mcpose 1.0.0 → 1.1.0

package/README.md

@@ -190,6 +190,39 @@ function createProxyServer(backend: BackendClient, options?: ProxyOptions): Serv
 
 ---
 
+### `HttpProxyOptions` · `startHttpProxy()`
+
+```ts
+interface HttpProxyOptions {
+  port?: number; // Default: 3000
+  host?: string; // Default: all interfaces
+  path?: string; // Default: '/mcp'
+}
+
+function startHttpProxy(
+  backend: BackendClient,
+  options?: ProxyOptions,
+  httpOptions?: HttpProxyOptions,
+): Promise<http.Server>;
+```
+
+Starts the proxy over Streamable HTTP with stateful sessions. Each client connection is assigned an `mcp-session-id`; upstream list-change notifications (`tools/list_changed`, `resources/list_changed`, `prompts/list_changed`) are fanned out to all active sessions.
+
+```ts
+import { createBackendClient, startHttpProxy } from 'mcpose';
+
+const backend = await createBackendClient({ url: 'http://upstream-mcp-server/mcp' });
+const server = await startHttpProxy(backend, { toolMiddleware: [loggingMW] }, { port: 8080 });
+// HTTP server is now listening on port 8080 at /mcp
+```
+
+**Limitations:**
+- Two `startHttpProxy` calls sharing the same `backend` will overwrite each other's notification handlers (last call wins).
+- Sessions are only cleaned up on `DELETE` or server close — there is no idle timeout.
+- SSE reconnect replay is not supported (no `EventStore`).
+
+---
+
 ## Recipe: PII redaction
 
 The origin use case for mcpose: a financial-grade MCP server where every Elasticsearch tool response must be scrubbed of PII before it reaches the LLM or the audit log.
@@ -239,7 +272,7 @@ The array order guarantees: PII is redacted *before* the audit layer ever sees t
 
 ## Roadmap
 
-- [ ] **HTTP/SSE server transport** — currently the proxy emits only a stdio server; add a streamable HTTP/SSE server-side transport so mcpose can front HTTP-based clients without a subprocess wrapper
+- [x] **HTTP/SSE server transport** — `startHttpProxy()` adds a Streamable HTTP server-side transport with stateful sessions
 - [ ] **ATXP protocol support** — enable MCP monetization by implementing the ATXP (Agent Transaction Protocol) standard, letting tool providers attach pricing and billing metadata to responses
 
 ---

package/dist/backendClient.d.ts

@@ -1,34 +1,21 @@
 /**
- * Factory for connecting to the backend MCP server.
- *
- * Supports two transport modes:
- *  - **stdio** (default): spawns the backend server as a child process.
- *  - **HTTP/SSE**: connects to an already-running HTTP MCP server.
- *
- * Returns a connected `@modelcontextprotocol/sdk` Client, which exposes the
- * full MCP protocol surface (listTools, callTool, listResources, readResource,
- * listPrompts, getPrompt) with exact MCP type fidelity — important for a
- * transparent proxy that must not transform protocol shapes.
- *
- * @module
+ * Backend MCP client factory.
+ * Modes: stdio (spawns child process) or HTTP/SSE (connects to running server).
  */
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
-/** Connection options for the backend MCP server. */
+/** Backend connection config. */
 export interface BackendConfig {
-    /** Shell command to spawn the backend server (e.g., `"node"`). Required when not using `url`. */
+    /** Shell command to spawn backend (e.g. `"node"`). Required if no `url`. */
     command?: string;
-    /** Arguments passed to the command (e.g., `["/path/to/server.mjs"]`). */
+    /** Args passed to command (e.g. `["/path/to/server.mjs"]`). */
     args?: string[];
-    /** HTTP/SSE URL of an already-running backend server. Takes precedence over stdio when set. */
+    /** HTTP/SSE URL of running backend. Takes precedence over stdio. */
     url?: string;
 }
 export type BackendClient = Client;
 /**
- * Creates and connects an MCP client to the backend server.
- *
- * @param config - Backend connection details (stdio or HTTP).
- * @returns A connected MCP SDK Client ready for tool/resource/prompt calls.
- * @throws If neither `command` nor `url` is provided, or if the connection fails.
+ * Creates and connects an MCP client to the backend.
+ * @throws If neither `command` nor `url` provided, or connection fails.
  */
 export declare function createBackendClient(config: BackendConfig): Promise<BackendClient>;
 //# sourceMappingURL=backendClient.d.ts.map

package/dist/backendClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backendClient.d.ts","sourceRoot":"","sources":["../src/backendClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,+FAA+F;IAC/F,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,aAAa,CAAC,CAqBxB"}
+{"version":3,"file":"backendClient.d.ts","sourceRoot":"","sources":["../src/backendClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,iCAAiC;AACjC,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,aAAa,CAAC,CAqBxB"}

package/dist/backendClient.js

@@ -1,26 +1,13 @@
 /**
- * Factory for connecting to the backend MCP server.
- *
- * Supports two transport modes:
- *  - **stdio** (default): spawns the backend server as a child process.
- *  - **HTTP/SSE**: connects to an already-running HTTP MCP server.
- *
- * Returns a connected `@modelcontextprotocol/sdk` Client, which exposes the
- * full MCP protocol surface (listTools, callTool, listResources, readResource,
- * listPrompts, getPrompt) with exact MCP type fidelity — important for a
- * transparent proxy that must not transform protocol shapes.
- *
- * @module
+ * Backend MCP client factory.
+ * Modes: stdio (spawns child process) or HTTP/SSE (connects to running server).
  */
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
 import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
 /**
- * Creates and connects an MCP client to the backend server.
- *
- * @param config - Backend connection details (stdio or HTTP).
- * @returns A connected MCP SDK Client ready for tool/resource/prompt calls.
- * @throws If neither `command` nor `url` is provided, or if the connection fails.
+ * Creates and connects an MCP client to the backend.
+ * @throws If neither `command` nor `url` provided, or connection fails.
  */
 export async function createBackendClient(config) {
     if (!config.command && !config.url) {

