ssh-mcp-pro 1.1.4 → 1.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/README.md +58 -10
- package/REGISTRY_SUBMISSION.md +3 -3
- package/SECURITY.md +4 -0
- package/SECURITY_DECISIONS.md +32 -1
- package/dist/config.d.ts +1 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +4 -0
- package/dist/config.js.map +1 -1
- package/dist/connector-profile.d.ts +3 -0
- package/dist/connector-profile.d.ts.map +1 -1
- package/dist/connector-profile.js +36 -14
- package/dist/connector-profile.js.map +1 -1
- package/dist/http-security.d.ts.map +1 -1
- package/dist/http-security.js +19 -4
- package/dist/http-security.js.map +1 -1
- package/dist/http-server-lifecycle.d.ts +17 -0
- package/dist/http-server-lifecycle.d.ts.map +1 -0
- package/dist/http-server-lifecycle.js +122 -0
- package/dist/http-server-lifecycle.js.map +1 -0
- package/dist/http-server-router.d.ts +28 -0
- package/dist/http-server-router.d.ts.map +1 -0
- package/dist/http-server-router.js +108 -0
- package/dist/http-server-router.js.map +1 -0
- package/dist/http-server-runtime.d.ts +21 -0
- package/dist/http-server-runtime.d.ts.map +1 -0
- package/dist/http-server-runtime.js +415 -0
- package/dist/http-server-runtime.js.map +1 -0
- package/dist/http-session-registry.d.ts +35 -0
- package/dist/http-session-registry.d.ts.map +1 -0
- package/dist/http-session-registry.js +96 -0
- package/dist/http-session-registry.js.map +1 -0
- package/dist/index.js +12 -5
- package/dist/index.js.map +1 -1
- package/dist/mcp.d.ts +1 -1
- package/dist/mcp.js +1 -1
- package/dist/prompts.d.ts.map +1 -1
- package/dist/prompts.js +8 -1
- package/dist/prompts.js.map +1 -1
- package/dist/remote/agent-cli.d.ts.map +1 -1
- package/dist/remote/agent-cli.js +20 -1
- package/dist/remote/agent-cli.js.map +1 -1
- package/dist/remote/agent-connection-lifecycle.d.ts +47 -0
- package/dist/remote/agent-connection-lifecycle.d.ts.map +1 -0
- package/dist/remote/agent-connection-lifecycle.js +304 -0
- package/dist/remote/agent-connection-lifecycle.js.map +1 -0
- package/dist/remote/agent-executor.d.ts.map +1 -1
- package/dist/remote/agent-executor.js +93 -68
- package/dist/remote/agent-executor.js.map +1 -1
- package/dist/remote/agent-handler.d.ts +22 -8
- package/dist/remote/agent-handler.d.ts.map +1 -1
- package/dist/remote/agent-handler.js +151 -98
- package/dist/remote/agent-handler.js.map +1 -1
- package/dist/remote/config.d.ts.map +1 -1
- package/dist/remote/config.js +14 -0
- package/dist/remote/config.js.map +1 -1
- package/dist/remote/control-plane.d.ts.map +1 -1
- package/dist/remote/control-plane.js +28 -3
- package/dist/remote/control-plane.js.map +1 -1
- package/dist/remote/oauth-handler.d.ts +2 -0
- package/dist/remote/oauth-handler.d.ts.map +1 -1
- package/dist/remote/oauth-handler.js +62 -1
- package/dist/remote/oauth-handler.js.map +1 -1
- package/dist/remote/policy-update-guard.d.ts +14 -0
- package/dist/remote/policy-update-guard.d.ts.map +1 -0
- package/dist/remote/policy-update-guard.js +27 -0
- package/dist/remote/policy-update-guard.js.map +1 -0
- package/dist/remote/policy.d.ts.map +1 -1
- package/dist/remote/policy.js +13 -2
- package/dist/remote/policy.js.map +1 -1
- package/dist/remote/safe-file.d.ts +5 -0
- package/dist/remote/safe-file.d.ts.map +1 -0
- package/dist/remote/safe-file.js +194 -0
- package/dist/remote/safe-file.js.map +1 -0
- package/dist/remote/store.d.ts +1 -0
- package/dist/remote/store.d.ts.map +1 -1
- package/dist/remote/store.js +5 -0
- package/dist/remote/store.js.map +1 -1
- package/dist/remote/types.d.ts +5 -0
- package/dist/remote/types.d.ts.map +1 -1
- package/dist/remote/websocket.d.ts +38 -13
- package/dist/remote/websocket.d.ts.map +1 -1
- package/dist/remote/websocket.js +90 -126
- package/dist/remote/websocket.js.map +1 -1
- package/dist/render-http.js +2 -1
- package/dist/render-http.js.map +1 -1
- package/dist/retry.d.ts.map +1 -1
- package/dist/retry.js +4 -2
