@get-technology-inc/jamf-docs-mcp-server 3.0.6 → 3.0.8

package/dist/transport/http.js

@@ -1,380 +1,8 @@
 /**
- * HTTP transport using Web Standard APIs
+ * Backward-compatible re-export.
  *
- * Uses WebStandardStreamableHTTPServerTransport from the SDK,
- * compatible with Node.js, Cloudflare Workers, Deno, and Bun.
+ * The real implementation lives in `platforms/node/http-server.ts`.
+ * This shim preserves the dynamic import path used in `src/index.ts`.
  */
-import { createServer } from 'node:http';
-import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
-import { createNodeConfig, getEnvNumber } from '../platforms/node/config.js';
-const SERVER_VERSION = createNodeConfig().version;
-import { createLogger } from '../core/services/logging.js';
-const log = createLogger('http');
-const SHUTDOWN_TIMEOUT = 10_000;
-const MAX_BODY_SIZE = 1_048_576; // 1MB
-const LLMS_TXT = `# Jamf Docs MCP Server
-
-> MCP server providing access to official Jamf documentation from learn.jamf.com
-
-## Products
-- Jamf Pro — Apple device management for enterprise
-- Jamf School — Apple device management for education
-- Jamf Connect — identity and access management
-- Jamf Protect — endpoint security for Apple
-- Jamf Now — simple device management for small businesses
-- Jamf Safe Internet — content filtering and web security
-- Jamf Insights — analytics and reporting for Apple fleet
-- RapidIdentity — identity and access management platform
-
-## Tools
-- jamf_docs_list_products: discover available products and versions
-- jamf_docs_search: search documentation by keyword with product/topic filters
-- jamf_docs_get_article: retrieve full article content in markdown
-- jamf_docs_get_toc: browse table of contents for a product
-- jamf_docs_glossary_lookup: look up glossary terms with fuzzy matching
-- jamf_docs_batch_get_articles: retrieve multiple articles in a single request
-
-## Resources
-- jamf://products — product list with metadata and versions
-- jamf://topics — topic categories per product
-- jamf://products/{productId}/toc — table of contents for a specific product
-- jamf://products/{productId}/versions — available documentation versions
-
-## Prompts
-- jamf_troubleshoot: guided troubleshooting workflow
-- jamf_setup_guide: step-by-step setup instructions
-- jamf_compare_versions: compare features across versions
-
-## Supported Locales
-en-US, ja-JP, zh-TW, de-DE, es-ES, fr-FR, nl-NL, th-TH
-
-## Limitations
-- Documentation content only — no Jamf REST API reference
-- Content is sourced from learn.jamf.com and cached; not real-time
-`;
-class PayloadTooLargeError extends Error {
-    constructor() {
-        super('Payload too large');
-        this.name = 'PayloadTooLargeError';
-    }
-}
-// CORS configuration
-const CORS_ALLOWED_ORIGINS = (process.env.CORS_ALLOWED_ORIGINS ?? '').split(',').map(s => s.trim()).filter(Boolean);
-// Trust reverse proxy headers (X-Forwarded-For) only when explicitly enabled
-const TRUST_PROXY = process.env.TRUST_PROXY === 'true' || process.env.TRUST_PROXY === '1';
-// Maximum unique IPs tracked by rate limiter to prevent memory exhaustion
-const MAX_RATE_LIMIT_BUCKETS = 10_000;
-/**
- * Token bucket rate limiter (per-IP)
- */
-class RateLimiter {
-    buckets = new Map();
-    maxTokens;
-    windowMs;
-    maxBuckets;
-    constructor(maxTokens, windowMs, maxBuckets = MAX_RATE_LIMIT_BUCKETS) {
-        this.maxTokens = maxTokens;
-        this.windowMs = windowMs;
-        this.maxBuckets = maxBuckets;
-    }
-    isAllowed(ip) {
-        const now = Date.now();
-        let bucket = this.buckets.get(ip);
-        if (bucket === undefined) {
-            // Evict oldest entry if at capacity to prevent memory exhaustion
-            if (this.buckets.size >= this.maxBuckets) {
-                this.evictOldest();
-            }
-            bucket = { tokens: this.maxTokens, lastRefill: now };
-            this.buckets.set(ip, bucket);
-        }
-        // Refill tokens based on elapsed time
-        const elapsed = now - bucket.lastRefill;
-        const tokensToAdd = (elapsed / this.windowMs) * this.maxTokens;
-        bucket.tokens = Math.min(this.maxTokens, bucket.tokens + tokensToAdd);
-        bucket.lastRefill = now;
-        if (bucket.tokens >= 1) {
-            bucket.tokens -= 1;
-            return true;
-        }
-        return false;
-    }
-    // Evict the oldest (least recently seen) bucket entry
-    evictOldest() {
-        let oldestKey;
-        let oldestTime = Infinity;
-        for (const [key, bucket] of this.buckets.entries()) {
-            if (bucket.lastRefill < oldestTime) {
-                oldestTime = bucket.lastRefill;
-                oldestKey = key;
-            }
-        }
-        if (oldestKey !== undefined) {
-            this.buckets.delete(oldestKey);
