staff-mcp 1.3.0 → 2.0.0

package/dist/src/transports/reverse.js

@@ -1,78 +1,134 @@
-import { ReverseMCPClient } from "mcp-reverse/client";
-const DEFAULT_CONNECT_TIMEOUT_MS = 15_000;
-/**
- * Render an error with its full `cause` chain. Network failures from
- * Node's fetch surface as a bare "fetch failed" message; the actionable
- * reason (ECONNREFUSED, certificate errors, ...) lives in error.cause.
- */
-function formatErrorChain(error) {
-    const messages = [];
-    let current = error;
-    while (current instanceof Error) {
-        messages.push(current.message);
-        current = current.cause;
-    }
-    return messages.length > 0 ? messages.join("; cause: ") : String(error);
-}
-function createReverseLogger() {
-    const debugEnabled = process.env.STAFF_MCP_REVERSE_DEBUG === "1";
-    return {
-        debug: debugEnabled
-            ? (message, ...args) => console.error(`[staff-mcp][reverse][debug] ${message}`, ...args)
-            : () => { },
-        info: (message, ...args) => console.error(`[staff-mcp][reverse][info] ${message}`, ...args),
-        warn: (message, ...args) => console.error(`[staff-mcp][reverse][warn] ${message}`, ...args),
-        error: (message, ...args) => console.error(`[staff-mcp][reverse][error] ${message}`, ...args),
+import { performance } from 'node:perf_hooks';
+import { setTimeout as delay } from 'node:timers/promises';
+import { configureExtensionData } from '../extensions/runtime.js';
+import { HttpDataSession } from '../data/HttpDataSession.js';
+import { ReverseSseTransport } from '../reverse/SseTransport.js';
+import { createReverseHttp, reverseProxyUrl, validateReverseUrl, } from '../reverse/http.js';
+export { reverseProxyUrl, validateReverseUrl } from '../reverse/http.js';
+/** New HTTP pool, SDK transport and data resources per attempt; never replay requests or input. */
+export async function startReverseServer(serverFactory, value, token, name, options = {}) {
+    const url = validateReverseUrl(value);
+    const proxy = reverseProxyUrl(url, options.proxy);
+    if (!token || /\s/.test(token) || token.length > 4096)
+        throw new Error('Invalid reverse token.');
+    if (!name || name.length > 512 || /[\u0000-\u001f\u007f]/.test(name))
+        throw new Error('Invalid reverse server name.');
+    const log = options.logger ?? {
+        info: (message) => console.error(`[staff-mcp][reverse] ${message}`),
+        warn: (message) => console.error(`[staff-mcp][reverse] ${message}`),
+        error: (message) => console.error(`[staff-mcp][reverse] ${message}`),
     };
-}
-/**
- * Start a reverse MCP connection to a public gateway.
- *
- * The ReverseMCPClient owns transport lifecycle, reconnection, and MCP
- * protocol re-binding. start() launches the connection loop; readiness is
- * reported asynchronously through the connected event/log.
- */
-export async function startReverseServer(server, url, token, name, options = {}) {
-    const reconnectEnabled = options.reconnect?.enabled !== false;
-    const reverseLogger = options.logger ?? createReverseLogger();
-    const client = await ReverseMCPClient.createSSE(server, {
-        url,
-        serverName: name,
-        authToken: token,
-        connectTimeout: options.connectTimeout ?? DEFAULT_CONNECT_TIMEOUT_MS,
-        initializationTimeout: options.initializationTimeout,
-        heartbeat: options.heartbeat,
-        reconnect: {
-            initialDelay: 1000,
-            maxDelay: 30000,
-            multiplier: 2,
-            maxRetries: 0, // 0 = infinite
-            ...options.reconnect,
-        },
-    }, reverseLogger);
-    client.on("connected", () => {
-        reverseLogger.info(`MCP initialized and ready as "${name}"`);
-    });
-    client.on("disconnected", () => {
-        reverseLogger.warn(reconnectEnabled
-            ? "Gateway connection closed; automatic reconnect is enabled"
-            : "Gateway connection closed; automatic reconnect is disabled");
-    });
-    client.on("reconnecting", (completedAttempts) => {
-        if (completedAttempts === 0) {
-            reverseLogger.info("Reconnect cycle started");
-        }
-        else {
-            reverseLogger.info(`Connection lost after ${completedAttempts} attempt(s) in the current retry cycle`);
+    if (url.protocol === 'http:')
+        log.warn('Explicit HTTP reverse control uses plaintext; use HTTPS on untrusted networks.');
