@winstonsayno/mcp-gateway 0.0.0-stage → 0.3.0

package/dist/gateway/api.js

@@ -0,0 +1,280 @@
+/**
+ * Gateway HTTP API
+ * Exposes REST endpoints for tool invocation, server management, and monitoring
+ */
+import express from 'express';
+import { ERR_TIMEOUT } from '../proxy/index.js';
+import { createAuthMiddleware } from '../auth/middleware.js';
+import { createRateLimiter } from '../auth/ratelimit.js';
+import { logger } from '../utils/logger.js';
+import { VERSION } from '../utils/version.js';
+/** Wrap async handlers so a thrown error reaches the error middleware instead
+ *  of becoming an unhandled promise rejection (Express 4 does not do this). */
+const asyncHandler = (fn) => (req, res, next) => {
+    fn(req, res, next).catch(next);
+};
+/** Never expose env values (tokens are commonly configured there). */
+export function redactServer(server) {
+    const mask = (r) => Object.fromEntries(Object.keys(r).map((k) => [k, '***']));
+    const out = { ...server };
+    if (server.env)
+        out.env = mask(server.env);
+    if (server.headers)
+        out.headers = mask(server.headers);
+    if (server.url)
+        out.url = redactUrl(server.url);
+    return out;
+}
+/** Strip credentials and query values (tokens are often passed there) from a URL. */
+function redactUrl(raw) {
+    try {
+        const u = new URL(raw);
+        if (u.username || u.password) {
+            u.username = '***';
+            u.password = '';
+        }
+        for (const k of [...u.searchParams.keys()])
+            u.searchParams.set(k, '***');
+        return u.toString();
+    }
+    catch {
+        return raw;
+    }
+}
+/** Per-server state for /metrics and Prometheus. */
+export function serverStateSamples(registry, proxy) {
+    return registry.getAllServers().map((s) => {
+        const h = registry.getHealth(s.id);
+        return {
+            id: s.id,
+            status: h?.status ?? 'unknown',
+            up: proxy.isConnected(s.id) ? 1 : 0,
+            reconnects: h?.reconnect?.reconnects ?? 0,
+            reconnectAttempt: h?.reconnect?.attempt ?? 0,
+            latencyMs: h?.latencyMs,
+        };
+    });
+}
+function parseIntParam(value, fallback, min, max) {
+    const n = typeof value === 'string' ? Number.parseInt(value, 10) : NaN;
+    if (!Number.isFinite(n))
+        return fallback;
+    return Math.min(max, Math.max(min, n));
+}
+function wantsPrometheus(req) {
+    if (req.query.format === 'prometheus')
+        return true;
+    if (req.query.format === 'json')
+        return false;
+    const accept = String(req.headers.accept ?? '');
+    // Prometheus scrapers send text/plain or openmetrics. A bare "*/*" (curl,
+    // browsers, fetch()) gets JSON so the dashboard keeps working.
+    return /text\/plain|application\/openmetrics-text/.test(accept);
+}
+export function createApiRouter(config, registry, proxy, metrics, options = {}) {
+    const router = express.Router();
+    let cfg = config;
+    // Built eagerly so a misconfiguration fails at startup (fail closed).
+    let authMw = createAuthMiddleware(cfg.auth);
+    let rateLimiter = createRateLimiter(cfg.rateLimit);
+    // Stable wrappers: routes keep pointing at these while the inner
+    // middleware is swapped on hot reload.
