panoma 0.1.8 → 0.9.0

package/app/node_modules/@modelcontextprotocol/sdk/dist/esm/client/sse.js

@@ -1,206 +0,0 @@
-import { EventSource } from 'eventsource';
-import { createFetchWithInit, normalizeHeaders } from '../shared/transport.js';
-import { JSONRPCMessageSchema } from '../types.js';
-import { auth, extractWWWAuthenticateParams, UnauthorizedError } from './auth.js';
-export class SseError extends Error {
-    constructor(code, message, event) {
-        super(`SSE error: ${message}`);
-        this.code = code;
-        this.event = event;
-    }
-}
-/**
- * Client transport for SSE: this will connect to a server using Server-Sent Events for receiving
- * messages and make separate POST requests for sending messages.
- * @deprecated SSEClientTransport is deprecated. Prefer to use StreamableHTTPClientTransport where possible instead. Note that because some servers are still using SSE, clients may need to support both transports during the migration period.
- */
-export class SSEClientTransport {
-    constructor(url, opts) {
-        this._url = url;
-        this._resourceMetadataUrl = undefined;
-        this._scope = undefined;
-        this._eventSourceInit = opts?.eventSourceInit;
-        this._requestInit = opts?.requestInit;
-        this._authProvider = opts?.authProvider;
-        this._fetch = opts?.fetch;
-        this._fetchWithInit = createFetchWithInit(opts?.fetch, opts?.requestInit);
-    }
-    async _authThenStart() {
-        if (!this._authProvider) {
-            throw new UnauthorizedError('No auth provider');
-        }
-        let result;
-        try {
-            result = await auth(this._authProvider, {
-                serverUrl: this._url,
-                resourceMetadataUrl: this._resourceMetadataUrl,
-                scope: this._scope,
-                fetchFn: this._fetchWithInit
-            });
-        }
-        catch (error) {
-            this.onerror?.(error);
-            throw error;
-        }
-        if (result !== 'AUTHORIZED') {
-            throw new UnauthorizedError();
-        }
-        return await this._startOrAuth();
-    }
-    async _commonHeaders() {
-        const headers = {};
-        if (this._authProvider) {
-            const tokens = await this._authProvider.tokens();
-            if (tokens) {
-                headers['Authorization'] = `Bearer ${tokens.access_token}`;
-            }
-        }
-        if (this._protocolVersion) {
-            headers['mcp-protocol-version'] = this._protocolVersion;
-        }
-        const extraHeaders = normalizeHeaders(this._requestInit?.headers);
-        return new Headers({
-            ...headers,
-            ...extraHeaders
-        });
-    }
-    _startOrAuth() {
-        const fetchImpl = (this?._eventSourceInit?.fetch ?? this._fetch ?? fetch);
-        return new Promise((resolve, reject) => {
-            this._eventSource = new EventSource(this._url.href, {
-                ...this._eventSourceInit,
-                fetch: async (url, init) => {
-                    const headers = await this._commonHeaders();
-                    headers.set('Accept', 'text/event-stream');
-                    const response = await fetchImpl(url, {
-                        ...init,
-                        headers
-                    });
-                    if (response.status === 401 && response.headers.has('www-authenticate')) {
-                        const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(response);
-                        this._resourceMetadataUrl = resourceMetadataUrl;
-                        this._scope = scope;
-                    }
-                    return response;
-                }
-            });
-            this._abortController = new AbortController();
-            this._eventSource.onerror = event => {
-                if (event.code === 401 && this._authProvider) {
-                    this._authThenStart().then(resolve, reject);
-                    return;
-                }
-                const error = new SseError(event.code, event.message, event);
-                reject(error);
-                this.onerror?.(error);
-            };
-            this._eventSource.onopen = () => {
-                // The connection is open, but we need to wait for the endpoint to be received.
-            };
-            this._eventSource.addEventListener('endpoint', (event) => {
-                const messageEvent = event;
-                try {
-                    this._endpoint = new URL(messageEvent.data, this._url);
-                    if (this._endpoint.origin !== this._url.origin) {
-                        throw new Error(`Endpoint origin does not match connection origin: ${this._endpoint.origin}`);
-                    }
-                }
-                catch (error) {
-                    reject(error);
-                    this.onerror?.(error);
-                    void this.close();
-                    return;
-                }
-                resolve();
-            });
-            this._eventSource.onmessage = (event) => {
-                const messageEvent = event;
-                let message;
-                try {
-                    message = JSONRPCMessageSchema.parse(JSON.parse(messageEvent.data));
-                }
-                catch (error) {
-                    this.onerror?.(error);
-                    return;
-                }
-                this.onmessage?.(message);
-            };
-        });
-    }
-    async start() {
-        if (this._eventSource) {
-            throw new Error('SSEClientTransport already started! If using Client class, note that connect() calls start() automatically.');
-        }
-        return await this._startOrAuth();
-    }
-    /**
-     * Call this method after the user has finished authorizing via their user agent and is redirected back to the MCP client application. This will exchange the authorization code for an access token, enabling the next connection attempt to successfully auth.
