airweave-mcp-search 0.6.51 → 0.6.53

package/build/index-http.d.ts

@@ -1,10 +1,15 @@
 #!/usr/bin/env node
 /**
- * Airweave MCP Server - HTTP/Streamable Transport
+ * Airweave MCP Server - HTTP/Streamable Transport with Redis Session Management
  *
  * This is the production HTTP server for cloud-based AI platforms like OpenAI Agent Builder.
  * Uses the modern Streamable HTTP transport (MCP 2025-03-26) instead of deprecated SSE.
  *
+ * Session Management:
+ * - Redis stores session metadata (API key, collection, timestamps)
+ * - Each pod maintains an in-memory cache of McpServer/Transport instances
+ * - Sessions can be served by any pod (stateless, horizontally scalable)
+ *
  * Endpoint: https://mcp.airweave.ai/mcp
  * Protocol: MCP 2025-03-26 (Streamable HTTP)
  * Authentication: Bearer token, X-API-Key, or query parameter

package/build/index-http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index-http.d.ts","sourceRoot":"","sources":["../src/index-http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;GASG"}
+{"version":3,"file":"index-http.d.ts","sourceRoot":"","sources":["../src/index-http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG"}

package/build/index-http.js

@@ -1,10 +1,15 @@
 #!/usr/bin/env node
 /**
- * Airweave MCP Server - HTTP/Streamable Transport
+ * Airweave MCP Server - HTTP/Streamable Transport with Redis Session Management
  *
  * This is the production HTTP server for cloud-based AI platforms like OpenAI Agent Builder.
  * Uses the modern Streamable HTTP transport (MCP 2025-03-26) instead of deprecated SSE.
  *
+ * Session Management:
+ * - Redis stores session metadata (API key, collection, timestamps)
+ * - Each pod maintains an in-memory cache of McpServer/Transport instances
+ * - Sessions can be served by any pod (stateless, horizontally scalable)
+ *
  * Endpoint: https://mcp.airweave.ai/mcp
  * Protocol: MCP 2025-03-26 (Streamable HTTP)
  * Authentication: Bearer token, X-API-Key, or query parameter
@@ -15,8 +20,11 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import { AirweaveClient } from './api/airweave-client.js';
 import { createSearchTool } from './tools/search-tool.js';
 import { createConfigTool } from './tools/config-tool.js';
+import { RedisSessionManager } from './session/redis-session-manager.js';
 const app = express();
 app.use(express.json({ limit: '10mb' }));
+// Initialize Redis session manager
+const sessionManager = new RedisSessionManager();
 // Create MCP server instance with tools
 const createMcpServer = (apiKey) => {
     const collection = process.env.AIRWEAVE_COLLECTION || 'default';
@@ -48,12 +56,16 @@ const createMcpServer = (apiKey) => {
     return server;
 };
 // Health check endpoint
-app.get('/health', (req, res) => {
+app.get('/health', async (req, res) => {
+    const redisConnected = sessionManager.isConnected();
     res.json({
-        status: 'healthy',
+        status: redisConnected ? 'healthy' : 'degraded',
         transport: 'streamable-http',
         protocol: 'MCP 2025-03-26',
         collection: process.env.AIRWEAVE_COLLECTION || 'unknown',
+        redis: {
+            connected: redisConnected
+        },
         timestamp: new Date().toISOString()
     });
 });
@@ -88,9 +100,36 @@ app.get('/', (req, res) => {
         }
     });
 });
-// Session management: Map session IDs to { server, transport, apiKey }
-const sessions = new Map();
-// Main MCP endpoint (Streamable HTTP)
+// Local cache: Map session IDs to { server, transport, data }
+// This cache is per-pod and reconstructed from Redis as needed
+const localSessionCache = new Map();
+/**
+ * Helper function to create or recreate session objects (server + transport)
+ * Note: apiKey parameter is the PLAINTEXT key needed for API calls
+ */
+async function createSessionObjects(sessionData, apiKey) {
+    const { sessionId, collection, baseUrl } = sessionData;
+    // Create a new server with the API key
+    const server = createMcpServer(apiKey);
+    // Create a new transport for this session
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: () => sessionId
+    });
+    // Set up session management callbacks
+    transport.onsessioninitialized = (sid) => {
+        console.log(`[${new Date().toISOString()}] Session initialized: ${sid}`);
+    };
+    // Set up cleanup on close
+    transport.onclose = async () => {
+        console.log(`[${new Date().toISOString()}] Session closed: ${sessionId}`);
+        localSessionCache.delete(sessionId);
+        await sessionManager.deleteSession(sessionId);
+    };
+    // Connect the transport to the server
+    await server.connect(transport);
+    return { server, transport, data: sessionData };
+}
+// Main MCP endpoint (Streamable HTTP) with Redis session management
 app.post('/mcp', async (req, res) => {
     try {
         // Extract API key from request headers or query parameters
@@ -111,45 +150,132 @@ app.post('/mcp', async (req, res) => {
             return;
         }
         // Get or create session ID from MCP-Session-ID header
-        const sessionId = req.headers['mcp-session-id'] || `session_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-        // Check if we have an existing session
-        let session = sessions.get(sessionId);
-        if (!session) {
-            console.log(`[${new Date().toISOString()}] Creating new session: ${sessionId}`);
-            // Create a new server with the API key
-            const server = createMcpServer(apiKey);
-            // Create a new transport for this session
-            const transport = new StreamableHTTPServerTransport({
-                sessionIdGenerator: () => sessionId
-            });
-            // Set up session management callbacks
-            transport.onsessioninitialized = (sid) => {
-                console.log(`[${new Date().toISOString()}] Session initialized: ${sid}`);
-            };
-            // Set up cleanup on close
-            transport.onclose = () => {
-                console.log(`[${new Date().toISOString()}] Session closed: ${sessionId}`);
-                sessions.delete(sessionId);
-            };
-            // Connect the transport to the server
-            await server.connect(transport);
-            // Store the session
-            session = { server, transport, apiKey: apiKey };
-            sessions.set(sessionId, session);
+        const sessionId = req.headers['mcp-session-id'] ||
+            `session_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
+        const collection = process.env.AIRWEAVE_COLLECTION || 'default';
+        const baseUrl = process.env.AIRWEAVE_BASE_URL || 'https://api.airweave.ai';
+        // Security: Extract client metadata for session binding
+        const clientIP = req.headers['x-forwarded-for']?.split(',')[0] ||
