npm - @loop_ouroboros/mcp-hub-lite - Versions diffs - 1.3.0 → 1.3.2 - Mend

@loop_ouroboros/mcp-hub-lite 1.3.0 → 1.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (136) hide show

package/dist/client/index.html CHANGED Viewed

@@ -5,9 +5,9 @@
     <link rel="icon" href="/favicon.ico" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>MCP Server Manager</title>
-    <script type="module" crossorigin src="/assets/index-DkqV9kH4.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/vue-vendor-Dwcr0jep.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-Bzz3tYbS.css">
+    <script type="module" crossorigin src="/assets/index-DwhULJXZ.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/vue-vendor-ClSvefnQ.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-UtsV0Cvh.css">
   </head>
   <body>
     <div id="app"></div>

package/dist/server/shared/models/constants.d.ts CHANGED Viewed

@@ -1,3 +1,8 @@
 /** MCP Hub Lite gateway server name — used for system tool identification and gateway naming */
 export declare const MCP_HUB_LITE_SERVER = "mcp-hub-lite";
+/** Session mode constants for gateway transport selection */
+export declare const SESSION_MODE_STATELESS: "stateless";
+export declare const SESSION_MODE_STATEFUL: "stateful";
+export declare const SESSION_MODE_VALUES: readonly ["stateless", "stateful"];
+export type SessionMode = (typeof SESSION_MODE_VALUES)[number];
 //# sourceMappingURL=constants.d.ts.map

package/dist/server/shared/models/constants.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../shared/models/constants.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,eAAO,MAAM,mBAAmB,iBAAiB,CAAC"}
1	+ {"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../shared/models/constants.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAElD,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,EAAG,WAAoB,CAAC;AAC3D,eAAO,MAAM,qBAAqB,EAAG,UAAmB,CAAC;AACzD,eAAO,MAAM,mBAAmB,oCAA2D,CAAC;AAC5F,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/server/shared/models/constants.js CHANGED Viewed

@@ -1,2 +1,6 @@
 /** MCP Hub Lite gateway server name — used for system tool identification and gateway naming */
 export const MCP_HUB_LITE_SERVER = 'mcp-hub-lite';
+/** Session mode constants for gateway transport selection */
+export const SESSION_MODE_STATELESS = 'stateless';
+export const SESSION_MODE_STATEFUL = 'stateful';
+export const SESSION_MODE_VALUES = [SESSION_MODE_STATELESS, SESSION_MODE_STATEFUL];

package/dist/server/shared/models/server.model.d.ts CHANGED Viewed

@@ -232,6 +232,7 @@ export declare const LoggingConfigSchema: z.ZodDefault<z.ZodObject<{
     mcpCommDebug: z.ZodDefault<z.ZodBoolean>;
     apiDebug: z.ZodDefault<z.ZodBoolean>;
     gatewayDebug: z.ZodDefault<z.ZodBoolean>;
+    showTraceContext: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>>;
 export type LoggingConfig = z.infer<typeof LoggingConfigSchema>;
 /**
@@ -280,6 +281,7 @@ export declare const SystemConfigSchema: z.ZodObject<{
             mcpCommDebug: z.ZodDefault<z.ZodBoolean>;
             apiDebug: z.ZodDefault<z.ZodBoolean>;
             gatewayDebug: z.ZodDefault<z.ZodBoolean>;
+            showTraceContext: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
         startup: z.ZodOptional<z.ZodDefault<z.ZodObject<{
             startupDelay: z.ZodDefault<z.ZodNumber>;
@@ -287,6 +289,16 @@ export declare const SystemConfigSchema: z.ZodObject<{
             maxConnectRetries: z.ZodDefault<z.ZodNumber>;
             connectRetryDelay: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>>;
+        session: z.ZodOptional<z.ZodObject<{
+            sessionModeRules: z.ZodDefault<z.ZodOptional<z.ZodObject<{
+                stateful: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+                stateless: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+            }, z.core.$strip>>>;
+            defaultSessionMode: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+                stateless: "stateless";
+                stateful: "stateful";
+            }>>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     security: z.ZodDefault<z.ZodObject<{
         allowedNetworks: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -362,6 +374,8 @@ export declare const SystemConfigSchema: z.ZodObject<{
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type SystemConfig = z.infer<typeof SystemConfigSchema>;
+/** Session configuration extracted from SystemConfig.system.session */
+export type GatewayConfig = SystemConfig['system']['session'];
 /**
  * Server instance runtime configuration (for connection manager)
  * Contains runtime-specific fields like timestamp, pid, etc.

