← back to Affiliate Feeds Mcp
affiliate-feeds MCP: Amazon/Rakuten/ShareASale product-search tools wrapping tested adapters
671edfba709dd93e0645d7e7d660eb957e52c6cc · 2026-08-01 19:32:00 -0700 · Steve Abrams
- ESM MCP server (official SDK) exposing amazon_search/rakuten_search/shareasale_search + affiliate_status
- reuses the credential-gated .cjs adapters (SigV4 / OAuth / HMAC) from interiordesignershowroom
- each tool safe with no creds (returns 'not configured'); verified via MCP handshake (tools/list)
Files touched
A .env.exampleA .gitignoreA README.mdA adapters/amazon.cjsA adapters/rakuten.cjsA adapters/shareasale.cjsA bin/server.jsA package-lock.jsonA package.json
Diff
commit 671edfba709dd93e0645d7e7d660eb957e52c6cc
Author: Steve Abrams <steve@designerwallcoverings.com>
Date: Sat Aug 1 19:32:00 2026 -0700
affiliate-feeds MCP: Amazon/Rakuten/ShareASale product-search tools wrapping tested adapters
- ESM MCP server (official SDK) exposing amazon_search/rakuten_search/shareasale_search + affiliate_status
- reuses the credential-gated .cjs adapters (SigV4 / OAuth / HMAC) from interiordesignershowroom
- each tool safe with no creds (returns 'not configured'); verified via MCP handshake (tools/list)
---
.env.example | 20 +
.gitignore | 5 +
README.md | 31 ++
adapters/amazon.cjs | 259 +++++++++++
adapters/rakuten.cjs | 296 ++++++++++++
adapters/shareasale.cjs | 235 ++++++++++
bin/server.js | 78 ++++
package-lock.json | 1185 +++++++++++++++++++++++++++++++++++++++++++++++
package.json | 14 +
9 files changed, 2123 insertions(+)
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..2698fb2
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,20 @@
+# affiliate-feeds MCP — credentials per network. Fill as each account is approved,
+# then route via the `secrets` skill into the MCP's env block in ~/.claude.json.
+# The server runs fine with none set (tools report "not configured").
+
+# Amazon Associates (PA-API v5) — requires a live content site + 3 sales/180 days
+AMAZON_ACCESS_KEY=
+AMAZON_SECRET_KEY=
+AMAZON_PARTNER_TAG=
+AMAZON_HOST=webservices.amazon.com
+AMAZON_REGION=us-east-1
+
+# Rakuten Advertising (LinkSynergy)
+RAKUTEN_CLIENT_ID=
+RAKUTEN_CLIENT_SECRET=
+RAKUTEN_SCOPE=
+
+# ShareASale
+SHAREASALE_AFFILIATE_ID=
+SHAREASALE_API_TOKEN=
+SHAREASALE_API_SECRET=
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..3f388e6
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,5 @@
+node_modules/
+.env*
+!.env.example
+*.log
+.DS_Store
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..ac05032
--- /dev/null
+++ b/README.md
@@ -0,0 +1,31 @@
+# affiliate-feeds-mcp
+
+An MCP server exposing **Amazon PA-API v5**, **Rakuten Advertising**, and **ShareASale**
+affiliate product search as tools. Wraps the credential-gated adapters built + tested for
+`interiordesignershowroom`. Pure Node (built-in `fetch` + `crypto`); the only deps are the
+MCP SDK + zod.
+
+## Tools
+- `amazon_search({ keywords?, limit? })` — Amazon products (SigV4-signed PA-API v5)
+- `rakuten_search({ keywords?, limit? })` — Rakuten LinkSynergy product search
+- `shareasale_search({ keywords?, limit? })` — ShareASale productSearch
+- `affiliate_status()` — which networks are configured
+
+Each search returns normalized product objects: `{ advertiser, title, brand, price,
+sale_price, image_url, affiliate_url, external_id }`. With no credentials, a tool returns a
+clear "not configured — set X env vars" note instead of failing.
+
+## Install (registered in ~/.claude.json)
+```json
+"affiliate-feeds": {
+ "command": "node",
+ "args": ["/Users/macstudio3/Projects/affiliate-feeds-mcp/bin/server.js"],
+ "env": { "AMAZON_ACCESS_KEY": "", "...": "" }
+}
+```
+MCP env is read at server launch, so **new sessions** pick up newly-added credentials
+(a running session needs `/clear` or restart). Route creds via the `secrets` skill.
+
+## Credentials
+See `.env.example`. Each network requires publisher approval (and Amazon requires a live
+site + 3 sales/180 days).
diff --git a/adapters/amazon.cjs b/adapters/amazon.cjs
new file mode 100644
index 0000000..a9c5ed7
--- /dev/null
+++ b/adapters/amazon.cjs
@@ -0,0 +1,259 @@
+// ---------------------------------------------------------------------------
+// Amazon Product Advertising API v5 (PA-API 5) adapter.
+//
+// WHAT PA-API IS: Amazon's official API for Amazon Associates (affiliates). It
+// lets an approved associate search Amazon's catalog and read product data
+// (title, brand, price, images) plus a DetailPageURL that already carries the
+// associate's partner/tracking tag, so clicks are attributable and earn
+// commission. Requests are signed with AWS Signature Version 4 (SigV4) and
+// POSTed to the regional PA-API endpoint.
+//
+// REQUIRED ENV VARS:
+// AMAZON_ACCESS_KEY - PA-API access key (AWS-style access key id)
+// AMAZON_SECRET_KEY - PA-API secret key (used only for SigV4 signing)
+// AMAZON_PARTNER_TAG - your Associates tracking id / store id (e.g. mytag-20)
+// AMAZON_HOST - optional, default 'webservices.amazon.com' (US)
+// AMAZON_REGION - optional, default 'us-east-1'
+//
+// GOTCHA (READ THIS): Amazon Associates is not a data API you can just sign up
+// for. To KEEP PA-API access you must (a) have a live, real content site, and
+// (b) drive >= 3 QUALIFYING SALES within 180 days of being accepted. Miss that
+// window and Amazon closes the account and revokes the keys. So `enabled()`
+// returning true only proves keys are configured, not that the account is in
+// good standing -- PA-API can start returning 4xx the moment the account lapses.
+//
+// This adapter is pure Node: global fetch (Node 20+) + built-in crypto only.
+// SigV4 is implemented by hand -- no aws-sdk, no paapi5 SDK, no npm deps.
+// ---------------------------------------------------------------------------
+
+const crypto = require('crypto');
+
+const SERVICE = 'ProductAdvertisingAPI';
+const OPERATION = 'SearchItems';
+const PATH = '/paapi5/searchitems';
+const TARGET = 'com.amazon.paapi5.v1.ProductAdvertisingAPIv1.SearchItems';
+const CONTENT_ENCODING = 'amz-1.0';
+
+// Search terms we rotate through so the affiliate feed isn't a single keyword.
+const KEYWORDS = ['furniture', 'home decor', 'lighting', 'rug', 'wall art'];
+const SEARCH_INDEX = 'HomeAndKitchen';
+const RESOURCES = [
+ 'ItemInfo.Title',
+ 'ItemInfo.ByLineInfo',
+ 'Offers.Listings.Price',
+ 'Images.Primary.Large',
+];
+
+const PAGE_SIZE = 10; // PA-API returns at most 10 items per page.
+const INTER_PAGE_DELAY_MS = 1100; // PA-API throttles hard (~1 req/sec).
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+// --- SigV4 helpers ---------------------------------------------------------
+
+const sha256Hex = (data) =>
+ crypto.createHash('sha256').update(data, 'utf8').digest('hex');
+
+const hmac = (key, data) =>
+ crypto.createHmac('sha256', key).update(data, 'utf8').digest();
+
+// AWS4 signing key = HMAC chain over date -> region -> service -> aws4_request.