+    const abort = new AbortController();
+    let active;
+    let backoff = options.reconnect?.initialDelay ?? 1000;
+    const run = async () => {
+        while (!abort.signal.aborted) {
+            let server;
+            let initializedAt;
+            let previousInitialized;
+            let initializationTimer;
+            const attempt = new AbortController();
+            const stopped = () => {
+                attempt.abort();
+                void active?.close();
+            };
+            abort.signal.addEventListener('abort', stopped, { once: true });
+            const http = createReverseHttp(url, proxy, attempt.signal);
+            const transport = new ReverseSseTransport(url, { Authorization: `Bearer ${token}`, 'X-MCP-Server-Name': name }, http.fetch, options.connectTimeout, options.heartbeat?.readTimeout);
+            active = transport;
+            try {
+                server = serverFactory();
+                configureExtensionData(server, (binding, accept, signal, origin, supportsPurpose) => {
+                    if (origin !== undefined)
+                        throw new Error('Reverse data does not accept an advertised origin');
+                    const sessionId = transport.sessionId;
+                    if (!sessionId ||
+                        attempt.signal.aborted ||
+                        signal.aborted)
+                        throw new Error('Reverse data control session unavailable');
+                    const expected = new URL(url.href);
+                    expected.pathname =
+                        url.pathname.replace(/\/$/, '') +
+                            '/data/' +
+                            sessionId;
+                    return {
+                        session: new HttpDataSession({
+                            role: 'remote',
+                            binding,
+                            accept,
+                            supportsPurpose,
+                            fetch: http.fetch,
+                            validateEndpoint: (endpoint) => {
+                                if (endpoint.origin !== expected.origin ||
+                                    endpoint.pathname !==
+                                        expected.pathname ||
+                                    endpoint.username ||
+                                    endpoint.password ||
+                                    endpoint.search ||
+                                    endpoint.hash)
+                                    throw new Error('Reverse data endpoint rejected');
+                            },
+                        }),
+                    };
+                });
+                previousInitialized = server.server.oninitialized;
+                server.server.oninitialized = () => {
+                    previousInitialized?.();
+                    initializedAt = performance.now();
+                    clearTimeout(initializationTimer);
+                    log.info('MCP initialized on a new SSE session.');
+                };
+                await server.connect(transport);
+                // start() completes once the SSE endpoint is admitted; only then start the initialization deadline.
+                if (initializedAt === undefined) {
+                    initializationTimer = setTimeout(() => {
+                        void transport.close();
+                    }, options.initializationTimeout ?? 15000);
+                    initializationTimer.unref();
+                }
+                await transport.closed;
+            }
+            catch {
+                if (!abort.signal.aborted)
+                    log.warn('Connection attempt ended before readiness or control connection closed.');
+            }
+            finally {
+                clearTimeout(initializationTimer);
+                await transport.close().catch(() => { });
+                attempt.abort();
+                await http.close().catch(() => { });
+                abort.signal.removeEventListener('abort', stopped);
+                await server?.close();
+                if (server)
+                    server.server.oninitialized = previousInitialized;
+                active = undefined;
+            }
+            if (abort.signal.aborted || options.reconnect?.enabled === false)
+                break;
+            if (initializedAt !== undefined &&
