mcp-evolution 0.0.0-stage → 0.8.0

package/dist/evolution-client.d.ts

@@ -0,0 +1,34 @@
+import { type Redactor } from "./util/redact.js";
+export interface EvolutionClientOptions {
+    apiUrl: string;
+    apiKey: string;
+    basicAuth?: string;
+    /** Instances this client may address. Omit to allow any (tests only). */
+    instances?: readonly string[];
+    /** Extra secrets to mask in error messages (e.g. DB URL). */
+    dbUrl?: string;
+}
+/**
+ * Stateless HTTP client for Evolution API. It holds only immutable connection settings;
+ * the target instance is chosen per call via forInstance(), checked against the allowlist.
+ */
+export declare class EvolutionClient {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly basicAuth?;
+    private readonly instances?;
+    readonly redact: Redactor;
+    constructor(opts: EvolutionClientOptions);
+    /** Immutable view bound to one allowlisted instance. */
+    forInstance(instance: string): InstanceClient;
+    request<T = unknown>(method: string, path: string, body?: unknown): Promise<T>;
+}
+/** Per-call, per-instance client handed to tool handlers. */
+export declare class InstanceClient {
+    private readonly http;
+    readonly instanceName: string;
+    constructor(http: EvolutionClient, instanceName: string);
+    get<T = unknown>(path: string): Promise<T>;
+    post<T = unknown>(path: string, body: unknown): Promise<T>;
+    delete<T = unknown>(path: string, body?: unknown): Promise<T>;
+}

package/dist/evolution-client.js

@@ -0,0 +1,84 @@
+import { McpError, ErrorCode } from "@modelcontextprotocol/sdk/types.js";
+import { GuardError } from "./errors.js";
+import { createRedactor } from "./util/redact.js";
+/**
+ * Stateless HTTP client for Evolution API. It holds only immutable connection settings;
+ * the target instance is chosen per call via forInstance(), checked against the allowlist.
+ */
+export class EvolutionClient {
+    baseUrl;
+    apiKey;
+    basicAuth;
+    instances;
+    redact;
+    constructor(opts) {
+        // Strip trailing slash to keep URL building consistent
+        this.baseUrl = opts.apiUrl.replace(/\/$/, "");
+        this.apiKey = opts.apiKey;
+        this.basicAuth = opts.basicAuth;
+        this.instances = opts.instances ? new Set(opts.instances) : undefined;
+        this.redact = createRedactor({
+            apiKey: opts.apiKey,
+            basicAuth: opts.basicAuth,
+            apiUrl: opts.apiUrl,
+            dbUrl: opts.dbUrl,
+        });
+    }
+    /** Immutable view bound to one allowlisted instance. */
+    forInstance(instance) {
+        if (this.instances && !this.instances.has(instance)) {
+            throw new GuardError(`Instance "${instance}" is not configured. Use list_instances to see the allowed ones.`);
+        }
+        return new InstanceClient(this, instance);
+    }
+    async request(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const headers = {
+            apikey: this.apiKey,
+            "Content-Type": "application/json",
+        };
+        if (this.basicAuth)
+            headers.Authorization = `Basic ${this.basicAuth}`;
+        let res;
+        try {
+            res = await fetch(url, {
+                method,
+                headers,
+                body: body !== undefined ? JSON.stringify(body) : undefined,
+            });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new McpError(ErrorCode.InternalError, this.redact(`Evolution API request failed: ${msg}`));
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            throw new McpError(ErrorCode.InternalError, this.redact(`Evolution API error ${res.status}: ${text}`));
+        }
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            return text;
+        }
+    }
+}
+/** Per-call, per-instance client handed to tool handlers. */
+export class InstanceClient {
+    http;
+    instanceName;
+    constructor(http, instanceName) {
+        this.http = http;
+        this.instanceName = instanceName;
+    }
+    get(path) {
+        return this.http.request("GET", path);
+    }
+    post(path, body) {
+        return this.http.request("POST", path, body);
+    }
+    delete(path, body) {
+        return this.http.request("DELETE", path, body);
+    }
+}
+//# sourceMappingURL=evolution-client.js.map

