@claude-flow/mcp 3.0.0-alpha.1

package/dist/rate-limiter.d.ts

@@ -0,0 +1,86 @@
+/**
+ * @claude-flow/mcp - Rate Limiter
+ *
+ * Token bucket rate limiting for DoS protection
+ */
+import { EventEmitter } from 'events';
+import type { ILogger } from './types.js';
+export interface RateLimitConfig {
+    /** Requests per second */
+    requestsPerSecond: number;
+    /** Burst size (max tokens) */
+    burstSize: number;
+    /** Per-session limits (if different from global) */
+    perSessionLimit?: number;
+    /** Cleanup interval for expired sessions */
+    cleanupInterval?: number;
+}
+export interface RateLimitResult {
+    allowed: boolean;
+    remaining: number;
+    resetIn: number;
+    retryAfter?: number;
+}
+export declare class RateLimiter extends EventEmitter {
+    private readonly logger;
+    private readonly config;
+    private globalBucket;
+    private sessionBuckets;
+    private cleanupTimer?;
+    constructor(logger: ILogger, config?: Partial<RateLimitConfig>);
+    /**
+     * Check if request is allowed (global limit)
+     */
+    checkGlobal(): RateLimitResult;
+    /**
+     * Check if request is allowed (per-session limit)
+     */
+    checkSession(sessionId: string): RateLimitResult;
+    /**
+     * Check both global and session limits
+     */
+    check(sessionId?: string): RateLimitResult;
+    /**
+     * Consume a token (call after request is processed)
+     */
+    consume(sessionId?: string): void;
+    /**
+     * Reset session bucket
+     */
+    resetSession(sessionId: string): void;
+    /**
+     * Get current stats
+     */
+    getStats(): {
+        globalTokens: number;
+        globalBurstSize: number;
+        sessionCount: number;
+        config: RateLimitConfig;
+    };
+    /**
+     * Destroy the rate limiter
+     */
+    destroy(): void;
+    /**
+     * Check bucket and refill tokens
+     */
+    private checkBucket;
+    /**
+     * Refill tokens based on elapsed time
+     */
+    private refillBucket;
+    /**
+     * Consume a token from bucket
+     */
+    private consumeFromBucket;
+    /**
+     * Start cleanup timer for expired sessions
+     */
+    private startCleanup;
+}
+export declare function createRateLimiter(logger: ILogger, config?: Partial<RateLimitConfig>): RateLimiter;
+/**
+ * Express/Connect middleware for rate limiting
+ */
+export declare function rateLimitMiddleware(rateLimiter: RateLimiter): (req: any, res: any, next: () => void) => void;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAcD,qBAAa,WAAY,SAAQ,YAAY;IAOzC,OAAO,CAAC,QAAQ,CAAC,MAAM;IANzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,cAAc,CAAuC;IAC7D,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAGnB,MAAM,EAAE,OAAO,EAChC,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IAcvC;;OAEG;IACH,WAAW,IAAI,eAAe;IAI9B;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe;IAiBhD;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe;IAmB1C;;OAEG;IACH,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAUjC;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKrC;;OAEG;IACH,QAAQ,IAAI;QACV,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,eAAe,CAAC;KACzB;IAUD;;OAEG;IACH,OAAO,IAAI,IAAI;IASf;;OAEG;IACH,OAAO,CAAC,WAAW;IA2BnB;;OAEG;IACH,OAAO,CAAC,YAAY;IASpB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;OAEG;IACH,OAAO,CAAC,YAAY;CAarB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAChC,WAAW,CAEb;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,WAAW,IAClD,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,IAAI,UAwB7C"}

package/dist/rate-limiter.js

@@ -0,0 +1,197 @@
+/**
+ * @claude-flow/mcp - Rate Limiter
+ *
+ * Token bucket rate limiting for DoS protection
+ */
+import { EventEmitter } from 'events';
+const DEFAULT_CONFIG = {
+    requestsPerSecond: 100,
+    burstSize: 200,
+    perSessionLimit: 50,
+    cleanupInterval: 60000, // 1 minute
+};
+export class RateLimiter extends EventEmitter {
+    logger;
+    config;
+    globalBucket;
+    sessionBuckets = new Map();
+    cleanupTimer;
+    constructor(logger, config = {}) {
+        super();
+        this.logger = logger;
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        // Initialize global bucket
+        this.globalBucket = {
+            tokens: this.config.burstSize,
+            lastRefill: Date.now(),
+        };
+        this.startCleanup();
+    }
+    /**
+     * Check if request is allowed (global limit)
+     */
+    checkGlobal() {
+        return this.checkBucket(this.globalBucket, this.config.requestsPerSecond, this.config.burstSize);
+    }
+    /**
+     * Check if request is allowed (per-session limit)
+     */
+    checkSession(sessionId) {
+        let bucket = this.sessionBuckets.get(sessionId);
+        if (!bucket) {
+            bucket = {