+            req.headers['x-real-ip'] ||
+            req.socket.remoteAddress ||
+            'unknown';
+        const userAgent = req.headers['user-agent'] || 'unknown';
+        let session;
+        // Step 1: Check local cache (fastest path - same pod, same session)
+        session = localSessionCache.get(sessionId);
+        if (session) {
+            // Security: Validate API key hasn't changed
+            const apiKeyMatches = RedisSessionManager.validateApiKey(apiKey, session.data.apiKeyHash);
+            if (!apiKeyMatches) {
+                console.log(`[${new Date().toISOString()}] API key changed for session ${sessionId}, recreating...`);
+                // Close old session
+                session.transport.close();
+                localSessionCache.delete(sessionId);
+                // Create new session data with hash
+                const newSessionData = {
+                    sessionId,
+                    apiKeyHash: RedisSessionManager.hashApiKey(apiKey),
+                    collection,
+                    baseUrl,
+                    createdAt: Date.now(),
+                    lastAccessedAt: Date.now(),
+                    clientIP,
+                    userAgent
+                };
+                // Store in Redis
+                await sessionManager.setSession(newSessionData, true);
+                // Create new session objects
+                session = await createSessionObjects(newSessionData, apiKey);
+                localSessionCache.set(sessionId, session);
+            }
+            else {
+                // Security: Validate session binding
+                if (session.data.clientIP && session.data.clientIP !== clientIP) {
+                    console.warn(`[${new Date().toISOString()}] Session hijacking attempt detected: IP mismatch for ${sessionId}`);
+                    res.status(403).json({
+                        jsonrpc: '2.0',
+                        error: {
+                            code: -32003,
+                            message: 'Session validation failed: Client identity mismatch',
+                        },
+                        id: req.body.id || null
+                    });
+                    return;
+                }
+            }
         }
-        else if (session.apiKey !== apiKey) {
-            // API key changed - recreate session
-            console.log(`[${new Date().toISOString()}] API key changed for session ${sessionId}, recreating...`);
-            session.transport.close();
-            sessions.delete(sessionId);
-            // Create new session with new API key
-            const server = createMcpServer(apiKey);
-            const transport = new StreamableHTTPServerTransport({
-                sessionIdGenerator: () => sessionId
-            });
-            await server.connect(transport);
-            session = { server, transport, apiKey: apiKey };
-            sessions.set(sessionId, session);
+        else {
+            // Step 2: Not in local cache - check Redis (different pod or first request)
+            const sessionData = await sessionManager.getSession(sessionId);
+            if (sessionData) {
+                // Session exists in Redis but not in this pod's cache
+                console.log(`[${new Date().toISOString()}] Restoring session from Redis: ${sessionId}`);
+                // Security: Validate API key matches
+                const apiKeyMatches = RedisSessionManager.validateApiKey(apiKey, sessionData.apiKeyHash);
+                if (!apiKeyMatches) {
+                    console.log(`[${new Date().toISOString()}] API key mismatch for session ${sessionId}, recreating...`);
+                    // Update session data with new API key hash
+                    sessionData.apiKeyHash = RedisSessionManager.hashApiKey(apiKey);
+                    sessionData.lastAccessedAt = Date.now();
+                    sessionData.clientIP = clientIP;
+                    sessionData.userAgent = userAgent;
+                    await sessionManager.setSession(sessionData, false);
+                }
+                // Security: Validate session binding
+                if (sessionData.clientIP && sessionData.clientIP !== clientIP) {
+                    console.warn(`[${new Date().toISOString()}] Session hijacking attempt detected: IP mismatch for ${sessionId}`);
+                    res.status(403).json({
+                        jsonrpc: '2.0',
+                        error: {
+                            code: -32003,
+                            message: 'Session validation failed: Client identity mismatch',
+                        },
+                        id: req.body.id || null
+                    });
+                    return;
+                }
+                // Recreate server and transport from session data
+                session = await createSessionObjects(sessionData, apiKey);
+                localSessionCache.set(sessionId, session);
+            }
+            else {
+                // Step 3: New session - check rate limit first
+                console.log(`[${new Date().toISOString()}] Creating new session: ${sessionId}`);
+                // Security: Check rate limit
+                const rateLimit = await sessionManager.checkRateLimit(apiKey);
+                if (!rateLimit.allowed) {
+                    console.warn(`[${new Date().toISOString()}] Rate limit exceeded for API key (${rateLimit.count} sessions/hour)`);
+                    res.status(429).json({
+                        jsonrpc: '2.0',
+                        error: {
+                            code: -32002,
+                            message: 'Too many sessions created. Please try again later.',
+                            data: {
+                                limit: 100,
+                                current: rateLimit.count,
+                                retryAfter: 3600
+                            }
+                        },
+                        id: req.body.id || null
+                    });
+                    return;
+                }
+                const newSessionData = {
+                    sessionId,
+                    apiKeyHash: RedisSessionManager.hashApiKey(apiKey),
+                    collection,
+                    baseUrl,
+                    createdAt: Date.now(),
+                    lastAccessedAt: Date.now(),
+                    clientIP,
+                    userAgent
+                };
+                // Store in Redis
+                await sessionManager.setSession(newSessionData, true);
+                // Create session objects
+                session = await createSessionObjects(newSessionData, apiKey);
+                localSessionCache.set(sessionId, session);
+            }
         }
