toolhome 0.5.0

package/dist/server/data-plane/data-plane.js

@@ -0,0 +1,335 @@
+import { ClientCapabilitiesSchema } from '@modelcontextprotocol/core';
+import { createMcpHonoApp } from '@modelcontextprotocol/hono';
+import { createMcpHandler, isLegacyRequest, } from '@modelcontextprotocol/server';
+import { AppError } from '../domain/errors.js';
+import { bearerToken } from '../security/auth-service.js';
+import { LegacySessionHandler } from './legacy-session.js';
+import { adaptModernTaskRequest, canonicalTaskMethod } from './task-extension.js';
+import { expandVirtualResourceTemplate, parseVirtualResourceUri, virtualResourceUri, } from './virtualization.js';
+export class DataPlane {
+    #aggregate;
+    #individual = new Map();
+    #unsubscribe;
+    #factory;
+    #registry;
+    #upstreams;
+    #auth;
+    #oauth;
+    #store;
+    #logger;
+    constructor(factory, registry, upstreams, auth, oauth, store, logger) {
+        this.#factory = factory;
+        this.#registry = registry;
+        this.#upstreams = upstreams;
+        this.#auth = auth;
+        this.#oauth = oauth;
+        this.#store = store;
+        this.#logger = logger;
+        this.#aggregate = this.#createEndpoint(() => this.#factory.aggregate());
+        this.#unsubscribe = this.#upstreams.subscribe((event) => this.#publish(event));
+    }
+    createApp(options) {
+        const app = createMcpHonoApp({
+            host: options.host,
+            allowedHosts: options.allowedHosts,
+        });
+        app.use('*', async (context, next) => {
+            await next();
+            context.header('x-content-type-options', 'nosniff');
+            context.header('x-frame-options', 'DENY');
+            context.header('referrer-policy', 'no-referrer');
+            context.header('permissions-policy', 'camera=(), microphone=(), geolocation=()');
+            if (options.secure) {
+                context.header('strict-transport-security', 'max-age=31536000; includeSubDomains');
+            }
+            const contentType = context.res.headers.get('content-type') ?? '';
+            if (contentType.includes('text/html') &&
+                !context.res.headers.has('content-security-policy')) {
+                context.header('content-security-policy', "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; form-action 'self'; base-uri 'none'");
+            }
+        });
+        app.all('/mcp', (context) => this.#serve(context, this.#aggregate, null));
+        app.all('/mcp/:slug', (context) => {
+            const slug = context.req.param('slug');
+            if (!slug) {
+                return this.#httpError(context, new AppError('server_not_found', 'Server slug is required', 404));
+            }
+            try {
+                this.#registry.entryBySlug(slug);
+            }
+            catch (error) {
+                return this.#httpError(context, error);
+            }
+            return this.#serve(context, this.#handlerFor(slug), slug);
+        });
+        return app;
+    }
+    async remove(slug) {
+        const handler = this.#individual.get(slug);
+        this.#individual.delete(slug);
+        if (handler)
+            await this.#closeEndpoint(handler);
+        this.registryChanged();
+    }
+    registryChanged() {
+        this.#aggregate.modern.notify.toolsChanged();
+        this.#aggregate.modern.notify.promptsChanged();
+        this.#aggregate.modern.notify.resourcesChanged();
+        this.#aggregate.legacy.toolsChanged();
+        this.#aggregate.legacy.promptsChanged();
+        this.#aggregate.legacy.resourcesChanged();
+    }
+    async close() {
+        this.#unsubscribe();
+        await Promise.allSettled([
+            this.#closeEndpoint(this.#aggregate),
+            ...[...this.#individual.values()].map((handler) => this.#closeEndpoint(handler)),
+        ]);
+        this.#individual.clear();
+    }
+    #handlerFor(slug) {
+        const current = this.#individual.get(slug);
+        if (current)
+            return current;
+        const handler = this.#createEndpoint(() => this.#factory.individual(slug));
+        this.#individual.set(slug, handler);
+        return handler;
+    }
+    #createEndpoint(factory) {
+        return {
+            modern: createMcpHandler(factory, { legacy: 'reject' }),
+            legacy: new LegacySessionHandler(factory, this.#logger),
+        };
+    }
+    async #closeEndpoint(handler) {
+        await Promise.allSettled([handler.modern.close(), handler.legacy.close()]);
+    }
+    async #serve(context, handler, slug) {
+        try {
+            const token = bearerToken(context.req.raw);
+            if (!token)
+                throw new AppError('unauthorized', 'Bearer credential required', 401);
+            const resource = this.#oauth.mcpResource(slug);
+            const authInfo = await this.#authenticate(token, resource);
+            const parsedBody = await this.#parsedBody(context);
+            const legacy = await isLegacyRequest(context.req.raw);
+            if (!legacy)
+                this.#validateTaskHeader(context.req.raw, parsedBody);
+            const closeSubscriptions = legacy
+                ? null
+                : await this.#openResourceSubscriptions(parsedBody, slug);
+            try {
+                const response = legacy