package/dist/server/shared/models/server.model.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"server.model.d.ts","sourceRoot":"","sources":["../../../../shared/models/server.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;~~AAIjD~~;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAID;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;CAI5B,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,OAAO,yBAAyB,CAAC,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;CAKhB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAI/E;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBAShC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAIhF;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;iBAe/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;iBAiBrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;iBAyB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;GAEG;AACH,eAAO,MAAM,mBAAmB~~;;;;;;;kBAgB5B~~,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;kBAgB7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAgB5B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;GAEG;AACH,eAAO,MAAM,kBAAkB~~;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmC7B~~,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;iBAEtC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAID;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,SAAS,CAAC,EAAE,CAAC,oBAAoB,GAAG;QAAE,MAAM,EAAE,YAAY,CAAA;KAAE,CAAC,EAAE,CAAC;IAChE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B"}
1	+ {"version":3,"file":"server.model.d.ts","sourceRoot":"","sources":["../../../../shared/models/server.model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAKjD;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAID;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;CAI5B,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,OAAO,yBAAyB,CAAC,CAAC;AAE7E;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;CAKhB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAI/E;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;iBAShC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;iBAItC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAIhF;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;iBAe/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;iBAiBrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;iBAyB/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;kBAkB5B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;kBAgB7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAgB5B,CAAC;AAEL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuD7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,uEAAuE;AACvE,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC;AAI9D;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;;;;;iBAEtC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAID;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QACN,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAID;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,SAAS,CAAC,EAAE,CAAC,oBAAoB,GAAG;QAAE,MAAM,EAAE,YAAY,CAAA;KAAE,CAAC,EAAE,CAAC;IAChE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B"}

package/dist/server/shared/models/server.model.js CHANGED Viewed

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { SESSION_MODE_VALUES, SESSION_MODE_STATEFUL } from './constants.js';
 // ====== v1.1 Configuration Schema (Server Template + Instance Model) ======
 /**
  * Instance selection strategy constants for multi-instance servers
@@ -155,7 +156,8 @@ export const LoggingConfigSchema = z
     jsonPretty: z.boolean().default(true),
     mcpCommDebug: z.boolean().default(false),
     apiDebug: z.boolean().default(false),
-    gatewayDebug: z.boolean().default(false)
+    gatewayDebug: z.boolean().default(false),
+    showTraceContext: z.boolean().default(true)
 })
     .default({
     level: 'info',
@@ -163,7 +165,8 @@ export const LoggingConfigSchema = z
     jsonPretty: true,
     mcpCommDebug: false,
     apiDebug: false,
-    gatewayDebug: false
+    gatewayDebug: false,
+    showTraceContext: true
 });
 // ====== Security Configuration Schema ======
 /**
@@ -222,7 +225,19 @@ export const SystemConfigSchema = z.object({
         theme: z.enum(['light', 'dark', 'system']).default('system'),
         logging: LoggingConfigSchema,
         // Using .optional() without .default() - code should use startup ?? {defaults} for default value
-        startup: StartupConfigSchema.optional()
+        startup: StartupConfigSchema.optional(),
+        session: z
+            .object({
+            sessionModeRules: z
+                .object({
+                stateful: z.array(z.string()).optional().default([]),
+                stateless: z.array(z.string()).optional().default([])
+            })
+                .optional()
+                .default({ stateful: [], stateless: [] }),
+            defaultSessionMode: z.enum(SESSION_MODE_VALUES).optional().default(SESSION_MODE_STATEFUL)
+        })
+            .optional()
     })
         .default({
         host: 'localhost',
@@ -235,13 +250,21 @@ export const SystemConfigSchema = z.object({
             jsonPretty: true,
             mcpCommDebug: false,
             apiDebug: false,
-            gatewayDebug: false
+            gatewayDebug: false,
+            showTraceContext: true
         },
         startup: {
             startupDelay: 3000,
             readyTimeout: 120000,
             maxConnectRetries: 3,
             connectRetryDelay: 5000
+        },
+        session: {
+            sessionModeRules: {
+                stateful: [],
+                stateless: []
+            },
+            defaultSessionMode: SESSION_MODE_STATEFUL
         }
     }),
     security: SecurityConfigSchema,

