@blen/fedreg-mcp-server 2.0.0

package/dist/tools/describeSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describeSchema.js","sourceRoot":"","sources":["../../src/tools/describeSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAoB,MAAM,qBAAqB,CAAC;AAE7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;IAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;CAC9F,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;AAOhH,MAAM,UAAU,cAAc,CAAC,KAA2B,EAAE,OAAiC;IAC3F,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;IAC9H,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3K,CAAC"}

package/dist/tools/execute.d.ts

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+import type { Sdk } from '../sdk/bindings.js';
+import type { SandboxRunner } from '../sandbox/types.js';
+import { SubjectQuota } from '../util/quotas.js';
+export declare const ExecuteInput: z.ZodObject<{
+    code: z.ZodString;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    memoryMb: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    code: string;
+    timeoutMs: number;
+    memoryMb: number;
+}, {
+    code: string;
+    timeoutMs?: number | undefined;
+    memoryMb?: number | undefined;
+}>;
+export type ExecuteInputT = z.infer<typeof ExecuteInput>;
+export interface ExecuteDeps {
+    sdk: Sdk;
+    sandbox: SandboxRunner;
+    regsMaxCallsPerExecute: number;
+    regsSubjectQuota: SubjectQuota;
+}
+/**
+ * Per-request context, re-derived from the caller's bearer token on every HTTP request.
+ * stdio has no subject.
+ */
+export interface RequestCtx {
+    subject?: string;
+}
+export declare function execute(input: ExecuteInputT, deps: ExecuteDeps, requestCtx?: RequestCtx): Promise<import("../index.js").ExecuteResult>;
+//# sourceMappingURL=execute.d.ts.map

package/dist/tools/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,eAAO,MAAM,YAAY;;;;;;;;;;;;EAIvB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,GAAG,CAAC;IACT,OAAO,EAAE,aAAa,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,YAAY,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,OAAO,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,UAAU,gDAsB7F"}

package/dist/tools/execute.js

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import { dispatch } from '../sdk/runtime.js';
+export const ExecuteInput = z.object({
+    code: z.string().min(1).describe('TypeScript code to run inside the sandbox. SDK globals are bound per source (e.g. `fr`, `ecfr`, `regs`).'),
+    timeoutMs: z.number().int().min(100).max(60_000).default(15_000),
+    memoryMb: z.number().int().min(16).max(256).default(64),
+});
+export async function execute(input, deps, requestCtx) {
+    let regsCalls = 0;
+    return deps.sandbox.execute({ code: input.code, timeoutMs: input.timeoutMs, memoryMb: input.memoryMb, bindings: deps.sdk.registeredNames }, {
+        dispatch: (req) => {
+            if (req.binding === 'regs') {
+                if (regsCalls >= deps.regsMaxCallsPerExecute) {
+                    return Promise.resolve({ ok: false, error: { name: 'RegsCallBudgetExceeded', message: `Exceeded the per-execute regulations.gov call budget (${deps.regsMaxCallsPerExecute}). Narrow your query or paginate across separate execute calls.` } });
+                }
+                if (requestCtx?.subject) {
+                    const q = deps.regsSubjectQuota.consume(requestCtx.subject);
+                    if (!q.allowed) {
+                        return Promise.resolve({ ok: false, error: { name: 'RegsSubjectQuotaExceeded', message: `Per-subject regulations.gov quota exceeded. Try again after ${new Date(q.resetAt).toISOString()}.` } });
+                    }
+                }
+                regsCalls++;
+            }
+            return dispatch({ clients: deps.sdk.clients, meta: deps.sdk.meta }, req);
+        },
+    });
+}
+//# sourceMappingURL=execute.js.map