-     */
-    async finishAuth(authorizationCode) {
-        if (!this._authProvider) {
-            throw new UnauthorizedError('No auth provider');
-        }
-        const result = await auth(this._authProvider, {
-            serverUrl: this._url,
-            authorizationCode,
-            resourceMetadataUrl: this._resourceMetadataUrl,
-            scope: this._scope,
-            fetchFn: this._fetchWithInit
-        });
-        if (result !== 'AUTHORIZED') {
-            throw new UnauthorizedError('Failed to authorize');
-        }
-    }
-    async close() {
-        this._abortController?.abort();
-        this._eventSource?.close();
-        this.onclose?.();
-    }
-    async send(message) {
-        if (!this._endpoint) {
-            throw new Error('Not connected');
-        }
-        try {
-            const headers = await this._commonHeaders();
-            headers.set('content-type', 'application/json');
-            const init = {
-                ...this._requestInit,
-                method: 'POST',
-                headers,
-                body: JSON.stringify(message),
-                signal: this._abortController?.signal
-            };
-            const response = await (this._fetch ?? fetch)(this._endpoint, init);
-            if (!response.ok) {
-                const text = await response.text().catch(() => null);
-                if (response.status === 401 && this._authProvider) {
-                    const { resourceMetadataUrl, scope } = extractWWWAuthenticateParams(response);
-                    this._resourceMetadataUrl = resourceMetadataUrl;
-                    this._scope = scope;
-                    const result = await auth(this._authProvider, {
-                        serverUrl: this._url,
-                        resourceMetadataUrl: this._resourceMetadataUrl,
-                        scope: this._scope,
-                        fetchFn: this._fetchWithInit
-                    });
-                    if (result !== 'AUTHORIZED') {
-                        throw new UnauthorizedError();
-                    }
-                    // Purposely _not_ awaited, so we don't call onerror twice
-                    return this.send(message);
-                }
-                throw new Error(`Error POSTing to endpoint (HTTP ${response.status}): ${text}`);
-            }
-            // Release connection - POST responses don't have content we need
-            await response.body?.cancel();
-        }
-        catch (error) {
-            this.onerror?.(error);
-            throw error;
-        }
-    }
-    setProtocolVersion(version) {
-        this._protocolVersion = version;
-    }
-}
-//# sourceMappingURL=sse.js.map

package/app/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.d.ts

@@ -1,84 +0,0 @@
-import { IOType } from 'node:child_process';
-import { Stream } from 'node:stream';
-import { Transport } from '../shared/transport.js';
-import { JSONRPCMessage } from '../types.js';
-export type StdioServerParameters = {
-    /**
-     * The executable to run to start the server.
-     */
-    command: string;
-    /**
-     * Command line arguments to pass to the executable.
-     */
-    args?: string[];
-    /**
-     * The environment to use when spawning the process.
-     *
-     * If not specified, the result of getDefaultEnvironment() will be used.
-     */
-    env?: Record<string, string>;
-    /**
-     * How to handle stderr of the child process. This matches the semantics of Node's `child_process.spawn`.
-     *
-     * The default is "inherit", meaning messages to stderr will be printed to the parent process's stderr.
-     */
-    stderr?: IOType | Stream | number;
-    /**
-     * The working directory to use when spawning the process.
-     *
-     * If not specified, the current working directory will be inherited.
-     */
-    cwd?: string;
-    /**
-     * Maximum size of the read buffer in bytes. If a single message exceeds
-     * this size the transport will emit an error and close.
-     *
-     * Defaults to 10 MB.
-     */
-    maxBufferSize?: number;
-};
-/**
- * Environment variables to inherit by default, if an environment is not explicitly given.
- */
-export declare const DEFAULT_INHERITED_ENV_VARS: string[];
-/**
- * Returns a default environment object including only environment variables deemed safe to inherit.
- */
-export declare function getDefaultEnvironment(): Record<string, string>;
-/**
- * Client transport for stdio: this will connect to a server by spawning a process and communicating with it over stdin/stdout.
- *
- * This transport is only available in Node.js environments.
