@winstonsayno/mcp-gateway 0.0.0-stage → 0.4.0

package/dist/transport/stdio.d.ts

@@ -0,0 +1,35 @@
+/**
+ * stdio channel — spawns the MCP server as a child process and exchanges
+ * newline-delimited JSON-RPC over its stdin/stdout (MCP stdio transport).
+ *
+ * Carries over the v0.2 / audit fixes:
+ *  - stdout is decoded as a stream so multi-byte UTF-8 split across chunks survives;
+ *  - stream errors (EPIPE on a dead child) never become unhandled 'error' events;
+ *  - spawn errors and unexpected exits are reported once through `onclose`;
+ *  - shutdown follows the MCP spec: close stdin → SIGTERM → SIGKILL, waiting
+ *    for the real exit instead of trusting `proc.killed`;
+ *  - un-terminated stdout is capped.
+ *
+ * @module transport/stdio
+ */
+import type { McpServerConfig } from '../utils/types.js';
+import { type ChannelOptions, type JsonRpcMessage, type UpstreamChannel } from './channel.js';
+export declare class StdioChannel implements UpstreamChannel {
+    private readonly config;
+    private readonly options;
+    readonly kind = "stdio";
+    onmessage?: (message: JsonRpcMessage) => void;
+    onclose?: (error: Error) => void;
+    private proc?;
+    private buffer;
+    private closing;
+    private lost;
+    private exited;
+    constructor(config: McpServerConfig, options: ChannelOptions);
+    start(): Promise<void>;
+    private lose;
+    private drain;
+    send(message: JsonRpcMessage): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=stdio.d.ts.map

package/dist/transport/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/transport/stdio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAA2B,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAIvH,qBAAa,YAAa,YAAW,eAAe;IAYhD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,QAAQ,CAAC,IAAI,WAAW;IACxB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC,OAAO,CAAC,IAAI,CAAC,CAAe;IAC5B,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,MAAM,CAAiB;gBAGZ,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,cAAc;IAG1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2DtB,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,KAAK;IAiBP,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA2B7B"}