package/dist/tools/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../src/tools/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0GAA0G,CAAC;IAC5I,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAmBH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAoB,EAAE,IAAiB,EAAE,UAAuB;IAC5F,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CACzB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,EAC9G;QACE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC3B,IAAI,SAAS,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;oBAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,yDAAyD,IAAI,CAAC,sBAAsB,iEAAiE,EAAE,EAAE,CAAC,CAAC;gBACnP,CAAC;gBACD,IAAI,UAAU,EAAE,OAAO,EAAE,CAAC;oBACxB,MAAM,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC5D,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;wBACf,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,+DAA+D,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;oBACnM,CAAC;gBACH,CAAC;gBACD,SAAS,EAAE,CAAC;YACd,CAAC;YACD,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;KACF,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/searchApi.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+import type { Corpus } from '../search/corpus.js';
+export declare const SearchApiInput: z.ZodObject<{
+    query: z.ZodString;
+    k: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    query: string;
+    k: number;
+}, {
+    query: string;
+    k?: number | undefined;
+}>;
+export type SearchApiInputT = z.infer<typeof SearchApiInput>;
+export interface SearchHit {
+    id: string;
+    kind: 'endpoint' | 'field';
+    binding: string;
+    description: string;
+    signature?: string;
+    example?: string;
+    score: number;
+}
+export declare function searchApi(input: SearchApiInputT, corpus: Corpus): {
+    hits: SearchHit[];
+    note: string;
+};
+//# sourceMappingURL=searchApi.d.ts.map

package/dist/tools/searchApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchApi.d.ts","sourceRoot":"","sources":["../../src/tools/searchApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,eAAO,MAAM,cAAc;;;;;;;;;EAGzB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE7D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IACxD,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAC1E;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAOrG"}

package/dist/tools/searchApi.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+export const SearchApiInput = z.object({
+    query: z.string().min(1).describe('Free-text query over endpoint and field documentation across all bound sources (fr.*, ecfr.*, regs.*).'),
+    k: z.number().int().min(1).max(50).default(10).describe('Max number of results to return'),
+});
+export function searchApi(input, corpus) {
+    const scored = corpus.index.search(input.query, input.k);
+    const hits = scored.map(s => {
+        const e = corpus.entries.get(s.id);
+        return { id: e.id, kind: e.kind, binding: e.binding, description: e.description, signature: e.signature, example: e.example, score: Math.round(s.score * 1000) / 1000 };
+    });
+    return { hits, note: 'Use describe_schema with `path` for exact lookup or `prefix` to explore a namespace. Use execute to run TypeScript against the bound source globals.' };
+}
+//# sourceMappingURL=searchApi.js.map

package/dist/tools/searchApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchApi.js","sourceRoot":"","sources":["../../src/tools/searchApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wGAAwG,CAAC;IAC3I,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAC3F,CAAC,CAAC;AAQH,MAAM,UAAU,SAAS,CAAC,KAAsB,EAAE,MAAc;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAgB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;IAC1K,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,sJAAsJ,EAAE,CAAC;AAChL,CAAC"}

package/dist/util/httpClient.d.ts

@@ -0,0 +1,46 @@
+import { type Dispatcher } from 'undici';
+export interface HttpClientOptions {
+    baseUrl: string;
+    userAgent?: string;
+    timeoutMs?: number;
+    retries?: number;
+    cacheTtlMs?: number;
+    cacheMaxItems?: number;
+    dispatcher?: Dispatcher;
+    defaultHeaders?: Record<string, string>;
+    retry429?: boolean;
+    preflightLimiter?: {
+        tryTake(): boolean;
+        secondsUntilNext?(): number;
+    };
+}
+export interface CallOptions {
+    method?: 'GET' | 'POST';
+    path: string;
+    query?: Record<string, string | number | boolean | string[] | undefined>;
+    headers?: Record<string, string>;
+    accept?: 'json' | 'xml' | 'text';
+    body?: unknown;
+}
+export declare class HttpClient {
+    #private;
+    private readonly cache;
+    private readonly cacheEnabled;
+    private readonly baseUrl;
+    private readonly userAgent;
+    private readonly timeoutMs;
+    private readonly retries;
+    private readonly retry429;
+    private readonly dispatcher?;
+    private readonly preflightLimiter?;
+    constructor(opts: HttpClientOptions);
+    call<T = unknown>(o: CallOptions): Promise<T>;
+    private cacheKey;
+    private buildUrl;
+}
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly bodySnippet: string;
+    constructor(message: string, status: number, bodySnippet: string);
+}
+//# sourceMappingURL=httpClient.d.ts.map