+                tokens: this.config.perSessionLimit,
+                lastRefill: Date.now(),
+            };
+            this.sessionBuckets.set(sessionId, bucket);
+        }
+        return this.checkBucket(bucket, this.config.perSessionLimit / 10, // Refill rate (10 seconds to full)
+        this.config.perSessionLimit);
+    }
+    /**
+     * Check both global and session limits
+     */
+    check(sessionId) {
+        const globalResult = this.checkGlobal();
+        if (!globalResult.allowed) {
+            this.emit('rate-limit:global', { remaining: globalResult.remaining });
+            return globalResult;
+        }
+        if (sessionId) {
+            const sessionResult = this.checkSession(sessionId);
+            if (!sessionResult.allowed) {
+                this.emit('rate-limit:session', { sessionId, remaining: sessionResult.remaining });
+                return sessionResult;
+            }
+            return sessionResult;
+        }
+        return globalResult;
+    }
+    /**
+     * Consume a token (call after request is processed)
+     */
+    consume(sessionId) {
+        this.consumeFromBucket(this.globalBucket);
+        if (sessionId) {
+            const bucket = this.sessionBuckets.get(sessionId);
+            if (bucket) {
+                this.consumeFromBucket(bucket);
+            }
+        }
+    }
+    /**
+     * Reset session bucket
+     */
+    resetSession(sessionId) {
+        this.sessionBuckets.delete(sessionId);
+        this.logger.debug('Rate limit session reset', { sessionId });
+    }
+    /**
+     * Get current stats
+     */
+    getStats() {
+        this.refillBucket(this.globalBucket, this.config.requestsPerSecond, this.config.burstSize);
+        return {
+            globalTokens: Math.floor(this.globalBucket.tokens),
+            globalBurstSize: this.config.burstSize,
+            sessionCount: this.sessionBuckets.size,
+            config: this.config,
+        };
+    }
+    /**
+     * Destroy the rate limiter
+     */
+    destroy() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = undefined;
+        }
+        this.sessionBuckets.clear();
+        this.removeAllListeners();
+    }
+    /**
+     * Check bucket and refill tokens
+     */
+    checkBucket(bucket, refillRate, maxTokens) {
+        this.refillBucket(bucket, refillRate, maxTokens);
+        if (bucket.tokens >= 1) {
+            return {
+                allowed: true,
+                remaining: Math.floor(bucket.tokens) - 1,
+                resetIn: Math.ceil((maxTokens - bucket.tokens) / refillRate * 1000),
+            };
+        }
+        // Calculate when bucket will have 1 token
+        const tokensNeeded = 1 - bucket.tokens;
+        const retryAfter = Math.ceil(tokensNeeded / refillRate);
+        return {
+            allowed: false,
+            remaining: 0,
+            resetIn: retryAfter * 1000,
+            retryAfter,
+        };
+    }
+    /**
+     * Refill tokens based on elapsed time
+     */
+    refillBucket(bucket, refillRate, maxTokens) {
+        const now = Date.now();
+        const elapsed = (now - bucket.lastRefill) / 1000; // seconds
+        const tokensToAdd = elapsed * refillRate;
+        bucket.tokens = Math.min(maxTokens, bucket.tokens + tokensToAdd);
+        bucket.lastRefill = now;
+    }
+    /**
+     * Consume a token from bucket
+     */
+    consumeFromBucket(bucket) {
+        if (bucket.tokens >= 1) {
+            bucket.tokens -= 1;
+        }
+    }
+    /**
+     * Start cleanup timer for expired sessions
+     */
+    startCleanup() {
+        this.cleanupTimer = setInterval(() => {
+            const now = Date.now();
+            const expireTime = this.config.cleanupInterval * 2;
+            for (const [sessionId, bucket] of this.sessionBuckets) {
+                if (now - bucket.lastRefill > expireTime) {
+                    this.sessionBuckets.delete(sessionId);
+                    this.logger.debug('Rate limit session expired', { sessionId });
+                }
+            }
+        }, this.config.cleanupInterval);
+    }
+}
+export function createRateLimiter(logger, config) {
+    return new RateLimiter(logger, config);
+}
+/**
+ * Express/Connect middleware for rate limiting
+ */
+export function rateLimitMiddleware(rateLimiter) {
+    return (req, res, next) => {
+        const sessionId = req.headers['x-session-id'] || req.ip;
+        const result = rateLimiter.check(sessionId);
+        res.setHeader('X-RateLimit-Remaining', result.remaining);
+        res.setHeader('X-RateLimit-Reset', Math.ceil(Date.now() / 1000) + Math.ceil(result.resetIn / 1000));
+        if (!result.allowed) {
+            res.setHeader('Retry-After', result.retryAfter);
+            res.status(429).json({
+                jsonrpc: '2.0',
