@blen/fedreg-mcp-server 2.0.0

package/dist/server/http.js

@@ -0,0 +1,159 @@
+import { createServer } from 'node:http';
+import { createMcpHandler } from '@modelcontextprotocol/server';
+import { toNodeHandler } from '@modelcontextprotocol/node';
+import { buildMcpServer, MCP_PROTOCOL_VERSION } from './mcpServer.js';
+import { IpRateLimiter } from './ipRateLimiter.js';
+import { SubjectQuota } from '../util/quotas.js';
+import { buildVerifier } from './authz.js';
+import { oauthProtectedResource } from './wellKnown.js';
+import { log } from '../util/logger.js';
+const MCP_PATH = '/mcp';
+const RESOURCE_METADATA_PATH = '/.well-known/oauth-protected-resource/mcp';
+/** Key the tool-catalog context off the subject this request authenticated as. */
+const SUBJECT_KEY = 'fedreg.subject';
+/** Cap on echoed error text: handler rejections quote caller-supplied headers and body. */
+const MAX_LOGGED_ERROR_CHARS = 300;
+function truncate(message) {
+    return message.length > MAX_LOGGED_ERROR_CHARS
+        ? `${message.slice(0, MAX_LOGGED_ERROR_CHARS)}…[truncated]`
+        : message;
+}
+function subjectOf(ctx) {
+    const s = ctx.authInfo?.extra?.[SUBJECT_KEY];
+    return typeof s === 'string' ? s : undefined;
+}
+/**
+ * Scopes actually granted to the presented token, read from the standard OAuth claims
+ * (`scope` as a space-delimited string, or `scp` as an array).
+ *
+ * Deliberately NOT `opts.auth.scopes` — that is the server's advertised
+ * `scopes_supported` list, and copying it here would hand every caller an `AuthInfo`
+ * claiming every configured scope regardless of what its token was granted.
+ */
+function grantedScopes(claims) {
+    const raw = claims.scope ?? claims.scp;
+    if (typeof raw === 'string')
+        return raw.split(' ').filter(Boolean);
+    if (Array.isArray(raw))
+        return raw.filter((s) => typeof s === 'string');
+    return [];
+}
+export async function startHttp(deps, opts) {
+    const verifier = buildVerifier(opts.auth);
+    const limiter = new IpRateLimiter(opts.rps, opts.burst);
+    const quota = new SubjectQuota(opts.subjectDailyQuota);
+    // Stateless: the factory runs once per request, so the subject a tool sees is always the
+    // one this request's own bearer token verified as. There is no session to bind, reuse, or
+    // outlive a token — per-tenant quota attribution follows from re-authenticating every call.
+    const mcpHandler = createMcpHandler((ctx) => buildMcpServer(deps, { subject: subjectOf(ctx) }), {
+        legacy: 'stateless',
+        // This server declares only `tools`, but the SDK routes `subscriptions/listen`
+        // regardless and would otherwise hold up to 1024 long-lived SSE streams per handler
+        // — unbounded long-lived state of exactly the kind `FEDREG_MAX_SESSIONS` used to cap.
+        // `0` refuses every listen request (the limit check is `open.size >= max`).
+        maxSubscriptions: 0,
+        // Rejections carry attacker-supplied header/body fragments, so cap what reaches stderr.
+        onerror: (err) => log.warn('mcp.handler.error', { message: truncate(err.message) }),
+    });
+    const nodeHandler = toNodeHandler(mcpHandler, {
+        onerror: (err) => log.warn('mcp.adapter.error', { message: truncate(err.message) }),
+    });
+    const server = createServer(async (req, res) => {
+        try {
+            const ip = (req.socket.remoteAddress ?? 'unknown').replace('::ffff:', '');
+            if (!limiter.allow(ip))
+                return reply(res, 429, { error: 'rate_limited' });
+            // DNS rebinding protection: validate Host header against allowlist when provided.
+            if (opts.allowedHosts && opts.allowedHosts.length > 0) {
+                const host = String(req.headers.host ?? '').toLowerCase();
+                if (!opts.allowedHosts.includes(host)) {
+                    return reply(res, 421, { error: 'host_not_allowed', host });
+                }
+            }
+            const origin = opts.publicOrigin ?? `http://${req.headers.host ?? `${opts.host}:${opts.port}`}`;
+            const url = new URL(req.url ?? '/', origin);
+            if (url.pathname === RESOURCE_METADATA_PATH && req.method === 'GET') {
+                return reply(res, 200, oauthProtectedResource(opts.auth, `${origin}${MCP_PATH}`));
+            }
+            if (url.pathname === '/health' && req.method === 'GET') {
+                return reply(res, 200, { ok: true, sandbox: deps.sandbox.kind, protocolVersion: MCP_PROTOCOL_VERSION });
+            }
+            if (url.pathname === MCP_PATH) {
+                // Auth (unless --insecure). Runs on every request: with no protocol session there
+                // is no other point at which a caller's identity could have been established.
+                let subject = 'anonymous';
+                let token = '';
+                let scopes = [];
+                if (!opts.insecure) {
+                    const auth = req.headers.authorization;
+                    if (!auth?.startsWith('Bearer ')) {
+                        res.writeHead(401, {
+                            'content-type': 'application/json',
+                            'www-authenticate': `Bearer resource_metadata="${origin}${RESOURCE_METADATA_PATH}"`,
+                        });
+                        return res.end(JSON.stringify({ error: 'unauthorized' }));
+                    }
+                    token = auth.slice(7);
+                    try {
+                        const ctx = await verifier.verify(token);
+                        subject = ctx.subject;
+                        scopes = grantedScopes(ctx.claims);
+                    }
+                    catch (err) {
+                        res.writeHead(401, {
+                            'content-type': 'application/json',
+                            'www-authenticate': `Bearer resource_metadata="${origin}${RESOURCE_METADATA_PATH}", error="invalid_token"`,
+                        });
+                        return res.end(JSON.stringify({ error: 'invalid_token', detail: err.message }));
+                    }
+                    const q = quota.consume(subject);
+                    if (!q.allowed) {
+                        return reply(res, 429, { error: 'quota_exceeded', resetAt: new Date(q.resetAt).toISOString() });
+                    }
+                }
+                // toNodeHandler forwards `req.auth` to the factory as pass-through authInfo.
+                const authInfo = {
+                    token,
+                    clientId: subject,
+                    scopes,
+                    extra: { [SUBJECT_KEY]: subject },
+                };
+                req.auth = authInfo;
+                await nodeHandler(req, res);
+                return;
+            }
+            reply(res, 404, { error: 'not_found' });
+        }
+        catch (err) {
+            log.error('http.unhandled', { message: err.message, stack: err.stack });
+            if (!res.headersSent)
+                reply(res, 500, { error: 'internal' });
+        }
+    });
+    await new Promise((resolve) => server.listen(opts.port, opts.host, () => resolve()));
+    const addr = server.address();
+    const actualPort = typeof addr === 'object' && addr ? addr.port : opts.port;
+    log.info('http.listening', {
+        host: opts.host, port: actualPort,
+        insecure: opts.insecure ?? false,
+        sandbox: deps.sandbox.kind,
+        auth: opts.auth.provider,
+        protocolVersion: MCP_PROTOCOL_VERSION,
+    });
+    return {
+        port: actualPort,
+        close: async () => {
+            // Handler first: `server.close()` only stops new connections and resolves once every
+            // existing one is idle, so an open SSE exchange (kept warm by keepalive frames) would
+            // block it forever. Closing the handler aborts in-flight exchanges and releases those
+            // sockets, after which the listener can actually drain.
+            await mcpHandler.close();
+            await new Promise(r => server.close(() => r()));
+        },
+    };
+}
+function reply(res, status, body) {
+    res.writeHead(status, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(body));
+}
+//# sourceMappingURL=http.js.map

