tomoshi 1.0.0

package/dist/client.js

@@ -0,0 +1,240 @@
+import { getConfig } from "./config.js";
+// ---------------------------------------------------------------------------
+// SSRF Prevention
+// ---------------------------------------------------------------------------
+/**
+ * Validate a URL to prevent Server-Side Request Forgery attacks.
+ * Blocks private IPs, localhost, and non-HTTP(S) protocols.
+ */
+function validateUrl(url) {
+    try {
+        const parsed = new URL(url);
+        // Must be HTTP or HTTPS
+        if (!["http:", "https:"].includes(parsed.protocol)) {
+            return false;
+        }
+        // Block private/internal hosts
+        const hostname = parsed.hostname.toLowerCase();
+        if (hostname === "localhost" ||
+            hostname === "127.0.0.1" ||
+            hostname === "0.0.0.0" ||
+            hostname.startsWith("10.") ||
+            hostname.startsWith("172.16.") ||
+            hostname.startsWith("192.168.") ||
+            hostname.endsWith(".local") ||
+            hostname.endsWith(".internal")) {
+            return false;
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// Cinder API Client
+// ---------------------------------------------------------------------------
+/**
+ * Timeout configuration per endpoint type (milliseconds).
+ *
+ * These are deliberately generous: the Cinder backend runs on Fly.io with
+ * scale-to-zero, so a request may first trigger a ~10-15s cold start before
+ * the actual work begins. Tight timeouts turn cold starts into hard failures.
+ */
+export const CINDER_TIMEOUT = {
+    scrape: 60_000,
+    crawl: 30_000,
+    crawlStatus: 15_000,
+    search: 30_000,
+    monitor: 30_000,
+    monitorStatus: 15_000,
+    monitorDelete: 15_000,
+    map: 30_000,
+    batch: 30_000,
+    batchStatus: 15_000,
+    links: 60_000,
+};
+/**
+ * HTTP client for the Cinder API.
+ * Wraps all Cinder endpoints with type-safe methods, error handling, and SSRF prevention.
+ */
+export class CinderClient {
+    baseUrl;
+    apiKey;
+    constructor() {
+        const config = getConfig();
+        const rawUrl = config.TOMOSHIBI_API_URL || config.CINDER_API_URL;
+        this.baseUrl = rawUrl.replace(/\/+$/, "");
+        this.apiKey = config.CINDER_API_KEY;
+    }
+    get headers() {
+        const h = {
+            "Content-Type": "application/json",
+        };
+        if (this.apiKey) {
+            // Cinder expects the API key as `X-API-Key` (see API docs §8).
+            h["X-API-Key"] = this.apiKey;
+        }
+        return h;
+    }
+    async request(method, path, body, timeout) {
+        const url = `${this.baseUrl}${path}`;
+        const controller = new AbortController();
+        const timer = timeout
+            ? setTimeout(() => controller.abort(), timeout)
+            : null;
+        try {
+            const response = await fetch(url, {
+                method,
+                headers: this.headers,
+                body: body ? JSON.stringify(body) : undefined,
+                signal: controller.signal,
+            });
+            // 204 No Content (e.g. DELETE /v1/monitor/:id) has no body to parse.
+            if (response.status === 204) {
+                return undefined;
+            }
+            if (!response.ok) {
+                const errorBody = await response.text().catch(() => "");
+                throw new CinderError(`Cinder API error: ${response.status} ${response.statusText}`, response.status, errorBody);
+            }
+            return (await response.json());
+        }
+        catch (err) {
+            if (err instanceof CinderError)
+                throw err;
+            if (err instanceof DOMException && err.name === "AbortError") {
+                throw new CinderError(`Request timed out after ${timeout}ms`, 408, "");
+            }
+            throw new CinderError(err instanceof Error ? err.message : "Unknown error", 0, "");
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    /**
+     * Scrape a single webpage.
+     * POST /v1/scrape
+     */
+    async scrape(params) {
+        if (!validateUrl(params.url)) {
+            throw new CinderError("Invalid or blocked URL. Only HTTP(S) URLs to public hosts are allowed.", 400, "");
+        }
+        return this.request("POST", "/v1/scrape", params, CINDER_TIMEOUT.scrape);
+    }
+    /**
+     * Scrape multiple URLs synchronously (no Redis).
+     * POST /v1/scrape with { urls: [...] } — mirrors web_fetch_exa and
+     * Firecrawl POST /v2/batch/scrape sync. Max 10 URLs, errgroup limit 5.
