@webda/mcp 0.0.0-stage → 4.0.0-beta.4

package/lib/resources.js

@@ -0,0 +1,125 @@
+const SCHEME = "webda://";
+/**
+ * Registry of models exposed as `webda://{Model}/{pk...}` resources
+ */
+export class ResourceRegistry {
+    filter;
+    entries = [];
+    /**
+     * @param filter - model short ids to expose, or ["*"]
+     */
+    constructor(filter) {
+        this.filter = filter;
+    }
+    /**
+     * Rebuild from operations: every visible `{Model}.Get` with `context.pkFields`
+     * becomes a model; its `.Query` operation shares the same `context.model`.
+     * @param ops - visible operations
+     */
+    build(ops) {
+        this.entries = [];
+        for (const [id, op] of Object.entries(ops)) {
+            const match = /^(.+)\.Get$/.exec(id);
+            const pkFields = op.context?.pkFields;
+            if (!match || op.hidden || op.mcp === false || !Array.isArray(pkFields) || pkFields.length === 0) {
+                continue;
+            }
+            const name = match[1];
+            if (!this.filter.includes("*") && !this.filter.includes(name)) {
+                continue;
+            }
+            const query = Object.entries(ops).find(([qid, q]) => qid.endsWith(".Query") && !q.hidden && q.mcp !== false && q.context?.model !== undefined && q.context.model === op.context.model);
+            this.entries.push({ name, getOperationId: id, queryOperationId: query?.[0], pkFields: pkFields.map(String) });
+        }
+        this.entries.sort((a, b) => a.name.localeCompare(b.name));
+    }
+    /**
+     * @returns exposed models, sorted by name
+     */
+    models() {
+        return this.entries;
+    }
+    /**
+     * @returns MCP resource templates
+     */
+    templates() {
+        return this.entries.map(m => ({
+            uriTemplate: `${SCHEME}${m.name}/${m.pkFields.map(f => `{${f}}`).join("/")}`,
+            name: m.name,
+            mimeType: "application/json"
+        }));
+    }
+    /**
+     * @param model - the model
+     * @param record - an instance (or key object)
+     * @returns its resource URI
+     */
+    uriFor(model, record) {
+        return `${SCHEME}${model.name}/${model.pkFields.map(f => encodeURIComponent(String(record[f]))).join("/")}`;
+    }
+    /**
+     * @param uri - a resource URI
+     * @returns the model and decoded key, or undefined when it does not match
+     */
+    parse(uri) {
+        if (!uri.startsWith(SCHEME)) {
+            return undefined;
+        }
+        const [name, ...segments] = uri.substring(SCHEME.length).split("/");
+        const model = this.entries.find(m => m.name === name);
+        if (!model || segments.length !== model.pkFields.length || segments.some(s => s === "")) {
+            return undefined;
+        }
+        const key = {};
+        try {
+            model.pkFields.forEach((field, i) => (key[field] = decodeURIComponent(segments[i])));
+        }
+        catch {
+            return undefined;
+        }
+        return { model, key };
+    }
+}
+/**
+ * @param cursor - model and continuation token
+ * @param cursor.model - model short id
+ * @param cursor.token - continuation token of that model's query
+ * @returns opaque cursor
+ */
+export function encodeCursor(cursor) {
+    return Buffer.from(JSON.stringify(cursor)).toString("base64url");
+}
+/**
+ * @param cursor - opaque cursor
+ * @returns the decoded cursor, or undefined when absent or invalid
+ */
+export function decodeCursor(cursor) {
+    if (!cursor) {
+        return undefined;
+    }
+    try {
+        const parsed = JSON.parse(Buffer.from(cursor, "base64url").toString());
+        if (typeof parsed?.model !== "string") {
+            return undefined;
+        }
+        if (parsed.token !== undefined && typeof parsed.token !== "string") {
+            return undefined;
+        }
+        return { model: parsed.model, ...(parsed.token !== undefined && { token: parsed.token }) };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * @param token - continuation token
+ * @returns the WebdaQL query for one page
+ */
+export function queryFor(token) {
+    if (token === undefined) {
+        return "LIMIT 100";
+    }
+    const escaped = token.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    return `LIMIT 100 OFFSET "${escaped}"`;
+}
+//# sourceMappingURL=resources.js.map

