@ruvector/rvf-mcp-server 0.1.3 → 0.1.5

package/README.md

@@ -33,6 +33,10 @@ npx @ruvector/rvf-mcp-server --transport stdio
 npx @ruvector/rvf-mcp-server --transport sse --port 3100
 ```
 
+The SSE transport binds `127.0.0.1` by default and serves one session at a time. It has no authentication; use `--host <address>` to bind elsewhere only behind your own auth proxy. Point clients at `http://127.0.0.1:3100/sse` (on dual-stack hosts `localhost` may resolve to `::1`; use `--host ::1` if your client needs it).
+
+> **Note:** stores are held in memory for the lifetime of the server process. The `path` argument is recorded as a label only; nothing is read from or written to disk.
+
 ## MCP Tools
 
 | Tool | Description |

package/dist/cli.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+/**
+ * RVF MCP Server CLI — start the server in stdio or SSE mode.
+ *
+ * Usage:
+ *   rvf-mcp-server                          # stdio (default)
+ *   rvf-mcp-server --transport stdio        # stdio explicitly
+ *   rvf-mcp-server --transport sse          # SSE on port 3100
+ *   rvf-mcp-server --transport sse --port 8080
+ */
+export {};

package/dist/cli.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * RVF MCP Server CLI — start the server in stdio or SSE mode.
+ *
+ * Usage:
+ *   rvf-mcp-server                          # stdio (default)
+ *   rvf-mcp-server --transport stdio        # stdio explicitly
+ *   rvf-mcp-server --transport sse          # SSE on port 3100
+ *   rvf-mcp-server --transport sse --port 8080
+ */
+import { createRequire } from 'node:module';
+import { createServer } from './transports.js';
+const { version } = createRequire(import.meta.url)('../package.json');
+function parseArgs() {
+    const args = process.argv.slice(2);
+    let transport = 'stdio';
+    let port = 3100;
+    let host;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === '--transport' || args[i] === '-t') {
+            const val = args[++i];
+            if (val === 'sse' || val === 'stdio') {
+                transport = val;
+            }
+            else {
+                console.error(`Unknown transport: ${val}. Use 'stdio' or 'sse'.`);
+                process.exit(1);
+            }
+        }
+        else if (args[i] === '--port' || args[i] === '-p') {
+            port = parseInt(args[++i], 10);
+            if (isNaN(port) || port < 1 || port > 65535) {
+                console.error('Port must be between 1 and 65535');
+                process.exit(1);
+            }
+        }
+        else if (args[i] === '--host' || args[i] === '-H') {
+            host = args[++i];
+            if (!host) {
+                console.error('--host requires an address');
+                process.exit(1);
+            }
+        }
+        else if (args[i] === '--help' || args[i] === '-h') {
+            console.log(`
+RVF MCP Server — Model Context Protocol server for RuVector Format
+
+Usage:
+  rvf-mcp-server [options]
+
+Options:
+  -t, --transport <stdio|sse>  Transport mode (default: stdio)
+  -p, --port <number>          SSE port (default: 3100)
+  -H, --host <address>         SSE bind address (default: 127.0.0.1; the SSE
+                               endpoint is unauthenticated, so only bind a
+                               public address behind your own auth proxy)
+  -h, --help                   Show this help message
+
+MCP Tools:
+  rvf_create_store   Create a new vector store
+  rvf_open_store     Open an existing store
+  rvf_close_store    Close a store
+  rvf_ingest         Insert vectors
+  rvf_query          k-NN similarity search
+  rvf_delete         Delete vectors by ID
+  rvf_delete_filter  Delete by metadata filter
+  rvf_compact        Reclaim dead space
+  rvf_status         Store status
+  rvf_list_stores    List open stores
+
+stdio config (.mcp.json):
+  {
+    "mcpServers": {
+      "rvf": {
+        "command": "node",
+        "args": ["dist/cli.js"]
+      }
+    }
+  }
+`);
+            process.exit(0);
+        }
+    }
+    return { transport, port, host };
+}
+async function main() {
+    const { transport, port, host } = parseArgs();
+    if (transport === 'stdio') {
+        // Suppress stdout logging in stdio mode (MCP uses stdout)
+        console.error('RVF MCP Server starting (stdio transport)...');
+    }
+    await createServer(transport, port, { version }, { host });
+    // Keep process alive
+    process.on('SIGINT', () => {
+        console.error('\nRVF MCP Server shutting down...');
+        process.exit(0);
+    });
+    process.on('SIGTERM', () => {
+        console.error('RVF MCP Server terminated.');
+        process.exit(0);
+    });
+}
+main().catch((err) => {
+    console.error('Fatal:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAwB,CAAC;AAE7F,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,SAAS,GAAoB,OAAO,CAAC;IACzC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,IAAwB,CAAC;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACtB,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACrC,SAAS,GAAG,GAAG,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,yBAAyB,CAAC,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAC5C,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCjB,CAAC,CAAC;YACG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IAE9C,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,0DAA0D;QAC1D,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3D,qBAAqB;IACrB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @ruvector/rvf-mcp-server — MCP server for the RuVector Format vector database.
+ *
+ * Exposes RVF store operations as MCP tools and resources over stdio or SSE transports.
+ *
+ * Tools:
+ *   - rvf_create_store   Create a new RVF vector store
+ *   - rvf_open_store     Open an existing RVF store
+ *   - rvf_close_store    Close an open store
+ *   - rvf_ingest         Insert vectors into a store
+ *   - rvf_query          k-NN vector similarity search
+ *   - rvf_delete         Delete vectors by ID
+ *   - rvf_delete_filter  Delete vectors matching a filter
+ *   - rvf_compact        Compact store to reclaim dead space
+ *   - rvf_status         Get store status (vectors, segments, file size)
+ *   - rvf_list_stores    List all open stores
+ *
+ * Resources:
+ *   - rvf://stores                    List of open stores
+ */
+export { RvfMcpServer, type RvfMcpServerOptions } from './server.js';
+export { createStdioServer, createSseServer, createServer, type SseServerOptions } from './transports.js';

package/dist/index.js

@@ -0,0 +1,23 @@
+/**
+ * @ruvector/rvf-mcp-server — MCP server for the RuVector Format vector database.
+ *
+ * Exposes RVF store operations as MCP tools and resources over stdio or SSE transports.
