ssh-mcp-pro 1.1.4 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (152) hide show
  1. package/CHANGELOG.md +29 -0
  2. package/README.md +58 -10
  3. package/REGISTRY_SUBMISSION.md +3 -3
  4. package/SECURITY.md +4 -0
  5. package/SECURITY_DECISIONS.md +32 -1
  6. package/dist/config.d.ts +1 -0
  7. package/dist/config.d.ts.map +1 -1
  8. package/dist/config.js +4 -0
  9. package/dist/config.js.map +1 -1
  10. package/dist/connector-profile.d.ts +3 -0
  11. package/dist/connector-profile.d.ts.map +1 -1
  12. package/dist/connector-profile.js +36 -14
  13. package/dist/connector-profile.js.map +1 -1
  14. package/dist/http-security.d.ts.map +1 -1
  15. package/dist/http-security.js +19 -4
  16. package/dist/http-security.js.map +1 -1
  17. package/dist/http-server-lifecycle.d.ts +17 -0
  18. package/dist/http-server-lifecycle.d.ts.map +1 -0
  19. package/dist/http-server-lifecycle.js +122 -0
  20. package/dist/http-server-lifecycle.js.map +1 -0
  21. package/dist/http-server-router.d.ts +28 -0
  22. package/dist/http-server-router.d.ts.map +1 -0
  23. package/dist/http-server-router.js +108 -0
  24. package/dist/http-server-router.js.map +1 -0
  25. package/dist/http-server-runtime.d.ts +21 -0
  26. package/dist/http-server-runtime.d.ts.map +1 -0
  27. package/dist/http-server-runtime.js +415 -0
  28. package/dist/http-server-runtime.js.map +1 -0
  29. package/dist/http-session-registry.d.ts +35 -0
  30. package/dist/http-session-registry.d.ts.map +1 -0
  31. package/dist/http-session-registry.js +96 -0
  32. package/dist/http-session-registry.js.map +1 -0
  33. package/dist/index.js +12 -5
  34. package/dist/index.js.map +1 -1
  35. package/dist/mcp.d.ts +1 -1
  36. package/dist/mcp.js +1 -1
  37. package/dist/prompts.d.ts.map +1 -1
  38. package/dist/prompts.js +8 -1
  39. package/dist/prompts.js.map +1 -1
  40. package/dist/remote/agent-cli.d.ts.map +1 -1
  41. package/dist/remote/agent-cli.js +20 -1
  42. package/dist/remote/agent-cli.js.map +1 -1
  43. package/dist/remote/agent-connection-lifecycle.d.ts +47 -0
  44. package/dist/remote/agent-connection-lifecycle.d.ts.map +1 -0
  45. package/dist/remote/agent-connection-lifecycle.js +304 -0
  46. package/dist/remote/agent-connection-lifecycle.js.map +1 -0
  47. package/dist/remote/agent-executor.d.ts.map +1 -1
  48. package/dist/remote/agent-executor.js +93 -68
  49. package/dist/remote/agent-executor.js.map +1 -1
  50. package/dist/remote/agent-handler.d.ts +22 -8
  51. package/dist/remote/agent-handler.d.ts.map +1 -1
  52. package/dist/remote/agent-handler.js +151 -98
  53. package/dist/remote/agent-handler.js.map +1 -1
  54. package/dist/remote/config.d.ts.map +1 -1
  55. package/dist/remote/config.js +14 -0
  56. package/dist/remote/config.js.map +1 -1
  57. package/dist/remote/control-plane.d.ts.map +1 -1
  58. package/dist/remote/control-plane.js +28 -3
  59. package/dist/remote/control-plane.js.map +1 -1
  60. package/dist/remote/oauth-handler.d.ts +2 -0
  61. package/dist/remote/oauth-handler.d.ts.map +1 -1
  62. package/dist/remote/oauth-handler.js +62 -1
  63. package/dist/remote/oauth-handler.js.map +1 -1
  64. package/dist/remote/policy-update-guard.d.ts +14 -0
  65. package/dist/remote/policy-update-guard.d.ts.map +1 -0
  66. package/dist/remote/policy-update-guard.js +27 -0
  67. package/dist/remote/policy-update-guard.js.map +1 -0
  68. package/dist/remote/policy.d.ts.map +1 -1
  69. package/dist/remote/policy.js +13 -2
  70. package/dist/remote/policy.js.map +1 -1
  71. package/dist/remote/safe-file.d.ts +5 -0
  72. package/dist/remote/safe-file.d.ts.map +1 -0
  73. package/dist/remote/safe-file.js +194 -0