- */
-export declare class StdioClientTransport implements Transport {
-    private _process?;
-    private _readBuffer;
-    private _serverParams;
-    private _stderrStream;
-    onclose?: () => void;
-    onerror?: (error: Error) => void;
-    onmessage?: (message: JSONRPCMessage) => void;
-    constructor(server: StdioServerParameters);
-    /**
-     * Starts the server process and prepares to communicate with it.
-     */
-    start(): Promise<void>;
-    /**
-     * The stderr stream of the child process, if `StdioServerParameters.stderr` was set to "pipe" or "overlapped".
-     *
-     * If stderr piping was requested, a PassThrough stream is returned _immediately_, allowing callers to
-     * attach listeners before the start method is invoked. This prevents loss of any early
-     * error output emitted by the child process.
-     */
-    get stderr(): Stream | null;
-    /**
-     * The child process pid spawned by this transport.
-     *
-     * This is only available after the transport has been started.
-     */
-    get pid(): number | null;
-    private processReadBuffer;
-    close(): Promise<void>;
-    send(message: JSONRPCMessage): Promise<void>;
-}
-//# sourceMappingURL=stdio.d.ts.map

package/app/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.js

@@ -1,194 +0,0 @@
-import spawn from 'cross-spawn';
-import process from 'node:process';
-import { PassThrough } from 'node:stream';
-import { ReadBuffer, serializeMessage } from '../shared/stdio.js';
-/**
- * Environment variables to inherit by default, if an environment is not explicitly given.
- */
-export const DEFAULT_INHERITED_ENV_VARS = process.platform === 'win32'
-    ? [
-        'APPDATA',
-        'HOMEDRIVE',
-        'HOMEPATH',
-        'LOCALAPPDATA',
-        'PATH',
-        'PROCESSOR_ARCHITECTURE',
-        'SYSTEMDRIVE',
-        'SYSTEMROOT',
-        'TEMP',
-        'USERNAME',
-        'USERPROFILE',
-        'PROGRAMFILES'
-    ]
-    : /* list inspired by the default env inheritance of sudo */
-        ['HOME', 'LOGNAME', 'PATH', 'SHELL', 'TERM', 'USER'];
-/**
- * Returns a default environment object including only environment variables deemed safe to inherit.
- */
-export function getDefaultEnvironment() {
-    const env = {};
-    for (const key of DEFAULT_INHERITED_ENV_VARS) {
-        const value = process.env[key];
-        if (value === undefined) {
-            continue;
-        }
-        if (value.startsWith('()')) {
-            // Skip functions, which are a security risk.
-            continue;
-        }
-        env[key] = value;
-    }
-    return env;
-}
-/**
- * Client transport for stdio: this will connect to a server by spawning a process and communicating with it over stdin/stdout.
- *
- * This transport is only available in Node.js environments.
- */
-export class StdioClientTransport {
-    constructor(server) {
-        this._stderrStream = null;
-        this._serverParams = server;
-        this._readBuffer = new ReadBuffer({ maxBufferSize: server.maxBufferSize });
-        if (server.stderr === 'pipe' || server.stderr === 'overlapped') {
-            this._stderrStream = new PassThrough();
-        }
-    }
-    /**
-     * Starts the server process and prepares to communicate with it.
-     */
-    async start() {
-        if (this._process) {
-            throw new Error('StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.');
-        }
-        return new Promise((resolve, reject) => {
-            this._process = spawn(this._serverParams.command, this._serverParams.args ?? [], {
-                // merge default env with server env because mcp server needs some env vars
-                env: {
-                    ...getDefaultEnvironment(),
-                    ...this._serverParams.env
-                },
-                stdio: ['pipe', 'pipe', this._serverParams.stderr ?? 'inherit'],
-                shell: false,
-                windowsHide: process.platform === 'win32',
-                cwd: this._serverParams.cwd
-            });
-            this._process.on('error', error => {
-                reject(error);
-                this.onerror?.(error);
-            });
-            this._process.on('spawn', () => {
-                resolve();
-            });
-            this._process.on('close', _code => {
-                this._process = undefined;
-                this.onclose?.();
-            });
-            this._process.stdin?.on('error', error => {
-                this.onerror?.(error);
-            });
-            this._process.stdout?.on('data', chunk => {
-                try {
-                    this._readBuffer.append(chunk);
-                    this.processReadBuffer();
-                }
-                catch (error) {
-                    this.onerror?.(error);
-                    this.close().catch(() => { });
-                }
-            });
-            this._process.stdout?.on('error', error => {
-                this.onerror?.(error);
-            });
-            if (this._stderrStream && this._process.stderr) {
-                this._process.stderr.pipe(this._stderrStream);
-            }
-        });
-    }
-    /**
-     * The stderr stream of the child process, if `StdioServerParameters.stderr` was set to "pipe" or "overlapped".