package/dist/evolution-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evolution-client.js","sourceRoot":"","sources":["../src/evolution-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAiB,MAAM,kBAAkB,CAAC;AAYjE;;;GAGG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,SAAS,CAAU;IACnB,SAAS,CAAuB;IACxC,MAAM,CAAW;IAE1B,YAAY,IAA4B;QACtC,uDAAuD;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;IACL,CAAC;IAED,wDAAwD;IACxD,WAAW,CAAC,QAAgB;QAC1B,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,UAAU,CAAC,aAAa,QAAQ,kEAAkE,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,OAAO,CAAc,MAAc,EAAE,IAAY,EAAE,IAAc;QACrE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,aAAa,GAAG,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QAEtE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACrB,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAoB,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,cAAc;IAEN;IACR;IAFX,YACmB,IAAqB,EAC7B,YAAoB;QADZ,SAAI,GAAJ,IAAI,CAAiB;QAC7B,iBAAY,GAAZ,YAAY,CAAQ;IAC5B,CAAC;IAEJ,GAAG,CAAc,IAAY;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,CAAc,IAAY,EAAE,IAAa;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAc,IAAY,EAAE,IAAc;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/guards/recipients.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Recipient allowlist.
+ *
+ * Values are compared by their numeric identity: the local part before "@" (without a
+ * ":device" suffix), digits only. Accepted forms: "5511999999999", "+55 (11) 99999-9999",
+ * "5511999999999@s.whatsapp.net", "...@c.us", "123456789012345@lid", "120363...@g.us".
+ * Brazilian mobiles: list them in full (55 DD 9XXXXXXXX); a legacy JID without the extra "9"
+ * (55 DD XXXXXXXX@s.whatsapp.net, common for area codes >= 31) is then matched too.
+ * "*@g.us" admits every group (any "...@g.us" JID) while direct chats stay restricted to the list.
+ */
+export type RecipientRule = {
+    unrestricted: true;
+} | {
+    unrestricted: false;
+    keys: ReadonlySet<string>;
+    allGroups: boolean;
+};
+/** Returns the comparable keys for a recipient value, or null if it is not a recognisable id. */
+export declare function recipientKeys(value: string): string[] | null;
+/** Canonical (digits-only) form, or null. */
+export declare function normalizeRecipient(value: string): string | null;
+/**
+ * Env var name holding the per-instance override:
+ * EVOLUTION_ALLOWED_RECIPIENTS__ + instance upper-cased with every non [A-Z0-9] char → "_".
+ * e.g. "billy-franklim.2" → EVOLUTION_ALLOWED_RECIPIENTS__BILLY_FRANKLIM_2
+ */
+export declare function recipientEnvName(instance: string): string;
+/** Parse a comma-separated allowlist. "*" means unrestricted; "*@g.us" admits every group. */
+export declare function parseRecipientList(raw: string, envName: string): RecipientRule;
+export declare class RecipientPolicy {
+    private readonly rule?;
+    constructor(rule?: RecipientRule | undefined);
+    get restricted(): boolean;
+    isAllowed(value: string | undefined | null): boolean;
+    assertAllowed(values: string[]): void;
+}
+/** Recursively collect every recipient-like value from tool arguments. */
+export declare function collectRecipients(args: unknown): string[];
+/** Enforce the recipient allowlist for one tool call. No-op when unrestricted. */
+export declare function enforceRecipients(tool: string, args: Record<string, unknown>, policy: RecipientPolicy): void;

