@winstonsayno/mcp-gateway 2.3.0 → 2.5.0

package/CHANGELOG.md

@@ -9,6 +9,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.5.0] - 2026-10-07
+
+Usage quotas and metering export.
+
+### Added
+- **`quotas.rules`**: tool-call limits per `hour` / `day` / `month` (UTC calendar periods), per client (default, with
+  `clients` globs) or per tenant (`per: tenant`, shared pool), optionally for some `servers` / `tools`. Over quota →
+  `-32007`; REST `429` + `Retry-After` + quota details. Checked after the policy, before cache and upstream.
+- **Metering**: every tool call is counted in hourly buckets per client, tenant, server and tool (calls, errors,
+  duration). `GET /api/v1/usage` exports JSON or CSV (`format=csv`, formula-injection safe) grouped by `client`,
+  `tenant`, `server`, `tool`, `hour`, `day`, with `since` / `until` / `client` / `tenant` / `server` filters;
+  `quotas.meteringRetentionDays` (35).
+- `GET /api/v1/quotas` — live counters with `resetsAt`. Tenant admins / owners can read their own tenant's usage.
+- Exports: `UsageMeter`, `usageCsv`, `periodBounds`, `ERR_QUOTA_EXCEEDED`.
+
+## [2.4.0] - 2026-10-07
+
+Upstream catalog / registry with one-click add.
+
+### Added
+- **`catalog:`** — built-in entries for the reference MCP servers (filesystem, memory, everything,
+  sequential-thinking, fetch, git, time, GitHub remote) plus `sources` (JSON files or URLs) merged by id.
+- **One-click install** (`catalog.install: true`, off by default): `POST /api/v1/catalog/:id/install` with `serverId`,
+  `env` (process env for stdio, `${VAR}` substitution for remote `url` / `headers`) and `args`; validation of required
+  inputs; `409` on id clashes. `DELETE /api/v1/catalog/servers/:id` removes it. Operator keys only.
+- `catalog.serversFile` persists installed servers (atomic write, mode 600) and loads them on start; they survive hot
+  reloads; config-file ids win on clashes.
+- **Dashboard**: *Add a server* card on the Servers tab (prompts for id, env and args; shows where an entry is
+  installed), also in the demo (read-only).
+- Exports: `Catalog`, `InstalledServers`, `BUILTIN_CATALOG`, `buildServerConfig`, `loadCatalogSource`.
+
 ## [2.3.0] - 2026-10-07
 
 Tenants / workspaces with role-based access control.

package/README.md

@@ -579,6 +579,24 @@ await gateway.start();
 process.on('SIGTERM', () => gateway.stop());
 ```
 
+## What's New in v2.5
+
+| Feature | Description |
+|---------|-------------|
+| **Usage quotas** | per key or per tenant, hour / day / month, scoped by server / tool — `429` + `Retry-After` |
+| **Metering export** | `GET /api/v1/usage` as JSON or CSV, grouped by key / tenant / server / tool / hour / day |
+
+Details: [CHANGELOG](CHANGELOG.md).
+
+## What's New in v2.4
+
+| Feature | Description |
+|---------|-------------|
+| **Upstream catalog** | built-in reference servers + your own JSON catalogs (`catalog.sources`) |
+| **One-click add** | dashboard *Add a server* / `POST /api/v1/catalog/:id/install`, optional persistence (`serversFile`) |
+
+Details: [CHANGELOG](CHANGELOG.md).
