@hydradb/mcp 1.2.1 → 1.2.2

package/dist/cypher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cypher.js","sourceRoot":"","sources":["../src/cypher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAErE,2BAA2B;AAE3B;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAU,CAAC;AAC5C,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAIjF,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,IAAI,KAAK,IAAI,gBAAgB,IAAI,KAAK,CAAC;AAC5E,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC7B,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,KAAK,CAAC,OAAO,CAAE,KAAa,CAAC,KAAK,CAAC;QACnC,KAAK,CAAC,OAAO,CAAE,KAAa,CAAC,KAAK,CAAC,CACnC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAU,EAAE,QAA2B;IAC1D,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,KAAU;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACzE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACzC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAC5C,CAAC;QACF,wEAAwE;QACxE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;YACzC,CAAC,CAAE,KAAK,CAAC,MAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,CAAC,CAAC,EAAE,CAAC;QACN,OAAO,IAAI,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC;IACpE,CAAC;IAED,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CACN,IAAI,KAAK,CAAC,cAAc,OAAO,KAAK,CAAC,QAAQ,EAAE;YAC/C,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,cAAc,GAAG,CAC3E,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACzB,IAAW,EACX,OAAgD,EAAE;IAElD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAM,CAAC;IAEzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAC7D,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,iBAAiB,IAAI,CAAC,MAAM,0BAA0B,CAAC;IACzF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3C,MAAM,MAAM,GACX,OAAO,GAAG,CAAC;QACV,CAAC,CAAC,QAAQ,OAAO,+DAA+D;QAChF,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;AAC3B,CAAC"}

package/dist/descriptions.d.ts

@@ -21,6 +21,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly source_ids: string;
             readonly metadata_filters: string;
             readonly num_related_chunks: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydradb_ingest: {
@@ -38,6 +40,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly observation_date: string;
             readonly turns: string;
             readonly user_name: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydradb_list: {
@@ -48,6 +52,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly source_ids: "Optional array of specific source IDs to filter by. If omitted, lists all sources.";
             readonly page: string;
             readonly page_size: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydradb_inspect: {
@@ -59,6 +65,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly offset: string;
             readonly limit: string;
             readonly expiry_seconds: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydradb_delete: {
@@ -68,6 +76,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly ids: string;
             readonly id: "A single ID to delete. Prefer `ids` when removing more than one.";
             readonly kind: "Which context family the ID belongs to: 'memory' or 'knowledge' (default: 'memory')";
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydradb_status: {
@@ -75,6 +85,35 @@ export declare const TOOL_DESCRIPTIONS: {
         readonly description: string;
         readonly params: {
             readonly ids: "The source IDs to check, as returned by hydradb_ingest.";
+            readonly database: string;
+            readonly collection: string;
+        };
+    };
+    readonly hydradb_graph_query: {
+        readonly title: "Query Graph (Cypher)";
+        readonly description: string;
+        readonly params: {
+            readonly query: string;
+            readonly params: string;
+            readonly database: string;
+            readonly collection: string;
+            readonly max_rows: string;
+        };
+    };
+    readonly hydradb_graph_collections: {
+        readonly title: "List Graph Collections";
+        readonly description: "List the graph collections in a graph database. Each collection is an independent graph with its own nodes, relationships and schema.\n\nUse it to discover what exists before querying, or to confirm a write created the collection you expected. Collections auto-create on first write, so a name missing here has simply never been written to.";
+        readonly params: {
+            readonly database: string;
+        };
+    };
+    readonly hydradb_graph_admin: {
+        readonly title: "Manage Graph Databases";
+        readonly description: string;
+        readonly params: {
+            readonly action: string;
+            readonly database: string;
+            readonly collection: "The collection to drop. Required for \"drop_collection\" and ignored otherwise.";
         };
     };
     readonly hydra_db_search: {
@@ -86,6 +125,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly max_results: string;
             readonly mode: string;
             readonly graph_context: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydra_db_store: {
@@ -100,6 +141,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly infer: string;
             readonly is_markdown: string;
             readonly overwrite: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydra_db_ingest_conversation: {
@@ -109,17 +152,25 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly turns: "Array of conversation turns, each with a 'user' and 'assistant' field";
             readonly source_id: "Source identifier to group all turns from the same session together";
             readonly user_name: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydra_db_list_memories: {
         readonly title: "List Memories (deprecated)";
         readonly description: string;
+        readonly params: {
+            readonly database: string;
+            readonly collection: string;
+        };
     };
     readonly hydra_db_list_sources: {
         readonly title: "List Sources (deprecated)";
         readonly description: string;
         readonly params: {
             readonly source_ids: "Optional array of specific source IDs to filter by. If omitted, lists all sources.";
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydra_db_fetch_content: {
@@ -130,6 +181,8 @@ export declare const TOOL_DESCRIPTIONS: {
             readonly mode: string;
             readonly offset: string;
             readonly limit: string;
+            readonly database: string;
