mcp-server-framework 1.0.0

package/build/server/auth/upstream-provider.js

@@ -0,0 +1,411 @@
+/**
+ * Upstream OAuth Provider Factory
+ *
+ * Creates a generic {@link OAuthServerProvider} that proxies OAuth flows
+ * to any upstream authorization server using the **server-side callback pattern**.
+ *
+ * This pattern is needed because MCP clients (Inspector, VS Code, Claude Desktop)
+ * each have their own callback URL, but upstream providers (GitHub, Google, etc.)
+ * validate `redirect_uri` against the registered callback. By routing all callbacks
+ * through the MCP server, we solve this mismatch transparently.
+ *
+ * Flow:
+ *   Client → MCP Server /authorize → Upstream /authorize
+ *     (redirect_uri = MCP Server /callback)
+ *   Upstream → MCP Server /callback?code=X&state=UP
+ *   MCP Server → Client callback?code=X&state=DOWN
+ *   Client → MCP Server /token (code=X)
+ *   MCP Server → Upstream token endpoint → returns token
+ *
+ * @example
+ * ```typescript
+ * import { createUpstreamOAuthProvider } from 'mcp-server-framework';
+ *
+ * const { provider, callbackHandler } = createUpstreamOAuthProvider({
+ *   endpoints: {
+ *     authorizationUrl: 'https://github.com/login/oauth/authorize',
+ *     tokenUrl: 'https://github.com/login/oauth/access_token',
+ *     userinfoUrl: 'https://api.github.com/user',
+ *   },
+ *   clientId: process.env.GITHUB_CLIENT_ID!,
+ *   clientSecret: process.env.GITHUB_CLIENT_SECRET!,
+ *   serverUrl: 'http://localhost:8000',
+ *   upstreamScopes: ['read:user'],
+ *   tokenRequestContentType: 'json',
+ *   mapUserInfo: async (token, data) => ({
+ *     token,
+ *     clientId: data.login as string,
+ *     scopes: ['read', 'write'],
+ *     expiresAt: Math.floor(Date.now() / 1000) + 3600,
+ *   }),
+ * });
+ *
+ * createServer({
+ *   auth: { provider, callbackHandler, issuerUrl: new URL('http://localhost:8000') },
+ * });
+ * ```
+ *
+ * @module server/auth/upstream-provider
+ */
+import crypto from "node:crypto";
+import { logger as baseLogger } from "../../logger/index.js";
+// ============================================================================
+// Logger
+// ============================================================================
+const LOG_COMPONENT = "upstream-oauth";
+const LogMessages = {
+    GET_CLIENT: "getClient: %s → %s",
+    REGISTERED_CLIENT: "Registered client: %s",
+    AUTHORIZE: "Authorize: client=%s redirectUri=%s upstreamState=%s",
+    TOKEN_EXCHANGE: "Token exchange: code=%s…",
+    TOKEN_EXCHANGE_ERROR: "Upstream token exchange error: %s",
+    CALLBACK_INVALID_STATE: "Callback: invalid or expired state=%s",
+    CALLBACK_EXPIRED: "Callback: expired pending auth state=%s",
+    CALLBACK_SUCCESS: "Callback: state mapped, redirecting to client",
+    PENDING_AUTHS_AT_CAPACITY: "Pending auths at capacity (%d) — rejecting new authorize request",
+};
+// ============================================================================
+// Constants
+// ============================================================================
+const DEFAULT_PENDING_AUTH_TTL_MS = 10 * 60 * 1000; // 10 min
+const DEFAULT_CODE_CONTEXT_TTL_MS = 5 * 60 * 1000; // 5 min
+const DEFAULT_FETCH_TIMEOUT_MS = 10_000; // 10s — prevent unbounded upstream calls
+const DEFAULT_EVICTION_INTERVAL_MS = 60_000; // 1 min — periodic cleanup of expired state
+const DEFAULT_MAX_CLIENTS = 1000; // Max registered clients — prevents unbounded memory growth
+const DEFAULT_MAX_PENDING_AUTHS = 1000; // Max pending auth flows — prevents memory exhaustion via /authorize flooding
+// ============================================================================
+// Factory
+// ============================================================================
+/**
+ * Creates an {@link OAuthServerProvider} that proxies OAuth flows to an
+ * upstream authorization server using server-side callbacks.
