Function serveMcpServer

packages/plugins/mcp/src/testing/server.ts:95–340

(factory: () => McpServer, options: McpTestServerOptions = {})

const protectedResourcePath = "/.well-known/oauth-protected-resource";

export const serveMcpServer = (factory: () => McpServer, options: McpTestServerOptions = {}) =>
  Effect.acquireRelease(
    Effect.gen(function* () {
      const transports = new Map<string, StreamableHTTPServerTransport>();
      const allTransports = new Set<StreamableHTTPServerTransport>();
      const requests = yield* Ref.make<readonly McpTestRequest[]>([]);
      const path = options.path ?? "/";
      let sessions = 0;
      let nextSessionRequestStatus: number | undefined;
      let sessionMethodRejection: { readonly method: string; readonly status: number } | undefined;

      const writeUnauthorized = (response: http.ServerResponse, origin: string) =>
        writeJson(
          response,
          401,
          { error: "invalid_token" },
          {
            "www-authenticate":
              options.auth?.wwwAuthenticate ??
              `Bearer resource_metadata="${origin}${protectedResourcePath}${path}", error="invalid_token"`,
          },
        );

      const namesJsonRpcMethod = (parsedBody: unknown, method: string): boolean => {
        const messages = Array.isArray(parsedBody) ? parsedBody : [parsedBody];
        return messages.some(
          (message) =>
            typeof message === "object" &&
            message !== null &&
            (message as { readonly method?: unknown }).method === method,
        );
      };

      const handleMcpRequest = (
        request: http.IncomingMessage,
        response: http.ServerResponse,
      ): Effect.Effect<void> =>
        Effect.gen(function* () {
          const requestUrl = request.url ?? "/";
          const sessionId = Array.isArray(request.headers["mcp-session-id"])
            ? request.headers["mcp-session-id"][0]
            : request.headers["mcp-session-id"];
          const authorization = Array.isArray(request.headers.authorization)
            ? request.headers.authorization[0]
            : request.headers.authorization;
          const origin = request.headers.host
            ? `http://${request.headers.host}`
            : "http://127.0.0.1";

          yield* Ref.update(requests, (all) => [
            ...all,
            {
              method: request.method ?? "GET",
              url: requestUrl,
              authorization,
              sessionId,
            },
          ]);