@wrongstack/mcp 0.285.0 → 0.287.0

package/dist/transport-base.d.ts

@@ -0,0 +1,90 @@
+import * as https from 'node:https';
+import { type MCPAuthorizationProvider } from './authorization.js';
+import type { ConnectionState, MCPTool } from './client.js';
+import type { MCPServerMetadata } from './protocol.js';
+export interface HttpTransportOptions {
+    name: string;
+    url: string;
+    headers?: Record<string, string> | undefined;
+    startupTimeoutMs?: number | undefined;
+    requestTimeoutMs?: number | undefined;
+    authorizationProvider?: MCPAuthorizationProvider | undefined;
+    /**
+     * Per-request TLS configuration. When set, an https.Agent is created
+     * and passed to fetch via the `dispatch` option. This avoids globally
+     * disabling certificate validation (NODE_TLS_REJECT_UNAUTHORIZED) which
+     * would affect all provider API calls in the same process.
+     *
+     * ⚠️ Security gate: `rejectUnauthorized: false` REQUIRES
+     * `WRONGSTACK_UNSAFE_MCP_TLS=1` as an explicit opt-in.
+     *
+     * Without this gate, an active network attacker between the client and the
+     * MCP server can read and modify tool calls and responses. Only use this
+     * for local development with self-signed certificates; production MCP
+     * servers must present a valid certificate.
+     */
+    tls?: {
+        ca?: string | undefined;
+        rejectUnauthorized?: boolean | undefined;
+    };
+}
+/**
+ * Abort error whose `name` is `'AbortError'` so the core executor's
+ * classifyToolError maps it to FATAL / not-retryable (user cancellation).
+ */
+export declare function makeAbortError(method: string): Error;
+export declare function createTimeoutSignal(parent: AbortSignal | undefined, timeoutMs: number): {
+    signal: AbortSignal;
+    dispose: () => void;
+};
+/**
+ * Fields and methods shared by all HTTP-based MCP transports.
+ * Subclasses override `connect()`, `close()`, `callTool()`, `request()`.
+ */
+export declare abstract class BaseHTTPTransport {
+    protected state: ConnectionState;
+    protected readonly url: string;
+    protected readonly headers: Record<string, string>;
+    protected readonly timeout: number;
+    protected readonly requestTimeout: number;
+    protected readonly name: string;
+    protected readonly authorizationProvider?: MCPAuthorizationProvider | undefined;
+    protected readonly authorizationResource: string;
+    /** Per-request TLS agent — created once from HttpTransportOptions.tls */
+    protected readonly tlsAgent?: https.Agent | undefined;
+    protected readonly tools: MCPTool[];
+    protected serverMetadata?: MCPServerMetadata | undefined;
+    protected abortController?: AbortController | undefined;
+    protected readonly disconnectHandlers: Array<() => void>;
+    protected readonly toolsChangedListeners: Set<(tools: MCPTool[]) => void>;
+    protected readonly resourcesChangedListeners: Set<() => void>;
+    protected readonly promptsChangedListeners: Set<() => void>;
+    protected protocolVersion?: string | undefined;
+    constructor(opts: HttpTransportOptions, transportName: string);
+    getState(): ConnectionState;
+    protected fetchWithAuthorization(input: string, init: RequestInit, signal?: AbortSignal | undefined): Promise<Response>;
+    listTools(): MCPTool[];
+    getServerMetadata(): MCPServerMetadata | undefined;
+    onDisconnect(cb: () => void): () => void;
+    onToolsChanged(cb: (tools: MCPTool[]) => void): () => void;
+    onResourcesChanged(cb: () => void): () => void;
+    onPromptsChanged(cb: () => void): () => void;
+    /**
+     * Fire all disconnect handlers. Subclasses call this when the connection
+     * drops so the registry can schedule reconnects.
+     */
+    protected notifyDisconnect(): void;
+    protected notifyResourcesChanged(): void;
+    protected notifyPromptsChanged(): void;
+    /**
+     * Apply the pinned TLS agent (if configured) to a `RequestInit` object.
+     * Uses `HttpDispatcher` from `@wrongstack/core`'s dispatcher-types shim,
+     * which declares `https.Agent` compatible with `RequestInit.dispatcher`.
+     * Verified safe: https.Agent implements the `dispatch(req, opts)` method
+     * that fetch requires at runtime.
+     */
+    protected applyTlsAgent(fetchOpts: RequestInit): void;
+    /** Generate the next JSON-RPC request id. Subclasses provide the counter. */
+    protected abstract genId(): number;
+}
+//# sourceMappingURL=transport-base.d.ts.map

