@hydradb/mcp 1.2.1 → 1.2.2

package/dist/http-config.js

@@ -0,0 +1,253 @@
+/**
+ * Configuration for the remotely hostable HTTP transport.
+ *
+ * There are two configurations here, and they belong to two different people.
+ *
+ *   - {@link resolveHttpServerConfig} is the OPERATOR's config: the port, the
+ *     bind address, and the Host/Origin allowlists that decide who may reach the
+ *     process at all. It is read once at startup from the environment.
+ *
+ *   - {@link resolveRequestCredentials} is the CALLER's config: which Hydra DB
+ *     account, database and collection a single request runs against. On a
+ *     multi-tenant deployment (one process serving `mcp.hydradb.com` for many
+ *     users) this MUST come per request, from headers, because the process has
+ *     no single tenant of its own. It is resolved fresh on every `/mcp` call.
+ *
+ * The stdio server ({@link file://./index.ts}) has only the second concern and
+ * reads it from the environment via {@link file://./config.ts}; a hosted server
+ * cannot, because one env-configured key would make every user share one
+ * account. So the header path is the substantive new surface, and it falls back
+ * to the environment only to keep the single-tenant self-hosting story (set the
+ * env, expose the port, done) working unchanged.
+ */
+import { DEFAULT_COLLECTION, nonNegativeInt, positiveInt, readEnv, resolveGraphConfig, } from "./config.js";
+export const DEFAULT_PORT = 8080;
+export const DEFAULT_BIND_ADDRESS = "127.0.0.1";
+/** Split a comma-separated env var into trimmed, non-empty entries. */
+export function parseList(value) {
+    if (!value)
+        return [];
+    return value
+        .split(",")
+        .map((v) => v.trim())
+        .filter((v) => v.length > 0);
+}
+/**
+ * A port, or the default when the value is absent or not a usable port.
+ *
+ * A typo'd `PORT` should not crash startup with a stack trace; it should fall
+ * back and let the startup banner show what it actually bound. Ports outside
+ * 1-65535 fall back for the same reason `parseInt("8080abc")` must not become
+ * `8080` silently — `Number` rejects the trailing garbage that `parseInt` keeps.
+ */
+export function parsePort(raw, fallback = DEFAULT_PORT) {
+    const value = Number(raw);
+    return raw != null && Number.isInteger(value) && value >= 1 && value <= 65535
+        ? value
+        : fallback;
+}
+/**
+ * The set of `Host` headers this server answers to.
+ *
+ * Loopback names on the bound port are always included so a local run works with
+ * no configuration. A hosted deployment adds its public hostname(s) via
+ * `ALLOWED_HOSTS`. The bare (portless) loopback names cover clients that omit
+ * the port on the default HTTP/HTTPS port.
+ */
+export function buildAllowedHosts(port, extra) {
+    return new Set([
+        `localhost:${port}`,
+        `127.0.0.1:${port}`,
+        `[::1]:${port}`,
+        "localhost",
+        "127.0.0.1",
+        "[::1]",
+        ...extra,
+    ].map((h) => h.toLowerCase()));
+}
+/**
+ * Interpret `TRUST_PROXY` for Express's `trust proxy` setting.
+ *
+ * Absent → `false` (trust nothing, the safe default). `true`/`false` → boolean.
+ * An integer → that many hops. Anything else is passed through as an Express
+ * preset or subnet list (e.g. `loopback`, `10.0.0.0/8`), so an operator can name
+ * exactly their proxy without this needing to know the syntax.
+ */
+export function parseTrustProxy(raw) {
+    const value = raw?.trim();
+    if (!value)
+        return false;
+    if (value.toLowerCase() === "true")
+        return true;
+    if (value.toLowerCase() === "false")
+        return false;
+    if (/^\d+$/.test(value))
+        return Number(value);
+    return value;
+}
+export function resolveHttpServerConfig(env = process.env) {
+    const port = parsePort(env.PORT);
+    return {
+        port,
+        bindAddress: env.BIND_ADDRESS?.trim() || DEFAULT_BIND_ADDRESS,
+        allowedOrigins: parseList(env.ALLOWED_ORIGINS),
+        allowedHosts: buildAllowedHosts(port, parseList(env.ALLOWED_HOSTS)),
+        trustProxy: parseTrustProxy(env.TRUST_PROXY),
+    };
+}
+// --- Per-request tenant credentials ---
+/**
+ * Header names a caller uses to select and authenticate against their tenant.
+ *
+ * Lowercased because Node lowercases incoming header names, and every lookup
+ * here goes through {@link headerValue} which reads them off `req.headers`.
+ *
+ * The API key is read from the standard `Authorization: Bearer <key>` first;
+ * `X-HydraDB-Api-Key` exists only for clients whose MCP config cannot set an
+ * `Authorization` header. Everything else — which database, which collection —
+ * has no standard header, so it takes an `X-HydraDB-*` one.
