mindweave 0.0.1 → 2.1.2

package/dist/mcp/transport/http.js

@@ -0,0 +1,321 @@
+/**
+ * http.ts — MCP over Streamable HTTP.
+ *
+ * The remote transport, and the one 2026-07-28 changed most. What it is NOT, any more:
+ *
+ *  - No session. The `Mcp-Session-Id` header is gone; there is nothing to establish,
+ *    echo back, or re-establish on a 404. Each POST stands alone.
+ *  - No GET channel. Server-to-client notifications moved to an explicit
+ *    `subscriptions/listen` stream, which is a POST like everything else.
+ *  - No resumability. SSE event ids and `Last-Event-ID` were removed. A broken stream
+ *    LOSES the in-flight request, and the spec says to re-issue it as a new request
+ *    with a new id. So we do not try to reconnect mid-request and pretend nothing
+ *    happened; we fail it and let the caller decide.
+ *
+ * What remains is refreshingly plain: POST a JSON-RPC frame, get back either a single
+ * JSON body or an SSE stream, and read the response for THIS request off that stream.
+ * The server chooses which; the client says it accepts both.
+ *
+ * HTTP+SSE (the old two-endpoint transport) is deliberately not implemented. It was
+ * deprecated in 2025-03-26 and its sunset has already passed.
+ */
+import { META_PROTOCOL_VERSION } from "../protocol.js";
+import { encodeHeaderValue } from "./headerValue.js";
+import { DEFAULT_REQUEST_TIMEOUT_MS, RpcError } from "./types.js";
+export { encodeHeaderValue };
+/**
+ * Parse an SSE body into its `data:` payloads (pure).
+ *
+ * Events are separated by a blank line and a single event's data may span several
+ * `data:` lines, which are joined with a newline. We deliberately ignore `id:` fields:
+ * they exist in older streams, but resumability was removed and honouring them would
+ * imply a redelivery guarantee the protocol no longer makes.
+ */
+export function parseSseEvents(body) {
+    const out = [];
+    for (const block of body.split(/\r?\n\r?\n/)) {
+        const data = block
+            .split(/\r?\n/)
+            .filter((line) => line.startsWith("data:"))
+            .map((line) => line.slice(5).replace(/^ /, ""))
+            .join("\n");
+        if (data.trim())
+            out.push(data);
+    }
+    return out;
+}
+/**
+ * Pick the JSON-RPC message answering `id` out of a decoded body (pure).
+ *
+ * A response stream can carry progress notifications and log messages alongside the
+ * actual result, so "the last message" is not good enough — matching on the id is what
+ * stops a progress notification being mistaken for a result.
+ */
+export function findResponse(messages, id) {
+    for (const msg of messages) {
+        const m = msg;
+        if (m && typeof m === "object" && m.id === id && ("result" in m || "error" in m)) {
+            return m;
+        }
+    }
+    return null;
+}
+/**
+ * Incrementally pull complete SSE events out of a growing buffer (pure).
+ *
+ * `parseSseEvents` is fine for a body that has finished arriving. A subscription stream
+ * never finishes, so it has to be consumed as it goes: this returns whatever whole
+ * events are already present and the partial tail still waiting for its blank line.
+ */
+export function drainSseEvents(buffer) {
+    const parts = buffer.split(/\r?\n\r?\n/);
+    // The final segment has not been terminated by a blank line yet, so it may be half
+    // an event. Everything before it is complete.
+    const rest = parts.pop() ?? "";
+    const events = [];
+    for (const block of parts) {
+        const data = block
+            .split(/\r?\n/)
+            .filter((line) => line.startsWith("data:"))
+            .map((line) => line.slice(5).replace(/^ /, ""))
+            .join("\n");
+        if (data.trim())
+            events.push(data);
+    }
+    return { events, rest };
+}
+/**
+ * The metadata headers Streamable HTTP mirrors out of the body so that intermediaries
+ * can route and inspect a request without parsing it (2026-07-28).
+ *
+ * A conforming server checks every one of these against the body and MUST answer a
+ * mismatch, or a missing required header, with 400 and `-32020 HeaderMismatch`. That
+ * cuts both ways, and both directions are load-bearing here: `Mcp-Name` carries
+ * `params.name` or `params.uri` — never the method, which would disagree with the body
+ * on every single `tools/call` — and it is omitted outright when the request has no
+ * target rather than being padded with something that cannot match.