package/dist/transport-base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-base.d.ts","sourceRoot":"","sources":["../src/transport-base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGvD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,qBAAqB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7D;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,CAAC;CAC7E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAIpD;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,SAAS,EAAE,MAAM,GAChB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAmB9C;AAQD;;;GAGG;AACH,8BAAsB,iBAAiB;IACrC,SAAS,CAAC,KAAK,EAAE,eAAe,CAAU;IAC1C,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACnC,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAC1C,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAChC,SAAS,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAChF,SAAS,CAAC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACjD,yEAAyE;IACzE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAM;IACzC,SAAS,CAAC,cAAc,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACzD,SAAS,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAM;IAC9D,SAAS,CAAC,QAAQ,CAAC,qBAAqB,cAAmB,OAAO,EAAE,KAAK,IAAI,EAAI;IACjF,SAAS,CAAC,QAAQ,CAAC,yBAAyB,YAAiB,IAAI,EAAI;IACrE,SAAS,CAAC,QAAQ,CAAC,uBAAuB,YAAiB,IAAI,EAAI;IACnE,SAAS,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C,YAAY,IAAI,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,EA8B5D;IAED,QAAQ,IAAI,eAAe,CAE1B;IAED,UAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,GAC/B,OAAO,CAAC,QAAQ,CAAC,CAkCnB;IAED,SAAS,IAAI,OAAO,EAAE,CAErB;IAED,iBAAiB,IAAI,iBAAiB,GAAG,SAAS,CAQjD;IAED,YAAY,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAMvC;IAED,cAAc,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAKzD;IAED,kBAAkB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAG7C;IAED,gBAAgB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAG3C;IAED;;;OAGG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI,CAQjC;IAED,SAAS,CAAC,sBAAsB,IAAI,IAAI,CAQvC;IAED,SAAS,CAAC,oBAAoB,IAAI,IAAI,CAQrC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI,CAOpD;IAED,6EAA6E;IAC7E,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;CACpC"}

package/dist/transport-jsonrpc.d.ts

@@ -0,0 +1,32 @@
+export type JsonRpcResult = {
+    jsonrpc: string;
+    id?: number | undefined;
+    result?: unknown | undefined;
+    error?: {
+        code: number | undefined;
+        message: string;
+        data?: unknown | undefined;
+    } | undefined;
+};
+type JsonRpcMethodEnvelope = {
+    jsonrpc: '2.0';
+    id?: number | string | undefined;
+    method: string;
+    params?: unknown | undefined;
+};
+type JsonRpcEnvelope = JsonRpcResult | JsonRpcMethodEnvelope;
+export declare function isJsonRpcResult(v: unknown): v is JsonRpcResult;
+/**
+ * Extract JSON-RPC envelopes from a streamable-http response body. Handles BOTH
+ * plain NDJSON (one JSON object per line) AND SSE framing
+ * (`event: message\ndata: {...}` blocks) — modern MCP servers (e.g. Context7)
+ * reply with `text/event-stream` even on a single POST, so the data must be
+ * un-prefixed before parsing. Multi-line `data:` values within one event are
+ * joined per the SSE spec.
+ */
+export declare function extractJsonRpcEnvelopes(text: string): JsonRpcEnvelope[];
+/** Extract only response envelopes; notifications and server requests are not responses. */
+export declare function extractJsonRpcResults(text: string): JsonRpcResult[];
+export declare function assertMatchingJsonRpcResult(data: unknown, expectedId: number, method: string): JsonRpcResult;
+export {};
+//# sourceMappingURL=transport-jsonrpc.d.ts.map