package/dist/transport/stdio.js

@@ -0,0 +1,149 @@
+/**
+ * stdio channel — spawns the MCP server as a child process and exchanges
+ * newline-delimited JSON-RPC over its stdin/stdout (MCP stdio transport).
+ *
+ * Carries over the v0.2 / audit fixes:
+ *  - stdout is decoded as a stream so multi-byte UTF-8 split across chunks survives;
+ *  - stream errors (EPIPE on a dead child) never become unhandled 'error' events;
+ *  - spawn errors and unexpected exits are reported once through `onclose`;
+ *  - shutdown follows the MCP spec: close stdin → SIGTERM → SIGKILL, waiting
+ *    for the real exit instead of trusting `proc.killed`;
+ *  - un-terminated stdout is capped.
+ *
+ * @module transport/stdio
+ */
+import { spawn } from 'child_process';
+import { logger } from '../utils/logger.js';
+import { expandEnv, expandRecord } from './channel.js';
+const MAX_BUFFER_CHARS = 16 * 1024 * 1024;
+export class StdioChannel {
+    config;
+    options;
+    kind = 'stdio';
+    onmessage;
+    onclose;
+    proc;
+    buffer = '';
+    closing = false;
+    lost = false;
+    exited;
+    constructor(config, options) {
+        this.config = config;
+        this.options = options;
+    }
+    start() {
+        const { config } = this;
+        if (!config.command)
+            return Promise.reject(new Error(`Server "${config.id}" has no command configured`));
+        // ${VAR} is expanded in args too (the examples pass e.g. ${DATABASE_URL} as an argument).
+        const proc = spawn(config.command, (config.args ?? []).map(expandEnv), {
+            env: { ...process.env, ...expandRecord(config.env) },
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        this.proc = proc;
+        let markExited;
+        this.exited = new Promise((r) => (markExited = r));
+        proc.stdout?.setEncoding('utf8');
+        proc.stdout?.on('data', (chunk) => {
+            this.buffer += chunk;
+            this.drain();
+            if (this.buffer.length > MAX_BUFFER_CHARS) {
+                logger.error(`[${config.id}] stdout line exceeded ${MAX_BUFFER_CHARS} chars; dropping session`);
+                this.buffer = '';
+                this.lose(new Error('MCP server sent an oversized message'));
+                proc.kill('SIGKILL');
+            }
+        });
+        proc.stderr?.on('data', (chunk) => {
+            logger.debug(`[${config.id}] stderr: ${chunk.toString().trim()}`);
+        });
+        const onStreamError = (err) => logger.debug(`[${config.id}] stdio stream error: ${err.message}`);
+        proc.stdin?.on('error', onStreamError);
+        proc.stdout?.on('error', onStreamError);
+        proc.stderr?.on('error', onStreamError);
+        return new Promise((resolve, reject) => {
+            let started = false;
+            proc.once('spawn', () => {
+                started = true;
+                resolve();
+            });
+            proc.on('error', (err) => {
+                logger.error(`[${config.id}] spawn error: ${err.message}`);
+                markExited(); // 'exit' may never fire if spawn failed
+                if (!started) {
+                    started = true;
+                    this.lost = true;
+                    reject(err);
+                    return;
+                }
+                this.lose(err);
+            });
+            proc.on('exit', (code, signal) => {
+                markExited();
+                if (!this.closing)
+                    logger.warn(`Server "${config.id}" exited (code=${code}, signal=${signal})`);
+                this.lose(new Error(`MCP server "${config.id}" exited unexpectedly (code=${code}, signal=${signal})`));
+            });
+        });
+    }
+    lose(err) {
+        if (this.lost || this.closing)
+            return;
+        this.lost = true;
+        this.onclose?.(err);
+    }
+    drain() {
+        if (!this.buffer.includes('\n'))
+            return;
+        const lines = this.buffer.split('\n');
+        this.buffer = lines.pop() ?? '';
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            let msg;
+            try {
+                msg = JSON.parse(trimmed);
+            }
+            catch {
+                continue; // Non-JSON line (some servers log to stdout) — ignore
+            }
+            if (msg && typeof msg === 'object')
+                this.onmessage?.(msg);
+        }
+    }
+    async send(message) {
+        const stdin = this.proc?.stdin;
+        if (this.lost || this.closing || !stdin || !stdin.writable) {
+            throw new Error(`Server "${this.config.id}" is not writable`);
+        }
+        stdin.write(JSON.stringify(message) + '\n');
+    }
+    async close() {
+        if (this.closing)
+            return;
+        this.closing = true;
+        const proc = this.proc;
+        if (!proc)
+            return;
+        const grace = this.options.killGraceMs;
+        const isRunning = () => proc.exitCode === null && proc.signalCode === null && proc.pid !== undefined;
+        const waitExit = (ms) => Promise.race([this.exited, new Promise((r) => setTimeout(r, ms).unref())]);
+        if (isRunning()) {
+            proc.stdin?.end();
+            await waitExit(Math.min(grace, 500));
+        }
+        if (isRunning()) {
+            proc.kill('SIGTERM');
+            await waitExit(grace);
+        }
+        if (isRunning()) {
+            proc.kill('SIGKILL');
+            await waitExit(grace);
+        }
+        proc.stdin?.destroy();
+        proc.stdout?.destroy();
+        proc.stderr?.destroy();
+    }
+}
+//# sourceMappingURL=stdio.js.map