+ *
+ * This is the generic extraction of the server-side callback pattern —
+ * all provider-specific logic is encapsulated in the options (endpoints,
+ * scopes, `mapUserInfo`). The boilerplate (client store, state mapping,
+ * callback handler, token exchange, TTL management) is handled here.
+ *
+ * @param options - Upstream OAuth configuration
+ * @returns Provider and callback handler, ready for {@link AuthOptions}
+ */
+export function createUpstreamOAuthProvider(options) {
+    const { endpoints, clientId, clientSecret, serverUrl, upstreamScopes, mapUserInfo, tokenRequestContentType = "form", upstreamAuthorizeParams, refreshTokenSupport = false, pendingAuthTtlMs = DEFAULT_PENDING_AUTH_TTL_MS, codeContextTtlMs = DEFAULT_CODE_CONTEXT_TTL_MS, } = options;
+    const logger = baseLogger.child({ component: LOG_COMPONENT });
+    const serverCallbackUrl = `${serverUrl.replace(/\/+$/, "")}/callback`;
+    // ── State Maps ──────────────────────────────────────────────────────────
+    const pendingAuths = new Map();
+    const codeContexts = new Map();
+    const clients = new Map();
+    // ── Periodic Eviction ─────────────────────────────────────────────────
+    // Proactively evict expired entries from pendingAuths and codeContexts.
+    // Without this, abandoned OAuth flows (attacker starts /authorize but never
+    // completes callback) accumulate indefinitely in memory.
+    const evictionTimer = setInterval(() => {
+        const now = Date.now();
+        for (const [key, entry] of pendingAuths) {
+            if (now - entry.createdAt > pendingAuthTtlMs) {
+                pendingAuths.delete(key);
+            }
+        }
+        for (const [key, entry] of codeContexts) {
+            if (now - entry.createdAt > codeContextTtlMs) {
+                codeContexts.delete(key);
+            }
+        }
+    }, DEFAULT_EVICTION_INTERVAL_MS);
+    evictionTimer.unref(); // Don't keep the process alive for cleanup
+    // ── OAuthServerProvider ─────────────────────────────────────────────────
+    const provider = {
+        // Server-side callback pattern: PKCE is validated by the upstream provider,
+        // not by the MCP server. Skip local PKCE validation in the SDK.
+        get skipLocalPkceValidation() {
+            return true;
+        },
+        // ── Client Store (in-memory, dynamic registration) ──────────────────
+        clientsStore: {
+            getClient: async (id) => {
+                const client = clients.get(id);
+                logger.debug(LogMessages.GET_CLIENT, id, client ? "found" : "not found");
+                return client;
+            },
+            registerClient: async (clientInfo) => {
+                // Guard against unbounded client accumulation (e.g., automated registration abuse).
+                // Evict the oldest entry (FIFO via Map insertion order) when at capacity.
+                if (!clients.has(clientInfo.client_id) && clients.size >= DEFAULT_MAX_CLIENTS) {
+                    const oldestKey = clients.keys().next().value;
+                    if (oldestKey !== undefined) {
+                        clients.delete(oldestKey);
+                        logger.warn("Client store at capacity (%d) — evicted oldest client: %s", DEFAULT_MAX_CLIENTS, oldestKey);
+                    }
+                }
+                clients.set(clientInfo.client_id, clientInfo);
+                logger.info(LogMessages.REGISTERED_CLIENT, clientInfo.client_id);
+                return clientInfo;
+            },
+        },
+        // ── Authorize: Redirect to upstream with server callback URL ────────
+        async authorize(client, params, res) {
+            // Guard against unbounded pendingAuths accumulation (DoS vector via /authorize flooding)
+            if (pendingAuths.size >= DEFAULT_MAX_PENDING_AUTHS) {
+                logger.warn(LogMessages.PENDING_AUTHS_AT_CAPACITY, DEFAULT_MAX_PENDING_AUTHS);
+                res
+                    .status(503)
+                    .json({ error: "too_many_requests", error_description: "Authorization service temporarily at capacity" });
+                return;
+            }
+            const upstreamState = crypto.randomUUID();
+            pendingAuths.set(upstreamState, {
+                clientRedirectUri: params.redirectUri,
+                clientState: params.state,
+                codeChallenge: params.codeChallenge,
+                createdAt: Date.now(),
+            });
+            logger.info(LogMessages.AUTHORIZE, client.client_id, params.redirectUri, upstreamState);
+            const url = new URL(endpoints.authorizationUrl);
+            url.searchParams.set("client_id", clientId);
+            url.searchParams.set("redirect_uri", serverCallbackUrl);
+            url.searchParams.set("state", upstreamState);