+     */
+    async scrapeMulti(params) {
+        for (const u of params.urls) {
+            if (!validateUrl(u)) {
+                throw new CinderError(`Invalid or blocked URL in multi-scrape: ${u}. Only HTTP(S) URLs to public hosts are allowed.`, 400, "");
+            }
+        }
+        return this.request("POST", "/v1/scrape", params, CINDER_TIMEOUT.scrape);
+    }
+    /**
+     * Enqueue an asynchronous crawl job.
+     * POST /v1/crawl
+     */
+    async crawl(params) {
+        if (!validateUrl(params.url)) {
+            throw new CinderError("Invalid or blocked URL. Only HTTP(S) URLs to public hosts are allowed.", 400, "");
+        }
+        return this.request("POST", "/v1/crawl", params, CINDER_TIMEOUT.crawl);
+    }
+    /**
+     * Get crawl job status.
+     * GET /v1/crawl/:id
+     */
+    async getCrawlStatus(id) {
+        return this.request("GET", `/v1/crawl/${encodeURIComponent(id)}`, undefined, CINDER_TIMEOUT.crawlStatus);
+    }
+    /**
+     * Search the web via SearXNG (primary) or Brave Search (fallback).
+     * POST /v1/search
+     */
+    async search(params) {
+        return this.request("POST", "/v1/search", params, CINDER_TIMEOUT.search);
+    }
+    /**
+     * Discover URLs on a site via sitemap/link traversal.
+     * POST /v1/map
+     */
+    async map(params) {
+        if (!validateUrl(params.url)) {
+            throw new CinderError("Invalid or blocked URL. Only HTTP(S) URLs to public hosts are allowed.", 400, "");
+        }
+        return this.request("POST", "/v1/map", params, CINDER_TIMEOUT.map);
+    }
+    /**
+     * Enqueue a batch scrape job (requires Redis).
+     * POST /v1/batch/scrape
+     */
+    async batchScrape(params) {
+        for (const u of params.urls) {
+            if (!validateUrl(u)) {
+                throw new CinderError(`Invalid or blocked URL in batch: ${u}. Only HTTP(S) URLs to public hosts are allowed.`, 400, "");
+            }
+        }
+        return this.request("POST", "/v1/batch/scrape", params, CINDER_TIMEOUT.batch);
+    }
+    /**
+     * Get batch scrape status (requires Redis).
+     * GET /v1/batch/:id
+     */
+    async getBatchStatus(batchId) {
+        return this.request("GET", `/v1/batch/${encodeURIComponent(batchId)}`, undefined, CINDER_TIMEOUT.batchStatus);
+    }
+    /**
+     * Extract links from a page (via scrape with include_links).
+     * Reuses POST /v1/scrape — same SSRF/timeouts as scrape.
+     */
+    async links(url) {
+        if (!validateUrl(url)) {
+            throw new CinderError("Invalid or blocked URL. Only HTTP(S) URLs to public hosts are allowed.", 400, "");
+        }
+        return this.request("POST", "/v1/scrape", { url, include_links: true }, CINDER_TIMEOUT.links);
+    }
+    /**
+     * Create a change-tracking monitor (requires Redis).
+     * POST /v1/monitor
+     */
+    async createMonitor(params) {
+        if (!validateUrl(params.url)) {
+            throw new CinderError("Invalid or blocked URL. Only HTTP(S) URLs to public hosts are allowed.", 400, "");
+        }
+        return this.request("POST", "/v1/monitor", params, CINDER_TIMEOUT.monitor);
+    }
+    /**
+     * Get monitor status (config + last hash + next check).
+     * GET /v1/monitor/:id
+     */
+    async getMonitor(id) {
+        return this.request("GET", `/v1/monitor/${encodeURIComponent(id)}`, undefined, CINDER_TIMEOUT.monitorStatus);
+    }
+    /**
+     * Stop monitoring and remove the monitor record.
