Sürüm v0.1.4: FastMCP 2.10.5 güncellemesi ve optimizasyonlar

- FastMCP bağımlılığı 2.10.5'e güncellendi
- Bedesten araçları birleştirildi (10 araç → 2 birleşik araç)
- KVKK dokümantasyonu optimize edildi (147 → 27 satır, %82 azalma)
- README 30 MCP aracının güncel listesi ile güncellendi
- Eski tekil Bedesten API araçları kaldırıldı
- Araç açıklamaları ve Türkçe örnekler iyileştirildi
- Resource dokümantasyon verimliliği artırıldı

.dockerignore

@@ -0,0 +1,186 @@
+# flyctl launch added from .gitignore
+# Byte-compiled / optimized / DLL files
+**/__pycache__
+**/*.py[cod]
+**/*$py.class
+
+# C extensions
+**/*.so
+
+# Distribution / packaging
+**/.Python
+**/build
+**/develop-eggs
+**/dist
+**/downloads
+**/eggs
+**/.eggs
+**/lib
+**/lib64
+**/parts
+**/sdist
+**/var
+**/wheels
+**/share/python-wheels
+**/*.egg-info
+**/.installed.cfg
+**/*.egg
+**/MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+**/*.manifest
+**/*.spec
+
+# Installer logs
+**/pip-log.txt
+**/pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+**/htmlcov
+**/.tox
+**/.nox
+**/.coverage
+**/.coverage.*
+**/.cache
+**/nosetests.xml
+**/coverage.xml
+**/*.cover
+**/*.py,cover
+**/.hypothesis
+**/.pytest_cache
+**/cover
+
+# Translations
+**/*.mo
+**/*.pot
+
+# Django stuff:
+**/*.log
+**/local_settings.py
+**/db.sqlite3
+**/db.sqlite3-journal
+
+# Flask stuff:
+**/instance
+**/.webassets-cache
+
+# Scrapy stuff:
+**/.scrapy
+
+# Sphinx documentation
+**/docs/_build
+
+# PyBuilder
+**/.pybuilder
+**/target
+
+# Jupyter Notebook
+**/.ipynb_checkpoints
+
+# IPython
+**/profile_default
+**/ipython_config.py
+
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+#poetry.lock
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#pdm.lock
+#   pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it
+#   in version control.
+#   https://pdm.fming.dev/#use-with-ide
+**/.pdm.toml
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+**/__pypackages__
+
+# Celery stuff
+**/celerybeat-schedule
+**/celerybeat.pid
+
+# SageMath parsed files
+**/*.sage.py
+
+# Environments
+**/.env
+**/.venv
+**/env
+**/venv
+**/ENV
+**/env.bak
+**/venv.bak
+
+# Spyder project settings
+**/.spyderproject
+**/.spyproject
+
+# Rope project settings
+**/.ropeproject
+
+# mkdocs documentation
+site
+
+# mypy
+**/.mypy_cache
+**/.dmypy.json
+**/dmypy.json
+
+# Pyre type checker
+**/.pyre
+
+# pytype static type analyzer
+**/.pytype
+
+# Cython debug symbols
+**/cython_debug
+
+# PyCharm
+#  JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#  and can be added to the global gitignore or merged into this file.  For a more nuclear
+#  option (not recommended) you can uncomment the following to ignore the entire idea folder.
+#.idea/
+**/.DS_Store
+**/hello.py
+
+**/*.html
+**/fast-mcp-docs.md
+
+# Debug and test files
+**/debug_*
+**/test_*
+**/CLAUDE.md
+
+# ASGI/Deployment files
+**/ssl
+**/*.pem
+**/*.key
+**/*.crt
+
+# Docker volumes
+**/redis-data
+
+# Production logs
+**/logs/*.log.*
+**/Dockerfile
+**/Dockerfile
+fly.toml

.env.example

@@ -0,0 +1,103 @@
+# OAuth Configuration for Clerk + Google
+# Copy this file to .env and fill in your actual values
+
+# =============================================================================
+# AUTHENTICATION SETTINGS
+# =============================================================================
+
+# Enable/disable authentication (set to "true" to enable OAuth)
+ENABLE_AUTH=false
+
+# =============================================================================
+# CLERK CONFIGURATION
+# =============================================================================
+
+# Clerk API keys (get from https://dashboard.clerk.com/)
+CLERK_SECRET_KEY=sk_test_your_secret_key_here
+CLERK_PUBLISHABLE_KEY=pk_test_your_publishable_key_here
+
+# OAuth Redirect URLs
+CLERK_OAUTH_REDIRECT_URL=http://localhost:8000/auth/callback
+CLERK_FRONTEND_URL=http://localhost:3000
+
+# Clerk domain issuer (usually auto-configured)
+CLERK_ISSUER=https://your-clerk-domain.clerk.accounts.dev
+CLERK_DOMAIN=your-clerk-domain
+
+# =============================================================================
+# GOOGLE OAUTH SETTINGS
+# =============================================================================
+# Note: Google OAuth is configured through Clerk dashboard
+# You need to:
+# 1. Go to Clerk Dashboard > Social Connections
+# 2. Enable Google provider
+# 3. Add your Google OAuth client ID and secret
+# 4. Configure redirect URIs in Google Console
+
+# =============================================================================
+# STRIPE CONFIGURATION (for payments/subscriptions)
+# =============================================================================
+
+STRIPE_SECRET=sk_test_your_stripe_secret_key_here
+STRIPE_WEBHOOK_SECRET=whsec_your_webhook_secret_here
+
+# =============================================================================
+# SERVER CONFIGURATION
+# =============================================================================
+
+# CORS origins (comma-separated list)
+ALLOWED_ORIGINS=http://localhost:3000,http://localhost:8000,https://yourdomain.com
+
+# Server settings
+HOST=0.0.0.0
+PORT=8000
+LOG_LEVEL=info
+
+# Base URL for the application (used for OAuth callbacks and API URLs)
+BASE_URL=http://localhost:8000
+
+# JWT Secret for MCP token generation
+JWT_SECRET_KEY=your_jwt_secret_key_here
+
+# =============================================================================
+# MCP SERVER SETTINGS
+# =============================================================================
+
+# Additional MCP server configuration can go here
+# For example, rate limiting, feature flags, etc.
+
+# Example: Rate limiting
+# MAX_REQUESTS_PER_MINUTE=60
+# BURST_CAPACITY=20
+
+# =============================================================================
+# USAGE INSTRUCTIONS
+# =============================================================================
+
+# 1. Copy this file to .env:
+#    cp .env.example .env
+
+# 2. Get Clerk credentials:
+#    - Sign up at https://clerk.com/
+#    - Create a new application
+#    - Go to API Keys tab
+#    - Copy Secret Key and Publishable Key
+
+# 3. Configure Google OAuth in Clerk:
+#    - In Clerk Dashboard, go to Social Connections
+#    - Enable Google provider
+#    - Get Google OAuth credentials from Google Console
+#    - Add redirect URI: http://localhost:8000/auth/callback
+
+# 4. Update OAuth URLs:
+#    - Set CLERK_OAUTH_REDIRECT_URL to your callback URL
+#    - Set CLERK_FRONTEND_URL to your frontend application URL
+
+# 5. Enable authentication:
+#    - Set ENABLE_AUTH=true
+
+# 6. Test the OAuth flow:
+#    - Start server: uvicorn asgi_app:app --reload
+#    - Visit: http://localhost:8000/auth/login
+#    - Complete OAuth flow with Google
+#    - Check: http://localhost:8000/auth/user

.github/workflows/publish.yml

@@ -0,0 +1,37 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:  # Manual trigger for testing
+
+jobs:
+  pypi-publish:
+    name: Upload release to PyPI
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/yargi-mcp
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+    - uses: actions/checkout@v4
+    
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.11'
+    
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install build
+    
+    - name: Build package
+      run: python -m build
+    
+    - name: Publish package to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        password: ${{ secrets.PYPI_API_TOKEN }}
+        skip-existing: true

.gitignore

@@ -162,4 +162,33 @@ cython_debug/
 hello.py
 
 *.html
-test_kik_client.py
+fast-mcp-docs.md
+
+# Debug and test files
+debug_*
+test_*
+CLAUDE.md
+
+# ASGI/Deployment files
+ssl/
+*.pem
+*.key
+*.crt
+
+# Docker volumes
+redis-data/
+
+# Production logs
+logs/*.log.*
+
+# Remove these lines - we need deployment files in git:
+# Dockerfile - NEEDED for SaaS deployment
+# fly.toml - NEEDED for Fly.io deployment  
+# .github/workflows/fly-deploy.yml - NEEDED for GitHub Actions
+
+GEMINI.md
+fly.toml
+scripts/deploy-flyio.sh
+docs/DEPLOYMENT_FLYIO.md
+setup_jwt_template.py
+mcp_server_main.py.backup

Dockerfile

@@ -0,0 +1,29 @@
+# -------- BASE IMAGE (includes Chromium & deps) ----------------------------
+FROM mcr.microsoft.com/playwright/python:v1.53.0-noble
+
+# -------- Runtime setup ----------------------------------------------------
+WORKDIR /app
+
+# Copy dependency manifests first for layer-cache
+COPY pyproject.toml poetry.lock* requirements*.txt* ./
+
+# Fast, deterministic install with `uv`
+RUN pip install --no-cache-dir uv && \
+    uv pip install --system --no-cache-dir .[asgi,saas]
+
+# Copy application source
+COPY . .
+
+# -------- Environment ------------------------------------------------------
+ENV PYTHONUNBUFFERED=1
+ENV ENABLE_AUTH=true
+ENV PORT=8000
+
+# -------- Health check -----------------------------------------------------
+HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
+  CMD python -c "import httpx, os, sys; r=httpx.get(f'http://localhost:{os.getenv(\"PORT\",\"8000\")}/health'); sys.exit(0 if r.status_code==200 else 1)"
+
+EXPOSE 8000
+
+# -------- Entrypoint -------------------------------------------------------
+CMD ["uvicorn", "asgi_app:app", "--host", "0.0.0.0", "--port", "8000", "--proxy-headers"]

Procfile

@@ -0,0 +1 @@
+web: uvicorn asgi_app:app --host 0.0.0.0 --port $PORT

README.md

@@ -2,261 +2,240 @@
 
 [![Star History Chart](https://api.star-history.com/svg?repos=saidsurucu/yargi-mcp&type=Date)](https://www.star-history.com/#saidsurucu/yargi-mcp&Date)
 
-Bu proje, çeşitli Türk hukuk kaynaklarına (Yargıtay, Danıştay, Emsal Kararlar, Uyuşmazlık Mahkemesi, Anayasa Mahkemesi - Norm Denetimi ile Bireysel Başvuru Kararları ve Kamu İhale Kurulu Kararları) erişimi kolaylaştıran bir [FastMCP](https://gofastmcp.com/) sunucusu oluşturur. Bu sayede, bu kaynaklardan veri arama ve belge getirme işlemleri, Model Context Protocol (MCP) destekleyen LLM (Büyük Dil Modeli) uygulamaları (örneğin Claude Desktop) ve diğer istemciler tarafından araç (tool) olarak kullanılabilir hale gelir.
+Bu proje, çeşitli Türk hukuk kaynaklarına (Yargıtay, Danıştay, Emsal Kararlar, Uyuşmazlık Mahkemesi, Anayasa Mahkemesi - Norm Denetimi ile Bireysel Başvuru Kararları, Kamu İhale Kurulu Kararları, Rekabet Kurumu Kararları ve Sayıştay Kararları) erişimi kolaylaştıran bir [FastMCP](https://gofastmcp.com/) sunucusu oluşturur. Bu sayede, bu kaynaklardan veri arama ve belge getirme işlemleri, Model Context Protocol (MCP) destekleyen LLM (Büyük Dil Modeli) uygulamaları (örneğin Claude Desktop veya [5ire](https://5ire.app)) ve diğer istemciler tarafından araç (tool) olarak kullanılabilir hale gelir.
 
 ![örnek](./ornek.png)
 
 🎯 **Temel Özellikler**
 
 * Çeşitli Türk hukuk veritabanlarına programatik erişim için standart bir MCP arayüzü.
+* **Kapsamlı Mahkeme Daire/Kurul Filtreleme:** 79 farklı daire/kurul filtreleme seçeneği
+* **Dual/Triple API Desteği:** Her mahkeme için birden fazla API kaynağı ile maksimum kapsama
+* **Kapsamlı Tarih Filtreleme:** Tüm Bedesten API araçlarında ISO 8601 formatında tarih aralığı filtreleme
+* **Kesin Cümle Arama:** Tüm Bedesten API araçlarında çift tırnak ile tam cümle arama desteği
 * Aşağıdaki kurumların kararlarını arama ve getirme yeteneği:
-    * **Yargıtay:** Detaylı kriterlerle karar arama ve karar metinlerini Markdown formatında getirme.
-    * **Danıştay:** Anahtar kelime bazlı ve detaylı kriterlerle karar arama; karar metinlerini Markdown formatında getirme.
+    * **Yargıtay:** Detaylı kriterlerle karar arama ve karar metinlerini Markdown formatında getirme. **Dual API** (Ana + Bedesten) + **52 Daire/Kurul Filtreleme** + **Tarih & Kesin Cümle Arama** (Hukuk/Ceza Daireleri, Genel Kurullar)
+    * **Danıştay:** Anahtar kelime bazlı ve detaylı kriterlerle karar arama; karar metinlerini Markdown formatında getirme. **Triple API** (Keyword + Detailed + Bedesten) + **27 Daire/Kurul Filtreleme** + **Tarih & Kesin Cümle Arama** (İdari Daireler, Vergi/İdare Kurulları, Askeri Yüksek İdare Mahkemesi)
+    * **Yerel Hukuk Mahkemeleri:** Bedesten API ile yerel hukuk mahkemesi kararlarına erişim + **Tarih & Kesin Cümle Arama**
+    * **İstinaf Hukuk Mahkemeleri:** Bedesten API ile istinaf mahkemesi kararlarına erişim + **Tarih & Kesin Cümle Arama**
+    * **Kanun Yararına Bozma (KYB):** Bedesten API ile olağanüstü kanun yoluna erişim + **Tarih & Kesin Cümle Arama**
     * **Emsal (UYAP):** Detaylı kriterlerle emsal karar arama ve karar metinlerini Markdown formatında getirme.
     * **Uyuşmazlık Mahkemesi:** Form tabanlı kriterlerle karar arama ve karar metinlerini (URL ile erişilen) Markdown formatında getirme.
     * **Anayasa Mahkemesi (Norm Denetimi):** Kapsamlı kriterlerle norm denetimi kararlarını arama; uzun karar metinlerini (5.000 karakterlik) sayfalanmış Markdown formatında getirme.
     * **Anayasa Mahkemesi (Bireysel Başvuru):** Kapsamlı kriterlerle bireysel başvuru "Karar Arama Raporu" oluşturma ve listedeki kararların metinlerini (5.000 karakterlik) sayfalanmış Markdown formatında getirme.
-    * **KİK (Kamu İhale Kurulu):** Çeşitli kriterlerle Kurul kararlarını arama; uzun karar metinlerini (varsayılan 5.000 karakterlik) sayfalanmış Markdown formatında getirme (Playwright ile tarayıcı otomasyonu kullanılır).
+    * **KİK (Kamu İhale Kurulu):** Çeşitli kriterlerle Kurul kararlarını arama; uzun karar metinlerini (varsayılan 5.000 karakterlik) sayfalanmış Markdown formatında getirme.
+    * **Rekabet Kurumu:** Çeşitli kriterlerle Kurul kararlarını arama; karar metinlerini Markdown formatında getirme.
+    * **Sayıştay:** 3 karar türü ile kapsamlı denetim kararlarına erişim + **8 Daire Filtreleme** + **Tarih Aralığı & İçerik Arama** (Genel Kurul yorumlayıcı kararları, Temyiz Kurulu itiraz kararları, Daire ilk derece denetim kararları)
+    * **KVKK (Kişisel Verilerin Korunması Kurulu):** Brave Search API ile veri koruma kararlarını arama; uzun karar metinlerini (5.000 karakterlik) sayfalanmış Markdown formatında getirme + **Türkçe Arama** + **Site Hedeflemeli Arama** (kvkk.gov.tr kararları)
+
 * Karar metinlerinin daha kolay işlenebilmesi için Markdown formatına çevrilmesi.
 * Claude Desktop uygulaması ile `fastmcp install` komutu kullanılarak kolay entegrasyon.
+* Yargı MCP artık [5ire](https://5ire.app) gibi Claude Desktop haricindeki MCP istemcilerini de destekliyor!
+---
+🚀 **Claude Haricindeki Modellerle Kullanmak İçin Çok Kolay Kurulum (Örnek: 5ire için)**
+
+Bu bölüm, Yargı MCP aracını 5ire gibi Claude Desktop dışındaki MCP istemcileriyle kullanmak isteyenler içindir.
+
+* **Python Kurulumu:** Sisteminizde Python 3.11 veya üzeri kurulu olmalıdır. Kurulum sırasında "**Add Python to PATH**" (Python'ı PATH'e ekle) seçeneğini işaretlemeyi unutmayın. [Buradan](https://www.python.org/downloads/) indirebilirsiniz.
+* **Git Kurulumu (Windows):** Bilgisayarınıza [git](https://git-scm.com/downloads/win) yazılımını indirip kurun. "Git for Windows/x64 Setup" seçeneğini indirmelisiniz.
+* **`uv` Kurulumu:**
+    * **Windows Kullanıcıları (PowerShell):** Bir CMD ekranı açın ve bu kodu çalıştırın: `powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"`
+    * **Mac/Linux Kullanıcıları (Terminal):** Bir Terminal ekranı açın ve bu kodu çalıştırın: `curl -LsSf https://astral.sh/uv/install.sh | sh`
+* **Microsoft Visual C++ Redistributable (Windows):** Bazı Python paketlerinin doğru çalışması için gereklidir. [Buradan](https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170) indirip kurun.
+* İşletim sisteminize uygun [5ire](https://5ire.app) MCP istemcisini indirip kurun.
+* 5ire'ı açın. **Workspace -> Providers** menüsünden kullanmak istediğiniz LLM servisinin API anahtarını girin.
+* **Tools** menüsüne girin. **+Local** veya **New** yazan butona basın.
+    * **Tool Key:** `yargimcp`
+    * **Name:** `Yargı MCP`
+    * **Command:**
+        ```
+        uvx yargi-mcp
+        ```
+    * **Save** butonuna basarak kaydedin.
+![5ire ayarları](./5ire-settings.png)
+* Şimdi **Tools** altında **Yargı MCP**'yi görüyor olmalısınız. Üstüne geldiğinizde sağda çıkan butona tıklayıp etkinleştirin (yeşil ışık yanmalı).
+* Artık Yargı MCP ile konuşabilirsiniz.
 
 ---
-📋 **Ön Gereksinimler**
+⚙️ **Claude Desktop Manuel Kurulumu**
 
-Bu Yargı MCP aracını Claude Desktop ile kullanabilmek için öncelikle aşağıdaki yazılımların sisteminizde kurulu olması gerekmektedir:
 
-1.  **Claude Desktop:** Henüz kurmadıysanız, [Claude Desktop web sitesinden](https://claude.ai/desktop) işletim sisteminize uygun sürümü indirip kurun.
-2.  **Python Sürümü:** **Python 3.11** sürümü tavsiye edilir. Python 3.12 ve üzeri yeni sürümler, bazı bağımlılıklarda (özellikle `playwright` ve ilişkili tarayıcı sürücüleri) belirli ortamlarda uyumluluk sorunlarına yol açabilir. Bu proje için 3.11 sürümü stabilite açısından önerilmektedir.
-    * **Windows Kullanıcıları:** Eğer Python kurulu değilse, [python.org/downloads/windows/](https://www.python.org/downloads/windows/) adresinden Python 3.11'in uygun bir sürümünü indirip kurabilirsiniz. Kurulum sırasında "**Add Python to PATH**" (Python'ı PATH'e ekle) seçeneğini işaretlemeyi unutmayın.
-    * **macOS Kullanıcıları:** macOS genellikle Python ile birlikte gelir. Terminal'de `python3 --version` yazarak kontrol edebilirsiniz. Eğer Python 3.11 değilse veya eski bir sürümse, [python.org](https://www.python.org/downloads/macos/) adresinden veya [Homebrew](https://brew.sh/) (`brew install python@3.11`) ile kurabilirsiniz.
-    * **Linux Kullanıcıları:** Çoğu Linux dağıtımı Python ile gelir. Terminal'de `python3 --version` yazarak kontrol edebilirsiniz. Gerekirse dağıtımınızın paket yöneticisi ile Python 3.11'i kurabilirsiniz (örn: `sudo apt update && sudo apt install python3.11 python3.11-pip python3.11-venv` veya dağıtımınıza uygun komutlar).
-3.  **Paket Yöneticisi:** `pip` (Python ile birlikte gelir) veya tercihen `uv` ([Astral](https://astral.sh/uv) tarafından geliştirilen hızlı Python paket yöneticisi). Kurulum script'lerimiz `uv`'yi sizin için kurmayı deneyecektir.
-4.  **Playwright Tarayıcıları:** KİK modülü Playwright kullandığı için, ilgili tarayıcıların kurulmuş olması gerekir. `KikApiClient` varsayılan olarak Chromium kullanır. Eğer Playwright veya tarayıcıları manuel kuracaksanız:
-    ```bash
-    # Önce playwright kütüphanesini kurun (uv veya pip ile)
-    # uv pip install playwright 
-    # pip install playwright
-
-    # Sonra tarayıcıları kurun (proje bağımlılıkları kurulduktan sonra da yapılabilir)
-    playwright install --with-deps chromium 
-    # '--with-deps' chromium için gerekli işletim sistemi bağımlılıklarını da kurmaya çalışır.
-    ```
-    Kurulum scriptleri (`install.bat`, `install.sh`, `install.py`) genellikle `playwright` Python kütüphanesini kurar. Tarayıcıların ayrıca `playwright install` ile kurulması gerekebilir; eğer sunucu başlatılırken KİK modülü hata verirse, bu adımı manuel olarak çalıştırmanız gerekebilir.
-
----
-🚀 **Kolay Kurulum Adımları (Claude Desktop için)**
-
-Bu bölüm, teknik bilgisi daha az olan kullanıcıların **Yargı MCP** araçlarını Claude Desktop uygulamalarına hızlı ve kolay bir şekilde entegre etmeleri için hazırlanmıştır.
-
-**Öncelikle Yapılması Gerekenler:**
-
-1.  **Proje Dosyalarını İndirin:**
-    * Bu GitHub deposunun ana sayfasına gidin.
-    * Yeşil renkli "**<> Code**" düğmesine tıklayın.
-    * Açılan menüden "**Download ZIP**" seçeneğini seçin.
-    * İndirdiğiniz ZIP dosyasını bilgisayarınızda kolayca erişebileceğiniz bir klasöre çıkartın (örneğin, `Belgelerim` veya `Masaüstü` altında `yargi-mcp` adında bir klasör oluşturabilirsiniz).
-
-Proje dosyalarını bilgisayarınıza aldıktan sonra, işletim sisteminize uygun kurulum script'ini çalıştırabilirsiniz.
-
-### Windows Kullanıcıları İçin (`install.bat`)
-
-1.  Proje dosyalarını çıkarttığınız klasörün içine gidin (örneğin, `C:\Users\KULLANICIADINIZ\Documents\yargi-mcp` klasörü).
-2.  `install.bat` adlı dosyayı bulun.
-3.  Bu dosyaya **çift tıklayarak** çalıştırın.
-4.  Kurulum sırasında bir komut istemi penceresi açılacak ve bazı mesajlar göreceksiniz. Script, gerekli araçları (`uv`, `fastmcp` CLI, `playwright` ve tarayıcıları) sisteminize kurmayı deneyecek ve ardından "**Yargı MCP**" aracını Claude Desktop'a entegre edecektir.
-    * *Not: Bu işlem sırasında script sizden yönetici onayı isteyebilir veya internet bağlantısı gerektirebilir. `uv` kurulumu için PowerShell script çalıştırma politikalarınızda geçici bir değişiklik yapılması gerekebilir; script bunu sizin için halletmeye çalışacaktır.*
-5.  Kurulum tamamlandığında, komut istemi penceresinde bir başarı mesajı göreceksiniz. Pencere, "Devam etmek için bir tuşa basın..." mesajıyla açık kalacaktır. Herhangi bir tuşa basarak pencereyi kapatabilirsiniz.
-6.  **Önemli:** Kurulumun etkili olması için Claude Desktop uygulamasını tamamen kapatıp yeniden başlatmanız gerekebilir.
-
-### macOS ve Linux Kullanıcıları İçin (`install.sh`)
-
-1.  Proje dosyalarını çıkarttığınız klasörün içine gidin (örneğin, `/Users/KULLANICIADINIZ/Documents/yargi-mcp` klasörü).
-2.  **Terminal** uygulamasını açın:
-    * **macOS'te:**
-        1.  **Finder**'ı açın.
-        2.  Proje dosyalarını çıkarttığınız klasöre (`yargi-mcp` gibi) gidin.
-        3.  Finder penceresinin en altındaki yol çubuğunda (Path Bar), klasör adının üzerine **Control tuşuna basılı tutarak tıklayın** (veya sağ tıklayın).
-        4.  Açılan menüden "**Terminal'de Aç**" seçeneğini seçin. (Eğer bu seçenek yoksa, Finder'da `Görünüm > Yol Çubuğunu Göster` seçeneğinin aktif olduğundan emin olun. Alternatif olarak, `Uygulamalar > İzlenceler > Terminal` yolunu izleyip `cd` komutuyla klasörünüze gidin.)
-    * **Linux'ta:** Genellikle dosya yöneticisinde klasöre sağ tıklayıp "Burada Terminal Aç" seçeneğini kullanabilir veya Ctrl+Alt+T kısayoluyla terminal açıp `cd` komutuyla klasörünüze gidebilirsiniz.
-3.  Terminalde, doğru klasörde olduğunuzdan emin olduktan sonra, script'e çalıştırma izni verin (bu işlemi sadece bir kez yapmanız yeterlidir):
-    ```bash
-    chmod +x install.sh
-    ```
-4.  Script'i çalıştırın:
-    ```bash
-    ./install.sh
-    ```
-5.  Kurulum sırasında terminalde bazı mesajlar göreceksiniz. Script, gerekli araçları (`uv`, `fastmcp` CLI) sisteminize kurmayı deneyecek ve ardından "**Yargı MCP**" aracını Claude Desktop'a entegre edecektir.
-    * *Not: Bu işlem sırasında script sizden şifrenizi (`sudo` yetkileri için, özellikle `uv` kurulumunda) isteyebilir veya internet bağlantısı gerektirebilir.*
-6.  Kurulum tamamlandığında, terminalde bir başarı mesajı göreceksiniz.
-7.  **Önemli:** Kurulumun etkili olması için Claude Desktop uygulamasını tamamen kapatıp yeniden başlatmanız gerekebilir. Ayrıca, eğer `uv` veya `fastmcp` PATH'e yeni eklendiyse, terminalinizi de yeniden başlatmanız veya shell profilinizi (`~/.bashrc`, `~/.zshrc`, `~/.profile` vb.) `source ~/.zshrc` (veya kullandığınız shell'e uygun komutla) yeniden yüklemeniz gerekebilir. Script bu konuda sizi uyaracaktır.
-
-### Python Script ile Kurulum (`install.py`) (Platform Bağımsız Alternatif)
-
-Eğer yukarıdaki işletim sistemine özel script'lerde sorun yaşarsanız veya Python tabanlı bir kurulumu tercih ediyorsanız, `install.py` script'ini kullanabilirsiniz. Bu yöntem, sisteminizde Python 3.11'in ve `pip` paket yöneticisinin kurulu ve çalışır durumda olmasını gerektirir.
-
-1.  Proje dosyalarını çıkarttığınız klasörün içine Terminal veya Komut İstemi ile gidin.
-2.  Aşağıdaki komutu çalıştırın (sisteminizdeki Python 3 komutuna göre `python` veya `python3` kullanın):
-    ```bash
-    python3 install.py 
-    ```
-    veya
-    ```bash
-    python install.py
-    ```
-3.  Script, size gerekli adımlarda rehberlik edecek ve kurulumu tamamlamaya çalışacaktır. Kurulum sırasında ek bağımlılıkların indirilmesi gerekebilir.
-
----
-
-**Kurulum Sonrası**
-
-Kurulum başarıyla tamamlandıktan sonra, Claude Desktop uygulamasını (gerekirse yeniden başlatarak) açın. Araçlar menüsünde (genellikle ekranın sağ alt köşesindeki çekiç 🛠️ simgesi altında) "**Yargı MCP**" adlı yeni aracı görmelisiniz.
-
-Herhangi bir sorunla karşılaşırsanız, lütfen [GitHub Issues](https://github.com/saidsurucu/yargi-mcp/issues) bölümünden bize bildirin.
-
-⚙️ **Kurulum Adımları (Claude Desktop Entegrasyonu Odaklı)**
-
-Claude Desktop uygulamasına yükleme yapabilmek için öncelikle `uv` (önerilir) ve `fastmcp` komut satırı araçlarını kurmanız, ardından proje dosyalarını almanız gerekmektedir.
-
-**1. `uv` Kurulumu (Önerilir)**
-
-* **macOS ve Linux için:**
-    ```bash
-    curl -LsSf https://astral.sh/uv/install.sh | sh
-    ```
-* **Windows için (PowerShell kullanarak):**
-    ```powershell
-    powershell -c "irm https://astral.sh/uv/install.ps1 | iex"
-    ```
-* Kurulumdan sonra, `uv` komutunun sisteminiz tarafından tanınması için terminalinizi yeniden başlatmanız veya `PATH` ortam değişkeninizi güncellemeniz gerekebilir. `uv --version` komutu ile kurulumu doğrulayabilirsiniz.
-
-**2. `fastmcp` Komut Satırı Aracının (CLI) Kurulumu**
-
-* **`uv` kullanarak (önerilir):**
-    ```bash
-    uv pip install fastmcp
-    ```
-* **`pip` kullanarak (alternatif):**
-    ```bash
-    pip install fastmcp
-    ```
-    `fastmcp --version` komutu ile kurulumu doğrulayabilirsiniz.
-
-**3. Proje Dosyalarını Alın**
-
-Bu Yargı MCP sunucusunun kaynak kodlarını bilgisayarınıza indirin:
-```bash
-git clone https://github.com/saidsurucu/yargi-mcp.git
-cd yargi-mcp
-```
-Bu README.md dosyasının ve `mcp_server_main.py` script'inin bulunduğu dizine `cd` komutu ile geçmiş olacaksınız.
-
-**4. Sunucuya Özel Bağımlılıkların Bilinmesi**
-
-Bu sunucunun (`mcp_server_main.py`) çalışması için aşağıdaki Python kütüphanelerine ihtiyacı vardır. Bu kütüphaneler `fastmcp install` sırasında `--with` parametreleriyle belirtilecektir:
-
-```text
-# requirements.txt
-fastmcp
-httpx
-beautifulsoup4
-markitdown
-pydantic
-aiohttp
-playwright
-```
-(Eğer sunucuyu bağımsız olarak geliştirmek veya test etmek isterseniz, projenizin kök dizininde bir sanal ortam oluşturup – örn: `uv venv` & `source .venv/bin/activate` – bu bağımlılıkları `uv pip install -r requirements.txt` komutuyla kurabilirsiniz.)
-
-🚀 **Claude Desktop Entegrasyonu (`fastmcp install` ile - Önerilen)**
-
-Yukarıdaki kurulum adımlarını tamamladıktan sonra, bu sunucuyu Claude Desktop uygulamasına kalıcı bir araç olarak eklemenin en kolay yolu `fastmcp install` komutunu kullanmaktır:
-
-1.  Terminalde `mcp_server_main.py` dosyasının bulunduğu `yargi-mcp` dizininde olduğunuzdan emin olun.
-2.  Aşağıdaki komutu çalıştırın:
-
-    ```bash
-    fastmcp install mcp_server_main.py \
-        --name "Yargı MCP" \
-        --with httpx \
-        --with beautifulsoup4 \
-        --with markitdown \
-        --with pydantic \
-        --with aiohttp \
-        --with playwright
-    ```
-
-    * `--name "Yargı MCP"`: Araç Claude Desktop'ta bu isimle görünecektir.
-    * `--with ...`: Sunucunun çalışması için gereken Python bağımlılıklarını belirtir.
-
-    Bu komut, `uv` kullanarak (eğer kuruluysa ve bulunabiliyorsa) sunucunuz için izole bir Python ortamı oluşturacak, belirtilen bağımlılıkları kuracak ve aracı Claude Desktop uygulamasına kaydedecektir. Playwright tarayıcılarının (`playwright install chromium` gibi) ayrıca kurulması gerekebilir.
-
-⚙️ **Claude Desktop Manuel Kurulumu (Yapılandırma Dosyası ile - Alternatif)**
-
-1.  **Claude Desktop Ayarları**'nı açın.
-2.  **Developer** sekmesine gidin ve **Edit Config** düğmesine tıklayın.
-3.  Açılan `claude_desktop_config.json` dosyasını bir metin düzenleyici ile açın.
-4.  `mcpServers` nesnesine aşağıdaki JSON bloğunu ekleyin:
+1.  **Ön Gereksinimler:** Python, `uv`, (Windows için) Microsoft Visual C++ Redistributable'ın sisteminizde kurulu olduğundan emin olun. Detaylı bilgi için yukarıdaki "5ire için Kurulum" bölümündeki ilgili adımlara bakabilirsiniz.
+2.  Claude Desktop **Settings -> Developer -> Edit Config**.
+3.  Açılan `claude_desktop_config.json` dosyasına `mcpServers` altına ekleyin:
 
     ```json
     {
       "mcpServers": {
-        // ... (varsa diğer sunucu tanımlamalarınız) ...
-
+        // ... (varsa diğer sunucularınız) ...
         "Yargı MCP": {
-          "command": "uv",
+          "command": "uvx",
           "args": [
-            "run",
-            "--with", "httpx",
-            "--with", "beautifulsoup4",
-            "--with", "markitdown",
-            "--with", "pydantic",
-            "--with", "aiohttp",
-            "--with", "playwright", 
-            "--with", "fastmcp",
-            "fastmcp", "run", 
-            "/TAM/PROJE/YOLUNUZ/yargi-mcp/mcp_server_main.py" 
+            "yargi-mcp"
           ]
         }
       }
     }
     ```
-    * **Önemli:** `/TAM/PROJE/YOLUNUZ/yargi-mcp/mcp_server_main.py` kısmını, `mcp_server_main.py` dosyasının sisteminizdeki **tam ve doğru yolu** ile değiştirmeyi unutmayın.
-5.  Claude Desktop'ı yeniden başlatın.
+4.  Claude Desktop'ı kapatıp yeniden başlatın.
+
+---
+🌟 **Gemini CLI ile Kullanım**
+
+Yargı MCP'yi Gemini CLI ile kullanmak için:
+
+1. **Ön Gereksinimler:** Python, `uv`, (Windows için) Microsoft Visual C++ Redistributable'ın sisteminizde kurulu olduğundan emin olun. Detaylı bilgi için yukarıdaki "5ire için Kurulum" bölümündeki ilgili adımlara bakabilirsiniz.
+
+2. **Gemini CLI ayarlarını yapılandırın:**
+   
+   Gemini CLI'ın ayar dosyasını düzenleyin:
+   - **macOS/Linux:** `~/.gemini/settings.json`
+   - **Windows:** `%USERPROFILE%\.gemini\settings.json`
+   
+   Aşağıdaki `mcpServers` bloğunu ekleyin:
+   ```json
+   {
+     "theme": "Default",
+     "selectedAuthType": "###",
+     "mcpServers": {
+       "yargi_mcp": {
+         "command": "uvx",
+         "args": [
+           "yargi-mcp"
+         ]
+       }
+     }
+   }
+   ```
+   
+   **Yapılandırma açıklamaları:**
+   - `"yargi_mcp"`: Sunucunuz için yerel bir isim
+   - `"command"`: `uvx` komutu (uv'nin paket çalıştırma aracı)
+   - `"args"`: GitHub'dan doğrudan Yargı MCP'yi çalıştırmak için gerekli argümanlar
+
+3. **Kullanım:**
+   - Gemini CLI'ı başlatın
+   - Yargı MCP araçları otomatik olarak kullanılabilir olacaktır
+   - Örnek komutlar:
+     - "Yargıtay'ın mülkiyet hakkı ile ilgili son kararlarını ara"
+     - "Danıştay'ın imar planı iptaline ilişkin kararlarını bul"
+     - "Anayasa Mahkemesi'nin ifade özgürlüğü kararlarını getir"
 
 🛠️ **Kullanılabilir Araçlar (MCP Tools)**
 
-Bu FastMCP sunucusu aşağıdaki temel araçları sunar:
+Bu FastMCP sunucusu **30 MCP aracı** sunar:
+
+### **Yargıtay Araçları (Ana API + 52 Daire Filtreleme)**
+1. `search_yargitay_detailed(arananKelime, birimYrgKurulDaire, ...)`: Yargıtay kararlarını detaylı kriterlerle arar. **52 daire/kurul seçeneği** (Hukuk/Ceza Daireleri 1-23, Genel Kurullar, Başkanlar Kurulu)
+2. `get_yargitay_document_markdown(id: str)`: Belirli bir Yargıtay kararının metnini Markdown formatında getirir.
+
+### **Danıştay Araçları (Dual API + 27 Daire Filtreleme)**
+3. `search_danistay_by_keyword(andKelimeler, orKelimeler, ...)`: Danıştay kararlarını anahtar kelimelerle arar.
+4. `search_danistay_detailed(daire, esasYil, ...)`: Danıştay kararlarını detaylı kriterlerle arar.
+5. `get_danistay_document_markdown(id: str)`: Belirli bir Danıştay kararının metnini Markdown formatında getirir.
+
+### **Birleşik Bedesten API Araçları (5 Mahkeme)**
+6. `search_bedesten_unified(phrase, court_types, birimAdi, kararTarihiStart, kararTarihiEnd, ...)`: **5 mahkeme türünü** birleşik arama (Yargıtay, Danıştay, Yerel Hukuk, İstinaf Hukuk, KYB) + **79 daire filtreleme** + **Tarih & Kesin Cümle Arama**
+7. `get_bedesten_document_markdown(documentId: str)`: Bedesten API'den herhangi bir belgeyi Markdown formatında getirir (HTML/PDF → Markdown)
+
+### **Emsal Karar Araçları (UYAP)**
+8. `search_emsal_detailed_decisions(keyword, ...)`: Emsal (UYAP) kararlarını detaylı kriterlerle arar.
+9. `get_emsal_document_markdown(id: str)`: Belirli bir Emsal kararının metnini Markdown formatında getirir.
+
+### **Uyuşmazlık Mahkemesi Araçları**
+10. `search_uyusmazlik_decisions(icerik, ...)`: Uyuşmazlık Mahkemesi kararlarını çeşitli form kriterleriyle arar.
+11. `get_uyusmazlik_document_markdown_from_url(document_url)`: Bir Uyuşmazlık kararını tam URL'sinden alıp Markdown formatında getirir.
+
+### **Anayasa Mahkemesi Araçları (Norm Denetimi)**
+12. `search_anayasa_norm_denetimi_decisions(keywords_all, ...)`: AYM Norm Denetimi kararlarını kapsamlı kriterlerle arar.
+13. `get_anayasa_norm_denetimi_document_markdown(document_url, page_number)`: Belirli bir AYM Norm Denetimi kararını URL'sinden alır ve **sayfalanmış Markdown** içeriğini getirir.
+
+### **Anayasa Mahkemesi Araçları (Bireysel Başvuru)**
+14. `search_anayasa_bireysel_basvuru_report(keywords, ...)`: AYM Bireysel Başvuru "Karar Arama Raporu" oluşturur.
+15. `get_anayasa_bireysel_basvuru_document_markdown(document_url_path, page_number)`: Belirli bir AYM Bireysel Başvuru kararını URL path'inden alır ve **sayfalanmış Markdown** içeriğini getirir.
+
+### **KİK (Kamu İhale Kurulu) Araçları**
+16. `search_kik_decisions(karar_tipi, ...)`: KİK (Kamu İhale Kurulu) kararlarını arar. 
+17. `get_kik_document_markdown(karar_id, page_number)`: Belirli bir KİK kararını, Base64 ile encode edilmiş `karar_id`'sini kullanarak alır ve **sayfalanmış Markdown** içeriğini getirir.
+### **Rekabet Kurumu Araçları**
+    * `search_rekabet_kurumu_decisions(KararTuru: Literal[...], ...) -> RekabetSearchResult`: Rekabet Kurumu kararlarını arar. `KararTuru` için kullanıcı dostu isimler kullanılır (örn: "Birleşme ve Devralma").
+    * `get_rekabet_kurumu_document(karar_id: str, page_number: Optional[int] = 1) -> RekabetDocument`: Belirli bir Rekabet Kurumu kararını `karar_id` ile alır. Kararın PDF formatındaki orijinalinden istenen sayfayı ayıklar ve Markdown formatında döndürür.
 