+                    ? await handler.legacy.fetch(context.req.raw, { authInfo, parsedBody })
+                    : await this.#serveModern(handler.modern, context.req.raw, authInfo, parsedBody);
+                return closeSubscriptions === null
+                    ? response
+                    : this.#closeWithResponse(response, closeSubscriptions, context.req.raw.signal);
+            }
+            catch (error) {
+                await closeSubscriptions?.();
+                throw error;
+            }
+        }
+        catch (error) {
+            this.#logger.warn('MCP request rejected', {
+                endpoint: slug === null ? 'aggregate' : slug,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return this.#httpError(context, error, slug);
+        }
+    }
+    async #serveModern(handler, request, authInfo, parsedBody) {
+        const adapted = adaptModernTaskRequest(request, parsedBody);
+        return handler.fetch(adapted.request, { authInfo, parsedBody: adapted.body });
+    }
+    #validateTaskHeader(request, body) {
+        if (!isRecord(body) || typeof body.method !== 'string')
+            return;
+        if (!canonicalTaskMethod(body.method))
+            return;
+        if (!isRecord(body.params) || typeof body.params.taskId !== 'string') {
+            throw new AppError('invalid_task_request', 'Task ID is required', 400);
+        }
+        const encoded = request.headers.get('mcp-name');
+        if (!encoded || decodeHeaderValue(encoded) !== body.params.taskId) {
+            throw new AppError('invalid_task_header', 'Mcp-Name must match the task ID', 400);
+        }
+    }
+    async #authenticate(token, resource) {
+        try {
+            const principal = this.#auth.authenticate('access', token);
+            return this.#auth.toMcpAuthInfo(principal, token, resource);
+        }
+        catch (error) {
+            if (!(error instanceof AppError) || error.status !== 401)
+                throw error;
+            return this.#oauth.verifyAccessToken(token, resource);
+        }
+    }
+    async #parsedBody(context) {
+        const parsed = context.get('parsedBody');
+        if (parsed !== undefined)
+            return parsed;
+        const contentType = context.req.raw.headers.get('content-type') ?? '';
+        if (!contentType.includes('application/json'))
+            return undefined;
+        return context.req.raw.clone().json();
+    }
+    async #openResourceSubscriptions(body, slug) {
+        if (!isRecord(body) || body.method !== 'subscriptions/listen')
+            return null;
+        if (!isRecord(body.params) || !isRecord(body.params.notifications))
+            return null;
+        const requested = body.params.notifications.resourceSubscriptions;
+        if (!Array.isArray(requested))
+            return null;
+        const uris = requested.filter((value) => typeof value === 'string');
+        if (uris.length === 0)
+            return null;
+        const capabilities = clientCapabilities(body.params);
+        const grouped = new Map();
+        if (slug === null) {
+            for (const uri of uris) {
+                const route = parseVirtualResourceUri(uri) ?? expandVirtualResourceTemplate(uri);
+                if (!route)
+                    continue;
+                const entry = this.#registry.entryBySlug(route.slug);
+                const current = grouped.get(entry.server.id) ?? [];
+                current.push(route.upstreamUri);
+                grouped.set(entry.server.id, current);
+            }
+        }
+        else {
+            const entry = this.#registry.entryBySlug(slug);
+            grouped.set(entry.server.id, uris);
+        }
+        const close = await Promise.all([...grouped].map(([serverId, resourceUris]) => this.#upstreams.subscribeResources(serverId, resourceUris, capabilities)));
+        return async () => {
+            await Promise.allSettled(close.map((release) => release()));
+        };
+    }
+    #closeWithResponse(response, close, signal) {
+        const body = response.body;
+        if (!body) {
+            void close();
+            return response;
+        }
+        const reader = body.getReader();
+        let closed = false;
+        const closeOnce = async () => {
+            if (closed)
+                return;
+            closed = true;
+            signal.removeEventListener('abort', onAbort);
+            await close();
+        };
+        const onAbort = () => {
+            void closeOnce();
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+        const stream = new ReadableStream({
+            async pull(controller) {
+                try {
+                    const next = await reader.read();
+                    if (next.done) {
+                        controller.close();
+                        await closeOnce();
+                    }
+                    else {
+                        controller.enqueue(next.value);
+                    }
+                }
+                catch (error) {
+                    controller.error(error);
+                    await closeOnce();
+                }
+            },
+            async cancel(reason) {
+                try {
+                    await reader.cancel(reason);
+                }
+                finally {
+                    await closeOnce();
+                }
