@forestadmin/mcp-server 0.1.0

package/dist/index.js

@@ -0,0 +1,13 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isMcpRoute = exports.MCP_PATHS = exports.ForestMCPServer = void 0;
+// Library exports only - no side effects
+var server_1 = require("./server");
+Object.defineProperty(exports, "ForestMCPServer", { enumerable: true, get: function () { return __importDefault(server_1).default; } });
+var mcp_paths_1 = require("./mcp-paths");
+Object.defineProperty(exports, "MCP_PATHS", { enumerable: true, get: function () { return mcp_paths_1.MCP_PATHS; } });
+Object.defineProperty(exports, "isMcpRoute", { enumerable: true, get: function () { return mcp_paths_1.isMcpRoute; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7O0FBQUEseUNBQXlDO0FBQ3pDLG1DQUFzRDtBQUE3QywwSEFBQSxPQUFPLE9BQW1CO0FBRW5DLHlDQUFvRDtBQUEzQyxzR0FBQSxTQUFTLE9BQUE7QUFBRSx1R0FBQSxVQUFVLE9BQUEifQ==

package/dist/mcp-paths.d.ts

@@ -0,0 +1,5 @@
+/** MCP-specific paths that should be handled by the MCP server */
+export declare const MCP_PATHS: string[];
+/** Check if a URL is an MCP route */
+export declare function isMcpRoute(url: string): boolean;
+//# sourceMappingURL=mcp-paths.d.ts.map

package/dist/mcp-paths.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_PATHS = void 0;
+exports.isMcpRoute = isMcpRoute;
+/** MCP-specific paths that should be handled by the MCP server */
+exports.MCP_PATHS = ['/.well-known/', '/oauth/', '/mcp'];
+/** Check if a URL is an MCP route */
+function isMcpRoute(url) {
+    return exports.MCP_PATHS.some(p => url === p || url.startsWith(p));
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWNwLXBhdGhzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc3JjL21jcC1wYXRocy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFJQSxnQ0FFQztBQU5ELGtFQUFrRTtBQUNyRCxRQUFBLFNBQVMsR0FBRyxDQUFDLGVBQWUsRUFBRSxTQUFTLEVBQUUsTUFBTSxDQUFDLENBQUM7QUFFOUQscUNBQXFDO0FBQ3JDLFNBQWdCLFVBQVUsQ0FBQyxHQUFXO0lBQ3BDLE9BQU8saUJBQVMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxHQUFHLEtBQUssQ0FBQyxJQUFJLEdBQUcsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQztBQUM3RCxDQUFDIn0=

package/dist/polyfills.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Polyfill for URL.canParse
+ *
+ * The MCP SDK's OAuth handler uses URL.canParse in Zod schema validation.
+ * Some environments (like certain Koa/Express proxy setups) may have a different
+ * URL implementation that doesn't include the canParse static method
+ * (added in Node.js 19.9.0 / 20.0.0).
+ *
+ * This polyfill must be imported BEFORE any MCP SDK imports.
+ */
+export {};
+//# sourceMappingURL=polyfills.d.ts.map

package/dist/polyfills.js

@@ -0,0 +1,27 @@
+"use strict";
+/**
+ * Polyfill for URL.canParse
+ *
+ * The MCP SDK's OAuth handler uses URL.canParse in Zod schema validation.
+ * Some environments (like certain Koa/Express proxy setups) may have a different
+ * URL implementation that doesn't include the canParse static method
+ * (added in Node.js 19.9.0 / 20.0.0).
+ *
+ * This polyfill must be imported BEFORE any MCP SDK imports.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+// Check if URL.canParse exists on the global URL
+if (typeof URL.canParse !== 'function') {
+    // Provide a fallback polyfill implementation
+    URL.canParse = (url, base) => {
+        try {
+            // eslint-disable-next-line no-new
+            new URL(url, base);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicG9seWZpbGxzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc3JjL3BvbHlmaWxscy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBQUE7Ozs7Ozs7OztHQVNHOztBQUVILGlEQUFpRDtBQUNqRCxJQUFJLE9BQU8sR0FBRyxDQUFDLFFBQVEsS0FBSyxVQUFVLEVBQUUsQ0FBQztJQUN2Qyw2Q0FBNkM7SUFDNUMsR0FBd0UsQ0FBQyxRQUFRLEdBQUcsQ0FDbkYsR0FBVyxFQUNYLElBQWEsRUFDSixFQUFFO1FBQ1gsSUFBSSxDQUFDO1lBQ0gsa0NBQWtDO1lBQ2xDLElBQUksR0FBRyxDQUFDLEdBQUcsRUFBRSxJQUFJLENBQUMsQ0FBQztZQUVuQixPQUFPLElBQUksQ0FBQztRQUNkLENBQUM7UUFBQyxNQUFNLENBQUM7WUFDUCxPQUFPLEtBQUssQ0FBQztRQUNmLENBQUM7SUFDSCxDQUFDLENBQUM7QUFDSixDQUFDIn0=