+ *
+ * The body stays the source of truth, which is why the protocol version is read back out
+ * of `_meta` rather than passed in alongside it. Two sources drift; one cannot.
+ */
+export function metadataHeaders(method, params) {
+    const headers = { "mcp-method": method };
+    // `tools/call` and `prompts/get` name their target; `resources/read` addresses one by
+    // uri. Deriving from the value rather than from a list of methods covers those three
+    // and stays correct for anything later that mirrors a target the same way.
+    const target = params?.name ?? params?.uri;
+    if (typeof target === "string")
+        headers["mcp-name"] = encodeHeaderValue(target);
+    const meta = params?._meta;
+    const version = meta?.[META_PROTOCOL_VERSION];
+    // Absent on the handshake dialect, where the version was agreed once in `initialize`
+    // and there is no `_meta` to mirror. Asserting a version we did not take from the body
+    // would manufacture the very disagreement this header exists to prevent.
+    if (typeof version === "string")
+        headers["mcp-protocol-version"] = version;
+    return headers;
+}
+export class HttpTransport {
+    options;
+    nextId = 1;
+    disposed = false;
+    timeoutMs;
+    fetchImpl;
+    notificationHandler = null;
+    streams = new Set();
+    resolveClosed;
+    closed;
+    constructor(options) {
+        this.options = options;
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+        this.fetchImpl = options.fetchImpl ?? fetch;
+        this.closed = new Promise((resolve) => {
+            this.resolveClosed = resolve;
+        });
+    }
+    async request(method, params, mirrored) {
+        if (this.disposed)
+            throw new RpcError(-32603, "mcp transport is closed");
+        const id = this.nextId++;
+        const message = { jsonrpc: "2.0", id, method, ...(params ? { params } : {}) };
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        timer.unref?.();
+        let response;
+        try {
+            response = await this.fetchImpl(this.options.url, {
+                method: "POST",
+                signal: controller.signal,
+                headers: {
+                    "content-type": "application/json",
+                    // The client says it takes either shape; the SERVER picks. A single result
+                    // comes back as JSON, a long-running call upgrades to a stream.
+                    accept: "application/json, text/event-stream",
+                    ...(this.options.headers ?? {}),
+                    // Mirrored last, so configuration cannot overwrite them. These are not
+                    // settings — they are a restatement of the body, checked against it by the
+                    // server, and a configured header that disagreed would earn a -32020 on every
+                    // call with no way for the user to see why.
+                    ...metadataHeaders(method, params),
+                    ...(mirrored ?? {}),
+                },
+                body: JSON.stringify(message),
+            });
+        }
+        catch (error) {
+            const reason = controller.signal.aborted ? `timeout after ${this.timeoutMs}ms` : String(error?.message ?? error);
+            throw new RpcError(-32603, `mcp request failed: ${method}: ${reason}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        if (!response.ok) {
+            // 401/403 are the auth signal the connection layer turns into `needs-auth`
+            // rather than `failed`, so the code has to survive as more than a message.
+            throw new RpcError(httpErrorCode(response.status), `mcp http ${response.status} ${response.statusText || ""}`.trim());
+        }
+        const contentType = response.headers.get("content-type") ?? "";
+        const body = await response.text();
+        const messages = contentType.includes("text/event-stream")
+            ? parseSseEvents(body).map(safeParse)
+            : [safeParse(body)];
+        const answer = findResponse(messages.filter((m) => m !== undefined), id);
+        if (!answer) {
+            // A stream that ended without answering is exactly the "broken response stream"
+            // case: the spec's remedy is a NEW request, not a resume, so we surface it.