- package/dist/retry.js.map +1 -1
- package/dist/server-http.d.ts +1 -1
- package/dist/server-http.d.ts.map +1 -1
- package/dist/server-http.js +1 -431
- package/dist/server-http.js.map +1 -1
- package/dist/tools/connector.provider.d.ts.map +1 -1
- package/dist/tools/connector.provider.js +5 -3
- package/dist/tools/connector.provider.js.map +1 -1
- package/dist/tools/index.d.ts.map +1 -1
- package/dist/tools/index.js +1 -0
- package/dist/tools/index.js.map +1 -1
- package/dist/tools/output-schemas.d.ts.map +1 -1
- package/dist/tools/output-schemas.js +1 -0
- package/dist/tools/output-schemas.js.map +1 -1
- package/dist/tools/process.provider.d.ts +2 -0
- package/dist/tools/process.provider.d.ts.map +1 -1
- package/dist/tools/process.provider.js +60 -1
- package/dist/tools/process.provider.js.map +1 -1
- package/dist/tools/system.provider.d.ts +13 -0
- package/dist/tools/system.provider.d.ts.map +1 -1
- package/dist/tools/system.provider.js +304 -2
- package/dist/tools/system.provider.js.map +1 -1
- package/dist/types.d.ts +39 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js +34 -0
- package/dist/types.js.map +1 -1
- package/docs/adding-a-device.md +127 -0
- package/docs/agent-runtime-config.md +34 -0
- package/docs/development/api-stability.md +44 -0
- package/docs/development/coding-standards.md +35 -0
- package/docs/development/commit-conventions.md +35 -0
- package/docs/development/dependency-management.md +60 -0
- package/docs/development/deprecation-policy.md +29 -0
- package/docs/development/local-setup.md +46 -0
- package/docs/development/release-process.md +57 -0
- package/docs/development/testing-policy.md +47 -0
- package/docs/explanation/architecture.md +44 -0
- package/docs/how-to/README.md +14 -0
- package/docs/how-to/configure-ssh-policy.md +50 -0
- package/docs/openssf-evidence.md +75 -0
- package/docs/openssf-gap-analysis.md +63 -0
- package/docs/openssf-proposal-links.md +37 -0
- package/docs/professionalization-plan.md +81 -0
- package/docs/reference/README.md +21 -0
- package/docs/reference/cli.md +41 -0
- package/docs/reference/compatibility.md +46 -0
- package/docs/reference/configuration.md +72 -0
- package/docs/remote-mcp-hardening.md +59 -0
- package/docs/repo-maturity-report.md +565 -0
- package/docs/security/assurance-case.md +58 -0
- package/docs/security/dependency-audit-exceptions.json +4 -0
- package/docs/security/dependency-audit-exceptions.md +15 -0
- package/docs/security/input-validation.md +54 -0
- package/docs/security/release-integrity.md +28 -0
- package/docs/security/scanning-policy.md +50 -0
- package/docs/security/secrets-management.md +49 -0
- package/docs/security/threat-model.md +65 -0
- package/docs/testing.md +24 -0
- package/docs/troubleshooting.md +56 -0
- package/docs/tutorials/getting-started.md +84 -0
- package/mcp.json +1 -1
- package/package.json +37 -18
- package/registry/ssh-mcp-pro/mcp.json +1 -1
- package/server.json +3 -3
|
@@ -0,0 +1,122 @@
|
|
|
1
|
+
export function createHttpServerLifecycle(options) {
|
|
2
|
+
let started = false;
|
|
3
|
+
let closed = false;
|
|
4
|
+
let startPromise;
|
|
5
|
+
let closePromise;
|
|
6
|
+
let signalsRegistered = false;
|
|
7
|
+
const signalHandlers = new Map();
|
|
8
|
+
function unregisterSignalHandlers() {
|
|
9
|
+
for (const [signal, handler] of signalHandlers) {
|
|
10
|
+
process.off(signal, handler);
|
|
11
|
+
}
|
|
12
|
+
signalHandlers.clear();
|
|
13
|
+
signalsRegistered = false;
|
|
14
|
+
}
|
|
15
|
+
function registerSignalHandlers() {
|
|
16
|
+
if (!options.registerSignalHandlers || signalsRegistered) {
|
|
17
|
+
return;
|
|
18
|
+
}
|
|
19
|
+
signalsRegistered = true;
|
|
20
|
+
for (const signal of ["SIGINT", "SIGTERM"]) {
|
|
21
|
+
const handler = () => {
|
|
22
|
+
void close(signal).finally(() => {
|
|
23
|
+
if (options.exitOnSignal !== false) {
|
|
24
|
+
process.exit(0);
|
|
25
|
+
}
|
|
26
|
+
});
|
|
27
|
+
};
|