         // Handle the request with the session's transport
         await session.transport.handleRequest(req, res, req.body);
@@ -169,7 +295,7 @@ app.post('/mcp', async (req, res) => {
     }
 });
 // DELETE endpoint for session termination
-app.delete('/mcp', (req, res) => {
+app.delete('/mcp', async (req, res) => {
     const sessionId = req.headers['mcp-session-id'];
     if (!sessionId) {
         res.status(400).json({
@@ -182,17 +308,19 @@ app.delete('/mcp', (req, res) => {
         });
         return;
     }
-    // Close the session if it exists
-    const session = sessions.get(sessionId);
+    // Close the session if it exists locally
+    const session = localSessionCache.get(sessionId);
     if (session) {
         console.log(`[${new Date().toISOString()}] Terminating session: ${sessionId}`);
         session.transport.close();
-        sessions.delete(sessionId);
+        localSessionCache.delete(sessionId);
     }
+    // Delete from Redis (works across all pods)
+    await sessionManager.deleteSession(sessionId);
     res.status(200).json({
         jsonrpc: '2.0',
         result: {
-            message: session ? 'Session terminated successfully' : 'Session not found (may have already been closed)'
+            message: 'Session terminated successfully'
         },
         id: null
     });
@@ -211,21 +339,62 @@ app.use((error, req, res, next) => {
         });
     }
 });
-// Start server
-const PORT = process.env.PORT || 8080;
-app.listen(PORT, () => {
+// Initialize and start server
+async function startServer() {
+    const PORT = process.env.PORT || 8080;
     const collection = process.env.AIRWEAVE_COLLECTION || 'default';
     const baseUrl = process.env.AIRWEAVE_BASE_URL || 'https://api.airweave.ai';
-    console.log(`🚀 Airweave MCP Search Server (Streamable HTTP) started`);
-    console.log(`📡 Protocol: MCP 2025-03-26`);
-    console.log(`🔗 Endpoint: http://localhost:${PORT}/mcp`);
-    console.log(`🏥 Health: http://localhost:${PORT}/health`);
-    console.log(`📋 Info: http://localhost:${PORT}/`);
-    console.log(`📚 Collection: ${collection}`);
-    console.log(`🌐 Base URL: ${baseUrl}`);
-    console.log(`\n🔑 Authentication required: Provide your Airweave API key via:`);
-    console.log(`   - Authorization: Bearer <your-api-key>`);
-    console.log(`   - X-API-Key: <your-api-key>`);
-    console.log(`   - Query parameter: ?apiKey=your-key`);
-});
+    try {
+        // Connect to Redis
+        console.log('🔌 Connecting to Redis...');
+        await sessionManager.connect();
+        console.log('✅ Redis connected');
+        // Start HTTP server
+        const server = app.listen(PORT, () => {
+            console.log(`\n🚀 Airweave MCP Search Server (Streamable HTTP) started`);
+            console.log(`📡 Protocol: MCP 2025-03-26`);
+            console.log(`🔗 Endpoint: http://localhost:${PORT}/mcp`);
+            console.log(`🏥 Health: http://localhost:${PORT}/health`);
+            console.log(`📋 Info: http://localhost:${PORT}/`);
+            console.log(`📚 Collection: ${collection}`);
+            console.log(`🌐 Base URL: ${baseUrl}`);
+            console.log(`💾 Session Storage: Redis (stateless, horizontally scalable)`);
+            console.log(`\n🔑 Authentication required: Provide your Airweave API key via:`);
+            console.log(`   - Authorization: Bearer <your-api-key>`);
+            console.log(`   - X-API-Key: <your-api-key>`);
+            console.log(`   - Query parameter: ?apiKey=your-key`);
+        });
+        // Graceful shutdown
+        const shutdown = async (signal) => {
+            console.log(`\n${signal} received. Shutting down gracefully...`);
+            // Close HTTP server
+            server.close(() => {
+                console.log('HTTP server closed');
+            });
+            // Close all local sessions
+            console.log(`Closing ${localSessionCache.size} local sessions...`);
+            for (const [sessionId, session] of localSessionCache.entries()) {
+                try {
+                    session.transport.close();
+                }
+                catch (err) {
+                    console.error(`Error closing session ${sessionId}:`, err);
+                }
+            }
+            localSessionCache.clear();
+            // Disconnect from Redis
+            await sessionManager.disconnect();
+            console.log('Redis disconnected');
+            process.exit(0);
+        };
+        process.on('SIGTERM', () => shutdown('SIGTERM'));
+        process.on('SIGINT', () => shutdown('SIGINT'));
+    }
+    catch (error) {
+        console.error('Failed to start server:', error);
+        process.exit(1);
+    }
+}
+// Start the server
+startServer().catch(console.error);
 //# sourceMappingURL=index-http.js.map

package/build/index-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"index-http.js","sourceRoot":"","sources":["../src/index-http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;GASG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAEzC,wCAAwC;AACxC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAE,EAAE;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAE3E,MAAM,MAAM,GAAG;QACX,UAAU;QACV,OAAO;QACP,MAAM,CAAC,4CAA4C;KACtD,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QACzB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,OAAO;KACnB,EAAE;QACC,YAAY,EAAE;YACV,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;SACd;KACJ,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,UAAU,UAAU,EAAE,CAAC;IAExC,wDAAwD;IACxD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAElD,oDAAoD;IACpD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAE3E,iBAAiB;IACjB,MAAM,CAAC,IAAI,CACP,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,CACrB,CAAC;IAEF,MAAM,CAAC,IAAI,CACP,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,CACrB,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAEF,wBAAwB;AACxB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5B,GAAG,CAAC,IAAI,CAAC;QACL,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS;QACxD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,iCAAiC;AACjC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC;QACL,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE;YACP,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,MAAM;SACd;QACD,cAAc,EAAE;YACZ,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE;gBACL,6EAA6E;gBAC7E,2BAA2B;gBAC3B,mCAAmC;gBACnC,oCAAoC;aACvC;YACD,oBAAoB,EAAE;gBAClB,GAAG,EAAE,6BAA6B;gBAClC,OAAO,EAAE;oBACL,aAAa,EAAE,gCAAgC;iBAClD;aACJ;SACJ;KACJ,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAIpB,CAAC;AAEL,sCAAsC;AACtC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAChC,IAAI,CAAC;QACD,2DAA2D;QAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,GAAG,CAAC,KAAK,CAAC,MAAM;YAChB