package/dist/util/httpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.d.ts","sourceRoot":"","sources":["../../src/util/httpClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAC;AAKlD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gBAAgB,CAAC,EAAE;QAAE,OAAO,IAAI,OAAO,CAAC;QAAC,gBAAgB,CAAC,IAAI,MAAM,CAAA;KAAE,CAAC;CACxE;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,qBAAa,UAAU;;IAErB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuF;IAC7G,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAsD;gBAE5E,IAAI,EAAE,iBAAiB;IAe7B,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAuEnD,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,QAAQ;CAajB;AAED,qBAAa,SAAU,SAAQ,KAAK;aACW,MAAM,EAAE,MAAM;aAAkB,WAAW,EAAE,MAAM;gBAApF,OAAO,EAAE,MAAM,EAAkB,MAAM,EAAE,MAAM,EAAkB,WAAW,EAAE,MAAM;CAIjG"}

package/dist/util/httpClient.js

@@ -0,0 +1,139 @@
+import { request } from 'undici';
+import { LRUCache } from 'lru-cache';
+import { createHash } from 'node:crypto';
+import { log } from './logger.js';
+export class HttpClient {
+    #defaultHeaders;
+    cache;
+    cacheEnabled;
+    baseUrl;
+    userAgent;
+    timeoutMs;
+    retries;
+    retry429;
+    dispatcher;
+    preflightLimiter;
+    constructor(opts) {
+        this.#defaultHeaders = opts.defaultHeaders ?? {};
+        this.baseUrl = opts.baseUrl;
+        this.userAgent = opts.userAgent ?? 'fedreg-mcp-server/2.0 (+https://github.com/blen-labs/fedreg-mcp-server)';
+        this.timeoutMs = opts.timeoutMs ?? 20_000;
+        this.retries = opts.retries ?? 3;
+        this.retry429 = opts.retry429 ?? true;
+        this.dispatcher = opts.dispatcher;
+        this.preflightLimiter = opts.preflightLimiter;
+        const max = opts.cacheMaxItems ?? 2000;
+        const ttl = opts.cacheTtlMs ?? 300_000;
+        this.cacheEnabled = max > 0 && ttl > 0;
+        this.cache = new LRUCache({ max: Math.max(max, 1), ttl: Math.max(ttl, 1) });
+    }
+    async call(o) {
+        const url = this.buildUrl(o.path, o.query);
+        const method = o.method ?? 'GET';
+        const key = method === 'GET' && this.cacheEnabled ? this.cacheKey(url, o.headers) : '';
+        if (key && this.cache.has(key)) {
+            log.debug('http.cache_hit', { url });
+            return this.cache.get(key).body;
+        }
+        const accept = o.accept === 'xml' ? 'application/xml,text/xml'
+            : o.accept === 'text' ? 'text/plain'
+                : 'application/json';
+        if (this.preflightLimiter && !this.preflightLimiter.tryTake()) {
+            const wait = this.preflightLimiter.secondsUntilNext?.() ?? 0;
+            const err = new HttpError(`${method} ${url} -> upstream rate limit reached${Number.isFinite(wait) && wait > 0 ? ` (retry in ~${wait}s)` : ''}`, 429, '');
+            err.name = 'RegsRateLimited';
+            throw err;
+        }
+        let attempt = 0;
+        let lastErr;
+        while (attempt <= this.retries) {
+            try {
+                const res = await request(url, {
+                    method,
+                    headers: {
+                        'accept': accept,
+                        'user-agent': this.userAgent,
+                        ...this.#defaultHeaders,
+                        ...(o.body ? { 'content-type': 'application/json' } : {}),
+                        ...(o.headers ?? {}),
+                    },
+                    body: o.body ? JSON.stringify(o.body) : undefined,