+            url.searchParams.set("scope", upstreamScopes.join(" "));
+            // Apply extra authorize params (e.g. response_type for OIDC)
+            if (upstreamAuthorizeParams) {
+                for (const [key, value] of Object.entries(upstreamAuthorizeParams)) {
+                    url.searchParams.set(key, value);
+                }
+            }
+            res.redirect(url.toString());
+        },
+        // ── PKCE Challenge (not called when skipLocalPkceValidation=true) ────
+        async challengeForAuthorizationCode(_client, _authorizationCode) {
+            throw new Error("PKCE validation is handled by the upstream provider");
+        },
+        // ── Token Exchange ──────────────────────────────────────────────────
+        async exchangeAuthorizationCode(_client, authorizationCode, _codeVerifier, _redirectUri) {
+            logger.debug(LogMessages.TOKEN_EXCHANGE, authorizationCode.slice(0, 8));
+            // Resolve and validate code context
+            const ctx = codeContexts.get(authorizationCode);
+            if (ctx && Date.now() - ctx.createdAt > codeContextTtlMs) {
+                codeContexts.delete(authorizationCode);
+                throw new Error("Authorization code expired");
+            }
+            codeContexts.delete(authorizationCode);
+            const redirectUri = ctx?.serverCallbackUrl ?? serverCallbackUrl;
+            const response = await fetchToken(endpoints.tokenUrl, {
+                grant_type: "authorization_code",
+                client_id: clientId,
+                client_secret: clientSecret,
+                code: authorizationCode,
+                redirect_uri: redirectUri,
+            }, tokenRequestContentType);
+            assertJsonContentType(response, "token exchange");
+            const data = (await response.json());
+            if (data.error) {
+                logger.error(LogMessages.TOKEN_EXCHANGE_ERROR, data.error_description ?? data.error);
+                throw new Error(data.error_description ?? data.error);
+            }
+            if (!data.access_token) {
+                throw new Error("Upstream token response missing access_token");
+            }
+            const expiresIn = data.expires_in ? Number(data.expires_in) : undefined;
+            if (expiresIn !== undefined && (!Number.isFinite(expiresIn) || expiresIn < 1)) {
+                throw new Error(`Invalid expires_in from upstream token response: ${data.expires_in}`);
+            }
+            return {
+                access_token: data.access_token,
+                token_type: data.token_type ?? "bearer",
+                // Artificial 1h expiry when upstream doesn't provide one
+                expires_in: expiresIn ?? 3600,
+                ...(data.refresh_token && { refresh_token: data.refresh_token }),
+                ...(data.scope && { scope: data.scope }),
+            };
+        },
+        // ── Token Verification via UserInfo endpoint ────────────────────────
+        async verifyAccessToken(token) {
+            if (!endpoints.userinfoUrl) {
+                throw new Error("No userinfoUrl configured — cannot verify access token");
+            }
+            let response;
+            try {
+                response = await fetch(endpoints.userinfoUrl, {
+                    headers: {
+                        Authorization: `Bearer ${token}`,
+                        Accept: "application/json",
+                    },
+                    signal: AbortSignal.timeout(DEFAULT_FETCH_TIMEOUT_MS),
+                });
+            }
+            catch (err) {
+                throw new Error(`Token verification failed: ${err instanceof Error ? err.message : "network error"}`, {
+                    cause: err,
+                });
+            }
+            if (!response.ok) {
+                throw new Error(`Token verification failed (HTTP ${response.status})`);
+            }
+            assertJsonContentType(response, "userinfo");
+            const data = (await response.json());
+            return mapUserInfo(token, data);
+        },
+        // ── Refresh Token ───────────────────────────────────────────────────
+        async exchangeRefreshToken(_client, refreshToken, _scopes) {
+            if (!refreshTokenSupport) {
+                throw new Error("Refresh tokens are not supported by this provider");
+            }
+            const response = await fetchToken(endpoints.tokenUrl, {
+                grant_type: "refresh_token",
+                client_id: clientId,
+                client_secret: clientSecret,
+                refresh_token: refreshToken,
+            }, tokenRequestContentType);
+            assertJsonContentType(response, "refresh token exchange");
+            const data = (await response.json());
+            if (data.error) {
