fa-mcp-sdk 0.4.142 → 0.11.2

package/dist/core/mcp/resources.js

@@ -3,8 +3,10 @@
  */
 import * as fs from 'node:fs';
 import * as path from 'node:path';
+import { collectAuthProfile } from '../auth/auth-profile.js';
 import { appConfig, getProjectData } from '../bootstrap/init-config.js';
 import { ROOT_PROJECT_DIR } from '../constants.js';
+import { ResourceNotFoundError } from '../errors/specific-errors.js';
 import { debugMcpResource } from '../debug.js';
 import { emitTrace } from './debug-trace.js';
 import { assembleReadmeWithSatellites } from './readme-assembler.js';
@@ -18,7 +20,7 @@ catch (err) {
     console.error(err);
 }
 const createResources = async (args) => {
-    const { customResources, usedHttpHeaders: usedHttpHeadersRaw } = getProjectData();
+    const { customResources, usedHttpHeaders: usedHttpHeadersRaw, agentBrief, agentPrompt } = getProjectData();
     // Resolve customResources - can be array or async function
     let resolvedCustomResources = [];
     if (customResources) {
@@ -49,9 +51,20 @@ Used:
             content: appConfig.productName,
             requireAuth: false,
         },
+        // Standard §4 SHOULD — version surfaced via resources/read in addition to GET /health and serverInfo.
+        {
+            uri: 'project://version',
+            name: 'project-version',
+            title: 'Server version',
+            description: 'Current server version (semver). Mirrors GET /health.version and serverInfo.version.',
+            mimeType: 'text/plain',
+            content: appConfig.version,
+            requireAuth: false,
+        },
         {
             uri: 'doc://readme',
             name: 'README.md',
+            title: 'README',
             description: `Documentation of project '${appConfig.productName}':
 Project description, purpose, features, data sources, installation, launch (STDIO/HTTP), MCP API, configuration, testing, deployment.
 This information is used by searching for this MCP server and its information in the RAG system of the "MCP registry"
@@ -70,8 +83,62 @@ This information is used by searching for this MCP server and its information in
         content: usedHttpHeaders,
         requireAuth: false,
     });
+    // Standard §11.2 SHOULD — describe enabled auth methods + claims for agent clients.
+    resources.push({
+        uri: 'use://auth',
+        name: 'auth',
+        description: 'Authentication profile: enabled schemes, methods, expected claims, header names.',
+        mimeType: 'application/json',
+        content: collectAuthProfile(),
+        requireAuth: false,
+    });
+    // Standard §11.2 Avatar profile — service-scheme mirrors of agent_brief / agent_prompt.
+    const serviceScheme = appConfig.name;
+    const briefUri = `${serviceScheme}://agent/brief`;
+    const promptUri = `${serviceScheme}://agent/prompt`;
+    const customUris = new Set(resolvedCustomResources.map((r) => r.uri));
+    if (agentBrief && !customUris.has(briefUri)) {
+        resources.push({
+            uri: briefUri,
+            name: 'agent-brief',
+            description: 'Mirror of prompt agent_brief. Routing-level (level 1) agent description.',
+            mimeType: 'text/markdown',
+            content: agentBrief,
+            requireAuth: false,
+        });
+    }
+    if (agentPrompt && !customUris.has(promptUri)) {
+        resources.push({
+            uri: promptUri,
+            name: 'agent-prompt',
+            description: 'Mirror of prompt agent_prompt. Detailed (level 2) agent instructions.',
+            mimeType: 'text/markdown',
+            content: agentPrompt,
+            requireAuth: false,
+        });
+    }
     return [...resources, ...resolvedCustomResources];
 };
+/**
+ * Standard §11.3 (MAY) — compute the byte size of a resource's content for `resources/list`.
+ * Strings and objects are measured as they will be serialized; binary blobs by their byte length.
+ * Returns `undefined` for lazy (function) content — computing it would require running the
+ * function ahead of `resources/read`, so the size is simply not published in that case.
+ */
+function computeResourceSize(content) {
+    if (typeof content === 'function') {
+        return undefined;
+    }
+    if (typeof content === 'string') {
+        return Buffer.byteLength(content, 'utf-8');
+    }
+    if (content && typeof content === 'object' && 'blob' in content) {
+        const { blob } = content;
+        return Buffer.isBuffer(blob) ? blob.length : Buffer.byteLength(String(blob), 'utf-8');
+    }
+    // Plain object — measured as the JSON the transport will emit.
+    return Buffer.byteLength(JSON.stringify(content), 'utf-8');
+}
 export const getResourcesList = async (args) => {
     const startedAt = Date.now();
     if (debugMcpResource.enabled) {
@@ -79,7 +146,14 @@ export const getResourcesList = async (args) => {
     }
     emitTrace('mcp:resource', { kind: 'list-req' });
     const resources = await createResources(args);
-    const result = { resources: resources.map(({ content, ...rest }) => ({ ...rest })) };
+    const result = {
+        resources: resources.map(({ content, ...rest }) => {
