skybridge 0.0.0-dev.e9a7859 → 0.0.0-dev.e9ac102

package/dist/server/events.d.ts

@@ -0,0 +1,113 @@
+import { type McpServer as SdkMcpServer, type StandardSchemaV1, type StandardSchemaWithJSON } from "@modelcontextprotocol/server";
+/**
+ * A webhook subscription, as passed to `onSubscribe`. Whatever delivers the
+ * events POSTs them to `url`, signed with `secret`, until `expiresAt`.
+ */
+export interface EventSubscription {
+    /** Stable across refreshes: the same user subscribing to the same event with the same arguments and callback gets the same `id`. */
+    id: string;
+    /** Callback URL deliveries are POSTed to. */
+    url: string;
+    /** Standard Webhooks signing secret (`whsec_…`). A refresh may carry a new one. */
+    secret: string;
+    /** When the subscription lapses unless the host refreshes it. */
+    expiresAt: Date;
+}
+/** An event occurrence, as passed to {@link deliverEvent}. */
+export interface EventOccurrence {
+    /** Event type name, as registered with `registerEvent`. */
+    name: string;
+    /** Stable identifier the host uses to drop duplicates, ideally the upstream's. Reuse it when retrying. */
+    id: string;
+    /** When the event happened. Defaults to now. */
+    timestamp?: Date;
+    /** Payload matching the event's `payloadSchema`. */
+    data: unknown;
+}
+/** Outcome of {@link deliverEvent}. Retry with the same event `id` when `retryable`. */
+export type DeliveryResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+    retryable: boolean;
+    status?: number;
+};
+type EventSchema = Record<string, StandardSchemaWithJSON> | StandardSchemaWithJSON;
+export type InferEventSchema<T extends EventSchema> = T extends StandardSchemaWithJSON ? StandardSchemaV1.InferOutput<T> : T extends Record<string, StandardSchemaWithJSON> ? {
+    [K in keyof T as undefined extends StandardSchemaV1.InferOutput<T[K]> ? never : K]: StandardSchemaV1.InferOutput<T[K]>;
+} & {
+    [K in keyof T as undefined extends StandardSchemaV1.InferOutput<T[K]> ? K : never]?: StandardSchemaV1.InferOutput<T[K]>;
+} : never;
+/** The `registerEvent` config: how the event type is described in `events/list`. */
+export interface EventConfig<TInput extends EventSchema> {
+    /** Stable, specific name such as `comment.created`. */
+    name: string;
+    /** What the event is and when it fires. */
+    description?: string;
+    /** Subscription arguments (filters): a Zod shape or a Standard Schema object. */
+    inputSchema?: TInput;
+    /** Shape of the delivered `data`: a Zod shape or a Standard Schema object. */
+    payloadSchema: EventSchema;
+    _meta?: Record<string, unknown>;
+}
+/** What `registerEvent` does when the host subscribes and unsubscribes. */
+export interface EventHooks<TArguments, TExtra> {
+    /**
+     * Runs on every `events/subscribe`, including the host's refreshes, once
+     * the callback URL is verified. Hand the subscription to whatever delivers
+     * the events, keyed by `subscription.id`. Throw (e.g. a `ProtocolError`) to
+     * reject it, for instance when the user may not access what the arguments
+     * point to.
+     */
+    onSubscribe(args: TArguments, context: {
+        subscription: EventSubscription;
+        extra: TExtra;
+    }): void | Promise<void>;
+    /** Runs on `events/unsubscribe`. Stop delivering to `subscription.id`. */
+    onUnsubscribe(args: TArguments, context: {
+        subscription: Pick<EventSubscription, "id">;
+        extra: TExtra;
+    }): void | Promise<void>;
+}
+/**
+ * @experimental POST one event to a subscription handed out by `onSubscribe`,
+ * as MCP Events expects: the event envelope, Standard Webhooks signature
+ * headers, a 10 second deadline and, outside development, no requests to
+ * private addresses. Pass the old and new secrets during a rotation so both
+ * sign the delivery. A subscription past `expiresAt` is not posted to.
+ * Retrying is up to the caller. API may change.
+ *
+ * @example
+ * ```ts
+ * const result = await deliverEvent(subscription, {
+ *   name: "comment.created",
+ *   id: comment.id,
+ *   data: { documentId: comment.documentId, excerpt: comment.text.slice(0, 280) },
+ * });
+ * if (!result.ok && result.retryable) {
+ *   await queue.retryLater(subscription, comment);
+ * }
+ * ```
+ *
+ * @see https://docs.skybridge.tech/api-reference/register-event
+ */
+export declare function deliverEvent(subscription: Pick<EventSubscription, "id" | "url"> & {
+    secret: string | string[];
+    expiresAt: Date | string;
+}, event: EventOccurrence): Promise<DeliveryResult>;
+/**
+ * The event types registered on one server, and the `events/*` handlers that
+ * serve them.