+    const auth = (req, res, next) => authMw(req, res, next);
+    const rateLimit = (req, res, next) => rateLimiter(req, res, next);
+    const protectable = (flag) => (req, res, next) => cfg.auth?.protect?.[flag] ? authMw(req, res, next) : next();
+    router.close = () => rateLimiter.close();
+    router.update = (next) => {
+        const same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+        let nextAuth = cfg.auth;
+        if (!same(cfg.auth, next.auth)) {
+            try {
+                authMw = createAuthMiddleware(next.auth);
+                nextAuth = next.auth;
+                logger.info(`Auth settings reloaded (strategy: ${next.auth?.strategy ?? 'none'})`);
+            }
+            catch (err) {
+                logger.error(`Auth reload rejected, keeping current auth: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        if (!same(cfg.rateLimit, next.rateLimit)) {
+            const old = rateLimiter;
+            rateLimiter = createRateLimiter(next.rateLimit);
+            old.close();
+            logger.info(next.rateLimit
+                ? `Rate limit reloaded: ${next.rateLimit.limit} per ${next.rateLimit.windowSeconds}s`
+                : 'Rate limit disabled');
+        }
+        cfg = { ...cfg, auth: nextAuth, rateLimit: next.rateLimit, monitor: next.monitor };
+    };
+    // ─── Health & Status ────────────────────────────────────────────────────────
+    // Liveness probe: always public, reveals nothing (for Docker / k8s).
+    router.get('/health/live', (_req, res) => {
+        res.json({ status: 'ok' });
+    });
+    router.get('/health', protectable('health'), (_req, res) => {
+        const summary = registry.getSummary();
+        const status = summary.offline > 0 || summary.reconnecting > 0 ? 'degraded' : 'ok';
+        res.status(status === 'ok' ? 200 : 207).json({
+            status,
+            version: VERSION,
+            uptime: process.uptime(),
+            servers: summary,
+        });
+    });
+    router.get('/metrics', protectable('metrics'), (req, res) => {
+        const samples = serverStateSamples(registry, proxy);
+        if (cfg.monitor?.prometheus && wantsPrometheus(req)) {
+            res.set('Content-Type', 'text/plain; version=0.0.4; charset=utf-8').send(metrics.toPrometheusText(samples));
+            return;
+        }
+        const windowMs = parseIntParam(req.query.window, 3_600_000, 1_000, 365 * 24 * 3_600_000);
+        res.json({ ...metrics.aggregate(windowMs), servers: samples });
+    });
+    // ─── Server Registry ────────────────────────────────────────────────────────
+    router.get('/servers', auth, (_req, res) => {
+        const servers = registry.getAllServers().map((s) => ({
+            ...redactServer(s),
+            health: registry.getHealth(s.id),
+            session: proxy.getSessionInfo(s.id),
+            toolCount: registry.getTools(s.id).length,
+        }));
+        res.json({ servers, total: servers.length });
+    });
+    router.get('/servers/:id', auth, (req, res) => {
+        const server = registry.getServer(req.params.id);
+        if (!server) {
+            res.status(404).json({ error: 'Server not found' });
+            return;
+        }
+        res.json({
+            ...redactServer(server),
+            health: registry.getHealth(server.id),
+            session: proxy.getSessionInfo(server.id),
+            tools: registry.getTools(server.id),
+        });
+    });
+    // Force an immediate (re)connect, resetting any backoff.