+                id: null,
+                error: {
+                    code: -32000,
+                    message: 'Rate limit exceeded',
+                    data: { retryAfter: result.retryAfter },
+                },
+            });
+            return;
+        }
+        rateLimiter.consume(sessionId);
+        next();
+    };
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AA0BtC,MAAM,cAAc,GAAoB;IACtC,iBAAiB,EAAE,GAAG;IACtB,SAAS,EAAE,GAAG;IACd,eAAe,EAAE,EAAE;IACnB,eAAe,EAAE,KAAK,EAAE,WAAW;CACpC,CAAC;AAEF,MAAM,OAAO,WAAY,SAAQ,YAAY;IAOxB;IANF,MAAM,CAA4B;IAC3C,YAAY,CAAc;IAC1B,cAAc,GAA6B,IAAI,GAAG,EAAE,CAAC;IACrD,YAAY,CAAkB;IAEtC,YACmB,MAAe,EAChC,SAAmC,EAAE;QAErC,KAAK,EAAE,CAAC;QAHS,WAAM,GAAN,MAAM,CAAS;QAIhC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAA+B,CAAC;QAE5E,2BAA2B;QAC3B,IAAI,CAAC,YAAY,GAAG;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACvB,CAAC;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnG,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,IAAI,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CACrB,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,EAAE,EAAE,mCAAmC;QACrE,IAAI,CAAC,MAAM,CAAC,eAAe,CAC5B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAkB;QACtB,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;YACtE,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC;gBACnF,OAAO,aAAa,CAAC;YACvB,CAAC;YACD,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,SAAkB;QACxB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3F,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAClD,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YACtC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,WAAW,CACjB,MAAmB,EACnB,UAAkB,EAClB,SAAiB;QAEjB,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAEjD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;gBACxC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;aACpE,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,CAAC;QAExD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,GAAG,IAAI;YAC1B,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,MAAmB,EAAE,UAAkB,EAAE,SAAiB;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU;QAC5D,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;QAEzC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,MAAmB;QAC3C,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;YAEnD,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtD,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;oBACzC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAe,EACf,MAAiC;IAEjC,OAAO,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAwB;IAC1D,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAgB,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAE5C,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACzD,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;QAEpG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,qBAAqB;oBAC9B,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;iBACxC;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/resource-registry.d.ts

@@ -0,0 +1,144 @@
+/**
+ * @claude-flow/mcp - Resource Registry
+ *
+ * MCP 2025-11-25 compliant resource management
+ * Supports: list, read, subscribe, templates, pagination
+ */
+import { EventEmitter } from 'events';
+import type { MCPResource, ResourceContent, ResourceTemplate, ResourceListResult, ResourceReadResult, ILogger, ContentAnnotations } from './types.js';
+export type ResourceHandler = (uri: string) => Promise<ResourceContent[]>;
+export type SubscriptionCallback = (uri: string, content: ResourceContent[]) => void;
+export interface ResourceRegistryOptions {
+    enableSubscriptions?: boolean;
+    maxSubscriptionsPerResource?: number;
+    cacheEnabled?: boolean;
+    cacheTTL?: number;
+    maxCacheSize?: number;
+}
+export declare class ResourceRegistry extends EventEmitter {
+    private readonly logger;
+    private resources;
+    private templates;
+    private handlers;
+    private subscriptions;
+    private cache;
+    private subscriptionCounter;
+    private readonly options;
+    constructor(logger: ILogger, options?: ResourceRegistryOptions);
+    /**
+     * Register a static resource
+     */
+    registerResource(resource: MCPResource, handler: ResourceHandler): boolean;
+    /**
+     * Register a resource template (dynamic URIs)
+     */
+    registerTemplate(template: ResourceTemplate, handler: ResourceHandler): boolean;
+    /**
+     * Unregister a resource
+     */
+    unregisterResource(uri: string): boolean;
+    /**
+     * List resources with pagination
+     */
+    list(cursor?: string, pageSize?: number): ResourceListResult;
+    /**
+     * Read resource content
+     */
+    read(uri: string): Promise<ResourceReadResult>;
+    /**
+     * Subscribe to resource updates
+     */