+            throw new RpcError(-32603, `mcp response stream ended without a result for ${method}`);
+        }
+        if (answer.error) {
+            const code = typeof answer.error.code === "number" ? answer.error.code : -32603;
+            const msg = typeof answer.error.message === "string" ? answer.error.message : "mcp error";
+            throw new RpcError(code, msg, answer.error.data);
+        }
+        return answer.result;
+    }
+    /** Notifications have no id and no reply, so failure is not actionable. */
+    notify(method, params) {
+        if (this.disposed)
+            return;
+        void this.fetchImpl(this.options.url, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                accept: "application/json, text/event-stream",
+                ...metadataHeaders(method, params),
+                ...(this.options.headers ?? {}),
+            },
+            body: JSON.stringify({ jsonrpc: "2.0", method, ...(params ? { params } : {}) }),
+        }).catch(() => {
+            /* nothing awaits a notification */
+        });
+    }
+    onNotification(handler) {
+        this.notificationHandler = handler;
+    }
+    /**
+     * Open a long-lived response stream and pump notifications off it until it ends.
+     *
+     * This is how `subscriptions/listen` works after 2026-07-28 removed the GET endpoint:
+     * one POST whose response never completes. It cannot go through `request()`, which
+     * buffers the whole body and would therefore wait forever.
+     *
+     * Resolves once the stream is ESTABLISHED, not when it ends — the caller wants to know
+     * the subscription took, and then get on with its life. There is no resumability, so a
+     * stream that drops is simply over; reviving it is the connection layer's business.
+     */
+    async openStream(method, params) {
+        if (this.disposed)
+            throw new RpcError(-32603, "mcp transport is closed");
+        const controller = new AbortController();
+        this.streams.add(controller);
+        const response = await this.fetchImpl(this.options.url, {
+            method: "POST",
+            signal: controller.signal,
+            headers: {
+                "content-type": "application/json",
+                accept: "text/event-stream",
+                ...metadataHeaders(method, params),
+                ...(this.options.headers ?? {}),
+            },
+            // No id: nothing resolves this, and a stream is not a request/response pair.
+            body: JSON.stringify({ jsonrpc: "2.0", id: this.nextId++, method, ...(params ? { params } : {}) }),
+        }).catch((error) => {
+            this.streams.delete(controller);
+            throw new RpcError(-32603, `mcp subscription failed: ${String(error?.message ?? error)}`);
+        });
+        if (!response.ok) {
+            this.streams.delete(controller);
+            throw new RpcError(httpErrorCode(response.status), `mcp http ${response.status} on ${method}`);
+        }
+        const body = response.body;
+        if (!body) {
+            this.streams.delete(controller);
+            throw new RpcError(-32603, `mcp subscription returned no stream for ${method}`);
+        }
+        // Pump in the background. Deliberately not awaited: the subscription is live from
+        // here on, and awaiting it would block the caller until the server goes away.
+        void this.pump(body, controller);
+    }
+    async pump(body, controller) {
+        const reader = body.getReader();
+        const decoder = new TextDecoder();
+        let buffer = "";
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                buffer += decoder.decode(value, { stream: true });
+                const { events, rest } = drainSseEvents(buffer);
+                buffer = rest;
+                for (const event of events) {
+                    const msg = safeParse(event);
+                    // Only server-initiated messages matter here; anything with an id on this
+                    // stream is not something we are waiting on.
+                    if (msg && typeof msg.method === "string" && this.notificationHandler) {
+                        this.notificationHandler({
+                            method: msg.method,
+                            ...(msg.params && typeof msg.params === "object" ? { params: msg.params } : {}),
+                        });
+                    }
+                }
+            }
+        }
+        catch {
+            // A dropped stream is not recoverable at this layer: resumability was removed, so
+            // there is nothing to resume. The connection layer decides whether to re-subscribe.
+        }
+        finally {
+            this.streams.delete(controller);
+            reader.releaseLock?.();
+        }
+    }
+    async close() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        // Long-lived subscription streams would otherwise hold the process open.
+        for (const controller of this.streams)
+            controller.abort();
+        this.streams.clear();
+        // No DELETE and no session teardown: there is no server-side session to end.
