youtube-knowledge-mcp 2.0.2 → 2.2.0

package/dist/http/app.js

@@ -0,0 +1,176 @@
+import { randomUUID } from 'node:crypto';
+import express from 'express';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { hostHeaderValidation, localhostHostValidation, } from '@modelcontextprotocol/sdk/server/middleware/hostHeaderValidation.js';
+import { isInitializeRequest } from '@modelcontextprotocol/sdk/types.js';
+import { runPreflight } from '../utils/preflight.js';
+import { serverVersion } from '../utils/version.js';
+import { bearerToken, clientKey, jsonRpcError, publicBaseUrl, securityHeaders, sessionIdOf, tokenMatches, } from './auth.js';
+import { isLoopback } from './config.js';
+export function buildApp(config, deps) {
+    const { createServer, sessions, limiter, port, startedAt } = deps;
+    const app = express();
+    // `req.ip` honours forwarded headers only when the operator names the proxies.
+    app.set('trust proxy', config.trustProxy);
+    app.disable('x-powered-by');
+    app.use(securityHeaders());
+    // Every route, before anything else: an unauthenticated flood is still a flood.
+    app.use((req, res, next) => {
+        const { allowed, remaining, retryAfter } = limiter.check(clientKey(req));
+        res.setHeader('RateLimit-Limit', String(config.rateLimit));
+        res.setHeader('RateLimit-Remaining', String(remaining));
+        if (allowed) {
+            next();
+            return;
+        }
+        // Without Retry-After a client has no idea how long to wait.
+        res.setHeader('Retry-After', String(retryAfter));
+        jsonRpcError(res, 429, -32000, `Rate limit exceeded. Retry in ${retryAfter}s.`);
+    });
+    function hasValidToken(req) {
+        return (config.authToken === undefined ||
+            tokenMatches(bearerToken(req.headers.authorization), config.authToken));
+    }
+    /** Returns true when the request may proceed; otherwise it has been answered. */
+    function authorize(req, res) {
+        if (hasValidToken(req))
+            return true;
+        // RFC 9728: point unauthenticated callers at the resource metadata.
+        const metadata = `${publicBaseUrl(config, req, port())}/.well-known/oauth-protected-resource`;
+        res.setHeader('WWW-Authenticate', `Bearer realm="youtube-knowledge-mcp", resource_metadata="${metadata}"`);
+        jsonRpcError(res, 401, -32001, 'Unauthorized');
+        return false;
+    }
+    // Ahead of Host validation on purpose: a container's own HEALTHCHECK and every
+    // platform probe arrive over loopback with a Host the allowlist may not name,
+    // and a service that 403s its probe never goes live. Unauthenticated callers
+    // learn only whether the service is up; versions and counts need the token.
+    app.get('/health', (req, res) => {
+        void runPreflight().then((report) => {
+            const status = report.ok ? 'ok' : 'degraded';
+            const body = hasValidToken(req)
+                ? {
+                    status,
+                    version: serverVersion(),
+                    uptimeSeconds: Math.round((Date.now() - startedAt) / 1000),
+                    ytDlp: report.ytDlp,
+                    ffmpeg: report.ffmpeg,
+                    sessions: sessions.size,
+                }
+                : { status };
+            res.writeHead(report.ok ? 200 : 503, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify(body));
+        });
+    });
+    app.use(express.json({ limit: config.maxBodyBytes }));
+    app.use(bodyErrorHandler);
+    // The same decision the SDK's createMcpExpressApp makes, made explicitly so a
+    // body limit could be configured: an allowlist when one is given, loopback
+    // validation when bound to loopback, nothing when bound wide (a token is
+    // then required by assertSafeToStart).
+    if (config.allowedHosts.length > 0)
+        app.use(hostHeaderValidation(config.allowedHosts));
+    else if (isLoopback(config.bindHost))
+        app.use(localhostHostValidation());
+    app.post('/mcp', async (req, res) => {
+        if (!authorize(req, res))
+            return;
+        const sessionId = sessionIdOf(req);
+        try {
+            const existing = sessionId === undefined ? undefined : sessions.get(sessionId);
+            if (existing !== undefined && sessionId !== undefined) {
+                sessions.touch(sessionId);
+                await existing.transport.handleRequest(req, res, req.body);
+                return;
+            }
+            if (!sessionId && isInitializeRequest(req.body)) {
+                await openSession(req, res);
+                return;
+            }
+            jsonRpcError(res, 400, -32000, 'Bad Request: No valid session ID provided');
+        }
+        catch (error) {
+            console.error('Error handling MCP request:', error);
+            jsonRpcError(res, 500, -32603, 'Internal server error');
+        }
+    });
+    async function openSession(req, res) {
+        // Reserved before the first await, so concurrent initializes cannot all
+        // pass a size check and overshoot the cap together.
+        if (!sessions.reserve()) {
+            jsonRpcError(res, 503, -32000, 'Server is at capacity. Try again shortly.');
+            return;
+        }
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            // Hosts are checked by the port-agnostic middleware above on every
+            // route; the transport's own check would compare the whole Host header,
+            // port included, and reject every deployment on a non-default port.
+            ...(config.allowedOrigins.length > 0
+                ? { enableDnsRebindingProtection: true, allowedOrigins: config.allowedOrigins }
+                : {}),
+            onsessioninitialized: (id) => {
+                sessions.commit(id, transport);
+            },
+        });
+        transport.onclose = () => {
+            if (transport.sessionId)
+                sessions.delete(transport.sessionId);
+        };
+        try {
+            await createServer('http').connect(transport);
+            await transport.handleRequest(req, res, req.body);
+        }
+        finally {
+            // The transport carries an id only once the session was initialised, so
+            // its absence means the reservation was never turned into a session.
+            if (transport.sessionId === undefined)
+                sessions.release();
+        }
+    }
+    const bySession = async (req, res) => {
+        if (!authorize(req, res))
+            return;
+        const sessionId = sessionIdOf(req);
+        const session = sessionId === undefined ? undefined : sessions.get(sessionId);
+        if (sessionId === undefined || session === undefined) {
+            jsonRpcError(res, 404, -32001, 'Invalid or missing session ID');
+            return;
+        }
+        sessions.touch(sessionId);
+        await session.transport.handleRequest(req, res);
+    };
+    app.get('/mcp', bySession);
+    app.delete('/mcp', bySession);
+    // RFC 9728 protected-resource metadata, so OAuth-capable clients can discover
+    // how to authenticate instead of guessing.
+    app.get('/.well-known/oauth-protected-resource', (req, res) => {
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({
+            resource: `${publicBaseUrl(config, req, port())}/mcp`,
+            bearer_methods_supported: ['header'],
+            resource_documentation: 'https://github.com/teobouancheau/youtube-knowledge-mcp#readme',
+        }));
+    });
+    return app;
+}
+/**
+ * Body-parser failures arrive as errors with an HTTP status; Express 5 routes
+ * them to the first four-argument middleware. Answered in the JSON-RPC shape
+ * every other refusal uses, and never with the parser's own message.
+ */
+function bodyErrorHandler(error, _req, res, next) {
+    const status = typeof error === 'object' && error !== null && 'status' in error
+        ? Number(error.status)
+        : Number.NaN;
+    if (status === 413) {
+        jsonRpcError(res, 413, -32600, 'Request body too large.');
+        return;
+    }
+    if (status >= 400 && status < 500) {
+        jsonRpcError(res, status, -32700, 'Request body could not be parsed.');
+        return;
+    }
+    next(error);
+}
+//# sourceMappingURL=app.js.map