package/lib/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../src/resources.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAML,MAAM;IALlB,OAAO,GAAoB,EAAE,CAAC;IAExC;;OAEG;IACH,YAAsB,MAAgB;sBAAhB,MAAM;IAAa,CAAC;IAE1C;;;;OAIG;IACH,KAAK,CAAC,GAAwC;QAC5C,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;YACtC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjG,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CACpC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,CAC/I,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,WAAW,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC5E,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAoB,EAAE,MAA+B;QAC1D,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9G,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAW;QACf,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACxF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAyC;IACpE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAA0B;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,OAAO,qBAAqB,OAAO,GAAG,CAAC;AACzC,CAAC"}

package/lib/schema.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Loose JSON schema shape used by MCP tool definitions
+ */
+export type JsonSchema = Record<string, any>;
+/**
+ * Resolve a schema by name (e.g. an application schema id like "WebdaSample/Post")
+ */
+export type SchemaResolver = (name: string) => JsonSchema | undefined;
+/**
+ * Return a self-contained copy of a JSON schema with every `$ref` inlined.
+ *
+ * MCP clients expect self-contained tool schemas. Local refs are looked up in
+ * the enclosing schema's `definitions`/`$defs`; anything else is resolved by
+ * name through `resolve` (Webda's dangling `#/definitions/<modelId>` refs).
+ * Cycles and unresolved refs become `{}` (accept anything).
+ *
+ * @param schema - the schema to inline
+ * @param resolve - resolver for refs not defined locally
+ * @param maxDepth - maximum number of nested refs to follow
+ * @returns a new schema without `$ref`, `definitions`, `$defs`, `$schema` or `$id`
+ */
+export declare function inlineSchema(schema: JsonSchema, resolve: SchemaResolver, maxDepth?: number): JsonSchema;
+//# sourceMappingURL=schema.d.ts.map

package/lib/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE7C;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;AAItE;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,GAAE,MAAU,GAAG,UAAU,CAE1G"}

package/lib/schema.js

@@ -0,0 +1,69 @@
+const REF_PREFIXES = ["#/definitions/", "#/$defs/"];
+/**
+ * Return a self-contained copy of a JSON schema with every `$ref` inlined.
+ *
+ * MCP clients expect self-contained tool schemas. Local refs are looked up in
+ * the enclosing schema's `definitions`/`$defs`; anything else is resolved by
+ * name through `resolve` (Webda's dangling `#/definitions/<modelId>` refs).
+ * Cycles and unresolved refs become `{}` (accept anything).
+ *
+ * @param schema - the schema to inline
+ * @param resolve - resolver for refs not defined locally
+ * @param maxDepth - maximum number of nested refs to follow
+ * @returns a new schema without `$ref`, `definitions`, `$defs`, `$schema` or `$id`
+ */
+export function inlineSchema(schema, resolve, maxDepth = 8) {
+    return inlineNode(schema, resolve, [schema?.definitions ?? schema?.$defs ?? {}], [], maxDepth);
+}
+/**
+ * Inline one schema node
+ * @param node - current node
+ * @param resolve - external resolver
+ * @param defs - stack of definition scopes, innermost last
+ * @param seen - ref names currently being expanded (cycle guard)
+ * @param maxDepth - remaining ref depth
+ * @returns the inlined node
+ */
+function inlineNode(node, resolve, defs, seen, maxDepth) {
+    if (Array.isArray(node)) {
+        return node.map(item => inlineNode(item, resolve, defs, seen, maxDepth));
+    }
+    if (node === null || typeof node !== "object") {
+        return node;
+    }
+    if (typeof node.$ref === "string") {
+        const prefix = REF_PREFIXES.find(p => node.$ref.startsWith(p));
+        let name = prefix ? node.$ref.substring(prefix.length) : node.$ref;
+        if (prefix) {
+            try {
+                name = decodeURIComponent(name);
+            }
+            catch {
+                // malformed escape: fall back to the raw name
+            }
+        }
+        if (seen.includes(name) || seen.length >= maxDepth) {
+            return {};
+        }
+        let target;
+        for (let i = defs.length - 1; i >= 0 && !target; i--) {
+            target = defs[i][name];
+        }
+        target ??= resolve(name);
+        if (!target) {
+            return {};
+        }
+        const { $ref, ...siblings } = node;
+        const scopes = target.definitions || target.$defs ? [...defs, target.definitions ?? target.$defs] : defs;
+        return { ...inlineNode(target, resolve, scopes, [...seen, name], maxDepth), ...inlineNode(siblings, resolve, defs, seen, maxDepth) };
+    }
+    const out = {};
+    for (const [key, value] of Object.entries(node)) {
+        if (key === "definitions" || key === "$defs" || key === "$schema" || key === "$id") {
+            continue;
+        }
+        out[key] = inlineNode(value, resolve, defs, seen, maxDepth);
+    }
+    return out;
+}
+//# sourceMappingURL=schema.js.map