package/dist/transport-jsonrpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-jsonrpc.d.ts","sourceRoot":"","sources":["../src/transport-jsonrpc.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CAC/F,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC9B,CAAC;AAEF,KAAK,eAAe,GAAG,aAAa,GAAG,qBAAqB,CAAC;AAE7D,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,aAAa,CAmB9D;AAUD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CA4CvE;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAEnE;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,GACb,aAAa,CAkBf"}

package/dist/transport-security.d.ts

@@ -0,0 +1,13 @@
+export declare function isTlsUnsafeAllowed(): boolean;
+/**
+ * Validate that an MCP transport URL is not targeting private/internal
+ * addresses. This is a defense-in-depth SSRF check — MCP servers are
+ * typically local or LAN, but config manipulation could point to metadata
+ * endpoints (169.254.169.254) or internal services.
+ *
+ * The check is intentionally lighter than fetch.ts's assertNotPrivate:
+ * MCP URLs are admin-configured, not LLM-supplied, so we only block
+ * the most obvious attack vectors.
+ */
+export declare function validateTransportUrl(rawUrl: string): void;
+//# sourceMappingURL=transport-security.d.ts.map

package/dist/transport-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-security.d.ts","sourceRoot":"","sources":["../src/transport-security.ts"],"names":[],"mappings":"AAGA,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAsEzD"}

package/dist/transport-sse.d.ts

@@ -0,0 +1,31 @@
+import type { JsonRpcResponse, ToolCallResult } from './client.js';
+import { BaseHTTPTransport, type HttpTransportOptions } from './transport-base.js';
+/**
+ * SSE transport for MCP over HTTP.
+ *
+ * Uses native fetch API with ReadableStream to consume SSE events.
+ * HTTP POST is used to send JSON-RPC requests.
+ */
+export declare class SSETransport extends BaseHTTPTransport {
+    private _nextId;
+    private readerDone;
+    private readLoopAbort?;
+    private reader?;
+    constructor(opts: HttpTransportOptions);
+    protected genId(): number;
+    /** Refresh tool list when server sends notifications/tools/list_changed. */
+    private handleToolsListChanged;
+    connect(): Promise<void>;
+    private readSSEBody;
+    private buildSSEUrl;
+    private httpPost;
+    callTool(name: string, input: unknown, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<ToolCallResult>;
+    /** Generic JSON-RPC request — used by MCPClient.request() for SSE transports. */
+    request(method: string, params: unknown, timeoutMs?: number, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<JsonRpcResponse>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=transport-sse.d.ts.map

package/dist/transport-sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-sse.d.ts","sourceRoot":"","sources":["../src/transport-sse.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAInE,OAAO,EACL,iBAAiB,EAEjB,KAAK,oBAAoB,EAE1B,MAAM,qBAAqB,CAAC;AAQ7B;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,iBAAiB;IACjD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAC,CAA8B;IACpD,OAAO,CAAC,MAAM,CAAC,CAA6D;IAE5E,YAAY,IAAI,EAAE,oBAAoB,EAErC;IAED,UAAmB,KAAK,IAAI,MAAM,CAEjC;IAED,4EAA4E;YAC9D,sBAAsB;IAsB9B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAkG7B;YAEa,WAAW;IAuBzB,OAAO,CAAC,WAAW;YAaL,QAAQ;IAyEhB,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,cAAc,CAAC,CAoBzB;IAED,iFAAiF;IAC3E,OAAO,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,eAAe,CAAC,CAmE1B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB3B;CACF"}

package/dist/transport-streamable.d.ts

@@ -0,0 +1,27 @@
+import type { JsonRpcResponse, ToolCallResult } from './client.js';
+import { BaseHTTPTransport, type HttpTransportOptions } from './transport-base.js';
+/**
+ * Streamable HTTP transport for MCP.
+ *
+ * Uses session-based HTTP with NDJSON responses.
+ */
+export declare class StreamableHTTPTransport extends BaseHTTPTransport {
+    private _nextId;
+    private sessionId?;
+    constructor(opts: HttpTransportOptions);
+    protected genId(): number;
+    private consumeResponseText;
+    private handleNotification;
+    private refreshTools;
+    connect(): Promise<void>;
+    private postRaw;
+    /** Generic JSON-RPC request — used by MCPClient.request() for SSE/streamable-http transports. */
+    request(method: string, params: unknown, timeoutMs?: number, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<JsonRpcResponse>;
+    callTool(name: string, input: unknown, opts?: {
+        signal?: AbortSignal | undefined;
+    }): Promise<ToolCallResult>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=transport-streamable.d.ts.map