+ */
+export const HEADER_AUTHORIZATION = "authorization";
+export const HEADER_API_KEY = "x-hydradb-api-key";
+export const HEADER_DATABASE = "x-hydradb-database";
+export const HEADER_COLLECTION = "x-hydradb-collection";
+export const HEADER_GRAPH_DATABASE = "x-hydradb-graph-database";
+export const HEADER_GRAPH_COLLECTION = "x-hydradb-graph-collection";
+/** One header value, taking the first when a header arrives repeated. */
+function headerValue(headers, name) {
+    const raw = headers[name];
+    const value = Array.isArray(raw) ? raw[0] : raw;
+    const trimmed = value?.trim();
+    return trimmed ? trimmed : undefined;
+}
+/**
+ * The token from an `Authorization` header, accepting `Bearer <token>` or a bare
+ * token. The scheme is matched case-insensitively (RFC 7235 says it is
+ * case-insensitive, and clients send `bearer`, `Bearer` and `BEARER` in the
+ * wild); a bare value is accepted because some MCP hosts drop the scheme.
+ */
+function bearerToken(authorization) {
+    if (!authorization)
+        return undefined;
+    const match = /^\s*Bearer\s+(.+)$/i.exec(authorization);
+    if (match)
+        return match[1].trim() || undefined;
+    return authorization.trim() || undefined;
+}
+/**
+ * Turn one request's headers (falling back to the environment) into the tenant
+ * credentials for that request.
+ *
+ * The API key and the database resolve TOGETHER, not field-by-field, which is
+ * the security-relevant part:
+ *   - When the key comes from a request header, the request is
+ *     "caller-authenticated" and its database MUST also come from a header. The
+ *     env is NOT consulted for the database, so a caller who sends their own key
+ *     but omits `X-HydraDB-Database` is refused (400) rather than silently run
+ *     against the operator's env database. Likewise the graph scope defaults to
+ *     the request's own database, never the operator's `HYDRADB_GRAPH_DATABASE`.
+ *   - When there is no key header, the request is unauthenticated and falls back
+ *     entirely to the operator's env credentials — the single-tenant self-host
+ *     case, identical to the stdio server. A hosted, multi-tenant process sets
+ *     no tenant env, so such a request is refused (401).
+ *
+ * Resolving field-by-field instead would let a caller's key pair with the
+ * operator's database (or graph namespace), mixing two identities into one
+ * request. `baseUrl`/`timeoutSeconds`/`maxRetries` are read from the environment
+ * only — they are the operator's, not the caller's (see {@link RequestCredentials}).
+ */
+export function resolveRequestCredentials(headers, env = process.env) {
+    const headerKey = bearerToken(headerValue(headers, HEADER_AUTHORIZATION)) ??
+        headerValue(headers, HEADER_API_KEY);
+    // Whether the CALLER authenticated this request with their own key decides
+    // whether the operator's env is allowed to supply the rest of the identity.
+    const callerAuthenticated = headerKey != null;
+    const apiKey = 
+    // The env fallback reuses the exact same canonical/legacy alias rules as
+    // the stdio server, so a self-host configured for stdio needs no new vars.
+    headerKey ?? readEnv(env, "HYDRADB_API_KEY", "HYDRA_DB_API_KEY", noopWarn);
+    if (!apiKey) {
+        return {
+            ok: false,
+            status: 401,
+            message: "Missing Hydra DB credentials. Send `Authorization: Bearer <api-key>` " +
+                "(or the `X-HydraDB-Api-Key` header). Get a key at https://app.hydradb.com.",
+        };
+    }
+    const headerDatabase = headerValue(headers, HEADER_DATABASE);
+    // A caller-authenticated request takes its database ONLY from the header;
+    // the env database belongs to the operator's identity, not the caller's.
+    const database = callerAuthenticated
+        ? headerDatabase
+        : (headerDatabase ?? readEnv(env, "HYDRADB_DATABASE", "HYDRA_DB_TENANT_ID", noopWarn));
+    if (!database) {
+        return {
+            ok: false,
+            status: 400,
+            message: "Missing Hydra DB database. Send the `X-HydraDB-Database` header naming " +
+                "the database (tenant) this request should run against.",
+        };
+    }
+    // Collection is a partition WITHIN the resolved database, not a cross-tenant
+    // boundary, so an env default is safe for either mode.
+    const collection = headerValue(headers, HEADER_COLLECTION) ??
+        readEnv(env, "HYDRADB_COLLECTION", "HYDRA_DB_SUB_TENANT_ID", noopWarn) ??
+        DEFAULT_COLLECTION;
+    // Operator-owned transport knobs. Same env vars, same parsing as resolveConfig.