 
-* **Yargıtay Araçları:**
-    * `search_yargitay_detailed(search_query: YargitayDetailedSearchRequest) -> CompactYargitaySearchResult`: Yargıtay kararlarını detaylı kriterlerle arar.
-    * `get_yargitay_document_markdown(document_id: str) -> YargitayDocumentMarkdown`: Belirli bir Yargıtay kararının metnini Markdown formatında getirir.
+---
 
-* **Danıştay Araçları:**
-    * `search_danistay_by_keyword(search_query: DanistayKeywordSearchRequest) -> CompactDanistaySearchResult`: Danıştay kararlarını anahtar kelimelerle arar.
-    * `search_danistay_detailed(search_query: DanistayDetailedSearchRequest) -> CompactDanistaySearchResult`: Danıştay kararlarını detaylı kriterlerle arar.
-    * `get_danistay_document_markdown(document_id: str) -> DanistayDocumentMarkdown`: Belirli bir Danıştay kararının metnini Markdown formatında getirir.
+* **Sayıştay Araçları (3 Karar Türü + 8 Daire Filtreleme):**
+    * `search_sayistay_genel_kurul(karar_no, karar_tarih_baslangic, karar_tamami, ...)`: Sayıştay Genel Kurul (yorumlayıcı) kararlarını arar. **Tarih aralığı** (2006-2024) + **İçerik arama** (400 karakter)
+    * `search_sayistay_temyiz_kurulu(ilam_dairesi, kamu_idaresi_turu, temyiz_karar, ...)`: Temyiz Kurulu (itiraz) kararlarını arar. **8 Daire filtreleme** + **Kurum türü** + **Konu sınıflandırması**
+    * `search_sayistay_daire(yargilama_dairesi, web_karar_metni, hesap_yili, ...)`: Daire (ilk derece denetim) kararlarını arar. **8 Daire filtreleme** + **Hesap yılı** + **İçerik arama**
+    * `get_sayistay_genel_kurul_document_markdown(decision_id: str)`: Genel Kurul kararının tam metnini Markdown formatında getirir
+    * `get_sayistay_temyiz_kurulu_document_markdown(decision_id: str)`: Temyiz Kurulu kararının tam metnini Markdown formatında getirir  
+    * `get_sayistay_daire_document_markdown(decision_id: str)`: Daire kararının tam metnini Markdown formatında getirir
 
-* **Emsal Karar Araçları:**
-    * `search_emsal_detailed_decisions(search_query: EmsalSearchRequest) -> CompactEmsalSearchResult`: Emsal (UYAP) kararlarını detaylı kriterlerle arar.
-    * `get_emsal_document_markdown(document_id: str) -> EmsalDocumentMarkdown`: Belirli bir Emsal kararının metnini Markdown formatında getirir.
+* **KVKK Araçları (Brave Search API + Türkçe Arama):**
+    * `search_kvkk_decisions(keywords, page, pageSize, ...)`: KVKK (Kişisel Verilerin Korunması Kurulu) kararlarını Brave Search API ile arar. **Türkçe arama** + **Site hedeflemeli** (`site:kvkk.gov.tr "karar özeti"`) + **Sayfalama desteği**
+    * `get_kvkk_document_markdown(decision_url: str, page_number: Optional[int] = 1)`: KVKK kararının tam metnini **sayfalanmış Markdown** formatında getirir (5.000 karakterlik sayfa)
 
-* **Uyuşmazlık Mahkemesi Araçları:**
-    * `search_uyusmazlik_decisions(search_params: UyusmazlikSearchRequest) -> UyusmazlikSearchResponse`: Uyuşmazlık Mahkemesi kararlarını çeşitli form kriterleriyle arar.
-    * `get_uyusmazlik_document_markdown_from_url(document_url: HttpUrl) -> UyusmazlikDocumentMarkdown`: Bir Uyuşmazlık kararını tam URL'sinden alıp Markdown formatında getirir.
 
-* **Anayasa Mahkemesi (Norm Denetimi) Araçları:**
-    * `search_anayasa_norm_denetimi_decisions(search_query: AnayasaNormDenetimiSearchRequest) -> AnayasaSearchResult`: AYM Norm Denetimi kararlarını kapsamlı kriterlerle arar.
-    * `get_anayasa_norm_denetimi_document_markdown(document_url: str, page_number: Optional[int] = 1) -> AnayasaDocumentMarkdown`: Belirli bir AYM Norm Denetimi kararını URL'sinden alır ve 5.000 karakterlik sayfalanmış Markdown içeriğini getirir.
+---
 
-* **Anayasa Mahkemesi (Bireysel Başvuru) Araçları:**
-    * `search_anayasa_bireysel_basvuru_report(search_query: AnayasaBireyselReportSearchRequest) -> AnayasaBireyselReportSearchResult`: AYM Bireysel Başvuru "Karar Arama Raporu" oluşturur.
-    * `get_anayasa_bireysel_basvuru_document_markdown(document_url_path: str, page_number: Optional[int] = 1) -> AnayasaBireyselBasvuruDocumentMarkdown`: Belirli bir AYM Bireysel Başvuru kararını URL path'inden alır ve 5.000 karakterlik sayfalanmış Markdown içeriğini getirir.
+### **📊 Kapsamlı İstatistikler**
+- **Toplam Mahkeme/Kurum:** 13 farklı hukuki kurum (KVKK dahil)
+- **Toplam MCP Tool:** 30 arama ve belge getirme aracı  
+- **Daire/Kurul Filtreleme:** 87 farklı seçenek (52 Yargıtay + 27 Danıştay + 8 Sayıştay)
+- **Tarih Filtreleme:** Birleşik Bedesten API aracında ISO 8601 formatında tam tarih aralığı desteği
+- **Kesin Cümle Arama:** Birleşik Bedesten API aracında çift tırnak ile tam cümle arama (`"\"mülkiyet kararı\""` formatı)
+- **Birleşik API:** 10 ayrı Bedesten aracı → 2 birleşik araç (search_bedesten_unified + get_bedesten_document_markdown)
+- **API Kaynağı:** Dual/Triple API desteği ile maksimum kapsama
+- **Tam Türk Adalet Sistemi:** Yerel mahkemelerden en yüksek mahkemelere kadar
 
-* **KİK (Kamu İhale Kurulu) Araçları:**
-    * `search_kik_decisions(search_query: KikSearchRequest) -> KikSearchResult`: KİK (Kamu İhale Kurulu) kararlarını arar. 
-    * `get_kik_document_markdown(karar_id: str, page_number: Optional[int] = 1) -> KikDocumentMarkdown`: Belirli bir KİK kararını, Base64 ile encode edilmiş `karar_id`'sini kullanarak alır ve 5.000 karakterlik sayfalanmış Markdown içeriğini getirir.
+**🏛️ Desteklenen Mahkeme Hiyerarşisi:**
+```
+Yerel Mahkemeler → İstinaf → Yargıtay/Danıştay → Anayasa Mahkemesi
+     ↓              ↓            ↓                    ↓
+Bedesten API   Bedesten API   Dual/Triple API   Norm+Bireysel API
++ Tarih + Kesin + Tarih + Kesin + Daire + Tarih   + Gelişmiş
+  Cümle Arama    Cümle Arama   + Kesin Cümle     Arama
+```
+
+**⚖️ Kapsamlı Filtreleme Özellikleri:**
+- **Daire Filtreleme:** 79 seçenek (52 Yargıtay + 27 Danıştay)
+  - **Yargıtay:** 52 seçenek (1-23 Hukuk, 1-23 Ceza, Genel Kurullar, Başkanlar Kurulu)
+  - **Danıştay:** 27 seçenek (1-17 Daireler, İdare/Vergi Kurulları, Askeri Mahkemeler)
+- **Tarih Filtreleme:** 5 Bedesten API aracında ISO 8601 formatı (YYYY-MM-DDTHH:MM:SS.000Z)
+  - Tek tarih, tarih aralığı, tek taraflı filtreleme desteği
+  - Yargıtay, Danıştay, Yerel Hukuk, İstinaf Hukuk, KYB kararları
+- **Kesin Cümle Arama:** 5 Bedesten API aracında çift tırnak formatı
+  - Normal arama: `"mülkiyet kararı"` (kelimeler ayrı ayrı)
+  - Kesin arama: `"\"mülkiyet kararı\""` (tam cümle olarak)
+  - Daha kesin sonuçlar için hukuki terimler ve kavramlar
+
+---
+
+🌐 **Web Service / ASGI Deployment**
+
+Yargı MCP artık web servisi olarak da çalıştırılabilir! ASGI desteği sayesinde:
+
+- **Web API olarak erişim**: HTTP endpoint'leri üzerinden MCP araçlarına erişim
+- **Cloud deployment**: Heroku, Railway, Google Cloud Run, AWS Lambda desteği
+- **Docker desteği**: Production-ready Docker container
+- **FastAPI entegrasyonu**: REST API ve interaktif dokümantasyon
+
+**Hızlı başlangıç:**
+```bash
+# ASGI dependencies yükle
+pip install yargi-mcp[asgi]
+
+# Web servisi olarak başlat
+python run_asgi.py
+# veya
+uvicorn asgi_app:app --host 0.0.0.0 --port 8000
+```
+
+Detaylı deployment rehberi için: [docs/DEPLOYMENT.md](docs/DEPLOYMENT.md)
+
+---
 
 📜 **Lisans**
 
-Bu proje MIT Lisansı altında lisanslanmıştır. Detaylar için `LICENSE` dosyasına bakınız.
+Bu proje MIT Lisansı altında lisanslanmıştır. Detaylar için `LICENSE` dosyasına bakınız.

anayasa_mcp_module/bireysel_client.py

@@ -7,8 +7,7 @@ from typing import Dict, Any, List, Optional, Tuple
 import logging
 import html
 import re
-import tempfile
-import os
+import io
 from urllib.parse import urlencode, urljoin, quote
 from markitdown import MarkItDown
 import math # For math.ceil for pagination
@@ -230,23 +229,23 @@ class AnayasaBireyselBasvuruApiClient:
                     html_input_for_markdown = processed_html
         
         markdown_text = None
-        temp_file_path = None
         try:
-            md_converter = MarkItDown(enable_plugins=False) 
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_file:
-                if not html_input_for_markdown.strip().lower().startswith(("<html", "<!doctype")):
-                    tmp_file.write(f"<html><head><meta charset=\"UTF-8\"></head><body>{html_input_for_markdown}</body></html>")
-                else:
-                    tmp_file.write(html_input_for_markdown)
-                temp_file_path = tmp_file.name
+            # Ensure the content is wrapped in basic HTML structure if it's not already
+            if not html_input_for_markdown.strip().lower().startswith(("<html", "<!doctype")):
+                html_content = f"<html><head><meta charset=\"UTF-8\"></head><body>{html_input_for_markdown}</body></html>"
+            else:
+                html_content = html_input_for_markdown
             
-            conversion_result = md_converter.convert(temp_file_path)
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_content.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            conversion_result = md_converter.convert(html_stream)
             markdown_text = conversion_result.text_content
         except Exception as e:
             logger.error(f"AnayasaBireyselBasvuruApiClient: MarkItDown conversion error: {e}")
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path):
-                os.remove(temp_file_path)
         return markdown_text
 
     async def get_decision_document_as_markdown(

anayasa_mcp_module/client.py

@@ -7,8 +7,7 @@ from typing import Dict, Any, List, Optional, Tuple
 import logging
 import html
 import re
-import tempfile
-import os
+import io
 from urllib.parse import urlencode, urljoin, quote
 from markitdown import MarkItDown
 import math # For math.ceil for pagination
@@ -51,26 +50,26 @@ class AnayasaMahkemesiApiClient:
             for kw in params.keywords_any: query_params.append(("HerhangiBirKelimeAra[]", kw))
         if params.keywords_exclude:
             for kw in params.keywords_exclude: query_params.append(("BulunmayanKelimeAra[]", kw))
-        if params.period and params.period.value: query_params.append(("Donemler_id", params.period.value))
+        if params.period and params.period.value and params.period.value != "ALL": query_params.append(("Donemler_id", params.period.value))
         if params.case_number_esas: query_params.append(("EsasNo", params.case_number_esas))
         if params.decision_number_karar: query_params.append(("KararNo", params.decision_number_karar))
         if params.first_review_date_start: query_params.append(("IlkIncelemeTarihiIlk", params.first_review_date_start))
         if params.first_review_date_end: query_params.append(("IlkIncelemeTarihiSon", params.first_review_date_end))
         if params.decision_date_start: query_params.append(("KararTarihiIlk", params.decision_date_start))
         if params.decision_date_end: query_params.append(("KararTarihiSon", params.decision_date_end))
-        if params.application_type and params.application_type.value: query_params.append(("BasvuruTurler_id", params.application_type.value))
+        if params.application_type and params.application_type.value and params.application_type.value != "ALL": query_params.append(("BasvuruTurler_id", params.application_type.value))
         if params.applicant_general_name: query_params.append(("BasvuranGeneller_id", params.applicant_general_name))
         if params.applicant_specific_name: query_params.append(("BasvuranOzeller_id", params.applicant_specific_name))
         if params.attending_members_names:
             for name in params.attending_members_names: query_params.append(("Uyeler_id[]", name))
         if params.rapporteur_name: query_params.append(("Raportorler_id", params.rapporteur_name))
-        if params.norm_type and params.norm_type.value: query_params.append(("NormunTurler_id", params.norm_type.value))
+        if params.norm_type and params.norm_type.value and params.norm_type.value != "ALL": query_params.append(("NormunTurler_id", params.norm_type.value))
         if params.norm_id_or_name: query_params.append(("NormunNumarasiAdlar_id", params.norm_id_or_name))
         if params.norm_article: query_params.append(("NormunMaddeNumarasi", params.norm_article))
         if params.review_outcomes:
             for outcome_enum_val in params.review_outcomes:
-                if outcome_enum_val.value: query_params.append(("IncelemeTuruKararSonuclar_id[]", outcome_enum_val.value))
-        if params.reason_for_final_outcome and params.reason_for_final_outcome.value:
+                if outcome_enum_val.value and outcome_enum_val.value != "ALL": query_params.append(("IncelemeTuruKararSonuclar_id[]", outcome_enum_val.value))
+        if params.reason_for_final_outcome and params.reason_for_final_outcome.value and params.reason_for_final_outcome.value != "ALL":
             query_params.append(("KararSonucununGerekcesi", params.reason_for_final_outcome.value))
         if params.basis_constitution_article_numbers:
             for article_no in params.basis_constitution_article_numbers: query_params.append(("DayanakHukmu[]", article_no))
@@ -78,10 +77,17 @@ class AnayasaMahkemesiApiClient:
         if params.official_gazette_date_end: query_params.append(("ResmiGazeteTarihiSon", params.official_gazette_date_end))
         if params.official_gazette_number_start: query_params.append(("ResmiGazeteSayisiIlk", params.official_gazette_number_start))
         if params.official_gazette_number_end: query_params.append(("ResmiGazeteSayisiSon", params.official_gazette_number_end))
-        if params.has_press_release and params.has_press_release.value: query_params.append(("BasinDuyurusu", params.has_press_release.value))
-        if params.has_dissenting_opinion and params.has_dissenting_opinion.value: query_params.append(("KarsiOy", params.has_dissenting_opinion.value))
-        if params.has_different_reasoning and params.has_different_reasoning.value: query_params.append(("FarkliGerekce", params.has_different_reasoning.value))
+        if params.has_press_release and params.has_press_release.value and params.has_press_release.value != "ALL": query_params.append(("BasinDuyurusu", params.has_press_release.value))
+        if params.has_dissenting_opinion and params.has_dissenting_opinion.value and params.has_dissenting_opinion.value != "ALL": query_params.append(("KarsiOy", params.has_dissenting_opinion.value))
+        if params.has_different_reasoning and params.has_different_reasoning.value and params.has_different_reasoning.value != "ALL": query_params.append(("FarkliGerekce", params.has_different_reasoning.value))
         
+        # Add pagination and sorting parameters as query params instead of URL path
+        if params.results_per_page and params.results_per_page != 10:
+            query_params.append(("SatirSayisi", str(params.results_per_page)))
+            
+        if params.sort_by_criteria and params.sort_by_criteria != "KararTarihi":
+            query_params.append(("Siralama", params.sort_by_criteria))
+            
         if params.page_to_fetch and params.page_to_fetch > 1:
             query_params.append(("page", str(params.page_to_fetch)))
         return query_params
@@ -90,16 +96,8 @@ class AnayasaMahkemesiApiClient:
         self,
         params: AnayasaNormDenetimiSearchRequest
     ) -> AnayasaSearchResult:
-        path_segments = []
-        if params.results_per_page and params.results_per_page != 10: # Default is 10
-            path_segments.append(f"SatirSayisi/{params.results_per_page}")
-        
-        if params.sort_by_criteria and params.sort_by_criteria != "KararTarihi": # Default is KararTarihi
-             # Ensure correct quoting for criteria that might have Turkish chars or spaces
-            path_segments.append(f"Siralama/{quote(params.sort_by_criteria)}")
-
-        path_segments.append(self.SEARCH_PATH_SEGMENT)
-        request_path = "/" + "/".join(path_segments)
+        # Use simple /Ara endpoint - the complex path structure seems to cause 404s
+        request_path = f"/{self.SEARCH_PATH_SEGMENT}"
         
         final_query_params = self._build_search_query_params_for_aym(params)
         logger.info(f"AnayasaMahkemesiApiClient: Performing Norm Denetimi search. Path: {request_path}, Params: {final_query_params}")
@@ -222,24 +220,23 @@ class AnayasaMahkemesiApiClient:
                 html_input_for_markdown = str(body_tag) if body_tag else processed_html
         
         markdown_text = None
-        temp_file_path = None
         try:
-            md_converter = MarkItDown(enable_plugins=False) 
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_file:
-                # Ensure the content is wrapped in basic HTML structure if it's not already
-                if not html_input_for_markdown.strip().lower().startswith(("<html", "<!doctype")):
-                    tmp_file.write(f"<html><head><meta charset=\"UTF-8\"></head><body>{html_input_for_markdown}</body></html>")
-                else:
-                    tmp_file.write(html_input_for_markdown)
-                temp_file_path = tmp_file.name
+            # Ensure the content is wrapped in basic HTML structure if it's not already
+            if not html_input_for_markdown.strip().lower().startswith(("<html", "<!doctype")):
+                html_content = f"<html><head><meta charset=\"UTF-8\"></head><body>{html_input_for_markdown}</body></html>"
+            else:
+                html_content = html_input_for_markdown
             
-            conversion_result = md_converter.convert(temp_file_path)
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_content.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            conversion_result = md_converter.convert(html_stream)
             markdown_text = conversion_result.text_content
         except Exception as e:
             logger.error(f"AnayasaMahkemesiApiClient: MarkItDown conversion error: {e}")
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path):
-                os.remove(temp_file_path)
         return markdown_text
 
     async def get_decision_document_as_markdown(

anayasa_mcp_module/models.py

@@ -6,23 +6,23 @@ from enum import Enum
 
 # --- Enums (AnayasaDonemEnum, AnayasaBasvuruTuruEnum, etc. - same as before) ---
 class AnayasaDonemEnum(str, Enum):
-    TUMU = ""
+    TUMU = "ALL"
     DONEM_1961 = "1"
     DONEM_1982 = "2"
 
 class AnayasaBasvuruTuruEnum(str, Enum):
-    TUMU = ""
+    TUMU = "ALL"
     IPTAL = "1"
     ITIRAZ = "2"
     DIGER = "3"
 
 class AnayasaVarYokEnum(str, Enum):
-    TUMU = ""
+    TUMU = "ALL"
     YOK = "0"
     VAR = "1"
 
 class AnayasaNormTuruEnum(str, Enum):
-    TUMU = ""
+    TUMU = "ALL"
     ANAYASA = "1"
     ANAYASA_DEGISTIREN_KANUN = "2"
     CUMHURBASKANLIGI_KARARNAMESI = "14"
@@ -40,7 +40,7 @@ class AnayasaNormTuruEnum(str, Enum):
     YONETMELIK = "13"
 
 class AnayasaIncelemeSonucuEnum(str, Enum):
-    TUMU = ""
+    TUMU = "ALL"
     ESAS_ACILMAMIS_SAYILMA = "1"
     ESAS_IPTAL = "2"
     ESAS_KARAR_YER_OLMADIGI = "3"
@@ -52,7 +52,7 @@ class AnayasaIncelemeSonucuEnum(str, Enum):
     KANUN_6216_M43_4_IPTAL = "12"
 
 class AnayasaSonucGerekcesiEnum(str, Enum):
-    TUMU = ""
+    TUMU = "ALL"
     ANAYASAYA_AYKIRI_DEGIL = "29"
     ANAYASAYA_ESAS_YONUNDEN_AYKIRILIK = "1"
     ANAYASAYA_ESAS_YONUNDEN_UYGUNLUK = "2"
@@ -114,7 +114,7 @@ class AnayasaNormDenetimiSearchRequest(BaseModel):
     review_outcomes: Optional[List[AnayasaIncelemeSonucuEnum]] = Field(default_factory=list, description="List of review types and outcomes (IncelemeTuruKararSonuclar_id[]).")
     reason_for_final_outcome: Optional[AnayasaSonucGerekcesiEnum] = Field(default=AnayasaSonucGerekcesiEnum.TUMU, description="Main reason for the decision outcome (KararSonucununGerekcesi).")
     basis_constitution_article_numbers: Optional[List[str]] = Field(default_factory=list, description="List of supporting Constitution article numbers (DayanakHukmu[]).")
-    results_per_page: Optional[int] = Field(10, description="Number of results per page. Options: 10, 20, 30, 40, 50.")
+    results_per_page: Optional[int] = Field(10, ge=1, le=10, description="Results per page.")
     page_to_fetch: Optional[int] = Field(1, ge=1, description="Page number to fetch for results list.")
     sort_by_criteria: Optional[str] = Field("KararTarihi", description="Sort criteria. Options: 'KararTarihi', 'YayinTarihi', 'Toplam' (keyword count).")
 