+function signingKey(secret, dateStamp, region, service) {
+ const kDate = hmac('AWS4' + secret, dateStamp);
+ const kRegion = hmac(kDate, region);
+ const kService = hmac(kRegion, service);
+ return hmac(kService, 'aws4_request');
+}
+
+// Build the Authorization header for one signed POST.
+function buildAuthHeaders(env, host, region, payload) {
+ const now = new Date();
+ // amzDate = 20240131T120000Z ; dateStamp = 20240131
+ const amzDate = now.toISOString().replace(/[:-]|\.\d{3}/g, '');
+ const dateStamp = amzDate.slice(0, 8);
+
+ const headers = {
+ 'content-encoding': CONTENT_ENCODING,
+ 'content-type': 'application/json; charset=utf-8',
+ host,
+ 'x-amz-date': amzDate,
+ 'x-amz-target': TARGET,
+ };
+
+ // Canonical request: sorted lowercase header names, ';'-joined.
+ const signedHeaders = Object.keys(headers).sort().join(';');
+ const canonicalHeaders =
+ Object.keys(headers)
+ .sort()
+ .map((k) => `${k}:${headers[k]}\n`)
+ .join('');
+
+ const payloadHash = sha256Hex(payload);
+ const canonicalRequest = [
+ 'POST',
+ PATH,
+ '', // canonical query string (none)
+ canonicalHeaders,
+ signedHeaders,
+ payloadHash,
+ ].join('\n');
+
+ // String to sign.
+ const credentialScope = `${dateStamp}/${region}/${SERVICE}/aws4_request`;
+ const stringToSign = [
+ 'AWS4-HMAC-SHA256',
+ amzDate,
+ credentialScope,
+ sha256Hex(canonicalRequest),
+ ].join('\n');
+
+ // Signature + Authorization header.
+ const key = signingKey(env.AMAZON_SECRET_KEY, dateStamp, region, SERVICE);
+ const signature = crypto.createHmac('sha256', key).update(stringToSign, 'utf8').digest('hex');
+
+ const authorization =
+ `AWS4-HMAC-SHA256 Credential=${env.AMAZON_ACCESS_KEY}/${credentialScope}, ` +
+ `SignedHeaders=${signedHeaders}, Signature=${signature}`;
+
+ return { ...headers, Authorization: authorization };
+}
+
+// --- mapping ---------------------------------------------------------------
+
+// Map one PA-API Item into our rawProduct shape. Returns null if it lacks a
+// required field (external_id / title / affiliate_url).
+function mapItem(item) {
+ const asin = item && item.ASIN;
+ const info = (item && item.ItemInfo) || {};
+ const title = info.Title && info.Title.DisplayValue;
+ const affiliateUrl = item && item.DetailPageURL; // already carries partner tag
+ if (!asin || !title || !affiliateUrl) return null;
+
+ const brand =
+ info.ByLineInfo && info.ByLineInfo.Brand && info.ByLineInfo.Brand.DisplayValue;
+
+ const listing =
+ item.Offers && Array.isArray(item.Offers.Listings) ? item.Offers.Listings[0] : null;
+ const price = listing && listing.Price ? listing.Price.Amount : null;
+ const currency = listing && listing.Price ? listing.Price.Currency : 'USD';
+
+ const imageUrl =
+ item.Images && item.Images.Primary && item.Images.Primary.Large
+ ? item.Images.Primary.Large.URL
+ : null;
+
+ return {
+ advertiser: 'Amazon',
+ external_id: String(asin),
+ title,
+ description: null,
+ brand: brand || null,
+ category: SEARCH_INDEX,
+ price: typeof price === 'number' ? price : null,
+ sale_price: null,
+ currency: currency || 'USD',
+ image_url: imageUrl,
+ affiliate_url: affiliateUrl,
+ in_stock: !!listing, // an offer exists => treat as in stock
+ };
+}
+
+// --- one signed page -------------------------------------------------------
+
+async function fetchPage(env, host, region, keywords, itemPage) {
+ const body = {
+ Keywords: keywords,
+ SearchIndex: SEARCH_INDEX,
+ ItemCount: PAGE_SIZE,
+ ItemPage: itemPage,
+ PartnerTag: env.AMAZON_PARTNER_TAG,
+ PartnerType: 'Associates',
+ Marketplace: `www.${host.replace(/^webservices\./, '')}`,
+ Resources: RESOURCES,
+ };
+ const payload = JSON.stringify(body);
+ const headers = buildAuthHeaders(env, host, region, payload);
+
+ const res = await fetch(`https://${host}${PATH}`, { method: 'POST', headers, body: payload });
+ if (!res.ok) {
+ // Throttling (429) or account issues (4xx) -- surface nothing, don't crash
+ // the whole ingest. Caller keeps whatever earlier pages returned.
+ const txt = await res.text().catch(() => '');
+ console.error(`[amazon] page ${itemPage} HTTP ${res.status}: ${txt.slice(0, 300)}`);
+ return [];
+ }
+ const json = await res.json().catch(() => ({}));
+ const items = (json.SearchResult && json.SearchResult.Items) || [];
+ return items;
+}
+
+// --- contract --------------------------------------------------------------
+
+const network = 'amazon';
+
+function enabled(env) {
+ env = env || {};
+ return Boolean(env.AMAZON_ACCESS_KEY && env.AMAZON_SECRET_KEY && env.AMAZON_PARTNER_TAG);
+}
+
+async function fetch_(env, opts) {
+ env = env || {};
+ if (!enabled(env)) return []; // never throw on missing creds
+
+ const limit = Math.max(1, (opts && opts.limit) || PAGE_SIZE);
+ const host = env.AMAZON_HOST || 'webservices.amazon.com';
+ const region = env.AMAZON_REGION || 'us-east-1';
+
+ const out = [];
+ const kwList = (opts && opts.keywords) ? [String(opts.keywords)] : KEYWORDS;
+ let keywordIdx = 0;
+ let itemPage = 1;
+
+ // Page until we hit `limit`, cycling keywords so we don't just re-page one
+ // term. PA-API caps ItemPage at 10 per keyword; we bump keyword when needed.
+ while (out.length < limit) {
+ const keywords = kwList[keywordIdx % kwList.length];
+ let items = [];
+ try {
+ items = await fetchPage(env, host, region, keywords, itemPage);
+ } catch (err) {
+ console.error(`[amazon] fetchPage error: ${err && err.message}`);
+ items = [];
+ }
+
+ for (const it of items) {
+ const raw = mapItem(it);
+ if (raw) out.push(raw);
+ if (out.length >= limit) break;
+ }
+
+ // Advance paging. Roll to next keyword after the page cap or an empty page.
+ if (items.length === 0 || itemPage >= 10) {
+ keywordIdx += 1;
+ itemPage = 1;
+ if (keywordIdx >= kwList.length) break; // exhausted our keyword set
+ } else {
+ itemPage += 1;
+ }
+
+ if (out.length < limit) await sleep(INTER_PAGE_DELAY_MS); // respect ~1 req/sec
+ }
+
+ return out.slice(0, limit);
+}
+
+module.exports = { network, enabled, fetch: fetch_ };
+
+// --- self-test -------------------------------------------------------------
+if (require.main === module) {
+ (async () => {
+ console.log(`[amazon] enabled=${enabled(process.env)}`);
+ try {
+ const products = await fetch_(process.env, { limit: 3 });
+ console.log(`[amazon] fetched ${products.length} product(s)`);
+ if (products[0]) console.log(JSON.stringify(products[0], null, 2));
+ } catch (err) {
+ console.error(`[amazon] self-test error: ${err && err.message}`);
+ }
+ })();
+}
diff --git a/adapters/rakuten.cjs b/adapters/rakuten.cjs
new file mode 100644
index 0000000..3441610
--- /dev/null
+++ b/adapters/rakuten.cjs
@@ -0,0 +1,296 @@
+// ---------------------------------------------------------------------------
+// Rakuten Advertising (LinkSynergy) — Product Search adapter
+// ---------------------------------------------------------------------------
+//
+// WHAT THIS IS
+// Rakuten Advertising (formerly LinkShare / LinkSynergy) is an affiliate
+// marketing network. Publishers (that's us) join the network, get approved by
+// individual advertisers/merchants, and earn commission on tracked sales.