+            // Publish `size` only when not already set by the author and computable without running
+            // lazy content (standard §11.3).
+            const size = rest.size ?? computeResourceSize(content);
+            return size === undefined ? { ...rest } : { ...rest, size };
+        }),
+    };
     const ms = Date.now() - startedAt;
     if (debugMcpResource.enabled) {
         debugMcpResource(`← resources/list (${result.resources.length})\n${JSON.stringify(result, null, 2)}`);
@@ -87,6 +161,73 @@ export const getResourcesList = async (args) => {
     emitTrace('mcp:resource', { kind: 'list-res', count: result.resources.length, ms });
     return result;
 };
+/**
+ * Standard §11.5 — resources/templates/list handler. Returns project-supplied templates
+ * (`customResourceTemplates` in McpServerData) or empty array.
+ */
+export const getResourceTemplatesList = async (args) => {
+    const projectData = getProjectData();
+    const raw = projectData?.customResourceTemplates;
+    if (!raw) {
+        return [];
+    }
+    if (typeof raw === 'function') {
+        return (await raw(args)) ?? [];
+    }
+    return Array.isArray(raw) ? raw : [];
+};
+/**
+ * Standard §11.5 — resources/subscribe support. Subscriptions are tracked per server instance
+ * (each HTTP session owns its own `Server`). Project code calls `notifyResourceUpdated` to
+ * broadcast — only the current server's subscribers receive the notification.
+ */
+const subscribersByServer = new WeakMap();
+export function subscribeResource(server, uri) {
+    if (!uri) {
+        return;
+    }
+    let set = subscribersByServer.get(server);
+    if (!set) {
+        set = new Set();
+        subscribersByServer.set(server, set);
+    }
+    set.add(uri);
+}
+export function unsubscribeResource(server, uri) {
+    const set = subscribersByServer.get(server);
+    if (set) {
+        set.delete(uri);
+    }
+}
+export async function notifyResourceUpdated(server, uri) {
+    const set = subscribersByServer.get(server);
+    if (!set || !set.has(uri)) {
+        return;
+    }
+    try {
+        await server.notification({
+            method: 'notifications/resources/updated',
+            params: { uri },
+        });
+    }
+    catch {
+        // best-effort — transport may be closed
+    }
+}
+/**
+ * Normalize {@link IResourceBinaryContent} to a base64 string for `contents[0].blob`.
+ * Buffer → base64; string with `base64:false` → encode raw bytes; string otherwise → assumed
+ * already base64 and passed through.
+ */
+function encodeBlob(bin) {
+    if (Buffer.isBuffer(bin.blob)) {
+        return bin.blob.toString('base64');
+    }
+    if (bin.base64 === false) {
+        return Buffer.from(String(bin.blob), 'utf-8').toString('base64');
+    }
+    return String(bin.blob);
+}
 export const getResource = async (uri, args) => {
     const startedAt = Date.now();
     if (debugMcpResource.enabled) {
@@ -97,7 +238,8 @@ export const getResource = async (uri, args) => {
     const resource = resources.find((r) => r.uri === uri);
     if (!resource) {
         emitTrace('mcp:resource', { kind: 'read-err', uri, ms: Date.now() - startedAt, error: 'unknown-resource' });
-        throw new Error(`Unknown resource: ${uri}`);
+        // Standard §13 / Appendix B.2 — classify as -32002 (HTTP 404), not a generic -32603.
+        throw new ResourceNotFoundError('Unknown resource', { uri, reason: 'unknown_resource' });
     }
     let { content } = resource;
     if (typeof content === 'function') {
@@ -105,21 +247,26 @@ export const getResource = async (uri, args) => {
     }
     if (!content) {
         emitTrace('mcp:resource', { kind: 'read-err', uri, ms: Date.now() - startedAt, error: 'no-content' });
-        throw new Error(`Can not get content of resource '${uri}' by custom handler`);
+        throw new ResourceNotFoundError('Resource has no content', { uri, reason: 'empty_content' });
     }
+    // Standard §11.4 / §12.2 — a resource entry carries exactly one of `text` or `blob`. Binary
+    // content is declared as { blob: Buffer | base64-string } and emitted as base64 `blob`.
+    const isBinary = typeof content === 'object' && content !== null && 'blob' in content;
+    const baseEntry = {
+        uri: resource.uri,
+        mimeType: resource.mimeType,
+        ...(resource._meta ? { _meta: resource._meta } : {}),
+    };
     const result = {
         contents: [
-            {
-                uri: resource.uri,
-                mimeType: resource.mimeType,
-                text: content,
-                ...(resource._meta ? { _meta: resource._meta } : {}),
-            },
+            isBinary
+                ? { ...baseEntry, blob: encodeBlob(content) }
+                : { ...baseEntry, text: content },
         ],
     };
     const ms = Date.now() - startedAt;
     if (debugMcpResource.enabled) {
-        const body = typeof content === 'string' ? content : JSON.stringify(content, null, 2);
+        const body = isBinary ? '[binary blob]' : typeof content === 'string' ? content : JSON.stringify(content, null, 2);
         debugMcpResource(`← resources/read ${uri}\n${body}`);
     }
     emitTrace('mcp:resource', { kind: 'read-res', uri, ms });

