skybridge 0.0.0-dev.beb60f5 → 0.0.0-dev.bec652b

package/dist/server/register-resource-prompt.test.js

@@ -0,0 +1,50 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
+import { describe, expect, it } from "vitest";
+import { z } from "zod";
+import { McpServer } from "./index.js";
+async function connect(register) {
+    const server = new McpServer({ name: "test", version: "1.0.0" });
+    register(server);
+    const client = new Client({ name: "test-client", version: "1.0.0" });
+    const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+    await server.connect(serverTransport);
+    await client.connect(clientTransport);
+    return {
+        client,
+        teardown: async () => {
+            await client.close();
+            await server.close();
+        },
+    };
+}
+describe("registerResource / registerPrompt config-object API", () => {
+    it("registers and reads a resource, chaining with registerPrompt", async () => {
+        const { client, teardown } = await connect((server) => {
+            const chained = server
+                .registerResource({ name: "pricing", uri: "docs://pricing", mimeType: "text/markdown" }, async (uri) => ({ contents: [{ uri: uri.href, text: "$5" }] }))
+                .registerPrompt({ name: "trip", argsSchema: { destination: z.string() } }, ({ destination }) => ({
+                messages: [
+                    {
+                        role: "user",
+                        content: { type: "text", text: `Trip to ${destination}` },
+                    },
+                ],
+            }));
+            expect(chained).toBe(server);
+        });
+        const { contents } = await client.readResource({ uri: "docs://pricing" });
+        expect(contents[0].text).toBe("$5");
+        const prompt = await client.getPrompt({
+            name: "trip",
+            arguments: { destination: "Rome" },
+        });
+        expect((prompt.messages[0]?.content).text).toBe("Trip to Rome");
+        await teardown();
+    });
+    it("rejects resources colliding with the reserved ui://views/ namespace", () => {
+        const server = new McpServer({ name: "test", version: "1.0.0" });
+        expect(() => server.registerResource({ name: "sneaky", uri: "ui://views/ext-apps/x.html" }, async (uri) => ({ contents: [{ uri: uri.href, text: "" }] }))).toThrow(/reserved/);
+    });
+});
+//# sourceMappingURL=register-resource-prompt.test.js.map

package/dist/server/register-resource-prompt.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-resource-prompt.test.js","sourceRoot":"","sources":["../../src/server/register-resource-prompt.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,KAAK,UAAU,OAAO,CAAC,QAAqC;IAC1D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,GACtC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;IACvC,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtC,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,MAAM;iBACnB,gBAAgB,CACf,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,EACrE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAC/D;iBACA,cAAc,CACb,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EACzD,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpB,QAAQ,EAAE;oBACR;wBACE,IAAI,EAAE,MAAM;wBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,WAAW,EAAE,EAAE;qBAC1D;iBACF;aACF,CAAC,CACH,CAAC;YACJ,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAE,QAAQ,CAAC,CAAC,CAAsB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;YACpC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAA4B,CAAA,CAAC,IAAI,CAAC,CAAC,IAAI,CACjE,cAAc,CACf,CAAC;QAEF,MAAM,QAAQ,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CAAC,gBAAgB,CACrB,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,4BAA4B,EAAE,EACrD,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAC7D,CACF,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { InMemoryTransport } from \"@modelcontextprotocol/sdk/inMemory.js\";\nimport { describe, expect, it } from \"vitest\";\nimport { z } from \"zod\";\nimport { McpServer } from \"./index.js\";\n\nasync function connect(register: (server: McpServer) => void) {\n  const server = new McpServer({ name: \"test\", version: \"1.0.0\" });\n  register(server);\n  const client = new Client({ name: \"test-client\", version: \"1.0.0\" });\n  const [clientTransport, serverTransport] =\n    InMemoryTransport.createLinkedPair();\n  await server.connect(serverTransport);\n  await client.connect(clientTransport);\n  return {\n    client,\n    teardown: async () => {\n      await client.close();\n      await server.close();\n    },\n  };\n}\n\ndescribe(\"registerResource / registerPrompt config-object API\", () => {\n  it(\"registers and reads a resource, chaining with registerPrompt\", async () => {\n    const { client, teardown } = await connect((server) => {\n      const chained = server\n        .registerResource(\n          { name: \"pricing\", uri: \"docs://pricing\", mimeType: \"text/markdown\" },\n          async (uri) => ({ contents: [{ uri: uri.href, text: \"$5\" }] }),\n        )\n        .registerPrompt(\n          { name: \"trip\", argsSchema: { destination: z.string() } },\n          ({ destination }) => ({\n            messages: [\n              {\n                role: \"user\",\n                content: { type: \"text\", text: `Trip to ${destination}` },\n              },\n            ],\n          }),\n        );\n      expect(chained).toBe(server);\n    });\n\n    const { contents } = await client.readResource({ uri: \"docs://pricing\" });\n    expect((contents[0] as { text: string }).text).toBe(\"$5\");\n\n    const prompt = await client.getPrompt({\n      name: \"trip\",\n      arguments: { destination: \"Rome\" },\n    });\n    expect((prompt.messages[0]?.content as { text: string }).text).toBe(\n      \"Trip to Rome\",\n    );\n\n    await teardown();\n  });\n\n  it(\"rejects resources colliding with the reserved ui://views/ namespace\", () => {\n    const server = new McpServer({ name: \"test\", version: \"1.0.0\" });\n    expect(() =>\n      server.registerResource(\n        { name: \"sneaky\", uri: \"ui://views/ext-apps/x.html\" },\n        async (uri) => ({ contents: [{ uri: uri.href, text: \"\" }] }),\n      ),\n    ).toThrow(/reserved/);\n  });\n});\n"]}

