@xrpl-utilities/mcp 0.2.195 → 0.2.201

package/dist/transport/http.js

@@ -13,8 +13,20 @@
  *
  * Auth: every paid tool call still requires the caller to provide
  * their own payment_signature in the tool args. The hosted endpoint
- * is a transparent proxy, NOT a subsidy. Operator-issued bypass via
- * MCP_BYPASS_KEY env var is rate-limited per-IP at the proxy layer.
+ * is a transparent proxy, NOT a subsidy.
+ *
+ * Two separate budgets guard the operator-issued MCP_BYPASS_KEY path:
+ * a generous per-IP request limit, and a much tighter per-IP budget on
+ * FAILED `_bypass_key` attempts. The failed-attempt budget is enforced at
+ * the point of the guess (see dispatch's isBypassBlocked) and only 429s
+ * requests that carry a key - a batched body is thousands of guesses in one
+ * request, and a blanket 429 on the bucket key is an outage, not a limit. The request limit alone is not an
+ * access control on a secret - 60 guesses a minute is still online
+ * guessing - and both are only as good as the client key, so see
+ * clientKey() for why the left-most X-Forwarded-For entry must never
+ * be used. The transport also refuses to boot behind a bypass key shorter
+ * than 32 bytes (assertBypassKeyStrength), so those budgets are a second
+ * layer rather than the only one.
  */
 import express from "express";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
@@ -33,26 +45,239 @@ const NON_CHARGING_FLOW_STEPS = new Set([
 ]);
 const RATE_WINDOW_MS = 60_000;
 const RATE_LIMIT_PER_WINDOW = 60; // generous; agents typically fire bursts
+// Failed `_bypass_key` attempts get their own, far tighter budget. An operator
+// who was given the key never trips this; anyone enumerating it does so within
+// a handful of tries.
+// An hour, not ten minutes. The window is the denominator of the online
+// guessing budget against MCP_BYPASS_KEY: at ten minutes a persistent guesser
+// gets ~1,584 tries a day, at an hour ~264. The collateral the shorter window
+// was bought to relieve had already been removed by scoping the lockout to
+// key-carrying requests - all that is left is that an operator sharing a bucket
+// key with a guesser cannot use their own bypass key until the window expires,
+// which is narrow and self-resolving. A short key is now refused at boot
+// rather than warned about, but the budget stays small: it is what bounds
+// online guessing against a key that is long and still unlucky.
+const BYPASS_FAIL_WINDOW_MS = 3_600_000;
+const BYPASS_FAIL_LIMIT = 10;
+// A single JSON-RPC array is dispatched message by message, so at the 1mb body
+// cap one POST otherwise carries roughly 5,000 tool calls.
+const MAX_BATCH_MESSAGES = 20;
+// Hard ceiling on tracked keys. Buckets are swept on a timer, but a burst of
+// distinct addresses inside one window must not be able to grow the heap
+// without bound: an unbounded Map on the public endpoint is an OOM away from
+// taking mcp.xrpl-utilities.io down.
+const MAX_TRACKED_KEYS = 50_000;
+/**
+ * How many proxy hops in front of this container are ours. Railway's edge
+ * APPENDS the real peer to X-Forwarded-For, it does not replace what the
+ * client sent, so the trustworthy entry is counted from the RIGHT. Default 1;
+ * override only after counting the entries on a request you made yourself
+ * against the live deploy. Too high re-opens the spoof; too low used to
+ * collapse every caller into one bucket keyed on an internal proxy IP, which
+ * clientKey() now degrades out of rather than shares - a safety net, not a
+ * substitute for the real count.
+ */
+const TRUST_PROXY_HOPS = Math.max(0, Number(process.env["TRUST_PROXY_HOPS"] ?? "1") || 0);
 const rateBuckets = new Map();
-function rateLimit(req, res) {
-    const ip = (req.headers["x-forwarded-for"] ?? req.socket.remoteAddress ?? "unknown")
-        .toString()
-        .split(",")[0]
-        .trim();
+const bypassFailBuckets = new Map();
+// Addresses that can never be a real caller on a public endpoint. An entry
+// matching this means TRUST_PROXY_HOPS is pointing at an internal proxy, not at
+// the client.
+//
+// RFC1918 and loopback are not the whole set: container platforms put RFC 6598
+// CGNAT space (100.64.0.0/10) in X-Forwarded-For, and Google's load balancers -
+// which Railway sits behind - source from 35.191.0.0/16 and 130.211.0.0/22,
+// both of which are publicly routable. Leaving those out made the left-walk
+// return on its first iteration and collapse every caller into one bucket
+// keyed on the proxy, which is the availability regression the walk exists to
+// close. None of these ranges can be the source address of a real client of
+// this endpoint, so skipping past them opens no spoof window: the entry to
+// their left is the one the platform appended, not one the caller typed.
+const PRIVATE = /^(::1|0\.0\.0\.0$|127\.|10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.|169\.254\.|100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.|35\.191\.|130\.211\.[0-3]\.|f[cd][0-9a-f]{2}:|fe80:)/i;
+const norm = (s) => s.replace(/^::ffff:/i, "").replace(/^\[|\]$/g, "");
+// One line per process, not one per request: a per-request console.error on a
+// misconfigured hop count is its own amplifier.
+let warnedAllPrivate = false;
+/**
+ * The address to charge for this request. The socket peer is the trustworthy
+ * value and the header is only a hint: reading X-Forwarded-For[0] takes
+ * whatever the client typed, so a fresh value per request buys a fresh bucket
+ * and the limiter never fires (and setting a victim's address burns theirs).