package/dist/core/mcp/resources.js.map

@@ -1 +1 @@
-{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/core/mcp/resources.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAErE,IAAI,MAAM,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;AAC5D,IAAI,WAAgB,CAAC;AACrB,IAAI,CAAC;IACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;AACnG,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,eAAe,GAAG,KAAK,EAAE,IAAuB,EAA4B,EAAE;IAClF,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,cAAc,EAAE,CAAC;IAElF,2DAA2D;IAC3D,IAAI,uBAAuB,GAAoB,EAAE,CAAC;IAClD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;YAC1C,uBAAuB,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,uBAAuB,GAAG,eAAe,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAoB;QACjC;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE;;;oCAGiB;YAC9B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,SAAS,CAAC,IAAI;YACvB,WAAW,EAAE,KAAK;SACnB;QACD;YACE,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,+CAA+C;YAC5D,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,SAAS,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK;SACnB;QACD;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,6BAA6B,SAAS,CAAC,WAAW;;;CAGpE;YACK,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,KAAK;SACnB;KACF,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAsB,CAAC;IAExE,SAAS,CAAC,IAAI,CAAC;QACb,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mBAAmB;QAChC,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,uBAAuB,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAuB,EAA2C,EAAE;IACzG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACvC,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAoB,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAClC,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAE,IAAuB,EAAsB,EAAE;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC3B,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,qBAAqB,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,MAAM,GAAc;QACxB,QAAQ,EAAE;YACR;gBACE,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,OAAO;gBACb,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD;SACF;KACF,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAClC,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtF,gBAAgB,CAAC,oBAAoB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../src/core/mcp/resources.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAYlC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAErE,IAAI,MAAM,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;AAC5D,IAAI,WAAgB,CAAC;AACrB,IAAI,CAAC;IACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE,YAAY,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;AACnG,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,eAAe,GAAG,KAAK,EAAE,IAAuB,EAA4B,EAAE;IAClF,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,CAAC;IAE3G,2DAA2D;IAC3D,IAAI,uBAAuB,GAAoB,EAAE,CAAC;IAClD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,OAAO,eAAe,KAAK,UAAU,EAAE,CAAC;YAC1C,uBAAuB,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,uBAAuB,GAAG,eAAe,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAoB;QACjC;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE;;;oCAGiB;YAC9B,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,SAAS,CAAC,IAAI;YACvB,WAAW,EAAE,KAAK;SACnB;QACD;YACE,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,+CAA+C;YAC5D,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,SAAS,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK;SACnB;QACD,sGAAsG;QACtG;YACE,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,sFAAsF;YACnG,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,WAAW,EAAE,KAAK;SACnB;QACD;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,6BAA6B,SAAS,CAAC,WAAW;;;CAGpE;YACK,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,KAAK;SACnB;KACF,CAAC;IACF,MAAM,eAAe,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAsB,CAAC;IAExE,SAAS,CAAC,IAAI,CAAC;QACb,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mBAAmB;QAChC,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IAEH,oFAAoF;IACpF,SAAS,CAAC,IAAI,CAAC;QACb,GAAG,EAAE,YAAY;QACjB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,kFAAkF;QAC/F,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,kBAAkB,EAAE;QAC7B,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IAEH,wFAAwF;IACxF,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,GAAG,aAAa,gBAAgB,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,aAAa,iBAAiB,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAEtE,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,QAAQ;YACb,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