cursor-guard 4.7.3 → 4.7.6

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/examples/server/demoInMemoryOAuthProvider.js

@@ -0,0 +1,205 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setupAuthServer = exports.DemoInMemoryAuthProvider = exports.DemoInMemoryClientsStore = void 0;
+const node_crypto_1 = require("node:crypto");
+const express_1 = __importDefault(require("express"));
+const router_js_1 = require("../../server/auth/router.js");
+const auth_utils_js_1 = require("../../shared/auth-utils.js");
+const errors_js_1 = require("../../server/auth/errors.js");
+class DemoInMemoryClientsStore {
+    constructor() {
+        this.clients = new Map();
+    }
+    async getClient(clientId) {
+        return this.clients.get(clientId);
+    }
+    async registerClient(clientMetadata) {
+        this.clients.set(clientMetadata.client_id, clientMetadata);
+        return clientMetadata;
+    }
+}
+exports.DemoInMemoryClientsStore = DemoInMemoryClientsStore;
+/**
+ * 🚨 DEMO ONLY - NOT FOR PRODUCTION
+ *
+ * This example demonstrates MCP OAuth flow but lacks some of the features required for production use,
+ * for example:
+ * - Persistent token storage
+ * - Rate limiting
+ */
+class DemoInMemoryAuthProvider {
+    constructor(validateResource) {
+        this.validateResource = validateResource;
+        this.clientsStore = new DemoInMemoryClientsStore();
+        this.codes = new Map();
+        this.tokens = new Map();
+    }
+    async authorize(client, params, res) {
+        const code = (0, node_crypto_1.randomUUID)();
+        const searchParams = new URLSearchParams({
+            code
+        });
+        if (params.state !== undefined) {
+            searchParams.set('state', params.state);
+        }
+        this.codes.set(code, {
+            client,
+            params
+        });
+        // Simulate a user login
+        // Set a secure HTTP-only session cookie with authorization info
+        if (res.cookie) {
+            const authCookieData = {
+                userId: 'demo_user',
+                name: 'Demo User',
+                timestamp: Date.now()
+            };
+            res.cookie('demo_session', JSON.stringify(authCookieData), {
+                httpOnly: true,
+                secure: false, // In production, this should be true
+                sameSite: 'lax',
+                maxAge: 24 * 60 * 60 * 1000, // 24 hours - for demo purposes
+                path: '/' // Available to all routes
+            });
+        }
+        if (!client.redirect_uris.includes(params.redirectUri)) {
+            throw new errors_js_1.InvalidRequestError('Unregistered redirect_uri');
+        }
+        const targetUrl = new URL(params.redirectUri);
+        targetUrl.search = searchParams.toString();
+        res.redirect(targetUrl.toString());
+    }
+    async challengeForAuthorizationCode(client, authorizationCode) {
+        // Store the challenge with the code data
+        const codeData = this.codes.get(authorizationCode);
+        if (!codeData) {
+            throw new Error('Invalid authorization code');
+        }
+        return codeData.params.codeChallenge;
+    }
+    async exchangeAuthorizationCode(client, authorizationCode, 
+    // Note: code verifier is checked in token.ts by default
+    // it's unused here for that reason.
+    _codeVerifier) {
+        const codeData = this.codes.get(authorizationCode);
+        if (!codeData) {
+            throw new Error('Invalid authorization code');
+        }
+        if (codeData.client.client_id !== client.client_id) {
+            throw new Error(`Authorization code was not issued to this client, ${codeData.client.client_id} != ${client.client_id}`);
+        }
+        if (this.validateResource && !this.validateResource(codeData.params.resource)) {
+            throw new Error(`Invalid resource: ${codeData.params.resource}`);
+        }
+        this.codes.delete(authorizationCode);
+        const token = (0, node_crypto_1.randomUUID)();
+        const tokenData = {
+            token,
+            clientId: client.client_id,
+            scopes: codeData.params.scopes || [],
+            expiresAt: Date.now() + 3600000, // 1 hour
+            resource: codeData.params.resource,
+            type: 'access'
+        };
+        this.tokens.set(token, tokenData);
+        return {
+            access_token: token,
+            token_type: 'bearer',
+            expires_in: 3600,
+            scope: (codeData.params.scopes || []).join(' ')
+        };
+    }
+    async exchangeRefreshToken(_client, _refreshToken, _scopes, _resource) {
+        throw new Error('Not implemented for example demo');
+    }
+    async verifyAccessToken(token) {
+        const tokenData = this.tokens.get(token);
+        if (!tokenData || !tokenData.expiresAt || tokenData.expiresAt < Date.now()) {
+            throw new Error('Invalid or expired token');
+        }
+        return {
+            token,
+            clientId: tokenData.clientId,
+            scopes: tokenData.scopes,
+            expiresAt: Math.floor(tokenData.expiresAt / 1000),
+            resource: tokenData.resource
+        };
+    }
+}
+exports.DemoInMemoryAuthProvider = DemoInMemoryAuthProvider;
+const setupAuthServer = ({ authServerUrl, mcpServerUrl, strictResource }) => {
+    // Create separate auth server app
+    // NOTE: This is a separate app on a separate port to illustrate
+    // how to separate an OAuth Authorization Server from a Resource
+    // server in the SDK. The SDK is not intended to be provide a standalone
+    // authorization server.