package/dist/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAyC,MAAM,8BAA8B,CAAC;AACvG,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAmB,MAAM,YAAY,CAAC;AAE5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAqBxC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,sBAAsB,GAAG,2CAA2C,CAAC;AAE3E,kFAAkF;AAClF,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,2FAA2F;AAC3F,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO,CAAC,MAAM,GAAG,sBAAsB;QAC5C,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,cAAc;QAC3D,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,GAAsB;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,MAAkB;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACrF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAiB,EAAE,IAAiB;IAClE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAEvD,yFAAyF;IACzF,0FAA0F;IAC1F,4FAA4F;IAC5F,MAAM,UAAU,GAAG,gBAAgB,CACjC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAC1D;QACE,MAAM,EAAE,WAAW;QACnB,+EAA+E;QAC/E,oFAAoF;QACpF,sFAAsF;QACtF,4EAA4E;QAC5E,gBAAgB,EAAE,CAAC;QACnB,wFAAwF;QACxF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;KACpF,CACF,CAAC;IACF,MAAM,WAAW,GAAG,aAAa,CAAC,UAAU,EAAE;QAC5C,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;KACpF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAC9E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAE1E,kFAAkF;YAClF,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC1D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAChG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;YAE5C,IAAI,GAAG,CAAC,QAAQ,KAAK,sBAAsB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACpE,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;YACpF,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAC1G,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9B,kFAAkF;gBAClF,8EAA8E;gBAC9E,IAAI,OAAO,GAAG,WAAW,CAAC;gBAC1B,IAAI,KAAK,GAAG,EAAE,CAAC;gBACf,IAAI,MAAM,GAAa,EAAE,CAAC;gBAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;oBACvC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;wBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,cAAc,EAAE,kBAAkB;4BAClC,kBAAkB,EAAE,6BAA6B,MAAM,GAAG,sBAAsB,GAAG;yBACpF,CAAC,CAAC;wBACH,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;oBAC5D,CAAC;oBACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACzC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;wBACtB,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACrC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;4BACjB,cAAc,EAAE,kBAAkB;4BAClC,kBAAkB,EAAE,6BAA6B,MAAM,GAAG,sBAAsB,0BAA0B;yBAC3G,CAAC,CAAC;wBACH,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC7F,CAAC;oBACD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBACjC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;wBACf,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBAClG,CAAC;gBACH,CAAC;gBAED,6EAA6E;gBAC7E,MAAM,QAAQ,GAAa;oBACzB,KAAK;oBACL,QAAQ,EAAE,OAAO;oBACjB,MAAM;oBACN,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE;iBAClC,CAAC;gBACD,GAA6C,CAAC,IAAI,GAAG,QAAQ,CAAC;gBAE/D,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAG,GAAa,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC5E,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;QACxB,eAAe,EAAE,oBAAoB;KACtC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,qFAAqF;YACrF,sFAAsF;YACtF,sFAAsF;YACtF,wDAAwD;YACxD,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC/D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/server/ipRateLimiter.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Token-bucket IP rate limiter. In-memory; one process.
+ */
+export declare class IpRateLimiter {
+    private readonly rps;
+    private readonly burst;
+    private readonly buckets;
+    constructor(rps: number, burst: number);
+    allow(ip: string): boolean;
+}
+//# sourceMappingURL=ipRateLimiter.d.ts.map