+            readonly collection: string;
         };
     };
     readonly hydra_db_delete_memory: {
@@ -137,6 +190,8 @@ export declare const TOOL_DESCRIPTIONS: {
         readonly description: string;
         readonly params: {
             readonly memory_id: "The ID of the memory to delete";
+            readonly database: string;
+            readonly collection: string;
         };
     };
 };

package/dist/descriptions.js

@@ -117,6 +117,37 @@ const PARAM = {
         "were actually removed. This is irreversible.",
     delete_kind: "Which context family the ID belongs to: 'memory' or 'knowledge' (default: 'memory')",
     memory_id: "The ID of the memory to delete",
+    database: "Database (tenant) to target for this request. Defaults to the server's configured " +
+        "database. Pass explicitly to switch database scope per request.",
+    collection: "Collection (sub-tenant) to target for this request. Defaults to the server's configured " +
+        "collection (or 'hydra-db-mcp'). Pass explicitly to switch collection scope per request.",
+};
+/** Parameter blurbs for the BYOG graph tools. */
+const GRAPH_PARAM = {
+    query: "The Cypher to run — a read (MATCH/RETURN, traversal, aggregation) or a write " +
+        "(CREATE, MERGE, SET, DELETE, REMOVE, FOREACH, index statements). Write data as " +
+        "$parameters, not as string-concatenated literals, and alias every returned " +
+        "expression (`RETURN n.name AS name`). Prefer MERGE on a key you own over bare " +
+        "CREATE so a retry cannot duplicate. Deletes are irreversible.",
+    params: "Values referenced by $name in the query, as {name: value}. Always pass user data " +
+        "this way rather than building it into the query text: parameters are bound safely " +
+        "and keep query plans cacheable. Lists work too — `UNWIND $rows AS row` with " +
+        '{"rows": [...]} is the supported way to write many nodes in one call.',
+    database: "Graph database to run against. Defaults to the server's configured graph " +
+        "database. This is a DIFFERENT namespace from the memory/knowledge database — a " +
+        "query aimed at the wrong one reads an empty graph rather than failing.",
+    collection: "Graph collection to run against. Defaults to the server's configured graph " +
+        "collection. Each collection is an independent graph; a query sees exactly one " +
+        "and never another's data.",
+    max_rows: "Maximum rows to render in the response (default: 100). Caps what reaches the " +
+        "conversation, not what the query computes — to actually limit the work, put " +
+        "`LIMIT` in the Cypher.",
+    action: 'Which operation to perform: "create_database", "drop_collection", or ' +
+        '"drop_database". The two drops are irreversible.',
+    admin_database: "The graph database to create or drop, or the one containing the collection " +
+        "being dropped. Defaults to the server's configured graph database — pass it " +
+        "explicitly for any drop, so the target is stated rather than inherited.",
+    admin_collection: 'The collection to drop. Required for "drop_collection" and ignored otherwise.',
 };
 function deprecated(alias, body) {
     return `DEPRECATED — use \`${ALIAS_REPLACEMENTS[alias]}\` instead. ${body}`;
@@ -161,6 +192,56 @@ const INSPECT_BODY = `Fetch the full original content of ONE stored item by its
 The id is the value shown as \`[id: …]\` in hydradb_query results and in [brackets] in hydradb_list output. Ids are not guessable — take one from those tools rather than constructing it.
 
 Long sources come back in slices; the response says where it stopped and what offset continues it. Binary sources are never inlined — you get their type and size, and \`mode: "url"\` returns a download link.`;
+/**
+ * The dialect notes every graph tool needs to state.
+ *
+ * These are not general Cypher advice — each one is a construct that a model
+ * trained on Neo4j will reach for and that HydraDB REJECTS before running
+ * anything. A rejected query fails identically on retry, so the only way out is
+ * knowing the rule beforehand.
+ */
+const CYPHER_DIALECT = `HydraDB runs your Cypher verbatim and never rewrites it. Near-complete openCypher, with these differences from Neo4j:
+  - Procedure calls are rejected — no \`CALL db.*\`, no \`CALL apoc.*\`. \`CALL { ... }\` subqueries ARE supported. To learn a collection's structure, query it: \`MATCH (n) UNWIND labels(n) AS l RETURN l, count(*) AS c ORDER BY l\`.
+  - \`LOAD CSV\` is rejected. Pass data through \`params\`: \`UNWIND $rows AS row MERGE (n:Thing {id: row.id}) SET n += row\`.
+  - Existence checks are bare pattern predicates — \`WHERE (p)-[:KNOWS]->()\`. The \`EXISTS { ... }\` block and the \`exists()\` function are not accepted.
+  - \`shortestPath\` goes in RETURN or WITH (not \`MATCH p = ...\`) and the traversal must be directed.
+  - Do NOT use \`EXPLAIN\`/\`PROFILE\` to preview a query: they EXECUTE it rather than planning it.`;
+const GRAPH_SCOPE = `Queries run against exactly ONE collection — collections never see each other's data, so \`MATCH (n) RETURN n\` returns that collection's nodes and nothing else. \`database\` and \`collection\` default to the server's configured graph scope; pass them to target another.`;
+const GRAPH_QUERY_BODY = `Run Cypher against a HydraDB graph collection — reads and writes alike. This is the graph database product: property graphs you model and own end to end, entirely separate from the memory/knowledge corpora that ${TOOL_NAMES.QUERY} searches.
+
+Reads are what a graph is for — multi-hop traversal, variable-length paths, neighbourhood expansion, shortest paths, aggregation over relationships:
+  MATCH (a:Person {name:$n})-[:KNOWS*1..4]->(reach) RETURN DISTINCT reach.name AS name
+  MATCH (p:Person {name:$n})-[r]-(nbr) RETURN type(r) AS rel, nbr.name AS neighbor
+  MATCH (a:Person {name:$x}),(b:Person {name:$y}) RETURN shortestPath((a)-[:KNOWS*..8]->(b)) AS path
+
+Writes go through this same tool — CREATE, MERGE, SET, DELETE, REMOVE, FOREACH, and index management:
+  UNWIND $rows AS row MERGE (p:Person {ext_id: row.ext_id}) SET p += row
+
+THIS TOOL CAN DESTROY DATA. \`MATCH (n:Person) DELETE n\` empties a label and \`DETACH DELETE\` also removes its relationships; neither can be undone and there is no trash. Confirm with the user before running anything destructive they did not explicitly ask for, and prefer MERGE on a key you own over bare CREATE — a retried CREATE duplicates nodes where a MERGE does not.