package/dist/guards/recipients.js

@@ -0,0 +1,135 @@
+import { ConfigError, GuardError } from "../errors.js";
+const ALL_GROUPS = "*@g.us";
+const PHONE_DOMAINS = new Set(["", "s.whatsapp.net", "c.us"]);
+const OTHER_DOMAINS = new Set(["lid", "g.us"]);
+/** Keys that identify a chat/recipient anywhere inside tool arguments. */
+const RECIPIENT_KEYS = new Set([
+    "number",
+    "numbers",
+    "remoteJid",
+    "jid",
+    "groupJid",
+    "chat",
+    "participants",
+    "statusJidList",
+]);
+/** Returns the comparable keys for a recipient value, or null if it is not a recognisable id. */
+export function recipientKeys(value) {
+    const trimmed = value.trim().toLowerCase();
+    const at = trimmed.indexOf("@");
+    const local = at === -1 ? trimmed : trimmed.slice(0, at);
+    const domain = at === -1 ? "" : trimmed.slice(at + 1);
+    if (!PHONE_DOMAINS.has(domain) && !OTHER_DOMAINS.has(domain))
+        return null;
+    const digits = local.split(":")[0].replace(/\D/g, "");
+    if (!digits)
+        return null;
+    const keys = [digits];
+    if (PHONE_DOMAINS.has(domain)) {
+        // Legacy BR JID without the mobile "9" (55 DD XXXXXXXX) also matches 55 DD 9XXXXXXXX.
+        // One direction only, so a 12-digit (landline) entry never admits a 13-digit mobile.
+        const legacy = /^55(\d{2})(\d{8})$/.exec(digits);
+        if (legacy)
+            keys.push(`55${legacy[1]}9${legacy[2]}`);
+    }
+    return keys;
+}
+/** Canonical (digits-only) form, or null. */
+export function normalizeRecipient(value) {
+    return recipientKeys(value)?.[0] ?? null;
+}
+/**
+ * Env var name holding the per-instance override:
+ * EVOLUTION_ALLOWED_RECIPIENTS__ + instance upper-cased with every non [A-Z0-9] char → "_".
+ * e.g. "billy-franklim.2" → EVOLUTION_ALLOWED_RECIPIENTS__BILLY_FRANKLIM_2
+ */
+export function recipientEnvName(instance) {
+    return `EVOLUTION_ALLOWED_RECIPIENTS__${instance.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`;
+}
+/** Parse a comma-separated allowlist. "*" means unrestricted; "*@g.us" admits every group. */
+export function parseRecipientList(raw, envName) {
+    const entries = raw.split(",").map((s) => s.trim()).filter(Boolean);
+    if (entries.length === 1 && entries[0] === "*")
+        return { unrestricted: true };
+    const keys = new Set();
+    let allGroups = false;
+    for (const entry of entries) {
+        if (entry.toLowerCase() === ALL_GROUPS) {
+            allGroups = true;
+            continue;
+        }
+        // Store only the canonical form; Brazilian 9-digit variants are expanded on the
+        // value side, and only for phone JIDs (never for @lid / @g.us).
+        const k = normalizeRecipient(entry);
+        if (!k)
+            throw new ConfigError(`${envName} has an invalid entry "${entry}"`);
+        keys.add(k);
+    }
+    if (keys.size === 0 && !allGroups)
+        throw new ConfigError(`${envName} is set but lists no recipients`);
+    return { unrestricted: false, keys, allGroups };
+}
+export class RecipientPolicy {
+    rule;
+    constructor(rule) {
+        this.rule = rule;
+    }
+    get restricted() {
+        return this.rule !== undefined && !this.rule.unrestricted;
+    }
+    isAllowed(value) {
+        if (!this.rule || this.rule.unrestricted)
+            return true;
+        if (!value)
+            return false;
+        if (this.rule.allGroups && value.trim().toLowerCase().endsWith("@g.us") && recipientKeys(value))
+            return true;
+        const keys = recipientKeys(value);
+        const allowed = this.rule.keys;
+        return keys !== null && keys.some((k) => allowed.has(k));
+    }
+    assertAllowed(values) {
+        for (const v of values) {
+            if (!this.isAllowed(v)) {
+                throw new GuardError(`Recipient "${v}" is not allowed for this instance (EVOLUTION_ALLOWED_RECIPIENTS).`);
+            }
+        }
+    }
+}
+/** Recursively collect every recipient-like value from tool arguments. */
+export function collectRecipients(args) {
+    const out = [];
+    const visit = (node, key) => {
+        if (Array.isArray(node)) {
+            node.forEach((item) => visit(item, key));
+            return;
+        }
+        if (typeof node === "string") {
+            if (key !== undefined && RECIPIENT_KEYS.has(key))
+                out.push(node);
+            return;
+        }
+        if (node && typeof node === "object") {
+            for (const [k, v] of Object.entries(node))
+                visit(v, k);
+        }
+    };
+    visit(args);
+    return out;
+}
+/** Enforce the recipient allowlist for one tool call. No-op when unrestricted. */
+export function enforceRecipients(tool, args, policy) {
+    if (!policy.restricted)
+        return;
+    if (tool === "accept_invite") {
+        throw new GuardError("accept_invite is not available while EVOLUTION_ALLOWED_RECIPIENTS is set.");
+    }
+    if (tool === "send_status") {
+        const list = args["statusJidList"];
+        if (!Array.isArray(list) || list.length === 0) {
+            throw new GuardError("send_status requires an explicit statusJidList while EVOLUTION_ALLOWED_RECIPIENTS is set.");
+        }
+    }
+    policy.assertAllowed(collectRecipients(args));
+}
+//# sourceMappingURL=recipients.js.map