+     * DELETE /v1/monitor/:id
+     */
+    async deleteMonitor(id) {
+        await this.request("DELETE", `/v1/monitor/${encodeURIComponent(id)}`, undefined, CINDER_TIMEOUT.monitorDelete);
+    }
+}
+// ---------------------------------------------------------------------------
+// Custom Error
+// ---------------------------------------------------------------------------
+export class CinderError extends Error {
+    statusCode;
+    body;
+    constructor(message, statusCode, body) {
+        super(message);
+        this.statusCode = statusCode;
+        this.body = body;
+        this.name = "CinderError";
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA0TxC,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5B,wBAAwB;QACxB,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/C,IACE,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,WAAW;YACxB,QAAQ,KAAK,SAAS;YACtB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;YAC1B,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9B,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC9B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,MAAM;IACnB,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;IACf,aAAa,EAAE,MAAM;IACrB,aAAa,EAAE,MAAM;IACrB,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,MAAM;IACnB,KAAK,EAAE,MAAM;CACL,CAAC;AAEX;;;GAGG;AACH,MAAM,OAAO,YAAY;IACf,OAAO,CAAS;IAChB,MAAM,CAAS;IAEvB;QACE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAI,MAAc,CAAC,iBAAiB,IAAI,MAAM,CAAC,cAAc,CAAC;QAC1E,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;IACtC,CAAC;IAED,IAAY,OAAO;QACjB,MAAM,CAAC,GAA2B;YAChC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,+DAA+D;YAC/D,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,OAAgB;QAEhB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO;YACnB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,qEAAqE;YACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,OAAO,SAAc,CAAC;YACxB,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACxD,MAAM,IAAI,WAAW,CACnB,qBAAqB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAC7D,QAAQ,CAAC,MAAM,EACf,SAAS,CACV,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,WAAW;gBAAE,MAAM,GAAG,CAAC;YAC1C,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7D,MAAM,IAAI,WAAW,CAAC,2BAA2B,OAAO,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EACpD,CAAC,EACD,EAAE,CACH,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,wEAAwE,EACxE,GAAG,EACH,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,cAAc,CAAC,MAAM,CACtB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,WAAW,CACnB,2CAA2C,CAAC,kDAAkD,EAC9F,GAAG,EACH,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,cAAc,CAAC,MAAM,CACtB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC7B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,wEAAwE,EACxE,GAAG,EACH,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,WAAW,EACX,MAAM,EACN,cAAc,CAAC,KAAK,CACrB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,EACrC,SAAS,EACT,cAAc,CAAC,WAAW,CAC3B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,cAAc,CAAC,MAAM,CACtB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,MAAiB;QACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,wEAAwE,EACxE,GAAG,EACH,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,SAAS,EACT,MAAM,EACN,cAAc,CAAC,GAAG,CACnB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,MAAmB;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,WAAW,CACnB,oCAAoC,CAAC,kDAAkD,EACvF,GAAG,EACH,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,kBAAkB,EAClB,MAAM,EACN,cAAc,CAAC,KAAK,CACrB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,aAAa,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAC1C,SAAS,EACT,cAAc,CAAC,WAAW,CAC3B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CACnB,wEAAwE,EACxE,GAAG,EACH,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,YAAY,EACZ,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,EAC5B,cAAc,CAAC,KAAK,CACrB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,MAAqB;QACvC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,wEAAwE,EACxE,GAAG,EACH,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,aAAa,EACb,MAAM,EACN,cAAc,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,EACvC,SAAS,EACT,cAAc,CAAC,aAAa,CAC7B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,EACvC,SAAS,EACT,cAAc,CAAC,aAAa,CAC7B,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB;IACA;IAHlB,YACE,OAAe,EACC,UAAkB,EAClB,IAAY;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,39 @@
+import * as v from "valibot";
+/**
+ * Environment configuration schema validated with Valibot.
+ * Provides typed access to all configuration values with sensible defaults.
