#!/usr/bin/env node
/**
 * ForgeOS MCP — HTTP/SSE Transport (Hono)
 *
 * Exposes three endpoints on /mcp:
 *   POST   /mcp  — StreamableHTTP main channel (JSON-RPC over HTTP)
 *   GET    /mcp  — SSE fallback (server-to-client event stream)
 *   DELETE /mcp  — Session cleanup
 *   GET    /health — Liveness probe
 *
 * Security design (BIS Condition — BLOCKING):
 *   API key is read from the Authorization: Bearer <key> header on EVERY
 *   request. It is threaded into ForgeOSClient as a constructor parameter.
 *   We NEVER mutate process.env and NEVER hold a shared client singleton
 *   across requests. Each MCP Server instance is created per-request so
 *   there is no cross-request state leakage.
 *
 * Rate limiting:
 *   Simple in-memory token-bucket per API key (or per IP when no key).
 *   Max 60 requests / 60-second window. Configurable via env vars:
 *     RATE_LIMIT_MAX (default 60)
 *     RATE_LIMIT_WINDOW_MS (default 60000)
 */
export declare function startHttpServer(port?: number): void;
//# sourceMappingURL=http-server.d.ts.map