+// The Product Search API lets an approved publisher query the product catalogs
+// of the merchants they've been approved for and get back tracked deep links
+// (the "linkurl") that carry our publisher SID so commissions are attributed.
+//
+// APPROVAL REQUIRED
+// Two layers of approval gate real data:
+// 1. Publisher approval — you must have an active Rakuten Advertising
+// publisher account and a developer application (Client ID / Secret).
+// 2. Per-advertiser approval — the Product Search API only returns products
+// from merchants who have approved YOUR publisher account. An unapproved
+// or brand-new account will authenticate fine but return zero <item>s.
+//
+// REQUIRED ENV VARS
+// RAKUTEN_CLIENT_ID — developer application Client ID
+// RAKUTEN_CLIENT_SECRET — developer application Client Secret
+// RAKUTEN_SCOPE — your unique publisher Site ID (SID), used as the
+// OAuth "scope" when minting the access token
+//
+// AUTH FLOW (client_credentials)
+// POST https://api.linksynergy.com/token
+// Header: Authorization: Bearer base64(clientId:clientSecret)
+// Body: scope=<SID>&grant_type=client_credentials
+// -> { access_token, token_type, expires_in } (access token valid ~60 min)
+// Then GET the Product Search API with `Authorization: Bearer <access_token>`.
+// The Product Search response is XML (<item> elements).
+//
+// CONTRACT
+// module.exports = { network, enabled, fetch }
+// - never throws on missing creds (enabled()=false, fetch()=[])
+// - loads via require() with zero env set (no top-level throws)
+// ---------------------------------------------------------------------------
+
+'use strict';
+
+const NETWORK = 'rakuten';
+
+// Endpoints (verified against developers.rakutenadvertising.com, 2026-08).
+const TOKEN_URL = 'https://api.linksynergy.com/token';
+const PRODUCT_SEARCH_URL = 'https://api.linksynergy.com/productsearch/1.0';
+
+// Default catalog query. This is a home/interior-design affiliate site, so a
+// generic "furniture" keyword gives a reasonable starter set; downstream
+// normalize.js handles taxonomy. // TODO(verify): tune keyword per site niche.
+const DEFAULT_KEYWORD = 'furniture';
+const DEFAULT_LIMIT = 20;
+
+// Module-level OAuth token cache so repeated fetch() calls in one process don't
+// re-auth on every call. Shape: { token: string, expiresAt: number(ms) }.
+let _tokenCache = null;
+// Refresh a little early so we never send an already-expired token.
+const TOKEN_SKEW_MS = 60 * 1000;
+
+// ---------------------------------------------------------------------------
+// Tiny, dependency-free XML helpers. Rakuten's Product Search response is XML;
+// we only need a handful of fields, so a defensive regex extractor is plenty —
+// no XML npm library. These are intentionally forgiving: missing tags -> null.
+// ---------------------------------------------------------------------------
+
+// Split the document into the raw inner text of every <item>...</item> block.
+function extractItems(xml) {
+ if (typeof xml !== 'string' || !xml) return [];
+ const items = [];
+ const re = /<item\b[^>]*>([\s\S]*?)<\/item>/gi;
+ let m;
+ while ((m = re.exec(xml)) !== null) {
+ items.push(m[1]);
+ if (items.length > 5000) break; // safety valve
+ }
+ return items;
+}
+
+// Decode the handful of XML/HTML entities that show up in product text.
+function decodeEntities(s) {
+ if (typeof s !== 'string') return s;
+ return s
+ .replace(/<!\[CDATA\[([\s\S]*?)\]\]>/g, '$1')
+ .replace(/</g, '<')
+ .replace(/>/g, '>')
+ .replace(/"/g, '"')
+ .replace(/�?39;/g, "'")
+ .replace(/'/g, "'")
+ .replace(/&/g, '&')
+ .trim();
+}
+
+// Pull the inner text of the FIRST <tag>...</tag> inside an item block.
+// Returns null when the tag is absent or empty (defensive on purpose).
+function tagText(itemXml, tag) {
+ if (typeof itemXml !== 'string') return null;
+ const re = new RegExp('<' + tag + '\\b[^>]*>([\\s\\S]*?)<\\/' + tag + '>', 'i');
+ const m = re.exec(itemXml);
+ if (!m) return null;
+ const val = decodeEntities(m[1]);
+ return val === '' ? null : val;
+}
+
+// Parse a price-ish string into a Number, or null if not parseable.
+// Handles a currency attribute-free value like "129.99" or "$1,299.00".
+function toNumber(val) {
+ if (val == null) return null;
+ const cleaned = String(val).replace(/[^0-9.]/g, '');
+ if (cleaned === '' || cleaned === '.') return null;
+ const n = Number(cleaned);
+ return Number.isFinite(n) ? n : null;
+}
+
+// Rakuten emits <price currency="USD">129.99</price>; grab the currency attr.
+function tagAttr(itemXml, tag, attr) {
+ if (typeof itemXml !== 'string') return null;
+ const re = new RegExp('<' + tag + '\\b[^>]*\\b' + attr + '="([^"]*)"', 'i');
+ const m = re.exec(itemXml);
+ return m ? m[1] : null;
+}
+
+// ---------------------------------------------------------------------------
+// Contract methods
+// ---------------------------------------------------------------------------
+
+// True ONLY when all required Rakuten creds are present + non-empty.
+function enabled(env) {
+ const e = env || {};
+ return Boolean(e.RAKUTEN_CLIENT_ID && e.RAKUTEN_CLIENT_SECRET && e.RAKUTEN_SCOPE);
+}
+
+// Mint (or reuse a cached) OAuth access token. Returns null on any failure so
+// callers can degrade to [] instead of throwing.
+async function getAccessToken(env) {
+ const now = Date.now();
+ if (_tokenCache && _tokenCache.token && _tokenCache.expiresAt - TOKEN_SKEW_MS > now) {
+ return _tokenCache.token;
+ }
+
+ const basic = Buffer.from(
+ `${env.RAKUTEN_CLIENT_ID}:${env.RAKUTEN_CLIENT_SECRET}`
+ ).toString('base64');
+
+ const body = new URLSearchParams({
+ scope: String(env.RAKUTEN_SCOPE),
+ grant_type: 'client_credentials',
+ }).toString();
+
+ let res;
+ try {
+ res = await fetch(TOKEN_URL, {
+ method: 'POST',
+ headers: {
+ // OAuth2 RFC 6749 §2.3.1 + Rakuten token endpoint: client credentials
+ // are sent as HTTP Basic auth (scheme "Basic"), NOT "Bearer".
+ // Using "Bearer" here would cause a 401 on every token request, silently
+ // making getAccessToken() always return null and fetch() always return [].
+ Authorization: `Basic ${basic}`,
+ 'Content-Type': 'application/x-www-form-urlencoded',
+ Accept: 'application/json',
+ },
+ body,
+ });
+ } catch (err) {
+ console.error(`[rakuten] token request failed: ${err && err.message}`);
+ return null;
+ }
+
+ if (!res.ok) {
+ console.error(`[rakuten] token endpoint returned HTTP ${res.status}`);
+ return null;
+ }
+
+ let json;
+ try {
+ json = await res.json();
+ } catch (err) {
+ console.error(`[rakuten] could not parse token JSON: ${err && err.message}`);
+ return null;
+ }
+
+ const token = json && json.access_token;
+ if (!token) {
+ console.error('[rakuten] token response missing access_token');
+ return null;
+ }
+
+ // expires_in is seconds; default to 60 min if the field is absent.