  74. package/dist/remote/safe-file.js.map +1 -0
  75. package/dist/remote/store.d.ts +1 -0
  76. package/dist/remote/store.d.ts.map +1 -1
  77. package/dist/remote/store.js +5 -0
  78. package/dist/remote/store.js.map +1 -1
  79. package/dist/remote/types.d.ts +5 -0
  80. package/dist/remote/types.d.ts.map +1 -1
  81. package/dist/remote/websocket.d.ts +38 -13
  82. package/dist/remote/websocket.d.ts.map +1 -1
  83. package/dist/remote/websocket.js +90 -126
  84. package/dist/remote/websocket.js.map +1 -1
  85. package/dist/render-http.js +2 -1
  86. package/dist/render-http.js.map +1 -1
  87. package/dist/retry.d.ts.map +1 -1
  88. package/dist/retry.js +4 -2
  89. package/dist/retry.js.map +1 -1
  90. package/dist/server-http.d.ts +1 -1
  91. package/dist/server-http.d.ts.map +1 -1
  92. package/dist/server-http.js +1 -431
  93. package/dist/server-http.js.map +1 -1
  94. package/dist/tools/connector.provider.d.ts.map +1 -1
  95. package/dist/tools/connector.provider.js +5 -3
  96. package/dist/tools/connector.provider.js.map +1 -1
  97. package/dist/tools/index.d.ts.map +1 -1
  98. package/dist/tools/index.js +1 -0
  99. package/dist/tools/index.js.map +1 -1
  100. package/dist/tools/output-schemas.d.ts.map +1 -1
  101. package/dist/tools/output-schemas.js +1 -0
  102. package/dist/tools/output-schemas.js.map +1 -1
  103. package/dist/tools/process.provider.d.ts +2 -0
  104. package/dist/tools/process.provider.d.ts.map +1 -1
  105. package/dist/tools/process.provider.js +60 -1
  106. package/dist/tools/process.provider.js.map +1 -1
  107. package/dist/tools/system.provider.d.ts +13 -0
  108. package/dist/tools/system.provider.d.ts.map +1 -1
  109. package/dist/tools/system.provider.js +304 -2
  110. package/dist/tools/system.provider.js.map +1 -1
  111. package/dist/types.d.ts +39 -0
  112. package/dist/types.d.ts.map +1 -1
  113. package/dist/types.js +34 -0
  114. package/dist/types.js.map +1 -1
  115. package/docs/adding-a-device.md +127 -0
  116. package/docs/agent-runtime-config.md +34 -0
  117. package/docs/development/api-stability.md +44 -0
  118. package/docs/development/coding-standards.md +35 -0
  119. package/docs/development/commit-conventions.md +35 -0
  120. package/docs/development/dependency-management.md +60 -0
  121. package/docs/development/deprecation-policy.md +29 -0
  122. package/docs/development/local-setup.md +46 -0
  123. package/docs/development/release-process.md +57 -0
  124. package/docs/development/testing-policy.md +47 -0
  125. package/docs/explanation/architecture.md +44 -0
  126. package/docs/how-to/README.md +14 -0
  127. package/docs/how-to/configure-ssh-policy.md +50 -0
  128. package/docs/openssf-evidence.md +75 -0
  129. package/docs/openssf-gap-analysis.md +63 -0
  130. package/docs/openssf-proposal-links.md +37 -0
  131. package/docs/professionalization-plan.md +81 -0
  132. package/docs/reference/README.md +21 -0
  133. package/docs/reference/cli.md +41 -0
  134. package/docs/reference/compatibility.md +46 -0
  135. package/docs/reference/configuration.md +72 -0
  136. package/docs/remote-mcp-hardening.md +59 -0
  137. package/docs/repo-maturity-report.md +565 -0
  138. package/docs/security/assurance-case.md +58 -0
  139. package/docs/security/dependency-audit-exceptions.json +4 -0
  140. package/docs/security/dependency-audit-exceptions.md +15 -0
  141. package/docs/security/input-validation.md +54 -0
  142. package/docs/security/release-integrity.md +28 -0
  143. package/docs/security/scanning-policy.md +50 -0
  144. package/docs/security/secrets-management.md +49 -0
  145. package/docs/security/threat-model.md +65 -0