package/dist/transport-streamable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-streamable.d.ts","sourceRoot":"","sources":["../src/transport-streamable.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGnE,OAAO,EACL,iBAAiB,EAEjB,KAAK,oBAAoB,EAE1B,MAAM,qBAAqB,CAAC;AAc7B;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,iBAAiB;IAC5D,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,SAAS,CAAC,CAAqB;IAEvC,YAAY,IAAI,EAAE,oBAAoB,EAErC;IAED,UAAmB,KAAK,IAAI,MAAM,CAEjC;IAED,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,kBAAkB;YAUZ,YAAY;IAoBpB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CA8E7B;YAEa,OAAO;IA6DrB,iGAAiG;IAC3F,OAAO,CACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,eAAe,CAAC,CAwD1B;IAEK,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,cAAc,CAAC,CAezB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;CACF"}

package/dist/transport.d.ts

@@ -1,145 +1,8 @@
-import * as https from 'node:https';
-import type { ConnectionState, JsonRpcResponse, MCPTool, ToolCallResult } from './client.js';
-export type JsonRpcResult = {
-    jsonrpc: string;
-    id?: number | undefined;
-    result?: unknown | undefined;
-    error?: {
-        code: number | undefined;
-        message: string;
-        data?: unknown | undefined;
-    } | undefined;
-};
-export interface HttpTransportOptions {
-    name: string;
-    url: string;
-    headers?: Record<string, string> | undefined;
-    startupTimeoutMs?: number | undefined;
-    requestTimeoutMs?: number | undefined;
-    /**
-     * Per-request TLS configuration. When set, an https.Agent is created
-     * and passed to fetch via the `dispatch` option. This avoids globally
-     * disabling certificate validation (NODE_TLS_REJECT_UNAUTHORIZED) which
-     * would affect all provider API calls in the same process.
-     *
-     * ⚠️ Security gate: `rejectUnauthorized: false` REQUIRES
-     * `WRONGSTACK_UNSAFE_MCP_TLS=1` as an explicit opt-in.
-     *
-     * Without this gate, an active network attacker between the client and the
-     * MCP server can read and modify tool calls and responses. Only use this
-     * for local development with self-signed certificates; production MCP
-     * servers must present a valid certificate.
-     */
-    tls?: {
-        ca?: string | undefined;
-        rejectUnauthorized?: boolean | undefined;
-    };
-}
-export declare class SSEReader {
-    private buffer;
-    private dataLines;
-    private listeners;
-    onMessage(cb: (data: {
-        jsonrpc?: string | undefined;
-        method?: string | undefined;
-        params?: unknown | undefined;
-        id?: number | undefined;
-    }) => void): () => void;
-    feed(chunk: string): void;
-    private processLine;
-    private flush;
-    private dispatch;
-    reset(): void;
-}
-/**
- * Extract JSON-RPC envelopes from a streamable-http response body. Handles BOTH
- * plain NDJSON (one JSON object per line) AND SSE framing
- * (`event: message\ndata: {...}` blocks) — modern MCP servers (e.g. Context7)
- * reply with `text/event-stream` even on a single POST, so the data must be
- * un-prefixed before parsing. Multi-line `data:` values within one event are
- * joined per the SSE spec.
- */
-export declare function extractJsonRpcResults(text: string): JsonRpcResult[];
-/**
- * Fields and methods shared by all HTTP-based MCP transports.
- * Subclasses override `connect()`, `close()`, `callTool()`, `request()`.
- */
-export declare abstract class BaseHTTPTransport {
-    protected state: ConnectionState;
-    protected readonly url: string;
-    protected readonly headers: Record<string, string>;
-    protected readonly timeout: number;
-    protected readonly requestTimeout: number;
-    /** Per-request TLS agent — created once from HttpTransportOptions.tls */
-    protected readonly tlsAgent?: https.Agent | undefined;
-    protected readonly tools: MCPTool[];
-    protected abortController?: AbortController | undefined;
-    protected readonly disconnectHandlers: Array<() => void>;
-    protected readonly toolsChangedListeners: Set<(tools: MCPTool[]) => void>;
-    constructor(opts: HttpTransportOptions, transportName: string);
-    getState(): ConnectionState;
-    listTools(): MCPTool[];
-    onDisconnect(cb: () => void): () => void;
-    onToolsChanged(cb: (tools: MCPTool[]) => void): () => void;
-    /**
-     * Fire all disconnect handlers. Subclasses call this when the connection
-     * drops so the registry can schedule reconnects.
-     */
-    protected notifyDisconnect(): void;
-    /**
-     * Apply the pinned TLS agent (if configured) to a `RequestInit` object.
-     * Uses `HttpDispatcher` from `@wrongstack/core`'s dispatcher-types shim,
-     * which declares `https.Agent` compatible with `RequestInit.dispatcher`.
-     * Verified safe: https.Agent implements the `dispatch(req, opts)` method
-     * that fetch requires at runtime.
-     */
-    protected applyTlsAgent(fetchOpts: RequestInit): void;
-    /** Generate the next JSON-RPC request id. Subclasses provide the counter. */