package/dist/server/src/api/mcp/gateway.d.ts CHANGED Viewed

@@ -1,12 +1,16 @@
 /**
- * MCP Gateway endpoint using Streamable HTTP Transport (stateless mode)
- * Handles all MCP protocol requests at /mcp endpoint
+ * MCP Gateway endpoint using stateful Streamable HTTP Transport.
+ *
+ * Each client session gets its own transport+server pair, identified by mcp-session-id header.
+ * POST without sessionId creates a new session.
+ * POST/GET/DELETE with sessionId routes to the existing session transport.
  */
-import type { FastifyInstance } from 'fastify';
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { SessionMode } from '../../../shared/models/constants.js';
 /**
- * MCP Gateway routes registration.
- *
- * @param fastify - Fastify instance to register routes on
+ * Resolves the effective session mode for a request.
+ * Priority: request header > UA keyword match > default (SESSION_MODE_STATEFUL).
  */
+export declare function resolveSessionMode(request: FastifyRequest): SessionMode;
 export declare function mcpGatewayRoutes(fastify: FastifyInstance): Promise<void>;
 //# sourceMappingURL=gateway.d.ts.map

package/dist/server/src/api/mcp/gateway.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../../../src/api/mcp/gateway.ts"],"names":[],"mappings":"AAAA~~;;;GAGG~~;AAEH,OAAO,KAAK,EAAE,eAAe,~~EAAgC~~,MAAM,SAAS,CAAC;~~AAU7E;;;;GAIG~~;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,eAAe,~~iBAwG9D~~"}
1	+ {"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../../../src/api/mcp/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAgB,MAAM,SAAS,CAAC;AAmB7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAK/D;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,WAAW,CAsBvE;AAgBD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,eAAe,iBAiP9D"}