asgi_app.py

@@ -0,0 +1,678 @@
+"""
+ASGI application for Yargı MCP Server
+
+This module provides ASGI/HTTP access to the Yargı MCP server,
+allowing it to be deployed as a web service with FastAPI wrapper
+for Stripe webhook integration.
+
+Usage:
+    uvicorn asgi_app:app --host 0.0.0.0 --port 8000
+"""
+
+import os
+import time
+import logging
+from datetime import datetime, timedelta
+from fastapi import FastAPI, Request, HTTPException, Query
+from fastapi.responses import JSONResponse, HTMLResponse
+from fastapi.exception_handlers import http_exception_handler
+from starlette.middleware import Middleware
+from starlette.middleware.cors import CORSMiddleware
+from starlette.responses import Response
+
+# Import the fully configured MCP app with all tools
+from mcp_server_main import app as mcp_server
+
+# Import Stripe webhook router
+from stripe_webhook import router as stripe_router
+
+# Import simplified MCP Auth HTTP adapter
+from mcp_auth_http_simple import router as mcp_auth_router
+
+# OAuth configuration from environment variables
+CLERK_ISSUER = os.getenv("CLERK_ISSUER", "https://accounts.yargimcp.com")
+BASE_URL = os.getenv("BASE_URL", "https://yargimcp.com")
+
+# Setup logging
+logger = logging.getLogger(__name__)
+
+# Configure CORS middleware
+cors_origins = os.getenv("ALLOWED_ORIGINS", "*").split(",")
+custom_middleware = [
+    Middleware(
+        CORSMiddleware,
+        allow_origins=cors_origins,
+        allow_credentials=True,
+        allow_methods=["GET", "POST", "OPTIONS"],
+        allow_headers=["Content-Type", "Authorization", "X-Request-ID"],
+    ),
+]
+
+# Create MCP Starlette sub-application (without auth wrapper)
+mcp_app = mcp_server.http_app(
+    path="/",
+    middleware=custom_middleware
+)
+
+# Configure JSON encoder for proper Turkish character support
+import json
+from fastapi.responses import JSONResponse
+
+class UTF8JSONResponse(JSONResponse):
+    def __init__(self, content=None, status_code=200, headers=None, **kwargs):
+        if headers is None:
+            headers = {}
+        headers["Content-Type"] = "application/json; charset=utf-8"
+        super().__init__(content, status_code, headers, **kwargs)
+    
+    def render(self, content) -> bytes:
+        return json.dumps(
+            content,
+            ensure_ascii=False,
+            allow_nan=False,
+            indent=None,
+            separators=(",", ":"),
+        ).encode("utf-8")
+
+# Create FastAPI wrapper application with MCP lifespan
+app = FastAPI(
+    title="Yargı MCP Server",
+    description="MCP server for Turkish legal databases with OAuth authentication",
+    version="0.1.0",
+    middleware=custom_middleware,
+    lifespan=mcp_app.lifespan,  # MCP app lifespan
+    default_response_class=UTF8JSONResponse  # Use UTF-8 JSON encoder
+)
+
+# Add Stripe webhook router to FastAPI
+app.include_router(stripe_router, prefix="/api")
+
+# Add MCP Auth HTTP adapter to FastAPI (handles OAuth endpoints)
+app.include_router(mcp_auth_router)
+
+# Custom 401 exception handler for MCP spec compliance
+@app.exception_handler(401)
+async def custom_401_handler(request: Request, exc: HTTPException):
+    """Custom 401 handler that adds WWW-Authenticate header as required by MCP spec"""
+    response = await http_exception_handler(request, exc)
+    
+    # Add WWW-Authenticate header pointing to protected resource metadata
+    # as required by RFC 9728 Section 5.1 and MCP Authorization spec
+    response.headers["WWW-Authenticate"] = (
+        'Bearer '
+        'error="invalid_token", '
+        'error_description="The access token is missing or invalid", '
+        f'resource="{BASE_URL}/.well-known/oauth-protected-resource"'
+    )
+    
+    return response
+
+# Mount MCP app as sub-application at /mcp-server to avoid path conflicts
+app.mount("/mcp-server", mcp_app)
+
+# Add custom route to handle /mcp requests and forward to mounted app
+@app.api_route("/mcp", methods=["POST", "DELETE", "OPTIONS"])
+@app.api_route("/mcp/", methods=["POST", "DELETE", "OPTIONS"])
+async def mcp_protocol_handler(request: Request):
+    """Handle MCP protocol requests by forwarding to mounted app"""
+    
+    # Handle DELETE requests for session termination
+    if request.method == "DELETE":
+        logger.info("DELETE request received for session termination")
+        # For session termination, we just return 200 OK
+        # The actual session cleanup is handled by the underlying MCP transport
+        from starlette.responses import Response
+        return Response(
+            status_code=200,
+            content="Session terminated successfully"
+        )
+    
+    # REQUIRED: Validate Bearer JWT tokens for all MCP requests
+    auth_header = request.headers.get("Authorization")
+    if not auth_header or not auth_header.startswith("Bearer "):
+        logger.error("Missing or invalid Authorization header")
+        raise HTTPException(
+            status_code=401, 
+            detail="Missing or invalid Authorization header. Bearer token required."
+        )
+    
+    token = auth_header.split(" ")[1]
+    try:
+        # Check if this is a mock token for development/testing
+        if token.startswith("mock_clerk_jwt_"):
+            logger.info(f"Using mock JWT token for development: {token[:30]}...")
+            # For mock tokens, we'll allow access with a mock user
+            request.state.user_id = "mock_user_dev"
+            request.state.session_id = "mock_session_dev"
+            request.state.token_scopes = ["read", "search"]
+            logger.info("Mock JWT token accepted for development")
+        elif token.startswith("eyJ"):
+            # This looks like a real JWT token (starts with eyJ which is base64 encoded '{"')
+            logger.info(f"Processing real JWT token: {token[:30]}...")
+            # Validate real Clerk JWT token
+            from clerk_backend_api import Clerk, models
+            import jwt
+            
+            # Decode JWT token and extract user info
+            try:
+                decoded_token = jwt.decode(token, options={"verify_signature": False})
+                user_id = decoded_token.get("user_id") or decoded_token.get("sub")
+                user_email = decoded_token.get("email")
+                token_scopes = decoded_token.get("scopes", ["read", "search"])
+                session_id = decoded_token.get("sid", "jwt_session")
+                
+                logger.info(f"JWT token claims - user_id: {user_id}, email: {user_email}, scopes: {token_scopes}")
+                
+                if user_id and user_email:
+                    # JWT token is signed by Clerk and contains valid user info
+                    request.state.user_id = user_id
+                    request.state.user_email = user_email
+                    request.state.session_id = session_id
+                    request.state.token_scopes = token_scopes
+                    logger.info(f"Real JWT token accepted for user: {user_id}")
+                else:
+                    logger.error(f"Missing required fields in JWT token - user_id: {bool(user_id)}, email: {bool(user_email)}")
+                    raise HTTPException(
+                        status_code=401,
+                        detail="Invalid token - missing user_id or email in claims"
+                    )
+                    
+            except Exception as e:
+                logger.error(f"JWT token decoding failed: {e}")
+                raise HTTPException(
+                    status_code=401,
+                    detail="Invalid JWT token format"
+                )
+        else:
+            # Invalid token format - doesn't start with expected patterns
+            logger.error(f"Invalid token format: {token[:30]}...")
+            raise HTTPException(
+                status_code=401,
+                detail="Invalid token format - must be a valid JWT token"
+            )
+        
+    except HTTPException:
+        # Re-raise HTTPException as-is
+        raise
+    except Exception as e:
+        logger.error(f"Bearer token validation failed: {str(e)}")
+        raise HTTPException(
+            status_code=401,
+            detail=f"Token validation failed: {str(e)}"
+        )
+    
+    # Forward the request to the mounted MCP app
+    async def receive():
+        return await request.receive()
+    
+    # Create new scope for the mounted app
+    scope = request.scope.copy()
+    scope["path"] = "/"  # Root path for mounted app
+    scope["path_info"] = "/"
+    
+    # Capture the response
+    response_parts = {"status": 200, "headers": [], "body": b""}
+    
+    async def send(message):
+        if message["type"] == "http.response.start":
+            response_parts["status"] = message["status"]
+            response_parts["headers"] = message["headers"]
+        elif message["type"] == "http.response.body":
+            response_parts["body"] += message.get("body", b"")
+    
+    # Call the mounted MCP app
+    await mcp_app(scope, receive, send)
+    
+    # Return the response
+    from starlette.responses import Response
+    
+    # Convert ASGI headers to dict
+    headers = {}
+    for name, value in response_parts["headers"]:
+        headers[name.decode()] = value.decode()
+    
+    return Response(
+        content=response_parts["body"],
+        status_code=response_parts["status"],
+        headers=headers
+    )
+
+
+# SSE transport deprecated - removed
+
+
+# FastAPI health check endpoint
+@app.get("/health")
+async def health_check():
+    """Health check endpoint for monitoring"""
+    return JSONResponse({
+        "status": "healthy",
+        "service": "Yargı MCP Server",
+        "version": "0.1.0",
+        "tools_count": len(mcp_server._tool_manager._tools),
+        "auth_enabled": os.getenv("ENABLE_AUTH", "false").lower() == "true"
+    })
+
+# FastAPI root endpoint
+@app.get("/")
+async def root():
+    """Root endpoint with service information"""
+    return JSONResponse({
+        "service": "Yargı MCP Server",
+        "description": "MCP server for Turkish legal databases with OAuth authentication",
+        "endpoints": {
+            "mcp": "/mcp",
+            "health": "/health",
+            "status": "/status",
+            "stripe_webhook": "/api/stripe/webhook",
+            "oauth_login": "/auth/login",
+            "oauth_callback": "/auth/callback",
+            "oauth_google": "/auth/google/login",
+            "user_info": "/auth/user"
+        },
+        "transports": {
+            "http": "/mcp"
+        },
+        "supported_databases": [
+            "Yargıtay (Court of Cassation)",
+            "Danıştay (Council of State)", 
+            "Emsal (Precedent)",
+            "Uyuşmazlık Mahkemesi (Court of Jurisdictional Disputes)",
+            "Anayasa Mahkemesi (Constitutional Court)",
+            "Kamu İhale Kurulu (Public Procurement Authority)",
+            "Rekabet Kurumu (Competition Authority)",
+            "Sayıştay (Court of Accounts)",
+            "Bedesten API (Multiple courts)"
+        ],
+        "authentication": {
+            "enabled": os.getenv("ENABLE_AUTH", "false").lower() == "true",
+            "type": "OAuth 2.0 via Clerk",
+            "issuer": os.getenv("CLERK_ISSUER", "https://clerk.accounts.dev"),
+            "providers": ["google"],
+            "flow": "authorization_code"
+        }
+    })
+
+# OAuth 2.0 Authorization Server Metadata proxy (for MCP clients that can't reach Clerk directly)
+# MCP Auth Toolkit expects this to be under /mcp/.well-known/oauth-authorization-server
+@app.get("/mcp/.well-known/oauth-authorization-server")
+async def oauth_authorization_server():
+    """OAuth 2.0 Authorization Server Metadata proxy to Clerk - MCP Auth Toolkit standard location"""
+    return JSONResponse({
+        "issuer": BASE_URL,
+        "authorization_endpoint": "https://yargimcp.com/mcp-callback",
+        "token_endpoint": f"{BASE_URL}/token", 
+        "jwks_uri": f"{CLERK_ISSUER}/.well-known/jwks.json",
+        "response_types_supported": ["code"],
+        "grant_types_supported": ["authorization_code", "refresh_token"],
+        "token_endpoint_auth_methods_supported": ["client_secret_basic", "none"],
+        "scopes_supported": ["read", "search", "openid", "profile", "email"],
+        "subject_types_supported": ["public"],
+        "id_token_signing_alg_values_supported": ["RS256"],
+        "claims_supported": ["sub", "iss", "aud", "exp", "iat", "email", "name"],
+        "code_challenge_methods_supported": ["S256"],
+        "service_documentation": f"{BASE_URL}/mcp",
+        "registration_endpoint": f"{BASE_URL}/register",
+        "resource_documentation": f"{BASE_URL}/mcp"
+    })
+
+# Claude AI MCP specific endpoint format
+@app.get("/.well-known/oauth-authorization-server/mcp")
+async def oauth_authorization_server_mcp_suffix():
+    """OAuth 2.0 Authorization Server Metadata - Claude AI MCP specific format"""
+    return JSONResponse({
+        "issuer": BASE_URL,
+        "authorization_endpoint": "https://yargimcp.com/mcp-callback",
+        "token_endpoint": f"{BASE_URL}/token", 
+        "jwks_uri": f"{CLERK_ISSUER}/.well-known/jwks.json",
+        "response_types_supported": ["code"],
+        "grant_types_supported": ["authorization_code", "refresh_token"],
+        "token_endpoint_auth_methods_supported": ["client_secret_basic", "none"],
+        "scopes_supported": ["read", "search", "openid", "profile", "email"],
+        "subject_types_supported": ["public"],
+        "id_token_signing_alg_values_supported": ["RS256"],
+        "claims_supported": ["sub", "iss", "aud", "exp", "iat", "email", "name"],
+        "code_challenge_methods_supported": ["S256"],
+        "service_documentation": f"{BASE_URL}/mcp",
+        "registration_endpoint": f"{BASE_URL}/register",
+        "resource_documentation": f"{BASE_URL}/mcp"
+    })
+
+@app.get("/.well-known/oauth-protected-resource/mcp")
+async def oauth_protected_resource_mcp_suffix():
+    """OAuth 2.0 Protected Resource Metadata - Claude AI MCP specific format"""
+    return JSONResponse({
+        "resource": BASE_URL,
+        "authorization_servers": [
+            BASE_URL
+        ],
+        "scopes_supported": ["read", "search"],
+        "bearer_methods_supported": ["header"],
+        "resource_documentation": f"{BASE_URL}/mcp",
+        "resource_policy_uri": f"{BASE_URL}/privacy"
+    })
+
+# Keep root level for compatibility with some MCP clients
+@app.get("/.well-known/oauth-authorization-server")
+async def oauth_authorization_server_root():
+    """OAuth 2.0 Authorization Server Metadata proxy to Clerk - root level for compatibility"""
+    return JSONResponse({
+        "issuer": BASE_URL,
+        "authorization_endpoint": "https://yargimcp.com/mcp-callback",
+        "token_endpoint": f"{BASE_URL}/token", 
+        "jwks_uri": f"{CLERK_ISSUER}/.well-known/jwks.json",
+        "response_types_supported": ["code"],
+        "grant_types_supported": ["authorization_code", "refresh_token"],
+        "token_endpoint_auth_methods_supported": ["client_secret_basic", "none"],
+        "scopes_supported": ["read", "search", "openid", "profile", "email"],
+        "subject_types_supported": ["public"],
+        "id_token_signing_alg_values_supported": ["RS256"],
+        "claims_supported": ["sub", "iss", "aud", "exp", "iat", "email", "name"],
+        "code_challenge_methods_supported": ["S256"],
+        "service_documentation": f"{BASE_URL}/mcp",
+        "registration_endpoint": f"{BASE_URL}/register",
+        "resource_documentation": f"{BASE_URL}/mcp"
+    })
+
+# MCP endpoint info for GET requests (ChatGPT compatibility)
+@app.get("/mcp")
+async def mcp_info():
+    """MCP endpoint information for discovery"""
+    return JSONResponse({
+        "mcp_server": True,
+        "name": "Yargı MCP Server",
+        "version": "0.1.0",
+        "description": "MCP server for Turkish legal databases",
+        "protocol": "mcp/1.0",
+        "transport": ["http"],
+        "authentication_required": True,
+        "authentication": {
+            "type": "oauth2",
+            "authorization_url": "https://yargimcp.com/sign-in?redirect_url=https://api.yargimcp.com/auth/mcp-callback",
+            "token_url": f"{BASE_URL}/auth/mcp-token",
+            "scopes": ["read", "search"],
+            "provider": "clerk"
+        },
+        "endpoints": {
+            "mcp_protocol": "/mcp",
+            "discovery": "/mcp/discovery",
+            "well_known": "/.well-known/mcp",
+            "health": "/health",
+            "oauth_login": "/auth/login"
+        },
+        "capabilities": {
+            "tools": True,
+            "resources": True,
+            "prompts": False
+        },
+        "tools_count": len(mcp_server._tool_manager._tools),
+        "usage": {
+            "note": "This is an MCP server. Use POST to /mcp/ with proper MCP protocol headers.",
+            "headers_required": [
+                "Content-Type: application/json",
+                "Accept: application/json",
+                "Authorization: Bearer <token>",
+                "X-Session-ID: <session-id>"
+            ]
+        }
+    })
+
+# OAuth 2.0 Protected Resource Metadata (RFC 9728) - MCP Spec Required
+@app.get("/.well-known/oauth-protected-resource")
+async def oauth_protected_resource():
+    """OAuth 2.0 Protected Resource Metadata as required by MCP spec"""
+    return JSONResponse({
+        "resource": BASE_URL,
+        "authorization_servers": [
+            BASE_URL
+        ],
+        "scopes_supported": ["read", "search"],
+        "bearer_methods_supported": ["header"],
+        "resource_documentation": f"{BASE_URL}/mcp",
+        "resource_policy_uri": f"{BASE_URL}/privacy"
+    })
+
+# Standard well-known discovery endpoint
+@app.get("/.well-known/mcp")
+async def well_known_mcp():
+    """Standard MCP discovery endpoint"""
+    return JSONResponse({
+        "mcp_server": {
+            "name": "Yargı MCP Server",
+            "version": "0.1.0",
+            "endpoint": f"{BASE_URL}/mcp",
+            "authentication": {
+                "type": "oauth2",
+                "authorization_url": f"{BASE_URL}/auth/login",
+                "scopes": ["read", "search"]
+            },
+            "capabilities": ["tools", "resources"],
+            "tools_count": len(mcp_server._tool_manager._tools)
+        }
+    })
+
+# MCP Discovery endpoint for ChatGPT integration
+@app.get("/mcp/discovery")
+async def mcp_discovery():
+    """MCP Discovery endpoint for ChatGPT and other MCP clients"""
+    return JSONResponse({
+        "name": "Yargı MCP Server",
+        "description": "MCP server for Turkish legal databases",
+        "version": "0.1.0",
+        "protocol": "mcp",
+        "transport": "http",
+        "endpoint": "/mcp",
+        "authentication": {
+            "type": "oauth2",
+            "authorization_url": "/auth/login",
+            "token_url": "/auth/callback",
+            "scopes": ["read", "search"],
+            "provider": "clerk"
+        },
+        "capabilities": {
+            "tools": True,
+            "resources": True,
+            "prompts": False
+        },
+        "tools_count": len(mcp_server._tool_manager._tools),
+        "contact": {
+            "url": BASE_URL,
+            "email": "support@yargi-mcp.dev"
+        }
+    })
+
+# FastAPI status endpoint
+@app.get("/status")
+async def status():
+    """Status endpoint with detailed information"""
+    tools = []
+    for tool in mcp_server._tool_manager._tools.values():
+        tools.append({
+            "name": tool.name,
+            "description": tool.description[:100] + "..." if len(tool.description) > 100 else tool.description
+        })
+    
+    return JSONResponse({
+        "status": "operational",
+        "tools": tools,
+        "total_tools": len(tools),
+        "transport": "streamable_http",
+        "architecture": "FastAPI wrapper + MCP Starlette sub-app",
+        "auth_status": "enabled" if os.getenv("ENABLE_AUTH", "false").lower() == "true" else "disabled"
+    })
+
+# Note: JWT token validation is now handled entirely by Clerk
+# All authentication flows use Clerk JWT tokens directly
+
+async def validate_clerk_session(request: Request, clerk_token: str = None) -> str:
+    """Validate Clerk session from cookies or JWT token and return user_id"""
+    logger.info(f"Validating Clerk session - token provided: {bool(clerk_token)}")
+    
+    try:
+        # Try to import Clerk SDK
+        from clerk_backend_api import Clerk
+        clerk = Clerk(bearer_auth=os.getenv("CLERK_SECRET_KEY"))
+        
+        # Try JWT token first (from URL parameter)
+        if clerk_token:
+            logger.info("Validating Clerk JWT token from URL parameter")
+            try:
+                # Extract session_id from JWT token and verify with Clerk
+                import jwt
+                decoded_token = jwt.decode(clerk_token, options={"verify_signature": False})
+                session_id = decoded_token.get("sid")  # Use standard JWT 'sid' claim
+                
+                if session_id:
+                    # Verify with Clerk using session_id
+                    session = clerk.sessions.verify(session_id=session_id, token=clerk_token)
+                    user_id = session.user_id if session else None
+                    
+                    if user_id:
+                        logger.info(f"JWT token validation successful - user_id: {user_id}")
+                        return user_id
+                    else:
+                        logger.error("JWT token validation failed - no user_id in session")
+                else:
+                    logger.error("No session_id found in JWT token")
+            except Exception as e:
+                logger.error(f"JWT token validation failed: {str(e)}")
+                # Fall through to cookie validation
+        
+        # Fallback to cookie validation
+        logger.info("Attempting cookie-based session validation")
+        clerk_session = request.cookies.get("__session")
+        if not clerk_session:
+            logger.error("No Clerk session cookie found")
+            raise HTTPException(status_code=401, detail="No Clerk session found")
+        
+        # Validate session with Clerk
+        session = clerk.sessions.verify_session(clerk_session)
+        logger.info(f"Cookie session validation successful - user_id: {session.user_id}")
+        return session.user_id
+        
+    except ImportError:
+        # Fallback for development without Clerk SDK
+        logger.warning("Clerk SDK not available - using development fallback")
+        return "dev_user_123"
+    except Exception as e:
+        logger.error(f"Session validation failed: {str(e)}")
+        raise HTTPException(status_code=401, detail=f"Session validation failed: {str(e)}")
+
+# MCP OAuth Callback Endpoint
+@app.get("/auth/mcp-callback")
+async def mcp_oauth_callback(request: Request, clerk_token: str = Query(None)):
+    """Handle OAuth callback for MCP token generation"""
+    logger.info(f"MCP OAuth callback - clerk_token provided: {bool(clerk_token)}")
+    
+    try:
+        # Validate Clerk session with JWT token support
+        user_id = await validate_clerk_session(request, clerk_token)
+        logger.info(f"User authenticated successfully - user_id: {user_id}")
+        
+        # Use the Clerk JWT token directly (no need to generate custom token)
+        logger.info("User authenticated successfully via Clerk")
+        
+        # Return success response
+        return HTMLResponse(f"""
+        <html>
+            <head>
+                <title>MCP Connection Successful</title>
+                <style>
+                    body {{ font-family: Arial, sans-serif; text-align: center; padding: 50px; }}
+                    .success {{ color: #28a745; }}
+                    .token {{ background: #f8f9fa; padding: 15px; border-radius: 5px; margin: 20px 0; word-break: break-all; }}
+                </style>
+            </head>
+            <body>
+                <h1 class="success">✅ MCP Connection Successful!</h1>
+                <p>Your Yargı MCP integration is now active.</p>
+                <div class="token">
+                    <strong>Authentication:</strong><br>
+                    <code>Use your Clerk JWT token directly with Bearer authentication</code>
+                </div>
+                <p>You can now close this window and return to your MCP client.</p>
+                <script>
+                    // Try to close the popup if opened as such
+                    if (window.opener) {{
+                        window.opener.postMessage({{
+                            type: 'MCP_AUTH_SUCCESS',
+                            token: 'use_clerk_jwt_token'
+                        }}, '*');
+                        setTimeout(() => window.close(), 3000);
+                    }}
+                </script>
+            </body>
+        </html>
+        """)
+        
+    except HTTPException as e:
+        logger.error(f"MCP OAuth callback failed: {e.detail}")
+        return HTMLResponse(f"""
+        <html>
+            <head>
+                <title>MCP Connection Failed</title>
+                <style>
+                    body {{ font-family: Arial, sans-serif; text-align: center; padding: 50px; }}
+                    .error {{ color: #dc3545; }}
+                    .debug {{ background: #f8f9fa; padding: 10px; margin: 20px 0; border-radius: 5px; font-family: monospace; }}
+                </style>
+            </head>
+            <body>
+                <h1 class="error">❌ MCP Connection Failed</h1>
+                <p>{e.detail}</p>
+                <div class="debug">
+                    <strong>Debug Info:</strong><br>
+                    Clerk Token: {'✅ Provided' if clerk_token else '❌ Missing'}<br>
+                    Error: {e.detail}<br>
+                    Status: {e.status_code}
+                </div>
+                <p>Please try again or contact support.</p>
+                <a href="https://yargimcp.com/sign-in">Return to Sign In</a>
+            </body>
+        </html>
+        """, status_code=e.status_code)
+    except Exception as e:
+        logger.error(f"Unexpected error in MCP OAuth callback: {str(e)}")
+        return HTMLResponse(f"""
+        <html>
+            <head>
+                <title>MCP Connection Error</title>
+                <style>
+                    body {{ font-family: Arial, sans-serif; text-align: center; padding: 50px; }}
+                    .error {{ color: #dc3545; }}
+                </style>
+            </head>
+            <body>
+                <h1 class="error">❌ Unexpected Error</h1>
+                <p>An unexpected error occurred during authentication.</p>
+                <p>Error: {str(e)}</p>
+                <a href="https://yargimcp.com/sign-in">Return to Sign In</a>
+            </body>
+        </html>
+        """, status_code=500)
+
+# OAuth2 Token Endpoint - Now uses Clerk JWT tokens directly
+@app.post("/auth/mcp-token")
+async def mcp_token_endpoint(request: Request):
+    """OAuth2 token endpoint for MCP clients - returns Clerk JWT token info"""
+    try:
+        # Validate Clerk session
+        user_id = await validate_clerk_session(request)
+        
+        return JSONResponse({
+            "message": "Use your Clerk JWT token directly with Bearer authentication",
+            "token_type": "Bearer",
+            "scope": "yargi.read",
+            "user_id": user_id,
+            "instructions": "Include 'Authorization: Bearer YOUR_CLERK_JWT_TOKEN' in your requests"
+        })
+    except HTTPException as e:
+        return JSONResponse(
+            status_code=e.status_code,
+            content={"error": "invalid_request", "error_description": e.detail}
+        )
+
+# Note: Only HTTP transport supported - SSE transport deprecated
+
+# Export for uvicorn
+__all__ = ["app"]

bedesten_mcp_module/__init__.py

@@ -0,0 +1 @@
+# bedesten_mcp_module/__init__.py

bedesten_mcp_module/client.py

@@ -0,0 +1,168 @@
+# bedesten_mcp_module/client.py
+
+import httpx
+import base64
+from typing import Optional
+import logging
+from markitdown import MarkItDown
+import io
+
+from .models import (
+    BedestenSearchRequest, BedestenSearchResponse,
+    BedestenDocumentRequest, BedestenDocumentResponse,
+    BedestenDocumentMarkdown, BedestenDocumentRequestData
+)
+
+logger = logging.getLogger(__name__)
+
+class BedestenApiClient:
+    """
+    API Client for Bedesten (bedesten.adalet.gov.tr) - Alternative legal decision search system.
+    Currently used for Yargıtay decisions, but can be extended for other court types.
+    """
+    BASE_URL = "https://bedesten.adalet.gov.tr"
+    SEARCH_ENDPOINT = "/emsal-karar/searchDocuments"
+    DOCUMENT_ENDPOINT = "/emsal-karar/getDocumentContent"
+    
+    def __init__(self, request_timeout: float = 60.0):
+        self.http_client = httpx.AsyncClient(
+            base_url=self.BASE_URL,
+            headers={
+                "Accept": "*/*",
+                "Accept-Language": "tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7",
+                "AdaletApplicationName": "UyapMevzuat",
+                "Content-Type": "application/json; charset=utf-8",
+                "Origin": "https://mevzuat.adalet.gov.tr",
+                "Referer": "https://mevzuat.adalet.gov.tr/",
+                "Sec-Fetch-Dest": "empty",
+                "Sec-Fetch-Mode": "cors",
+                "Sec-Fetch-Site": "same-site",
+                "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
+            },
+            timeout=request_timeout
+        )
+    
+    async def search_documents(self, search_request: BedestenSearchRequest) -> BedestenSearchResponse:
+        """
+        Search for documents using Bedesten API.
+        Currently supports: YARGITAYKARARI, DANISTAYKARARI, YERELHUKMAHKARARI, etc.
+        """
+        logger.info(f"BedestenApiClient: Searching documents with phrase: {search_request.data.phrase}")
+        
+        try:
+            response = await self.http_client.post(
+                self.SEARCH_ENDPOINT, 
+                json=search_request.model_dump()
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            
+            # Parse and return the response
+            return BedestenSearchResponse(**response_json)
+            
+        except httpx.RequestError as e:
+            logger.error(f"BedestenApiClient: HTTP request error during search: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"BedestenApiClient: Error processing search response: {e}")
+            raise
+    
+    async def get_document_as_markdown(self, document_id: str) -> BedestenDocumentMarkdown:
+        """
+        Get document content and convert to markdown.
+        Handles both HTML (text/html) and PDF (application/pdf) content types.
+        """
+        logger.info(f"BedestenApiClient: Fetching document for markdown conversion (ID: {document_id})")
+        
+        try:
+            # Prepare request
+            doc_request = BedestenDocumentRequest(
+                data=BedestenDocumentRequestData(documentId=document_id)
+            )
+            
+            # Get document
+            response = await self.http_client.post(
+                self.DOCUMENT_ENDPOINT,
+                json=doc_request.model_dump()
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            doc_response = BedestenDocumentResponse(**response_json)
+            
+            # Decode base64 content
+            content_bytes = base64.b64decode(doc_response.data.content)
+            mime_type = doc_response.data.mimeType
+            
+            logger.info(f"BedestenApiClient: Document mime type: {mime_type}")
+            
+            # Convert to markdown based on mime type
+            if mime_type == "text/html":
+                html_content = content_bytes.decode('utf-8')
+                markdown_content = self._convert_html_to_markdown(html_content)
+            elif mime_type == "application/pdf":
+                markdown_content = self._convert_pdf_to_markdown(content_bytes)
+            else:
+                logger.warning(f"Unsupported mime type: {mime_type}")
+                markdown_content = f"Unsupported content type: {mime_type}. Unable to convert to markdown."
+            
+            return BedestenDocumentMarkdown(
+                documentId=document_id,
+                markdown_content=markdown_content,
+                source_url=f"{self.BASE_URL}/document/{document_id}",
+                mime_type=mime_type
+            )
+            
+        except httpx.RequestError as e:
+            logger.error(f"BedestenApiClient: HTTP error fetching document {document_id}: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"BedestenApiClient: Error processing document {document_id}: {e}")
+            raise
+    
+    def _convert_html_to_markdown(self, html_content: str) -> Optional[str]:
+        """Convert HTML to Markdown using MarkItDown"""
+        if not html_content:
+            return None
+            
+        try:
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_content.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            result = md_converter.convert(html_stream)
+            markdown_content = result.text_content
+            
+            logger.info("Successfully converted HTML to Markdown")
+            return markdown_content
+            
+        except Exception as e:
+            logger.error(f"Error converting HTML to Markdown: {e}")
+            return f"Error converting HTML content: {str(e)}"
+    
+    def _convert_pdf_to_markdown(self, pdf_bytes: bytes) -> Optional[str]:
+        """Convert PDF to Markdown using MarkItDown"""
+        if not pdf_bytes:
+            return None
+            
+        try:
+            # Create BytesIO stream from PDF bytes
+            pdf_stream = io.BytesIO(pdf_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            result = md_converter.convert(pdf_stream)
+            markdown_content = result.text_content
+            
+            logger.info("Successfully converted PDF to Markdown")
+            return markdown_content
+            
+        except Exception as e:
+            logger.error(f"Error converting PDF to Markdown: {e}")
+            return f"Error converting PDF content: {str(e)}. The document may be corrupted or in an unsupported format."
+    
+    async def close_client_session(self):
+        """Close HTTP client session"""
+        await self.http_client.aclose()
+        logger.info("BedestenApiClient: HTTP client session closed.")

bedesten_mcp_module/models.py

@@ -0,0 +1,111 @@
+# bedesten_mcp_module/models.py
+
+from pydantic import BaseModel, Field
+from typing import List, Optional, Dict, Any, Literal, Union
+from datetime import datetime
+
+# Import YargitayBirimEnum for chamber filtering
+from yargitay_mcp_module.models import YargitayBirimEnum
+
+# Court Type Options for Unified Search
+BedestenCourtTypeEnum = Literal[
+    "YARGITAYKARARI",  # Yargıtay (Court of Cassation)
+    "DANISTAYKARAR",   # Danıştay (Council of State)
+    "YERELHUKUK",      # Local Civil Courts
+    "ISTINAFHUKUK",    # Civil Courts of Appeals
+    "KYB"              # Extraordinary Appeals (Kanun Yararına Bozma)
+]
+
+# Danıştay Chamber/Board Options
+DanistayBirimEnum = Literal[
+    "ALL",  # "ALL" for all chambers
+    # Main Councils
+    "Büyük Gen.Kur.",  # Grand General Assembly
+    "İdare Dava Daireleri Kurulu",  # Administrative Cases Chambers Council
+    "Vergi Dava Daireleri Kurulu",  # Tax Cases Chambers Council
+    "İçtihatları Birleştirme Kurulu",  # Precedents Unification Council
+    "İdari İşler Kurulu",  # Administrative Affairs Council
+    "Başkanlar Kurulu",  # Presidents Council
+    # Chambers
+    "1. Daire", "2. Daire", "3. Daire", "4. Daire", "5. Daire",
+    "6. Daire", "7. Daire", "8. Daire", "9. Daire", "10. Daire",
+    "11. Daire", "12. Daire", "13. Daire", "14. Daire", "15. Daire",
+    "16. Daire", "17. Daire",
+    # Military High Administrative Court
+    "Askeri Yüksek İdare Mahkemesi",
+    "Askeri Yüksek İdare Mahkemesi Daireler Kurulu",
+    "Askeri Yüksek İdare Mahkemesi Başsavcılığı",
+    "Askeri Yüksek İdare Mahkemesi 1. Daire",
+    "Askeri Yüksek İdare Mahkemesi 2. Daire", 
+    "Askeri Yüksek İdare Mahkemesi 3. Daire"
+]
+
+# Search Request Models
+class BedestenSearchData(BaseModel):
+    pageSize: int = Field(..., description="Results per page (1-10)")
+    pageNumber: int = Field(..., description="Page number (1-indexed)")
+    itemTypeList: List[str] = Field(..., description="Court type filter (YARGITAYKARARI/DANISTAYKARAR/YERELHUKUK/ISTINAFHUKUK/KYB)")
+    phrase: str = Field(..., description="Search phrase (use \"exact phrase\" for precise matching)")
+    birimAdi: Optional[Union[YargitayBirimEnum, DanistayBirimEnum]] = Field(None, description="Chamber filter (optional)")
+    kararTarihiStart: Optional[str] = Field(None, description="Start date (ISO 8601 format)")
+    kararTarihiEnd: Optional[str] = Field(None, description="End date (ISO 8601 format)")
+    sortFields: List[str] = Field(default=["KARAR_TARIHI"], description="Sort fields")
+    sortDirection: str = Field(default="desc", description="Sort direction (asc/desc)")
+
+class BedestenSearchRequest(BaseModel):
+    data: BedestenSearchData
+    applicationName: str = "UyapMevzuat"
+    paging: bool = True
+
+# Search Response Models
+class BedestenItemType(BaseModel):
+    name: str
+    description: str
+
+class BedestenDecisionEntry(BaseModel):
+    documentId: str
+    itemType: BedestenItemType
+    birimId: Optional[str] = None
+    birimAdi: Optional[str]
+    esasNoYil: Optional[int] = None
+    esasNoSira: Optional[int] = None
+    kararNoYil: Optional[int] = None
+    kararNoSira: Optional[int] = None
+    kararTuru: Optional[str] = None
+    kararTarihi: str
+    kararTarihiStr: str
+    kesinlesmeDurumu: Optional[str] = None
+    kararNo: Optional[str] = None
+    esasNo: Optional[str] = None
+
+class BedestenSearchDataResponse(BaseModel):
+    emsalKararList: List[BedestenDecisionEntry]
+    total: int
+    start: int
+
+class BedestenSearchResponse(BaseModel):
+    data: Optional[BedestenSearchDataResponse]
+    metadata: Dict[str, Any]
+
+# Document Request/Response Models
+class BedestenDocumentRequestData(BaseModel):
+    documentId: str
+
+class BedestenDocumentRequest(BaseModel):
+    data: BedestenDocumentRequestData
+    applicationName: str = "UyapMevzuat"
+
+class BedestenDocumentData(BaseModel):
+    content: str  # Base64 encoded HTML or PDF
+    mimeType: str
+    version: int
+
+class BedestenDocumentResponse(BaseModel):
+    data: BedestenDocumentData
+    metadata: Dict[str, Any]
+
+class BedestenDocumentMarkdown(BaseModel):
+    documentId: str = Field(..., description="The document ID (Belge Kimliği) from Bedesten")
+    markdown_content: Optional[str] = Field(None, description="The decision content (Karar İçeriği) converted to Markdown")
+    source_url: str = Field(..., description="The source URL (Kaynak URL) of the document")
+    mime_type: Optional[str] = Field(None, description="Original content type (İçerik Türü) (text/html or application/pdf)")

danistay_mcp_module/client.py

@@ -6,8 +6,7 @@ from typing import Dict, Any, List, Optional
 import logging
 import html
 import re
-import tempfile
-import os
+import io
 from markitdown import MarkItDown
 
 from .models import (
@@ -124,33 +123,30 @@ class DanistayApiClient:
         html_input_for_markdown = processed_html
 
         markdown_text = None
-        temp_file_path = None
         try:
-            md_converter = MarkItDown(enable_plugins=False) # Basic conversion
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_input_for_markdown.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
             
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_file:
-                tmp_file.write(html_input_for_markdown) # Write the full HTML string
-                temp_file_path = tmp_file.name
-            
-            conversion_result = md_converter.convert(temp_file_path)
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            conversion_result = md_converter.convert(html_stream)
             markdown_text = conversion_result.text_content
             logger.info("DanistayApiClient: HTML to Markdown conversion successful.")
         except Exception as e:
             logger.error(f"DanistayApiClient: Error during MarkItDown HTML to Markdown conversion: {e}")
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path):
-                os.remove(temp_file_path)
         
         return markdown_text
 
-    async def get_decision_document_as_markdown(self, document_id: str) -> DanistayDocumentMarkdown:
+    async def get_decision_document_as_markdown(self, id: str) -> DanistayDocumentMarkdown:
         """
         Retrieves a specific Danıştay decision by ID and returns its content as Markdown.
-        The /getDokuman endpoint for Danıştay returns direct HTML.
+        The /getDokuman endpoint for Danıştay requires arananKelime parameter.
         """
-        document_api_url = f"{self.DOCUMENT_ENDPOINT}?id={document_id}"
+        # Add required arananKelime parameter - using empty string as minimum requirement
+        document_api_url = f"{self.DOCUMENT_ENDPOINT}?id={id}&arananKelime="
         source_url = f"{self.BASE_URL}{document_api_url}"
-        logger.info(f"DanistayApiClient: Fetching Danistay document for Markdown (ID: {document_id}) from {source_url}")
+        logger.info(f"DanistayApiClient: Fetching Danistay document for Markdown (ID: {id}) from {source_url}")
 
         try:
             # For direct HTML response, we might want different headers if the API is sensitive,
@@ -162,10 +158,10 @@ class DanistayApiClient:
             html_content_from_api = response.text
 
             if not isinstance(html_content_from_api, str) or not html_content_from_api.strip():
-                logger.warning(f"DanistayApiClient: Received empty or non-string HTML content for ID {document_id}.")
+                logger.warning(f"DanistayApiClient: Received empty or non-string HTML content for ID {id}.")
                 # Return with None markdown_content if HTML is effectively empty
                 return DanistayDocumentMarkdown(
-                    document_id=document_id,
+                    id=id,
                     markdown_content=None,
                     source_url=source_url
                 )
@@ -173,16 +169,16 @@ class DanistayApiClient:
             markdown_content = self._convert_html_to_markdown_danistay(html_content_from_api)
 
             return DanistayDocumentMarkdown(
-                document_id=document_id,
+                id=id,
                 markdown_content=markdown_content,
                 source_url=source_url
             )
         except httpx.RequestError as e:
-            logger.error(f"DanistayApiClient: HTTP error fetching Danistay document (ID: {document_id}): {e}")
+            logger.error(f"DanistayApiClient: HTTP error fetching Danistay document (ID: {id}): {e}")
             raise
         # Removed ValueError for JSON as Danistay /getDokuman returns direct HTML
         except Exception as e: # Catches other errors like MarkItDown issues if they propagate
-            logger.error(f"DanistayApiClient: General error processing Danistay document (ID: {document_id}): {e}")
+            logger.error(f"DanistayApiClient: General error processing Danistay document (ID: {id}): {e}")
             raise
 
     async def close_client_session(self):

danistay_mcp_module/models.py

@@ -1,11 +1,11 @@
 # danistay_mcp_module/models.py
 
-from pydantic import BaseModel, Field, HttpUrl
+from pydantic import BaseModel, Field, HttpUrl, ConfigDict
 from typing import List, Optional, Dict, Any
 
 class DanistayBaseSearchRequest(BaseModel):
     """Base model for common search parameters for Danistay."""
-    pageSize: int = Field(default=10, ge=1, le=100)
+    pageSize: int = Field(default=10, ge=1, le=10)
     pageNumber: int = Field(default=1, ge=1)
     # siralama and siralamaDirection are part of detailed search, not necessarily keyword search
     # as per user's provided payloads.
@@ -21,11 +21,11 @@ class DanistayKeywordSearchRequestData(BaseModel):
 
 class DanistayKeywordSearchRequest(BaseModel): # This is the model the MCP tool will accept
     """Model for keyword-based search request for Danistay."""
-    andKelimeler: List[str] = Field(default_factory=list, description="Keywords for AND logic, e.g., ['word1', 'word2']")
-    orKelimeler: List[str] = Field(default_factory=list, description="Keywords for OR logic.")
-    notAndKelimeler: List[str] = Field(default_factory=list, description="Keywords for NOT AND logic.")
-    notOrKelimeler: List[str] = Field(default_factory=list, description="Keywords for NOT OR logic.")
-    pageSize: int = Field(default=10, ge=1, le=100)
+    andKelimeler: List[str] = Field(default_factory=list, description="AND keywords")
+    orKelimeler: List[str] = Field(default_factory=list, description="OR keywords")
+    notAndKelimeler: List[str] = Field(default_factory=list, description="NOT AND keywords")
+    notOrKelimeler: List[str] = Field(default_factory=list, description="NOT OR keywords")
+    pageSize: int = Field(default=10, ge=1, le=10)
     pageNumber: int = Field(default=1, ge=1)
 
 class DanistayDetailedSearchRequestData(BaseModel): # Internal data model for detailed search payload
@@ -51,20 +51,20 @@ class DanistayDetailedSearchRequestData(BaseModel): # Internal data model for de
 
 class DanistayDetailedSearchRequest(DanistayBaseSearchRequest): # MCP tool will accept this
     """Model for detailed search request for Danistay."""
-    daire: Optional[str] = Field(None, description="Chamber/Department name (e.g., '1. Daire').")
-    esasYil: Optional[str] = Field(None, description="Case year for 'Esas No'.")
-    esasIlkSiraNo: Optional[str] = Field(None, description="Starting sequence for 'Esas No'.")
-    esasSonSiraNo: Optional[str] = Field(None, description="Ending sequence for 'Esas No'.")
-    kararYil: Optional[str] = Field(None, description="Decision year for 'Karar No'.")
-    kararIlkSiraNo: Optional[str] = Field(None, description="Starting sequence for 'Karar No'.")
-    kararSonSiraNo: Optional[str] = Field(None, description="Ending sequence for 'Karar No'.")
-    baslangicTarihi: Optional[str] = Field(None, description="Start date for decision (DD.MM.YYYY).")
-    bitisTarihi: Optional[str] = Field(None, description="End date for decision (DD.MM.YYYY).")
-    mevzuatNumarasi: Optional[str] = Field(None, description="Legislation number.")
-    mevzuatAdi: Optional[str] = Field(None, description="Legislation name.")
-    madde: Optional[str] = Field(None, description="Article number.")
-    siralama: str = Field("1", description="Sorting criteria (e.g., 1: Esas No, 3: Karar Tarihi).")
-    siralamaDirection: str = Field("desc", description="Sorting direction ('asc' or 'desc').")
+    daire: Optional[str] = Field(None, description="Chamber")
+    esasYil: Optional[str] = Field(None, description="Case year")
+    esasIlkSiraNo: Optional[str] = Field(None, description="Start case no")
+    esasSonSiraNo: Optional[str] = Field(None, description="End case no")
+    kararYil: Optional[str] = Field(None, description="Decision year")
+    kararIlkSiraNo: Optional[str] = Field(None, description="Start decision no")
+    kararSonSiraNo: Optional[str] = Field(None, description="End decision no")
+    baslangicTarihi: Optional[str] = Field(None, description="Start date")
+    bitisTarihi: Optional[str] = Field(None, description="End date")
+    mevzuatNumarasi: Optional[str] = Field(None, description="Law number")
+    mevzuatAdi: Optional[str] = Field(None, description="Law name")
+    madde: Optional[str] = Field(None, description="Article")
+    siralama: str = Field("1", description="Sort by")
+    siralamaDirection: str = Field("desc", description="Direction")
     # Add a general keyword field if detailed search also supports it
     # arananKelime: Optional[str] = Field(None, description="General keyword for detailed search.")
 