+    subscribe(uri: string, callback: SubscriptionCallback): string;
+    /**
+     * Unsubscribe from resource updates
+     */
+    unsubscribe(subscriptionId: string): boolean;
+    /**
+     * Notify subscribers of resource update
+     */
+    notifyUpdate(uri: string): Promise<void>;
+    /**
+     * Get resource by URI
+     */
+    getResource(uri: string): MCPResource | undefined;
+    /**
+     * Check if resource exists
+     */
+    hasResource(uri: string): boolean;
+    /**
+     * Get resource count
+     */
+    getResourceCount(): number;
+    /**
+     * Get all templates
+     */
+    getTemplates(): ResourceTemplate[];
+    /**
+     * Get subscription count for a resource
+     */
+    getSubscriptionCount(uri: string): number;
+    /**
+     * Get stats
+     */
+    getStats(): {
+        totalResources: number;
+        totalTemplates: number;
+        totalSubscriptions: number;
+        cacheSize: number;
+    };
+    /**
+     * Clear cache
+     */
+    clearCache(): void;
+    /**
+     * Find handler for template URI
+     */
+    private findTemplateHandler;
+    /**
+     * Escape regex metacharacters to prevent ReDoS attacks
+     * SECURITY: Critical for preventing regex denial of service
+     */
+    private escapeRegex;
+    /**
+     * Check if URI matches any template
+     * SECURITY: Uses escaped regex to prevent ReDoS
+     */
+    private matchesTemplate;
+    /**
+     * Encode cursor for pagination
+     */
+    private encodeCursor;
+    /**
+     * Decode cursor for pagination
+     */
+    private decodeCursor;
+    /**
+     * Emit listChanged notification
+     */
+    private emitListChanged;
+}
+export declare function createResourceRegistry(logger: ILogger, options?: ResourceRegistryOptions): ResourceRegistry;
+/**
+ * Helper to create a static text resource
+ */
+export declare function createTextResource(uri: string, name: string, text: string, options?: {
+    description?: string;
+    mimeType?: string;
+    annotations?: ContentAnnotations;
+}): {
+    resource: MCPResource;
+    handler: ResourceHandler;
+};
+/**
+ * Helper to create a file resource
+ * SECURITY: Validates path to prevent path traversal attacks
+ */
+export declare function createFileResource(uri: string, name: string, filePath: string, options?: {
+    description?: string;
+    mimeType?: string;
+    allowedBasePaths?: string[];
+}): {
+    resource: MCPResource;
+    handler: ResourceHandler;
+};
+//# sourceMappingURL=resource-registry.d.ts.map

package/dist/resource-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.d.ts","sourceRoot":"","sources":["../src/resource-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,KAAK,EACV,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,OAAO,EACP,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;AAC1E,MAAM,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,IAAI,CAAC;AAErF,MAAM,WAAW,uBAAuB;IACtC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAeD,qBAAa,gBAAiB,SAAQ,YAAY;IAW9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAVzB,OAAO,CAAC,SAAS,CAAuC;IACxD,OAAO,CAAC,SAAS,CAA4C;IAC7D,OAAO,CAAC,QAAQ,CAA2C;IAC3D,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,mBAAmB,CAAK;IAEhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;gBAGzC,MAAM,EAAE,OAAO,EAChC,OAAO,GAAE,uBAA4B;IAYvC;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO;IAgB1E;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO;IAe/E;;OAEG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAuBxC;;OAEG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAW,GAAG,kBAAkB;IAqBhE;;OAEG;IACG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6CpD;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,GAAG,MAAM;IA2B9D;;OAEG;IACH,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO;IAgB5C;;OAEG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB9C;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIjD;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,YAAY,IAAI,gBAAgB,EAAE;IAIlC;;OAEG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAIzC;;OAEG;IACH,QAAQ,IAAI;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC;KACnB;IAcD;;OAEG;IACH,UAAU,IAAI,IAAI;IAKlB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAS3B;;;OAGG;IACH,OAAO,CAAC,WAAW;IAInB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAgCvB;;OAEG;IACH,OAAO,CAAC,YAAY;IAIpB;;OAEG;IACH,OAAO,CAAC,YAAY;IAQpB;;OAEG;IACH,OAAO,CAAC,eAAe;CAGxB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE,uBAAuB,GAChC,gBAAgB,CAElB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GACA;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAkBrD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IACR,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B,GACA;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAqDrD"}