+    router.post('/servers/:id/reconnect', auth, rateLimit, asyncHandler(async (req, res) => {
+        const server = registry.getServer(req.params.id);
+        if (!server) {
+            res.status(404).json({ error: 'Server not found' });
+            return;
+        }
+        if (!options.supervisor) {
+            res.status(501).json({ error: 'Not Implemented', message: 'Reconnect is not available' });
+            return;
+        }
+        const ok = await options.supervisor.connect(server);
+        res.status(ok ? 200 : 502).json({
+            server: server.id,
+            connected: ok,
+            health: registry.getHealth(server.id),
+        });
+    }));
+    // ─── Tool Discovery ─────────────────────────────────────────────────────────
+    router.get('/tools', auth, (req, res) => {
+        const serverId = typeof req.query.server === 'string' ? req.query.server : undefined;
+        const tag = typeof req.query.tag === 'string' ? req.query.tag : undefined;
+        let tools = serverId ? registry.getTools(serverId) : registry.getAllTools();
+        if (tag) {
+            const taggedServerIds = new Set(registry.getServersByTag(tag).map((s) => s.id));
+            tools = tools.filter((t) => taggedServerIds.has(t.serverId));
+        }
+        res.json({ tools, total: tools.length });
+    });
+    // ─── Tool Invocation ────────────────────────────────────────────────────────
+    router.post('/tools/call', auth, rateLimit, asyncHandler(async (req, res) => {
+        const body = (req.body ?? {});
+        const { tool, server: serverId } = body;
+        const args = body.arguments ?? {};
+        if (typeof tool !== 'string' || tool.length === 0) {
+            res.status(400).json({ error: 'Bad Request', message: '"tool" must be a non-empty string' });
+            return;
+        }
+        if (serverId !== undefined && typeof serverId !== 'string') {
+            res.status(400).json({ error: 'Bad Request', message: '"server" must be a string' });
+            return;
+        }
+        if (typeof args !== 'object' || args === null || Array.isArray(args)) {
+            res.status(400).json({ error: 'Bad Request', message: '"arguments" must be an object' });
+            return;
+        }
+        // Resolve server: use explicit serverId or auto-discover from tool name
+        let targetServerId = serverId;
+        if (!targetServerId) {
+            const candidates = registry.findTools(tool);
+            if (candidates.length === 0) {
+                res.status(404).json({ error: 'Not Found', message: `Tool "${tool}" not found in any server` });
+                return;
+            }
+            if (candidates.length > 1) {
+                // Previously the first match was used silently, so a call could hit
+                // an unintended server depending on registration order.
+                res.status(409).json({
+                    error: 'Conflict',
+                    message: `Tool "${tool}" is provided by several servers; pass "server" to choose one`,
+                    servers: candidates.map((c) => c.serverId),
+                });
+                return;
+            }
+            targetServerId = candidates[0].serverId;
+        }
+        const server = registry.getServer(targetServerId);
+        if (!server) {
+            res.status(404).json({ error: 'Not Found', message: `Server "${targetServerId}" not found` });
+            return;
+        }
+        if (!proxy.isConnected(targetServerId)) {
+            const health = registry.getHealth(targetServerId);
+            const retryAt = health?.reconnect?.state === 'scheduled' ? health.reconnect.nextAttemptAt : undefined;
+            if (retryAt)
+                res.set('Retry-After', String(Math.max(1, Math.ceil((retryAt.getTime() - Date.now()) / 1000))));
+            res.status(503).json({
+                error: 'Service Unavailable',
+                message: `Server "${targetServerId}" is not connected`,
+                status: health?.status,
+            });
+            return;
+        }
+        // Argument values may contain secrets; log only their keys.
+        logger.debug(`Tool call: ${tool} → ${targetServerId}`, { argKeys: Object.keys(args) });
+        const result = await proxy.callTool(targetServerId, tool, args, server.timeout);
+        metrics.record({
+            serverId: targetServerId,
+            toolName: tool,
+            durationMs: result.durationMs,
+            success: result.success,
+            errorMessage: result.error?.message,
+            clientId: req.clientId,
+        });
+        if (cfg.monitor?.requestLog !== false) {
+            logger.info(`${tool} → ${targetServerId} ${result.success ? 'ok' : 'failed'} ${result.durationMs}ms`);
+        }
+        if (res.headersSent)
+            return;
+        if (!result.success) {
+            // 504 for upstream timeouts, 502 for upstream errors (was always 500).