+    const validateResource = strictResource
+        ? (resource) => {
+            if (!resource)
+                return false;
+            const expectedResource = (0, auth_utils_js_1.resourceUrlFromServerUrl)(mcpServerUrl);
+            return resource.toString() === expectedResource.toString();
+        }
+        : undefined;
+    const provider = new DemoInMemoryAuthProvider(validateResource);
+    const authApp = (0, express_1.default)();
+    authApp.use(express_1.default.json());
+    // For introspection requests
+    authApp.use(express_1.default.urlencoded());
+    // Add OAuth routes to the auth server
+    // NOTE: this will also add a protected resource metadata route,
+    // but it won't be used, so leave it.
+    authApp.use((0, router_js_1.mcpAuthRouter)({
+        provider,
+        issuerUrl: authServerUrl,
+        scopesSupported: ['mcp:tools']
+    }));
+    authApp.post('/introspect', async (req, res) => {
+        try {
+            const { token } = req.body;
+            if (!token) {
+                res.status(400).json({ error: 'Token is required' });
+                return;
+            }
+            const tokenInfo = await provider.verifyAccessToken(token);
+            res.json({
+                active: true,
+                client_id: tokenInfo.clientId,
+                scope: tokenInfo.scopes.join(' '),
+                exp: tokenInfo.expiresAt,
+                aud: tokenInfo.resource
+            });
+            return;
+        }
+        catch (error) {
+            res.status(401).json({
+                active: false,
+                error: 'Unauthorized',
+                error_description: `Invalid token: ${error}`
+            });
+        }
+    });
+    const auth_port = authServerUrl.port;
+    // Start the auth server
+    authApp.listen(auth_port, error => {
+        if (error) {
+            console.error('Failed to start server:', error);
+            process.exit(1);
+        }
+        console.log(`OAuth Authorization Server listening on port ${auth_port}`);
+    });
+    // Note: we could fetch this from the server, but then we end up
+    // with some top level async which gets annoying.
+    const oauthMetadata = (0, router_js_1.createOAuthMetadata)({
+        provider,
+        issuerUrl: authServerUrl,
+        scopesSupported: ['mcp:tools']
+    });
+    oauthMetadata.introspection_endpoint = new URL('/introspect', authServerUrl).href;
+    return oauthMetadata;
+};
+exports.setupAuthServer = setupAuthServer;
+//# sourceMappingURL=demoInMemoryOAuthProvider.js.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/examples/server/demoInMemoryOAuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoInMemoryOAuthProvider.js","sourceRoot":"","sources":["../../../../src/examples/server/demoInMemoryOAuthProvider.ts"],"names":[],"mappings":";;;;;;AAAA,6CAAyC;AAIzC,sDAAqD;AAErD,2DAAiF;AACjF,8DAAsE;AACtE,2DAAkE;AAElE,MAAa,wBAAwB;IAArC;QACY,YAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAUpE,CAAC;IARG,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,cAA0C;QAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC3D,OAAO,cAAc,CAAC;IAC1B,CAAC;CACJ;AAXD,4DAWC;AAED;;;;;;;GAOG;AACH,MAAa,wBAAwB;IAWjC,YAAoB,gBAA8C;QAA9C,qBAAgB,GAAhB,gBAAgB,CAA8B;QAVlE,iBAAY,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACtC,UAAK,GAAG,IAAI,GAAG,EAMpB,CAAC;QACI,WAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAEwB,CAAC;IAEtE,KAAK,CAAC,SAAS,CAAC,MAAkC,EAAE,MAA2B,EAAE,GAAa;QAC1F,MAAM,IAAI,GAAG,IAAA,wBAAU,GAAE,CAAC;QAE1B,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACrC,IAAI;SACP,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACjB,MAAM;YACN,MAAM;SACT,CAAC,CAAC;QAEH,wBAAwB;QACxB,gEAAgE;QAChE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,cAAc,GAAG;gBACnB,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE;gBACvD,