package/dist/backendClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"backendClient.js","sourceRoot":"","sources":["../src/backendClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAcnG;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAqB;IAErB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC5C,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG;QAC1B,CAAC,CAAC,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC,CAAC,IAAI,oBAAoB,CAAC;YACvB,OAAO,EAAE,MAAM,CAAC,OAAQ;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;SACxB,CAAC,CAAC;IAEP,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"backendClient.js","sourceRoot":"","sources":["../src/backendClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAcnG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAqB;IAErB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,EAC5C,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG;QAC1B,CAAC,CAAC,IAAI,6BAA6B,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC,CAAC,IAAI,oBAAoB,CAAC;YACvB,OAAO,EAAE,MAAM,CAAC,OAAQ;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;SACxB,CAAC,CAAC;IAEP,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core.d.ts

@@ -1,85 +1,81 @@
-/**
- * Generic MCP proxy core.
- *
- * Wires an MCP server (exposed to the LLM) to an upstream MCP client,
- * applying composed middleware pipelines to tool calls and resource reads.
- *
- * @module
- */
+/** MCP proxy core: wires server→upstream through middleware pipelines. */
+import * as http from 'node:http';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { type CallToolRequest, type CallToolResult, type CompatibilityCallToolResult, type ReadResourceRequest, type ReadResourceResult } from '@modelcontextprotocol/sdk/types.js';
 import { type Middleware } from './middleware.js';
 import type { BackendClient } from './backendClient.js';
 /**
- * Middleware for MCP tool calls.
- *
- * Uses `CompatibilityCallToolResult` because `Client.callTool()` returns a
- * union that includes the legacy `{ toolResult }` shape (protocol 2024-10-07).
- * Middleware implementations should narrow with `hasToolContent(result)` before
- * accessing `.content` or `.isError`.
+ * Middleware for tool calls.
+ * Uses `CompatibilityCallToolResult` to cover legacy `{ toolResult }` shape
+ * (protocol 2024-10-07). Narrow with `hasToolContent()` before accessing `.content`.
  */
 export type ToolMiddleware = Middleware<CallToolRequest, CompatibilityCallToolResult>;
-/** Middleware for MCP resource reads. */
+/** Middleware for resource reads. */
 export type ResourceMiddleware = Middleware<ReadResourceRequest, ReadResourceResult>;
 /**
- * Type guard that narrows a {@link CompatibilityCallToolResult} to the modern
- * {@link CallToolResult} shape (i.e. the result has a `content` array).
- *
- * Use this in middleware implementations to safely access `.content` and
- * `.isError` without casts, since both union members carry an index signature
- * (`[x: string]: unknown`) that would otherwise make property access `unknown`.
+ * Narrows `CompatibilityCallToolResult` to `CallToolResult` (has `.content` array).
+ * Both union members carry `[x: string]: unknown`, so this avoids unsafe casts.
  */
 export declare function hasToolContent(r: CompatibilityCallToolResult): r is CallToolResult;
-/** Options for the proxy server. */
+/** HTTP transport options for {@link startHttpProxy}. */
+export interface HttpProxyOptions {
+    /** Default: 3000 */
+    port?: number;
+    /** Default: all interfaces */
+    host?: string;
+    /** Default: '/mcp' */
+    path?: string;
+}
+/** Proxy server options. */
 export interface ProxyOptions {
     /**
-     * Ordered middleware stack for tool calls in response-processing order.
-     * The first element processes the response first (innermost layer).
-     * `pipe()` is called internally — no need to wrap manually.
-     *
-     * @example
-     * toolMiddleware: [piiMW, auditMW]  // pii redacts first, audit logs clean data
+     * Tool middleware in response-processing order (first = innermost).
+     * @example [piiMW, auditMW]  // pii redacts first, audit logs clean data
      */
     toolMiddleware?: ReadonlyArray<ToolMiddleware>;
-    /**
-     * Ordered middleware stack for resource reads in response-processing order.
-     * The first element processes the response first (innermost layer).
-     */
+    /** Resource middleware in response-processing order (first = innermost). */
     resourceMiddleware?: ReadonlyArray<ResourceMiddleware>;
-    /** Tool names that bypass all middleware — raw upstream response forwarded as-is. */
+    /** Tools that skip middleware — upstream response forwarded as-is. */
     passThroughTools?: ReadonlyArray<string>;
-    /** Resource URIs that bypass all middleware — raw upstream response forwarded as-is. */
+    /** Resources that skip middleware — upstream response forwarded as-is. */
     passThroughResources?: ReadonlyArray<string>;
-    /** Tool names hidden from list_tools AND rejected at runtime with MethodNotFound. */
+    /** Tools hidden from list_tools and rejected at runtime with MethodNotFound. */
     hiddenTools?: ReadonlyArray<string>;
-    /** Resource URIs hidden from list_resources AND rejected at runtime with InvalidRequest. */
+    /** Resources hidden from list_resources and rejected at runtime with InvalidRequest. */
     hiddenResources?: ReadonlyArray<string>;
 }
 /**
- * Creates and wires a proxy MCP server without connecting it to a transport.
+ * Creates a proxy MCP server without connecting it to a transport.
  *
- * Mirrors the upstream's tool/resource/prompt list and registers request
- * handlers that route through the provided middleware pipelines. Prompts are
- * forwarded as-is (no middleware applied).
+ * Mirrors upstream tool/resource/prompt lists and routes requests through
+ * middleware pipelines. Prompts are forwarded as-is.
  *
- * Separating creation from connection makes the server fully testable: tests
- * can call `createProxyServer(mockUpstream, options)` and inspect or invoke
- * the registered handlers without spawning a stdio transport.
+ * Uses low-level `Server` (not `McpServer`) — transparent proxying requires
+ * generic list interception; `McpServer.tool()` needs names upfront.
  *
- * @param upstream - Connected (or mock) upstream MCP client.
- * @param options  - Optional middleware stacks for tools and resources.
- * @returns A configured {@link Server} that is ready to be connected.
+ * @param backend - Connected (or mock) upstream MCP client.
+ * @param options - Middleware stacks, hidden/passthrough sets.
+ * @returns Configured {@link Server} ready to connect.
  */
 export declare function createProxyServer(backend: BackendClient, options?: ProxyOptions): Server;
 /**
- * Starts the proxy MCP server on stdio.
+ * Starts the proxy on stdio.
+ * Calls {@link createProxyServer} then connects to `StdioServerTransport`.
+ * Use `createProxyServer` directly for testable access to the server.
+ */
+export declare function startProxy(backend: BackendClient, options?: ProxyOptions): Promise<void>;
+/**
+ * Starts the proxy over Streamable HTTP with stateful sessions.
+ *
+ * Sessions keyed by `mcp-session-id`. Upstream notifications fanned out to
+ * all active sessions via their GET SSE stream.
  *
- * Convenience wrapper that calls {@link createProxyServer} then connects the
- * result to a `StdioServerTransport`. Use `createProxyServer` directly when
- * you need a testable handle to the configured server.
+ * **Limitations:**
+ * - Two calls with same `backend` overwrite notification handlers (last wins).
+ * - Sessions never expire — only cleaned up on DELETE or server close.
+ * - No `EventStore` → SSE reconnect replay unsupported.
  *
- * @param upstream - Connected upstream MCP client.
- * @param options  - Optional middleware stacks for tools and resources.
+ * @returns Promise resolving to the listening `http.Server`.
  */
-export declare function startProxy(backend: BackendClient, options?: ProxyOptions): Promise<void>;
+export declare function startHttpProxy(backend: BackendClient, options?: ProxyOptions, httpOptions?: HttpProxyOptions): Promise<http.Server>;
 //# sourceMappingURL=core.d.ts.map