package/dist/transport/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/transport/stdio.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAkE,MAAM,cAAc,CAAC;AAEvH,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,MAAM,OAAO,YAAY;IAYJ;IACA;IAZV,IAAI,GAAG,OAAO,CAAC;IACxB,SAAS,CAAqC;IAC9C,OAAO,CAA0B;IAEzB,IAAI,CAAgB;IACpB,MAAM,GAAG,EAAE,CAAC;IACZ,OAAO,GAAG,KAAK,CAAC;IAChB,IAAI,GAAG,KAAK,CAAC;IACb,MAAM,CAAiB;IAE/B,YACmB,MAAuB,EACvB,OAAuB;QADvB,WAAM,GAAN,MAAM,CAAiB;QACvB,YAAO,GAAP,OAAO,CAAgB;IACvC,CAAC;IAEJ,KAAK;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAEzG,0FAA0F;QAC1F,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YACrE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YACpD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAI,UAAuB,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;YACrB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,0BAA0B,gBAAgB,0BAA0B,CAAC,CAAC;gBAChG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,CAAC,GAAU,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAExC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3D,UAAU,EAAE,CAAC,CAAC,wCAAwC;gBACtD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC/B,UAAU,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,EAAE,kBAAkB,IAAI,YAAY,MAAM,GAAG,CAAC,CAAC;gBAChG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,EAAE,+BAA+B,IAAI,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,GAAU;QACrB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAEO,KAAK;QACX,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,GAAY,CAAC;YACjB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,sDAAsD;YAClE,CAAC;YACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC,GAAqB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACvC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;QACrG,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAEnF,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YAClB,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/transport/streamable-http.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Streamable HTTP channel — the current MCP HTTP transport (protocol 2025-03-26+).
+ *
+ *  - Every client→server message is a `POST <url>` with
+ *    `Accept: application/json, text/event-stream`.
+ *  - The server answers `202 Accepted` (notifications / responses), a single
+ *    `application/json` body, or a `text/event-stream` that carries the
+ *    response (plus any server requests/notifications sent before it).
+ *  - A session id returned in `Mcp-Session-Id` on `initialize` is echoed on
+ *    every later request; the negotiated version goes in `MCP-Protocol-Version`.
+ *  - `close()` ends the session with `DELETE` (best effort).
+ *
+ * Not implemented: the optional standalone `GET` stream for unsolicited server
+ * notifications, and SSE stream resumption. Neither is needed for tool calls.
+ *
+ * @module transport/streamable-http
+ */
+import type { McpServerConfig } from '../utils/types.js';
+import { type ChannelOptions, type JsonRpcId, type JsonRpcMessage, type UpstreamChannel } from './channel.js';
+export declare class StreamableHttpChannel implements UpstreamChannel {
+    private readonly config;
+    private readonly options;
+    readonly kind = "streamable-http";
+    onmessage?: (message: JsonRpcMessage) => void;
+    onclose?: (error: Error) => void;
+    private readonly url;
+    private readonly headers;
+    private sessionId?;
+    private protocolVersion?;
+    private closed;
+    private lost;
+    /** Open POST requests, keyed by JSON-RPC request id when they carry one. */
+    private readonly inflight;
+    constructor(config: McpServerConfig, options: ChannelOptions);
+    start(): Promise<void>;
+    setProtocolVersion(version: string): void;
+    private requestHeaders;
+    send(message: JsonRpcMessage): Promise<void>;
+    private deliver;
+    abandon(id: JsonRpcId): void;
+    private lose;
+    private abortAll;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=streamable-http.d.ts.map

package/dist/transport/streamable-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-http.d.ts","sourceRoot":"","sources":["../../src/transport/streamable-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AAGtB,qBAAa,qBAAsB,YAAW,eAAe;IAezD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAf1B,QAAQ,CAAC,IAAI,qBAAqB;IAClC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAS;IACrB,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkD;gBAGxD,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,cAAc;IAOpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIzC,OAAO,CAAC,cAAc;IAOhB,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA2ElD,OAAO,CAAC,OAAO;IAWf,OAAO,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI;IAK5B,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,QAAQ;IAKV,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB7B"}