+            const status = result.error?.code === ERR_TIMEOUT ? 504 : 502;
+            res.status(status).json({
+                error: status === 504 ? 'Gateway Timeout' : 'Tool Execution Failed',
+                message: result.error?.message,
+                code: result.error?.code,
+                durationMs: result.durationMs,
+            });
+            return;
+        }
+        res.json({
+            result: result.result,
+            server: targetServerId,
+            tool,
+            durationMs: result.durationMs,
+        });
+    }));
+    // ─── Recent Requests ────────────────────────────────────────────────────────
+    router.get('/requests', auth, (req, res) => {
+        const limit = parseIntParam(req.query.limit, 50, 1, 500);
+        res.json({ requests: metrics.getRecent(limit) });
+    });
+    return router;
+}
+//# sourceMappingURL=api.js.map

package/dist/gateway/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/gateway/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAI9B,OAAO,EAAE,WAAW,EAAiB,MAAM,mBAAmB,CAAC;AAG/D,OAAO,EAAE,oBAAoB,EAAsB,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAiB9C;+EAC+E;AAC/E,MAAM,YAAY,GAChB,CAAC,EAAsE,EAAkB,EAAE,CAC3F,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC,CAAC;AAEJ,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,MAAM,IAAI,GAAG,CAAC,CAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,MAAM,CAAC,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,kBAAkB,CAAC,QAAwB,EAAE,KAAe;IAC1E,OAAO,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,SAAS;YAC9B,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,IAAI,CAAC;YACzC,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,IAAI,CAAC;YAC5C,SAAS,EAAE,CAAC,EAAE,SAAS;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IAC/E,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAChD,0EAA0E;IAC1E,+DAA+D;IAC/D,OAAO,2CAA2C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAqB,EACrB,QAAwB,EACxB,KAAe,EACf,OAAyB,EACzB,UAA4B,EAAE;IAE9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAe,CAAC;IAC7C,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,sEAAsE;IACtE,IAAI,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEnD,iEAAiE;IACjE,uCAAuC;IACvC,MAAM,IAAI,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,SAAS,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAClF,MAAM,WAAW,GACf,CAAC,IAA0B,EAAkB,EAAE,CAC/C,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CACjB,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhE,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IACzC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CACV,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,WAAW,CAAC;YACxB,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChD,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS;gBACZ,CAAC,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG;gBACrF,CAAC,CAAC,qBAAqB,CAC1B,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC,CAAC;IAEF,+EAA+E;IAE/E,qEAAqE;IACrE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3C,MAAM;YACN,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YACxB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1D,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5G,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QACzF,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,GAAG,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM;SAC1C,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,YAAY,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,yDAAyD;IACzD,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,IAAI,EACJ,SAAS,EACT,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC9B,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,+EAA+E;IAE/E,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1E,IAAI,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5E,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,MAAM,CAAC,IAAI,CACT,aAAa,EACb,IAAI,EACJ,SAAS,EACT,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACzD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QAElC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QAED,wEAAwE;QACxE,IAAI,cAAc,GAAG,QAAQ,CAAC;QAC9B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,IAAI,2BAA2B,EAAE,CAAC,CAAC;gBAChG,OAAO;YACT,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,wDAAwD;gBACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,UAAU;oBACjB,OAAO,EAAE,SAAS,IAAI,+DAA+D;oBACrF,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;iBAC3C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,cAAc,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC;QAC3C,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,cAAc,aAAa,EAAE,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,EAAE,SAAS,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,IAAI,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,OAAO,EAAE,WAAW,cAAc,oBAAoB;gBACtD,MAAM,EAAE,MAAM,EAAE,MAAM;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,MAAM,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEvF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,IAA+B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3G,OAAO,CAAC,MAAM,CAAC;YACb,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;YACnC,QAAQ,EAAG,GAAqB,CAAC,QAAQ;SAC1C,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,cAAc,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAE5B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,uEAAuE;YACvE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;gBACtB,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB;gBACnE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;gBAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI;gBACxB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,cAAc;YACtB,IAAI;YACJ,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,+EAA+E;IAE/E,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/gateway/index.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Gateway bootstrap — wires together all subsystems
+ */
+import type { AddressInfo } from 'net';
+import type { GatewayConfig } from '../utils/types.js';
+import { ServerRegistry } from '../registry/index.js';
+export declare class Gateway {
+    private config;
+    private readonly app;
+    private readonly server;
+    private readonly registry;
+    private readonly proxy;
+    private readonly metrics;
+    private readonly supervisor;
+    private router?;
+    private cors;
+    private readonly reloadLock;
+    private started;
+    private stopping?;
+    constructor(config: GatewayConfig);
+    start(): Promise<void>;
+    /** Bound address (useful when listening on port 0). */
+    address(): AddressInfo | undefined;
+    /** Idempotent: concurrent/double calls (e.g. SIGINT twice) share one shutdown. */
+    stop(): Promise<void>;
+    private _stop;
+    /**
+     * One health check: an MCP `ping` for connected servers (records latency,
+     * marks `degraded` when it fails); disconnected servers are `reconnecting`
+     * while the supervisor is on it, otherwise `offline`.