+                    bodyTimeout: this.timeoutMs,
+                    headersTimeout: this.timeoutMs,
+                    ...(this.dispatcher ? { dispatcher: this.dispatcher } : {}),
+                });
+                if (res.statusCode >= 400) {
+                    const text = await res.body.text();
+                    const err = new HttpError(`${method} ${url} -> ${res.statusCode}`, res.statusCode, text);
+                    if (res.statusCode === 429) {
+                        const retryAfter = Array.isArray(res.headers['retry-after']) ? res.headers['retry-after'][0] : res.headers['retry-after'];
+                        err.name = 'RateLimited';
+                        err.message = `${method} ${url} -> 429 Too Many Requests${retryAfter ? ` (retry-after ${retryAfter})` : ''}`;
+                    }
+                    throw err;
+                }
+                let body;
+                if (accept.startsWith('application/json'))
+                    body = await res.body.json();
+                else
+                    body = await res.body.text();
+                const headers = {};
+                for (const [k, v] of Object.entries(res.headers))
+                    headers[k] = Array.isArray(v) ? v.join(',') : String(v ?? '');
+                if (key)
+                    this.cache.set(key, { status: res.statusCode, body, headers });
+                return body;
+            }
+            catch (err) {
+                lastErr = err;
+                const status = err instanceof HttpError ? err.status : 0;
+                const retryable = status === 0 || (status === 429 && this.retry429) || status >= 500;
+                if (!retryable || attempt === this.retries)
+                    break;
+                const delay = Math.min(2 ** attempt * 250, 4000);
+                await new Promise(r => setTimeout(r, delay));
+                attempt++;
+            }
+        }
+        throw lastErr;
+    }
+    cacheKey(url, perCallHeaders) {
+        const merged = { ...this.#defaultHeaders, ...(perCallHeaders ?? {}) };
+        const entries = Object.entries(merged);
+        if (entries.length === 0)
+            return url; // fr/ecfr: bare URL key, unchanged
+        const normalized = {};
+        for (const [k, v] of entries.sort(([a], [b]) => a.localeCompare(b)))
+            normalized[k.toLowerCase()] = v;
+        const hash = createHash('sha256').update(JSON.stringify(normalized)).digest('hex').slice(0, 16);
+        return `${url}\n${hash}`;
+    }
+    buildUrl(path, query) {
+        const base = this.baseUrl.replace(/\/$/, '');
+        const p = path.startsWith('/') ? path : '/' + path;
+        const url = new URL(base + p);
+        if (query) {
+            for (const [k, v] of Object.entries(query)) {
+                if (v === undefined || v === null)
+                    continue;
+                if (Array.isArray(v))
+                    for (const item of v)
+                        url.searchParams.append(k, String(item));
+                else
+                    url.searchParams.append(k, String(v));
+            }
+        }
+        return url.toString();
+    }
+}
+export class HttpError extends Error {
+    status;
+    bodySnippet;
+    constructor(message, status, bodySnippet) {
+        super(message);
+        this.status = status;
+        this.bodySnippet = bodySnippet;
+        this.name = 'HttpError';
+    }
+}
+//# sourceMappingURL=httpClient.js.map