package/dist/schemas/filter.d.ts

@@ -0,0 +1,4 @@
+import { z } from 'zod';
+declare const _default: Readonly<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+export default _default;
+//# sourceMappingURL=filter.d.ts.map

package/dist/schemas/filter.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const zod_1 = require("zod");
+const operatorEnum = zod_1.z.enum([
+    'Equal',
+    'NotEqual',
+    'LessThan',
+    'GreaterThan',
+    'LessThanOrEqual',
+    'GreaterThanOrEqual',
+    'Match',
+    'NotContains',
+    'NotIContains',
+    'LongerThan',
+    'ShorterThan',
+    'IncludesAll',
+    'IncludesNone',
+    'Today',
+    'Yesterday',
+    'PreviousMonth',
+    'PreviousQuarter',
+    'PreviousWeek',
+    'PreviousYear',
+    'PreviousMonthToDate',
+    'PreviousQuarterToDate',
+    'PreviousWeekToDate',
+    'PreviousXDaysToDate',
+    'PreviousXDays',
+    'PreviousYearToDate',
+    'Present',
+    'Blank',
+    'Missing',
+    'In',
+    'NotIn',
+    'StartsWith',
+    'EndsWith',
+    'Contains',
+    'IStartsWith',
+    'IEndsWith',
+    'IContains',
+    'Like',
+    'ILike',
+    'Before',
+    'After',
+    'AfterXHoursAgo',
+    'BeforeXHoursAgo',
+    'Future',
+    'Past',
+]);
+const aggregatorEnum = zod_1.z.enum(['And', 'Or']);
+// Leaf condition (e.g., { field: 'name', operator: 'Equal', value: 'John' })
+const leafSchema = zod_1.z.object({
+    field: zod_1.z.string(),
+    operator: operatorEnum,
+    value: zod_1.z.unknown().optional(),
+});
+// Build nested branch schemas iteratively (avoids z.lazy() which causes $ref issues)
+const MAX_NESTING_DEPTH = 3;
+let conditionSchema = leafSchema;
+for (let i = 0; i < MAX_NESTING_DEPTH; i += 1) {
+    conditionSchema = zod_1.z.union([
+        leafSchema,
+        zod_1.z.object({
+            aggregator: aggregatorEnum,
+            conditions: zod_1.z.array(conditionSchema),
+        }),
+    ]);
+}
+exports.default = Object.freeze(conditionSchema);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZmlsdGVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3NjaGVtYXMvZmlsdGVyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsNkJBQXdCO0FBRXhCLE1BQU0sWUFBWSxHQUFHLE9BQUMsQ0FBQyxJQUFJLENBQUM7SUFDMUIsT0FBTztJQUNQLFVBQVU7SUFDVixVQUFVO0lBQ1YsYUFBYTtJQUNiLGlCQUFpQjtJQUNqQixvQkFBb0I7SUFDcEIsT0FBTztJQUNQLGFBQWE7SUFDYixjQUFjO0lBQ2QsWUFBWTtJQUNaLGFBQWE7SUFDYixhQUFhO0lBQ2IsY0FBYztJQUNkLE9BQU87SUFDUCxXQUFXO0lBQ1gsZUFBZTtJQUNmLGlCQUFpQjtJQUNqQixjQUFjO0lBQ2QsY0FBYztJQUNkLHFCQUFxQjtJQUNyQix1QkFBdUI7SUFDdkIsb0JBQW9CO0lBQ3BCLHFCQUFxQjtJQUNyQixlQUFlO0lBQ2Ysb0JBQW9CO0lBQ3BCLFNBQVM7SUFDVCxPQUFPO0lBQ1AsU0FBUztJQUNULElBQUk7SUFDSixPQUFPO0lBQ1AsWUFBWTtJQUNaLFVBQVU7SUFDVixVQUFVO0lBQ1YsYUFBYTtJQUNiLFdBQVc7SUFDWCxXQUFXO0lBQ1gsTUFBTTtJQUNOLE9BQU87SUFDUCxRQUFRO0lBQ1IsT0FBTztJQUNQLGdCQUFnQjtJQUNoQixpQkFBaUI7SUFDakIsUUFBUTtJQUNSLE1BQU07Q0FDUCxDQUFDLENBQUM7QUFFSCxNQUFNLGNBQWMsR0FBRyxPQUFDLENBQUMsSUFBSSxDQUFDLENBQUMsS0FBSyxFQUFFLElBQUksQ0FBQyxDQUFDLENBQUM7QUFFN0MsNkVBQTZFO0FBQzdFLE1BQU0sVUFBVSxHQUFHLE9BQUMsQ0FBQyxNQUFNLENBQUM7SUFDMUIsS0FBSyxFQUFFLE9BQUMsQ0FBQyxNQUFNLEVBQUU7SUFDakIsUUFBUSxFQUFFLFlBQVk7SUFDdEIsS0FBSyxFQUFFLE9BQUMsQ0FBQyxPQUFPLEVBQUUsQ0FBQyxRQUFRLEVBQUU7Q0FDOUIsQ0FBQyxDQUFDO0FBRUgscUZBQXFGO0FBQ3JGLE1BQU0saUJBQWlCLEdBQUcsQ0FBQyxDQUFDO0FBRTVCLElBQUksZUFBZSxHQUFpQixVQUFVLENBQUM7QUFFL0MsS0FBSyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxHQUFHLGlCQUFpQixFQUFFLENBQUMsSUFBSSxDQUFDLEVBQUUsQ0FBQztJQUM5QyxlQUFlLEdBQUcsT0FBQyxDQUFDLEtBQUssQ0FBQztRQUN4QixVQUFVO1FBQ1YsT0FBQyxDQUFDLE1BQU0sQ0FBQztZQUNQLFVBQVUsRUFBRSxjQUFjO1lBQzFCLFVBQVUsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLGVBQWUsQ0FBQztTQUNyQyxDQUFDO0tBQ0gsQ0FBQyxDQUFDO0FBQ0wsQ0FBQztBQUVELGtCQUFlLE1BQU0sQ0FBQyxNQUFNLENBQUMsZUFBZSxDQUFDLENBQUMifQ==