+ *
+ * @internal
+ */
+export declare class EventRegistry {
+    private readonly server;
+    private readonly events;
+    constructor(server: Pick<SdkMcpServer["server"], "setRequestHandler">);
+    add(config: EventConfig<EventSchema>, hooks: EventHooks<never, never>): void;
+    private install;
+    private resolve;
+}
+export {};

package/dist/server/events.js

@@ -0,0 +1,318 @@
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import http from "node:http";
+import https from "node:https";
+import { INVALID_PARAMS, ProtocolError, } from "@modelcontextprotocol/server";
+import { globalHttpAgent, globalHttpsAgent } from "request-filtering-agent";
+import { Webhook } from "standardwebhooks";
+import { z } from "zod/v4";
+const EVENTS_ERROR = {
+    NotFound: -32011,
+    Forbidden: -32012,
+    Unsupported: -32014,
+    CallbackEndpointError: -32015,
+};
+const MAX_PAYLOAD_BYTES = 256 * 1024;
+const DELIVERY_TIMEOUT_MS = 10_000;
+const VERIFICATION_CACHE_MS = 60 * 60_000;
+const MIN_TTL_MS = 60_000;
+const DEFAULT_TTL_MS = 30 * 60_000;
+const MAX_TTL_MS = 24 * 60 * 60_000;
+function toStandardSchema(schema) {
+    return "~standard" in schema
+        ? schema
+        : z.object(schema);
+}
+async function validate(schema, value) {
+    const result = await schema["~standard"].validate(value);
+    if (result.issues) {
+        throw new ProtocolError(INVALID_PARAMS, `Invalid arguments: ${result.issues.map((issue) => issue.message).join(", ")}`);
+    }
+    return result.value;
+}
+function canonicalJson(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map(canonicalJson).join(",")}]`;
+    }
+    if (value && typeof value === "object") {
+        return `{${Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+function subscriberOf(ctx) {
+    const authInfo = ctx.http?.authInfo;
+    const subject = authInfo?.extra?.subject;
+    const subscriber = typeof subject === "string" ? subject : authInfo?.clientId;
+    if (!subscriber) {
+        throw new ProtocolError(EVENTS_ERROR.Forbidden, "Webhook subscriptions require an authenticated caller");
+    }
+    return subscriber;
+}
+function isValidSecret(secret) {
+    const encoded = secret.startsWith("whsec_") ? secret.slice(6) : "";
+    if (!/^[A-Za-z0-9+/]+={0,2}$/.test(encoded)) {
+        return false;
+    }
+    const length = Buffer.from(encoded, "base64").length;
+    return length >= 24 && length <= 64;
+}
+const insecureCallbacksAllowed = () => process.env.NODE_ENV !== "production";
+function checkCallbackUrl(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new ProtocolError(INVALID_PARAMS, "delivery.url is not a valid URL");
+    }
+    const allowed = url.protocol === "https:" ||
+        (url.protocol === "http:" && insecureCallbacksAllowed());
+    if (!allowed) {
+        throw new ProtocolError(INVALID_PARAMS, "delivery.url must use https");
+    }
+    return url.href;
+}
+function post(url, headers, body) {
+    const signal = AbortSignal.timeout(DELIVERY_TIMEOUT_MS);
+    const failure = (error) => ({
+        ok: false,
+        reason: signal.aborted
+            ? "timeout"
+            : error?.code?.startsWith("ERR_TLS") || error?.code?.includes("CERT")
+                ? "tls_error"
+                : "connection_refused",
+    });
+    const [client, agent] = url.startsWith("https:")
+        ? [https, globalHttpsAgent]
+        : [http, globalHttpAgent];
+    return new Promise((resolve) => {
+        const request = client.request(url, {
+            method: "POST",
+            headers: { ...headers, "content-length": Buffer.byteLength(body) },
+            signal,
+            ...(!insecureCallbacksAllowed() && { agent }),
+        }, (response) => {
+            const status = response.statusCode ?? 0;
+            const chunks = [];
+            let size = 0;
+            response.on("data", (chunk) => {
+                size += chunk.length;
+                if (size <= 64 * 1024) {
+                    chunks.push(chunk);
+                }
+            });
+            response.on("end", () => {
+                if (status >= 200 && status < 300) {
+                    resolve({ ok: true, body: Buffer.concat(chunks).toString() });
+                }
+                else {
+                    resolve({
+                        ok: false,
+                        status,
+                        reason: status >= 500 ? "http_5xx" : "http_4xx",
+                    });
+                }
+            });
+            response.on("error", (error) => resolve(failure(error)));
+            response.on("close", () => resolve(failure()));
+        });
+        request.on("error", (error) => resolve(failure(error)));
+        request.end(body);
+    });
+}
+function signedPost(subscription, messageId, body) {
+    const signedAt = new Date();
+    const secrets = [subscription.secret].flat();
+    return post(subscription.url, {
+        "content-type": "application/json",
+        "webhook-id": messageId,
+        "webhook-timestamp": String(Math.floor(signedAt.getTime() / 1000)),
+        "webhook-signature": secrets
+            .map((secret) => new Webhook(secret).sign(messageId, signedAt, body))
+            .join(" "),
+        "x-mcp-subscription-id": subscription.id,
+    }, body);
+}
+/**
+ * @experimental POST one event to a subscription handed out by `onSubscribe`,
+ * as MCP Events expects: the event envelope, Standard Webhooks signature
+ * headers, a 10 second deadline and, outside development, no requests to
+ * private addresses. Pass the old and new secrets during a rotation so both
+ * sign the delivery. A subscription past `expiresAt` is not posted to.
+ * Retrying is up to the caller. API may change.