+ *
+ * Tools:
+ *   - rvf_create_store   Create a new RVF vector store
+ *   - rvf_open_store     Open an existing RVF store
+ *   - rvf_close_store    Close an open store
+ *   - rvf_ingest         Insert vectors into a store
+ *   - rvf_query          k-NN vector similarity search
+ *   - rvf_delete         Delete vectors by ID
+ *   - rvf_delete_filter  Delete vectors matching a filter
+ *   - rvf_compact        Compact store to reclaim dead space
+ *   - rvf_status         Get store status (vectors, segments, file size)
+ *   - rvf_list_stores    List all open stores
+ *
+ * Resources:
+ *   - rvf://stores                    List of open stores
+ */
+export { RvfMcpServer } from './server.js';
+export { createStdioServer, createSseServer, createServer } from './transports.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAA4B,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAyB,MAAM,iBAAiB,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,35 @@
+/**
+ * RVF MCP Server — core server implementation.
+ *
+ * Registers all RVF tools, resources, and prompts with the MCP SDK.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export interface RvfMcpServerOptions {
+    /** Server name shown to MCP clients. Default: 'rvf-mcp-server'. */
+    name?: string;
+    /** Server version. Default: '0.1.0'. */
+    version?: string;
+    /** Default vector dimensions for new stores. Default: 128. */
+    defaultDimensions?: number;
+    /** Maximum open stores. Default: 64. */
+    maxStores?: number;
+}
+/** Upper bounds on model-supplied sizes (tool arguments are untrusted). */
+export declare const LIMITS: {
+    readonly maxDimensions: 65536;
+    readonly maxK: 10000;
+    readonly maxBatch: 10000;
+};
+export declare class RvfMcpServer {
+    readonly mcp: McpServer;
+    private stores;
+    private nextId;
+    private opts;
+    constructor(options?: RvfMcpServerOptions);
+    private registerTools;
+    private registerResources;
+    private registerPrompts;
+    connect(transport: Parameters<McpServer['connect']>[0]): Promise<void>;
+    close(): Promise<void>;
+    get storeCount(): number;
+}

package/dist/server.js

@@ -0,0 +1,439 @@
+/**
+ * RVF MCP Server — core server implementation.
+ *
+ * Registers all RVF tools, resources, and prompts with the MCP SDK.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { z } from 'zod';
+/** Upper bounds on model-supplied sizes (tool arguments are untrusted). */
+export const LIMITS = {
+    maxDimensions: 65_536,
+    maxK: 10_000,
+    maxBatch: 10_000,
+};
+const vectorSchema = z.array(z.number()).max(LIMITS.maxDimensions);
+const metadataSchema = z.record(z.string(), z.union([z.string(), z.number(), z.boolean()]));
+// ─── Server ─────────────────────────────────────────────────────────────────
+export class RvfMcpServer {
+    mcp;
+    stores = new Map();
+    nextId = 1;
+    opts;
+    constructor(options) {
+        this.opts = {
+            name: options?.name ?? 'rvf-mcp-server',
+            version: options?.version ?? '0.1.0',
+            defaultDimensions: options?.defaultDimensions ?? 128,
+            maxStores: options?.maxStores ?? 64,
+        };
+        this.mcp = new McpServer({ name: this.opts.name, version: this.opts.version }, {
+            capabilities: {
+                resources: {},
+                tools: {},
+                prompts: {},
+            },
+        });
+        this.registerTools();
+        this.registerResources();
+        this.registerPrompts();
+    }
+    // ─── Tool Registration ──────────────────────────────────────────────────
+    registerTools() {
+        // ── rvf_create_store ──────────────────────────────────────────────────
+        this.mcp.tool('rvf_create_store', 'Create a new RVF vector store at the given path', {
+            path: z.string().describe('File path for the new .rvf store'),
+            dimensions: z.number().int().positive().max(LIMITS.maxDimensions).describe('Vector dimensionality'),
+            metric: z.enum(['l2', 'cosine', 'dotproduct']).default('l2').describe('Distance metric'),
+        }, async ({ path, dimensions, metric }) => {
+            if (this.stores.size >= this.opts.maxStores) {
+                return { content: [{ type: 'text', text: `Error: max stores (${this.opts.maxStores}) reached` }] };
+            }
+            const id = `store_${this.nextId++}`;
+            const handle = {
+                id,
+                path,
+                dimensions,
+                metric,
+                readOnly: false,
+                vectors: new Map(),
+                createdAt: Date.now(),
+            };
+            this.stores.set(id, handle);
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            storeId: id,
+                            path,
+                            dimensions,
+                            metric,
+                            status: 'created',
+                        }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_open_store ────────────────────────────────────────────────────
+        this.mcp.tool('rvf_open_store', 'Open an existing RVF store for reading and writing', {
+            path: z.string().describe('Path to existing .rvf file'),
+            readOnly: z.boolean().default(false).describe('Open in read-only mode'),
+        }, async ({ path, readOnly }) => {
+            if (this.stores.size >= this.opts.maxStores) {
+                return { content: [{ type: 'text', text: `Error: max stores (${this.opts.maxStores}) reached` }] };
+            }
+            const id = `store_${this.nextId++}`;
+            const handle = {
+                id,
+                path,
+                dimensions: this.opts.defaultDimensions,
+                metric: 'l2',
+                readOnly,
+                vectors: new Map(),
+                createdAt: Date.now(),
+            };
+            this.stores.set(id, handle);
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            storeId: id,
+                            path,
+                            readOnly,
+                            status: 'opened',
+                        }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_close_store ───────────────────────────────────────────────────
+        this.mcp.tool('rvf_close_store', 'Close an open RVF store, releasing the writer lock', {
+            storeId: z.string().describe('Store ID returned by create/open'),
+        }, async ({ storeId }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            this.stores.delete(storeId);
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ storeId, status: 'closed', path: handle.path }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_ingest ────────────────────────────────────────────────────────
+        this.mcp.tool('rvf_ingest', 'Insert vectors into an RVF store', {
+            storeId: z.string().describe('Target store ID'),
+            entries: z.array(z.object({
+                id: z.string().describe('Unique vector ID'),
+                vector: vectorSchema.describe('Embedding vector (must match store dimensions)'),
+                metadata: metadataSchema.optional()
+                    .describe('Optional metadata key-value pairs'),
+            })).max(LIMITS.maxBatch).describe('Vectors to insert'),
+        }, async ({ storeId, entries }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            if (handle.readOnly) {
+                return { content: [{ type: 'text', text: 'Error: store is read-only' }] };
+            }
+            let accepted = 0;