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK,EAAE,qCAAqC;gBACpD,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,+BAA+B;gBAC5D,IAAI,EAAE,GAAG,CAAC,0BAA0B;aACvC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,+BAAmB,CAAC,2BAA2B,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC9C,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,MAAkC,EAAE,iBAAyB;QAC7F,yCAAyC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC3B,MAAkC,EAClC,iBAAyB;IACzB,wDAAwD;IACxD,oCAAoC;IACpC,aAAsB;QAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,CAAC,MAAM,CAAC,SAAS,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7H,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,IAAA,wBAAU,GAAE,CAAC;QAE3B,MAAM,SAAS,GAAG;YACd,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;YACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS;YAC1C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAClC,IAAI,EAAE,QAAQ;SACjB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAElC,OAAO;YACH,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAClD,CAAC;IACN,CAAC;IAED,KAAK,CAAC,oBAAoB,CACtB,OAAmC,EACnC,aAAqB,EACrB,OAAkB,EAClB,SAAe;QAEf,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,CAAC;QAED,OAAO;YACH,KAAK;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;YACjD,QAAQ,EAAE,SAAS,CAAC,QAAQ;SAC/B,CAAC;IACN,CAAC;CACJ;AAhID,4DAgIC;AAEM,MAAM,eAAe,GAAG,CAAC,EAC5B,aAAa,EACb,YAAY,EACZ,cAAc,EAKjB,EAAiB,EAAE;IAChB,kCAAkC;IAClC,gEAAgE;IAChE,gEAAgE;IAChE,wEAAwE;IACxE,wBAAwB;IAExB,MAAM,gBAAgB,GAAG,cAAc;QACnC,CAAC,CAAC,CAAC,QAAc,EAAE,EAAE;YACf,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,MAAM,gBAAgB,GAAG,IAAA,wCAAwB,EAAC,YAAY,CAAC,CAAC;YAChE,OAAO,QAAQ,CAAC,QAAQ,EAAE,KAAK,gBAAgB,CAAC,QAAQ,EAAE,CAAC;QAC/D,CAAC;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAA,iBAAO,GAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5B,6BAA6B;IAC7B,OAAO,CAAC,GAAG,CAAC,iBAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAElC,sCAAsC;IACtC,gEAAgE;IAChE,qCAAqC;IACrC,OAAO,CAAC,GAAG,CACP,IAAA,yBAAa,EAAC;QACV,QAAQ;QACR,SAAS,EAAE,aAAa;QACxB,eAAe,EAAE,CAAC,WAAW,CAAC;KACjC,CAAC,CACL,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9D,IAAI,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACX,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC;gBACL,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,SAAS,CAAC,QAAQ;gBAC7B,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACjC,GAAG,EAAE,SAAS,CAAC,SAAS;gBACxB,GAAG,EAAE,SAAS,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,kBAAkB,KAAK,EAAE;aAC/C,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC;IACrC,wBAAwB;IACxB,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE;QAC9B,IAAI,KAAK,EAAE,CAAC;YACR,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,iDAAiD;IACjD,MAAM,aAAa,GAAkB,IAAA,+BAAmB,EAAC;QACrD,QAAQ;QACR,SAAS,EAAE,aAAa;QACxB,eAAe,EAAE,CAAC,WAAW,CAAC;KACjC,CAAC,CAAC;IAEH,aAAa,CAAC,sBAAsB,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC;IAElF,OAAO,aAAa,CAAC;AACzB,CAAC,CAAC;AAvFW,QAAA,eAAe,mBAuF1B"}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/examples/server/elicitationFormExample.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=elicitationFormExample.d.ts.map

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/examples/server/elicitationFormExample.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitationFormExample.d.ts","sourceRoot":"","sources":["../../../../src/examples/server/elicitationFormExample.ts"],"names":[],"mappings":""}

package/references/vscode-extension/dist/vendor/@modelcontextprotocol/sdk/dist/cjs/examples/server/elicitationFormExample.js

@@ -0,0 +1,460 @@
+"use strict";
+// Run with: npx tsx src/examples/server/elicitationFormExample.ts
+//
+// This example demonstrates how to use form elicitation to collect structured user input
+// with JSON Schema validation via a local HTTP server with SSE streaming.