+ *
+ * @example
+ * ```ts
+ * const result = await deliverEvent(subscription, {
+ *   name: "comment.created",
+ *   id: comment.id,
+ *   data: { documentId: comment.documentId, excerpt: comment.text.slice(0, 280) },
+ * });
+ * if (!result.ok && result.retryable) {
+ *   await queue.retryLater(subscription, comment);
+ * }
+ * ```
+ *
+ * @see https://docs.skybridge.tech/api-reference/register-event
+ */
+export async function deliverEvent(subscription, event) {
+    if (!(new Date(subscription.expiresAt).getTime() > Date.now())) {
+        return { ok: false, reason: "expired", retryable: false };
+    }
+    const body = JSON.stringify({
+        eventId: event.id,
+        name: event.name,
+        timestamp: (event.timestamp ?? new Date()).toISOString(),
+        data: event.data,
+        cursor: null,
+    });
+    if (Buffer.byteLength(body) > MAX_PAYLOAD_BYTES) {
+        throw new Error(`Event "${event.name}" payload exceeds ${MAX_PAYLOAD_BYTES} bytes; send a summary and expose a tool to fetch the rest.`);
+    }
+    const outcome = await signedPost(subscription, event.id, body);
+    if (outcome.ok) {
+        return { ok: true };
+    }
+    const status = outcome.status ?? 0;
+    return {
+        ...outcome,
+        retryable: status !== 410 && status !== 413 && (status < 300 || status >= 400),
+    };
+}
+const verifiedCallbacks = new Map();
+async function verifyCallback(subscriber, subscription) {
+    const key = `${subscriber}\n${subscription.url}`;
+    const now = Date.now();
+    if ((verifiedCallbacks.get(key) ?? 0) > now) {
+        return;
+    }
+    const challenge = randomBytes(24).toString("base64url");
+    const outcome = await signedPost(subscription, `msg_verification_${randomBytes(12).toString("hex")}`, JSON.stringify({ type: "verification", challenge }));
+    let echoed;
+    if (outcome.ok) {
+        try {
+            echoed = JSON.parse(outcome.body)?.challenge;
+        }
+        catch { }
+    }
+    const matched = typeof echoed === "string" &&
+        echoed.length === challenge.length &&
+        timingSafeEqual(Buffer.from(echoed), Buffer.from(challenge));
+    if (!matched) {
+        throw new ProtocolError(EVENTS_ERROR.CallbackEndpointError, "Callback endpoint verification failed", { reason: outcome.ok ? "challenge_failed" : outcome.reason });
+    }
+    for (const [cached, until] of verifiedCallbacks) {
+        if (until <= now) {
+            verifiedCallbacks.delete(cached);
+        }
+    }
+    verifiedCallbacks.set(key, now + VERIFICATION_CACHE_MS);
+}
+const SubscriptionKeySchema = z.object({
+    name: z.string(),
+    arguments: z.record(z.string(), z.unknown()).optional(),
+    delivery: z.object({ url: z.string() }),
+});
+const SubscribeParamsSchema = SubscriptionKeySchema.extend({
+    delivery: z.object({
+        mode: z.string().optional(),
+        url: z.string(),
+        secret: z.string(),
+    }),
+    cursor: z.string().nullable().optional(),
+    ttlMs: z.number().nullable().optional(),
+});
+/**
+ * The event types registered on one server, and the `events/*` handlers that
+ * serve them.
+ *
+ * @internal
+ */
+export class EventRegistry {
+    server;
+    events = new Map();
+    constructor(server) {
+        this.server = server;
+    }
+    add(config, hooks) {
+        if (this.events.has(config.name)) {
+            throw new Error(`Event "${config.name}" is already registered.`);
+        }
+        if (this.events.size === 0) {
+            this.install();
+        }
+        this.events.set(config.name, {
+            name: config.name,
+            description: config.description,
+            inputSchema: toStandardSchema(config.inputSchema ?? {}),
+            payloadSchema: toStandardSchema(config.payloadSchema),
+            _meta: config._meta,
+            hooks,
+        });
+    }
+    install() {
+        this.server.setRequestHandler("events/list", { params: z.object({ cursor: z.string().optional() }).optional() }, () => ({
+            events: [...this.events.values()].map((event) => ({
+                name: event.name,
+                ...(event.description && { description: event.description }),
+                delivery: ["webhook"],
+                inputSchema: event.inputSchema["~standard"].jsonSchema.input({
+                    target: "draft-2020-12",
+                }),
+                payloadSchema: event.payloadSchema["~standard"].jsonSchema.output({
+                    target: "draft-2020-12",
+                }),
+                ...(event._meta && { _meta: event._meta }),
+            })),
+        }));
+        this.server.setRequestHandler("events/subscribe", { params: SubscribeParamsSchema }, async (params, ctx) => {
+            if (params.delivery.mode && params.delivery.mode !== "webhook") {
+                throw new ProtocolError(EVENTS_ERROR.Unsupported, `Unsupported delivery mode: ${params.delivery.mode}`, { feature: "deliveryMode", value: params.delivery.mode });
+            }
+            if (!isValidSecret(params.delivery.secret)) {
+                throw new ProtocolError(INVALID_PARAMS, "delivery.secret must be whsec_ followed by base64 of 24 to 64 bytes");
+            }
+            const { event, subscriber, args, id, url } = await this.resolve(params, ctx);
+            const ttl = params.ttlMs === null ? MAX_TTL_MS : (params.ttlMs ?? DEFAULT_TTL_MS);
+            const subscription = {
+                id,
+                url,
+                secret: params.delivery.secret,
+                expiresAt: new Date(Date.now() + Math.min(Math.max(ttl, MIN_TTL_MS), MAX_TTL_MS)),
+            };
+            await verifyCallback(subscriber, subscription);
+            await event.hooks.onSubscribe(args, { subscription, extra: ctx });
+            return {
+                id,
+                refreshBefore: subscription.expiresAt.toISOString(),
+                cursor: null,
+                truncated: false,
+            };
+        });
+        this.server.setRequestHandler("events/unsubscribe", { params: SubscriptionKeySchema }, async (params, ctx) => {
+            const { event, args, id } = await this.resolve(params, ctx);
+            await event.hooks.onUnsubscribe(args, {
+                subscription: { id },
+                extra: ctx,
+            });
+            return {};
+        });
+    }