+                performance.now() - initializedAt >=
+                    (options.reconnect?.stableConnectionMs ?? 30000))
+                backoff = options.reconnect?.initialDelay ?? 1000;
+            log.info('Disconnected; retrying with a new session and no replay.');
+            try {
+                await delay(backoff, undefined, { signal: abort.signal });
+            }
+            catch {
+                break;
+            }
+            backoff = Math.min(options.reconnect?.maxDelay ?? 30000, backoff * 2);
         }
-    });
-    client.on("error", (error) => {
-        reverseLogger.error(`Transport reported an error: ${formatErrorChain(error)}`);
-    });
-    client.on("failed", (error) => {
-        reverseLogger.error(`Reconnect budget exhausted: ${formatErrorChain(error)}`);
-    });
-    await client.start();
-    return client;
+    };
+    const closed = run();
+    return {
+        closed,
+        stop: async () => {
+            abort.abort();
+            await active?.close().catch(() => { });
+            await closed;
+        },
+    };
 }
 //# sourceMappingURL=reverse.js.map

package/dist/src/transports/reverse.js.map

@@ -1 +1 @@
-{"version":3,"file":"reverse.js","sourceRoot":"","sources":["../../../src/transports/reverse.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAetD,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,OAAO,OAAO,YAAY,KAAK,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,GAAI,OAA+B,CAAC,KAAK,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,mBAAmB;IACxB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC;IACjE,OAAO;QACH,KAAK,EAAE,YAAY;YACf,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;YACxF,CAAC,CAAC,GAAG,EAAE,GAAE,CAAC;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;QAC3F,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;QAC3F,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;KAChG,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAiB,EACjB,GAAW,EACX,KAAa,EACb,IAAY,EACZ,UAAgC,EAAE;IAElC,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK,CAAC;IAC9D,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAC3C,MAAM,EACN;QACI,GAAG;QACH,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,0BAA0B;QACpE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE;YACP,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,CAAC,EAAE,eAAe;YAC9B,GAAG,OAAO,CAAC,SAAS;SACvB;KACJ,EACD,aAAa,CAChB,CAAC;IAEF,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACxB,aAAa,CAAC,IAAI,CAAC,iCAAiC,IAAI,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QAC3B,aAAa,CAAC,IAAI,CACd,gBAAgB;YACZ,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,4DAA4D,CACrE,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,iBAAyB,EAAE,EAAE;QACpD,IAAI,iBAAiB,KAAK,CAAC,EAAE,CAAC;YAC1B,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACJ,aAAa,CAAC,IAAI,CAAC,yBAAyB,iBAAiB,wCAAwC,CAAC,CAAC;QAC3G,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;QAChC,aAAa,CAAC,KAAK,CAAC,gCAAgC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAY,EAAE,EAAE;QACjC,aAAa,CAAC,KAAK,CAAC,+BAA+B,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"reverse.js","sourceRoot":"","sources":["../../../src/transports/reverse.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EACH,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAwBzE,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,aAA8B,EAC9B,KAAa,EACb,KAAa,EACb,IAAY,EACZ,UAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QACjD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI;QAC1B,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CACtB,OAAO,CAAC,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC;QACpD,IAAI,EAAE,CAAC,OAAe,EAAE,EAAE,CACtB,OAAO,CAAC,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC,OAAe,EAAE,EAAE,CACvB,OAAO,CAAC,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC;KACvD,CAAC;IACF,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,GAAG,CAAC,IAAI,CACJ,gFAAgF,CACnF,CAAC;IACN,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,IAAI,MAAuC,CAAC;IAE5C,IAAI,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,IAAI,IAAI,CAAC;IACtD,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,MAA6B,CAAC;YAClC,IAAI,aAAiC,CAAC;YACtC,IAAI,mBAA6C,CAAC;YAClD,IAAI,mBAA+C,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,GAAG,EAAE;gBACjB,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC;YACzB,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CACrC,GAAG,EACH,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAC/D,IAAI,CAAC,KAAK,EACV,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,SAAS,EAAE,WAAW,CACjC,CAAC;YACF,MAAM,GAAG,SAAS,CAAC;YACnB,IAAI,CAAC;gBACD,MAAM,GAAG,aAAa,EAAE,CAAC;gBACzB,sBAAsB,CAClB,MAAM,EACN,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE;oBACjD,IAAI,MAAM,KAAK,SAAS;wBACpB,MAAM,IAAI,KAAK,CACX,mDAAmD,CACtD,CAAC;oBACN,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;oBACtC,IACI,CAAC,SAAS;wBACV,OAAO,CAAC,MAAM,CAAC,OAAO;wBACtB,MAAM,CAAC,OAAO;wBAEd,MAAM,IAAI,KAAK,CACX,0CAA0C,CAC7C,CAAC;oBACN,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACnC,QAAQ,CAAC,QAAQ;wBACb,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;4BAC/B,QAAQ;4BACR,SAAS,CAAC;oBACd,OAAO;wBACH,OAAO,EAAE,IAAI,eAAe,CAAC;4BACzB,IAAI,EAAE,QAAQ;4BACd,OAAO;4BACP,MAAM;4BACN,eAAe;4BACf,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE;gCAC3B,IACI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;oCACnC,QAAQ,CAAC,QAAQ;wCACb,QAAQ,CAAC,QAAQ;oCACrB,QAAQ,CAAC,QAAQ;oCACjB,QAAQ,CAAC,QAAQ;oCACjB,QAAQ,CAAC,MAAM;oCACf,QAAQ,CAAC,IAAI;oCAEb,MAAM,IAAI,KAAK,CACX,gCAAgC,CACnC,CAAC;4BACV,CAAC;yBACJ,CAAC;qBACL,CAAC;gBACN,CAAC,CACJ,CAAC;gBACF,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;gBAClD,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE;oBAC/B,mBAAmB,EAAE,EAAE,CAAC;oBACxB,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;oBAClC,YAAY,CAAC,mBAAmB,CAAC,CAAC;oBAClC,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;gBACtD,CAAC,CAAC;gBACF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAChC,oGAAoG;gBACpG,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;oBAC9B,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;wBAClC,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;oBAC3B,CAAC,EAAE,OAAO,CAAC,qBAAqB,IAAI,KAAK,CAAC,CAAC;oBAC3C,mBAAmB,CAAC,KAAK,EAAE,CAAC;gBAChC,CAAC;gBACD,MAAM,SAAS,CAAC,MAAM,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACL,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;oBACrB,GAAG,CAAC,IAAI,CACJ,yEAAyE,CAC5E,CAAC;YACV,CAAC;oBAAS,CAAC;gBACP,YAAY,CAAC,mBAAmB,CAAC,CAAC;gBAClC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACxC,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;gBACtB,IAAI,MAAM;oBAAE,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,mBAAmB,CAAC;gBAC9D,MAAM,GAAG,SAAS,CAAC;YACvB,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK;gBAC5D,MAAM;YACV,IACI,aAAa,KAAK,SAAS;gBAC3B,WAAW,CAAC,GAAG,EAAE,GAAG,aAAa;oBAC7B,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,IAAI,KAAK,CAAC;gBAEpD,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,IAAI,IAAI,CAAC;YACtD,GAAG,CAAC,IAAI,CACJ,0DAA0D,CAC7D,CAAC;YACF,IAAI,CAAC;gBACD,MAAM,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM;YACV,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,GAAG,CACd,OAAO,CAAC,SAAS,EAAE,QAAQ,IAAI,KAAK,EACpC,OAAO,GAAG,CAAC,CACd,CAAC;QACN,CAAC;IACL,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;IACrB,OAAO;QACH,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE;YACb,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,MAAM,MAAM,CAAC;QACjB,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/src/transports/stdio.d.ts

@@ -1,3 +1,6 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export declare function redirectStdioLogsToStderr(): void;
-export declare function startStdioServer(server: McpServer): Promise<void>;
+export declare function startStdioServer(server: McpServer): Promise<{
+    stop: () => Promise<void>;
+    closed: Promise<void>;
+}>;

package/dist/src/transports/stdio.js

@@ -1,31 +1,141 @@
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from 'node:http';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { HttpDataSession } from '../data/HttpDataSession.js';
+import { handleNodeRequest } from '../data/node.js';
+import { readDockerDataBaseUrl } from '../data-stdio-docker.js';
+import { configureExtensionData } from '../extensions/runtime.js';
+import { extensionError } from '../extensions/protocol.js';
 export function redirectStdioLogsToStderr() {
-    // MCP stdio reserves stdout for JSON-RPC frames. Redirect ordinary
-    // console.log output before bootstrap code can write to stdout.
-    console.log = (...args) => {
-        console.error(...args);
-    };
+    // MCP stdio reserves stdout for JSON-RPC frames.