+ */
+declare const ConfigSchema: v.ObjectSchema<{
+    /** Cinder API base URL — must point to your own Cinder instance */
+    readonly CINDER_API_URL: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.UrlAction<string, undefined>]>, "">;
+    /** Tomoshibi API URL (new name, preferred) */
+    readonly TOMOSHIBI_API_URL: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.UrlAction<string, undefined>]>, "">;
+    /** Optional API key if Cinder requires authentication */
+    readonly CINDER_API_KEY: v.OptionalSchema<v.StringSchema<undefined>, "">;
+    /** MCP server identity */
+    readonly MCP_SERVER_NAME: v.OptionalSchema<v.StringSchema<undefined>, "cinder-mcp">;
+    readonly MCP_SERVER_VERSION: v.OptionalSchema<v.StringSchema<undefined>, "1.0.0">;
+    /** HTTP server port */
+    readonly PORT: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TransformAction<any, number>]>, "7433">;
+    /** OAuth 2.1 configuration */
+    readonly OAUTH_ENABLED: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TransformAction<string, boolean>]>, "false">;
+    readonly OAUTH_ISSUER: v.OptionalSchema<v.StringSchema<undefined>, "">;
+    readonly OAUTH_AUDIENCE: v.OptionalSchema<v.StringSchema<undefined>, "">;
+    readonly OAUTH_SCOPES: v.OptionalSchema<v.StringSchema<undefined>, "scrape,crawl,search,monitor">;
+    /** Session management */
+    readonly REDIS_URL: v.OptionalSchema<v.StringSchema<undefined>, "">;
+    readonly MCP_SESSION_MANAGER: v.OptionalSchema<v.PicklistSchema<["memory", "redis"], undefined>, "memory">;
+    /** Rate limiting */
+    readonly RATE_LIMIT_WINDOW_MS: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TransformAction<any, number>]>, "60000">;
+    readonly RATE_LIMIT_MAX: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TransformAction<any, number>]>, "60">;
+    /** Logging */
+    readonly LOG_LEVEL: v.OptionalSchema<v.PicklistSchema<["debug", "info", "warn", "error"], undefined>, "info">;
+}, undefined>;
+type Config = v.InferOutput<typeof ConfigSchema>;
+/**
+ * Get the application configuration.
+ * Parses environment variables once and caches the result.
+ */
+export declare function getConfig(): Config;
+export type { Config };
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B;;;GAGG;AACH,QAAA,MAAM,YAAY;IAChB,mEAAmE;;IAEnE,8CAA8C;;IAG9C,yDAAyD;;IAGzD,0BAA0B;;;IAI1B,uBAAuB;;IAGvB,8BAA8B;;;;;IAY9B,yBAAyB;;;IAIzB,oBAAoB;;;IAOpB,cAAc;;aAEd,CAAC;AAEH,KAAK,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,YAAY,CAAC,CAAC;AAIjD;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAwBlC;AAED,YAAY,EAAE,MAAM,EAAE,CAAC"}

package/dist/config.js

@@ -0,0 +1,57 @@
+import * as v from "valibot";
+/**
+ * Environment configuration schema validated with Valibot.
+ * Provides typed access to all configuration values with sensible defaults.
+ */
+const ConfigSchema = v.object({
+    /** Cinder API base URL — must point to your own Cinder instance */
+    CINDER_API_URL: v.optional(v.pipe(v.string(), v.url()), ""),
+    /** Tomoshibi API URL (new name, preferred) */
+    TOMOSHIBI_API_URL: v.optional(v.pipe(v.string(), v.url()), ""),
+    /** Optional API key if Cinder requires authentication */
+    CINDER_API_KEY: v.optional(v.string(), ""),
+    /** MCP server identity */
+    MCP_SERVER_NAME: v.optional(v.string(), "cinder-mcp"),
+    MCP_SERVER_VERSION: v.optional(v.string(), "1.0.0"),
+    /** HTTP server port */
+    PORT: v.optional(v.pipe(v.string(), v.transform(Number)), "7433"),
+    /** OAuth 2.1 configuration */
+    OAUTH_ENABLED: v.optional(v.pipe(v.string(), v.transform((s) => s === "true")), "false"),
+    OAUTH_ISSUER: v.optional(v.string(), ""),
+    OAUTH_AUDIENCE: v.optional(v.string(), ""),
+    OAUTH_SCOPES: v.optional(v.string(), "scrape,crawl,search,monitor"),
+    /** Session management */
+    REDIS_URL: v.optional(v.string(), ""),
+    MCP_SESSION_MANAGER: v.optional(v.picklist(["memory", "redis"]), "memory"),
+    /** Rate limiting */
+    RATE_LIMIT_WINDOW_MS: v.optional(v.pipe(v.string(), v.transform(Number)), "60000"),
+    RATE_LIMIT_MAX: v.optional(v.pipe(v.string(), v.transform(Number)), "60"),
+    /** Logging */
+    LOG_LEVEL: v.optional(v.picklist(["debug", "info", "warn", "error"]), "info"),
+});
+let config = null;
+/**
+ * Get the application configuration.
+ * Parses environment variables once and caches the result.