+// Form elicitation allows servers to request *non-sensitive* user input through the client
+// with schema-based validation.
+// Note: See also elicitationUrlExample.ts for an example of using URL elicitation
+// to collect *sensitive* user input via a browser.
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
+const mcp_js_1 = require("../../server/mcp.js");
+const streamableHttp_js_1 = require("../../server/streamableHttp.js");
+const types_js_1 = require("../../types.js");
+const express_js_1 = require("../../server/express.js");
+// Factory to create a new MCP server per session.
+// Each session needs its own server+transport pair to avoid cross-session contamination.
+const getServer = () => {
+    // Create MCP server - it will automatically use AjvJsonSchemaValidator with sensible defaults
+    // The validator supports format validation (email, date, etc.) if ajv-formats is installed
+    const mcpServer = new mcp_js_1.McpServer({
+        name: 'form-elicitation-example-server',
+        version: '1.0.0'
+    }, {
+        capabilities: {}
+    });
+    /**
+     * Example 1: Simple user registration tool
+     * Collects username, email, and password from the user
+     */
+    mcpServer.registerTool('register_user', {
+        description: 'Register a new user account by collecting their information',
+        inputSchema: {}
+    }, async () => {
+        try {
+            // Request user information through form elicitation
+            const result = await mcpServer.server.elicitInput({
+                mode: 'form',
+                message: 'Please provide your registration information:',
+                requestedSchema: {
+                    type: 'object',
+                    properties: {
+                        username: {
+                            type: 'string',
+                            title: 'Username',
+                            description: 'Your desired username (3-20 characters)',
+                            minLength: 3,
+                            maxLength: 20
+                        },
+                        email: {
+                            type: 'string',
+                            title: 'Email',
+                            description: 'Your email address',
+                            format: 'email'
+                        },
+                        password: {
+                            type: 'string',
+                            title: 'Password',
+                            description: 'Your password (min 8 characters)',
+                            minLength: 8
+                        },
+                        newsletter: {
+                            type: 'boolean',
+                            title: 'Newsletter',
+                            description: 'Subscribe to newsletter?',
+                            default: false
+                        },
+                        role: {
+                            type: 'string',
+                            title: 'Role',
+                            description: 'Your primary role',
+                            oneOf: [
+                                { const: 'developer', title: 'Developer' },
+                                { const: 'designer', title: 'Designer' },
+                                { const: 'manager', title: 'Manager' },
+                                { const: 'other', title: 'Other' }
+                            ],
+                            default: 'developer'
+                        },
+                        interests: {
+                            type: 'array',
+                            title: 'Interests',
+                            description: 'Select your areas of interest',
+                            items: {
+                                type: 'string',
+                                enum: ['frontend', 'backend', 'mobile', 'devops', 'ai']
+                            },
+                            minItems: 1,
+                            maxItems: 3
+                        }
+                    },
+                    required: ['username', 'email', 'password']
+                }
+            });
+            // Handle the different possible actions
+            if (result.action === 'accept' && result.content) {
+                const { username, email, newsletter } = result.content;
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Registration successful!\n\nUsername: ${username}\nEmail: ${email}\nNewsletter: ${newsletter ? 'Yes' : 'No'}`
+                        }
+                    ]
+                };
+            }
+            else if (result.action === 'decline') {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: 'Registration cancelled by user.'
+                        }
+                    ]
+                };
+            }
+            else {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: 'Registration was cancelled.'