package/dist/http/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qEAAqE,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,eAAe,EACf,WAAW,EACX,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AAe1D,MAAM,UAAU,QAAQ,CAAC,MAAkB,EAAE,IAAqB;IAChE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAClE,MAAM,GAAG,GAAY,OAAO,EAAE,CAAC;IAE/B,+EAA+E;IAC/E,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;IAE3B,gFAAgF;IAChF,GAAG,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC1D,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACzE,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,6DAA6D;QAC7D,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACjD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,iCAAiC,UAAU,IAAI,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,SAAS,aAAa,CAAC,GAAY;QACjC,OAAO,CACL,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,SAAS,SAAS,CAAC,GAAY,EAAE,GAAa;QAC5C,IAAI,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,oEAAoE;QACpE,MAAM,QAAQ,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,uCAAuC,CAAC;QAC9F,GAAG,CAAC,SAAS,CACX,kBAAkB,EAClB,4DAA4D,QAAQ,GAAG,CACxE,CAAC;QACF,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACjD,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC;gBAC7B,CAAC,CAAC;oBACE,MAAM;oBACN,OAAO,EAAE,aAAa,EAAE;oBACxB,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;oBAC1D,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;iBACxB;gBACH,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACtD,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE1B,8EAA8E;IAC9E,2EAA2E;IAC3E,yEAAyE;IACzE,uCAAuC;IACvC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;SAClF,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAEzE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/E,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBACtD,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC1B,MAAM,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,2CAA2C,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,WAAW,CAAC,GAAY,EAAE,GAAa;QACpD,wEAAwE;QACxE,oDAAoD;QACpD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACxB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,2CAA2C,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,mEAAmE;YACnE,wEAAwE;YACxE,oEAAoE;YACpE,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;gBAClC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;gBAC/E,CAAC,CAAC,EAAE,CAAC;YACP,oBAAoB,EAAE,CAAC,EAAU,EAAE,EAAE;gBACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACjC,CAAC;SACF,CAAC,CAAC;QAEH,SAAS,CAAC,OAAO,GAAG,GAAS,EAAE;YAC7B,IAAI,SAAS,CAAC,SAAS;gBAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;gBAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QACrE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9E,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACrD,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1B,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE9B,8EAA8E;IAC9E,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;YACb,QAAQ,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM;YACrD,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,sBAAsB,EAAE,+DAA+D;SACxF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAa,EAAE,GAAa,EAAE,IAAkB;IACxF,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK;QAC9D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAEjB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAClC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC"}

