@dominusnode/mcp-server 1.0.0

package/dist/src/http-client.js

@@ -0,0 +1,241 @@
+const USER_AGENT = "dominusnode-mcp-server/1.0.0";
+// Scrub credential patterns from error messages before returning to MCP client
+const CREDENTIAL_PATTERNS = [
+    /dn_live_[A-Za-z0-9_-]+/g,
+    /dn_test_[A-Za-z0-9_-]+/g,
+    /eyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/g,
+    /Bearer\s+[A-Za-z0-9._-]+/gi,
+];
+function scrubCredentials(msg) {
+    let result = msg;
+    for (const pattern of CREDENTIAL_PATTERNS) {
+        result = result.replace(pattern, "[REDACTED]");
+    }
+    return result;
+}
+const DANGEROUS_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+// Depth limit prevents stack overflow on deeply nested JSON
+function stripDangerousKeys(obj, depth = 0) {
+    if (depth > 50 || !obj || typeof obj !== "object")
+        return;
+    if (Array.isArray(obj)) {
+        for (const item of obj)
+            stripDangerousKeys(item, depth + 1);
+        return;
+    }
+    const record = obj;
+    for (const key of Object.keys(record)) {
+        if (DANGEROUS_KEYS.has(key)) {
+            delete record[key];
+        }
+        else if (record[key] && typeof record[key] === "object") {
+            stripDangerousKeys(record[key], depth + 1);
+        }
+    }
+}
+function safeJsonParse(text) {
+    const parsed = JSON.parse(text);
+    stripDangerousKeys(parsed);
+    return parsed;
+}
+function addJitter(ms) {
+    const jitter = ms * 0.2 * (Math.random() - 0.5);
+    return Math.max(100, Math.round(ms + jitter));
+}
+// ─── MCP Tool Rate Limiter ────────────────────────────────────────
+// Prevents MCP clients from spamming API requests.
+// Token bucket: MAX_REQUESTS_PER_MINUTE refill rate, burst up to BUCKET_SIZE.
+const MCP_RATE_LIMIT_PER_MINUTE = 120; // 2 req/sec sustained
+const MCP_BUCKET_SIZE = 20; // Allow bursts up to 20
+class TokenBucket {
+    maxTokens;
+    refillRate;
+    tokens;
+    lastRefill;
+    constructor(maxTokens, refillRate) {
+        this.maxTokens = maxTokens;
+        this.refillRate = refillRate;
+        this.tokens = maxTokens;
+        this.lastRefill = Date.now();
+    }
+    tryConsume() {
+        this.refill();
+        if (this.tokens >= 1) {
+            this.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+    refill() {
+        const now = Date.now();
+        const elapsed = now - this.lastRefill;
+        this.tokens = Math.min(this.maxTokens, this.tokens + elapsed * this.refillRate);
+        this.lastRefill = now;
+    }
+}
+// Maximum response body size for API calls (10MB)
+const MAX_API_RESPONSE_BYTES = 10 * 1024 * 1024;
+export class HttpClient {
+    baseUrl;
+    tokenManager;
+    rateLimiter;
+    mcpAgentSecret;
+    constructor(baseUrl, tokenManager, mcpAgentSecret = "") {
+        this.baseUrl = baseUrl;
+        this.tokenManager = tokenManager;
+        this.mcpAgentSecret = mcpAgentSecret;
+        this.rateLimiter = new TokenBucket(MCP_BUCKET_SIZE, MCP_RATE_LIMIT_PER_MINUTE / 60_000);
+    }
+    async request(opts) {
+        // Token bucket rate limiting: prevents MCP clients from spamming API
+        if (!this.rateLimiter.tryConsume()) {
+            throw new Error("MCP rate limit exceeded — too many requests. Please slow down.");
+        }
+        // Protect base headers from user override
+        const PROTECTED_HEADERS = new Set(["user-agent", "content-type", "authorization", "host", "connection", "content-length", "x-dominusnode-agent", "x-dominusnode-agent-secret"]);
+        const headers = {
+            "User-Agent": USER_AGENT,
+            "Content-Type": "application/json",
+            "X-DominusNode-Agent": "mcp",
+        };
+        // Send shared secret for auto-verification (if configured)
+        if (this.mcpAgentSecret) {
+            headers["X-DominusNode-Agent-Secret"] = this.mcpAgentSecret;
+        }
+        if (opts.headers) {
+            for (const [key, value] of Object.entries(opts.headers)) {
+                if (!PROTECTED_HEADERS.has(key.toLowerCase())) {
+                    headers[key] = value;
+                }
+            }
+        }
+        if (opts.requiresAuth !== false) {
+            const token = await this.tokenManager.getValidToken();
+            headers["Authorization"] = `Bearer ${token}`;
+        }
+        const url = `${this.baseUrl}${opts.path}`;
+        const timeoutMs = 30_000;
+        let response;
+        try {
+            response = await fetch(url, {
+                method: opts.method,
+                headers,
+                body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error", // Reject redirects — prevents HTTPS→HTTP credential leakage
+            });
+        }
+        catch (err) {
+            throw new Error(scrubCredentials(`Network error: ${err instanceof Error ? err.message : "request failed"}`));
+        }
+        // 429 retry with jitter, cap 10s
+        // NOTE: Safe for POST/PATCH/DELETE because a 429 response means the backend
+        // rate limiter rejected the request BEFORE processing — no mutation occurred.