,0EAA0E;YACvF,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,SAAS,CAAC,IAAI,CAAC;YACb,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,uEAAuE;YACpF,QAAQ,EAAE,eAAe;YACzB,OAAO,EAAE,WAAW;YACpB,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,uBAAuB,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,OAAiC;IAC5D,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QAChE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAiC,CAAC;QACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IACD,+DAA+D;IAC/D,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAuB,EAA2C,EAAE;IACzG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACvC,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAoB,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;YAChD,wFAAwF;YACxF,iCAAiC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACvD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC,CAAC;KACH,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAClC,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAAE,IAAuB,EAAkB,EAAE;IACxF,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,GAAG,GAAI,WAAmB,EAAE,uBAAuB,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAAuB,CAAC;AAE/D,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,GAAW;IAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;IACT,CAAC;IACD,IAAI,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;QAChB,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,GAAW;IAC7D,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAc,EAAE,GAAW;IACrE,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,CAAC;YACxB,MAAM,EAAE,iCAAiC;YACzC,MAAM,EAAE,EAAE,GAAG,EAAE;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,GAA2B;IAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAE,IAAuB,EAAsB,EAAE;IAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,gBAAgB,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5G,qFAAqF;QACrF,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAC3B,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,GAAG,MAAO,OAA8B,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACtG,MAAM,IAAI,qBAAqB,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,4FAA4F;IAC5F,wFAAwF;IACxF,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,IAAK,OAAe,CAAC;IAC/F,MAAM,SAAS,GAAG;QAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IACF,MAAM,MAAM,GAAc;QACxB,QAAQ,EAAE;YACR,QAAQ;gBACN,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,OAAiC,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAA0B,EAAE;SACvD;KACF,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAClC,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACnH,gBAAgB,CAAC,oBAAoB,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/core/mcp/server-stdio.d.ts

@@ -1,5 +1,11 @@
 /**
- * Start STDIO server
+ * Start STDIO server.
+ *
+ * The MCP `Server` is built here, NOT at module load time: `createMcpServer` reads
+ * `global.__MCP_PROJECT_DATA__` to decide conditional capabilities (`prompts`, `completions`,
+ * `tasks` — standard §8.2 / §8.7). `initMcpServer` only populates that global just before calling
+ * this function, so an import-time construction would see empty project data and silently drop the
+ * prompts capability (and its handlers) on stdio.
  */
 export declare function startStdioServer(): Promise<void>;
 //# sourceMappingURL=server-stdio.d.ts.map

package/dist/core/mcp/server-stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-stdio.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/server-stdio.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAItD"}
+{"version":3,"file":"server-stdio.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/server-stdio.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAKtD"}

package/dist/core/mcp/server-stdio.js

@@ -1,11 +1,16 @@
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { createMcpServer } from './create-mcp-server.js';
-// Create server instance
-const server = createMcpServer();
 /**
- * Start STDIO server
+ * Start STDIO server.
+ *
+ * The MCP `Server` is built here, NOT at module load time: `createMcpServer` reads
+ * `global.__MCP_PROJECT_DATA__` to decide conditional capabilities (`prompts`, `completions`,
+ * `tasks` — standard §8.2 / §8.7). `initMcpServer` only populates that global just before calling
+ * this function, so an import-time construction would see empty project data and silently drop the
+ * prompts capability (and its handlers) on stdio.
  */
 export async function startStdioServer() {
+    const server = createMcpServer('stdio');
     const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error('MCP Server running on stdio');