+        this.resolveClosed();
+    }
+}
+/** Map an HTTP status onto a JSON-RPC-ish code the connection layer can classify. */
+export function httpErrorCode(status) {
+    if (status === 401 || status === 403)
+        return -32001; // auth: implementation-defined range
+    if (status === 404)
+        return -32601; // no such endpoint reads as no such method
+    return -32603;
+}
+function safeParse(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/mcp/transport/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/mcp/transport/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAqC,MAAM,YAAY,CAAC;AAErG,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAU7B;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK;aACf,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,QAAmB,EAAE,EAAU;IAC1D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,GAAiE,CAAC;QAC5E,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,CAAwF,CAAC;QAClG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,mFAAmF;IACnF,8CAA8C;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK;aACf,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aAC9C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,MAAgC;IAC9E,MAAM,OAAO,GAA2B,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAEjE,sFAAsF;IACtF,qFAAqF;IACrF,2EAA2E;IAC3E,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,IAAI,MAAM,EAAE,GAAG,CAAC;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,UAAU,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAEhF,MAAM,IAAI,GAAG,MAAM,EAAE,KAA4C,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC,qBAAqB,CAAC,CAAC;IAC9C,qFAAqF;IACrF,uFAAuF;IACvF,yEAAyE;IACzE,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC;IAE3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,aAAa;IAUK;IATrB,MAAM,GAAG,CAAC,CAAC;IACX,QAAQ,GAAG,KAAK,CAAC;IACR,SAAS,CAAS;IAClB,SAAS,CAAe;IACjC,mBAAmB,GAAkD,IAAI,CAAC;IACjE,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,aAAa,CAAc;IAC1B,MAAM,CAAgB;IAE/B,YAA6B,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC1C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAgC,EAAE,QAAiC;QAC/F,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAE9E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAEhB,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,2EAA2E;oBAC3E,gEAAgE;oBAChE,MAAM,EAAE,qCAAqC;oBAC7C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC/B,uEAAuE;oBACvE,2EAA2E;oBAC3E,8EAA8E;oBAC9E,4CAA4C;oBAC5C,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;oBAClC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACpB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,CAAE,KAAe,EAAE,OAAO,IAAI,KAAK,CAAC,CAAC;YAC5H,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,uBAAuB,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,2EAA2E;YAC3E,2EAA2E;YAC3E,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACxH,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACxD,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,gFAAgF;YAChF,4EAA4E;YAC5E,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,kDAAkD,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAChF,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;YAC1F,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,MAAc,EAAE,MAAgC;QACrD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,qCAAqC;gBAC7C,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aAChC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;SAChF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,mCAAmC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,OAA6C;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAgC;QAC/D,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,mBAAmB;gBAC3B,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aAChC;YACD,6EAA6E;YAC7E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;SACnG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,4BAA4B,MAAM,CAAE,KAAe,EAAE,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,IAAI,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,QAAQ,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,2CAA2C,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,kFAAkF;QAClF,8EAA8E;QAC9E,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAAgC,EAAE,UAA2B;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAuD,CAAC;oBACnF,0EAA0E;oBAC1E,6CAA6C;oBAC7C,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;wBACtE,IAAI,CAAC,mBAAmB,CAAC;4BACvB,MAAM,EAAE,GAAG,CAAC,MAAM;4BAClB,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAiC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC3G,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kFAAkF;YAClF,oFAAoF;QACtF,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,yEAAyE;QACzE,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,OAAO;YAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,6EAA6E;QAC7E,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC,qCAAqC;IAC1F,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC,2CAA2C;IAC9E,OAAO,CAAC,KAAK,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/mcp/transport/stdio.js

@@ -0,0 +1,234 @@
+import { killTree, killTreeSync, spawnManaged } from "../../tools/killTree.js";
+import { DEFAULT_REQUEST_TIMEOUT_MS, RpcError } from "./types.js";
+/** How much of the child's stderr to keep for diagnostics. */
+const STDERR_TAIL_CHARS = 4_000;
+/**
+ * Does this command need a shell on Windows (pure)?
+ *
+ * `spawn` on Windows executes a binary directly and does NOT apply PATHEXT, so it can
+ * only find something that is already a real executable. Every npm-installed launcher —
+ * `npx`, `pnpm`, `uvx`, `yarn` — is a `.cmd` shim on PATH, so `spawn("npx", …)` fails
+ * with ENOENT. That matters more than it sounds: `{"command": "npx", "args": ["-y",
+ * "@scope/server"]}` is how essentially every MCP server in the ecosystem is configured,
+ * including in this codebase's own config docstring. Checking for a literal `.cmd`/`.bat`
+ * suffix (what we did before) only helps the rare user who spelled the extension out.