+        if (response.status === 429) {
+            const retryAfterRaw = parseInt(response.headers.get("retry-after") ?? "5", 10);
+            const retryAfter = isNaN(retryAfterRaw) ? 5 : retryAfterRaw;
+            // Cancel body instead of buffering — prevents OOM from oversized 429 response
+            await response.body?.cancel();
+            await new Promise((resolve) => setTimeout(resolve, addJitter(Math.min(retryAfter * 1000, 10_000))));
+            if (opts.requiresAuth !== false) {
+                const freshToken = await this.tokenManager.getValidToken();
+                headers["Authorization"] = `Bearer ${freshToken}`;
+            }
+            try {
+                response = await fetch(url, {
+                    method: opts.method,
+                    headers,
+                    body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+                    signal: AbortSignal.timeout(timeoutMs),
+                    redirect: "error",
+                });
+            }
+            catch (err) {
+                throw new Error(scrubCredentials(`Network error on retry: ${err instanceof Error ? err.message : "request failed"}`));
+            }
+            // Prevent fall-through to 401 handler after 429 retry
+            if (response.ok) {
+                const responseText = await response.text();
+                if (responseText.length > MAX_API_RESPONSE_BYTES) {
+                    throw new Error("Response too large");
+                }
+                return responseText ? safeJsonParse(responseText) : {};
+            }
+            // If retry still failed (non-2xx, non-401), throw immediately
+            // Cancel body instead of buffering — prevents OOM from oversized error response
+            if (response.status !== 401) {
+                await response.body?.cancel();
+                throw new Error(`API error ${response.status} after rate-limit retry`);
+            }
+            // Only fall through to 401 handler if retry returned 401
+        }
+        // 401 retry with force refresh
+        // NOTE: Safe for POST/PATCH/DELETE because a 401 means auth rejected BEFORE
+        // processing — no mutation occurred. Retrying with a fresh token is the first actual attempt.
+        if (response.status === 401 && opts.requiresAuth !== false) {
+            // Cancel unconsumed 401 response body to free connection + memory
+            await response.body?.cancel();
+            const newToken = await this.tokenManager.forceRefresh();
+            headers["Authorization"] = `Bearer ${newToken}`;
+            const retry = await fetch(url, {
+                method: opts.method,
+                headers,
+                body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+                signal: AbortSignal.timeout(timeoutMs),
+                redirect: "error",
+            });
+            if (retry.ok) {
+                const text = await retry.text();
+                if (text.length > MAX_API_RESPONSE_BYTES)
+                    throw new Error("API response exceeded maximum allowed size");
+                return text ? safeJsonParse(text) : {};
+            }
+            // Read limited error body to prevent OOM on oversized response
+            const retryBody = await retry.text();
+            if (retryBody.length > MAX_API_RESPONSE_BYTES) {
+                throw new Error("API error response exceeded maximum allowed size");
+            }
+            let retryMessage = retryBody.slice(0, 500);
+            try {
+                // Use safeJsonParse to prevent prototype pollution on error paths
+                const parsed = safeJsonParse(retryBody);
+                retryMessage = parsed.error ?? parsed.message ?? retryBody.slice(0, 500);
+            }
+            catch { /* use raw text */ }
+            throw new Error(scrubCredentials(`API error ${retry.status}: ${retryMessage}`));
+        }
+        const responseText = await response.text();
+        // Prevent OOM from oversized API response
+        if (responseText.length > MAX_API_RESPONSE_BYTES) {
+            throw new Error("API response exceeded maximum allowed size");
+        }
+        if (!response.ok) {
+            let message = responseText.slice(0, 500);
+            try {
+                // Use safeJsonParse to prevent prototype pollution on error paths