+
+Always pass user data through \`params\` rather than building it into the query string: parameters are bound safely and keep query plans cacheable.
+
+ALIAS EVERYTHING you intend to read — \`RETURN n.name AS name\`. Unaliased expressions are keyed by their raw expression text.
+
+Large results are silently truncated server-side, so paginate anything that could be big: \`ORDER BY ... SKIP $offset LIMIT $limit\`. Without ORDER BY, the rows you lose are arbitrary.
+
+Collections auto-create on first write, so there is no create-collection call. A write with no RETURN succeeds with zero rows — that is success, not failure. Requests are capped at 256 KiB, so batch bulk loads (~500 rows per call is a good start).
+
+${GRAPH_SCOPE}
+
+${CYPHER_DIALECT}`;
+const GRAPH_COLLECTIONS_BODY = `List the graph collections in a graph database. Each collection is an independent graph with its own nodes, relationships and schema.
+
+Use it to discover what exists before querying, or to confirm a write created the collection you expected. Collections auto-create on first write, so a name missing here has simply never been written to.`;
+const GRAPH_ADMIN_BODY = `Manage graph databases and collections. Pick one \`action\`:
+
+  "create_database"  — create a graph database. Ready immediately, no provisioning wait. Fails if the name already exists.
+  "drop_collection"  — drop ONE collection and all its data. Idempotent: dropping a collection that does not exist succeeds.
+  "drop_database"    — drop EVERY collection in the database, and the database itself if it was created as a graph database.
+
+The two drops are IRREVERSIBLE and there is no trash. Confirm with the user before either, and never infer one from a vague instruction — "clean up my graph" authorises nothing until the user has seen ${TOOL_NAMES.GRAPH_COLLECTIONS} output and named what should go.
+
+There is no create-collection action: collections come into existence on their first write via ${TOOL_NAMES.GRAPH_QUERY}.`;
 export const TOOL_DESCRIPTIONS = {
     // --- Canonical tools (CONTRACT §3) ---
     [TOOL_NAMES.QUERY]: {
@@ -177,6 +258,8 @@ export const TOOL_DESCRIPTIONS = {
             source_ids: PARAM.query_source_ids,
             metadata_filters: PARAM.metadata_filters,
             num_related_chunks: PARAM.num_related_chunks,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.INGEST]: {
@@ -201,6 +284,8 @@ export const TOOL_DESCRIPTIONS = {
                 "neither. Use this when the exchange itself is worth preserving; when only the " +
                 "conclusion matters, prefer `text` with the distilled fact.",
             user_name: PARAM.user_name,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.LIST]: {
@@ -217,6 +302,8 @@ Memory rows come back as [id] content. Knowledge rows as [id] — title (type),
             source_ids: PARAM.source_ids,
             page: PARAM.page,
             page_size: PARAM.page_size,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.INSPECT]: {
@@ -228,6 +315,8 @@ Memory rows come back as [id] content. Knowledge rows as [id] — title (type),
             offset: PARAM.fetch_offset,
             limit: PARAM.fetch_limit,
             expiry_seconds: PARAM.expiry_seconds,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.DELETE]: {
@@ -241,6 +330,8 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
             ids: PARAM.delete_ids,
             id: PARAM.delete_id,
             kind: PARAM.delete_kind,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.STATUS]: {
@@ -253,6 +344,36 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
             "'still indexing', not 'the save failed'.",
         params: {
             ids: "The source IDs to check, as returned by hydradb_ingest.",
+            database: PARAM.database,
+            collection: PARAM.collection,
+        },
+    },
+    // --- BYOG graph tools (PRO-1681) ---
+    [TOOL_NAMES.GRAPH_QUERY]: {
+        title: "Query Graph (Cypher)",
+        description: GRAPH_QUERY_BODY,
+        params: {
+            query: GRAPH_PARAM.query,
+            params: GRAPH_PARAM.params,
+            database: GRAPH_PARAM.database,
+            collection: GRAPH_PARAM.collection,
+            max_rows: GRAPH_PARAM.max_rows,
+        },
+    },
+    [TOOL_NAMES.GRAPH_COLLECTIONS]: {
+        title: "List Graph Collections",
+        description: GRAPH_COLLECTIONS_BODY,
+        params: {
+            database: GRAPH_PARAM.database,
+        },
+    },
+    [TOOL_NAMES.GRAPH_ADMIN]: {
+        title: "Manage Graph Databases",
+        description: GRAPH_ADMIN_BODY,
+        params: {
+            action: GRAPH_PARAM.action,
+            database: GRAPH_PARAM.admin_database,
+            collection: GRAPH_PARAM.admin_collection,
         },
     },
     // --- Deprecated aliases ---
@@ -265,6 +386,8 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
             max_results: PARAM.max_results,
             mode: PARAM.mode,
             graph_context: PARAM.graph_context,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.STORE]: {
@@ -281,6 +404,8 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
             infer: PARAM.infer,
             is_markdown: PARAM.is_markdown,
             overwrite: PARAM.overwrite,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.INGEST_CONVERSATION]: {
@@ -290,17 +415,25 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
             turns: PARAM.turns,
             source_id: "Source identifier to group all turns from the same session together",
             user_name: PARAM.user_name,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.LIST_MEMORIES]: {
         title: "List Memories (deprecated)",
         description: deprecated(TOOL_NAMES.LIST_MEMORIES, LIST_MEMORIES_BODY),
+        params: {
+            database: PARAM.database,
+            collection: PARAM.collection,
+        },
     },
     [TOOL_NAMES.LIST_SOURCES]: {
         title: "List Sources (deprecated)",
         description: deprecated(TOOL_NAMES.LIST_SOURCES, LIST_SOURCES_BODY),
         params: {
             source_ids: PARAM.source_ids,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.FETCH_CONTENT]: {
@@ -311,6 +444,8 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
             mode: PARAM.fetch_mode,
             offset: PARAM.fetch_offset,
             limit: PARAM.fetch_limit,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
     [TOOL_NAMES.DELETE_MEMORY]: {
@@ -318,6 +453,8 @@ Take the id from hydradb_query or hydradb_list — never guess one. Confirm with
         description: deprecated(TOOL_NAMES.DELETE_MEMORY, "Delete a specific user memory from Hydra DB by its memory ID. This action is irreversible."),
         params: {
             memory_id: PARAM.memory_id,
+            database: PARAM.database,
+            collection: PARAM.collection,
         },
     },
 };
@@ -341,5 +478,17 @@ THE TOOLS
 
 Ids flow between these: ${TOOL_NAMES.QUERY} and ${TOOL_NAMES.LIST} emit them, ${TOOL_NAMES.INSPECT}, ${TOOL_NAMES.DELETE} and ${TOOL_NAMES.STATUS} accept them. Never invent one.
