in record || "error" in record)) {
@@ -362,27 +377,50 @@ function originAllowed(origin, settings) {
 	if (settings.allowedOrigins.has(parsed.origin)) return true;
 	return (parsed.protocol === "http:" || parsed.protocol === "https:") && isLoopbackHost(parsed.hostname);
 }
-/**
-* Run the configured auth. Bearer tokens are compared in constant time
-* over SHA-256 digests (equal-length buffers for `timingSafeEqual`), and
-* every configured token is compared so the match position does not leak.
-* An `authorize` hook that throws denies the request.
-*/
 async function authorized(info, settings) {
-	if (!settings.authRequired) return true;
+	if (!settings.authRequired) return { allowed: true };
 	if (settings.tokenDigests.length > 0) {
 		const match = /^Bearer[ \t]+(.+)$/i.exec(info.headers.authorization ?? "");
 		const presented = digest(match?.[1]?.trim() ?? "");
 		let matched = false;
 		for (const expected of settings.tokenDigests) matched = timingSafeEqual(presented, expected) || matched;
-		if (!match || !matched) return false;
+		if (!match || !matched) return { allowed: false };
 	}
-	if (settings.authorize) try {
-		return await settings.authorize(info) === true;
+	try {
+		if (settings.authorize && await settings.authorize(info) !== true) return { allowed: false };
+		if (settings.authenticate) {
+			const principal = await settings.authenticate(info);
+			return principal === void 0 ? { allowed: false } : {
+				allowed: true,
+				principal
+			};
+		}
+		return { allowed: true };
 	} catch {
-		return false;
+		return { allowed: false };
 	}
-	return true;
+}
+/**
+* Stateless HTTP has no connection/session id. Repeat the caller's credential
+* and application headers on notifications; per-message transport headers do
+* not identify a caller. Hash the material rather than retaining secrets as keys.
+*/
+function cancellationScope(info) {
+	const transportHeaders = /* @__PURE__ */ new Set([
+		"host",
+		"origin",
+		"accept",
+		"accept-encoding",
+		"accept-language",
+		"connection",
+		"content-type",
+		"content-length",
+		"transfer-encoding",
+		"mcp-protocol-version",
+		"user-agent"
+	]);
+	const credentials = Object.entries(info.headers).filter(([name]) => !transportHeaders.has(name)).sort(([left], [right]) => left.localeCompare(right));
+	return digest(JSON.stringify([info.remoteAddress, credentials])).toString("hex");
 }
 /** True for `application/json` (any parameters, e.g. `; charset=utf-8`). */
 function isJsonContentType(contentType) {

package/esm/mcp/serve-http.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"serve-http.mjs","names":[],"sources":["../../../../../../../../packages/ai-tools/src/mcp/serve-http.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\";\nimport {\n  createServer,\n  type IncomingHttpHeaders,\n  type IncomingMessage,\n  type Server,\n  type ServerResponse,\n} from \"node:http\";\nimport { isIPv4, isIPv6 } from \"node:net\";\nimport type {\n  JsonRpcRequest,\n  JsonRpcResponse,\n  McpHttpAuth,\n  McpHttpRequestInfo,\n  McpHttpServeTransport,\n  McpServeCallContext,\n} from \"../contracts\";\nimport { McpServeError } from \"../errors\";\nimport { SUPPORTED_PROTOCOL_VERSIONS } from \"./protocol\";\n\n/**\n * MCP Streamable HTTP server transport for `ai.mcp.serve`.\n *\n * Implements the server side of the Streamable HTTP transport from the MCP\n * specification (https://modelcontextprotocol.io/specification/2025-11-25/basic/transports,\n * checked 2026-10-17) on `node:http`, with no SDK dependency:\n *\n * - one endpoint path; each POST carries exactly one JSON-RPC message\n *   (batches were removed from the protocol in 2025-06-18 and get 400);\n * - a request is answered with `Content-Type: application/json` (the spec\n *   lets a server pick JSON or SSE per request); a notification or a\n *   response is acknowledged with `202 Accepted` and no body;\n * - stateless: no `MCP-Session-Id` is issued (optional in the spec), so\n *   GET (server-initiated SSE stream) and DELETE (session end) answer\n *   `405 Method Not Allowed`, as the spec allows;\n * - an unsupported `MCP-Protocol-Version` header gets 400;\n * - security warning items: `Origin` is validated on every request (an\n *   invalid one gets 403), the default bind is `127.0.0.1`, and\n *   authentication is required for any non-loopback bind.\n */\n\n/** Default bind interface — loopback only. */\nconst DEFAULT_HOST = \"127.0.0.1\";\n\n/** Default endpoint path. */\nconst DEFAULT_PATH = \"/mcp\";\n\n/** Default request body cap: 1 MiB. */\nconst DEFAULT_MAX_BODY_BYTES = 1_048_576;\n\n/** Default time `close()` waits for in-flight requests. */\nconst DEFAULT_DRAIN_TIMEOUT_MS = 5_000;\n\n/** JSON-RPC codes used for transport-level error bodies. */\nconst JSON_RPC_PARSE_ERROR = -32700;\nconst JSON_RPC_INVALID_REQUEST = -32600;\n\n/** Generic server-defined JSON-RPC code for HTTP-level refusals (auth, origin, size). */\nconst JSON_RPC_SERVER_ERROR = -32000;\n\n/** Host names that always mean \"this machine\". */\nconst LOOPBACK_NAMES = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\"]);\n\n/** The function the transport pumps each JSON-RPC request through. */\nexport type McpHttpDispatch = (\n  request: JsonRpcRequest,\n  context: McpServeCallContext,\n) => Promise<JsonRpcResponse>;\n\n/** A bound HTTP endpoint. */\nexport type RunningMcpHttpServer = {\n  /** Full endpoint URL. */\n  url: string;\n  /** Drain in-flight requests (up to the drain timeout) and free the port. Idempotent. */\n  close(): Promise<void>;\n};\n\n/**\n * True when `host` names a loopback interface (`localhost`, `127.0.0.0/8`,\n * `::1`, or an IPv4-mapped `::ffff:127.x.x.x`).\n */\nexport function isLoopbackHost(host: string): boolean {\n  const normalized = host.trim().toLowerCase();\n\n  if (LOOPBACK_NAMES.has(normalized)) {\n    return true;\n  }\n\n  const unbracketed = normalized.replace(/^\\[|\\]$/g, \"\");\n  const mapped = unbracketed.startsWith(\"::ffff:\")\n    ? unbracketed.slice(\"::ffff:\".length)\n    : unbracketed;\n\n  return isIPv4(mapped) && mapped.startsWith(\"127.\");\n}\n\n/** Strip the port from a `Host` header value (`[::1]:3000` → `[::1]`, `a.b:80` → `a.b`). */\nfunction hostnameOf(hostHeader: string): string {\n  const value = hostHeader.trim().toLowerCase();\n\n  if (value.startsWith(\"[\")) {\n    const end = value.indexOf(\"]\");\n\n    return end === -1 ? value : value.slice(0, end + 1);\n  }\n\n  const colon = value.lastIndexOf(\":\");\n\n  return colon === -1 ? value : value.slice(0, colon);\n}\n\n/** SHA-256 digest — equal-length input for `timingSafeEqual`. */\nfunction digest(value: string): Buffer {\n  return createHash(\"sha256\").update(value, \"utf8\").digest();\n}\n\n/**\n * Validated, defaulted transport settings plus the precomputed security\n * material (token digests, origin / host allowlists).\n */\ntype ResolvedSettings = {\n  host: string;\n  port: number;\n  path: string;\n  loopback: boolean;\n  maxBodyBytes: number;\n  drainTimeoutMs: number;\n  tokenDigests: Buffer[];\n  authorize: McpHttpAuth[\"authorize\"];\n  authRequired: boolean;\n  allowedOrigins: Set<string>;\n  allowedHosts: Set<string>;\n};\n\n/** Normalise a configured origin to `scheme://host[:port]`, or throw a config error. */\nfunction normalizeOrigin(origin: string): string {\n  try {\n    return new URL(origin).origin;\n  } catch (cause) {\n    throw new McpServeError(`allowedOrigins entry \"${origin}\" is not a valid origin URL.`, {\n      type: \"config\",\n      cause,\n    });\n  }\n}\n\n/**\n * Validate and default the transport options. Throws {@link McpServeError}\n * (`\"config\"`) for a non-loopback bind without auth, an empty bearer\n * token, an `auth` with neither check, a bad path / port / limit.\n */\nfunction resolveSettings(transport: McpHttpServeTransport): ResolvedSettings {\n  const host = transport.host ?? DEFAULT_HOST;\n  const port = transport.port ?? 0;\n  const path = transport.path ?? DEFAULT_PATH;\n  const loopback = isLoopbackHost(host);\n  const auth = transport.auth;\n\n  if (!Number.isInteger(port) || port < 0 || port > 65_535) {\n    throw new McpServeError(`MCP http port must be an integer in 0–65535 (got ${port}).`, {\n      type: \"config\",\n    });\n  }\n\n  if (!path.startsWith(\"/\")) {\n    throw new McpServeError(`MCP http path must start with \"/\" (got \"${path}\").`, {\n      type: \"config\",\n    });\n  }\n\n  const maxBodyBytes = transport.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;\n\n  if (!Number.isInteger(maxBodyBytes) || maxBodyBytes <= 0) {\n    throw new McpServeError(\"MCP http maxBodyBytes must be a positive integer.\", {\n      type: \"config\",\n    });\n  }\n\n  const drainTimeoutMs = transport.drainTimeoutMs ?? DEFAULT_DRAIN_TIMEOUT_MS;\n\n  if (!Number.isFinite(drainTimeoutMs) || drainTimeoutMs < 0) {\n    throw new McpServeError(\"MCP http drainTimeoutMs must be zero or a positive number.\", {\n      type: \"config\",\n    });\n  }\n\n  const tokens =\n    auth?.bearer === undefined\n      ? []\n      : typeof auth.bearer === \"string\"\n        ? [auth.bearer]\n        : [...auth.bearer];\n\n  if (tokens.some((token) => token.length === 0)) {\n    throw new McpServeError(\"MCP http auth.bearer tokens must be non-empty strings.\", {\n      type: \"config\",\n    });\n  }\n\n  if (auth && auth.bearer !== undefined && tokens.length === 0) {\n    throw new McpServeError(\"MCP http auth.bearer needs at least one token.