package/dist/server/src/api/mcp/gateway.js CHANGED Viewed

@@ -1,93 +1,259 @@
 /**
- * MCP Gateway endpoint using Streamable HTTP Transport (stateless mode)
- * Handles all MCP protocol requests at /mcp endpoint
+ * MCP Gateway endpoint using stateful Streamable HTTP Transport.
+ *
+ * Each client session gets its own transport+server pair, identified by mcp-session-id header.
+ * POST without sessionId creates a new session.
+ * POST/GET/DELETE with sessionId routes to the existing session transport.
  */
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { randomUUID } from 'crypto';
 import { logger, LOG_MODULES } from '../../utils/logger/index.js';
 import { stringifyForLogging, getMcpCommDebugSetting, getGatewayDebugSetting } from '../../utils/json-utils.js';
 import { wrapReplyForDebug } from './debug-response-wrapper.js';
-import { createSessionTransport } from '../../services/gateway/global-transport.js';
+import { setupTransportLogging, createPerRequestTransport } from '../../services/gateway/global-transport.js';
+import { sessionManager } from '../../services/gateway/session-manager.js';
+import { gateway } from '../../services/gateway/gateway.service.js';
+import { runWithRequestContext } from '../../utils/request-context.js';
+import { configManager } from '../../config/config-manager.js';
+import { SESSION_MODE_STATEFUL, SESSION_MODE_STATELESS } from '../../../shared/models/constants.js';
+const MCP_SESSION_ID = 'mcp-session-id';
+const MCP_SESSION_MODE = 'x-mcp-session-mode';
 /**
- * MCP Gateway routes registration.
- *
- * @param fastify - Fastify instance to register routes on
+ * Resolves the effective session mode for a request.
+ * Priority: request header > UA keyword match > default (SESSION_MODE_STATEFUL).
+ */
+export function resolveSessionMode(request) {
+    // 1. Request header override (highest priority)
+    const header = request.headers[MCP_SESSION_MODE];
+    if (header === SESSION_MODE_STATELESS || header === SESSION_MODE_STATEFUL)
+        return header;
+    // 2. UA keyword matching (case-insensitive)
+    const ua = request.headers['user-agent'] || '';
+    const config = configManager.getConfig();
+    const rules = config?.system?.session?.sessionModeRules;
+    if (rules && ua) {
+        const uaLower = ua.toLowerCase();
+        for (const pattern of rules.stateless || []) {
+            if (uaLower.includes(pattern.toLowerCase()))
+                return SESSION_MODE_STATELESS;
+        }
+        for (const pattern of rules.stateful || []) {
+            if (uaLower.includes(pattern.toLowerCase()))
+                return SESSION_MODE_STATEFUL;
+        }
+    }
+    // 3. Default fallback
+    return config?.system?.session?.defaultSessionMode ?? SESSION_MODE_STATEFUL;
+}
+/**
+ * Inject trace context into transport so that deferred send/onmessage wrappers
+ * can read it when ALS context is lost (MCP SDK defers send() calls internally).
  */
+function injectTransportTrace(transport, sessionId, traceId) {
+    const ctx = transport;
+    ctx._traceSessionId = sessionId || undefined;
+    ctx._traceId = traceId;
+}
 export async function mcpGatewayRoutes(fastify) {
-    // GET /mcp — not used, this is a Streamable HTTP server
-    fastify.get('/mcp', (_request, reply) => {
-        reply.code(405).send({
-            jsonrpc: '2.0',
-            error: {
-                code: -32000,
-                message: 'GET /mcp is not supported. This is a Streamable HTTP MCP server — send POST /mcp with JSON-RPC requests directly.'
-            },
-            id: null
-        });
-    });
-    // POST /mcp — JSON-RPC request handling
-    const handlePostRequest = async (request, reply) => {
+    const logRequest = (request) => {
         if (getMcpCommDebugSetting()) {
-            let initialLogMsg = `MCP Gateway ${request.method} ${request.url}`;
-            initialLogMsg += `\nRequest headers: ${stringifyForLogging(request.headers)}`;
+            let msg = `MCP Gateway ${request.method} ${request.url}`;
+            msg += `\nRequest headers: ${stringifyForLogging(request.headers)}`;
             if (request.body) {
                 try {
-                    const preview = stringifyForLogging(request.body);
-                    initialLogMsg += `\nBody: ${preview}`;
+                    msg += `\nBody: ${stringifyForLogging(request.body)}`;
                 }
                 catch {
-                    initialLogMsg += `\nBody: [Unserializable]`;
+                    msg += '\nBody: [Unserializable]';
                 }
             }
-            logger.debug(initialLogMsg, LOG_MODULES.COMMUNICATION);
+            logger.debug(msg, LOG_MODULES.COMMUNICATION);
         }
-        reply.header('Content-Type', 'application/json');
-        wrapReplyForDebug(reply, '');
-        reply.hijack();
-        try {
-            if (getGatewayDebugSetting()) {
-                logger.debug(`About to create session transport for MCP request`, LOG_MODULES.GATEWAY);
-            }
-            const { transport, server } = await createSessionTransport();
-            if (getGatewayDebugSetting()) {
-                logger.debug(`Created session transport successfully, handling MCP request`, LOG_MODULES.GATEWAY);
-            }
-            try {
-                await transport.handleRequest(request.raw, reply.raw, request.body);
-                if (getGatewayDebugSetting()) {
-                    logger.debug(`Successfully handled MCP request with server: ${server.constructor.name}`, LOG_MODULES.GATEWAY);
+    };
+    const sendError = (reply, statusCode, code, message, id = null) => {
+        if (!reply.raw.headersSent) {
+            reply.raw.writeHead(statusCode, { 'Content-Type': 'application/json' });