+                throw new Error(data.error_description ?? data.error);
+            }
+            if (!data.access_token) {
+                throw new Error("Upstream refresh token response missing access_token");
+            }
+            return {
+                access_token: data.access_token,
+                token_type: data.token_type ?? "bearer",
+                ...(data.expires_in && { expires_in: Number(data.expires_in) }),
+                ...(data.refresh_token && { refresh_token: data.refresh_token }),
+            };
+        },
+        // ── Revoke Token ────────────────────────────────────────────────────
+        async revokeToken(_client, request) {
+            if (!endpoints.revocationUrl)
+                return;
+            const params = new URLSearchParams({
+                token: request.token,
+                client_id: clientId,
+                client_secret: clientSecret,
+            });
+            if (request.token_type_hint) {
+                params.set("token_type_hint", request.token_type_hint);
+            }
+            try {
+                const response = await fetch(endpoints.revocationUrl, {
+                    method: "POST",
+                    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+                    body: params.toString(),
+                    signal: AbortSignal.timeout(DEFAULT_FETCH_TIMEOUT_MS),
+                });
+                if (!response.ok) {
+                    logger.warn("Token revocation failed (HTTP %d)", response.status);
+                }
+            }
+            catch {
+                logger.warn("Token revocation request failed");
+            }
+        },
+    };
+    // ── Callback Handler ────────────────────────────────────────────────────
+    const callbackHandler = (req, res) => {
+        const code = req.query.code;
+        const state = req.query.state;
+        const error = req.query.error;
+        if (error) {
+            const desc = req.query.error_description;
+            // Log upstream error details for debugging, but send generic message to client
+            // to prevent information disclosure (CWE-209)
+            logger.warn("OAuth callback error from upstream: %s — %s", error, desc ?? "(no description)");
+            res.status(400).send("Authorization failed");
+            return;
+        }
+        if (!code || !state) {
+            res.status(400).send("Missing code or state parameter");
+            return;
+        }
+        const pending = pendingAuths.get(state);
+        if (!pending) {
+            logger.warn(LogMessages.CALLBACK_INVALID_STATE, state);
+            res.status(400).send("Invalid or expired state parameter");
+            return;
+        }
+        if (Date.now() - pending.createdAt > pendingAuthTtlMs) {
+            pendingAuths.delete(state);
+            logger.warn(LogMessages.CALLBACK_EXPIRED, state);
+            res.status(400).send("Authorization request expired");
+            return;
+        }
+        pendingAuths.delete(state);
+        // Defense-in-depth: re-validate the stored redirect URI at callback time.
+        // The URI was validated at authorize time, but re-checking guards against
+        // stale entries or client store mutations between authorize and callback.
+        let redirectUrl;
+        try {
+            redirectUrl = new URL(pending.clientRedirectUri);
+            if (redirectUrl.protocol !== "https:" &&
+                !(redirectUrl.protocol === "http:" &&
+                    (redirectUrl.hostname === "localhost" ||
+                        redirectUrl.hostname === "127.0.0.1" ||
+                        redirectUrl.hostname === "::1"))) {
+                logger.warn("Callback: rejected unsafe clientRedirectUri scheme: %s", redirectUrl.protocol);
+                res.status(400).send("Invalid redirect URI");
+                return;
+            }
+        }
+        catch {
+            logger.warn("Callback: invalid clientRedirectUri URL");
+            res.status(400).send("Invalid redirect URI");
+            return;
+        }
+        codeContexts.set(code, { serverCallbackUrl, createdAt: Date.now() });
+        logger.info(LogMessages.CALLBACK_SUCCESS);
+        redirectUrl.searchParams.set("code", code);
+        redirectUrl.searchParams.set("state", pending.clientState);
+        res.redirect(redirectUrl.toString());
+    };
+    return {
+        provider,
+        callbackHandler,
+        dispose: () => {
+            clearInterval(evictionTimer);
+        },
+    };
+}
+// ============================================================================
+// Internal Helpers
+// ============================================================================
+/**
+ * Asserts that a fetch Response carries a JSON Content-Type before parsing.