 
-All tools require HYDRADB_API_KEY and HYDRADB_DATABASE in the environment.`;
+THE GRAPH TOOLS (a separate product surface)
+
+Hydra DB also runs property graphs the user models and owns end to end, queried in Cypher. These are NOT the same store as the memory and knowledge above, and nothing crosses between them: ${TOOL_NAMES.QUERY} cannot see graph data, and ${TOOL_NAMES.GRAPH_QUERY} cannot see memories.
+
+- ${TOOL_NAMES.GRAPH_QUERY} — Cypher, reads and writes alike: traversal, paths, neighbourhoods, aggregation, CREATE/MERGE/SET/DELETE. It can destroy data, so confirm before running anything destructive the user did not ask for.
+- ${TOOL_NAMES.GRAPH_COLLECTIONS} — which graphs exist in a graph database.
+- ${TOOL_NAMES.GRAPH_ADMIN} — create a graph database, drop a collection, drop a database. Irreversible; confirm first.
+
+Choose by the question, not the vocabulary: "what has the user told me about X" is ${TOOL_NAMES.QUERY}; "how is X connected to Y in my graph" is ${TOOL_NAMES.GRAPH_QUERY}. If the user has written Cypher, or speaks of nodes, labels, relationships and traversals they themselves created, they mean the graph tools.
+
+Working against an unfamiliar collection, discover its structure by querying it — \`MATCH (n) UNWIND labels(n) AS l RETURN l, count(*) AS c ORDER BY l\` — rather than guessing labels, which yields empty results that look like missing data.
+
+All tools require HYDRADB_API_KEY and HYDRADB_DATABASE in the environment. The graph tools additionally read HYDRADB_GRAPH_DATABASE and HYDRADB_GRAPH_COLLECTION for their default scope, and can be disabled with HYDRADB_MCP_GRAPH_TOOLS=0.`;
 //# sourceMappingURL=descriptions.js.map

package/dist/descriptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"descriptions.js","sourceRoot":"","sources":["../src/descriptions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEjE,4EAA4E;AAC5E,MAAM,KAAK,GAAG;IACb,KAAK,EACJ,oFAAoF;QACpF,mFAAmF;QACnF,kFAAkF;QAClF,uCAAuC;IACxC,UAAU,EACT,qEAAqE;QACrE,oEAAoE;QACpE,mFAAmF;IACpF,WAAW,EACV,8EAA8E;QAC9E,kFAAkF;QAClF,+EAA+E;QAC/E,WAAW;IACZ,IAAI,EACH,8EAA8E;QAC9E,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,mCAAmC;IACpC,gBAAgB,EACf,uEAAuE;QACvE,+EAA+E;QAC/E,8EAA8E;IAC/E,gBAAgB,EACf,gFAAgF;QAChF,+EAA+E;QAC/E,uDAAuD;IACxD,kBAAkB,EACjB,gFAAgF;QAChF,2EAA2E;QAC3E,6EAA6E;IAC9E,QAAQ,EACP,2EAA2E;QAC3E,gFAAgF;QAChF,wEAAwE;QACxE,0EAA0E;QAC1E,gFAAgF;QAChF,+EAA+E;QAC/E,0EAA0E;QAC1E,8CAA8C;IAC/C,cAAc,EACb,2EAA2E;QAC3E,0CAA0C;IAC3C,aAAa,EACZ,kFAAkF;QAClF,mFAAmF;QACnF,mFAAmF;QACnF,8CAA8C;IAC/C,IAAI,EACH,+EAA+E;QAC/E,kFAAkF;QAClF,mFAAmF;QACnF,wDAAwD;IACzD,WAAW,EACV,0EAA0E;QAC1E,wEAAwE;QACxE,+EAA+E;QAC/E,0DAA0D;IAC3D,KAAK,EACJ,gFAAgF;QAChF,gFAAgF;QAChF,+EAA+E;QAC/E,6EAA6E;IAC9E,SAAS,EACR,iFAAiF;QACjF,sFAAsF;QACtF,uFAAuF;QACvF,0FAA0F;IAC3F,SAAS,EACR,gFAAgF;QAChF,4EAA4E;QAC5E,4DAA4D;IAC7D,QAAQ,EACP,8EAA8E;QAC9E,iFAAiF;QACjF,qFAAqF;IACtF,6EAA6E;IAC7E,8DAA8D;IAC9D,8EAA8E;IAC9E,gBAAgB,EACf,8EAA8E;QAC9E,gFAAgF;QAChF,mFAAmF;QACnF,mFAAmF;QACnF,qBAAqB;IACtB,KAAK,EACJ,4EAA4E;QAC5E,iFAAiF;QACjF,oFAAoF;QACpF,+EAA+E;QAC/E,wBAAwB;IACzB,WAAW,EACV,oFAAoF;QACpF,sEAAsE;IACvE,KAAK,EAAE,uEAAuE;IAC9E,SAAS,EACR,kFAAkF;QAClF,8EAA8E;QAC9E,sEAAsE;IACvE,IAAI,EACH,4EAA4E;QAC5E,gFAAgF;QAChF,gEAAgE;IACjE,UAAU,EACT,oFAAoF;IACrF,IAAI,EACH,oFAAoF;QACpF,mFAAmF;QACnF,+BAA+B;IAChC,SAAS,EACR,iFAAiF;QACjF,oEAAoE;IACrE,MAAM,EACL,4EAA4E;QAC5E,gFAAgF;QAChF,+EAA+E;QAC/E,iFAAiF;QACjF,gFAAgF;IACjF,eAAe,EAAE,oCAAoC;IACrD,UAAU,EACT,iFAAiF;QACjF,iFAAiF;QACjF,iEAAiE;IAClE,YAAY,EACX,iFAAiF;QACjF,6EAA6E;IAC9E,WAAW,EACV,mFAAmF;QACnF,iDAAiD;IAClD,SAAS,EAAE,kEAAkE;IAC7E,UAAU,EACT,8EAA8E;QAC9E,+EAA+E;QAC/E,8CAA8C;IAC/C,WAAW,EACV,qFAAqF;IACtF,SAAS,EAAE,gCAAgC;CAClC,CAAC;AAEX,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY;IAC9C,OAAO,sBAAsB,kBAAkB,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,WAAW,GAAG;;;;;;;;;kEAS8C,CAAC;AAEnE,MAAM,UAAU,GAAG;;;;;;;;;;;;;;qHAckG,CAAC;AAEtH,MAAM,iBAAiB,GACtB,6EAA6E;IAC7E,qFAAqF;IACrF,oFAAoF;IACpF,6DAA6D,CAAC;AAE/D,MAAM,kBAAkB,GACvB,mFAAmF;IACnF,qFAAqF;IACrF,eAAe,CAAC;AAEjB,MAAM,iBAAiB,GACtB,mFAAmF;IACnF,iFAAiF;IACjF,kCAAkC,CAAC;AAEpC,MAAM,YAAY,GAAG;;;;gNAI2L,CAAC;AAEjN,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC,wCAAwC;IAExC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACnB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC5C;KACD;IAED,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,sBAAsB;QAC7B,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,sBAAsB;QACtB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,KAAK,EACJ,iFAAiF;gBACjF,iFAAiF;gBACjF,gFAAgF;gBAChF,4DAA4D;YAC7D,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B;KACD;IAED,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;QAClB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE;;;;;;4IAM6H;QAC1I,MAAM,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B;KACD;IAED,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;SACpC;KACD;IAED,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE;;;;oKAIqJ;QAClK,MAAM,EAAE;YACP,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,EAAE,EAAE,KAAK,CAAC,SAAS;YACnB,IAAI,EAAE,KAAK,CAAC,WAAW;SACvB;KACD;IAED,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACV,sEAAsE;YACtE,4EAA4E;YAC5E,yEAAyE;YACzE,uEAAuE;YACvE,sEAAsE;YACtE,0CAA0C;QAC3C,MAAM,EAAE;YACP,GAAG,EAAE,yDAAyD;SAC9D;KACD;IAED,6BAA6B;IAE7B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC;QACvD,MAAM,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;SAClC;KACD;IAED,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACnB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QACrD,MAAM,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wEAAwE;YACxE,yDAAyD;YACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B;KACD;IAED,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE;QACjC,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;QAC1E,MAAM,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EACR,qEAAqE;YACtE,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B;KACD;IAED,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QAC3B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,aAAa,EAAE,kBAAkB,CAAC;KACrE;IAED,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;QAC1B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACnE,MAAM,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QAC3B,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,aAAa,EAAE,YAAY,CAAC;QAC/D,MAAM,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,KAAK,EAAE,KAAK,CAAC,WAAW;SACxB;KACD;IAED,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QAC3B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,UAAU,CACtB,UAAU,CAAC,aAAa,EACxB,4FAA4F,CAC5F;QACD,MAAM,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B;KACD;CACQ,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG,wMAAwM,UAAU,CAAC,KAAK;;;;6JAI9F,UAAU,CAAC,KAAK;uIACtC,UAAU,CAAC,MAAM;;4BAE5H,UAAU,CAAC,MAAM,sBAAsB,UAAU,CAAC,MAAM,wCAAwC,UAAU,CAAC,KAAK;;;;IAIxI,UAAU,CAAC,KAAK;IAChB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,IAAI,2GAA2G,UAAU,CAAC,KAAK;IAC1I,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,MAAM;;0BAEK,UAAU,CAAC,KAAK,QAAQ,UAAU,CAAC,IAAI,eAAe,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,QAAQ,UAAU,CAAC,MAAM;;2EAEtE,CAAC"}
+{"version":3,"file":"descriptions.js","sourceRoot":"","sources":["../src/descriptions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAEjE,4EAA4E;AAC5E,MAAM,KAAK,GAAG;IACb,KAAK,EACJ,oFAAoF;QACpF,mFAAmF;QACnF,kFAAkF;QAClF,uCAAuC;IACxC,UAAU,EACT,qEAAqE;QACrE,oEAAoE;QACpE,mFAAmF;IACpF,WAAW,EACV,8EAA8E;QAC9E,kFAAkF;QAClF,+EAA+E;QAC/E,WAAW;IACZ,IAAI,EACH,8EAA8E;QAC9E,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,mCAAmC;IACpC,gBAAgB,EACf,uEAAuE;QACvE,+EAA+E;QAC/E,8EAA8E;IAC/E,gBAAgB,EACf,gFAAgF;QAChF,+EAA+E;QAC/E,uDAAuD;IACxD,kBAAkB,EACjB,gFAAgF;QAChF,2EAA2E;QAC3E,6EAA6E;IAC9E,QAAQ,EACP,2EAA2E;QAC3E,gFAAgF;QAChF,wEAAwE;QACxE,0EAA0E;QAC1E,gFAAgF;QAChF,+EAA+E;QAC/E,0EAA0E;QAC1E,8CAA8C;IAC/C,cAAc,EACb,2EAA2E;QAC3E,0CAA0C;IAC3C,aAAa,EACZ,kFAAkF;QAClF,mFAAmF;QACnF,mFAAmF;QACnF,8CAA8C;IAC/C,IAAI,EACH,+EAA+E;QAC/E,kFAAkF;QAClF,mFAAmF;QACnF,wDAAwD;