package/dist/guards/recipients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipients.js","sourceRoot":"","sources":["../../src/guards/recipients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAgBvD,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,QAAQ;IACR,SAAS;IACT,WAAW;IACX,KAAK;IACL,UAAU;IACV,MAAM;IACN,cAAc;IACd,eAAe;CAChB,CAAC,CAAC;AAEH,iGAAiG;AACjG,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,sFAAsF;QACtF,qFAAqF;QACrF,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,iCAAiC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAe;IAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAE9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;YACvC,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,gFAAgF;QAChF,gEAAgE;QAChE,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,GAAG,OAAO,0BAA0B,KAAK,GAAG,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,OAAO,iCAAiC,CAAC,CAAC;IACtG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;IAAG,CAAC;IAErD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IAC5D,CAAC;IAED,SAAS,CAAC,KAAgC;QACxC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7G,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,aAAa,CAAC,MAAgB;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,oEAAoE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,GAAY,EAAQ,EAAE;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAA6B,EAAE,MAAuB;IACpG,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,OAAO;IAE/B,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,2EAA2E,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,UAAU,CAClB,2FAA2F,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/guards/tools.d.ts

@@ -0,0 +1,16 @@
+/** Every tool this server knows how to register. */
+export declare const ALL_TOOLS: readonly ["list_instances", "connection_state", "list_groups", "find_chats", "find_contacts", "find_messages", "find_labels", "find_webhook", "find_group_by_invite", "get_chat_history", "get_group_info", "get_group_resolved_participants", "get_settings", "check_number", "download_media", "fetch_business_profile", "fetch_invite_code", "fetch_privacy", "fetch_profile_picture", "send_text", "send_media", "send_audio", "send_sticker", "send_location", "send_contact", "send_reaction", "send_poll", "send_list", "send_button", "send_presence", "send_group_invite", "send_status", "mark_as_read", "archive_chat", "handle_label", "delete_message", "update_profile_name", "update_profile_status", "update_profile_picture", "remove_profile_picture", "update_privacy", "update_block_status", "create_group", "update_group_subject", "update_group_description", "update_group_picture", "update_group_setting", "update_participants", "revoke_invite_code", "accept_invite", "leave_group", "restart_instance", "logout_instance", "set_settings", "set_webhook"];
+export type ToolName = (typeof ALL_TOOLS)[number];
+/**
+ * Tools disabled unless named explicitly in EVOLUTION_ALLOWED_TOOLS (or via @dangerous).
+ * They change account/group state irreversibly, broadcast, or redirect traffic.
+ */
+export declare const DANGEROUS_TOOLS: readonly ToolName[];
+export declare const TOOL_GROUPS: Readonly<Record<string, readonly ToolName[]>>;
+export declare function isDangerous(tool: string): boolean;
+/**
+ * Resolve EVOLUTION_ALLOWED_TOOLS into the set of tools to register.
+ * - unset/blank → every non-dangerous tool (@default)
+ * - set → exactly the listed tools/groups; unknown names are a startup error.
+ */
+export declare function resolveAllowedTools(raw: string | undefined): Set<string>;