+ * Throws a descriptive error when upstream returns HTML error pages or other
+ * non-JSON bodies (e.g. from WAFs, proxies, or misconfigured endpoints).
+ */
+function assertJsonContentType(response, context) {
+    const ct = response.headers.get("content-type") ?? "";
+    if (!ct.includes("json")) {
+        throw new Error(`Expected JSON from ${context}, got Content-Type: ${ct} (HTTP ${response.status})`);
+    }
+}
+/**
+ * Sends a token request to the upstream provider.
+ * Supports both `application/x-www-form-urlencoded` (standard) and
+ * `application/json` (GitHub) content types.
+ */
+async function fetchToken(tokenUrl, params, contentType) {
+    const headers = { Accept: "application/json" };
+    let body;
+    if (contentType === "json") {
+        headers["Content-Type"] = "application/json";
+        body = JSON.stringify(params);
+    }
+    else {
+        headers["Content-Type"] = "application/x-www-form-urlencoded";
+        body = new URLSearchParams(params).toString();
+    }
+    try {
+        return await fetch(tokenUrl, {
+            method: "POST",
+            headers,
+            body,
+            signal: AbortSignal.timeout(DEFAULT_FETCH_TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        throw new Error(`Token request to ${tokenUrl} failed: ${err instanceof Error ? err.message : "network error"}`, {
+            cause: err,
+        });
+    }
+}
+//# sourceMappingURL=upstream-provider.js.map

package/build/server/auth/upstream-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-provider.js","sourceRoot":"","sources":["../../../src/server/auth/upstream-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAMjC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAE7D,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,MAAM,WAAW,GAAG;IAClB,UAAU,EAAE,oBAAoB;IAChC,iBAAiB,EAAE,uBAAuB;IAC1C,SAAS,EAAE,sDAAsD;IACjE,cAAc,EAAE,0BAA0B;IAC1C,oBAAoB,EAAE,mCAAmC;IACzD,sBAAsB,EAAE,uCAAuC;IAC/D,gBAAgB,EAAE,yCAAyC;IAC3D,gBAAgB,EAAE,+CAA+C;IACjE,yBAAyB,EAAE,kEAAkE;CACrF,CAAC;AAEX,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC7D,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AAC3D,MAAM,wBAAwB,GAAG,MAAM,CAAC,CAAC,yCAAyC;AAClF,MAAM,4BAA4B,GAAG,MAAM,CAAC,CAAC,4CAA4C;AACzF,MAAM,mBAAmB,GAAG,IAAI,CAAC,CAAC,4DAA4D;AAC9F,MAAM,yBAAyB,GAAG,IAAI,CAAC,CAAC,8EAA8E;AAyItH,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAA6B;IACvE,MAAM,EACJ,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,SAAS,EACT,cAAc,EACd,WAAW,EACX,uBAAuB,GAAG,MAAM,EAChC,uBAAuB,EACvB,mBAAmB,GAAG,KAAK,EAC3B,gBAAgB,GAAG,2BAA2B,EAC9C,gBAAgB,GAAG,2BAA2B,GAC/C,GAAG,OAAO,CAAC;IAEZ,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC;IAEtE,2EAA2E;IAE3E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IAE9D,yEAAyE;IACzE,wEAAwE;IACxE,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;gBAC7C,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;gBAC7C,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACjC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,2CAA2C;IAElE,2EAA2E;IAE3E,MAAM,QAAQ,GAAwB;QACpC,4EAA4E;QAC5E,gEAAgE;QAChE,IAAI,uBAAuB;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uEAAuE;QAEvE,YAAY,EAAE;YACZ,SAAS,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE;gBAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACzE,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,cAAc,EAAE,KAAK,EAAE,UAAsC,EAAuC,EAAE;gBACpG,oFAAoF;gBACpF,0EAA0E;gBAC1E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;oBAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;oBAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBAC1B,MAAM,CAAC,IAAI,CAAC,2DAA2D,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;oBAC3G,CAAC;gBACH,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;gBACjE,OAAO,UAAU,CAAC;YACpB,CAAC;SACF;QAED,uEAAuE;QAEvE,KAAK,CAAC,SAAS,CACb,MAAkC,EAClC,MAKC,EACD,GAAa;YAEb,yFAAyF;YACzF,IAAI,YAAY,CAAC,IAAI,IAAI,yBAAyB,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;gBAC9E,GAAG;qBACA,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,+CAA+C,EAAE,CAAC,CAAC;gBAC5G,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAC1C,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE;gBAC9B,iBAAiB,EAAE,MAAM,CAAC,WAAW;gBACrC,WAAW,EAAE,MAAM,CAAC,KAAK;gBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAExF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;YACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAExD,6DAA6D;YAC7D,IAAI,uBAAuB,EAAE,CAAC;gBAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/B,CAAC;QAED,wEAAwE;QAExE,KAAK,CAAC,6BAA6B,CACjC,OAAmC,EACnC,kBAA0B;YAE1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,uEAAuE;QAEvE,KAAK,CAAC,yBAAyB,CAC7B,OAAmC,EACnC,iBAAyB,EACzB,aAAsB,EACtB,YAAqB;YAErB,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAExE,oCAAoC;YACpC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAChD,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;gBACzD,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;YACD,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAEvC,MAAM,WAAW,GAAG,GAAG,EAAE,iBAAiB,IAAI,iBAAiB,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,SAAS,CAAC,QAAQ,EAClB;gBACE,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE,WAAW;aAC1B,EACD,uBAAuB,CACxB,CAAC;YAEF,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;YAC/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrF,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACzF,CAAC;YAED,OAAO;gBACL,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;gBACvC,yDAAyD;gBACzD,UAAU,EAAE,SAAS,IAAI,IAAI;gBAC7B,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,uEAAuE;QAEvE,KAAK,CAAC,iBAAiB,CAAC,KAAa;YACnC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,QAA6B,CAAC;YAClC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;oBAC5C,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,KAAK,EAAE;wBAChC,MAAM,EAAE,kBAAkB;qBAC3B;oBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE;oBACpG,KAAK,EAAE,GAAG;iBACX,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACzE,CAAC;YAED,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;YAChE,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,uEAAuE;QAEvE,KAAK,CAAC,oBAAoB,CACxB,OAAmC,EACnC,YAAoB,EACpB,OAAkB;YAElB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,SAAS,CAAC,QAAQ,EAClB;gBACE,UAAU,EAAE,eAAe;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;gBAC3B,aAAa,EAAE,YAAY;aAC5B,EACD,uBAAuB,CACxB,CAAC;YAEF,qBAAqB,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA2B,CAAC;YAC/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YAED,OAAO;gBACL,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;gBACvC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aACjE,CAAC;QACJ,CAAC;QAED,uEAAuE;QAEvE,KAAK,CAAC,WAAW,CAAC,OAAmC,EAAE,OAAoC;YACzF,IAAI,CAAC,SAAS,CAAC,aAAa;gBAAE,OAAO;YAErC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;gBACjC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;YACzD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE;oBACpD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;oBACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;iBACtD,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,2EAA2E;IAE3E,MAAM,eAAe,GAAmB,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAC;QAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAA2B,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAA2B,CAAC;QAEpD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAuC,CAAC;YAC/D,+EAA+E;YAC/E,8CAA8C;YAC9C,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,KAAK,EAAE,IAAI,IAAI,kBAAkB,CAAC,CAAC;YAC9F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,gBAAgB,EAAE,CAAC;YACtD,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE3B,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,WAAgB,CAAC;QACrB,IAAI,CAAC;YACH,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACjD,IACE,WAAW,CAAC,QAAQ,KAAK,QAAQ;gBACjC,CAAC,CACC,WAAW,CAAC,QAAQ,KAAK,OAAO;oBAChC,CAAC,WAAW,CAAC,QAAQ,KAAK,WAAW;wBACnC,WAAW,CAAC,QAAQ,KAAK,WAAW;wBACpC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,CAClC,EACD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAC5F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAE1C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3D,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,eAAe;QACf,OAAO,EAAE,GAAG,EAAE;YACZ,aAAa,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,QAA6B,EAAE,OAAe;IAC3E,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,uBAAuB,EAAE,UAAU,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,MAA8B,EAC9B,WAA4B;IAE5B,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACvE,IAAI,IAAY,CAAC;IAEjB,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,cAAc,CAAC,GAAG,mCAAmC,CAAC;QAC9D,IAAI,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,QAAQ,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE;YAC9G,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/build/server/builder/constants.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Server Builder Constants
+ *
+ * Constants and default values for the server builder.