  146. package/docs/testing.md +24 -0
  147. package/docs/troubleshooting.md +56 -0
  148. package/docs/tutorials/getting-started.md +84 -0
  149. package/mcp.json +1 -1
  150. package/package.json +37 -18
  151. package/registry/ssh-mcp-pro/mcp.json +1 -1
  152. package/server.json +3 -3
@@ -0,0 +1,122 @@
1
+ export function createHttpServerLifecycle(options) {
2
+ let started = false;
3
+ let closed = false;
4
+ let startPromise;
5
+ let closePromise;
6
+ let signalsRegistered = false;
7
+ const signalHandlers = new Map();
8
+ function unregisterSignalHandlers() {
9
+ for (const [signal, handler] of signalHandlers) {
10
+ process.off(signal, handler);
11
+ }
12
+ signalHandlers.clear();
13
+ signalsRegistered = false;
14
+ }
15
+ function registerSignalHandlers() {
16
+ if (!options.registerSignalHandlers || signalsRegistered) {
17
+ return;
18
+ }
19
+ signalsRegistered = true;
20
+ for (const signal of ["SIGINT", "SIGTERM"]) {
21
+ const handler = () => {
22
+ void close(signal).finally(() => {
23
+ if (options.exitOnSignal !== false) {
24
+ process.exit(0);
25
+ }
26
+ });
27
+ };
28
+ signalHandlers.set(signal, handler);
29
+ process.once(signal, handler);
30
+ }
31
+ }
32
+ function beginClosingListeningServer() {
33
+ if (!options.server.listening) {
34
+ return Promise.resolve();
35
+ }
36
+ return new Promise((resolve, reject) => {
37
+ options.server.close((error) => {
38
+ if (error) {
39
+ reject(error);
40
+ return;
41
+ }
42
+ resolve();
43
+ });
44
+ options.server.closeIdleConnections?.();
45
+ });
46
+ }
47
+ async function close(reason = "shutdown") {
48
+ if (closePromise) {
49
+ return closePromise;
50
+ }
51
+ closed = true;
52
+ closePromise = (async () => {
53
+ unregisterSignalHandlers();
54
+ const results = await Promise.allSettled([
55
+ beginClosingListeningServer(),
56
+ Promise.resolve().then(() => options.cleanup(reason)),
57
+ ]);
58
+ started = false;
59
+ const failure = results.find((result) => result.status === "rejected");
60
+ if (failure) {
61
+ throw failure.reason;
62
+ }
63
+ })();
64
+ return closePromise;
65
+ }
66
+ async function listen() {
67
+ await new Promise((resolve, reject) => {
68
+ const onError = (error) => {
69
+ options.server.off("listening", onListening);
70
+ reject(error);
71
+ };
72
+ const onListening = () => {
73
+ options.server.off("error", onError);
74
+ resolve();
75
+ };
76
+ options.server.once("error", onError);
77
+ options.server.once("listening", onListening);
78
+ options.server.listen(options.port, options.host);
79
+ });
80
+ }
81
+ async function start() {
82
+ if (closed) {
83
+ throw new Error("HTTP server lifecycle is closed");
84
+ }
85
+ if (started) {
86
+ return;
87
+ }
88
+ if (startPromise) {
89
+ return startPromise;
90
+ }
91
+ startPromise = (async () => {
92
+ try {
93
+ await options.beforeListen?.();
94
+ if (closed) {
95
+ throw new Error("HTTP server lifecycle is closed");
96
+ }
97
+ await listen();
98
+ if (closed) {
99
+ await beginClosingListeningServer();
100
+ throw new Error("HTTP server lifecycle is closed");
101
+ }
102
+ started = true;
103
+ registerSignalHandlers();
104
+ const address = options.server.address();
105
+ const listeningPort = address && typeof address === "object" ? address.port : options.port;
106
+ await options.afterListen?.(listeningPort);
107
+ }
108
+ catch (error) {
109
+ await close("startup-failed");
110
+ throw error;
111
+ }
112
+ })();
113
+ try {
114
+ await startPromise;
115
+ }
116
+ finally {
117
+ startPromise = undefined;
118
+ }
119
+ }
120
+ return { start, close };
121
+ }
122