-        }
-    }
-    // Periodically clean up old entries to prevent memory leak
-    cleanup() {
-        const now = Date.now();
-        for (const [ip, bucket] of this.buckets.entries()) {
-            if (now - bucket.lastRefill > this.windowMs * 2) {
-                this.buckets.delete(ip);
-            }
-        }
-    }
-}
-/** Security headers applied to all responses (defense-in-depth) */
-const SECURITY_HEADERS = {
-    'X-Content-Type-Options': 'nosniff',
-    'X-Frame-Options': 'DENY',
-    'Cache-Control': 'no-store',
-};
-/**
- * Get CORS headers for a given origin
- */
-function getCorsHeaders(origin) {
-    const headers = { ...SECURITY_HEADERS };
-    if (CORS_ALLOWED_ORIGINS.length === 0) {
-        // No origins configured — deny cross-origin by not setting Access-Control-Allow-Origin
-        return headers;
-    }
-    const originStr = Array.isArray(origin) ? origin[0] : origin;
-    if (originStr !== undefined && CORS_ALLOWED_ORIGINS.includes(originStr)) {
-        headers['Access-Control-Allow-Origin'] = originStr;
-        headers['Access-Control-Allow-Methods'] = 'GET, POST, OPTIONS';
-        headers['Access-Control-Allow-Headers'] = 'Content-Type';
-        headers['Access-Control-Max-Age'] = '86400';
-        headers.Vary = 'Origin';
-    }
-    return headers;
-}
-/**
- * Get client IP from request.
- * Only trusts X-Forwarded-For when TRUST_PROXY is enabled.
- */
-function getClientIp(req) {
-    if (TRUST_PROXY) {
-        const forwarded = req.headers['x-forwarded-for'];
-        if (typeof forwarded === 'string') {
-            return forwarded.split(',')[0]?.trim() ?? 'unknown';
-        }
-    }
-    // socket may be undefined in test environments
-    const socket = req.socket;
-    return socket?.remoteAddress ?? 'unknown';
-}
-/**
- * Convert Node.js IncomingMessage to a Web Standard Request
- */
-function toWebRequest(req, body, url) {
-    const headers = new Headers();
-    for (const [key, value] of Object.entries(req.headers)) {
-        if (value !== undefined) {
-            if (Array.isArray(value)) {
-                for (const v of value) {
-                    headers.append(key, v);
-                }
-            }
-            else {
-                headers.set(key, value);
-            }
-        }
-    }
-    const method = req.method ?? 'GET';
-    const init = {
-        method,
-        headers,
-    };
-    // Only add body for methods that support it
-    if (method !== 'GET' && method !== 'HEAD' && method !== 'DELETE') {
-        init.body = body;
-    }
-    return new Request(url.toString(), init);
-}
-/**
- * Write a Web Standard Response back to Node.js ServerResponse
- */
-async function writeWebResponse(webRes, res) {
-    res.writeHead(webRes.status, Object.fromEntries(webRes.headers.entries()));
-    if (webRes.body === null) {
-        res.end();
-        return;
-    }
-    const reader = webRes.body.getReader();
-    try {
-        for (;;) {
-            const result = await reader.read();
-            if (result.done) {
-                break;
-            }
-            res.write(result.value);
-        }
-    }
-    finally {
-        reader.releaseLock();
-        res.end();
-    }
-}
-/**
- * Collect request body from IncomingMessage into a Buffer.
- * Enforces a maximum body size to prevent memory exhaustion.
- */
-async function collectBody(req) {
-    const chunks = [];
-    let totalSize = 0;
-    for await (const chunk of req) {
-        const buf = typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
-        totalSize += buf.length;
-        if (totalSize > MAX_BODY_SIZE) {
-            req.destroy();
-            throw new PayloadTooLargeError();
-        }
-        chunks.push(buf);
-    }
-    return Buffer.concat(chunks);
-}
-/**
- * Create and start an HTTP server for the MCP server
- */
-export async function startHttpServer(mcpServer, port, host) {
-    const rateLimitRpm = getEnvNumber('RATE_LIMIT_RPM', 60, 1, 10000);
-    const rateLimiter = new RateLimiter(rateLimitRpm, 60_000);
-    setInterval(() => { rateLimiter.cleanup(); }, 5 * 60_000).unref();
-    const httpServer = createServer((req, res) => {
-        void handleHttpRequest(req, res, mcpServer, rateLimiter);
-    });
-    // Graceful shutdown
-    let shuttingDown = false;
-    function shutdown(signal) {
-        if (shuttingDown) {
-            return;
-        }
-        shuttingDown = true;
-        log.info(`${signal} received, shutting down...`);
-        httpServer.close(() => {
-            log.info('HTTP server closed');
-            process.exit(0);
-        });
-        // Force exit after timeout
-        setTimeout(() => {
-            log.warning('Shutdown timeout, forcing exit');
-            process.exit(1);
