codebase-onboarder 0.5.0 → 0.7.0

package/server/mcp/http.js

@@ -22,192 +22,183 @@
 // held per-connection, so a session id would gate nothing that the localhost bind
 // does not already gate — and pretending to a security model this process does not
 // have would be worse than not claiming one.
-
 import http from 'node:http';
-
 import { handle, PROTOCOL_VERSION, SERVER_INFO } from './server.js';
 import { toolDefinitions } from './tools.js';
-
 export const HTTP_HOST = '127.0.0.1';
 export const DEFAULT_PORT = 8790;
 const MAX_BODY = 4 * 1024 * 1024; // a tools/call argument list, not a file upload
-
 // A POST without this in its Accept header is not an MCP client. The spec requires
 // clients to send both, and enforcing it is how a stray browser `fetch` to this
 // port is turned away at the door.
 function acceptsBoth(req) {
-  const accept = String(req.headers.accept || '');
-  return accept.includes('application/json') && accept.includes('text/event-stream');
+    const accept = String(req.headers.accept || '');
+    return accept.includes('application/json') && accept.includes('text/event-stream');
 }
-
 // The spec's DNS-rebinding defence: the Host header must name a loopback address
 // this server actually bound to. A rebinding attack sends `Host: evil.com` with
 // the DNS pointing at 127.0.0.1, so the name is the thing to check, not the
 // resolved address.
 function hostAllowed(hostHeader) {
-  if (!hostHeader) return false;
-  const host = String(hostHeader).replace(/:\d+$/, '');
-  return host === '127.0.0.1' || host === 'localhost' || host === '[::1]' || host === '::1';
+    if (!hostHeader)
+        return false;
+    const host = String(hostHeader).replace(/:\d+$/, '');
+    return host === '127.0.0.1' || host === 'localhost' || host === '[::1]' || host === '::1';
 }
-
 // Origin, when present, must also be loopback. A request with no Origin at all is
 // a non-browser client — a harness, curl, a test — and those are the intended
 // callers, so their absence is not suspicious.
 function originAllowed(req) {
-  const origin = req.headers.origin;
-  if (!origin) return true;
-  try {
-    const { hostname } = new URL(String(origin));
-    return hostname === '127.0.0.1' || hostname === 'localhost' || hostname === '[::1]';
-  } catch {
-    return false;
-  }
+    const origin = req.headers.origin;
+    if (!origin)
+        return true;
+    try {
+        const { hostname } = new URL(String(origin));
+        return hostname === '127.0.0.1' || hostname === 'localhost' || hostname === '[::1]';
+    }
+    catch {
+        return false;
+    }
 }
-
 function guard(req, res) {
-  if (!hostAllowed(req.headers.host)) {
-    sendJSON(res, 421, { error: 'This endpoint is served on localhost only.' });
-    return false;
-  }
-  if (!originAllowed(req)) {
-    sendJSON(res, 403, { error: 'Cross-origin requests are not accepted.' });
-    return false;
-  }
-  return true;
+    if (!hostAllowed(req.headers.host)) {
+        sendJSON(res, 421, { error: 'This endpoint is served on localhost only.' });
+        return false;
+    }
+    if (!originAllowed(req)) {
+        sendJSON(res, 403, { error: 'Cross-origin requests are not accepted.' });
+        return false;
+    }
+    return true;
 }
-
 function sendJSON(res, status, value, headers = {}) {
-  const body = JSON.stringify(value);
-  res.writeHead(status, {
-    'content-type': 'application/json',
-    'content-length': Buffer.byteLength(body),
-    ...headers,
-  });
-  res.end(body);
+    const body = JSON.stringify(value);
+    res.writeHead(status, {
+        'content-type': 'application/json',
+        'content-length': Buffer.byteLength(body),
+        ...headers,
+    });
+    res.end(body);
 }
-
 // The 2025-06-18 spec lets a server answer a request with a plain JSON body when
 // it has nothing server-initiated to send. Sending both JSON and an event stream
 // would make a client that honours `application/json` wait forever for a stream
 // that never comes.