+
 ## What's New in v2.3
 
 | Feature | Description |

package/dashboard/index.html

@@ -460,6 +460,10 @@ tbody tr:hover { background: var(--surface-2); }
     <div class="page-head"><div><h1 data-i18n="srvTitle">Servers & tools</h1><p data-i18n="srvSub">Upstream MCP servers behind this gateway</p></div>
       <button class="btn sm" id="srvRefresh" type="button"><svg class="spin" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M21 12a9 9 0 1 1-3-6.7"/></svg><span data-i18n="refresh">Refresh</span></button></div>
     <div class="grid servers stagger" id="servers"></div>
+    <div class="card" id="catalogCard" hidden style="margin-top:14px">
+      <h2><span data-i18n="catalog">Add a server</span><span class="right muted" id="catalogNote"></span></h2>
+      <ul class="stream" id="catalog"></ul>
+    </div>
   </section>
 
   <!-- Playground -->
@@ -573,7 +577,7 @@ const I18N = {
     remember: 'Remember on this device', saveConnect: 'Save & connect', clear: 'Clear', close: 'Close',
     tabOverview: 'Overview', tabServers: 'Servers', tabPlayground: 'Playground', tabHistory: 'History', tabConnect: 'Connect',
     ovTitle: 'Overview', ovSub: 'Live traffic through the gateway', window: 'Time window',
-    reqRate: 'Request rate', requests: 'Requests', errors: 'Errors', latency: 'Latency', topTools: 'Top tools', perKey: 'Usage per key', perServer: 'Calls per server', approvals: 'Pending approvals', tenants: 'Workspaces', role: 'Role', members: 'members', roleSaved: 'Role updated', approve: 'Approve', deny: 'Deny', approved: 'Approved', denied: 'Denied', expires: 'expires',
+    reqRate: 'Request rate', requests: 'Requests', errors: 'Errors', latency: 'Latency', topTools: 'Top tools', perKey: 'Usage per key', perServer: 'Calls per server', approvals: 'Pending approvals', tenants: 'Workspaces', catalog: 'Add a server', add: 'Add', added: 'Server added', installOff: 'read-only (catalog.install is off)', installedAs: 'installed as', role: 'Role', members: 'members', roleSaved: 'Role updated', approve: 'Approve', deny: 'Deny', approved: 'Approved', denied: 'Denied', expires: 'expires',
     errRate: 'Error rate', liveStream: 'Live requests', pause: 'Pause', health: 'Server health',
     kRpm: 'Requests / min', kP50: 'p50 latency', kP95: 'p95 latency', kErr: 'Error rate', kSrv: 'Servers online',
     kTotal: '{n} in window', kP99: 'p99 {v}', kErrN: '{n} failed', kTools: '{n} tools',
@@ -618,7 +622,7 @@ const I18N = {
     remember: '在此设备上记住', saveConnect: '保存并连接', clear: '清除', close: '关闭',
     tabOverview: '总览', tabServers: '服务器', tabPlayground: '调试台', tabHistory: '历史', tabConnect: '接入',
     ovTitle: '总览', ovSub: '网关实时流量', window: '时间范围',
-    reqRate: '请求速率', requests: '请求', errors: '错误', latency: '延迟', topTools: '热门工具', perKey: '各密钥用量', perServer: '各服务器调用', approvals: '待审批调用', tenants: '工作区', role: '角色', members: '成员', roleSaved: '角色已更新', approve: '批准', deny: '拒绝', approved: '已批准', denied: '已拒绝', expires: '到期',
+    reqRate: '请求速率', requests: '请求', errors: '错误', latency: '延迟', topTools: '热门工具', perKey: '各密钥用量', perServer: '各服务器调用', approvals: '待审批调用', tenants: '工作区', catalog: '添加服务器', add: '添加', added: '已添加服务器', installOff: '只读（未开启 catalog.install）', installedAs: '已安装为', role: '角色', members: '成员', roleSaved: '角色已更新', approve: '批准', deny: '拒绝', approved: '已批准', denied: '已拒绝', expires: '到期',
     errRate: '错误率', liveStream: '实时请求', pause: '暂停', health: '服务器健康',
     kRpm: '每分钟请求', kP50: 'p50 延迟', kP95: 'p95 延迟', kErr: '错误率', kSrv: '在线服务器',
     kTotal: '窗口内 {n} 次', kP99: 'p99 {v}', kErrN: '{n} 次失败', kTools: '{n} 个工具',
@@ -1000,6 +1004,41 @@ document.addEventListener('change', async (e) => {
   loadTenants();
 });
 
+// Upstream catalog: one-click add of well-known MCP servers (operators; needs catalog.install: true).