+ const ttlSec = Number(json.expires_in) > 0 ? Number(json.expires_in) : 3600;
+ _tokenCache = { token, expiresAt: now + ttlSec * 1000 };
+ return token;
+}
+
+// Fetch + map products. Returns [] on ANY failure (missing creds, network,
+// auth, empty catalog) — never throws.
+async function fetchProducts(env, opts) {
+ const e = env || {};
+ if (!enabled(e)) return [];
+
+ const limit = (opts && Number(opts.limit) > 0) ? Math.floor(Number(opts.limit)) : DEFAULT_LIMIT;
+
+ const token = await getAccessToken(e);
+ if (!token) return [];
+
+ const keyword = (opts && opts.keywords) ? String(opts.keywords) : (e.RAKUTEN_KEYWORD || DEFAULT_KEYWORD);
+ const url =
+ `${PRODUCT_SEARCH_URL}?keyword=${encodeURIComponent(keyword)}` +
+ `&max=${encodeURIComponent(limit)}`;
+
+ let res;
+ try {
+ res = await fetch(url, {
+ method: 'GET',
+ headers: { Authorization: `Bearer ${token}`, Accept: 'application/xml' },
+ });
+ } catch (err) {
+ console.error(`[rakuten] product search request failed: ${err && err.message}`);
+ return [];
+ }
+
+ if (!res.ok) {
+ // A 401 here usually means the cached token went stale between calls; drop
+ // the cache so the next fetch() re-auths cleanly.
+ if (res.status === 401) _tokenCache = null;
+ console.error(`[rakuten] product search returned HTTP ${res.status}`);
+ return [];
+ }
+
+ let xml;
+ try {
+ xml = await res.text();
+ } catch (err) {
+ console.error(`[rakuten] could not read product search body: ${err && err.message}`);
+ return [];
+ }
+
+ const items = extractItems(xml);
+ const out = [];
+
+ for (const item of items) {
+ // Rakuten field names -> our rawProduct shape.
+ const external_id = tagText(item, 'sku') || tagText(item, 'linkid') || null;
+ const title = tagText(item, 'productname');
+ const affiliate_url = tagText(item, 'linkurl');
+
+ // Required fields — skip malformed items rather than emit junk.
+ if (!external_id || !title || !affiliate_url) continue;
+
+ const priceCurrency = tagAttr(item, 'price', 'currency');
+ const saleRaw = tagText(item, 'saleprice');
+
+ out.push({
+ advertiser: tagText(item, 'merchantname'),
+ external_id: String(external_id),
+ title,
+ description: tagText(item, 'description') || null,
+ brand: tagText(item, 'brand') || null,
+ // Rakuten category is a delimited path e.g. "Home~~Furniture"; keep raw.
+ category: tagText(item, 'category') || null,
+ price: toNumber(tagText(item, 'price')),
+ sale_price: saleRaw != null ? toNumber(saleRaw) : null,
+ currency: priceCurrency || null, // TODO(verify): some feeds omit currency attr
+ image_url: tagText(item, 'imageurl') || null,
+ affiliate_url,
+ // Product Search has no reliable in-stock flag; assume orderable = true.
+ in_stock: true,
+ });
+ }
+
+ return out;
+}
+
+module.exports = {
+ network: NETWORK,
+ enabled,
+ fetch: fetchProducts,
+};
+
+// ---------------------------------------------------------------------------
+// Self-test: `node lib/adapters/rakuten.js` — runs a real fetch with whatever
+// creds are in the environment and logs the count. Safe with no creds (0).
+// ---------------------------------------------------------------------------
+if (require.main === module) {
+ (async () => {
+ const on = enabled(process.env);
+ console.log(`[rakuten] enabled(process.env) = ${on}`);
+ try {
+ const rows = await fetchProducts(process.env, { limit: 3 });
+ console.log(`[rakuten] fetch returned ${rows.length} product(s)`);
+ if (rows.length) console.log(JSON.stringify(rows[0], null, 2));
+ } catch (err) {
+ console.error(`[rakuten] self-test error: ${err && err.message}`);
+ }
+ })();
+}
diff --git a/adapters/shareasale.cjs b/adapters/shareasale.cjs
new file mode 100644
index 0000000..272de2c
--- /dev/null
+++ b/adapters/shareasale.cjs
@@ -0,0 +1,235 @@
+// ShareASale product-search adapter (ShareASale / Awin / Impact family).
+//
+// WHAT SHAREASALE IS
+// ShareASale is an affiliate network (now owned by Awin) that connects
+// publishers ("affiliates") with merchants. A publisher earns commission by
+// driving tracked traffic/sales to a merchant. ShareASale exposes an HTTP
+// API at https://api.shareasale.com/w.cfm for affiliates to pull merchant
+// catalogs, run product searches, fetch tracked deep-links, etc.
+//
+// REQUIRED ENV VARS (all three must be present for this adapter to run):
+// SHAREASALE_AFFILIATE_ID your ShareASale affiliate account id (numeric)
+// SHAREASALE_API_TOKEN the API "token" issued in the ShareASale UI
+// SHAREASALE_API_SECRET the API "secret key" paired with that token
+//
+// APPROVAL NOTE
+// Using this adapter requires (1) an approved ShareASale PUBLISHER account
+// with API access enabled, AND (2) per-merchant approval for each merchant
+// whose products you surface + link to. An affiliate link only pays / is
+// permitted for merchants that have accepted you into their program. This
+// adapter reads the catalog; honoring per-merchant approval + FTC disclosure
+// is the caller's responsibility.
+//
+// AUTH MECHANICS (verified: token + sha256 signature header, pipe-delimited
+// response). Signature = sha256Hex(token + ':' + timestamp + ':' + action +
+// ':' + secretKey); sent alongside the timestamp in two request headers:
+// x-ShareASale-Date: <timestamp>
+// x-ShareASale-Authentication: <sig>
+//
+// CONTRACT: module.exports = { network, enabled, fetch }
+// fetch(env, { limit }) -> array of rawProduct objects (see lib/adapters/index.js)
+//
+// Pure Node: global fetch (Node 20+) + built-in crypto. No npm deps.
+// Never throws on missing creds — enabled() is false and fetch() returns [].
+
+'use strict';
+
+const crypto = require('crypto');
+
+const NETWORK = 'shareasale';
+const API_URL = 'https://api.shareasale.com/w.cfm';
+const API_VERSION = '3.0'; // ShareASale API version string. TODO(verify): confirm current version.
+const ACTION = 'productSearch';
+const DEFAULT_KEYWORD = 'furniture';
+const DEFAULT_LIMIT = 50;
+
+// --- helpers ---------------------------------------------------------------
+
+function sha256Hex(str) {
+ return crypto.createHash('sha256').update(str, 'utf8').digest('hex');
+}
+
+// ShareASale expects a UTC date string as the timestamp. Their examples use a
+// full UTC datetime; new Date().toUTCString() yields e.g.
+// "Sat, 01 Aug 2026 18:04:11 GMT", which the signature and header must match
+// exactly (same value used in both places).
+function utcTimestamp() {
+ return new Date().toUTCString();
+}
+
+function signature(token, timestamp, action, secret) {
+ return sha256Hex(`${token}:${timestamp}:${action}:${secret}`);
+}
+
+function toNumber(v) {
+ if (v == null || v === '') return undefined;
+ const n = Number(String(v).replace(/[^0-9.\-]/g, ''));
+ return Number.isFinite(n) ? n : undefined;
+}
+
+function toBool(v) {
+ if (v == null || v === '') return undefined;
+ const s = String(v).trim().toLowerCase();
+ if (['1', 'true', 'yes', 'y', 'instock', 'in stock', 'in-stock'].includes(s)) return true;
+ if (['0', 'false', 'no', 'n', 'outofstock', 'out of stock'].includes(s)) return false;
+ return undefined;
+}
+
+// Parse ShareASale's delimited response defensively. The productSearch action
+// returns a header row + data rows. The delimiter is typically a pipe "|" but
+// can be a tab; sniff whichever the header row contains. Columns are mapped by
+// lowercased header name so we don't depend on positional order.