+ //# sourceMappingURL=http-server-lifecycle.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"http-server-lifecycle.js","sourceRoot":"","sources":["../src/http-server-lifecycle.ts"],"names":[],"mappings":"AAkBA,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,YAAuC,CAAC;IAC5C,IAAI,YAAuC,CAAC;IAC5C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE7D,SAAS,wBAAwB;QAC/B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,iBAAiB,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,SAAS,sBAAsB;QAC7B,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,iBAAiB,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QACD,iBAAiB,GAAG,IAAI,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC9B,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;wBACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,SAAS,2BAA2B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC7B,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,MAAM,GAAG,UAAU;QACtC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,wBAAwB,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvC,2BAA2B,EAAE;gBAC7B,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACtD,CAAC,CAAC;YACH,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAC1E,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,CAAC,MAAM,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,GAAG,EAAE;gBACvB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACrC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC/B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,MAAM,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,2BAA2B,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,sBAAsB,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,MAAM,aAAa,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3F,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YACH,MAAM,YAAY,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC"}
@@ -0,0 +1,28 @@
1
+ import type { IncomingMessage, ServerResponse } from "node:http";
2
+ interface HttpErrorResponse {
3
+ statusCode: number;
4
+ payload: Record<string, unknown>;
5
+ }
6
+ export interface HttpServerRouterOptions {
7
+ endpoint: string;
8
+ legacySseEndpoint: string;
9
+ legacyMessageEndpoint: string;
10
+ healthEndpoint: string;
11
+ oauthProtectedResourceEndpoint: string;
12
+ allowedOrigins: string[];
13
+ enableLegacySse: boolean;
14
+ attachCurrentRateLimitHeaders(res: ServerResponse): void;
15
+ handleRemoteHttpRequest(req: IncomingMessage, res: ServerResponse, pathname: string): Promise<boolean>;
16
+ protectedResourceMetadata(req: IncomingMessage): Record<string, unknown>;
17
+ rejectIfUnauthorized(req: IncomingMessage, res: ServerResponse): Promise<boolean>;
18
+ readJsonBody(req: IncomingMessage): Promise<unknown>;
19
+ handleStreamableRequest(req: IncomingMessage, res: ServerResponse, parsedBody?: unknown): Promise<void>;
20
+ handleLegacySseConnection(req: IncomingMessage, res: ServerResponse): Promise<void>;
21
+ handleLegacyMessage(req: IncomingMessage, res: ServerResponse): Promise<void>;
22
+ errorResponse(error: unknown): HttpErrorResponse;
23
+ onError(error: unknown): void;
24
+ sendJson(req: IncomingMessage, res: ServerResponse, statusCode: number, payload: Record<string, unknown>): void;
25
+ }
26
+ export declare function createHttpRequestHandler(options: HttpServerRouterOptions): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
27
+ export {};
28