+async function loadCatalog() {
+  const card = $('#catalogCard');
+  let r;
+  try { r = await api('/catalog'); } catch { card.hidden = true; return; }
+  const list = r.entries || [];
+  card.hidden = list.length === 0;
+  state.catalog = r;
+  $('#catalogNote').textContent = r.install ? '' : t('installOff');
+  $('#catalog').innerHTML = list.map((e) => `<li><div style="flex:1;min-width:0"><b>${esc(e.name)}</b> <span class="badge">${esc(e.template.transport)}</span>
+    ${(e.installed || []).length ? `<span class="badge ok">${esc(t('installedAs'))} ${esc(e.installed.join(', '))}</span>` : ''}
+    <div class="muted" style="font-size:12.5px">${esc(e.description || '')}${e.homepage ? ` · <a href="${esc(e.homepage)}" target="_blank" rel="noopener noreferrer">docs</a>` : ''}</div></div>
+    ${r.install ? `<button class="btn sm primary" type="button" data-install="${esc(e.id)}">${esc(t('add'))}</button>` : ''}</li>`).join('');
+}
+document.addEventListener('click', async (e) => {
+  const b = e.target.closest && e.target.closest('[data-install]');
+  if (!b) return;
+  const entry = (state.catalog?.entries || []).find((x) => x.id === b.dataset.install);
+  if (!entry) return;
+  const serverId = prompt('Server id', entry.installed && entry.installed.length ? `${entry.id}-2` : entry.id);
+  if (!serverId) return;
+  const env = {};
+  for (const v of entry.env || []) { const val = prompt(`${v.name}${v.description ? ` — ${v.description}` : ''}`, ''); if (val === null) return; if (val) env[v.name] = val; }
+  const args = [];
+  for (const a of entry.args || []) { const val = prompt(`${a.name}${a.description ? ` — ${a.description}` : ''}`, a.default || ''); if (val === null) return; args.push(val); }
+  b.classList.add('loading');
+  try {
+    await api(`/catalog/${encodeURIComponent(entry.id)}/install`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ serverId, env, args }) });
+    toast(t('added'));
+    loadServers();
+  } catch (err) { toast(err.message || String(err)); }
+  b.classList.remove('loading');
+  loadCatalog();
+});
+
 async function loadServers() {
   const btn = $('#srvRefresh'); btn.classList.add('loading');
   try {
@@ -1678,6 +1717,7 @@ reloadAll().then(() => {
 // Refresh the slower-moving pieces in the background.
 setInterval(() => { if (!document.hidden) loadApprovals(); }, 3000);
 loadTenants();
+loadCatalog();
 setInterval(() => { if (!document.hidden) loadTenants(); }, 30000);
 setInterval(() => { if (!document.hidden) { loadServers(); if (state.live === 'live') loadStats().catch(() => {}); } }, 10000);
 document.addEventListener('visibilitychange', () => { if (!document.hidden && state.live !== 'live') startLive(); });

package/dist/catalog/index.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Upstream catalog / registry: templates for well-known MCP servers that an
+ * operator can add with one click (dashboard) or one request
+ * (`POST /api/v1/catalog/:id/install`).
+ *
+ * The built-in entries cover the reference servers; `catalog.sources` adds
+ * entries from JSON files or URLs (`{ "entries": [...] }` or an array).
+ * Installing is off unless `catalog.install: true` — it spawns processes.
+ * Installed servers are kept in `catalog.serversFile` (JSON) when set, and
+ * loaded again on start.
+ *
+ * @module catalog
+ */
+import type { CatalogConfig, McpServerConfig } from '../utils/types.js';
+export interface CatalogEnvVar {
+    name: string;
+    description?: string;
+    required?: boolean;
+    secret?: boolean;
+}
+export interface CatalogEntry {
+    id: string;
+    name: string;
+    description: string;
+    homepage?: string;
+    tags?: string[];
+    /** Server config template (`id` / `name` come from the install request). */
+    template: Omit<McpServerConfig, 'id' | 'name'>;
+    /** Environment variables (stdio) or `${VAR}` placeholders the template needs. */