\", { type: \"config\" });\n  }\n\n  if (auth && tokens.length === 0 && !auth.authorize) {\n    throw new McpServeError(\"MCP http auth needs `bearer` and/or `authorize`.\", {\n      type: \"config\",\n    });\n  }\n\n  const authRequired = tokens.length > 0 || auth?.authorize !== undefined;\n\n  if (!loopback && !authRequired) {\n    throw new McpServeError(\n      `Refusing to serve MCP over http on non-loopback host \"${host}\" without auth. ` +\n        \"Set transport.auth ({ bearer } or { authorize }), or bind 127.0.0.1.\",\n      { type: \"config\", context: { host } },\n    );\n  }\n\n  return {\n    host,\n    port,\n    path,\n    loopback,\n    maxBodyBytes,\n    drainTimeoutMs,\n    tokenDigests: tokens.map(digest),\n    authorize: auth?.authorize,\n    authRequired,\n    allowedOrigins: new Set((transport.allowedOrigins ?? []).map(normalizeOrigin)),\n    allowedHosts: new Set((transport.allowedHosts ?? []).map((name) => hostnameOf(name))),\n  };\n}\n\n/** Flatten Node's header bag into lower-cased `name → value` strings. */\nfunction flattenHeaders(headers: IncomingHttpHeaders): Record<string, string> {\n  const flat: Record<string, string> = {};\n\n  for (const [name, value] of Object.entries(headers)) {\n    if (value === undefined) {\n      continue;\n    }\n\n    flat[name.toLowerCase()] = Array.isArray(value) ? value.join(\", \") : value;\n  }\n\n  return flat;\n}\n\n/** Write a JSON body with a status code. */\nfunction sendJson(\n  response: ServerResponse,\n  status: number,\n  body: unknown,\n  headers: Record<string, string> = {},\n): void {\n  if (response.headersSent || response.destroyed) {\n    return;\n  }\n\n  const payload = JSON.stringify(body);\n\n  response.writeHead(status, {\n    ...headers,\n    \"content-type\": \"application/json\",\n    \"content-length\": Buffer.byteLength(payload).toString(),\n  });\n  response.end(payload);\n}\n\n/**\n * Write an HTTP-level refusal: the status plus a JSON-RPC error body with\n * no request id (the spec allows such a body on 4xx transport errors).\n */\nfunction sendRefusal(\n  response: ServerResponse,\n  status: number,\n  code: number,\n  message: string,\n  headers: Record<string, string> = {},\n): void {\n  sendJson(response, status, { jsonrpc: \"2.0\", id: null, error: { code, message } }, headers);\n}\n\n/** Write an empty-bodied status (202 / 405). */\nfunction sendEmpty(\n  response: ServerResponse,\n  status: number,\n  headers: Record<string, string> = {},\n): void {\n  if (response.headersSent || response.destroyed) {\n    return;\n  }\n\n  response.writeHead(status, headers);\n  response.end();\n}\n\n/**\n * Bind an MCP Streamable HTTP endpoint and pump each JSON-RPC request\n * through `dispatch`. Resolves once the port is bound.\n *\n * Throws {@link McpServeError}: `\"config\"` for invalid / unsafe options\n * (checked before anything binds), `\"listen\"` when binding fails.\n *\n * @param transport - The http transport options.\n * @param dispatch - Maps one JSON-RPC request (plus call context) to its response.\n */\nexport async function startHttpServer(\n  transport: McpHttpServeTransport,\n  dispatch: McpHttpDispatch,\n): Promise<RunningMcpHttpServer> {\n  const settings = resolveSettings(transport);\n  const shutdown = new AbortController();\n  const inFlight = new Set<Promise<void>>();\n  let closing: Promise<void> | undefined;\n\n  const server: Server = createServer((request, response) => {\n    if (closing) {\n      sendRefusal(response, 503, JSON_RPC_SERVER_ERROR, \"Server is shutting down.\", {\n        connection: \"close\",\n      });\n\n      return;\n    }\n\n    const work = handleRequest(request, response, settings, dispatch, shutdown.signal).catch(() => {\n      sendRefusal(response, 500, JSON_RPC_SERVER_ERROR, \"Internal server error.\");\n    });\n\n    inFlight.add(work);\n    void work.finally(() => {\n      inFlight.delete(work);\n\n      if (closing) {\n        server.closeIdleConnections();\n      }\n    });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    const onError = (cause: Error) => {\n      reject(\n        new McpServeError(\n          `MCP http server could not listen on ${settings.host}:${settings.port}: ${cause.message}`,\n          { type: \"listen\", cause, context: { host: settings.host, port: settings.port } },\n        ),\n      );\n    };\n\n    server.once(\"error\", onError);\n    server.listen(settings.port, settings.host, () => {\n      server.off(\"error\", onError);\n      resolve();\n    });\n  });\n\n  const address = server.address();\n  const boundPort = typeof address === \"object\" && address !== null ? address.port : settings.port;\n  const urlHost = isIPv6(settings.host) ? `[${settings.host}]` : settings.host;\n  const url = `http://${urlHost}:${boundPort}${settings.path}`;\n\n  const close = (): Promise<void> => {\n    if (closing) {\n      return closing;\n    }\n\n    closing = (async () => {\n      const closed = new Promise<void>((resolve) => {\n        server.close(() => resolve());\n      });\n\n      server.closeIdleConnections();\n\n      if (inFlight.size > 0) {\n        let timer: ReturnType<typeof setTimeout> | undefined;\n        const timedOut = new Promise<\"timeout\">((resolve) => {\n          timer = setTimeout(() => resolve(\"timeout\"), settings.drainTimeoutMs);\n        });\n\n        const outcome = await Promise.race([\n          Promise.allSettled([...inFlight]).then(() => \"drained\" as const),\n          timedOut,\n        ]);\n\n        clearTimeout(timer);\n\n        if (outcome === \"timeout\") {\n          shutdown.abort();\n          server.closeAllConnections();\n        }\n      }\n\n      server.closeIdleConnections();\n      await closed;\n    })();\n\n    return closing;\n  };\n\n  return { url, close };\n}\n\n/**\n * Validate and answer one HTTP request: path → Host / Origin → auth →\n * method → headers → body → JSON-RPC dispatch.\n */\nasync function handleRequest(\n  request: IncomingMessage,\n  response: ServerResponse,\n  settings: ResolvedSettings,\n  dispatch: McpHttpDispatch,\n  signal: AbortSignal,\n): Promise<void> {\n  const headers = flattenHeaders(request.headers);\n  const method = (request.method ?? \"GET\").toUpperCase();\n  const path = new URL(request.url ?? \"/\", \"http://localhost\").pathname;\n\n  // DNS-rebinding guards apply to every request on every path.\n  if (!hostAllowed(headers.host, settings)) {\n    sendRefusal(response, 403, JSON_RPC_SERVER_ERROR, \"Forbidden: Host header not allowed.\");\n\n    return;\n  }\n\n  if (!originAllowed(headers.origin, settings)) {\n    sendRefusal(response, 403, JSON_RPC_SERVER_ERROR, \"Forbidden: Origin not allowed.\");\n\n    return;\n  }\n\n  if (path !== settings.path) {\n    sendRefusal(response, 404, JSON_RPC_SERVER_ERROR, \"Not found.\");\n\n    return;\n  }\n\n  const info: McpHttpRequestInfo = { method, path, headers };\n\n  if (request.socket.remoteAddress !== undefined) {\n    info.remoteAddress = request.socket.remoteAddress;\n  }\n\n  if (!(await authorized(info, settings))) {\n    const challenge: Record<string, string> =\n      settings.tokenDigests.length > 0 ? { \"www-authenticate\": 'Bearer realm=\"mcp\"' } : {};\n\n    sendRefusal(response, 401, JSON_RPC_SERVER_ERROR, \"Unauthorized.\", challenge);\n\n    return;\n  }\n\n  if (method !== \"POST\") {\n    // Stateless server: no server-initiated SSE stream (GET) and no\n    // session to terminate (DELETE). The spec allows 405 for both.\n    sendEmpty(response, 405, { allow: \"POST\" });\n\n    return;\n  }\n\n  const protocolVersion = headers[\"mcp-protocol-version\"];\n\n  if (protocolVersion !== undefined && !SUPPORTED_PROTOCOL_VERSIONS.includes(protocolVersion)) {\n    sendRefusal(\n      response,\n      400,\n      JSON_RPC_SERVER_ERROR,\n      `Unsupported MCP-Protocol-Version \"${protocolVersion}\" (supported: ${SUPPORTED_PROTOCOL_VERSIONS.join(\", \")}).`,\n    );\n\n    return;\n  }\n\n  if (!isJsonContentType(headers[\"content-type\"])) {\n    sendRefusal(response, 415, JSON_RPC_SERVER_ERROR, \"Content-Type must be application/json.\");\n\n    return;\n  }\n\n  if (!acceptsJson(headers.accept)) {\n    sendRefusal(response, 406, JSON_RPC_SERVER_ERROR, \"Accept must allow application/json.\");\n\n    return;\n  }\n\n  const body = await readBody(request, settings.maxBodyBytes);\n\n  if (body.type === \"too-large\") {\n    sendRefusal(\n      response,\n      413,\n      JSON_RPC_SERVER_ERROR,\n      `Request body exceeds ${settings.maxBodyBytes} bytes.`,\n      { connection: \"close\" },\n    );\n\n    return;\n  }\n\n  let message: unknown;\n\n  try {\n    message = JSON.parse(body.text);\n  } catch {\n    sendRefusal(response, 400, JSON_RPC_PARSE_ERROR, \"Parse error: body is not valid JSON.\");\n\n    return;\n  }\n\n  if (typeof message !== \"object\" || message === null || Array.isArray(message)) {\n    sendRefusal(\n      response,\n      400,\n      JSON_RPC_INVALID_REQUEST,\n      \"Invalid request: the body must be one JSON-RPC message (batches are not supported).\",\n    );\n\n    return;\n  }\n\n  const record = message as Record<string, unknown>;\n\n  if (record.jsonrpc !== \"2.0\") {\n    sendRefusal(response, 400, JSON_RPC_INVALID_REQUEST, 'Invalid request: jsonrpc must be \"2.0\".');\n\n    return;\n  }\n\n  const id = record.id;\n\n  if (typeof record.method === \"string\") {\n    if (typeof id !== \"string\" && typeof id !== \"number\") {\n      // A notification (notifications/initialized, notifications/cancelled…).\n      sendEmpty(response, 202);\n\n      return;\n    }\n\n    const rpcRequest: JsonRpcRequest = { jsonrpc: \"2.0\", id, method: record.method };\n\n    if (record.params !