-        }, SHUTDOWN_TIMEOUT);
-    }
-    process.on('SIGINT', () => { shutdown('SIGINT'); });
-    process.on('SIGTERM', () => { shutdown('SIGTERM'); });
-    // Start listening
-    await new Promise((resolve, reject) => {
-        httpServer.on('error', (error) => {
-            if (error.code === 'EADDRINUSE') {
-                log.error(`Port ${port} is already in use`);
-                process.exit(1);
-            }
-            reject(error);
-        });
-        httpServer.listen(port, host, () => {
-            if (host !== '127.0.0.1' && host !== '::1') {
-                log.warning(`Server is binding to ${host}, which exposes it to the network. Use 127.0.0.1 for local-only access.`);
-            }
-            log.info(`Jamf Docs MCP Server running on http://${host}:${port}`);
-            log.info(`MCP endpoint: http://${host}:${port}/mcp`);
-            log.info(`Health check: http://${host}:${port}/health`);
-            log.info(`LLMs info:   http://${host}:${port}/llms.txt`);
-            resolve();
-        });
-    });
-}
-/**
- * Handle a single HTTP request
- */
-async function handleHttpRequest(req, res, mcpServer, rateLimiter) {
-    // Use hardcoded base URL to prevent Host header injection (SAST #8)
-    const url = new URL(req.url ?? '/', 'http://localhost');
-    const { pathname } = url;
-    const { origin } = req.headers;
-    const corsHeaders = getCorsHeaders(origin);
-    // Handle CORS preflight
-    if (req.method === 'OPTIONS') {
-        res.writeHead(204, { ...corsHeaders, 'Content-Length': '0' });
-        res.end();
-        return;
-    }
-    // Rate limiting
-    const clientIp = getClientIp(req);
-    if (!rateLimiter.isAllowed(clientIp)) {
-        res.writeHead(429, { 'Content-Type': 'application/json', ...corsHeaders });
-        res.end(JSON.stringify({ error: 'Too many requests' }));
-        return;
-    }
-    // Health check endpoint
-    if (pathname === '/health' && req.method === 'GET') {
-        res.writeHead(200, { 'Content-Type': 'application/json', ...corsHeaders });
-        res.end(JSON.stringify({ status: 'ok', version: SERVER_VERSION }));
-        return;
-    }
-    // llms.txt endpoint
-    if (pathname === '/llms.txt' && req.method === 'GET') {
-        res.writeHead(200, { 'Content-Type': 'text/plain; charset=utf-8', ...corsHeaders });
-        res.end(LLMS_TXT);
-        return;
-    }
-    // MCP endpoint
-    if (pathname === '/mcp') {
-        let body;
-        try {
-            body = await collectBody(req);
-        }
-        catch (err) {
-            if (err instanceof PayloadTooLargeError) {
-                res.writeHead(413, { 'Content-Type': 'application/json', ...corsHeaders });
-                res.end(JSON.stringify({ error: 'Payload too large' }));
-                return;
-            }
-            throw err;
-        }
-        // Create a per-request transport (stateless mode)
-        const transport = new WebStandardStreamableHTTPServerTransport({
-            enableJsonResponse: true,
-        });
-        // Connect the MCP server to this transport
-        await mcpServer.connect(transport);
-        try {
-            // Convert Node request to Web Standard Request
-            const webReq = toWebRequest(req, body, url);
-            // Parse body for the transport if present
-            let parsedBody;
-            if (body.length > 0) {
-                try {
-                    parsedBody = JSON.parse(body.toString());
-                }
-                catch {
-                    res.writeHead(400, { 'Content-Type': 'application/json', ...corsHeaders });
-                    res.end(JSON.stringify({ error: 'Invalid JSON in request body' }));
-                    return;
-                }
-            }
-            // Handle the request
-            const webRes = await transport.handleRequest(webReq, { parsedBody });
-            // Add CORS headers to the web response before writing
-            for (const [key, value] of Object.entries(corsHeaders)) {
-                webRes.headers.set(key, value);
-            }
-            // Write the response
-            await writeWebResponse(webRes, res);
-        }
-        catch {
-            if (!res.headersSent) {
-                res.writeHead(500, { 'Content-Type': 'application/json', ...corsHeaders });
-                res.end(JSON.stringify({ error: 'Internal server error' }));
-            }
-        }
-        finally {
-            await transport.close();
-        }
-        return;
-    }
-    // 404 for everything else
-    res.writeHead(404, { 'Content-Type': 'application/json', ...corsHeaders });
-    res.end(JSON.stringify({ error: 'Not found' }));
-}
+export { startHttpServer } from '../platforms/node/http-server.js';
 //# sourceMappingURL=http.js.map