+    const baseUrl = readEnv(env, "HYDRADB_BASE_URL", "HYDRA_DB_BASE_URL", noopWarn);
+    const timeoutSeconds = positiveInt(env.HYDRADB_TIMEOUT_SECONDS);
+    const maxRetries = nonNegativeInt(env.HYDRADB_MAX_RETRIES);
+    return {
+        ok: true,
+        credentials: {
+            apiKey,
+            database,
+            collection,
+            ...(baseUrl != null ? { baseUrl } : {}),
+            ...(timeoutSeconds != null ? { timeoutSeconds } : {}),
+            ...(maxRetries != null ? { maxRetries } : {}),
+            graph: resolveRequestGraphConfig(headers, env, database, callerAuthenticated),
+        },
+    };
+}
+/**
+ * Graph scope for one request: the operator's `enabled` flag, but the caller's
+ * database and collection.
+ *
+ * The graph database defaults to the request's OWN database, so a caller that
+ * names only `X-HydraDB-Database` gets a coherent graph scope without a second
+ * header. The operator's `HYDRADB_GRAPH_DATABASE` is honoured as that default
+ * ONLY for an unauthenticated (env-credential) request — for a caller-
+ * authenticated one it would pin every tenant to the operator's single graph
+ * namespace, the mixing this resolver exists to prevent. Header overrides always
+ * win, letting a caller address a graph in a different namespace than their
+ * memory database — which, because the two are genuinely separate stores, is a
+ * real need.
+ */
+function resolveRequestGraphConfig(headers, env, database, callerAuthenticated) {
+    // For a caller-authenticated request the fallback database is the request's
+    // own, so `resolveGraphConfig`'s env default is deliberately not consulted.
+    const base = resolveGraphConfig(env, database);
+    const defaultDatabase = callerAuthenticated ? database : base.database;
+    return {
+        enabled: base.enabled,
+        database: headerValue(headers, HEADER_GRAPH_DATABASE) ?? defaultDatabase,
+        collection: headerValue(headers, HEADER_GRAPH_COLLECTION) ?? base.collection,
+    };
+}
+/**
+ * Credential resolution must not emit deprecation warnings.
+ *
+ * `readEnv` warns once per process when a legacy alias is used. On the header
+ * path the env is only a fallback and is read on EVERY request; routing its
+ * warning through the process-wide dedupe would still fire on the first request
+ * and, worse, tie a per-request code path to shared mutable warning state. The
+ * stdio/startup path already surfaces any legacy-alias warning, so silence here
+ * drops nothing.
+ */
+function noopWarn() { }
+/** A JSON-RPC error body, so every HTTP failure speaks the protocol's dialect. */
+export function jsonRpcError(code, message) {
+    return { jsonrpc: "2.0", error: { code, message }, id: null };
+}
+//# sourceMappingURL=http-config.js.map

package/dist/http-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-config.js","sourceRoot":"","sources":["../src/http-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACN,kBAAkB,EAGlB,cAAc,EACd,WAAW,EACX,OAAO,EACP,kBAAkB,GAClB,MAAM,aAAa,CAAC;AAyBrB,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AAEhD,uEAAuE;AACvE,MAAM,UAAU,SAAS,CAAC,KAAyB;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,GAAuB,EAAE,QAAQ,GAAG,YAAY;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,GAAG,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAM;QAC7E,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,QAAQ,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAe;IAC9D,OAAO,IAAI,GAAG,CACb;QACC,aAAa,IAAI,EAAE;QACnB,aAAa,IAAI,EAAE;QACnB,SAAS,IAAI,EAAE;QACf,WAAW;QACX,WAAW;QACX,OAAO;QACP,GAAG,KAAK;KACR,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC7B,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuB;IACtD,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAiB,OAAO,CAAC,GAAG;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO;QACN,IAAI;QACJ,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,oBAAoB;QAC7D,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAC9C,YAAY,EAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnE,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC;KAC5C,CAAC;AACH,CAAC;AAED,yCAAyC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAoCpE,yEAAyE;AACzE,SAAS,WAAW,CAAC,OAAuB,EAAE,IAAY;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,aAAiC;IACrD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC/C,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,yBAAyB,CACxC,OAAuB,EACvB,MAAiB,OAAO,CAAC,GAAG;IAE5B,MAAM,SAAS,GACd,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACvD,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACtC,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,mBAAmB,GAAG,SAAS,IAAI,IAAI,CAAC;IAE9C,MAAM,MAAM;IACX,yEAAyE;IACzE,2EAA2E;IAC3E,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EACN,uEAAuE;gBACvE,4EAA4E;SAC7E,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7D,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,mBAAmB;QACnC,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EACN,yEAAyE;gBACzE,wDAAwD;SACzD,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,UAAU,GACf,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACvC,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,QAAQ,CAAC;QACtE,kBAAkB,CAAC;IAEpB,gFAAgF;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAE3D,OAAO;QACN,EAAE,EAAE,IAAI;QACR,WAAW,EAAE;YACZ,MAAM;YACN,QAAQ;YACR,UAAU;YACV,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,KAAK,EAAE,yBAAyB,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,mBAAmB,CAAC;SAC7E;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,yBAAyB,CACjC,OAAuB,EACvB,GAAc,EACd,QAAgB,EAChB,mBAA4B;IAE5B,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,eAAe,GAAG,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACvE,OAAO;QACN,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,eAAe;QACxE,UAAU,EAAE,WAAW,CAAC,OAAO,EAAE,uBAAuB,CAAC,IAAI,IAAI,CAAC,UAAU;KAC5E,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,QAAQ,KAAU,CAAC;AAE5B,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IAKzD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+/**
+ * The remotely hostable HTTP transport.
