@wrongstack/mcp 0.284.1 → 0.286.0

package/dist/server.d.ts

@@ -0,0 +1,134 @@
+import type { MCPPromptArgument, MCPPromptMessage, MCPResourceContents } from './protocol.js';
+/**
+ * Server-side MCP. The mirror image of `MCPClient`: instead of consuming a
+ * remote MCP server, this lets WrongStack *be* an MCP server — exposing its
+ * tools to any MCP client (Claude Desktop, another agent, an IDE) over a
+ * JSON-RPC 2.0 stream.
+ *
+ * The protocol core (`MCPServer`) is transport-agnostic: feed it a raw JSON
+ * line via `handleMessage`, get back a response string (or `null` for
+ * notifications). `serveStdio` wires it to stdin/stdout for the canonical
+ * stdio transport.
+ */
+/** A tool descriptor advertised over `tools/list`. */
+export interface MCPServerTool {
+    name: string;
+    description?: string | undefined;
+    inputSchema: Record<string, unknown>;
+}
+/** The result of a `tools/call`, as the host produces it. */
+export interface MCPServerCallResult {
+    /** Text or pre-built MCP content blocks. Strings are wrapped as a text block. */
+    content: unknown;
+    isError: boolean;
+}
+/**
+ * Bridges the MCP server to a tool backend (in the CLI, the `ToolRegistry`).
+ * Kept narrow so the protocol core has no dependency on `@wrongstack/core`.
+ */
+export interface MCPServerToolHost {
+    listTools(): MCPServerTool[] | Promise<MCPServerTool[]>;
+    callTool(name: string, args: Record<string, unknown>): Promise<MCPServerCallResult>;
+}
+export interface MCPServerResource {
+    uri: string;
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    mimeType?: string | undefined;
+    size?: number | undefined;
+    contents: MCPResourceContents[];
+}
+export interface MCPServerPrompt {
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    arguments?: MCPPromptArgument[] | undefined;
+    /** Static rich messages, or a text template using {{argument}} placeholders. */
+    messages?: MCPPromptMessage[] | undefined;
+    template?: string | undefined;
+}
+export interface MCPServerLogger {
+    warn?(msg: string): void;
+    info?(msg: string): void;
+}
+export interface MCPServerOptions {
+    host: MCPServerToolHost;
+    /** Advertised in the `initialize` handshake. Defaults to the wrongstack identity. */
+    serverInfo?: {
+        name: string;
+        version: string;
+    };
+    logger?: MCPServerLogger | undefined;
+    /** Explicit allowlist only; omitted means this server exposes no resources. */
+    resources?: MCPServerResource[] | undefined;
+    /** Explicit allowlist only; omitted means this server exposes no prompts. */
+    prompts?: MCPServerPrompt[] | undefined;
+}
+export declare class MCPServer {
+    private readonly host;
+    private readonly serverInfo;
+    private readonly logger?;
+    private readonly resources;
+    private readonly prompts;
+    constructor(opts: MCPServerOptions);
+    /**
+     * Handle one raw JSON-RPC line. Returns the response JSON string for
+     * requests, or `null` for notifications (no `id`) and for blank input —
+     * the caller should write the string to its output stream when non-null.
+     */
+    handleMessage(raw: string): Promise<string | null>;
+    private dispatch;
+    private encodeError;
+}
+/** Normalize a host result's content into MCP content blocks. */
+export declare function toContentBlocks(content: unknown): Array<{
+    type: 'text';
+    text: string;
+}>;
+export interface ServeStdioHandle {
+    /** Stop reading and detach listeners. Does not exit the process. */
+    close(): void;
+    /** Resolves when the input stream ends (EOF). */
+    done: Promise<void>;
+}
+export interface ServeStdioOptions {
+    stdin?: NodeJS.ReadableStream | undefined;
+    stdout?: NodeJS.WritableStream | undefined;
+}
+/**
+ * Run an `MCPServer` over stdio: newline-delimited JSON-RPC in on stdin,
+ * responses out on stdout. CRITICAL: nothing else may write to stdout while
+ * this runs — it is the JSON-RPC channel. Route all logging to stderr.
+ */
+export declare function serveStdio(server: MCPServer, opts?: ServeStdioOptions): ServeStdioHandle;
+export interface ServeHttpOptions {
+    /** TCP port. 0 picks an ephemeral port (resolved in the handle). Default 0. */
+    port?: number | undefined;
+    /** Bind address. Default '127.0.0.1' (loopback only). */
+    host?: string | undefined;
+    /**
+     * Bearer token required on every request (`Authorization: Bearer <token>`).
+     * REQUIRED when binding to a non-loopback host — `serveHttp` refuses to
+     * expose tools to the network without one.
+     */
+    token?: string | undefined;
+    logger?: MCPServerLogger | undefined;
+}
+export interface ServeHttpHandle {
+    port: number;
+    host: string;
+    url: string;
+    close(): Promise<void>;
+}
+/**
+ * Run an `MCPServer` over HTTP: POST a single JSON-RPC request, get the JSON
+ * response (notifications → 202 with no body). Reuses `handleMessage`, so the
+ * protocol is identical to the stdio transport.
+ *
+ * Security: binds to loopback by default. Binding to any other host (e.g.
+ * `0.0.0.0`) REQUIRES a `token` — otherwise this rejects, because it would
+ * otherwise expose tool execution to the whole network unauthenticated.
+ */
+export declare function serveHttp(server: MCPServer, opts?: ServeHttpOptions): Promise<ServeHttpHandle>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC9F;;;;;;;;;;GAUG;AAEH,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,aAAa,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,SAAS,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC5C,gFAAgF;IAChF,QAAQ,CAAC,EAAE,gBAAgB,EAAE,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qFAAqF;IACrF,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACrC,+EAA+E;IAC/E,SAAS,CAAC,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC5C,6EAA6E;IAC7E,OAAO,CAAC,EAAE,eAAe,EAAE,GAAG,SAAS,CAAC;CACzC;AAeD,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAE5C,YAAY,IAAI,EAAE,gBAAgB,EASjC;IAED;;;;OAIG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuCvD;YAEa,QAAQ;IAuFtB,OAAO,CAAC,WAAW;CAGpB;AA2DD,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYvF;AAWD,MAAM,WAAW,gBAAgB;IAC/B,oEAAoE;IACpE,KAAK,IAAI,IAAI,CAAC;IACd,iDAAiD;IACjD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;CAC5C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,GAAE,iBAAsB,GAAG,gBAAgB,CA6H5F;AAMD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,SAAS,EACjB,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAqC1B"}