== undefined) {\n      rpcRequest.params = record.params;\n    }\n\n    const rpcResponse = await dispatch(rpcRequest, { request: info, signal });\n\n    sendJson(response, 200, rpcResponse);\n\n    return;\n  }\n\n  if (\n    (typeof id === \"string\" || typeof id === \"number\") &&\n    (\"result\" in record || \"error\" in record)\n  ) {\n    // A response to a server-initiated request; this server sends none, so acknowledge.\n    sendEmpty(response, 202);\n\n    return;\n  }\n\n  sendRefusal(response, 400, JSON_RPC_INVALID_REQUEST, \"Invalid request: not a JSON-RPC message.\");\n}\n\n/**\n * Host-header check. While bound to loopback only loopback names (plus\n * `allowedHosts`) are accepted, so a DNS-rebound name pointing at\n * 127.0.0.1 is refused. Off loopback the check applies only when\n * `allowedHosts` is set.\n */\nfunction hostAllowed(hostHeader: string | undefined, settings: ResolvedSettings): boolean {\n  if (!settings.loopback && settings.allowedHosts.size === 0) {\n    return true;\n  }\n\n  if (hostHeader === undefined) {\n    return false;\n  }\n\n  const name = hostnameOf(hostHeader);\n\n  if (settings.allowedHosts.has(name)) {\n    return true;\n  }\n\n  return settings.loopback && isLoopbackHost(name);\n}\n\n/**\n * Origin check (MCP Streamable HTTP security warning). No `Origin` header —\n * a non-browser client — passes; otherwise the origin must be a loopback\n * `http(s)` origin or listed in `allowedOrigins`. `null` and unparsable\n * origins are refused.\n */\nfunction originAllowed(origin: string | undefined, settings: ResolvedSettings): boolean {\n  if (origin === undefined) {\n    return true;\n  }\n\n  let parsed: URL;\n\n  try {\n    parsed = new URL(origin);\n  } catch {\n    return false;\n  }\n\n  if (settings.allowedOrigins.has(parsed.origin)) {\n    return true;\n  }\n\n  return (\n    (parsed.protocol === \"http:\" || parsed.protocol === \"https:\") && isLoopbackHost(parsed.hostname)\n  );\n}\n\n/**\n * Run the configured auth. Bearer tokens are compared in constant time\n * over SHA-256 digests (equal-length buffers for `timingSafeEqual`), and\n * every configured token is compared so the match position does not leak.\n * An `authorize` hook that throws denies the request.\n */\nasync function authorized(info: McpHttpRequestInfo, settings: ResolvedSettings): Promise<boolean> {\n  if (!settings.authRequired) {\n    return true;\n  }\n\n  if (settings.tokenDigests.length > 0) {\n    const match = /^Bearer[ \\t]+(.+)$/i.exec(info.headers.authorization ?? \"\");\n    const presented = digest(match?.[1]?.trim() ?? \"\");\n    let matched = false;\n\n    for (const expected of settings.tokenDigests) {\n      matched = timingSafeEqual(presented, expected) || matched;\n    }\n\n    if (!match || !matched) {\n      return false;\n    }\n  }\n\n  if (settings.authorize) {\n    try {\n      return (await settings.authorize(info)) === true;\n    } catch {\n      return false;\n    }\n  }\n\n  return true;\n}\n\n/** True for `application/json` (any parameters, e.g. `; charset=utf-8`). */\nfunction isJsonContentType(contentType: string | undefined): boolean {\n  return contentType?.split(\";\")[0]?.trim().toLowerCase() === \"application/json\";\n}\n\n/**\n * True when the `Accept` header allows a JSON reply. Clients are required\n * to list both `application/json` and `text/event-stream`; this server\n * always answers JSON, so it only insists on that half. A missing header\n * is accepted.\n */\nfunction acceptsJson(accept: string | undefined): boolean {\n  if (accept === undefined || accept.trim() === \"\") {\n    return true;\n  }\n\n  return accept\n    .split(\",\")\n    .map((part) => part.split(\";\")[0]?.trim().toLowerCase())\n    .some((type) => type === \"application/json\" || type === \"application/*\" || type === \"*/*\");\n}\n\n/** The outcome of reading a request body. */\ntype BodyResult = { type: \"ok\"; text: string } | { type: \"too-large\" };\n\n/**\n * Read the request body as UTF-8, refusing anything over `limit` bytes —\n * up front from `Content-Length`, and while streaming for chunked bodies.\n * A refused body is left unread; the 413 response closes the connection.\n */\nfunction readBody(request: IncomingMessage, limit: number): Promise<BodyResult> {\n  const declared = Number(request.headers[\"content-length\"]);\n\n  if (Number.isFinite(declared) && declared > limit) {\n    return Promise.resolve({ type: \"too-large\" });\n  }\n\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    let done = false;\n\n    const finish = (result: BodyResult) => {\n      if (!done) {\n        done = true;\n        resolve(result);\n      }\n    };\n\n    request.on(\"data\", (chunk: Buffer) => {\n      if (done) {\n        return;\n      }\n\n      size += chunk.length;\n\n      if (size > limit) {\n        request.pause();\n        finish({ type: \"too-large\" });\n\n        return;\n      }\n\n      chunks.push(chunk);\n    });\n    request.on(\"end\", () => finish({ type: \"ok\", text: Buffer.concat(chunks).toString(\"utf8\") }));\n    request.on(\"error\", (error) => {\n      if (!done) {\n        done = true;\n        reject(error);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,MAAM,eAAe;;AAGrB,MAAM,eAAe;;AAGrB,MAAM,yBAAyB;;AAG/B,MAAM,2BAA2B;;AAGjC,MAAM,uBAAuB;AAC7B,MAAM,2BAA2B;;AAGjC,MAAM,wBAAwB;;AAG9B,MAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;AAAO,CAAC;;;;;AAoBzE,SAAgB,eAAe,MAAuB;CACpD,MAAM,aAAa,KAAK,KAAK,CAAC,CAAC,YAAY;CAE3C,IAAI,eAAe,IAAI,UAAU,GAC/B,OAAO;CAGT,MAAM,cAAc,WAAW,QAAQ,YAAY,EAAE;CACrD,MAAM,SAAS,YAAY,WAAW,SAAS,IAC3C,YAAY,MAAM,CAAgB,IAClC;CAEJ,OAAO,OAAO,MAAM,KAAK,OAAO,WAAW,MAAM;AACnD;;AAGA,SAAS,WAAW,YAA4B;CAC9C,MAAM,QAAQ,WAAW,KAAK,CAAC,CAAC,YAAY;CAE5C,IAAI,MAAM,WAAW,GAAG,GAAG;EACzB,MAAM,MAAM,MAAM,QAAQ,GAAG;EAE7B,OAAO,QAAQ,KAAK,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC;CACpD;CAEA,MAAM,QAAQ,MAAM,YAAY,GAAG;CAEnC,OAAO,UAAU,KAAK,QAAQ,MAAM,MAAM,GAAG,KAAK;AACpD;;AAGA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,MAAM,CAAC,CAAC,OAAO;AAC3D;;AAqBA,SAAS,gBAAgB,QAAwB;CAC/C,IAAI;EACF,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC;CACzB,SAAS,OAAO;EACd,MAAM,IAAI,cAAc,yBAAyB,OAAO,+BAA+B;GACrF,MAAM;GACN;EACF,CAAC;CACH;AACF;;;;;;AAOA,SAAS,gBAAgB,WAAoD;CAC3E,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,WAAW,eAAe,IAAI;CACpC,MAAM,OAAO,UAAU;CAEvB,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAChD,MAAM,IAAI,cAAc,oDAAoD,KAAK,KAAK,EACpF,MAAM,SACR,CAAC;CAGH,IAAI,CAAC,KAAK,WAAW,GAAG,GACtB,MAAM,IAAI,cAAc,2CAA2C,KAAK,MAAM,EAC5E,MAAM,SACR,CAAC;CAGH,MAAM,eAAe,UAAU,gBAAgB;CAE/C,IAAI,CAAC,OAAO,UAAU,YAAY,KAAK,gBAAgB,GACrD,MAAM,IAAI,cAAc,qDAAqD,EAC3E,MAAM,SACR,CAAC;CAGH,MAAM,iBAAiB,UAAU,kBAAkB;CAEnD,IAAI,CAAC,OAAO,SAAS,cAAc,KAAK,iBAAiB,GACvD,MAAM,IAAI,cAAc,8DAA8D,EACpF,MAAM,SACR,CAAC;CAGH,MAAM,SACJ,MAAM,WAAW,SACb,CAAC,IACD,OAAO,KAAK,WAAW,WACrB,CAAC,KAAK,MAAM,IACZ,CAAC,GAAG,KAAK,MAAM;CAEvB,IAAI,OAAO,MAAM,UAAU,MAAM,WAAW,CAAC,GAC3C,MAAM,IAAI,cAAc,0DAA0D,EAChF,MAAM,SACR,CAAC;CAGH,IAAI,QAAQ,KAAK,WAAW,UAAa,OAAO,WAAW,GACzD,MAAM,IAAI,cAAc,kDAAkD,EAAE,MAAM,SAAS,CAAC;CAG9F,IAAI,QAAQ,OAAO,WAAW,KAAK,CAAC,KAAK,WACvC,MAAM,IAAI,cAAc,oDAAoD,EAC1E,MAAM,SACR,CAAC;CAGH,MAAM,eAAe,OAAO,SAAS,KAAK,MAAM,cAAc;CAE9D,IAAI,CAAC,YAAY,CAAC,cAChB,MAAM,IAAI,cACR,yDAAyD,KAAK,uFAE9D;EAAE,MAAM;EAAU,SAAS,EAAE,KAAK;CAAE,CACtC;CAGF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA,cAAc,OAAO,IAAI,MAAM;EAC/B,WAAW,MAAM;EACjB;EACA,gBAAgB,IAAI,KAAK,UAAU,kBAAkB,CAAC,EAAC,CAAE,IAAI,eAAe,CAAC;EAC7E,cAAc,IAAI,KAAK,UAAU,gBAAgB,CAAC,EAAC,CAAE,KAAK,SAAS,WAAW,IAAI,CAAC,CAAC;CACtF;AACF;;AAGA,SAAS,eAAe,SAAsD;CAC5E,MAAM,OAA+B,CAAC;CAEtC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAAG;EACnD,IAAI,UAAU,QACZ;EAGF,KAAK,KAAK,YAAY,KAAK,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI;CACvE;CAEA,OAAO;AACT;;AAGA,SAAS,SACP,UACA,QACA,MACA,UAAkC,CAAC,GAC7B;CACN,IAAI,SAAS,eAAe,SAAS,WACnC;CAGF,MAAM,UAAU,KAAK,UAAU,IAAI;CAEnC,SAAS,UAAU,QAAQ;EACzB,GAAG;EACH,gBAAgB;EAChB,kBAAkB,OAAO,WAAW,OAAO,CAAC,CAAC,SAAS;CACxD,CAAC;CACD,SAAS,IAAI,OAAO;AACtB;;;;;AAMA,SAAS,YACP,UACA,QACA,MACA,SACA,UAAkC,CAAC,GAC7B;CACN,SAAS,UAAU,QAAQ;EAAE,SAAS;EAAO,IAAI;EAAM,OAAO;GAAE;GAAM;EAAQ;CAAE,GAAG,OAAO;AAC5F;;AAGA,SAAS,UACP,UACA,QACA,UAAkC,CAAC,GAC7B;CACN,IAAI,SAAS,eAAe,SAAS,WACnC;CAGF,SAAS,UAAU,QAAQ,OAAO;CAClC,SAAS,IAAI;AACf;;;;;;;;;;;AAYA,eAAsB,gBACpB,WACA,UAC+B;CAC/B,MAAM,WAAW,gBAAgB,SAAS;CAC1C,MAAM,WAAW,IAAI,gBAAgB;CACrC,MAAM,2BAAW,IAAI,IAAmB;CACxC,IAAI;CAEJ,MAAM,SAAiB,cAAc,SAAS,aAAa;EACzD,IAAI,SAAS;GACX,YAAY,UAAU,KAAK,uBAAuB,4BAA4B,EAC5E,YAAY,QACd,CAAC;GAED;EACF;EAEA,MAAM,OAAO,cAAc,SAAS,UAAU,UAAU,UAAU,SAAS,MAAM,CAAC,CAAC,YAAY;GAC7F,YAAY,UAAU,KAAK,uBAAuB,wBAAwB;EAC5E,CAAC;EAED,SAAS,IAAI,IAAI;EACjB,AAAK,KAAK,cAAc;GACtB,SAAS,OAAO,IAAI;GAEpB,IAAI,SACF,OAAO,qBAAqB;EAEhC,CAAC;CACH,CAAC;CAED,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,MAAM,WAAW,UAAiB;GAChC,OACE,IAAI,cACF,uCAAuC,SAAS,KAAK,GAAG,SAAS,KAAK,IAAI,MAAM,WAChF;IAAE,MAAM;IAAU;IAAO,SAAS;KAAE,MAAM,SAAS;KAAM,MAAM,SAAS;IAAK;GAAE,CACjF,CACF;EACF;EAEA,OAAO,KAAK,SAAS,OAAO;EAC5B,OAAO,OAAO,SAAS,MAAM,SAAS,YAAY;GAChD,OAAO,IAAI,SAAS,OAAO;GAC3B,QAAQ;EACV,CAAC;CACH,CAAC;CAED,MAAM,UAAU,OAAO,QAAQ;CAC/B,MAAM,YAAY,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO,SAAS;CAE5F,MAAM,MAAM,UADI,OAAO,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,KAAK,SAAS,KAC1C,GAAG,YAAY,SAAS;CAEtD,MAAM,cAA6B;EACjC,IAAI,SACF,OAAO;EAGT,WAAW,YAAY;GACrB,MAAM,SAAS,IAAI,SAAe,YAAY;IAC5C,OAAO,YAAY,QAAQ,CAAC;GAC9B,CAAC;GAED,OAAO,qBAAqB;GAE5B,IAAI,SAAS,OAAO,GAAG;IACrB,IAAI;IACJ,MAAM,WAAW,IAAI,SAAoB,YAAY;KACnD,QAAQ,iBAAiB,QAAQ,SAAS,GAAG,SAAS,cAAc;IACtE,CAAC;IAED,MAAM,UAAU,MAAM,QAAQ,KAAK,CACjC,QAAQ,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,SAAkB,GAC/D,QACF,CAAC;IAED,aAAa,KAAK;IAElB,IAAI,YAAY,WAAW;KACzB,SAAS,MAAM;KACf,OAAO,oBAAoB;IAC7B;GACF;GAEA,OAAO,qBAAqB;GAC5B,MAAM;EACR,EAAC,CAAE;EAEH,OAAO;CACT;CAEA,OAAO;EAAE;EAAK;CAAM;AACtB;;;;;AAMA,eAAe,cACb,SACA,UACA,UACA,UACA,QACe;CACf,MAAM,UAAU,eAAe,QAAQ,OAAO;CAC9C,MAAM,UAAU,QAAQ,UAAU,MAAK,CAAE,YAAY;CACrD,MAAM,OAAO,IAAI,IAAI,QAAQ,OAAO,KAAK,kBAAkB,CAAC,CAAC;CAG7D,IAAI,CAAC,YAAY,QAAQ,MAAM,QAAQ,GAAG;EACxC,YAAY,UAAU,KAAK,uBAAuB,qCAAqC;EAEvF;CACF;CAEA,IAAI,CAAC,cAAc,QAAQ,QAAQ,QAAQ,GAAG;EAC5C,YAAY,UAAU,KAAK,uBAAuB,gCAAgC;EAElF;CACF;CAEA,IAAI,SAAS,SAAS,MAAM;EAC1B,YAAY,UAAU,KAAK,uBAAuB,YAAY;EAE9D;CACF;CAEA,MAAM,OAA2B;EAAE;EAAQ;EAAM;CAAQ;CAEzD,IAAI,QAAQ,OAAO,kBAAkB,QACnC,KAAK,gBAAgB,QAAQ,OAAO;CAGtC,IAAI,CAAE,MAAM,WAAW,MAAM,QAAQ,GAAI;EACvC,MAAM,YACJ,SAAS,aAAa,SAAS,IAAI,EAAE,oBAAoB,uBAAqB,IAAI,CAAC;EAErF,YAAY,UAAU,KAAK,uBAAuB,iBAAiB,SAAS;EAE5E;CACF;CAEA,IAAI,WAAW,QAAQ;EAGrB,UAAU,UAAU,KAAK,EAAE,OAAO,OAAO,CAAC;EAE1C;CACF;CAEA,MAAM,kBAAkB,QAAQ;CAEhC,IAAI,oBAAoB,UAAa,CAAC,4BAA4B,SAAS,eAAe,GAAG;EAC3F,YACE,UACA,KACA,uBACA,qCAAqC,gBAAgB,gBAAgB,4BAA4B,KAAK,IAAI,EAAE,GAC9G;EAEA;CACF;CAEA,IAAI,CAAC,kBAAkB,QAAQ,eAAe,GAAG;EAC/C,YAAY,UAAU,KAAK,uBAAuB,wCAAwC;EAE1F;CACF;CAEA,IAAI,CAAC,YAAY,QAAQ,MAAM,GAAG;EAChC,YAAY,UAAU,KAAK,uBAAuB,qCAAqC;EAEvF;CACF;CAEA,MAAM,OAAO,MAAM,SAAS,SAAS,SAAS,YAAY;CAE1D,IAAI,KAAK,SAAS,aAAa;EAC7B,YACE,UACA,KACA,uBACA,wBAAwB,SAAS,aAAa,UAC9C,EAAE,YAAY,QAAQ,CACxB;EAEA;CACF;CAEA,IAAI;CAEJ,IAAI;EACF,UAAU,KAAK,MAAM,KAAK,IAAI;CAChC,QAAQ;EACN,YAAY,UAAU,KAAK,sBAAsB,sCAAsC;EAEvF;CACF;CAEA,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,QAAQ,OAAO,GAAG;EAC7E,YACE,UACA,KACA,0BACA,qFACF;EAEA;CACF;CAEA,MAAM,SAAS;CAEf,IAAI,OAAO,YAAY,OAAO;EAC5B,YAAY,UAAU,KAAK,0BAA0B,2CAAyC;EAE9F;CACF;CAEA,MAAM,KAAK,OAAO;CAElB,IAAI,OAAO,OAAO,WAAW,UAAU;EACrC,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,UAAU;GAEpD,UAAU,UAAU,GAAG;GAEvB;EACF;EAEA,MAAM,aAA6B;GAAE,SAAS;GAAO;GAAI,QAAQ,OAAO;EAAO;EAE/E,IAAI,OAAO,WAAW,QACpB,WAAW,SAAS,OAAO;EAK7B,SAAS,UAAU,KAAK,MAFE,SAAS,YAAY;GAAE,SAAS;GAAM;EAAO,CAAC,CAErC;EAEnC;CACF;CAEA,KACG,OAAO,OAAO,YAAY,OAAO,OAAO,cACxC,YAAY,UAAU,WAAW,SAClC;EAEA,UAAU,UAAU,GAAG;EAEvB;CACF;CAEA,YAAY,UAAU,KAAK,0BAA0B,0CAA0C;AACjG;;;;;;;AAQA,SAAS,YAAY,YAAgC,UAAqC;CACxF,IAAI,CAAC,SAAS,YAAY,SAAS,aAAa,SAAS,GACvD,OAAO;CAGT,IAAI,eAAe,QACjB,OAAO;CAGT,MAAM,OAAO,WAAW,UAAU;CAElC,IAAI,SAAS,aAAa,IAAI,IAAI,GAChC,OAAO;CAGT,OAAO,SAAS,YAAY,eAAe,IAAI;AACjD;;;;;;;AAQA,SAAS,cAAc,QAA4B,UAAqC;CACtF,IAAI,WAAW,QACb,OAAO;CAGT,IAAI;CAEJ,IAAI;EACF,SAAS,IAAI,IAAI,MAAM;CACzB,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,SAAS,eAAe,IAAI,OAAO,MAAM,GAC3C,OAAO;CAGT,QACG,OAAO,aAAa,WAAW,OAAO,aAAa,aAAa,eAAe,OAAO,QAAQ;AAEnG;;;;;;;AAQA,eAAe,WAAW,MAA0B,UAA8C;CAChG,IAAI,CAAC,SAAS,cACZ,OAAO;CAGT,IAAI,SAAS,aAAa,SAAS,GAAG;EACpC,MAAM,QAAQ,sBAAsB,KAAK,KAAK,QAAQ,iBAAiB,EAAE;EACzE,MAAM,YAAY,OAAO,QAAQ,EAAE,EAAE,KAAK,KAAK,EAAE;EACjD,IAAI,UAAU;EAEd,KAAK,MAAM,YAAY,SAAS,cAC9B,UAAU,gBAAgB,WAAW,QAAQ,KAAK;EAGpD,IAAI,CAAC,SAAS,CAAC,SACb,OAAO;CAEX;CAEA,IAAI,SAAS,WACX,IAAI;EACF,OAAQ,MAAM,SAAS,UAAU,IAAI,MAAO;CAC9C,QAAQ;EACN,OAAO;CACT;CAGF,OAAO;AACT;;AAGA,SAAS,kBAAkB,aAA0C;CACnE,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MAAM;AAC9D;;;;;;;AAQA,SAAS,YAAY,QAAqC;CACxD,IAAI,WAAW,UAAa,OAAO,KAAK,MAAM,IAC5C,OAAO;CAGT,OAAO,OACJ,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CACvD,MAAM,SAAS,SAAS,sBAAsB,SAAS,mBAAmB,SAAS,KAAK;AAC7F;;;;;;AAUA,SAAS,SAAS,SAA0B,OAAoC;CAC9E,MAAM,WAAW,OAAO,QAAQ,QAAQ,iBAAiB;CAEzD,IAAI,OAAO,SAAS,QAAQ,KAAK,WAAW,OAC1C,OAAO,QAAQ,QAAQ,EAAE,MAAM,YAAY,CAAC;CAG9C,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,SAAmB,CAAC;EAC1B,IAAI,OAAO;EACX,IAAI,OAAO;EAEX,MAAM,UAAU,WAAuB;GACrC,IAAI,CAAC,MAAM;IACT,OAAO;IACP,QAAQ,MAAM;GAChB;EACF;EAEA,QAAQ,GAAG,SAAS,UAAkB;GACpC,IAAI,MACF;GAGF,QAAQ,MAAM;GAEd,IAAI,OAAO,OAAO;IAChB,QAAQ,MAAM;IACd,OAAO,EAAE,MAAM,YAAY,CAAC;IAE5B;GACF;GAEA,OAAO,KAAK,KAAK;EACnB,CAAC;EACD,QAAQ,GAAG,aAAa,OAAO;GAAE,MAAM;GAAM,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;EAAE,CAAC,CAAC;EAC5F,QAAQ,GAAG,UAAU,UAAU;GAC7B,IAAI,CAAC,MAAM;IACT,OAAO;IACP,OAAO,KAAK;GACd;EACF,CAAC;CACH,CAAC;AACH"}
+{"version":3,"file":"serve-http.mjs","names":[],"sources":["../../../../../../../../packages/ai-tools/src/mcp/serve-http.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\";\nimport {\n  createServer,\n  type IncomingHttpHeaders,\n  type IncomingMessage,\n  type Server,\n  type ServerResponse,\n} from \"node:http\";\nimport { isIPv4, isIPv6 } from \"node:net\";\nimport type {\n  JsonRpcRequest,\n  JsonRpcResponse,\n  McpHttpAuth,\n  McpHttpRequestInfo,\n  McpHttpServeTransport,\n  McpServeCallContext,\n} from \"../contracts\";\nimport { McpServeError } from \"../errors\";\nimport { SUPPORTED_PROTOCOL_VERSIONS } from \"./protocol\";\nimport { McpServeRequests } from \"./serve-requests\";\n\n/**\n * MCP Streamable HTTP server transport for `ai.mcp.serve`.\n *\n * Implements the server side of the Streamable HTTP transport from the MCP\n * specification (https://modelcontextprotocol.io/specification/2025-11-25/basic/transports,\n * checked 2026-10-17) on `node:http`, with no SDK dependency:\n *\n * - one endpoint path; each POST carries exactly one JSON-RPC message\n *   (batches were removed from the protocol in 2025-06-18 and get 400);\n * - a request is answered with `Content-Type: application/json` (the spec\n *   lets a server pick JSON or SSE per request); a notification or a\n *   response is acknowledged with `202 Accepted` and no body;\n * - stateless: no `MCP-Session-Id` is issued (optional in the spec), so\n *   GET (server-initiated SSE stream) and DELETE (session end) answer\n *   `405 Method Not Allowed`, as the spec allows;\n * - an unsupported `MCP-Protocol-Version` header gets 400;\n * - security warning items: `Origin` is validated on every request (an\n *   invalid one gets 403), the default bind is `127.0.0.1`, and\n *   authentication is required for any non-loopback bind.\n */\n\n/** Default bind interface — loopback only. */\nconst DEFAULT_HOST = \"127.0.0.1\";\n\n/** Default endpoint path. */\nconst DEFAULT_PATH = \"/mcp\";\n\n/** Default request body cap: 1 MiB. */\nconst DEFAULT_MAX_BODY_BYTES = 1_048_576;\n\n/** Default time `close()` waits for in-flight requests. */\nconst DEFAULT_DRAIN_TIMEOUT_MS = 5_000;\n\n/** JSON-RPC codes used for transport-level error bodies. */\nconst JSON_RPC_PARSE_ERROR = -32700;\nconst JSON_RPC_INVALID_REQUEST = -32600;\n\n/** Generic server-defined JSON-RPC code for HTTP-level refusals (auth, origin, size). */\nconst JSON_RPC_SERVER_ERROR = -32000;\n\n/** Host names that always mean \"this machine\". */\nconst LOOPBACK_NAMES = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\"]);\n\n/** The function the transport pumps each JSON-RPC request through. */\nexport type McpHttpDispatch = (\n  request: JsonRpcRequest,\n  context: McpServeCallContext,\n) => Promise<JsonRpcResponse>;\n\n/** A bound HTTP endpoint. */\nexport type RunningMcpHttpServer = {\n  /** Full endpoint URL. */\n  url: string;\n  /** Drain in-flight requests (up to the drain timeout) and free the port. Idempotent. */\n  close(): Promise<void>;\n};\n\n/**\n * True when `host` names a loopback interface (`localhost`, `127.0.0.0/8`,\n * `::1`, or an IPv4-mapped `::ffff:127.x.x.x`).\n */\nexport function isLoopbackHost(host: string): boolean {\n  const normalized = host.trim().toLowerCase();\n\n  if (LOOPBACK_NAMES.has(normalized)) {\n    return true;\n  }\n\n  const unbracketed = normalized.replace(/^\\[|\\]$/g, \"\");\n  const mapped = unbracketed.startsWith(\"::ffff:\")\n    ? unbracketed.slice(\"::ffff:\".length)\n    : unbracketed;\n\n  return isIPv4(mapped) && mapped.startsWith(\"127.\");\n}\n\n/** Strip the port from a `Host` header value (`[::1]:3000` → `[::1]`, `a.b:80` → `a.b`). */\nfunction hostnameOf(hostHeader: string): string {\n  const value = hostHeader.trim().toLowerCase();\n\n  if (value.startsWith(\"[\")) {\n    const end = value.indexOf(\"]\");\n\n    return end === -1 ? value : value.slice(0, end + 1);\n  }\n\n  const colon = value.lastIndexOf(\":\");\n\n  return colon === -1 ? value : value.slice(0, colon);\n}\n\n/** SHA-256 digest — equal-length input for `timingSafeEqual`. */\nfunction digest(value: string): Buffer {\n  return createHash(\"sha256\").update(value, \"utf8\").digest();\n}\n\n/**\n * Validated, defaulted transport settings plus the precomputed security\n * material (token digests, origin / host allowlists).\n */\ntype ResolvedSettings = {\n  host: string;\n  port: number;\n  path: string;\n  loopback: boolean;\n  maxBodyBytes: number;\n  drainTimeoutMs: number;\n  tokenDigests: Buffer[];\n  authorize: McpHttpAuth[\"authorize\"];\n  authenticate: McpHttpAuth[\"authenticate\"];\n  authRequired: boolean;\n  allowedOrigins: Set<string>;\n  allowedHosts: Set<string>;\n};\n\n/** Normalise a configured origin to `scheme://host[:port]`, or throw a config error. */\nfunction normalizeOrigin(origin: string): string {\n  try {\n    return new URL(origin).origin;\n  } catch (cause) {\n    throw new McpServeError(`allowedOrigins entry \"${origin}\" is not a valid origin URL.`, {\n      type: \"config\",\n      cause,\n    });\n  }\n}\n\n/**\n * Validate and default the transport options. Throws {@link McpServeError}\n * (`\"config\"`) for a non-loopback bind without auth, an empty bearer\n * token, an `auth` with neither check, a bad path / port / limit.