+ *
+ * This is the server behind a URL like `https://mcp.hydradb.com/mcp`: instead of
+ * every user installing and spawning the stdio binary ({@link file://./index.ts}),
+ * one process answers MCP over HTTP and each user points their client at the URL.
+ *
+ * It reuses the whole tool surface unchanged — {@link createHydraDBServer} builds
+ * exactly the same server the stdio path does. The only things this file adds are
+ * the ones a network endpoint needs and a pipe does not: a Host/Origin
+ * allowlist, CORS, and PER-REQUEST tenant credentials (see
+ * {@link file://./http-config.ts}), because one hosted process has no single
+ * ambient account to run as.
+ *
+ * Sessions are stateless: MCP's Protocol object binds to one transport, so a
+ * shared process serving many independent callers builds a fresh server +
+ * transport per request and tears it down when the response closes. That is the
+ * transport's documented stateless mode (`sessionIdGenerator: undefined`).
+ */
+import { type Express } from "express";
+import { buildAllowedHosts, type HttpServerConfig, parseList, parsePort, resolveHttpServerConfig } from "./http-config.js";
+/**
+ * Build the Express app for the HTTP transport.
+ *
+ * Exported (and taking its config as an argument rather than reading the
+ * environment) so tests exercise the exact wiring production runs, against an
+ * arbitrary allowlist, with no process-global state.
+ */
+export declare function createHttpApp(config: HttpServerConfig): Express;
+export { buildAllowedHosts, parseList, parsePort, resolveHttpServerConfig };

package/dist/http.js

@@ -0,0 +1,350 @@
+#!/usr/bin/env node
+/**
+ * The remotely hostable HTTP transport.
+ *
+ * This is the server behind a URL like `https://mcp.hydradb.com/mcp`: instead of
+ * every user installing and spawning the stdio binary ({@link file://./index.ts}),
+ * one process answers MCP over HTTP and each user points their client at the URL.
+ *
+ * It reuses the whole tool surface unchanged — {@link createHydraDBServer} builds
+ * exactly the same server the stdio path does. The only things this file adds are
+ * the ones a network endpoint needs and a pipe does not: a Host/Origin
+ * allowlist, CORS, and PER-REQUEST tenant credentials (see
+ * {@link file://./http-config.ts}), because one hosted process has no single
+ * ambient account to run as.
+ *
+ * Sessions are stateless: MCP's Protocol object binds to one transport, so a
+ * shared process serving many independent callers builds a fresh server +
+ * transport per request and tears it down when the response closes. That is the
+ * transport's documented stateless mode (`sessionIdGenerator: undefined`).
+ */
+import cors from "cors";
+import express from "express";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { HydraDB } from "./hydra/index.js";
+import { buildAllowedHosts, jsonRpcError, parseList, parsePort, resolveHttpServerConfig, resolveRequestCredentials, } from "./http-config.js";
+import { logger } from "./logger.js";
+import { awaitInFlight, beginShutdown, createHydraDBServer, inFlightCount, } from "./server.js";
+/**
+ * The largest request body accepted before parsing.
+ *
+ * Sized above the tool layer's own ceilings — memory ingest caps `text` at 1M
+ * characters (~4 MB as UTF-8 with a JSON envelope), which is the biggest
+ * legitimate body — so a valid large ingest is not rejected at the door while an
+ * unbounded body cannot exhaust memory. Anything genuinely oversized is still
+ * refused by the per-tool checks with a message naming the real limit.
+ */
+const MAX_REQUEST_BODY = "8mb";
+/**
+ * Startup banners and security warnings go straight to stderr, not through
+ * `logger`.
+ *
+ * `logger` is gated by `HYDRADB_LOG_LEVEL`, which defaults to ERROR, so a
+ * `logger.warn` about a public bind would be invisible in the exact default
+ * configuration where it matters most. These lines must surface regardless of
+ * level — the same reason the deprecated-alias warnings bypass the logger — so
+ * they use `console.error` (stderr) directly. Per-request and lifecycle logging
+ * still goes through `logger`.