package/dist/server/requestOrigin.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolves this server's public origin from request headers, in precedence
+ * `x-forwarded-host` → `host` → localhost dev fallback. Shared by view serving
+ * and OAuth metadata so the two can't drift. `Origin` is deliberately ignored:
+ * it carries the *caller's* site, not this server's.
+ */
+export declare function resolveServerOrigin(header: (key: string) => string | undefined): string;

package/dist/server/requestOrigin.js

@@ -0,0 +1,25 @@
+/**
+ * Resolves this server's public origin from request headers, in precedence
+ * `x-forwarded-host` → `host` → localhost dev fallback. Shared by view serving
+ * and OAuth metadata so the two can't drift. `Origin` is deliberately ignored:
+ * it carries the *caller's* site, not this server's.
+ */
+export function resolveServerOrigin(header) {
+    // Proxies may send X-Forwarded-* as a comma-separated chain; the client-facing
+    // hop is the first entry.
+    const firstHop = (value) => value?.split(",")[0]?.trim();
+    const forwardedHost = firstHop(header("x-forwarded-host"));
+    if (forwardedHost) {
+        const proto = firstHop(header("x-forwarded-proto")) || "https";
+        return `${proto}://${forwardedHost}`;
+    }
+    const host = header("host");
+    if (host) {
+        const proto = ["127.0.0.1:", "localhost:"].some((p) => host.startsWith(p))
+            ? "http"
+            : "https";
+        return `${proto}://${host}`;
+    }
+    return `http://localhost:${process.env.__PORT || "3000"}`;
+}
+//# sourceMappingURL=requestOrigin.js.map

package/dist/server/requestOrigin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestOrigin.js","sourceRoot":"","sources":["../../src/server/requestOrigin.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA2C;IAE3C,+EAA+E;IAC/E,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7E,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3D,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,OAAO,CAAC;QAC/D,OAAO,GAAG,KAAK,MAAM,aAAa,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,oBAAoB,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;AAC5D,CAAC","sourcesContent":["/**\n * Resolves this server's public origin from request headers, in precedence\n * `x-forwarded-host` → `host` → localhost dev fallback. Shared by view serving\n * and OAuth metadata so the two can't drift. `Origin` is deliberately ignored:\n * it carries the *caller's* site, not this server's.\n */\nexport function resolveServerOrigin(\n  header: (key: string) => string | undefined,\n): string {\n  // Proxies may send X-Forwarded-* as a comma-separated chain; the client-facing\n  // hop is the first entry.\n  const firstHop = (value: string | undefined) => value?.split(\",\")[0]?.trim();\n  const forwardedHost = firstHop(header(\"x-forwarded-host\"));\n  if (forwardedHost) {\n    const proto = firstHop(header(\"x-forwarded-proto\")) || \"https\";\n    return `${proto}://${forwardedHost}`;\n  }\n  const host = header(\"host\");\n  if (host) {\n    const proto = [\"127.0.0.1:\", \"localhost:\"].some((p) => host.startsWith(p))\n      ? \"http\"\n      : \"https\";\n    return `${proto}://${host}`;\n  }\n  return `http://localhost:${process.env.__PORT || \"3000\"}`;\n}\n"]}