package/dist/transport/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AAEpF,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE7E,MAAM,cAAc,GAAG,gBAAgB,EAAE,CAAC,OAAO,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAEjC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,MAAM;AAEvC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuChB,CAAC;AAEF,MAAM,oBAAqB,SAAQ,KAAK;IACtC;QACE,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,oBAAoB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAEpH,6EAA6E;AAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC;AAE1F,0EAA0E;AAC1E,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAEtC;;GAEG;AACH,MAAM,WAAW;IACE,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IACpE,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,UAAU,CAAS;IAEpC,YAAY,SAAiB,EAAE,QAAgB,EAAE,aAAqB,sBAAsB;QAC1F,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAElC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,iEAAiE;YACjE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAExB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sDAAsD;IAC9C,WAAW;QACjB,IAAI,SAA6B,CAAC;QAClC,IAAI,UAAU,GAAG,QAAQ,CAAC;QAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;gBACnC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC/B,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,gBAAgB,GAA2B;IAC/C,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,MAAM;IACzB,eAAe,EAAE,UAAU;CAC5B,CAAC;AAEF;;GAEG;AACH,SAAS,cAAc,CAAC,MAAqC;IAC3D,MAAM,OAAO,GAA2B,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEhE,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,uFAAuF;QACvF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,IAAI,SAAS,KAAK,SAAS,IAAI,oBAAoB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,6BAA6B,CAAC,GAAG,SAAS,CAAC;QACnD,OAAO,CAAC,8BAA8B,CAAC,GAAG,oBAAoB,CAAC;QAC/D,OAAO,CAAC,8BAA8B,CAAC,GAAG,cAAc,CAAC;QACzD,OAAO,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC;QAC5C,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAoB;IACvC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACtD,CAAC;IACH,CAAC;IACD,+CAA+C;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAgD,CAAC;IACpE,OAAO,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAoB,EAAE,IAAY,EAAE,GAAQ;IAChE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IAEnC,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,OAAO;KACR,CAAC;IAEF,4CAA4C;IAC5C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAgB,EAAE,GAAmB;IACnE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE3E,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC3B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,GAAoB;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC;QAC/E,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC;QACxB,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;YAC9B,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,IAAY,EACZ,IAAY;IAEZ,MAAM,YAAY,GAAG,YAAY,CAAC,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1D,WAAW,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAElE,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAC5E,KAAK,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,SAAS,QAAQ,CAAC,MAAc;QAC9B,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,6BAA6B,CAAC,CAAC;QAEjD,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE;YACpB,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,UAAU,CAAC,GAAG,EAAE;YACd,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtD,kBAAkB;IAClB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACtD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,oBAAoB,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YACjC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,wBAAwB,IAAI,yEAAyE,CAAC,CAAC;YACrH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,0CAA0C,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI,IAAI,WAAW,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAoB,EACpB,GAAmB,EACnB,SAAoB,EACpB,WAAwB;IAExB,oEAAoE;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IAC/B,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE3C,wBAAwB;IACxB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,gBAAgB;IAChB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,oBAAoB;IACpB,IAAI,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;QACpF,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,eAAe;IACf,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;YAC7D,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEnC,IAAI,CAAC;YACH,+CAA+C;YAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAE5C,0CAA0C;YAC1C,IAAI,UAAmB,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAY,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;oBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;YACH,CAAC;YAED,qBAAqB;YACrB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAErE,sDAAsD;YACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YAED,qBAAqB;YACrB,MAAM,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;gBAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAC3E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/transport/index.js