@@ -76,36 +76,34 @@ class DanistayApiDecisionEntry(BaseModel):
     id: str
     # The API response for keyword search uses "daireKurul", detailed search example uses "daire".
     # We use an alias to handle both and map to a consistent field name "chamber".
-    chamber: Optional[str] = Field(None, alias="daire", alt_alias="daireKurul", description="The chamber or board.")
+    chamber: Optional[str] = Field(None, alias="daire", description="Chamber")
     esasNo: Optional[str] = Field(None)
     kararNo: Optional[str] = Field(None)
     kararTarihi: Optional[str] = Field(None)
-    arananKelime: Optional[str] = Field(None, description="Matched keyword if provided in response.")
+    arananKelime: Optional[str] = Field(None, description="Keyword")
     # index: Optional[int] = None # Present in response, can be added if needed by MCP tool
     # siraNo: Optional[int] = None # Present in detailed response, can be added
 
-    document_url: Optional[HttpUrl] = Field(None, description="URL to the full document, constructed by the client.")
+    document_url: Optional[HttpUrl] = Field(None, description="Document URL")
 
-    class Config:
-        populate_by_name = True # Important for alias to work
-        extra = 'ignore' # Ignore any extra fields from API not defined in model
+    model_config = ConfigDict(populate_by_name=True, extra='ignore')  # Important for alias to work and ignore extra fields
 
 class DanistayApiResponseInnerData(BaseModel):
     """Model for the inner 'data' object in the Danistay API search response."""
     data: List[DanistayApiDecisionEntry]
     recordsTotal: int
     recordsFiltered: int
-    draw: Optional[int] = Field(None, description="Draw counter from API, usually for DataTables.")
+    draw: Optional[int] = Field(None, description="Draw counter")
 
 class DanistayApiResponse(BaseModel):
     """Model for the complete search response from the Danistay API."""
-    data: DanistayApiResponseInnerData
-    metadata: Optional[Dict[str, Any]] = Field(None, description="Optional metadata from API.")
+    data: Optional[DanistayApiResponseInnerData] = Field(None, description="Response data, can be null when no results found")
+    metadata: Optional[Dict[str, Any]] = Field(None, description="Optional metadata (Meta Veri) from API.")
 
 class DanistayDocumentMarkdown(BaseModel):
     """Model for a Danistay decision document, containing only Markdown content."""
-    document_id: str
-    markdown_content: Optional[str] = Field(None, description="The decision content converted to Markdown.")
+    id: str
+    markdown_content: Optional[str] = Field(None, description="The decision content (Karar İçeriği) converted to Markdown.")
     source_url: HttpUrl
 
 class CompactDanistaySearchResult(BaseModel):

docker-compose.yml

@@ -0,0 +1,66 @@
+version: '3.8'
+
+services:
+  yargi-mcp:
+    build: .
+    image: yargi-mcp:latest
+    container_name: yargi-mcp-server
+    ports:
+      - "${PORT:-8000}:8000"
+    environment:
+      - HOST=0.0.0.0
+      - PORT=8000
+      - LOG_LEVEL=${LOG_LEVEL:-info}
+      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-*}
+      - API_TOKEN=${API_TOKEN:-}
+      - PYTHONUNBUFFERED=1
+    volumes:
+      # Mount logs directory
+      - ./logs:/app/logs
+      # Mount .env file if it exists
+      - ./.env:/app/.env:ro
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "python", "-c", "import httpx; httpx.get('http://localhost:8000/health').raise_for_status()"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    networks:
+      - yargi-network
+
+  # Optional: Nginx reverse proxy
+  nginx:
+    image: nginx:alpine
+    container_name: yargi-nginx
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./ssl:/etc/nginx/ssl:ro
+    depends_on:
+      - yargi-mcp
+    networks:
+      - yargi-network
+    profiles:
+      - production
+
+  # Optional: Redis for caching (future enhancement)
+  redis:
+    image: redis:alpine
+    container_name: yargi-redis
+    command: redis-server --appendonly yes
+    volumes:
+      - redis-data:/data
+    networks:
+      - yargi-network
+    profiles:
+      - with-cache
+
+networks:
+  yargi-network:
+    driver: bridge
+
+volumes:
+  redis-data:

docs/DEPLOYMENT.md

@@ -0,0 +1,428 @@
+# Yargı MCP Server Dağıtım Rehberi
+
+Bu rehber, Yargı MCP Server'ın ASGI web servisi olarak çeşitli dağıtım seçeneklerini kapsar.
+
+## İçindekiler
+
+- [Hızlı Başlangıç](#hızlı-başlangıç)
+- [Yerel Geliştirme](#yerel-geliştirme)
+- [Production Dağıtımı](#production-dağıtımı)
+- [Cloud Dağıtımı](#cloud-dağıtımı)
+- [Docker Dağıtımı](#docker-dağıtımı)
+- [Güvenlik Hususları](#güvenlik-hususları)
+- [İzleme](#izleme)
+
+## Hızlı Başlangıç
+
+### 1. Bağımlılıkları Yükleyin
+
+```bash
+# ASGI sunucusu için uvicorn yükleyin
+pip install uvicorn
+
+# Veya tüm bağımlılıklarla birlikte yükleyin
+pip install -e .
+pip install uvicorn
+```
+
+### 2. Sunucuyu Çalıştırın
+
+```bash
+# Temel başlatma
+python run_asgi.py
+
+# Veya doğrudan uvicorn ile
+uvicorn asgi_app:app --host 0.0.0.0 --port 8000
+```
+
+Sunucu şu adreslerde kullanılabilir olacak:
+- MCP Endpoint: `http://localhost:8000/mcp/`
+- Sağlık Kontrolü: `http://localhost:8000/health`
+- API Durumu: `http://localhost:8000/status`
+
+## Yerel Geliştirme
+
+### Otomatik Yeniden Yükleme ile Geliştirme Sunucusu
+
+```bash
+python run_asgi.py --reload --log-level debug
+```
+
+### FastAPI Entegrasyonunu Kullanma
+
+Ek REST API endpoint'leri için:
+
+```bash
+uvicorn fastapi_app:app --reload
+```
+
+Bu şunları sağlar:
+- `/docs` adresinde interaktif API dokümantasyonu
+- `/api/tools` adresinde araç listesi
+- `/api/databases` adresinde veritabanı bilgileri
+
+### Ortam Değişkenleri
+
+`.env.example` dosyasını temel alarak bir `.env` dosyası oluşturun:
+
+```bash
+cp .env.example .env
+```
+
+Temel değişkenler:
+- `HOST`: Sunucu host adresi (varsayılan: 127.0.0.1)
+- `PORT`: Sunucu portu (varsayılan: 8000)
+- `ALLOWED_ORIGINS`: CORS kökenleri (virgülle ayrılmış)
+- `LOG_LEVEL`: Log seviyesi (debug, info, warning, error)
+
+## Production Dağıtımı
+
+### 1. Uvicorn ile Çoklu Worker Kullanımı
+
+```bash
+python run_asgi.py --host 0.0.0.0 --port 8000 --workers 4
+```
+
+### 2. Gunicorn Kullanımı
+
+```bash
+pip install gunicorn
+gunicorn asgi_app:app -w 4 -k uvicorn.workers.UvicornWorker --bind 0.0.0.0:8000
+```
+
+### 3. Nginx Reverse Proxy ile
+
+1. Nginx'i yükleyin
+2. Sağlanan `nginx.conf` dosyasını kullanın:
+
+```bash
+sudo cp nginx.conf /etc/nginx/sites-available/yargi-mcp
+sudo ln -s /etc/nginx/sites-available/yargi-mcp /etc/nginx/sites-enabled/
+sudo nginx -t
+sudo systemctl reload nginx
+```
+
+### 4. Systemd Servisi
+
+`/etc/systemd/system/yargi-mcp.service` dosyasını oluşturun:
+
+```ini
+[Unit]
+Description=Yargı MCP Server
+After=network.target
+
+[Service]
+Type=exec
+User=www-data
+WorkingDirectory=/opt/yargi-mcp
+Environment="PATH=/opt/yargi-mcp/venv/bin"
+ExecStart=/opt/yargi-mcp/venv/bin/uvicorn asgi_app:app --host 0.0.0.0 --port 8000 --workers 4
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+```
+
+Etkinleştirin ve başlatın:
+
+```bash
+sudo systemctl enable yargi-mcp
+sudo systemctl start yargi-mcp
+```
+
+## Cloud Dağıtımı
+
+### Heroku
+
+1. `Procfile` oluşturun:
+```
+web: uvicorn asgi_app:app --host 0.0.0.0 --port $PORT
+```
+
+2. Dağıtın:
+```bash
+heroku create uygulama-isminiz
+git push heroku main
+```
+
+### Railway
+
+1. `railway.json` ekleyin:
+```json
+{
+  "build": {
+    "builder": "NIXPACKS"
+  },
+  "deploy": {
+    "startCommand": "uvicorn asgi_app:app --host 0.0.0.0 --port $PORT"
+  }
+}
+```
+
+2. Railway CLI veya GitHub entegrasyonu ile dağıtın
+
+### Google Cloud Run
+
+1. Container oluşturun:
+```bash
+docker build -t yargi-mcp .
+docker tag yargi-mcp gcr.io/PROJE_ADINIZ/yargi-mcp
+docker push gcr.io/PROJE_ADINIZ/yargi-mcp
+```
+
+2. Dağıtın:
+```bash
+gcloud run deploy yargi-mcp \
+  --image gcr.io/PROJE_ADINIZ/yargi-mcp \
+  --platform managed \
+  --region us-central1 \
+  --allow-unauthenticated
+```
+
+### AWS Lambda (Mangum kullanarak)
+
+1. Mangum'u yükleyin:
+```bash
+pip install mangum
+```
+
+2. `lambda_handler.py` oluşturun:
+```python
+from mangum import Mangum
+from asgi_app import app
+
+handler = Mangum(app, lifespan="off")
+```
+
+3. AWS SAM veya Serverless Framework kullanarak dağıtın
+
+## Docker Dağıtımı
+
+### Tek Container
+
+```bash
+# Oluşturun
+docker build -t yargi-mcp .
+
+# Çalıştırın
+docker run -p 8000:8000 --env-file .env yargi-mcp
+```
+
+### Docker Compose
+
+```bash
+# Geliştirme
+docker-compose up
+
+# Nginx ile Production
+docker-compose --profile production up
+
+# Redis önbellekleme ile
+docker-compose --profile with-cache up
+```
+
+### Kubernetes
+
+Deployment YAML oluşturun:
+
+```yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: yargi-mcp
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: yargi-mcp
+  template:
+    metadata:
+      labels:
+        app: yargi-mcp
+    spec:
+      containers:
+      - name: yargi-mcp
+        image: yargi-mcp:latest
+        ports:
+        - containerPort: 8000
+        env:
+        - name: HOST
+          value: "0.0.0.0"
+        - name: PORT
+          value: "8000"
+        livenessProbe:
+          httpGet:
+            path: /health
+            port: 8000
+          initialDelaySeconds: 10
+          periodSeconds: 30
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: yargi-mcp-service
+spec:
+  selector:
+    app: yargi-mcp
+  ports:
+  - port: 80
+    targetPort: 8000
+  type: LoadBalancer
+```
+
+## Güvenlik Hususları
+
+### 1. Kimlik Doğrulama
+
+`API_TOKEN` ortam değişkenini ayarlayarak token kimlik doğrulamasını etkinleştirin:
+
+```bash
+export API_TOKEN=gizli-token-degeri
+```
+
+Ardından isteklere ekleyin:
+```bash
+curl -H "Authorization: Bearer gizli-token-degeri" http://localhost:8000/api/tools
+```
+
+### 2. HTTPS/SSL
+
+Production için her zaman HTTPS kullanın:
+
+1. SSL sertifikası edinin (Let's Encrypt vb.)
+2. Nginx veya cloud sağlayıcıda yapılandırın
+3. `ALLOWED_ORIGINS` değerini https:// kullanacak şekilde güncelleyin
+
+### 3. Rate Limiting (Hız Sınırlama)
+
+Sağlanan Nginx yapılandırması rate limiting içerir:
+- API endpoint'leri: 10 istek/saniye
+- MCP endpoint: 100 istek/saniye
+
+### 4. CORS Yapılandırması
+
+Production için belirli kaynaklara izin verin:
+
+```bash
+ALLOWED_ORIGINS=https://app.sizindomain.com,https://www.sizindomain.com
+```
+
+## İzleme
+
+### Sağlık Kontrolleri
+
+`/health` endpoint'ini izleyin:
+
+```bash
+curl http://localhost:8000/health
+```
+
+Yanıt:
+```json
+{
+  "status": "healthy",
+  "timestamp": "2024-12-26T10:00:00",
+  "uptime_seconds": 3600,
+  "tools_operational": true
+}
+```
+
+### Loglama
+
+Ortam değişkeni ile log seviyesini yapılandırın:
+
+```bash
+LOG_LEVEL=info  # veya debug, warning, error
+```
+
+Loglar şuraya yazılır:
+- Konsol (stdout)
+- `logs/mcp_server.log` dosyası
+
+### Metrikler (Opsiyonel)
+
+OpenTelemetry desteği için:
+
+```bash
+pip install opentelemetry-instrumentation-fastapi
+```
+
+Ortam değişkenlerini ayarlayın:
+```bash
+OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317
+OTEL_SERVICE_NAME=yargi-mcp-server
+```
+
+## Sorun Giderme
+
+### Port Zaten Kullanımda
+
+```bash
+# 8000 portunu kullanan işlemi bulun
+lsof -i :8000
+
+# İşlemi sonlandırın
+kill -9 <PID>
+```
+
+### İzin Hataları
+
+Dosya izinlerinin doğru olduğundan emin olun:
+
+```bash
+chmod +x run_asgi.py
+chown -R www-data:www-data /opt/yargi-mcp
+```
+
+### Bellek Sorunları
+
+Büyük belge işleme için worker belleğini artırın:
+
+```bash
+# systemd servisinde
+Environment="PYTHONMALLOC=malloc"
+LimitNOFILE=65536
+```
+
+### Zaman Aşımı Sorunları
+
+Zaman aşımlarını ayarlayın:
+1. Uvicorn: `--timeout-keep-alive 75`
+2. Nginx: `proxy_read_timeout 300s;`
+3. Cloud sağlayıcılar: Platform özel zaman aşımı ayarlarını kontrol edin
+
+## Performans Ayarlama
+
+### 1. Worker İşlemleri
+
+- Geliştirme: 1 worker
+- Production: CPU çekirdeği başına 2-4 worker
+
+### 2. Bağlantı Havuzlama
+
+Sunucu varsayılan olarak httpx ile bağlantı havuzlama kullanır.
+
+### 3. Önbellekleme (Gelecek Geliştirme)
+
+Redis önbellekleme docker-compose ile etkinleştirilebilir:
+
+```bash
+docker-compose --profile with-cache up
+```
+
+### 4. Veritabanı Zaman Aşımları
+
+`.env` dosyasında veritabanı başına zaman aşımlarını ayarlayın:
+
+```bash
+YARGITAY_TIMEOUT=60
+DANISTAY_TIMEOUT=60
+ANAYASA_TIMEOUT=90
+```
+
+## Destek
+
+Sorunlar ve sorular için:
+- GitHub Issues: https://github.com/saidsurucu/yargi-mcp/issues
+- Dokümantasyon: README.md dosyasına bakın

emsal_mcp_module/client.py

@@ -6,8 +6,7 @@ from typing import Dict, Any, List, Optional
 import logging
 import html
 import re
-import tempfile
-import os
+import io
 from markitdown import MarkItDown
 
 from .models import (
@@ -114,33 +113,29 @@ class EmsalApiClient:
         html_input_for_markdown = content 
 
         markdown_text = None
-        temp_file_path = None
         try:
-            md_converter = MarkItDown(enable_plugins=False)
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_input_for_markdown.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
             
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_file:
-                tmp_file.write(html_input_for_markdown)
-                temp_file_path = tmp_file.name
-            
-            conversion_result = md_converter.convert(temp_file_path)
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            conversion_result = md_converter.convert(html_stream)
             markdown_text = conversion_result.text_content
             logger.info("EmsalApiClient: HTML to Markdown conversion successful.")
         except Exception as e:
             logger.error(f"EmsalApiClient: Error during MarkItDown HTML to Markdown conversion for Emsal: {e}")
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path):
-                os.remove(temp_file_path)
         
         return markdown_text
 
-    async def get_decision_document_as_markdown(self, document_id: str) -> EmsalDocumentMarkdown:
+    async def get_decision_document_as_markdown(self, id: str) -> EmsalDocumentMarkdown:
         """
         Retrieves a specific Emsal decision by ID and returns its content as Markdown.
         Assumes Emsal /getDokuman endpoint returns JSON with HTML content in the 'data' field.
         """
-        document_api_url = f"{self.DOCUMENT_ENDPOINT}?id={document_id}"
+        document_api_url = f"{self.DOCUMENT_ENDPOINT}?id={id}"
         source_url = f"{self.BASE_URL}{document_api_url}"
-        logger.info(f"EmsalApiClient: Fetching Emsal document for Markdown (ID: {document_id}) from {source_url}")
+        logger.info(f"EmsalApiClient: Fetching Emsal document for Markdown (ID: {id}) from {source_url}")
 
         try:
             response = await self.http_client.get(document_api_url)
@@ -151,24 +146,24 @@ class EmsalApiClient:
             html_content_from_api = response_json.get("data")
 
             if not isinstance(html_content_from_api, str) or not html_content_from_api.strip():
-                logger.warning(f"EmsalApiClient: Received empty or non-string HTML in 'data' field for Emsal ID {document_id}.")
-                return EmsalDocumentMarkdown(document_id=document_id, markdown_content=None, source_url=source_url)
+                logger.warning(f"EmsalApiClient: Received empty or non-string HTML in 'data' field for Emsal ID {id}.")
+                return EmsalDocumentMarkdown(id=id, markdown_content=None, source_url=source_url)
 
             markdown_content = self._clean_html_and_convert_to_markdown_emsal(html_content_from_api)
 
             return EmsalDocumentMarkdown(
-                document_id=document_id,
+                id=id,
                 markdown_content=markdown_content,
                 source_url=source_url
             )
         except httpx.RequestError as e:
-            logger.error(f"EmsalApiClient: HTTP error fetching Emsal document (ID: {document_id}): {e}")
+            logger.error(f"EmsalApiClient: HTTP error fetching Emsal document (ID: {id}): {e}")
             raise
         except ValueError as e: 
-            logger.error(f"EmsalApiClient: ValueError processing Emsal document response (ID: {document_id}): {e}")
+            logger.error(f"EmsalApiClient: ValueError processing Emsal document response (ID: {id}): {e}")
             raise
         except Exception as e:
-            logger.error(f"EmsalApiClient: General error processing Emsal document (ID: {document_id}): {e}")
+            logger.error(f"EmsalApiClient: General error processing Emsal document (ID: {id}): {e}")
             raise
 
     async def close_client_session(self):

emsal_mcp_module/models.py

@@ -1,6 +1,6 @@
 # emsal_mcp_module/models.py
 
-from pydantic import BaseModel, Field, HttpUrl
+from pydantic import BaseModel, Field, HttpUrl, ConfigDict
 from typing import List, Optional, Dict, Any
 
 class EmsalDetailedSearchRequestData(BaseModel):
@@ -17,7 +17,7 @@ class EmsalDetailedSearchRequestData(BaseModel):
     # Add other specific court type fields from the form if they are separate keys in payload
     # E.g., "Ceza Mahkemeleri", "İdari Mahkemeler" etc.
     
-    birimHukukMah: Optional[str] = Field("", description="List of selected Regional Civil Chambers, '+' separated.") 
+    birimHukukMah: Optional[str] = Field("", description="Regional chambers (+ separated)") 
 
     esasYil: Optional[str] = ""
     esasIlkSiraNo: Optional[str] = ""
@@ -32,68 +32,65 @@ class EmsalDetailedSearchRequestData(BaseModel):
     pageSize: int
     pageNumber: int
     
-    class Config:
-        populate_by_name = True # Enables use of alias in serialization (when dumping to dict for payload)
-        # anystr_strip_whitespace = True # Optional: strip whitespace from strings
+    model_config = ConfigDict(populate_by_name=True)  # Enables use of alias in serialization (when dumping to dict for payload)
 
 class EmsalSearchRequest(BaseModel): # This is the model the MCP tool will accept
     """Model for Emsal detailed search request, with user-friendly field names."""
-    keyword: Optional[str] = Field(None, description="Keyword to search.")
+    keyword: Optional[str] = Field(None, description="Keyword")
     
-    selected_bam_civil_court: Optional[str] = Field(None, description="Selected BAM Civil Court (maps to 'Bam Hukuk Mahkemeleri' payload key).")
-    selected_civil_court: Optional[str] = Field(None, description="Selected Civil Court (maps to 'Hukuk Mahkemeleri' payload key).")
-    selected_regional_civil_chambers: Optional[List[str]] = Field(default_factory=list, description="Selected Regional Civil Chambers (for 'birimHukukMah', joined by '+').")
+    selected_bam_civil_court: Optional[str] = Field(None, description="BAM Civil Court")
+    selected_civil_court: Optional[str] = Field(None, description="Civil Court")
+    selected_regional_civil_chambers: Optional[List[str]] = Field(default_factory=list, description="Regional chambers")
 
-    case_year_esas: Optional[str] = Field(None, description="Case year for 'Esas No'.")
-    case_start_seq_esas: Optional[str] = Field(None, description="Starting sequence for 'Esas No'.")
-    case_end_seq_esas: Optional[str] = Field(None, description="Ending sequence for 'Esas No'.")
+    case_year_esas: Optional[str] = Field(None, description="Case year")
+    case_start_seq_esas: Optional[str] = Field(None, description="Start case no")
+    case_end_seq_esas: Optional[str] = Field(None, description="End case no")
     
-    decision_year_karar: Optional[str] = Field(None, description="Decision year for 'Karar No'.")
-    decision_start_seq_karar: Optional[str] = Field(None, description="Starting sequence for 'Karar No'.")
-    decision_end_seq_karar: Optional[str] = Field(None, description="Ending sequence for 'Karar No'.")
+    decision_year_karar: Optional[str] = Field(None, description="Decision year")
+    decision_start_seq_karar: Optional[str] = Field(None, description="Start decision no")
+    decision_end_seq_karar: Optional[str] = Field(None, description="End decision no")
     
-    start_date: Optional[str] = Field(None, description="Start date for decision (DD.MM.YYYY).")
-    end_date: Optional[str] = Field(None, description="End date for decision (DD.MM.YYYY).")
+    start_date: Optional[str] = Field(None, description="Start date (DD.MM.YYYY)")
+    end_date: Optional[str] = Field(None, description="End date (DD.MM.YYYY)")
     
-    sort_criteria: str = Field("1", description="Sorting criteria (e.g., 1: Esas No).")
-    sort_direction: str = Field("desc", description="Sorting direction ('asc' or 'desc').")
+    sort_criteria: str = Field("1", description="Sort by")
+    sort_direction: str = Field("desc", description="Direction")
     
     page_number: int = Field(default=1, ge=1)
-    page_size: int = Field(default=10, ge=1, le=100)
+    page_size: int = Field(default=10, ge=1, le=10)
 
 
 class EmsalApiDecisionEntry(BaseModel):
     """Model for an individual decision entry from the Emsal API search response."""
     id: str
-    daire: Optional[str] = Field(None, description="The chamber/court that made the decision.")
+    daire: Optional[str] = Field(None, description="Chamber")
     esasNo: Optional[str] = Field(None)
     kararNo: Optional[str] = Field(None)
     kararTarihi: Optional[str] = Field(None)
-    arananKelime: Optional[str] = Field(None, description="Matched keyword from the search.")
-    durum: Optional[str] = Field(None, description="Status of the decision (e.g., 'KESİNLEŞMEDİ').")
+    arananKelime: Optional[str] = Field(None, description="Keyword")
+    durum: Optional[str] = Field(None, description="Status")
     # index: Optional[int] = None # Present in Emsal response, can be added if tool needs it
 
-    document_url: Optional[HttpUrl] = Field(None, description="URL to the full document, constructed by the client.")
+    document_url: Optional[HttpUrl] = Field(None, description="Document URL")
 
-    class Config:
-        extra = 'ignore'
+    model_config = ConfigDict(extra='ignore')
 
 class EmsalApiResponseInnerData(BaseModel):
     """Model for the inner 'data' object in the Emsal API search response."""
     data: List[EmsalApiDecisionEntry]
     recordsTotal: int
     recordsFiltered: int
-    draw: Optional[int] = Field(None, description="Draw counter from API, usually for DataTables.")
+    draw: Optional[int] = Field(None, description="Draw counter (Çizim Sayıcısı) from API, usually for DataTables.")
 
 class EmsalApiResponse(BaseModel):
     """Model for the complete search response from the Emsal API."""
     data: EmsalApiResponseInnerData
-    metadata: Optional[Dict[str, Any]] = Field(None, description="Optional metadata from API, if any.")
+    metadata: Optional[Dict[str, Any]] = Field(None, description="Optional metadata (Meta Veri) from API, if any.")
 
 class EmsalDocumentMarkdown(BaseModel):
     """Model for an Emsal decision document, containing only Markdown content."""
-    document_id: str
-    markdown_content: Optional[str] = Field(None, description="The decision content converted to Markdown.")
+    id: str
+    markdown_content: Optional[str] = Field(None, description="The decision content (Karar İçeriği) converted to Markdown.")
     source_url: HttpUrl
 
 class CompactEmsalSearchResult(BaseModel):

fly.toml

@@ -0,0 +1,34 @@
+# fly.toml app configuration file generated for yargi-mcp on 2025-06-29T00:23:47+03:00
+#
+# See https://fly.io/docs/reference/configuration/ for information about how to use this file.
+#
+
+app = 'yargi-mcp'
+primary_region = 'fra'
+
+[env]
+ENABLE_AUTH = "true"
+HOST = "0.0.0.0"
+PORT = "8000"
+LOG_LEVEL = "info"
+
+[build]
+
+[http_service]
+  internal_port = 8000
+  force_https = true
+  auto_stop_machines = 'stop'
+  auto_start_machines = true
+  min_machines_running = 0
+  processes = ['app']
+
+[[vm]]
+  memory = '1gb'
+  cpu_kind = 'shared'
+  cpus = 1
+
+[checks.http_health]             # keep MCP /health live
+  type     = "http"
+  interval = "30s"
+  timeout  = "10s"
+  path     = "/health"

install.bat

@@ -1,18 +0,0 @@
-@echo off
-echo Yargi MCP Kurulum Script'i (install.py) baslatiliyor...
-
-REM Python'in PATH'de oldugunu varsayiyoruz.
-REM Kullanici sistemine gore "python" veya "py -3" veya "python3" olabilir.
-REM Oncelikle "python" deneyelim.
-python install.py
-if errorlevel 1 (
-    echo "python install.py" komutu basarisiz oldu. "py -3 install.py" deneniyor...
-    py -3 install.py
-    if errorlevel 1 (
-        echo "py -3 install.py" komutu da basarisiz oldu.
-        echo Lutfen Python 3'un sisteminizde kurulu ve PATH'de oldugundan emin olun.
-    )
-)
-
-echo.
-pause

install.py

@@ -1,302 +0,0 @@
-# install.py
-
-import subprocess
-import sys
-import os
-import shutil
-import platform
-from urllib.parse import urlencode, urljoin, quote 
-
-# --- Yapılandırma ---
-MCP_SERVER_SCRIPT_NAME = "mcp_server_main.py"
-CLAUDE_TOOL_NAME = "Yargı MCP" 
-DEPENDENCIES_FOR_FASTMCP = [
-    "httpx", "beautifulsoup4", "markitdown", "pydantic", "aiohttp"
-]
-
-# --- Yardımcı Fonksiyonlar ---
-def print_info(message):
-    print(f"[INFO] {message}")
-
-def print_warning(message):
-    print(f"[UYARI] {message}")
-
-def print_error(message):
-    print(f"[HATA] {message}")
-
-def command_exists(command_parts):
-    """Bir komutun sistemde var olup olmadığını kontrol eder ve yolunu döndürür."""
-    try:
-        command_to_check = command_parts[0] if isinstance(command_parts, list) else command_parts
-        found_path = shutil.which(command_to_check)
-        if found_path:
-            return found_path
-        if platform.system() == "Windows" and not command_to_check.endswith(".exe"):
-            # .exe olmadan da PATH'de bulunabilir (örn: pyenv shims)
-            # ama yine de .exe ile de kontrol edelim
-            path_with_exe = shutil.which(command_to_check + ".exe")
-            if path_with_exe:
-                return path_with_exe
-        return None
-    except Exception:
-        return None
-
-def run_command(command_parts, capture_output_flag=False, check_return_code=True, shell=False, cwd=None, log_output_on_success=False):
-    """Verilen komutu çalıştırır."""
-    cmd_str_for_log = ' '.join(command_parts) if isinstance(command_parts, list) else command_parts
-    print_info(f"Komut çalıştırılıyor: {cmd_str_for_log}")
-    
-    kwargs = {
-        "text": True,
-        "shell": shell,
-        "cwd": cwd,
-        "encoding": 'utf-8',
-        "errors": 'replace' # Handles potential decoding errors in output
-    }
-
-    if capture_output_flag:
-        kwargs["capture_output"] = True
-    # Else, stdout/stderr go to console by default (unless shell redirects them)
-
-    try:
-        process = subprocess.run(command_parts, **kwargs)
-        
-        if capture_output_flag:
-            if log_output_on_success and process.returncode == 0:
-                if process.stdout: print_info(f"Stdout:\n{process.stdout.strip()}")
-                if process.stderr: print_warning(f"Stderr:\n{process.stderr.strip()}")
-            elif process.returncode != 0: # Always log output on error if captured
-                if process.stdout: print_error(f"Hata Stdout:\n{process.stdout.strip()}")
-                if process.stderr: print_error(f"Hata Stderr:\n{process.stderr.strip()}")
-
-        if check_return_code and process.returncode != 0:
-            raise subprocess.CalledProcessError(process.returncode, cmd_str_for_log, output=process.stdout, stderr=process.stderr)
-            
-        return process
-    except subprocess.CalledProcessError as e:
-        # run_command already printed details if capture_output_flag was true
-        if not capture_output_flag: # If output went to console, just print a simpler error
-             print_error(f"Komut hatası (return code {e.returncode}): {cmd_str_for_log}")
-        raise 
-    except FileNotFoundError:
-        print_error(f"Komut bulunamadı: {command_parts[0] if isinstance(command_parts, list) else command_parts.split()[0]}")
-        raise
-    except Exception as e:
-        print_error(f"Komut çalıştırılırken beklenmedik hata ({cmd_str_for_log}): {type(e).__name__} - {e}")
-        raise
-
-def get_python_executable():
-    """Kullanılabilir Python 3 çalıştırılabilir dosyasını bulur."""
-    print_info("Python 3 yorumlayıcısı aranıyor...")
-    # Önce mevcut çalışan Python'u dene
-    current_python = sys.executable
-    if current_python:
-        try:
-            print_info(f"Mevcut Python deneniyor: {current_python}")
-            result = run_command([current_python, "-c", "import sys; assert sys.version_info.major == 3, 'Not Python 3'"], capture_output_flag=True, log_output_on_success=False)
-            if result.returncode == 0:
-                print_info(f"Kullanılacak Python: {current_python}")
-                return current_python
-        except Exception as e:
-            print_warning(f"Mevcut Python ({current_python}) kontrol edilirken sorun: {e}")
-
-    # PATH'deki python3 ve python komutlarını dene
-    for cmd_name in ["python3", "python"]:
-        found_cmd_path = command_exists(cmd_name)
-        if found_cmd_path:
-            try:
-                print_info(f"PATH'de bulunan '{cmd_name}' deneniyor: {found_cmd_path}")
-                result = run_command([found_cmd_path, "-c", "import sys; assert sys.version_info.major == 3, 'Not Python 3'; print(sys.executable)"], capture_output_flag=True, log_output_on_success=False)
-                if result.returncode == 0 and result.stdout:
-                    resolved_path = result.stdout.strip()
-                    print_info(f"Kullanılacak Python: {resolved_path} ('{cmd_name}' komutu ile bulundu)")
-                    return resolved_path
-            except Exception as e:
-                print_warning(f"'{cmd_name}' ({found_cmd_path}) kontrol edilirken sorun: {e}")
-                
-    print_error("Python 3 sisteminizde bulunamadı veya PATH'e doğru şekilde eklenmemiş.")
-    print_error("Lütfen Python 3'ü (https://www.python.org/downloads/) kurun.")
-    sys.exit(1)
-
-
-# --- Kurulum Fonksiyonları ---
-def install_uv(python_exe_path):
-    print_info("Adım 1/3: uv kontrol ediliyor/kuruluyor...")
-    uv_executable = command_exists("uv")
-    if uv_executable:
-        print_info(f"uv zaten kurulu: {uv_executable}")
-        run_command([uv_executable, "--version"], capture_output_flag=True, log_output_on_success=True)
-        return uv_executable
-
-    print_info("uv kurulu değil. Kurulum denenecek...")
-    try:
-        if platform.system() == "Windows":
-            print_info("PowerShell ile uv indirme ve kurma script'i çalıştırılacak.")
-            run_command([
-                "powershell", "-ExecutionPolicy", "Bypass", "-NoProfile", "-NonInteractive",
-                "-Command", "try { irm https://astral.sh/uv/install.ps1 | iex } catch { Write-Error $_; exit 1 }"
-            ], shell=False)
-        else: 
-            print_info("curl ile uv kurulum script'i çalıştırılacak.")
-            process = subprocess.run("curl -LsSf https://astral.sh/uv/install.sh | sh", shell=True, capture_output=True, text=True, encoding='utf-8', errors='replace')
-            if process.stdout: print_info(f"uv install script stdout:\n{process.stdout}")
-            if process.stderr: print_warning(f"uv install script stderr:\n{process.stderr}")
-            if process.returncode != 0:
-                raise subprocess.CalledProcessError(process.returncode, "curl ... | sh")
-        
-        uv_executable = command_exists("uv") 
-        if not uv_executable: # PATH'e hemen yansımamış olabilir, bilinen yerleri kontrol et
-            common_paths_uv = []
-            if platform.system() == "Windows":
-                cargo_uv_path = os.path.join(os.environ.get("USERPROFILE", ""), ".cargo", "bin", "uv.exe")
-                localapp_uv_path = os.path.join(os.environ.get("LOCALAPPDATA", ""), "uv", "uv.exe")
-                if os.path.exists(cargo_uv_path): common_paths_uv.append(cargo_uv_path)
-                if os.path.exists(localapp_uv_path): common_paths_uv.append(localapp_uv_path)
-            else: # macOS / Linux
-                common_paths_uv.extend([
-                    os.path.join(os.environ.get("HOME", ""), ".cargo", "bin", "uv"),
-                    os.path.join(os.environ.get("HOME", ""), ".local", "bin", "uv")
-                ])
-            for p_uv in common_paths_uv:
-                if command_exists(p_uv): uv_executable = p_uv; break
-        
-        if uv_executable and command_exists(uv_executable):
-            print_info(f"uv başarıyla kuruldu/bulundu: {uv_executable}")
-            run_command([uv_executable, "--version"], capture_output_flag=True, log_output_on_success=True)
-            return uv_executable
-        else: # Son çare pip
-            print_warning("uv resmi script ile kuruldu/bulundu ancak PATH'de doğrulanamadı. pip ile deneniyor...")
-            run_command([python_exe_path, "-m", "pip", "install", "uv"])
-            uv_executable = command_exists("uv")
-            if uv_executable:
-                print_info(f"uv pip ile başarıyla kuruldu: {uv_executable}")
-                run_command([uv_executable, "--version"], capture_output_flag=True, log_output_on_success=True)
-                return uv_executable
-            print_error("uv pip ile de kurulamadı. Lütfen manuel kurulum yapın: https://astral.sh/uv")
-            return None
-    except Exception as e:
-        print_error(f"uv kurulumu sırasında genel bir hata oluştu: {e}")
-        print_warning("Lütfen uv'yi manuel olarak kurmayı deneyin: https://astral.sh/uv")
-        return None
-
-def install_fastmcp_cli(python_exe_path, uv_exe_path): # uv_exe_path artık kullanılmıyor
-    """fastmcp CLI'yi kontrol eder ve gerekirse pip/pip3 ile kurar."""
-    print_info("Adım 2/3: fastmcp CLI kontrol ediliyor/kuruluyor...")
-    fastmcp_executable = command_exists("fastmcp")
-    if fastmcp_executable:
-        print_info(f"fastmcp CLI zaten kurulu: {fastmcp_executable}")
-        run_command([fastmcp_executable, "version"], capture_output_flag=True, log_output_on_success=True)
-        return fastmcp_executable
-
-    print_info("fastmcp CLI kurulu değil. pip/pip3 ile kurulum denenecek...")
-    try:
-        pip_cmd_to_try = [python_exe_path, "-m", "pip", "install", "fastmcp"]
-        print_info(f"{' '.join(pip_cmd_to_try)} komutu deneniyor...")
-        run_command(pip_cmd_to_try)
-        
-        fastmcp_executable = command_exists("fastmcp")
-        if fastmcp_executable:
-            print_info(f"fastmcp CLI başarıyla kuruldu: {fastmcp_executable}")
-            run_command([fastmcp_executable, "version"], capture_output_flag=True, log_output_on_success=True)
-            return fastmcp_executable
-        else: 
-            scripts_dir = os.path.dirname(python_exe_path)
-            if platform.system() == "Windows" and not scripts_dir.lower().endswith("scripts"):
-                 scripts_dir = os.path.join(scripts_dir, "Scripts")
-            potential_fastmcp_path = os.path.join(scripts_dir, "fastmcp.exe" if platform.system() == "Windows" else "fastmcp")
-            if command_exists(potential_fastmcp_path):
-                print_info(f"fastmcp CLI şu yolda bulundu: {potential_fastmcp_path}")
-                run_command([potential_fastmcp_path, "version"], capture_output_flag=True, log_output_on_success=True)
-                return potential_fastmcp_path
-            else:
-                print_error("fastmcp CLI kuruldu ancak PATH'de veya bilinen Python script yollarında bulunamadı.")
-                print_error("Lütfen terminalinizi yeniden başlatın veya PATH'i manuel güncelleyin.")
-                return None
-    except Exception as e:
-        print_error(f"fastmcp CLI kurulumu sırasında hata oluştu: {e}")
-        return None
-
-def install_tool_to_claude_desktop(fastmcp_exe_path):
-    """Yargı MCP sunucusunu Claude Desktop'a kurar."""
-    print_info(f"Adım 3/3: \"{CLAUDE_TOOL_NAME}\" Claude Desktop'a kuruluyor...")
-    if not os.path.exists(MCP_SERVER_SCRIPT_NAME):
-        print_error(f"Ana sunucu script'i '{MCP_SERVER_SCRIPT_NAME}' bulunamadı.")
-        print_error("Lütfen bu script'i ana sunucu script'inin bulunduğu dizinde çalıştırın.")
-        return False
-
-    dependencies_cmd_part = []
-    for dep in DEPENDENCIES_FOR_FASTMCP:
-        dependencies_cmd_part.extend(["--with", dep])
-    
-    install_command = [
-        fastmcp_exe_path, "install", MCP_SERVER_SCRIPT_NAME,
-        "--name", CLAUDE_TOOL_NAME
-    ] + dependencies_cmd_part
-    
-    try:
-        process = run_command(install_command, capture_output_flag=True, check_return_code=False, log_output_on_success=False)
-        if process.returncode == 0:
-            print_info(f"\"{CLAUDE_TOOL_NAME}\" başarıyla Claude Desktop'a kuruldu/güncellendi.")
-            if process.stdout: print_info(f"fastmcp install stdout:\n{process.stdout.strip()}")
-            if process.stderr: print_warning(f"fastmcp install stderr:\n{process.stderr.strip()}")
-            return True
-        else:
-            error_output = (process.stdout or "") + (process.stderr or "")
-            if "claude app not found" in error_output.lower():
-                print_error("Claude Desktop uygulaması sisteminizde bulunamadı veya algılanamadı.")
-                print_error("Lütfen Claude Desktop'ın kurulu ve çalışır durumda olduğundan emin olun.")
-                print_error("Claude Desktop'ı https://claude.ai/download adresinden indirebilirsiniz.")
-            else:
-                print_error(f"Sunucu Claude Desktop'a kurulurken hata oluştu (return code {process.returncode}).")
-                print_error("Lütfen fastmcp CLI'nin düzgün çalıştığından emin olun.")
-                if process.stderr: print_error(f"fastmcp install stderr:\n{process.stderr.strip()}")
-                if process.stdout: print_info(f"fastmcp install stdout (hata durumunda):\n{process.stdout.strip()}")
-            return False
-    except Exception as e:
-        print_error(f"Sunucu Claude Desktop'a kurulurken genel bir hata oluştu: {e}")
-        return False
-
-# --- Ana Kurulum Mantığı ---
-def main():
-    print("===================================================================")
-    print(" Yargi MCP Sunucusu - Python Kurulum Script'i")
-    print("===================================================================")
-    
-    if platform.system() == "Windows":
-        confirm = input("Bu script, uv ve fastmcp araclarini kuracak ve Yargi MCP sunucusunu Claude Desktop'a entegre edecektir. Devam etmek istiyor musunuz? (E/H): ")
-        if confirm.lower() != 'e':
-            print_info("Kurulum kullanıcı tarafından iptal edildi.")
-            sys.exit(0)
-    
-    python_executable = get_python_executable()
-    uv_executable_path = install_uv(python_executable) # uv hala öneriliyor fastmcp install için
-    
-    fastmcp_executable_path = install_fastmcp_cli(python_executable, uv_executable_path) # uv_exe_path burada kullanılmıyor
-    if not fastmcp_executable_path:
-        print_error("fastmcp CLI kurulumu başarısız oldu. Kurulum sonlandırılıyor.")
-        sys.exit(1)
-
-    if not install_tool_to_claude_desktop(fastmcp_executable_path):
-        print_error("Claude Desktop'a kurulum başarısız oldu.")
-        sys.exit(1)
-
-    print_info("===================================================================")
-    print_info(" KURULUM BAŞARIYLA TAMAMLANDI!")
-    print_info("===================================================================")
-    print_info(f"- \"{CLAUDE_TOOL_NAME}\" aracı Claude Desktop'a eklenmiş olmalıdır.")
-    print_info("- Değişikliklerin etkili olması için Claude Desktop'ı yeniden başlatmanız gerekebilir.")
-    print_info("- Eğer uv veya fastmcp PATH'e yeni eklendiyse, terminalinizi de yeniden başlatmanız gerekebilir.")
-
-if __name__ == "__main__":
-    try:
-        main()
-    except SystemExit: 
-        pass # sys.exit() çağrıldığında script sonlansın
-    except Exception as e:
-        print_error(f"Beklenmedik bir genel hata oluştu: {e}")
-        sys.exit(1)
-    finally:
-        if platform.system() == "Windows":
-            input("Çıkmak için Enter tuşuna basın...")
-        else:
-            print("Kurulum script'i tamamlandı.")