package/lib/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAUA,MAAM,YAAY,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,OAAuB,EAAE,QAAQ,GAAW,CAAC;IAC5F,OAAO,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,IAAS,EAAE,OAAuB,EAAE,IAAkB,EAAE,IAAc,EAAE,QAAgB;IAC1G,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,IAAI,GAAW,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3E,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;YACnD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,MAA8B,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzG,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;IACvI,CAAC;IACD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YACnF,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/lib/server.d.ts

@@ -0,0 +1,54 @@
+import { Session } from "@webda/core";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import type { AuthInfo } from "@modelcontextprotocol/sdk/server/auth/types.js";
+import { ResourceRegistry } from "./resources.js";
+import { ToolRegistry } from "./tools.js";
+/**
+ * JSON-RPC error code for a missing resource (MCP spec)
+ */
+export declare const RESOURCE_NOT_FOUND = -32002;
+/**
+ * Number of tools per tools/list page
+ */
+export declare const TOOLS_PAGE_SIZE = 100;
+/**
+ * Dependencies of an MCP server instance
+ */
+export interface McpServerOptions {
+    /**
+     * Server name and version announced at initialize
+     */
+    info: {
+        name: string;
+        version: string;
+    };
+    /**
+     * Tools exposed
+     */
+    tools: ToolRegistry;
+    /**
+     * Resources exposed; undefined disables resources
+     */
+    resources?: ResourceRegistry;
+    /**
+     * Truncation threshold for tool and resource text
+     */
+    maxOutputBytes: number;
+    /**
+     * Caller session for a request
+     */
+    getSession: (extra: {
+        authInfo?: AuthInfo;
+    }) => Session;
+    /**
+     * Hook run before tools/resources requests (tool list change detection)
+     */
+    beforeRequest?: () => void;
+}
+/**
+ * Create an SDK server wired to Webda operations
+ * @param options - registries, session resolution and limits
+ * @returns an unconnected SDK Server
+ */
+export declare function createMcpServer(options: McpServerOptions): Server;
+//# sourceMappingURL=server.d.ts.map

package/lib/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,OAAO,EAAc,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAa/E,OAAO,EAAwC,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C;;GAEG;AACH,eAAO,MAAM,kBAAkB,SAAS,CAAC;AAEzC;;GAEG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC;;OAEG;IACH,KAAK,EAAE,YAAY,CAAC;IACpB;;OAEG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,UAAU,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,QAAQ,CAAA;KAAE,KAAK,OAAO,CAAC;IACxD;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B;AA6BD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CA4HjE"}