|
28
|
+
signalHandlers.set(signal, handler);
|
|
29
|
+
process.once(signal, handler);
|
|
30
|
+
}
|
|
31
|
+
}
|
|
32
|
+
function beginClosingListeningServer() {
|
|
33
|
+
if (!options.server.listening) {
|
|
34
|
+
return Promise.resolve();
|
|
35
|
+
}
|
|
36
|
+
return new Promise((resolve, reject) => {
|
|
37
|
+
options.server.close((error) => {
|
|
38
|
+
if (error) {
|
|
39
|
+
reject(error);
|
|
40
|
+
return;
|
|
41
|
+
}
|
|
42
|
+
resolve();
|
|
43
|
+
});
|
|
44
|
+
options.server.closeIdleConnections?.();
|
|
45
|
+
});
|
|
46
|
+
}
|
|
47
|
+
async function close(reason = "shutdown") {
|
|
48
|
+
if (closePromise) {
|
|
49
|
+
return closePromise;
|
|
50
|
+
}
|
|
51
|
+
closed = true;
|
|
52
|
+
closePromise = (async () => {
|
|
53
|
+
unregisterSignalHandlers();
|
|
54
|
+
const results = await Promise.allSettled([
|
|
55
|
+
beginClosingListeningServer(),
|
|
56
|
+
Promise.resolve().then(() => options.cleanup(reason)),
|
|
57
|
+
]);
|
|
58
|
+
started = false;
|
|
59
|
+
const failure = results.find((result) => result.status === "rejected");
|
|
60
|
+
if (failure) {
|
|
61
|
+
throw failure.reason;
|
|
62
|
+
}
|
|
63
|
+
})();
|
|
64
|
+
return closePromise;
|
|
65
|
+
}
|
|
66
|
+
async function listen() {
|
|
67
|
+
await new Promise((resolve, reject) => {
|
|
68
|
+
const onError = (error) => {
|
|
69
|
+
options.server.off("listening", onListening);
|
|
70
|
+
reject(error);
|
|
71
|
+
};
|
|
72
|
+
const onListening = () => {
|
|
73
|
+
options.server.off("error", onError);
|
|
74
|
+
resolve();
|
|
75
|
+
};
|
|
76
|
+
options.server.once("error", onError);
|
|
77
|
+
options.server.once("listening", onListening);
|
|
78
|
+
options.server.listen(options.port, options.host);
|
|
79
|
+
});
|
|
80
|
+
}
|
|
81
|
+
async function start() {
|
|
82
|
+
if (closed) {
|
|
83
|
+
throw new Error("HTTP server lifecycle is closed");
|
|
84
|
+
}
|
|
85
|
+
if (started) {
|
|
86
|
+
return;
|
|
87
|
+
}
|
|
88
|
+
if (startPromise) {
|
|
89
|
+
return startPromise;
|
|
90
|
+
}
|
|
91
|
+
startPromise = (async () => {
|
|
92
|
+
try {
|
|
93
|
+
await options.beforeListen?.();
|
|
94
|
+
if (closed) {
|
|
95
|
+
throw new Error("HTTP server lifecycle is closed");
|
|
96
|
+
}
|
|
97
|
+
await listen();
|
|
98
|
+
if (closed) {
|
|
99
|
+
await beginClosingListeningServer();
|
|
100
|
+
throw new Error("HTTP server lifecycle is closed");
|
|
101
|
+
}
|
|
102
|
+
started = true;
|
|
103
|
+
registerSignalHandlers();
|
|
104
|
+
const address = options.server.address();
|
|
105
|
+
const listeningPort = address && typeof address === "object" ? address.port : options.port;
|
|
106
|
+
await options.afterListen?.(listeningPort);
|
|
107
|
+
}
|
|
108
|
+
catch (error) {
|
|
109
|
+
await close("startup-failed");
|
|
110
|
+
throw error;
|
|
111
|
+
}
|
|
112
|
+
})();
|
|
113
|
+
try {
|
|
114
|
+
await startPromise;
|
|
115
|
+
}
|
|
116
|
+
finally {
|
|
117
|
+
startPromise = undefined;
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
return { start, close };
|
|
121
|
+
}
|
|
122
|
+
//# sourceMappingURL=http-server-lifecycle.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"http-server-lifecycle.js","sourceRoot":"","sources":["../src/http-server-lifecycle.ts"],"names":[],"mappings":"AAkBA,MAAM,UAAU,yBAAyB,CACvC,OAAmC;IAEnC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,YAAuC,CAAC;IAC5C,IAAI,YAAuC,CAAC;IAC5C,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;IAE7D,SAAS,wBAAwB;QAC/B,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;QACD,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,iBAAiB,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED,SAAS,sBAAsB;QAC7B,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,iBAAiB,EAAE,CAAC;YACzD,OAAO;QACT,CAAC;QACD,iBAAiB,GAAG,IAAI,CAAC;QACzB,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;oBAC9B,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;wBACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,SAAS,2BAA2B;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC7B,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,MAAM,GAAG,UAAU;QACtC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,wBAAwB,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvC,2BAA2B,EAAE;gBAC7B,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACtD,CAAC,CAAC;YACH,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAC1E,CAAC;YACF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,CAAC,MAAM,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;gBAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,GAAG,EAAE;gBACvB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACrC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,KAAK;QAClB,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC/B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,MAAM,MAAM,EAAE,CAAC;gBACf,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,2BAA2B,EAAE,CAAC;oBACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,sBAAsB,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,MAAM,aAAa,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3F,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC9B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YACH,MAAM,YAAY,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from "node:http";
|
|
2
|
+
interface HttpErrorResponse {
|
|
3
|
+
statusCode: number;
|
|
4
|
+
payload: Record<string, unknown>;
|
|
5
|
+
}
|
|
6
|
+
export interface HttpServerRouterOptions {
|
|
7
|
+
endpoint: string;
|
|
8
|
+
legacySseEndpoint: string;
|
|
9
|
+
legacyMessageEndpoint: string;
|
|
10
|
+
healthEndpoint: string;
|
|
11
|
+
oauthProtectedResourceEndpoint: string;
|
|
12
|
+
allowedOrigins: string[];
|
|
13
|
+
enableLegacySse: boolean;
|
|
14
|
+
attachCurrentRateLimitHeaders(res: ServerResponse): void;
|
|
15
|
+
handleRemoteHttpRequest(req: IncomingMessage, res: ServerResponse, pathname: string): Promise<boolean>;
|
|
16
|
+
protectedResourceMetadata(req: IncomingMessage): Record<string, unknown>;
|
|
17
|
+
rejectIfUnauthorized(req: IncomingMessage, res: ServerResponse): Promise<boolean>;
|
|
18
|
+
readJsonBody(req: IncomingMessage): Promise<unknown>;
|
|
19
|
+
handleStreamableRequest(req: IncomingMessage, res: ServerResponse, parsedBody?: unknown): Promise<void>;
|
|
20
|
+
handleLegacySseConnection(req: IncomingMessage, res: ServerResponse): Promise<void>;
|
|
21
|
+
handleLegacyMessage(req: IncomingMessage, res: ServerResponse): Promise<void>;
|
|
22
|
+
errorResponse(error: unknown): HttpErrorResponse;
|
|
23
|
+
onError(error: unknown): void;
|
|
24
|
+
sendJson(req: IncomingMessage, res: ServerResponse, statusCode: number, payload: Record<string, unknown>): void;
|
|
25
|
+
}
|
|
26
|
+
export declare function createHttpRequestHandler(options: HttpServerRouterOptions): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
|
|
27
|
+
export {};
|
|
28
|
+
//# sourceMappingURL=http-server-router.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"http-server-router.d.ts","sourceRoot":"","sources":["../src/http-server-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,8BAA8B,EAAE,MAAM,CAAC;IACvC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,6BAA6B,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IACzD,uBAAuB,CACrB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,yBAAyB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,oBAAoB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,uBAAuB,CACrB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,CAAC,EAAE,OAAO,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,yBAAyB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,mBAAmB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAAC;IACjD,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,QAAQ,CACN,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAAC;CACT;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,uBAAuB,IAmHrE,KAAK,eAAe,EACpB,KAAK,cAAc,KAClB,OAAO,CAAC,IAAI,CAAC,CAwBjB"}