+                        }
+                    ]
+                };
+            }
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Registration failed: ${error instanceof Error ? error.message : String(error)}`
+                    }
+                ],
+                isError: true
+            };
+        }
+    });
+    /**
+     * Example 2: Multi-step workflow with multiple form elicitation requests
+     * Demonstrates how to collect information in multiple steps
+     */
+    mcpServer.registerTool('create_event', {
+        description: 'Create a calendar event by collecting event details',
+        inputSchema: {}
+    }, async () => {
+        try {
+            // Step 1: Collect basic event information
+            const basicInfo = await mcpServer.server.elicitInput({
+                mode: 'form',
+                message: 'Step 1: Enter basic event information',
+                requestedSchema: {
+                    type: 'object',
+                    properties: {
+                        title: {
+                            type: 'string',
+                            title: 'Event Title',
+                            description: 'Name of the event',
+                            minLength: 1
+                        },
+                        description: {
+                            type: 'string',
+                            title: 'Description',
+                            description: 'Event description (optional)'
+                        }
+                    },
+                    required: ['title']
+                }
+            });
+            if (basicInfo.action !== 'accept' || !basicInfo.content) {
+                return {
+                    content: [{ type: 'text', text: 'Event creation cancelled.' }]
+                };
+            }
+            // Step 2: Collect date and time
+            const dateTime = await mcpServer.server.elicitInput({
+                mode: 'form',
+                message: 'Step 2: Enter date and time',
+                requestedSchema: {
+                    type: 'object',
+                    properties: {
+                        date: {
+                            type: 'string',
+                            title: 'Date',
+                            description: 'Event date',
+                            format: 'date'
+                        },
+                        startTime: {
+                            type: 'string',
+                            title: 'Start Time',
+                            description: 'Event start time (HH:MM)'
+                        },
+                        duration: {
+                            type: 'integer',
+                            title: 'Duration',
+                            description: 'Duration in minutes',
+                            minimum: 15,
+                            maximum: 480
+                        }
+                    },
+                    required: ['date', 'startTime', 'duration']
+                }
+            });
+            if (dateTime.action !== 'accept' || !dateTime.content) {
+                return {
+                    content: [{ type: 'text', text: 'Event creation cancelled.' }]
+                };
+            }
+            // Combine all collected information
+            const event = {
+                ...basicInfo.content,
+                ...dateTime.content
+            };
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Event created successfully!\n\n${JSON.stringify(event, null, 2)}`
+                    }
+                ]
+            };
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Event creation failed: ${error instanceof Error ? error.message : String(error)}`
+                    }
+                ],
+                isError: true
+            };
+        }
+    });
+    /**
+     * Example 3: Collecting address information
+     * Demonstrates validation with patterns and optional fields
+     */
+    mcpServer.registerTool('update_shipping_address', {
+        description: 'Update shipping address with validation',
+        inputSchema: {}
+    }, async () => {
+        try {
+            const result = await mcpServer.server.elicitInput({
+                mode: 'form',
+                message: 'Please provide your shipping address:',
+                requestedSchema: {
+                    type: 'object',
+                    properties: {
+                        name: {
+                            type: 'string',
+                            title: 'Full Name',
+                            description: 'Recipient name',
+                            minLength: 1
+                        },
+                        street: {
+                            type: 'string',
+                            title: 'Street Address',
+                            minLength: 1
+                        },
+                        city: {
+                            type: 'string',
+                            title: 'City',
+                            minLength: 1
+                        },
+                        state: {
+                            type: 'string',
+                            title: 'State/Province',
+                            minLength: 2,
+                            maxLength: 2
+                        },
+                        zipCode: {
+                            type: 'string',
+                            title: 'ZIP/Postal Code',
+                            description: '5-digit ZIP code'
+                        },
+                        phone: {
+                            type: 'string',
+                            title: 'Phone Number (optional)',
+                            description: 'Contact phone number'
+                        }
+                    },
+                    required: ['name', 'street', 'city', 'state', 'zipCode']
+                }
+            });
+            if (result.action === 'accept' && result.content) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Address updated successfully!\n\n${JSON.stringify(result.content, null, 2)}`
+                        }
+                    ]
+                };
+            }
+            else if (result.action === 'decline') {
+                return {
+                    content: [{ type: 'text', text: 'Address update cancelled by user.' }]