package/lib/server.js

@@ -0,0 +1,167 @@
+import { canCallOperation, WebdaError } from "@webda/core";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ErrorCode, ListResourcesRequestSchema, ListResourceTemplatesRequestSchema, ListToolsRequestSchema, McpError, ReadResourceRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { useLog } from "@webda/workout";
+import { errorToToolResult, runOperation, sessionContext, toToolResult, truncateUtf8 } from "./invoke.js";
+import { decodeCursor, encodeCursor, queryFor } from "./resources.js";
+/**
+ * JSON-RPC error code for a missing resource (MCP spec)
+ */
+export const RESOURCE_NOT_FOUND = -32002;
+/**
+ * Number of tools per tools/list page
+ */
+export const TOOLS_PAGE_SIZE = 100;
+/**
+ * Map an error thrown by a resource operation to an MCP error.
+ *
+ * With a `uri` (resources/read) a NotFound becomes RESOURCE_NOT_FOUND; without
+ * one (resources/list) a NotFound is treated like any other client error.
+ * Other 4xx messages are forwarded, anything else is logged and masked.
+ * @param err - thrown error
+ * @param uri - requested resource uri, when reading one resource
+ * @returns the error to throw
+ */
+function toResourceError(err, uri) {
+    if (err instanceof McpError) {
+        return err;
+    }
+    if (uri !== undefined && err instanceof WebdaError.NotFound) {
+        return new McpError(RESOURCE_NOT_FOUND, "Resource not found", { uri });
+    }
+    if (err instanceof WebdaError.CodeError) {
+        const code = err.getResponseCode();
+        if (code >= 400 && code < 500) {
+            return new McpError(ErrorCode.InternalError, err.message);
+        }
+    }
+    useLog("ERROR", "MCP resource operation failed", err);
+    return new McpError(ErrorCode.InternalError, "Internal error");
+}
+/**
+ * Create an SDK server wired to Webda operations
+ * @param options - registries, session resolution and limits
+ * @returns an unconnected SDK Server
+ */
+export function createMcpServer(options) {
+    const { tools, resources } = options;
+    const server = new Server(options.info, {
+        capabilities: {
+            tools: { listChanged: true },
+            ...(resources ? { resources: { listChanged: false, subscribe: false } } : {})
+        }
+    });
+    const allowed = (session, operationId) => canCallOperation(sessionContext(session), operationId);
+    server.setRequestHandler(ListToolsRequestSchema, async (request, extra) => {
+        options.beforeRequest?.();
+        const session = options.getSession(extra);
+        const visible = tools.list().filter(e => allowed(session, e.operationId));
+        const offset = Number(request.params?.cursor ?? 0) || 0;
+        const page = visible.slice(offset, offset + TOOLS_PAGE_SIZE);
+        const next = offset + TOOLS_PAGE_SIZE < visible.length ? String(offset + TOOLS_PAGE_SIZE) : undefined;
+        return { tools: page.map(e => e.tool), ...(next ? { nextCursor: next } : {}) };
+    });
+    server.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
+        options.beforeRequest?.();
+        const session = options.getSession(extra);
+        const entry = tools.get(request.params.name);
+        if (!entry || !allowed(session, entry.operationId)) {
+            throw new McpError(ErrorCode.InvalidParams, `Unknown tool: ${request.params.name}`);
+        }
+        const args = request.params.arguments ?? {};
+        const progressToken = request.params._meta?.progressToken;
+        const pending = [];
+        try {
+            const { value, streamed } = await runOperation(entry.operationId, {
+                session,
+                input: entry.wrapped ? args.value : args,
+                signal: extra.signal,
+                onChunk: progressToken === undefined
+                    ? undefined
+                    : (chunk, index) => {
+                        const total = chunk?.total;
+                        const sent = extra
+                            .sendNotification({
+                            method: "notifications/progress",
+                            params: {
+                                progressToken,
+                                progress: index,
+                                ...(typeof total === "number" ? { total } : {}),
+                                message: JSON.stringify(chunk)
+                            }
+                        })
+                            .catch(err => useLog("WARN", "MCP progress notification failed", err));
+                        pending.push(sent);
+                    }
+            });
+            await Promise.allSettled(pending);
+            return toToolResult(entry, value, streamed, options.maxOutputBytes);
+        }
+        catch (err) {
+            await Promise.allSettled(pending);
+            return errorToToolResult(err);
+        }
+    });
+    if (!resources) {
+        return server;
+    }
+    server.setRequestHandler(ListResourceTemplatesRequestSchema, async () => {
+        options.beforeRequest?.();
+        return { resourceTemplates: resources.templates() };
+    });
+    server.setRequestHandler(ReadResourceRequestSchema, async (request, extra) => {
+        options.beforeRequest?.();
+        const match = resources.parse(request.params.uri);
+        if (!match) {
+            throw new McpError(RESOURCE_NOT_FOUND, "Resource not found", { uri: request.params.uri });
+        }
+        try {
+            const { value } = await runOperation(match.model.getOperationId, { session: options.getSession(extra), input: match.key });
+            const cut = truncateUtf8(JSON.stringify(value ?? null), options.maxOutputBytes);
+            const text = cut.truncated
+                ? `${cut.text}\n[output truncated: ${cut.bytes} bytes exceeds maxOutputBytes ${options.maxOutputBytes}]`
+                : cut.text;
+            return { contents: [{ uri: request.params.uri, mimeType: "application/json", text }] };
+        }
+        catch (err) {
+            throw toResourceError(err, request.params.uri);
+        }
+    });
+    server.setRequestHandler(ListResourcesRequestSchema, async (request, extra) => {
+        options.beforeRequest?.();
+        const session = options.getSession(extra);
+        const listable = resources.models().filter(m => m.queryOperationId && allowed(session, m.queryOperationId));
+        const cursor = decodeCursor(request.params?.cursor);
+        const index = cursor ? listable.findIndex(m => m.name === cursor.model) : 0;
+        if (index < 0) {
+            throw new McpError(ErrorCode.InvalidParams, "Invalid cursor");
+        }
+        if (index >= listable.length) {
+            return { resources: [] };
+        }
+        const model = listable[index];
+        let value;
+        try {
+            ({ value } = await runOperation(model.queryOperationId, { session, input: { query: queryFor(cursor?.token) } }));
+        }
+        catch (err) {
+            throw toResourceError(err);
+        }
+        const result = (value ?? {});
+        const items = (result.results ?? []).map(record => ({
+            uri: resources.uriFor(model, record),
+            name: `${model.name} ${model.pkFields.map(f => String(record[f])).join("/")}`,
+            mimeType: "application/json"
+        }));
+        let nextCursor;
+        if (result.continuationToken) {
+            nextCursor = encodeCursor({ model: model.name, token: result.continuationToken });
+        }
+        else if (index + 1 < listable.length) {
+            nextCursor = encodeCursor({ model: listable[index + 1].name });
+        }
+        return { resources: items, ...(nextCursor ? { nextCursor } : {}) };
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/lib/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAW,UAAU,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,0BAA0B,EAC1B,kCAAkC,EAClC,sBAAsB,EACtB,QAAQ,EACR,yBAAyB,EAE1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAoB,MAAM,gBAAgB,CAAC;AAGxF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC;AAEzC;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAgCnC;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,GAAY,EAAE,GAAY;IACjD,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,YAAY,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5D,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,YAAY,UAAU,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;QACnC,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YAC9B,OAAO,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACtC,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;YAC5B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,WAAmB,EAAE,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IAElH,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACxE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,GAAG,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;QAC1D,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE;gBAChE,OAAO;gBACP,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,IAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACjD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EACL,aAAa,KAAK,SAAS;oBACzB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;wBACf,MAAM,KAAK,GAAI,KAAa,EAAE,KAAK,CAAC;wBACpC,MAAM,IAAI,GAAG,KAAK;6BACf,gBAAgB,CAAC;4BAChB,MAAM,EAAE,wBAAwB;4BAChC,MAAM,EAAE;gCACN,aAAa;gCACb,QAAQ,EAAE,KAAK;gCACf,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCAC/C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;6BAC/B;yBACF,CAAC;6BACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC,CAAC;wBACzE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;aACR,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QACtE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3E,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YAC3H,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS;gBACxB,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,wBAAwB,GAAG,CAAC,KAAK,iCAAiC,OAAO,CAAC,cAAc,GAAG;gBACxG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5E,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACnH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CAAwE,CAAC;QACpG,MAAM,KAAK,GAAe,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9D,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;YACpC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC7E,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC,CAAC;QACJ,IAAI,UAA8B,CAAC;QACnC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC7B,UAAU,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACpF,CAAC;aAAM,IAAI,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvC,UAAU,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/sessions.d.ts