+     */
+    private checkHealth;
+    private shutdownInternals;
+    /**
+     * Apply a new configuration without restarting:
+     *  - servers that were removed or disabled are disconnected, new or changed
+     *    ones (re)connected;
+     *  - auth (strategy, keys, secret, protect flags), rate limits, CORS origins,
+     *    monitor.requestLog / monitor.prometheus, reconnect policy and logLevel
+     *    take effect immediately.
+     * port, host, monitor.retentionHours, healthCheckIntervalMs and dashboard
+     * still require a restart.
+     */
+    reload(next: GatewayConfig): Promise<void>;
+    private connectServers;
+    /** Server registry (read-only use when embedding). */
+    getRegistry(): ServerRegistry;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/gateway/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,KAAK,CAAC;AAIvC,OAAO,KAAK,EAAE,aAAa,EAAmB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAmBtD,qBAAa,OAAO;IAaN,OAAO,CAAC,MAAM;IAZ1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAW;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAC9C,OAAO,CAAC,MAAM,CAAC,CAAY;IAC3B,OAAO,CAAC,IAAI,CAAyB;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;IAC1C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,CAAgB;gBAEb,MAAM,EAAE,aAAa;IAQnC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwE5B,uDAAuD;IACvD,OAAO,IAAI,WAAW,GAAG,SAAS;IAKlC,kFAAkF;IAClF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAKP,KAAK;IAkBnB;;;;OAIG;YACW,WAAW;YAkBX,iBAAiB;IAQ/B;;;;;;;;;OASG;IACG,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;YAqElC,cAAc;IAiB5B,sDAAsD;IACtD,WAAW,IAAI,cAAc;CAG9B"}

package/dist/gateway/index.js

@@ -0,0 +1,260 @@
+/**
+ * Gateway bootstrap — wires together all subsystems
+ */
+import express from 'express';
+import { createServer } from 'http';
+import { existsSync } from 'fs';
+import { dirname, resolve } from 'path';
+import { fileURLToPath } from 'url';
+import { ServerRegistry } from '../registry/index.js';
+import { McpProxy } from '../proxy/index.js';
+import { MetricsCollector } from '../monitor/index.js';
+import { createApiRouter } from './api.js';
+import { ServerSupervisor } from './supervisor.js';
+import { corsMiddleware } from '../middleware/cors.js';
+import { requestIdMiddleware } from '../middleware/request-id.js';
+import { errorHandler, notFoundHandler } from '../middleware/error-handler.js';
+import { logger } from '../utils/logger.js';
+import { Mutex } from '../utils/mutex.js';
+import { VERSION } from '../utils/version.js';
+function findDashboard() {
+    // src/gateway → ../../dashboard (tsx) and dist/gateway → ../../dashboard (built)
+    const here = dirname(fileURLToPath(import.meta.url));
+    const file = resolve(here, '../../dashboard/index.html');
+    return existsSync(file) ? file : undefined;
+}
+export class Gateway {
+    config;
+    app = express();
+    server = createServer(this.app);
+    registry;
+    proxy;
+    metrics;
+    supervisor;
+    router;
+    cors;
+    reloadLock = new Mutex();
+    started = false;
+    stopping;
+    constructor(config) {
+        this.config = config;
+        this.registry = new ServerRegistry(config.healthCheckIntervalMs ?? 30_000);
+        this.proxy = new McpProxy();
+        this.metrics = new MetricsCollector(config.monitor);
+        this.supervisor = new ServerSupervisor(this.proxy, this.registry, { reconnect: config.reconnect });
+        this.cors = corsMiddleware({ origins: config.corsOrigins ?? ['*'] });
+    }
+    async start() {
+        if (this.started)
+            throw new Error('Gateway already started');
+        this.started = true;
+        logger.setLevel(this.config.logLevel ?? 'info');
+        // Builds auth/rate-limit; throws on insecure misconfiguration (fail closed)
+        this.router = createApiRouter(this.config, this.registry, this.proxy, this.metrics, {
+            supervisor: this.supervisor,
+        });
+        this.app.disable('x-powered-by');
+        this.app.use(requestIdMiddleware);
+        // Previously an inline handler joined multiple origins into one
+        // Access-Control-Allow-Origin value, which browsers reject.