-     *
-     * If stderr piping was requested, a PassThrough stream is returned _immediately_, allowing callers to
-     * attach listeners before the start method is invoked. This prevents loss of any early
-     * error output emitted by the child process.
-     */
-    get stderr() {
-        if (this._stderrStream) {
-            return this._stderrStream;
-        }
-        return this._process?.stderr ?? null;
-    }
-    /**
-     * The child process pid spawned by this transport.
-     *
-     * This is only available after the transport has been started.
-     */
-    get pid() {
-        return this._process?.pid ?? null;
-    }
-    processReadBuffer() {
-        while (true) {
-            try {
-                const message = this._readBuffer.readMessage();
-                if (message === null) {
-                    break;
-                }
-                this.onmessage?.(message);
-            }
-            catch (error) {
-                this.onerror?.(error);
-            }
-        }
-    }
-    async close() {
-        if (this._process) {
-            const processToClose = this._process;
-            this._process = undefined;
-            const closePromise = new Promise(resolve => {
-                processToClose.once('close', () => {
-                    resolve();
-                });
-            });
-            try {
-                processToClose.stdin?.end();
-            }
-            catch {
-                // ignore
-            }
-            await Promise.race([closePromise, new Promise(resolve => setTimeout(resolve, 2000).unref())]);
-            if (processToClose.exitCode === null) {
-                try {
-                    processToClose.kill('SIGTERM');
-                }
-                catch {
-                    // ignore
-                }
-                await Promise.race([closePromise, new Promise(resolve => setTimeout(resolve, 2000).unref())]);
-            }
-            if (processToClose.exitCode === null) {
-                try {
-                    processToClose.kill('SIGKILL');
-                }
-                catch {
-                    // ignore
-                }
-            }
-        }
-        this._readBuffer.clear();
-    }
-    send(message) {
-        return new Promise(resolve => {
-            if (!this._process?.stdin) {
-                throw new Error('Not connected');
-            }
-            const json = serializeMessage(message);
-            if (this._process.stdin.write(json)) {
-                resolve();
-            }
-            else {
-                this._process.stdin.once('drain', resolve);
-            }
-        });
-    }
-}
-//# sourceMappingURL=stdio.js.map

package/app/node_modules/@modelcontextprotocol/sdk/dist/esm/client/streamableHttp.d.ts

@@ -1,171 +0,0 @@
-import { Transport, FetchLike } from '../shared/transport.js';
-import { JSONRPCMessage } from '../types.js';
-import { OAuthClientProvider } from './auth.js';
-export declare class StreamableHTTPError extends Error {
-    readonly code: number | undefined;
-    constructor(code: number | undefined, message: string | undefined);
-}
-/**
- * Options for starting or authenticating an SSE connection
- */
-export interface StartSSEOptions {
-    /**
-     * The resumption token used to continue long-running requests that were interrupted.
-     *
-     * This allows clients to reconnect and continue from where they left off.
-     */
-    resumptionToken?: string;
-    /**
-     * A callback that is invoked when the resumption token changes.
-     *
-     * This allows clients to persist the latest token for potential reconnection.
-     */
-    onresumptiontoken?: (token: string) => void;
-    /**
-     * Override Message ID to associate with the replay message
-     * so that response can be associate with the new resumed request.
-     */
-    replayMessageId?: string | number;
-}
-/**
- * Configuration options for reconnection behavior of the StreamableHTTPClientTransport.
- */
-export interface StreamableHTTPReconnectionOptions {
-    /**
-     * Maximum backoff time between reconnection attempts in milliseconds.
-     * Default is 30000 (30 seconds).
-     */
-    maxReconnectionDelay: number;
-    /**
-     * Initial backoff time between reconnection attempts in milliseconds.
-     * Default is 1000 (1 second).
-     */
-    initialReconnectionDelay: number;
-    /**
-     * The factor by which the reconnection delay increases after each attempt.
-     * Default is 1.5.
-     */
-    reconnectionDelayGrowFactor: number;
-    /**
-     * Maximum number of reconnection attempts before giving up.
-     * Default is 2.
-     */
-    maxRetries: number;
-}
-/**
- * Configuration options for the `StreamableHTTPClientTransport`.
- */
-export type StreamableHTTPClientTransportOptions = {
-    /**
-     * An OAuth client provider to use for authentication.
-     *
-     * When an `authProvider` is specified and the connection is started:
-     * 1. The connection is attempted with any existing access token from the `authProvider`.