package/dist/server/ipRateLimiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipRateLimiter.d.ts","sourceRoot":"","sources":["../../src/server/ipRateLimiter.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,aAAa;IAEZ,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAU,OAAO,CAAC,QAAQ,CAAC,KAAK;IADhE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4D;gBACvD,GAAG,EAAE,MAAM,EAAmB,KAAK,EAAE,MAAM;IAExE,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAc3B"}

package/dist/server/ipRateLimiter.js

@@ -0,0 +1,27 @@
+/**
+ * Token-bucket IP rate limiter. In-memory; one process.
+ */
+export class IpRateLimiter {
+    rps;
+    burst;
+    buckets = new Map();
+    constructor(rps, burst) {
+        this.rps = rps;
+        this.burst = burst;
+    }
+    allow(ip) {
+        const now = Date.now();
+        const b = this.buckets.get(ip) ?? { tokens: this.burst, updatedAt: now };
+        const elapsedSec = (now - b.updatedAt) / 1000;
+        b.tokens = Math.min(this.burst, b.tokens + elapsedSec * this.rps);
+        b.updatedAt = now;
+        if (b.tokens < 1) {
+            this.buckets.set(ip, b);
+            return false;
+        }
+        b.tokens -= 1;
+        this.buckets.set(ip, b);
+        return true;
+    }
+}
+//# sourceMappingURL=ipRateLimiter.js.map

package/dist/server/ipRateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipRateLimiter.js","sourceRoot":"","sources":["../../src/server/ipRateLimiter.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,aAAa;IAEK;IAA8B;IAD1C,OAAO,GAAG,IAAI,GAAG,EAAiD,CAAC;IACpF,YAA6B,GAAW,EAAmB,KAAa;QAA3C,QAAG,GAAH,GAAG,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE5E,KAAK,CAAC,EAAU;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACzE,MAAM,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAC9C,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC;QAClB,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/server/mcpServer.d.ts