+    async resolve(params, ctx) {
+        const event = this.events.get(params.name);
+        if (!event) {
+            throw new ProtocolError(EVENTS_ERROR.NotFound, `Unknown event: ${params.name}`, { kind: "event" });
+        }
+        const url = checkCallbackUrl(params.delivery.url);
+        const subscriber = subscriberOf(ctx);
+        const rawArguments = params.arguments ?? {};
+        const args = await validate(event.inputSchema, rawArguments);
+        const hash = createHash("sha256")
+            .update(canonicalJson([subscriber, url, event.name, rawArguments]))
+            .digest("hex");
+        return { event, subscriber, args, url, id: `sub_${hash.slice(0, 32)}` };
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/server/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/server/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EACL,cAAc,EACd,aAAa,GAKd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,MAAM,YAAY,GAAG;IACnB,QAAQ,EAAE,CAAC,KAAK;IAChB,SAAS,EAAE,CAAC,KAAK;IACjB,WAAW,EAAE,CAAC,KAAK;IACnB,qBAAqB,EAAE,CAAC,KAAK;CACrB,CAAC;AAEX,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC1C,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AACnC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AA+FpC,SAAS,gBAAgB,CAAC,MAAmB;IAC3C,OAAO,WAAW,IAAI,MAAM;QAC1B,CAAC,CAAE,MAAiC;QACpC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAkC,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAA8B,EAC9B,KAAc;IAEd,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,aAAa,CACrB,cAAc,EACd,sBAAsB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAgC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B,IAAI,EAAE;aACN,GAAG,CACF,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CACrF;aACA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,GAAkB;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;IACpC,MAAM,OAAO,GAAG,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,SAAS,EACtB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE7E,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GACX,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,wBAAwB,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAMD,SAAS,IAAI,CACX,GAAW,EACX,OAA+B,EAC/B,IAAY;IAEZ,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,CAAC,KAA6B,EAAe,EAAE,CAAC,CAAC;QAC/D,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM,CAAC,OAAO;YACpB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACnE,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,oBAAoB;KAC3B,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAC3B,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAC5B,GAAG,EACH;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;YAClE,MAAM;YACN,GAAG,CAAC,CAAC,wBAAwB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SAC9C,EACD,CAAC,QAAQ,EAAE,EAAE;YACX,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;YACxC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACpC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;oBAClC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC;wBACN,EAAE,EAAE,KAAK;wBACT,MAAM;wBACN,MAAM,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;qBAChD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC,CACF,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CACjB,YAAoE,EACpE,SAAiB,EACjB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,IAAI,CACT,YAAY,CAAC,GAAG,EAChB;QACE,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,SAAS;QACvB,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAClE,mBAAmB,EAAE,OAAO;aACzB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;aACpE,IAAI,CAAC,GAAG,CAAC;QACZ,uBAAuB,EAAE,YAAY,CAAC,EAAE;KACzC,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAGC,EACD,KAAsB;IAEtB,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QACxD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,iBAAiB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,IAAI,qBAAqB,iBAAiB,6DAA6D,CACxH,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EACP,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,YAA+B;IAE/B,MAAM,GAAG,GAAG,GAAG,UAAU,KAAK,YAAY,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,YAAY,EACZ,oBAAoB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EACrD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CACpD,CAAC;IACF,IAAI,MAAe,CAAC;IACpB,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GACX,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAClC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,qBAAqB,EAClC,uCAAuC,EACvC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAChD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,qBAAqB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,MAAM,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAIL;IAHF,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE7D,YACmB,MAAyD;QAAzD,WAAM,GAAN,MAAM,CAAmD;IACzE,CAAC;IAEJ,GAAG,CAAC,MAAgC,EAAE,KAA+B;QACnE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,IAAI,0BAA0B,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,gBAAgB,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;YACvD,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC;YACrD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3B,aAAa,EACb,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAClE,GAAG,EAAE,CAAC,CAAC;YACL,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAChD,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC5D,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACrB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;oBAC3D,MAAM,EAAE,eAAe;iBACxB,CAAC;gBACF,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;oBAChE,MAAM,EAAE,eAAe;iBACxB,CAAC;gBACF,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aAC3C,CAAC,CAAC;SACJ,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3B,kBAAkB,EAClB,EAAE,MAAM,EAAE,qBAAqB,EAAE,EACjC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/D,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,WAAW,EACxB,8BAA8B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EACpD,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CACzD,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,aAAa,CACrB,cAAc,EACd,qEAAqE,CACtE,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7D,MAAM,EACN,GAAG,CACJ,CAAC;YACF,MAAM,GAAG,GACP,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;YACxE,MAAM,YAAY,GAAsB;gBACtC,EAAE;gBACF,GAAG;gBACH,