+ *
+ * So: anything that is not already a directly-executable image goes through the shell,
+ * which is what performs PATHEXT lookup. `.exe`/`.com` and absolute paths to them are
+ * spawned directly, because a shell there buys nothing and adds a quoting problem.
+ */
+export function windowsNeedsShell(command) {
+    return !/\.(exe|com)$/i.test(command.trim());
+}
+/**
+ * Quote one token for `cmd.exe` (pure).
+ *
+ * Only when it needs it: an untouched token is easier to read in an error message, and
+ * the overwhelming majority (`-y`, `@scope/pkg`) contain nothing special. Internal
+ * quotes are doubled, which is the form `cmd` itself understands.
+ */
+export function quoteForCmd(token) {
+    if (token === "")
+        return '""';
+    if (!/[\s"^&|<>()%!]/.test(token))
+        return token;
+    return `"${token.replace(/"/g, '""')}"`;
+}
+/**
+ * Build the single command line a shell spawn takes (pure).
+ *
+ * The previous code interpolated `"${command}" ${args.join(" ")}`, which breaks the
+ * moment any argument holds a space — a Windows path with `Program Files` in it, say —
+ * because the argument silently splits in two.
+ */
+export function windowsCommandLine(command, args) {
+    return [command, ...args].map(quoteForCmd).join(" ");
+}
+/** Build a message frame. Exported for the framing test — the bug it guards (a missing
+ *  trailing newline) makes a server wait forever rather than fail. */
+export function frame(message) {
+    return JSON.stringify(message) + "\n";
+}
+/**
+ * Split a buffer into complete lines plus the unconsumed remainder (pure).
+ *
+ * A pipe delivers arbitrary chunks: one read can hold three messages, or half of one.
+ * Keeping this pure is what lets the split-frame cases be tested without a process.
+ */
+export function drainLines(buffer) {
+    const lines = [];
+    let rest = buffer;
+    let nl;
+    while ((nl = rest.indexOf("\n")) >= 0) {
+        const line = rest.slice(0, nl).trim();
+        rest = rest.slice(nl + 1);
+        if (line)
+            lines.push(line);
+    }
+    return { lines, rest };
+}
+export class StdioTransport {
+    proc;
+    /** True when the child is a shell wrapping the real server (Windows). */
+    shelled;
+    nextId = 1;
+    buffer = "";
+    stderrTail = "";
+    disposed = false;
+    timeoutMs;
+    pending = new Map();
+    notificationHandler = null;
+    resolveClosed;
+    closed;
+    constructor(options) {
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
+        this.closed = new Promise((resolve) => {
+            this.resolveClosed = resolve;
+        });
+        const args = [...(options.args ?? [])];
+        const env = { ...process.env, ...(options.env ?? {}) };
+        // On Windows almost everything has to go through a shell to be found at all; see
+        // `windowsNeedsShell`. POSIX spawns directly, where PATH lookup already works and a
+        // shell would only add a quoting surface.
+        this.shelled = process.platform === "win32" && windowsNeedsShell(options.command);
+        // spawnManaged, not spawn: on POSIX it makes the server its own process-group
+        // leader, which is what lets `close` take its children down with it. An MCP server
+        // is very often a launcher (`npx`, `uvx`, `pnpm dlx`) whose real work happens in a
+        // grandchild, and those used to survive Mindweave exiting.
+        this.proc = this.shelled
+            ? spawnManaged(windowsCommandLine(options.command, args), [], {
+                stdio: ["pipe", "pipe", "pipe"],
+                windowsHide: true,
+                shell: true,
+                env,
+                ...(options.cwd ? { cwd: options.cwd } : {}),
+            })
+            : spawnManaged(options.command, args, {
+                stdio: ["pipe", "pipe", "pipe"],
+                windowsHide: true,
+                env,
+                ...(options.cwd ? { cwd: options.cwd } : {}),
+            });
+        this.proc.stdout?.setEncoding("utf8");
+        this.proc.stdout?.on("data", (chunk) => this.onData(chunk));
+        this.proc.stderr?.setEncoding("utf8");
+        this.proc.stderr?.on("data", (chunk) => {
+            this.stderrTail = (this.stderrTail + chunk).slice(-STDERR_TAIL_CHARS);
+        });
+        // Both are terminal for us; `error` fires when the command does not exist at all.