package/dist/transport/streamable-http.js

@@ -0,0 +1,183 @@
+/**
+ * Streamable HTTP channel — the current MCP HTTP transport (protocol 2025-03-26+).
+ *
+ *  - Every client→server message is a `POST <url>` with
+ *    `Accept: application/json, text/event-stream`.
+ *  - The server answers `202 Accepted` (notifications / responses), a single
+ *    `application/json` body, or a `text/event-stream` that carries the
+ *    response (plus any server requests/notifications sent before it).
+ *  - A session id returned in `Mcp-Session-Id` on `initialize` is echoed on
+ *    every later request; the negotiated version goes in `MCP-Protocol-Version`.
+ *  - `close()` ends the session with `DELETE` (best effort).
+ *
+ * Not implemented: the optional standalone `GET` stream for unsolicited server
+ * notifications, and SSE stream resumption. Neither is needed for tool calls.
+ *
+ * @module transport/streamable-http
+ */
+import { logger } from '../utils/logger.js';
+import { errMessage, expandRecord, toMessages, } from './channel.js';
+import { readSseStream } from './sse-parser.js';
+export class StreamableHttpChannel {
+    config;
+    options;
+    kind = 'streamable-http';
+    onmessage;
+    onclose;
+    url;
+    headers;
+    sessionId;
+    protocolVersion;
+    closed = false;
+    lost = false;
+    /** Open POST requests, keyed by JSON-RPC request id when they carry one. */
+    inflight = new Map();
+    constructor(config, options) {
+        this.config = config;
+        this.options = options;
+        if (!config.url)
+            throw new Error(`Server "${config.id}" has no url configured`);
+        this.url = new URL(config.url);
+        this.headers = expandRecord(config.headers);
+    }
+    async start() {
+        // Nothing to open: the session starts with the `initialize` POST.
+    }
+    setProtocolVersion(version) {
+        this.protocolVersion = version;
+    }
+    requestHeaders(extra = {}) {
+        const h = { ...this.headers, ...extra };
+        if (this.sessionId)
+            h['mcp-session-id'] = this.sessionId;
+        if (this.protocolVersion)
+            h['mcp-protocol-version'] = this.protocolVersion;
+        return h;
+    }
+    async send(message) {
+        if (this.closed || this.lost)
+            throw new Error('Streamable HTTP channel is closed');
+        const key = message.method !== undefined && message.id !== undefined && message.id !== null ? message.id : Symbol('post');
+        const abort = new AbortController();
+        this.inflight.set(key, abort);
+        const done = () => {
+            if (this.inflight.get(key) === abort)
+                this.inflight.delete(key);
+        };
+        let res;
+        try {
+            res = await fetch(this.url, {
+                method: 'POST',
+                headers: this.requestHeaders({
+                    'Content-Type': 'application/json',
+                    Accept: 'application/json, text/event-stream',
+                }),
+                body: JSON.stringify(message),
+                redirect: 'error',
+                signal: abort.signal,
+            });
+        }
+        catch (err) {
+            done();
+            if (abort.signal.aborted)
+                throw new Error('Request aborted');
+            // The server is unreachable: whatever session it held is gone.
+            const e = new Error(`POST ${this.url.origin}${this.url.pathname} failed: ${errMessage(err)}`);
+            this.lose(e);
+            throw e;
+        }
+        const sid = res.headers.get('mcp-session-id');
+        if (sid)
+            this.sessionId = sid;
+        if (res.status === 404 && this.sessionId && message.method !== 'initialize') {
+            done();
+            await res.body?.cancel().catch(() => { });
+            const e = new Error('MCP session expired (HTTP 404)');
+            this.lose(e);
+            throw e;
+        }
+        if (!res.ok) {
+            done();
+            const text = (await res.text().catch(() => '')).slice(0, 200);
+            throw new Error(`MCP server returned HTTP ${res.status}${text ? `: ${text}` : ''}`);
+        }
+        if (res.status === 202 || !res.body) {
+            done();
+            await res.body?.cancel().catch(() => { });
+            return;
+        }
+        const contentType = res.headers.get('content-type') ?? '';
+        if (contentType.includes('text/event-stream')) {
+            // Deliver events as they arrive; keep the stream open in the background.
+            void readSseStream(res.body, (ev) => {
+                if (ev.event !== 'message' || !ev.data)
+                    return;
+                this.deliver(ev.data);
+            })
+                .catch((err) => {
+                if (!abort.signal.aborted)
+                    logger.debug(`[${this.config.id}] response stream error: ${errMessage(err)}`);
+            })
+                .finally(done);
+            return;
+        }
+        try {
+            const text = await res.text();
+            if (text.trim())
+                this.deliver(text);
+        }
+        finally {
+            done();
+        }
+    }
+    deliver(text) {
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            logger.debug(`[${this.config.id}] ignoring non-JSON message`);
+            return;
+        }
+        for (const m of toMessages(parsed))
+            this.onmessage?.(m);
+    }
+    abandon(id) {
+        this.inflight.get(id)?.abort();
+        this.inflight.delete(id);
+    }
+    lose(err) {
+        if (this.closed || this.lost)
+            return;
+        this.lost = true;
+        this.abortAll();
+        this.onclose?.(err);
+    }
+    abortAll() {
+        for (const c of this.inflight.values())
+            c.abort();
+        this.inflight.clear();
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.abortAll();
+        if (!this.sessionId || this.lost)
+            return;
+        // Politely end the session; servers may answer 405 if they do not support it.
+        try {
+            const res = await fetch(this.url, {
+                method: 'DELETE',
+                headers: this.requestHeaders(),
+                redirect: 'error',
+                signal: AbortSignal.timeout(this.options.killGraceMs),
+            });
+            await res.body?.cancel().catch(() => { });
+        }
+        catch {
+            // best effort
+        }
+    }
+}
+//# sourceMappingURL=streamable-http.js.map