+ */
+export function getConfig() {
+    if (config)
+        return config;
+    const parsed = v.safeParse(ConfigSchema, process.env);
+    if (!parsed.success) {
+        console.error("Invalid configuration:", v.flatten(parsed.issues));
+        process.exit(1);
+    }
+    config = parsed.output;
+    // TOMOSHIBI_API_URL is the new name, CINDER_API_URL is legacy compat
+    const apiUrl = config.TOMOSHIBI_API_URL || config.CINDER_API_URL;
+    if (!apiUrl) {
+        console.error("❌ TOMOSHIBI_API_URL (or CINDER_API_URL) is required. Set it in your .env or via `fly secrets set TOMOSHIBI_API_URL=https://your-tomoshibi.fly.dev`");
+        process.exit(1);
+    }
+    // Normalize so downstream code can use either
+    config.CINDER_API_URL = apiUrl;
+    config.TOMOSHIBI_API_URL = apiUrl;
+    return config;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,mEAAmE;IACnE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC3D,8CAA8C;IAC9C,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAE9D,yDAAyD;IACzD,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;IAE1C,0BAA0B;IAC1B,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC;IAEnD,uBAAuB;IACvB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC;IAEjE,8BAA8B;IAC9B,aAAa,EAAE,CAAC,CAAC,QAAQ,CACvB,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CACjC,EACD,OAAO,CACR;IACD,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC;IAEnE,yBAAyB;IACzB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC;IAE1E,oBAAoB;IACpB,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAC9B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EACvC,OAAO,CACR;IACD,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC;IAEzE,cAAc;IACd,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC;CAC9E,CAAC,CAAC;AAIH,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAEvB,qEAAqE;IACrE,MAAM,MAAM,GAAI,MAAc,CAAC,iBAAiB,IAAI,MAAM,CAAC,cAAc,CAAC;IAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CACX,oJAAoJ,CACrJ,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,8CAA8C;IAC7C,MAAc,CAAC,cAAc,GAAG,MAAM,CAAC;IACvC,MAAc,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAE3C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,151 @@
+#!/usr/bin/env bun
+import { serve } from "srvx";
+import { StdioTransport } from "@tmcp/transport-stdio";
+import { HttpTransport } from "@tmcp/transport-http";
+import { SseTransport } from "@tmcp/transport-sse";
+import { createServer } from "./server.js";
+import { getConfig } from "./config.js";
+import { oauth } from "./auth-provider.js";
+// ---------------------------------------------------------------------------
+// Initialize
+// ---------------------------------------------------------------------------
+const config = getConfig();
+const server = createServer();
+// ---------------------------------------------------------------------------
+// HTTP + SSE Transport (for remote / production)
+// ---------------------------------------------------------------------------
+const http_transport = new HttpTransport(server, {
+    oauth: config.OAUTH_ENABLED ? oauth : undefined,
+});
+const sse_transport = new SseTransport(server, {
+    oauth: config.OAUTH_ENABLED ? oauth : undefined,
+});
+serve({
+    async fetch(request) {
+        // Bun kills idle connections after 10s by default (idleTimeout). MCP's
+        // Streamable HTTP (GET /mcp) and legacy SSE (GET /sse) are long-lived
+        // streams that sit idle between server→client notifications for minutes.
+        // Without this, Bun aborts the stream and tmcp's controller.enqueue()
+        // throws "Controller is already closed" → process crash → Docker restart loop.
+        // Mirrors effing-use/src/http.ts fix (idleTimeout: 0 + server.timeout(req,0)).
+        try {
+            const runtime = request.runtime;
+            const bunServer = runtime?.bun?.server;
+            if (bunServer) {
+                const { pathname } = new URL(request.url);
+                if (pathname === "/mcp" ||
+                    pathname === "/sse" ||
+                    pathname === "/message") {
+                    bunServer.timeout(request, 0);
+                }
+            }
+        }
+        catch {
+            // ignore — srvx may not expose runtime in all environments (e.g. tests)
+        }
+        // Compatibility: opencode's MCP client sends initialize without protocolVersion
+        // (causes tmcp validation: Expected "protocolVersion" but received undefined).
+        // Inject a default if missing so the handshake succeeds — other clients (VS Code, curl)
+        // already send it and are unchanged.