+ //# sourceMappingURL=http-server-router.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"http-server-router.d.ts","sourceRoot":"","sources":["../src/http-server-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,8BAA8B,EAAE,MAAM,CAAC;IACvC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,6BAA6B,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IACzD,uBAAuB,CACrB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,yBAAyB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,oBAAoB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,uBAAuB,CACrB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,yBAAyB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,mBAAmB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAAC;IACjD,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,QAAQ,CACN,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAAC;CACT;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,uBAAuB,IAmHrE,KAAK,eAAe,EACpB,KAAK,cAAc,KAClB,OAAO,CAAC,IAAI,CAAC,CAwBjB"}
@@ -0,0 +1,108 @@
1
+ import { URL } from "node:url";
2
+ import { corsHeaders, isOriginAllowed } from "./http-security.js";
3
+ export function createHttpRequestHandler(options) {
4
+ function handlePublicHttpRoute(req, res, pathname) {
5
+ if (pathname === options.oauthProtectedResourceEndpoint && req.method === "GET") {
6
+ options.sendJson(req, res, 200, options.protectedResourceMetadata(req));
7
+ return true;
8
+ }
9
+ if (pathname === options.healthEndpoint && req.method === "GET") {
10
+ options.sendJson(req, res, 200, {
11
+ ok: true,
12
+ service: "ssh-mcp-pro",
13
+ transport: "streamable-http",
14
+ });
15
+ return true;
16
+ }
17
+ return false;
18
+ }
19
+ function handleCorsPreflight(req, res, pathname) {
20
+ if (pathname !== options.endpoint || req.method !== "OPTIONS") {
21
+ return false;
22
+ }
23
+ if (!isOriginAllowed(req.headers.origin, options.allowedOrigins)) {
24
+ options.sendJson(req, res, 403, { error: "Origin is not allowed" });
25
+ return true;
26
+ }
27
+ res.writeHead(204, corsHeaders(req.headers.origin, options.allowedOrigins));
28
+ res.end();
29
+ return true;
30
+ }
31
+ async function handleMcpHttpRoute(req, res, pathname) {
32
+ if (pathname !== options.endpoint) {
33
+ return false;
34
+ }
35
+ if (req.method !== "GET" && req.method !== "POST" && req.method !== "DELETE") {
36
+ options.sendJson(req, res, 405, { error: "Method not allowed" });
37
+ return true;
38
+ }
39
+ const parsedBody = req.method === "POST" ? await options.readJsonBody(req) : undefined;
40
+ await options.handleStreamableRequest(req, res, parsedBody);
41
+ return true;
42
+ }
43
+ async function handleLegacySseRoute(req, res, pathname) {
44
+ if (!options.enableLegacySse || pathname !== options.legacySseEndpoint) {
45
+ return false;
46
+ }
47
+ if (req.method !== "GET") {
48
+ options.sendJson(req, res, 405, { error: "Method not allowed" });
49
+ return true;
50
+ }
51
+ await options.handleLegacySseConnection(req, res);
52
+ return true;
53
+ }
54
+ async function handleLegacyMessageRoute(req, res, pathname) {
55
+ if (!options.enableLegacySse || pathname !== options.legacyMessageEndpoint) {
56
+ return false;
57
+ }
58
+ if (req.method !== "POST") {
59
+ options.sendJson(req, res, 405, { error: "Method not allowed" });
60
+ return true;
61
+ }
62
+ await options.handleLegacyMessage(req, res);
63
+ return true;
64
+ }
65
+ async function handleAuthenticatedHttpRoute(req, res, pathname) {
66
+ if (await handleMcpHttpRoute(req, res, pathname)) {
67
+ return true;
68
+ }
69
+ if (await handleLegacySseRoute(req, res, pathname)) {
70
+ return true;
71
+ }
72
+ return handleLegacyMessageRoute(req, res, pathname);
73
+ }
74
+ function handleHttpRequestFailure(req, res, error) {
75
+ options.onError(error);
76
+ if (res.headersSent) {
77
+ return;
78
+ }
79
+ const response = options.errorResponse(error);
80
+ options.sendJson(req, res, response.statusCode, response.payload);