package/dist/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EASL,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,CACrC,eAAe,EACf,2BAA2B,CAC5B,CAAC;AAEF,yCAAyC;AACzC,MAAM,MAAM,kBAAkB,GAAG,UAAU,CACzC,mBAAmB,EACnB,kBAAkB,CACnB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,CAAC,EAAE,2BAA2B,GAC7B,CAAC,IAAI,cAAc,CAErB;AAED,oCAAoC;AACpC,MAAM,WAAW,YAAY;IAC3B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAE/C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAEvD,qFAAqF;IACrF,gBAAgB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAEzC,wFAAwF;IACxF,oBAAoB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAE7C,qFAAqF;IACrF,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAEpC,4FAA4F;IAC5F,eAAe,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,YAAiB,GACzB,MAAM,CAoER;AAED;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAGf"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,EAYL,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAQ,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,UAAU,CACrC,eAAe,EACf,2BAA2B,CAC5B,CAAC;AAEF,qCAAqC;AACrC,MAAM,MAAM,kBAAkB,GAAG,UAAU,CACzC,mBAAmB,EACnB,kBAAkB,CACnB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,CAAC,EAAE,2BAA2B,GAC7B,CAAC,IAAI,cAAc,CAErB;AAED,yDAAyD;AACzD,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,4BAA4B;AAC5B,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAE/C,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAEvD,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAEzC,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAE7C,gFAAgF;IAChF,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAEpC,wFAAwF;IACxF,eAAe,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,YAAiB,GACzB,MAAM,CA+DR;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,YAAiB,EAC1B,WAAW,GAAE,gBAAqB,GACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAiEtB"}