IACzD,WAAW,EACV,0EAA0E;QAC1E,wEAAwE;QACxE,+EAA+E;QAC/E,0DAA0D;IAC3D,KAAK,EACJ,gFAAgF;QAChF,gFAAgF;QAChF,+EAA+E;QAC/E,6EAA6E;IAC9E,SAAS,EACR,iFAAiF;QACjF,sFAAsF;QACtF,uFAAuF;QACvF,0FAA0F;IAC3F,SAAS,EACR,gFAAgF;QAChF,4EAA4E;QAC5E,4DAA4D;IAC7D,QAAQ,EACP,8EAA8E;QAC9E,iFAAiF;QACjF,qFAAqF;IACtF,6EAA6E;IAC7E,8DAA8D;IAC9D,8EAA8E;IAC9E,gBAAgB,EACf,8EAA8E;QAC9E,gFAAgF;QAChF,mFAAmF;QACnF,mFAAmF;QACnF,qBAAqB;IACtB,KAAK,EACJ,4EAA4E;QAC5E,iFAAiF;QACjF,oFAAoF;QACpF,+EAA+E;QAC/E,wBAAwB;IACzB,WAAW,EACV,oFAAoF;QACpF,sEAAsE;IACvE,KAAK,EAAE,uEAAuE;IAC9E,SAAS,EACR,kFAAkF;QAClF,8EAA8E;QAC9E,sEAAsE;IACvE,IAAI,EACH,4EAA4E;QAC5E,gFAAgF;QAChF,gEAAgE;IACjE,UAAU,EACT,oFAAoF;IACrF,IAAI,EACH,oFAAoF;QACpF,mFAAmF;QACnF,+BAA+B;IAChC,SAAS,EACR,iFAAiF;QACjF,oEAAoE;IACrE,MAAM,EACL,4EAA4E;QAC5E,gFAAgF;QAChF,+EAA+E;QAC/E,iFAAiF;QACjF,gFAAgF;IACjF,eAAe,EAAE,oCAAoC;IACrD,UAAU,EACT,iFAAiF;QACjF,iFAAiF;QACjF,iEAAiE;IAClE,YAAY,EACX,iFAAiF;QACjF,6EAA6E;IAC9E,WAAW,EACV,mFAAmF;QACnF,iDAAiD;IAClD,SAAS,EAAE,kEAAkE;IAC7E,UAAU,EACT,8EAA8E;QAC9E,+EAA+E;QAC/E,8CAA8C;IAC/C,WAAW,EACV,qFAAqF;IACtF,SAAS,EAAE,gCAAgC;IAC3C,QAAQ,EACP,oFAAoF;QACpF,iEAAiE;IAClE,UAAU,EACT,0FAA0F;QAC1F,yFAAyF;CACjF,CAAC;AAEX,iDAAiD;AACjD,MAAM,WAAW,GAAG;IACnB,KAAK,EACJ,+EAA+E;QAC/E,iFAAiF;QACjF,6EAA6E;QAC7E,gFAAgF;QAChF,+DAA+D;IAChE,MAAM,EACL,mFAAmF;QACnF,oFAAoF;QACpF,8EAA8E;QAC9E,uEAAuE;IACxE,QAAQ,EACP,2EAA2E;QAC3E,iFAAiF;QACjF,wEAAwE;IACzE,UAAU,EACT,6EAA6E;QAC7E,gFAAgF;QAChF,2BAA2B;IAC5B,QAAQ,EACP,+EAA+E;QAC/E,8EAA8E;QAC9E,wBAAwB;IACzB,MAAM,EACL,uEAAuE;QACvE,kDAAkD;IACnD,cAAc,EACb,6EAA6E;QAC7E,8EAA8E;QAC9E,yEAAyE;IAC1E,gBAAgB,EACf,+EAA+E;CACvE,CAAC;AAEX,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY;IAC9C,OAAO,sBAAsB,kBAAkB,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,WAAW,GAAG;;;;;;;;;kEAS8C,CAAC;AAEnE,MAAM,UAAU,GAAG;;;;;;;;;;;;;;qHAckG,CAAC;AAEtH,MAAM,iBAAiB,GACtB,6EAA6E;IAC7E,qFAAqF;IACrF,oFAAoF;IACpF,6DAA6D,CAAC;AAE/D,MAAM,kBAAkB,GACvB,mFAAmF;IACnF,qFAAqF;IACrF,eAAe,CAAC;AAEjB,MAAM,iBAAiB,GACtB,mFAAmF;IACnF,iFAAiF;IACjF,kCAAkC,CAAC;AAEpC,MAAM,YAAY,GAAG;;;;gNAI2L,CAAC;AAEjN;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG;;;;;oGAK6E,CAAC;AAErG,MAAM,WAAW,GAAG,gRAAgR,CAAC;AAErS,MAAM,gBAAgB,GAAG,sNAAsN,UAAU,CAAC,KAAK;;;;;;;;;;;;;;;;;;;;EAoB7P,WAAW;;EAEX,cAAc,EAAE,CAAC;AAEnB,MAAM,sBAAsB,GAAG;;4MAE6K,CAAC;AAE7M,MAAM,gBAAgB,GAAG;;;;;;2MAMkL,UAAU,CAAC,iBAAiB;;iGAEtI,UAAU,CAAC,WAAW,GAAG,CAAC;AAE3H,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC,wCAAwC;IAExC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACnB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,sBAAsB;QAC7B,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,sBAAsB;QACtB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,KAAK,EACJ,iFAAiF;gBACjF,iFAAiF;gBACjF,gFAAgF;gBAChF,4DAA4D;YAC7D,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;QAClB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE;;;;;;4IAM6H;QAC1I,MAAM,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE;;;;oKAIqJ;QAClK,MAAM,EAAE;YACP,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,EAAE,EAAE,KAAK,CAAC,SAAS;YACnB,IAAI,EAAE,KAAK,CAAC,WAAW;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACV,sEAAsE;YACtE,4EAA4E;YAC5E,yEAAyE;YACzE,uEAAuE;YACvE,sEAAsE;YACtE,0CAA0C;QAC3C,MAAM,EAAE;YACP,GAAG,EAAE,yDAAyD;YAC9D,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,sCAAsC;IAEtC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QACzB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE;YACP,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC9B;KACD;IAED,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE;QAC/B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,sBAAsB;QACnC,MAAM,EAAE;YACP,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC9B;KACD;IAED,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QACzB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE;YACP,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE,WAAW,CAAC,cAAc;YACpC,UAAU,EAAE,WAAW,CAAC,gBAAgB;SACxC;KACD;IAED,6BAA6B;IAE7B,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC;QACvD,MAAM,