\n */\nfunction resolveSettings(transport: McpHttpServeTransport): ResolvedSettings {\n  const host = transport.host ?? DEFAULT_HOST;\n  const port = transport.port ?? 0;\n  const path = transport.path ?? DEFAULT_PATH;\n  const loopback = isLoopbackHost(host);\n  const auth = transport.auth;\n\n  if (!Number.isInteger(port) || port < 0 || port > 65_535) {\n    throw new McpServeError(`MCP http port must be an integer in 0–65535 (got ${port}).`, {\n      type: \"config\",\n    });\n  }\n\n  if (!path.startsWith(\"/\")) {\n    throw new McpServeError(`MCP http path must start with \"/\" (got \"${path}\").`, {\n      type: \"config\",\n    });\n  }\n\n  const maxBodyBytes = transport.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;\n\n  if (!Number.isInteger(maxBodyBytes) || maxBodyBytes <= 0) {\n    throw new McpServeError(\"MCP http maxBodyBytes must be a positive integer.\", {\n      type: \"config\",\n    });\n  }\n\n  const drainTimeoutMs = transport.drainTimeoutMs ?? DEFAULT_DRAIN_TIMEOUT_MS;\n\n  if (!Number.isFinite(drainTimeoutMs) || drainTimeoutMs < 0) {\n    throw new McpServeError(\"MCP http drainTimeoutMs must be zero or a positive number.\", {\n      type: \"config\",\n    });\n  }\n\n  const tokens =\n    auth?.bearer === undefined\n      ? []\n      : typeof auth.bearer === \"string\"\n        ? [auth.bearer]\n        : [...auth.bearer];\n\n  if (tokens.some((token) => token.length === 0)) {\n    throw new McpServeError(\"MCP http auth.bearer tokens must be non-empty strings.\", {\n      type: \"config\",\n    });\n  }\n\n  if (auth && auth.bearer !== undefined && tokens.length === 0) {\n    throw new McpServeError(\"MCP http auth.bearer needs at least one token.\", { type: \"config\" });\n  }\n\n  if (auth && tokens.length === 0 && !auth.authorize && !auth.authenticate) {\n    throw new McpServeError(\"MCP http auth needs `bearer`, `authorize` and/or `authenticate`.\", {\n      type: \"config\",\n    });\n  }\n\n  const authRequired =\n    tokens.length > 0 || auth?.authorize !== undefined || auth?.authenticate !== undefined;\n\n  if (!loopback && !authRequired) {\n    throw new McpServeError(\n      `Refusing to serve MCP over http on non-loopback host \"${host}\" without auth. ` +\n        \"Set transport.auth ({ bearer }, { authorize } or { authenticate }), or bind 127.0.0.1.\",\n      { type: \"config\", context: { host } },\n    );\n  }\n\n  return {\n    host,\n    port,\n    path,\n    loopback,\n    maxBodyBytes,\n    drainTimeoutMs,\n    tokenDigests: tokens.map(digest),\n    authorize: auth?.authorize,\n    authenticate: auth?.authenticate,\n    authRequired,\n    allowedOrigins: new Set((transport.allowedOrigins ?? []).map(normalizeOrigin)),\n    allowedHosts: new Set((transport.allowedHosts ?? []).map((name) => hostnameOf(name))),\n  };\n}\n\n/** Flatten Node's header bag into lower-cased `name → value` strings. */\nfunction flattenHeaders(headers: IncomingHttpHeaders): Record<string, string> {\n  const flat: Record<string, string> = {};\n\n  for (const [name, value] of Object.entries(headers)) {\n    if (value === undefined) {\n      continue;\n    }\n\n    flat[name.toLowerCase()] = Array.isArray(value) ? value.join(\", \") : value;\n  }\n\n  return flat;\n}\n\n/** Write a JSON body with a status code. */\nfunction sendJson(\n  response: ServerResponse,\n  status: number,\n  body: unknown,\n  headers: Record<string, string> = {},\n): void {\n  if (response.headersSent || response.destroyed) {\n    return;\n  }\n\n  const payload = JSON.stringify(body);\n\n  response.writeHead(status, {\n    ...headers,\n    \"content-type\": \"application/json\",\n    \"content-length\": Buffer.byteLength(payload).toString(),\n  });\n  response.end(payload);\n}\n\n/**\n * Write an HTTP-level refusal: the status plus a JSON-RPC error body with\n * no request id (the spec allows such a body on 4xx transport errors).\n */\nfunction sendRefusal(\n  response: ServerResponse,\n  status: number,\n  code: number,\n  message: string,\n  headers: Record<string, string> = {},\n): void {\n  sendJson(response, status, { jsonrpc: \"2.0\", id: null, error: { code, message } }, headers);\n}\n\n/** Write an empty-bodied status (202 / 405). */\nfunction sendEmpty(\n  response: ServerResponse,\n  status: number,\n  headers: Record<string, string> = {},\n): void {\n  if (response.headersSent || response.destroyed) {\n    return;\n  }\n\n  response.writeHead(status, headers);\n  response.end();\n}\n\n/**\n * Bind an MCP Streamable HTTP endpoint and pump each JSON-RPC request\n * through `dispatch`. Resolves once the port is bound.\n *\n * Throws {@link McpServeError}: `\"config\"` for invalid / unsafe options\n * (checked before anything binds), `\"listen\"` when binding fails.\n *\n * @param transport - The http transport options.\n * @param dispatch - Maps one JSON-RPC request (plus call context) to its response.\n */\nexport async function startHttpServer(\n  transport: McpHttpServeTransport,\n  dispatch: McpHttpDispatch,\n): Promise<RunningMcpHttpServer> {\n  const settings = resolveSettings(transport);\n  const shutdown = new AbortController();\n  const requests = new McpServeRequests();\n  const inFlight = new Set<Promise<void>>();\n  let closing: Promise<void> | undefined;\n\n  const server: Server = createServer((request, response) => {\n    if (closing) {\n      sendRefusal(response, 503, JSON_RPC_SERVER_ERROR, \"Server is shutting down.\", {\n        connection: \"close\",\n      });\n\n      return;\n    }\n\n    const work = handleRequest(\n      request,\n      response,\n      settings,\n      dispatch,\n      shutdown.signal,\n      requests,\n    ).catch(() => {\n      sendRefusal(response, 500, JSON_RPC_SERVER_ERROR, \"Internal server error.\");\n    });\n\n    inFlight.add(work);\n    void work.finally(() => {\n      inFlight.delete(work);\n\n      if (closing) {\n        server.closeIdleConnections();\n      }\n    });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    const onError = (cause: Error) => {\n      reject(\n        new McpServeError(\n          `MCP http server could not listen on ${settings.host}:${settings.port}: ${cause.message}`,\n          { type: \"listen\", cause, context: { host: settings.host, port: settings.port } },\n        ),\n      );\n    };\n\n    server.once(\"error\", onError);\n    server.listen(settings.port, settings.host, () => {\n      server.off(\"error\", onError);\n      resolve();\n    });\n  });\n\n  const address = server.address();\n  const boundPort = typeof address === \"object\" && address !== null ? address.port : settings.port;\n  const urlHost = isIPv6(settings.host) ? `[${settings.host}]` : settings.host;\n  const url = `http://${urlHost}:${boundPort}${settings.path}`;\n\n  const close = (): Promise<void> => {\n    if (closing) {\n      return closing;\n    }\n\n    closing = (async () => {\n      const closed = new Promise<void>((resolve) => {\n        server.close(() => resolve());\n      });\n\n      server.closeIdleConnections();\n\n      if (inFlight.size > 0) {\n        let timer: ReturnType<typeof setTimeout> | undefined;\n        const timedOut = new Promise<\"timeout\">((resolve) => {\n          timer = setTimeout(() => resolve(\"timeout\"), settings.drainTimeoutMs);\n        });\n\n        const outcome = await Promise.race([\n          Promise.allSettled([...inFlight]).then(() => \"drained\" as const),\n          timedOut,\n        ]);\n\n        clearTimeout(timer);\n\n        if (outcome === \"timeout\") {\n          shutdown.abort();\n          server.closeAllConnections();\n        }\n      }\n\n      server.closeIdleConnections();\n      await closed;\n    })();\n\n    return closing;\n  };\n\n  return { url, close };\n}\n\n/**\n * Validate and answer one HTTP request: path → Host / Origin → auth →\n * method → headers → body → JSON-RPC dispatch.\n */\nasync function handleRequest(\n  request: IncomingMessage,\n  response: ServerResponse,\n  settings: ResolvedSettings,\n  dispatch: McpHttpDispatch,\n  signal: AbortSignal,\n  requests: McpServeRequests,\n): Promise<void> {\n  const headers = flattenHeaders(request.headers);\n  const method = (request.method ?? \"GET\").toUpperCase();\n  const path = new URL(request.url ?? \"/\", \"http://localhost\").pathname;\n\n  // DNS-rebinding guards apply to every request on every path.\n  if (!hostAllowed(headers.host, settings)) {\n    sendRefusal(response, 403, JSON_RPC_SERVER_ERROR, \"Forbidden: Host header not allowed.\");\n\n    return;\n  }\n\n  if (!originAllowed(headers.origin, settings)) {\n    sendRefusal(response, 403, JSON_RPC_SERVER_ERROR, \"Forbidden: Origin not allowed.\");\n\n    return;\n  }\n\n  if (path !== settings.path) {\n    sendRefusal(response, 404, JSON_RPC_SERVER_ERROR, \"Not found.\");\n\n    return;\n  }\n\n  const info: McpHttpRequestInfo = { method, path, headers };\n\n  if (request.socket.remoteAddress !== undefined) {\n    info.remoteAddress = request.socket.remoteAddress;\n  }\n\n  const authentication = await authorized(info, settings);\n\n  if (!authentication.allowed) {\n    const challenge: Record<string, string> =\n      settings.tokenDigests.length > 0 || settings.authenticate\n        ? { \"www-authenticate\": 'Bearer realm=\"mcp\"' }\n        : {};\n\n    sendRefusal(response, 401, JSON_RPC_SERVER_ERROR, \"Unauthorized.\", challenge);\n\n    return;\n  }\n\n  if (method !== \"POST\") {\n    // Stateless server: no server-initiated SSE stream (GET) and no\n    // session to terminate (DELETE). The spec allows 405 for both.