package/dist/guards/tools.js

@@ -0,0 +1,154 @@
+import { ConfigError } from "../errors.js";
+/** Every tool this server knows how to register. */
+export const ALL_TOOLS = [
+    // Read
+    "list_instances",
+    "connection_state",
+    "list_groups",
+    "find_chats",
+    "find_contacts",
+    "find_messages",
+    "find_labels",
+    "find_webhook",
+    "find_group_by_invite",
+    "get_chat_history",
+    "get_group_info",
+    "get_group_resolved_participants",
+    "get_settings",
+    "check_number",
+    "download_media",
+    "fetch_business_profile",
+    "fetch_invite_code",
+    "fetch_privacy",
+    "fetch_profile_picture",
+    // Send / interact
+    "send_text",
+    "send_media",
+    "send_audio",
+    "send_sticker",
+    "send_location",
+    "send_contact",
+    "send_reaction",
+    "send_poll",
+    "send_list",
+    "send_button",
+    "send_presence",
+    "send_group_invite",
+    "send_status",
+    "mark_as_read",
+    "archive_chat",
+    "handle_label",
+    // State-changing / administrative
+    "delete_message",
+    "update_profile_name",
+    "update_profile_status",
+    "update_profile_picture",
+    "remove_profile_picture",
+    "update_privacy",
+    "update_block_status",
+    "create_group",
+    "update_group_subject",
+    "update_group_description",
+    "update_group_picture",
+    "update_group_setting",
+    "update_participants",
+    "revoke_invite_code",
+    "accept_invite",
+    "leave_group",
+    "restart_instance",
+    "logout_instance",
+    "set_settings",
+    "set_webhook",
+];
+/**
+ * Tools disabled unless named explicitly in EVOLUTION_ALLOWED_TOOLS (or via @dangerous).
+ * They change account/group state irreversibly, broadcast, or redirect traffic.
+ */
+export const DANGEROUS_TOOLS = [
+    "send_status", // broadcasts to all contacts; can drop all linked devices (evolution-api #2196)
+    "delete_message",
+    "update_privacy",
+    "update_profile_name",
+    "update_profile_status",
+    "update_profile_picture",
+    "remove_profile_picture",
+    "update_block_status",
+    "create_group",
+    "update_group_subject",
+    "update_group_description",
+    "update_group_picture",
+    "update_group_setting",
+    "update_participants",
+    "revoke_invite_code",
+    "accept_invite",
+    "leave_group",
+    "restart_instance",
+    "logout_instance",
+    "set_settings",
+    "set_webhook", // can redirect every incoming message to an arbitrary URL
+];
+const DANGEROUS = new Set(DANGEROUS_TOOLS);
+export const TOOL_GROUPS = {
+    "@read": [
+        "list_instances",
+        "connection_state",
+        "list_groups",
+        "find_chats",
+        "find_contacts",
+        "find_messages",
+        "find_labels",
+        "find_webhook",
+        "find_group_by_invite",
+        "get_chat_history",
+        "get_group_info",
+        "get_group_resolved_participants",
+        "get_settings",
+        "check_number",
+        "download_media",
+        "fetch_business_profile",
+        "fetch_invite_code",
+        "fetch_privacy",
+        "fetch_profile_picture",
+    ],
+    "@send": ["send_text", "send_media", "send_audio", "send_presence", "mark_as_read"],
+    "@default": ALL_TOOLS.filter((t) => !DANGEROUS.has(t)),
+    "@dangerous": DANGEROUS_TOOLS,
+};
+export function isDangerous(tool) {
+    return DANGEROUS.has(tool);
+}
+/**
+ * Resolve EVOLUTION_ALLOWED_TOOLS into the set of tools to register.
+ * - unset/blank → every non-dangerous tool (@default)
+ * - set → exactly the listed tools/groups; unknown names are a startup error.
+ */
+export function resolveAllowedTools(raw) {
+    if (!raw || !raw.trim())
+        return new Set(TOOL_GROUPS["@default"]);
+    const known = new Set(ALL_TOOLS);
+    const result = new Set();
+    const unknown = [];
+    for (const token of raw.split(",").map((s) => s.trim()).filter(Boolean)) {
+        if (token.startsWith("@")) {
+            const group = TOOL_GROUPS[token];
+            if (!group)
+                unknown.push(token);
+            else
+                group.forEach((t) => result.add(t));
+        }
+        else if (known.has(token)) {
+            result.add(token);
+        }
+        else {
+            unknown.push(token);
+        }
+    }
+    if (unknown.length > 0) {
+        throw new ConfigError(`EVOLUTION_ALLOWED_TOOLS has unknown entries: ${unknown.join(", ")}. ` +
+            `Groups: ${Object.keys(TOOL_GROUPS).join(", ")}`);
+    }
+    if (result.size === 0)
+        throw new ConfigError("EVOLUTION_ALLOWED_TOOLS resolved to no tools");
+    return result;
+}
+//# sourceMappingURL=tools.js.map