package/dist/core/mcp/server-stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-stdio.js","sourceRoot":"","sources":["../../../src/core/mcp/server-stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,yBAAyB;AACzB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;AAEjC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"server-stdio.js","sourceRoot":"","sources":["../../../src/core/mcp/server-stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC/C,CAAC"}

package/dist/core/mcp/task-store.d.ts

@@ -0,0 +1,97 @@
+import type { Task } from '@modelcontextprotocol/sdk/types.js';
+export type TTaskStatus = 'working' | 'input_required' | 'completed' | 'failed' | 'cancelled';
+/** True when a task reached a final state and will not transition further on its own. */
+export declare function isTerminalTaskStatus(status: TTaskStatus): boolean;
+export interface ITaskRecord {
+    /** Crypto-random task identifier returned to the client. */
+    taskId: string;
+    /** Originating MCP method — always 'tools/call' in this package. */
+    method: string;
+    /** Tool name the task executes (for tasks/list display and metrics). */
+    toolName: string;
+    status: TTaskStatus;
+    /** Epoch ms of creation; used for ttl expiry and eviction order. */
+    createdAt: number;
+    /** Epoch ms of the last status transition. */
+    lastUpdatedAt: number;
+    /** Clamped retention duration in ms, surfaced to the client as `Task.ttl`. */
+    ttlMs: number;
+    /** Epoch ms after which a finished task may be evicted (`createdAt + ttlMs`). */
+    expiresAt: number;
+    /** Optional diagnostic message for `failed` tasks (already sanitized per §13.3). */
+    statusMessage?: string;
+    /** Correlation id (§15.1), copied from the creating request context. */
+    requestId?: string;
+    /** Subject key (JWT `sub`, lower-cased) for per-subject scoping and concurrency accounting. */
+    subjectKey: string;
+    /** Final tool result once status is `completed` (the same shape tools/call returns). */
+    result?: unknown;
+    /** AbortController whose signal is passed to the tool handler; aborted on tasks/cancel. */
+    abort: AbortController;
+}
+export interface ITaskCreateInput {
+    method: string;
+    toolName: string;
+    subjectKey: string;
+    requestId?: string;
+    /** Client-requested retention in ms; clamped to `[minTtlMs, maxTtlMs]`. Falls back to default. */
+    ttlMs?: number;
+}
+export type TTaskPatch = Partial<Pick<ITaskRecord, 'status' | 'statusMessage' | 'result'>>;
+export interface ITaskStore {
+    create(input: ITaskCreateInput): ITaskRecord;
+    get(taskId: string): ITaskRecord | undefined;
+    /** Lists retained tasks, optionally filtered by subject; insertion order (caller may re-sort). */
+    list(subjectKey?: string): ITaskRecord[];
+    /** Transitions status and stores result / message. Returns the updated record (or undefined). */
+    update(taskId: string, patch: TTaskPatch): ITaskRecord | undefined;
+    /** Requests cancellation: aborts the controller and sets `cancelled` if not already terminal. */
+    cancel(taskId: string): ITaskRecord | undefined;
+    /** Removes expired finished tasks; called on a timer and on create(). */
+    sweep(now: number): void;
+    /** Recommended client poll interval in ms (mirrored into every task object). */
+    readonly pollIntervalMs: number;
+}
+export interface ITaskStoreOptions {
+    defaultTtlMs: number;
+    minTtlMs: number;
+    maxTtlMs: number;
+    maxTasks: number;
+    pollIntervalMs: number;
+    /** Injectable clock for tests. Defaults to `Date.now`. */
+    now?: () => number;
+    /** When > 0, runs a periodic unref'd sweep. Off (0) for direct construction in tests. */
+    autoSweepMs?: number;
+}
+/**
+ * Render an internal task record as the wire-format MCP {@link Task} object (ISO timestamps,
+ * `ttl` as the retention duration). Used by every task method and the status notification.
+ */
+export declare function toTaskDto(record: ITaskRecord, pollIntervalMs: number): Task;
+export declare class InMemoryTaskStore implements ITaskStore {
+    private readonly tasks;
+    private readonly opts;
+    private readonly now;
+    private sweepTimer;
+    constructor(opts: ITaskStoreOptions);
+    get pollIntervalMs(): number;
+    private clampTtl;
+    create(input: ITaskCreateInput): ITaskRecord;
+    get(taskId: string): ITaskRecord | undefined;
+    list(subjectKey?: string): ITaskRecord[];
+    update(taskId: string, patch: TTaskPatch): ITaskRecord | undefined;
+    cancel(taskId: string): ITaskRecord | undefined;
+    sweep(now: number): void;
+    /** Evict the oldest finished tasks when the retention cap is reached. Active tasks are kept. */
+    private evictIfNeeded;
+    /** Stops the periodic sweeper (tests / shutdown). */
+    dispose(): void;
+}
+/**
+ * Process-wide task store, lazily built from `appConfig.mcp.tasks`. A singleton because tasks
+ * outlive individual HTTP sessions and must be pollable from subsequent requests.
+ */
+export declare function getTaskStore(): InMemoryTaskStore;
+/** Reset the singleton (tests only). */
+export declare function resetTaskStore(): void;
+//# sourceMappingURL=task-store.d.ts.map