\n    sendEmpty(response, 405, { allow: \"POST\" });\n\n    return;\n  }\n\n  const protocolVersion = headers[\"mcp-protocol-version\"];\n\n  if (protocolVersion !== undefined && !SUPPORTED_PROTOCOL_VERSIONS.includes(protocolVersion)) {\n    sendRefusal(\n      response,\n      400,\n      JSON_RPC_SERVER_ERROR,\n      `Unsupported MCP-Protocol-Version \"${protocolVersion}\" (supported: ${SUPPORTED_PROTOCOL_VERSIONS.join(\", \")}).`,\n    );\n\n    return;\n  }\n\n  if (!isJsonContentType(headers[\"content-type\"])) {\n    sendRefusal(response, 415, JSON_RPC_SERVER_ERROR, \"Content-Type must be application/json.\");\n\n    return;\n  }\n\n  if (!acceptsJson(headers.accept)) {\n    sendRefusal(response, 406, JSON_RPC_SERVER_ERROR, \"Accept must allow application/json.\");\n\n    return;\n  }\n\n  const body = await readBody(request, settings.maxBodyBytes);\n\n  if (body.type === \"too-large\") {\n    sendRefusal(\n      response,\n      413,\n      JSON_RPC_SERVER_ERROR,\n      `Request body exceeds ${settings.maxBodyBytes} bytes.`,\n      { connection: \"close\" },\n    );\n\n    return;\n  }\n\n  let message: unknown;\n\n  try {\n    message = JSON.parse(body.text);\n  } catch {\n    sendRefusal(response, 400, JSON_RPC_PARSE_ERROR, \"Parse error: body is not valid JSON.\");\n\n    return;\n  }\n\n  if (typeof message !== \"object\" || message === null || Array.isArray(message)) {\n    sendRefusal(\n      response,\n      400,\n      JSON_RPC_INVALID_REQUEST,\n      \"Invalid request: the body must be one JSON-RPC message (batches are not supported).\",\n    );\n\n    return;\n  }\n\n  const record = message as Record<string, unknown>;\n\n  if (record.jsonrpc !== \"2.0\") {\n    sendRefusal(response, 400, JSON_RPC_INVALID_REQUEST, 'Invalid request: jsonrpc must be \"2.0\".');\n\n    return;\n  }\n\n  const id = record.id;\n\n  if (typeof record.method === \"string\") {\n    if (typeof id !== \"string\" && typeof id !== \"number\") {\n      // Only the same caller credentials can cancel an in-flight request.\n      requests.cancel(record, cancellationScope(info));\n      sendEmpty(response, 202);\n\n      return;\n    }\n\n    const rpcRequest: JsonRpcRequest = { jsonrpc: \"2.0\", id, method: record.method };\n\n    if (record.params !== undefined) {\n      rpcRequest.params = record.params;\n    }\n\n    const disconnected = new AbortController();\n    const onClose = () => disconnected.abort();\n    response.once(\"close\", onClose);\n\n    try {\n      const rpcResponse = await requests.run(\n        rpcRequest,\n        {\n          request: info,\n          principal: authentication.principal,\n          signal: AbortSignal.any([signal, disconnected.signal]),\n        },\n        (context) => dispatch(rpcRequest, context),\n        cancellationScope(info),\n      );\n\n      if (rpcResponse === undefined) {\n        // End the HTTP exchange without a JSON-RPC response for cancelled work.\n        sendEmpty(response, 202);\n      } else {\n        sendJson(response, 200, rpcResponse);\n      }\n    } finally {\n      response.off(\"close\", onClose);\n    }\n\n    return;\n  }\n\n  if (\n    (typeof id === \"string\" || typeof id === \"number\") &&\n    (\"result\" in record || \"error\" in record)\n  ) {\n    // A response to a server-initiated request; this server sends none, so acknowledge.\n    sendEmpty(response, 202);\n\n    return;\n  }\n\n  sendRefusal(response, 400, JSON_RPC_INVALID_REQUEST, \"Invalid request: not a JSON-RPC message.\");\n}\n\n/**\n * Host-header check. While bound to loopback only loopback names (plus\n * `allowedHosts`) are accepted, so a DNS-rebound name pointing at\n * 127.0.0.1 is refused. Off loopback the check applies only when\n * `allowedHosts` is set.\n */\nfunction hostAllowed(hostHeader: string | undefined, settings: ResolvedSettings): boolean {\n  if (!settings.loopback && settings.allowedHosts.size === 0) {\n    return true;\n  }\n\n  if (hostHeader === undefined) {\n    return false;\n  }\n\n  const name = hostnameOf(hostHeader);\n\n  if (settings.allowedHosts.has(name)) {\n    return true;\n  }\n\n  return settings.loopback && isLoopbackHost(name);\n}\n\n/**\n * Origin check (MCP Streamable HTTP security warning). No `Origin` header —\n * a non-browser client — passes; otherwise the origin must be a loopback\n * `http(s)` origin or listed in `allowedOrigins`. `null` and unparsable\n * origins are refused.\n */\nfunction originAllowed(origin: string | undefined, settings: ResolvedSettings): boolean {\n  if (origin === undefined) {\n    return true;\n  }\n\n  let parsed: URL;\n\n  try {\n    parsed = new URL(origin);\n  } catch {\n    return false;\n  }\n\n  if (settings.allowedOrigins.has(parsed.origin)) {\n    return true;\n  }\n\n  return (\n    (parsed.protocol === \"http:\" || parsed.protocol === \"https:\") && isLoopbackHost(parsed.hostname)\n  );\n}\n\n/**\n * Run the configured auth. Bearer tokens are compared in constant time\n * over SHA-256 digests (equal-length buffers for `timingSafeEqual`), and\n * every configured token is compared so the match position does not leak.\n * An `authorize` hook that throws denies the request.\n */\ntype Authentication = { allowed: false } | { allowed: true; principal?: unknown };\n\nasync function authorized(\n  info: McpHttpRequestInfo,\n  settings: ResolvedSettings,\n): Promise<Authentication> {\n  if (!settings.authRequired) {\n    return { allowed: true };\n  }\n\n  if (settings.tokenDigests.length > 0) {\n    const match = /^Bearer[ \\t]+(.+)$/i.exec(info.headers.authorization ?? \"\");\n    const presented = digest(match?.[1]?.trim() ?? \"\");\n    let matched = false;\n\n    for (const expected of settings.tokenDigests) {\n      matched = timingSafeEqual(presented, expected) || matched;\n    }\n\n    if (!match || !matched) {\n      return { allowed: false };\n    }\n  }\n\n  try {\n    if (settings.authorize && (await settings.authorize(info)) !== true) {\n      return { allowed: false };\n    }\n\n    if (settings.authenticate) {\n      const principal = await settings.authenticate(info);\n\n      return principal === undefined ? { allowed: false } : { allowed: true, principal };\n    }\n\n    return { allowed: true };\n  } catch {\n    return { allowed: false };\n  }\n}\n\n/**\n * Stateless HTTP has no connection/session id. Repeat the caller's credential\n * and application headers on notifications; per-message transport headers do\n * not identify a caller. Hash the material rather than retaining secrets as keys.\n */\nfunction cancellationScope(info: McpHttpRequestInfo): string {\n  const transportHeaders = new Set([\n    \"host\",\n    \"origin\",\n    \"accept\",\n    \"accept-encoding\",\n    \"accept-language\",\n    \"connection\",\n    \"content-type\",\n    \"content-length\",\n    \"transfer-encoding\",\n    \"mcp-protocol-version\",\n    \"user-agent\",\n  ]);\n  const credentials = Object.entries(info.headers)\n    .filter(([name]) => !transportHeaders.has(name))\n    .sort(([left], [right]) => left.localeCompare(right));\n\n  return digest(JSON.stringify([info.remoteAddress, credentials])).toString(\"hex\");\n}\n\n/** True for `application/json` (any parameters, e.g. `; charset=utf-8`). */\nfunction isJsonContentType(contentType: string | undefined): boolean {\n  return contentType?.split(\";\")[0]?.trim().toLowerCase() === \"application/json\";\n}\n\n/**\n * True when the `Accept` header allows a JSON reply. Clients are required\n * to list both `application/json` and `text/event-stream`; this server\n * always answers JSON, so it only insists on that half. A missing header\n * is accepted.\n */\nfunction acceptsJson(accept: string | undefined): boolean {\n  if (accept === undefined || accept.trim() === \"\") {\n    return true;\n  }\n\n  return accept\n    .split(\",\")\n    .map((part) => part.split(\";\")[0]?.trim().toLowerCase())\n    .some((type) => type === \"application/json\" || type === \"application/*\" || type === \"*/*\");\n}\n\n/** The outcome of reading a request body. */\ntype BodyResult = { type: \"ok\"; text: string } | { type: \"too-large\" };\n\n/**\n * Read the request body as UTF-8, refusing anything over `limit` bytes —\n * up front from `Content-Length`, and while streaming for chunked bodies.\n * A refused body is left unread; the 413 response closes the connection.