+            let rejected = 0;
+            for (const entry of entries) {
+                if (entry.vector.length !== handle.dimensions) {
+                    rejected++;
+                    continue;
+                }
+                handle.vectors.set(entry.id, {
+                    vector: entry.vector,
+                    metadata: entry.metadata,
+                });
+                accepted++;
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            accepted,
+                            rejected,
+                            totalVectors: handle.vectors.size,
+                        }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_query ─────────────────────────────────────────────────────────
+        this.mcp.tool('rvf_query', 'k-NN vector similarity search', {
+            storeId: z.string().describe('Store ID to query'),
+            vector: vectorSchema.describe('Query embedding vector'),
+            k: z.number().int().positive().max(LIMITS.maxK).default(10).describe('Number of nearest neighbors'),
+            filter: metadataSchema.optional()
+                .describe('Metadata filter (exact match on fields)'),
+        }, async ({ storeId, vector, k, filter }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            if (vector.length !== handle.dimensions) {
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `Error: dimension mismatch (query=${vector.length}, store=${handle.dimensions})`,
+                        }],
+                };
+            }
+            // Compute distances and sort
+            const results = [];
+            for (const [id, entry] of handle.vectors) {
+                // Apply metadata filter if provided
+                if (filter && entry.metadata) {
+                    let match = true;
+                    for (const [key, val] of Object.entries(filter)) {
+                        if (entry.metadata[key] !== val) {
+                            match = false;
+                            break;
+                        }
+                    }
+                    if (!match)
+                        continue;
+                }
+                else if (filter && !entry.metadata) {
+                    continue;
+                }
+                const dist = computeDistance(vector, entry.vector, handle.metric);
+                results.push({ id, distance: dist });
+            }
+            results.sort((a, b) => a.distance - b.distance);
+            const topK = results.slice(0, k);
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            results: topK,
+                            totalScanned: handle.vectors.size,
+                            metric: handle.metric,
+                        }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_delete ────────────────────────────────────────────────────────
+        this.mcp.tool('rvf_delete', 'Delete vectors by their IDs', {
+            storeId: z.string().describe('Store ID'),
+            ids: z.array(z.string()).max(LIMITS.maxBatch).describe('Vector IDs to delete'),
+        }, async ({ storeId, ids }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            if (handle.readOnly) {
+                return { content: [{ type: 'text', text: 'Error: store is read-only' }] };
+            }
+            let deleted = 0;
+            for (const id of ids) {
+                if (handle.vectors.delete(id))
+                    deleted++;
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ deleted, remaining: handle.vectors.size }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_delete_filter ─────────────────────────────────────────────────
+        this.mcp.tool('rvf_delete_filter', 'Delete vectors matching a metadata filter', {
+            storeId: z.string().describe('Store ID'),
+            filter: metadataSchema
+                .describe('Metadata filter — all matching vectors will be deleted'),
+        }, async ({ storeId, filter }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            if (handle.readOnly) {
+                return { content: [{ type: 'text', text: 'Error: store is read-only' }] };
+            }
+            let deleted = 0;
+            for (const [id, entry] of handle.vectors) {
+                if (!entry.metadata)
+                    continue;
+                let match = true;
+                for (const [key, val] of Object.entries(filter)) {
+                    if (entry.metadata[key] !== val) {
+                        match = false;
+                        break;
+                    }
+                }
+                if (match) {
+                    handle.vectors.delete(id);
+                    deleted++;
+                }
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ deleted, remaining: handle.vectors.size }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_compact ───────────────────────────────────────────────────────
+        this.mcp.tool('rvf_compact', 'Compact store to reclaim dead space from deleted vectors', {
+            storeId: z.string().describe('Store ID'),
+        }, async ({ storeId }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            storeId,
+                            compacted: true,
+                            totalVectors: handle.vectors.size,
+                        }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_status ────────────────────────────────────────────────────────
+        this.mcp.tool('rvf_status', 'Get the current status of an RVF store', {
+            storeId: z.string().describe('Store ID'),
+        }, async ({ storeId }) => {
+            const handle = this.stores.get(storeId);
+            if (!handle) {
+                return { content: [{ type: 'text', text: `Error: store ${storeId} not found` }] };
+            }
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({
+                            storeId: handle.id,
+                            path: handle.path,
+                            dimensions: handle.dimensions,
+                            metric: handle.metric,
+                            readOnly: handle.readOnly,
+                            totalVectors: handle.vectors.size,
+                            createdAt: new Date(handle.createdAt).toISOString(),
+                        }, null, 2),
+                    }],
+            };
+        });
+        // ── rvf_list_stores ───────────────────────────────────────────────────
+        this.mcp.tool('rvf_list_stores', 'List all open RVF stores', {}, async () => {
+            const list = Array.from(this.stores.values()).map((h) => ({
+                storeId: h.id,
+                path: h.path,
+                dimensions: h.dimensions,
+                metric: h.metric,
+                totalVectors: h.vectors.size,
+                readOnly: h.readOnly,
+            }));
+            return {
+                content: [{
+                        type: 'text',
+                        text: JSON.stringify({ stores: list, count: list.length }, null, 2),
+                    }],
+            };
+        });
+    }
+    // ─── Resource Registration ──────────────────────────────────────────────
+    registerResources() {
+        // List of open stores
+        this.mcp.resource('stores-list', 'rvf://stores', { description: 'List all open RVF stores and their status' }, async () => {
+            const list = Array.from(this.stores.values()).map((h) => ({
+                storeId: h.id,
+                path: h.path,
+                dimensions: h.dimensions,
+                totalVectors: h.vectors.size,