 function sendStreamable(res, message) {
-  const body = JSON.stringify(message);
-  res.writeHead(200, {
-    'content-type': 'application/json',
-    'content-length': Buffer.byteLength(body),
-  });
-  res.end(body);
+    const body = JSON.stringify(message);
+    res.writeHead(200, {
+        'content-type': 'application/json',
+        'content-length': Buffer.byteLength(body),
+    });
+    res.end(body);
 }
-
 function readBody(req) {
-  return new Promise((resolve, reject) => {
-    const chunks = [];
-    let size = 0;
-    req.on('data', (chunk) => {
-      size += chunk.length;
-      if (size > MAX_BODY) {
-        reject(new Error('Request body too large.'));
-        req.destroy();
-        return;
-      }
-      chunks.push(chunk);
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > MAX_BODY) {
+                reject(new Error('Request body too large.'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+        req.on('error', reject);
     });
-    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
-    req.on('error', reject);
-  });
 }
-
 async function onPost(req, res) {
-  if (!acceptsBoth(req)) {
-    return sendJSON(res, 406, {
-      error: 'An MCP client must Accept: application/json and text/event-stream.',
-    });
-  }
-
-  let msg;
-  try {
-    msg = JSON.parse(await readBody(req));
-  } catch (err) {
-    return sendJSON(res, 400, {
-      jsonrpc: '2.0', id: null,
-      error: { code: -32700, message: `Could not parse the request: ${err.message}` },
-    });
-  }
-
-  // A batch is legal JSON-RPC, and answering it in order keeps the client simple.
-  // Notifications inside it produce no entries, which is correct: `handle` returns
-  // undefined for them and they are filtered out here.
-  if (Array.isArray(msg)) {
-    const replies = [];
-    for (const one of msg) {
-      const reply = await handle(one);
-      if (reply) replies.push(reply);
+    if (!acceptsBoth(req)) {
+        return sendJSON(res, 406, {
+            error: 'An MCP client must Accept: application/json and text/event-stream.',
+        });
     }
-    if (!replies.length) {
-      res.writeHead(202).end();
-      return undefined;
+    let msg;
+    try {
+        msg = JSON.parse(String(await readBody(req)));
     }
-    return sendStreamable(res, replies);
-  }
-
-  const reply = await handle(msg);
-  // A lone notification: the spec says answer 202 with no body.
-  if (!reply) {
-    res.writeHead(202).end();
-    return undefined;
-  }
-  return sendStreamable(res, reply);
+    catch (err) {
+        return sendJSON(res, 400, {
+            jsonrpc: '2.0', id: null,
+            error: { code: -32700, message: `Could not parse the request: ${err.message}` },
+        });
+    }
+    // A batch is legal JSON-RPC, and answering it in order keeps the client simple.
+    // Notifications inside it produce no entries, which is correct: `handle` returns
+    // undefined for them and they are filtered out here.
+    if (Array.isArray(msg)) {
+        const replies = [];
+        for (const one of msg) {
+            const reply = await handle(one);
+            if (reply)
+                replies.push(reply);
+        }
+        if (!replies.length) {
+            res.writeHead(202).end();
+            return undefined;
+        }
+        return sendStreamable(res, replies);
+    }
+    const reply = await handle(msg);
+    // A lone notification: the spec says answer 202 with no body.
+    if (!reply) {
+        res.writeHead(202).end();
+        return undefined;
+    }
+    return sendStreamable(res, reply);
 }
-
 function onGet(res) {
-  // Without SSE there is no stream to open. 405 is the honest answer: this server
-  // does not offer the GET half of the transport, and a client that wants
-  // server-initiated messages should have used stdio.