package/dist/schemas/filter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=filter.test.d.ts.map

package/dist/schemas/filter.test.js

@@ -0,0 +1,234 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const filter_1 = __importDefault(require("./filter"));
+describe('filterSchema', () => {
+    describe('leaf conditions', () => {
+        it('should accept valid leaf condition with Equal operator', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'name', operator: 'Equal', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept leaf condition without value for operators that do not require it', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'deletedAt', operator: 'Present' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it.each([
+            'Equal',
+            'NotEqual',
+            'LessThan',
+            'GreaterThan',
+            'LessThanOrEqual',
+            'GreaterThanOrEqual',
+            'Match',
+            'NotContains',
+            'NotIContains',
+            'LongerThan',
+            'ShorterThan',
+            'IncludesAll',
+            'IncludesNone',
+            'Today',
+            'Yesterday',
+            'PreviousMonth',
+            'PreviousQuarter',
+            'PreviousWeek',
+            'PreviousYear',
+            'PreviousMonthToDate',
+            'PreviousQuarterToDate',
+            'PreviousWeekToDate',
+            'PreviousXDaysToDate',
+            'PreviousXDays',
+            'PreviousYearToDate',
+            'Present',
+            'Blank',
+            'Missing',
+            'In',
+            'NotIn',
+            'StartsWith',
+            'EndsWith',
+            'Contains',
+            'IStartsWith',
+            'IEndsWith',
+            'IContains',
+            'Like',
+            'ILike',
+            'Before',
+            'After',
+            'AfterXHoursAgo',
+            'BeforeXHoursAgo',
+            'Future',
+            'Past',
+        ])('should accept operator "%s"', operator => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'testField', operator, value: 'test' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should reject invalid operator', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'name', operator: 'InvalidOperator', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).toThrow();
+        });
+        it('should require field property', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ operator: 'Equal', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).toThrow();
+        });
+        it('should require operator property', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'name', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).toThrow();
+        });
+    });
+    describe('branch conditions', () => {
+        it('should accept And aggregator', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'name', operator: 'Equal', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept Or aggregator', () => {
+            const condition = {
+                aggregator: 'Or',
+                conditions: [{ field: 'name', operator: 'Equal', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should reject invalid aggregator', () => {
+            const condition = {
+                aggregator: 'Xor',
+                conditions: [{ field: 'name', operator: 'Equal', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).toThrow();
+        });
+        it('should require conditions array', () => {
+            const condition = {
+                aggregator: 'And',
+            };
+            expect(() => filter_1.default.parse(condition)).toThrow();
+        });
+        it('should accept empty conditions array', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+    });
+    describe('nested conditions', () => {
+        it('should accept nested branch conditions', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [
+                    { field: 'name', operator: 'Equal', value: 'John' },
+                    {
+                        aggregator: 'Or',
+                        conditions: [
+                            { field: 'age', operator: 'GreaterThan', value: 18 },
+                            { field: 'status', operator: 'Equal', value: 'adult' },
+                        ],
+                    },
+                ],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept deeply nested conditions', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [
+                    {
+                        aggregator: 'Or',
+                        conditions: [
+                            {
+                                aggregator: 'And',
+                                conditions: [
+                                    { field: 'a', operator: 'Equal', value: 1 },
+                                    { field: 'b', operator: 'Equal', value: 2 },
+                                ],
+                            },
+                            { field: 'c', operator: 'Equal', value: 3 },
+                        ],
+                    },
+                ],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept mixed leaf and branch conditions', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [
+                    { field: 'active', operator: 'Equal', value: true },
+                    {
+                        aggregator: 'Or',
+                        conditions: [
+                            { field: 'role', operator: 'Equal', value: 'admin' },
+                            { field: 'role', operator: 'Equal', value: 'superuser' },
+                        ],
+                    },
+                    { field: 'verified', operator: 'Equal', value: true },
+                ],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+    });
+    describe('value types', () => {
+        it('should accept string values', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'name', operator: 'Equal', value: 'John' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept number values', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'age', operator: 'GreaterThan', value: 25 }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept boolean values', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'active', operator: 'Equal', value: true }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept null values', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'deletedAt', operator: 'Equal', value: null }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept array values for In operator', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'status', operator: 'In', value: ['active', 'pending', 'approved'] }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+        it('should accept date string values', () => {
+            const condition = {
+                aggregator: 'And',
+                conditions: [{ field: 'createdAt', operator: 'After', value: '2024-01-01T00:00:00Z' }],
+            };
+            expect(() => filter_1.default.parse(condition)).not.toThrow();
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/server.d.ts