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC9B,SAAS,EAAE,IAAI,IAAI,CACjB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAC7D;aACF,CAAC;YACF,MAAM,cAAc,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,OAAO;gBACL,EAAE;gBACF,aAAa,EAAE,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE;gBACnD,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAC3B,oBAAoB,EACpB,EAAE,MAAM,EAAE,qBAAqB,EAAE,EACjC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YACpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5D,MAAM,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE;gBACpC,YAAY,EAAE,EAAE,EAAE,EAAE;gBACpB,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAA6C,EAC7C,GAAkB;QAElB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,aAAa,CACrB,YAAY,CAAC,QAAQ,EACrB,kBAAkB,MAAM,CAAC,IAAI,EAAE,EAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;aAClE,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;CACF","sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport http from \"node:http\";\nimport https from \"node:https\";\nimport {\n  INVALID_PARAMS,\n  ProtocolError,\n  type McpServer as SdkMcpServer,\n  type ServerContext,\n  type StandardSchemaV1,\n  type StandardSchemaWithJSON,\n} from \"@modelcontextprotocol/server\";\nimport { globalHttpAgent, globalHttpsAgent } from \"request-filtering-agent\";\nimport { Webhook } from \"standardwebhooks\";\nimport { z } from \"zod/v4\";\n\nconst EVENTS_ERROR = {\n  NotFound: -32011,\n  Forbidden: -32012,\n  Unsupported: -32014,\n  CallbackEndpointError: -32015,\n} as const;\n\nconst MAX_PAYLOAD_BYTES = 256 * 1024;\nconst DELIVERY_TIMEOUT_MS = 10_000;\nconst VERIFICATION_CACHE_MS = 60 * 60_000;\nconst MIN_TTL_MS = 60_000;\nconst DEFAULT_TTL_MS = 30 * 60_000;\nconst MAX_TTL_MS = 24 * 60 * 60_000;\n\n/**\n * A webhook subscription, as passed to `onSubscribe`. Whatever delivers the\n * events POSTs them to `url`, signed with `secret`, until `expiresAt`.\n */\nexport interface EventSubscription {\n  /** Stable across refreshes: the same user subscribing to the same event with the same arguments and callback gets the same `id`. */\n  id: string;\n  /** Callback URL deliveries are POSTed to. */\n  url: string;\n  /** Standard Webhooks signing secret (`whsec_…`). A refresh may carry a new one. */\n  secret: string;\n  /** When the subscription lapses unless the host refreshes it. */\n  expiresAt: Date;\n}\n\n/** An event occurrence, as passed to {@link deliverEvent}. */\nexport interface EventOccurrence {\n  /** Event type name, as registered with `registerEvent`. */\n  name: string;\n  /** Stable identifier the host uses to drop duplicates, ideally the upstream's. Reuse it when retrying. */\n  id: string;\n  /** When the event happened. Defaults to now. */\n  timestamp?: Date;\n  /** Payload matching the event's `payloadSchema`. */\n  data: unknown;\n}\n\n/** Outcome of {@link deliverEvent}. Retry with the same event `id` when `retryable`. */\nexport type DeliveryResult =\n  | { ok: true }\n  | { ok: false; reason: string; retryable: boolean; status?: number };\n\ntype EventSchema =\n  | Record<string, StandardSchemaWithJSON>\n  | StandardSchemaWithJSON;\n\nexport type InferEventSchema<T extends EventSchema> =\n  T extends StandardSchemaWithJSON\n    ? StandardSchemaV1.InferOutput<T>\n    : T extends Record<string, StandardSchemaWithJSON>\n      ? {\n          [K in keyof T as undefined extends StandardSchemaV1.InferOutput<T[K]>\n            ? never\n            : K]: StandardSchemaV1.InferOutput<T[K]>;\n        } & {\n          [K in keyof T as undefined extends StandardSchemaV1.InferOutput<T[K]>\n            ? K\n            : never]?: StandardSchemaV1.InferOutput<T[K]>;\n        }\n      : never;\n\n/** The `registerEvent` config: how the event type is described in `events/list`. */\nexport interface EventConfig<TInput extends EventSchema> {\n  /** Stable, specific name such as `comment.created`. */\n  name: string;\n  /** What the event is and when it fires. */\n  description?: string;\n  /** Subscription arguments (filters): a Zod shape or a Standard Schema object. */\n  inputSchema?: TInput;\n  /** Shape of the delivered `data`: a Zod shape or a Standard Schema object. */\n  payloadSchema: EventSchema;\n  _meta?: Record<string, unknown>;\n}\n\n/** What `registerEvent` does when the host subscribes and unsubscribes. */\nexport interface EventHooks<TArguments, TExtra> {\n  /**\n   * Runs on every `events/subscribe`, including the host's refreshes, once\n   * the callback URL is verified. Hand the subscription to whatever delivers\n   * the events, keyed by `subscription.id`. Throw (e.g. a `ProtocolError`) to\n   * reject it, for instance when the user may not access what the arguments\n   * point to.\n   */\n  onSubscribe(\n    args: TArguments,\n    context: { subscription: EventSubscription; extra: TExtra },\n  ): void | Promise<void>;\n  /** Runs on `events/unsubscribe`. Stop delivering to `subscription.id`. */\n  onUnsubscribe(\n    args: TArguments,\n    context: { subscription: Pick<EventSubscription, \"id\">; extra: TExtra },\n  ): void | Promise<void>;\n}\n\ntype RegisteredEvent = {\n  name: string;\n  description?: string;\n  inputSchema: StandardSchemaWithJSON;\n  payloadSchema: StandardSchemaWithJSON;\n  _meta?: Record<string, unknown>;\n  hooks: EventHooks<Record<string, unknown>, ServerContext>;\n};\n\nfunction toStandardSchema(schema: EventSchema): StandardSchemaWithJSON {\n  return \"~standard\" in schema\n    ? (schema as StandardSchemaWithJSON)\n    : z.object(schema as unknown as z.ZodRawShape);\n}\n\nasync function validate(\n  schema: StandardSchemaWithJSON,\n  value: unknown,\n): Promise<Record<string, unknown>> {\n  const result = await schema[\"~standard\"].validate(value);\n  if (result.issues) {\n    throw new ProtocolError(\n      INVALID_PARAMS,\n      `Invalid arguments: ${result.issues.map((issue) => issue.message).join(\", \")}`,\n    );\n  }\n  return result.value as Record<string, unknown>;\n}\n\nfunction canonicalJson(value: unknown): string {\n  if (Array.isArray(value)) {\n    return `[${value.map(canonicalJson).join(\",\")}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `{${Object.keys(value)\n      .sort()\n      .map(\n        (key) =>\n          `${JSON.stringify(key)}:${canonicalJson((value as Record<string, unknown>)[key])}`,\n      )\n      .join(\",\")}}`;\n  }\n  return JSON.stringify(value);\n}\n\nfunction subscriberOf(ctx: ServerContext): string {\n  const authInfo = ctx.http?.authInfo;\n  const subject = authInfo?.extra?.subject;\n  const subscriber = typeof subject === \"string\" ? subject : authInfo?.clientId;\n  if (!subscriber) {\n    throw new ProtocolError(\n      EVENTS_ERROR.Forbidden,\n      \"Webhook subscriptions require an authenticated caller\",\n    );\n  }\n  return subscriber;\n}\n\nfunction isValidSecret(secret: string): boolean {\n  const encoded = secret.startsWith(\"whsec_\") ? secret.slice(6) : \"\";\n  if (!