+ */
+function banner(message) {
+    console.error(`[hydradb-mcp] ${message}`);
+}
+/** JSON-RPC error codes used for transport-level failures (spec: -32000 range). */
+const JSONRPC_UNAUTHORIZED = -32001;
+const JSONRPC_BAD_REQUEST = -32602;
+const JSONRPC_INTERNAL_ERROR = -32603;
+const JSONRPC_MISDIRECTED = -32000;
+/**
+ * Build the Express app for the HTTP transport.
+ *
+ * Exported (and taking its config as an argument rather than reading the
+ * environment) so tests exercise the exact wiring production runs, against an
+ * arbitrary allowlist, with no process-global state.
+ */
+export function createHttpApp(config) {
+    const { bindAddress, allowedOrigins, allowedHosts } = config;
+    const allowsAllOrigins = allowedOrigins.includes("*");
+    const app = express();
+    // Off by default so a direct client cannot spoof `X-Forwarded-*`; a
+    // deployment behind a known proxy sets TRUST_PROXY to recover the real client
+    // IP without trusting every hop. Only logging and `req.protocol` read it — the
+    // Host allowlist, not a proxy header, is the DNS-rebinding defence.
+    app.set("trust proxy", config.trustProxy);
+    // The Host allowlist is the actual defence; the fingerprinting header is noise.
+    app.disable("x-powered-by");
+    // --- Host header allowlist (runs first, before CORS) ---
+    //
+    // A DNS-rebinding defence: without it, a page the user visits can point a
+    // hostname it controls at 127.0.0.1 and drive a locally bound server. The
+    // check is the operator's ALLOWED_HOSTS plus loopback; a hosted deployment
+    // adds its public hostname. 421 Misdirected Request is the status for "this
+    // server does not answer to that authority".
+    app.use((req, res, next) => {
+        const host = req.headers.host;
+        if (!host || !allowedHosts.has(host.toLowerCase())) {
+            logger.warn("rejected request with disallowed Host header", {
+                host,
+                path: req.path,
+            });
+            res
+                .status(421)
+                .json(jsonRpcError(JSONRPC_MISDIRECTED, "Misdirected request"));
+            return;
+        }
+        next();
+    });
+    // --- CORS ---
+    //
+    // A distinct error type so the error handler below can tell an origin
+    // rejection apart from any other downstream failure and answer it with 403.
+    class CorsOriginNotAllowedError extends Error {
+        constructor(origin) {
+            super(`Origin ${origin} not allowed by CORS`);
+            this.origin = origin;
+            this.name = "CorsOriginNotAllowedError";
+        }
+    }
+    app.use(cors({
+        origin: (origin, callback) => {
+            // No Origin header: a non-browser client or a same-origin request.
+            // These are not subject to CORS and are allowed through.
+            if (!origin)
+                return callback(null, true);
+            // The opaque `null` origin (sandboxed iframe, file://) is only
+            // honoured when the operator lists it explicitly.
+            if (origin === "null") {
+                return allowedOrigins.includes("null")
+                    ? callback(null, true)
+                    : callback(new CorsOriginNotAllowedError("null"));
+            }
+            if (allowsAllOrigins || allowedOrigins.includes(origin)) {
+                return callback(null, true);
+            }
+            return callback(new CorsOriginNotAllowedError(origin));
+        },
+        // The client reads the session id and negotiated protocol version off
+        // the response; without exposing them a browser cannot complete a session.
+        exposedHeaders: ["Mcp-Session-Id", "Mcp-Protocol-Version"],
+        allowedHeaders: [
+            "Content-Type",
+            "Authorization",
+            "Mcp-Session-Id",
+            "Mcp-Protocol-Version",
+            "X-HydraDB-Api-Key",
+            "X-HydraDB-Database",
+            "X-HydraDB-Collection",
+            "X-HydraDB-Graph-Database",
+            "X-HydraDB-Graph-Collection",
+        ],
+    }));
+    // Turn a CORS origin rejection into an explicit 403 with a JSON-RPC body,
+    // mirroring the 421 the Host check emits. Placed right after cors so any
+    // other error still reaches Express's default handler unchanged.
+    app.use((err, req, res, next) => {
+        if (err instanceof CorsOriginNotAllowedError) {
+            logger.warn("rejected request with disallowed Origin", {
+                origin: err.origin,
+                path: req.path,
+            });
+            res
+                .status(403)
+                .json(jsonRpcError(JSONRPC_MISDIRECTED, "Origin not allowed"));
+            return;
+        }
+        next(err);
+    });
+    app.use(express.json({ limit: MAX_REQUEST_BODY }));
+    // --- The MCP endpoint ---
+    // Serves MCP at both the root `/` (e.g. https://mcp.hydradb.com) and `/mcp`
+    // so clients pointing at either URL connect seamlessly.
+    app.all(["/", "/mcp"], async (req, res) => {
+        // Who is this request for? On a hosted process the answer lives entirely
+        // in the request, so it is resolved here and a missing/incomplete answer
+        // is refused before any server is built.