-  res.writeHead(405, { allow: 'POST', 'content-type': 'application/json' });
-  res.end(JSON.stringify({
-    error: 'This server does not offer server-initiated streams. Use the stdio transport, or POST to this endpoint.',
-  }));
+    // Without SSE there is no stream to open. 405 is the honest answer: this server
+    // does not offer the GET half of the transport, and a client that wants
+    // server-initiated messages should have used stdio.
+    res.writeHead(405, { allow: 'POST', 'content-type': 'application/json' });
+    res.end(JSON.stringify({
+        error: 'This server does not offer server-initiated streams. Use the stdio transport, or POST to this endpoint.',
+    }));
 }
-
 export function handleMcpHttpRequest(req, res) {
-  if (!guard(req, res)) return undefined;
-  if (req.method === 'POST') return onPost(req, res);
-  if (req.method === 'GET') return onGet(res);
-  if (req.method === 'DELETE') {
-    // No sessions exist, so there is nothing to delete. Saying so keeps a client
-    // that cleans up politely from logging an error on the way out.
-    res.writeHead(200, { 'content-type': 'application/json' });
-    res.end(JSON.stringify({ ok: true }));
+    if (!guard(req, res))
+        return undefined;
+    if (req.method === 'POST')
+        return onPost(req, res);
+    if (req.method === 'GET')
+        return onGet(res);
+    if (req.method === 'DELETE') {
+        // No sessions exist, so there is nothing to delete. Saying so keeps a client
+        // that cleans up politely from logging an error on the way out.
+        res.writeHead(200, { 'content-type': 'application/json' });
+        res.end(JSON.stringify({ ok: true }));
+        return undefined;
+    }
+    res.writeHead(405, { allow: 'POST, GET, DELETE' }).end();
     return undefined;
-  }
-  res.writeHead(405, { allow: 'POST, GET, DELETE' }).end();
-  return undefined;
 }
-
 /**
  * Start the Streamable HTTP transport. Returns `{ url, port, server, close }`, and
  * `port` is the port actually bound — which matters because the caller may have
  * asked for 0 and gets a free one back.
  */
 export function createHttpTransport({ port = DEFAULT_PORT, host = HTTP_HOST } = {}) {
-  const server = http.createServer(handleMcpHttpRequest);
-  // A long tool call is a scan of a large repository. The default 5s headers
-  // timeout would cut the request off before the body finished arriving; the
-  // request timeout covers the whole exchange and is generous on purpose, since
-  // the person who asked for it is waiting for it.
-  server.headersTimeout = 30_000;
-  server.requestTimeout = 600_000;
-
-  return new Promise((resolve, reject) => {
-    server.once('error', reject);
-    server.listen(port, host, () => {
-      const actual = server.address().port;
-      resolve({
-        url: `http://${host}:${actual}/mcp`,
-        port: actual,
-        server,
-        close: () => new Promise((done) => server.close(done)),
-      });
+    const server = http.createServer(handleMcpHttpRequest);
+    // A long tool call is a scan of a large repository. The default 5s headers
+    // timeout would cut the request off before the body finished arriving; the
+    // request timeout covers the whole exchange and is generous on purpose, since
+    // the person who asked for it is waiting for it.