package/dist/util/httpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpClient.js","sourceRoot":"","sources":["../../src/util/httpClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAmB,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAwBlC,MAAM,OAAO,UAAU;IACrB,eAAe,CAAyB;IACvB,KAAK,CAAuF;IAC5F,YAAY,CAAU;IACtB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,QAAQ,CAAU;IAClB,UAAU,CAAc;IACxB,gBAAgB,CAAuD;IAExF,YAAY,IAAuB;QACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,yEAAyE,CAAC;QAC7G,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,CAAc;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAS,CAAC;QACxC,CAAC;QAED,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,0BAA0B;YAC/C,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY;gBACpC,CAAC,CAAC,kBAAkB,CAAC;QAEvB,IAAI,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,MAAM,IAAI,GAAG,kCAAkC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACzJ,GAAG,CAAC,IAAI,GAAG,iBAAiB,CAAC;YAC7B,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAgB,CAAC;QACrB,OAAO,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;oBAC7B,MAAM;oBACN,OAAO,EAAE;wBACP,QAAQ,EAAE,MAAM;wBAChB,YAAY,EAAE,IAAI,CAAC,SAAS;wBAC5B,GAAG,IAAI,CAAC,eAAe;wBACvB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzD,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;qBACrB;oBACD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;oBACjD,WAAW,EAAE,IAAI,CAAC,SAAS;oBAC3B,cAAc,EAAE,IAAI,CAAC,SAAS;oBAC9B,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D,CAAC,CAAC;gBAEH,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBACzF,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;wBAC1H,GAAG,CAAC,IAAI,GAAG,aAAa,CAAC;wBACzB,GAAG,CAAC,OAAO,GAAG,GAAG,MAAM,IAAI,GAAG,4BAA4B,UAAU,CAAC,CAAC,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC/G,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBAED,IAAI,IAAa,CAAC;gBAClB,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC;oBAAE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;;oBACnE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,OAAO,GAA2B,EAAE,CAAC;gBAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChH,IAAI,GAAG;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBACxE,OAAO,IAAS,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,CAAC;gBACd,MAAM,MAAM,GAAG,GAAG,YAAY,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC;gBACrF,IAAI,CAAC,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO;oBAAE,MAAM;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC;gBACjD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC7C,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;IAEO,QAAQ,CAAC,GAAW,EAAE,cAAuC;QACnE,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,mCAAmC;QACzE,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,OAAO,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,KAA4B;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,KAAK,MAAM,IAAI,IAAI,CAAC;wBAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;;oBAChF,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;CACF;AAED,MAAM,OAAO,SAAU,SAAQ,KAAK;IACW;IAAgC;IAA7E,YAAY,OAAe,EAAkB,MAAc,EAAkB,WAAmB;QAC9F,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,WAAM,GAAN,MAAM,CAAQ;QAAkB,gBAAW,GAAX,WAAW,CAAQ;QAE9F,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF"}

package/dist/util/logger.d.ts

@@ -0,0 +1,7 @@
+export declare const log: {
+    debug: (msg: string, extra?: Record<string, unknown>) => void;
+    info: (msg: string, extra?: Record<string, unknown>) => void;
+    warn: (msg: string, extra?: Record<string, unknown>) => void;
+    error: (msg: string, extra?: Record<string, unknown>) => void;
+};
+//# sourceMappingURL=logger.d.ts.map

package/dist/util/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/util/logger.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,GAAG;iBACD,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBACxC,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBACvC,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;iBACtC,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CACrD,CAAC"}

package/dist/util/logger.js

@@ -0,0 +1,19 @@
+const order = { debug: 10, info: 20, warn: 30, error: 40 };
+function envLevel() {
+    const v = (process.env.FEDREG_LOG_LEVEL ?? 'info').toLowerCase();
+    return ['debug', 'info', 'warn', 'error'].includes(v) ? v : 'info';
+}
+export const log = {
+    debug: (msg, extra) => write('debug', msg, extra),
+    info: (msg, extra) => write('info', msg, extra),
+    warn: (msg, extra) => write('warn', msg, extra),
+    error: (msg, extra) => write('error', msg, extra),
+};
+function write(level, msg, extra) {
+    if (order[level] < order[envLevel()])
+        return;
+    const line = JSON.stringify({ t: new Date().toISOString(), level, msg, ...(extra ?? {}) });
+    // stdio transport reserves stdout for JSON-RPC; log to stderr.
+    process.stderr.write(line + '\n');
+}
+//# sourceMappingURL=logger.js.map

package/dist/util/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/util/logger.ts"],"names":[],"mappings":"AACA,MAAM,KAAK,GAA0B,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAElF,SAAS,QAAQ;IACf,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAa,CAAC,QAAQ,CAAC,CAAU,CAAC,CAAC,CAAC,CAAE,CAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,KAAK,EAAE,CAAC,GAAW,EAAE,KAA+B,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;IACnF,IAAI,EAAE,CAAC,GAAW,EAAE,KAA+B,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;IACjF,IAAI,EAAE,CAAC,GAAW,EAAE,KAA+B,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;IACjF,KAAK,EAAE,CAAC,GAAW,EAAE,KAA+B,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;CACpF,CAAC;AAEF,SAAS,KAAK,CAAC,KAAY,EAAE,GAAW,EAAE,KAA+B;IACvE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAAE,OAAO;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3F,+DAA+D;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/util/quotas.d.ts