@@ -0,0 +1,15 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import { type CatalogDeps } from './toolCatalog.js';
+import type { RequestCtx } from '../tools/execute.js';
+/**
+ * The MCP revision this server speaks.
+ *
+ * Declared here rather than imported: the SDK's exported `LATEST_PROTOCOL_VERSION` and
+ * `SUPPORTED_PROTOCOL_VERSIONS` describe only the legacy `initialize` era (`2025-11-25`
+ * and older) kept for the backward-compatibility leg. The SDK does hold the modern value
+ * as `FIRST_MODERN_PROTOCOL_VERSION`, but that lives in its `core-internal` package — not
+ * exported at runtime and absent from every published `.d.mts` — so it is not importable.
+ */
+export declare const MCP_PROTOCOL_VERSION = "2026-07-28";
+export declare function buildMcpServer(deps: CatalogDeps, requestCtx?: RequestCtx): McpServer;
+//# sourceMappingURL=mcpServer.d.ts.map

package/dist/server/mcpServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServer.d.ts","sourceRoot":"","sources":["../../src/server/mcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAuC,MAAM,8BAA8B,CAAC;AAC9F,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,eAAe,CAAC;AA2BjD,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAqCpF"}

package/dist/server/mcpServer.js

@@ -0,0 +1,67 @@
+import { McpServer, fromJsonSchema } from '@modelcontextprotocol/server';
+import { buildCatalog } from './toolCatalog.js';
+import { log } from '../util/logger.js';
+/**
+ * The MCP revision this server speaks.
+ *
+ * Declared here rather than imported: the SDK's exported `LATEST_PROTOCOL_VERSION` and
+ * `SUPPORTED_PROTOCOL_VERSIONS` describe only the legacy `initialize` era (`2025-11-25`
+ * and older) kept for the backward-compatibility leg. The SDK does hold the modern value
+ * as `FIRST_MODERN_PROTOCOL_VERSION`, but that lives in its `core-internal` package — not
+ * exported at runtime and absent from every published `.d.mts` — so it is not importable.
+ */
+export const MCP_PROTOCOL_VERSION = '2026-07-28';
+// The catalog is derived from process configuration (which sources are bound), not from
+// the caller, so every tenant sees byte-identical results and a shared cache is safe.
+const LIST_CACHE_HINT = { ttlMs: 300_000, cacheScope: 'public' };
+/**
+ * Converted tool input schemas, cached for the process lifetime.
+ *
+ * `fromJsonSchema` compiles an Ajv validator, and the SDK's default validator is a module
+ * singleton that caches every compiled schema in a plain `Map` keyed by schema *identity*,
+ * with no eviction. Since `buildMcpServer` runs per request and `buildCatalog` mints fresh
+ * schema literals each time, converting inline would retain ~4 KB per call forever —
+ * roughly 12 KB per HTTP request, unbounded. The three tool inputs derive only from
+ * module-level Zod constants, so each is converted exactly once here.
+ */
+const inputSchemaCache = new Map();
+function cachedInputSchema(name, jsonSchema) {
+    let converted = inputSchemaCache.get(name);
+    if (!converted) {
+        converted = fromJsonSchema(jsonSchema);
+        inputSchemaCache.set(name, converted);
+    }
+    return converted;
+}
+export function buildMcpServer(deps, requestCtx) {
+    const server = new McpServer({ name: 'fedreg-mcp-server', version: '2.0.0' }, // x-release-please-version
+    {
+        capabilities: { tools: {} },
+        cacheHints: { 'tools/list': LIST_CACHE_HINT, 'server/discover': LIST_CACHE_HINT },
+    });
+    for (const tool of buildCatalog(deps, requestCtx)) {
+        server.registerTool(tool.name, {
+            description: tool.description,
+            // The catalog emits JSON Schema; `fromJsonSchema` attaches the SDK's default Ajv
+            // validator, so arguments are checked here BEFORE the handler re-parses with Zod.
+            // Note `zodToJsonSchema` emits `additionalProperties: false`, so unknown argument
+            // keys are now rejected rather than silently stripped by Zod (see CHANGELOG).
+            inputSchema: cachedInputSchema(tool.name, tool.inputSchema),
+        }, async (args) => {
+            try {
+                const result = await tool.handler(args ?? {});
+                return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+            }
+            catch (err) {
+                const e = err;
+                log.warn('tool.error', { tool: tool.name, name: e.name, message: e.message });
+                return {
+                    isError: true,
+                    content: [{ type: 'text', text: `${e.name}: ${e.message}` }],
+                };
+            }
+        });
+    }
+    return server;
+}
+//# sourceMappingURL=mcpServer.js.map