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE;QACnB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QACrD,MAAM,EAAE;YACP,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,wEAAwE;YACxE,yDAAyD;YACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE;QACjC,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;QAC1E,MAAM,EAAE;YACP,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EACR,qEAAqE;YACtE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QAC3B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,aAAa,EAAE,kBAAkB,CAAC;QACrE,MAAM,EAAE;YACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;QAC1B,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACnE,MAAM,EAAE;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QAC3B,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,aAAa,EAAE,YAAY,CAAC;QAC/D,MAAM,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;IAED,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE;QAC3B,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,UAAU,CACtB,UAAU,CAAC,aAAa,EACxB,4FAA4F,CAC5F;QACD,MAAM,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B;KACD;CACQ,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG,wMAAwM,UAAU,CAAC,KAAK;;;;6JAI9F,UAAU,CAAC,KAAK;uIACtC,UAAU,CAAC,MAAM;;4BAE5H,UAAU,CAAC,MAAM,sBAAsB,UAAU,CAAC,MAAM,wCAAwC,UAAU,CAAC,KAAK;;;;IAIxI,UAAU,CAAC,KAAK;IAChB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,IAAI,2GAA2G,UAAU,CAAC,KAAK;IAC1I,UAAU,CAAC,OAAO;IAClB,UAAU,CAAC,MAAM;IACjB,UAAU,CAAC,MAAM;;0BAEK,UAAU,CAAC,KAAK,QAAQ,UAAU,CAAC,IAAI,eAAe,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,MAAM,QAAQ,UAAU,CAAC,MAAM;;;;+LAI8C,UAAU,CAAC,KAAK,+BAA+B,UAAU,CAAC,WAAW;;IAEhQ,UAAU,CAAC,WAAW;IACtB,UAAU,CAAC,iBAAiB;IAC5B,UAAU,CAAC,WAAW;;qFAE2D,UAAU,CAAC,KAAK,8CAA8C,UAAU,CAAC,WAAW;;;;8OAIqE,CAAC"}

package/dist/http-config.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Configuration for the remotely hostable HTTP transport.
+ *
+ * There are two configurations here, and they belong to two different people.
+ *
+ *   - {@link resolveHttpServerConfig} is the OPERATOR's config: the port, the
+ *     bind address, and the Host/Origin allowlists that decide who may reach the
+ *     process at all. It is read once at startup from the environment.
+ *
+ *   - {@link resolveRequestCredentials} is the CALLER's config: which Hydra DB
+ *     account, database and collection a single request runs against. On a
+ *     multi-tenant deployment (one process serving `mcp.hydradb.com` for many
+ *     users) this MUST come per request, from headers, because the process has
+ *     no single tenant of its own. It is resolved fresh on every `/mcp` call.
+ *
+ * The stdio server ({@link file://./index.ts}) has only the second concern and
+ * reads it from the environment via {@link file://./config.ts}; a hosted server
+ * cannot, because one env-configured key would make every user share one
+ * account. So the header path is the substantive new surface, and it falls back
+ * to the environment only to keep the single-tenant self-hosting story (set the
+ * env, expose the port, done) working unchanged.
+ */
+import { type EnvSource, type GraphConfig } from "./config.js";
+export interface HttpServerConfig {
+    /** TCP port to listen on. */
+    port: number;
+    /**
+     * Interface to bind. Defaults to loopback so an unconfigured server is not
+     * reachable off-box; a hosted deployment sets `0.0.0.0` deliberately.
+     */
+    bindAddress: string;
+    /** CORS allowlist. Empty means no cross-origin browser request is accepted. */
+    allowedOrigins: string[];
+    /** Accepted `Host` headers, lowercased. Loopback + the configured port always. */
+    allowedHosts: Set<string>;
+    /**
+     * Express's `trust proxy` setting. `false` (the default) trusts no
+     * `X-Forwarded-*`, so a direct client cannot spoof its address in the logs;
+     * a deployment behind a known proxy sets `TRUST_PROXY` to a hop count or a
+     * subnet preset so the real client IP is recovered without trusting all hops.