@@ -0,0 +1,78 @@
+import type { Server } from "@modelcontextprotocol/sdk/server/index.js";
+/**
+ * An open MCP HTTP session
+ */
+export interface McpSessionEntry {
+    /**
+     * Mcp-Session-Id
+     */
+    id: string;
+    /**
+     * SDK server bound to this session
+     */
+    server: Server;
+    /**
+     * SDK transport bound to this session
+     */
+    transport: {
+        close(): Promise<void>;
+    };
+    /**
+     * User who initialized the session (undefined = anonymous)
+     */
+    userId?: string;
+    /**
+     * Last activity timestamp (ms)
+     */
+    lastSeen: number;
+}
+/**
+ * In-memory MCP sessions with idle eviction
+ */
+export declare class McpSessionManager {
+    protected timeoutMs: number;
+    protected now: () => number;
+    protected sessions: Map<string, McpSessionEntry>;
+    /**
+     * @param timeoutMs - idle time before eviction
+     * @param now - clock (injectable for tests)
+     */
+    constructor(timeoutMs: number, now?: () => number);
+    /**
+     * @param entry - session to track
+     */
+    add(entry: McpSessionEntry): void;
+    /**
+     * Find a session and refresh its activity
+     * @param id - session id
+     * @returns the session or undefined
+     */
+    get(id: string): McpSessionEntry | undefined;
+    /**
+     * @param id - session id to forget (does not close it)
+     */
+    remove(id: string): void;
+    /**
+     * @returns all sessions
+     */
+    all(): McpSessionEntry[];
+    /**
+     * Close and remove sessions idle longer than the timeout
+     * @returns number of evicted sessions
+     */
+    evictIdle(): Promise<number>;
+    /**
+     * Close and remove the least recently used session
+     * @returns the evicted session id, or undefined when there is none
+     */
+    evictOldest(): Promise<string | undefined>;
+    /**
+     * Close every session
+     */
+    closeAll(): Promise<void>;
+    /**
+     * @param entry - session to close and remove
+     */
+    protected close(entry: McpSessionEntry): Promise<void>;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/lib/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGxE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,SAAS,EAAE;QAAE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IACtC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAQ1B,SAAS,CAAC,SAAS,EAAE,MAAM;IAC3B,SAAS,CAAC,GAAG,EAAE,MAAM,MAAM;IAR7B,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAa;IAE7D;;;OAGG;IACH,YACY,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,MAAyB,EAC5C;IAEJ;;OAEG;IACH,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAGhC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAM3C;IAED;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAEvB;IAED;;OAEG;IACH,GAAG,IAAI,eAAe,EAAE,CAEvB;IAED;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAOjC;IAED;;;OAGG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAY/C;IAED;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAI9B;IAED;;OAEG;IACH,UAAgB,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3D;CACF"}