+        if (request.method === "POST") {
+            try {
+                const url = new URL(request.url);
+                if (url.pathname === "/mcp") {
+                    const ct = request.headers.get("content-type") || "";
+                    if (ct.includes("application/json")) {
+                        const cloned = request.clone();
+                        const body = await cloned.json();
+                        const patch = (obj) => {
+                            if (obj &&
+                                obj.method === "initialize" &&
+                                obj.params &&
+                                !obj.params.protocolVersion) {
+                                obj.params.protocolVersion = "2024-11-05";
+                                return true;
+                            }
+                            return false;
+                        };
+                        let patched = false;
+                        if (Array.isArray(body)) {
+                            for (const item of body)
+                                patched = patch(item) || patched;
+                        }
+                        else {
+                            patched = patch(body);
+                        }
+                        if (patched) {
+                            request = new Request(request.url, {
+                                method: request.method,
+                                headers: request.headers,
+                                body: JSON.stringify(body),
+                            });
+                        }
+                    }
+                }
+            }
+            catch {
+                // ignore parse errors, fall through to normal handling
+            }
+        }
+        // Try HTTP transport (Streamable HTTP for MCP)
+        const http_response = await http_transport.respond(request);
+        if (http_response) {
+            return http_response;
+        }
+        // Try SSE transport (legacy fallback)
+        const sse_response = await sse_transport.respond(request);
+        if (sse_response) {
+            return sse_response;
+        }
+        // Root health check
+        const url = new URL(request.url);
+        if (url.pathname === "/" || url.pathname === "/health") {
+            return new Response(JSON.stringify({
+                service: "cinder-mcp",
+                status: "ok",
+                version: config.MCP_SERVER_VERSION,
+                endpoints: {
+                    mcp: "/mcp",
+                    sse: "/sse",
+                    health: "/health",
+                },
+            }), {
+                status: 200,
+                headers: { "Content-Type": "application/json" },
+            });
+        }
+        return new Response(null, { status: 404 });
+    },
+    port: Number(config.PORT),
+    hostname: "0.0.0.0",
+    // Bun's default idleTimeout (10s) kills *any* idle connection, including
+    // long-lived MCP SSE streams (GET /mcp, GET /sse) and slow SearXNG searches.
+    // 60s was not enough — SSE sits idle for minutes between notifications.
+    // idleTimeout: 0 disables the global idle kill (safe: this is an MCP-only
+    // service). Per-request server.timeout(req,0) above is the belt; this is
+    // the suspenders. Matches effing-use fix (verified 25s+ stable).
+    bun: {
+        idleTimeout: 0,
+    },
+});
+// Graceful shutdown for Fly.io (sends SIGTERM on deploy/stop)
+process.on("SIGTERM", () => {
+    console.log("🛑 SIGTERM received, shutting down...");
+    process.exit(0);
+});
+console.log(`🚀 Cinder MCP server running on port ${config.PORT}`);
+console.log(`   Health: http://localhost:${config.PORT}/health`);
+console.log(`   MCP:    http://localhost:${config.PORT}/mcp`);
+console.log(`   SSE:    http://localhost:${config.PORT}/sse`);
+// ---------------------------------------------------------------------------
+// STDIO Transport (only when not in Fly.io / production and when stdin is a TTY)
+// In Docker the HTTP server is the only transport; stdio would compete for
+// stdin and cause the process to exit when stdin closes (Docker's default).
+// ---------------------------------------------------------------------------
+const is_fly_io = process.env.FLY_APP_NAME !== undefined;
+const has_tty = process.stdin.isTTY;
+if (!is_fly_io && has_tty) {
+    const stdio_transport = new StdioTransport(server);
+    stdio_transport.listen();