+    env?: CatalogEnvVar[];
+    /** Extra positional args the user must supply (e.g. allowed directories). */
+    args?: Array<{
+        name: string;
+        description?: string;
+        required?: boolean;
+        default?: string;
+    }>;
+    source?: string;
+}
+/** Built-in catalog (reference MCP servers). */
+export declare const BUILTIN_CATALOG: CatalogEntry[];
+/** Load entries from one source (file path relative to `baseDir`, or http(s) URL). */
+export declare function loadCatalogSource(source: string, baseDir?: string, fetchImpl?: typeof fetch): Promise<CatalogEntry[]>;
+export declare class Catalog {
+    private config;
+    private readonly baseDir;
+    private entries;
+    constructor(config: () => CatalogConfig | undefined, baseDir?: () => string | undefined);
+    /** (Re)load `catalog.sources`; failures are logged and skipped. */
+    refresh(fetchImpl?: typeof fetch): Promise<void>;
+    list(): readonly CatalogEntry[];
+    get(id: string): CatalogEntry | undefined;
+    installEnabled(): boolean;
+}
+export interface InstallRequest {
+    /** Server id (default: the entry id). */
+    serverId?: string;
+    name?: string;
+    /** Values for `entry.env` (stdio: process env; remote: `${VAR}` substitution). */
+    env?: Record<string, string>;
+    /** Values for `entry.args`, in order. */
+    args?: string[];
+    tags?: string[];
+}
+/** Build a server config from a catalog entry. Throws with a user-facing message on missing input. */
+export declare function buildServerConfig(entry: CatalogEntry, req: InstallRequest): McpServerConfig;
+/** Servers installed from the catalog, persisted in `catalog.serversFile`. */
+export declare class InstalledServers {
+    private readonly file;
+    private servers;
+    constructor(file: () => string | undefined);
+    load(): McpServerConfig[];
+    list(): readonly McpServerConfig[];
+    add(s: McpServerConfig): Promise<void>;
+    remove(id: string): Promise<boolean>;
+    private save;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/catalog/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/catalog/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGxE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IAC/C,iFAAiF;IACjF,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC;IACtB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAQD,gDAAgD;AAChD,eAAO,MAAM,eAAe,EAAE,YAAY,EAoEzC,CAAC;AAQF,sFAAsF;AACtF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,SAAgB,EAAE,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAczI;AAED,qBAAa,OAAO;IAGN,OAAO,CAAC,MAAM;IAAmC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFrF,OAAO,CAAC,OAAO,CAAwC;gBAEnC,MAAM,EAAE,MAAM,aAAa,GAAG,SAAS,EAAmB,OAAO,GAAE,MAAM,MAAM,GAAG,SAA2B;IAEjI,mEAAmE;IAC7D,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBtD,IAAI,IAAI,SAAS,YAAY,EAAE;IAI/B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIzC,cAAc,IAAI,OAAO;CAG1B;AAED,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,sGAAsG;AACtG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,cAAc,GAAG,eAAe,CAgC3F;AAED,8EAA8E;AAC9E,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,OAAO,CAAyB;gBAEX,IAAI,EAAE,MAAM,MAAM,GAAG,SAAS;IAE3D,IAAI,IAAI,eAAe,EAAE;IAazB,IAAI,IAAI,SAAS,eAAe,EAAE;IAI5B,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAQ5B,IAAI;CAOnB"}

package/dist/catalog/index.js

@@ -0,0 +1,243 @@
+/**
+ * Upstream catalog / registry: templates for well-known MCP servers that an
+ * operator can add with one click (dashboard) or one request
+ * (`POST /api/v1/catalog/:id/install`).
+ *
+ * The built-in entries cover the reference servers; `catalog.sources` adds
+ * entries from JSON files or URLs (`{ "entries": [...] }` or an array).
+ * Installing is off unless `catalog.install: true` — it spawns processes.
+ * Installed servers are kept in `catalog.serversFile` (JSON) when set, and
+ * loaded again on start.