+                const parsed = safeJsonParse(responseText);
+                message = parsed.error ?? parsed.message ?? responseText.slice(0, 500);
+            }
+            catch { /* use raw text */ }
+            throw new Error(scrubCredentials(`API error ${response.status}: ${message}`));
+        }
+        return responseText ? safeJsonParse(responseText) : {};
+    }
+    /** Store tokens from an external auth flow (e.g., registration in bootstrap mode) */
+    storeTokens(accessToken, refreshToken) {
+        this.tokenManager.setTokens(accessToken, refreshToken);
+    }
+    async get(path, requiresAuth = true) {
+        return this.request({ method: "GET", path, requiresAuth });
+    }
+    async post(path, body, requiresAuth = true) {
+        return this.request({ method: "POST", path, body, requiresAuth });
+    }
+    async patch(path, body) {
+        return this.request({ method: "PATCH", path, body });
+    }
+    async delete(path) {
+        return this.request({ method: "DELETE", path });
+    }
+}
+//# sourceMappingURL=http-client.js.map

package/dist/src/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../src/http-client.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAElD,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG;IAC1B,yBAAyB;IACzB,yBAAyB;IACzB,wDAAwD;IACxD,4BAA4B;CAC7B,CAAC;AAEF,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;QAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1E,4DAA4D;AAC5D,SAAS,kBAAkB,CAAC,GAAY,EAAE,KAAK,GAAG,CAAC;IACjD,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,GAAG;YAAE,kBAAkB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1D,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAI,IAAY;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,MAAW,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,qEAAqE;AACrE,mDAAmD;AACnD,8EAA8E;AAC9E,MAAM,yBAAyB,GAAG,GAAG,CAAC,CAAC,sBAAsB;AAC7D,MAAM,eAAe,GAAG,EAAE,CAAC,CAAC,wBAAwB;AAEpD,MAAM,WAAW;IAKL;IACA;IALF,MAAM,CAAS;IACf,UAAU,CAAS;IAE3B,YACU,SAAiB,EACjB,UAAkB;QADlB,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAAQ;QAE1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED,UAAU;QACR,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAChF,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAUhD,MAAM,OAAO,UAAU;IAKX;IACA;IALF,WAAW,CAAc;IACzB,cAAc,CAAS;IAE/B,YACU,OAAe,EACf,YAA0B,EAClC,cAAc,GAAG,EAAE;QAFX,YAAO,GAAP,OAAO,CAAQ;QACf,iBAAY,GAAZ,YAAY,CAAc;QAGlC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAChC,eAAe,EACf,yBAAyB,GAAG,MAAM,CACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,IAAwB;QACvC,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QAED,0CAA0C;QAC1C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,4BAA4B,CAAC,CAAC,CAAC;QAChL,MAAM,OAAO,GAA2B;YACtC,YAAY,EAAE,UAAU;YACxB,cAAc,EAAE,kBAAkB;YAClC,qBAAqB,EAAE,KAAK;SAC7B,CAAC;QACF,2DAA2D;QAC3D,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,CAAC,4BAA4B,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YACtD,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC;QACzB,IAAI,QAAkB,CAAC;QAEvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,QAAQ,EAAE,OAAO,EAAE,4DAA4D;aAChF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC/G,CAAC;QAED,iCAAiC;QACjC,4EAA4E;QAC5E,8EAA8E;QAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/E,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5D,8EAA8E;YAC9E,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAEpG,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;gBAC3D,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,UAAU,EAAE,CAAC;YACpD,CAAC;YAED,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;oBACtC,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACxH,CAAC;YAED,sDAAsD;YACtD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,YAAY,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,YAAY,CAAC,CAAC,CAAC,aAAa,CAAI,YAAY,CAAC,CAAC,CAAC,CAAE,EAAQ,CAAC;YACnE,CAAC;YACD,8DAA8D;YAC9D,gFAAgF;YAChF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,yBAAyB,CAAC,CAAC;YACzE,CAAC;YACD,yDAAyD;QAC3D,CAAC;QAED,+BAA+B;QAC/B,4EAA4E;QAC5E,8FAA8F;QAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YAC3D,kEAAkE;YAClE,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;YACxD,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;gBACtC,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