package/dist/server/mcpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServer.js","sourceRoot":"","sources":["../../src/server/mcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAuB,MAAM,8BAA8B,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAoB,MAAM,kBAAkB,CAAC;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAExC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD,wFAAwF;AACxF,sFAAsF;AACtF,MAAM,eAAe,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,QAAiB,EAAE,CAAC;AAE1E;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6C,CAAC;AAE9E,SAAS,iBAAiB,CAAC,IAAY,EAAE,UAAmB;IAC1D,IAAI,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,cAAc,CAAC,UAA4B,CAAC,CAAC;QACzD,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAiB,EAAE,UAAuB;IACvE,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,2BAA2B;IAC5E;QACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3B,UAAU,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE;KAClF,CACF,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iFAAiF;YACjF,kFAAkF;YAClF,kFAAkF;YAClF,8EAA8E;YAC9E,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;SAC5D,EACD,KAAK,EAAE,IAAa,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACzF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,GAAY,CAAC;gBACvB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9E,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;iBACtE,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/stdio.d.ts

@@ -0,0 +1,3 @@
+import type { CatalogDeps } from './toolCatalog.js';
+export declare function startStdio(deps: CatalogDeps): Promise<void>;
+//# sourceMappingURL=stdio.d.ts.map

package/dist/server/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/server/stdio.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,wBAAsB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAWjE"}

package/dist/server/stdio.js

@@ -0,0 +1,16 @@
+import { serveStdio } from '@modelcontextprotocol/server/stdio';
+import { buildMcpServer } from './mcpServer.js';
+import { log } from '../util/logger.js';
+export async function startStdio(deps) {
+    // stdio is unauthenticated and single-tenant, so there is no subject to scope quotas by.
+    //
+    // `serveStdio` reports every out-of-band failure (transport start, a throwing factory,
+    // message-pump errors) through `onerror` and swallows it otherwise. Without this the
+    // process would log `stdio.ready` and then answer every request with -32603 in silence;
+    // the v1 `await server.connect(transport)` at least rejected into `bin.fatal`.
+    serveStdio(() => buildMcpServer(deps), {
+        onerror: (err) => log.error('stdio.error', { name: err.name, message: err.message }),
+    });
+    log.info('stdio.ready', { sandbox: deps.sandbox.kind });
+}
+//# sourceMappingURL=stdio.js.map

package/dist/server/stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/server/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAiB;IAChD,yFAAyF;IACzF,EAAE;IACF,uFAAuF;IACvF,qFAAqF;IACrF,wFAAwF;IACxF,+EAA+E;IAC/E,UAAU,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE;QACrC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;KACrF,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/server/toolCatalog.d.ts

@@ -0,0 +1,20 @@
+import { type RequestCtx } from '../tools/execute.js';
+import type { Sdk } from '../sdk/bindings.js';
+import type { SandboxRunner } from '../sandbox/types.js';
+import type { Corpus } from '../search/corpus.js';
+import type { SubjectQuota } from '../util/quotas.js';
+export interface ToolDescriptor {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    handler: (args: unknown) => Promise<unknown>;
+}
+export interface CatalogDeps {
+    sdk: Sdk;
+    sandbox: SandboxRunner;
+    corpus: Corpus;
+    regsMaxCallsPerExecute: number;
+    regsSubjectQuota: SubjectQuota;
+}
+export declare function buildCatalog(deps: CatalogDeps, requestCtx?: RequestCtx): ToolDescriptor[];
+//# sourceMappingURL=toolCatalog.d.ts.map

package/dist/server/toolCatalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolCatalog.d.ts","sourceRoot":"","sources":["../../src/server/toolCatalog.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,YAAY,CAAC;CAChC;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,cAAc,EAAE,CA0BzF"}