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;QAEtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACH,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,yBAAyB;oBAClC,IAAI,EAAE,iGAAiG;iBAC1G;gBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;aAC1B,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,sDAAsD;QACtD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEhI,uCAAuC;QACvC,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,2BAA2B,SAAS,EAAE,CAAC,CAAC;YAEhF,uCAAuC;YACvC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAgB,CAAC,CAAC;YAEjD,0CAA0C;YAC1C,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAChD,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;aACtC,CAAC,CAAC;YAEH,sCAAsC;YACrC,SAAiB,CAAC,oBAAoB,GAAG,CAAC,GAAW,EAAE,EAAE;gBACtD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,0BAA0B,GAAG,EAAE,CAAC,CAAC;YAC7E,CAAC,CAAC;YAEF,0BAA0B;YAC1B,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACrB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,qBAAqB,SAAS,EAAE,CAAC,CAAC;gBAC1E,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC,CAAC;YAEF,sCAAsC;YACtC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAEhC,oBAAoB;YACpB,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAgB,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACnC,qCAAqC;YACrC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,iCAAiC,SAAS,iBAAiB,CAAC,CAAC;YACrG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAE3B,sCAAsC;YACtC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAgB,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAChD,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;aACtC,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAgB,EAAE,CAAC;YAC1D,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,kDAAkD;QAClD,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAE9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACH,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,uBAAuB;iBACnC;gBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;aAC1B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,0CAA0C;AAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW,CAAC;IAE1D,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,qCAAqC;aACjD;YACD,EAAE,EAAE,IAAI;SACX,CAAC,CAAC;QACH,OAAO;IACX,CAAC;IAED,iCAAiC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,0BAA0B,SAAS,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACjB,OAAO,EAAE,KAAK;QACd,MAAM,EAAE;YACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,kDAAkD;SAC5G;QACD,EAAE,EAAE,IAAI;KACX,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,4BAA4B;AAC5B,GAAG,CAAC,GAAG,CAAC,CAAC,KAAY,EAAE,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAC9F,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,uBAAuB;aACnC;YACD,EAAE,EAAE,IAAI;SACX,CAAC,CAAC;IACP,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,eAAe;AACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;AACtC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAE3E,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,MAAM,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,SAAS,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index-http.js","sourceRoot":"","sources":["../src/index-http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAsD,MAAM,oCAAoC,CAAC;AAE7H,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAEzC,mCAAmC;AACnC,MAAM,cAAc,GAAG,IAAI,mBAAmB,EAAE,CAAC;AAEjD,wCAAwC;AACxC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAE,EAAE;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAE3E,MAAM,MAAM,GAAG;QACX,UAAU;QACV,OAAO;QACP,MAAM,CAAC,4CAA4C;KACtD,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QACzB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,OAAO;KACnB,EAAE;QACC,YAAY,EAAE;YACV,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,EAAE;SACd;KACJ,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,UAAU,UAAU,EAAE,CAAC;IAExC,wDAAwD;IACxD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IAElD,oDAAoD;IACpD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAE3E,iBAAiB;IACjB,MAAM,CAAC,IAAI,CACP,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,CACrB,CAAC;IAEF,MAAM,CAAC,IAAI,CACP,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,OAAO,CACrB,CAAC;IAEF,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAEF,wBAAwB;AACxB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClC,MAAM,cAAc,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IAEpD,GAAG,CAAC,IAAI,CAAC;QACL,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;QAC/C,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS;QACxD,KAAK,EAAE;YACH,SAAS,EAAE,cAAc;SAC5B;QACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,iCAAiC;AACjC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACtB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAE3E,GAAG,CAAC,IAAI,CAAC;QACL,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,iBAAiB;QAC5B,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE;YACP,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,MAAM;SACd;QACD,cAAc,EAAE;YACZ,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE;gBACL,6EAA6E;gBAC7E,2BAA2B;gBAC3B,mCAAmC;gBACnC,oCAAoC;aACvC;YACD,oBAAoB,EAAE;gBAClB,GAAG,EAAE,6BAA6B;gBAClC,OAAO,EAAE;oBACL,aAAa,EAAE,gCAAgC;iBAClD;aACJ;SACJ;KACJ,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,8DAA8D;AAC9D,+DAA+D;AAC/D,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAgC,CAAC;AAElE;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CAAC,WAAwB,EAAE,MAAc;IACxE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAEvD,uCAAuC;IACvC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAEvC,0CAA0C;IAC1C,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAChD,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;KACtC,CAAC,CAAC;IAEH,sCAAsC;IACrC,SAAiB,CAAC,oBAAoB,GAAG,CAAC,GAAW,EAAE,EAAE;QACtD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,0BAA0B,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC;IAEF,0BAA0B;IAC1B,SAAS,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE;QAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,qBAAqB,SAAS,EAAE,CAAC,CAAC;QAC1E,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,sCAAsC;IACtC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AACpD,CAAC;AAED,oEAAoE;AACpE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAChC,IAAI,CAAC;QACD,2DAA2D;QAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACpD,GAAG,CAAC,KAAK,CAAC,MAAM;YAChB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;QAEtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACH,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,yBAAyB;oBAClC,IAAI,EAAE,iGAAiG;iBAC1G;gBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;aAC1B,CAAC,CAAC;YACH,OAAO;QACX,CAAC;QAED,sDAAsD;QACtD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW;YACrD,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEvE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;QAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;QAE3E,wDAAwD;QACxD,MAAM,QAAQ,GAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrE,GAAG,CAAC,OAAO,CAAC,WAAW,CAAY;YACpC,GAAG,CAAC,MAAM,CAAC,aAAa;YACxB,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;QAEzD,IAAI,OAAyC,CAAC;QAE9C,oEAAoE;QACpE,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE3C,IAAI,OAAO,EAAE,CAAC;YACV,4CAA4C;YAC5C,MAAM,aAAa,GAAG,mBAAmB,CAAC,cAAc,CACpD,MAAgB,EAChB,OAAO,CAAC,IAAI,CAAC,UAAU,CAC1B,CAAC;YAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,iCAAiC,SAAS,iBAAiB,CAAC,CAAC;gBAErG,oBAAoB;gBACpB,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAC1B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAEpC,oCAAoC;gBACpC,MAAM,cAAc,GAAgB;oBAChC,SAAS;oBACT,UAAU,EAAE,mBAAmB,CAAC,UAAU,CAAC,MAAgB,CAAC;oBAC5D,UAAU;oBACV,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;oBAC1B,QAAQ;oBACR,SAAS;iBACZ,CAAC;gBAEF,iBAAiB;gBACjB,MAAM,cAAc,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAEtD,6BAA6B;gBAC7B,OAAO,GAAG,MAAM,oBAAoB,CAAC,cAAc,EAAE,MAAgB,CAAC,CAAC;gBACvE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACJ,qCAAqC;gBACrC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC9D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,yDAAyD,SAAS,EAAE,CAAC,CAAC;oBAC/G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACjB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACH,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,qDAAqD;yBACjE;wBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;qBAC1B,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;YACL,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,4EAA4E;YAC5E,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAE/D,IAAI,WAAW,EAAE,CAAC;gBACd,sDAAsD;gBACtD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,mCAAmC,SAAS,EAAE,CAAC,CAAC;gBAExF,qCAAqC;gBACrC,MAAM,aAAa,GAAG,mBAAmB,CAAC,cAAc,CACpD,MAAgB,EAChB,WAAW,CAAC,UAAU,CACzB,CAAC;gBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,kCAAkC,SAAS,iBAAiB,CAAC,CAAC;oBAEtG,4CAA4C;oBAC5C,WAAW,CAAC,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,MAAgB,CAAC,CAAC;oBAC1E,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACxC,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC;oBAChC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;oBAClC,MAAM,cAAc,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACxD,CAAC;gBAED,qCAAqC;gBACrC,IAAI,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,yDAAyD,SAAS,EAAE,CAAC,CAAC;oBAC/G,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACjB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACH,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,qDAAqD;yBACjE;wBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;qBAC1B,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBAED,kDAAkD;gBAClD,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAgB,CAAC,CAAC;gBACpE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACJ,+CAA+C;gBAC/C,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,2BAA2B,SAAS,EAAE,CAAC,CAAC;gBAEhF,6BAA6B;gBAC7B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,MAAgB,CAAC,CAAC;gBACxE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;oBACrB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,sCAAsC,SAAS,CAAC,KAAK,iBAAiB,CAAC,CAAC;oBACjH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACjB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACH,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,oDAAoD;4BAC7D,IAAI,EAAE;gCACF,KAAK,EAAE,GAAG;gCACV,OAAO,EAAE,SAAS,CAAC,KAAK;gCACxB,UAAU,EAAE,IAAI;6BACnB;yBACJ;wBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;qBAC1B,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBAED,MAAM,cAAc,GAAgB;oBAChC,SAAS;oBACT,UAAU,EAAE,mBAAmB,CAAC,UAAU,CAAC,MAAgB,CAAC;oBAC5D,UAAU;oBACV,OAAO;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;oBAC1B,QAAQ;oBACR,SAAS;iBACZ,CAAC;gBAEF,iBAAiB;gBACjB,MAAM,cAAc,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAEtD,yBAAyB;gBACzB,OAAO,GAAG,MAAM,oBAAoB,CAAC,cAAc,EAAE,MAAgB,CAAC,CAAC;gBACvE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;QACL,CAAC;QAED,kDAAkD;QAClD,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAE9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACH,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,uBAAuB;iBACnC;gBACD,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI;aAC1B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,0CAA0C;AAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAW,CAAC;IAE1D,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,qCAAqC;aACjD;YACD,EAAE,EAAE,IAAI;SACX,CAAC,CAAC;QACH,OAAO;IACX,CAAC;IAED,yCAAyC;IACzC,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,0BAA0B,SAAS,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,4CAA4C;IAC5C,MAAM,cAAc,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAE9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACjB,OAAO,EAAE,KAAK;QACd,MAAM,EAAE;YACJ,OAAO,EAAE,iCAAiC;SAC7C;QACD,EAAE,EAAE,IAAI;KACX,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,4BAA4B;AAC5B,GAAG,CAAC,GAAG,CAAC,CAAC,KAAY,EAAE,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;IAC9F,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACH,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,uBAAuB;aACnC;YACD,EAAE,EAAE,IAAI;SACX,CAAC,CAAC;IACP,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8BAA8B;AAC9B,KAAK,UAAU,WAAW;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAE3E,IAAI,CAAC;QACD,mBAAmB;QACnB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAEjC,oBAAoB;QACpB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACjC,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,MAAM,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,SAAS,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YAChF,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACtC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,wCAAwC,CAAC,CAAC;YAEjE,oBAAoB;YACpB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YAEH,2BAA2B;YAC3B,OAAO,CAAC,GAAG,CAAC,WAAW,iBAAiB,CAAC,IAAI,oBAAoB,CAAC,CAAC;YACnE,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7D,IAAI,CAAC;oBACD,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAC9B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC9D,CAAC;YACL,CAAC;YACD,iBAAiB,CAAC,KAAK,EAAE,CAAC;YAE1B,wBAAwB;YACxB,MAAM,cAAc,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAElC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC;AAED,mBAAmB;AACnB,WAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC"}

package/build/session/redis-session-manager.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Redis-based session manager for MCP server
+ *
+ * Stores session metadata in Redis to enable stateless, horizontally-scalable deployments.