package/dist/test-helpers/mock-server.d.ts

@@ -0,0 +1,34 @@
+import type { MCPTool } from '../client.js';
+export interface MockToolResponse {
+    content: unknown;
+    isError?: boolean | undefined;
+}
+export interface MockMCPServerOptions {
+    /** Delay injected between receiving a request and sending the response (ms). */
+    responseDelayMs?: number | undefined;
+}
+/**
+ * Minimal in-process MCP server that speaks JSON-RPC over stdio.
+ * Writes a self-contained Node.js script to a temp file and exposes the path
+ * for spawning as a child process.
+ */
+export declare class MockMCPServer {
+    private readonly tools;
+    private readonly delayMs;
+    /** Responses keyed by `JSON.stringify(params)` for tools/call. */
+    private readonly responses;
+    private scriptPath?;
+    constructor(tools?: MCPTool[], opts?: MockMCPServerOptions);
+    setResponse(params: unknown, response: MockToolResponse | string): void;
+    setTools(tools: MCPTool[]): void;
+    /**
+     * Write the mock server script to a temp file and return the path.
+     * The script is self-contained and requires no external dependencies.
+     */
+    writeScript(): Promise<string>;
+    /** Delete the temp script. Call after test completes. */
+    cleanup(): Promise<void>;
+    /** Path to the script if already written via writeScript(). */
+    get path(): string | undefined;
+}
+//# sourceMappingURL=mock-server.d.ts.map

package/dist/test-helpers/mock-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-server.d.ts","sourceRoot":"","sources":["../../src/test-helpers/mock-server.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,UAAU,CAAC,CAAqB;IAExC,YAAY,KAAK,GAAE,OAAO,EAAO,EAAE,IAAI,GAAE,oBAAyB,EAGjE;IAED,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAKtE;IAED,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAG/B;IAED;;;OAGG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAoDnC;IAED,yDAAyD;IACnD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAS7B;IAED,+DAA+D;IAC/D,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;CACF"}