+            }));
+            return {
+                contents: [{
+                        uri: 'rvf://stores',
+                        mimeType: 'application/json',
+                        text: JSON.stringify({ stores: list }, null, 2),
+                    }],
+            };
+        });
+    }
+    // ─── Prompt Registration ────────────────────────────────────────────────
+    registerPrompts() {
+        this.mcp.prompt('rvf-search', 'Search for similar vectors in an RVF store', {
+            storeId: z.string().describe('Store ID to search'),
+            description: z.string().describe('Natural language description of what to search for'),
+        }, async ({ storeId, description }) => ({
+            messages: [{
+                    role: 'user',
+                    content: {
+                        type: 'text',
+                        text: `Search the RVF store "${storeId}" for vectors similar to: "${description}". ` +
+                            'Use the rvf_query tool to perform the search. If you need to create an embedding ' +
+                            'from the description first, generate a suitable vector representation.',
+                    },
+                }],
+        }));
+        this.mcp.prompt('rvf-ingest', 'Ingest data into an RVF store', {
+            storeId: z.string().describe('Store ID to ingest into'),
+            data: z.string().describe('Data to embed and ingest'),
+        }, async ({ storeId, data }) => ({
+            messages: [{
+                    role: 'user',
+                    content: {
+                        type: 'text',
+                        text: `Ingest the following data into RVF store "${storeId}": ${data}. ` +
+                            'Generate appropriate vector embeddings and metadata, then use the rvf_ingest tool.',
+                    },
+                }],
+        }));
+    }
+    // ─── Connection ─────────────────────────────────────────────────────────
+    async connect(transport) {
+        await this.mcp.connect(transport);
+    }
+    async close() {
+        // Close all stores
+        this.stores.clear();
+        await this.mcp.close();
+    }
+    get storeCount() {
+        return this.stores.size;
+    }
+}
+// ─── Distance Functions ─────────────────────────────────────────────────────
+function computeDistance(a, b, metric) {
+    switch (metric) {
+        case 'cosine':
+            return cosineDistance(a, b);
+        case 'dotproduct':
+            return -dotProduct(a, b);
+        default: // l2
+            return l2Distance(a, b);
+    }
+}
+function l2Distance(a, b) {
+    let sum = 0;
+    for (let i = 0; i < a.length; i++) {
+        const d = a[i] - b[i];
+        sum += d * d;
+    }
+    return sum;
+}
+function dotProduct(a, b) {
+    let sum = 0;
+    for (let i = 0; i < a.length; i++) {
+        sum += a[i] * b[i];
+    }
+    return sum;
+}
+function cosineDistance(a, b) {
+    let dot = 0;
+    let normA = 0;
+    let normB = 0;
+    for (let i = 0; i < a.length; i++) {
+        dot += a[i] * b[i];
+        normA += a[i] * a[i];
+        normB += b[i] * b[i];
+    }
+    const denom = Math.sqrt(normA) * Math.sqrt(normB);
+    if (denom === 0)
+        return 1;
+    return 1 - dot / denom;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,aAAa,EAAE,MAAM;IACrB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;CACR,CAAC;AAEX,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AACnE,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAY5F,+EAA+E;AAE/E,MAAM,OAAO,YAAY;IACd,GAAG,CAAY;IAChB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,MAAM,GAAG,CAAC,CAAC;IACX,IAAI,CAAgC;IAE5C,YAAY,OAA6B;QACvC,IAAI,CAAC,IAAI,GAAG;YACV,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,gBAAgB;YACvC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,OAAO;YACpC,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,GAAG;YACpD,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,EAAE;SACpC,CAAC;QAEF,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CACtB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EACpD;YACE,YAAY,EAAE;gBACZ,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,EAAE;aACZ;SACF,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,2EAA2E;IAEnE,aAAa;QACnB,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,kBAAkB,EAClB,iDAAiD,EACjD;YACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;YAC7D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACnG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;SACzF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sBAAsB,IAAI,CAAC,IAAI,CAAC,SAAS,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9G,CAAC;YAED,MAAM,EAAE,GAAG,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,MAAM,MAAM,GAAgB;gBAC1B,EAAE;gBACF,IAAI;gBACJ,UAAU;gBACV,MAAM;gBACN,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI,GAAG,EAAE;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAE5B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,EAAE;4BACX,IAAI;4BACJ,UAAU;4BACV,MAAM;4BACN,MAAM,EAAE,SAAS;yBAClB,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,gBAAgB,EAChB,oDAAoD,EACpD;YACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;YACvD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;SACxE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC5C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sBAAsB,IAAI,CAAC,IAAI,CAAC,SAAS,WAAW,EAAE,CAAC,EAAE,CAAC;YAC9G,CAAC;YAED,MAAM,EAAE,GAAG,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,MAAM,MAAM,GAAgB;gBAC1B,EAAE;gBACF,IAAI;gBACJ,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBACvC,MAAM,EAAE,IAAI;gBACZ,QAAQ;gBACR,OAAO,EAAE,IAAI,GAAG,EAAE;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAE5B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,EAAE;4BACX,IAAI;4BACJ,QAAQ;4BACR,MAAM,EAAE,QAAQ;yBACjB,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,iBAAiB,EACjB,oDAAoD,EACpD;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;SACjE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBAChF,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,YAAY,EACZ,kCAAkC,EAClC;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACxB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAC3C,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,gDAAgD,CAAC;gBAC/E,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;qBAChC,QAAQ,CAAC,mCAAmC,CAAC;aACjD,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;SACvD,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC;YACrF,CAAC;YAED,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;YAEjB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC9C,QAAQ,EAAE,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;gBACH,QAAQ,EAAE,CAAC;YACb,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,QAAQ;4BACR,QAAQ;4BACR,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;yBAClC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,WAAW,EACX,+BAA+B,EAC/B;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACjD,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACvD,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YACnG,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;iBAC9B,QAAQ,CAAC,yCAAyC,CAAC;SACvD,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,oCAAoC,MAAM,CAAC,MAAM,WAAW,MAAM,CAAC,UAAU,GAAG;yBACvF,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,MAAM,OAAO,GAA4C,EAAE,CAAC;YAE5D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,oCAAoC;gBACpC,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC7B,IAAI,KAAK,GAAG,IAAI,CAAC;oBACjB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;wBAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;4BAChC,KAAK,GAAG,KAAK,CAAC;4BACd,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,CAAC,KAAK;wBAAE,SAAS;gBACvB,CAAC;qBAAM,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACrC,SAAS;gBACX,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAEjC,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,IAAI;4BACb,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;4BACjC,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,YAAY,EACZ,6BAA6B,EAC7B;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;YACxC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;SAC/E,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC;YACrF,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,OAAO,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3E,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,mBAAmB,EACnB,2CAA2C,EAC3C;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;YACxC,MAAM,EAAE,cAAc;iBACnB,QAAQ,CAAC,wDAAwD,CAAC;SACtE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,EAAE,CAAC;YACrF,CAAC;YAED,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC,KAAK,CAAC,QAAQ;oBAAE,SAAS;gBAC9B,IAAI,KAAK,GAAG,IAAI,CAAC;gBACjB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;wBAChC,KAAK,GAAG,KAAK,CAAC;wBACd,MAAM;oBACR,CAAC;gBACH,CAAC;gBACD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3E,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,aAAa,EACb,0DAA0D,EAC1D;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;SACzC,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO;4BACP,SAAS,EAAE,IAAI;4BACf,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;yBAClC,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,YAAY,EACZ,wCAAwC,EACxC;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;SACzC,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gBAAgB,OAAO,YAAY,EAAE,CAAC,EAAE,CAAC;YAC7F,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,OAAO,EAAE,MAAM,CAAC,EAAE;4BAClB,IAAI,EAAE,MAAM,CAAC,IAAI;4BACjB,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;4BACjC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;yBACpD,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,iBAAiB,EACjB,0BAA0B,EAC1B,EAAE,EACF,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,CAAC,CAAC,EAAE;gBACb,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;gBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBACpE,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAEnE,iBAAiB;QACvB,sBAAsB;QACtB,IAAI,CAAC,GAAG,CAAC,QAAQ,CACf,aAAa,EACb,cAAc,EACd,EAAE,WAAW,EAAE,2CAA2C,EAAE,EAC5D,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,CAAC,CAAC,EAAE;gBACb,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;aAC7B,CAAC,CAAC,CAAC;YAEJ,OAAO;gBACL,QAAQ,EAAE,CAAC;wBACT,GAAG,EAAE,cAAc;wBACnB,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;qBAChD,CAAC;aACH,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAEnE,eAAe;QACrB,IAAI,CAAC,GAAG,CAAC,MAAM,CACb,YAAY,EACZ,4CAA4C,EAC5C;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;SACvF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YACnC,QAAQ,EAAE,CAAC;oBACT,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,yBAAyB,OAAO,8BAA8B,WAAW,KAAK;4BAClF,mFAAmF;4BACnF,wEAAwE;qBAC3E;iBACF,CAAC;SACH,CAAC,CACH,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,MAAM,CACb,YAAY,EACZ,+BAA+B,EAC/B;YACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;YACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SACtD,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,CAAC;oBACT,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,6CAA6C,OAAO,MAAM,IAAI,IAAI;4BACtE,oFAAoF;qBACvF;iBACF,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;IAED,2EAA2E;IAE3E,KAAK,CAAC,OAAO,CAAC,SAA8C;QAC1D,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,mBAAmB;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;CACF;AAED,+EAA+E;AAE/E,SAAS,eAAe,CAAC,CAAW,EAAE,CAAW,EAAE,MAAc;IAC/D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,KAAK,YAAY;YACf,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,SAAS,KAAK;YACZ,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAW,EAAE,CAAW;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAW,EAAE,CAAW;IAC1C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,CAAW,EAAE,CAAW;IAC9C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC;AACzB,CAAC"}

package/dist/transports.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Transport factory functions for stdio and SSE modes.
+ */
+import { RvfMcpServer, type RvfMcpServerOptions } from './server.js';
+/**
+ * Create and start an RVF MCP server over stdio transport.
+ *
+ * Usage in .mcp.json:
+ * ```json
+ * {
+ *   "mcpServers": {
+ *     "rvf": {
+ *       "command": "node",
+ *       "args": ["dist/cli.js", "--transport", "stdio"]
+ *     }
+ *   }
+ * }
+ * ```
+ */
+export declare function createStdioServer(options?: RvfMcpServerOptions): Promise<RvfMcpServer>;
+/** Options for the SSE transport. */
+export interface SseServerOptions {
+    /**
+     * Interface to bind. Default: '127.0.0.1' (loopback only). The SSE
+     * endpoint has no authentication, so binding a non-loopback address
+     * exposes every tool to anyone who can reach the port.
+     */
+    host?: string;
+}
+/**
+ * Create and start an RVF MCP server over SSE transport.
+ *
+ * Starts an Express HTTP server with SSE endpoint at `/sse`
+ * and message endpoint at `/messages`. One SSE session is served at a
+ * time; POSTs are routed by the `sessionId` the server hands out.
+ *
+ * @param port    HTTP port. Default: 3100.
+ * @param options Server options.
+ * @param sseOptions Transport options (bind host).
+ */
+export declare function createSseServer(port?: number, options?: RvfMcpServerOptions, sseOptions?: SseServerOptions): Promise<RvfMcpServer>;
+/**
+ * Create a server with the specified transport type.
+ */
+export declare function createServer(transport?: 'stdio' | 'sse', port?: number, options?: RvfMcpServerOptions, sseOptions?: SseServerOptions): Promise<RvfMcpServer>;

package/dist/transports.js

@@ -0,0 +1,134 @@
+/**
+ * Transport factory functions for stdio and SSE modes.
+ */
+import { RvfMcpServer } from './server.js';
+/**
+ * Create and start an RVF MCP server over stdio transport.
+ *
+ * Usage in .mcp.json:
+ * ```json
+ * {
+ *   "mcpServers": {
+ *     "rvf": {
+ *       "command": "node",
+ *       "args": ["dist/cli.js", "--transport", "stdio"]
+ *     }
+ *   }
+ * }
+ * ```
+ */
+export async function createStdioServer(options) {
+    const { StdioServerTransport } = await import('@modelcontextprotocol/sdk/server/stdio.js');
+    const server = new RvfMcpServer(options);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    return server;
+}
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1']);
+/**
+ * Create and start an RVF MCP server over SSE transport.
+ *
+ * Starts an Express HTTP server with SSE endpoint at `/sse`
+ * and message endpoint at `/messages`. One SSE session is served at a
+ * time; POSTs are routed by the `sessionId` the server hands out.
+ *
+ * @param port    HTTP port. Default: 3100.
+ * @param options Server options.
+ * @param sseOptions Transport options (bind host).
+ */
+export async function createSseServer(port = 3100, options, sseOptions) {
+    const { SSEServerTransport } = await import('@modelcontextprotocol/sdk/server/sse.js');
+    const express = (await import('express')).default;
+    const host = sseOptions?.host ?? '127.0.0.1';
+    const loopback = LOOPBACK_HOSTS.has(host);
+    // DNS-rebinding protection: on loopback, only accept our own Host header.