package/dist/core.js

@@ -1,40 +1,30 @@
-/**
- * Generic MCP proxy core.
- *
- * Wires an MCP server (exposed to the LLM) to an upstream MCP client,
- * applying composed middleware pipelines to tool calls and resource reads.
- *
- * @module
- */
+/** MCP proxy core: wires server→upstream through middleware pipelines. */
+import * as http from 'node:http';
+import { randomUUID } from 'node:crypto';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { CallToolRequestSchema, ErrorCode, GetPromptRequestSchema, ListPromptsRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, McpError, ReadResourceRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { CallToolRequestSchema, ErrorCode, GetPromptRequestSchema, ListPromptsRequestSchema, ListResourcesRequestSchema, ListToolsRequestSchema, McpError, PromptListChangedNotificationSchema, ReadResourceRequestSchema, ResourceListChangedNotificationSchema, ToolListChangedNotificationSchema, } from '@modelcontextprotocol/sdk/types.js';
 import { pipe } from './middleware.js';
 /**
- * Type guard that narrows a {@link CompatibilityCallToolResult} to the modern
- * {@link CallToolResult} shape (i.e. the result has a `content` array).
- *
- * Use this in middleware implementations to safely access `.content` and
- * `.isError` without casts, since both union members carry an index signature
- * (`[x: string]: unknown`) that would otherwise make property access `unknown`.
+ * Narrows `CompatibilityCallToolResult` to `CallToolResult` (has `.content` array).
+ * Both union members carry `[x: string]: unknown`, so this avoids unsafe casts.
  */
 export function hasToolContent(r) {
     return Array.isArray(r.content);
 }
 /**
- * Creates and wires a proxy MCP server without connecting it to a transport.
+ * Creates a proxy MCP server without connecting it to a transport.
  *
- * Mirrors the upstream's tool/resource/prompt list and registers request
- * handlers that route through the provided middleware pipelines. Prompts are
- * forwarded as-is (no middleware applied).
+ * Mirrors upstream tool/resource/prompt lists and routes requests through
+ * middleware pipelines. Prompts are forwarded as-is.
  *
- * Separating creation from connection makes the server fully testable: tests
- * can call `createProxyServer(mockUpstream, options)` and inspect or invoke
- * the registered handlers without spawning a stdio transport.
+ * Uses low-level `Server` (not `McpServer`) — transparent proxying requires
+ * generic list interception; `McpServer.tool()` needs names upfront.
  *
- * @param upstream - Connected (or mock) upstream MCP client.
- * @param options  - Optional middleware stacks for tools and resources.
- * @returns A configured {@link Server} that is ready to be connected.
+ * @param backend - Connected (or mock) upstream MCP client.
+ * @param options - Middleware stacks, hidden/passthrough sets.
+ * @returns Configured {@link Server} ready to connect.
  */
 export function createProxyServer(backend, options = {}) {
     const toolPipeline = pipe(options.toolMiddleware ?? []);
@@ -43,11 +33,6 @@ export function createProxyServer(backend, options = {}) {
     const passThroughToolSet = new Set(options.passThroughTools ?? []);
     const hiddenResourceSet = new Set(options.hiddenResources ?? []);
     const passThroughResourceSet = new Set(options.passThroughResources ?? []);
-    // NOTE: Using the low-level Server intentionally — a transparent proxy must
-    // intercept list_tools / list_resources generically without knowing tool names
-    // upfront. McpServer.tool() requires pre-registering each tool by name, which
-    // breaks dynamic forwarding. The SDK explicitly carves out this pattern:
-    // "Only use Server for advanced use cases."
     const server = new Server({ name: 'mcpose', version: '1.0.0' }, { capabilities: { tools: {}, resources: {}, prompts: {} } });
     // ── Tool handlers ──────────────────────────────────────────────────────────
     server.setRequestHandler(ListToolsRequestSchema, async () => {
@@ -89,17 +74,85 @@ export function createProxyServer(backend, options = {}) {
     return server;
 }
 /**
- * Starts the proxy MCP server on stdio.
- *
- * Convenience wrapper that calls {@link createProxyServer} then connects the
- * result to a `StdioServerTransport`. Use `createProxyServer` directly when
- * you need a testable handle to the configured server.
- *
- * @param upstream - Connected upstream MCP client.
- * @param options  - Optional middleware stacks for tools and resources.
+ * Starts the proxy on stdio.
+ * Calls {@link createProxyServer} then connects to `StdioServerTransport`.
+ * Use `createProxyServer` directly for testable access to the server.
  */
 export async function startProxy(backend, options = {}) {
     const server = createProxyServer(backend, options);
     await server.connect(new StdioServerTransport());
 }
+/**
+ * Starts the proxy over Streamable HTTP with stateful sessions.
+ *
+ * Sessions keyed by `mcp-session-id`. Upstream notifications fanned out to
+ * all active sessions via their GET SSE stream.
+ *
+ * **Limitations:**
+ * - Two calls with same `backend` overwrite notification handlers (last wins).
+ * - Sessions never expire — only cleaned up on DELETE or server close.
+ * - No `EventStore` → SSE reconnect replay unsupported.
+ *
+ * @returns Promise resolving to the listening `http.Server`.
+ */
+export function startHttpProxy(backend, options = {}, httpOptions = {}) {
+    const mcpPath = httpOptions.path ?? '/mcp';
+    const port = httpOptions.port ?? 3000;
+    const host = httpOptions.host;
+    // session ID → { transport, proxyServer }
+    const sessions = new Map();
+    // Fan upstream notifications to all active sessions' SSE streams.
+    backend.setNotificationHandler(ToolListChangedNotificationSchema, async () => {
+        await Promise.all([...sessions.values()].map(({ proxyServer }) => proxyServer.sendToolListChanged()));
+    });
+    backend.setNotificationHandler(PromptListChangedNotificationSchema, async () => {
+        await Promise.all([...sessions.values()].map(({ proxyServer }) => proxyServer.sendPromptListChanged()));
+    });
+    backend.setNotificationHandler(ResourceListChangedNotificationSchema, async () => {
+        await Promise.all([...sessions.values()].map(({ proxyServer }) => proxyServer.sendResourceListChanged()));
+    });
+    const server = http.createServer((req, res) => {
+        const handle = async () => {
+            const url = new URL(req.url ?? '/', 'http://localhost');
+            const method = req.method ?? '';
+            if (url.pathname !== mcpPath || !['GET', 'POST', 'DELETE'].includes(method)) {
+                res.writeHead(404).end();
+                return;
+            }
+            const sessionId = req.headers['mcp-session-id'];
+            if (typeof sessionId === 'string') {
+                // Route to existing session
+                const session = sessions.get(sessionId);
+                if (!session) {
+                    res.writeHead(404).end();
+                    return;
+                }
+                await session.transport.handleRequest(req, res);
+            }
+            else {
+                // New session (initialize request)
+                const proxyServer = createProxyServer(backend, options);
+                const transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: randomUUID,
+                    onsessioninitialized: (id) => { sessions.set(id, { transport, proxyServer }); },
+                    onsessionclosed: (id) => { sessions.delete(id); },
+                });
+                await proxyServer.connect(transport);
+                await transport.handleRequest(req, res);
+            }
+        };
+        handle().catch((err) => {
+            if (!res.headersSent)
+                res.writeHead(500).end();
+            void err;
+        });
+    });
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(port, ...(host ? [host] : []), () => {
+            server.off('error', reject);
+            resolve(server);
+        });
+    });
+}
 //# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,QAAQ,EACR,yBAAyB,GAM1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAmB,MAAM,iBAAiB,CAAC;AAsBxD;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,CAA8B;IAE9B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAiCD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,UAAwB,EAAE;IAE1B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAE3E,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,yEAAyE;IACzE,4CAA4C;IAC5C,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACpC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAC5D,CAAC;IAEF,8EAA8E;IAE9E,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC;QACvC,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAE9E,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC,iBAAiB,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC;QAC3C,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QAC3B,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAE7E,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,GAAG,EAAE,CACtD,OAAO,CAAC,WAAW,EAAE,CACtB,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,CAAC,GAAG,EAAE,EAAE,CACvD,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAC9B,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAsB,EACtB,UAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,QAAQ,EACR,mCAAmC,EACnC,yBAAyB,EACzB,qCAAqC,EACrC,iCAAiC,GAMlC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAmB,MAAM,iBAAiB,CAAC;AAmBxD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,CAA8B;IAE9B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAoCD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,UAAwB,EAAE;IAE1B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAE3E,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACpC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAC5D,CAAC;IAEF,8EAA8E;IAE9E,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC;QACvC,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAE9E,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC,iBAAiB,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC;QAC3C,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QAC3B,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAE7E,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,GAAG,EAAE,CACtD,OAAO,CAAC,WAAW,EAAE,CACtB,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,CAAC,GAAG,EAAE,EAAE,CACvD,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAC9B,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAsB,EACtB,UAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAsB,EACtB,UAAwB,EAAE,EAC1B,cAAgC,EAAE;IAElC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC;IAC3C,MAAM,IAAI,GAAM,WAAW,CAAC,IAAI,IAAI,IAAI,CAAC;IACzC,MAAM,IAAI,GAAM,WAAW,CAAC,IAAI,CAAC;IAEjC,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAGpB,CAAC;IAEL,kEAAkE;IAClE,OAAO,CAAC,sBAAsB,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,sBAAsB,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,sBAAsB,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;YACxB,MAAM,GAAG,GAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;YAEhC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAEhD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,4BAA4B;gBAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACnD,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,mCAAmC;gBACnC,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;oBAClD,kBAAkB,EAAE,UAAU;oBAC9B,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC/E,eAAe,EAAO,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;iBACvD,CAAC,CAAC;gBACH,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrB,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAC/C,KAAK,GAAG,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,6 @@ export type { Middleware } from './middleware.js';
 export { compose } from './middleware.js';
 export type { BackendConfig, BackendClient } from './backendClient.js';
 export { createBackendClient } from './backendClient.js';
-export type { ProxyOptions, ToolMiddleware, ResourceMiddleware, } from './core.js';
-export { hasToolContent, createProxyServer, startProxy } from './core.js';
+export type { ProxyOptions, HttpProxyOptions, ToolMiddleware, ResourceMiddleware, } from './core.js';
+export { hasToolContent, createProxyServer, startProxy, startHttpProxy } from './core.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,YAAY,EACV,YAAY,EACZ,cAAc,EACd,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -1,4 +1,4 @@
 export { compose } from './middleware.js';
 export { createBackendClient } from './backendClient.js';
-export { hasToolContent, createProxyServer, startProxy } from './core.js';
+export { hasToolContent, createProxyServer, startProxy, startHttpProxy } from './core.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAG1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAOzD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAG1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAQzD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/middleware.d.ts