,MAAM,GAAG,sBAAsB;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBACxG,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAI,IAAI,CAAC,CAAC,CAAC,CAAE,EAAQ,CAAC;YACnD,CAAC;YACD,+DAA+D;YAC/D,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,SAAS,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,kEAAkE;gBAClE,MAAM,MAAM,GAAG,aAAa,CAA0B,SAAS,CAAC,CAAC;gBACjE,YAAY,GAAI,MAAM,CAAC,KAAgB,IAAK,MAAM,CAAC,OAAkB,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnG,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,aAAa,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,0CAA0C;QAC1C,IAAI,YAAY,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,kEAAkE;gBAClE,MAAM,MAAM,GAAG,aAAa,CAA0B,YAAY,CAAC,CAAC;gBACpE,OAAO,GAAI,MAAM,CAAC,KAAgB,IAAK,MAAM,CAAC,OAAkB,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjG,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,aAAa,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,YAAY,CAAC,CAAC,CAAC,aAAa,CAAI,YAAY,CAAC,CAAC,CAAC,CAAE,EAAQ,CAAC;IACnE,CAAC;IAED,qFAAqF;IACrF,WAAW,CAAC,WAAmB,EAAE,YAAoB;QACnD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY,EAAE,YAAY,GAAG,IAAI;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAc,EAAE,YAAY,GAAG,IAAI;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,KAAK,CAAI,IAAY,EAAE,IAAc;QACzC,OAAO,IAAI,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,IAAY;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/src/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":""}

package/dist/src/index.js

@@ -0,0 +1,160 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { parseConfig, ConfigError } from "./config.js";
+import { TokenManager } from "./token-manager.js";
+import { HttpClient } from "./http-client.js";
+import { registerFetchTools } from "./tools/fetch.js";
+import { registerProxyTools } from "./tools/proxy.js";
+import { registerWalletTools } from "./tools/wallet.js";
+import { registerUsageTools } from "./tools/usage.js";
+import { registerKeysTools } from "./tools/keys.js";
+import { registerPlansTools } from "./tools/plans.js";
+import { registerSessionsTools } from "./tools/sessions.js";
+import { registerAccountTools } from "./tools/account.js";
+import { registerCryptoTools } from "./tools/crypto.js";
+import { registerPaypalTools } from "./tools/paypal.js";
+import { registerAgentWalletTools } from "./tools/agent-wallet.js";
+import { registerWalletAuthTools } from "./tools/wallet-auth.js";
+import { registerSlotsTools } from "./tools/slots.js";
+import { registerTeamsTools } from "./tools/teams.js";
+async function main() {
+    let config;
+    try {
+        config = parseConfig();
+    }
+    catch (err) {
+        if (err instanceof ConfigError) {
+            process.stderr.write(`Configuration error: ${err.message}\n`);
+            process.stderr.write(`\nOptional environment variables:\n`);
+            process.stderr.write(`  DOMINUSNODE_API_KEY         — Your Dominus Node API key (starts with dn_live_)\n`);
+            process.stderr.write(`                             Omit to start in bootstrap mode\n`);
+            process.stderr.write(`  DOMINUSNODE_API_URL         — API base URL (default: https://api.dominusnode.com)\n`);
+            process.stderr.write(`  DOMINUSNODE_PROXY_HOST      — Proxy host (default: proxy.dominusnode.com)\n`);
+            process.stderr.write(`  DOMINUSNODE_HTTP_PROXY_PORT — HTTP proxy port (default: 8080)\n`);
+            process.exit(1);
+        }
+        throw err;
+    }
+    const tokenManager = new TokenManager(config.apiUrl);
+    const httpClient = new HttpClient(config.apiUrl, tokenManager, config.mcpAgentSecret);
+    // Clear credentials on process shutdown to minimize in-memory exposure time
+    function cleanupCredentials() {
+        tokenManager.clear();
+    }
+    process.on("SIGINT", () => { cleanupCredentials(); process.exit(0); });
+    process.on("SIGTERM", () => { cleanupCredentials(); process.exit(0); });
+    process.on("exit", cleanupCredentials);
+    const server = new McpServer({
+        name: "dominusnode",
+        version: "1.0.0",
+    });
+    const bootstrapMode = config.apiKey === null;
+    if (bootstrapMode) {
+        // ── Bootstrap Mode ──────────────────────────────────────────────
+        // No API key provided. Start with account/auth tools only.