@@ -1,8 +1,8 @@
 /**
  * Transport configuration and CLI argument parsing
  */
-import { createLogger } from '../core/services/logging.js';
-const log = createLogger('transport');
+import { createStderrLogger } from '../core/services/logging.js';
+const log = createStderrLogger('transport');
 /**
  * Parse CLI arguments for transport configuration
  */

package/dist/transport/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAQtC;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,IAAI,GAAkB;QAC1B,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW;KAClB,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAChD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,+BAA+B,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAC5C,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,qBAAqB,CAAC,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;AAQ5C;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,IAAI,GAAkB;QAC1B,SAAS,EAAE,OAAO;QAClB,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,WAAW;KAClB,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAChD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,+BAA+B,CAAC,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAC5C,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,qBAAqB,CAAC,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/transport/rate-limiter.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Token bucket rate limiter (per-IP)
+ */
+/** Maximum unique IPs tracked by rate limiter to prevent memory exhaustion */
+export declare const MAX_RATE_LIMIT_BUCKETS = 10000;
+export declare class RateLimiter {
+    private readonly buckets;
+    private readonly maxTokens;
+    private readonly windowMs;
+    private readonly maxBuckets;
+    constructor(maxTokens: number, windowMs: number, maxBuckets?: number);
+    isAllowed(ip: string): boolean;
+    private evictOldest;
+    cleanup(): void;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/transport/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/transport/rate-limiter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6D;IACrF,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAGlC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,GAAE,MAA+B;IAO7C,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IA2B9B,OAAO,CAAC,WAAW;IAQnB,OAAO,IAAI,IAAI;CAQhB"}

package/dist/transport/rate-limiter.js

@@ -0,0 +1,55 @@
+/**
+ * Token bucket rate limiter (per-IP)
+ */
+/** Maximum unique IPs tracked by rate limiter to prevent memory exhaustion */
+export const MAX_RATE_LIMIT_BUCKETS = 10_000;
+export class RateLimiter {
+    buckets = new Map();
+    maxTokens;
+    windowMs;
+    maxBuckets;
+    constructor(maxTokens, windowMs, maxBuckets = MAX_RATE_LIMIT_BUCKETS) {
+        this.maxTokens = maxTokens;
+        this.windowMs = windowMs;
+        this.maxBuckets = maxBuckets;
+    }
+    isAllowed(ip) {
+        const now = Date.now();
+        let bucket = this.buckets.get(ip);
+        if (bucket === undefined) {
+            // Evict oldest entry if at capacity to prevent memory exhaustion
+            if (this.buckets.size >= this.maxBuckets) {
+                this.evictOldest();
+            }
+            bucket = { tokens: this.maxTokens, lastRefill: now };
+            this.buckets.set(ip, bucket);
+        }
+        // Refill tokens based on elapsed time
+        const elapsed = now - bucket.lastRefill;
+        const tokensToAdd = (elapsed / this.windowMs) * this.maxTokens;
+        bucket.tokens = Math.min(this.maxTokens, bucket.tokens + tokensToAdd);
+        bucket.lastRefill = now;
+        if (bucket.tokens >= 1) {
+            bucket.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+    // Evict the oldest bucket entry using Map insertion order (O(1))
+    evictOldest() {
+        const firstKey = this.buckets.keys().next().value;
+        if (firstKey !== undefined) {
+            this.buckets.delete(firstKey);
+        }
+    }
+    // Periodically clean up old entries to prevent memory leak
+    cleanup() {
+        const now = Date.now();
+        for (const [ip, bucket] of this.buckets.entries()) {
+            if (now - bucket.lastRefill > this.windowMs * 2) {
+                this.buckets.delete(ip);
+            }
+        }
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/transport/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/transport/rate-limiter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,OAAO,WAAW;IACL,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IACpE,SAAS,CAAS;IAClB,QAAQ,CAAS;IACjB,UAAU,CAAS;IAEpC,YACE,SAAiB,EACjB,QAAgB,EAChB,aAAqB,sBAAsB;QAE3C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAElC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,iEAAiE;YACjE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAExB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iEAAiE;IACzD,WAAW;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@get-technology-inc/jamf-docs-mcp-server",
-  "version": "3.0.6",
+  "version": "3.0.8",
   "description": "MCP Server for accessing Jamf Documentation (learn.jamf.com)",
   "main": "dist/index.js",
   "type": "module",
@@ -54,10 +54,10 @@
     "@types/turndown": "^5.0.5",
     "@vitest/coverage-v8": "^4.0.17",
     "conventional-changelog-conventionalcommits": "^9.3.0",
-    "eslint": "^9.39.4",
+    "eslint": "^10.1.0",
     "semantic-release": "^25.0.3",
     "tsx": "^4.19.0",
-    "typescript": "^5.6.0",
+    "typescript": "^6.0.2",
     "typescript-eslint": "^8.18.0",
     "vitest": "^4.0.17"
   },