+function parseDelimited(text) {
+ const lines = String(text)
+ .split(/\r?\n/)
+ .map((l) => l.trim())
+ .filter((l) => l.length > 0);
+ if (lines.length < 2) return [];
+
+ const header = lines[0];
+ // Sniff delimiter: prefer pipe, else tab, else comma.
+ let delim = '|';
+ if (!header.includes('|')) {
+ if (header.includes('\t')) delim = '\t';
+ else if (header.includes(',')) delim = ',';
+ }
+
+ const cols = header.split(delim).map((c) => c.trim().toLowerCase());
+ const rows = [];
+ for (let i = 1; i < lines.length; i++) {
+ const parts = lines[i].split(delim);
+ // Skip API error lines (ShareASale prefixes errors with a code word/number).
+ if (parts.length < 2) continue;
+ const row = {};
+ for (let c = 0; c < cols.length; c++) {
+ row[cols[c]] = parts[c] != null ? parts[c].trim() : '';
+ }
+ rows.push(row);
+ }
+ return rows;
+}
+
+// Column-name resolver — ShareASale column labels vary by feed; try the common
+// aliases for each field. TODO(verify): confirm exact productSearch column names.
+function pick(row, names) {
+ for (const n of names) {
+ if (row[n] != null && row[n] !== '') return row[n];
+ }
+ return undefined;
+}
+
+function mapRow(row) {
+ const external_id = pick(row, ['productid', 'product_id', 'sku', 'id']);
+ const title = pick(row, ['name', 'productname', 'title']);
+ const affiliate_url = pick(row, ['buyurl', 'affiliateurl', 'affiliate_url', 'link', 'url']);
+ const price = toNumber(pick(row, ['price', 'retailprice']));
+ const sale_price = toNumber(pick(row, ['saleprice', 'sale_price']));
+
+ return {
+ advertiser: pick(row, ['merchantname', 'merchant', 'advertiser', 'brandname']),
+ external_id: external_id != null ? String(external_id) : undefined,
+ title,
+ description: pick(row, ['description', 'shortdescription', 'longdescription']),
+ brand: pick(row, ['brand', 'brandname', 'manufacturer']),
+ category: pick(row, ['category', 'merchantcategory', 'primarycategory']),
+ price,
+ sale_price,
+ currency: pick(row, ['currency', 'currencycode']) || 'USD',
+ image_url: pick(row, ['imageurl', 'image', 'thumburl', 'thumbnail']),
+ affiliate_url,
+ in_stock: toBool(pick(row, ['instock', 'in_stock', 'stockstatus', 'status'])),
+ };
+}
+
+// --- contract --------------------------------------------------------------
+
+function enabled(env) {
+ const e = env || {};
+ return Boolean(
+ e.SHAREASALE_AFFILIATE_ID &&
+ e.SHAREASALE_API_TOKEN &&
+ e.SHAREASALE_API_SECRET
+ );
+}
+
+async function fetch_(env, opts) {
+ const e = env || {};
+ if (!enabled(e)) return []; // never throw on missing creds
+
+ const limit = Math.max(1, Number((opts && opts.limit) || DEFAULT_LIMIT));
+
+ const affiliateId = e.SHAREASALE_AFFILIATE_ID;
+ const token = e.SHAREASALE_API_TOKEN;
+ const secret = e.SHAREASALE_API_SECRET;
+ const keyword = (opts && opts.keywords) ? String(opts.keywords) : (e.SHAREASALE_KEYWORD || DEFAULT_KEYWORD);
+
+ const timestamp = utcTimestamp();
+ const sig = signature(token, timestamp, ACTION, secret);
+
+ const params = new URLSearchParams({
+ version: API_VERSION,
+ action: ACTION,
+ affiliateId: String(affiliateId),
+ token: String(token),
+ keyword,
+ // Paging: request enough rows to satisfy limit. TODO(verify): exact paging
+ // param names for productSearch (records/page vs XMLOut/recordcount).
+ records: String(limit),
+ page: '1',
+ });
+
+ const url = `${API_URL}?${params.toString()}`;
+
+ let text;
+ try {
+ const res = await fetch(url, {
+ method: 'GET',
+ headers: {
+ 'x-ShareASale-Date': timestamp,
+ 'x-ShareASale-Authentication': sig,
+ Accept: 'text/plain',
+ },
+ });
+ if (!res.ok) return []; // bad creds / rate-limit / error -> empty, don't throw
+ text = await res.text();
+ } catch (_err) {
+ return []; // network failure -> empty
+ }
+
+ let rows;
+ try {
+ rows = parseDelimited(text);
+ } catch (_err) {
+ return [];
+ }
+
+ const products = [];
+ for (const row of rows) {
+ const p = mapRow(row);
+ // Enforce the required fields of a rawProduct.
+ if (!p.external_id || !p.title || !p.affiliate_url) continue;
+ products.push(p);
+ if (products.length >= limit) break;
+ }
+ return products;
+}
+
+module.exports = {
+ network: NETWORK,
+ enabled,
+ fetch: fetch_,
+};
+
+// --- self-test -------------------------------------------------------------
+if (require.main === module) {
+ (async () => {
+ const on = enabled(process.env);
+ console.log(`[shareasale] enabled=${on}`);
+ const out = await fetch_(process.env, { limit: 3 });
+ console.log(`[shareasale] fetched ${out.length} product(s)`);
+ if (out.length) console.log(JSON.stringify(out[0], null, 2));
+ })().catch((err) => {
+ console.error('[shareasale] self-test error:', err && err.message);
+ process.exit(1);
+ });
+}
diff --git a/bin/server.js b/bin/server.js
new file mode 100644
index 0000000..764d16b
--- /dev/null
+++ b/bin/server.js
@@ -0,0 +1,78 @@
+#!/usr/bin/env node
+// affiliate-feeds MCP server.
+// Exposes Amazon PA-API v5, Rakuten Advertising, and ShareASale product search as
+// MCP tools by wrapping the credential-gated adapters copied from the
+// interiordesignershowroom build. Each tool is safe to call with no credentials —
+// it returns a clear "not configured" message instead of failing.
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { createRequire } from 'module';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+
+// The adapters are CommonJS (node built-ins only); load them from ESM.
+const require = createRequire(import.meta.url);
+const adaptersDir = join(dirname(fileURLToPath(import.meta.url)), '..', 'adapters');
+const amazon = require(join(adaptersDir, 'amazon.cjs'));
+const rakuten = require(join(adaptersDir, 'rakuten.cjs'));
+const shareasale = require(join(adaptersDir, 'shareasale.cjs'));
+
+const NETWORKS = {
+ amazon: { adapter: amazon, env: ['AMAZON_ACCESS_KEY', 'AMAZON_SECRET_KEY', 'AMAZON_PARTNER_TAG'],
+ label: 'Amazon Associates (PA-API v5)' },
+ rakuten: { adapter: rakuten, env: ['RAKUTEN_CLIENT_ID', 'RAKUTEN_CLIENT_SECRET', 'RAKUTEN_SCOPE'],
+ label: 'Rakuten Advertising' },
+ shareasale: { adapter: shareasale, env: ['SHAREASALE_AFFILIATE_ID', 'SHAREASALE_API_TOKEN', 'SHAREASALE_API_SECRET'],
+ label: 'ShareASale' },
+};
+
+const server = new McpServer({ name: 'affiliate-feeds', version: '0.1.0' });
+
+function registerSearch(key) {
+ const { adapter, env, label } = NETWORKS[key];
+ server.registerTool(
+ `${key}_search`,
+ {
+ title: `${label} product search`,
+ description: `Search ${label} for affiliate products by keyword. Returns normalized product objects `
+ + `(title, brand, price, image_url, affiliate_url, advertiser). Requires the ${key.toUpperCase()} `
+ + `credentials in the server env; returns a "not configured" note if absent.`,
+ inputSchema: {
+ keywords: z.string().optional().describe('Search terms, e.g. "velvet sofa" (defaults to home/furniture terms)'),
+ limit: z.number().int().positive().max(50).optional().describe('Max products to return (default 10)'),
+ },
+ },
+ async ({ keywords, limit }) => {
+ if (!adapter.enabled(process.env)) {
+ return { content: [{ type: 'text',
+ text: `${label} is not configured. Set these env vars on the affiliate-feeds MCP server: ${env.join(', ')}.` }] };
+ }
+ let products = [];
+ try {
+ products = await adapter.fetch(process.env, { keywords, limit: limit || 10 });
+ } catch (e) {
+ return { content: [{ type: 'text', text: `${label} search error: ${e && e.message}` }], isError: true };
+ }
+ return { content: [{ type: 'text',
+ text: JSON.stringify({ network: key, keywords: keywords || '(default)', count: products.length, products }, null, 2) }] };
+ }
+ );
+}
+
+Object.keys(NETWORKS).forEach(registerSearch);
+
+// A tiny status tool so you can see which networks are wired without a live call.