+    const hostLabel = host.includes(':') ? `[${host}]` : host;
+    const transportOptions = loopback
+        ? {
+            enableDnsRebindingProtection: true,
+            allowedHosts: ['127.0.0.1', 'localhost', '[::1]'].map((h) => `${h}:${port}`),
+        }
+        : undefined;
+    const app = express();
+    const server = new RvfMcpServer(options);
+    let sseTransport = null;
+    // SSE endpoint — client connects here
+    app.get('/sse', async (req, res) => {
+        // The SDK checks Host only on POST; check it here too so a rebound page
+        // cannot occupy the single session slot.
+        if (transportOptions && !transportOptions.allowedHosts.includes(req.headers.host ?? '')) {
+            res.status(403).json({ error: 'Invalid Host header' });
+            return;
+        }
+        if (sseTransport) {
+            // A second connect would otherwise replace the live session and
+            // leave the first client (and the server) wired to a dead transport.
+            res.status(409).json({ error: 'An SSE session is already active' });
+            return;
+        }
+        const transport = new SSEServerTransport('/messages', res, transportOptions);
+        sseTransport = transport;
+        res.on('close', () => {
+            if (sseTransport === transport)
+                sseTransport = null;
+        });
+        try {
+            await server.connect(transport);
+        }
+        catch (err) {
+            if (sseTransport === transport)
+                sseTransport = null;
+            console.error('SSE connection error:', err instanceof Error ? err.message : err);
+            if (!res.headersSent)
+                res.status(500).end();
+        }
+    });
+    // Message endpoint — client sends JSON-RPC here
+    app.post('/messages', async (req, res) => {
+        const transport = sseTransport;
+        if (!transport || req.query.sessionId !== transport.sessionId) {
+            res.status(404).json({ error: 'Unknown or expired session' });
+            return;
+        }
+        try {
+            // Throws (after writing a 500) if the stream closed meanwhile; an
+            // unhandled rejection here would terminate the process.
+            await transport.handlePostMessage(req, res);
+        }
+        catch (err) {
+            if (!res.headersSent)
+                res.status(500).end();
+        }
+    });
+    // Health check
+    app.get('/health', (_req, res) => {
+        res.json({
+            status: 'ok',
+            server: options?.name ?? 'rvf-mcp-server',
+            stores: server.storeCount,
+        });
+    });
+    await new Promise((resolve, reject) => {
+        const http = app.listen(port, host, () => resolve());
+        http.once('error', reject);
+    });
+    const base = `http://${hostLabel}:${port}`;
+    console.error(`RVF MCP Server (SSE) listening on ${base}`);
+    console.error(`  SSE endpoint:     ${base}/sse`);
+    console.error(`  Message endpoint: ${base}/messages`);
+    console.error(`  Health check:     ${base}/health`);
+    if (!loopback) {
+        console.error('  WARNING: bound to a non-loopback address with no authentication.');
+    }
+    return server;
+}
+/**
+ * Create a server with the specified transport type.
+ */
+export async function createServer(transport = 'stdio', port = 3100, options, sseOptions) {
+    if (transport === 'sse') {
+        return createSseServer(port, options, sseOptions);
+    }
+    return createStdioServer(options);
+}
+//# sourceMappingURL=transports.js.map

package/dist/transports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transports.js","sourceRoot":"","sources":["../src/transports.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAA4B,MAAM,aAAa,CAAC;AAErE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA6B;IAE7B,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAC3C,2CAA2C,CAC5C,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAI,GAAG,IAAI,EACX,OAA6B,EAC7B,UAA6B;IAE7B,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CACzC,yCAAyC,CAC1C,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAElD,MAAM,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,WAAW,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,0EAA0E;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,gBAAgB,GAAG,QAAQ;QAC/B,CAAC,CAAC;YACE,4BAA4B,EAAE,IAAI;YAClC,YAAY,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SAC7E;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,YAAY,GAAmD,IAAI,CAAC;IAExE,sCAAsC;IACtC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,wEAAwE;QACxE,yCAAyC;QACzC,IAAI,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,gEAAgE;YAChE,qEAAqE;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,WAAW,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC7E,YAAY,GAAG,SAAS,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,IAAI,YAAY,KAAK,SAAS;gBAAE,YAAY,GAAG,IAAI,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,YAAY,KAAK,SAAS;gBAAE,YAAY,GAAG,IAAI,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,SAAS,GAAG,YAAY,CAAC;QAC/B,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,kEAAkE;YAClE,wDAAwD;YACxD,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,eAAe;IACf,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,gBAAgB;YACzC,MAAM,EAAE,MAAM,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,SAAS,IAAI,IAAI,EAAE,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,MAAM,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAA6B,OAAO,EACpC,IAAI,GAAG,IAAI,EACX,OAA6B,EAC7B,UAA6B;IAE7B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ruvector/rvf-mcp-server",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "MCP server for RuVector Format (RVF) vector database — stdio and SSE transports",
   "type": "module",
   "main": "dist/index.js",
@@ -14,12 +14,18 @@
       "types": "./dist/index.d.ts"
     }
   },
+  "files": [
+    "dist",
+    "src",
+    "README.md"
+  ],
   "scripts": {
     "build": "tsc",
     "start": "node dist/cli.js",
     "start:stdio": "node dist/cli.js --transport stdio",
     "start:sse": "node dist/cli.js --transport sse --port 3100",
-    "dev": "tsc --watch"
+    "dev": "tsc --watch",
+    "test": "tsc && node --test --test-force-exit test/server.test.mjs test/sse.test.mjs"
   },
   "keywords": [
     "rvf",
@@ -33,10 +39,9 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "@ruvector/rvf": "^0.1.2",
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "express": "^4.18.0",
-    "zod": "^3.22.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/express": "^4.17.21",

package/src/cli.ts

@@ -9,12 +9,16 @@
  *   rvf-mcp-server --transport sse --port 8080
  */
 
+import { createRequire } from 'node:module';
 import { createServer } from './transports.js';
 
-function parseArgs(): { transport: 'stdio' | 'sse'; port: number } {
+const { version } = createRequire(import.meta.url)('../package.json') as { version: string };
+
+function parseArgs(): { transport: 'stdio' | 'sse'; port: number; host?: string } {
   const args = process.argv.slice(2);
   let transport: 'stdio' | 'sse' = 'stdio';
   let port = 3100;