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
import { URL } from "node:url";
|
|
2
|
+
import { corsHeaders, isOriginAllowed } from "./http-security.js";
|
|
3
|
+
export function createHttpRequestHandler(options) {
|
|
4
|
+
function handlePublicHttpRoute(req, res, pathname) {
|
|
5
|
+
if (pathname === options.oauthProtectedResourceEndpoint && req.method === "GET") {
|
|
6
|
+
options.sendJson(req, res, 200, options.protectedResourceMetadata(req));
|
|
7
|
+
return true;
|
|
8
|
+
}
|
|
9
|
+
if (pathname === options.healthEndpoint && req.method === "GET") {
|
|
10
|
+
options.sendJson(req, res, 200, {
|
|
11
|
+
ok: true,
|
|
12
|
+
service: "ssh-mcp-pro",
|
|
13
|
+
transport: "streamable-http",
|
|
14
|
+
});
|
|
15
|
+
return true;
|
|
16
|
+
}
|
|
17
|
+
return false;
|
|
18
|
+
}
|
|
19
|
+
function handleCorsPreflight(req, res, pathname) {
|
|
20
|
+
if (pathname !== options.endpoint || req.method !== "OPTIONS") {
|
|
21
|
+
return false;
|
|
22
|
+
}
|
|
23
|
+
if (!isOriginAllowed(req.headers.origin, options.allowedOrigins)) {
|
|
24
|
+
options.sendJson(req, res, 403, { error: "Origin is not allowed" });
|
|
25
|
+
return true;
|
|
26
|
+
}
|
|
27
|
+
res.writeHead(204, corsHeaders(req.headers.origin, options.allowedOrigins));
|
|
28
|
+
res.end();
|
|
29
|
+
return true;
|
|
30
|
+
}
|
|
31
|
+
async function handleMcpHttpRoute(req, res, pathname) {
|
|
32
|
+
if (pathname !== options.endpoint) {
|
|
33
|
+
return false;
|
|
34
|
+
}
|
|
35
|
+
if (req.method !== "GET" && req.method !== "POST" && req.method !== "DELETE") {
|
|
36
|
+
options.sendJson(req, res, 405, { error: "Method not allowed" });
|
|
37
|
+
return true;
|
|
38
|
+
}
|
|
39
|
+
const parsedBody = req.method === "POST" ? await options.readJsonBody(req) : undefined;
|
|
40
|
+
await options.handleStreamableRequest(req, res, parsedBody);
|
|
41
|
+
return true;
|
|
42
|
+
}
|
|
43
|
+
async function handleLegacySseRoute(req, res, pathname) {
|
|
44
|
+
if (!options.enableLegacySse || pathname !== options.legacySseEndpoint) {
|
|
45
|
+
return false;
|
|
46
|
+
}
|
|
47
|
+
if (req.method !== "GET") {
|
|
48
|
+
options.sendJson(req, res, 405, { error: "Method not allowed" });
|
|
49
|
+
return true;
|
|
50
|
+
}
|
|
51
|
+
await options.handleLegacySseConnection(req, res);
|
|
52
|
+
return true;
|
|
53
|
+
}
|
|
54
|
+
async function handleLegacyMessageRoute(req, res, pathname) {
|
|
55
|
+
if (!options.enableLegacySse || pathname !== options.legacyMessageEndpoint) {
|
|
56
|
+
return false;
|
|
57
|
+
}
|
|
58
|
+
if (req.method !== "POST") {
|
|
59
|
+
options.sendJson(req, res, 405, { error: "Method not allowed" });
|
|
60
|
+
return true;
|
|
61
|
+
}
|
|
62
|
+
await options.handleLegacyMessage(req, res);
|
|
63
|
+
return true;
|
|
64
|
+
}
|
|
65
|
+
async function handleAuthenticatedHttpRoute(req, res, pathname) {
|
|
66
|
+
if (await handleMcpHttpRoute(req, res, pathname)) {
|
|
67
|
+
return true;
|
|
68
|
+
}
|
|
69
|
+
if (await handleLegacySseRoute(req, res, pathname)) {
|
|
70
|
+
return true;
|
|
71
|
+
}
|
|
72
|
+
return handleLegacyMessageRoute(req, res, pathname);
|
|
73
|
+
}
|
|
74
|
+
function handleHttpRequestFailure(req, res, error) {
|
|
75
|
+
options.onError(error);
|
|
76
|
+
if (res.headersSent) {
|
|
77
|
+
return;
|
|
78
|
+
}
|
|
79
|
+
const response = options.errorResponse(error);
|
|
80
|
+
options.sendJson(req, res, response.statusCode, response.payload);
|
|
81
|
+
}
|
|
82
|
+
return async function handleHttpRequest(req, res) {
|
|
83
|
+
try {
|
|
84
|
+
const requestUrl = new URL(req.url ?? options.endpoint, "http://localhost");
|
|
85
|
+
options.attachCurrentRateLimitHeaders(res);
|
|
86
|
+
if (await options.handleRemoteHttpRequest(req, res, requestUrl.pathname)) {
|
|
87
|
+
return;
|