+    console.log = (...args) => console.error(...args);
 }
 export async function startStdioServer(server) {
+    configureExtensionData(server, async (binding, accept, signal, origin, supportsPurpose) => {
+        if (origin !== undefined)
+            extensionError('INVALID_PARAMS', 'Stdio data does not accept an advertised origin');
+        const dockerBase = await readDockerDataBaseUrl();
+        signal.throwIfAborted();
+        const host = dockerBase
+            ? process.env.STAFF_MCP_DATA_HOST
+            : '127.0.0.1';
+        const port = dockerBase
+            ? Number(process.env.STAFF_MCP_DATA_PORT)
+            : 0;
+        if (dockerBase && (host !== '0.0.0.0' || port !== 39173))
+            throw new Error('Invalid Docker data listener configuration.');
+        let session;
+        const listener = createServer((request, response) => {
+            if (!session) {
+                response.writeHead(503);
+                response.end();
+                return;
+            }
+            void handleNodeRequest(session, request, response).then((handled) => {
+                if (!handled) {
+                    response.writeHead(404);
+                    response.end();
+                }
+            });
+        });
+        const close = () => new Promise((resolve) => {
+            listener.closeAllConnections();
+            listener.close(() => resolve());
+        });
+        const onAbort = () => {
+            void close();
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+        try {
+            await new Promise((resolve, reject) => {
+                listener.once('error', reject);
+                listener.listen(port, host, () => {
+                    listener.removeListener('error', reject);
+                    resolve();
+                });
+            });
+            signal.throwIfAborted();
+            const localBase = `http://127.0.0.1:${listener.address().port}`;
+            const endpoint = `${dockerBase ?? localBase}/mcp/data/${binding}`;
+            session = new HttpDataSession({
+                role: 'remote',
+                binding,
+                endpoint,
+                accept,
+                supportsPurpose,
+                // Listener mode must never follow a peer-supplied outbound descriptor.
+                fetch: async () => {
+                    throw new Error('Outbound data is unavailable in stdio listener mode');
+                },
+                validateEndpoint: () => {
+                    throw new Error('Outbound data endpoint is unavailable in stdio listener mode');
+                },
+            });
+            return {
+                session,
+                endpoint,
+                close: () => {
+                    signal.removeEventListener('abort', onAbort);
+                    return close();
+                },
+            };
+        }
+        catch (error) {
+            signal.removeEventListener('abort', onAbort);
+            session?.close();
+            await close();
+            throw error;
+        }
+    });
     const transport = new StdioServerTransport();
+    let resolveClosed;
+    let rejectClosed;
+    const closed = new Promise((resolve, reject) => {
+        resolveClosed = resolve;
+        rejectClosed = reject;
+    });
+    // EOF may arrive before the caller receives the controller.
+    void closed.catch(() => { });
+    let stopping;
+    let inputError;
+    const stop = () => {
+        stopping ??= Promise.resolve().then(async () => {
+            process.stdin.removeListener('end', onStdinClosed);
+            process.stdin.removeListener('close', onStdinClosed);
+            process.stdin.removeListener('error', onStdinError);
+            try {
+                await server.close();
+                if (inputError)
+                    throw inputError;
+                resolveClosed();
+            }
+            catch (error) {
+                rejectClosed(error);
+                throw error;
+            }
+        });
+        return stopping;
+    };
+    const onStdinClosed = () => {
+        void stop().catch(() => { });
+    };
+    const onStdinError = () => {
+        inputError = new Error('MCP input stream failed.');
+        onStdinClosed();
+    };
+    transport.onclose = onStdinClosed;
+    process.stdin.once('end', onStdinClosed);
+    process.stdin.once('close', onStdinClosed);
+    process.stdin.once('error', onStdinError);
     try {
         await server.connect(transport);
-        console.error("MCP Server (Stdio) is running.");
-        // The SDK's StdioServerTransport only listens for 'data'/'error' on stdin
-        // and never notices EOF. When the client goes away, stdin closes — shut
-        // down instead of lingering as an orphan held up by long-lived handles
-        // (LSP servers, intervals, background tasks). The process 'exit' hook
-        // registered by the shell tools also cleans up any background task groups.