@@ -1,62 +1,30 @@
 /**
- * Generic Koa-style middleware composition for MCP request/response pipelines.
+ * Koa-style middleware composition for MCP request/response pipelines.
  *
- * A middleware is a pure function:
- *   (req, next) => Promise<Res>
+ * `(req, next) => Promise<Res>` — call `next(req)` to delegate downstream.
+ * Middlewares wrap like an onion: outer runs before+after inner.
  *
- * Calling `next(req)` passes control to the next middleware in the chain.
- * The innermost `next` is the actual upstream call. Middlewares wrap it like
- * an onion: outer layers execute code before AND after inner layers.
- *
- * Execution order with `pipe([piiMW, auditMW])` (or equivalently `compose([auditMW, piiMW])`):
+ * `pipe([piiMW, auditMW])` execution order:
  *   1. auditMW enter  → capture startTime
  *   2. piiMW enter    → call next
  *   3. upstream call  → raw response
  *   4. piiMW exit     → redact PII
- *   5. auditMW exit   → log clean result (never logs raw PII)
- *
- * @module
- */
-/**
- * A single middleware unit. Receives a request and a `next` function to
- * call the remainder of the pipeline. May transform the request before
- * calling `next` or transform the response after.
- *
- * @typeParam Req - Request type (e.g., `CallToolRequest`)
- * @typeParam Res - Response type (e.g., `CallToolResult`)
+ *   5. auditMW exit   → log clean result
  */
+/** Single middleware unit. May transform req before `next` or res after. */
 export type Middleware<Req, Res> = (req: Req, next: (req: Req) => Promise<Res>) => Promise<Res>;
 /**
- * Composes an ordered array of middlewares into a single middleware using the
- * onion (Koa-style) model. The first middleware is the outermost layer.
- *
- * The returned function accepts the initial request and an innermost `next`
- * (typically the upstream I/O call).
- *
- * @param middlewares - Ordered list of middlewares, outermost first.
- * @returns A single composed middleware.
+ * Composes middlewares into one, outermost-first (Koa-style).
  *
  * @example
- * ```ts
  * const pipeline = compose([auditMW, piiMW]);
  * const result = await pipeline(req, (r) => upstream.callTool(r.params));
- * ```
  */
 export declare function compose<Req, Res>(middlewares: ReadonlyArray<Middleware<Req, Res>>): Middleware<Req, Res>;
 /**
- * Composes middlewares in response-processing order (internal helper used by mcpose core).
- *
- * The first element processes the response first — it is the innermost layer.
- * `pipe([piiMW, auditMW])` expresses "pii redacts first, then audit logs the clean result",
- * which is equivalent to `compose([auditMW, piiMW])` (outermost-first).
- *
- * This is an internal utility. Consumers pass plain arrays to `ProxyOptions` which
- * calls `pipe()` internally — there is no need to call `pipe()` directly.
- *
- * Equivalent to `compose([...middlewares].reverse())`.
- *
- * @param middlewares - Middlewares in response-processing order (first processes response first).
- * @returns A single composed middleware.
+ * Like `compose` but in response-processing order (first = innermost).
+ * `pipe([piiMW, auditMW])` ≡ `compose([auditMW, piiMW])`.
+ * Used internally by mcpose core — consumers pass arrays to `ProxyOptions`.
  */
 export declare function pipe<Req, Res>(middlewares: ReadonlyArray<Middleware<Req, Res>>): Middleware<Req, Res>;
 //# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CACjC,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,KAC7B,OAAO,CAAC,GAAG,CAAC,CAAC;AAElB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,EAC9B,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAC/C,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAkBtB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,GAAG,EAC3B,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAC/C,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAEtB"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,4EAA4E;AAC5E,MAAM,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CACjC,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,KAC7B,OAAO,CAAC,GAAG,CAAC,CAAC;AAElB;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,GAAG,EAC9B,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAC/C,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAkBtB;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,GAAG,EAC3B,WAAW,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAC/C,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAEtB"}