+            },
+        });
+        const headers = new Headers(response.headers);
+        headers.delete('content-length');
+        return new Response(stream, {
+            status: response.status,
+            statusText: response.statusText,
+            headers,
+        });
+    }
+    #httpError(_context, error, slug = null) {
+        const appError = error instanceof AppError
+            ? error
+            : new AppError('internal_error', 'Internal server error', 500);
+        const headers = appError.status === 401
+            ? {
+                'WWW-Authenticate': `Bearer realm="toolhome", resource_metadata="${this.#oauth.resourceMetadataUrl(this.#oauth.mcpResource(slug))}", scope="mcp:use"`,
+            }
+            : undefined;
+        return new Response(JSON.stringify({ error: { code: appError.code, message: appError.message } }), {
+            status: appError.status,
+            headers: {
+                ...headers,
+                'cache-control': 'no-store',
+                'content-type': 'application/json; charset=UTF-8',
+            },
+        });
+    }
+    #publish(event) {
+        const server = this.#store.getServer(event.serverId);
+        if (!server)
+            return;
+        const individual = this.#individual.get(server.slug);
+        switch (event.type) {
+            case 'tools_changed':
+                this.#aggregate.modern.notify.toolsChanged();
+                this.#aggregate.legacy.toolsChanged();
+                individual?.modern.notify.toolsChanged();
+                individual?.legacy.toolsChanged();
+                break;
+            case 'prompts_changed':
+                this.#aggregate.modern.notify.promptsChanged();
+                this.#aggregate.legacy.promptsChanged();
+                individual?.modern.notify.promptsChanged();
+                individual?.legacy.promptsChanged();
+                break;
+            case 'resources_changed':
+                this.#aggregate.modern.notify.resourcesChanged();
+                this.#aggregate.legacy.resourcesChanged();
+                individual?.modern.notify.resourcesChanged();
+                individual?.legacy.resourcesChanged();
+                break;
+            case 'resource_updated':
+                this.#aggregate.modern.notify.resourceUpdated(virtualResourceUri(server.slug, event.uri));
+                this.#aggregate.legacy.resourceUpdated(virtualResourceUri(server.slug, event.uri));
+                individual?.modern.notify.resourceUpdated(event.uri);
+                individual?.legacy.resourceUpdated(event.uri);
+                break;
+        }
+    }
+}
+function clientCapabilities(params) {
+    if (!isRecord(params._meta))
+        return {};
+    const parsed = ClientCapabilitiesSchema.safeParse(params._meta['io.modelcontextprotocol/clientCapabilities']);
+    return parsed.success ? parsed.data : {};
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function decodeHeaderValue(value) {
+    if (!value.startsWith('=?base64?') || !value.endsWith('?='))
+        return value;
+    try {
+        return Buffer.from(value.slice('=?base64?'.length, -2), 'base64').toString('utf8');
+    }
+    catch {
+        return '';
+    }
+}
+//# sourceMappingURL=data-plane.js.map

package/dist/server/data-plane/data-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-plane.js","sourceRoot":"","sources":["../../../src/data-plane/data-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,eAAe,GAKhB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAoB,MAAM,6BAA6B,CAAC;AAM5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,OAAO,SAAS;IACX,UAAU,CAAmB;IAC7B,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,YAAY,CAAa;IACzB,QAAQ,CAAuB;IAC/B,SAAS,CAAqB;IAC9B,UAAU,CAAkB;IAC5B,KAAK,CAAc;IACnB,MAAM,CAAc;IACpB,MAAM,CAAQ;IACd,OAAO,CAAS;IAEzB,YACE,OAA6B,EAC7B,QAA4B,EAC5B,SAA0B,EAC1B,IAAiB,EACjB,KAAkB,EAClB,KAAY,EACZ,MAAc;QAEd,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,SAAS,CAAC,OAAkE;QAC1E,MAAM,GAAG,GAAG,gBAAgB,CAAC;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;YACpD,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAC;YACjF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAClE,IACE,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACjC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EACnD,CAAC;gBACD,OAAO,CAAC,MAAM,CACZ,yBAAyB,EACzB,gLAAgL,CACjL,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACnF,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,OAAgB,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC,UAAU,CACpB,OAAO,EACP,IAAI,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,GAAG,CAAC,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO;YAAE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,eAAe;QACb,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,UAAU,CAAC;YACvB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;YACpC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;SACjF,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,eAAe,CAAC,OAAqB;QACnC,OAAO;YACL,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACvD,MAAM,EAAE,IAAI,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAyB;QAC5C,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAgB,EAChB,OAAyB,EACzB,IAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;YAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACnE,MAAM,kBAAkB,GAAG,MAAM;gBAC/B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM;oBACrB,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;oBACvE,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACnF,OAAO,kBAAkB,KAAK,IAAI;oBAChC,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,kBAAkB,EAAE,EAAE,CAAC;gBAC7B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBACxC,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBAC5C,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,OAAuB,EACvB,OAAgB,EAChB,QAAkB,EAClB,UAAmB;QAEnB,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,mBAAmB,CAAC,OAAgB,EAAE,IAAa;QACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QAC/D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO;QAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAClE,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,iCAAiC,EAAE,GAAG,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,QAAa;QAC9C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,KAAK,CAAC;YACtE,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAgB;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAAE,OAAO,SAAS,CAAC;QAChE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,IAAa,EACb,IAAmB;QAEnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,sBAAsB;YAAE,OAAO,IAAI,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC5C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,CAAC;gBACjF,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACnD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,EAAE,CAC5C,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CACzE,CACF,CAAC;QACF,OAAO,KAAK,IAAI,EAAE;YAChB,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC;IACJ,CAAC;IAED,kBAAkB,CAChB,QAAkB,EAClB,KAA0B,EAC1B,MAAmB;QAEnB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,KAAK,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;YAC1C,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,KAAK,SAAS,EAAE,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;YAC5C,KAAK,CAAC,IAAI,CAAC,UAAU;gBACnB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;wBACd,UAAU,CAAC,KAAK,EAAE,CAAC;wBACnB,MAAM,SAAS,EAAE,CAAC;oBACpB,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACjC,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxB,MAAM,SAAS,EAAE,CAAC;gBACpB,CAAC;YACH,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,MAAM;gBACjB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC;wBAAS,CAAC;oBACT,MAAM,SAAS,EAAE,CAAC;gBACpB,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjC,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,QAAiB,EAAE,KAAc,EAAE,IAAI,GAAkB,IAAI;QACtE,MAAM,QAAQ,GACZ,KAAK,YAAY,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,KAAK,GAAG;YACrB,CAAC,CAAC;gBACE,kBAAkB,EAAE,+CAA+C,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,oBAAoB;aACtJ;YACH,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,EAC7E;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,eAAe,EAAE,UAAU;gBAC3B,cAAc,EAAE,iCAAiC;aAClD;SACF,CACF,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,KAAoB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,eAAe;gBAClB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;gBAClC,MAAM;YACR,KAAK,iBAAiB;gBACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC3C,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBACpC,MAAM;YACR,KAAK,mBAAmB;gBACtB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACjD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC7C,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACtC,MAAM;YACR,KAAK,kBAAkB;gBACrB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1F,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrD,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC9C,MAAM;QACV,CAAC;IACH,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,MAA+B;IACzD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAC/C,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAC3D,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/data-plane/gateway-server.d.ts

@@ -0,0 +1,13 @@
+import { Server } from '@modelcontextprotocol/server';
+import type { CallRecorder } from '../observability/call-recorder.js';
+import type { CursorCodec } from '../security/cursor-codec.js';
+import type { UpstreamManager } from '../upstream/manager.js';
+import { CapabilityRegistry } from './registry.js';
+import { ToolProjectionService } from './projection.js';
+export declare class GatewayServerFactory {
+    #private;
+    constructor(registry: CapabilityRegistry, upstreams: UpstreamManager, cursors: CursorCodec, masterKey: string, projections: ToolProjectionService, recorder: CallRecorder);
+    aggregate(): Server;
+    individual(slug: string): Server;
+}
+//# sourceMappingURL=gateway-server.d.ts.map

package/dist/server/data-plane/gateway-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-server.d.ts","sourceRoot":"","sources":["../../../src/data-plane/gateway-server.ts"],"names":[],"mappings":"AAcA,OAAO,EAML,MAAM,EAYP,MAAM,8BAA8B,CAAC;AAKtC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAC;AAEvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AA6DxD,qBAAa,oBAAoB;;IAS/B,YACE,QAAQ,EAAE,kBAAkB,EAC5B,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,qBAAqB,EAClC,QAAQ,EAAE,YAAY,EAavB;IAED,SAAS,IAAI,MAAM,CAkUlB;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA2L/B;CAumBF"}