package/dist/guards/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/guards/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,oDAAoD;AACpD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO;IACP,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;IACb,YAAY;IACZ,eAAe;IACf,eAAe;IACf,aAAa;IACb,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClB,gBAAgB;IAChB,iCAAiC;IACjC,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,wBAAwB;IACxB,mBAAmB;IACnB,eAAe;IACf,uBAAuB;IACvB,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,eAAe;IACf,cAAc;IACd,eAAe;IACf,WAAW;IACX,WAAW;IACX,aAAa;IACb,eAAe;IACf,mBAAmB;IACnB,aAAa;IACb,cAAc;IACd,cAAc;IACd,cAAc;IACd,kCAAkC;IAClC,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,wBAAwB;IACxB,gBAAgB;IAChB,qBAAqB;IACrB,cAAc;IACd,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,eAAe;IACf,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,aAAa;CACL,CAAC;AAIX;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB;IAClD,aAAa,EAAE,gFAAgF;IAC/F,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,wBAAwB;IACxB,qBAAqB;IACrB,cAAc;IACd,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,eAAe;IACf,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,aAAa,EAAE,0DAA0D;CAC1E,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAkD;IACxE,OAAO,EAAE;QACP,gBAAgB;QAChB,kBAAkB;QAClB,aAAa;QACb,YAAY;QACZ,eAAe;QACf,eAAe;QACf,aAAa;QACb,cAAc;QACd,sBAAsB;QACtB,kBAAkB;QAClB,gBAAgB;QAChB,iCAAiC;QACjC,cAAc;QACd,cAAc;QACd,gBAAgB;QAChB,wBAAwB;QACxB,mBAAmB;QACnB,eAAe;QACf,uBAAuB;KACxB;IACD,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,CAAC;IACnF,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtD,YAAY,EAAE,eAAe;CAC9B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAuB;IACzD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBAC3B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,WAAW,CACnB,gDAAgD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACpE,WAAW,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,19 @@
+import { type Server } from "node:http";
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export interface HttpOptions {
+    port: number;
+    host: string;
+    /** Path the MCP endpoint is served on (default "/mcp"). */
+    path: string;
+    /** Bearer token every MCP request must present. Always required. */
+    authToken: string;
+}
+/** Parse HTTP transport options from env. Throws ConfigError. */
+export declare function loadHttpOptions(env?: NodeJS.ProcessEnv): HttpOptions;
+/** Constant-time check of the `Authorization: Bearer <token>` header. */
+export declare function isAuthorized(header: string | undefined, token: string): boolean;
+/**
+ * Build the HTTP server. Stateless Streamable HTTP: every POST gets a fresh
+ * MCP server + transport, so there is no session state to leak between clients.
+ */
+export declare function createHttpApp(buildServer: () => McpServer, opts: HttpOptions): Server;