\n */\nfunction readBody(request: IncomingMessage, limit: number): Promise<BodyResult> {\n  const declared = Number(request.headers[\"content-length\"]);\n\n  if (Number.isFinite(declared) && declared > limit) {\n    return Promise.resolve({ type: \"too-large\" });\n  }\n\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    let done = false;\n\n    const finish = (result: BodyResult) => {\n      if (!done) {\n        done = true;\n        resolve(result);\n      }\n    };\n\n    request.on(\"data\", (chunk: Buffer) => {\n      if (done) {\n        return;\n      }\n\n      size += chunk.length;\n\n      if (size > limit) {\n        request.pause();\n        finish({ type: \"too-large\" });\n\n        return;\n      }\n\n      chunks.push(chunk);\n    });\n    request.on(\"end\", () => finish({ type: \"ok\", text: Buffer.concat(chunks).toString(\"utf8\") }));\n    request.on(\"error\", (error) => {\n      if (!done) {\n        done = true;\n        reject(error);\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,MAAM,eAAe;;AAGrB,MAAM,eAAe;;AAGrB,MAAM,yBAAyB;;AAG/B,MAAM,2BAA2B;;AAGjC,MAAM,uBAAuB;AAC7B,MAAM,2BAA2B;;AAGjC,MAAM,wBAAwB;;AAG9B,MAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;AAAO,CAAC;;;;;AAoBzE,SAAgB,eAAe,MAAuB;CACpD,MAAM,aAAa,KAAK,KAAK,CAAC,CAAC,YAAY;CAE3C,IAAI,eAAe,IAAI,UAAU,GAC/B,OAAO;CAGT,MAAM,cAAc,WAAW,QAAQ,YAAY,EAAE;CACrD,MAAM,SAAS,YAAY,WAAW,SAAS,IAC3C,YAAY,MAAM,CAAgB,IAClC;CAEJ,OAAO,OAAO,MAAM,KAAK,OAAO,WAAW,MAAM;AACnD;;AAGA,SAAS,WAAW,YAA4B;CAC9C,MAAM,QAAQ,WAAW,KAAK,CAAC,CAAC,YAAY;CAE5C,IAAI,MAAM,WAAW,GAAG,GAAG;EACzB,MAAM,MAAM,MAAM,QAAQ,GAAG;EAE7B,OAAO,QAAQ,KAAK,QAAQ,MAAM,MAAM,GAAG,MAAM,CAAC;CACpD;CAEA,MAAM,QAAQ,MAAM,YAAY,GAAG;CAEnC,OAAO,UAAU,KAAK,QAAQ,MAAM,MAAM,GAAG,KAAK;AACpD;;AAGA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,MAAM,CAAC,CAAC,OAAO;AAC3D;;AAsBA,SAAS,gBAAgB,QAAwB;CAC/C,IAAI;EACF,OAAO,IAAI,IAAI,MAAM,CAAC,CAAC;CACzB,SAAS,OAAO;EACd,MAAM,IAAI,cAAc,yBAAyB,OAAO,+BAA+B;GACrF,MAAM;GACN;EACF,CAAC;CACH;AACF;;;;;;AAOA,SAAS,gBAAgB,WAAoD;CAC3E,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,WAAW,eAAe,IAAI;CACpC,MAAM,OAAO,UAAU;CAEvB,IAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,OAChD,MAAM,IAAI,cAAc,oDAAoD,KAAK,KAAK,EACpF,MAAM,SACR,CAAC;CAGH,IAAI,CAAC,KAAK,WAAW,GAAG,GACtB,MAAM,IAAI,cAAc,2CAA2C,KAAK,MAAM,EAC5E,MAAM,SACR,CAAC;CAGH,MAAM,eAAe,UAAU,gBAAgB;CAE/C,IAAI,CAAC,OAAO,UAAU,YAAY,KAAK,gBAAgB,GACrD,MAAM,IAAI,cAAc,qDAAqD,EAC3E,MAAM,SACR,CAAC;CAGH,MAAM,iBAAiB,UAAU,kBAAkB;CAEnD,IAAI,CAAC,OAAO,SAAS,cAAc,KAAK,iBAAiB,GACvD,MAAM,IAAI,cAAc,8DAA8D,EACpF,MAAM,SACR,CAAC;CAGH,MAAM,SACJ,MAAM,WAAW,SACb,CAAC,IACD,OAAO,KAAK,WAAW,WACrB,CAAC,KAAK,MAAM,IACZ,CAAC,GAAG,KAAK,MAAM;CAEvB,IAAI,OAAO,MAAM,UAAU,MAAM,WAAW,CAAC,GAC3C,MAAM,IAAI,cAAc,0DAA0D,EAChF,MAAM,SACR,CAAC;CAGH,IAAI,QAAQ,KAAK,WAAW,UAAa,OAAO,WAAW,GACzD,MAAM,IAAI,cAAc,kDAAkD,EAAE,MAAM,SAAS,CAAC;CAG9F,IAAI,QAAQ,OAAO,WAAW,KAAK,CAAC,KAAK,aAAa,CAAC,KAAK,cAC1D,MAAM,IAAI,cAAc,oEAAoE,EAC1F,MAAM,SACR,CAAC;CAGH,MAAM,eACJ,OAAO,SAAS,KAAK,MAAM,cAAc,UAAa,MAAM,iBAAiB;CAE/E,IAAI,CAAC,YAAY,CAAC,cAChB,MAAM,IAAI,cACR,yDAAyD,KAAK,yGAE9D;EAAE,MAAM;EAAU,SAAS,EAAE,KAAK;CAAE,CACtC;CAGF,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA,cAAc,OAAO,IAAI,MAAM;EAC/B,WAAW,MAAM;EACjB,cAAc,MAAM;EACpB;EACA,gBAAgB,IAAI,KAAK,UAAU,kBAAkB,CAAC,EAAC,CAAE,IAAI,eAAe,CAAC;EAC7E,cAAc,IAAI,KAAK,UAAU,gBAAgB,CAAC,EAAC,CAAE,KAAK,SAAS,WAAW,IAAI,CAAC,CAAC;CACtF;AACF;;AAGA,SAAS,eAAe,SAAsD;CAC5E,MAAM,OAA+B,CAAC;CAEtC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,OAAO,GAAG;EACnD,IAAI,UAAU,QACZ;EAGF,KAAK,KAAK,YAAY,KAAK,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI;CACvE;CAEA,OAAO;AACT;;AAGA,SAAS,SACP,UACA,QACA,MACA,UAAkC,CAAC,GAC7B;CACN,IAAI,SAAS,eAAe,SAAS,WACnC;CAGF,MAAM,UAAU,KAAK,UAAU,IAAI;CAEnC,SAAS,UAAU,QAAQ;EACzB,GAAG;EACH,gBAAgB;EAChB,kBAAkB,OAAO,WAAW,OAAO,CAAC,CAAC,SAAS;CACxD,CAAC;CACD,SAAS,IAAI,OAAO;AACtB;;;;;AAMA,SAAS,YACP,UACA,QACA,MACA,SACA,UAAkC,CAAC,GAC7B;CACN,SAAS,UAAU,QAAQ;EAAE,SAAS;EAAO,IAAI;EAAM,OAAO;GAAE;GAAM;EAAQ;CAAE,GAAG,OAAO;AAC5F;;AAGA,SAAS,UACP,UACA,QACA,UAAkC,CAAC,GAC7B;CACN,IAAI,SAAS,eAAe,SAAS,WACnC;CAGF,SAAS,UAAU,QAAQ,OAAO;CAClC,SAAS,IAAI;AACf;;;;;;;;;;;AAYA,eAAsB,gBACpB,WACA,UAC+B;CAC/B,MAAM,WAAW,gBAAgB,SAAS;CAC1C,MAAM,WAAW,IAAI,gBAAgB;CACrC,MAAM,WAAW,IAAI,iBAAiB;CACtC,MAAM,2BAAW,IAAI,IAAmB;CACxC,IAAI;CAEJ,MAAM,SAAiB,cAAc,SAAS,aAAa;EACzD,IAAI,SAAS;GACX,YAAY,UAAU,KAAK,uBAAuB,4BAA4B,EAC5E,YAAY,QACd,CAAC;GAED;EACF;EAEA,MAAM,OAAO,cACX,SACA,UACA,UACA,UACA,SAAS,QACT,QACF,CAAC,CAAC,YAAY;GACZ,YAAY,UAAU,KAAK,uBAAuB,wBAAwB;EAC5E,CAAC;EAED,SAAS,IAAI,IAAI;EACjB,AAAK,KAAK,cAAc;GACtB,SAAS,OAAO,IAAI;GAEpB,IAAI,SACF,OAAO,qBAAqB;EAEhC,CAAC;CACH,CAAC;CAED,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,MAAM,WAAW,UAAiB;GAChC,OACE,IAAI,cACF,uCAAuC,SAAS,KAAK,GAAG,SAAS,KAAK,IAAI,MAAM,WAChF;IAAE,MAAM;IAAU;IAAO,SAAS;KAAE,MAAM,SAAS;KAAM,MAAM,SAAS;IAAK;GAAE,CACjF,CACF;EACF;EAEA,OAAO,KAAK,SAAS,OAAO;EAC5B,OAAO,OAAO,SAAS,MAAM,SAAS,YAAY;GAChD,OAAO,IAAI,SAAS,OAAO;GAC3B,QAAQ;EACV,CAAC;CACH,CAAC;CAED,MAAM,UAAU,OAAO,QAAQ;CAC/B,MAAM,YAAY,OAAO,YAAY,YAAY,YAAY,OAAO,QAAQ,OAAO,SAAS;CAE5F,MAAM,MAAM,UADI,OAAO,SAAS,IAAI,IAAI,IAAI,SAAS,KAAK,KAAK,SAAS,KAC1C,GAAG,YAAY,SAAS;CAEtD,MAAM,cAA6B;EACjC,IAAI,SACF,OAAO;EAGT,WAAW,YAAY;GACrB,MAAM,SAAS,IAAI,SAAe,YAAY;IAC5C,OAAO,YAAY,QAAQ,CAAC;GAC9B,CAAC;GAED,OAAO,qBAAqB;GAE5B,IAAI,SAAS,OAAO,GAAG;IACrB,IAAI;IACJ,MAAM,WAAW,IAAI,SAAoB,YAAY;KACnD,QAAQ,iBAAiB,QAAQ,SAAS,GAAG,SAAS,cAAc;IACtE,CAAC;IAED,MAAM,UAAU,MAAM,QAAQ,KAAK,CACjC,QAAQ,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,SAAkB,GAC/D,QACF,CAAC;IAED,aAAa,KAAK;IAElB,IAAI,YAAY,WAAW;KACzB,SAAS,MAAM;KACf,OAAO,oBAAoB;IAC7B;GACF;GAEA,OAAO,qBAAqB;GAC5B,MAAM;EACR,EAAC,CAAE;EAEH,OAAO;CACT;CAEA,OAAO;EAAE;EAAK;CAAM;AACtB;;;;;AAMA,eAAe,cACb,SACA,UACA,UACA,UACA,QACA,UACe;CACf,MAAM,UAAU,eAAe,QAAQ,OAAO;CAC9C,MAAM,UAAU,QAAQ,UAAU,MAAK,CAAE,YAAY;CACrD,MAAM,OAAO,IAAI,IAAI,QAAQ,OAAO,KAAK,kBAAkB,CAAC,CAAC;CAG7D,IAAI,CAAC,YAAY,QAAQ,MAAM,QAAQ,GAAG;EACxC,YAAY,UAAU,KAAK,uBAAuB,qCAAqC;EAEvF;CACF;CAEA,IAAI,CAAC,cAAc,QAAQ,QAAQ,QAAQ,GAAG;EAC5C,YAAY,UAAU,KAAK,uBAAuB,gCAAgC;EAElF;CACF;CAEA,IAAI,SAAS,SAAS,MAAM;EAC1B,YAAY,UAAU,KAAK,uBAAuB,YAAY;EAE9D;CACF;CAEA,MAAM,OAA2B;EAAE;EAAQ;EAAM;CAAQ;CAEzD,IAAI,QAAQ,OAAO,kBAAkB,QACnC,KAAK,gBAAgB,QAAQ,OAAO;CAGtC,MAAM,iBAAiB,MAAM,WAAW,MAAM,QAAQ;CAEtD,IAAI,CAAC,eAAe,SAAS;EAC3B,MAAM,YACJ,SAAS,aAAa,SAAS,KAAK,SAAS,eACzC,EAAE,oBAAoB,uBAAqB,IAC3C,CAAC;EAEP,YAAY,UAAU,KAAK,uBAAuB,iBAAiB,SAAS;EAE5E;CACF;CAEA,IAAI,WAAW,QAAQ;EAGrB,UAAU,UAAU,KAAK,EAAE,OAAO,OAAO,CAAC;EAE1C;CACF;CAEA,MAAM,kBAAkB,QAAQ;CAEhC,IAAI,oBAAoB,UAAa,CAAC,4BAA4B,SAAS,eAAe,GAAG;EAC3F,YACE,UACA,KACA,uBACA,qCAAqC,gBAAgB,gBAAgB,4BAA4B,KAAK,IAAI,EAAE,GAC9G;EAEA;CACF;CAEA,IAAI,CAAC,kBAAkB,QAAQ,eAAe,GAAG;EAC/C,YAAY,UAAU,KAAK,uBAAuB,wCAAwC;EAE1F;CACF;CAEA,IAAI,CAAC,YAAY,QAAQ,MAAM,GAAG;EAChC,YAAY,UAAU,KAAK,uBAAuB,qCAAqC;EAEvF;CACF;CAEA,MAAM,OAAO,MAAM,SAAS,SAAS,SAAS,YAAY;CAE1D,IAAI,KAAK,SAAS,aAAa;EAC7B,YACE,UACA,KACA,uBACA,wBAAwB,SAAS,aAAa,UAC9C,EAAE,YAAY,QAAQ,CACxB;EAEA;CACF;CAEA,IAAI;CAEJ,IAAI;EACF,UAAU,KAAK,MAAM,KAAK,IAAI;CAChC,QAAQ;EACN,YAAY,UAAU,KAAK,sBAAsB,sCAAsC;EAEvF;CACF;CAEA,IAAI,OAAO,YAAY,YAAY,YAAY,QAAQ,MAAM,QAAQ,OAAO,GAAG;EAC7E,YACE,UACA,KACA,0BACA,qFACF;EAEA;CACF;CAEA,MAAM,SAAS;CAEf,IAAI,OAAO,YAAY,OAAO;EAC5B,YAAY,UAAU,KAAK,0BAA0B,2CAAyC;EAE9F;CACF;CAEA,MAAM,KAAK,OAAO;CAElB,IAAI,OAAO,OAAO,WAAW,UAAU;EACrC,IAAI,OAAO,OAAO,YAAY,OAAO,OAAO,UAAU;GAEpD,SAAS,OAAO,QAAQ,kBAAkB,IAAI,CAAC;GAC/C,UAAU,UAAU,GAAG;GAEvB;EACF;EAEA,MAAM,aAA6B;GAAE,SAAS;GAAO;GAAI,QAAQ,OAAO;EAAO;EAE/E,IAAI,OAAO,WAAW,QACpB,WAAW,SAAS,OAAO;EAG7B,MAAM,eAAe,IAAI,gBAAgB;EACzC,MAAM,gBAAgB,aAAa,MAAM;EACzC,SAAS,KAAK,SAAS,OAAO;EAE9B,IAAI;GACF,MAAM,cAAc,MAAM,SAAS,IACjC,YACA;IACE,SAAS;IACT,WAAW,eAAe;IAC1B,QAAQ,YAAY,IAAI,CAAC,QAAQ,aAAa,MAAM,CAAC;GACvD,IACC,YAAY,SAAS,YAAY,OAAO,GACzC,kBAAkB,IAAI,CACxB;GAEA,IAAI,gBAAgB,QAElB,UAAU,UAAU,GAAG;QAEvB,SAAS,UAAU,KAAK,WAAW;EAEvC,UAAU;GACR,SAAS,IAAI,SAAS,OAAO;EAC/B;EAEA;CACF;CAEA,KACG,OAAO,OAAO,YAAY,OAAO,OAAO,cACxC,YAAY,UAAU,WAAW,SAClC;EAEA,UAAU,UAAU,GAAG;EAEvB;CACF;CAEA,YAAY,UAAU,KAAK,0BAA0B,0CAA0C;AACjG;;;;;;;AAQA,SAAS,YAAY,YAAgC,UAAqC;CACxF,IAAI,CAAC,SAAS,YAAY,SAAS,aAAa,SAAS,GACvD,OAAO;CAGT,IAAI,eAAe,QACjB,OAAO;CAGT,MAAM,OAAO,WAAW,UAAU;CAElC,IAAI,SAAS,aAAa,IAAI,IAAI,GAChC,OAAO;CAGT,OAAO,SAAS,YAAY,eAAe,IAAI;AACjD;;;;;;;AAQA,SAAS,cAAc,QAA4B,UAAqC;CACtF,IAAI,WAAW,QACb,OAAO;CAGT,IAAI;CAEJ,IAAI;EACF,SAAS,IAAI,IAAI,MAAM;CACzB,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,SAAS,eAAe,IAAI,OAAO,MAAM,GAC3C,OAAO;CAGT,QACG,OAAO,aAAa,WAAW,OAAO,aAAa,aAAa,eAAe,OAAO,QAAQ;AAEnG;AAUA,eAAe,WACb,MACA,UACyB;CACzB,IAAI,CAAC,SAAS,cACZ,OAAO,EAAE,SAAS,KAAK;CAGzB,IAAI,SAAS,aAAa,SAAS,GAAG;EACpC,MAAM,QAAQ,sBAAsB,KAAK,KAAK,QAAQ,iBAAiB,EAAE;EACzE,MAAM,YAAY,OAAO,QAAQ,EAAE,EAAE,KAAK,KAAK,EAAE;EACjD,IAAI,UAAU;EAEd,KAAK,MAAM,YAAY,SAAS,cAC9B,UAAU,gBAAgB,WAAW,QAAQ,KAAK;EAGpD,IAAI,CAAC,SAAS,CAAC,SACb,OAAO,EAAE,SAAS,MAAM;CAE5B;CAEA,IAAI;EACF,IAAI,SAAS,aAAc,MAAM,SAAS,UAAU,IAAI,MAAO,MAC7D,OAAO,EAAE,SAAS,MAAM;EAG1B,IAAI,SAAS,cAAc;GACzB,MAAM,YAAY,MAAM,SAAS,aAAa,IAAI;GAElD,OAAO,cAAc,SAAY,EAAE,SAAS,MAAM,IAAI;IAAE,SAAS;IAAM;GAAU;EACnF;EAEA,OAAO,EAAE,SAAS,KAAK;CACzB,QAAQ;EACN,OAAO,EAAE,SAAS,MAAM;CAC1B;AACF;;;;;;AAOA,SAAS,kBAAkB,MAAkC;CAC3D,MAAM,mCAAmB,IAAI,IAAI;EAC/B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF,CAAC;CACD,MAAM,cAAc,OAAO,QAAQ,KAAK,OAAO,CAAC,CAC7C,QAAQ,CAAC,UAAU,CAAC,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAC/C,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,cAAc,KAAK,CAAC;CAEtD,OAAO,OAAO,KAAK,UAAU,CAAC,KAAK,eAAe,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK;AACjF;;AAGA,SAAS,kBAAkB,aAA0C;CACnE,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,MAAM;AAC9D;;;;;;;AAQA,SAAS,YAAY,QAAqC;CACxD,IAAI,WAAW,UAAa,OAAO,KAAK,MAAM,IAC5C,OAAO;CAGT,OAAO,OACJ,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CACvD,MAAM,SAAS,SAAS,sBAAsB,SAAS,mBAAmB,SAAS,KAAK;AAC7F;;;;;;AAUA,SAAS,SAAS,SAA0B,OAAoC;CAC9E,MAAM,WAAW,OAAO,QAAQ,QAAQ,iBAAiB;CAEzD,IAAI,OAAO,SAAS,QAAQ,KAAK,WAAW,OAC1C,OAAO,QAAQ,QAAQ,EAAE,MAAM,YAAY,CAAC;CAG9C,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,SAAmB,CAAC;EAC1B,IAAI,OAAO;EACX,IAAI,OAAO;EAEX,MAAM,UAAU,WAAuB;GACrC,IAAI,CAAC,MAAM;IACT,OAAO;IACP,QAAQ,MAAM;GAChB;EACF;EAEA,QAAQ,GAAG,SAAS,UAAkB;GACpC,IAAI,MACF;GAGF,QAAQ,MAAM;GAEd,IAAI,OAAO,OAAO;IAChB,QAAQ,MAAM;IACd,OAAO,EAAE,MAAM,YAAY,CAAC;IAE5B;GACF;GAEA,OAAO,KAAK,KAAK;EACnB,CAAC;EACD,QAAQ,GAAG,aAAa,OAAO;GAAE,MAAM;GAAM,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;EAAE,CAAC,CAAC;EAC5F,QAAQ,GAAG,UAAU,UAAU;GAC7B,IAAI,CAAC,MAAM;IACT,OAAO;IACP,OAAO,KAAK;GACd;EACF,CAAC;CACH,CAAC;AACH"}

package/esm/mcp/serve-requests.mjs

@@ -0,0 +1,62 @@
+import { isRecord } from "./result.mjs";
+
+//#region ../../packages/ai-tools/src/mcp/serve-requests.ts
+/**
+* In-flight requests for one transport. HTTP partitions these by credentials;
+* stdio has a single connection. Cancellation never crosses those boundaries.