package/dist/transport/streamable-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-http.js","sourceRoot":"","sources":["../../src/transport/streamable-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,GAKX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,OAAO,qBAAqB;IAeb;IACA;IAfV,IAAI,GAAG,iBAAiB,CAAC;IAClC,SAAS,CAAqC;IAC9C,OAAO,CAA0B;IAEhB,GAAG,CAAM;IACT,OAAO,CAAyB;IACzC,SAAS,CAAU;IACnB,eAAe,CAAU;IACzB,MAAM,GAAG,KAAK,CAAC;IACf,IAAI,GAAG,KAAK,CAAC;IACrB,4EAA4E;IAC3D,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE3E,YACmB,MAAuB,EACvB,OAAuB;QADvB,WAAM,GAAN,MAAM,CAAiB;QACvB,YAAO,GAAP,OAAO,CAAgB;QAExC,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,kEAAkE;IACpE,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,CAAC;IAEO,cAAc,CAAC,QAAgC,EAAE;QACvD,MAAM,CAAC,GAA2B,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,SAAS;YAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QACzD,IAAI,IAAI,CAAC,eAAe;YAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC;QAC3E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEnF,MAAM,GAAG,GACP,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC,CAAC;QAEF,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC;oBAC3B,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,qCAAqC;iBAC9C,CAAC;gBACF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,EAAE,CAAC;YACP,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC7D,+DAA+D;YAC/D,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,YAAY,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,CAAC;QACV,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,GAAG;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QAE9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5E,IAAI,EAAE,CAAC;YACP,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,EAAE,CAAC;YACP,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9C,yEAAyE;YACzE,KAAK,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;gBAClC,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,IAAI;oBAAE,OAAO;gBAC/C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC,CAAC;iBACC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,4BAA4B,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,CAAC,CAAC;iBACD,OAAO,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,EAAa;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAEO,IAAI,CAAC,GAAU;QACrB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAEO,QAAQ;QACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACzC,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE;gBAC9B,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;aACtD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;CACF"}