+        // Indirection so CORS origins can be hot reloaded.
+        this.app.use((req, res, next) => this.cors(req, res, next));
+        this.app.use(express.json({ limit: '10mb' }));
+        this.app.use('/api/v1', this.router);
+        const dashboard = this.config.dashboard?.enabled === false ? undefined : findDashboard();
+        if (dashboard) {
+            this.app.get('/dashboard', (_req, res) => res.sendFile(dashboard));
+        }
+        this.app.get('/', (_req, res) => {
+            res.json({
+                name: 'mcp-gateway',
+                version: VERSION,
+                docs: '/api/v1/health',
+                dashboard: dashboard
+                    ? '/dashboard'
+                    : this.config.dashboard?.enabled === false
+                        ? 'disabled'
+                        : 'not available (dashboard/index.html missing)',
+            });
+        });
+        this.app.use(notFoundHandler);
+        this.app.use(errorHandler);
+        this.metrics.start();
+        await this.connectServers(this.config.servers);
+        this.registry.startHealthChecks((serverId) => this.checkHealth(serverId));
+        // Reject on listen errors (EADDRINUSE, EACCES) instead of hanging forever
+        // and crashing with an unhandled 'error' event.
+        await new Promise((resolveListen, rejectListen) => {
+            const onError = (err) => {
+                this.server.off('listening', onListening);
+                rejectListen(err);
+            };
+            const onListening = () => {
+                this.server.off('error', onError);
+                const { port } = this.address() ?? { port: this.config.port };
+                logger.info(`mcp-gateway v${VERSION} listening on http://${this.config.host}:${port}`);
+                logger.info(`API: http://${this.config.host}:${port}/api/v1`);
+                resolveListen();
+            };
+            this.server.once('error', onError);
+            this.server.once('listening', onListening);
+            this.server.listen(this.config.port, this.config.host);
+        }).catch(async (err) => {
+            await this.shutdownInternals();
+            throw err;
+        });
+        this.server.on('error', (err) => logger.error(`HTTP server error: ${err.message}`));
+    }
+    /** Bound address (useful when listening on port 0). */
+    address() {
+        const a = this.server.address();
+        return a && typeof a === 'object' ? a : undefined;
+    }
+    /** Idempotent: concurrent/double calls (e.g. SIGINT twice) share one shutdown. */
+    stop() {
+        this.stopping ??= this._stop();
+        return this.stopping;
+    }
+    async _stop() {
+        logger.info('Shutting down mcp-gateway...');
+        const closed = this.server.listening
+            ? new Promise((res, rej) => this.server.close((err) => (err ? rej(err) : res())))
+            : Promise.resolve();
+        // Idle keep-alive sockets would otherwise hold close() open indefinitely.
+        this.server.closeIdleConnections?.();
+        await this.shutdownInternals();
+        const force = setTimeout(() => this.server.closeAllConnections?.(), 5_000);
+        force.unref();
+        try {
+            await closed;
+        }
+        finally {
+            clearTimeout(force);
+        }
+        logger.info('Gateway stopped.');
+    }
+    /**
+     * One health check: an MCP `ping` for connected servers (records latency,
+     * marks `degraded` when it fails); disconnected servers are `reconnecting`
+     * while the supervisor is on it, otherwise `offline`.