+ */
+export function clientKey(req) {
+    const socketIp = req.socket?.remoteAddress ?? "unknown";
+    if (TRUST_PROXY_HOPS === 0)
+        return socketIp;
+    const raw = req.headers["x-forwarded-for"];
+    const entries = (Array.isArray(raw) ? raw.join(",") : raw ?? "")
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    // Fewer entries than trusted hops means the request did not come through the
+    // proxy chain we configured for; fall back to the peer rather than to a
+    // caller-supplied entry.
+    if (entries.length < TRUST_PROXY_HOPS)
+        return socketIp;
+    // Start at the hop we were told to trust, then walk LEFT past anything
+    // private. An under-counted TRUST_PROXY_HOPS otherwise lands on an internal
+    // proxy address and collapses every caller into one bucket - which turns the
+    // failed-bypass lockout into a whole-endpoint outage. Walking left is not a
+    // spoof window: Railway appends the real peer, so the first PUBLIC entry from
+    // the right is the earliest one an attacker cannot have written.
+    for (let i = entries.length - TRUST_PROXY_HOPS; i >= 0; i--) {
+        const candidate = norm(entries[i]);
+        if (candidate && !PRIVATE.test(candidate))
+            return candidate;
+    }
+    if (!warnedAllPrivate) {
+        warnedAllPrivate = true;
+        // eslint-disable-next-line no-console
+        console.error(`[mcp] every X-Forwarded-For entry is private (trust_proxy_hops=${TRUST_PROXY_HOPS}); ` +
+            `keying the limiter on the socket peer. Measure the real hop count on the live deploy.`);
+    }
+    return socketIp;
+}
+function sweep(map, now) {
+    for (const [k, b] of map) {
+        if (b.resetAt < now)
+            map.delete(k);
+    }
+}
+/**
+ * Fetch (or open) this key's bucket. Never clear() the whole map on hitting the
+ * cap: that zeroes every live counter and hands an attacker a free limiter
+ * reset. Expired entries go first, then oldest-first (Map preserves insertion
+ * order).
+ */
+function bucketFor(map, key, windowMs, now) {
+    const existing = map.get(key);
+    if (existing && existing.resetAt >= now)
+        return existing;
+    if (map.size >= MAX_TRACKED_KEYS) {
+        sweep(map, now);
+        for (const k of map.keys()) {
+            if (map.size < MAX_TRACKED_KEYS)
+                break;
+            map.delete(k);
+        }
+    }
+    const fresh = { count: 0, resetAt: now + windowMs };
+    map.set(key, fresh);
+    return fresh;
+}
+// unref'd so it never holds the process open - this module graph is shared with
+// the stdio/CLI entry point.
+const sweepTimer = setInterval(() => {
+    const now = Date.now();
+    sweep(rateBuckets, now);
+    sweep(bypassFailBuckets, now);
+}, RATE_WINDOW_MS);
+sweepTimer.unref();
+/**
+ * Does this JSON-RPC body actually carry a `_bypass_key`? The failed-bypass
+ * lockout is scoped to these: 429ing everything from the bucket key would let
+ * eleven wrong keys take tools/list, initialize, the free tools and every paid
+ * x402 call offline for the whole window - and with an unmeasured
+ * TRUST_PROXY_HOPS that bucket key can be one shared proxy address, i.e. the
+ * whole endpoint. Guesses always carry the key, so the guard still stops 100%
+ * of guessing. Parsed off the envelope rather than probed loosely so a
+ * `_bypass_key` sitting somewhere else in the payload cannot self-lock.
+ */
+export function carriesBypassKey(body) {
+    const one = (m) => typeof m?.params?.arguments?._bypass_key === "string" ||
+        typeof m?.params?._bypass_key === "string";
+    return Array.isArray(body) ? body.some(one) : one(body);
+}
+/**
+ * Same predicate rateLimit() uses, exported so dispatch can consult it at the
+ * point of the guess. One definition: a second copy would drift.
+ */
+export function isBypassBlocked(ip) {
+    const b = bypassFailBuckets.get(ip);
+    return !!b && b.resetAt >= Date.now() && b.count > BYPASS_FAIL_LIMIT;
+}
+export function rateLimit(req, res) {
+    const ip = clientKey(req);
     const now = Date.now();
-    let bucket = rateBuckets.get(ip);
-    if (!bucket || bucket.resetAt < now) {
-        bucket = { count: 0, resetAt: now + RATE_WINDOW_MS };
-        rateBuckets.set(ip, bucket);
+    // A caller who has burned through the failed-bypass budget is guessing at the
+    // operator secret; hold them off for the rest of the window regardless of
+    // their request count - but only on the requests that carry a key, so the
+    // lockout cannot become a denial of service against everyone else sharing
+    // the bucket key.
+    const fails = bypassFailBuckets.get(ip);
+    if (fails && fails.resetAt >= now && fails.count > BYPASS_FAIL_LIMIT && carriesBypassKey(req.body)) {
+        res.status(429).json({ error: "rate_limited", retry_after_s: Math.ceil((fails.resetAt - now) / 1000) });
+        return false;
     }
-    bucket.count += 1;
+    const bucket = bucketFor(rateBuckets, ip, RATE_WINDOW_MS, now);
+    // A batched body is N calls, not one request: charging it as one let a single
+    // POST buy the whole window's worth of upstream fan-out.