+ *
+ * @module server/builder/constants
+ */
+/**
+ * Default server name when not specified.
+ */
+export declare const DEFAULT_SERVER_NAME = "mcp-server";
+/**
+ * Default server version when not specified.
+ */
+export declare const DEFAULT_SERVER_VERSION = "1.0.0";
+/**
+ * Log component name for builder operations.
+ */
+export declare const BUILDER_LOG_COMPONENT = "server-builder";
+/**
+ * Builder-specific error messages.
+ */
+export declare const BuilderMessages: {
+    readonly OPTIONS_REQUIRED: "Server options are required. Call withOptions() before build().";
+    readonly OPTIONS_ALREADY_SET: "Server options have already been configured.";
+    readonly NAME_REQUIRED: "Server name is required in options.";
+    readonly VERSION_REQUIRED: "Server version is required in options.";
+    readonly ALREADY_BUILT: "This builder has already been used to build a server. Create a new McpServerBuilder instance.";
+};
+/**
+ * Log messages for builder operations.
+ */
+export declare const BuilderLogMessages: {
+    readonly OPTIONS_CONFIGURED: "Server options configured: name=%s, version=%s";
+    readonly BUILD_STARTED: "Building server instance...";
+    readonly BUILD_COMPLETED: "Server instance built successfully";
+    readonly BUILD_SUMMARY: "Server ready: %d tools, %d resources, %d prompts";
+    readonly DUPLICATE_TOOL: "Duplicate tool name detected: %s — last registration wins";
+    readonly DUPLICATE_RESOURCE: "Duplicate resource URI detected: %s — last registration wins";
+    readonly DUPLICATE_TEMPLATE: "Duplicate resource template detected: %s — last registration wins";
+    readonly DUPLICATE_PROMPT: "Duplicate prompt name detected: %s — last registration wins";
+    readonly DUPLICATE_TASK_TOOL: "Duplicate task tool name detected: %s — last registration wins";
+    readonly NO_CAPABILITIES: "Server built with no tools, resources, or prompts registered";
+};
+//# sourceMappingURL=constants.d.ts.map

package/build/server/builder/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/server/builder/constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;GAEG;AACH,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAE9C;;GAEG;AACH,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAMtD;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;CAWrB,CAAC"}

package/build/server/builder/constants.js

@@ -0,0 +1,54 @@
+/**
+ * Server Builder Constants
+ *
+ * Constants and default values for the server builder.
+ *
+ * @module server/builder/constants
+ */
+// ============================================================================
+// Builder Constants
+// ============================================================================
+/**
+ * Default server name when not specified.
+ */
+export const DEFAULT_SERVER_NAME = "mcp-server";
+/**
+ * Default server version when not specified.
+ */
+export const DEFAULT_SERVER_VERSION = "1.0.0";
+/**
+ * Log component name for builder operations.
+ */
+export const BUILDER_LOG_COMPONENT = "server-builder";
+// ============================================================================
+// Builder Error Messages
+// ============================================================================
+/**
+ * Builder-specific error messages.
+ */
+export const BuilderMessages = {
+    OPTIONS_REQUIRED: "Server options are required. Call withOptions() before build().",
+    OPTIONS_ALREADY_SET: "Server options have already been configured.",
+    NAME_REQUIRED: "Server name is required in options.",
+    VERSION_REQUIRED: "Server version is required in options.",
+    ALREADY_BUILT: "This builder has already been used to build a server. Create a new McpServerBuilder instance.",
+};
+// ============================================================================
+// Builder Log Messages
+// ============================================================================
+/**
+ * Log messages for builder operations.