/^[A-Za-z0-9+/]+={0,2}$/.test(encoded)) {\n    return false;\n  }\n  const length = Buffer.from(encoded, \"base64\").length;\n  return length >= 24 && length <= 64;\n}\n\nconst insecureCallbacksAllowed = () => process.env.NODE_ENV !== \"production\";\n\nfunction checkCallbackUrl(raw: string): string {\n  let url: URL;\n  try {\n    url = new URL(raw);\n  } catch {\n    throw new ProtocolError(INVALID_PARAMS, \"delivery.url is not a valid URL\");\n  }\n  const allowed =\n    url.protocol === \"https:\" ||\n    (url.protocol === \"http:\" && insecureCallbacksAllowed());\n  if (!allowed) {\n    throw new ProtocolError(INVALID_PARAMS, \"delivery.url must use https\");\n  }\n  return url.href;\n}\n\ntype PostOutcome =\n  | { ok: true; body: string }\n  | { ok: false; status?: number; reason: string };\n\nfunction post(\n  url: string,\n  headers: Record<string, string>,\n  body: string,\n): Promise<PostOutcome> {\n  const signal = AbortSignal.timeout(DELIVERY_TIMEOUT_MS);\n  const failure = (error?: NodeJS.ErrnoException): PostOutcome => ({\n    ok: false,\n    reason: signal.aborted\n      ? \"timeout\"\n      : error?.code?.startsWith(\"ERR_TLS\") || error?.code?.includes(\"CERT\")\n        ? \"tls_error\"\n        : \"connection_refused\",\n  });\n  const [client, agent] = url.startsWith(\"https:\")\n    ? [https, globalHttpsAgent]\n    : [http, globalHttpAgent];\n  return new Promise((resolve) => {\n    const request = client.request(\n      url,\n      {\n        method: \"POST\",\n        headers: { ...headers, \"content-length\": Buffer.byteLength(body) },\n        signal,\n        ...(!insecureCallbacksAllowed() && { agent }),\n      },\n      (response) => {\n        const status = response.statusCode ?? 0;\n        const chunks: Buffer[] = [];\n        let size = 0;\n        response.on(\"data\", (chunk: Buffer) => {\n          size += chunk.length;\n          if (size <= 64 * 1024) {\n            chunks.push(chunk);\n          }\n        });\n        response.on(\"end\", () => {\n          if (status >= 200 && status < 300) {\n            resolve({ ok: true, body: Buffer.concat(chunks).toString() });\n          } else {\n            resolve({\n              ok: false,\n              status,\n              reason: status >= 500 ? \"http_5xx\" : \"http_4xx\",\n            });\n          }\n        });\n        response.on(\"error\", (error) => resolve(failure(error)));\n        response.on(\"close\", () => resolve(failure()));\n      },\n    );\n    request.on(\"error\", (error) => resolve(failure(error)));\n    request.end(body);\n  });\n}\n\nfunction signedPost(\n  subscription: { id: string; url: string; secret: string | string[] },\n  messageId: string,\n  body: string,\n): Promise<PostOutcome> {\n  const signedAt = new Date();\n  const secrets = [subscription.secret].flat();\n  return post(\n    subscription.url,\n    {\n      \"content-type\": \"application/json\",\n      \"webhook-id\": messageId,\n      \"webhook-timestamp\": String(Math.floor(signedAt.getTime() / 1000)),\n      \"webhook-signature\": secrets\n        .map((secret) => new Webhook(secret).sign(messageId, signedAt, body))\n        .join(\" \"),\n      \"x-mcp-subscription-id\": subscription.id,\n    },\n    body,\n  );\n}\n\n/**\n * @experimental POST one event to a subscription handed out by `onSubscribe`,\n * as MCP Events expects: the event envelope, Standard Webhooks signature\n * headers, a 10 second deadline and, outside development, no requests to\n * private addresses. Pass the old and new secrets during a rotation so both\n * sign the delivery. A subscription past `expiresAt` is not posted to.\n * Retrying is up to the caller. API may change.\n *\n * @example\n * ```ts\n * const result = await deliverEvent(subscription, {\n *   name: \"comment.created\",\n *   id: comment.id,\n *   data: { documentId: comment.documentId, excerpt: comment.text.slice(0, 280) },\n * });\n * if (!result.ok && result.retryable) {\n *   await queue.retryLater(subscription, comment);\n * }\n * ```\n *\n * @see https://docs.skybridge.tech/api-reference/register-event\n */\nexport async function deliverEvent(\n  subscription: Pick<EventSubscription, \"id\" | \"url\"> & {\n    secret: string | string[];\n    expiresAt: Date | string;\n  },\n  event: EventOccurrence,\n): Promise<DeliveryResult> {\n  if (!(new Date(subscription.expiresAt).getTime() > Date.now())) {\n    return { ok: false, reason: \"expired\", retryable: false };\n  }\n  const body = JSON.stringify({\n    eventId: event.id,\n    name: event.name,\n    timestamp: (event.timestamp ?? new Date()).toISOString(),\n    data: event.data,\n    cursor: null,\n  });\n  if (Buffer.byteLength(body) > MAX_PAYLOAD_BYTES) {\n    throw new Error(\n      `Event \"${event.name}\" payload exceeds ${MAX_PAYLOAD_BYTES} bytes; send a summary and expose a tool to fetch the rest.`,\n    );\n  }\n  const outcome = await signedPost(subscription, event.id, body);\n  if (outcome.ok) {\n    return { ok: true };\n  }\n  const status = outcome.status ?? 0;\n  return {\n    ...outcome,\n    retryable:\n      status !== 410 && status !== 413 && (status < 300 || status >= 400),\n  };\n}\n\nconst verifiedCallbacks = new Map<string, number>();\n\nasync function verifyCallback(\n  subscriber: string,\n  subscription: EventSubscription,\n): Promise<void> {\n  const key = `${subscriber}\\n${subscription.url}`;\n  const now = Date.now();\n  if ((verifiedCallbacks.get(key) ?? 