+        this.proc.on("exit", (code) => this.die(new Error(`mcp server exited (code ${code ?? "unknown"})${this.stderrNote()}`)));
+        this.proc.on("error", (e) => this.die(new Error(`mcp server failed to start: ${e.message}${this.stderrNote()}`)));
+    }
+    onNotification(handler) {
+        this.notificationHandler = handler;
+    }
+    /** The child's recent stderr, if any — usually the actual reason a server failed. */
+    stderr() {
+        return this.stderrTail.trim();
+    }
+    stderrNote() {
+        const tail = this.stderr();
+        return tail ? `: ${tail.split("\n").slice(-3).join(" ").slice(0, 300)}` : "";
+    }
+    onData(chunk) {
+        this.buffer += chunk;
+        const { lines, rest } = drainLines(this.buffer);
+        this.buffer = rest;
+        for (const line of lines) {
+            let msg;
+            try {
+                msg = JSON.parse(line);
+            }
+            catch {
+                continue; // a banner, a log line, anything — not our problem
+            }
+            if (typeof msg.id !== "number") {
+                // Server-initiated. Nothing awaits it, but `subscriptions/listen` change
+                // notifications arrive this way on stdio, so they have to be handed up rather
+                // than dropped on the floor the way Phase 1 did.
+                const note = msg;
+                if (typeof note.method === "string" && this.notificationHandler) {
+                    this.notificationHandler({
+                        method: note.method,
+                        ...(note.params && typeof note.params === "object" ? { params: note.params } : {}),
+                    });
+                }
+                continue;
+            }
+            const waiter = this.pending.get(msg.id);
+            if (!waiter)
+                continue;
+            this.pending.delete(msg.id);
+            clearTimeout(waiter.timer);
+            if (msg.error) {
+                const code = typeof msg.error.code === "number" ? msg.error.code : -32603;
+                const message = typeof msg.error.message === "string" ? msg.error.message : "mcp error";
+                waiter.reject(new RpcError(code, message, msg.error.data));
+            }
+            else {
+                waiter.resolve(msg.result);
+            }
+        }
+    }
+    /** Mirrored headers are accepted and ignored: a pipe has no headers, and the spec lets
+     *  a non-HTTP client ignore `x-mcp-header` annotations entirely. */
+    request(method, params) {
+        if (this.disposed)
+            return Promise.reject(new RpcError(-32603, "mcp transport is closed"));
+        const id = this.nextId++;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new RpcError(-32603, `mcp timeout after ${this.timeoutMs}ms: ${method}`));
+            }, this.timeoutMs);
+            // Do not hold the event loop open just to wait on a slow server.
+            timer.unref?.();
+            this.pending.set(id, { resolve, reject, timer });
+            this.write({ jsonrpc: "2.0", id, method, ...(params ? { params } : {}) });
+        });
+    }
+    notify(method, params) {
+        if (this.disposed)
+            return;
+        this.write({ jsonrpc: "2.0", method, ...(params ? { params } : {}) });
+    }
+    write(message) {
+        try {
+            this.proc.stdin?.write(frame(message));
+        }
+        catch {
+            // The child is gone; the pending request will time out or be failed by `die`.
+        }
+    }
+    /** Fail everything in flight and mark the transport dead. Idempotent. */
+    die(error) {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        for (const waiter of this.pending.values()) {
+            clearTimeout(waiter.timer);
+            waiter.reject(error);
+        }
+        this.pending.clear();
+        this.resolveClosed();
+    }
+    async close(sync = false) {
+        if (!this.disposed)
+            this.die(new Error("mcp transport closed"));
+        try {
+            // Always kill the TREE, on every platform. A shelled child is `cmd.exe` rather
+            // than the server, so killing the handle leaves the real process running — but
+            // the same is true off Windows whenever the server is a launcher (`npx`, `uvx`)
+            // that does its work in a child. This used to be gated on `shelled`, which is
+            // Windows-only, so on macOS and Linux only the direct child was ever signalled
+            // and its children were orphaned. From a process-exit handler the async path
+            // never reaches the OS, so that case has to block instead.
+            (sync ? killTreeSync : killTree)(this.proc.pid);
+            this.proc.kill();
+        }
+        catch {
+            // Already gone.