+  let host: string | undefined;
 
   for (let i = 0; i < args.length; i++) {
     if (args[i] === '--transport' || args[i] === '-t') {
@@ -31,6 +35,12 @@ function parseArgs(): { transport: 'stdio' | 'sse'; port: number } {
         console.error('Port must be between 1 and 65535');
         process.exit(1);
       }
+    } else if (args[i] === '--host' || args[i] === '-H') {
+      host = args[++i];
+      if (!host) {
+        console.error('--host requires an address');
+        process.exit(1);
+      }
     } else if (args[i] === '--help' || args[i] === '-h') {
       console.log(`
 RVF MCP Server — Model Context Protocol server for RuVector Format
@@ -41,6 +51,9 @@ Usage:
 Options:
   -t, --transport <stdio|sse>  Transport mode (default: stdio)
   -p, --port <number>          SSE port (default: 3100)
+  -H, --host <address>         SSE bind address (default: 127.0.0.1; the SSE
+                               endpoint is unauthenticated, so only bind a
+                               public address behind your own auth proxy)
   -h, --help                   Show this help message
 
 MCP Tools:
@@ -69,18 +82,18 @@ stdio config (.mcp.json):
     }
   }
 
-  return { transport, port };
+  return { transport, port, host };
 }
 
 async function main(): Promise<void> {
-  const { transport, port } = parseArgs();
+  const { transport, port, host } = parseArgs();
 
   if (transport === 'stdio') {
     // Suppress stdout logging in stdio mode (MCP uses stdout)
     console.error('RVF MCP Server starting (stdio transport)...');
   }
 
-  await createServer(transport, port);
+  await createServer(transport, port, { version }, { host });
 
   // Keep process alive
   process.on('SIGINT', () => {

package/src/index.ts

@@ -17,8 +17,7 @@
  *
  * Resources:
  *   - rvf://stores                    List of open stores
- *   - rvf://stores/{storeId}/status   Status of a specific store
  */
 
 export { RvfMcpServer, type RvfMcpServerOptions } from './server.js';
-export { createStdioServer, createSseServer, createServer } from './transports.js';
+export { createStdioServer, createSseServer, createServer, type SseServerOptions } from './transports.js';

package/src/server.ts

@@ -20,6 +20,16 @@ export interface RvfMcpServerOptions {
   maxStores?: number;
 }
 
+/** Upper bounds on model-supplied sizes (tool arguments are untrusted). */
+export const LIMITS = {
+  maxDimensions: 65_536,
+  maxK: 10_000,
+  maxBatch: 10_000,
+} as const;
+
+const vectorSchema = z.array(z.number()).max(LIMITS.maxDimensions);
+const metadataSchema = z.record(z.string(), z.union([z.string(), z.number(), z.boolean()]));
+
 interface StoreHandle {
   id: string;
   path: string;
@@ -71,7 +81,7 @@ export class RvfMcpServer {
       'Create a new RVF vector store at the given path',
       {
         path: z.string().describe('File path for the new .rvf store'),
-        dimensions: z.number().int().positive().describe('Vector dimensionality'),
+        dimensions: z.number().int().positive().max(LIMITS.maxDimensions).describe('Vector dimensionality'),
         metric: z.enum(['l2', 'cosine', 'dotproduct']).default('l2').describe('Distance metric'),
       },
       async ({ path, dimensions, metric }) => {
@@ -175,10 +185,10 @@ export class RvfMcpServer {
         storeId: z.string().describe('Target store ID'),
         entries: z.array(z.object({
           id: z.string().describe('Unique vector ID'),
-          vector: z.array(z.number()).describe('Embedding vector (must match store dimensions)'),
-          metadata: z.record(z.union([z.string(), z.number(), z.boolean()])).optional()
+          vector: vectorSchema.describe('Embedding vector (must match store dimensions)'),
+          metadata: metadataSchema.optional()
             .describe('Optional metadata key-value pairs'),
-        })).describe('Vectors to insert'),
+        })).max(LIMITS.maxBatch).describe('Vectors to insert'),
       },
       async ({ storeId, entries }) => {
         const handle = this.stores.get(storeId);
@@ -223,9 +233,9 @@ export class RvfMcpServer {
       'k-NN vector similarity search',
       {
         storeId: z.string().describe('Store ID to query'),
-        vector: z.array(z.number()).describe('Query embedding vector'),
-        k: z.number().int().positive().default(10).describe('Number of nearest neighbors'),
-        filter: z.record(z.union([z.string(), z.number(), z.boolean()])).optional()
+        vector: vectorSchema.describe('Query embedding vector'),
+        k: z.number().int().positive().max(LIMITS.maxK).default(10).describe('Number of nearest neighbors'),
+        filter: metadataSchema.optional()
           .describe('Metadata filter (exact match on fields)'),
       },
       async ({ storeId, vector, k, filter }) => {
@@ -287,7 +297,7 @@ export class RvfMcpServer {
       'Delete vectors by their IDs',
       {
         storeId: z.string().describe('Store ID'),
-        ids: z.array(z.string()).describe('Vector IDs to delete'),
+        ids: z.array(z.string()).max(LIMITS.maxBatch).describe('Vector IDs to delete'),
       },
       async ({ storeId, ids }) => {
         const handle = this.stores.get(storeId);
@@ -318,7 +328,7 @@ export class RvfMcpServer {
       'Delete vectors matching a metadata filter',
       {
         storeId: z.string().describe('Store ID'),
-        filter: z.record(z.union([z.string(), z.number(), z.boolean()]))
+        filter: metadataSchema
           .describe('Metadata filter — all matching vectors will be deleted'),
       },
       async ({ storeId, filter }) => {
@@ -469,10 +479,10 @@ export class RvfMcpServer {
     this.mcp.prompt(
       'rvf-search',
       'Search for similar vectors in an RVF store',
-      [
-        { name: 'storeId', description: 'Store ID to search', required: true },
-        { name: 'description', description: 'Natural language description of what to search for', required: true },
-      ],
+      {
+        storeId: z.string().describe('Store ID to search'),
+        description: z.string().describe('Natural language description of what to search for'),
+      },
       async ({ storeId, description }) => ({
         messages: [{
           role: 'user' as const,
@@ -489,10 +499,10 @@ export class RvfMcpServer {
     this.mcp.prompt(
       'rvf-ingest',
       'Ingest data into an RVF store',
-      [
-        { name: 'storeId', description: 'Store ID to ingest into', required: true },
-        { name: 'data', description: 'Data to embed and ingest', required: true },
-      ],
+      {
+        storeId: z.string().describe('Store ID to ingest into'),
+        data: z.string().describe('Data to embed and ingest'),
+      },
       async ({ storeId, data }) => ({
         messages: [{
           role: 'user' as const,

package/src/transports.ts

@@ -32,44 +32,97 @@ export async function createStdioServer(
   return server;
 }
 
+/** Options for the SSE transport. */
+export interface SseServerOptions {
+  /**
+   * Interface to bind. Default: '127.0.0.1' (loopback only). The SSE
+   * endpoint has no authentication, so binding a non-loopback address
+   * exposes every tool to anyone who can reach the port.