+     */
+    async checkHealth(serverId) {
+        if (this.proxy.isConnected(serverId)) {
+            const timeout = Math.min(this.registry.getServer(serverId)?.timeout ?? 5_000, 5_000);
+            try {
+                const latency = await this.proxy.ping(serverId, timeout);
+                if (this.proxy.isConnected(serverId))
+                    this.registry.updateHealth(serverId, 'online', latency);
+            }
+            catch (err) {
+                if (!this.proxy.isConnected(serverId))
+                    return; // the disconnect handler owns the status now
+                const msg = err instanceof Error ? err.message : String(err);
+                this.registry.updateHealth(serverId, 'degraded', undefined, `health ping failed: ${msg}`);
+            }
+            return;
+        }
+        if (this.supervisor.isRecovering(serverId))
+            return;
+        const prev = this.registry.getHealth(serverId);
+        this.registry.updateHealth(serverId, 'offline', undefined, prev?.errorMessage);
+    }
+    async shutdownInternals() {
+        this.supervisor.stop();
+        this.registry.stopHealthChecks();
+        this.metrics.stop();
+        this.router?.close();
+        await this.proxy.disconnectAll();
+    }
+    /**
+     * Apply a new configuration without restarting:
+     *  - servers that were removed or disabled are disconnected, new or changed
+     *    ones (re)connected;
+     *  - auth (strategy, keys, secret, protect flags), rate limits, CORS origins,
+     *    monitor.requestLog / monitor.prometheus, reconnect policy and logLevel
+     *    take effect immediately.
+     * port, host, monitor.retentionHours, healthCheckIntervalMs and dashboard
+     * still require a restart.
+     */
+    async reload(next) {
+        await this.reloadLock.runExclusive(async () => {
+            if (this.stopping)
+                return;
+            const same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+            const key = (s) => JSON.stringify(s);
+            const current = new Map(this.config.servers.filter((s) => s.enabled !== false).map((s) => [s.id, s]));
+            const wanted = new Map(next.servers.filter((s) => s.enabled !== false).map((s) => [s.id, s]));
+            const toRemove = [...current.keys()].filter((id) => !wanted.has(id));
+            const reconnectChanged = !same(this.config.reconnect, next.reconnect);
+            const toConnect = [...wanted.values()].filter((s) => {
+                const prev = current.get(s.id);
+                return !prev || key(prev) !== key(s);
+            });
+            const applied = [];
+            for (const field of ['port', 'host', 'healthCheckIntervalMs', 'dashboard']) {
+                if (!same(this.config[field], next[field])) {
+                    logger.warn(`Config "${field}" changed — restart required for it to take effect`);
+                }
+            }
+            if (this.config.monitor?.retentionHours !== next.monitor?.retentionHours) {
+                logger.warn('Config "monitor.retentionHours" changed — restart required for it to take effect');
+            }
+            // Router-level settings (auth may be rejected and kept; the router logs that).