+ *
+ * @module catalog
+ */
+import { readFile, writeFile, rename } from 'fs/promises';
+import { existsSync, readFileSync } from 'fs';
+import { isAbsolute, resolve } from 'path';
+import { logger } from '../utils/logger.js';
+const npx = (pkg, ...extra) => ({
+    transport: 'stdio',
+    command: 'npx',
+    args: ['-y', pkg, ...extra],
+});
+/** Built-in catalog (reference MCP servers). */
+export const BUILTIN_CATALOG = [
+    {
+        id: 'filesystem',
+        name: 'Filesystem',
+        description: 'Read, write and search files in allowed directories',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/filesystem',
+        tags: ['files'],
+        template: npx('@modelcontextprotocol/server-filesystem'),
+        args: [{ name: 'directory', description: 'Allowed directory', required: true, default: '/data' }],
+    },
+    {
+        id: 'memory',
+        name: 'Memory',
+        description: 'Knowledge-graph based persistent memory',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/memory',
+        tags: ['memory'],
+        template: npx('@modelcontextprotocol/server-memory'),
+    },
+    {
+        id: 'everything',
+        name: 'Everything (test server)',
+        description: 'Reference server exercising every MCP feature',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/everything',
+        tags: ['test'],
+        template: npx('@modelcontextprotocol/server-everything'),
+    },
+    {
+        id: 'sequential-thinking',
+        name: 'Sequential Thinking',
+        description: 'Structured step-by-step problem solving',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking',
+        tags: ['reasoning'],
+        template: npx('@modelcontextprotocol/server-sequential-thinking'),
+    },
+    {
+        id: 'fetch',
+        name: 'Fetch',
+        description: 'Fetch web pages and convert them to markdown',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/fetch',
+        tags: ['web'],
+        template: { transport: 'stdio', command: 'uvx', args: ['mcp-server-fetch'] },
+    },
+    {
+        id: 'git',
+        name: 'Git',
+        description: 'Read, search and manipulate a Git repository',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/git',
+        tags: ['code'],
+        template: { transport: 'stdio', command: 'uvx', args: ['mcp-server-git', '--repository'] },
+        args: [{ name: 'repository', description: 'Path of the repository', required: true }],
+    },
+    {
+        id: 'time',
+        name: 'Time',
+        description: 'Current time and time-zone conversion',
+        homepage: 'https://github.com/modelcontextprotocol/servers/tree/main/src/time',
+        tags: ['utility'],
+        template: { transport: 'stdio', command: 'uvx', args: ['mcp-server-time'] },
+    },
+    {
+        id: 'github',
+        name: 'GitHub',
+        description: 'GitHub repositories, issues and pull requests (remote server)',
+        homepage: 'https://github.com/github/github-mcp-server',
+        tags: ['code', 'remote'],
+        template: { transport: 'streamable-http', url: 'https://api.githubcopilot.com/mcp/', headers: { Authorization: 'Bearer ${GITHUB_TOKEN}' } },
+        env: [{ name: 'GITHUB_TOKEN', description: 'GitHub personal access token', required: true, secret: true }],
+    },
+];
+function validEntry(e) {
+    if (!e || typeof e !== 'object')
+        return false;
+    const x = e;
+    return typeof x.id === 'string' && /^[A-Za-z0-9._-]+$/.test(x.id) && typeof x.name === 'string' && !!x.template && typeof x.template === 'object' && typeof x.template.transport === 'string';
+}
+/** Load entries from one source (file path relative to `baseDir`, or http(s) URL). */
+export async function loadCatalogSource(source, baseDir = process.cwd(), fetchImpl = fetch) {
+    let raw;
+    if (/^https?:\/\//.test(source)) {
+        const r = await fetchImpl(source, { headers: { accept: 'application/json' }, signal: AbortSignal.timeout(10_000) });
+        if (!r.ok)
+            throw new Error(`HTTP ${r.status}`);
+        raw = await r.json();
+    }
+    else {
+        raw = JSON.parse(await readFile(isAbsolute(source) ? source : resolve(baseDir, source), 'utf8'));
+    }
+    const list = Array.isArray(raw) ? raw : raw?.entries;
+    if (!Array.isArray(list))
+        throw new Error('expected an array or { "entries": [...] }');
+    const ok = list.filter(validEntry).map((e) => ({ ...e, description: e.description ?? '', source }));
+    if (ok.length !== list.length)
+        logger.warn(`Catalog ${source}: ${list.length - ok.length} invalid entries skipped`);
+    return ok;
+}
+export class Catalog {
+    config;
+    baseDir;
+    entries = [...BUILTIN_CATALOG];
+    constructor(config, baseDir = () => undefined) {
+        this.config = config;
+        this.baseDir = baseDir;
+    }
+    /** (Re)load `catalog.sources`; failures are logged and skipped. */
+    async refresh(fetchImpl) {
+        const cfg = this.config();