+   */
+  host?: string;
+}
+
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1']);
+
 /**
  * Create and start an RVF MCP server over SSE transport.
  *
  * Starts an Express HTTP server with SSE endpoint at `/sse`
- * and message endpoint at `/messages`.
+ * and message endpoint at `/messages`. One SSE session is served at a
+ * time; POSTs are routed by the `sessionId` the server hands out.
  *
  * @param port    HTTP port. Default: 3100.
  * @param options Server options.
+ * @param sseOptions Transport options (bind host).
  */
 export async function createSseServer(
   port = 3100,
   options?: RvfMcpServerOptions,
+  sseOptions?: SseServerOptions,
 ): Promise<RvfMcpServer> {
   const { SSEServerTransport } = await import(
     '@modelcontextprotocol/sdk/server/sse.js'
   );
   const express = (await import('express')).default;
 
+  const host = sseOptions?.host ?? '127.0.0.1';
+  const loopback = LOOPBACK_HOSTS.has(host);
+  // DNS-rebinding protection: on loopback, only accept our own Host header.
+  const hostLabel = host.includes(':') ? `[${host}]` : host;
+  const transportOptions = loopback
+    ? {
+        enableDnsRebindingProtection: true,
+        allowedHosts: ['127.0.0.1', 'localhost', '[::1]'].map((h) => `${h}:${port}`),
+      }
+    : undefined;
+
   const app = express();
   const server = new RvfMcpServer(options);
 
   let sseTransport: InstanceType<typeof SSEServerTransport> | null = null;
 
   // SSE endpoint — client connects here
-  app.get('/sse', (req, res) => {
-    sseTransport = new SSEServerTransport('/messages', res);
-    server.connect(sseTransport).catch((err) => {
-      console.error('SSE connection error:', err);
+  app.get('/sse', async (req, res) => {
+    // The SDK checks Host only on POST; check it here too so a rebound page
+    // cannot occupy the single session slot.
+    if (transportOptions && !transportOptions.allowedHosts.includes(req.headers.host ?? '')) {
+      res.status(403).json({ error: 'Invalid Host header' });
+      return;
+    }
+    if (sseTransport) {
+      // A second connect would otherwise replace the live session and
+      // leave the first client (and the server) wired to a dead transport.
+      res.status(409).json({ error: 'An SSE session is already active' });
+      return;
+    }
+    const transport = new SSEServerTransport('/messages', res, transportOptions);
+    sseTransport = transport;
+    res.on('close', () => {
+      if (sseTransport === transport) sseTransport = null;
     });
+    try {
+      await server.connect(transport);
+    } catch (err) {
+      if (sseTransport === transport) sseTransport = null;
+      console.error('SSE connection error:', err instanceof Error ? err.message : err);
+      if (!res.headersSent) res.status(500).end();
+    }
   });
 
   // Message endpoint — client sends JSON-RPC here
-  app.post('/messages', (req, res) => {
-    if (!sseTransport) {
-      res.status(503).json({ error: 'No SSE connection' });
+  app.post('/messages', async (req, res) => {
+    const transport = sseTransport;
+    if (!transport || req.query.sessionId !== transport.sessionId) {
+      res.status(404).json({ error: 'Unknown or expired session' });
       return;
     }
-    sseTransport.handlePostMessage(req, res);
+    try {
+      // Throws (after writing a 500) if the stream closed meanwhile; an
+      // unhandled rejection here would terminate the process.
+      await transport.handlePostMessage(req, res);
+    } catch (err) {
+      if (!res.headersSent) res.status(500).end();
+    }
   });
 
   // Health check
@@ -81,12 +134,18 @@ export async function createSseServer(
     });
   });
 
-  app.listen(port, () => {
-    console.error(`RVF MCP Server (SSE) listening on http://localhost:${port}`);
-    console.error(`  SSE endpoint:     http://localhost:${port}/sse`);
-    console.error(`  Message endpoint: http://localhost:${port}/messages`);
-    console.error(`  Health check:     http://localhost:${port}/health`);
+  await new Promise<void>((resolve, reject) => {
+    const http = app.listen(port, host, () => resolve());
+    http.once('error', reject);
   });
+  const base = `http://${hostLabel}:${port}`;
+  console.error(`RVF MCP Server (SSE) listening on ${base}`);
+  console.error(`  SSE endpoint:     ${base}/sse`);
+  console.error(`  Message endpoint: ${base}/messages`);
+  console.error(`  Health check:     ${base}/health`);
+  if (!loopback) {
+    console.error('  WARNING: bound to a non-loopback address with no authentication.');
+  }
 
   return server;
 }
@@ -98,9 +157,10 @@ export async function createServer(
   transport: 'stdio' | 'sse' = 'stdio',
   port = 3100,
   options?: RvfMcpServerOptions,
+  sseOptions?: SseServerOptions,
 ): Promise<RvfMcpServer> {
   if (transport === 'sse') {
-    return createSseServer(port, options);
+    return createSseServer(port, options, sseOptions);
   }
   return createStdioServer(options);
 }

package/.claude-flow/.trend-cache.json

@@ -1 +0,0 @@
-{"intelligence":50,"timestamp":1771137103350}

package/.claude-flow/data/pending-insights.jsonl

@@ -1,2 +0,0 @@
-{"type":"edit","file":"unknown","timestamp":1771087071610,"sessionId":null}
-{"type":"edit","file":"unknown","timestamp":1771137042486,"sessionId":null}

package/tsconfig.json

@@ -1,19 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "lib": ["ES2022"],
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "declaration": true,
-    "sourceMap": true,
-    "resolveJsonModule": true
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist"]
-}