@@ -0,0 +1,13 @@
+export declare class SubjectQuota {
+    private readonly limit;
+    private readonly windowMs;
+    private readonly counts;
+    constructor(limit: number, windowMs?: number);
+    /** Returns whether the subject may make one more request in the current window. */
+    consume(subject: string): {
+        allowed: boolean;
+        remaining: number;
+        resetAt: number;
+    };
+}
+//# sourceMappingURL=quotas.d.ts.map

package/dist/util/quotas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotas.d.ts","sourceRoot":"","sources":["../../src/util/quotas.ts"],"names":[],"mappings":"AAIA,qBAAa,YAAY;IAEX,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAU,OAAO,CAAC,QAAQ,CAAC,QAAQ;IADrE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuD;gBACjD,KAAK,EAAE,MAAM,EAAmB,QAAQ,GAAE,MAAe;IAItF,mFAAmF;IACnF,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAenF"}

package/dist/util/quotas.js

@@ -0,0 +1,29 @@
+import { LRUCache } from 'lru-cache';
+const DAY_MS = 24 * 60 * 60 * 1000;
+export class SubjectQuota {
+    limit;
+    windowMs;
+    counts;
+    constructor(limit, windowMs = DAY_MS) {
+        this.limit = limit;
+        this.windowMs = windowMs;
+        this.counts = new LRUCache({ max: 10_000, ttl: windowMs });
+    }
+    /** Returns whether the subject may make one more request in the current window. */
+    consume(subject) {
+        const now = Date.now();
+        const rec = this.counts.get(subject);
+        if (!rec || rec.resetAt < now) {
+            const resetAt = now + this.windowMs;
+            this.counts.set(subject, { count: 1, resetAt });
+            return { allowed: true, remaining: this.limit - 1, resetAt };
+        }
+        if (rec.count >= this.limit) {
+            return { allowed: false, remaining: 0, resetAt: rec.resetAt };
+        }
+        rec.count++;
+        this.counts.set(subject, rec);
+        return { allowed: true, remaining: this.limit - rec.count, resetAt: rec.resetAt };
+    }
+}
+//# sourceMappingURL=quotas.js.map

package/dist/util/quotas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotas.js","sourceRoot":"","sources":["../../src/util/quotas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,MAAM,OAAO,YAAY;IAEM;IAAgC;IAD5C,MAAM,CAAuD;IAC9E,YAA6B,KAAa,EAAmB,WAAmB,MAAM;QAAzD,UAAK,GAAL,KAAK,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAiB;QACpF,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,mFAAmF;IACnF,OAAO,CAAC,OAAe;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAChE,CAAC;QACD,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC;CACF"}

package/dist/util/tokenBucket.d.ts

@@ -0,0 +1,11 @@
+/** In-memory token bucket. One instance = one shared limit (e.g. process-wide regs quota). */
+export declare class TokenBucket {
+    private readonly ratePerSec;
+    private readonly burst;
+    private tokens;
+    private updatedAt;
+    constructor(ratePerSec: number, burst: number);
+    tryTake(): boolean;
+    secondsUntilNext(): number;
+}
+//# sourceMappingURL=tokenBucket.d.ts.map

package/dist/util/tokenBucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenBucket.d.ts","sourceRoot":"","sources":["../../src/util/tokenBucket.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ,CAAC,UAAU;IAAU,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFvE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAS;gBACG,UAAU,EAAE,MAAM,EAAmB,KAAK,EAAE,MAAM;IAI/E,OAAO,IAAI,OAAO;IAQlB,gBAAgB,IAAI,MAAM;CAK3B"}