81
+ }
82
+ return async function handleHttpRequest(req, res) {
83
+ try {
84
+ const requestUrl = new URL(req.url ?? options.endpoint, "http://localhost");
85
+ options.attachCurrentRateLimitHeaders(res);
86
+ if (await options.handleRemoteHttpRequest(req, res, requestUrl.pathname)) {
87
+ return;
88
+ }
89
+ if (handlePublicHttpRoute(req, res, requestUrl.pathname)) {
90
+ return;
91
+ }
92
+ if (handleCorsPreflight(req, res, requestUrl.pathname)) {
93
+ return;
94
+ }
95
+ if (await options.rejectIfUnauthorized(req, res)) {
96
+ return;
97
+ }
98
+ if (await handleAuthenticatedHttpRoute(req, res, requestUrl.pathname)) {
99
+ return;
100
+ }
101
+ options.sendJson(req, res, 404, { error: "Not found" });
102
+ }
103
+ catch (error) {
104
+ handleHttpRequestFailure(req, res, error);
105
+ }
106
+ };
107
+ }
108
+ //# sourceMappingURL=http-server-router.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"http-server-router.js","sourceRoot":"","sources":["../src/http-server-router.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAyClE,MAAM,UAAU,wBAAwB,CAAC,OAAgC;IACvE,SAAS,qBAAqB,CAC5B,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO,CAAC,8BAA8B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAChF,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,KAAK,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAChE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC9B,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,iBAAiB;aAC7B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,mBAAmB,CAC1B,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5E,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,wBAAwB,CACrC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,4BAA4B,CACzC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,SAAS,wBAAwB,CAC/B,GAAoB,EACpB,GAAmB,EACnB,KAAc;QAEd,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,GAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAC5E,OAAO,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,IAAI,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtE,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
@@ -0,0 +1,21 @@
1
+ import { type Server } from "node:http";
2
+ import { type AppContainer } from "./container.js";
3
+ import { createRemoteControlPlane } from "./remote/control-plane.js";
4
+ import type { RemoteConfig } from "./remote/types.js";
5
+ export interface HttpServerRuntimeOptions {
6
+ container?: AppContainer;
7
+ remoteConfig?: RemoteConfig;
8
+ now?: () => number;
9
+ registerSignalHandlers?: boolean;
10
+ exitOnSignal?: boolean;
11
+ remoteControlPlaneFactory?: typeof createRemoteControlPlane;
12
+ }
13
+ export interface HttpServerRuntime {
14
+ readonly server: Server;
15
+ readonly sessionCount: number;
16
+ start(): Promise<void>;
17
+ close(reason?: string): Promise<void>;
18
+ }
19
+ export declare function createHttpServerRuntime(options?: HttpServerRuntimeOptions): HttpServerRuntime;
20
+ export declare function startHttpServer(options?: HttpServerRuntimeOptions): Promise<HttpServerRuntime>;
21
+ //# sourceMappingURL=http-server-runtime.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"http-server-runtime.d.ts","sourceRoot":"","sources":["../src/http-server-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAQnB,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAcpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAmBtD,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yBAAyB,CAAC,EAAE,OAAO,wBAAwB,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,iBAAiB,CAgdjG;AAED,wBAAsB,eAAe,CACnC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAI5B"}