|
88
|
+
}
|
|
89
|
+
if (handlePublicHttpRoute(req, res, requestUrl.pathname)) {
|
|
90
|
+
return;
|
|
91
|
+
}
|
|
92
|
+
if (handleCorsPreflight(req, res, requestUrl.pathname)) {
|
|
93
|
+
return;
|
|
94
|
+
}
|
|
95
|
+
if (await options.rejectIfUnauthorized(req, res)) {
|
|
96
|
+
return;
|
|
97
|
+
}
|
|
98
|
+
if (await handleAuthenticatedHttpRoute(req, res, requestUrl.pathname)) {
|
|
99
|
+
return;
|
|
100
|
+
}
|
|
101
|
+
options.sendJson(req, res, 404, { error: "Not found" });
|
|
102
|
+
}
|
|
103
|
+
catch (error) {
|
|
104
|
+
handleHttpRequestFailure(req, res, error);
|
|
105
|
+
}
|
|
106
|
+
};
|
|
107
|
+
}
|
|
108
|
+
//# sourceMappingURL=http-server-router.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"http-server-router.js","sourceRoot":"","sources":["../src/http-server-router.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAyClE,MAAM,UAAU,wBAAwB,CAAC,OAAgC;IACvE,SAAS,qBAAqB,CAC5B,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO,CAAC,8BAA8B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAChF,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,KAAK,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAChE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC9B,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,aAAa;gBACtB,SAAS,EAAE,iBAAiB;aAC7B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,mBAAmB,CAC1B,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5E,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,yBAAyB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,wBAAwB,CACrC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,QAAQ,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,4BAA4B,CACzC,GAAoB,EACpB,GAAmB,EACnB,QAAgB;QAEhB,IAAI,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,SAAS,wBAAwB,CAC/B,GAAoB,EACpB,GAAmB,EACnB,KAAc;QAEd,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,KAAK,UAAU,iBAAiB,CACrC,GAAoB,EACpB,GAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAC5E,OAAO,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,IAAI,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,IAAI,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,IAAI,MAAM,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtE,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import { type Server } from "node:http";
|
|
2
|
+
import { type AppContainer } from "./container.js";
|
|
3
|
+
import { createRemoteControlPlane } from "./remote/control-plane.js";
|
|
4
|
+
import type { RemoteConfig } from "./remote/types.js";
|
|
5
|
+
export interface HttpServerRuntimeOptions {
|
|
6
|
+
container?: AppContainer;
|
|
7
|
+
remoteConfig?: RemoteConfig;
|
|
8
|
+
now?: () => number;
|
|
9
|
+
registerSignalHandlers?: boolean;
|
|
10
|
+
exitOnSignal?: boolean;
|
|
11
|
+
remoteControlPlaneFactory?: typeof createRemoteControlPlane;
|
|
12
|
+
}
|
|
13
|
+
export interface HttpServerRuntime {
|
|
14
|
+
readonly server: Server;
|
|
15
|
+
readonly sessionCount: number;
|
|
16
|
+
start(): Promise<void>;
|
|
17
|
+
close(reason?: string): Promise<void>;
|
|
18
|
+
}
|
|
19
|
+
export declare function createHttpServerRuntime(options?: HttpServerRuntimeOptions): HttpServerRuntime;
|
|
20
|
+
export declare function startHttpServer(options?: HttpServerRuntimeOptions): Promise<HttpServerRuntime>;
|
|
21
|
+
//# sourceMappingURL=http-server-runtime.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"http-server-runtime.d.ts","sourceRoot":"","sources":["../src/http-server-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAQnB,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAcpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAmBtD,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,yBAAyB,CAAC,EAAE,OAAO,wBAAwB,CAAC;CAC7D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,wBAA6B,GAAG,iBAAiB,CAgdjG;AAED,wBAAsB,eAAe,CACnC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAI5B"}
|