+ */
+export const BuilderLogMessages = {
+    OPTIONS_CONFIGURED: "Server options configured: name=%s, version=%s",
+    BUILD_STARTED: "Building server instance...",
+    BUILD_COMPLETED: "Server instance built successfully",
+    BUILD_SUMMARY: "Server ready: %d tools, %d resources, %d prompts",
+    DUPLICATE_TOOL: "Duplicate tool name detected: %s — last registration wins",
+    DUPLICATE_RESOURCE: "Duplicate resource URI detected: %s — last registration wins",
+    DUPLICATE_TEMPLATE: "Duplicate resource template detected: %s — last registration wins",
+    DUPLICATE_PROMPT: "Duplicate prompt name detected: %s — last registration wins",
+    DUPLICATE_TASK_TOOL: "Duplicate task tool name detected: %s — last registration wins",
+    NO_CAPABILITIES: "Server built with no tools, resources, or prompts registered",
+};
+//# sourceMappingURL=constants.js.map

package/build/server/builder/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/server/builder/constants.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAEtD,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,gBAAgB,EAAE,iEAAiE;IACnF,mBAAmB,EAAE,8CAA8C;IACnE,aAAa,EAAE,qCAAqC;IACpD,gBAAgB,EAAE,wCAAwC;IAC1D,aAAa,EAAE,+FAA+F;CACtG,CAAC;AAEX,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,kBAAkB,EAAE,gDAAgD;IACpE,aAAa,EAAE,6BAA6B;IAC5C,eAAe,EAAE,oCAAoC;IACrD,aAAa,EAAE,kDAAkD;IACjE,cAAc,EAAE,2DAA2D;IAC3E,kBAAkB,EAAE,8DAA8D;IAClF,kBAAkB,EAAE,mEAAmE;IACvF,gBAAgB,EAAE,6DAA6D;IAC/E,mBAAmB,EAAE,gEAAgE;IACrF,eAAe,EAAE,8DAA8D;CACvE,CAAC"}

package/build/server/builder/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Server Builder Module
+ *
+ * Provides a fluent, declarative API for constructing MCP servers.
+ * This module is the primary entry point for creating servers with the framework.
+ *
+ * @module server/builder
+ *
+ * @example Basic usage
+ * ```typescript
+ * import { McpServerBuilder } from './server/builder/index.js';
+ *
+ * const server = new McpServerBuilder<MyClient>()
+ *   .withOptions({ name: 'my-server', version: '1.0.0' })
+ *   .withToolProvider(toolRegistry)
+ *   .build();
+ *
+ * await server.start();
+ * ```
+ */
+export { McpServerBuilder } from "./server-builder.js";
+export { DEFAULT_SERVER_NAME, DEFAULT_SERVER_VERSION } from "./constants.js";
+export type { ServerBuilder } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/build/server/builder/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/builder/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAG7E,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/build/server/builder/index.js

@@ -0,0 +1,25 @@
+/**
+ * Server Builder Module
+ *
+ * Provides a fluent, declarative API for constructing MCP servers.
+ * This module is the primary entry point for creating servers with the framework.
+ *
+ * @module server/builder
+ *
+ * @example Basic usage
+ * ```typescript
+ * import { McpServerBuilder } from './server/builder/index.js';
+ *
+ * const server = new McpServerBuilder<MyClient>()
+ *   .withOptions({ name: 'my-server', version: '1.0.0' })
+ *   .withToolProvider(toolRegistry)
+ *   .build();
+ *
+ * await server.start();
+ * ```
+ */
+// Main builder class
+export { McpServerBuilder } from "./server-builder.js";
+// Constants
+export { DEFAULT_SERVER_NAME, DEFAULT_SERVER_VERSION } from "./constants.js";
+//# sourceMappingURL=index.js.map

package/build/server/builder/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/builder/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qBAAqB;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,YAAY;AACZ,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}

package/build/server/builder/primitive-collector.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Primitive Collector
+ *
+ * Collects tools, resources, resource templates, and prompts from
+ * providers and direct registrations. Detects duplicates with warnings
+ * and returns frozen, immutable arrays.
+ *
+ * Extracted from McpServerBuilder.build() for single responsibility.
+ *
+ * @module server/builder/primitive-collector
+ */
+import type { BuilderState, CollectedPrimitives } from "./types.js";
+/**
+ * Collects all MCP primitives from builder state.
+ *
+ * Merges directly registered items with items from providers,
+ * warns about duplicates (last registration wins), and
+ * freezes all arrays for immutability after build.
+ *
+ * @param state - Current builder state with providers and direct registrations
+ * @returns Frozen, immutable primitive arrays
+ */
+export declare function collectPrimitives(state: BuilderState): CollectedPrimitives;
+//# sourceMappingURL=primitive-collector.d.ts.map

package/build/server/builder/primitive-collector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitive-collector.d.ts","sourceRoot":"","sources":["../../../src/server/builder/primitive-collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAUpE;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,mBAAmB,CAsD1E"}