0) > now) {\n    return;\n  }\n  const challenge = randomBytes(24).toString(\"base64url\");\n  const outcome = await signedPost(\n    subscription,\n    `msg_verification_${randomBytes(12).toString(\"hex\")}`,\n    JSON.stringify({ type: \"verification\", challenge }),\n  );\n  let echoed: unknown;\n  if (outcome.ok) {\n    try {\n      echoed = JSON.parse(outcome.body)?.challenge;\n    } catch {}\n  }\n  const matched =\n    typeof echoed === \"string\" &&\n    echoed.length === challenge.length &&\n    timingSafeEqual(Buffer.from(echoed), Buffer.from(challenge));\n  if (!matched) {\n    throw new ProtocolError(\n      EVENTS_ERROR.CallbackEndpointError,\n      \"Callback endpoint verification failed\",\n      { reason: outcome.ok ? \"challenge_failed\" : outcome.reason },\n    );\n  }\n  for (const [cached, until] of verifiedCallbacks) {\n    if (until <= now) {\n      verifiedCallbacks.delete(cached);\n    }\n  }\n  verifiedCallbacks.set(key, now + VERIFICATION_CACHE_MS);\n}\n\nconst SubscriptionKeySchema = z.object({\n  name: z.string(),\n  arguments: z.record(z.string(), z.unknown()).optional(),\n  delivery: z.object({ url: z.string() }),\n});\n\nconst SubscribeParamsSchema = SubscriptionKeySchema.extend({\n  delivery: z.object({\n    mode: z.string().optional(),\n    url: z.string(),\n    secret: z.string(),\n  }),\n  cursor: z.string().nullable().optional(),\n  ttlMs: z.number().nullable().optional(),\n});\n\n/**\n * The event types registered on one server, and the `events/*` handlers that\n * serve them.\n *\n * @internal\n */\nexport class EventRegistry {\n  private readonly events = new Map<string, RegisteredEvent>();\n\n  constructor(\n    private readonly server: Pick<SdkMcpServer[\"server\"], \"setRequestHandler\">,\n  ) {}\n\n  add(config: EventConfig<EventSchema>, hooks: EventHooks<never, never>): void {\n    if (this.events.has(config.name)) {\n      throw new Error(`Event \"${config.name}\" is already registered.`);\n    }\n    if (this.events.size === 0) {\n      this.install();\n    }\n    this.events.set(config.name, {\n      name: config.name,\n      description: config.description,\n      inputSchema: toStandardSchema(config.inputSchema ?? {}),\n      payloadSchema: toStandardSchema(config.payloadSchema),\n      _meta: config._meta,\n      hooks,\n    });\n  }\n\n  private install(): void {\n    this.server.setRequestHandler(\n      \"events/list\",\n      { params: z.object({ cursor: z.string().optional() }).optional() },\n      () => ({\n        events: [...this.events.values()].map((event) => ({\n          name: event.name,\n          ...(event.description && { description: event.description }),\n          delivery: [\"webhook\"],\n          inputSchema: event.inputSchema[\"~standard\"].jsonSchema.input({\n            target: \"draft-2020-12\",\n          }),\n          payloadSchema: event.payloadSchema[\"~standard\"].jsonSchema.output({\n            target: \"draft-2020-12\",\n          }),\n          ...(event._meta && { _meta: event._meta }),\n        })),\n      }),\n    );\n\n    this.server.setRequestHandler(\n      \"events/subscribe\",\n      { params: SubscribeParamsSchema },\n      async (params, ctx) => {\n        if (params.delivery.mode && params.delivery.mode !== \"webhook\") {\n          throw new ProtocolError(\n            EVENTS_ERROR.Unsupported,\n            `Unsupported delivery mode: ${params.delivery.mode}`,\n            { feature: \"deliveryMode\", value: params.delivery.mode },\n          );\n        }\n        if (!isValidSecret(params.delivery.secret)) {\n          throw new ProtocolError(\n            INVALID_PARAMS,\n            \"delivery.secret must be whsec_ followed by base64 of 24 to 64 bytes\",\n          );\n        }\n        const { event, subscriber, args, id, url } = await this.resolve(\n          params,\n          ctx,\n        );\n        const ttl =\n          params.ttlMs === null ? MAX_TTL_MS : (params.ttlMs ?? DEFAULT_TTL_MS);\n        const subscription: EventSubscription = {\n          id,\n          url,\n          secret: params.delivery.secret,\n          expiresAt: new Date(\n            Date.now() + Math.min(Math.max(ttl, MIN_TTL_MS), MAX_TTL_MS),\n          ),\n        };\n        await verifyCallback(subscriber, subscription);\n        await event.hooks.onSubscribe(args, { subscription, extra: ctx });\n        return {\n          id,\n          refreshBefore: subscription.expiresAt.toISOString(),\n          cursor: null,\n          truncated: false,\n        };\n      },\n    );\n\n    this.server.setRequestHandler(\n      \"events/unsubscribe\",\n      { params: SubscriptionKeySchema },\n      async (params, ctx) => {\n        const { event, args, id } = await this.resolve(params, ctx);\n        await event.hooks.onUnsubscribe(args, {\n          subscription: { id },\n          extra: ctx,\n        });\n        return {};\n      },\n    );\n  }\n\n  private async resolve(\n    params: z.infer<typeof SubscriptionKeySchema>,\n    ctx: ServerContext,\n  ) {\n    const event = this.events.get(params.name);\n    if (!event) {\n      throw new ProtocolError(\n        EVENTS_ERROR.NotFound,\n        `Unknown event: ${params.name}`,\n        { kind: \"event\" },\n      );\n    }\n    const url = checkCallbackUrl(params.delivery.url);\n    const subscriber = subscriberOf(ctx);\n    const rawArguments = params.arguments ?? {};\n    const args = await validate(event.inputSchema, rawArguments);\n    const hash = createHash(\"sha256\")\n      .update(canonicalJson([subscriber, url, event.name, rawArguments]))\n      .digest(\"hex\");\n    return { event, subscriber, args, url, id: `sub_${hash.slice(0, 32)}` };\n  }\n}\n"]}

package/dist/server/events.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server/events.test.js

@@ -0,0 +1,172 @@
+import { createHmac, randomBytes } from "node:crypto";
+import http from "node:http";
+import net, {} from "node:net";
+import { Client, InMemoryTransport } from "@modelcontextprotocol/client";
+import { afterEach, describe, expect, it } from "vitest";
+import { z } from "zod";
+import { deliverEvent, Skybridge } from "./index.js";
+async function startReceiver() {
+    const received = [];
+    const state = { dropResponses: false };
+    const server = http.createServer((req, res) => {
+        let body = "";
+        req.on("data", (chunk) => {
+            body += chunk;
+        });
+        req.on("end", () => {
+            received.push({ headers: req.headers, body });
+            if (state.dropResponses) {
+                res.writeHead(200, { "content-length": "1000" });
+                res.write("partial");