package/dist/middleware.js

@@ -1,37 +1,22 @@
 /**
- * Generic Koa-style middleware composition for MCP request/response pipelines.
+ * Koa-style middleware composition for MCP request/response pipelines.
  *
- * A middleware is a pure function:
- *   (req, next) => Promise<Res>
+ * `(req, next) => Promise<Res>` — call `next(req)` to delegate downstream.
+ * Middlewares wrap like an onion: outer runs before+after inner.
  *
- * Calling `next(req)` passes control to the next middleware in the chain.
- * The innermost `next` is the actual upstream call. Middlewares wrap it like
- * an onion: outer layers execute code before AND after inner layers.
- *
- * Execution order with `pipe([piiMW, auditMW])` (or equivalently `compose([auditMW, piiMW])`):
+ * `pipe([piiMW, auditMW])` execution order:
  *   1. auditMW enter  → capture startTime
  *   2. piiMW enter    → call next
  *   3. upstream call  → raw response
  *   4. piiMW exit     → redact PII
- *   5. auditMW exit   → log clean result (never logs raw PII)
- *
- * @module
+ *   5. auditMW exit   → log clean result
  */
 /**
- * Composes an ordered array of middlewares into a single middleware using the
- * onion (Koa-style) model. The first middleware is the outermost layer.
- *
- * The returned function accepts the initial request and an innermost `next`
- * (typically the upstream I/O call).
- *
- * @param middlewares - Ordered list of middlewares, outermost first.
- * @returns A single composed middleware.
+ * Composes middlewares into one, outermost-first (Koa-style).
  *
  * @example
- * ```ts
  * const pipeline = compose([auditMW, piiMW]);
  * const result = await pipeline(req, (r) => upstream.callTool(r.params));
- * ```
  */
 export function compose(middlewares) {
     return (req, next) => {
@@ -48,19 +33,9 @@ export function compose(middlewares) {
     };
 }
 /**
- * Composes middlewares in response-processing order (internal helper used by mcpose core).
- *
- * The first element processes the response first — it is the innermost layer.
- * `pipe([piiMW, auditMW])` expresses "pii redacts first, then audit logs the clean result",
- * which is equivalent to `compose([auditMW, piiMW])` (outermost-first).
- *
- * This is an internal utility. Consumers pass plain arrays to `ProxyOptions` which
- * calls `pipe()` internally — there is no need to call `pipe()` directly.
- *
- * Equivalent to `compose([...middlewares].reverse())`.
- *
- * @param middlewares - Middlewares in response-processing order (first processes response first).
- * @returns A single composed middleware.
+ * Like `compose` but in response-processing order (first = innermost).
+ * `pipe([piiMW, auditMW])` ≡ `compose([auditMW, piiMW])`.
+ * Used internally by mcpose core — consumers pass arrays to `ProxyOptions`.
  */
 export function pipe(middlewares) {
     return compose([...middlewares].reverse());