package/dist/util/tokenBucket.js

@@ -0,0 +1,30 @@
+/** In-memory token bucket. One instance = one shared limit (e.g. process-wide regs quota). */
+export class TokenBucket {
+    ratePerSec;
+    burst;
+    tokens;
+    updatedAt;
+    constructor(ratePerSec, burst) {
+        this.ratePerSec = ratePerSec;
+        this.burst = burst;
+        this.tokens = burst;
+        this.updatedAt = Date.now();
+    }
+    tryTake() {
+        const now = Date.now();
+        this.tokens = Math.min(this.burst, this.tokens + ((now - this.updatedAt) / 1000) * this.ratePerSec);
+        this.updatedAt = now;
+        if (this.tokens < 1)
+            return false;
+        this.tokens -= 1;
+        return true;
+    }
+    secondsUntilNext() {
+        if (this.tokens >= 1)
+            return 0;
+        if (this.ratePerSec <= 0)
+            return Infinity;
+        return Math.ceil((1 - this.tokens) / this.ratePerSec);
+    }
+}
+//# sourceMappingURL=tokenBucket.js.map

package/dist/util/tokenBucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenBucket.js","sourceRoot":"","sources":["../../src/util/tokenBucket.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,MAAM,OAAO,WAAW;IAGO;IAAqC;IAF1D,MAAM,CAAS;IACf,SAAS,CAAS;IAC1B,YAA6B,UAAkB,EAAmB,KAAa;QAAlD,eAAU,GAAV,UAAU,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAAQ;QAC7E,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QACpG,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,gBAAgB;QACd,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;CACF"}

package/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "@blen/fedreg-mcp-server",
+  "version": "2.0.0",
+  "description": "Code-mode MCP server for the U.S. Federal Register, Electronic Code of Federal Regulations, and regulations.gov APIs.",
+  "license": "Apache-2.0",
+  "author": "BLEN, Inc. (https://blenlabs.com)",
+  "homepage": "https://github.com/blen-labs/fedreg-mcp-server#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/blen-labs/fedreg-mcp-server.git"
+  },
+  "bugs": {
+    "url": "https://github.com/blen-labs/fedreg-mcp-server/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "federal-register",
+    "ecfr",
+    "regulations.gov",
+    "public-comments",
+    "code-mode",
+    "sandbox",
+    "isolated-vm",
+    "ai-agents",
+    "claude",
+    "anthropic",
+    "regulations",
+    "government-data"
+  ],
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "fedreg-mcp-server": "dist/bin.js"
+  },
+  "files": [
+    "dist",
+    "schema",
+    "README.md",
+    "LICENSE",
+    "NOTICE",
+    "CHANGELOG.md",
+    "SECURITY.md"
+  ],
+  "engines": {
+    "node": ">=20.10"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/node": "2.0.0",
+    "@modelcontextprotocol/server": "2.0.0",
+    "acorn": "^8.12.1",
+    "acorn-walk": "^8.3.4",
+    "jose": "^5.9.6",
+    "lru-cache": "^11.0.2",
+    "undici": "^6.21.0",
+    "zod": "^3.23.8"
+  },
+  "optionalDependencies": {
+    "isolated-vm": "^5.0.1"
+  },
+  "devDependencies": {
+    "@anthropic-ai/mcpb": "^2.1.2",
+    "@modelcontextprotocol/client": "2.0.0",
+    "@types/node": "^22.10.2",
+    "@typescript-eslint/eslint-plugin": "^8.18.0",
+    "@typescript-eslint/parser": "^8.18.0",
+    "eslint": "^9.17.0",
+    "nock": "^14.0.0-beta.19",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json && (chmod +x dist/bin.js || true)",
+    "dev": "tsx src/bin.ts",
+    "start": "node dist/bin.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint .",
+    "typecheck": "tsc --noEmit",
+    "mcpb:prepare": "node scripts/mcpb-prepare.mjs",
+    "mcpb:pack": "mcpb pack"
+  }
+}