package/dist/http/auth.d.ts

@@ -0,0 +1,38 @@
+import type { Request, RequestHandler, Response } from 'express';
+import type { HttpConfig } from './config.js';
+/** Bearer tokens, client identity, session ids and the JSON-RPC error envelope. */
+/**
+ * Compare a presented token against the configured one in constant time, so the
+ * endpoint does not leak the token's prefix through response timing.
+ */
+export declare function tokenMatches(presented: string | undefined, expected: string): boolean;
+export declare function bearerToken(header: string | undefined): string | undefined;
+/**
+ * The key a client is rate-limited under.
+ *
+ * `req.ip` is what Express derives after applying the `trust proxy` setting:
+ * the socket address by default, and the forwarded client only when the
+ * operator has said which proxies to believe. Reading `X-Forwarded-For`
+ * directly, as this once did, let any caller mint a fresh quota per request.
+ */
+export declare function clientKey(req: Request): string;
+/**
+ * Node parses a repeated header into an array, so this field is genuinely
+ * `string | string[] | undefined`. Asserting it was always a string meant a
+ * request that sent `Mcp-Session-Id` twice reached `sessions.get()` holding an
+ * array, missed every session, and was reported as an invalid session ID.
+ * Ambiguous is treated as absent: two session IDs identify no session.
+ */
+export declare function sessionIdOf(req: Request): string | undefined;
+export declare function jsonRpcError(res: Response, status: number, code: number, message: string): void;
+/**
+ * The base URL this server publishes in OAuth metadata.
+ *
+ * Configuration first; the request's own view of itself only when a proxy is
+ * trusted to have set it. Reflecting `Host` unconditionally let anyone who
+ * could reach the endpoint choose the address other clients were told to use.
+ */
+export declare function publicBaseUrl(config: HttpConfig, req: Request, port: number): string;
+/** Headers every response carries; none of them cost anything for an API. */
+export declare function securityHeaders(): RequestHandler;
+//# sourceMappingURL=auth.d.ts.map

package/dist/http/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/http/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,mFAAmF;AAEnF;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAarF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAG5D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAI/F;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIpF;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,IAAI,cAAc,CAQhD"}