+    server.headersTimeout = 30_000;
+    server.requestTimeout = 600_000;
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(port, host, () => {
+            const actual = server.address().port;
+            resolve({
+                url: `http://${host}:${actual}/mcp`,
+                port: actual,
+                server,
+                close: () => new Promise((done) => server.close(done)),
+            });
+        });
     });
-  });
 }
+//# sourceMappingURL=http.js.map

package/server/mcp/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/server/mcp/http.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gBAAgB;AAChB,EAAE;AACF,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,0EAA0E;AAC1E,EAAE;AACF,gFAAgF;AAChF,kFAAkF;AAClF,YAAY;AACZ,gFAAgF;AAChF,gFAAgF;AAChF,gBAAgB;AAChB,iFAAiF;AACjF,iCAAiC;AACjC,uEAAuE;AACvE,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,mFAAmF;AACnF,6CAA6C;AAE7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AACrC,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,gDAAgD;AAElF,mFAAmF;AACnF,gFAAgF;AAChF,mCAAmC;AACnC,SAAS,WAAW,CAAC,GAAG;IACtB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AACrF,CAAC;AAED,iFAAiF;AACjF,gFAAgF;AAChF,4EAA4E;AAC5E,oBAAoB;AACpB,SAAS,WAAW,CAAC,UAAU;IAC7B,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;AAC5F,CAAC;AAED,kFAAkF;AAClF,8EAA8E;AAC9E,+CAA+C;AAC/C,SAAS,aAAa,CAAC,GAAG;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAG,EAAE,GAAG;IACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAwB,EAAE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACzC,GAAG,OAAO;KACX,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,oBAAoB;AACpB,SAAS,cAAc,CAAC,GAAG,EAAE,OAAO;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;KAC1C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAC7C,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAG,EAAE,GAAG;IAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,oEAAoE;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI;YACxB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gCAAgC,GAAG,CAAC,OAAO,EAAE,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,iFAAiF;IACjF,qDAAqD;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,8DAA8D;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,KAAK,CAAC,GAAG;IAChB,gFAAgF;IAChF,wEAAwE;IACxE,oDAAoD;IACpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,KAAK,EAAE,yGAAyG;KACjH,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAG,EAAE,GAAG;IAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,6EAA6E;QAC7E,gEAAgE;QAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAE,IAAI,GAAG,YAAY,EAAE,IAAI,GAAG,SAAS,EAAE,GAAwB,EAAE;IACrG,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACvD,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,iDAAiD;IACjD,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,MAAM,GAAI,MAAM,CAAC,OAAO,EAAqC,CAAC,IAAI,CAAC;YACzE,OAAO,CAAC;gBACN,GAAG,EAAE,UAAU,IAAI,IAAI,MAAM,MAAM;gBACnC,IAAI,EAAE,MAAM;gBACZ,MAAM;gBACN,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aACvD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["// The Streamable HTTP transport (MCP 2025-06-18), on one endpoint that answers\n// POST and GET.\n//\n// This exists because of the button. A stdio server is spawned *by* its client, so\n// a child this app started has nobody to talk to it — starting one from the UI\n// would launch a process no harness could ever reach. Over HTTP the server is a\n// server: the button starts it, a harness connects to it, and stopping it closes\n// the door for everyone. Both transports are offered because they suit different\n// clients, and the spec says clients should support stdio where possible.\n//\n// The security section of the spec is not optional here, and this server has no\n// authentication at all, so the three protections it names are all the protection\n// there is:\n//   * Bind 127.0.0.1 only. Never 0.0.0.0 — this process will read any folder it\n//     is asked to, and a LAN-reachable copy of that is not something to ship by\n//     accident.\n//   * Validate `Origin` on every request, so a page on another site cannot drive\n//     it on the person's behalf.\n//   * Validate `Host`, so a rebinding name cannot resolve here either.