package/dist/http.js

@@ -0,0 +1,103 @@
+import { createServer as createHttpServer } from "node:http";
+import { createHash, timingSafeEqual } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { ConfigError } from "./errors.js";
+const MIN_TOKEN_LENGTH = 32;
+const MAX_BODY_BYTES = 25 * 1024 * 1024; // media payloads can be large base64 strings
+/** Parse HTTP transport options from env. Throws ConfigError. */
+export function loadHttpOptions(env = process.env) {
+    const authToken = env.MCP_AUTH_TOKEN?.trim();
+    if (!authToken) {
+        throw new ConfigError("MCP_AUTH_TOKEN is required when MCP_TRANSPORT=http (the endpoint can send WhatsApp messages)");
+    }
+    if (authToken.length < MIN_TOKEN_LENGTH) {
+        throw new ConfigError(`MCP_AUTH_TOKEN must be at least ${MIN_TOKEN_LENGTH} characters`);
+    }
+    const port = Number(env.PORT?.trim() || "3000");
+    if (!Number.isInteger(port) || port <= 0 || port > 65535)
+        throw new ConfigError("PORT must be a valid TCP port");
+    let path = env.MCP_HTTP_PATH?.trim() || "/mcp";
+    if (!path.startsWith("/"))
+        path = `/${path}`;
+    return { port, host: env.HOST?.trim() || "0.0.0.0", path, authToken };
+}
+function digest(value) {
+    return createHash("sha256").update(value).digest();
+}
+/** Constant-time check of the `Authorization: Bearer <token>` header. */
+export function isAuthorized(header, token) {
+    const match = /^Bearer\s+(.+)$/i.exec(header ?? "");
+    if (!match)
+        return false;
+    return timingSafeEqual(digest((match[1] ?? "").trim()), digest(token));
+}
+function sendJson(res, status, body, headers = {}) {
+    res.writeHead(status, { "Content-Type": "application/json", ...headers });
+    res.end(JSON.stringify(body));
+}
+function jsonRpcError(res, status, message, headers) {
+    sendJson(res, status, { jsonrpc: "2.0", error: { code: -32000, message }, id: null }, headers);
+}
+async function readJsonBody(req) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > MAX_BODY_BYTES)
+            throw new Error("Request body too large");
+        chunks.push(chunk);
+    }
+    const raw = Buffer.concat(chunks).toString("utf8");
+    return raw ? JSON.parse(raw) : undefined;
+}
+/**
+ * Build the HTTP server. Stateless Streamable HTTP: every POST gets a fresh
+ * MCP server + transport, so there is no session state to leak between clients.
+ */
+export function createHttpApp(buildServer, opts) {
+    return createHttpServer(async (req, res) => {
+        const url = new URL(req.url ?? "/", "http://localhost");
+        if (url.pathname === "/health" && req.method === "GET") {
+            sendJson(res, 200, { status: "ok" });
+            return;
+        }
+        if (url.pathname !== opts.path) {
+            sendJson(res, 404, { error: "Not found" });
+            return;
+        }
+        if (!isAuthorized(req.headers.authorization, opts.authToken)) {
+            jsonRpcError(res, 401, "Unauthorized", { "WWW-Authenticate": 'Bearer realm="mcp-evolution"' });
+            return;
+        }
+        if (req.method !== "POST") {
+            // Stateless mode: no server-initiated SSE stream and no sessions to delete.
+            jsonRpcError(res, 405, "Method not allowed", { Allow: "POST" });
+            return;
+        }
+        let body;
+        try {
+            body = await readJsonBody(req);
+        }
+        catch (err) {
+            const tooLarge = err instanceof Error && err.message === "Request body too large";
+            jsonRpcError(res, tooLarge ? 413 : 400, tooLarge ? "Request body too large" : "Invalid JSON body");
+            return;
+        }
+        const server = buildServer();
+        const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+        res.on("close", () => {
+            void transport.close();
+            void server.close();
+        });
+        try {
+            await server.connect(transport);
+            await transport.handleRequest(req, res, body);
+        }
+        catch (err) {
+            console.error("[mcp-evolution] Error handling MCP request:", err instanceof Error ? err.message : err);
+            if (!res.headersSent)
+                jsonRpcError(res, 500, "Internal server error");
+        }
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAA0D,MAAM,WAAW,CAAC;AACrH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW1C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,6CAA6C;AAEtF,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,8FAA8F,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACxC,MAAM,IAAI,WAAW,CAAC,mCAAmC,gBAAgB,aAAa,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,WAAW,CAAC,+BAA+B,CAAC,CAAC;IAEjH,IAAI,IAAI,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAE7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,MAA0B,EAAE,KAAa;IACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,UAAkC,EAAE;IACxG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAe,EAAE,OAAgC;IAC1G,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;AACjG,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAoB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,WAA4B,EAAE,IAAiB;IAC3E,OAAO,gBAAgB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,4EAA4E;YAC5E,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,wBAAwB,CAAC;YAClF,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvG,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { startServer } from "./server.js";
+startServer().catch((err) => {
+    console.error("[mcp-evolution] Fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACnC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}