package/dist/http/auth.js

@@ -0,0 +1,79 @@
+import { timingSafeEqual } from 'node:crypto';
+/** Bearer tokens, client identity, session ids and the JSON-RPC error envelope. */
+/**
+ * Compare a presented token against the configured one in constant time, so the
+ * endpoint does not leak the token's prefix through response timing.
+ */
+export function tokenMatches(presented, expected) {
+    if (presented === undefined)
+        return false;
+    const a = Buffer.from(presented);
+    const b = Buffer.from(expected);
+    // timingSafeEqual throws on length mismatch, which would itself be a leak;
+    // hash-free equalisation keeps the comparison constant-time for equal lengths
+    // and constant-result for unequal ones.
+    if (a.length !== b.length) {
+        timingSafeEqual(a, a);
+        return false;
+    }
+    return timingSafeEqual(a, b);
+}
+export function bearerToken(header) {
+    if (!header)
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match?.[1];
+}
+/**
+ * The key a client is rate-limited under.
+ *
+ * `req.ip` is what Express derives after applying the `trust proxy` setting:
+ * the socket address by default, and the forwarded client only when the
+ * operator has said which proxies to believe. Reading `X-Forwarded-For`
+ * directly, as this once did, let any caller mint a fresh quota per request.
+ */
+export function clientKey(req) {
+    return req.ip ?? req.socket.remoteAddress ?? 'unknown';
+}
+/**
+ * Node parses a repeated header into an array, so this field is genuinely
+ * `string | string[] | undefined`. Asserting it was always a string meant a
+ * request that sent `Mcp-Session-Id` twice reached `sessions.get()` holding an
+ * array, missed every session, and was reported as an invalid session ID.
+ * Ambiguous is treated as absent: two session IDs identify no session.
+ */
+export function sessionIdOf(req) {
+    const header = req.headers['mcp-session-id'];
+    return typeof header === 'string' ? header : undefined;
+}
+export function jsonRpcError(res, status, code, message) {
+    if (res.headersSent)
+        return;
+    res.writeHead(status, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ jsonrpc: '2.0', error: { code, message }, id: null }));
+}
+/**
+ * The base URL this server publishes in OAuth metadata.
+ *
+ * Configuration first; the request's own view of itself only when a proxy is
+ * trusted to have set it. Reflecting `Host` unconditionally let anyone who
+ * could reach the endpoint choose the address other clients were told to use.
+ */
+export function publicBaseUrl(config, req, port) {
+    if (config.publicUrl !== undefined)
+        return config.publicUrl;
+    if (config.trustProxy !== false)
+        return `${req.protocol}://${req.get('host') ?? ''}`;
+    return `http://${config.bindHost}:${port}`;
+}
+/** Headers every response carries; none of them cost anything for an API. */
+export function securityHeaders() {
+    return (_req, res, next) => {
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.setHeader('Cache-Control', 'no-store');
+        res.setHeader('Referrer-Policy', 'no-referrer');
+        res.setHeader('X-Frame-Options', 'DENY');
+        next();
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/http/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/http/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAI9C,mFAAmF;AAEnF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAA6B,EAAE,QAAgB;IAC1E,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,2EAA2E;IAC3E,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA0B;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAa,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACvF,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO;IAC5B,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkB,EAAE,GAAY,EAAE,IAAY;IAC1E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC;IAC5D,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACrF,OAAO,UAAU,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/config.d.ts

@@ -0,0 +1,41 @@
+/** Deployment configuration for the Streamable HTTP transport, read from the environment. */
+export interface HttpConfig {
+    port: number;
+    /** Interface to bind. Loopback by default; containers set 0.0.0.0 explicitly. */
+    bindHost: string;
+    /** When set, every request must present this as a bearer token. */
+    authToken?: string;
+    /** Host header allowlist. Empty means "accept any", which is only safe behind a proxy. */
+    allowedHosts: string[];
+    /** Origin header allowlist for browser callers. */
+    allowedOrigins: string[];
+    rateLimit: number;
+    rateWindowMs: number;
+    /** Sessions idle longer than this are closed, so the map cannot grow forever. */
+    sessionIdleMs: number;
+    maxSessions: number;
+    /**
+     * Whether `X-Forwarded-*` headers are believed: `false`, `true`, or the number
+     * of proxy hops in front of the server. Off by default, because a client can
+     * write those headers itself.
+     */
+    trustProxy: boolean | number;
+    /** The URL clients reach this server at, for the OAuth metadata it publishes. */
+    publicUrl?: string;
+    /** Largest request body accepted, in bytes. */
+    maxBodyBytes: number;
+    /** Explicit consent to listen on a non-loopback interface without a token. */
+    allowUnauthenticated: boolean;
+}
+export declare const DEFAULT_MAX_BODY_BYTES: number;
+export declare function readHttpConfig(): HttpConfig;
+export declare function isLoopback(host: string): boolean;
+/**
+ * Refuse to expose an unauthenticated server to a network.
+ *
+ * Binding beyond loopback with no token used to be the default and was merely
+ * logged. Now it is a startup error unless the operator has said, in so many
+ * words, that they mean it.
+ */
+export declare function assertSafeToStart(config: HttpConfig): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/http/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/http/config.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAE7F,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mDAAmD;IACnD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAsBlD,wBAAgB,cAAc,IAAI,UAAU,CAkB3C;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAY1D"}