package/dist/server/toolCatalog.js

@@ -0,0 +1,29 @@
+import { SearchApiInput, searchApi } from '../tools/searchApi.js';
+import { DescribeSchemaInput, describeSchema } from '../tools/describeSchema.js';
+import { ExecuteInput, execute } from '../tools/execute.js';
+import { zodToJsonSchema } from './zodToJsonSchema.js';
+export function buildCatalog(deps, requestCtx) {
+    const names = deps.sdk.registeredNames.join(', ');
+    const namespaces = deps.sdk.registeredNames.map(n => `${n}.*`).join(', ');
+    return [
+        {
+            name: 'search_api',
+            description: `BM25 search over the API endpoints and curated field dictionary for all bound sources (${names}). Returns TypeScript signatures and examples for use in execute.`,
+            inputSchema: zodToJsonSchema(SearchApiInput),
+            handler: async (args) => searchApi(SearchApiInput.parse(args), deps.corpus),
+        },
+        {
+            name: 'describe_schema',
+            description: `Look up an endpoint or field by exact dotted id (path) or by namespace prefix. Use to drill into the bound source surfaces (${namespaces}).`,
+            inputSchema: zodToJsonSchema(DescribeSchemaInput),
+            handler: async (args) => describeSchema(DescribeSchemaInput.parse(args), deps.corpus.entries),
+        },
+        {
+            name: 'execute',
+            description: `Run TypeScript inside a sandbox (no net, fs, env, or subprocess). Globals: ${names}. Return the awaited expression as the result.`,
+            inputSchema: zodToJsonSchema(ExecuteInput),
+            handler: async (args) => execute(ExecuteInput.parse(args), deps, requestCtx),
+        },
+    ];
+}
+//# sourceMappingURL=toolCatalog.js.map

package/dist/server/toolCatalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolCatalog.js","sourceRoot":"","sources":["../../src/server/toolCatalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAmB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAqBvD,MAAM,UAAU,YAAY,CAAC,IAAiB,EAAE,UAAuB;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,OAAO;QACL;YACE,IAAI,EAAE,YAAY;YAClB,WAAW,EACT,0FAA0F,KAAK,mEAAmE;YACpK,WAAW,EAAE,eAAe,CAAC,cAAc,CAAC;YAC5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC;SAC5E;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EACT,+HAA+H,UAAU,IAAI;YAC/I,WAAW,EAAE,eAAe,CAAC,mBAAmB,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;SAC9F;QACD;YACE,IAAI,EAAE,SAAS;YACf,WAAW,EACT,8EAA8E,KAAK,gDAAgD;YACrI,WAAW,EAAE,eAAe,CAAC,YAAY,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC;SAC7E;KACF,CAAC;AACJ,CAAC"}

package/dist/server/wellKnown.d.ts

@@ -0,0 +1,16 @@
+import type { AuthConfig } from './authz.js';
+/**
+ * OAuth 2.0 Protected Resource Metadata document per RFC 9728.
+ *
+ * `resource` is REQUIRED and MUST be the canonical URL of the protected resource
+ * (the MCP endpoint, e.g. https://example.com/mcp).
+ */
+export declare function oauthProtectedResource(cfg: AuthConfig, resourceUrl: string): {
+    resource: string;
+    authorization_servers: string[];
+    bearer_methods_supported: string[];
+    scopes_supported: string[];
+    resource_documentation: string;
+    resource_name: string;
+};
+//# sourceMappingURL=wellKnown.d.ts.map

package/dist/server/wellKnown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellKnown.d.ts","sourceRoot":"","sources":["../../src/server/wellKnown.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM;;;;;;;EAS1E"}

package/dist/server/wellKnown.js

@@ -0,0 +1,17 @@
+/**
+ * OAuth 2.0 Protected Resource Metadata document per RFC 9728.
+ *
+ * `resource` is REQUIRED and MUST be the canonical URL of the protected resource
+ * (the MCP endpoint, e.g. https://example.com/mcp).
+ */
+export function oauthProtectedResource(cfg, resourceUrl) {
+    return {
+        resource: resourceUrl,
+        authorization_servers: cfg.issuer ? [cfg.issuer] : [],
+        bearer_methods_supported: ['header'],
+        scopes_supported: cfg.scopes ?? [],
+        resource_documentation: 'https://github.com/blen-labs/fedreg-mcp-server#self-hosting-remote-http',
+        resource_name: 'Federal Register, eCFR & regulations.gov MCP Server',
+    };
+}
+//# sourceMappingURL=wellKnown.js.map

package/dist/server/wellKnown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wellKnown.js","sourceRoot":"","sources":["../../src/server/wellKnown.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAe,EAAE,WAAmB;IACzE,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,qBAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QACrD,wBAAwB,EAAE,CAAC,QAAQ,CAAC;QACpC,gBAAgB,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;QAClC,sBAAsB,EAAE,yEAAyE;QACjG,aAAa,EAAE,qDAAqD;KACrE,CAAC;AACJ,CAAC"}