package/dist/transport/websocket.d.ts

@@ -0,0 +1,38 @@
+/**
+ * WebSocket channel — one JSON-RPC message per text frame, using the `mcp`
+ * subprotocol by default (the same convention as the official SDK's
+ * `WebSocketClientTransport`; override per server with `subprotocol`). Uses the `ws` package so custom headers work
+ * and Node 20 (no global WebSocket) is supported.
+ *
+ * Keep-alive pings detect half-open connections: if a pong does not arrive
+ * before the next ping, the socket is terminated and reported as lost.
+ * Reconnection is handled by the gateway supervisor, which re-runs the MCP
+ * handshake on a fresh socket.
+ *
+ * @module transport/websocket
+ */
+import type { McpServerConfig } from '../utils/types.js';
+import { type ChannelOptions, type JsonRpcMessage, type UpstreamChannel } from './channel.js';
+export interface WebSocketChannelOptions extends ChannelOptions {
+    pingIntervalMs?: number;
+}
+export declare class WebSocketChannel implements UpstreamChannel {
+    private readonly config;
+    private readonly options;
+    readonly kind = "websocket";
+    onmessage?: (message: JsonRpcMessage) => void;
+    onclose?: (error: Error) => void;
+    private ws?;
+    private closed;
+    private lost;
+    private pingTimer?;
+    private awaitingPong;
+    constructor(config: McpServerConfig, options: WebSocketChannelOptions);
+    start(): Promise<void>;
+    private lose;
+    private startPing;
+    private stopPing;
+    send(message: JsonRpcMessage): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=websocket.d.ts.map

package/dist/transport/websocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket.d.ts","sourceRoot":"","sources":["../../src/transport/websocket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAgB,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAK5G,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,gBAAiB,YAAW,eAAe;IAYpD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAZ1B,QAAQ,CAAC,IAAI,eAAe;IAC5B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAEjC,OAAO,CAAC,EAAE,CAAC,CAAY;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,SAAS,CAAC,CAAiB;IACnC,OAAO,CAAC,YAAY,CAAS;gBAGV,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,uBAAuB;IAKnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmEtB,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,SAAS;IAqBjB,OAAO,CAAC,QAAQ;IAKhB,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAwB7B"}