-    protected abstract genId(): number;
-}
-/**
- * SSE transport for MCP over HTTP.
- *
- * Uses native fetch API with ReadableStream to consume SSE events.
- * HTTP POST is used to send JSON-RPC requests.
- */
-export declare class SSETransport extends BaseHTTPTransport {
-    private _nextId;
-    private readerDone;
-    private readLoopAbort?;
-    private reader?;
-    constructor(opts: HttpTransportOptions);
-    protected genId(): number;
-    /** Refresh tool list when server sends notifications/tools/list_changed. */
-    private handleToolsListChanged;
-    connect(): Promise<void>;
-    private readSSEBody;
-    private buildSSEUrl;
-    private httpPost;
-    callTool(name: string, input: unknown, opts?: {
-        signal?: AbortSignal | undefined;
-    }): Promise<ToolCallResult>;
-    /** Generic JSON-RPC request — used by MCPClient.request() for SSE transports. */
-    request(method: string, params: unknown, timeoutMs?: number): Promise<JsonRpcResponse>;
-    close(): Promise<void>;
-}
-/**
- * Streamable HTTP transport for MCP.
- *
- * Uses session-based HTTP with NDJSON responses.
- */
-export declare class StreamableHTTPTransport extends BaseHTTPTransport {
-    private _nextId;
-    private sessionId?;
-    constructor(opts: HttpTransportOptions);
-    protected genId(): number;
-    connect(): Promise<void>;
-    private postRaw;
-    /** Generic JSON-RPC request — used by MCPClient.request() for SSE/streamable-http transports. */
-    request(method: string, params: unknown, timeoutMs?: number): Promise<JsonRpcResponse>;
-    callTool(name: string, input: unknown, opts?: {
-        signal?: AbortSignal | undefined;
-    }): Promise<ToolCallResult>;
-    close(): Promise<void>;
-}
+export type { JsonRpcResult } from './transport-jsonrpc.js';
+export { extractJsonRpcResults } from './transport-jsonrpc.js';
+export { SSEReader } from './sse-reader.js';
+export type { HttpTransportOptions } from './transport-base.js';
+export { BaseHTTPTransport } from './transport-base.js';
+export { SSETransport } from './transport-sse.js';
+export { StreamableHTTPTransport } from './transport-streamable.js';
 //# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAGpC,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAI7F,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;CAC/F,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC;;;;;;;;;;;;;OAaG;IACH,GAAG,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,CAAC;CAC7E;AA8GD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,SAAS,CAEV;IAEP,SAAS,CACP,EAAE,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,KAAK,IAAI,GACvI,MAAM,IAAI,CAMZ;IAED,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CA2BxB;IAED,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,KAAK;IAoBb,OAAO,CAAC,QAAQ;IAehB,KAAK,IAAI,IAAI,CAIZ;CACF;AAiBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CA4CnE;AAgFD;;;GAGG;AACH,8BAAsB,iBAAiB;IACrC,SAAS,CAAC,KAAK,EAAE,eAAe,CAAU;IAC1C,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACnC,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAC1C,yEAAyE;IACzE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;IACtD,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAM;IACzC,SAAS,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACxD,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAM;IAC9D,SAAS,CAAC,QAAQ,CAAC,qBAAqB,cAAmB,OAAO,EAAE,KAAK,IAAI,EAAI;IAEjF,YAAY,IAAI,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,EA2B5D;IAED,QAAQ,IAAI,eAAe,CAE1B;IAED,SAAS,IAAI,OAAO,EAAE,CAErB;IAED,YAAY,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAMvC;IAED,cAAc,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAKzD;IAED;;;OAGG;IACH,SAAS,CAAC,gBAAgB,IAAI,IAAI,CAQjC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,IAAI,CAOpD;IAED,6EAA6E;IAC7E,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC;CACpC;AAMD;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,iBAAiB;IACjD,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAC,CAA8B;IACpD,OAAO,CAAC,MAAM,CAAC,CAA6D;IAE5E,YAAY,IAAI,EAAE,oBAAoB,EAErC;IAED,UAAmB,KAAK,IAAI,MAAM,CAEjC;IAED,4EAA4E;YAC9D,sBAAsB;IAsB9B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CA+F7B;YAEa,WAAW;IAuBzB,OAAO,CAAC,WAAW;YAaL,QAAQ;IAyEhB,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,cAAc,CAAC,CAkBzB;IAED,iFAAiF;IAC3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAwD3F;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAkB3B;CACF;AAMD;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,iBAAiB;IAC5D,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,SAAS,CAAC,CAAqB;IAEvC,YAAY,IAAI,EAAE,oBAAoB,EAErC;IAED,UAAmB,KAAK,IAAI,MAAM,CAEjC;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CA2E7B;YAEa,OAAO;IA6DrB,iGAAiG;IAC3F,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CA8C3F;IAEK,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,GAC1C,OAAO,CAAC,cAAc,CAAC,CAazB;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;CACF"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/wrap-tool.d.ts