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAC3B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;AAE9B,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E,MAAM,cAAc,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;CAChD,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE;IAC7C,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;CAChD,CAAC,CAAC;AAEH,KAAK,CAAC;IACJ,KAAK,CAAC,KAAK,CAAC,OAAO;QACjB,uEAAuE;QACvE,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,+EAA+E;QAC/E,+EAA+E;QAC/E,IAAI,CAAC;YACH,MAAM,OAAO,GACX,OAOD,CAAC,OAAO,CAAC;YACV,MAAM,SAAS,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC;YACvC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1C,IACE,QAAQ,KAAK,MAAM;oBACnB,QAAQ,KAAK,MAAM;oBACnB,QAAQ,KAAK,UAAU,EACvB,CAAC;oBACD,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QAED,gFAAgF;QAChF,+EAA+E;QAC/E,wFAAwF;QACxF,qCAAqC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC5B,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;oBACrD,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBACpC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;wBAC/B,MAAM,IAAI,GAAQ,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBACtC,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,EAAE;4BACzB,IACE,GAAG;gCACH,GAAG,CAAC,MAAM,KAAK,YAAY;gCAC3B,GAAG,CAAC,MAAM;gCACV,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAC3B,CAAC;gCACD,GAAG,CAAC,MAAM,CAAC,eAAe,GAAG,YAAY,CAAC;gCAC1C,OAAO,IAAI,CAAC;4BACd,CAAC;4BACD,OAAO,KAAK,CAAC;wBACf,CAAC,CAAC;wBACF,IAAI,OAAO,GAAG,KAAK,CAAC;wBACpB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;4BACxB,KAAK,MAAM,IAAI,IAAI,IAAI;gCAAE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;wBAC5D,CAAC;6BAAM,CAAC;4BACN,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;wBACxB,CAAC;wBACD,IAAI,OAAO,EAAE,CAAC;4BACZ,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;gCACjC,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;6BAC3B,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,sCAAsC;QACtC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,oBAAoB;QACpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,MAAM,CAAC,kBAAkB;gBAClC,SAAS,EAAE;oBACT,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,SAAS;iBAClB;aACF,CAAC,EACF;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CACF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IACzB,QAAQ,EAAE,SAAS;IACnB,yEAAyE;IACzE,6EAA6E;IAC7E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,GAAG,EAAE;QACH,WAAW,EAAE,CAAC;KACf;CACF,CAAC,CAAC;AAEH,8DAA8D;AAC9D,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;IACzB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,GAAG,CAAC,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACnE,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,SAAS,CAAC,CAAC;AACjE,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;AAC9D,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;AAE9D,8EAA8E;AAC9E,iFAAiF;AACjF,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAE9E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC;AACzD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;AACpC,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,eAAe,CAAC,MAAM,EAAE,CAAC;AAC3B,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,7 @@
+import { McpServer } from "tmcp";
+/**
+ * Create and configure the McpServer instance.
+ * Registers all Cinder MCP tools with Valibot-validated schemas.
+ */
+export declare function createServer(): McpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAgBjC;;;GAGG;AACH,wBAAgB,YAAY,IAAI,SAAS,CAuFxC"}

package/dist/server.js

@@ -0,0 +1,87 @@
+import { McpServer } from "tmcp";
+import { ValibotJsonSchemaAdapter } from "@tmcp/adapter-valibot";
+import { getConfig } from "./config.js";
+class FixedValibotAdapter extends ValibotJsonSchemaAdapter {
+    async toJsonSchema(schema) {
+        const s = await super.toJsonSchema(schema);
+        if (!s.type && (s.oneOf || s.anyOf))
+            s.type = "object";
+        return s;
+    }
+}
+import { CinderClient } from "./client.js";
+import { ExtractSchema, createExtractHandler } from "./tools/extract.js";
+import { DiscoverSchema, createDiscoverHandler } from "./tools/discover.js";
+import { MonitorSchema, createMonitorHandler } from "./tools/monitor.js";
+/**
+ * Create and configure the McpServer instance.
+ * Registers all Cinder MCP tools with Valibot-validated schemas.
+ */
+export function createServer() {
+    const config = getConfig();
+    const client = new CinderClient();
+    const server = new McpServer({
+        name: config.MCP_SERVER_NAME,
+        version: config.MCP_SERVER_VERSION,
+        description: "Cinder MCP — web scraping, crawling, and search powered by Cinder API",
+    }, {
+        adapter: new FixedValibotAdapter(),
+        capabilities: {
+            tools: { listChanged: false },
+        },
+        instructions: [
+            'Cinder MCP — 3 resource-oriented tools (≤7 philosophy, arch.md "Why 7 Tools Instead of 17"): 1 tool per domain resource with `action` enum, not 1 tool per CRUD operation.',
+            "",