package/dist/core/services/interfaces.d.ts

@@ -1,94 +0,0 @@
-/**
- * Core service interfaces for platform abstraction
- *
- * These interfaces decouple business logic from Node.js-specific implementations,
- * enabling deployment to different runtimes (e.g., Cloudflare Workers).
- */
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-/**
- * Cache statistics
- */
-export interface CacheStats {
-    memoryEntries: number;
-    totalEntries: number;
-    totalSize?: number;
-}
-/**
- * Platform-agnostic cache provider
- */
-export interface CacheProvider {
-    get<T>(key: string): Promise<T | null>;
-    set<T>(key: string, value: T, ttl?: number): Promise<void>;
-    delete(key: string): Promise<boolean>;
-    clear(): Promise<void>;
-    stats(): Promise<CacheStats>;
-    prune(): Promise<number>;
-}
-/**
- * Product metadata returned by the metadata store
- */
-export interface ProductMetadata {
-    id: string;
-    name: string;
-    description: string;
-    bundleId: string;
-    latestVersion: string;
-    availableVersions: string[];
-    labelKey: string;
-}
-/**
- * Topic metadata returned by the metadata store
- */
-export interface TopicMetadata {
-    id: string;
-    name: string;
-    source: 'toc' | 'manual';
-    articleCount?: number;
-}
-/**
- * Table of contents entry (recursive tree structure)
- */
-export interface TocEntry {
-    title: string;
-    url: string;
-    children?: TocEntry[];
-}
-/**
- * Structured table of contents data for a product
- */
-export interface TocData {
-    entries: TocEntry[];
-    product: string;
-    version: string;
-}
-/**
- * Platform-agnostic metadata store for Jamf documentation
- */
-export interface MetadataStore {
-    getProducts(): Promise<ProductMetadata[]>;
-    getTopics(): Promise<TopicMetadata[]>;
-    getToc(productId: string, bundleId: string): Promise<TocData>;
-    getBundleIdForVersion(productId: string, version?: string): Promise<string | null>;
-    getAvailableVersions(productId: string): Promise<string[]>;
-}
-/**
- * Logger instance bound to a specific module name
- */
-export interface Logger {
-    debug(data: unknown): void;
-    info(data: unknown): void;
-    notice(data: unknown): void;
-    warning(data: unknown): void;
-    error(data: unknown): void;
-    critical(data: unknown): void;
-    alert(data: unknown): void;
-    emergency(data: unknown): void;
-}
-/**
- * Factory for creating named logger instances
- */
-export interface LoggerFactory {
-    createLogger(name: string): Logger;
-    setServer(server: McpServer): void;
-}
-//# sourceMappingURL=interfaces.d.ts.map

package/dist/core/services/interfaces.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/core/services/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAMD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,WAAW,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1C,SAAS,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnF,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC5D;AAMD;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;CACpC"}

package/dist/core/services/interfaces.js

@@ -1,8 +0,0 @@
-/**
- * Core service interfaces for platform abstraction
- *
- * These interfaces decouple business logic from Node.js-specific implementations,
- * enabling deployment to different runtimes (e.g., Cloudflare Workers).
- */
-export {};
-//# sourceMappingURL=interfaces.js.map

package/dist/core/services/interfaces.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/core/services/interfaces.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}