package/dist/core/mcp/task-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-store.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/task-store.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAI/D,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAI9F,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAEjE;AAED,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2FAA2F;IAC3F,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kGAAkG;IAClG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC;AAE3F,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CAAC;IAC7C,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IAC7C,kGAAkG;IAClG,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACzC,iGAAiG;IACjG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IACnE,iGAAiG;IACjG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IAChD,yEAAyE;IACzE,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAU3E;AAED,qBAAa,iBAAkB,YAAW,UAAU;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,UAAU,CAA6B;gBAEnC,IAAI,EAAE,iBAAiB;IAWnC,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,OAAO,CAAC,QAAQ;IAKhB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW;IAsB5C,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI5C,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE;IAKxC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS;IAkBlE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAe/C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQxB,gGAAgG;IAChG,OAAO,CAAC,aAAa;IAiBrB,qDAAqD;IACrD,OAAO,IAAI,IAAI;CAOhB;AAID;;;GAGG;AACH,wBAAgB,YAAY,IAAI,iBAAiB,CAahD;AAED,wCAAwC;AACxC,wBAAgB,cAAc,IAAI,IAAI,CAGrC"}

package/dist/core/mcp/task-store.js

@@ -0,0 +1,175 @@
+/**
+ * Standard §8.7 — task-augmented execution storage.
+ *
+ * The MCP SDK ships the task schemas (`TaskSchema`, `CreateTaskResultSchema`, …) but no storage or
+ * lifecycle. This module supplies both: an {@link ITaskStore} abstraction and a process-memory
+ * {@link InMemoryTaskStore} default. A task represents one long-running `tools/call` that returned
+ * immediately with a `taskId`; the client then polls `tasks/get`, fetches `tasks/result` and may
+ * `tasks/cancel`.
+ *
+ * The in-memory store is sufficient for a single server instance. It does NOT survive a process
+ * restart — unfinished tasks are lost on restart, which is an accepted limitation of the default
+ * implementation. A consumer needing durability or horizontal scale can implement {@link ITaskStore}
+ * over Redis / PostgreSQL and swap it in.
+ */
+import { randomUUID } from 'node:crypto';
+import { appConfig } from '../bootstrap/init-config.js';
+const TERMINAL_STATUSES = new Set(['completed', 'failed', 'cancelled']);
+/** True when a task reached a final state and will not transition further on its own. */
+export function isTerminalTaskStatus(status) {
+    return TERMINAL_STATUSES.has(status);
+}
+/**
+ * Render an internal task record as the wire-format MCP {@link Task} object (ISO timestamps,
+ * `ttl` as the retention duration). Used by every task method and the status notification.
+ */
+export function toTaskDto(record, pollIntervalMs) {
+    return {
+        taskId: record.taskId,
+        status: record.status,
+        ttl: record.ttlMs,
+        createdAt: new Date(record.createdAt).toISOString(),
+        lastUpdatedAt: new Date(record.lastUpdatedAt).toISOString(),
+        pollInterval: pollIntervalMs,
+        ...(record.statusMessage ? { statusMessage: record.statusMessage } : {}),
+    };
+}
+export class InMemoryTaskStore {
+    tasks = new Map();
+    opts;
+    now;
+    sweepTimer;
+    constructor(opts) {
+        this.opts = opts;
+        this.now = opts.now ?? Date.now;
+        if (opts.autoSweepMs && opts.autoSweepMs > 0) {
+            this.sweepTimer = setInterval(() => this.sweep(this.now()), opts.autoSweepMs);
+            if (typeof this.sweepTimer.unref === 'function') {
+                this.sweepTimer.unref();
+            }
+        }
+    }
+    get pollIntervalMs() {
+        return this.opts.pollIntervalMs;
+    }
+    clampTtl(requested) {