+        // Agent can register, login, or setup — then use all tools.
+        process.stderr.write("Dominus Node MCP Server starting in BOOTSTRAP mode...\n");
+        process.stderr.write("No API key detected. Only account tools are available.\n");
+        process.stderr.write("Use dominusnode_setup to create an account and get an API key.\n\n");
+        registerAccountTools(server, httpClient);
+        registerCryptoTools(server, httpClient);
+        registerPaypalTools(server, httpClient);
+        // Do NOT register agent-wallet tools in bootstrap mode —
+        // they require authentication and should only be available in authenticated mode.
+        registerWalletAuthTools(server, httpClient);
+        registerSlotsTools(server, httpClient);
+        // Register a helper tool that tells the agent what to do
+        registerBootstrapHelper(server);
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        process.stderr.write("Dominus Node MCP Server ready — bootstrap mode (15 tools + bootstrap helper)\n");
+        process.stderr.write("Run dominusnode_setup or dominusnode_wallet_setup to create an account and unlock all 57 tools.\n");
+    }
+    else {
+        // ── Authenticated Mode ──────────────────────────────────────────
+        process.stderr.write("Dominus Node MCP Server starting...\n");
+        try {
+            await tokenManager.initialize(config.apiKey);
+            process.stderr.write("Authenticated with Dominus Node API\n");
+        }
+        catch (err) {
+            process.stderr.write(`Authentication failed: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.stderr.write("Verify your DOMINUSNODE_API_KEY is valid and DOMINUSNODE_API_URL is reachable.\n");
+            process.exit(1);
+        }
+        // Register all tool groups
+        registerFetchTools(server, config);
+        registerProxyTools(server, httpClient);
+        registerWalletTools(server, httpClient);
+        registerUsageTools(server, httpClient);
+        registerKeysTools(server, httpClient);
+        registerPlansTools(server, httpClient);
+        registerSessionsTools(server, httpClient);
+        registerAccountTools(server, httpClient);
+        registerCryptoTools(server, httpClient);
+        registerPaypalTools(server, httpClient);
+        registerAgentWalletTools(server, httpClient, config);
+        registerWalletAuthTools(server, httpClient);
+        registerSlotsTools(server, httpClient);
+        registerTeamsTools(server, httpClient);
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        process.stderr.write("Dominus Node MCP Server ready — 57 tools available\n");
+    }
+}
+function registerBootstrapHelper(server) {
+    server.tool("dominusnode_bootstrap_help", "Shows how to get started with Dominus Node. Use this if you're running in bootstrap mode without an API key.", {}, async () => {
+        const text = [
+            `Dominus Node Bootstrap Mode`,
+            ``,
+            `You're running without an API key. Here's how to get started:`,
+            ``,
+            `Step 0: Check slot availability`,
+            `  Use dominusnode_check_slots to see if registration slots are open.`,
+            `  Alpha is limited to 250 users. If slots are full, use`,
+            `  dominusnode_join_waitlist to get notified when one opens.`,
+            ``,
+            `Option 1: One-shot setup (recommended)`,
+            `  Use dominusnode_setup with an email and password.`,
+            `  This creates an account + API key in one step.`,
+            ``,
+            `Option 2: Wallet auth (no email/password needed)`,
+            `  1. dominusnode_wallet_challenge — Get a message to sign`,
+            `  2. dominusnode_wallet_setup — Submit signature + get API key`,
+            ``,
+            `Option 3: Step by step (email/password)`,
+            `  1. dominusnode_register — Create an account`,
+            `  2. dominusnode_login — Log in if you already have an account`,
+            `  Note: To create API keys, use dominusnode_setup (one-shot) or`,
+            `  set DOMINUSNODE_API_KEY and restart to unlock dominusnode_create_key.`,
+            ``,
+            `Option 4: Top up with crypto or PayPal`,
+            `  After registering, use dominusnode_pay_crypto to add funds.`,
+            `  Supports BTC, ETH, LTC, XMR, ZEC, USDC, SOL, USDT, DAI, BNB, LINK.`,