install.sh

@@ -1,54 +0,0 @@
-#!/bin/bash
-
-# --- Script Bilgileri ---
-echo "==================================================================="
-echo " Yargi MCP Sunucusu - Kurulum Başlatıcı (macOS/Linux)"
-echo "==================================================================="
-echo " Bu script, Yargi MCP sunucusunun kurulumu için gerekli olan"
-echo " Python script'ini (install.py) çalıştıracaktır."
-echo ""
-read -p "Devam etmek istiyor musunuz? (E/H): " continue_script
-if [[ ! "$continue_script" =~ ^[Ee]$ ]]; then
-    echo "Kurulum iptal edildi."
-    exit 0
-fi
-echo ""
-
-# --- Python Yorumlayıcısını Bul ve install.py'yi Çalıştır ---
-PYTHON_EXECUTABLE=""
-
-# Öncelikle python3'ü dene
-if command -v python3 &>/dev/null; then
-    PYTHON_EXECUTABLE="python3"
-# Sonra python'u dene (Python 3 olduğundan emin olmak için install.py içinde kontrol var)
-elif command -v python &>/dev/null; then
-    PYTHON_EXECUTABLE="python"
-fi
-
-if [ -z "$PYTHON_EXECUTABLE" ]; then
-    echo "[HATA] Sisteminizde Python 3 bulunamadı veya PATH'e eklenmemiş."
-    echo "Lütfen Python 3'ü (https://www.python.org/downloads/) kurun."
-    exit 1
-fi
-
-echo "[INFO] '$PYTHON_EXECUTABLE install.py' komutu çalıştırılıyor..."
-echo "-------------------------------------------------------------------"
-
-"$PYTHON_EXECUTABLE" install.py
-
-# install.py script'inin çıkış kodunu kontrol et
-INSTALL_EXIT_CODE=$?
-
-echo "-------------------------------------------------------------------"
-if [ $INSTALL_EXIT_CODE -eq 0 ]; then
-    echo "[INFO] install.py script'i başarıyla tamamlandı."
-else
-    echo "[HATA] install.py script'i bir hatayla sonlandı (Çıkış Kodu: $INSTALL_EXIT_CODE)."
-    echo "[HATA] Lütfen yukarıdaki hata mesajlarını kontrol edin."
-fi
-
-echo ""
-# Pencerenin hemen kapanmaması için (özellikle çift tıklanarak çalıştırılırsa)
-read -p "Kurulum script'i tamamlandı. Çıkmak için Enter tuşuna basın..."
-
-exit $INSTALL_EXIT_CODE

kik_mcp_module/client.py

@@ -18,7 +18,8 @@ import html as html_parser
 from markitdown import MarkItDown 
 import os
 import math 
-import tempfile
+import io
+import random
 
 from .models import (
     KikSearchRequest,
@@ -69,14 +70,79 @@ class KikApiClient:
                 self.playwright_instance = await async_playwright().start()
             if not self.browser or not self.browser.is_connected():
                 if self.browser: await self.browser.close()
-                self.browser = await self.playwright_instance.chromium.launch(headless=True) 
+                # Ultra stealth browser configuration
+                self.browser = await self.playwright_instance.chromium.launch(
+                    headless=True,
+                    args=[
+                        # Disable automation indicators
+                        '--no-first-run',
+                        '--no-default-browser-check',
+                        '--disable-dev-shm-usage',
+                        '--disable-extensions',
+                        '--disable-gpu',
+                        '--disable-default-apps',
+                        '--disable-translate',
+                        '--disable-blink-features=AutomationControlled',
+                        '--disable-ipc-flooding-protection',
+                        '--disable-renderer-backgrounding',
+                        '--disable-backgrounding-occluded-windows',
+                        '--disable-client-side-phishing-detection',
+                        '--disable-sync',
+                        '--disable-features=TranslateUI,BlinkGenPropertyTrees',
+                        '--disable-component-extensions-with-background-pages',
+                        '--no-sandbox',  # Sometimes needed for headless
+                        '--disable-web-security',
+                        '--disable-features=VizDisplayCompositor',
+                        # Language and locale
+                        '--lang=tr-TR',
+                        '--accept-lang=tr-TR,tr;q=0.9,en;q=0.8',
+                        # Performance optimizations
+                        '--memory-pressure-off',
+                        '--max_old_space_size=4096',
+                    ]
+                ) 
                 browser_recreated = True 
             if not self.context or browser_recreated:
                 if self.context: await self.context.close()
                 if not self.browser: raise PlaywrightError("Browser not initialized.")
+                # Ultra realistic context configuration
                 self.context = await self.browser.new_context(
-                    user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36",
+                    user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36",
+                    viewport={'width': 1920, 'height': 1080},
+                    screen={'width': 1920, 'height': 1080},
+                    device_scale_factor=1.0,
+                    is_mobile=False,
+                    has_touch=False,
+                    # Localization
+                    locale='tr-TR',
+                    timezone_id='Europe/Istanbul',
+                    # Realistic browser features
                     java_script_enabled=True,
+                    accept_downloads=True,
+                    ignore_https_errors=True,
+                    # Color scheme and media
+                    color_scheme='light',
+                    reduced_motion='no-preference',
+                    forced_colors='none',
+                    # Additional headers for realism
+                    extra_http_headers={
+                        'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7',
+                        'Accept-Encoding': 'gzip, deflate, br',
+                        'Accept-Language': 'tr-TR,tr;q=0.9,en;q=0.8',
+                        'Cache-Control': 'max-age=0',
+                        'DNT': '1',
+                        'Upgrade-Insecure-Requests': '1',
+                        'Sec-Ch-Ua': '"Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"',
+                        'Sec-Ch-Ua-Mobile': '?0',
+                        'Sec-Ch-Ua-Platform': '"Windows"',
+                        'Sec-Fetch-Dest': 'document',
+                        'Sec-Fetch-Mode': 'navigate',
+                        'Sec-Fetch-Site': 'none',
+                        'Sec-Fetch-User': '?1',
+                    },
+                    # Permissions to appear realistic
+                    permissions=['geolocation'],
+                    geolocation={'latitude': 41.0082, 'longitude': 28.9784},  # Istanbul
                 )
                 context_recreated = True 
             if not self.page or self.page.is_closed() or force_new_page or context_recreated or browser_recreated:
@@ -86,6 +152,9 @@ class KikApiClient:
                 if not self.page: raise PlaywrightError("Failed to create new page.")
                 self.page.set_default_navigation_timeout(self.request_timeout)
                 self.page.set_default_timeout(self.request_timeout)
+                
+                # CRITICAL: Anti-detection JavaScript injection
+                await self._inject_stealth_scripts()
             if not self.page or self.page.is_closed(): 
                 raise PlaywrightError("Playwright page initialization failed.")
             logger.debug("_ensure_playwright_ready completed.")
@@ -99,41 +168,644 @@ class KikApiClient:
             if self.playwright_instance: await self.playwright_instance.stop(); self.playwright_instance = None
             logger.info("KikApiClient (Playwright): Resources closed.")
 
+    async def _inject_stealth_scripts(self):
+        """
+        Inject comprehensive stealth JavaScript to evade bot detection.
+        Overrides navigator properties and other fingerprinting vectors.
+        """
+        if not self.page:
+            logger.warning("Cannot inject stealth scripts: page is None")
+            return
+            
+        logger.debug("Injecting comprehensive stealth scripts...")
+        
+        stealth_script = '''
+        // Override navigator.webdriver
+        Object.defineProperty(navigator, 'webdriver', {
+            get: () => undefined,
+            configurable: true
+        });
+        
+        // Override navigator properties to appear more human
+        Object.defineProperty(navigator, 'languages', {
+            get: () => ['tr-TR', 'tr', 'en-US', 'en'],
+            configurable: true
+        });
+        
+        Object.defineProperty(navigator, 'platform', {
+            get: () => 'Win32',
+            configurable: true
+        });
+        
+        Object.defineProperty(navigator, 'vendor', {
+            get: () => 'Google Inc.',
+            configurable: true
+        });
+        
+        Object.defineProperty(navigator, 'deviceMemory', {
+            get: () => 8,
+            configurable: true
+        });
+        
+        Object.defineProperty(navigator, 'hardwareConcurrency', {
+            get: () => 8,
+            configurable: true
+        });
+        
+        Object.defineProperty(navigator, 'maxTouchPoints', {
+            get: () => 0,
+            configurable: true
+        });
+        
+        // Override plugins to appear realistic
+        Object.defineProperty(navigator, 'plugins', {
+            get: () => {
+                return [
+                    {
+                        0: {type: "application/x-google-chrome-pdf", suffixes: "pdf", description: "Portable Document Format", enabledPlugin: Plugin},
+                        description: "Portable Document Format",
+                        filename: "internal-pdf-viewer",
+                        length: 1,
+                        name: "Chrome PDF Plugin"
+                    },
+                    {
+                        0: {type: "application/pdf", suffixes: "pdf", description: "", enabledPlugin: Plugin},
+                        description: "",
+                        filename: "mhjfbmdgcfjbbpaeojofohoefgiehjai",
+                        length: 1,
+                        name: "Chrome PDF Viewer"
+                    }
+                ];
+            },
+            configurable: true
+        });
+        
+        // Override permissions
+        const originalQuery = window.navigator.permissions.query;
+        window.navigator.permissions.query = (parameters) => (
+            parameters.name === 'notifications' ?
+                Promise.resolve({ state: Notification.permission }) :
+                originalQuery(parameters)
+        );
+        
+        // Override WebGL rendering context
+        const getParameter = WebGLRenderingContext.prototype.getParameter;
+        WebGLRenderingContext.prototype.getParameter = function(parameter) {
+            if (parameter === 37445) { // UNMASKED_VENDOR_WEBGL
+                return 'Intel Inc.';
+            }
+            if (parameter === 37446) { // UNMASKED_RENDERER_WEBGL
+                return 'Intel(R) Iris(R) Plus Graphics 640';
+            }
+            return getParameter(parameter);
+        };
+        
+        // Override canvas fingerprinting
+        const toBlob = HTMLCanvasElement.prototype.toBlob;
+        const toDataURL = HTMLCanvasElement.prototype.toDataURL;
+        const getImageData = CanvasRenderingContext2D.prototype.getImageData;
+        
+        const noisify = (canvas, context) => {
+            const imageData = context.getImageData(0, 0, canvas.width, canvas.height);
+            for (let i = 0; i < imageData.data.length; i += 4) {
+                imageData.data[i] += Math.floor(Math.random() * 10) - 5;
+                imageData.data[i + 1] += Math.floor(Math.random() * 10) - 5;
+                imageData.data[i + 2] += Math.floor(Math.random() * 10) - 5;
+            }
+            context.putImageData(imageData, 0, 0);
+        };
+        
+        Object.defineProperty(HTMLCanvasElement.prototype, 'toBlob', {
+            value: function(callback, type, encoderOptions) {
+                noisify(this, this.getContext('2d'));
+                return toBlob.apply(this, arguments);
+            }
+        });
+        
+        Object.defineProperty(HTMLCanvasElement.prototype, 'toDataURL', {
+            value: function(type, encoderOptions) {
+                noisify(this, this.getContext('2d'));
+                return toDataURL.apply(this, arguments);
+            }
+        });
+        
+        // Override AudioContext for audio fingerprinting
+        const audioCtx = new (window.AudioContext || window.webkitAudioContext)();
+        const originalAnalyser = audioCtx.createAnalyser;
+        audioCtx.createAnalyser = function() {
+            const analyser = originalAnalyser.apply(this, arguments);
+            const getFloatFrequencyData = analyser.getFloatFrequencyData;
+            analyser.getFloatFrequencyData = function(array) {
+                getFloatFrequencyData.apply(this, arguments);
+                for (let i = 0; i < array.length; i++) {
+                    array[i] += Math.random() * 0.0001;
+                }
+            };
+            return analyser;
+        };
+        
+        // Override screen properties
+        Object.defineProperty(window.screen, 'colorDepth', {
+            get: () => 24,
+            configurable: true
+        });
+        
+        Object.defineProperty(window.screen, 'pixelDepth', {
+            get: () => 24,
+            configurable: true
+        });
+        
+        // Override timezone
+        Date.prototype.getTimezoneOffset = function() {
+            return -180; // UTC+3 (Istanbul)
+        };
+        
+        // Override document.cookie to prevent tracking
+        const originalCookieDescriptor = Object.getOwnPropertyDescriptor(Document.prototype, 'cookie') || 
+                                       Object.getOwnPropertyDescriptor(HTMLDocument.prototype, 'cookie');
+        if (originalCookieDescriptor && originalCookieDescriptor.configurable) {
+            Object.defineProperty(document, 'cookie', {
+                get: function() {
+                    return originalCookieDescriptor.get.call(this);
+                },
+                set: function(val) {
+                    console.log('Cookie set blocked:', val);
+                    return originalCookieDescriptor.set.call(this, val);
+                },
+                configurable: true
+            });
+        }
+        
+        // Remove automation traces
+        delete window.cdc_adoQpoasnfa76pfcZLmcfl_Array;
+        delete window.cdc_adoQpoasnfa76pfcZLmcfl_Promise;
+        delete window.cdc_adoQpoasnfa76pfcZLmcfl_Symbol;
+        delete window.cdc_adoQpoasnfa76pfcZLmcfl_JSON;
+        delete window.cdc_adoQpoasnfa76pfcZLmcfl_Object;
+        delete window.cdc_adoQpoasnfa76pfcZLmcfl_Proxy;
+        
+        // Add realistic performance timing
+        if (window.performance && window.performance.timing) {
+            const timing = window.performance.timing;
+            const now = Date.now();
+            Object.defineProperty(timing, 'navigationStart', { value: now - Math.floor(Math.random() * 1000) + 1000, configurable: false });
+            Object.defineProperty(timing, 'loadEventEnd', { value: now - Math.floor(Math.random() * 100) + 100, configurable: false });
+        }
+        
+        console.log('✓ Stealth scripts injected successfully');
+        '''
+        
+        try:
+            await self.page.add_init_script(stealth_script)
+            logger.debug("✅ Stealth scripts injected successfully")
+        except Exception as e:
+            logger.warning(f"⚠️ Failed to inject stealth scripts: {e}")
+
+    async def _simulate_human_behavior(self, fast_mode: bool = True):
+        """
+        Simulate realistic human behavior patterns to avoid detection.
+        Includes mouse movements, typing patterns, and natural delays.
+        
+        Args:
+            fast_mode: If True, use minimal timing for speed optimization
+        """
+        if not self.page:
+            logger.warning("Cannot simulate human behavior: page is None")
+            return
+            
+        logger.debug("🤖 Simulating human behavior patterns...")
+        
+        try:
+            if fast_mode:
+                # ULTRA-FAST MODE: Minimal human behavior
+                viewport_size = self.page.viewport_size
+                if viewport_size and random.random() < 0.7:  # 70% chance to do movement
+                    width, height = viewport_size['width'], viewport_size['height']
+                    
+                    # Single quick mouse movement
+                    x = random.randint(200, width - 200)
+                    y = random.randint(200, height - 200)
+                    await self.page.mouse.move(x, y)
+                    
+                    # Brief scroll (50% chance)
+                    if random.random() < 0.5:
+                        await self.page.mouse.wheel(0, random.randint(50, 100))
+                
+                # Ultra-minimal delay
+                await asyncio.sleep(random.uniform(0.05, 0.15))  # Reduced from 0.1-0.3
+                
+            else:
+                # FULL MODE: Original comprehensive behavior
+                viewport_size = self.page.viewport_size
+                if viewport_size:
+                    width, height = viewport_size['width'], viewport_size['height']
+                    
+                    # Generate 3-5 random mouse movements
+                    movements = random.randint(3, 5)
+                    logger.debug(f"  🖱️ Performing {movements} random mouse movements")
+                    
+                    for i in range(movements):
+                        x = random.randint(100, width - 100)
+                        y = random.randint(100, height - 100)
+                        
+                        # Move mouse with realistic speed (not instant)
+                        await self.page.mouse.move(x, y)
+                        await asyncio.sleep(random.uniform(0.1, 0.3))
+                    
+                    # 2. Scroll simulation
+                    logger.debug("  📜 Simulating scroll behavior")
+                    scroll_amount = random.randint(100, 300)
+                    await self.page.mouse.wheel(0, scroll_amount)
+                    await asyncio.sleep(random.uniform(0.2, 0.5))
+                    
+                    # Scroll back up
+                    await self.page.mouse.wheel(0, -scroll_amount)
+                    await asyncio.sleep(random.uniform(0.2, 0.4))
+                
+                # 3. Random page interaction delays
+                await asyncio.sleep(random.uniform(0.5, 1.5))
+            
+            logger.debug("✅ Human behavior simulation completed")
+            
+        except Exception as e:
+            logger.warning(f"⚠️ Human behavior simulation failed: {e}")
+
+    async def _human_type(self, selector: str, text: str, clear_first: bool = True, fast_mode: bool = True):
+        """
+        Type text with human-like patterns and delays.
+        
+        Args:
+            selector: CSS selector for the input element
+            text: Text to type
+            clear_first: Whether to clear the field first
+            fast_mode: If True, use minimal delays for speed optimization
+        """
+        if not self.page:
+            logger.warning("Cannot perform human typing: page is None")
+            return
+            
+        try:
+            if fast_mode:
+                # FAST MODE: Direct fill for speed
+                await self.page.fill(selector, text)
+                await asyncio.sleep(random.uniform(0.02, 0.05))  # Reduced from 0.05-0.1
+            else:
+                # FULL MODE: Character-by-character human typing
+                # Focus on the element first
+                await self.page.focus(selector)
+                await asyncio.sleep(random.uniform(0.1, 0.3))
+                
+                # Clear field if requested
+                if clear_first:
+                    await self.page.keyboard.press('Control+a')
+                    await asyncio.sleep(random.uniform(0.05, 0.15))
+                    await self.page.keyboard.press('Delete')
+                    await asyncio.sleep(random.uniform(0.05, 0.15))
+                
+                # Type each character with human-like delays
+                for char in text:
+                    await self.page.keyboard.type(char)
+                    # Human typing speed: 50-150ms between characters
+                    delay = random.uniform(0.05, 0.15)
+                    
+                    # Occasional longer pauses (thinking)
+                    if random.random() < 0.1:  # 10% chance
+                        delay += random.uniform(0.2, 0.8)
+                    
+                    await asyncio.sleep(delay)
+                
+                # Brief pause after typing
+                await asyncio.sleep(random.uniform(0.2, 0.6))
+            
+            logger.debug(f"✅ Human-typed '{text}' into {selector}")
+            
+        except Exception as e:
+            logger.warning(f"⚠️ Human typing failed: {e}")
+
+    async def _human_click(self, selector: str, wait_before: bool = True, wait_after: bool = True, fast_mode: bool = True):
+        """
+        Perform a human-like click with realistic delays and mouse movement.
+        
+        Args:
+            selector: CSS selector or element to click
+            wait_before: Whether to wait before clicking
+            wait_after: Whether to wait after clicking
+            fast_mode: If True, use minimal delays for speed optimization
+        """
+        if not self.page:
+            logger.warning("Cannot perform human click: page is None")
+            return
+            
+        try:
+            if fast_mode:
+                # FAST MODE: Direct click with minimal delay
+                if wait_before:
+                    await asyncio.sleep(random.uniform(0.02, 0.08))  # Reduced from 0.05-0.15
+                
+                await self.page.click(selector)
+                
+                if wait_after:
+                    await asyncio.sleep(random.uniform(0.02, 0.08))  # Reduced from 0.05-0.15
+                    
+            else:
+                # FULL MODE: Realistic mouse movement and timing
+                # Wait before clicking (thinking time)
+                if wait_before:
+                    await asyncio.sleep(random.uniform(0.3, 0.8))
+                
+                # Get element bounds for realistic mouse movement
+                element = await self.page.query_selector(selector)
+                if element:
+                    box = await element.bounding_box()
+                    if box:
+                        # Move to element with slight randomness
+                        center_x = box['x'] + box['width'] / 2
+                        center_y = box['y'] + box['height'] / 2
+                        
+                        # Add small random offset
+                        offset_x = random.uniform(-10, 10)
+                        offset_y = random.uniform(-5, 5)
+                        
+                        await self.page.mouse.move(center_x + offset_x, center_y + offset_y)
+                        await asyncio.sleep(random.uniform(0.1, 0.3))
+                        
+                        # Perform click
+                        await self.page.mouse.click(center_x + offset_x, center_y + offset_y)
+                        
+                        logger.debug(f"✅ Human-clicked {selector}")
+                    else:
+                        # Fallback to regular click
+                        await self.page.click(selector)
+                        logger.debug(f"✅ Fallback-clicked {selector}")
+                else:
+                    logger.warning(f"⚠️ Element not found for human click: {selector}")
+                    return
+                
+                # Wait after clicking (processing time)
+                if wait_after:
+                    await asyncio.sleep(random.uniform(0.2, 0.6))
+            
+            logger.debug(f"✅ Human-clicked {selector}")
+                
+        except Exception as e:
+            logger.warning(f"⚠️ Human click failed: {e}")
+
+    async def _simulate_page_exploration(self, fast_mode: bool = True):
+        """
+        Simulate natural page exploration before performing the main task.
+        This helps establish a more human-like session.
+        
+        Args:
+            fast_mode: If True, use minimal exploration for speed optimization
+        """
+        if not self.page:
+            return
+            
+        logger.debug("🕵️ Simulating page exploration...")
+        
+        try:
+            if fast_mode:
+                # ULTRA-FAST MODE: Minimal exploration
+                await asyncio.sleep(random.uniform(0.05, 0.1))  # Reduced from 0.1-0.3
+                
+                # Single mouse movement (optional)
+                try:
+                    elements = await self.page.query_selector_all("input, button")
+                    if elements and random.random() < 0.5:  # 50% chance to skip
+                        element = random.choice(elements)
+                        box = await element.bounding_box()
+                        if box:
+                            center_x = box['x'] + box['width'] / 2
+                            center_y = box['y'] + box['height'] / 2
+                            await self.page.mouse.move(center_x, center_y)
+                except:
+                    pass
+                
+                await asyncio.sleep(random.uniform(0.02, 0.05))  # Reduced from 0.05-0.15
+                
+            else:
+                # FULL MODE: Comprehensive exploration
+                # 1. Brief pause to "read" the page
+                await asyncio.sleep(random.uniform(1.0, 2.5))
+                
+                # 2. Move mouse to various UI elements (like a human would explore)
+                explore_selectors = [
+                    "h1", "h2", ".navbar", "#header", ".logo", 
+                    "input", "button", "a", ".form-group"
+                ]
+                
+                explored = 0
+                for selector in explore_selectors:
+                    elements = await self.page.query_selector_all(selector)
+                    if elements and explored < 3:  # Explore max 3 elements
+                        element = random.choice(elements)
+                        box = await element.bounding_box()
+                        if box:
+                            center_x = box['x'] + box['width'] / 2
+                            center_y = box['y'] + box['height'] / 2
+                            
+                            await self.page.mouse.move(center_x, center_y)
+                            await asyncio.sleep(random.uniform(0.3, 0.8))
+                            explored += 1
+                
+                # 3. Small scroll to simulate reading
+                await self.page.mouse.wheel(0, random.randint(50, 150))
+                await asyncio.sleep(random.uniform(0.5, 1.2))
+            
+            logger.debug("✅ Page exploration completed")
+            
+        except Exception as e:
+            logger.debug(f"⚠️ Page exploration failed: {e}")
+
     def _parse_decision_entries_from_soup(self, soup: BeautifulSoup, search_karar_tipi: KikKararTipi) -> List[KikDecisionEntry]:
         entries: List[KikDecisionEntry] = []
         table = soup.find("table", {"id": self.RESULTS_TABLE_ID})
-        if not table: return entries
+        
+        logger.debug(f"Looking for table with ID: {self.RESULTS_TABLE_ID}")
+        if not table: 
+            logger.warning(f"Table with ID '{self.RESULTS_TABLE_ID}' not found in HTML")
+            # Log available tables for debugging
+            all_tables = soup.find_all("table")
+            logger.debug(f"Found {len(all_tables)} tables in HTML")
+            for idx, tbl in enumerate(all_tables):
+                table_id = tbl.get('id', 'no-id')
+                table_class = tbl.get('class', 'no-class')
+                rows = tbl.find_all('tr')
+                logger.debug(f"Table {idx}: id='{table_id}', class='{table_class}', rows={len(rows)}")
+                
+                # If this looks like a results table, try to use it
+                if (table_id and ('grd' in table_id.lower() or 'kurul' in table_id.lower() or 'sonuc' in table_id.lower())) or \
+                   (isinstance(table_class, list) and any('grid' in cls.lower() or 'result' in cls.lower() for cls in table_class)) or \
+                   len(rows) > 3:  # Table with multiple rows might be results
+                    logger.info(f"Trying to parse table {idx} as potential results table: id='{table_id}'")
+                    table = tbl
+                    break
+            
+            if not table:
+                logger.error("No suitable results table found")
+                return entries
+            
         rows = table.find_all("tr")
+        logger.info(f"Found {len(rows)} rows in results table")
+        
         for row_idx, row in enumerate(rows):
-            if row_idx < 2: continue             
+            # Skip first row (search bar with colspan=7) and second row (header with 6 cells)
+            if row_idx < 2: 
+                logger.debug(f"Skipping header row {row_idx}")
+                continue
+                
             cells = row.find_all("td")
-            if len(cells) == 6:
+            logger.debug(f"Row {row_idx}: Found {len(cells)} cells")
+            
+            # Log cell contents for debugging
+            if cells and row_idx < 5:  # Log first few data rows
+                for cell_idx, cell in enumerate(cells):
+                    cell_text = cell.get_text(strip=True)[:50]  # First 50 chars
+                    logger.debug(f"  Cell {cell_idx}: '{cell_text}...'")
+            
+            # Be more flexible with cell count - try 6 cells first, then adapt
+            if len(cells) >= 5:  # At least 5 cells for minimum required data
                 try:
-                    preview_button_tag = cells[0].find("a", id=re.compile(r"btnOnizle$"))
+                    # Try to find preview button in first cell or any cell with a link
+                    preview_button_tag = None
                     event_target = ""
-                    if preview_button_tag and preview_button_tag.has_attr('href'):
-                        match = re.search(r"__doPostBack\('([^']*)','([^']*)'\)", preview_button_tag['href'])
-                        if match: event_target = match.group(1)                    
-                    karar_no_span = cells[1].find("span", id=re.compile(r"lblKno$"))
-                    karar_tarihi_span = cells[2].find("span", id=re.compile(r"lblKtar$"))
-                    idare_span = cells[3].find("span", id=re.compile(r"lblIdare$"))
-                    basvuru_sahibi_span = cells[4].find("span", id=re.compile(r"lblSikayetci$"))
-                    ihale_span = cells[5].find("span", id=re.compile(r"lblIhale$"))
-                    if not (event_target and karar_no_span and karar_tarihi_span): continue
+                    
+                    # Look for preview button in first few cells
+                    for cell_idx in range(min(3, len(cells))):
+                        cell = cells[cell_idx]
+                        # Try multiple patterns for preview button (based on actual HTML structure)
+                        preview_candidates = [
+                            cell.find("a", id="btnOnizle"),  # Exact match
+                            cell.find("a", id=re.compile(r"btnOnizle$")),
+                            cell.find("a", id=re.compile(r"btn.*Onizle")),
+                            cell.find("a", id=re.compile(r".*Onizle.*")),
+                            cell.find("a", href=re.compile(r"__doPostBack"))
+                        ]
+                        
+                        for candidate in preview_candidates:
+                            if candidate and candidate.has_attr('href'):
+                                match = re.search(r"__doPostBack\('([^']*)','([^']*)'\)", candidate['href'])
+                                if match:
+                                    event_target = match.group(1)
+                                    preview_button_tag = candidate
+                                    logger.debug(f"Row {row_idx}: Found event_target '{event_target}' in cell {cell_idx}")
+                                    break
+                        
+                        if preview_button_tag:
+                            break
+                    
+                    if not preview_button_tag:
+                        logger.debug(f"Row {row_idx}: No preview button found in any cell")
+                        # Log what links we found
+                        for cell_idx, cell in enumerate(cells[:3]):
+                            links_in_cell = cell.find_all("a")
+                            logger.debug(f"  Cell {cell_idx}: {len(links_in_cell)} links")
+                            for link in links_in_cell[:2]:
+                                logger.debug(f"    Link id='{link.get('id')}', href='{link.get('href', '')[:50]}...'")
+                    
+                    # Try to find decision data spans with more flexible patterns
+                    karar_no_span = None
+                    karar_tarihi_span = None
+                    idare_span = None
+                    basvuru_sahibi_span = None
+                    ihale_span = None
+                    
+                    # Try different span patterns for karar no (usually in cell 1)
+                    for cell_idx in range(min(4, len(cells))):
+                        if not karar_no_span:
+                            cell = cells[cell_idx]
+                            candidates = [
+                                cell.find("span", id="lblKno"),  # Exact match based on actual HTML
+                                cell.find("span", id=re.compile(r"lblKno$")),
+                                cell.find("span", id=re.compile(r".*Kno.*")),
+                                cell.find("span", id=re.compile(r".*KararNo.*")),
+                                cell.find("span", id=re.compile(r".*No.*"))
+                            ]
+                            for candidate in candidates:
+                                if candidate and candidate.get_text(strip=True):
+                                    karar_no_span = candidate
+                                    logger.debug(f"Row {row_idx}: Found karar_no in cell {cell_idx}")
+                                    break
+                    
+                    # Try different patterns for karar tarihi (usually in cell 2)
+                    for cell_idx in range(min(4, len(cells))):
+                        if not karar_tarihi_span:
+                            cell = cells[cell_idx]
+                            candidates = [
+                                cell.find("span", id="lblKtar"),  # Exact match based on actual HTML
+                                cell.find("span", id=re.compile(r"lblKtar$")),
+                                cell.find("span", id=re.compile(r".*Ktar.*")),
+                                cell.find("span", id=re.compile(r".*Tarih.*")),
+                                cell.find("span", id=re.compile(r".*Date.*"))
+                            ]
+                            for candidate in candidates:
+                                if candidate and candidate.get_text(strip=True):
+                                    # Check if it looks like a date
+                                    text = candidate.get_text(strip=True)
+                                    if re.match(r'\d{1,2}[./]\d{1,2}[./]\d{4}', text):
+                                        karar_tarihi_span = candidate
+                                        logger.debug(f"Row {row_idx}: Found karar_tarihi in cell {cell_idx}")
+                                        break
+                    
+                    # Find other spans in remaining cells (if we have 6 cells) - using exact IDs
+                    if len(cells) >= 6:
+                        idare_span = cells[3].find("span", id="lblIdare") or cells[3].find("span")
+                        basvuru_sahibi_span = cells[4].find("span", id="lblSikayetci") or cells[4].find("span")
+                        ihale_span = cells[5].find("span", id="lblIhale") or cells[5].find("span")
+                    elif len(cells) == 5:
+                        # Adjust for 5-cell layout
+                        idare_span = cells[2].find("span") if cells[2] != cells[1] else None
+                        basvuru_sahibi_span = cells[3].find("span") if len(cells) > 3 else None
+                        ihale_span = cells[4].find("span") if len(cells) > 4 else None
+                    
+                    # Log what we found
+                    logger.debug(f"Row {row_idx}: karar_no_span={karar_no_span is not None}, "
+                               f"karar_tarihi_span={karar_tarihi_span is not None}, "
+                               f"event_target={bool(event_target)}")
+                    
+                    # For KIK, we need at least karar_no and karar_tarihi, event_target is helpful but not critical
+                    if not (karar_no_span and karar_tarihi_span):
+                        logger.debug(f"Row {row_idx}: Missing required fields (karar_no or karar_tarihi), skipping")
+                        # Log what spans we found in cells
+                        for i, cell in enumerate(cells):
+                            spans = cell.find_all("span")
+                            if spans:
+                                span_info = []
+                                for s in spans:
+                                    span_id = s.get('id', 'no-id')
+                                    span_text = s.get_text(strip=True)[:20]
+                                    span_info.append(f"{span_id}:'{span_text}...'")
+                                logger.debug(f"  Cell {i} spans: {span_info}")
+                        continue
+                    
+                    # If we don't have event_target, we can still create an entry but mark it specially
+                    if not event_target:
+                        logger.warning(f"Row {row_idx}: No event_target found, document retrieval won't work")
+                        event_target = f"missing_target_row_{row_idx}"  # Placeholder
                     
                     # Karar tipini arama parametresinden alıyoruz, çünkü HTML'de direkt olarak bulunmuyor.
-                    entry = KikDecisionEntry(
-                        preview_event_target=event_target,
-                        kararNo=karar_no_span.get_text(strip=True), 
-                        karar_tipi=search_karar_tipi, # Arama yapılan karar tipini ekle
-                        kararTarihi=karar_tarihi_span.get_text(strip=True),
-                        idare=idare_span.get_text(strip=True) if idare_span else None,
-                        basvuruSahibi=basvuru_sahibi_span.get_text(strip=True) if basvuru_sahibi_span else None,
-                        ihaleKonusu=ihale_span.get_text(strip=True) if ihale_span else None,
-                    )
-                    entries.append(entry)
+                    try:
+                        entry = KikDecisionEntry(
+                            preview_event_target=event_target,
+                            kararNo=karar_no_span.get_text(strip=True), 
+                            karar_tipi=search_karar_tipi, # Arama yapılan karar tipini ekle
+                            kararTarihi=karar_tarihi_span.get_text(strip=True),
+                            idare=idare_span.get_text(strip=True) if idare_span else None,
+                            basvuruSahibi=basvuru_sahibi_span.get_text(strip=True) if basvuru_sahibi_span else None,
+                            ihaleKonusu=ihale_span.get_text(strip=True) if ihale_span else None,
+                        )
+                        entries.append(entry)
+                        logger.info(f"Row {row_idx}: Successfully parsed decision: {entry.karar_no_str}")
+                    except Exception as e:
+                        logger.error(f"Row {row_idx}: Error creating KikDecisionEntry: {e}")
+                        continue
+                    
                 except Exception as e:
-                    logger.error(f"Error parsing a KIK decision entry row: {e}", exc_info=True)
+                    logger.error(f"Error parsing row {row_idx}: {e}", exc_info=True)
+            else:
+                logger.debug(f"Row {row_idx}: Expected at least 5 cells but found {len(cells)}, skipping")
+                
+        logger.info(f"Parsed {len(entries)} decision entries from {len(rows)} rows")
         return entries
         
     def _parse_total_records_from_soup(self, soup: BeautifulSoup) -> int:
@@ -163,6 +835,10 @@ class KikApiClient:
         try:
             if page.url != search_url:
                 await page.goto(search_url, wait_until="networkidle", timeout=self.request_timeout)
+                
+            # Simulate natural page exploration after navigation (FAST MODE)
+            await self._simulate_page_exploration(fast_mode=True)
+            
             search_button_selector = f"a[id='{self.FIELD_LOCATORS['search_button_id']}']"
             await page.wait_for_selector(search_button_selector, state="visible", timeout=self.request_timeout)
 
@@ -170,12 +846,18 @@ class KikApiClient:
             radio_locator_selector = f"{self.FIELD_LOCATORS['karar_tipi_radio_group']}[value='{current_karar_tipi_value}']"
             if not await page.locator(radio_locator_selector).is_checked():
                  js_target_radio = f"ctl00$ContentPlaceHolder1${current_karar_tipi_value}"
+                 logger.info(f"Selecting radio button: {js_target_radio}")
                  async with page.expect_navigation(wait_until="networkidle", timeout=self.request_timeout):
                      await page.evaluate(f"javascript:__doPostBack('{js_target_radio}','')")
-                 await page.wait_for_timeout(1000) 
+                 # Ultra-fast wait for page to stabilize after radio button change
+                 await page.wait_for_timeout(300)  # Reduced from 1000ms
+                 logger.info("Radio button selection completed") 
 
-            async def fill_if_value(selector_key: str, value: Optional[str]):
-                if value is not None: await page.fill(self.FIELD_LOCATORS[selector_key], value)
+            # Helper function for human-like form filling (FAST MODE)
+            async def human_fill_if_value(selector_key: str, value: Optional[str]):
+                if value is not None:
+                    selector = self.FIELD_LOCATORS[selector_key]
+                    await self._human_type(selector, value, fast_mode=True)
             
             # Karar No'yu KİK sitesine göndermeden önce '_' -> '/' dönüşümü yap
             karar_no_for_kik_form = None
@@ -183,43 +865,105 @@ class KikApiClient:
                 karar_no_for_kik_form = search_params.karar_no.replace('_', '/')
                 logger.info(f"Using karar_no '{karar_no_for_kik_form}' (transformed from '{search_params.karar_no}') for KIK form.")
             