package/dist/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAeH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,OAAO,CACrB,WAAgD;IAEhD,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACnB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,UAAe,EAAgB,EAAE;YAC5D,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,MAAM,EAAE,GACN,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEjE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC;QAEF,OAAO,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,IAAI,CAClB,WAAgD;IAEhD,OAAO,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CACrB,WAAgD;IAEhD,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACnB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;QAEf,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,UAAe,EAAgB,EAAE;YAC5D,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YAEV,MAAM,EAAE,GACN,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEjE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC;QAEF,OAAO,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAClB,WAAgD;IAEhD,OAAO,OAAO,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC7C,CAAC"}

package/dist/testing.d.ts

@@ -1,78 +1,46 @@
 /**
- * Framework-agnostic test helpers for code that uses mcpose middleware.
- *
- * **No test framework imports** — this module has zero dependencies on
- * vitest, jest, or mocha. Import it in any test environment.
- *
+ * Test helpers for mcpose middleware. No test framework imports — works in any env.
  * @module mcpose/testing
  */
 import type { CallToolRequest, CallToolResult, ReadResourceResult, Tool, Resource, Prompt, CallToolRequestParams, GetPromptResult } from '@modelcontextprotocol/sdk/types.js';
 import type { ToolMiddleware } from './core.js';
 import type { BackendClient } from './backendClient.js';
 /**
- * Calls a {@link ToolMiddleware} and narrows the result to {@link CallToolResult}.
- *
- * Eliminates the boilerplate `isCallToolResult` guard that every test of a
- * `ToolMiddleware` must otherwise repeat. Throws a clear error if the upstream
- * returns the legacy `{ toolResult }` protocol shape.
- *
- * @param mw   - The middleware under test.
- * @param req  - The tool call request to pass in.
- * @param next - The innermost handler (simulates the upstream or next middleware).
+ * Runs a `ToolMiddleware` and narrows result to `CallToolResult`.
+ * Throws if upstream returns legacy `{ toolResult }` shape.
  *
  * @example
- * ```ts
  * const result = await runToolMiddleware(mw, req, async () => mockResult);
  * expect(result.content[0]).toMatchObject({ type: 'text' });
- * ```
  */
 export declare function runToolMiddleware(mw: ToolMiddleware, req: CallToolRequest, next: (req: CallToolRequest) => Promise<CallToolResult>): Promise<CallToolResult>;
-/**
- * Configuration for the mock backend client.
- */
+/** Config for mock backend client. */
 export interface MockBackendClientOptions {
-    /** Tools advertised by the mock upstream. Default: `[]`. */
+    /** Default: `[]` */
     tools?: Tool[];
     /**
-     * Response for `callTool`. Can be a static result or a factory function
-     * that receives the call params and returns a per-call result.
-     *
+     * Static result or factory `(params) => result` for `callTool`.
      * Default: `{ content: [{ type: 'text', text: 'mock response' }] }`
      */
     callToolResponse?: CallToolResult | ((params: CallToolRequestParams) => CallToolResult);
-    /** Resources advertised by the mock upstream. Default: `[]`. */
+    /** Default: `[]` */
     resources?: Resource[];
-    /**
-     * Response for `readResource`.
-     *
-     * Default: `{ contents: [{ uri: '', text: 'mock resource' }] }`
-     */
+    /** Default: `{ contents: [{ uri: '', text: 'mock resource' }] }` */
     readResourceResponse?: ReadResourceResult;
-    /** Prompts advertised by the mock upstream. Default: `[]`. */
+    /** Default: `[]` */
     prompts?: Prompt[];
-    /**
-     * Response for `getPrompt`.
-     *
-     * Default: `{ messages: [] }`
-     */
+    /** Default: `{ messages: [] }` */
     getPromptResponse?: GetPromptResult;
 }
 /**
- * Creates a plain object implementing {@link BackendClient} for use in tests.
- *
- * No real process is spawned and no network connection is made. All methods
- * return configurable in-memory responses, making it possible to test the full
- * `compose([auditMW, piiMW])` pipeline in a unit test.
+ * Creates an in-memory `BackendClient` for unit tests. No process/network.
  *
  * @example
- * ```ts
  * const backend = createMockBackendClient({
  *   callToolResponse: { content: [{ type: 'text', text: 'John Doe: 123-45-6789' }] },
  * });
- * // Now compose real middlewares against it:
  * const pipeline = compose([auditMW, piiToolMW]);
  * const result = await pipeline(req, (r) => backend.callTool(r.params, undefined));
- * ```
  */
 export declare function createMockBackendClient(options?: MockBackendClientOptions): BackendClient;
 //# sourceMappingURL=testing.d.ts.map