+    bucket.count += Array.isArray(req.body) ? Math.max(1, req.body.length) : 1;
     if (bucket.count > RATE_LIMIT_PER_WINDOW) {
         res.status(429).json({ error: "rate_limited", retry_after_s: Math.ceil((bucket.resetAt - now) / 1000) });
         return false;
     }
     return true;
 }
+/** Count one wrong `_bypass_key` against this caller. */
+export function recordBypassFailure(ip) {
+    const now = Date.now();
+    const bucket = bucketFor(bypassFailBuckets, ip, BYPASS_FAIL_WINDOW_MS, now);
+    bucket.count += 1;
+    // Slide the window on every recorded failure so a caller who keeps guessing
+    // never ages into a fresh budget, while a bucket that goes quiet still
+    // expires on its own. Only real failures slide it: refused requests are not
+    // counted, so an operator retrying a valid key cannot extend their own hold.
+    bucket.resetAt = now + BYPASS_FAIL_WINDOW_MS;
+    // `>= limit+1 && !logged` rather than `=== limit+1`: a batch that records
+    // several failures in a row steps straight over the equality and the alert
+    // never fires.
+    if (bucket.count >= BYPASS_FAIL_LIMIT + 1 && !bucket.logged) {
+        bucket.logged = true;
+        // eslint-disable-next-line no-console
+        console.error(`[mcp] ${ip} exceeded the failed _bypass_key budget ` +
+            `(${BYPASS_FAIL_LIMIT} per ${Math.round(BYPASS_FAIL_WINDOW_MS / 60_000)}min); throttling`);
+    }
+}
+/**
+ * Minimum MCP_BYPASS_KEY strength, in bytes. 32 random bytes is the same floor
+ * the Python services put on X402_REPLAY_HMAC_KEY, which raises at import
+ * rather than warning.
+ */
+export const MIN_BYPASS_KEY_BYTES = 32;
+/**
+ * Refuse to boot the public HTTP transport behind a guessable bypass key.
+ *
+ * This used to be a console warning. A warning on a deploy nobody is reading
+ * the logs of is not a control, and it left the two request budgets above
+ * load-bearing: they are the only thing between a short key and an online
+ * guesser. A key too weak to stand on its own is an operator mistake that has
+ * to be fixed before the endpoint is reachable, not after.
+ *
+ * Scoped to the HTTP transport on purpose. stdio is single-tenant, runs on the
+ * user's own machine, and exposes no network guessing surface, so the same
+ * floor there would only break local dev for no gain.
+ *
+ * Never logs or embeds the key, only its length.
+ */
+export function assertBypassKeyStrength(rawKey) {
+    if (!rawKey)
+        return; // unset is fine: the bypass path is simply off.
+    const bytes = Buffer.byteLength(rawKey, "utf8");
+    if (bytes >= MIN_BYPASS_KEY_BYTES)
+        return;
+    throw new Error(`MCP_BYPASS_KEY is ${bytes} bytes; the HTTP transport requires at least ` +
+        `${MIN_BYPASS_KEY_BYTES}. It is an operator secret on a public endpoint, ` +
+        "and a short one is guessable online. Generate a new one with " +
+        "`openssl rand -hex 32`, set it on this service, and rotate it per " +
+        "service rather than sharing one across them. To run without the bypass " +
+        "path, unset MCP_BYPASS_KEY entirely; callers pay with their own " +
+        "payment_signature either way.");
+}
 export async function runHttp(port) {
+    // Before anything binds a port. A boot that refuses is recoverable; a boot
+    // that serves a weak operator key is not.
+    assertBypassKeyStrength(process.env["MCP_BYPASS_KEY"]);
     const app = express();
     app.use(express.json({ limit: "1mb" }));
     app.get("/", (_req, res) => {
@@ -271,13 +496,26 @@ export async function runHttp(port) {
     // build-connect-handle-close per request. Cheap: the Server object
     // is just function pointers, no expensive state.
     app.all("/mcp", async (req, res) => {
+        // Complement to the per-guess gate below, not a substitute for it: batching
+        // was dropped in MCP spec 2025-06-18 but the SDK still maps batched
+        // messages for back-compat, so cap the array rather than banning it and
+        // breaking legacy 2025-03-26 clients.
+        if (Array.isArray(req.body) && req.body.length > MAX_BATCH_MESSAGES) {
+            res.status(413).json({ error: "batch_too_large", max_messages: MAX_BATCH_MESSAGES });
+            return;
+        }
         if (!rateLimit(req, res))
             return;
+        const ip = clientKey(req);
         let transport = null;
         try {
             const mcpServer = buildServer({
                 bypassKey: process.env["MCP_BYPASS_KEY"],
                 userAgent: `xrpl-utilities-mcp/${SERVER_VERSION} (http)`,
+                onBypassFailure: () => recordBypassFailure(ip),
+                // Per-message, so a batched body cannot spend thousands of guesses
+                // between two request-level checks.