package/dist/token-store.d.ts

@@ -0,0 +1,56 @@
+import type { MCPServerConfig, SecretVault } from '@wrongstack/core';
+import { type MCPAuthorizationChallenge, type MCPAuthorizationContext, type MCPAuthorizationProvider, type MCPAuthorizationServerMetadata, type MCPTokenSet } from './authorization.js';
+export interface MCPStoredAuthorization {
+    serverName: string;
+    resource: string;
+    clientId: string;
+    authorizationServer: MCPAuthorizationServerMetadata;
+    tokenSet: MCPTokenSet;
+    updatedAt: string;
+}
+export interface MCPAuthorizationStateEvent {
+    serverName: string;
+    state: 'authorized' | 'refreshed' | 'reauth_required' | 'removed';
+    resource: string;
+    expiresAt?: number | undefined;
+    scopes?: string[] | undefined;
+}
+export interface MCPRefreshingAuthorizationProviderOptions {
+    serverName: string;
+    resource: string;
+    store: MCPVaultTokenStore;
+    refreshSkewMs?: number | undefined;
+    onStateChange?: ((event: MCPAuthorizationStateEvent) => void) | undefined;
+}
+export interface MCPVaultProviderFactoryOptions {
+    store: MCPVaultTokenStore;
+    refreshSkewMs?: number | undefined;
+    onStateChange?: ((event: MCPAuthorizationStateEvent) => void) | undefined;
+}
+export declare class MCPVaultTokenStore {
+    private readonly filePath;
+    private readonly vault;
+    constructor(filePath: string, vault: SecretVault);
+    load(serverName: string, resource: string): Promise<MCPStoredAuthorization | undefined>;
+    save(value: MCPStoredAuthorization): Promise<void>;
+    remove(serverName: string, resource: string): Promise<boolean>;
+    private readFile;
+    private writeFile;
+    private encryptEntry;
+    private decryptEntry;
+}
+export declare class MCPRefreshingAuthorizationProvider implements MCPAuthorizationProvider {
+    private readonly options;
+    private refreshPromise?;
+    private readonly resource;
+    private readonly refreshSkewMs;
+    constructor(options: MCPRefreshingAuthorizationProviderOptions);
+    getAccessToken(context: MCPAuthorizationContext): Promise<MCPTokenSet | undefined>;
+    handleUnauthorized(challenge: MCPAuthorizationChallenge, context: MCPAuthorizationContext): Promise<boolean>;
+    private refresh;
+    private refreshInner;
+    private assertContext;
+    private emit;
+}
+export declare function createVaultBackedMcpAuthorizationProviderFactory(options: MCPVaultProviderFactoryOptions): (server: Readonly<MCPServerConfig>) => MCPAuthorizationProvider | undefined;
+//# sourceMappingURL=token-store.d.ts.map

package/dist/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAErE,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,WAAW,EAGjB,MAAM,oBAAoB,CAAC;AAO5B,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB,EAAE,8BAA8B,CAAC;IACpD,QAAQ,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAqBD,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,yCAAyC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3E;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,kBAAkB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3E;AAED,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFxB,YACmB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,EACjC;IAEE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAU5F;IAEK,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAavD;IAEK,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAWnE;YAEa,QAAQ;YAmBR,SAAS;IASvB,OAAO,CAAC,YAAY;IAyBpB,OAAO,CAAC,YAAY;CAwBrB;AAED,qBAAa,kCAAmC,YAAW,wBAAwB;IAKrE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,cAAc,CAAC,CAA0D;IACjF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAA6B,OAAO,EAAE,yCAAyC,EAG9E;IAEK,cAAc,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAiBvF;IAEK,kBAAkB,CACtB,SAAS,EAAE,yBAAyB,EACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,OAAO,CAAC,CASlB;IAED,OAAO,CAAC,OAAO;YAWD,YAAY;IA0B1B,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,IAAI;CASb;AAED,wBAAgB,gDAAgD,CAC9D,OAAO,EAAE,8BAA8B,GACtC,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,KAAK,wBAAwB,GAAG,SAAS,CAmB7E"}

package/dist/tool-schema.d.ts

@@ -0,0 +1,3 @@
+import type { MCPTool } from './client.js';
+export declare function normalizeMCPTools(value: unknown): MCPTool[];
+//# sourceMappingURL=tool-schema.d.ts.map