+            this.router?.update(next);
+            if (!same(this.config.auth, next.auth))
+                applied.push('auth');
+            if (!same(this.config.rateLimit, next.rateLimit))
+                applied.push('rateLimit');
+            if (!same(this.config.monitor, next.monitor))
+                applied.push('monitor');
+            if (!same(this.config.corsOrigins, next.corsOrigins)) {
+                this.cors = corsMiddleware({ origins: next.corsOrigins ?? ['*'] });
+                applied.push('corsOrigins');
+            }
+            if (reconnectChanged) {
+                this.supervisor.setReconnectDefaults(next.reconnect);
+                applied.push('reconnect');
+            }
+            if (next.logLevel && next.logLevel !== this.config.logLevel) {
+                logger.setLevel(next.logLevel);
+                applied.push('logLevel');
+            }
+            await Promise.all(toRemove.map(async (id) => {
+                this.supervisor.forget(id);
+                await this.proxy.disconnect(id);
+                this.registry.unregister(id);
+            }));
+            this.config = {
+                ...this.config,
+                servers: next.servers,
+                logLevel: next.logLevel ?? this.config.logLevel,
+                auth: next.auth,
+                rateLimit: next.rateLimit,
+                monitor: next.monitor ? { ...next.monitor, retentionHours: this.config.monitor?.retentionHours } : next.monitor,
+                corsOrigins: next.corsOrigins,
+                reconnect: next.reconnect,
+            };
+            await this.connectServers(toConnect);
+            logger.info(`Hot reload applied: ${toConnect.length} (re)connected, ${toRemove.length} removed` +
+                (applied.length ? `; updated ${applied.join(', ')}` : ''));
+        });
+    }
+    async connectServers(servers) {
+        const enabled = servers.filter((s) => s.enabled !== false);
+        if (enabled.length === 0)
+            return;
+        logger.info(`Connecting to ${enabled.length} MCP server(s)...`);
+        const outcomes = await Promise.all(enabled.map((serverConfig) => {
+            this.registry.register(serverConfig);
+            // Failed servers are retried in the background with backoff.
+            return this.supervisor.connect(serverConfig);
+        }));
+        const succeeded = outcomes.filter(Boolean).length;
+        logger.info(`Connected: ${succeeded}/${enabled.length} servers (${enabled.length - succeeded} failed)`);
+    }
+    /** Server registry (read-only use when embedding). */
+    getRegistry() {
+        return this.registry;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/gateway/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/gateway/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAe,MAAM,MAAM,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAkB,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAE9C,SAAS,aAAa;IACpB,iFAAiF;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7C,CAAC;AAED,MAAM,OAAO,OAAO;IAaE;IAZH,GAAG,GAAG,OAAO,EAAE,CAAC;IAChB,MAAM,GAAW,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,QAAQ,CAAiB;IACzB,KAAK,CAAW;IAChB,OAAO,CAAmB;IAC1B,UAAU,CAAmB;IACtC,MAAM,CAAa;IACnB,IAAI,CAAyB;IACpB,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAClC,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,CAAiB;IAEjC,YAAoB,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,qBAAqB,IAAI,MAAM,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC;QAEhD,4EAA4E;QAC5E,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE;YAClF,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAClC,gEAAgE;QAChE,4DAA4D;QAC5D,mDAAmD;QACnD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAE9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACzF,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC9B,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,SAAS,EAAE,SAAS;oBAClB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK;wBACxC,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,8CAA8C;aACrD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE3B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE1E,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBAC1C,YAAY,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,GAAG,EAAE;gBACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9D,MAAM,CAAC,IAAI,CAAC,gBAAgB,OAAO,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;gBACvF,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC;gBAC9D,aAAa,EAAE,CAAC;YAClB,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,uDAAuD;IACvD,OAAO;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,kFAAkF;IAClF,IAAI;QACF,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;YAClC,CAAC,CAAC,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtB,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3E,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CAAC,QAAgB;QACxC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI,KAAK,EAAE,KAAK,CAAC,CAAC;YACrF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAAE,OAAO,CAAC,6CAA6C;gBAC5F,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC;YAAE,OAAO;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACjF,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,IAAmB;QAC9B,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE;YAC5C,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,GAAG,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE9F,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,gBAAgB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACtE,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/B,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,WAAW,CAAU,EAAE,CAAC;gBACpF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,oDAAoD,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;YAClG,CAAC;YAED,+EAA+E;YAC/E,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;YAED,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;gBACxB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC/B,CAAC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,IAAI,CAAC,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;gBAC/G,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CACT,uBAAuB,SAAS,CAAC,MAAM,mBAAmB,QAAQ,CAAC,MAAM,UAAU;gBACjF,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAA0B;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,MAAM,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAEhE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE;YAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACrC,6DAA6D;YAC7D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,IAAI,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,GAAG,SAAS,UAAU,CAAC,CAAC;IAC1G,CAAC;IAED,sDAAsD;IACtD,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}