+server.registerTool('affiliate_status', {
+ title: 'Affiliate networks configuration status',
+ description: 'Reports which affiliate networks have credentials configured on this MCP server.',
+ inputSchema: {},
+}, async () => {
+ const status = Object.fromEntries(Object.entries(NETWORKS).map(([k, v]) =>
+ [k, v.adapter.enabled(process.env) ? 'configured' : `missing: ${v.env.join(', ')}`]));
+ return { content: [{ type: 'text', text: JSON.stringify(status, null, 2) }] };
+});
+
+const transport = new StdioServerTransport();
+await server.connect(transport);
+console.error('[affiliate-feeds] MCP server ready (stdio)');
diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..b69c597
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,1185 @@
+{
+ "name": "affiliate-feeds-mcp",
+ "version": "0.1.0",
+ "lockfileVersion": 3,
+ "requires": true,
+ "packages": {
+ "": {
+ "name": "affiliate-feeds-mcp",
+ "version": "0.1.0",
+ "dependencies": {
+ "@modelcontextprotocol/sdk": "^1.0.0",
+ "zod": "^3.23.8"
+ },
+ "bin": {
+ "affiliate-feeds-mcp": "bin/server.js"
+ },
+ "engines": {
+ "node": ">=20"
+ }
+ },
+ "node_modules/@hono/node-server": {
+ "version": "2.0.12",
+ "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.0.12.tgz",
+ "integrity": "sha512-eWpQYr67tqJLeaSUl0Q+TquuYfUdTibpOJlUMV2FfUP7+KqCC5TufnwnlXL6mobZBJbGAYRd7ZvEBDCbLInjhg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=20"
+ },
+ "peerDependencies": {
+ "hono": "^4"
+ }
+ },
+ "node_modules/@modelcontextprotocol/sdk": {
+ "version": "1.30.0",
+ "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.30.0.tgz",
+ "integrity": "sha512-xKd8OIzlqNzcqcNumGAa6g+PW2kjD5vrpcKOnfldAUPP3j7lnqMPwlTXQm8gF+UwH72z0lqaRbjr9hqGz0eITA==",
+ "license": "MIT",
+ "dependencies": {
+ "@hono/node-server": "^1.19.9 || ^2.0.5",
+ "ajv": "^8.17.1",
+ "ajv-formats": "^3.0.1",
+ "content-type": "^1.0.5",
+ "cors": "^2.8.5",
+ "cross-spawn": "^7.0.5",
+ "eventsource": "^3.0.2",
+ "eventsource-parser": "^3.0.0",
+ "express": "^5.2.1",
+ "express-rate-limit": "^8.2.1",
+ "hono": "^4.11.4",
+ "jose": "^6.1.3",
+ "json-schema-typed": "^8.0.2",
+ "pkce-challenge": "^5.0.0",
+ "raw-body": "^3.0.0",
+ "zod": "^3.25 || ^4.0",
+ "zod-to-json-schema": "^3.25.1"
+ },
+ "engines": {
+ "node": ">=18"
+ },
+ "peerDependencies": {
+ "@cfworker/json-schema": "^4.1.1",
+ "zod": "^3.25 || ^4.0"
+ },
+ "peerDependenciesMeta": {
+ "@cfworker/json-schema": {
+ "optional": true
+ },
+ "zod": {
+ "optional": false
+ }
+ }
+ },
+ "node_modules/accepts": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz",
+ "integrity": "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==",
+ "license": "MIT",
+ "dependencies": {
+ "mime-types": "^3.0.0",
+ "negotiator": "^1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/ajv": {
+ "version": "8.20.0",
+ "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+ "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
+ "license": "MIT",
+ "dependencies": {
+ "fast-deep-equal": "^3.1.3",
+ "fast-uri": "^3.0.1",
+ "json-schema-traverse": "^1.0.0",
+ "require-from-string": "^2.0.2"
+ },
+ "funding": {
+ "type": "github",
+ "url": "https://github.com/sponsors/epoberezkin"
+ }
+ },
+ "node_modules/ajv-formats": {
+ "version": "3.0.1",
+ "resolved": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz",
+ "integrity": "sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==",
+ "license": "MIT",
+ "dependencies": {
+ "ajv": "^8.0.0"
+ },
+ "peerDependencies": {
+ "ajv": "^8.0.0"
+ },
+ "peerDependenciesMeta": {
+ "ajv": {
+ "optional": true
+ }
+ }
+ },
+ "node_modules/body-parser": {
+ "version": "2.3.0",
+ "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.3.0.tgz",
+ "integrity": "sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==",
+ "license": "MIT",
+ "dependencies": {
+ "bytes": "^3.1.2",
+ "content-type": "^2.0.0",
+ "debug": "^4.4.3",
+ "http-errors": "^2.0.1",
+ "iconv-lite": "^0.7.2",
+ "on-finished": "^2.4.1",
+ "qs": "^6.15.2",
+ "raw-body": "^3.0.2",
+ "type-is": "^2.1.0"
+ },
+ "engines": {
+ "node": ">=18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/body-parser/node_modules/content-type": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz",
+ "integrity": "sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/bytes": {
+ "version": "3.1.2",
+ "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+ "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/call-bind-apply-helpers": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+ "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "function-bind": "^1.1.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/call-bound": {
+ "version": "1.0.4",
+ "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+ "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "get-intrinsic": "^1.3.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/content-disposition": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
+ "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/content-type": {
+ "version": "1.0.5",
+ "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+ "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/cookie": {
+ "version": "0.7.2",
+ "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+ "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/cookie-signature": {
+ "version": "1.2.2",
+ "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz",
+ "integrity": "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=6.6.0"
+ }
+ },
+ "node_modules/cors": {
+ "version": "2.8.6",
+ "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+ "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+ "license": "MIT",
+ "dependencies": {
+ "object-assign": "^4",
+ "vary": "^1"
+ },
+ "engines": {
+ "node": ">= 0.10"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/cross-spawn": {
+ "version": "7.0.6",
+ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+ "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
+ "license": "MIT",
+ "dependencies": {
+ "path-key": "^3.1.0",
+ "shebang-command": "^2.0.0",
+ "which": "^2.0.1"
+ },
+ "engines": {
+ "node": ">= 8"
+ }
+ },
+ "node_modules/debug": {
+ "version": "4.4.3",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+ "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+ "license": "MIT",
+ "dependencies": {
+ "ms": "^2.1.3"
+ },
+ "engines": {
+ "node": ">=6.0"
+ },
+ "peerDependenciesMeta": {
+ "supports-color": {
+ "optional": true
+ }
+ }
+ },
+ "node_modules/depd": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+ "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/dunder-proto": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+ "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.1",
+ "es-errors": "^1.3.0",
+ "gopd": "^1.2.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/ee-first": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+ "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+ "license": "MIT"
+ },
+ "node_modules/encodeurl": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+ "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/es-define-property": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+ "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/es-errors": {
+ "version": "1.3.0",
+ "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+ "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/es-object-atoms": {
+ "version": "1.1.2",
+ "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+ "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/escape-html": {
+ "version": "1.0.3",
+ "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+ "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+ "license": "MIT"
+ },
+ "node_modules/etag": {
+ "version": "1.8.1",
+ "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+ "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/eventsource": {
+ "version": "3.0.7",
+ "resolved": "https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz",
+ "integrity": "sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA==",
+ "license": "MIT",
+ "dependencies": {
+ "eventsource-parser": "^3.0.1"
+ },
+ "engines": {
+ "node": ">=18.0.0"
+ }
+ },
+ "node_modules/eventsource-parser": {
+ "version": "3.1.0",
+ "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.0.tgz",
+ "integrity": "sha512-kJezFj9YFAMLeORyi7aCLxLbD5/qWMQnoMVlVPyHIll7lgRJCc3JVln9Vgl9nwQi0YkMnhdGTMNn7CkRRAptMg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=18.0.0"
+ }
+ },
+ "node_modules/express": {
+ "version": "5.2.1",