+ * Session state includes: API key hash, collections metadata, last access timestamp.
+ *
+ * Security measures:
+ * - API keys are hashed (SHA-256) before storage for defense-in-depth
+ * - Session TTL limits exposure window
+ * - Client binding (IP/User-Agent) prevents session hijacking
+ * - Comprehensive audit logging for security monitoring
+ *
+ * Note: We still need plaintext API keys at runtime to call Airweave API,
+ * but Redis compromise won't expose them.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+export interface SessionData {
+    sessionId: string;
+    apiKeyHash: string;
+    collection: string;
+    baseUrl: string;
+    createdAt: number;
+    lastAccessedAt: number;
+    clientIP?: string;
+    userAgent?: string;
+}
+export interface SessionMetadata {
+    clientIP?: string;
+    userAgent?: string;
+}
+export interface SessionWithTransport {
+    server: McpServer;
+    transport: StreamableHTTPServerTransport;
+    data: SessionData;
+}
+export declare class RedisSessionManager {
+    private redis;
+    private connected;
+    private readonly SESSION_PREFIX;
+    private readonly RATE_LIMIT_PREFIX;
+    private readonly DEFAULT_TTL;
+    private readonly RATE_LIMIT_WINDOW;
+    private readonly MAX_SESSIONS_PER_HOUR;
+    constructor(redisUrl?: string);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    isConnected(): boolean;
+    private getKey;
+    private getRateLimitKey;
+    /**
+     * Hash an API key using SHA-256 for secure storage
+     * Note: This is defense-in-depth. We still need the plaintext key at runtime.
+     */
+    static hashApiKey(apiKey: string): string;
+    /**
+     * Validate that an API key matches the stored hash
+     */
+    static validateApiKey(apiKey: string, apiKeyHash: string): boolean;
+    /**
+     * Audit log for security monitoring
+     */
+    private auditLog;
+    /**
+     * Check rate limit for session creation
+     */
+    checkRateLimit(apiKey: string): Promise<{
+        allowed: boolean;
+        count: number;
+    }>;
+    /**
+     * Get session data from Redis
+     */
+    getSession(sessionId: string): Promise<SessionData | null>;
+    /**
+     * Create or update session in Redis
+     * Includes rate limiting check for new sessions
+     */
+    setSession(sessionData: SessionData, isNewSession?: boolean): Promise<void>;
+    /**
+     * Delete session from Redis
+     */
+    deleteSession(sessionId: string): Promise<void>;
+    /**
+     * Check if a session exists
+     */
+    sessionExists(sessionId: string): Promise<boolean>;
+    /**
+     * Get all session IDs (for debugging/monitoring)
+     */
+    getAllSessionIds(): Promise<string[]>;
+    /**
+     * Clean up expired sessions (manual cleanup, Redis TTL handles this automatically)
+     */
+    cleanupExpiredSessions(maxAge?: number): Promise<number>;
+}
+//# sourceMappingURL=redis-session-manager.d.ts.map

package/build/session/redis-session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-session-manager.d.ts","sourceRoot":"","sources":["../../src/session/redis-session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAGnG,MAAM,WAAW,WAAW;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,6BAA6B,CAAC;IACzC,IAAI,EAAE,WAAW,CAAC;CACrB;AAED,qBAAa,mBAAmB;IAC5B,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAkB;IACjD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAQ;IACpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAQ;IAC1C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAO;gBAEjC,QAAQ,CAAC,EAAE,MAAM;IA+BvB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAMxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAOjC,WAAW,IAAI,OAAO;IAItB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,eAAe;IAKvB;;;OAGG;IACH,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIzC;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAIlE;;OAEG;IACH,OAAO,CAAC,QAAQ;IAShB;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA8BlF;;OAEG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAgChE;;;OAGG;IACG,UAAU,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,GAAE,OAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBxF;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrD;;OAEG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWxD;;OAEG;IACG,gBAAgB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAW3C;;OAEG;IACG,sBAAsB,CAAC,MAAM,GAAE,MAAgC,GAAG,OAAO,CAAC,MAAM,CAAC;CAwB1F"}

package/build/session/redis-session-manager.js

@@ -0,0 +1,254 @@
+/**
+ * Redis-based session manager for MCP server
+ *
+ * Stores session metadata in Redis to enable stateless, horizontally-scalable deployments.
+ * Session state includes: API key hash, collections metadata, last access timestamp.
+ *
+ * Security measures:
+ * - API keys are hashed (SHA-256) before storage for defense-in-depth
+ * - Session TTL limits exposure window
+ * - Client binding (IP/User-Agent) prevents session hijacking
+ * - Comprehensive audit logging for security monitoring
+ *
+ * Note: We still need plaintext API keys at runtime to call Airweave API,
+ * but Redis compromise won't expose them.