package/dist/http/config.js

@@ -0,0 +1,65 @@
+import { envBool, envInt, envList, envString } from '../utils/env.js';
+export const DEFAULT_MAX_BODY_BYTES = 1024 * 1024;
+function readTrustProxy() {
+    const raw = envString('MCP_TRUST_PROXY');
+    if (raw === undefined)
+        return false;
+    if (/^\d+$/.test(raw))
+        return Number(raw);
+    return envBool('MCP_TRUST_PROXY', false);
+}
+function readPublicUrl() {
+    const raw = envString('MCP_PUBLIC_URL');
+    if (raw === undefined)
+        return undefined;
+    try {
+        const url = new URL(raw);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            throw new Error('scheme');
+        return url.toString().replace(/\/+$/, '');
+    }
+    catch {
+        console.error('Ignoring MCP_PUBLIC_URL: not an http(s) URL.');
+        return undefined;
+    }
+}
+export function readHttpConfig() {
+    const publicUrl = readPublicUrl();
+    return {
+        port: envInt('PORT', 3000, { min: 1, max: 65_535 }),
+        bindHost: envString('MCP_BIND_HOST') ?? '127.0.0.1',
+        // An empty MCP_AUTH_TOKEN must mean "no auth", not "the empty token".
+        authToken: envString('MCP_AUTH_TOKEN'),
+        allowedHosts: envList('MCP_ALLOWED_HOSTS'),
+        allowedOrigins: envList('MCP_ALLOWED_ORIGINS'),
+        rateLimit: envInt('MCP_RATE_LIMIT', 60, { min: 1 }),
+        rateWindowMs: envInt('MCP_RATE_WINDOW_MS', 60_000, { min: 1 }),
+        sessionIdleMs: envInt('MCP_SESSION_IDLE_MS', 30 * 60_000, { min: 1 }),
+        maxSessions: envInt('MCP_MAX_SESSIONS', 1000, { min: 1 }),
+        trustProxy: readTrustProxy(),
+        ...(publicUrl === undefined ? {} : { publicUrl }),
+        maxBodyBytes: envInt('MCP_MAX_BODY_BYTES', DEFAULT_MAX_BODY_BYTES, { min: 1024 }),
+        allowUnauthenticated: envBool('MCP_ALLOW_UNAUTHENTICATED', false),
+    };
+}
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1', '::ffff:127.0.0.1']);
+export function isLoopback(host) {
+    return LOOPBACK_HOSTS.has(host.toLowerCase());
+}
+/**
+ * Refuse to expose an unauthenticated server to a network.
+ *
+ * Binding beyond loopback with no token used to be the default and was merely
+ * logged. Now it is a startup error unless the operator has said, in so many
+ * words, that they mean it.
+ */
+export function assertSafeToStart(config) {
+    if (isLoopback(config.bindHost) ||
+        config.authToken !== undefined ||
+        config.allowUnauthenticated) {
+        return;
+    }
+    throw new Error(`Refusing to listen on ${config.bindHost} without authentication. ` +
+        'Set MCP_AUTH_TOKEN, or set MCP_ALLOW_UNAUTHENTICATED=true to run open on purpose.');
+}
+//# sourceMappingURL=config.js.map

package/dist/http/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/http/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAiCtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACnD,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,IAAI,WAAW;QACnD,sEAAsE;QACtE,SAAS,EAAE,SAAS,CAAC,gBAAgB,CAAC;QACtC,YAAY,EAAE,OAAO,CAAC,mBAAmB,CAAC;QAC1C,cAAc,EAAE,OAAO,CAAC,qBAAqB,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACnD,YAAY,EAAE,MAAM,CAAC,oBAAoB,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC9D,aAAa,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACrE,WAAW,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACzD,UAAU,EAAE,cAAc,EAAE;QAC5B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,YAAY,EAAE,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACjF,oBAAoB,EAAE,OAAO,CAAC,2BAA2B,EAAE,KAAK,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEtF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IACE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC3B,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,MAAM,CAAC,oBAAoB,EAC3B,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,QAAQ,2BAA2B;QACjE,mFAAmF,CACtF,CAAC;AACJ,CAAC"}