+        const resolution = resolveRequestCredentials(req.headers, process.env);
+        if (!resolution.ok) {
+            // 401 gets a WWW-Authenticate header so a spec-compliant client knows
+            // how to authenticate rather than just seeing a bare refusal.
+            if (resolution.status === 401) {
+                res.setHeader("WWW-Authenticate", 'Bearer realm="Hydra DB MCP"');
+            }
+            res
+                .status(resolution.status)
+                .json(jsonRpcError(resolution.status === 401
+                ? JSONRPC_UNAUTHORIZED
+                : JSONRPC_BAD_REQUEST, resolution.message));
+            return;
+        }
+        const creds = resolution.credentials;
+        try {
+            const hydra = new HydraDB({
+                token: creds.apiKey,
+                database: creds.database,
+                collection: creds.collection,
+                ...(creds.baseUrl != null ? { baseUrl: creds.baseUrl } : {}),
+                ...(creds.timeoutSeconds != null
+                    ? { timeoutSeconds: creds.timeoutSeconds }
+                    : {}),
+                ...(creds.maxRetries != null ? { maxRetries: creds.maxRetries } : {}),
+            });
+            const server = createHydraDBServer(hydra, creds.graph);
+            // Stateless: this pair serves exactly this request and is discarded when
+            // the response closes. Tearing them down on `close` — which fires for a
+            // clean end AND for the error path below (it sends a response, which then
+            // closes) — is what frees the per-request state; without it a long-lived
+            // process leaks a server per call. It is the single teardown point, so
+            // nothing here double-closes. `close()` returns a promise, and a stray
+            // rejection would take the whole process down via `unhandledRejection`, so
+            // it is explicitly swallowed.
+            const transport = new StreamableHTTPServerTransport({
+                sessionIdGenerator: undefined,
+                enableJsonResponse: true,
+            });
+            res.on("close", () => {
+                transport.close().catch(() => { });
+                server.close().catch(() => { });
+            });
+            await server.connect(transport);
+            await transport.handleRequest(req, res, req.body);
+        }
+        catch (error) {
+            logger.error("error handling MCP request", {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            // Do not close here: the `res.on("close")` handler above owns teardown,
+            // and the transport may still be mid-write. Only the transport writes the
+            // JSON-RPC body, so this responds solely when nothing has been sent yet
+            // AND the socket is still open — a client that aborted mid-request lands
+            // here too, and writing to its closed socket is pointless. Ending the
+            // response then triggers that one teardown.
+            if (!res.headersSent && !res.writableEnded) {
+                res
+                    .status(500)
+                    .json(jsonRpcError(JSONRPC_INTERNAL_ERROR, "Internal server error"));
+            }
+        }
+    });
+    // A liveness probe for load balancers and container orchestrators. It says
+    // nothing about Hydra DB reachability on purpose — credentials are per
+    // request, so there is no single upstream this endpoint could check.
+    app.get("/health", (_req, res) => {
+        res.json({ status: "ok", service: "hydradb-mcp" });
+    });
+    // `express.json` throws on a malformed body (`entity.parse.failed`) or one
+    // over the limit (`entity.too.large`). Registered after the routes so it
+    // catches those, it keeps every refusal on this server speaking JSON-RPC
+    // rather than letting Express answer with its default HTML error page. Any
+    // other error falls through to Express's default handler unchanged.
+    app.use((err, _req, res, next) => {
+        if (err.type === "entity.parse.failed") {
+            res
+                .status(400)
+                .json(jsonRpcError(JSONRPC_BAD_REQUEST, "Request body is not valid JSON"));
+            return;
+        }
+        if (err.type === "entity.too.large") {
+            res
+                .status(413)
+                .json(jsonRpcError(JSONRPC_BAD_REQUEST, `Request body exceeds the ${MAX_REQUEST_BODY} limit`));
+            return;
+        }
+        next(err);
+    });
+    if (bindAddress === "0.0.0.0" || bindAddress === "::") {
+        banner(`WARNING: BIND_ADDRESS=${bindAddress} exposes the server on all network interfaces — ` +
+            "set ALLOWED_HOSTS/ALLOWED_ORIGINS and put it behind TLS. See SECURITY.md.");
+    }
+    if (allowsAllOrigins) {
+        banner('WARNING: ALLOWED_ORIGINS contains "*" — any website may call this server. See SECURITY.md.');
+    }
+    return app;
+}
+/**
+ * Wire graceful shutdown for the HTTP server.
+ *
+ * The in-flight bookkeeping is shared with the stdio path (it is module state in
+ * {@link file://./server.js}), so this drains accepted tool calls the same way:
+ * stop accepting, close the listener, wait for running handlers, then exit. An
+ * ingest cut off mid-write leaves the caller unable to tell whether it
+ * committed, which under upsert is not answerable by retrying.
