fixing jsonSchema validation by using zod

docker/Dockerfile

@@ -0,0 +1,49 @@
+# Stage 1: Builder
+FROM node:20-alpine AS builder
+
+WORKDIR /app
+
+# Copy package files
+COPY package*.json ./
+
+# Install dependencies
+RUN npm ci --only=production
+
+# Stage 2: Production
+FROM node:20-alpine
+
+# Install dumb-init for proper signal handling
+RUN apk add --no-cache dumb-init
+
+# Create non-root user
+RUN addgroup -g 1001 -S gds && \
+    adduser -S -D -H -u 1001 -h /app -s /sbin/nologin -G gds -g gds gds
+
+WORKDIR /app
+
+# Copy dependencies from builder
+COPY --from=builder --chown=gds:gds /app/node_modules ./node_modules
+
+# Copy application source
+COPY --chown=gds:gds src ./src
+COPY --chown=gds:gds package.json ./
+
+# Set environment variables
+ENV NODE_ENV=production \
+    LOG_LEVEL=info \
+    VALKEY_HOST=valkey \
+    VALKEY_PORT=6379
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
+    CMD node -e "const Redis = require('ioredis'); const client = new Redis({ host: process.env.VALKEY_HOST, port: process.env.VALKEY_PORT, lazyConnect: true }); client.connect().then(() => client.ping()).then(() => process.exit(0)).catch(() => process.exit(1));"
+
+# Switch to non-root user
+USER gds
+
+# Expose MCP server (stdio, no network port)
+# MCP servers use stdio transport, not network ports
+
+# Start server with dumb-init
+ENTRYPOINT ["/usr/bin/dumb-init", "--"]
+CMD ["node", "src/index.js"]

docker/docker-bake.hcl

@@ -0,0 +1,21 @@
+target "default" {
+  context = ".."
+  dockerfile = "docker/Dockerfile"
+  platforms = ["linux/amd64", "linux/arm64"]
+  tags = [
+    "gds-mock-mcp:latest",
+    "gds-mock-mcp:0.1.0"
+  ]
+}
+
+target "amd64" {
+  inherits = ["default"]
+  platforms = ["linux/amd64"]
+  tags = ["gds-mock-mcp:0.1.0-amd64"]
+}
+
+target "arm64" {
+  inherits = ["default"]
+  platforms = ["linux/arm64"]
+  tags = ["gds-mock-mcp:0.1.0-arm64"]
+}

docker/nginx.conf.example

@@ -0,0 +1,75 @@
+# Nginx Configuration for Optional HTTP/2 Upgrade
+# Client-facing: HTTP/2
+# Backend: HTTP/1.1 (MCP server)
+
+upstream gds_mcp_backend {
+    server 127.0.0.1:3000;
+    keepalive 32;
+}
+
+server {
+    listen 443 ssl http2;
+    server_name gds-mock-mcp.example.com;
+
+    # SSL configuration (replace with your certificates)
+    ssl_certificate /path/to/ssl/certificate.crt;
+    ssl_certificate_key /path/to/ssl/private.key;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    # Logging
+    access_log /var/log/nginx/gds-mcp-access.log;
+    error_log /var/log/nginx/gds-mcp-error.log;
+
+    # MCP endpoint proxy
+    location /mcp {
+        proxy_pass http://gds_mcp_backend;
+        proxy_http_version 1.1;
+
+        # Preserve headers
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # MCP headers
+        proxy_set_header MCP-Protocol-Version $http_mcp_protocol_version;
+        proxy_set_header MCP-Session-Id $http_mcp_session_id;
+        proxy_set_header Last-Event-ID $http_last_event_id;
+
+        # SSE configuration
+        proxy_set_header Connection '';
+        proxy_buffering off;
+        proxy_cache off;
+        chunked_transfer_encoding off;
+
+        # Timeouts
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    # Health check endpoint
+    location /health {
+        proxy_pass http://gds_mcp_backend;
+        proxy_http_version 1.1;
+        proxy_set_header Connection '';
+        proxy_buffering off;
+    }
+
+    # Rate limiting (additional layer beyond application)
+    limit_req_zone $binary_remote_addr zone=mcp_limit:10m rate=100r/m;
+    limit_req zone=mcp_limit burst=20 nodelay;
+
+    # Security headers
+    add_header X-Content-Type-Options nosniff;
+    add_header X-Frame-Options DENY;
+    add_header X-XSS-Protection "1; mode=block";
+}
+
+# HTTP redirect to HTTPS
+server {
+    listen 80;
+    server_name gds-mock-mcp.example.com;
+    return 301 https://$server_name$request_uri;
+}