package/dist/http/rate-limiter.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Fixed-window counter, per client.
+ *
+ * The map is capped as well as swept. A client that can vary its key at will
+ * — which is what an unvalidated forwarding header allowed — could otherwise
+ * grow it without limit inside a single window.
+ */
+export declare class RateLimiter {
+    private readonly limit;
+    private readonly windowMs;
+    private readonly maxKeys;
+    private readonly hits;
+    constructor(limit: number, windowMs: number, maxKeys?: number);
+    check(key: string, now?: number): {
+        allowed: boolean;
+        remaining: number;
+        retryAfter: number;
+    };
+    /** Expired entries go first; failing that, the oldest live one (Map insertion order). */
+    private makeRoom;
+    sweep(now?: number): void;
+    get size(): number;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/http/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/http/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyD;gBAG3D,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,OAAO,SAAS;IAGnC,KAAK,CACH,GAAG,EAAE,MAAM,EACX,GAAG,SAAa,GACf;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAkB9D,yFAAyF;IACzF,OAAO,CAAC,QAAQ;IAQhB,KAAK,CAAC,GAAG,SAAa,GAAG,IAAI;IAM7B,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/http/rate-limiter.js

@@ -0,0 +1,55 @@
+/**
+ * Fixed-window counter, per client.
+ *
+ * The map is capped as well as swept. A client that can vary its key at will
+ * — which is what an unvalidated forwarding header allowed — could otherwise
+ * grow it without limit inside a single window.
+ */
+export class RateLimiter {
+    limit;
+    windowMs;
+    maxKeys;
+    hits = new Map();
+    constructor(limit, windowMs, maxKeys = 10_000) {
+        this.limit = limit;
+        this.windowMs = windowMs;
+        this.maxKeys = maxKeys;
+    }
+    check(key, now = Date.now()) {
+        const entry = this.hits.get(key);
+        if (!entry || now > entry.resetAt) {
+            if (!entry)
+                this.makeRoom(now);
+            this.hits.set(key, { count: 1, resetAt: now + this.windowMs });
+            return { allowed: true, remaining: this.limit - 1, retryAfter: 0 };
+        }
+        entry.count++;
+        const allowed = entry.count <= this.limit;
+        return {
+            allowed,
+            remaining: Math.max(0, this.limit - entry.count),
+            retryAfter: allowed ? 0 : Math.ceil((entry.resetAt - now) / 1000),
+        };
+    }
+    /** Expired entries go first; failing that, the oldest live one (Map insertion order). */
+    makeRoom(now) {
+        if (this.hits.size < this.maxKeys)
+            return;
+        this.sweep(now);
+        if (this.hits.size < this.maxKeys)
+            return;
+        const oldest = this.hits.keys().next();
+        if (!oldest.done)
+            this.hits.delete(oldest.value);
+    }
+    sweep(now = Date.now()) {
+        for (const [key, entry] of this.hits) {
+            if (now > entry.resetAt)
+                this.hits.delete(key);
+        }
+    }
+    get size() {
+        return this.hits.size;
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/http/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/http/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IAIH;IACA;IACA;IALF,IAAI,GAAG,IAAI,GAAG,EAA8C,CAAC;IAE9E,YACmB,KAAa,EACb,QAAgB,EAChB,UAAU,MAAM;QAFhB,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAS;IAChC,CAAC;IAEJ,KAAK,CACH,GAAW,EACX,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACrE,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QAC1C,OAAO;YACL,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YAChD,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;SAClE,CAAC;IACJ,CAAC;IAED,yFAAyF;IACjF,QAAQ,CAAC,GAAW;QAC1B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/http/sessions.d.ts