@@ -6,5 +6,12 @@ import type { MCPClient, MCPTool } from './client.js';
  * registry passes `() => this.ensureConnected(name)`).
  */
 export type MCPClientResolver = MCPClient | (() => Promise<MCPClient>);
-export declare function wrapMCPTool(serverName: string, mcpTool: MCPTool, client: MCPClientResolver, permission?: Permission): Tool;
+export interface MCPToolCallObserver {
+    onStart(): void;
+    onFinish(result: {
+        durationMs: number;
+        ok: boolean;
+    }): void;
+}
+export declare function wrapMCPTool(serverName: string, mcpTool: MCPTool, client: MCPClientResolver, permission?: Permission, observer?: MCPToolCallObserver | undefined): Tool;
 //# sourceMappingURL=wrap-tool.d.ts.map

package/dist/wrap-tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrap-tool.d.ts","sourceRoot":"","sources":["../src/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAwBtD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAEvE,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,iBAAiB,EACzB,UAAU,GAAE,UAAsB,GACjC,IAAI,CAwBN"}
+{"version":3,"file":"wrap-tool.d.ts","sourceRoot":"","sources":["../src/wrap-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAoB,MAAM,kBAAkB,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAwBtD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,OAAO,IAAI,IAAI,CAAC;IAChB,QAAQ,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7D;AAED,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,iBAAiB,EACzB,UAAU,GAAE,UAAsB,EAClC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,SAAS,GACzC,IAAI,CAgCN"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/mcp",
-  "version": "0.285.0",
+  "version": "0.287.0",
   "license": "MIT",
   "description": "WrongStack Model Context Protocol client and registry: stdio, SSE, and streamable HTTP transports.",
   "repository": {
@@ -25,7 +25,7 @@
     "dist"
   ],
   "dependencies": {
-    "@wrongstack/core": "0.285.0"
+    "@wrongstack/core": "0.287.0"
   },
   "devDependencies": {
     "@types/node": "^26.0.1",