package/dist/server/zodToJsonSchema.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/**
+ * Minimal Zod -> JSON Schema converter sufficient for our three tool inputs.
+ * Not a general implementation; intentionally tight to the surface we use.
+ */
+export declare function zodToJsonSchema(schema: z.ZodTypeAny): Record<string, unknown>;
+//# sourceMappingURL=zodToJsonSchema.d.ts.map

package/dist/server/zodToJsonSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zodToJsonSchema.d.ts","sourceRoot":"","sources":["../../src/server/zodToJsonSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAqC7E"}

package/dist/server/zodToJsonSchema.js

@@ -0,0 +1,44 @@
+/**
+ * Minimal Zod -> JSON Schema converter sufficient for our three tool inputs.
+ * Not a general implementation; intentionally tight to the surface we use.
+ */
+export function zodToJsonSchema(schema) {
+    const def = schema._def;
+    switch (def.typeName) {
+        case 'ZodObject': {
+            const shape = def.shape();
+            const properties = {};
+            const required = [];
+            for (const [key, value] of Object.entries(shape)) {
+                properties[key] = zodToJsonSchema(value);
+                if (!value.isOptional?.() && !(value._def?.typeName === 'ZodDefault')) {
+                    required.push(key);
+                }
+            }
+            const out = { type: 'object', properties };
+            if (required.length)
+                out.required = required;
+            out.additionalProperties = false;
+            return out;
+        }
+        case 'ZodString':
+            return { type: 'string', ...(def.description ? { description: def.description } : {}) };
+        case 'ZodNumber':
+            return { type: 'number', ...(def.description ? { description: def.description } : {}) };
+        case 'ZodBoolean':
+            return { type: 'boolean' };
+        case 'ZodOptional':
+            return zodToJsonSchema(def.innerType);
+        case 'ZodDefault':
+            return { ...zodToJsonSchema(def.innerType), default: def.defaultValue() };
+        case 'ZodArray':
+            return { type: 'array', items: zodToJsonSchema(def.type) };
+        case 'ZodEnum':
+            return { type: 'string', enum: def.values };
+        case 'ZodEffects':
+            return zodToJsonSchema(def.schema);
+        default:
+            return {};
+    }
+}
+//# sourceMappingURL=zodToJsonSchema.js.map

package/dist/server/zodToJsonSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zodToJsonSchema.js","sourceRoot":"","sources":["../../src/server/zodToJsonSchema.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,MAAM,GAAG,GAAI,MAAc,CAAC,IAAI,CAAC;IACjC,QAAQ,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAe,KAAK,CAAC,EAAE,CAAC;gBAC/D,UAAU,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAE,KAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,KAAK,YAAY,CAAC,EAAE,CAAC;oBAC/E,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YACpE,IAAI,QAAQ,CAAC,MAAM;gBAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC7C,GAAG,CAAC,oBAAoB,GAAG,KAAK,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1F,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1F,KAAK,YAAY;YACf,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,KAAK,aAAa;YAChB,OAAO,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,YAAY;YACf,OAAO,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;QAC5E,KAAK,UAAU;YACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9C,KAAK,YAAY;YACf,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/supervisor/index.d.ts

@@ -0,0 +1,19 @@
+import type { CatalogDeps } from '../server/toolCatalog.js';
+import type { SandboxKind } from '../sandbox/types.js';
+export interface SupervisorConfig {
+    frBaseUrl: string;
+    ecfrBaseUrl: string;
+    regsBaseUrl: string;
+    regsApiKey?: string;
+    userAgent: string;
+    upstreamTimeoutMs: number;
+    upstreamRetries: number;
+    cacheTtlMs: number;
+    cacheMaxItems: number;
+    sandbox: SandboxKind;
+    regsMaxCallsPerExecute: number;
+    regsRatePerHour: number;
+    regsSubjectRatePerHour: number;
+}
+export declare function buildSupervisor(cfg: SupervisorConfig): Promise<CatalogDeps>;
+//# sourceMappingURL=index.d.ts.map

package/dist/supervisor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/supervisor/index.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAcjF"}