package/dist/tool-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-schema.d.ts","sourceRoot":"","sources":["../src/tool-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CA8B3D"}

package/dist/transport.d.ts

@@ -0,0 +1,161 @@
+import * as https from 'node:https';
+import { type MCPAuthorizationProvider } from './authorization.js';
+import type { ConnectionState, JsonRpcResponse, MCPTool, ToolCallResult } from './client.js';
+import { type MCPServerMetadata } from './protocol.js';
+export type JsonRpcResult = {
+    jsonrpc: string;
+    id?: number | undefined;
+    result?: unknown | undefined;
+    error?: {
+        code: number | undefined;
+        message: string;
+        data?: unknown | undefined;
+    } | undefined;
+};
+export interface HttpTransportOptions {
+    name: string;
+    url: string;
+    headers?: Record<string, string> | undefined;
+    startupTimeoutMs?: number | undefined;
+    requestTimeoutMs?: number | undefined;
+    authorizationProvider?: MCPAuthorizationProvider | undefined;
+    /**
+     * Per-request TLS configuration. When set, an https.Agent is created
+     * and passed to fetch via the `dispatch` option. This avoids globally
+     * disabling certificate validation (NODE_TLS_REJECT_UNAUTHORIZED) which
+     * would affect all provider API calls in the same process.
+     *
+     * ⚠️ Security gate: `rejectUnauthorized: false` REQUIRES
+     * `WRONGSTACK_UNSAFE_MCP_TLS=1` as an explicit opt-in.
+     *
+     * Without this gate, an active network attacker between the client and the
+     * MCP server can read and modify tool calls and responses. Only use this
+     * for local development with self-signed certificates; production MCP
+     * servers must present a valid certificate.
+     */
+    tls?: {
+        ca?: string | undefined;
+        rejectUnauthorized?: boolean | undefined;
+    };
+}
+export declare class SSEReader {
+    private buffer;
+    private dataLines;
+    private listeners;
+    onMessage(cb: (data: {
+        jsonrpc?: string | undefined;
+        method?: string | undefined;
+        params?: unknown | undefined;
+        id?: number | undefined;
+    }) => void): () => void;
+    feed(chunk: string): void;
+    private processLine;
+    private flush;
+    private dispatch;
+    reset(): void;
+}
+/** Extract only response envelopes; notifications and server requests are not responses. */
+export declare function extractJsonRpcResults(text: string): JsonRpcResult[];
+/**
+ * Fields and methods shared by all HTTP-based MCP transports.
+ * Subclasses override `connect()`, `close()`, `callTool()`, `request()`.
+ */
+export declare abstract class BaseHTTPTransport {
+    protected state: ConnectionState;
+    protected readonly url: string;
+    protected readonly headers: Record<string, string>;
+    protected readonly timeout: number;
+    protected readonly requestTimeout: number;
+    protected readonly name: string;
+    protected readonly authorizationProvider?: MCPAuthorizationProvider | undefined;
+    protected readonly authorizationResource: string;
+    /** Per-request TLS agent — created once from HttpTransportOptions.tls */
+    protected readonly tlsAgent?: https.Agent | undefined;
+    protected readonly tools: MCPTool[];
+    protected serverMetadata?: MCPServerMetadata | undefined;
+    protected abortController?: AbortController | undefined;
+    protected readonly disconnectHandlers: Array<() => void>;
+    protected readonly toolsChangedListeners: Set<(tools: MCPTool[]) => void>;
+    protected readonly resourcesChangedListeners: Set<() => void>;
+    protected readonly promptsChangedListeners: Set<() => void>;
+    protected protocolVersion?: string | undefined;
+    constructor(opts: HttpTransportOptions, transportName: string);
+    getState(): ConnectionState;
+    protected fetchWithAuthorization(input: string, init: RequestInit, signal?: AbortSignal | undefined): Promise<Response>;
+    listTools(): MCPTool[];
+    getServerMetadata(): MCPServerMetadata | undefined;
+    onDisconnect(cb: () => void): () => void;
+    onToolsChanged(cb: (tools: MCPTool[]) => void): () => void;
+    onResourcesChanged(cb: () => void): () => void;
+    onPromptsChanged(cb: () => void): () => void;
+    /**
+     * Fire all disconnect handlers. Subclasses call this when the connection
+     * drops so the registry can schedule reconnects.
+     */
+    protected notifyDisconnect(): void;
+    protected notifyResourcesChanged(): void;
+    protected notifyPromptsChanged(): void;
+    /**
+     * Apply the pinned TLS agent (if configured) to a `RequestInit` object.
+     * Uses `HttpDispatcher` from `@wrongstack/core`'s dispatcher-types shim,
+     * which declares `https.Agent` compatible with `RequestInit.dispatcher`.
+     * Verified safe: https.Agent implements the `dispatch(req, opts)` method
+     * that fetch requires at runtime.
+     */
+    protected applyTlsAgent(fetchOpts: RequestInit): void;
+    /** Generate the next JSON-RPC request id. Subclasses provide the counter. */
+    protected abstract genId(): number;
+}
+/**
+ * SSE transport for MCP over HTTP.
+ *
+ * Uses native fetch API with ReadableStream to consume SSE events.
+ * HTTP POST is used to send JSON-RPC requests.
+ */
+export declare class SSETransport extends BaseHTTPTransport {