+            reply.raw.end(JSON.stringify({ jsonrpc: '2.0', error: { code, message }, id }));
+        }
+    };
+    fastify.all('/mcp', {
+        bodyLimit: 10 * 1024 * 1024,
+        handler: async (request, reply) => {
+            const sessionId = request.headers[MCP_SESSION_ID] || '';
+            const traceId = randomUUID();
+            await runWithRequestContext({ sessionId: sessionId || undefined, traceId }, async () => {
+                logRequest(request);
+                reply.header('Content-Type', 'application/json');
+                wrapReplyForDebug(reply, sessionId);
+                reply.hijack();
+                const sessionMode = resolveSessionMode(request);
+                if (sessionMode === SESSION_MODE_STATELESS) {
+                    // Stateless mode: per-request transport, no session tracking, no SSE
+                    if (request.method !== 'POST') {
+                        sendError(reply, 405, -32000, 'GET/DELETE not supported in stateless session mode');
+                        return;
+                    }
+                    try {
+                        const { transport } = await createPerRequestTransport();
+                        injectTransportTrace(transport, undefined, traceId);
+                        await transport.handleRequest(request.raw, reply.raw, request.body);
+                        if (getGatewayDebugSetting()) {
+                            logger.debug('Handled MCP request in stateless mode', LOG_MODULES.GATEWAY);
+                        }
+                    }
+                    catch (error) {
+                        const msg = error instanceof Error ? error.message : String(error);
+                        const stack = error instanceof Error ? error.stack : 'No stack available';
+                        logger.error(`Stateless MCP error: ${msg}`, LOG_MODULES.GATEWAY);
+                        logger.error(`Stack: ${stack}`, LOG_MODULES.GATEWAY);
+                        if (!reply.raw.headersSent) {
+                            reply.raw.writeHead(500, { 'Content-Type': 'application/json' });
+                            reply.raw.end(JSON.stringify({
+                                jsonrpc: '2.0',
+                                error: { code: -32000, message: 'Internal Server Error' },
+                                id: null
+                            }));
+                        }
+                    }
+                    return;
                 }
-            }
-            finally {
-                if (getGatewayDebugSetting()) {
-                    logger.debug(`Session transport request completed, resources will be GC'd`, LOG_MODULES.GATEWAY);
+                try {
+                    // Existing session — route to its transport
+                    if (sessionId) {
+                        const session = sessionManager.getSession(sessionId);
+                        if (!session) {
+                            sendError(reply, 404, -32001, 'Session not found');
+                            return;
+                        }
+                        sessionManager.updateSessionMethod(sessionId, request.method);
+                        // Track SSE stream to prevent stale cleanup while GET is active
+                        if (request.method === 'GET') {
+                            sessionManager.markSseOpened(sessionId);
+                        }
+                        injectTransportTrace(session.transport, sessionId, traceId);
+                        await session.transport.handleRequest(request.raw, reply.raw, request.method === 'POST' ? request.body : undefined);
+                        if (request.method === 'GET') {
+                            sessionManager.markSseClosed(sessionId);
+                        }
+                        if (getGatewayDebugSetting()) {
+                            logger.debug(`Handled MCP ${request.method} for session ${sessionId}`, LOG_MODULES.GATEWAY);
+                        }
+                        return;
+                    }
+                    // New session — POST only (initialize)
+                    if (request.method !== 'POST') {
+                        sendError(reply, 400, -32000, 'Missing mcp-session-id header');
+                        return;
+                    }
+                    // Create new stateful transport for this session
+                    const transport = new StreamableHTTPServerTransport({
+                        sessionIdGenerator: () => randomUUID(),
+                        onsessionclosed: (id) => {
+                            sessionManager.removeSession(id);
+                        }
+                    });
+                    setupTransportLogging(transport);
+                    const server = gateway.createConnectionServer();
+                    await server.connect(transport);
+                    injectTransportTrace(transport, sessionId || undefined, traceId);
+                    await transport.handleRequest(request.raw, reply.raw, request.body);
+                    // After handleRequest completes, sessionId is available if init succeeded
+                    const newSessionId = transport.sessionId;
+                    if (newSessionId) {
+                        sessionManager.addSession(newSessionId, transport, server);
+                    }
+                    if (getGatewayDebugSetting()) {
+                        logger.debug(`Created new session ${newSessionId} via MCP POST`, LOG_MODULES.GATEWAY);
+                    }
                 }
-            }
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error ? error.message : String(error);