+                isBypassBlocked: () => isBypassBlocked(ip),
             });
             transport = new StreamableHTTPServerTransport({
                 sessionIdGenerator: undefined, // stateless
@@ -305,9 +543,11 @@ export async function runHttp(port) {
         // eslint-disable-next-line no-console
         console.error("[mcp] unhandledRejection:", reason);
     });
+    // Key strength is checked at the top of runHttp, before anything binds, and
+    // is a refusal rather than the warning that used to sit here.
     app.listen(port, () => {
         // eslint-disable-next-line no-console
-        console.log(`xrpl-utilities-mcp listening on :${port} (http)`);
+        console.log(`xrpl-utilities-mcp listening on :${port} (http, trust_proxy_hops=${TRUST_PROXY_HOPS})`);
     });
 }
 //# sourceMappingURL=http.js.map

package/dist/transport/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,OAAwC,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,2BAA2B;IAC3B,4BAA4B;CAC7B,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,qBAAqB,GAAG,EAAE,CAAC,CAAC,yCAAyC;AAM3E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAElD,SAAS,SAAS,CAAC,GAAY,EAAE,GAAa;IAC5C,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;SACjF,QAAQ,EAAE;SACV,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE;SACd,IAAI,EAAE,CAAC;IACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;QACpC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,cAAc,EAAE,CAAC;QACrD,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,IAAI,MAAM,CAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY;IACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,oBAAoB;YAC7B,WAAW,EACT,gIAAgI;YAClI,OAAO,EAAE,cAAc;YACvB,YAAY,EAAE,MAAM;YACpB,QAAQ,EAAE,cAAc;YACxB,mBAAmB,EAAE,0BAA0B;YAC/C,YAAY,EAAE,mBAAmB;YACjC,cAAc,EAAE,WAAW;YAC3B,IAAI,EAAE,sDAAsD;YAC5D,SAAS,EAAE,4BAA4B;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,kEAAkE;IAClE,iEAAiE;IACjE,+DAA+D;IAC/D,8BAA8B;IAE9B,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;QACtB,cAAc,EAAE,cAAc;QAC9B,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EACT,sEAAsE;YACtE,uDAAuD,GAAG,SAAS,CAAC,MAAM,GAAG,kBAAkB;YAC/F,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,6EAA6E;QAC/E,cAAc,EAAE,MAAM;QACtB,SAAS,EAAE;YACT,QAAQ,EAAE,+BAA+B;YACzC,GAAG,EAAE,MAAM;YACX,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,cAAc;YACxB,mBAAmB,EAAE,0BAA0B;YAC/C,MAAM,EAAE,UAAU;SACnB;QACD,UAAU,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACxC,UAAU,EAAE,SAAS,CAAC,MAAM;QAC5B,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,YAAY,EAAE,CAAC,CAAC,WAAW;SAC5B,CAAC,CAAC;QACH,QAAQ,EAAE,4BAA4B;QACtC,UAAU,EAAE,sDAAsD;QAClE,GAAG,EAAE,mDAAmD;QACxD,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEzE,yEAAyE;IACzE,yEAAyE;IACzE,+DAA+D;IAC/D,wEAAwE;IACxE,6DAA6D;IAC7D,EAAE;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,8DAA8D;IAC9D,2EAA2E;IAC3E,yEAAyE;IACzE,gBAAgB;IAChB,EAAE;IACF,sEAAsE;IACtE,yEAAyE;IACzE,8DAA8D;IAC9D,EAAE;IACF,uEAAuE;IACvE,uEAAuE;IACvE,mBAAmB;IACnB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC;QACzB,WAAW,EAAE,CAAC;QACd,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,uCAAuC,GAAG,SAAS,CAAC,MAAM,GAAG,yBAAyB;YACtF,mEAAmE;YACnE,wEAAwE;YACxE,wEAAwE;YACxE,yCAAyC;QAC3C,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,mCAAmC;QAC7C,QAAQ,EAAE,qBAAqB;QAC/B,SAAS,EAAE,SAAS,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI;YACnC,oEAAoE;YACpE,qEAAqE;YACrE,sEAAsE;YACtE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CACvC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACV,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC/C,OAAO;gBACL,GAAG,EAAE,qCAAqC,CAAC,CAAC,IAAI,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxC,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,QAAQ;aAClB,CAAC;QACJ,CAAC,CAAC;QACF,uEAAuE;QACvE,sEAAsE;QACtE,QAAQ,EAAE;YACR;gBACE,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,OAAO;gBACf,mEAAmE;gBACnE,qEAAqE;gBACrE,kEAAkE;gBAClE,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,0CAA0C;wBACjD,MAAM,EAAE,oCAAoC;qBAC7C;oBACD,EAAE,MAAM,EAAE,KAAK,EAAE;iBAClB;aACF;YACD;gBACE,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,MAAM;wBACd,KAAK,EAAE,4CAA4C;wBACnD,QAAQ,EAAE,CAAC;qBACZ;iBACF;aACF;SACF;QACD,IAAI,EAAE,wCAAwC;QAC9C,QAAQ,EAAE,2CAA2C;KACtD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACzC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1E,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,GAAG,CAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,IAAI,GAAG;YACX,uBAAuB;YACvB,EAAE;YACF,qEAAqE;YACrE,wDAAwD,SAAS,CAAC,MAAM,gCAAgC;YACxG,8BAA8B;YAC9B,gCAAgC;YAChC,EAAE;YACF,YAAY;YACZ,wEAAwE;YACxE,8DAA8D;YAC9D,kCAAkC;YAClC,OAAO;YACP,6BAA6B;YAC7B,6CAA6C;YAC7C,OAAO;YACP,EAAE;YACF,UAAU;YACV,QAAQ;YACR,EAAE;YACF,eAAe;YACf,4EAA4E;YAC5E,0EAA0E;YAC1E,6EAA6E;YAC7E,4EAA4E;YAC5E,0EAA0E;YAC1E,sEAAsE;YACtE,2EAA2E;YAC3E,+DAA+D;YAC/D,6EAA6E;YAC7E,4EAA4E;YAC5E,EAAE