package/dist/transport/websocket.js

@@ -0,0 +1,172 @@
+/**
+ * WebSocket channel — one JSON-RPC message per text frame, using the `mcp`
+ * subprotocol by default (the same convention as the official SDK's
+ * `WebSocketClientTransport`; override per server with `subprotocol`). Uses the `ws` package so custom headers work
+ * and Node 20 (no global WebSocket) is supported.
+ *
+ * Keep-alive pings detect half-open connections: if a pong does not arrive
+ * before the next ping, the socket is terminated and reported as lost.
+ * Reconnection is handled by the gateway supervisor, which re-runs the MCP
+ * handshake on a fresh socket.
+ *
+ * @module transport/websocket
+ */
+import WebSocket from 'ws';
+import { logger } from '../utils/logger.js';
+import { expandRecord } from './channel.js';
+const SUBPROTOCOL = 'mcp';
+const MAX_PAYLOAD = 16 * 1024 * 1024;
+export class WebSocketChannel {
+    config;
+    options;
+    kind = 'websocket';
+    onmessage;
+    onclose;
+    ws;
+    closed = false;
+    lost = false;
+    pingTimer;
+    awaitingPong = false;
+    constructor(config, options) {
+        this.config = config;
+        this.options = options;
+        if (!config.url)
+            throw new Error(`Server "${config.id}" has no url configured`);
+    }
+    start() {
+        return new Promise((resolve, reject) => {
+            let settled = false;
+            // `subprotocol: ""` connects without requesting one (for servers that reject it).
+            const sub = this.config.subprotocol ?? SUBPROTOCOL;
+            const ws = new WebSocket(this.config.url, sub ? [sub] : [], {
+                headers: expandRecord(this.config.headers),
+                handshakeTimeout: this.options.connectTimeoutMs,
+                maxPayload: MAX_PAYLOAD,
+            });
+            this.ws = ws;
+            ws.on('open', () => {
+                settled = true;
+                this.startPing();
+                resolve();
+            });
+            ws.on('unexpected-response', (_req, res) => {
+                res.resume();
+                const err = new Error(`WebSocket upgrade rejected with HTTP ${res.statusCode}`);
+                ws.terminate();
+                if (!settled) {
+                    settled = true;
+                    reject(err);
+                }
+            });
+            ws.on('message', (raw, isBinary) => {
+                if (isBinary)
+                    return;
+                let msg;
+                try {
+                    msg = JSON.parse(raw.toString());
+                }
+                catch {
+                    logger.debug(`[${this.config.id}] ignoring non-JSON WebSocket frame`);
+                    return;
+                }
+                // Batches are arrays of messages.
+                for (const m of Array.isArray(msg) ? msg : [msg]) {
+                    if (m && typeof m === 'object')
+                        this.onmessage?.(m);
+                }
+            });
+            ws.on('pong', () => {
+                this.awaitingPong = false;
+            });
+            ws.on('error', (err) => {
+                logger.debug(`[${this.config.id}] WebSocket error: ${err.message}`);
+                if (!settled) {
+                    settled = true;
+                    reject(err);
+                }
+            });
+            ws.on('close', (code, reason) => {
+                this.stopPing();
+                if (!settled) {
+                    settled = true;
+                    reject(new Error(`WebSocket closed during connect (code=${code})`));
+                    return;
+                }
+                this.lose(new Error(`WebSocket closed (code=${code}, reason=${reason.toString() || 'none'})`));
+            });
+        });
+    }
+    lose(err) {
+        if (this.closed || this.lost)
+            return;
+        this.lost = true;
+        logger.warn(`[${this.config.id}] ${err.message}`);
+        this.onclose?.(err);
+    }
+    startPing() {
+        const interval = this.options.pingIntervalMs ?? 30_000;
+        if (!(interval > 0))
+            return;
+        this.pingTimer = setInterval(() => {
+            const ws = this.ws;
+            if (!ws || ws.readyState !== WebSocket.OPEN)
+                return;
+            if (this.awaitingPong) {
+                // No pong since the last ping: the connection is dead.
+                ws.terminate();
+                return;
+            }
+            this.awaitingPong = true;
+            try {
+                ws.ping();
+            }
+            catch {
+                // ignore — 'close' will follow
+            }
+        }, interval);
+        this.pingTimer.unref();
+    }
+    stopPing() {
+        if (this.pingTimer)
+            clearInterval(this.pingTimer);
+        this.pingTimer = undefined;
+    }
+    send(message) {
+        const ws = this.ws;
+        if (this.closed || this.lost || !ws || ws.readyState !== WebSocket.OPEN) {
+            return Promise.reject(new Error('WebSocket channel is not connected'));
+        }
+        return new Promise((resolve, reject) => {
+            ws.send(JSON.stringify(message), (err) => (err ? reject(err) : resolve()));
+        });
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.stopPing();
+        const ws = this.ws;
+        if (!ws)
+            return;
+        if (ws.readyState === WebSocket.CLOSED)
+            return;
+        await new Promise((resolve) => {
+            const force = setTimeout(() => {
+                ws.terminate();
+                resolve();
+            }, this.options.killGraceMs);
+            force.unref();
+            ws.once('close', () => {
+                clearTimeout(force);
+                resolve();
+            });
+            try {
+                ws.close(1000, 'Client disconnect');
+            }
+            catch {
+                ws.terminate();
+            }
+        });
+    }
+}
+//# sourceMappingURL=websocket.js.map