+ "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+ "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
+ "license": "MIT",
+ "dependencies": {
+ "accepts": "^2.0.0",
+ "body-parser": "^2.2.1",
+ "content-disposition": "^1.0.0",
+ "content-type": "^1.0.5",
+ "cookie": "^0.7.1",
+ "cookie-signature": "^1.2.1",
+ "debug": "^4.4.0",
+ "depd": "^2.0.0",
+ "encodeurl": "^2.0.0",
+ "escape-html": "^1.0.3",
+ "etag": "^1.8.1",
+ "finalhandler": "^2.1.0",
+ "fresh": "^2.0.0",
+ "http-errors": "^2.0.0",
+ "merge-descriptors": "^2.0.0",
+ "mime-types": "^3.0.0",
+ "on-finished": "^2.4.1",
+ "once": "^1.4.0",
+ "parseurl": "^1.3.3",
+ "proxy-addr": "^2.0.7",
+ "qs": "^6.14.0",
+ "range-parser": "^1.2.1",
+ "router": "^2.2.0",
+ "send": "^1.1.0",
+ "serve-static": "^2.2.0",
+ "statuses": "^2.0.1",
+ "type-is": "^2.0.1",
+ "vary": "^1.1.2"
+ },
+ "engines": {
+ "node": ">= 18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/express-rate-limit": {
+ "version": "8.6.1",
+ "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.6.1.tgz",
+ "integrity": "sha512-0D493aP61w0TJ2A0wy27riRsO7FMQ7FK+KUHOKCSfPvYo0R55aiC6emCVgFUeShH0fq0ICPVzNcgoS+BsbXQCA==",
+ "license": "MIT",
+ "dependencies": {
+ "debug": "^4.4.3",
+ "ip-address": "^10.2.0"
+ },
+ "engines": {
+ "node": ">= 16"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/express-rate-limit"
+ },
+ "peerDependencies": {
+ "express": ">= 4.11"
+ }
+ },
+ "node_modules/fast-deep-equal": {
+ "version": "3.1.3",
+ "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+ "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+ "license": "MIT"
+ },
+ "node_modules/fast-uri": {
+ "version": "3.1.5",
+ "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz",
+ "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==",
+ "funding": [
+ {
+ "type": "github",
+ "url": "https://github.com/sponsors/fastify"
+ },
+ {
+ "type": "opencollective",
+ "url": "https://opencollective.com/fastify"
+ }
+ ],
+ "license": "BSD-3-Clause"
+ },
+ "node_modules/finalhandler": {
+ "version": "2.1.1",
+ "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz",
+ "integrity": "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==",
+ "license": "MIT",
+ "dependencies": {
+ "debug": "^4.4.0",
+ "encodeurl": "^2.0.0",
+ "escape-html": "^1.0.3",
+ "on-finished": "^2.4.1",
+ "parseurl": "^1.3.3",
+ "statuses": "^2.0.1"
+ },
+ "engines": {
+ "node": ">= 18.0.0"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/forwarded": {
+ "version": "0.2.0",
+ "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+ "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/fresh": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz",
+ "integrity": "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/function-bind": {
+ "version": "1.1.2",
+ "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+ "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+ "license": "MIT",
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/get-intrinsic": {
+ "version": "1.3.0",
+ "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+ "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "es-define-property": "^1.0.1",
+ "es-errors": "^1.3.0",
+ "es-object-atoms": "^1.1.1",
+ "function-bind": "^1.1.2",
+ "get-proto": "^1.0.1",
+ "gopd": "^1.2.0",
+ "has-symbols": "^1.1.0",
+ "hasown": "^2.0.2",
+ "math-intrinsics": "^1.1.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/get-proto": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+ "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+ "license": "MIT",
+ "dependencies": {
+ "dunder-proto": "^1.0.1",
+ "es-object-atoms": "^1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/gopd": {
+ "version": "1.2.0",
+ "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+ "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/has-symbols": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+ "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/hasown": {
+ "version": "2.0.4",
+ "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+ "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+ "license": "MIT",
+ "dependencies": {
+ "function-bind": "^1.1.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/hono": {
+ "version": "4.12.33",
+ "resolved": "https://registry.npmjs.org/hono/-/hono-4.12.33.tgz",
+ "integrity": "sha512-+SwvkaiJtxsiPjhy9LivY/1m7UsNqCJetM1BrZl9A5DkQhlbHQDU730mMiDPWjnoCYOM8Chf3WrCJw27kNTPFQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=16.9.0"
+ }
+ },
+ "node_modules/http-errors": {
+ "version": "2.0.1",
+ "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+ "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+ "license": "MIT",
+ "dependencies": {
+ "depd": "~2.0.0",
+ "inherits": "~2.0.4",
+ "setprototypeof": "~1.2.0",
+ "statuses": "~2.0.2",
+ "toidentifier": "~1.0.1"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/iconv-lite": {
+ "version": "0.7.3",
+ "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz",
+ "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
+ "license": "MIT",
+ "dependencies": {
+ "safer-buffer": ">= 2.1.2 < 3.0.0"
+ },
+ "engines": {
+ "node": ">=0.10.0"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/inherits": {
+ "version": "2.0.4",
+ "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+ "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+ "license": "ISC"
+ },
+ "node_modules/ip-address": {
+ "version": "10.4.0",
+ "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
+ "integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 12"
+ }
+ },
+ "node_modules/ipaddr.js": {
+ "version": "1.9.1",
+ "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+ "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.10"
+ }
+ },
+ "node_modules/is-promise": {
+ "version": "4.0.0",
+ "resolved": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz",
+ "integrity": "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==",
+ "license": "MIT"
+ },
+ "node_modules/isexe": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
+ "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
+ "license": "ISC"
+ },
+ "node_modules/jose": {
+ "version": "6.2.7",
+ "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.7.tgz",
+ "integrity": "sha512-hq1OB1bALKfydZNoViyg6hPVGV4i93ny9Op+n4zP5RSf7SCZEXa/TsG2O3IEr7+WlHRTPnpqDmHfMH6qXAD60w==",
+ "license": "MIT",
+ "funding": {
+ "url": "https://github.com/sponsors/panva"
+ }
+ },
+ "node_modules/json-schema-traverse": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+ "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+ "license": "MIT"
+ },
+ "node_modules/json-schema-typed": {
+ "version": "8.0.2",
+ "resolved": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz",
+ "integrity": "sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==",
+ "license": "BSD-2-Clause"
+ },
+ "node_modules/math-intrinsics": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+ "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/media-typer": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.1.tgz",
+ "integrity": "sha512-yz3xRaG20c6/BOzvYoDaGtPmGscs7YivItZEEqe6GbwNfHuxu9YNmvnEkMzKldAGY4/80pRcQRZSEnhquk9XuQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/merge-descriptors": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz",
+ "integrity": "sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=18"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/sindresorhus"
+ }
+ },
+ "node_modules/mime-db": {
+ "version": "1.54.0",
+ "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz",
+ "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/mime-types": {
+ "version": "3.0.2",
+ "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz",
+ "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==",
+ "license": "MIT",
+ "dependencies": {
+ "mime-db": "^1.54.0"
+ },
+ "engines": {
+ "node": ">=18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/ms": {
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+ "license": "MIT"
+ },
+ "node_modules/negotiator": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz",
+ "integrity": "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/object-assign": {
+ "version": "4.1.1",
+ "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+ "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=0.10.0"
+ }
+ },
+ "node_modules/object-inspect": {
+ "version": "1.13.4",
+ "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+ "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/on-finished": {