+        const base = typeof requested === 'number' && Number.isFinite(requested) ? requested : this.opts.defaultTtlMs;
+        return Math.min(this.opts.maxTtlMs, Math.max(this.opts.minTtlMs, base));
+    }
+    create(input) {
+        const now = this.now();
+        this.sweep(now);
+        this.evictIfNeeded();
+        const ttlMs = this.clampTtl(input.ttlMs);
+        const record = {
+            taskId: randomUUID(),
+            method: input.method,
+            toolName: input.toolName,
+            status: 'working',
+            createdAt: now,
+            lastUpdatedAt: now,
+            ttlMs,
+            expiresAt: now + ttlMs,
+            ...(input.requestId ? { requestId: input.requestId } : {}),
+            subjectKey: input.subjectKey,
+            abort: new AbortController(),
+        };
+        this.tasks.set(record.taskId, record);
+        return record;
+    }
+    get(taskId) {
+        return this.tasks.get(taskId);
+    }
+    list(subjectKey) {
+        const all = [...this.tasks.values()];
+        return subjectKey === undefined ? all : all.filter((r) => r.subjectKey === subjectKey);
+    }
+    update(taskId, patch) {
+        const record = this.tasks.get(taskId);
+        if (!record) {
+            return undefined;
+        }
+        if (patch.status !== undefined) {
+            record.status = patch.status;
+        }
+        if (patch.statusMessage !== undefined) {
+            record.statusMessage = patch.statusMessage;
+        }
+        if ('result' in patch) {
+            record.result = patch.result;
+        }
+        record.lastUpdatedAt = this.now();
+        return record;
+    }
+    cancel(taskId) {
+        const record = this.tasks.get(taskId);
+        if (!record) {
+            return undefined;
+        }
+        // Idempotent: cancelling a finished task returns its current state unchanged.
+        if (isTerminalTaskStatus(record.status)) {
+            return record;
+        }
+        record.abort.abort();
+        record.status = 'cancelled';
+        record.lastUpdatedAt = this.now();
+        return record;
+    }
+    sweep(now) {
+        for (const [id, record] of this.tasks) {
+            if (isTerminalTaskStatus(record.status) && now > record.expiresAt) {
+                this.tasks.delete(id);
+            }
+        }
+    }
+    /** Evict the oldest finished tasks when the retention cap is reached. Active tasks are kept. */
+    evictIfNeeded() {
+        if (this.tasks.size < this.opts.maxTasks) {
+            return;
+        }
+        const finished = [...this.tasks.values()]
+            .filter((r) => isTerminalTaskStatus(r.status))
+            .sort((a, b) => a.createdAt - b.createdAt);
+        let toEvict = this.tasks.size - this.opts.maxTasks + 1;
+        for (const record of finished) {
+            if (toEvict <= 0) {
+                break;
+            }
+            this.tasks.delete(record.taskId);
+            toEvict -= 1;
+        }
+    }
+    /** Stops the periodic sweeper (tests / shutdown). */
+    dispose() {
+        if (this.sweepTimer) {
+            clearInterval(this.sweepTimer);
+            this.sweepTimer = undefined;
+        }
+        this.tasks.clear();
+    }
+}
+let singleton;
+/**
+ * Process-wide task store, lazily built from `appConfig.mcp.tasks`. A singleton because tasks
+ * outlive individual HTTP sessions and must be pollable from subsequent requests.
+ */
+export function getTaskStore() {
+    if (!singleton) {
+        const cfg = appConfig.mcp.tasks ?? {};
+        singleton = new InMemoryTaskStore({
+            defaultTtlMs: cfg.defaultTtlMs ?? 3_600_000,
+            minTtlMs: cfg.minTtlMs ?? 0,
+            maxTtlMs: cfg.maxTtlMs ?? 86_400_000,
+            maxTasks: cfg.maxTasks ?? 1000,
+            pollIntervalMs: cfg.pollIntervalMs ?? 1000,
+            autoSweepMs: 60_000,
+        });
+    }
+    return singleton;
+}
+/** Reset the singleton (tests only). */
+export function resetTaskStore() {
+    singleton?.dispose();
+    singleton = undefined;
+}
+//# sourceMappingURL=task-store.js.map