+     */
+    trustProxy: boolean | number | string;
+}
+export declare const DEFAULT_PORT = 8080;
+export declare const DEFAULT_BIND_ADDRESS = "127.0.0.1";
+/** Split a comma-separated env var into trimmed, non-empty entries. */
+export declare function parseList(value: string | undefined): string[];
+/**
+ * A port, or the default when the value is absent or not a usable port.
+ *
+ * A typo'd `PORT` should not crash startup with a stack trace; it should fall
+ * back and let the startup banner show what it actually bound. Ports outside
+ * 1-65535 fall back for the same reason `parseInt("8080abc")` must not become
+ * `8080` silently — `Number` rejects the trailing garbage that `parseInt` keeps.
+ */
+export declare function parsePort(raw: string | undefined, fallback?: number): number;
+/**
+ * The set of `Host` headers this server answers to.
+ *
+ * Loopback names on the bound port are always included so a local run works with
+ * no configuration. A hosted deployment adds its public hostname(s) via
+ * `ALLOWED_HOSTS`. The bare (portless) loopback names cover clients that omit
+ * the port on the default HTTP/HTTPS port.
+ */
+export declare function buildAllowedHosts(port: number, extra: string[]): Set<string>;
+/**
+ * Interpret `TRUST_PROXY` for Express's `trust proxy` setting.
+ *
+ * Absent → `false` (trust nothing, the safe default). `true`/`false` → boolean.
+ * An integer → that many hops. Anything else is passed through as an Express
+ * preset or subnet list (e.g. `loopback`, `10.0.0.0/8`), so an operator can name
+ * exactly their proxy without this needing to know the syntax.
+ */
+export declare function parseTrustProxy(raw: string | undefined): boolean | number | string;
+export declare function resolveHttpServerConfig(env?: EnvSource): HttpServerConfig;
+/**
+ * Header names a caller uses to select and authenticate against their tenant.
+ *
+ * Lowercased because Node lowercases incoming header names, and every lookup
+ * here goes through {@link headerValue} which reads them off `req.headers`.
+ *
+ * The API key is read from the standard `Authorization: Bearer <key>` first;
+ * `X-HydraDB-Api-Key` exists only for clients whose MCP config cannot set an
+ * `Authorization` header. Everything else — which database, which collection —
+ * has no standard header, so it takes an `X-HydraDB-*` one.
+ */
+export declare const HEADER_AUTHORIZATION = "authorization";
+export declare const HEADER_API_KEY = "x-hydradb-api-key";
+export declare const HEADER_DATABASE = "x-hydradb-database";
+export declare const HEADER_COLLECTION = "x-hydradb-collection";
+export declare const HEADER_GRAPH_DATABASE = "x-hydradb-graph-database";
+export declare const HEADER_GRAPH_COLLECTION = "x-hydradb-graph-collection";
+/** The request headers this resolver reads. Matches Node's `IncomingHttpHeaders`. */
+export type RequestHeaders = Record<string, string | string[] | undefined>;
+/**
+ * Everything needed to construct a scoped {@link HydraDB} for one request.
+ *
+ * `baseUrl`, `timeoutSeconds` and `maxRetries` are deliberately absent from the
+ * header surface: they are OPERATOR knobs read from the environment, not caller
+ * ones. Letting a caller set `baseUrl` per request would point this server's
+ * outbound calls at a host of the caller's choosing, which is a request-forgery
+ * primitive the tenant selection has no reason to hand out.
+ */
+export interface RequestCredentials {
+    apiKey: string;
+    database: string;
+    collection: string;
+    baseUrl?: string;
+    timeoutSeconds?: number;
+    maxRetries?: number;
+    graph: GraphConfig;
+}
+/**
+ * Resolution is either credentials or the exact HTTP failure to return.
+ *
+ * The status and message are carried out rather than thrown so the caller can
+ * answer with a JSON-RPC error body at the right code — 401 when nothing
+ * authenticated the request, 400 when it authenticated but named no database —
+ * instead of a generic 500 that tells the client nothing about what to fix.
+ */
+export type CredentialResolution = {
+    ok: true;
+    credentials: RequestCredentials;
+} | {
+    ok: false;
+    status: number;
+    message: string;
+};
+/**
+ * Turn one request's headers (falling back to the environment) into the tenant
+ * credentials for that request.
+ *
+ * The API key and the database resolve TOGETHER, not field-by-field, which is
+ * the security-relevant part:
+ *   - When the key comes from a request header, the request is
+ *     "caller-authenticated" and its database MUST also come from a header. The
+ *     env is NOT consulted for the database, so a caller who sends their own key
+ *     but omits `X-HydraDB-Database` is refused (400) rather than silently run
+ *     against the operator's env database. Likewise the graph scope defaults to
+ *     the request's own database, never the operator's `HYDRADB_GRAPH_DATABASE`.
+ *   - When there is no key header, the request is unauthenticated and falls back
+ *     entirely to the operator's env credentials — the single-tenant self-host
+ *     case, identical to the stdio server. A hosted, multi-tenant process sets
+ *     no tenant env, so such a request is refused (401).
+ *
+ * Resolving field-by-field instead would let a caller's key pair with the
+ * operator's database (or graph namespace), mixing two identities into one
+ * request. `baseUrl`/`timeoutSeconds`/`maxRetries` are read from the environment
+ * only — they are the operator's, not the caller's (see {@link RequestCredentials}).
+ */
+export declare function resolveRequestCredentials(headers: RequestHeaders, env?: EnvSource): CredentialResolution;
+/** A JSON-RPC error body, so every HTTP failure speaks the protocol's dialect. */
+export declare function jsonRpcError(code: number, message: string): {
+    jsonrpc: "2.0";
+    error: {
+        code: number;
+        message: string;
+    };
+    id: null;
+};