+    private _nextId;
+    private readerDone;
+    private readLoopAbort?;
+    private reader?;
+    constructor(opts: HttpTransportOptions);
+    protected genId(): number;
+    /** Refresh tool list when server sends notifications/tools/list_changed. */
+    private handleToolsListChanged;
+    connect(): Promise<void>;
+    private readSSEBody;
+    private buildSSEUrl;
+    private httpPost;
+    callTool(name: string, input: unknown, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<ToolCallResult>;
+    /** Generic JSON-RPC request — used by MCPClient.request() for SSE transports. */
+    request(method: string, params: unknown, timeoutMs?: number, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<JsonRpcResponse>;
+    close(): Promise<void>;
+}
+/**
+ * Streamable HTTP transport for MCP.
+ *
+ * Uses session-based HTTP with NDJSON responses.
+ */
+export declare class StreamableHTTPTransport extends BaseHTTPTransport {
+    private _nextId;
+    private sessionId?;
+    constructor(opts: HttpTransportOptions);
+    protected genId(): number;
+    private consumeResponseText;
+    private handleNotification;
+    private refreshTools;
+    connect(): Promise<void>;
+    private postRaw;
+    /** Generic JSON-RPC request — used by MCPClient.request() for SSE/streamable-http transports. */
+    request(method: string, params: unknown, timeoutMs?: number, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<JsonRpcResponse>;
+    callTool(name: string, input: unknown, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<ToolCallResult>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAGpC,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7F,OAAO,EAAE,KAAK,iBAAiB,EAAuB,MAAM,eAAe,CAAC;AAG5E,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CAC/F,CAAC;AAWF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,qBAAqB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7D;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,CAAC;CAC7E;AA8GD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,SAAS,CAOV;IAEP,SAAS,CACP,EAAE,EAAE,CAAC,IAAI,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC7B,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzB,KAAK,IAAI,GACT,MAAM,IAAI,CAMZ;IAED,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CA+BxB;IAED,OAAO,CAAC,WAAW;IAgCnB,OAAO,CAAC,KAAK;IAoBb,OAAO,CAAC,QAAQ;IAehB,KAAK,IAAI,IAAI,CAIZ;CACF;AAqFD,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAEnE;AAkED;;;GAGG;AACH,8BAAsB,iBAAiB;IACrC,SAAS,CAAC,KAAK,EAAE,eAAe,CAAU;IAC1C,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACnC,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAC1C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAChC,SAAS,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAChF,SAAS,CAAC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACjD,yEAAyE;IACzE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAM;IACzC,SAAS,CAAC,cAAc,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACzD,SAAS,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAM;IAC9D,SAAS,CAAC,QAAQ,CAAC,qBAAqB,cAAmB,OAAO,EAAE,KAAK,IAAI,EAAI;IACjF,SAAS,CAAC,QAAQ,CAAC,yBAAyB,YAAiB,IAAI,EAAI;IACrE,SAAS,CAAC,QAAQ,CAAC,uBAAuB,YAAiB,IAAI,EAAI;IACnE,SAAS,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C,YAAY,IAAI,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,EA8B5D;IAED,QAAQ,IAAI,eAAe,CAE1B;IAED,UAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,GAC/B,OAAO,CAAC,QAAQ,CAAC,CAkCnB;IAED,SAAS,IAAI,OAAO,EAAE,CAErB;IAED,iBAAiB,IAAI,iBAAiB,GAAG,SAAS,CAQjD;IAED,YAAY,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAMvC;IAED,cAAc,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAKzD;IAED,kBAAkB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAG7C;IAED,gBAAgB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAG3C;IAED;;;OAGG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI,CAQjC;IAED,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAQvC;IAED,SAAS,CAAC,oBAAoB,IAAI,IAAI,CAQrC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI,CAOpD;IAED,6EAA6E;IAC7E,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;CACpC;AAMD;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,iBAAiB;IACjD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAC,CAA8B;IACpD,OAAO,CAAC,MAAM,CAAC,CAA6D;IAE5E,YAAY,IAAI,EAAE,oBAAoB,EAErC;IAED,UAAmB,KAAK,IAAI,MAAM,CAEjC;IAED,4EAA4E;YAC9D,sBAAsB;IAsB9B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAkG7B;YAEa,WAAW;IAuBzB,OAAO,CAAC,WAAW;YAaL,QAAQ;IAyEhB,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,cAAc,CAAC,CAoBzB;IAED,iFAAiF;IAC3E,OAAO,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,eAAe,CAAC,CAmE1B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB3B;CACF;AAMD;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,iBAAiB;IAC5D,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,SAAS,CAAC,CAAqB;IAEvC,YAAY,IAAI,EAAE,oBAAoB,EAErC;IAED,UAAmB,KAAK,IAAI,MAAM,CAEjC;IAED,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,kBAAkB;YAUZ,YAAY;IAoBpB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CA8E7B;YAEa,OAAO;IA6DrB,iGAAiG;IAC3F,OAAO,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,eAAe,CAAC,CAwD1B;IAEK,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,cAAc,CAAC,CAezB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;CACF"}