-            const errorStack = error instanceof Error ? error.stack : 'No stack available';
-            logger.error(`Error handling MCP request: ${errorMessage}`, LOG_MODULES.GATEWAY);
-            logger.error(`Full error stack: ${errorStack}`, LOG_MODULES.GATEWAY);
-            logger.error(`Request body that caused error: ${stringifyForLogging(request.body)}`, LOG_MODULES.GATEWAY);
-            if (!reply.raw.headersSent) {
-                reply.raw.writeHead(500, { 'Content-Type': 'application/json' });
-                reply.raw.end(JSON.stringify({
-                    jsonrpc: '2.0',
-                    error: {
-                        code: -32000,
-                        message: 'Internal Server Error'
-                    },
-                    id: null
-                }));
-            }
+                catch (error) {
+                    const errorMessage = error instanceof Error ? error.message : String(error);
+                    const errorStack = error instanceof Error ? error.stack : 'No stack available';
+                    logger.error(`Error handling MCP request: ${errorMessage}`, LOG_MODULES.GATEWAY);
+                    logger.error(`Full error stack: ${errorStack}`, LOG_MODULES.GATEWAY);
+                    logger.error(`Request body: ${stringifyForLogging(request.body)}`, LOG_MODULES.GATEWAY);
+                    if (!reply.raw.headersSent) {
+                        reply.raw.writeHead(500, { 'Content-Type': 'application/json' });
+                        reply.raw.end(JSON.stringify({
+                            jsonrpc: '2.0',
+                            error: { code: -32000, message: 'Internal Server Error' },
+                            id: null
+                        }));
+                    }
+                }
+            });
         }
-    };
-    fastify.post('/mcp', {
-        bodyLimit: 10 * 1024 * 1024, // 10MB limit
-        handler: handlePostRequest
     });
     // Subpath fallback
-    fastify.post('/mcp/*', {
+    fastify.all('/mcp/*', {
         bodyLimit: 10 * 1024 * 1024,
-        handler: handlePostRequest
+        handler: async (request, reply) => {
+            const sessionId = request.headers[MCP_SESSION_ID] || '';
+            const traceId = randomUUID();
+            await runWithRequestContext({ sessionId: sessionId || undefined, traceId }, async () => {
+                logRequest(request);
+                reply.header('Content-Type', 'application/json');
+                wrapReplyForDebug(reply, sessionId);
+                reply.hijack();
+                const sessionMode = resolveSessionMode(request);
+                if (sessionMode === SESSION_MODE_STATELESS) {
+                    if (request.method !== 'POST') {
+                        sendError(reply, 405, -32000, 'GET/DELETE not supported in stateless session mode');
+                        return;
+                    }
+                    try {
+                        const { transport } = await createPerRequestTransport();
+                        injectTransportTrace(transport, undefined, traceId);
+                        await transport.handleRequest(request.raw, reply.raw, request.body);
+                    }
+                    catch (error) {
+                        const msg = error instanceof Error ? error.message : String(error);
+                        logger.error(`Stateless MCP subpath error: ${msg}`, LOG_MODULES.GATEWAY);
+                        sendError(reply, 500, -32000, 'Internal Server Error');
+                    }
+                    return;
+                }
+                if (!sessionId) {
+                    if (!reply.raw.headersSent) {
+                        reply.raw.writeHead(400, { 'Content-Type': 'application/json' });
+                        reply.raw.end(JSON.stringify({
+                            jsonrpc: '2.0',
+                            error: { code: -32000, message: 'Missing mcp-session-id header' },
+                            id: null
+                        }));
+                    }
+                    return;
+                }
+                const session = sessionManager.getSession(sessionId);
+                if (!session) {
+                    if (!reply.raw.headersSent) {
+                        reply.raw.writeHead(404, { 'Content-Type': 'application/json' });
+                        reply.raw.end(JSON.stringify({
+                            jsonrpc: '2.0',
+                            error: { code: -32001, message: 'Session not found' },
+                            id: null
+                        }));
+                    }
+                    return;
+                }
+                try {
+                    sessionManager.updateSessionMethod(sessionId, request.method);
+                    injectTransportTrace(session.transport, sessionId, traceId);
+                    await session.transport.handleRequest(request.raw, reply.raw, request.method === 'POST' ? request.body : undefined);
+                }
+                catch (error) {
+                    const errorMessage = error instanceof Error ? error.message : String(error);
+                    logger.error(`Error handling MCP subpath request: ${errorMessage}`, LOG_MODULES.GATEWAY);
+                    if (!reply.raw.headersSent) {
+                        reply.raw.writeHead(500, { 'Content-Type': 'application/json' });
+                        reply.raw.end(JSON.stringify({
+                            jsonrpc: '2.0',
+                            error: { code: -32000, message: 'Internal Server Error' },
+                            id: null
+                        }));
+                    }
+                }
+            });
+        }
     });
 }