+            "## Tools (3 — resource-oriented multiplexing)",
+            "- `cinder_extract` — extraction resource: `scrape` (single page → markdown) | `scrape_multi` (sync multi-URL, max 10, no Redis) | `links` (hyperlinks only) | `batch` (enqueue 20 URLs, Redis) | `batch_status` (poll batch)",
+            "- `cinder_discover` — discovery resource: `search` (SearXNG/Brave) | `map` (sitemap/traversal) | `crawl` (enqueue BFS, Redis) | `crawl_status` (poll crawl)",
+            "- `cinder_monitor` — change-tracking resource: `create` | `status` | `delete` (all Redis)",
+            "",
+            "## Tips",
+            "- Use `cinder_discover` (search/map) first to find URLs, then `cinder_extract` (scrape/scrape_multi) to fetch them.",
+            "- Use `cinder_extract` action=links for lightweight hyperlink extraction (no markdown).",
+            "- Use `cinder_extract` action=scrape_multi for 2–10 URLs in one call (no Redis, mirrors web_fetch_exa).",
+            "- Async actions (crawl/crawl_status, batch/batch_status, monitor) require Redis-backed Cinder — poll their status actions until done.",
+        ].join("\n"),
+    });
+    // Resource: extraction — 1 tool per domain resource with `action` enum (arch.md "Why 7 Instead of 17")
+    // Consolidates former cinder_scrape + cinder_links + cinder_batch_scrape (3→1) + scrape_multi (sync multi-URL)
+    server.tool({
+        name: "cinder_extract",
+        description: "Extraction resource (5 actions): `scrape` (single page → markdown, screenshots/images/summary/schema), `scrape_multi` (sync multi-URL max 10, no Redis, mirrors web_fetch_exa), `links` (hyperlinks only, no markdown), `batch` (enqueue 20 URLs async, Redis), `batch_status` (poll batch). Replaces cinder_scrape/cinder_links/cinder_batch_scrape.",
+        schema: ExtractSchema,
+        annotations: {
+            readOnlyHint: false,
+            openWorldHint: true,
+            idempotentHint: false,
+            destructiveHint: false,
+        },
+    }, createExtractHandler(client));
+    // Resource: discovery — 1 tool per domain resource with `action` enum
+    // Consolidates former cinder_search + cinder_map + cinder_crawl (3→1, crawl already merged start/status)
+    server.tool({
+        name: "cinder_discover",
+        description: "Discovery resource (4 actions): `search` (SearXNG/Brave, domain filters/pagination), `map` (sitemap/traversal), `crawl` (enqueue BFS async, Redis), `crawl_status` (poll crawl). Replaces cinder_search/cinder_map/cinder_crawl.",
+        schema: DiscoverSchema,
+        annotations: {
+            readOnlyHint: false,
+            openWorldHint: true,
+            idempotentHint: false,
+            destructiveHint: false,
+        },
+    }, createDiscoverHandler(client));
+    // Resource: change-tracking — already action-multiplexed (create|status|delete)
+    server.tool({
+        name: "cinder_monitor",
+        description: "Change-tracking resource (3 actions): `create` (hashes markdown, fires signed webhook on change), `status` (config/last hash/next check), `delete` (stop & remove). Requires Redis.",
+        schema: MonitorSchema,
+        annotations: {
+            readOnlyHint: false,
+            openWorldHint: true,
+            idempotentHint: false,
+            destructiveHint: false,
+        },
+    }, createMonitorHandler(client));
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,mBAAoB,SAAQ,wBAAwB;IACxD,KAAK,CAAC,YAAY,CAAC,MAAW;QAC5B,MAAM,CAAC,GAAQ,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AACD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,MAAM,CAAC,eAAe;QAC5B,OAAO,EAAE,MAAM,CAAC,kBAAkB;QAClC,WAAW,EACT,uEAAuE;KAC1E,EACD;QACE,OAAO,EAAE,IAAI,mBAAmB,EAAE;QAClC,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;SAC9B;QACD,YAAY,EAAE;YACZ,4KAA4K;YAC5K,EAAE;YACF,+CAA+C;YAC/C,8NAA8N;YAC9N,6JAA6J;YAC7J,2FAA2F;YAC3F,EAAE;YACF,SAAS;YACT,qHAAqH;YACrH,yFAAyF;YACzF,yGAAyG;YACzG,uIAAuI;SACxI,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CACF,CAAC;IAEF,uGAAuG;IACvG,+GAA+G;IAC/G,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,uVAAuV;QACzV,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;SACvB;KACF,EACD,oBAAoB,CAAC,MAAM,CAAQ,CACpC,CAAC;IAEF,sEAAsE;IACtE,yGAAyG;IACzG,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,kOAAkO;QACpO,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;SACvB;KACF,EACD,qBAAqB,CAAC,MAAM,CAAQ,CACrC,CAAC;IAEF,gFAAgF;IAChF,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EACT,qLAAqL;QACvL,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,KAAK;SACvB;KACF,EACD,oBAAoB,CAAC,MAAM,CAAQ,CACpC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/stdio.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=stdio.d.ts.map

package/dist/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":""}