-        const onStdinClosed = () => {
-            console.error("[staff-mcp] stdin closed (client disconnected), shutting down.");
-            process.exit(0);
-        };
-        process.stdin.on("end", onStdinClosed);
-        process.stdin.on("close", onStdinClosed);
+        if (process.stdin.readableEnded || process.stdin.destroyed)
+            onStdinClosed();
+        console.error('MCP Server (Stdio) is running.');
+        return { stop, closed };
     }
     catch (error) {
-        console.error("Stdio connection failed:", error);
-        process.exit(1);
+        await stop().catch(() => { });
+        throw error;
     }
 }
 //# sourceMappingURL=stdio.js.map

package/dist/src/transports/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../src/transports/stdio.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,MAAM,UAAU,yBAAyB;IACvC,mEAAmE;IACnE,gEAAgE;IAChE,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE;QACxB,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAiB;IACtD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAEhD,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../../src/transports/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,MAAM,UAAU,yBAAyB;IACrC,iDAAiD;IACjD,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAiB;IACpD,sBAAsB,CAClB,MAAM,EACN,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE;QACvD,IAAI,MAAM,KAAK,SAAS;YACpB,cAAc,CACV,gBAAgB,EAChB,iDAAiD,CACpD,CAAC;QACN,MAAM,UAAU,GAAG,MAAM,qBAAqB,EAAE,CAAC;QACjD,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU;YACnB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB;YACjC,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,IAAI,GAAG,UAAU;YACnB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACzC,CAAC,CAAC,CAAC,CAAC;QACR,IAAI,UAAU,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnE,IAAI,OAAoC,CAAC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACxB,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO;YACX,CAAC;YACD,KAAK,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CACnD,CAAC,OAAO,EAAE,EAAE;gBACR,IAAI,CAAC,OAAO,EAAE,CAAC;oBACX,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACxB,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACnB,CAAC;YACL,CAAC,CACJ,CAAC;QACN,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,EAAE,CACf,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC1B,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC/B,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,KAAK,KAAK,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC/B,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;oBAC7B,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACzC,OAAO,EAAE,CAAC;gBACd,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,oBAAqB,QAAQ,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;YACjF,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,SAAS,aAAa,OAAO,EAAE,CAAC;YAClE,OAAO,GAAG,IAAI,eAAe,CAAC;gBAC1B,IAAI,EAAE,QAAQ;gBACd,OAAO;gBACP,QAAQ;gBACR,MAAM;gBACN,eAAe;gBACf,uEAAuE;gBACvE,KAAK,EAAE,KAAK,IAAI,EAAE;oBACd,MAAM,IAAI,KAAK,CACX,qDAAqD,CACxD,CAAC;gBACN,CAAC;gBACD,gBAAgB,EAAE,GAAG,EAAE;oBACnB,MAAM,IAAI,KAAK,CACX,8DAA8D,CACjE,CAAC;gBACN,CAAC;aACJ,CAAC,CAAC;YACH,OAAO;gBACH,OAAO;gBACP,QAAQ;gBACR,KAAK,EAAE,GAAG,EAAE;oBACR,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7C,OAAO,KAAK,EAAE,CAAC;gBACnB,CAAC;aACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC,CACJ,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,IAAI,aAA0B,CAAC;IAC/B,IAAI,YAAuC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjD,aAAa,GAAG,OAAO,CAAC;QACxB,YAAY,GAAG,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,4DAA4D;IAC5D,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAmC,CAAC;IACxC,IAAI,UAA6B,CAAC;IAClC,MAAM,IAAI,GAAG,GAAG,EAAE;QACd,QAAQ,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC3C,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACrD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,CAAC;gBACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,IAAI,UAAU;oBAAE,MAAM,UAAU,CAAC;gBACjC,aAAa,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAG,EAAE;QACvB,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,EAAE;QACtB,UAAU,GAAG,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACnD,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC;IACF,SAAS,CAAC,OAAO,GAAG,aAAa,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACzC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS;YACtD,aAAa,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/src/utils/proxy.d.ts

@@ -1,9 +1,9 @@
-import { Agent, Dispatcher } from "undici";
+import { Agent, Dispatcher } from 'undici';
 /**
  * Whether proxy environment variables are present (NO_PROXY alone does not count).
  */
 export declare function hasProxyEnv(env?: NodeJS.ProcessEnv): boolean;
-export type NoProxyEntryKind = "wildcard" | "exact" | "suffix" | "cidr4" | "cidr6";
+export type NoProxyEntryKind = 'wildcard' | 'exact' | 'suffix' | 'cidr4' | 'cidr6';
 export interface NoProxyEntry {
     kind: NoProxyEntryKind;
     /** normalized host: lowercase, no trailing dot, no IPv6 brackets */