-     * 2. If the access token has expired, the `authProvider` is used to refresh the token.
-     * 3. If token refresh fails or no access token exists, and auth is required, `OAuthClientProvider.redirectToAuthorization` is called, and an `UnauthorizedError` will be thrown from `connect`/`start`.
-     *
-     * After the user has finished authorizing via their user agent, and is redirected back to the MCP client application, call `StreamableHTTPClientTransport.finishAuth` with the authorization code before retrying the connection.
-     *
-     * If an `authProvider` is not provided, and auth is required, an `UnauthorizedError` will be thrown.
-     *
-     * `UnauthorizedError` might also be thrown when sending any message over the transport, indicating that the session has expired, and needs to be re-authed and reconnected.
-     */
-    authProvider?: OAuthClientProvider;
-    /**
-     * Customizes HTTP requests to the server.
-     */
-    requestInit?: RequestInit;
-    /**
-     * Custom fetch implementation used for all network requests.
-     */
-    fetch?: FetchLike;
-    /**
-     * Options to configure the reconnection behavior.
-     */
-    reconnectionOptions?: StreamableHTTPReconnectionOptions;
-    /**
-     * Session ID for the connection. This is used to identify the session on the server.
-     * When not provided and connecting to a server that supports session IDs, the server will generate a new session ID.
-     */
-    sessionId?: string;
-};
-/**
- * Client transport for Streamable HTTP: this implements the MCP Streamable HTTP transport specification.
- * It will connect to a server using HTTP POST for sending messages and HTTP GET with Server-Sent Events
- * for receiving messages.
- */
-export declare class StreamableHTTPClientTransport implements Transport {
-    private _abortController?;
-    private _url;
-    private _resourceMetadataUrl?;
-    private _scope?;
-    private _requestInit?;
-    private _authProvider?;
-    private _fetch?;
-    private _fetchWithInit;
-    private _sessionId?;
-    private _reconnectionOptions;
-    private _protocolVersion?;
-    private _hasCompletedAuthFlow;
-    private _lastUpscopingHeader?;
-    private _serverRetryMs?;
-    private _reconnectionTimeout?;
-    onclose?: () => void;
-    onerror?: (error: Error) => void;
-    onmessage?: (message: JSONRPCMessage) => void;
-    constructor(url: URL, opts?: StreamableHTTPClientTransportOptions);
-    private _authThenStart;
-    private _commonHeaders;
-    private _startOrAuthSse;
-    /**
-     * Calculates the next reconnection delay using  backoff algorithm
-     *
-     * @param attempt Current reconnection attempt count for the specific stream
-     * @returns Time to wait in milliseconds before next reconnection attempt
-     */
-    private _getNextReconnectionDelay;
-    /**
-     * Schedule a reconnection attempt using server-provided retry interval or backoff
-     *
-     * @param lastEventId The ID of the last received event for resumability
-     * @param attemptCount Current reconnection attempt count for this specific stream
-     */
-    private _scheduleReconnection;
-    private _handleSseStream;
-    start(): Promise<void>;
-    /**
-     * Call this method after the user has finished authorizing via their user agent and is redirected back to the MCP client application. This will exchange the authorization code for an access token, enabling the next connection attempt to successfully auth.
-     */
-    finishAuth(authorizationCode: string): Promise<void>;
-    close(): Promise<void>;
-    send(message: JSONRPCMessage | JSONRPCMessage[], options?: {
-        resumptionToken?: string;
-        onresumptiontoken?: (token: string) => void;
-    }): Promise<void>;
-    get sessionId(): string | undefined;
-    /**
-     * Terminates the current session by sending a DELETE request to the server.
-     *
-     * Clients that no longer need a particular session
-     * (e.g., because the user is leaving the client application) SHOULD send an
-     * HTTP DELETE to the MCP endpoint with the Mcp-Session-Id header to explicitly
-     * terminate the session.
-     *
-     * The server MAY respond with HTTP 405 Method Not Allowed, indicating that
-     * the server does not allow clients to terminate sessions.
-     */
-    terminateSession(): Promise<void>;
-    setProtocolVersion(version: string): void;
-    get protocolVersion(): string | undefined;
-    /**
-     * Resume an SSE stream from a previous event ID.
-     * Opens a GET SSE connection with Last-Event-ID header to replay missed events.
-     *
-     * @param lastEventId The event ID to resume from
-     * @param options Optional callback to receive new resumption tokens
-     */
-    resumeStream(lastEventId: string, options?: {
-        onresumptiontoken?: (token: string) => void;
-    }): Promise<void>;
-}
-//# sourceMappingURL=streamableHttp.d.ts.map