package/dist/testing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EAId,kBAAkB,EAClB,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,qBAAqB,EAGrB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,cAAc,EAClB,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,GACtD,OAAO,CAAC,cAAc,CAAC,CAQzB;AAMD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,4DAA4D;IAC5D,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf;;;;;OAKG;IACH,gBAAgB,CAAC,EACb,cAAc,GACd,CAAC,CAAC,MAAM,EAAE,qBAAqB,KAAK,cAAc,CAAC,CAAC;IACxD,gEAAgE;IAChE,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,eAAe,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,wBAA6B,GACrC,aAAa,CAkCf"}
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EAId,kBAAkB,EAClB,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,qBAAqB,EAGrB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,cAAc,EAClB,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,OAAO,CAAC,cAAc,CAAC,GACtD,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED,sCAAsC;AACtC,MAAM,WAAW,wBAAwB;IACvC,oBAAoB;IACpB,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf;;;OAGG;IACH,gBAAgB,CAAC,EACb,cAAc,GACd,CAAC,CAAC,MAAM,EAAE,qBAAqB,KAAK,cAAc,CAAC,CAAC;IACxD,oBAAoB;IACpB,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,oBAAoB;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,iBAAiB,CAAC,EAAE,eAAe,CAAC;CACrC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,wBAA6B,GACrC,aAAa,CAkCf"}

package/dist/testing.js

@@ -1,23 +1,11 @@
 import { hasToolContent } from './core.js';
-// ---------------------------------------------------------------------------
-// Pain Point 1: runToolMiddleware
-// ---------------------------------------------------------------------------
 /**
- * Calls a {@link ToolMiddleware} and narrows the result to {@link CallToolResult}.
- *
- * Eliminates the boilerplate `isCallToolResult` guard that every test of a
- * `ToolMiddleware` must otherwise repeat. Throws a clear error if the upstream
- * returns the legacy `{ toolResult }` protocol shape.
- *
- * @param mw   - The middleware under test.
- * @param req  - The tool call request to pass in.
- * @param next - The innermost handler (simulates the upstream or next middleware).
+ * Runs a `ToolMiddleware` and narrows result to `CallToolResult`.
+ * Throws if upstream returns legacy `{ toolResult }` shape.
  *
  * @example
- * ```ts
  * const result = await runToolMiddleware(mw, req, async () => mockResult);
  * expect(result.content[0]).toMatchObject({ type: 'text' });
- * ```
  */
 export async function runToolMiddleware(mw, req, next) {
     const result = await mw(req, next);
@@ -27,21 +15,14 @@ export async function runToolMiddleware(mw, req, next) {
     return result;
 }
 /**
- * Creates a plain object implementing {@link BackendClient} for use in tests.
- *
- * No real process is spawned and no network connection is made. All methods
- * return configurable in-memory responses, making it possible to test the full
- * `compose([auditMW, piiMW])` pipeline in a unit test.
+ * Creates an in-memory `BackendClient` for unit tests. No process/network.
  *
  * @example
- * ```ts
  * const backend = createMockBackendClient({
  *   callToolResponse: { content: [{ type: 'text', text: 'John Doe: 123-45-6789' }] },
  * });
- * // Now compose real middlewares against it:
  * const pipeline = compose([auditMW, piiToolMW]);
  * const result = await pipeline(req, (r) => backend.callTool(r.params, undefined));
- * ```
  */
 export function createMockBackendClient(options = {}) {
     return {

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAI3C,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAkB,EAClB,GAAoB,EACpB,IAAuD;IAEvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAuCD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAoC,EAAE;IAEtC,OAAO;QACL,SAAS,EAAE,KAAK,IAA8B,EAAE,CAAC,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SAC3B,CAAC;QAEF,QAAQ,EAAE,KAAK,EACb,MAA6B,EACJ,EAAE;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACtC,IAAI,OAAO,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QACxE,CAAC;QAED,aAAa,EAAE,KAAK,IAAkC,EAAE,CAAC,CAAC;YACxD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;SACnC,CAAC;QAEF,YAAY,EAAE,KAAK,EACjB,OAAkC,EACL,EAAE,CAC/B,OAAO,CAAC,oBAAoB,IAAI;YAC9B,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;SAC/C;QAEH,WAAW,EAAE,KAAK,IAAgC,EAAE,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;SAC/B,CAAC;QAEF,SAAS,EAAE,KAAK,EACd,OAA+B,EACL,EAAE,CAC5B,OAAO,CAAC,iBAAiB,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;KACpB,CAAC;AAChC,CAAC"}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAI3C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAkB,EAClB,GAAoB,EACpB,IAAuD;IAEvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAuBD;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAoC,EAAE;IAEtC,OAAO;QACL,SAAS,EAAE,KAAK,IAA8B,EAAE,CAAC,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;SAC3B,CAAC;QAEF,QAAQ,EAAE,KAAK,EACb,MAA6B,EACJ,EAAE;YAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACtC,IAAI,OAAO,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;QACxE,CAAC;QAED,aAAa,EAAE,KAAK,IAAkC,EAAE,CAAC,CAAC;YACxD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;SACnC,CAAC;QAEF,YAAY,EAAE,KAAK,EACjB,OAAkC,EACL,EAAE,CAC/B,OAAO,CAAC,oBAAoB,IAAI;YAC9B,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;SAC/C;QAEH,WAAW,EAAE,KAAK,IAAgC,EAAE,CAAC,CAAC;YACpD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;SAC/B,CAAC;QAEF,SAAS,EAAE,KAAK,EACd,OAA+B,EACL,EAAE,CAC5B,OAAO,CAAC,iBAAiB,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;KACpB,CAAC;AAChC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcpose",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Composable FP (Koa-style) middleware proxy builder for any MCP server",
   "type": "module",
   "main": "./dist/index.js",