+ */
+const SHUTDOWN_GRACE_MS = 10000;
+function installLifecycle(httpServer) {
+    let shuttingDown = false;
+    const shutdown = async (signal) => {
+        if (shuttingDown) {
+            logger.warn(`${signal} received again — exiting immediately`);
+            process.exit(130);
+        }
+        shuttingDown = true;
+        beginShutdown();
+        logger.info(`${signal} received — shutting down`);
+        const timer = setTimeout(() => {
+            logger.warn(`in-flight work did not finish within ${SHUTDOWN_GRACE_MS}ms — exiting anyway`);
+            process.exit(0);
+        }, SHUTDOWN_GRACE_MS);
+        timer.unref();
+        // Stop accepting new connections, then drain the calls already running.
+        httpServer.close();
+        const pending = inFlightCount();
+        if (pending > 0) {
+            logger.info(`waiting for ${pending} in-flight tool call(s)`);
+            await awaitInFlight();
+        }
+        clearTimeout(timer);
+        process.exit(0);
+    };
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    process.on("unhandledRejection", (reason) => {
+        logger.error("unhandled promise rejection", {
+            error: reason instanceof Error ? (reason.stack ?? reason.message) : String(reason),
+        });
+        process.exit(1);
+    });
+    process.on("uncaughtException", (error) => {
+        logger.error("uncaught exception", { error: error.stack ?? error.message });
+        process.exit(1);
+    });
+}
+function main() {
+    const config = resolveHttpServerConfig();
+    // A public bind WITH tenant credentials in the env is the one genuinely
+    // dangerous combination: every unauthenticated request would run under that
+    // account. It is legitimate for a single-tenant self-host, so this warns
+    // rather than refuses — but a multi-tenant operator must see it.
+    const publicBind = config.bindAddress === "0.0.0.0" || config.bindAddress === "::";
+    if (publicBind && (process.env.HYDRADB_API_KEY || process.env.HYDRA_DB_API_KEY)) {
+        banner("WARNING: HYDRADB_API_KEY is set while binding publicly — every request that " +
+            "sends no `Authorization` header will run under this account. Unset it for a " +
+            "multi-tenant deployment so each caller must authenticate. See SECURITY.md.");
+    }
+    const app = createHttpApp(config);
+    const httpServer = app
+        .listen(config.port, config.bindAddress, () => {
+        // Startup banners: on stderr so an operator sees where it bound
+        // regardless of HYDRADB_LOG_LEVEL.
+        banner(`listening on http://${config.bindAddress}:${config.port}`);
+        banner(`allowed origins: ${config.allowedOrigins.length > 0
+            ? config.allowedOrigins.join(", ")
+            : "(none — cross-origin browser requests will be rejected)"}`);
+    })
+        .on("error", (error) => {
+        logger.error("HTTP server error", { error: error.message });
+        process.exit(1);
+    });
+    installLifecycle(httpServer);
+}
+// Only auto-start when run as a script, so tests can import `createHttpApp`
+// without binding a port. Covers `node dist/http.js`, `tsx src/http.ts`, and
+// the Docker entrypoint.
+const invokedAsScript = import.meta.url === `file://${process.argv[1]}` ||
+    process.argv[1]?.endsWith("/http.js") ||
+    process.argv[1]?.endsWith("/http.ts");
+if (invokedAsScript) {
+    main();
+}
+// Re-exported so callers importing the HTTP entry point get the config helpers
+// from one place.
+export { buildAllowedHosts, parseList, parsePort, resolveHttpServerConfig };
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,OAAyB,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EACN,iBAAiB,EAEjB,YAAY,EACZ,SAAS,EACT,SAAS,EACT,uBAAuB,EACvB,yBAAyB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACN,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,aAAa,GACb,MAAM,aAAa,CAAC;AAErB;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B;;;;;;;;;;GAUG;AACH,SAAS,MAAM,CAAC,OAAe;IAC9B,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AACpC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AACnC,MAAM,sBAAsB,GAAG,CAAC,KAAK,CAAC;AACtC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAwB;IACrD,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;IAC7D,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,oEAAoE;IACpE,8EAA8E;IAC9E,+EAA+E;IAC/E,oEAAoE;IACpE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,gFAAgF;IAChF,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAE5B,0DAA0D;IAC1D,EAAE;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,4EAA4E;IAC5E,6CAA6C;IAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;gBAC3D,IAAI;gBACJ,IAAI,EAAE,GAAG,CAAC,IAAI;aACd,CAAC,CAAC;YACH,GAAG;iBACD,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACjE,OAAO;QACR,CAAC;QACD,IAAI,EAAE,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,eAAe;IACf,EAAE;IACF,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,yBAA0B,SAAQ,KAAK;QAC5C,YAAqB,MAAc;YAClC,KAAK,CAAC,UAAU,MAAM,sBAAsB,CAAC,CAAC;YAD1B,WAAM,GAAN,MAAM,CAAQ;YAElC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACzC,CAAC;KACD;IAED,GAAG,CAAC,GAAG,CACN,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC5B,mEAAmE;YACnE,yDAAyD;YACzD,IAAI,CAAC,MAAM;gBAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzC,+DAA+D;YAC/D,kDAAkD;YAClD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,OAAO,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACrC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;oBACtB,CAAC,CAAC,QAAQ,CAAC,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,gBAAgB,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,QAAQ,CAAC,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,sEAAsE;QACtE,2EAA2E;QAC3E,cAAc,EAAE,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;QAC1D,cAAc,EAAE;YACf,cAAc;YACd,eAAe;YACf,gBAAgB;YAChB,sBAAsB;YACtB,mBAAmB;YACnB,oBAAoB;YACpB,sBAAsB;YACtB,0BAA0B;YAC1B,4BAA4B;SAC5B;KACD,CAAC,CACF,CAAC;IAEF,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,GAAG,CAAC,GAAG,CACN,CACC,GAAU,EACV,GAAoB,EACpB,GAAqB,EACrB,IAA0B,EACzB,EAAE;QACH,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBACtD,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;aACd,CAAC,CAAC;YACH,GAAG;iBACD,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACX,CAAC,CACD,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAEnD,2BAA2B;IAC3B,4EAA4E;IAC5E,wDAAwD;IACxD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,yEAAyE;QACzE,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,UAAU,GAAG,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACpB,sEAAsE;YACtE,8DAA8D;YAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC/B,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;YAClE,CAAC;YACD,GAAG;iBACD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;iBACzB,IAAI,CACJ,YAAY,CACX,UAAU,CAAC,MAAM,KAAK,GAAG;gBACxB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,mBAAmB,EACtB,UAAU,CAAC,OAAO,CAClB,CACD,CAAC;YACH,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC;gBACzB,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI;oBAC/B,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAEvD,yEAAyE;YACzE,wEAAwE;YACxE,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,uEAAuE;YACvE,2EAA2E;YAC3E,8BAA8B;YAC9B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBACnD,kBAAkB,EAAE,SAAS;gBAC7B,kBAAkB,EAAE,IAAI;aACxB,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACpB,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAClC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gBAC1C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,wEAAwE;YACxE,0EAA0E;YAC1E,wEAAwE;YACxE,yEAAyE;YACzE,sEAAsE;YACtE,4CAA4C;YAC5C,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC5C,GAAG;qBACD,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,YAAY,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACvE,CAAC;QACF,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,uEAAuE;IACvE,qEAAqE;IACrE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,oEAAoE;IACpE,GAAG,CAAC,GAAG,CACN,CACC,GAA+C,EAC/C,IAAqB,EACrB,GAAqB,EACrB,IAA0B,EACzB,EAAE;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACxC,GAAG;iBACD,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,gCAAgC,CAAC,CAAC,CAAC;YAC5E,OAAO;QACR,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACrC,GAAG;iBACD,MAAM,CAAC,GAAG,CAAC;iBACX,IAAI,CACJ,YAAY,CACX,mBAAmB,EACnB,4BAA4B,gBAAgB,QAAQ,CACpD,CACD,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACX,CAAC,CACD,CAAC;IAEF,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,CACL,yBAAyB,WAAW,kDAAkD;YACrF,2EAA2E,CAC5E,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACtB,MAAM,CAAC,4FAA4F,CAAC,CAAC;IACtG,CAAC;IAED,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,KAAM,CAAC;AAEjC,SAAS,gBAAgB,CAAC,UAAsC;IAC/D,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACzC,IAAI,YAAY,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uCAAuC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,aAAa,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,2BAA2B,CAAC,CAAC;QAElD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,CAAC,IAAI,CACV,wCAAwC,iBAAiB,qBAAqB,CAC9E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,wEAAwE;QACxE,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,eAAe,OAAO,yBAAyB,CAAC,CAAC;YAC7D,MAAM,aAAa,EAAE,CAAC;QACvB,CAAC;QACD,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtD,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC3C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC3C,KAAK,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;SAClF,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACzC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,IAAI;IACZ,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IAEzC,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC;IACnF,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjF,MAAM,CACL,8EAA8E;YAC7E,8EAA8E;YAC9E,4EAA4E,CAC7E,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,GAAG;SACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE;QAC7C,gEAAgE;QAChE,mCAAmC;QACnC,MAAM,CAAC,uBAAuB,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,CACL,oBACC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;YAC/B,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,CAAC,CAAC,yDACJ,EAAE,CACF,CAAC;IACH,CAAC,CAAC;SACD,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACtB,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IAEJ,gBAAgB,CAAC,UAAU,CAAC,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,yBAAyB;AACzB,MAAM,eAAe,GACpB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;AAEvC,IAAI,eAAe,EAAE,CAAC;IACrB,IAAI,EAAE,CAAC;AACR,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC"}