+                setTimeout(() => res.socket?.destroy(), 20);
+                return;
+            }
+            const parsed = JSON.parse(body);
+            res.setHeader("content-type", "application/json");
+            res.end(parsed.type === "verification"
+                ? JSON.stringify({ challenge: parsed.challenge })
+                : "{}");
+        });
+    });
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    const { port } = server.address();
+    return { url: `http://127.0.0.1:${port}/hooks`, received, server, state };
+}
+let cleanup;
+afterEach(async () => {
+    await cleanup?.();
+    cleanup = undefined;
+});
+describe("MCP events", () => {
+    it("verifies the callback, hands the subscription to the hooks, and delivers signed events", async () => {
+        const receiver = await startReceiver();
+        const subscriptions = new Map();
+        const app = new Skybridge({
+            name: "t",
+            version: "0.0.1",
+            handler: (server) => server.registerEvent({
+                name: "comment.created",
+                inputSchema: { documentId: z.string() },
+                payloadSchema: { documentId: z.string(), excerpt: z.string() },
+            }, {
+                onSubscribe: (_args, { subscription }) => {
+                    subscriptions.set(subscription.id, subscription);
+                },
+                onUnsubscribe: (_args, { subscription }) => {
+                    subscriptions.delete(subscription.id);
+                },
+            }),
+        });
+        const [clientTransport, serverTransport] = InMemoryTransport.createLinkedPair();
+        const send = clientTransport.send.bind(clientTransport);
+        clientTransport.send = (message) => send(message, {
+            authInfo: {
+                token: "t",
+                clientId: "chatgpt",
+                scopes: [],
+                extra: { subject: "user-1" },
+            },
+        });
+        const instance = await app.createServerInstance();
+        await instance.connect(serverTransport);
+        const client = new Client({ name: "c", version: "0.0.1" });
+        await client.connect(clientTransport);
+        cleanup = async () => {
+            await client.close();
+            await instance.close();
+            receiver.server.close();
+        };
+        expect(instance.getCapabilities().events).toEqual({});
+        const list = await client.request({ method: "events/list", params: {} }, z.object({
+            events: z.array(z.object({ name: z.string(), delivery: z.array(z.string()) })),
+        }));
+        expect(list.events).toEqual([
+            expect.objectContaining({
+                name: "comment.created",
+                delivery: ["webhook"],
+            }),
+        ]);
+        const secret = `whsec_${randomBytes(32).toString("base64")}`;
+        const subscription = await client.request({
+            method: "events/subscribe",
+            params: {
+                name: "comment.created",
+                arguments: { documentId: "doc-1" },
+                delivery: { mode: "webhook", url: receiver.url, secret },
+            },
+        }, z.object({ id: z.string(), refreshBefore: z.string() }));
+        expect(receiver.received.map(({ body }) => JSON.parse(body).type)).toEqual([
+            "verification",
+        ]);
+        const stored = subscriptions.get(subscription.id);
+        expect(stored).toMatchObject({ url: receiver.url, secret });
+        if (!stored) {
+            return;
+        }
+        await expect(deliverEvent(stored, {
+            name: "comment.created",
+            id: "evt_1",
+            data: { documentId: "doc-1", excerpt: "hello" },
+        })).resolves.toEqual({ ok: true });
+        expect(receiver.received).toHaveLength(2);
+        const [, delivery] = receiver.received;
+        expect(JSON.parse(delivery?.body ?? "")).toMatchObject({
+            eventId: "evt_1",
+            name: "comment.created",
+            data: { documentId: "doc-1", excerpt: "hello" },
+        });
+        const headers = delivery?.headers ?? {};
+        expect(headers["x-mcp-subscription-id"]).toBe(subscription.id);
+        const expected = createHmac("sha256", Buffer.from(secret.slice(6), "base64"))
+            .update(`${headers["webhook-id"]}.${headers["webhook-timestamp"]}.${delivery?.body}`)
+            .digest("base64");
+        expect(headers["webhook-signature"]).toBe(`v1,${expected}`);
+        receiver.state.dropResponses = true;
+        const delivered = deliverEvent(stored, {
+            name: "comment.created",
+            id: "evt_2",
+            data: { documentId: "doc-1", excerpt: "dropped" },
+        });
+        await expect(Promise.race([
+            delivered,
+            new Promise((resolve) => setTimeout(() => resolve("hung"), 2_000)),
+        ])).resolves.toMatchObject({ ok: false, retryable: true });
+        await client.request({
+            method: "events/unsubscribe",
+            params: {
+                name: "comment.created",
+                arguments: { documentId: "doc-1" },
+                delivery: { url: receiver.url },
+            },
+        }, z.object({}));
+        expect(subscriptions.size).toBe(0);
+        let connections = 0;
+        const privateTarget = net.createServer((socket) => {
+            connections += 1;
+            socket.destroy();
+        });
+        await new Promise((resolve) => privateTarget.listen(0, "127.0.0.1", resolve));
+        const { port: privatePort } = privateTarget.address();
+        const nodeEnv = process.env.NODE_ENV;
+        process.env.NODE_ENV = "production";
+        try {
+            await expect(client.request({
+                method: "events/subscribe",
+                params: {
+                    name: "comment.created",
+                    arguments: { documentId: "doc-1" },
+                    delivery: {
+                        url: `https://127.0.0.1:${privatePort}/hooks`,
+                        secret,
+                    },
+                },
+            }, z.object({}))).rejects.toMatchObject({ code: -32015 });
+            expect(connections).toBe(0);
+        }
+        finally {
+            process.env.NODE_ENV = nodeEnv;
+            privateTarget.close();
+        }
+    });
+});
+//# sourceMappingURL=events.test.js.map