package/dist/core/mcp/task-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-store.js","sourceRoot":"","sources":["../../../src/core/mcp/task-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAIxD,MAAM,iBAAiB,GAA6B,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AAElG,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAoED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,MAAmB,EAAE,cAAsB;IACnE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QACnD,aAAa,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;QAC3D,YAAY,EAAE,cAAc;QAC5B,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,iBAAiB;IACX,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvC,IAAI,CAAoB;IACxB,GAAG,CAAe;IAC3B,UAAU,CAA6B;IAE/C,YAAY,IAAuB;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC9E,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAChD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAEO,QAAQ,CAAC,SAAkB;QACjC,MAAM,IAAI,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QAC9G,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,CAAC,KAAuB;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAgB;YAC1B,MAAM,EAAE,UAAU,EAAE;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG;YACd,aAAa,EAAE,GAAG;YAClB,KAAK;YACL,SAAS,EAAE,GAAG,GAAG,KAAK;YACtB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,IAAI,eAAe,EAAE;SAC7B,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CAAC,UAAmB;QACtB,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,KAAiB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC7C,CAAC;QACD,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,8EAA8E;QAC9E,IAAI,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;QAC5B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAW;QACf,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,gGAAgG;IACxF,aAAa;QACnB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACjB,MAAM;YACR,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,OAAO;QACL,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,IAAI,SAAwC,CAAC;AAE7C;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,SAAS,GAAG,IAAI,iBAAiB,CAAC;YAChC,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;YAC3C,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC;YAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,UAAU;YACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;YAC9B,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI;YAC1C,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,cAAc;IAC5B,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,SAAS,GAAG,SAAS,CAAC;AACxB,CAAC"}

package/dist/core/mcp/tool-limits.d.ts

@@ -0,0 +1,22 @@
+import { TToolHandlerResponse } from '../_types_/types.js';
+/**
+ * Race a tool invocation against `mcp.limits.toolTimeoutMs`. On expiry the returned promise
+ * rejects with an SDK `McpError` carrying code `-32004` (standard §14 / Appendix B). The
+ * pending tool promise is left running — Node.js cannot synchronously abort user code —
+ * but the server-side timer is cleared so we don't leak handles. The HTTP-level transport
+ * layer in `server-http.ts` runs its own race so the response status becomes 504.
+ */
+export declare function withToolTimeout<T>(toolName: string, exec: () => Promise<T>): Promise<T>;
+/**
+ * Trim a tool response so its serialized payload stays under `mcp.limits.maxToolResultBytes`
+ * (standard §12.2 / §14). Truncation is signalled BOTH in the textual content and in the
+ * structured payload so the client cannot silently miss it.
+ *
+ * - For `content[].text` entries: the offending entry is cut to fit the budget and suffixed
+ *   with an explicit `…[truncated]` marker.
+ * - For `structuredContent`: a sibling `truncated: true` field is set when the JSON exceeds
+ *   the budget, and the payload is replaced with a minimal sentinel object so the response
+ *   still fits the wire frame.
+ */
+export declare function truncateToolResponse<T>(response: TToolHandlerResponse<T>): TToolHandlerResponse<T>;
+//# sourceMappingURL=tool-limits.d.ts.map

package/dist/core/mcp/tool-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-limits.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/tool-limits.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAkC,MAAM,qBAAqB,CAAC;AAE3F;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAuB7F;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAwElG"}