+            `  Or use dominusnode_pay_paypal for PayPal top-up (min $5).`,
+            `  Check your balance with dominusnode_get_balance to confirm funds arrived.`,
+            ``,
+            `Option 5: Multi-agent teams (manage multiple AI agents)`,
+            `  Lead agent sets up account + payment, then:`,
+            `  1. dominusnode_create_team — Create a team for your agents`,
+            `  2. dominusnode_team_fund — Fund team wallet from personal wallet`,
+            `  3. Sub-agents register via dominusnode_setup (auto-verified)`,
+            `  4. dominusnode_team_add_member — Add sub-agents by email`,
+            `  5. dominusnode_team_create_key — Create shared team API keys`,
+            `  All traffic bills to team wallet. Only lead needs payment.`,
+            ``,
+            `After setup, set DOMINUSNODE_API_KEY in your environment`,
+            `to unlock all 57 tools on next startup.`,
+            ``,
+            `Email auto-verified for MCP agents — crypto payments enabled (11 currencies).`,
+            `Free tier: 10 connections, 1GB bandwidth — no payment required.`,
+        ].join("\n");
+        return { content: [{ type: "text", text }] };
+    });
+}
+main().catch((err) => {
+    process.stderr.write(`Fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;YAC3G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uFAAuF,CAAC,CAAC;YAC9G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;YACtG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mEAAmE,CAAC,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAEtF,4EAA4E;IAC5E,SAAS,kBAAkB;QACzB,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;IAE7C,IAAI,aAAa,EAAE,CAAC;QAClB,mEAAmE;QACnE,2DAA2D;QAC3D,4DAA4D;QAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAE3F,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,yDAAyD;QACzD,kFAAkF;QAClF,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEvC,yDAAyD;QACzD,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mGAAmG,CAAC,CAAC;IAC5H,CAAC;SAAM,CAAC;QACN,mEAAmE;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAE9D,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACrG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,2BAA2B;QAC3B,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACtC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1C,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,wBAAwB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACrD,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,kBAAkB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAiB;IAChD,MAAM,CAAC,IAAI,CACT,4BAA4B,EAC5B,8GAA8G,EAC9G,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG;YACX,6BAA6B;YAC7B,EAAE;YACF,+DAA+D;YAC/D,EAAE;YACF,iCAAiC;YACjC,sEAAsE;YACtE,yDAAyD;YACzD,6DAA6D;YAC7D,EAAE;YACF,wCAAwC;YACxC,qDAAqD;YACrD,kDAAkD;YAClD,EAAE;YACF,kDAAkD;YAClD,2DAA2D;YAC3D,gEAAgE;YAChE,EAAE;YACF,yCAAyC;YACzC,+CAA+C;YAC/C,gEAAgE;YAChE,iEAAiE;YACjE,yEAAyE;YACzE,EAAE;YACF,wCAAwC;YACxC,+DAA+D;YAC/D,sEAAsE;YACtE,6DAA6D;YAC7D,6EAA6E;YAC7E,EAAE;YACF,yDAAyD;YACzD,+CAA+C;YAC/C,8DAA8D;YAC9D,oEAAoE;YACpE,gEAAgE;YAChE,4DAA4D;YAC5D,gEAAgE;YAChE,8DAA8D;YAC9D,EAAE;YACF,0DAA0D;YAC1D,yCAAyC;YACzC,EAAE;YACF,+EAA+E;YAC/E,iEAAiE;SAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC,CACF,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/proxy-fetch.d.ts

@@ -0,0 +1,23 @@
+import type { McpConfig } from "./config.js";
+export interface ProxyFetchOptions {
+    url: string;
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+    country?: string;
+    state?: string;
+    city?: string;
+    poolType?: "dc" | "residential" | "auto";
+    timeoutMs?: number;
+}
+export interface ProxyFetchResult {
+    status: number;
+    statusText: string;
+    headers: Record<string, string>;
+    body: string;
+    bodyTruncated: boolean;
+    byteCount: number;
+}
+export declare function validateUrl(url: string): URL;
+export declare function proxyFetch(config: McpConfig, opts: ProxyFetchOptions): Promise<ProxyFetchResult>;
+//# sourceMappingURL=proxy-fetch.d.ts.map

package/dist/src/proxy-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-fetch.d.ts","sourceRoot":"","sources":["../../src/proxy-fetch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,IAAI,GAAG,aAAa,GAAG,MAAM,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAsLD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAyC5C;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,CAAC,CA+B3B"}