package/dist/wrap-tool.d.ts

@@ -0,0 +1,17 @@
+import { type Permission, type Tool } from '@wrongstack/core';
+import type { MCPClient, MCPTool } from './client.js';
+/**
+ * Resolves the live client for a tool call. A plain {@link MCPClient} for eager
+ * servers, or a thunk that connects-on-demand for lazy/dormant servers (the
+ * registry passes `() => this.ensureConnected(name)`).
+ */
+export type MCPClientResolver = MCPClient | (() => Promise<MCPClient>);
+export interface MCPToolCallObserver {
+    onStart(): void;
+    onFinish(result: {
+        durationMs: number;
+        ok: boolean;
+    }): void;
+}
+export declare function wrapMCPTool(serverName: string, mcpTool: MCPTool, client: MCPClientResolver, permission?: Permission, observer?: MCPToolCallObserver | undefined): Tool;
+//# sourceMappingURL=wrap-tool.d.ts.map

package/dist/wrap-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-tool.d.ts","sourceRoot":"","sources":["../src/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAoB,MAAM,kBAAkB,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAwBtD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,OAAO,IAAI,IAAI,CAAC;IAChB,QAAQ,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7D;AAED,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,iBAAiB,EACzB,UAAU,GAAE,UAAsB,EAClC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,SAAS,GACzC,IAAI,CAgCN"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/mcp",
-  "version": "0.284.1",
+  "version": "0.286.0",
   "license": "MIT",
   "description": "WrongStack Model Context Protocol client and registry: stdio, SSE, and streamable HTTP transports.",
   "repository": {
@@ -25,12 +25,11 @@
     "dist"
   ],
   "dependencies": {
-    "@wrongstack/core": "0.284.1"
+    "@wrongstack/core": "0.286.0"
   },
   "devDependencies": {
     "@types/node": "^26.0.1",
-    "tsup": "^8.5.1",
-    "typescript": "^6.0.3",
+    "typescript": "^7.0.2",
     "undici": "^8.5.0",
     "undici-types": "^8.5.0",
     "vitest": "^4.1.9"
@@ -39,7 +38,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "node ../../scripts/build-package.mjs",
     "typecheck": "tsc --noEmit -p tsconfig.test.json",
     "test": "vitest run",
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""