+        const out = cfg?.builtins === false ? [] : [...BUILTIN_CATALOG];
+        for (const src of cfg?.sources ?? []) {
+            try {
+                for (const e of await loadCatalogSource(src, this.baseDir(), fetchImpl)) {
+                    const i = out.findIndex((x) => x.id === e.id);
+                    if (i >= 0)
+                        out[i] = e;
+                    else
+                        out.push(e);
+                }
+            }
+            catch (err) {
+                logger.warn(`Catalog source ${src} failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        this.entries = out;
+    }
+    list() {
+        return this.entries;
+    }
+    get(id) {
+        return this.entries.find((e) => e.id === id);
+    }
+    installEnabled() {
+        return this.config()?.install === true;
+    }
+}
+/** Build a server config from a catalog entry. Throws with a user-facing message on missing input. */
+export function buildServerConfig(entry, req) {
+    const id = req.serverId ?? entry.id;
+    if (!/^[A-Za-z0-9._-]+$/.test(id))
+        throw new Error('serverId: letters, digits, ".", "_" and "-" only');
+    const env = req.env ?? {};
+    for (const v of entry.env ?? []) {
+        if (v.required && !env[v.name])
+            throw new Error(`env.${v.name} is required (${v.description ?? 'see the catalog entry'})`);
+    }
+    const extra = [];
+    (entry.args ?? []).forEach((a, i) => {
+        const value = req.args?.[i] ?? a.default;
+        if (value === undefined || value === '') {
+            if (a.required)
+                throw new Error(`args[${i}] (${a.name}) is required`);
+            return;
+        }
+        extra.push(value);
+    });
+    const subst = (s) => s.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (m, k) => env[k] ?? m);
+    const t = entry.template;
+    const cfg = {
+        timeout: 30_000,
+        maxConcurrency: 10,
+        enabled: true,
+        ...t,
+        id,
+        name: req.name ?? entry.name,
+        tags: [...new Set([...(t.tags ?? []), ...(entry.tags ?? []), ...(req.tags ?? []), 'catalog'])],
+    };
+    if (extra.length)
+        cfg.args = [...(t.args ?? []), ...extra];
+    if (t.headers)
+        cfg.headers = Object.fromEntries(Object.entries(t.headers).map(([k, v]) => [k, subst(v)]));
+    if (t.url)
+        cfg.url = subst(t.url);
+    if (t.transport === 'stdio' && Object.keys(env).length)
+        cfg.env = { ...(t.env ?? {}), ...env };
+    return cfg;
+}
+/** Servers installed from the catalog, persisted in `catalog.serversFile`. */
+export class InstalledServers {
+    file;
+    servers = [];
+    constructor(file) {
+        this.file = file;
+    }
+    load() {
+        const f = this.file();
+        if (!f || !existsSync(f))
+            return (this.servers = []);
+        try {
+            const raw = JSON.parse(readFileSync(f, 'utf8'));
+            this.servers = Array.isArray(raw.servers) ? raw.servers : [];
+        }
+        catch (err) {
+            logger.error(`Cannot read catalog.serversFile ${f}: ${err instanceof Error ? err.message : String(err)}`);
+            this.servers = [];
+        }
+        return this.servers;
+    }
+    list() {
+        return this.servers;
+    }
+    async add(s) {
+        this.servers = [...this.servers.filter((x) => x.id !== s.id), s];
+        await this.save();
+    }
+    async remove(id) {
+        const before = this.servers.length;
+        this.servers = this.servers.filter((x) => x.id !== id);
+        if (this.servers.length === before)
+            return false;
+        await this.save();
+        return true;
+    }
+    async save() {
+        const f = this.file();
+        if (!f)
+            return;
+        const tmp = `${f}.tmp`;
+        await writeFile(tmp, JSON.stringify({ servers: this.servers }, null, 2) + '\n', { mode: 0o600 });
+        await rename(tmp, f);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/catalog/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/catalog/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE3C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAwB5C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,GAAG,KAAe,EAAwC,EAAE,CAAC,CAAC;IACtF,SAAS,EAAE,OAAO;IAClB,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;CAC5B,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qDAAqD;QAClE,QAAQ,EAAE,0EAA0E;QACpF,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,QAAQ,EAAE,GAAG,CAAC,yCAAyC,CAAC;QACxD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;KAClG;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,sEAAsE;QAChF,IAAI,EAAE,CAAC,QAAQ,CAAC;QAChB,QAAQ,EAAE,GAAG,CAAC,qCAAqC,CAAC;KACrD;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,+CAA+C;QAC5D,QAAQ,EAAE,0EAA0E;QACpF,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,GAAG,CAAC,yCAAyC,CAAC;KACzD;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,kFAAkF;QAC5F,IAAI,EAAE,CAAC,WAAW,CAAC;QACnB,QAAQ,EAAE,GAAG,CAAC,kDAAkD,CAAC;KAClE;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,qEAAqE;QAC/E,IAAI,EAAE,CAAC,KAAK,CAAC;QACb,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE;KAC7E;IACD;QACE,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,8CAA8C;QAC3D,QAAQ,EAAE,mEAAmE;QAC7E,IAAI,EAAE,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE;QAC1F,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACtF;IACD;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,oEAAoE;QAC9E,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE;KAC5E;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,+DAA+D;QAC5E,QAAQ,EAAE,6CAA6C;QACvD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxB,QAAQ,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,EAAE,oCAAoC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,wBAAwB,EAAE,EAAE;QAC3I,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,8BAA8B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC3G;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA0B,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAQ,CAAC,CAAC,QAAoC,CAAC,SAAS,KAAK,QAAQ,CAAC;AAC7N,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,YAA0B,KAAK;IAC9G,IAAI,GAAY,CAAC;IACjB,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,GAA+B,EAAE,OAAO,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACvF,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACpG,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,WAAW,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,0BAA0B,CAAC,CAAC;IACpH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,OAAO;IAGE;IAA0D;IAFtE,OAAO,GAAmB,CAAC,GAAG,eAAe,CAAC,CAAC;IAEvD,YAAoB,MAAuC,EAAmB,UAAoC,GAAG,EAAE,CAAC,SAAS;QAA7G,WAAM,GAAN,MAAM,CAAiC;QAAmB,YAAO,GAAP,OAAO,CAA4C;IAAG,CAAC;IAErI,mEAAmE;IACnE,KAAK,CAAC,OAAO,CAAC,SAAwB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,KAAK,MAAM,CAAC,IAAI,MAAM,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC;oBACxE,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC9C,IAAI,CAAC,IAAI,CAAC;wBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;wBAClB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,kBAAkB,GAAG,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;IACrB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,CAAC;CACF;AAaD,sGAAsG;AACtG,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,GAAmB;IACxE,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC;IACpC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,WAAW,IAAI,uBAAuB,GAAG,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iCAAiC,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACzB,MAAM,GAAG,GAAoB;QAC3B,OAAO,EAAE,MAAM;QACf,cAAc,EAAE,EAAE;QAClB,OAAO,EAAE,IAAI;QACb,GAAG,CAAC;QACJ,EAAE;QACF,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;QAC5B,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;KAC5E,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IAC/F,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,OAAO,gBAAgB;IAGE;IAFrB,OAAO,GAAsB,EAAE,CAAC;IAExC,YAA6B,IAA8B;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAE/D,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAoC,CAAC;YACnF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1G,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,CAAkB;QAC1B,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;QACvB,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AA+fvD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMzE;AAED,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAwB5E;AAyCD,wBAAgB,qBAAqB,IAAI,MAAM,CAiH9C"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AA8hBvD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMzE;AAED,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAwB5E;AAyCD,wBAAgB,qBAAqB,IAAI,MAAM,CAiH9C"}

package/dist/config/loader.js

@@ -399,6 +399,35 @@ const GatewayConfigSchema = z.object({
             ctx.addIssue({ code: z.ZodIssueCode.custom, message: bad });
     })
         .optional(),
+    quotas: z
+        .object({
+        rules: z
+            .array(z
+            .object({
+            name: z.string().min(1).optional(),
+            limit: z.number().int().min(0),
+            period: z.enum(['hour', 'day', 'month']),
+            per: z.enum(['client', 'tenant']).optional(),
+            clients: z.array(z.string().min(1)).optional(),
+            tenants: z.array(z.string().min(1)).optional(),
+            servers: z.array(z.string().min(1)).optional(),
+            tools: z.array(z.string().min(1)).optional(),
+        })
+            .strict())
+            .optional(),
+        meteringRetentionDays: z.number().int().positive().optional(),
+    })
+        .strict()
+        .optional(),
+    catalog: z
+        .object({
+        builtins: z.boolean().optional(),
+        sources: z.array(z.string().min(1)).optional(),
+        install: z.boolean().optional(),
+        serversFile: z.string().min(1).optional(),
+    })
+        .strict()
+        .optional(),
     tenants: z
         .array(z
         .object({