\n//\n// What is deliberately *not* implemented: OAuth and `Mcp-Session-Id`. Nothing is\n// held per-connection, so a session id would gate nothing that the localhost bind\n// does not already gate — and pretending to a security model this process does not\n// have would be worse than not claiming one.\n\nimport http from 'node:http';\n\nimport { handle, PROTOCOL_VERSION, SERVER_INFO } from './server.js';\nimport { toolDefinitions } from './tools.js';\n\nexport const HTTP_HOST = '127.0.0.1';\nexport const DEFAULT_PORT = 8790;\nconst MAX_BODY = 4 * 1024 * 1024; // a tools/call argument list, not a file upload\n\n// A POST without this in its Accept header is not an MCP client. The spec requires\n// clients to send both, and enforcing it is how a stray browser `fetch` to this\n// port is turned away at the door.\nfunction acceptsBoth(req) {\n  const accept = String(req.headers.accept || '');\n  return accept.includes('application/json') && accept.includes('text/event-stream');\n}\n\n// The spec's DNS-rebinding defence: the Host header must name a loopback address\n// this server actually bound to. A rebinding attack sends `Host: evil.com` with\n// the DNS pointing at 127.0.0.1, so the name is the thing to check, not the\n// resolved address.\nfunction hostAllowed(hostHeader) {\n  if (!hostHeader) return false;\n  const host = String(hostHeader).replace(/:\\d+$/, '');\n  return host === '127.0.0.1' || host === 'localhost' || host === '[::1]' || host === '::1';\n}\n\n// Origin, when present, must also be loopback. A request with no Origin at all is\n// a non-browser client — a harness, curl, a test — and those are the intended\n// callers, so their absence is not suspicious.\nfunction originAllowed(req) {\n  const origin = req.headers.origin;\n  if (!origin) return true;\n  try {\n    const { hostname } = new URL(String(origin));\n    return hostname === '127.0.0.1' || hostname === 'localhost' || hostname === '[::1]';\n  } catch {\n    return false;\n  }\n}\n\nfunction guard(req, res) {\n  if (!hostAllowed(req.headers.host)) {\n    sendJSON(res, 421, { error: 'This endpoint is served on localhost only.' });\n    return false;\n  }\n  if (!originAllowed(req)) {\n    sendJSON(res, 403, { error: 'Cross-origin requests are not accepted.' });\n    return false;\n  }\n  return true;\n}\n\nfunction sendJSON(res, status, value, headers: Record<string, any> = {}) {\n  const body = JSON.stringify(value);\n  res.writeHead(status, {\n    'content-type': 'application/json',\n    'content-length': Buffer.byteLength(body),\n    ...headers,\n  });\n  res.end(body);\n}\n\n// The 2025-06-18 spec lets a server answer a request with a plain JSON body when\n// it has nothing server-initiated to send. Sending both JSON and an event stream\n// would make a client that honours `application/json` wait forever for a stream\n// that never comes.\nfunction sendStreamable(res, message) {\n  const body = JSON.stringify(message);\n  res.writeHead(200, {\n    'content-type': 'application/json',\n    'content-length': Buffer.byteLength(body),\n  });\n  res.end(body);\n}\n\nfunction readBody(req) {\n  return new Promise((resolve, reject) => {\n    const chunks = [];\n    let size = 0;\n    req.on('data', (chunk) => {\n      size += chunk.length;\n      if (size > MAX_BODY) {\n        reject(new Error('Request body too large.'));\n        req.destroy();\n        return;\n      }\n      chunks.push(chunk);\n    });\n    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));\n    req.on('error', reject);\n  });\n}\n\nasync function onPost(req, res) {\n  if (!acceptsBoth(req)) {\n    return sendJSON(res, 406, {\n      error: 'An MCP client must Accept: application/json and text/event-stream.',\n    });\n  }\n\n  let msg;\n  try {\n    msg = JSON.parse(String(await readBody(req)));\n  } catch (err) {\n    return sendJSON(res, 400, {\n      jsonrpc: '2.0', id: null,\n      error: { code: -32700, message: `Could not parse the request: ${err.message}` },\n    });\n  }\n\n  // A batch is legal JSON-RPC, and answering it in order keeps the client simple.\n  // Notifications inside it produce no entries, which is correct: `handle` returns\n  // undefined for them and they are filtered out here.\n  if (Array.isArray(msg)) {\n    const replies = [];\n    for (const one of msg) {\n      const reply = await handle(one);\n      if (reply) replies.push(reply);\n    }\n    if (!replies.length) {\n      res.writeHead(202).end();\n      return undefined;\n    }\n    return sendStreamable(res, replies);\n  }\n\n  const reply = await handle(msg);\n  // A lone notification: the spec says answer 202 with no body.