;YACF,cAAc;YACd,0DAA0D;YAC1D,gEAAgE;YAChE,qEAAqE;YACrE,kEAAkE;YAClE,2CAA2C;YAC3C,EAAE;YACF,qBAAqB;YACrB,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,uDAAuD;YACvD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG;YACX,2EAA2E;YAC3E,iFAAiF;YACjF,+BAA+B;YAC/B,eAAe;YACf,UAAU;YACV,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,2DAA2D;IAC3D,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACjC,IAAI,SAAS,GAAyC,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC;gBAC5B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACxC,SAAS,EAAE,sBAAsB,cAAc,SAAS;aACzD,CAAC,CAAC;YACH,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAC5C,kBAAkB,EAAE,SAAS,EAAE,YAAY;aAC5C,CAAC,CAAC;YACH,iEAAiE;YACjE,8DAA8D;YAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAG,CAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/transport/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,OAAwC,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,2BAA2B;IAC3B,4BAA4B;CAC7B,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,qBAAqB,GAAG,EAAE,CAAC,CAAC,yCAAyC;AAE3E,+EAA+E;AAC/E,+EAA+E;AAC/E,sBAAsB;AACtB,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,gFAAgF;AAChF,+EAA+E;AAC/E,yEAAyE;AACzE,0EAA0E;AAC1E,gEAAgE;AAChE,MAAM,qBAAqB,GAAG,SAAS,CAAC;AACxC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,qCAAqC;AACrC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAQ1F,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAClD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAsB,CAAC;AAExD,2EAA2E;AAC3E,gFAAgF;AAChF,cAAc;AACd,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,OAAO,GACX,4KAA4K,CAAC;AAC/K,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAE/E,8EAA8E;AAC9E,gDAAgD;AAChD,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAwC;IAChE,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;IACxD,IAAI,gBAAgB,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;SAC7D,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,6EAA6E;IAC7E,wEAAwE;IACxE,yBAAyB;IACzB,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,QAAQ,CAAC;IACvD,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,iEAAiE;IACjE,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAW,CAAC,CAAC;QAC7C,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG,IAAI,CAAC;QACxB,sCAAsC;QACtC,OAAO,CAAC,KAAK,CACX,kEAAkE,gBAAgB,KAAK;YACrF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,GAAW;IACtD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,GAA4B,EAAE,GAAW,EAAE,QAAgB,EAAE,GAAW;IACzF,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IACzD,IAAI,GAAG,CAAC,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACjC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3B,IAAI,GAAG,CAAC,IAAI,GAAG,gBAAgB;gBAAE,MAAM;YACvC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;IAChE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACxB,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC,EAAE,cAAc,CAAC,CAAC;AACnB,UAAU,CAAC,KAAK,EAAE,CAAC;AAEnB;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,MAAM,GAAG,GAAG,CAAC,CAAM,EAAE,EAAE,CACrB,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,KAAK,QAAQ;QACrD,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,KAAK,QAAQ,CAAC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,iBAAiB,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAY,EAAE,GAAa;IACnD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,8EAA8E;IAC9E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,iBAAiB,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACnG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACxG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;IAC/D,8EAA8E;IAC9E,yDAAyD;IACzD,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,KAAK,GAAG,qBAAqB,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,EAAE,EAAE,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IAClB,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,qBAAqB,CAAC;IAC7C,0EAA0E;IAC1E,2EAA2E;IAC3E,eAAe;IACf,IAAI,MAAM,CAAC,KAAK,IAAI,iBAAiB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC5D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,sCAAsC;QACtC,OAAO,CAAC,KAAK,CACX,SAAS,EAAE,0CAA0C;YACnD,IAAI,iBAAiB,QAAQ,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,MAAM,CAAC,kBAAkB,CAC5F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,gDAAgD;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,KAAK,IAAI,oBAAoB;QAAE,OAAO;IAC1C,MAAM,IAAI,KAAK,CACb,qBAAqB,KAAK,+CAA+C;QACvE,GAAG,oBAAoB,mDAAmD;QAC1E,+DAA+D;QAC/D,oEAAoE;QACpE,yEAAyE;QACzE,kEAAkE;QAClE,+BAA+B,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY;IACxC,2EAA2E;IAC3E,0CAA0C;IAC1C,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,oBAAoB;YAC7B,WAAW,EACT,gIAAgI;YAClI,OAAO,EAAE,cAAc;YACvB,YAAY,EAAE,MAAM;YACpB,QAAQ,EAAE,cAAc;YACxB,mBAAmB,EAAE,0BAA0B;YAC/C,YAAY,EAAE,mBAAmB;YACjC,cAAc,EAAE,WAAW;YAC3B,IAAI,EAAE,sDAAsD;YAC5D,SAAS,EAAE,4BAA4B;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