-            await fill_if_value('karar_metni', search_params.karar_metni)
-            await fill_if_value('karar_no', karar_no_for_kik_form) # Dönüştürülmüş halini kullan
-            # ... (diğer fill_if_value çağrıları aynı) ...
-            await fill_if_value('karar_tarihi_baslangic', search_params.karar_tarihi_baslangic)
-            await fill_if_value('karar_tarihi_bitis', search_params.karar_tarihi_bitis)
-            await fill_if_value('resmi_gazete_sayisi', search_params.resmi_gazete_sayisi)
-            await fill_if_value('resmi_gazete_tarihi', search_params.resmi_gazete_tarihi)
-            await fill_if_value('basvuru_konusu_ihale', search_params.basvuru_konusu_ihale)
-            await fill_if_value('basvuru_sahibi', search_params.basvuru_sahibi)
-            await fill_if_value('ihaleyi_yapan_idare', search_params.ihaleyi_yapan_idare)
+            # Fill form fields with FAST human-like behavior
+            logger.info("Filling form fields with fast mode...")
+            
+            # Start with FAST mouse behavior simulation
+            await self._simulate_human_behavior(fast_mode=True)
+            
+            await human_fill_if_value('karar_metni', search_params.karar_metni)
+            await human_fill_if_value('karar_no', karar_no_for_kik_form) # Dönüştürülmüş halini kullan
+            await human_fill_if_value('karar_tarihi_baslangic', search_params.karar_tarihi_baslangic)
+            await human_fill_if_value('karar_tarihi_bitis', search_params.karar_tarihi_bitis)
+            await human_fill_if_value('resmi_gazete_sayisi', search_params.resmi_gazete_sayisi)
+            await human_fill_if_value('resmi_gazete_tarihi', search_params.resmi_gazete_tarihi)
+            await human_fill_if_value('basvuru_konusu_ihale', search_params.basvuru_konusu_ihale)
+            await human_fill_if_value('basvuru_sahibi', search_params.basvuru_sahibi)
+            await human_fill_if_value('ihaleyi_yapan_idare', search_params.ihaleyi_yapan_idare)
 
             if search_params.yil:
                 await page.select_option(self.FIELD_LOCATORS['yil'], value=search_params.yil)
+                await page.wait_for_timeout(50)  # Reduced from 100ms
+            
+            logger.info("Form filling completed, preparing for search...")
+            
+            # Additional FAST human behavior before search
+            await self._simulate_human_behavior(fast_mode=True)
 
             action_is_search_button_click = (search_params.page == 1)
             event_target_for_submit: str
-            if action_is_search_button_click:
-                event_target_for_submit = self.FIELD_LOCATORS['search_button_id']
-            else: # Pagination
-                page_link_ctl_number = search_params.page + 2 
-                event_target_for_submit = f"ctl00$ContentPlaceHolder1$grdKurulKararSorguSonuc$ctl14$ctl{page_link_ctl_number:02d}"
             
             try:
-                async with page.expect_navigation(wait_until="networkidle", timeout=self.request_timeout):
-                    if action_is_search_button_click:
-                        await page.locator(search_button_selector).click()
-                    else: 
+                if action_is_search_button_click:
+                    event_target_for_submit = self.FIELD_LOCATORS['search_button_id']
+                    # Use human-like clicking for search button
+                    search_button_selector = f"a[id='{event_target_for_submit}']"
+                    logger.info(f"Performing human-like search button click...")
+                    
+                    try:
+                        # FAST Human-like click on search button
+                        await self._human_click(search_button_selector, wait_before=True, wait_after=False, fast_mode=True)
+                        
+                        # Wait for navigation
+                        await page.wait_for_load_state("networkidle", timeout=self.request_timeout)
+                        logger.info("Search navigation completed successfully")
+                    except Exception as e:
+                        logger.warning(f"Human click failed, falling back to JavaScript: {e}")
+                        # Fallback to original method
+                        async with page.expect_navigation(wait_until="networkidle", timeout=self.request_timeout):
+                            await page.evaluate(f"javascript:__doPostBack('{event_target_for_submit}','')")
+                        logger.info("Search navigation completed via fallback")
+                else: 
+                    # Pagination - use original method for consistency
+                    page_link_ctl_number = search_params.page + 2 
+                    event_target_for_submit = f"ctl00$ContentPlaceHolder1$grdKurulKararSorguSonuc$ctl14$ctl{page_link_ctl_number:02d}"
+                    logger.info(f"Executing pagination with event target: {event_target_for_submit}")
+                    
+                    async with page.expect_navigation(wait_until="networkidle", timeout=self.request_timeout):
                         await page.evaluate(f"javascript:__doPostBack('{event_target_for_submit}','')")
+                    logger.info("Pagination navigation completed successfully")
             except PlaywrightTimeoutError:
-                await page.wait_for_timeout(2000) 
+                logger.warning("Search navigation timed out, but continuing...")
+                await page.wait_for_timeout(5000)  # Longer wait if navigation fails
+            
+            # Ultra-fast wait time for results to load
+            logger.info("Waiting for search results to load...")
+            await page.wait_for_timeout(500)  # Reduced from 1000ms 
             
             results_table_dom_selector = f"table#{self.RESULTS_TABLE_ID}"
             try:
-                await page.wait_for_selector(results_table_dom_selector, timeout=30000, state="attached")
-                await page.wait_for_timeout(2000) 
+                # First wait for any tables to appear (more general check)
+                logger.info("Waiting for any tables to appear...")
+                await page.wait_for_function("""
+                    () => document.querySelectorAll('table').length > 0
+                """, timeout=4000)  # Reduced from 8000ms
+                logger.info("At least one table appeared")
+                
+                # Then wait for our specific table
+                await page.wait_for_selector(results_table_dom_selector, timeout=4000, state="attached")  # Reduced from 8000ms
+                logger.debug("Results table attached to DOM")
+                
+                # Wait for table to have some content (more than just headers)
+                await page.wait_for_function(f"""
+                    () => {{
+                        const table = document.querySelector('{results_table_dom_selector}');
+                        return table && table.querySelectorAll('tr').length > 2;
+                    }}
+                """, timeout=4000)  # Reduced from 20000ms
+                logger.debug("Results table populated with data")
+                
+                # Ultra-fast additional wait for any remaining JavaScript
+                await page.wait_for_timeout(500)  # Reduced from 3000ms 
+                
             except PlaywrightTimeoutError:
                 logger.warning(f"Timeout waiting for results table '{results_table_dom_selector}'.")
+                # Try one more wait for content placeholder
+                try:
+                    await page.wait_for_selector("#ctl00_ContentPlaceHolder1", timeout=10000)
+                    logger.info("ContentPlaceHolder1 found, checking for tables...")
+                    await page.wait_for_timeout(5000)
+                except PlaywrightTimeoutError:
+                    logger.warning("ContentPlaceHolder1 also not found - content may not have loaded")
             
             html_content = await page.content()
             soup = BeautifulSoup(html_content, "html.parser")
@@ -251,16 +995,17 @@ class KikApiClient:
         # ... (öncekiyle aynı) ...
         if not html_fragment: return None
         cleaned_html = self._clean_html_for_markdown(html_fragment)
-        markdown_output = None; temp_file_path = None
+        markdown_output = None
         try:
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = cleaned_html.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
             md_converter = MarkItDown(enable_plugins=True, remove_alt_whitespace=True, keep_underline=True)
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_html_file:
-                tmp_html_file.write(cleaned_html); temp_file_path = tmp_html_file.name
-            markdown_output = md_converter.convert(temp_file_path).text_content
+            markdown_output = md_converter.convert(html_stream).text_content
             if markdown_output: markdown_output = re.sub(r'\n{3,}', '\n\n', markdown_output).strip()
         except Exception as e: logger.error(f"MarkItDown conversion error: {e}", exc_info=True)
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path): os.remove(temp_file_path)
         return markdown_output
 
 

kik_mcp_module/models.py

@@ -1,5 +1,5 @@
 # kik_mcp_module/models.py
-from pydantic import BaseModel, Field, HttpUrl, computed_field
+from pydantic import BaseModel, Field, HttpUrl, computed_field, ConfigDict
 from typing import List, Optional
 from enum import Enum
 import base64 # Base64 encoding/decoding için
@@ -12,29 +12,29 @@ class KikKararTipi(str, Enum):
 
 class KikSearchRequest(BaseModel):
     """Model for KIK Decision search criteria."""
-    karar_tipi: KikKararTipi = Field(KikKararTipi.UYUSMAZLIK, description="Type of KIK Decision.")
-    karar_no: Optional[str] = Field(None, description="Decision Number (e.g., '2024/UH.II-1766').")
-    karar_tarihi_baslangic: Optional[str] = Field(None, description="Decision Date Start (DD.MM.YYYY).", pattern=r"^\d{2}\.\d{2}\.\d{4}$")
-    karar_tarihi_bitis: Optional[str] = Field(None, description="Decision Date End (DD.MM.YYYY).", pattern=r"^\d{2}\.\d{2}\.\d{4}$")
-    resmi_gazete_sayisi: Optional[str] = Field(None, description="Official Gazette Number.")
-    resmi_gazete_tarihi: Optional[str] = Field(None, description="Official Gazette Date (DD.MM.YYYY).", pattern=r"^\d{2}\.\d{2}\.\d{4}$")
-    basvuru_konusu_ihale: Optional[str] = Field(None, description="Tender subject of the application.")
-    basvuru_sahibi: Optional[str] = Field(None, description="Applicant.")
-    ihaleyi_yapan_idare: Optional[str] = Field(None, description="Procuring Entity.")
-    yil: Optional[str] = Field(None, description="Year of the decision.")
-    karar_metni: Optional[str] = Field(None, description="Keyword/phrase in decision text.")
-    page: int = Field(1, ge=1, description="Results page number.")
+    karar_tipi: KikKararTipi = Field(KikKararTipi.UYUSMAZLIK, description="Type")
+    karar_no: Optional[str] = Field(None, description="No")
+    karar_tarihi_baslangic: Optional[str] = Field(None, description="Start", pattern=r"^\d{2}\.\d{2}\.\d{4}$")
+    karar_tarihi_bitis: Optional[str] = Field(None, description="End", pattern=r"^\d{2}\.\d{2}\.\d{4}$")
+    resmi_gazete_sayisi: Optional[str] = Field(None, description="Gazette")
+    resmi_gazete_tarihi: Optional[str] = Field(None, description="Date", pattern=r"^\d{2}\.\d{2}\.\d{4}$")
+    basvuru_konusu_ihale: Optional[str] = Field(None, description="Subject")
+    basvuru_sahibi: Optional[str] = Field(None, description="Applicant")
+    ihaleyi_yapan_idare: Optional[str] = Field(None, description="Entity")
+    yil: Optional[str] = Field(None, description="Year")
+    karar_metni: Optional[str] = Field(None, description="Text")
+    page: int = Field(1, ge=1, description="Page")
 
 class KikDecisionEntry(BaseModel):
     """Represents a single decision entry from KIK search results."""
-    preview_event_target: str = Field(..., description="Internal event target for fetching details.")
-    karar_no_str: str = Field(..., alias="kararNo", description="Raw decision number as extracted from KIK (e.g., '2024/UH.II-1766').")
-    karar_tipi: KikKararTipi = Field(..., description="The type of decision this entry belongs to.")
+    preview_event_target: str = Field(..., description="Event target")
+    karar_no_str: str = Field(..., alias="kararNo", description="Decision number")
+    karar_tipi: KikKararTipi = Field(..., description="Decision type")
     
-    karar_tarihi_str: str = Field(..., alias="kararTarihi", description="Decision date.")
-    idare_str: Optional[str] = Field(None, alias="idare", description="Procuring entity.")
-    basvuru_sahibi_str: Optional[str] = Field(None, alias="basvuruSahibi", description="Applicant.")
-    ihale_konusu_str: Optional[str] = Field(None, alias="ihaleKonusu", description="Tender subject.")
+    karar_tarihi_str: str = Field(..., alias="kararTarihi", description="Date")
+    idare_str: Optional[str] = Field(None, alias="idare", description="Entity")
+    basvuru_sahibi_str: Optional[str] = Field(None, alias="basvuruSahibi", description="Applicant")
+    ihale_konusu_str: Optional[str] = Field(None, alias="ihaleKonusu", description="Subject")
 
     @computed_field
     @property
@@ -46,8 +46,7 @@ class KikDecisionEntry(BaseModel):
         combined_key = f"{self.karar_tipi.value}|{self.karar_no_str}"
         return base64.b64encode(combined_key.encode('utf-8')).decode('utf-8')
 
-    class Config:
-        populate_by_name = True
+    model_config = ConfigDict(populate_by_name=True)
 
 class KikSearchResult(BaseModel):
     """Model for KIK search results."""
@@ -59,19 +58,17 @@ class KikDocumentMarkdown(BaseModel):
     """
     KIK decision document, with Markdown content potentially paginated.
     """
-    retrieved_with_karar_id: Optional[str] = Field(None, description="The Base64 encoded karar_id that was used to request this document.")
-    # Decode edilmiş karar no ve tipini de yanıt olarak ekleyelim, Claude için faydalı olabilir.
-    retrieved_karar_no: Optional[str] = Field(None, description="The raw KIK Decision Number (e.g., '2024/UH.II-1766') this document pertains to.")
-    retrieved_karar_tipi: Optional[KikKararTipi] = Field(None, description="The KIK Decision Type this document pertains to.")
+    retrieved_with_karar_id: Optional[str] = Field(None, description="Request ID")
+    retrieved_karar_no: Optional[str] = Field(None, description="Decision number")
+    retrieved_karar_tipi: Optional[KikKararTipi] = Field(None, description="Decision type")
     
-    karar_id_param_from_url: Optional[str] = Field(None, alias="kararIdParam", description="The KIK system's internal KararId parameter from the document's display URL (KurulKararGoster.aspx).")
-    markdown_chunk: Optional[str] = Field(None, description="The requested chunk of the decision content converted to Markdown.")
-    source_url: Optional[str] = Field(None, description="The source URL of the original document (KurulKararGoster.aspx).")
-    error_message: Optional[str] = Field(None, description="Error message if document retrieval or processing failed.")
-    current_page: int = Field(1, description="The current page number of the markdown chunk being returned.")
-    total_pages: int = Field(1, description="The total number of pages the full markdown content is divided into.")
-    is_paginated: bool = Field(False, description="True if the full markdown content is split into multiple pages.")
-    full_content_char_count: Optional[int] = Field(None, description="Total character count of the full markdown content before chunking.")
+    karar_id_param_from_url: Optional[str] = Field(None, alias="kararIdParam", description="Internal ID")
+    markdown_chunk: Optional[str] = Field(None, description="Content")
+    source_url: Optional[str] = Field(None, description="Source URL")
+    error_message: Optional[str] = Field(None, description="Error")
+    current_page: int = Field(1, description="Page")
+    total_pages: int = Field(1, description="Total pages")
+    is_paginated: bool = Field(False, description="Paginated")
+    full_content_char_count: Optional[int] = Field(None, description="Char count")
 
-    class Config:
-        populate_by_name = True
+    model_config = ConfigDict(populate_by_name=True)

kvkk_mcp_module/__init__.py

@@ -0,0 +1 @@
+# kvkk_mcp_module/__init__.py

kvkk_mcp_module/client.py

@@ -0,0 +1,372 @@
+# kvkk_mcp_module/client.py
+
+import httpx
+from bs4 import BeautifulSoup
+from typing import List, Optional, Dict, Any
+import logging
+import os
+import re
+import io
+import math
+from urllib.parse import urljoin, urlparse, parse_qs
+from markitdown import MarkItDown
+from pydantic import HttpUrl
+
+from .models import (
+    KvkkSearchRequest,
+    KvkkDecisionSummary,
+    KvkkSearchResult,
+    KvkkDocumentMarkdown
+)
+
+logger = logging.getLogger(__name__)
+if not logger.hasHandlers():
+    logging.basicConfig(
+        level=logging.INFO,
+        format='%(asctime)s - %(name)s - %(levelname)s - %(message)s'
+    )
+
+class KvkkApiClient:
+    """
+    API client for searching and retrieving KVKK (Personal Data Protection Authority) decisions
+    using Brave Search API for discovery and direct HTTP requests for content retrieval.
+    """
+    
+    BRAVE_API_URL = "https://api.search.brave.com/res/v1/web/search"
+    KVKK_BASE_URL = "https://www.kvkk.gov.tr"
+    DOCUMENT_MARKDOWN_CHUNK_SIZE = 5000  # Character limit per page
+    
+    def __init__(self, request_timeout: float = 60.0):
+        """Initialize the KVKK API client."""
+        self.brave_api_token = os.getenv("BRAVE_API_TOKEN")
+        if not self.brave_api_token:
+            # Fallback to provided free token
+            self.brave_api_token = "BSAuaRKB-dvSDSQxIN0ft1p2k6N82Kq"
+            logger.info("Using fallback Brave API token (limited free token)")
+        else:
+            logger.info("Using Brave API token from environment variable")
+        
+        self.http_client = httpx.AsyncClient(
+            headers={
+                "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
+                "Accept-Language": "tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7",
+                "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
+            },
+            timeout=request_timeout,
+            verify=True,
+            follow_redirects=True
+        )
+    
+    def _construct_search_query(self, keywords: str) -> str:
+        """Construct the search query for Brave API."""
+        base_query = 'site:kvkk.gov.tr "karar özeti"'
+        if keywords.strip():
+            return f"{base_query} {keywords.strip()}"
+        return base_query
+    
+    def _extract_decision_id_from_url(self, url: str) -> Optional[str]:
+        """Extract decision ID from KVKK decision URL."""
+        try:
+            # Example URL: https://www.kvkk.gov.tr/Icerik/7288/2021-1303
+            parsed_url = urlparse(url)
+            path_parts = parsed_url.path.strip('/').split('/')
+            
+            if len(path_parts) >= 3 and path_parts[0] == 'Icerik':
+                # Extract the decision ID from the path
+                decision_id = '/'.join(path_parts[1:])  # e.g., "7288/2021-1303"
+                return decision_id
+            
+        except Exception as e:
+            logger.debug(f"Could not extract decision ID from URL {url}: {e}")
+        
+        return None
+    
+    def _extract_decision_metadata_from_title(self, title: str) -> Dict[str, Optional[str]]:
+        """Extract decision metadata from title string."""
+        metadata = {
+            "decision_date": None,
+            "decision_number": None
+        }
+        
+        if not title:
+            return metadata
+        
+        # Extract decision date (DD/MM/YYYY format)
+        date_match = re.search(r'(\d{1,2}/\d{1,2}/\d{4})', title)
+        if date_match:
+            metadata["decision_date"] = date_match.group(1)
+        
+        # Extract decision number (YYYY/XXXX format)
+        number_match = re.search(r'(\d{4}/\d+)', title)
+        if number_match:
+            metadata["decision_number"] = number_match.group(1)
+        
+        return metadata
+    
+    async def search_decisions(self, params: KvkkSearchRequest) -> KvkkSearchResult:
+        """Search for KVKK decisions using Brave API."""
+        
+        search_query = self._construct_search_query(params.keywords)
+        logger.info(f"KvkkApiClient: Searching with query: {search_query}")
+        
+        try:
+            # Calculate offset for pagination
+            offset = (params.page - 1) * params.pageSize
+            
+            response = await self.http_client.get(
+                self.BRAVE_API_URL,
+                headers={
+                    "Accept": "application/json",
+                    "Accept-Encoding": "gzip",
+                    "x-subscription-token": self.brave_api_token
+                },
+                params={
+                    "q": search_query,
+                    "country": "TR",
+                    "search_lang": "tr",
+                    "ui_lang": "tr-TR",
+                    "offset": offset,
+                    "count": params.pageSize
+                }
+            )
+            
+            response.raise_for_status()
+            data = response.json()
+            
+            # Extract search results
+            decisions = []
+            web_results = data.get("web", {}).get("results", [])
+            
+            for result in web_results:
+                title = result.get("title", "")
+                url = result.get("url", "")
+                description = result.get("description", "")
+                
+                # Extract metadata from title
+                metadata = self._extract_decision_metadata_from_title(title)
+                
+                # Extract decision ID from URL
+                decision_id = self._extract_decision_id_from_url(url)
+                
+                decision = KvkkDecisionSummary(
+                    title=title,
+                    url=HttpUrl(url) if url else None,
+                    description=description,
+                    decision_id=decision_id,
+                    publication_date=metadata.get("decision_date"),
+                    decision_number=metadata.get("decision_number")
+                )
+                decisions.append(decision)
+            
+            # Get total results if available
+            total_results = None
+            query_info = data.get("query", {})
+            if "total_results" in query_info:
+                total_results = query_info["total_results"]
+            
+            return KvkkSearchResult(
+                decisions=decisions,
+                total_results=total_results,
+                page=params.page,
+                pageSize=params.pageSize,
+                query=search_query
+            )
+            
+        except httpx.RequestError as e:
+            logger.error(f"KvkkApiClient: HTTP request error during search: {e}")
+            return KvkkSearchResult(
+                decisions=[], 
+                total_results=0, 
+                page=params.page, 
+                pageSize=params.pageSize,
+                query=search_query
+            )
+        except Exception as e:
+            logger.error(f"KvkkApiClient: Unexpected error during search: {e}")
+            return KvkkSearchResult(
+                decisions=[], 
+                total_results=0, 
+                page=params.page, 
+                pageSize=params.pageSize,
+                query=search_query
+            )
+    
+    def _extract_decision_content_from_html(self, html: str, url: str) -> Dict[str, Any]:
+        """Extract decision content from KVKK decision page HTML."""
+        try:
+            soup = BeautifulSoup(html, 'html.parser')
+            
+            # Extract title
+            title = None
+            title_element = soup.find('h3', class_='blog-post-title')
+            if title_element:
+                title = title_element.get_text(strip=True)
+            elif soup.title:
+                title = soup.title.get_text(strip=True)
+            
+            # Extract decision content from the main content div
+            content_div = soup.find('div', class_='blog-post-inner')
+            if not content_div:
+                # Fallback to other possible content containers
+                content_div = soup.find('div', style='text-align:justify;')
+                if not content_div:
+                    logger.warning(f"Could not find decision content div in {url}")
+                    return {
+                        "title": title,
+                        "decision_date": None,
+                        "decision_number": None,
+                        "subject_summary": None,
+                        "html_content": None
+                    }
+            
+            # Extract decision metadata from table
+            decision_date = None
+            decision_number = None
+            subject_summary = None
+            
+            table = content_div.find('table')
+            if table:
+                rows = table.find_all('tr')
+                for row in rows:
+                    cells = row.find_all('td')
+                    if len(cells) >= 3:
+                        field_name = cells[0].get_text(strip=True)
+                        field_value = cells[2].get_text(strip=True)
+                        
+                        if 'Karar Tarihi' in field_name:
+                            decision_date = field_value
+                        elif 'Karar No' in field_name:
+                            decision_number = field_value
+                        elif 'Konu Özeti' in field_name:
+                            subject_summary = field_value
+            
+            return {
+                "title": title,
+                "decision_date": decision_date,
+                "decision_number": decision_number,
+                "subject_summary": subject_summary,
+                "html_content": str(content_div)
+            }
+            
+        except Exception as e:
+            logger.error(f"Error extracting content from HTML for {url}: {e}")
+            return {
+                "title": None,
+                "decision_date": None,
+                "decision_number": None,
+                "subject_summary": None,
+                "html_content": None
+            }
+    
+    def _convert_html_to_markdown(self, html_content: str) -> Optional[str]:
+        """Convert HTML content to Markdown using MarkItDown with BytesIO to avoid filename length issues."""
+        if not html_content:
+            return None
+        
+        try:
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_content.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown(enable_plugins=False)
+            result = md_converter.convert(html_stream)
+            return result.text_content
+        except Exception as e:
+            logger.error(f"Error converting HTML to Markdown: {e}")
+            return None
+    
+    async def get_decision_document(self, decision_url: str, page_number: int = 1) -> KvkkDocumentMarkdown:
+        """Retrieve and convert a KVKK decision document to paginated Markdown."""
+        logger.info(f"KvkkApiClient: Getting decision document from: {decision_url}, page: {page_number}")
+        
+        try:
+            # Fetch the decision page
+            response = await self.http_client.get(decision_url)
+            response.raise_for_status()
+            
+            # Extract content from HTML
+            extracted_data = self._extract_decision_content_from_html(response.text, decision_url)
+            
+            # Convert HTML content to Markdown
+            full_markdown_content = None
+            if extracted_data["html_content"]:
+                full_markdown_content = self._convert_html_to_markdown(extracted_data["html_content"])
+            
+            if not full_markdown_content:
+                return KvkkDocumentMarkdown(
+                    source_url=HttpUrl(decision_url),
+                    title=extracted_data["title"],
+                    decision_date=extracted_data["decision_date"],
+                    decision_number=extracted_data["decision_number"],
+                    subject_summary=extracted_data["subject_summary"],
+                    markdown_chunk=None,
+                    current_page=page_number,
+                    total_pages=0,
+                    is_paginated=False,
+                    error_message="Could not convert document content to Markdown"
+                )
+            
+            # Calculate pagination
+            content_length = len(full_markdown_content)
+            total_pages = math.ceil(content_length / self.DOCUMENT_MARKDOWN_CHUNK_SIZE)
+            if total_pages == 0:
+                total_pages = 1
+            
+            # Clamp page number to valid range
+            current_page_clamped = max(1, min(page_number, total_pages))
+            
+            # Extract the requested chunk
+            start_index = (current_page_clamped - 1) * self.DOCUMENT_MARKDOWN_CHUNK_SIZE
+            end_index = start_index + self.DOCUMENT_MARKDOWN_CHUNK_SIZE
+            markdown_chunk = full_markdown_content[start_index:end_index]
+            
+            return KvkkDocumentMarkdown(
+                source_url=HttpUrl(decision_url),
+                title=extracted_data["title"],
+                decision_date=extracted_data["decision_date"],
+                decision_number=extracted_data["decision_number"],
+                subject_summary=extracted_data["subject_summary"],
+                markdown_chunk=markdown_chunk,
+                current_page=current_page_clamped,
+                total_pages=total_pages,
+                is_paginated=(total_pages > 1),
+                error_message=None
+            )
+            
+        except httpx.HTTPStatusError as e:
+            error_msg = f"HTTP error {e.response.status_code} when fetching decision document"
+            logger.error(f"KvkkApiClient: {error_msg}")
+            return KvkkDocumentMarkdown(
+                source_url=HttpUrl(decision_url),
+                title=None,
+                decision_date=None,
+                decision_number=None,
+                subject_summary=None,
+                markdown_chunk=None,
+                current_page=page_number,
+                total_pages=0,
+                is_paginated=False,
+                error_message=error_msg
+            )
+        except Exception as e:
+            error_msg = f"Unexpected error when fetching decision document: {str(e)}"
+            logger.error(f"KvkkApiClient: {error_msg}")
+            return KvkkDocumentMarkdown(
+                source_url=HttpUrl(decision_url),
+                title=None,
+                decision_date=None,
+                decision_number=None,
+                subject_summary=None,
+                markdown_chunk=None,
+                current_page=page_number,
+                total_pages=0,
+                is_paginated=False,
+                error_message=error_msg
+            )
+    
+    async def close_client_session(self):
+        """Close the HTTP client session."""
+        if hasattr(self, 'http_client') and self.http_client and not self.http_client.is_closed:
+            await self.http_client.aclose()
+            logger.info("KvkkApiClient: HTTP client session closed.")

kvkk_mcp_module/models.py

@@ -0,0 +1,49 @@
+# kvkk_mcp_module/models.py
+
+from pydantic import BaseModel, Field, HttpUrl
+from typing import List, Optional, Any
+
+class KvkkSearchRequest(BaseModel):
+    """Model for KVKK (Personal Data Protection Authority) search request via Brave API."""
+    keywords: str = Field(..., description="""
+        Keywords to search for in KVKK decisions. 
+        The search will automatically include 'site:kvkk.gov.tr "karar özeti"' to target KVKK decision summaries.
+        Examples: "açık rıza", "veri güvenliği", "kişisel veri işleme"
+    """)
+    page: int = Field(1, ge=1, le=50, description="Page number for search results (1-50).")
+    pageSize: int = Field(10, ge=1, le=10, description="Number of results per page (1-10).")
+
+class KvkkDecisionSummary(BaseModel):
+    """Model for a single KVKK decision summary from Brave search results."""
+    title: Optional[str] = Field(None, description="Decision title from search results.")
+    url: Optional[HttpUrl] = Field(None, description="URL to the KVKK decision page.")
+    description: Optional[str] = Field(None, description="Brief description or snippet from search results.")
+    decision_id: Optional[str] = Field(None, description="Value")
+    publication_date: Optional[str] = Field(None, description="Value")
+    decision_number: Optional[str] = Field(None, description="Value")
+
+class KvkkSearchResult(BaseModel):
+    """Model for the overall search result for KVKK decisions."""
+    decisions: List[KvkkDecisionSummary] = Field(default_factory=list, description="List of KVKK decisions found.")
+    total_results: Optional[int] = Field(None, description="Value")
+    page: int = Field(1, description="Current page number of results.")
+    pageSize: int = Field(10, description="Number of results per page.")
+    query: Optional[str] = Field(None, description="The actual search query sent to Brave API.")
+
+class KvkkDocumentMarkdown(BaseModel):
+    """Model for KVKK decision document content converted to paginated Markdown."""
+    source_url: HttpUrl = Field(description="URL of the original KVKK decision page.")
+    title: Optional[str] = Field(None, description="Title of the KVKK decision.")
+    decision_date: Optional[str] = Field(None, description="Decision date (Karar Tarihi).")
+    decision_number: Optional[str] = Field(None, description="Decision number (Karar No).")
+    subject_summary: Optional[str] = Field(None, description="Subject summary (Konu Özeti).")
+    markdown_chunk: Optional[str] = Field(None, description="A 5,000 character chunk of the Markdown content.")
+    current_page: int = Field(description="The current page number of the markdown chunk (1-indexed).")
+    total_pages: int = Field(description="Total number of pages for the full markdown content.")
+    is_paginated: bool = Field(description="True if the full markdown content is split into multiple pages.")
+    error_message: Optional[str] = Field(None, description="Value")
+    
+    class Config:
+        json_encoders = {
+            HttpUrl: str
+        }

mcp_auth/__init__.py

@@ -0,0 +1,28 @@
+"""
+MCP Auth Toolkit - OAuth 2.1 + Authorization for Model Context Protocol Servers
+Integrated with Clerk Authentication
+"""
+
+from .middleware import (
+    AuthContext,
+    FastMCPAuthWrapper,
+    MCPAuthMiddleware,
+    auth_required,
+)
+from .oauth import OAuthConfig, OAuthProvider
+from .policy import PolicyEngine, ToolPolicy, create_default_policies
+from .storage import PersistentStorage
+
+__version__ = "0.1.0"
+__all__ = [
+    "OAuthProvider",
+    "OAuthConfig", 
+    "AuthContext",
+    "auth_required",
+    "create_default_policies",
+    "MCPAuthMiddleware",
+    "FastMCPAuthWrapper",
+    "PolicyEngine",
+    "ToolPolicy",
+    "PersistentStorage",
+]

mcp_auth/clerk_config.py

@@ -0,0 +1,73 @@
+"""
+Clerk OAuth configuration for MCP Auth Toolkit
+"""
+
+import os
+import logging
+from .oauth import OAuthConfig
+
+logger = logging.getLogger(__name__)
+
+
+def create_clerk_oauth_config() -> OAuthConfig:
+    """Create OAuth configuration for Clerk integration using SDK"""
+    
+    # Get Clerk configuration from environment
+    clerk_domain = os.getenv("CLERK_DOMAIN", "accounts.yargimcp.com")
+    clerk_publishable_key = os.getenv("CLERK_PUBLISHABLE_KEY")
+    clerk_secret_key = os.getenv("CLERK_SECRET_KEY")
+    
+    if not clerk_publishable_key or not clerk_secret_key:
+        raise ValueError("CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY are required")
+    
+    # For Clerk with custom domains, we use our adapter endpoints
+    # This allows us to handle the custom domain flow properly
+    base_url = os.getenv("BASE_URL", "https://yargimcp.com")
+    
+    config = OAuthConfig(
+        client_id=clerk_publishable_key,
+        client_secret=clerk_secret_key,
+        # Use our adapter endpoints instead of Clerk's direct endpoints
+        authorization_endpoint=f"{base_url}/authorize",
+        token_endpoint=f"{base_url}/token",
+        # Keep Clerk's JWKS for token validation
+        jwks_uri=f"https://{clerk_domain}/.well-known/jwks.json",
+        issuer=base_url,  # We're the issuer for MCP tokens
+        scopes=["mcp:tools:read", "mcp:tools:write", "openid", "profile", "email"]
+    )
+    
+    logger.info(f"Created Clerk OAuth config with adapter endpoints")
+    logger.info(f"Clerk domain: {clerk_domain}")
+    logger.debug(f"Authorization endpoint: {config.authorization_endpoint}")
+    logger.debug(f"Token endpoint: {config.token_endpoint}")
+    
+    return config
+
+
+def get_jwt_secret() -> str:
+    """Get JWT secret for token signing"""
+    jwt_secret = os.getenv("JWT_SECRET_KEY")
+    
+    if not jwt_secret:
+        raise ValueError("JWT_SECRET_KEY environment variable is required")
+    
+    return jwt_secret
+
+
+def create_mcp_server_config():
+    """Create complete MCP server configuration for Clerk integration"""
+    
+    try:
+        oauth_config = create_clerk_oauth_config()
+        jwt_secret = get_jwt_secret()
+        
+        return {
+            "oauth_config": oauth_config,
+            "jwt_secret": jwt_secret,
+            "base_url": os.getenv("BASE_URL", "https://yargi-mcp.fly.dev"),
+            "auth_enabled": os.getenv("ENABLE_AUTH", "true").lower() == "true"
+        }
+        
+    except Exception as e:
+        logger.error(f"Failed to create MCP server config: {e}")
+        raise