\n  if (!reply) {\n    res.writeHead(202).end();\n    return undefined;\n  }\n  return sendStreamable(res, reply);\n}\n\nfunction onGet(res) {\n  // Without SSE there is no stream to open. 405 is the honest answer: this server\n  // does not offer the GET half of the transport, and a client that wants\n  // server-initiated messages should have used stdio.\n  res.writeHead(405, { allow: 'POST', 'content-type': 'application/json' });\n  res.end(JSON.stringify({\n    error: 'This server does not offer server-initiated streams. Use the stdio transport, or POST to this endpoint.',\n  }));\n}\n\nexport function handleMcpHttpRequest(req, res) {\n  if (!guard(req, res)) return undefined;\n  if (req.method === 'POST') return onPost(req, res);\n  if (req.method === 'GET') return onGet(res);\n  if (req.method === 'DELETE') {\n    // No sessions exist, so there is nothing to delete. Saying so keeps a client\n    // that cleans up politely from logging an error on the way out.\n    res.writeHead(200, { 'content-type': 'application/json' });\n    res.end(JSON.stringify({ ok: true }));\n    return undefined;\n  }\n  res.writeHead(405, { allow: 'POST, GET, DELETE' }).end();\n  return undefined;\n}\n\n/**\n * Start the Streamable HTTP transport. Returns `{ url, port, server, close }`, and\n * `port` is the port actually bound — which matters because the caller may have\n * asked for 0 and gets a free one back.\n */\nexport function createHttpTransport({ port = DEFAULT_PORT, host = HTTP_HOST }: Record<string, any> = {}) {\n  const server = http.createServer(handleMcpHttpRequest);\n  // A long tool call is a scan of a large repository. The default 5s headers\n  // timeout would cut the request off before the body finished arriving; the\n  // request timeout covers the whole exchange and is generous on purpose, since\n  // the person who asked for it is waiting for it.\n  server.headersTimeout = 30_000;\n  server.requestTimeout = 600_000;\n\n  return new Promise((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(port, host, () => {\n      const actual = (server.address() as import('node:net').AddressInfo).port;\n      resolve({\n        url: `http://${host}:${actual}/mcp`,\n        port: actual,\n        server,\n        close: () => new Promise((done) => server.close(done)),\n      });\n    });\n  });\n}\n"]}

package/server/mcp/runner.d.ts

@@ -0,0 +1,68 @@
+export declare const REPO_ROOT: string;
+export declare const ENTRY: string;
+export declare function mcpCommand(): string;
+export declare function mcpEntryPoint(): string;
+export declare function mcpConfig(override: any): {
+    command: any;
+    args: any;
+    cwd: any;
+};
+export declare class McpRunner {
+    commandOverride: any;
+    child: any;
+    state: string;
+    startedAt: any;
+    lastError: string;
+    log: any[];
+    onLog: any;
+    get running(): boolean;
+    note(line: any): void;
+    constructor({ onLog, command, args, cwd }?: Record<string, any>);
+    start(): Promise<{
+        transport: string;
+        toolCount: number;
+        tools: string[];
+        cachedRepositories: any[];
+        lastRoot: any;
+        analyzers: Record<string, any>;
+        state: string;
+        running: boolean;
+        pid: any;
+        startedAt: any;
+        uptimeMs: number;
+        lastError: string;
+        log: any[];
+    }>;
+    handshake(exited: any): Promise<unknown>;
+    stop(): Promise<{
+        transport: string;
+        toolCount: number;
+        tools: string[];
+        cachedRepositories: any[];
+        lastRoot: any;
+        analyzers: Record<string, any>;
+        state: string;
+        running: boolean;
+        pid: any;
+        startedAt: any;
+        uptimeMs: number;
+        lastError: string;
+        log: any[];
+    }>;
+    status(): {
+        transport: string;
+        toolCount: number;
+        tools: string[];
+        cachedRepositories: any[];
+        lastRoot: any;
+        analyzers: Record<string, any>;
+        state: string;
+        running: boolean;
+        pid: any;
+        startedAt: any;
+        uptimeMs: number;
+        lastError: string;
+        log: any[];
+    };
+}
+export declare function createMcpRunner(opts: any): McpRunner;