+* https://modelcontextprotocol.io/specification/2025-11-25/basic/utilities/cancellation
+* (checked 2026-10-19): ignore unknown/completed ids and never answer cancelled work.
+*/
+var McpServeRequests = class {
+	constructor() {
+		this.scopes = /* @__PURE__ */ new Map();
+	}
+	cancel(message, scope = "") {
+		if (!isRecord(message) || message.jsonrpc !== "2.0" || message.method !== "notifications/cancelled" || message.id !== void 0 || !isRecord(message.params)) return;
+		const { requestId, reason } = message.params;
+		if (typeof requestId !== "string" && typeof requestId !== "number" || reason !== void 0 && typeof reason !== "string") return;
+		const pending = this.scopes.get(scope)?.get(requestId);
+		if (pending?.size === 1) {
+			for (const entry of pending) if (entry.cancellable) entry.controller.abort(new DOMException(typeof reason === "string" ? reason : "Request cancelled.", "AbortError"));
+		}
+	}
+	async run(request, context, dispatch, scope = "") {
+		let pending = this.scopes.get(scope);
+		if (!pending) {
+			pending = /* @__PURE__ */ new Map();
+			this.scopes.set(scope, pending);
+		}
+		const controller = new AbortController();
+		const entry = {
+			controller,
+			cancellable: request.method !== "initialize"
+		};
+		const calls = pending.get(request.id) ?? /* @__PURE__ */ new Set();
+		calls.add(entry);
+		pending.set(request.id, calls);
+		const onAbort = () => controller.abort(context.signal?.reason);
+		context.signal?.addEventListener("abort", onAbort, { once: true });
+		if (context.signal?.aborted) onAbort();
+		try {
+			if (controller.signal.aborted) return;
+			const response = await dispatch({
+				...context,
+				requestId: request.id,
+				signal: controller.signal
+			});
+			return controller.signal.aborted ? void 0 : response;
+		} catch (cause) {
+			if (controller.signal.aborted) return;
+			throw cause;
+		} finally {
+			context.signal?.removeEventListener("abort", onAbort);
+			calls.delete(entry);
+			if (calls.size === 0) pending.delete(request.id);
+			if (pending.size === 0) this.scopes.delete(scope);
+		}
+	}
+};
+
+//#endregion
+export { McpServeRequests };
+//# sourceMappingURL=serve-requests.mjs.map

package/esm/mcp/serve-requests.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-requests.mjs","names":[],"sources":["../../../../../../../../packages/ai-tools/src/mcp/serve-requests.ts"],"sourcesContent":["import type { JsonRpcId, JsonRpcRequest, JsonRpcResponse, McpServeCallContext } from \"../contracts\";\nimport { isRecord } from \"./result\";\n\ntype PendingRequest = { controller: AbortController; cancellable: boolean };\n\n/**\n * In-flight requests for one transport. HTTP partitions these by credentials;\n * stdio has a single connection. Cancellation never crosses those boundaries.\n * https://modelcontextprotocol.io/specification/2025-11-25/basic/utilities/cancellation\n * (checked 2026-10-19): ignore unknown/completed ids and never answer cancelled work.\n */\nexport class McpServeRequests {\n  private readonly scopes = new Map<string, Map<JsonRpcId, Set<PendingRequest>>>();\n\n  public cancel(message: unknown, scope = \"\"): void {\n    if (\n      !isRecord(message) ||\n      message.jsonrpc !== \"2.0\" ||\n      message.method !== \"notifications/cancelled\" ||\n      message.id !== undefined ||\n      !isRecord(message.params)\n    ) {\n      return;\n    }\n\n    const { requestId, reason } = message.params;\n\n    if (\n      (typeof requestId !== \"string\" && typeof requestId !== \"number\") ||\n      (reason !== undefined && typeof reason !== \"string\")\n    ) {\n      return;\n    }\n\n    const pending = this.scopes.get(scope)?.get(requestId);\n\n    // Stateless clients may share credentials and reuse an id. Preserve their\n    // calls, but never guess which one an ambiguous notification refers to.\n    if (pending?.size === 1) {\n      for (const entry of pending) {\n        if (entry.cancellable) {\n          entry.controller.abort(\n            new DOMException(\n              typeof reason === \"string\" ? reason : \"Request cancelled.\",\n              \"AbortError\",\n            ),\n          );\n        }\n      }\n    }\n  }\n\n  public async run(\n    request: JsonRpcRequest,\n    context: McpServeCallContext,\n    dispatch: (context: McpServeCallContext) => Promise<JsonRpcResponse>,\n    scope = \"\",\n  ): Promise<JsonRpcResponse | undefined> {\n    let pending = this.scopes.get(scope);\n\n    if (!pending) {\n      pending = new Map();\n      this.scopes.set(scope, pending);\n    }\n\n    const controller = new AbortController();\n    // Clients MUST NOT cancel initialize. Other requests share the same registry.\n    const entry = { controller, cancellable: request.method !== \"initialize\" };\n    const calls = pending.get(request.id) ?? new Set<PendingRequest>();\n    calls.add(entry);\n    pending.set(request.id, calls);\n\n    const onAbort = () => controller.abort(context.signal?.reason);\n    context.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    if (context.signal?.aborted) {\n      onAbort();\n    }\n\n    try {\n      if (controller.signal.aborted) {\n        return undefined;\n      }\n\n      const response = await dispatch({\n        ...context,\n        requestId: request.id,\n        signal: controller.signal,\n      });\n\n      return controller.signal.aborted ? undefined : response;\n    } catch (cause) {\n      if (controller.signal.aborted) {\n        return undefined;\n      }\n\n      throw cause;\n    } finally {\n      context.signal?.removeEventListener(\"abort\", onAbort);\n      calls.delete(entry);\n\n      if (calls.size === 0) {\n        pending.delete(request.id);\n      }\n\n      if (pending.size === 0) {\n        this.scopes.delete(scope);\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;AAWA,IAAa,mBAAb,MAA8B;;gCACF,IAAI,IAAiD;;CAE/E,AAAO,OAAO,SAAkB,QAAQ,IAAU;EAChD,IACE,CAAC,SAAS,OAAO,KACjB,QAAQ,YAAY,SACpB,QAAQ,WAAW,6BACnB,QAAQ,OAAO,UACf,CAAC,SAAS,QAAQ,MAAM,GAExB;EAGF,MAAM,EAAE,WAAW,WAAW,QAAQ;EAEtC,IACG,OAAO,cAAc,YAAY,OAAO,cAAc,YACtD,WAAW,UAAa,OAAO,WAAW,UAE3C;EAGF,MAAM,UAAU,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,SAAS;EAIrD,IAAI,SAAS,SAAS,GACpB;QAAK,MAAM,SAAS,SAClB,IAAI,MAAM,aACR,MAAM,WAAW,MACf,IAAI,aACF,OAAO,WAAW,WAAW,SAAS,sBACtC,YACF,CACF;EAEJ;CAEJ;CAEA,MAAa,IACX,SACA,SACA,UACA,QAAQ,IAC8B;EACtC,IAAI,UAAU,KAAK,OAAO,IAAI,KAAK;EAEnC,IAAI,CAAC,SAAS;GACZ,0BAAU,IAAI,IAAI;GAClB,KAAK,OAAO,IAAI,OAAO,OAAO;EAChC;EAEA,MAAM,aAAa,IAAI,gBAAgB;EAEvC,MAAM,QAAQ;GAAE;GAAY,aAAa,QAAQ,WAAW;EAAa;EACzE,MAAM,QAAQ,QAAQ,IAAI,QAAQ,EAAE,qBAAK,IAAI,IAAoB;EACjE,MAAM,IAAI,KAAK;EACf,QAAQ,IAAI,QAAQ,IAAI,KAAK;EAE7B,MAAM,gBAAgB,WAAW,MAAM,QAAQ,QAAQ,MAAM;EAC7D,QAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EAEjE,IAAI,QAAQ,QAAQ,SAClB,QAAQ;EAGV,IAAI;GACF,IAAI,WAAW,OAAO,SACpB;GAGF,MAAM,WAAW,MAAM,SAAS;IAC9B,GAAG;IACH,WAAW,QAAQ;IACnB,QAAQ,WAAW;GACrB,CAAC;GAED,OAAO,WAAW,OAAO,UAAU,SAAY;EACjD,SAAS,OAAO;GACd,IAAI,WAAW,OAAO,SACpB;GAGF,MAAM;EACR,UAAU;GACR,QAAQ,QAAQ,oBAAoB,SAAS,OAAO;GACpD,MAAM,OAAO,KAAK;GAElB,IAAI,MAAM,SAAS,GACjB,QAAQ,OAAO,QAAQ,EAAE;GAG3B,IAAI,QAAQ,SAAS,GACnB,KAAK,OAAO,OAAO,KAAK;EAE5B;CACF;AACF"}

package/esm/mcp/serve.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.mts","names":[],"sources":["../../../../../../../../packages/ai-tools/src/mcp/serve.ts"],"mappings":";;;;;;;iBA6oBiB;;;;;;;EAOf,OAAO,SAAS,gBAAgB,UAAU,sBAAsB,QAAQ;;;;;;;;;;;;;;wBAe1D,mBACd,QAAQ,gBACR,SAAS,kBACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAuIa,MACd,QAAQ,gBACR,SAAS;EAAoB,WAAW;IACvC,UAAU;wBACG,MAAM,QAAQ,gBAAgB,SAAS,kBAAkB"}
+{"version":3,"file":"serve.d.mts","names":[],"sources":["../../../../../../../../packages/ai-tools/src/mcp/serve.ts"],"mappings":";;;;;;;iBA6tBiB;;;;;;;EAOf,OAAO,SAAS,gBAAgB,UAAU,sBAAsB,QAAQ;;;;;;;;;;;;;;wBAe1D,mBACd,QAAQ,gBACR,SAAS,kBACR;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA6Ja,MACd,QAAQ,gBACR,SAAS;EAAoB,WAAW;IACvC,UAAU;wBACG,MAAM,QAAQ,gBAAgB,SAAS,kBAAkB"}