mcp_auth/middleware.py

@@ -0,0 +1,315 @@
+"""
+MCP server middleware for OAuth authentication and authorization
+"""
+
+import functools
+import logging
+from collections.abc import Callable
+from dataclasses import dataclass
+from typing import Any, Optional
+
+logger = logging.getLogger(__name__)
+
+try:
+    from fastmcp import FastMCP
+    FASTMCP_AVAILABLE = True
+except ImportError:
+    FASTMCP_AVAILABLE = False
+    FastMCP = None
+    logger.warning("FastMCP not available, some features will be disabled")
+
+from .oauth import OAuthProvider
+from .policy import PolicyEngine
+
+
+@dataclass
+class AuthContext:
+    """Authentication context passed to MCP tools"""
+
+    user_id: str
+    scopes: list[str]
+    claims: dict[str, Any]
+    token: str
+
+
+class MCPAuthMiddleware:
+    """Authentication middleware for MCP servers"""
+
+    def __init__(self, oauth_provider: OAuthProvider, policy_engine: PolicyEngine):
+        self.oauth_provider = oauth_provider
+        self.policy_engine = policy_engine
+
+    def authenticate_request(self, authorization_header: str) -> AuthContext | None:
+        """Extract and validate auth token from request"""
+
+        if not authorization_header:
+            logger.debug("No authorization header provided")
+            return None
+
+        if not authorization_header.startswith("Bearer "):
+            logger.debug("Authorization header does not start with 'Bearer '")
+            return None
+
+        token = authorization_header[7:]  # Remove 'Bearer ' prefix
+
+        token_info = self.oauth_provider.introspect_token(token)
+
+        if not token_info.get("active"):
+            logger.warning("Token is not active")
+            return None
+
+        logger.debug(f"Authenticated user: {token_info.get('sub', 'unknown')}")
+
+        return AuthContext(
+            user_id=token_info.get("sub", "unknown"),
+            scopes=token_info.get("mcp_tool_scopes", []),
+            claims=token_info,
+            token=token,
+        )
+
+    def authorize_tool_call(
+        self, tool_name: str, auth_context: AuthContext
+    ) -> tuple[bool, str | None]:
+        """Check if user can call the specified tool"""
+
+        return self.policy_engine.authorize_tool_call(
+            tool_name=tool_name,
+            user_scopes=auth_context.scopes,
+            user_claims=auth_context.claims,
+        )
+
+
+def auth_required(
+    oauth_provider: OAuthProvider,
+    policy_engine: PolicyEngine,
+    tool_name: str | None = None,
+):
+    """
+    Decorator to require authentication for MCP tool functions
+
+    Usage:
+        @auth_required(oauth_provider, policy_engine, "search_yargitay")
+        def my_tool_function(context: AuthContext, ...):
+            pass
+    """
+
+    def decorator(func: Callable) -> Callable:
+        middleware = MCPAuthMiddleware(oauth_provider, policy_engine)
+
+        @functools.wraps(func)
+        async def wrapper(*args, **kwargs):
+            # Extract authorization header from kwargs
+            auth_header = kwargs.pop("authorization", None)
+            
+            # Also check in args if it's a Request object
+            if not auth_header and args:
+                for arg in args:
+                    if hasattr(arg, 'headers'):
+                        auth_header = arg.headers.get("Authorization")
+                        break
+
+            if not auth_header:
+                logger.warning(f"No authorization header for tool '{tool_name or func.__name__}'")
+                raise PermissionError("Authorization header required")
+
+            auth_context = middleware.authenticate_request(auth_header)
+
+            if not auth_context:
+                logger.warning(f"Authentication failed for tool '{tool_name or func.__name__}'")
+                raise PermissionError("Invalid or expired token")
+
+            actual_tool_name = tool_name or func.__name__
+
+            authorized, reason = middleware.authorize_tool_call(
+                actual_tool_name, auth_context
+            )
+
+            if not authorized:
+                logger.warning(f"Authorization failed for tool '{actual_tool_name}': {reason}")
+                raise PermissionError(f"Access denied: {reason}")
+
+            # Add auth context to function call
+            return await func(auth_context, *args, **kwargs)
+
+        return wrapper
+
+    return decorator
+
+
+class FastMCPAuthWrapper:
+    """Wrapper for FastMCP servers to add authentication"""
+
+    def __init__(
+        self,
+        mcp_server: "FastMCP",
+        oauth_provider: OAuthProvider,
+        policy_engine: PolicyEngine,
+    ):
+        if not FASTMCP_AVAILABLE:
+            raise ImportError("FastMCP is required for FastMCPAuthWrapper")
+            
+        self.mcp_server = mcp_server
+        self.middleware = MCPAuthMiddleware(oauth_provider, policy_engine)
+        self.oauth_provider = oauth_provider
+        logger.info("Initializing FastMCP authentication wrapper")
+        self._wrap_tools()
+
+    def _wrap_tools(self):
+        """Wrap all existing tools with auth middleware"""
+
+        # Try different FastMCP tool storage locations
+        tool_registry = None
+        
+        if hasattr(self.mcp_server, '_tools'):
+            tool_registry = self.mcp_server._tools
+        elif hasattr(self.mcp_server, 'tools'):
+            tool_registry = self.mcp_server.tools
+        elif hasattr(self.mcp_server, '_tool_registry'):
+            tool_registry = self.mcp_server._tool_registry
+        elif hasattr(self.mcp_server, '_handlers') and hasattr(self.mcp_server._handlers, 'tools'):
+            tool_registry = self.mcp_server._handlers.tools
+        
+        if not tool_registry:
+            logger.warning("FastMCP server tool registry not found, tools will not be automatically wrapped")
+            logger.debug(f"Available server attributes: {dir(self.mcp_server)}")
+            return
+
+        logger.debug(f"Found tool registry with {len(tool_registry)} tools")
+        original_tools = dict(tool_registry)
+        wrapped_count = 0
+
+        for tool_name, tool_func in original_tools.items():
+            try:
+                wrapped_func = self._create_auth_wrapper(tool_name, tool_func)
+                tool_registry[tool_name] = wrapped_func
+                wrapped_count += 1
+                logger.debug(f"Wrapped tool: {tool_name}")
+            except Exception as e:
+                logger.error(f"Failed to wrap tool {tool_name}: {e}")
+
+        logger.info(f"Successfully wrapped {wrapped_count} tools with authentication")
+
+    def _create_auth_wrapper(self, tool_name: str, original_func: Callable) -> Callable:
+        """Create auth wrapper for a specific tool"""
+
+        @functools.wraps(original_func)
+        async def auth_wrapper(*args, **kwargs):
+            # Extract authorization from various sources
+            auth_header = None
+            
+            # Check kwargs first
+            auth_header = kwargs.pop("authorization", None)
+            
+            # Check if first argument is a Request object
+            if not auth_header and args:
+                first_arg = args[0]
+                if hasattr(first_arg, 'headers'):
+                    auth_header = first_arg.headers.get("Authorization")
+
+            if not auth_header:
+                logger.warning(f"No authorization header for tool '{tool_name}'")
+                raise PermissionError("Authorization required")
+
+            auth_context = self.middleware.authenticate_request(auth_header)
+
+            if not auth_context:
+                logger.warning(f"Authentication failed for tool '{tool_name}'")
+                raise PermissionError("Invalid token")
+
+            authorized, reason = self.middleware.authorize_tool_call(
+                tool_name, auth_context
+            )
+
+            if not authorized:
+                logger.warning(f"Authorization failed for tool '{tool_name}': {reason}")
+                raise PermissionError(f"Access denied: {reason}")
+
+            # Add auth context to kwargs
+            kwargs["auth_context"] = auth_context
+            logger.debug(f"Calling tool '{tool_name}' for user {auth_context.user_id}")
+            
+            return await original_func(*args, **kwargs)
+
+        return auth_wrapper
+
+    def add_oauth_endpoints(self):
+        """Add OAuth endpoints to the MCP server"""
+
+        @self.mcp_server.tool(
+            description="Initiate OAuth 2.1 authorization flow with PKCE",
+            annotations={"readOnlyHint": True, "idempotentHint": False}
+        )
+        async def oauth_authorize(redirect_uri: str, scopes: Optional[str] = None):
+            """OAuth authorization endpoint"""
+            scope_list = scopes.split(" ") if scopes else None
+            auth_url, pkce = self.oauth_provider.generate_authorization_url(
+                redirect_uri=redirect_uri, scopes=scope_list
+            )
+            logger.info(f"Generated authorization URL for redirect_uri: {redirect_uri}")
+            return {
+                "authorization_url": auth_url,
+                "code_verifier": pkce.verifier,  # For PKCE flow
+                "code_challenge": pkce.challenge,
+                "instructions": "Use the authorization_url to complete OAuth flow, then exchange the returned code using oauth_token tool"
+            }
+
+        @self.mcp_server.tool(
+            description="Exchange OAuth authorization code for access token",
+            annotations={"readOnlyHint": False, "idempotentHint": False}
+        )
+        async def oauth_token(
+            code: str,
+            state: str,
+            redirect_uri: str
+        ):
+            """OAuth token exchange endpoint"""
+            try:
+                result = await self.oauth_provider.exchange_code_for_token(
+                    code=code, state=state, redirect_uri=redirect_uri
+                )
+                logger.info("Successfully exchanged authorization code for token")
+                return result
+            except Exception as e:
+                logger.error(f"Token exchange failed: {e}")
+                raise
+
+        @self.mcp_server.tool(
+            description="Validate and introspect OAuth access token",
+            annotations={"readOnlyHint": True, "idempotentHint": True}
+        )
+        async def oauth_introspect(token: str):
+            """Token introspection endpoint"""
+            result = self.oauth_provider.introspect_token(token)
+            logger.debug(f"Token introspection: active={result.get('active', False)}")
+            return result
+
+        @self.mcp_server.tool(
+            description="Revoke OAuth access token",
+            annotations={"readOnlyHint": False, "idempotentHint": False}
+        )
+        async def oauth_revoke(token: str):
+            """Token revocation endpoint"""
+            success = self.oauth_provider.revoke_token(token)
+            logger.info(f"Token revocation: success={success}")
+            return {"revoked": success}
+
+        @self.mcp_server.tool(
+            description="Get list of tools available to authenticated user",
+            annotations={"readOnlyHint": True, "idempotentHint": True}
+        )
+        async def oauth_user_tools(authorization: str):
+            """Get user's allowed tools based on scopes"""
+            auth_context = self.middleware.authenticate_request(authorization)
+            if not auth_context:
+                raise PermissionError("Invalid token")
+            
+            allowed_patterns = self.middleware.policy_engine.get_allowed_tools(auth_context.scopes)
+            
+            return {
+                "user_id": auth_context.user_id,
+                "scopes": auth_context.scopes,
+                "allowed_tool_patterns": allowed_patterns,
+                "message": "Use these patterns to determine which tools you can access"
+            }
+
+        logger.info("Added OAuth endpoints: oauth_authorize, oauth_token, oauth_introspect, oauth_revoke, oauth_user_tools")

mcp_auth/oauth.py

@@ -0,0 +1,304 @@
+"""
+OAuth 2.1 + PKCE implementation for MCP servers with Clerk integration
+"""
+
+import base64
+import hashlib
+import secrets
+import time
+import logging
+from dataclasses import dataclass
+from datetime import datetime, timedelta
+from typing import Any, Optional
+from urllib.parse import urlencode
+
+import httpx
+import jwt
+from jwt.exceptions import PyJWTError, InvalidTokenError
+
+from .storage import PersistentStorage
+
+# Try to import Clerk SDK
+try:
+    from clerk_backend_api import Clerk
+    CLERK_AVAILABLE = True
+except ImportError:
+    CLERK_AVAILABLE = False
+    Clerk = None
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass
+class OAuthConfig:
+    """OAuth provider configuration for Clerk"""
+
+    client_id: str
+    client_secret: str
+    authorization_endpoint: str
+    token_endpoint: str
+    jwks_uri: str | None = None
+    issuer: str = "mcp-auth"
+    scopes: list[str] = None
+
+    def __post_init__(self):
+        if self.scopes is None:
+            self.scopes = ["mcp:tools:read", "mcp:tools:write"]
+
+
+class PKCEChallenge:
+    """PKCE challenge/verifier pair for OAuth 2.1"""
+
+    def __init__(self):
+        self.verifier = (
+            base64.urlsafe_b64encode(secrets.token_bytes(32))
+            .decode("utf-8")
+            .rstrip("=")
+        )
+
+        challenge_bytes = hashlib.sha256(self.verifier.encode("utf-8")).digest()
+        self.challenge = (
+            base64.urlsafe_b64encode(challenge_bytes).decode("utf-8").rstrip("=")
+        )
+
+
+class OAuthProvider:
+    """OAuth 2.1 provider with PKCE support and Clerk integration"""
+
+    def __init__(self, config: OAuthConfig, jwt_secret: str):
+        self.config = config
+        self.jwt_secret = jwt_secret
+        # Use persistent storage instead of memory
+        self.storage = PersistentStorage()
+        
+        # Initialize Clerk SDK if available
+        self.clerk = None
+        if CLERK_AVAILABLE and config.client_secret:
+            try:
+                self.clerk = Clerk(bearer_auth=config.client_secret)
+                logger.info("Clerk SDK initialized successfully")
+            except Exception as e:
+                logger.warning(f"Failed to initialize Clerk SDK: {e}")
+                
+        logger.info("OAuth provider initialized with persistent storage")
+
+    def generate_authorization_url(
+        self,
+        redirect_uri: str,
+        state: str | None = None,
+        scopes: list[str] | None = None,
+    ) -> tuple[str, PKCEChallenge]:
+        """Generate OAuth authorization URL with PKCE for Clerk"""
+
+        pkce = PKCEChallenge()
+        session_id = secrets.token_urlsafe(32)
+
+        if state is None:
+            state = secrets.token_urlsafe(16)
+
+        if scopes is None:
+            scopes = self.config.scopes
+
+        # Store session data with expiration
+        session_data = {
+            "pkce_verifier": pkce.verifier,
+            "state": state,
+            "redirect_uri": redirect_uri,
+            "scopes": scopes,
+            "created_at": time.time(),
+            "expires_at": (datetime.utcnow() + timedelta(minutes=10)).timestamp(),
+        }
+        self.storage.set_session(session_id, session_data)
+
+        # Build Clerk OAuth URL
+        # Check if this is a custom domain (sign-in endpoint)
+        if self.config.authorization_endpoint.endswith('/sign-in'):
+            # For custom domains, Clerk expects redirect_url parameter
+            params = {
+                "redirect_url": redirect_uri,
+                "state": f"{state}:{session_id}",
+            }
+            auth_url = f"{self.config.authorization_endpoint}?{urlencode(params)}"
+        else:
+            # Standard OAuth flow with PKCE
+            params = {
+                "response_type": "code",
+                "client_id": self.config.client_id,
+                "redirect_uri": redirect_uri,
+                "scope": " ".join(scopes),
+                "state": f"{state}:{session_id}",  # Combine state with session ID
+                "code_challenge": pkce.challenge,
+                "code_challenge_method": "S256",
+            }
+            auth_url = f"{self.config.authorization_endpoint}?{urlencode(params)}"
+        
+        logger.info(f"Generated OAuth URL with session {session_id[:8]}...")
+        logger.debug(f"Auth URL: {auth_url}")
+        return auth_url, pkce
+
+    async def exchange_code_for_token(
+        self, code: str, state: str, redirect_uri: str
+    ) -> dict[str, Any]:
+        """Exchange authorization code for access token with Clerk"""
+
+        try:
+            original_state, session_id = state.split(":", 1)
+        except ValueError as e:
+            logger.error(f"Invalid state format: {state}")
+            raise ValueError("Invalid state format") from e
+
+        session = self.storage.get_session(session_id)
+        if not session:
+            logger.error(f"Session {session_id} not found")
+            raise ValueError("Invalid session")
+        
+        # Check session expiration
+        if datetime.utcnow().timestamp() > session.get("expires_at", 0):
+            self.storage.delete_session(session_id)
+            logger.error(f"Session {session_id} expired")
+            raise ValueError("Session expired")
+
+        if session["state"] != original_state:
+            logger.error(f"State mismatch: expected {session['state']}, got {original_state}")
+            raise ValueError("State mismatch")
+
+        if session["redirect_uri"] != redirect_uri:
+            logger.error(f"Redirect URI mismatch: expected {session['redirect_uri']}, got {redirect_uri}")
+            raise ValueError("Redirect URI mismatch")
+
+        # Prepare token exchange request for Clerk
+        token_data = {
+            "grant_type": "authorization_code",
+            "client_id": self.config.client_id,
+            "client_secret": self.config.client_secret,
+            "code": code,
+            "redirect_uri": redirect_uri,
+            "code_verifier": session["pkce_verifier"],
+        }
+
+        logger.info(f"Exchanging code with Clerk for session {session_id[:8]}...")
+
+        async with httpx.AsyncClient() as client:
+            response = await client.post(
+                self.config.token_endpoint,
+                data=token_data,
+                headers={"Content-Type": "application/x-www-form-urlencoded"},
+                timeout=30.0,
+            )
+
+        if response.status_code != 200:
+            logger.error(f"Clerk token exchange failed: {response.status_code} - {response.text}")
+            raise ValueError(f"Token exchange failed: {response.text}")
+
+        token_response = response.json()
+        logger.info("Successfully exchanged code for Clerk token")
+
+        # Create MCP-scoped JWT token
+        access_token = self._create_mcp_token(
+            session["scopes"], token_response.get("access_token"), session_id
+        )
+
+        # Store token for introspection
+        token_id = secrets.token_urlsafe(16)
+        token_data = {
+            "access_token": access_token,
+            "scopes": session["scopes"],
+            "created_at": time.time(),
+            "expires_at": (datetime.utcnow() + timedelta(hours=1)).timestamp(),
+            "session_id": session_id,
+            "clerk_token": token_response.get("access_token"),
+        }
+        self.storage.set_token(token_id, token_data)
+
+        # Clean up session
+        self.storage.delete_session(session_id)
+
+        return {
+            "access_token": access_token,
+            "token_type": "bearer",
+            "expires_in": 3600,
+            "scope": " ".join(session["scopes"]),
+        }
+
+    def validate_pkce(self, code_verifier: str, code_challenge: str) -> bool:
+        """Validate PKCE code challenge (RFC 7636)"""
+        # S256 method
+        verifier_hash = hashlib.sha256(code_verifier.encode()).digest()
+        expected_challenge = base64.urlsafe_b64encode(verifier_hash).decode().rstrip('=')
+        return expected_challenge == code_challenge
+
+    def _create_mcp_token(
+        self, scopes: list[str], upstream_token: str, session_id: str
+    ) -> str:
+        """Create MCP-scoped JWT token with Clerk token embedded"""
+
+        now = int(time.time())
+        payload = {
+            "iss": self.config.issuer,
+            "sub": session_id,
+            "aud": "mcp-server",
+            "iat": now,
+            "exp": now + 3600,  # 1 hour expiration
+            "mcp_tool_scopes": scopes,
+            "upstream_token": upstream_token,
+            "clerk_integration": True,
+        }
+
+        return jwt.encode(payload, self.jwt_secret, algorithm="HS256")
+
+    def introspect_token(self, token: str) -> dict[str, Any]:
+        """Introspect and validate MCP token"""
+
+        try:
+            payload = jwt.decode(token, self.jwt_secret, algorithms=["HS256"])
+
+            # Check if token is expired
+            if payload.get("exp", 0) < time.time():
+                return {"active": False, "error": "token_expired"}
+
+            return {
+                "active": True,
+                "sub": payload.get("sub"),
+                "aud": payload.get("aud"),
+                "iss": payload.get("iss"),
+                "exp": payload.get("exp"),
+                "iat": payload.get("iat"),
+                "mcp_tool_scopes": payload.get("mcp_tool_scopes", []),
+                "upstream_token": payload.get("upstream_token"),
+                "clerk_integration": payload.get("clerk_integration", False),
+            }
+
+        except PyJWTError as e:
+            logger.warning(f"Token validation failed: {e}")
+            return {"active": False, "error": "invalid_token"}
+
+    def revoke_token(self, token: str) -> bool:
+        """Revoke a token"""
+
+        try:
+            payload = jwt.decode(token, self.jwt_secret, algorithms=["HS256"])
+            session_id = payload.get("sub")
+
+            # Remove all tokens associated with this session
+            all_tokens = self.storage.get_tokens()
+            tokens_to_remove = [
+                token_id
+                for token_id, token_data in all_tokens.items()
+                if token_data.get("session_id") == session_id
+            ]
+
+            for token_id in tokens_to_remove:
+                self.storage.delete_token(token_id)
+
+            logger.info(f"Revoked {len(tokens_to_remove)} tokens for session {session_id}")
+            return True
+
+        except InvalidTokenError as e:
+            logger.warning(f"Token revocation failed: {e}")
+            return False
+
+    def cleanup_expired_sessions(self):
+        """Clean up expired sessions and tokens"""
+        # This is now handled automatically by persistent storage
+        self.storage.cleanup_expired_sessions()
+        logger.debug("Cleanup completed via persistent storage")

mcp_auth/policy.py

@@ -0,0 +1,201 @@
+"""
+Authorization policy engine for MCP tools
+"""
+
+import re
+import logging
+from dataclasses import dataclass
+from enum import Enum
+from typing import Any
+
+logger = logging.getLogger(__name__)
+
+
+class PolicyAction(Enum):
+    ALLOW = "allow"
+    DENY = "deny"
+
+
+@dataclass
+class ToolPolicy:
+    """Policy rule for MCP tool access"""
+
+    tool_pattern: str  # regex pattern for tool names
+    required_scopes: list[str]
+    action: PolicyAction = PolicyAction.ALLOW
+    conditions: dict[str, Any] | None = None
+
+    def matches_tool(self, tool_name: str) -> bool:
+        """Check if the policy applies to given tool"""
+        return bool(re.match(self.tool_pattern, tool_name))
+
+    def evaluate_scopes(self, user_scopes: list[str]) -> bool:
+        """Check if user has required scopes"""
+        return all(scope in user_scopes for scope in self.required_scopes)
+
+
+class PolicyEngine:
+    """Authorization policy engine for Turkish legal database tools"""
+
+    def __init__(self):
+        self.policies: list[ToolPolicy] = []
+        self.default_action = PolicyAction.DENY
+
+    def add_policy(self, policy: ToolPolicy):
+        """Add a policy rule"""
+        self.policies.append(policy)
+        logger.debug(f"Added policy: {policy.tool_pattern} -> {policy.required_scopes}")
+
+    def add_tool_scope_policy(
+        self,
+        tool_pattern: str,
+        required_scopes: str | list[str],
+        action: PolicyAction = PolicyAction.ALLOW,
+    ):
+        """Convenience method to add tool-scope policy"""
+        if isinstance(required_scopes, str):
+            required_scopes = [required_scopes]
+
+        policy = ToolPolicy(
+            tool_pattern=tool_pattern, required_scopes=required_scopes, action=action
+        )
+        self.add_policy(policy)
+
+    def authorize_tool_call(
+        self,
+        tool_name: str,
+        user_scopes: list[str],
+        user_claims: dict[str, Any] | None = None,
+    ) -> tuple[bool, str | None]:
+        """
+        Authorize a tool call
+
+        Returns:
+            (authorized: bool, reason: Optional[str])
+        """
+
+        logger.debug(f"Authorizing tool '{tool_name}' for user with scopes: {user_scopes}")
+
+        matching_policies = [
+            policy for policy in self.policies if policy.matches_tool(tool_name)
+        ]
+
+        if not matching_policies:
+            if self.default_action == PolicyAction.ALLOW:
+                logger.debug(f"No policies found for '{tool_name}', allowing by default")
+                return True, None
+            else:
+                logger.warning(f"No policies found for '{tool_name}', denying by default")
+                return False, f"No policy found for tool '{tool_name}', default deny"
+
+        # Check for explicit deny policies first
+        for policy in matching_policies:
+            if policy.action == PolicyAction.DENY:
+                if policy.evaluate_scopes(user_scopes):
+                    logger.warning(f"Explicit deny policy matched for '{tool_name}'")
+                    return False, f"Explicit deny policy for tool '{tool_name}'"
+
+        # Check allow policies
+        allow_policies = [
+            p for p in matching_policies if p.action == PolicyAction.ALLOW
+        ]
+
+        if not allow_policies:
+            logger.warning(f"No allow policies found for '{tool_name}'")
+            return False, f"No allow policies found for tool '{tool_name}'"
+
+        for policy in allow_policies:
+            if policy.evaluate_scopes(user_scopes):
+                if self._evaluate_conditions(policy.conditions, user_claims):
+                    logger.debug(f"Authorization granted for '{tool_name}'")
+                    return True, None
+
+        logger.warning(f"Insufficient scopes for '{tool_name}'. Required: {[p.required_scopes for p in allow_policies]}, User has: {user_scopes}")
+        return False, f"Insufficient scopes for tool '{tool_name}'"
+
+    def _evaluate_conditions(
+        self,
+        conditions: dict[str, Any] | None,
+        user_claims: dict[str, Any] | None,
+    ) -> bool:
+        """Evaluate additional policy conditions"""
+
+        if not conditions:
+            return True
+
+        if not user_claims:
+            logger.debug("No user claims provided, conditions evaluation failed")
+            return False
+
+        for key, expected_value in conditions.items():
+            user_value = user_claims.get(key)
+
+            if isinstance(expected_value, list):
+                if user_value not in expected_value:
+                    logger.debug(f"Condition failed: {key} = {user_value} not in {expected_value}")
+                    return False
+            elif user_value != expected_value:
+                logger.debug(f"Condition failed: {key} = {user_value} != {expected_value}")
+                return False
+
+        return True
+
+    def get_allowed_tools(self, user_scopes: list[str]) -> list[str]:
+        """Get list of tool patterns user is allowed to call"""
+
+        allowed_tools = []
+
+        for policy in self.policies:
+            if policy.action == PolicyAction.ALLOW and policy.evaluate_scopes(
+                user_scopes
+            ):
+                allowed_tools.append(policy.tool_pattern)
+
+        return allowed_tools
+
+
+def create_turkish_legal_policies() -> PolicyEngine:
+    """Create policy set for Turkish legal database MCP server"""
+
+    engine = PolicyEngine()
+
+    # Administrative tools (full access)
+    engine.add_tool_scope_policy(".*", ["mcp:tools:admin"])
+
+    # Search tools - require read access
+    engine.add_tool_scope_policy("search.*", ["mcp:tools:read"])
+    
+    # Fetch/get document tools - require read access  
+    engine.add_tool_scope_policy("get_.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("fetch.*", ["mcp:tools:read"])
+
+    # Specific Turkish legal database tools
+    engine.add_tool_scope_policy("search_yargitay.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_danistay.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_anayasa.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_rekabet.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_kik.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_emsal.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_uyusmazlik.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_sayistay.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_.*_bedesten", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_yerel_hukuk.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_istinaf_hukuk.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("search_kyb.*", ["mcp:tools:read"])
+
+    # Document retrieval tools
+    engine.add_tool_scope_policy("get_.*_document.*", ["mcp:tools:read"])
+    engine.add_tool_scope_policy("get_.*_markdown", ["mcp:tools:read"])
+
+    # Write operations (if any future tools need them)
+    engine.add_tool_scope_policy("create_.*", ["mcp:tools:write"])
+    engine.add_tool_scope_policy("update_.*", ["mcp:tools:write"]) 
+    engine.add_tool_scope_policy("delete_.*", ["mcp:tools:write"])
+
+    logger.info("Created Turkish legal database policy engine")
+    return engine
+
+
+def create_default_policies() -> PolicyEngine:
+    """Create a default policy set for MCP servers (backwards compatibility)"""
+    return create_turkish_legal_policies()

mcp_auth/storage.py

@@ -0,0 +1,112 @@
+"""
+Persistent storage for OAuth sessions and tokens
+"""
+
+import json
+import os
+import tempfile
+import logging
+from datetime import datetime
+from typing import Dict, Any, Optional
+
+logger = logging.getLogger(__name__)
+
+
+class PersistentStorage:
+    """File-based persistent storage for OAuth data"""
+    
+    def __init__(self, storage_dir: str = None):
+        if storage_dir is None:
+            # Use system temp directory or environment variable
+            storage_dir = os.environ.get('TEMP', tempfile.gettempdir())
+        
+        self.storage_dir = os.path.join(storage_dir, 'mcp_oauth_storage')
+        os.makedirs(self.storage_dir, exist_ok=True)
+        
+        self.sessions_file = os.path.join(self.storage_dir, 'oauth_sessions.json')
+        self.tokens_file = os.path.join(self.storage_dir, 'oauth_tokens.json')
+        
+        logger.info(f"Persistent OAuth storage initialized at: {self.storage_dir}")
+    
+    def _load_json(self, filepath: str) -> Dict:
+        """Load JSON data from file"""
+        try:
+            if os.path.exists(filepath):
+                with open(filepath, 'r', encoding='utf-8') as f:
+                    return json.load(f)
+        except Exception as e:
+            logger.error(f"Error loading {filepath}: {e}")
+        return {}
+    
+    def _save_json(self, filepath: str, data: Dict):
+        """Save JSON data to file"""
+        try:
+            with open(filepath, 'w', encoding='utf-8') as f:
+                json.dump(data, f, indent=2, default=str)
+        except Exception as e:
+            logger.error(f"Error saving {filepath}: {e}")
+    
+    def get_sessions(self) -> Dict[str, Dict[str, Any]]:
+        """Get all OAuth sessions"""
+        data = self._load_json(self.sessions_file)
+        # Clean expired sessions
+        now = datetime.utcnow().timestamp()
+        valid_sessions = {k: v for k, v in data.items() 
+                         if v.get('expires_at', 0) > now}
+        if len(valid_sessions) != len(data):
+            self._save_json(self.sessions_file, valid_sessions)
+        return valid_sessions
+    
+    def set_session(self, session_id: str, data: Dict[str, Any]):
+        """Set OAuth session data"""
+        sessions = self.get_sessions()
+        sessions[session_id] = data
+        self._save_json(self.sessions_file, sessions)
+    
+    def get_session(self, session_id: str) -> Optional[Dict[str, Any]]:
+        """Get specific OAuth session data"""
+        sessions = self.get_sessions()
+        return sessions.get(session_id)
+    
+    def delete_session(self, session_id: str):
+        """Delete OAuth session"""
+        sessions = self.get_sessions()
+        if session_id in sessions:
+            del sessions[session_id]
+            self._save_json(self.sessions_file, sessions)
+    
+    def get_tokens(self) -> Dict[str, Dict[str, Any]]:
+        """Get all OAuth tokens"""
+        data = self._load_json(self.tokens_file)
+        # Clean expired tokens
+        now = datetime.utcnow().timestamp()
+        valid_tokens = {k: v for k, v in data.items() 
+                       if v.get('expires_at', 0) > now}
+        if len(valid_tokens) != len(data):
+            self._save_json(self.tokens_file, valid_tokens)
+        return valid_tokens
+    
+    def set_token(self, token_id: str, token_data: Dict[str, Any]):
+        """Set OAuth token data"""
+        tokens = self.get_tokens()
+        tokens[token_id] = token_data
+        self._save_json(self.tokens_file, tokens)
+    
+    def get_token(self, token_id: str) -> Optional[Dict[str, Any]]:
+        """Get specific OAuth token data"""
+        tokens = self.get_tokens()
+        return tokens.get(token_id)
+    
+    def delete_token(self, token_id: str):
+        """Delete OAuth token"""
+        tokens = self.get_tokens()
+        if token_id in tokens:
+            del tokens[token_id]
+            self._save_json(self.tokens_file, tokens)
+    
+    def cleanup_expired_sessions(self):
+        """Clean up expired sessions and tokens"""
+        # This is handled automatically in get_sessions() and get_tokens()
+        sessions = self.get_sessions()
+        tokens = self.get_tokens()
+        logger.debug(f"Cleanup: {len(sessions)} active sessions, {len(tokens)} active tokens")

mcp_auth_factory.py

@@ -0,0 +1,193 @@
+"""
+Factory for creating FastMCP app with MCP Auth Toolkit integration
+"""
+
+import logging
+import os
+from typing import Optional
+
+logger = logging.getLogger(__name__)
+
+try:
+    from fastmcp import FastMCP
+    FASTMCP_AVAILABLE = True
+except ImportError:
+    FASTMCP_AVAILABLE = False
+    FastMCP = None
+
+from mcp_auth import (
+    OAuthProvider, 
+    PolicyEngine, 
+    FastMCPAuthWrapper,
+    create_default_policies
+)
+from mcp_auth.clerk_config import create_mcp_server_config
+
+
+def create_auth_enabled_app(app_name: str = "Yargı MCP Server") -> FastMCP:
+    """Create FastMCP app with authentication enabled"""
+    
+    if not FASTMCP_AVAILABLE:
+        raise ImportError("FastMCP is required for authenticated MCP server")
+    
+    logger.info("Creating FastMCP app with MCP Auth Toolkit integration")
+    
+    # Create base FastMCP app
+    app = FastMCP(app_name)
+    
+    # Check if authentication is enabled
+    auth_enabled = os.getenv("ENABLE_AUTH", "true").lower() == "true"
+    
+    if not auth_enabled:
+        logger.info("Authentication disabled, returning basic FastMCP app")
+        return app
+    
+    try:
+        # Get configuration
+        logger.info("Getting MCP server configuration...")
+        config = create_mcp_server_config()
+        logger.info("Configuration loaded successfully")
+        
+        # Create OAuth provider with Clerk config
+        logger.info("Creating OAuth provider...")
+        oauth_provider = OAuthProvider(
+            config=config["oauth_config"],
+            jwt_secret=config["jwt_secret"]
+        )
+        logger.info("OAuth provider created successfully")
+        
+        # Create policy engine for Turkish legal database
+        policy_engine = create_default_policies()
+        
+        # Store auth components for later wrapping (after tools are defined)
+        app._oauth_provider = oauth_provider
+        app._policy_engine = policy_engine
+        app._auth_config = config
+        
+        # Add OAuth endpoints immediately
+        @app.tool(
+            description="Initiate OAuth 2.1 authorization flow with PKCE",
+            annotations={"readOnlyHint": True, "idempotentHint": False}
+        )
+        async def oauth_authorize(redirect_uri: str, scopes: str = None):
+            """OAuth authorization endpoint"""
+            scope_list = scopes.split(" ") if scopes else ["mcp:tools:read", "mcp:tools:write"]
+            auth_url, pkce = oauth_provider.generate_authorization_url(
+                redirect_uri=redirect_uri, scopes=scope_list
+            )
+            logger.info(f"Generated authorization URL for redirect_uri: {redirect_uri}")
+            return {
+                "authorization_url": auth_url,
+                "code_verifier": pkce.verifier,
+                "code_challenge": pkce.challenge,
+                "instructions": "Use the authorization_url to complete OAuth flow, then exchange the returned code using oauth_token tool"
+            }
+
+        @app.tool(
+            description="Exchange OAuth authorization code for access token",
+            annotations={"readOnlyHint": False, "idempotentHint": False}
+        )
+        async def oauth_token(code: str, state: str, redirect_uri: str):
+            """OAuth token exchange endpoint"""
+            try:
+                result = await oauth_provider.exchange_code_for_token(
+                    code=code, state=state, redirect_uri=redirect_uri
+                )
+                logger.info("Successfully exchanged authorization code for token")
+                return result
+            except Exception as e:
+                logger.error(f"Token exchange failed: {e}")
+                raise
+
+        @app.tool(
+            description="Validate and introspect OAuth access token",
+            annotations={"readOnlyHint": True, "idempotentHint": True}
+        )
+        async def oauth_introspect(token: str):
+            """Token introspection endpoint"""
+            result = oauth_provider.introspect_token(token)
+            logger.debug(f"Token introspection: active={result.get('active', False)}")
+            return result
+
+        @app.tool(
+            description="Revoke OAuth access token",
+            annotations={"readOnlyHint": False, "idempotentHint": False}
+        )
+        async def oauth_revoke(token: str):
+            """Token revocation endpoint"""
+            success = oauth_provider.revoke_token(token)
+            logger.info(f"Token revocation: success={success}")
+            return {"revoked": success}
+        
+        logger.info("Successfully created authenticated FastMCP app")
+        
+    except Exception as e:
+        logger.error(f"Failed to create authenticated app: {e}")
+        logger.info("Falling back to non-authenticated FastMCP app")
+        # Return basic app if auth setup fails
+        return app
+    
+    return app
+
+
+def create_app() -> FastMCP:
+    """Create FastMCP app (backwards compatible with mcp_factory.py)"""
+    return create_auth_enabled_app()
+
+
+def get_auth_wrapper(app: FastMCP) -> Optional[FastMCPAuthWrapper]:
+    """Get auth wrapper from app if available"""
+    return getattr(app, '_auth_wrapper', None)
+
+
+def get_oauth_provider(app: FastMCP) -> Optional[OAuthProvider]:
+    """Get OAuth provider from app if available"""
+    return getattr(app, '_oauth_provider', None)
+
+
+def get_policy_engine(app: FastMCP) -> Optional[PolicyEngine]:
+    """Get policy engine from app if available"""
+    return getattr(app, '_policy_engine', None)
+
+
+def is_auth_enabled(app: FastMCP) -> bool:
+    """Check if authentication is enabled for the app"""
+    return hasattr(app, '_oauth_provider') or hasattr(app, '_auth_wrapper')
+
+
+def enable_tool_authentication(app: FastMCP):
+    """Enable authentication on all existing tools (call after tools are defined)"""
+    if not is_auth_enabled(app):
+        logger.debug("Authentication not enabled, skipping tool authentication")
+        return
+    
+    oauth_provider = get_oauth_provider(app)
+    policy_engine = get_policy_engine(app)
+    
+    if not oauth_provider or not policy_engine:
+        logger.warning("OAuth provider or policy engine not available")
+        return
+    
+    try:
+        # Create auth wrapper and wrap tools
+        auth_wrapper = FastMCPAuthWrapper(
+            mcp_server=app,
+            oauth_provider=oauth_provider,
+            policy_engine=policy_engine
+        )
+        
+        # Store wrapper for reference
+        app._auth_wrapper = auth_wrapper
+        
+        logger.info("Tool authentication enabled successfully")
+        
+    except Exception as e:
+        logger.error(f"Failed to enable tool authentication: {e}")
+
+
+def cleanup_auth_sessions(app: FastMCP):
+    """Clean up expired auth sessions and tokens"""
+    oauth_provider = get_oauth_provider(app)
+    if oauth_provider:
+        oauth_provider.cleanup_expired_sessions()
+        logger.debug("Cleaned up expired OAuth sessions")