,kEAAkE;IAClE,iEAAiE;IACjE,+DAA+D;IAC/D,8BAA8B;IAE9B,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;QACtB,cAAc,EAAE,cAAc;QAC9B,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EACT,sEAAsE;YACtE,uDAAuD,GAAG,SAAS,CAAC,MAAM,GAAG,kBAAkB;YAC/F,uEAAuE;YACvE,mEAAmE;YACnE,oEAAoE;YACpE,6EAA6E;QAC/E,cAAc,EAAE,MAAM;QACtB,SAAS,EAAE;YACT,QAAQ,EAAE,+BAA+B;YACzC,GAAG,EAAE,MAAM;YACX,SAAS,EAAE,WAAW;YACtB,QAAQ,EAAE,cAAc;YACxB,mBAAmB,EAAE,0BAA0B;YAC/C,MAAM,EAAE,UAAU;SACnB;QACD,UAAU,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC;QACxC,UAAU,EAAE,SAAS,CAAC,MAAM;QAC5B,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,mBAAmB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,YAAY,EAAE,CAAC,CAAC,WAAW;SAC5B,CAAC,CAAC;QACH,QAAQ,EAAE,4BAA4B;QACtC,UAAU,EAAE,sDAAsD;QAClE,GAAG,EAAE,mDAAmD;QACxD,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEzE,yEAAyE;IACzE,yEAAyE;IACzE,+DAA+D;IAC/D,wEAAwE;IACxE,6DAA6D;IAC7D,EAAE;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,8DAA8D;IAC9D,2EAA2E;IAC3E,yEAAyE;IACzE,gBAAgB;IAChB,EAAE;IACF,sEAAsE;IACtE,yEAAyE;IACzE,8DAA8D;IAC9D,EAAE;IACF,uEAAuE;IACvE,uEAAuE;IACvE,mBAAmB;IACnB,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,CAAC;QACzB,WAAW,EAAE,CAAC;QACd,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EACT,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,uCAAuC,GAAG,SAAS,CAAC,MAAM,GAAG,yBAAyB;YACtF,mEAAmE;YACnE,wEAAwE;YACxE,wEAAwE;YACxE,yCAAyC;QAC3C,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,mCAAmC;QAC7C,QAAQ,EAAE,qBAAqB;QAC/B,SAAS,EAAE,SAAS,CAAC,MAAM,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI;YACnC,oEAAoE;YACpE,qEAAqE;YACrE,sEAAsE;YACtE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CACvC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACV,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC/C,OAAO;gBACL,GAAG,EAAE,qCAAqC,CAAC,CAAC,IAAI,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxC,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,QAAQ;aAClB,CAAC;QACJ,CAAC,CAAC;QACF,uEAAuE;QACvE,sEAAsE;QACtE,QAAQ,EAAE;YACR;gBACE,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE,OAAO;gBACf,mEAAmE;gBACnE,qEAAqE;gBACrE,kEAAkE;gBAClE,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,0CAA0C;wBACjD,MAAM,EAAE,oCAAoC;qBAC7C;oBACD,EAAE,MAAM,EAAE,KAAK,EAAE;iBAClB;aACF;YACD;gBACE,OAAO,EAAE,aAAa;gBACtB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE;oBACN;wBACE,MAAM,EAAE,MAAM;wBACd,KAAK,EAAE,4CAA4C;wBACnD,QAAQ,EAAE,CAAC;qBACZ;iBACF;aACF;SACF;QACD,IAAI,EAAE,wCAAwC;QAC9C,QAAQ,EAAE,2CAA2C;KACtD,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CACzC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1E,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,GAAG,CAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,IAAI,GAAG;YACX,uBAAuB;YACvB,EAAE;YACF,qEAAqE;YACrE,wDAAwD,SAAS,CAAC,MAAM,gCAAgC;YACxG,8BAA8B;YAC9B,gCAAgC;YAChC,EAAE;YACF,YAAY;YACZ,wEAAwE;YACxE,8DAA8D;YAC9D,kCAAkC;YAClC,OAAO;YACP,6BAA6B;YAC7B,6CAA6C;YAC7C,OAAO;YACP,EAAE;YACF,UAAU;YACV,QAAQ;YACR,EAAE;YACF,eAAe;YACf,4EAA4E;YAC5E,0EAA0E;YAC1E,6EAA6E;YAC7E,4EAA4E;YAC5E,0EAA0E;YAC1E,sEAAsE;YACtE,2EAA2E;YAC3E,+DAA+D;YAC/D,6EAA6E;YAC7E,4EAA4E;YAC5E,EAAE;YACF,cAAc;YACd,0DAA0D;YAC1D,gEAAgE;YAChE,qEAAqE;YACrE,kEAAkE;YAClE,2CAA2C;YAC3C,EAAE;YACF,qBAAqB;YACrB,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,uDAAuD;YACvD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG;YACX,2EAA2E;YAC3E,iFAAiF;YACjF,+BAA+B;YAC/B,eAAe;YACf,UAAU;YACV,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,2DAA2D;IAC3D,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,4EAA4E;QAC5E,oEAAoE;QACpE,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACjC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,SAAS,GAAyC,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,CAAC;gBAC5B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACxC,SAAS,EAAE,sBAAsB,cAAc,SAAS;gBACxD,eAAe,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC9C,mEAAmE;gBACnE,oCAAoC;gBACpC,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;aAC3C,CAAC,CAAC;YACH,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAC5C,kBAAkB,EAAE,SAAS,EAAE,YAAY;aAC5C,CAAC,CAAC;YACH,iEAAiE;YACjE,8DAA8D;YAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,SAAS,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACnC,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAG,CAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,8DAA8D;IAE9D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,4BAA4B,gBAAgB,GAAG,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/validate.d.ts

@@ -13,13 +13,21 @@
  *      block. If a service renames /scan to /scan/v2 we want to fail
  *      LOUD here, not silently 404 every agent call.
  *
- * On dev / first-launch we may want to tolerate manifest fetch failures
- * (so the MCP server still starts when networking is flaky); on
- * production we want to fail-closed. STRICT_VALIDATE=1 toggles that.