@@ -0,0 +1,34 @@
+import type { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+/** Live MCP sessions, keyed by the id the transport issued. */
+export interface Session {
+    transport: StreamableHTTPServerTransport;
+    lastSeen: number;
+}
+/**
+ * Capacity is reserved synchronously, before the awaits that create a session.
+ *
+ * Checking `size` and then awaiting let every concurrent initialize pass the
+ * check together and overshoot the cap. A reservation counts from the moment
+ * the decision is made until the session is committed or abandoned.
+ */
+export declare class SessionStore {
+    private readonly maxSessions;
+    private readonly sessions;
+    private reserved;
+    constructor(maxSessions: number);
+    /** Claims a slot, or reports that none is free. Pending reservations count. */
+    reserve(): boolean;
+    /** Turns a reservation into a session. */
+    commit(id: string, transport: StreamableHTTPServerTransport): void;
+    /** Gives a reservation back when the session never came to be. */
+    release(): void;
+    get(id: string): Session | undefined;
+    touch(id: string): void;
+    delete(id: string): void;
+    /** Closes and forgets every session idle longer than `idleMs`. */
+    sweep(now: number, idleMs: number): void;
+    closeAll(): Promise<void>;
+    /** Committed sessions only; reservations are transient. */
+    get size(): number;
+}
+//# sourceMappingURL=sessions.d.ts.map

package/dist/http/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/http/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAExG,+DAA+D;AAE/D,MAAM,WAAW,OAAO;IACtB,SAAS,EAAE,6BAA6B,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,qBAAa,YAAY;IAIX,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAK;gBAEQ,WAAW,EAAE,MAAM;IAEhD,+EAA+E;IAC/E,OAAO,IAAI,OAAO;IAMlB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,6BAA6B,GAAG,IAAI;IAKlE,kEAAkE;IAClE,OAAO,IAAI,IAAI;IAIf,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAIpC,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKvB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAIxB,kEAAkE;IAClE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IASlC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,2DAA2D;IAC3D,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/http/sessions.js

@@ -0,0 +1,62 @@
+/**
+ * Capacity is reserved synchronously, before the awaits that create a session.
+ *
+ * Checking `size` and then awaiting let every concurrent initialize pass the
+ * check together and overshoot the cap. A reservation counts from the moment
+ * the decision is made until the session is committed or abandoned.
+ */
+export class SessionStore {
+    maxSessions;
+    sessions = new Map();
+    reserved = 0;
+    constructor(maxSessions) {
+        this.maxSessions = maxSessions;
+    }
+    /** Claims a slot, or reports that none is free. Pending reservations count. */
+    reserve() {
+        if (this.sessions.size + this.reserved >= this.maxSessions)
+            return false;
+        this.reserved++;
+        return true;
+    }
+    /** Turns a reservation into a session. */
+    commit(id, transport) {
+        this.reserved = Math.max(0, this.reserved - 1);
+        this.sessions.set(id, { transport, lastSeen: Date.now() });
+    }
+    /** Gives a reservation back when the session never came to be. */
+    release() {
+        this.reserved = Math.max(0, this.reserved - 1);
+    }
+    get(id) {
+        return this.sessions.get(id);
+    }
+    touch(id) {
+        const session = this.sessions.get(id);
+        if (session)
+            session.lastSeen = Date.now();
+    }
+    delete(id) {
+        this.sessions.delete(id);
+    }
+    /** Closes and forgets every session idle longer than `idleMs`. */
+    sweep(now, idleMs) {
+        for (const [id, session] of this.sessions) {
+            if (now - session.lastSeen > idleMs) {
+                this.sessions.delete(id);
+                void session.transport.close();
+            }
+        }
+    }
+    async closeAll() {
+        for (const [id, session] of this.sessions) {
+            this.sessions.delete(id);
+            await session.transport.close();
+        }
+    }
+    /** Committed sessions only; reservations are transient. */
+    get size() {
+        return this.sessions.size;
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/http/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/http/sessions.ts"],"names":[],"mappings":"AASA;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IAIM;IAHZ,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC/C,QAAQ,GAAG,CAAC,CAAC;IAErB,YAA6B,WAAmB;QAAnB,gBAAW,GAAX,WAAW,CAAQ;IAAG,CAAC;IAEpD,+EAA+E;IAC/E,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0CAA0C;IAC1C,MAAM,CAAC,EAAU,EAAE,SAAwC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,kEAAkE;IAClE,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,EAAU;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO;YAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,GAAW,EAAE,MAAc;QAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}