package/lib/sessions.js

@@ -0,0 +1,99 @@
+import { useLog } from "@webda/workout";
+/**
+ * In-memory MCP sessions with idle eviction
+ */
+export class McpSessionManager {
+    timeoutMs;
+    now;
+    sessions = new Map();
+    /**
+     * @param timeoutMs - idle time before eviction
+     * @param now - clock (injectable for tests)
+     */
+    constructor(timeoutMs, now = () => Date.now()) {
+        this.timeoutMs = timeoutMs;
+        this.now = now;
+    }
+    /**
+     * @param entry - session to track
+     */
+    add(entry) {
+        entry.lastSeen = this.now();
+        this.sessions.set(entry.id, entry);
+    }
+    /**
+     * Find a session and refresh its activity
+     * @param id - session id
+     * @returns the session or undefined
+     */
+    get(id) {
+        const entry = this.sessions.get(id);
+        if (entry) {
+            entry.lastSeen = this.now();
+        }
+        return entry;
+    }
+    /**
+     * @param id - session id to forget (does not close it)
+     */
+    remove(id) {
+        this.sessions.delete(id);
+    }
+    /**
+     * @returns all sessions
+     */
+    all() {
+        return [...this.sessions.values()];
+    }
+    /**
+     * Close and remove sessions idle longer than the timeout
+     * @returns number of evicted sessions
+     */
+    async evictIdle() {
+        const limit = this.now() - this.timeoutMs;
+        const idle = this.all().filter(e => e.lastSeen < limit);
+        for (const entry of idle) {
+            await this.close(entry);
+        }
+        return idle.length;
+    }
+    /**
+     * Close and remove the least recently used session
+     * @returns the evicted session id, or undefined when there is none
+     */
+    async evictOldest() {
+        let oldest;
+        for (const entry of this.sessions.values()) {
+            if (!oldest || entry.lastSeen < oldest.lastSeen) {
+                oldest = entry;
+            }
+        }
+        if (!oldest) {
+            return undefined;
+        }
+        await this.close(oldest);
+        return oldest.id;
+    }
+    /**
+     * Close every session
+     */
+    async closeAll() {
+        for (const entry of this.all()) {
+            await this.close(entry);
+        }
+    }
+    /**
+     * @param entry - session to close and remove
+     */
+    async close(entry) {
+        this.sessions.delete(entry.id);
+        try {
+            await entry.transport.close();
+            await entry.server.close();
+        }
+        catch (err) {
+            useLog("WARN", "Failed to close MCP session", entry.id, err);
+        }
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/lib/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AA4BxC;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAQhB,SAAS;IACT,GAAG;IARL,QAAQ,GAAiC,IAAI,GAAG,EAAE,CAAC;IAE7D;;;OAGG;IACH,YACY,SAAiB,EACjB,GAAG,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;yBADpC,SAAS;mBACT,GAAG;IACZ,CAAC;IAEJ;;OAEG;IACH,GAAG,CAAC,KAAsB;QACxB,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,EAAU;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;QACxD,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,MAAmC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAChD,MAAM,GAAG,KAAK,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,KAAK,CAAC,KAAsB;QAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,EAAE,6BAA6B,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF"}