+ * On dev / first-launch we tolerate manifest fetch failures (so the MCP
+ * server still starts when networking is flaky). STRICT_VALIDATE=1 turns a
+ * fetch failure into an error instead of a warning; it is opt-in, NOT the
+ * default for HTTP, because railway.json restarts ON_FAILURE and failing
+ * closed would crash-loop the whole endpoint - taking the other five healthy
+ * services' tools with it - whenever one backend is cold at boot.
+ *
+ * Either way `checked` records whether a manifest was actually read. "Could
+ * not check" and "checked, all clear" must never produce the same result.
  */
 export interface ValidationResult {
     service: string;
     ok: boolean;
+    /** False when no manifest could be read, so nothing was verified. */
+    checked: boolean;
     warnings: string[];
     errors: string[];
 }
@@ -27,3 +35,4 @@ export declare function validateAllServices(opts: {
     strict: boolean;
     fetchTimeoutMs?: number;
 }): Promise<ValidationResult[]>;
+export declare function isTransientFetchError(e: unknown, depth?: number): boolean;

package/dist/validate.js

@@ -13,28 +13,86 @@
  *      block. If a service renames /scan to /scan/v2 we want to fail
  *      LOUD here, not silently 404 every agent call.
  *
- * On dev / first-launch we may want to tolerate manifest fetch failures
- * (so the MCP server still starts when networking is flaky); on
- * production we want to fail-closed. STRICT_VALIDATE=1 toggles that.
+ * On dev / first-launch we tolerate manifest fetch failures (so the MCP
+ * server still starts when networking is flaky). STRICT_VALIDATE=1 turns a
+ * fetch failure into an error instead of a warning; it is opt-in, NOT the
+ * default for HTTP, because railway.json restarts ON_FAILURE and failing
+ * closed would crash-loop the whole endpoint - taking the other five healthy
+ * services' tools with it - whenever one backend is cold at boot.
+ *
+ * Either way `checked` records whether a manifest was actually read. "Could
+ * not check" and "checked, all clear" must never produce the same result.
  */
 import { SERVICES } from "./services/index.js";
 export async function validateAllServices(opts) {
-    const results = await Promise.all(SERVICES.map((s) => validateService(s, opts.fetchTimeoutMs ?? 8_000)));
+    const results = await Promise.all(SERVICES.map((s) => validateService(s, opts.fetchTimeoutMs ?? 8_000, opts.strict)));
     return results;
 }
-async function validateService(svc, timeoutMs) {
+/**
+ * Codes that mean "the connection did not happen", not "the service answered
+ * badly". Node's fetch reports every one of these as the same opaque
+ * `TypeError: fetch failed` and hangs the real code off err.cause, so a
+ * message-substring test never sees ECONNREFUSED/ENOTFOUND - the exact
+ * cold-start shape the retry exists for.
+ */
+const TRANSIENT_CODES = new Set([
+    "ECONNRESET", "ETIMEDOUT", "ECONNREFUSED", "ENOTFOUND", "EAI_AGAIN",
+    "EPIPE", "EHOSTUNREACH", "ENETUNREACH",
+    "UND_ERR_CONNECT_TIMEOUT", "UND_ERR_HEADERS_TIMEOUT",
+    "UND_ERR_BODY_TIMEOUT", "UND_ERR_SOCKET",
+]);
+export function isTransientFetchError(e, depth = 0) {
+    if (!e || typeof e !== "object" || depth > 5)
+        return false;
+    const err = e;
+    if (err.name === "AbortError" || err.name === "TimeoutError")
+        return true;
+    if (typeof err.code === "string" && TRANSIENT_CODES.has(err.code))
+        return true;
+    // undici wraps multi-address (A + AAAA) connect failures in an AggregateError
+    if (Array.isArray(err.errors) && err.errors.some((x) => isTransientFetchError(x, depth + 1)))
+        return true;
+    if (err.cause && isTransientFetchError(err.cause, depth + 1))
+        return true;
+    // Last-resort message match: keeps non-undici throwers and existing callers working.
+    const msg = typeof err.message === "string" ? err.message : "";
+    return /aborted|ETIMEDOUT|ECONNRESET|ECONNREFUSED|ENOTFOUND|EAI_AGAIN/.test(msg);
+}
+async function fetchManifestOnce(url, timeoutMs) {
+    const ctl = new AbortController();
+    const tId = setTimeout(() => ctl.abort(), timeoutMs);
+    try {
+        return await fetch(url, { signal: ctl.signal });
+    }
+    finally {
+        clearTimeout(tId);
+    }
+}
+async function validateService(svc, timeoutMs, strict) {
     const out = {
         service: svc.label,
         ok: true,
+        checked: false,
         warnings: [],
         errors: [],
     };
     let manifest = null;
     try {
-        const ctl = new AbortController();
-        const tId = setTimeout(() => ctl.abort(), timeoutMs);
-        const r = await fetch(svc.manifestUrl, { signal: ctl.signal });
-        clearTimeout(tId);
+        let r;
+        try {
+            r = await fetchManifestOnce(svc.manifestUrl, timeoutMs);
+        }
+        catch (e) {
+            // One retry on a transient blip, same contract the contract scrubber
+            // uses. Without it STRICT_VALIDATE=1 is unusable: a cold backend at boot
+            // would fail the whole start.
+            if (!isTransientFetchError(e))
+                throw e;
+            // Cold containers need real time to come up; an immediate retry re-hits
+            // the same refused socket.