package/dist/supervisor/index.js

@@ -0,0 +1,22 @@
+import { buildSdk } from '../sdk/bindings.js';
+import { getSources } from '../sdk/sources/index.js';
+import { buildCorpus } from '../search/corpus.js';
+import { pickSandbox } from '../sandbox/index.js';
+import { TokenBucket } from '../util/tokenBucket.js';
+import { SubjectQuota } from '../util/quotas.js';
+export async function buildSupervisor(cfg) {
+    const regsLimiter = new TokenBucket(cfg.regsRatePerHour / 3600, cfg.regsRatePerHour);
+    const sourceCfg = {
+        frBaseUrl: cfg.frBaseUrl, ecfrBaseUrl: cfg.ecfrBaseUrl, regsBaseUrl: cfg.regsBaseUrl,
+        regsApiKey: cfg.regsApiKey, userAgent: cfg.userAgent, timeoutMs: cfg.upstreamTimeoutMs,
+        retries: cfg.upstreamRetries, cacheTtlMs: cfg.cacheTtlMs, cacheMaxItems: cfg.cacheMaxItems,
+        regsPreflightLimiter: regsLimiter,
+    };
+    const sources = getSources(sourceCfg);
+    const sdk = buildSdk(sourceCfg);
+    const corpus = buildCorpus(sources);
+    const sandbox = await pickSandbox(cfg.sandbox);
+    const regsSubjectQuota = new SubjectQuota(cfg.regsSubjectRatePerHour, 60 * 60 * 1000);
+    return { sdk, sandbox, corpus, regsMaxCallsPerExecute: cfg.regsMaxCallsPerExecute, regsSubjectQuota };
+}
+//# sourceMappingURL=index.js.map

package/dist/supervisor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/supervisor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAoBjD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAqB;IACzD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,eAAe,GAAG,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;QACpF,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,iBAAiB;QACtF,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa;QAC1F,oBAAoB,EAAE,WAAW;KAClC,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACtF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,CAAC;AACxG,CAAC"}

package/dist/tools/describeSchema.d.ts

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { type CorpusEntry } from '../search/corpus.js';
+export declare const DescribeSchemaInput: z.ZodEffects<z.ZodObject<{
+    path: z.ZodOptional<z.ZodString>;
+    prefix: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    path?: string | undefined;
+    prefix?: string | undefined;
+}, {
+    path?: string | undefined;
+    prefix?: string | undefined;
+}>, {
+    path?: string | undefined;
+    prefix?: string | undefined;
+}, {
+    path?: string | undefined;
+    prefix?: string | undefined;
+}>;
+export type DescribeSchemaInputT = z.infer<typeof DescribeSchemaInput>;
+export type DescribeSchemaResult = {
+    found: false;
+    message: string;
+} | {
+    found: true;
+    entries: Array<{
+        id: string;
+        kind: 'endpoint' | 'field';
+        binding: string;
+        description: string;
+        signature?: string;
+        example?: string;
+    }>;
+};
+export declare function describeSchema(input: DescribeSchemaInputT, entries: Map<string, CorpusEntry>): DescribeSchemaResult;
+//# sourceMappingURL=describeSchema.d.ts.map

package/dist/tools/describeSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describeSchema.d.ts","sourceRoot":"","sources":["../../src/tools/describeSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAG+E,CAAC;AAChH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEvE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAE5J,wBAAgB,cAAc,CAAC,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,oBAAoB,CAMnH"}

package/dist/tools/describeSchema.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+import { lookupByPathOrPrefix } from '../search/corpus.js';
+export const DescribeSchemaInput = z.object({
+    path: z.string().optional().describe("Exact dotted id, e.g. 'fr.documents.search' or 'regs.comments.search'"),
+    prefix: z.string().optional().describe("Prefix to enumerate, e.g. 'fr.documents' or 'regs.'"),
+}).refine(v => Boolean(v.path) !== Boolean(v.prefix), { message: 'Provide exactly one of `path` or `prefix`' });
+export function describeSchema(input, entries) {
+    const hits = lookupByPathOrPrefix(entries, input);
+    if (hits.length === 0) {
+        return { found: false, message: `No entries matched ${input.path ? `path '${input.path}'` : `prefix '${input.prefix}'`}.` };
+    }
+    return { found: true, entries: hits.map(e => ({ id: e.id, kind: e.kind, binding: e.binding, description: e.description, signature: e.signature, example: e.example })) };
+}
+//# sourceMappingURL=describeSchema.js.map