package/dist/server/src/api/web/hub-tools.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"hub-tools.d.ts","sourceRoot":"","sources":["../../../../../src/api/web/hub-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAqB1C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,eAAe,~~iBAmL~~/D"}
1	+ {"version":3,"file":"hub-tools.d.ts","sourceRoot":"","sources":["../../../../../src/api/web/hub-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAqB1C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,eAAe,iBAsL/D"}

package/dist/server/src/api/web/hub-tools.js CHANGED Viewed

@@ -168,13 +168,13 @@ export async function webHubToolsRoutes(fastify) {
     });
     // GET /web/hub-tools/search - Search tools across all connected servers
     fastify.get('/web/hub-tools/search', async (request, reply) => {
-        const { q } = request.query;
+        const { q, limit } = request.query;
         if (!q || typeof q !== 'string' || q.trim().length === 0) {
             return reply.code(400).send({
                 error: 'Bad Request',
                 message: 'Query parameter "q" is required'
             });
         }
-        return hubToolsService.searchTools(q.trim());
+        return hubToolsService.searchTools(q.trim(), limit);
     });
 }

package/dist/server/src/api/web/search.d.ts CHANGED Viewed

@@ -4,7 +4,7 @@ import { FastifyInstance } from 'fastify';
  *
  * Returns aggregated tools from the gateway cache with wrapped inputSchema
  * (including serverName, toolName, toolArgs, and requestOptions fields).
- * Uses straightforward string matching on tool name and description.
+ * Uses tokenized matching on tool name and description, sorted by match count.
  *
  * @param fastify - The Fastify instance to register routes on
  * @returns Promise that resolves when all routes are registered

package/dist/server/src/api/web/search.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../../../src/api/web/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;~~AAG1C~~;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,eAAe,iBAoD7D"}
1	+ {"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../../../src/api/web/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI1C;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,eAAe,iBAoD7D"}

package/dist/server/src/api/web/search.js CHANGED Viewed

@@ -1,33 +1,36 @@
 import { MCP_HUB_LITE_SERVER } from '../../../shared/models/constants.js';
+import { countMatchingTokens } from '../../utils/search-matcher.js';
 /**
  * Tool Search API Routes
  *
  * Returns aggregated tools from the gateway cache with wrapped inputSchema
  * (including serverName, toolName, toolArgs, and requestOptions fields).
- * Uses straightforward string matching on tool name and description.
+ * Uses tokenized matching on tool name and description, sorted by match count.
  *
  * @param fastify - The Fastify instance to register routes on
  * @returns Promise that resolves when all routes are registered
  */
 export async function webSearchRoutes(fastify) {
-    // GET /web/search - Search for tools with simple string matching
+    // GET /web/search - Search for tools with tokenized matching
     fastify.get('/web/search', async (request) => {
-        const { q, limit = 50 } = request.query;
+        const { q, limit = 5 } = request.query;
+        const effectiveLimit = Math.min(Math.max(1, limit), 10);
         // Dynamic import to avoid circular dependency at module init time
         const { getExternalGatewayTools } = await import('../../services/gateway/tool-list-generator.js');
         const gatewayTools = getExternalGatewayTools();
         const query = q?.toLowerCase() || '';
-        // Filter by search query
-        const queryMatched = gatewayTools.filter((tool) => {
+        // Score, filter, sort, and slice by token match count
+        const scored = gatewayTools
+            .map((tool) => {
             if (!query)
-                return true;
-            // Match against tool name (gateway-resolved name)
-            const nameMatch = tool.name.toLowerCase().includes(query);
-            // Match against description (contains "[From serverName] original description")
-            const descMatch = tool.description?.toLowerCase().includes(query);
-            return nameMatch || descMatch;
-        });
-        const mappedResults = queryMatched.map((tool) => {
+                return { tool, matchCount: Number.MAX_SAFE_INTEGER };
+            const matchCount = countMatchingTokens(query, [tool.name, tool.description || '']);
+            return { tool, matchCount };
+        })
+            .filter((item) => item.matchCount > 0)
+            .sort((a, b) => b.matchCount - a.matchCount)
+            .slice(0, effectiveLimit);
+        const results = scored.map(({ tool }) => {
             // Extract serverName from description format "[From serverName] ..."
             const descMatch = tool.description?.match(/^\[From\s+(.+?)\]/);
             const serverName = descMatch ? descMatch[1] : MCP_HUB_LITE_SERVER;
@@ -38,12 +41,11 @@ export async function webSearchRoutes(fastify) {
                 inputSchema: tool.inputSchema
             };
         });
-        const results = mappedResults.slice(0, limit);
         return {
             results,
             pagination: {
-                total: mappedResults.length,
-                limit,
+                total: results.length,
+                limit: effectiveLimit,
                 returned: results.length
             },
             metadata: {