+                };
+            }
+            else {
+                return {
+                    content: [{ type: 'text', text: 'Address update was cancelled.' }]
+                };
+            }
+        }
+        catch (error) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Address update failed: ${error instanceof Error ? error.message : String(error)}`
+                    }
+                ],
+                isError: true
+            };
+        }
+    });
+    return mcpServer;
+};
+async function main() {
+    const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 3000;
+    const app = (0, express_js_1.createMcpExpressApp)();
+    // Map to store transports by session ID
+    const transports = {};
+    // MCP POST endpoint
+    const mcpPostHandler = async (req, res) => {
+        const sessionId = req.headers['mcp-session-id'];
+        if (sessionId) {
+            console.log(`Received MCP request for session: ${sessionId}`);
+        }
+        try {
+            let transport;
+            if (sessionId && transports[sessionId]) {
+                // Reuse existing transport for this session
+                transport = transports[sessionId];
+            }
+            else if (!sessionId && (0, types_js_1.isInitializeRequest)(req.body)) {
+                // New initialization request - create new transport
+                transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => (0, node_crypto_1.randomUUID)(),
+                    onsessioninitialized: sessionId => {
+                        // Store the transport by session ID when session is initialized
+                        console.log(`Session initialized with ID: ${sessionId}`);
+                        transports[sessionId] = transport;
+                    }
+                });
+                // Set up onclose handler to clean up transport when closed
+                transport.onclose = () => {
+                    const sid = transport.sessionId;
+                    if (sid && transports[sid]) {
+                        console.log(`Transport closed for session ${sid}, removing from transports map`);
+                        delete transports[sid];
+                    }
+                };
+                // Create a new server per session and connect it to the transport
+                const mcpServer = getServer();
+                await mcpServer.connect(transport);
+                await transport.handleRequest(req, res, req.body);
+                return;
+            }
+            else {
+                // Invalid request - no session ID or not initialization request
+                res.status(400).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32000,
+                        message: 'Bad Request: No valid session ID provided'
+                    },
+                    id: null
+                });
+                return;
+            }
+            // Handle the request with existing transport
+            await transport.handleRequest(req, res, req.body);
+        }
+        catch (error) {
+            console.error('Error handling MCP request:', error);
+            if (!res.headersSent) {
+                res.status(500).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32603,
+                        message: 'Internal server error'
+                    },
+                    id: null
+                });
+            }
+        }
+    };
+    app.post('/mcp', mcpPostHandler);
+    // Handle GET requests for SSE streams
+    const mcpGetHandler = async (req, res) => {
+        const sessionId = req.headers['mcp-session-id'];
+        if (!sessionId || !transports[sessionId]) {
+            res.status(400).send('Invalid or missing session ID');
+            return;
+        }
+        console.log(`Establishing SSE stream for session ${sessionId}`);
+        const transport = transports[sessionId];
+        await transport.handleRequest(req, res);
+    };
+    app.get('/mcp', mcpGetHandler);
+    // Handle DELETE requests for session termination
+    const mcpDeleteHandler = async (req, res) => {
+        const sessionId = req.headers['mcp-session-id'];
+        if (!sessionId || !transports[sessionId]) {
+            res.status(400).send('Invalid or missing session ID');
+            return;
+        }
+        console.log(`Received session termination request for session ${sessionId}`);
+        try {
+            const transport = transports[sessionId];
+            await transport.handleRequest(req, res);
+        }
+        catch (error) {
+            console.error('Error handling session termination:', error);
+            if (!res.headersSent) {
+                res.status(500).send('Error processing session termination');
+            }
+        }
+    };
+    app.delete('/mcp', mcpDeleteHandler);
+    // Start listening
+    app.listen(PORT, error => {
+        if (error) {
+            console.error('Failed to start server:', error);
+            process.exit(1);
+        }
+        console.log(`Form elicitation example server is running on http://localhost:${PORT}/mcp`);
+        console.log('Available tools:');
+        console.log('  - register_user: Collect user registration information');
+        console.log('  - create_event: Multi-step event creation');
+        console.log('  - update_shipping_address: Collect and validate address');
+        console.log('\nConnect your MCP client to this server using the HTTP transport.');
+    });
+    // Handle server shutdown
+    process.on('SIGINT', async () => {
+        console.log('Shutting down server...');
+        // Close all active transports to properly clean up resources
+        for (const sessionId in transports) {
+            try {
+                console.log(`Closing transport for session ${sessionId}`);
+                await transports[sessionId].close();
+                delete transports[sessionId];
+            }
+            catch (error) {
+                console.error(`Error closing transport for session ${sessionId}:`, error);
+            }
+        }
+        console.log('Server shutdown complete');
+        process.exit(0);
+    });
+}
+main().catch(error => {
+    console.error('Server error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=elicitationFormExample.js.map