+ */
+import { createClient } from 'redis';
+import { createHash } from 'crypto';
+export class RedisSessionManager {
+    redis;
+    connected = false;
+    SESSION_PREFIX = 'mcp:session:';
+    RATE_LIMIT_PREFIX = 'mcp:rate_limit:';
+    DEFAULT_TTL = 1800; // 30 minutes (reduced from 1 hour for security)
+    RATE_LIMIT_WINDOW = 3600; // 1 hour
+    MAX_SESSIONS_PER_HOUR = 100; // Per API key
+    constructor(redisUrl) {
+        this.redis = createClient({
+            url: redisUrl || process.env.REDIS_URL || 'redis://localhost:6379',
+            socket: {
+                reconnectStrategy: (retries) => {
+                    if (retries > 10) {
+                        console.error('Redis: Max reconnection attempts reached');
+                        return new Error('Max reconnection attempts reached');
+                    }
+                    const delay = Math.min(retries * 100, 3000);
+                    console.log(`Redis: Reconnecting in ${delay}ms (attempt ${retries})`);
+                    return delay;
+                }
+            }
+        });
+        this.redis.on('error', (err) => {
+            console.error('Redis Client Error:', err);
+        });
+        this.redis.on('connect', () => {
+            console.log('Redis: Connected');
+            this.connected = true;
+        });
+        this.redis.on('disconnect', () => {
+            console.log('Redis: Disconnected');
+            this.connected = false;
+        });
+    }
+    async connect() {
+        if (!this.connected) {
+            await this.redis.connect();
+        }
+    }
+    async disconnect() {
+        if (this.connected) {
+            await this.redis.quit();
+            this.connected = false;
+        }
+    }
+    isConnected() {
+        return this.connected;
+    }
+    getKey(sessionId) {
+        return `${this.SESSION_PREFIX}${sessionId}`;
+    }
+    getRateLimitKey(apiKeyHash) {
+        const hour = Math.floor(Date.now() / (1000 * 60 * 60));
+        return `${this.RATE_LIMIT_PREFIX}${apiKeyHash}:${hour}`;
+    }
+    /**
+     * Hash an API key using SHA-256 for secure storage
+     * Note: This is defense-in-depth. We still need the plaintext key at runtime.
+     */
+    static hashApiKey(apiKey) {
+        return createHash('sha256').update(apiKey).digest('hex');
+    }
+    /**
+     * Validate that an API key matches the stored hash
+     */
+    static validateApiKey(apiKey, apiKeyHash) {
+        return RedisSessionManager.hashApiKey(apiKey) === apiKeyHash;
+    }
+    /**
+     * Audit log for security monitoring
+     */
+    auditLog(operation, details) {
+        console.log(JSON.stringify({
+            timestamp: new Date().toISOString(),
+            service: 'mcp-redis-session',
+            operation,
+            ...details
+        }));
+    }
+    /**
+     * Check rate limit for session creation
+     */
+    async checkRateLimit(apiKey) {
+        try {
+            const apiKeyHash = RedisSessionManager.hashApiKey(apiKey);
+            const rateLimitKey = this.getRateLimitKey(apiKeyHash);
+            const count = await this.redis.incr(rateLimitKey);
+            // Set expiration on first increment
+            if (count === 1) {
+                await this.redis.expire(rateLimitKey, this.RATE_LIMIT_WINDOW);
+            }
+            const allowed = count <= this.MAX_SESSIONS_PER_HOUR;
+            if (!allowed) {
+                this.auditLog('rate_limit_exceeded', {
+                    apiKeyHash: apiKeyHash ? apiKeyHash.substring(0, 16) + '...' : 'N/A',
+                    count,
+                    limit: this.MAX_SESSIONS_PER_HOUR
+                });
+            }
+            return { allowed, count };
+        }
+        catch (error) {
+            console.error('Error checking rate limit:', error);
+            // Fail open - allow the request if rate limiting fails
+            return { allowed: true, count: 0 };
+        }
+    }
+    /**
+     * Get session data from Redis
+     */
+    async getSession(sessionId) {
+        try {
+            const key = this.getKey(sessionId);
+            const data = await this.redis.get(key);
+            if (!data) {
+                this.auditLog('session_miss', { sessionId });
+                return null;
+            }
+            const sessionData = JSON.parse(data);
+            // Update last accessed time
+            sessionData.lastAccessedAt = Date.now();
+            await this.redis.set(key, JSON.stringify(sessionData), {
+                EX: this.DEFAULT_TTL
+            });
+            this.auditLog('session_accessed', {
+                sessionId,
+                apiKeyHash: sessionData.apiKeyHash ? sessionData.apiKeyHash.substring(0, 16) + '...' : 'N/A',
+                age: Date.now() - sessionData.createdAt
+            });
+            return sessionData;
+        }
+        catch (error) {
+            console.error(`Error getting session ${sessionId}:`, error);
+            this.auditLog('session_error', { sessionId, error: String(error) });
+            return null;
+        }
+    }
+    /**
+     * Create or update session in Redis
+     * Includes rate limiting check for new sessions
+     */
+    async setSession(sessionData, isNewSession = false) {
+        try {
+            const key = this.getKey(sessionData.sessionId);
+            await this.redis.set(key, JSON.stringify(sessionData), {
+                EX: this.DEFAULT_TTL
+            });
+            this.auditLog(isNewSession ? 'session_created' : 'session_updated', {
+                sessionId: sessionData.sessionId,
+                apiKeyHash: sessionData.apiKeyHash ? sessionData.apiKeyHash.substring(0, 16) + '...' : 'N/A',
+                clientIP: sessionData.clientIP || 'unknown',
+                hasBinding: !!(sessionData.clientIP && sessionData.userAgent)
+            });
+        }
+        catch (error) {
+            console.error(`Error setting session ${sessionData.sessionId}:`, error);
+            this.auditLog('session_error', {
+                sessionId: sessionData.sessionId,
+                error: String(error),
+                operation: 'set'
+            });
+            throw error;
+        }
+    }
+    /**
+     * Delete session from Redis
+     */
+    async deleteSession(sessionId) {
+        try {
+            const key = this.getKey(sessionId);
+            await this.redis.del(key);
+            this.auditLog('session_deleted', { sessionId });
+        }
+        catch (error) {
+            console.error(`Error deleting session ${sessionId}:`, error);
+            this.auditLog('session_error', {
+                sessionId,
+                error: String(error),
+                operation: 'delete'
+            });
+        }
+    }
+    /**
+     * Check if a session exists