+        }
+    }
+}
+//# sourceMappingURL=stdio.js.map

package/dist/mcp/transport/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../src/mcp/transport/stdio.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAqC,MAAM,YAAY,CAAC;AAErG,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAuB;IACzE,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAUD;sEACsE;AACtE,MAAM,UAAU,KAAK,CAAC,OAAgB;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,EAAU,CAAC;IACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,OAAO,cAAc;IACR,IAAI,CAAe;IACpC,yEAAyE;IACxD,OAAO,CAAU;IAC1B,MAAM,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,EAAE,CAAC;IACZ,UAAU,GAAG,EAAE,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IACR,SAAS,CAAS;IAClB,OAAO,GAAG,IAAI,GAAG,EAG/B,CAAC;IACI,mBAAmB,GAAkD,IAAI,CAAC;IAC1E,aAAa,CAAc;IAC1B,MAAM,CAAgB;IAE/B,YAAY,OAAqB;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC1C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACvD,iFAAiF;QACjF,oFAAoF;QACpF,0CAA0C;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClF,8EAA8E;QAC9E,mFAAmF;QACnF,mFAAmF;QACnF,2DAA2D;QAC3D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO;YACtB,CAAC,CAAC,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE;gBAC1D,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI;gBACX,GAAG;gBACH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C,CAAC;YACJ,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,IAAI;gBACjB,GAAG;gBACH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C,CAAC,CAAC;QAEP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7C,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,kFAAkF;QAClF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpH,CAAC;IAED,cAAc,CAAC,OAA6C;QAC1D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED,qFAAqF;IACrF,MAAM;QACJ,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;IAEO,UAAU;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,GAAsG,CAAC;YAC3G,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,mDAAmD;YAC/D,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC/B,yEAAyE;gBACzE,8EAA8E;gBAC9E,iDAAiD;gBACjD,MAAM,IAAI,GAAG,GAA6C,CAAC;gBAC3D,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAChE,IAAI,CAAC,mBAAmB,CAAC;wBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAiC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9G,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC1E,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;gBACxF,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED;wEACoE;IACpE,OAAO,CAAC,MAAc,EAAE,MAAgC;QACtD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC1F,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,qBAAqB,IAAI,CAAC,SAAS,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC;YACnF,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnB,iEAAiE;YACjE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,MAAgC;QACrD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,OAAgB;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;QAChF,CAAC;IACH,CAAC;IAED,yEAAyE;IACjE,GAAG,CAAC,KAAY;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,+EAA+E;YAC/E,+EAA+E;YAC/E,gFAAgF;YAChF,8EAA8E;YAC9E,+EAA+E;YAC/E,6EAA6E;YAC7E,2DAA2D;YAC3D,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;CACF"}

package/dist/mcp/transport/types.js

@@ -0,0 +1,27 @@
+/**
+ * types.ts — the one thing every MCP transport has to be.
+ *
+ * MCP runs over a local child process (stdio) or over HTTP (Streamable HTTP). Those are
+ * genuinely different animals: one is a pipe you own the lifecycle of, the other is a
+ * request/response with streaming bodies and no session. Everything above this file
+ * should not care which it got, so the difference stops here.
+ *
+ * Kept to request/notify/close on purpose. MCP's server-to-client traffic used to need
+ * more surface, but 2026-07-28 removed `ping`, removed the HTTP GET channel, and moved
+ * change notifications onto an explicit `subscriptions/listen` stream — so a transport
+ * no longer needs a general inbound-message channel just to stay alive.
+ */
+/** A JSON-RPC error surfaced by a transport, carrying the code so callers can classify it. */
+export class RpcError extends Error {
+    code;
+    data;
+    constructor(code, message, data) {
+        super(message);
+        this.code = code;
+        this.data = data;
+        this.name = "RpcError";
+    }
+}
+/** How long a single request may take before we give up on it. */
+export const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+//# sourceMappingURL=types.js.map

package/dist/mcp/transport/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/mcp/transport/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,8FAA8F;AAC9F,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEtB;IAEA;IAHX,YACW,IAAY,EACrB,OAAe,EACN,IAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAQ;QAEZ,SAAI,GAAJ,IAAI,CAAU;QAGvB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AA6CD,kEAAkE;AAClE,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC"}