@@ -0,0 +1,87 @@
+import './polyfills';
+import type { Express } from 'express';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import * as http from 'http';
+export type LogLevel = 'Debug' | 'Info' | 'Warn' | 'Error';
+export type Logger = (level: LogLevel, message: string) => void;
+export type HttpCallback = (req: http.IncomingMessage, res: http.ServerResponse, next?: () => void) => void;
+/**
+ * Options for configuring the Forest Admin MCP Server
+ */
+export interface ForestMCPServerOptions {
+    /** Forest Admin server URL */
+    forestServerUrl?: string;
+    /** Forest Admin app URL (for OAuth redirects) */
+    forestAppUrl?: string;
+    /** Forest Admin environment secret */
+    envSecret?: string;
+    /** Forest Admin authentication secret */
+    authSecret?: string;
+    /** Optional logger function. Defaults to console logging. */
+    logger?: Logger;
+}
+/**
+ * Forest Admin MCP Server
+ *
+ * This server provides HTTP REST API access to Forest Admin operations
+ * with OAuth authentication support.
+ *
+ * Environment Variables (used as fallback when options not provided):
+ * - FOREST_ENV_SECRET: Your Forest Admin environment secret (required)
+ * - FOREST_AUTH_SECRET: Your Forest Admin authentication secret, it must be the same one as the one on your agent (required)
+ * - FOREST_SERVER_URL: Forest Admin server URL (optional)
+ * - MCP_SERVER_PORT: Port for the HTTP server (default: 3931)
+ */
+export default class ForestMCPServer {
+    mcpServer: McpServer;
+    mcpTransport?: StreamableHTTPServerTransport;
+    httpServer?: http.Server;
+    expressApp?: Express;
+    forestServerUrl: string;
+    forestAppUrl: string;
+    private envSecret?;
+    private authSecret?;
+    private logger;
+    constructor(options?: ForestMCPServerOptions);
+    private setupTools;
+    private ensureSecretsAreSet;
+    /**
+     * Filters tool arguments to only include non-sensitive fields for logging.
+     * Prevents accidentally logging sensitive data like search queries or filters.
+     */
+    private filterArgsForLogging;
+    /**
+     * Logs tool call information if the request is a tools/call method.
+     */
+    private logToolCallIfPresent;
+    /**
+     * Handles an incoming MCP request.
+     * Logs the request, intercepts the response for error logging, and delegates to the transport.
+     */
+    private handleMcpRequest;
+    /**
+     * Build and return the Express app without starting a standalone server.
+     * Useful for embedding the MCP server into another application.
+     *
+     * @param baseUrl - Optional base URL override. If not provided, will use the
+     *                  environmentApiEndpoint from Forest Admin API.
+     * @returns The configured Express application
+     */
+    buildExpressApp(baseUrl?: URL): Promise<Express>;
+    /**
+     * Build and return an HTTP callback that can be used as middleware.
+     * The callback will handle MCP-related routes (/.well-known/*, /oauth/*, /mcp)
+     * and call next() for other routes.
+     *
+     * @param baseUrl - Optional base URL override. If not provided, will use the
+     *                  environmentApiEndpoint from Forest Admin API.
+     * @returns An HTTP callback function
+     */
+    getHttpCallback(baseUrl?: URL): Promise<HttpCallback>;
+    /**
+     * Run the MCP server as a standalone HTTP server.
+     */
+    run(): Promise<void>;
+}
+//# sourceMappingURL=server.d.ts.map