+     */
+    async sessionExists(sessionId) {
+        try {
+            const key = this.getKey(sessionId);
+            const exists = await this.redis.exists(key);
+            return exists === 1;
+        }
+        catch (error) {
+            console.error(`Error checking session ${sessionId}:`, error);
+            return false;
+        }
+    }
+    /**
+     * Get all session IDs (for debugging/monitoring)
+     */
+    async getAllSessionIds() {
+        try {
+            const keys = await this.redis.keys(`${this.SESSION_PREFIX}*`);
+            return keys.map(key => key.replace(this.SESSION_PREFIX, ''));
+        }
+        catch (error) {
+            console.error('Error getting all session IDs:', error);
+            return [];
+        }
+    }
+    /**
+     * Clean up expired sessions (manual cleanup, Redis TTL handles this automatically)
+     */
+    async cleanupExpiredSessions(maxAge = this.DEFAULT_TTL * 1000) {
+        try {
+            const keys = await this.redis.keys(`${this.SESSION_PREFIX}*`);
+            let deleted = 0;
+            for (const key of keys) {
+                const data = await this.redis.get(key);
+                if (data) {
+                    const sessionData = JSON.parse(data);
+                    const age = Date.now() - sessionData.lastAccessedAt;
+                    if (age > maxAge) {
+                        await this.redis.del(key);
+                        deleted++;
+                    }
+                }
+            }
+            return deleted;
+        }
+        catch (error) {
+            console.error('Error cleaning up expired sessions:', error);
+            return 0;
+        }
+    }
+}
+//# sourceMappingURL=redis-session-manager.js.map

package/build/session/redis-session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-session-manager.js","sourceRoot":"","sources":["../../src/session/redis-session-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAmB,MAAM,OAAO,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAyBpC,MAAM,OAAO,mBAAmB;IACpB,KAAK,CAAkB;IACvB,SAAS,GAAY,KAAK,CAAC;IAClB,cAAc,GAAG,cAAc,CAAC;IAChC,iBAAiB,GAAG,iBAAiB,CAAC;IACtC,WAAW,GAAG,IAAI,CAAC,CAAC,gDAAgD;IACpE,iBAAiB,GAAG,IAAI,CAAC,CAAC,SAAS;IACnC,qBAAqB,GAAG,GAAG,CAAC,CAAC,cAAc;IAE5D,YAAY,QAAiB;QACzB,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;YACtB,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,wBAAwB;YAClE,MAAM,EAAE;gBACJ,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE;oBAC3B,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;wBAC1D,OAAO,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBAC1D,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC;oBAC5C,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,eAAe,OAAO,GAAG,CAAC,CAAC;oBACtE,OAAO,KAAK,CAAC;gBACjB,CAAC;aACJ;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;YAC7B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACnC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,OAAO;QACT,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,WAAW;QACP,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAEO,MAAM,CAAC,SAAiB;QAC5B,OAAO,GAAG,IAAI,CAAC,cAAc,GAAG,SAAS,EAAE,CAAC;IAChD,CAAC;IAEO,eAAe,CAAC,UAAkB;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO,GAAG,IAAI,CAAC,iBAAiB,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,UAAU,CAAC,MAAc;QAC5B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAc,EAAE,UAAkB;QACpD,OAAO,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC;IACjE,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,SAAiB,EAAE,OAA4B;QAC5D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,mBAAmB;YAC5B,SAAS;YACT,GAAG,OAAO;SACb,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QAC/B,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YAEtD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAElD,oCAAoC;YACpC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,qBAAqB,CAAC;YAEpD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE;oBACjC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK;oBACpE,KAAK;oBACL,KAAK,EAAE,IAAI,CAAC,qBAAqB;iBACpC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,uDAAuD;YACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB;QAC9B,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC;YAChB,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;YAEpD,4BAA4B;YAC5B,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE;gBACnD,EAAE,EAAE,IAAI,CAAC,WAAW;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;gBAC9B,SAAS;gBACT,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK;gBAC5F,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS;aAC1C,CAAC,CAAC;YAEH,OAAO,WAAW,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,WAAwB,EAAE,eAAwB,KAAK;QACpE,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE;gBACnD,EAAE,EAAE,IAAI,CAAC,WAAW;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,EAAE;gBAChE,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK;gBAC5F,QAAQ,EAAE,WAAW,CAAC,QAAQ,IAAI,SAAS;gBAC3C,UAAU,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,SAAS,CAAC;aAChE,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,WAAW,CAAC,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YACxE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE;gBAC3B,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,SAAS,EAAE,KAAK;aACnB,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACjC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAE1B,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE;gBAC3B,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,SAAS,EAAE,QAAQ;aACtB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB;QACjC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,MAAM,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB;QAClB,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAGD;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,SAAiB,IAAI,CAAC,WAAW,GAAG,IAAI;QACjE,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YAC9D,IAAI,OAAO,GAAG,CAAC,CAAC;YAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,IAAI,EAAE,CAAC;oBACP,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,cAAc,CAAC;oBAEpD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;wBACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBAC1B,OAAO,EAAE,CAAC;oBACd,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,OAAO,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;CACJ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "airweave-mcp-search",
-  "version": "0.6.51",
+  "version": "0.6.53",
   "description": "MCP server for searching Airweave collections",
   "type": "module",
   "main": "build/index.js",
@@ -49,6 +49,7 @@
     "@airweave/sdk": "^0.6.0",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "express": "^4.18.2",
+    "redis": "^4.6.13",
     "zod": "^3.23.8"
   },
   "devDependencies": {