+ "version": "2.4.1",
+ "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+ "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+ "license": "MIT",
+ "dependencies": {
+ "ee-first": "1.1.1"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/once": {
+ "version": "1.4.0",
+ "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+ "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+ "license": "ISC",
+ "dependencies": {
+ "wrappy": "1"
+ }
+ },
+ "node_modules/parseurl": {
+ "version": "1.3.3",
+ "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+ "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/path-key": {
+ "version": "3.1.1",
+ "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
+ "integrity": "sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=8"
+ }
+ },
+ "node_modules/path-to-regexp": {
+ "version": "8.4.2",
+ "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.2.tgz",
+ "integrity": "sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==",
+ "license": "MIT",
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/pkce-challenge": {
+ "version": "5.0.1",
+ "resolved": "https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz",
+ "integrity": "sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=16.20.0"
+ }
+ },
+ "node_modules/proxy-addr": {
+ "version": "2.0.7",
+ "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+ "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+ "license": "MIT",
+ "dependencies": {
+ "forwarded": "0.2.0",
+ "ipaddr.js": "1.9.1"
+ },
+ "engines": {
+ "node": ">= 0.10"
+ }
+ },
+ "node_modules/qs": {
+ "version": "6.15.3",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
+ "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+ "license": "BSD-3-Clause",
+ "dependencies": {
+ "es-define-property": "^1.0.1",
+ "side-channel": "^1.1.1"
+ },
+ "engines": {
+ "node": ">=0.6"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/range-parser": {
+ "version": "1.3.0",
+ "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.3.0.tgz",
+ "integrity": "sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/raw-body": {
+ "version": "3.0.2",
+ "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz",
+ "integrity": "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==",
+ "license": "MIT",
+ "dependencies": {
+ "bytes": "~3.1.2",
+ "http-errors": "~2.0.1",
+ "iconv-lite": "~0.7.0",
+ "unpipe": "~1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.10"
+ }
+ },
+ "node_modules/require-from-string": {
+ "version": "2.0.2",
+ "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+ "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=0.10.0"
+ }
+ },
+ "node_modules/router": {
+ "version": "2.2.0",
+ "resolved": "https://registry.npmjs.org/router/-/router-2.2.0.tgz",
+ "integrity": "sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==",
+ "license": "MIT",
+ "dependencies": {
+ "debug": "^4.4.0",
+ "depd": "^2.0.0",
+ "is-promise": "^4.0.0",
+ "parseurl": "^1.3.3",
+ "path-to-regexp": "^8.0.0"
+ },
+ "engines": {
+ "node": ">= 18"
+ }
+ },
+ "node_modules/safer-buffer": {
+ "version": "2.1.2",
+ "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+ "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+ "license": "MIT"
+ },
+ "node_modules/send": {
+ "version": "1.2.1",
+ "resolved": "https://registry.npmjs.org/send/-/send-1.2.1.tgz",
+ "integrity": "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==",
+ "license": "MIT",
+ "dependencies": {
+ "debug": "^4.4.3",
+ "encodeurl": "^2.0.0",
+ "escape-html": "^1.0.3",
+ "etag": "^1.8.1",
+ "fresh": "^2.0.0",
+ "http-errors": "^2.0.1",
+ "mime-types": "^3.0.2",
+ "ms": "^2.1.3",
+ "on-finished": "^2.4.1",
+ "range-parser": "^1.2.1",
+ "statuses": "^2.0.2"
+ },
+ "engines": {
+ "node": ">= 18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/serve-static": {
+ "version": "2.2.1",
+ "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz",
+ "integrity": "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==",
+ "license": "MIT",
+ "dependencies": {
+ "encodeurl": "^2.0.0",
+ "escape-html": "^1.0.3",
+ "parseurl": "^1.3.3",
+ "send": "^1.2.0"
+ },
+ "engines": {
+ "node": ">= 18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/setprototypeof": {
+ "version": "1.2.0",
+ "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+ "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+ "license": "ISC"
+ },
+ "node_modules/shebang-command": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
+ "integrity": "sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==",
+ "license": "MIT",
+ "dependencies": {
+ "shebang-regex": "^3.0.0"
+ },
+ "engines": {
+ "node": ">=8"
+ }
+ },
+ "node_modules/shebang-regex": {
+ "version": "3.0.0",
+ "resolved": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
+ "integrity": "sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=8"
+ }
+ },
+ "node_modules/side-channel": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+ "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.4",
+ "side-channel-list": "^1.0.1",
+ "side-channel-map": "^1.0.1",
+ "side-channel-weakmap": "^1.0.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-list": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+ "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.4"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-map": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+ "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-weakmap": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+ "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3",
+ "side-channel-map": "^1.0.1"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/statuses": {
+ "version": "2.0.2",
+ "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+ "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/toidentifier": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+ "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=0.6"
+ }
+ },
+ "node_modules/type-is": {
+ "version": "2.1.0",
+ "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.1.0.tgz",
+ "integrity": "sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==",
+ "license": "MIT",
+ "dependencies": {
+ "content-type": "^2.0.0",
+ "media-typer": "^1.1.0",
+ "mime-types": "^3.0.0"
+ },
+ "engines": {
+ "node": ">= 18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/type-is/node_modules/content-type": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz",
+ "integrity": "sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=18"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/unpipe": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+ "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/vary": {
+ "version": "1.1.2",
+ "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+ "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/which": {
+ "version": "2.0.2",
+ "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
+ "integrity": "sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==",
+ "license": "ISC",
+ "dependencies": {
+ "isexe": "^2.0.0"
+ },
+ "bin": {
+ "node-which": "bin/node-which"
+ },
+ "engines": {
+ "node": ">= 8"
+ }
+ },
+ "node_modules/wrappy": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+ "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+ "license": "ISC"
+ },
+ "node_modules/zod": {
+ "version": "3.25.76",
+ "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+ "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+ "license": "MIT",
+ "funding": {
+ "url": "https://github.com/sponsors/colinhacks"
+ }
+ },
+ "node_modules/zod-to-json-schema": {
+ "version": "3.25.2",
+ "resolved": "https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.2.tgz",
+ "integrity": "sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==",
+ "license": "ISC",
+ "peerDependencies": {
+ "zod": "^3.25.28 || ^4"
+ }
+ }
+ }
+}
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..7f39e63
--- /dev/null
+++ b/package.json
@@ -0,0 +1,14 @@
+{
+ "name": "affiliate-feeds-mcp",
+ "version": "0.1.0",
+ "private": true,
+ "type": "module",
+ "description": "MCP server exposing Amazon PA-API, Rakuten, and ShareASale affiliate product search as tools. Wraps the tested adapters from the interiordesignershowroom build.",
+ "bin": { "affiliate-feeds-mcp": "bin/server.js" },
+ "scripts": { "start": "node bin/server.js" },
+ "dependencies": {
+ "@modelcontextprotocol/sdk": "^1.0.0",
+ "zod": "^3.23.8"
+ },
+ "engines": { "node": ">=20" }
+}
(oldest)
·
back to Affiliate Feeds Mcp
·
(newest)