+            await new Promise((r) => setTimeout(r, 750));
+            r = await fetchManifestOnce(svc.manifestUrl, timeoutMs);
+        }
         if (!r.ok) {
             out.warnings.push(`manifest fetch returned HTTP ${r.status}`);
         }
@@ -46,10 +104,16 @@ async function validateService(svc, timeoutMs) {
         out.warnings.push(`manifest fetch failed: ${e.message}`);
     }
     if (!manifest) {
-        // No live manifest - we can still start, but flag it so the
-        // operator knows the validator didn't actually verify anything.
+        // No live manifest - nothing was verified. checked stays false so the
+        // caller can tell this apart from a clean run; under strict it is an
+        // error, not a warning.
+        if (strict) {
+            out.errors.push(`no live manifest from ${svc.manifestUrl}; STRICT_VALIDATE=1 treats an unverified service as drift`);
+            out.ok = false;
+        }
         return out;
     }
+    out.checked = true;
     const liveVersion = String(manifest["schema_version"] ?? "");
     if (liveVersion && !svc.knownSchemaVersions.includes(liveVersion)) {
         const msg = `${svc.label} reports schema_version=${liveVersion}; this MCP build ` +

package/dist/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAU/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAGzC;IACC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAe,EAAE,SAAiB;IAC/D,MAAM,GAAG,GAAqB;QAC5B,OAAO,EAAE,GAAG,CAAC,KAAK;QAClB,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,YAAY,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA2B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,4DAA4D;QAC5D,gEAAgE;QAChE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GACP,GAAG,GAAG,CAAC,KAAK,2BAA2B,WAAW,mBAAmB;YACrE,mBAAmB,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YACzE,uCAAuC,CAAC;QAC1C,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,sDAAsD;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,sEAAsE;QACtE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CACzB,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAoC,CAAC;aAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;aAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,QAAQ,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,IAAI,oBAAoB;oBAC9D,kEAAkE;oBAClE,mBAAmB,GAAG,CAAC,KAAK,eAAe,CAC9C,CAAC;gBACF,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAY/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAGzC;IACC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CACnF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW;IACnE,OAAO,EAAE,cAAc,EAAE,aAAa;IACtC,yBAAyB,EAAE,yBAAyB;IACpD,sBAAsB,EAAE,gBAAgB;CACzC,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CAAC,CAAU,EAAE,KAAK,GAAG,CAAC;IACzD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,GAAG,GAAG,CAA4F,CAAC;IACzG,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC1E,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,8EAA8E;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1G,IAAI,GAAG,CAAC,KAAK,IAAI,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,qFAAqF;IACrF,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,OAAO,+DAA+D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,SAAiB;IAC7D,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAe,EACf,SAAiB,EACjB,MAAe;IAEf,MAAM,GAAG,GAAqB;QAC5B,OAAO,EAAE,GAAG,CAAC,KAAK;QAClB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,EAAE;QACZ,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,CAAC;QACH,IAAI,CAAW,CAAC;QAChB,IAAI,CAAC;YACH,CAAC,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,qEAAqE;YACrE,yEAAyE;YACzE,8BAA8B;YAC9B,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,CAAC;YACvC,wEAAwE;YACxE,2BAA2B;YAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7C,CAAC,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA2B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,sEAAsE;QACtE,qEAAqE;QACrE,wBAAwB;QACxB,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,yBAAyB,GAAG,CAAC,WAAW,2DAA2D,CACpG,CAAC;YACF,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;IAEnB,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClE,MAAM,GAAG,GACP,GAAG,GAAG,CAAC,KAAK,2BAA2B,WAAW,mBAAmB;YACrE,mBAAmB,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;YACzE,uCAAuC,CAAC;QAC1C,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,sDAAsD;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,sEAAsE;QACtE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CACzB,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAoC,CAAC;aAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;aAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,QAAQ,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,IAAI,oBAAoB;oBAC9D,kEAAkE;oBAClE,mBAAmB,GAAG,CAAC,KAAK,eAAe,CAC9C,CAAC;gBACF,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xrpl-utilities/mcp",
-  "version": "0.2.195",
+  "version": "0.2.201",
   "mcpName": "io.github.XRPL-Utilities/mcp",
   "description": "Model Context Protocol server for the XRPL-Utilities portfolio: Sentinel (wallet classifier), Pulse (signal feed), Telemetry (supply + utility floor), Trust (XLS-70/80/81 directory), Vault (RWA tracker), and Flows (ETF AUM vs XRPL flow correlation). Exposes each service's read endpoints as MCP tools so AI agents can discover and use them via stdio (Claude Desktop) or HTTP/SSE (hosted at mcp.xrpl-utilities.io). Stateless passthrough. Caller provides their own x402 payment header.",
   "license": "MIT",
@@ -18,11 +18,12 @@
     "start:stdio": "node dist/index.js --transport stdio",
     "start:http": "node dist/index.js --transport http",
     "dev": "tsc --watch",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "test": "npm run build && node --test tests/*.test.mjs"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.0.0",
-    "@xr-utilities/h-seal-provider": "github:XR-Utilities/h-seal-provider#v0.2.0",
+    "@modelcontextprotocol/sdk": "~1.29.0",
+    "@xr-utilities/h-seal-provider": "github:XR-Utilities/h-seal-provider#e266eeaccc916339eb329012eaf9557368bebbe0",
     "express": "^4.21.0"
   },
   "devDependencies": {