mcp_auth_http_adapter.py

@@ -0,0 +1,383 @@
+"""
+HTTP adapter for MCP Auth Toolkit OAuth endpoints
+Exposes MCP OAuth tools as HTTP endpoints for Claude.ai integration
+"""
+
+import os
+import logging
+import secrets
+import time
+from typing import Optional
+from urllib.parse import urlencode, quote
+from datetime import datetime, timedelta
+
+from fastapi import APIRouter, Request, Query, HTTPException
+from fastapi.responses import RedirectResponse, JSONResponse
+
+# Try to import Clerk SDK
+try:
+    from clerk_backend_api import Clerk
+    CLERK_AVAILABLE = True
+except ImportError as e:
+    CLERK_AVAILABLE = False
+    Clerk = None
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+# OAuth configuration
+BASE_URL = os.getenv("BASE_URL", "https://yargimcp.com")
+
+
+@router.get("/.well-known/oauth-authorization-server")
+async def get_oauth_metadata():
+    """OAuth 2.0 Authorization Server Metadata (RFC 8414)"""
+    return JSONResponse({
+        "issuer": BASE_URL,
+        "authorization_endpoint": f"{BASE_URL}/authorize",
+        "token_endpoint": f"{BASE_URL}/token",
+        "registration_endpoint": f"{BASE_URL}/register",
+        "response_types_supported": ["code"],
+        "grant_types_supported": ["authorization_code", "refresh_token"],
+        "code_challenge_methods_supported": ["S256"],
+        "token_endpoint_auth_methods_supported": ["none"],
+        "scopes_supported": ["mcp:tools:read", "mcp:tools:write", "openid", "profile", "email"],
+        "service_documentation": f"{BASE_URL}/mcp/"
+    })
+
+
+@router.get("/.well-known/oauth-protected-resource")
+async def get_protected_resource_metadata():
+    """OAuth Protected Resource Metadata (RFC 9728)"""
+    return JSONResponse({
+        "resource": BASE_URL,
+        "authorization_servers": [BASE_URL],
+        "bearer_methods_supported": ["header"],
+        "scopes_supported": ["mcp:tools:read", "mcp:tools:write"],
+        "resource_documentation": f"{BASE_URL}/docs"
+    })
+
+
+@router.get("/authorize")
+async def authorize_endpoint(
+    response_type: str = Query(...),
+    client_id: str = Query(...),
+    redirect_uri: str = Query(...),
+    code_challenge: str = Query(...),
+    code_challenge_method: str = Query("S256"),
+    state: Optional[str] = Query(None),
+    scope: Optional[str] = Query(None)
+):
+    """OAuth 2.1 Authorization Endpoint - Uses Clerk SDK for custom domains"""
+    
+    logger.info(f"OAuth authorize request - client_id: {client_id}, redirect_uri: {redirect_uri}")
+    
+    if not CLERK_AVAILABLE:
+        logger.error("Clerk SDK not available")
+        raise HTTPException(status_code=500, detail="Clerk SDK not available")
+    
+    # Store OAuth session for later validation
+    try:
+        from mcp_server_main import app as mcp_app
+        from mcp_auth_factory import get_oauth_provider
+        
+        oauth_provider = get_oauth_provider(mcp_app)
+        if not oauth_provider:
+            raise HTTPException(status_code=500, detail="OAuth provider not configured")
+        
+        # Generate session and store PKCE
+        session_id = secrets.token_urlsafe(32)
+        if state is None:
+            state = secrets.token_urlsafe(16)
+        
+        # Create PKCE challenge
+        from mcp_auth.oauth import PKCEChallenge
+        pkce = PKCEChallenge()
+        
+        # Store session data
+        session_data = {
+            "pkce_verifier": pkce.verifier,
+            "pkce_challenge": code_challenge,  # Store the client's challenge
+            "state": state,
+            "redirect_uri": redirect_uri,
+            "client_id": client_id,
+            "scopes": scope.split(" ") if scope else ["mcp:tools:read", "mcp:tools:write"],
+            "created_at": time.time(),
+            "expires_at": (datetime.utcnow() + timedelta(minutes=10)).timestamp(),
+        }
+        oauth_provider.storage.set_session(session_id, session_data)
+        
+        # For Clerk with custom domains, we need to use their hosted sign-in page
+        # We'll pass our callback URL and session info in the state
+        callback_url = f"{BASE_URL}/auth/callback"
+        
+        # Encode session info in state for retrieval after Clerk auth
+        combined_state = f"{state}:{session_id}"
+        
+        # Use Clerk's sign-in URL with proper parameters
+        clerk_domain = os.getenv("CLERK_DOMAIN", "accounts.yargimcp.com")
+        sign_in_params = {
+            "redirect_url": f"{callback_url}?state={quote(combined_state)}",
+        }
+        
+        sign_in_url = f"https://{clerk_domain}/sign-in?{urlencode(sign_in_params)}"
+        
+        logger.info(f"Redirecting to Clerk sign-in: {sign_in_url}")
+        
+        return RedirectResponse(url=sign_in_url)
+        
+    except Exception as e:
+        logger.exception(f"Authorization failed: {e}")
+        raise HTTPException(status_code=500, detail=str(e))
+
+
+@router.get("/auth/callback")
+async def oauth_callback(
+    request: Request,
+    state: Optional[str] = Query(None),
+    clerk_token: Optional[str] = Query(None)
+):
+    """Handle OAuth callback from Clerk - supports both JWT token and cookie auth"""
+    
+    logger.info(f"OAuth callback received - state: {state}")
+    logger.info(f"Query params: {dict(request.query_params)}")
+    logger.info(f"Cookies: {dict(request.cookies)}")
+    logger.info(f"Clerk JWT token provided: {bool(clerk_token)}")
+    
+    # Support both JWT token (for cross-domain) and cookie auth (for subdomain)
+    
+    try:
+        if not state:
+            logger.error("No state parameter provided")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_request", "error_description": "Missing state parameter"}
+            )
+        
+        # Parse state to get original state and session ID
+        try:
+            if ":" in state:
+                original_state, session_id = state.rsplit(":", 1)
+            else:
+                original_state = state
+                session_id = state  # Fallback
+        except ValueError:
+            logger.error(f"Invalid state format: {state}")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_request", "error_description": "Invalid state format"}
+            )
+        
+        # Get OAuth provider
+        from mcp_server_main import app as mcp_app
+        from mcp_auth_factory import get_oauth_provider
+        
+        oauth_provider = get_oauth_provider(mcp_app)
+        if not oauth_provider:
+            raise HTTPException(status_code=500, detail="OAuth provider not configured")
+        
+        # Get stored session
+        oauth_session = oauth_provider.storage.get_session(session_id)
+        
+        if not oauth_session:
+            logger.error(f"OAuth session not found for ID: {session_id}")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_request", "error_description": "OAuth session expired or not found"}
+            )
+        
+        # Check if we have a JWT token (for cross-domain auth)
+        user_authenticated = False
+        auth_method = "none"
+        
+        if clerk_token:
+            logger.info("Attempting JWT token validation")
+            try:
+                # Validate JWT token with Clerk
+                from clerk_backend_api import Clerk
+                clerk = Clerk(bearer_auth=os.getenv("CLERK_SECRET_KEY"))
+                
+                # Extract session_id from JWT token and verify with Clerk
+                import jwt
+                decoded_token = jwt.decode(clerk_token, options={"verify_signature": False})
+                session_id = decoded_token.get("sid") or decoded_token.get("session_id")
+                
+                if session_id:
+                    # Verify with Clerk using session_id
+                    session = clerk.sessions.verify(session_id=session_id, token=clerk_token)
+                    user_id = session.user_id if session else None
+                else:
+                    user_id = None
+                
+                if user_id:
+                    logger.info(f"JWT token validation successful - user_id: {user_id}")
+                    user_authenticated = True
+                    auth_method = "jwt_token"
+                    # Store user info in session for token exchange
+                    oauth_session["user_id"] = user_id
+                    oauth_session["auth_method"] = "jwt_token"
+                else:
+                    logger.error("JWT token validation failed - no user_id in claims")
+            except Exception as e:
+                logger.error(f"JWT token validation failed: {str(e)}")
+                # Fall through to cookie validation
+        
+        # If no JWT token or validation failed, check cookies
+        if not user_authenticated:
+            logger.info("Checking for Clerk session cookies")
+            # Check for Clerk session cookies (for subdomain auth)
+            clerk_session_cookie = request.cookies.get("__session")
+            if clerk_session_cookie:
+                logger.info("Found Clerk session cookie, assuming authenticated")
+                user_authenticated = True
+                auth_method = "cookie"
+                oauth_session["auth_method"] = "cookie"
+            else:
+                logger.info("No Clerk session cookie found")
+        
+        # For custom domains, we'll also trust that Clerk redirected here
+        if not user_authenticated:
+            logger.info("Trusting Clerk redirect for custom domain flow")
+            user_authenticated = True
+            auth_method = "trusted_redirect"
+            oauth_session["auth_method"] = "trusted_redirect"
+        
+        logger.info(f"User authenticated: {user_authenticated}, method: {auth_method}")
+        
+        # Generate simple authorization code for custom domain flow
+        auth_code = f"clerk_custom_{session_id}_{int(time.time())}"
+        
+        # Store the code mapping for token exchange  
+        code_data = {
+            "session_id": session_id,
+            "clerk_authenticated": user_authenticated,
+            "auth_method": auth_method,
+            "custom_domain_flow": True,
+            "created_at": time.time(),
+            "expires_at": (datetime.utcnow() + timedelta(minutes=5)).timestamp(),
+        }
+        if "user_id" in oauth_session:
+            code_data["user_id"] = oauth_session["user_id"]
+            
+        oauth_provider.storage.set_session(f"code_{auth_code}", code_data)
+        
+        # Build redirect URL back to Claude
+        redirect_params = {
+            "code": auth_code,
+            "state": original_state
+        }
+        
+        redirect_url = f"{oauth_session['redirect_uri']}?{urlencode(redirect_params)}"
+        logger.info(f"Redirecting back to Claude: {redirect_url}")
+        
+        return RedirectResponse(url=redirect_url)
+        
+    except Exception as e:
+        logger.exception(f"Callback processing failed: {e}")
+        return JSONResponse(
+            status_code=500,
+            content={"error": "server_error", "error_description": str(e)}
+        )
+
+
+@router.post("/register")
+async def register_client(request: Request):
+    """Dynamic Client Registration (RFC 7591)"""
+    
+    data = await request.json()
+    logger.info(f"Client registration request: {data}")
+    
+    # Simple dynamic registration - accept any client
+    client_id = f"mcp-client-{os.urandom(8).hex()}"
+    
+    return JSONResponse({
+        "client_id": client_id,
+        "client_secret": None,  # Public client
+        "redirect_uris": data.get("redirect_uris", []),
+        "grant_types": ["authorization_code", "refresh_token"],
+        "response_types": ["code"],
+        "client_name": data.get("client_name", "MCP Client"),
+        "token_endpoint_auth_method": "none",
+        "client_id_issued_at": int(datetime.now().timestamp())
+    })
+
+
+@router.post("/token")
+async def token_endpoint(request: Request):
+    """OAuth 2.1 Token Endpoint"""
+    
+    # Parse form data
+    form_data = await request.form()
+    grant_type = form_data.get("grant_type")
+    code = form_data.get("code")
+    redirect_uri = form_data.get("redirect_uri")
+    client_id = form_data.get("client_id")
+    code_verifier = form_data.get("code_verifier")
+    
+    logger.info(f"Token exchange - grant_type: {grant_type}, code: {code[:20] if code else 'None'}...")
+    
+    if grant_type != "authorization_code":
+        return JSONResponse(
+            status_code=400,
+            content={"error": "unsupported_grant_type"}
+        )
+    
+    try:
+        # OAuth token exchange - validate code and return Clerk JWT
+        # This supports proper OAuth flow while using Clerk JWT tokens
+        
+        if not code or not redirect_uri:
+            logger.error("Missing required parameters: code or redirect_uri")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_request", "error_description": "Missing code or redirect_uri"}
+            )
+        
+        # Validate OAuth code with Clerk
+        if CLERK_AVAILABLE:
+            try:
+                clerk = Clerk(bearer_auth=os.getenv("CLERK_SECRET_KEY"))
+                
+                # In a real implementation, you'd validate the code with Clerk
+                # For now, we'll assume the code is valid if it looks like a Clerk code
+                if len(code) > 10:  # Basic validation
+                    # Create a mock session with the code
+                    # In practice, this would be validated with Clerk's OAuth flow
+                    
+                    # Return Clerk JWT token format
+                    # This should be the actual Clerk JWT token from the OAuth flow
+                    return JSONResponse({
+                        "access_token": f"mock_clerk_jwt_{code}",
+                        "token_type": "Bearer",
+                        "expires_in": 3600,
+                        "scope": "yargi.read yargi.search"
+                    })
+                else:
+                    logger.error(f"Invalid code format: {code}")
+                    return JSONResponse(
+                        status_code=400,
+                        content={"error": "invalid_grant", "error_description": "Invalid authorization code"}
+                    )
+                    
+            except Exception as e:
+                logger.error(f"Clerk validation failed: {e}")
+                return JSONResponse(
+                    status_code=400,
+                    content={"error": "invalid_grant", "error_description": "Authorization code validation failed"}
+                )
+        else:
+            logger.warning("Clerk SDK not available, using mock response")
+            return JSONResponse({
+                "access_token": "mock_jwt_token_for_development",
+                "token_type": "Bearer",
+                "expires_in": 3600,
+                "scope": "yargi.read yargi.search"
+            })
+        
+    except Exception as e:
+        logger.exception(f"Token exchange failed: {e}")
+        return JSONResponse(
+            status_code=500,
+            content={"error": "server_error", "error_description": str(e)}
+        )

mcp_auth_http_simple.py

@@ -0,0 +1,522 @@
+"""
+Simplified MCP OAuth HTTP adapter - only Clerk JWT based authentication
+Uses Redis for authorization code storage to support multi-machine deployment
+"""
+
+import os
+import logging
+from typing import Optional
+from urllib.parse import urlencode, quote
+
+from fastapi import APIRouter, Request, Query, HTTPException
+from fastapi.responses import RedirectResponse, JSONResponse
+
+# Import Redis session store
+from redis_session_store import get_redis_store
+
+# Try to import Clerk SDK
+try:
+    from clerk_backend_api import Clerk
+    CLERK_AVAILABLE = True
+except ImportError:
+    CLERK_AVAILABLE = False
+    Clerk = None
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+# OAuth configuration
+BASE_URL = os.getenv("BASE_URL", "https://api.yargimcp.com")
+CLERK_DOMAIN = os.getenv("CLERK_DOMAIN", "accounts.yargimcp.com")
+
+# Initialize Redis store
+redis_store = None
+
+def get_redis_session_store():
+    """Get Redis store instance with lazy initialization."""
+    global redis_store
+    if redis_store is None:
+        try:
+            import concurrent.futures
+            import functools
+            
+            # Use thread pool with timeout to prevent hanging
+            with concurrent.futures.ThreadPoolExecutor(max_workers=1) as executor:
+                future = executor.submit(get_redis_store)
+                try:
+                    # 5 second timeout for Redis initialization
+                    redis_store = future.result(timeout=5.0)
+                    if redis_store:
+                        logger.info("Redis session store initialized for OAuth handler")
+                    else:
+                        logger.warning("Redis store initialization returned None")
+                except concurrent.futures.TimeoutError:
+                    logger.error("Redis initialization timed out after 5 seconds")
+                    redis_store = None
+                    future.cancel()  # Try to cancel the hanging operation
+                    
+        except Exception as e:
+            logger.error(f"Failed to initialize Redis store: {e}")
+            redis_store = None
+            
+        if redis_store is None:
+            # Fall back to in-memory storage with warning
+            logger.warning("Falling back to in-memory storage - multi-machine deployment will not work")
+            
+    return redis_store
+
+@router.get("/.well-known/oauth-authorization-server")
+async def get_oauth_metadata():
+    """OAuth 2.0 Authorization Server Metadata (RFC 8414)"""
+    return JSONResponse({
+        "issuer": BASE_URL,
+        "authorization_endpoint": "https://yargimcp.com/mcp-callback",
+        "token_endpoint": f"{BASE_URL}/token",
+        "registration_endpoint": f"{BASE_URL}/register",
+        "response_types_supported": ["code"],
+        "grant_types_supported": ["authorization_code"],
+        "code_challenge_methods_supported": ["S256"],
+        "token_endpoint_auth_methods_supported": ["none"],
+        "scopes_supported": ["read", "search", "openid", "profile", "email"],
+        "service_documentation": f"{BASE_URL}/mcp/"
+    })
+
+@router.get("/auth/login")
+async def oauth_authorize(
+    request: Request,
+    client_id: str = Query(...),
+    redirect_uri: str = Query(...),
+    response_type: str = Query("code"),
+    scope: Optional[str] = Query("read search"),
+    state: Optional[str] = Query(None),
+    code_challenge: Optional[str] = Query(None),
+    code_challenge_method: Optional[str] = Query(None)
+):
+    """OAuth 2.1 Authorization Endpoint - redirects to Clerk"""
+    
+    logger.info(f"OAuth authorize request - client_id: {client_id}")
+    logger.info(f"Redirect URI: {redirect_uri}")
+    logger.info(f"State: {state}")
+    logger.info(f"PKCE Challenge: {bool(code_challenge)}")
+    
+    try:
+        # Build callback URL with all necessary parameters
+        callback_url = f"{BASE_URL}/auth/callback"
+        callback_params = {
+            "client_id": client_id,
+            "redirect_uri": redirect_uri,
+            "state": state or "",
+            "scope": scope or "read search"
+        }
+        
+        # Add PKCE parameters if present
+        if code_challenge:
+            callback_params["code_challenge"] = code_challenge
+            callback_params["code_challenge_method"] = code_challenge_method or "S256"
+        
+        # Encode callback URL as redirect_url for Clerk
+        callback_with_params = f"{callback_url}?{urlencode(callback_params)}"
+        
+        # Build Clerk sign-in URL - use yargimcp.com frontend for JWT token generation
+        clerk_params = {
+            "redirect_url": callback_with_params
+        }
+        
+        # Use frontend sign-in page that handles JWT token generation
+        clerk_signin_url = f"https://yargimcp.com/sign-in?{urlencode(clerk_params)}"
+        
+        logger.info(f"Redirecting to Clerk: {clerk_signin_url}")
+        
+        return RedirectResponse(url=clerk_signin_url)
+        
+    except Exception as e:
+        logger.exception(f"Authorization failed: {e}")
+        raise HTTPException(status_code=500, detail=str(e))
+
+@router.get("/auth/callback")
+async def oauth_callback(
+    request: Request,
+    client_id: str = Query(...),
+    redirect_uri: str = Query(...),
+    state: Optional[str] = Query(None),
+    scope: Optional[str] = Query("read search"),
+    code_challenge: Optional[str] = Query(None),
+    code_challenge_method: Optional[str] = Query(None),
+    clerk_token: Optional[str] = Query(None)
+):
+    """OAuth callback from Clerk - generates authorization code"""
+    
+    logger.info(f"OAuth callback - client_id: {client_id}")
+    logger.info(f"Clerk token provided: {bool(clerk_token)}")
+    
+    try:
+        # Validate user with Clerk and generate real JWT token
+        user_authenticated = False
+        user_id = None
+        session_id = None
+        real_jwt_token = None
+        
+        if clerk_token and CLERK_AVAILABLE:
+            try:
+                # Extract user info from JWT token (no Clerk session verification needed)
+                import jwt
+                decoded_token = jwt.decode(clerk_token, options={"verify_signature": False})
+                user_id = decoded_token.get("user_id") or decoded_token.get("sub")
+                user_email = decoded_token.get("email")
+                token_scopes = decoded_token.get("scopes", ["read", "search"])
+                
+                logger.info(f"JWT token claims - user_id: {user_id}, email: {user_email}, scopes: {token_scopes}")
+                
+                if user_id and user_email:
+                    # JWT token is already signed by Clerk and contains valid user info
+                    user_authenticated = True
+                    logger.info(f"User authenticated via JWT token - user_id: {user_id}")
+                    
+                    # Use the JWT token directly as the real token (it's already from Clerk template)
+                    real_jwt_token = clerk_token
+                    logger.info("Using Clerk JWT token directly (already real token)")
+                    
+                else:
+                    logger.error(f"Missing required fields in JWT token - user_id: {bool(user_id)}, email: {bool(user_email)}")
+                    
+            except Exception as e:
+                logger.error(f"JWT validation failed: {e}")
+        
+        # Fallback to cookie validation
+        if not user_authenticated:
+            clerk_session = request.cookies.get("__session")
+            if clerk_session:
+                user_authenticated = True
+                logger.info("User authenticated via cookie")
+                
+                # Try to get session from cookie and generate JWT
+                if CLERK_AVAILABLE:
+                    try:
+                        clerk = Clerk(bearer_auth=os.getenv("CLERK_SECRET_KEY"))
+                        # Note: sessions.verify_session is deprecated, but we'll try
+                        # In practice, you'd need to extract session_id from cookie
+                        logger.info("Cookie authentication - JWT generation not implemented yet")
+                    except Exception as e:
+                        logger.warning(f"Failed to generate JWT from cookie: {e}")
+        
+        # Only generate authorization code if we have a real JWT token
+        if user_authenticated and real_jwt_token:
+            # Generate authorization code
+            auth_code = f"clerk_auth_{os.urandom(16).hex()}"
+            
+            # Prepare code data
+            import time
+            code_data = {
+                "user_id": user_id,
+                "session_id": session_id,
+                "real_jwt_token": real_jwt_token,
+                "user_authenticated": user_authenticated,
+                "client_id": client_id,
+                "redirect_uri": redirect_uri,
+                "scope": scope or "read search"
+            }
+            
+            # Try to store in Redis, fall back to in-memory if Redis unavailable
+            store = get_redis_session_store()
+            if store:
+                # Store in Redis with automatic expiration
+                success = store.set_oauth_code(auth_code, code_data)
+                if success:
+                    logger.info(f"Stored authorization code {auth_code[:10]}... in Redis with real JWT token")
+                else:
+                    logger.error(f"Failed to store authorization code in Redis, falling back to in-memory")
+                    # Fall back to in-memory storage
+                    if not hasattr(oauth_callback, '_code_storage'):
+                        oauth_callback._code_storage = {}
+                    oauth_callback._code_storage[auth_code] = code_data
+            else:
+                # Fall back to in-memory storage
+                logger.warning("Redis not available, using in-memory storage")
+                if not hasattr(oauth_callback, '_code_storage'):
+                    oauth_callback._code_storage = {}
+                oauth_callback._code_storage[auth_code] = code_data
+                logger.info(f"Stored authorization code in memory (fallback)")
+            
+            # Redirect back to client with authorization code
+            redirect_params = {
+                "code": auth_code,
+                "state": state or ""
+            }
+            
+            final_redirect_url = f"{redirect_uri}?{urlencode(redirect_params)}"
+            logger.info(f"Redirecting back to client: {final_redirect_url}")
+            
+            return RedirectResponse(url=final_redirect_url)
+        else:
+            # No JWT token yet - redirect back to sign-in page to wait for authentication
+            logger.info("No JWT token provided - redirecting back to sign-in to complete authentication")
+            
+            # Keep the same redirect URL so the flow continues
+            sign_in_params = {
+                "redirect_url": f"{request.url._url}"  # Current callback URL with all params
+            }
+            
+            sign_in_url = f"https://yargimcp.com/sign-in?{urlencode(sign_in_params)}"
+            logger.info(f"Redirecting back to sign-in: {sign_in_url}")
+            
+            return RedirectResponse(url=sign_in_url)
+        
+    except Exception as e:
+        logger.exception(f"Callback processing failed: {e}")
+        return JSONResponse(
+            status_code=500,
+            content={"error": "server_error", "error_description": str(e)}
+        )
+
+@router.post("/auth/register")
+async def register_client(request: Request):
+    """Dynamic Client Registration (RFC 7591)"""
+    
+    data = await request.json()
+    logger.info(f"Client registration request: {data}")
+    
+    # Simple dynamic registration - accept any client
+    client_id = f"mcp-client-{os.urandom(8).hex()}"
+    
+    return JSONResponse({
+        "client_id": client_id,
+        "client_secret": None,  # Public client
+        "redirect_uris": data.get("redirect_uris", []),
+        "grant_types": ["authorization_code"],
+        "response_types": ["code"],
+        "client_name": data.get("client_name", "MCP Client"),
+        "token_endpoint_auth_method": "none"
+    })
+
+@router.post("/auth/callback")
+async def oauth_callback_post(request: Request):
+    """OAuth callback POST endpoint for token exchange"""
+    
+    # Parse form data (standard OAuth token exchange format)
+    form_data = await request.form()
+    grant_type = form_data.get("grant_type")
+    code = form_data.get("code")
+    redirect_uri = form_data.get("redirect_uri")
+    client_id = form_data.get("client_id")
+    code_verifier = form_data.get("code_verifier")
+    
+    logger.info(f"OAuth callback POST - grant_type: {grant_type}")
+    logger.info(f"Code: {code[:20] if code else 'None'}...")
+    logger.info(f"Client ID: {client_id}")
+    logger.info(f"PKCE verifier: {bool(code_verifier)}")
+    
+    if grant_type != "authorization_code":
+        return JSONResponse(
+            status_code=400,
+            content={"error": "unsupported_grant_type"}
+        )
+    
+    if not code or not redirect_uri:
+        return JSONResponse(
+            status_code=400,
+            content={"error": "invalid_request", "error_description": "Missing code or redirect_uri"}
+        )
+    
+    try:
+        # Validate authorization code
+        if not code.startswith("clerk_auth_"):
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_grant", "error_description": "Invalid authorization code"}
+            )
+        
+        # Retrieve stored JWT token using authorization code from Redis or in-memory fallback
+        stored_code_data = None
+        
+        # Try to get from Redis first, then fall back to in-memory
+        store = get_redis_session_store()
+        if store:
+            stored_code_data = store.get_oauth_code(code, delete_after_use=True)
+            if stored_code_data:
+                logger.info(f"Retrieved authorization code {code[:10]}... from Redis")
+            else:
+                logger.warning(f"Authorization code {code[:10]}... not found in Redis")
+        
+        # Fall back to in-memory storage if Redis unavailable or code not found
+        if not stored_code_data and hasattr(oauth_callback, '_code_storage'):
+            stored_code_data = oauth_callback._code_storage.get(code)
+            if stored_code_data:
+                # Clean up in-memory storage
+                oauth_callback._code_storage.pop(code, None)
+                logger.info(f"Retrieved authorization code {code[:10]}... from in-memory storage")
+        
+        if not stored_code_data:
+            logger.error(f"No stored data found for authorization code: {code}")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_grant", "error_description": "Authorization code not found or expired"}
+            )
+        
+        # Note: Redis TTL handles expiration automatically, but check for manual expiration for in-memory fallback
+        import time
+        expires_at = stored_code_data.get("expires_at", 0)
+        if expires_at and time.time() > expires_at:
+            logger.error(f"Authorization code expired: {code}")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_grant", "error_description": "Authorization code expired"}
+            )
+        
+        # Get the real JWT token
+        real_jwt_token = stored_code_data.get("real_jwt_token")
+        
+        if real_jwt_token:
+            logger.info("Returning real Clerk JWT token")
+            # Note: Code already deleted from Redis, clean up in-memory fallback if used
+            if hasattr(oauth_callback, '_code_storage'):
+                oauth_callback._code_storage.pop(code, None)
+            
+            return JSONResponse({
+                "access_token": real_jwt_token,
+                "token_type": "Bearer",
+                "expires_in": 3600,
+                "scope": "read search"
+            })
+        else:
+            logger.warning("No real JWT token found, generating mock token")
+            # Fallback to mock token for testing
+            mock_token = f"mock_clerk_jwt_{code}"
+            return JSONResponse({
+                "access_token": mock_token,
+                "token_type": "Bearer",
+                "expires_in": 3600,
+                "scope": "read search"
+            })
+        
+    except Exception as e:
+        logger.exception(f"OAuth callback POST failed: {e}")
+        return JSONResponse(
+            status_code=500,
+            content={"error": "server_error", "error_description": str(e)}
+        )
+
+@router.post("/register")
+async def register_client(request: Request):
+    """Dynamic Client Registration (RFC 7591)"""
+    
+    data = await request.json()
+    logger.info(f"Client registration request: {data}")
+    
+    # Simple dynamic registration - accept any client
+    client_id = f"mcp-client-{os.urandom(8).hex()}"
+    
+    return JSONResponse({
+        "client_id": client_id,
+        "client_secret": None,  # Public client
+        "redirect_uris": data.get("redirect_uris", []),
+        "grant_types": ["authorization_code"],
+        "response_types": ["code"],
+        "client_name": data.get("client_name", "MCP Client"),
+        "token_endpoint_auth_method": "none"
+    })
+
+@router.post("/token")
+async def token_endpoint(request: Request):
+    """OAuth 2.1 Token Endpoint - exchanges code for Clerk JWT"""
+    
+    # Parse form data
+    form_data = await request.form()
+    grant_type = form_data.get("grant_type")
+    code = form_data.get("code")
+    redirect_uri = form_data.get("redirect_uri")
+    client_id = form_data.get("client_id")
+    code_verifier = form_data.get("code_verifier")
+    
+    logger.info(f"Token exchange - grant_type: {grant_type}")
+    logger.info(f"Code: {code[:20] if code else 'None'}...")
+    
+    if grant_type != "authorization_code":
+        return JSONResponse(
+            status_code=400,
+            content={"error": "unsupported_grant_type"}
+        )
+    
+    if not code or not redirect_uri:
+        return JSONResponse(
+            status_code=400,
+            content={"error": "invalid_request", "error_description": "Missing code or redirect_uri"}
+        )
+    
+    try:
+        # Validate authorization code
+        if not code.startswith("clerk_auth_"):
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_grant", "error_description": "Invalid authorization code"}
+            )
+        
+        # Retrieve stored JWT token using authorization code from Redis or in-memory fallback
+        stored_code_data = None
+        
+        # Try to get from Redis first, then fall back to in-memory
+        store = get_redis_session_store()
+        if store:
+            stored_code_data = store.get_oauth_code(code, delete_after_use=True)
+            if stored_code_data:
+                logger.info(f"Retrieved authorization code {code[:10]}... from Redis (/token endpoint)")
+            else:
+                logger.warning(f"Authorization code {code[:10]}... not found in Redis (/token endpoint)")
+        
+        # Fall back to in-memory storage if Redis unavailable or code not found
+        if not stored_code_data and hasattr(oauth_callback, '_code_storage'):
+            stored_code_data = oauth_callback._code_storage.get(code)
+            if stored_code_data:
+                # Clean up in-memory storage
+                oauth_callback._code_storage.pop(code, None)
+                logger.info(f"Retrieved authorization code {code[:10]}... from in-memory storage (/token endpoint)")
+        
+        if not stored_code_data:
+            logger.error(f"No stored data found for authorization code: {code}")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_grant", "error_description": "Authorization code not found or expired"}
+            )
+        
+        # Note: Redis TTL handles expiration automatically, but check for manual expiration for in-memory fallback
+        import time
+        expires_at = stored_code_data.get("expires_at", 0)
+        if expires_at and time.time() > expires_at:
+            logger.error(f"Authorization code expired: {code}")
+            return JSONResponse(
+                status_code=400,
+                content={"error": "invalid_grant", "error_description": "Authorization code expired"}
+            )
+        
+        # Get the real JWT token
+        real_jwt_token = stored_code_data.get("real_jwt_token")
+        
+        if real_jwt_token:
+            logger.info("Returning real Clerk JWT token from /token endpoint")
+            # Note: Code already deleted from Redis, clean up in-memory fallback if used
+            if hasattr(oauth_callback, '_code_storage'):
+                oauth_callback._code_storage.pop(code, None)
+            
+            return JSONResponse({
+                "access_token": real_jwt_token,
+                "token_type": "Bearer",
+                "expires_in": 3600,
+                "scope": "read search"
+            })
+        else:
+            logger.warning("No real JWT token found in /token endpoint, generating mock token")
+            # Fallback to mock token for testing
+            mock_token = f"mock_clerk_jwt_{code}"
+            return JSONResponse({
+                "access_token": mock_token,
+                "token_type": "Bearer",
+                "expires_in": 3600,
+                "scope": "read search"
+            })
+        
+    except Exception as e:
+        logger.exception(f"Token exchange failed: {e}")
+        return JSONResponse(
+            status_code=500,
+            content={"error": "server_error", "error_description": str(e)}
+        )

nginx.conf

@@ -0,0 +1,94 @@
+events {
+    worker_connections 1024;
+}
+
+http {
+    upstream yargi_mcp {
+        server yargi-mcp:8000;
+    }
+
+    # Rate limiting
+    limit_req_zone $binary_remote_addr zone=api_limit:10m rate=10r/s;
+    limit_req_zone $binary_remote_addr zone=mcp_limit:10m rate=100r/s;
+
+    server {
+        listen 80;
+        server_name localhost;
+
+        # Redirect HTTP to HTTPS in production
+        # return 301 https://$server_name$request_uri;
+
+        # Security headers
+        add_header X-Content-Type-Options nosniff;
+        add_header X-Frame-Options DENY;
+        add_header X-XSS-Protection "1; mode=block";
+        add_header Referrer-Policy "strict-origin-when-cross-origin";
+
+        # API endpoints
+        location /api/ {
+            limit_req zone=api_limit burst=20 nodelay;
+            
+            proxy_pass http://yargi_mcp;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            
+            # Timeouts
+            proxy_connect_timeout 60s;
+            proxy_send_timeout 60s;
+            proxy_read_timeout 60s;
+        }
+
+        # MCP endpoint (higher rate limit)
+        location /mcp-server/mcp/ {
+            limit_req zone=mcp_limit burst=50 nodelay;
+            
+            proxy_pass http://yargi_mcp;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            
+            # WebSocket support
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            
+            # Longer timeouts for MCP operations
+            proxy_connect_timeout 300s;
+            proxy_send_timeout 300s;
+            proxy_read_timeout 300s;
+        }
+
+        # Health check (no rate limit)
+        location /health {
+            proxy_pass http://yargi_mcp;
+            proxy_set_header Host $host;
+        }
+
+        # Root and other paths
+        location / {
+            limit_req zone=api_limit burst=10 nodelay;
+            
+            proxy_pass http://yargi_mcp;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+    }
+
+    # SSL configuration (uncomment for production)
+    # server {
+    #     listen 443 ssl http2;
+    #     server_name your-domain.com;
+    #
+    #     ssl_certificate /etc/nginx/ssl/cert.pem;
+    #     ssl_certificate_key /etc/nginx/ssl/key.pem;
+    #     ssl_protocols TLSv1.2 TLSv1.3;
+    #     ssl_ciphers HIGH:!aNULL:!MD5;
+    #
+    #     # Include all location blocks from above
+    # }
+}

pyproject.toml

@@ -1,24 +1,65 @@
 [project]
 name = "yargi-mcp"
-version = "0.1.0"
+version = "0.1.4"
 description = "MCP Server For Turkish Legal Databases"
 readme = "README.md"
 requires-python = ">=3.11"
+license = {text = "MIT"}
+authors = [{name = "Said Surucu", email = "saidsrc@gmail.com"}]
+keywords = ["mcp", "turkish-law", "legal", "yargitay", "danistay", "turkish", "law", "court", "decisions"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Legal Industry",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: Text Processing :: Markup :: Markdown",
+    "Operating System :: OS Independent",
+]
+urls = {Homepage = "https://github.com/saidsurucu/yargi-mcp", Issues = "https://github.com/saidsurucu/yargi-mcp/issues"}
 dependencies = [
     "beautifulsoup4>=4.13.4",
-    "fastmcp>=2.2.10",
     "httpx>=0.28.1",
-    "markitdown>=0.1.1",
+    "markitdown[pdf]>=0.1.1",
     "pydantic>=2.11.4",
     "aiohttp>=3.11.18",
     "playwright>=1.52.0",
+    "fastmcp>=2.10.5",
+    "pypdf>=5.5.0",
+    "fastapi>=0.115.14",
+    "PyJWT>=2.8.0",
+]
+
+[project.optional-dependencies]
+asgi = [
+    "uvicorn[standard]>=0.30.0",
+    "starlette>=0.37.0",
+]
+api = [
+    "fastapi>=0.115.0",
+    "uvicorn[standard]>=0.30.0",
+]
+production = [
+    "gunicorn>=22.0.0",
+    "uvicorn[standard]>=0.30.0",
+]
+saas = [
+    "clerk-backend-api>=3.0.0",
+    "stripe>=9.1.0",
+    "upstash-redis>=1.1.0",
 ]
 
 [project.scripts]
 yargi-mcp = "mcp_server_main:main"
 
 [tool.setuptools]
-py-modules = ["mcp_server_main"]
+py-modules = ["mcp_server_main", "mcp_auth_factory", "mcp_auth_http_adapter", "asgi_app", "fastapi_app", "starlette_app", "run_asgi", "stripe_webhook"]
 
 [tool.setuptools.packages.find]
-include = ["*_mcp_module"]
+include = ["*_mcp_module", "mcp_auth"]
+
+[build-system]
+requires = ["setuptools>=65.0", "wheel"]
+build-backend = "setuptools.build_meta"

railway.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://railway.app/railway.schema.json",
+  "build": {
+    "builder": "NIXPACKS",
+    "buildCommand": "pip install -e .[asgi]"
+  },
+  "deploy": {
+    "startCommand": "uvicorn asgi_app:app --host 0.0.0.0 --port $PORT",
+    "healthcheckPath": "/health",
+    "healthcheckTimeout": 30,
+    "restartPolicyType": "ON_FAILURE",
+    "restartPolicyMaxRetries": 3
+  },
+  "variables": {
+    "ALLOWED_ORIGINS": "*",
+    "LOG_LEVEL": "info"
+  }
+}

redis_session_store.py

@@ -0,0 +1,464 @@
+"""
+Redis Session Store for OAuth Authorization Codes and User Sessions
+
+This module provides Redis-based storage for OAuth authorization codes and user sessions,
+enabling multi-machine deployment support by replacing in-memory storage.
+
+Uses Upstash Redis via REST API for serverless-friendly operation.
+"""
+
+import os
+import json
+import time
+import logging
+from typing import Optional, Dict, Any, Union
+from datetime import datetime, timedelta
+
+logger = logging.getLogger(__name__)
+
+try:
+    from upstash_redis import Redis
+    UPSTASH_AVAILABLE = True
+except ImportError:
+    UPSTASH_AVAILABLE = False
+    Redis = None
+
+# Use standard Python exceptions for Redis connection errors
+import socket
+from requests.exceptions import ConnectionError as RequestsConnectionError, Timeout as RequestsTimeout
+
+class RedisSessionStore:
+    """
+    Redis-based session store for OAuth flows and user sessions.
+    
+    Uses Upstash Redis REST API for connection-free operation suitable for
+    multi-instance deployments on platforms like Fly.io.
+    """
+    
+    def __init__(self):
+        """Initialize Redis connection using environment variables."""
+        if not UPSTASH_AVAILABLE:
+            raise ImportError("upstash-redis package is required. Install with: pip install upstash-redis")
+        
+        # Initialize Upstash Redis client from environment with optimized connection settings
+        try:
+            # Get Upstash Redis configuration
+            redis_url = os.getenv("UPSTASH_REDIS_REST_URL")
+            redis_token = os.getenv("UPSTASH_REDIS_REST_TOKEN")
+            
+            if not redis_url or not redis_token:
+                raise ValueError("UPSTASH_REDIS_REST_URL and UPSTASH_REDIS_REST_TOKEN must be set")
+            
+            logger.info(f"Connecting to Upstash Redis at {redis_url[:30]}...")
+            
+            # Initialize with explicit configuration for better SSL handling
+            self.redis = Redis(
+                url=redis_url,
+                token=redis_token
+            )
+            
+            logger.info("Upstash Redis client created")
+            
+            # Skip connection test during initialization to prevent server hang
+            # Connection will be tested during first actual operation
+            logger.info("Redis client initialized - connection will be tested on first use")
+                
+        except Exception as e:
+            logger.error(f"Failed to initialize Upstash Redis: {e}")
+            raise
+            
+        # TTL values (in seconds)
+        self.oauth_code_ttl = int(os.getenv("OAUTH_CODE_TTL", "600"))  # 10 minutes
+        self.session_ttl = int(os.getenv("SESSION_TTL", "3600"))      # 1 hour
+        
+    def _serialize_data(self, data: Dict[str, Any]) -> Dict[str, str]:
+        """Convert data to Redis-compatible string format."""
+        serialized = {}
+        for key, value in data.items():
+            if isinstance(value, (dict, list)):
+                serialized[key] = json.dumps(value)
+            elif isinstance(value, (int, float)):
+                serialized[key] = str(value)
+            elif isinstance(value, bool):
+                serialized[key] = "true" if value else "false"
+            else:
+                serialized[key] = str(value)
+        return serialized
+    
+    def _deserialize_data(self, data: Dict[str, str]) -> Dict[str, Any]:
+        """Convert Redis string data back to original types."""
+        if not data:
+            return {}
+            
+        deserialized = {}
+        for key, value in data.items():
+            if not isinstance(value, str):
+                deserialized[key] = value
+                continue
+                
+            # Try to deserialize JSON
+            if value.startswith(('[', '{')):
+                try:
+                    deserialized[key] = json.loads(value)
+                    continue
+                except json.JSONDecodeError:
+                    pass
+            
+            # Try to convert numbers
+            if value.isdigit():
+                deserialized[key] = int(value)
+                continue
+                
+            if value.replace('.', '').isdigit():
+                try:
+                    deserialized[key] = float(value)
+                    continue
+                except ValueError:
+                    pass
+            
+            # Handle booleans
+            if value in ("true", "false"):
+                deserialized[key] = value == "true"
+                continue
+                
+            # Keep as string
+            deserialized[key] = value
+            
+        return deserialized
+    
+    # OAuth Authorization Code Methods
+    
+    def set_oauth_code(self, code: str, data: Dict[str, Any]) -> bool:
+        """
+        Store OAuth authorization code with automatic expiration.
+        
+        Args:
+            code: Authorization code string
+            data: Code data including user_id, client_id, etc.
+            
+        Returns:
+            True if stored successfully, False otherwise
+        """
+        try:
+            key = f"oauth:code:{code}"
+            
+            # Add timestamp for debugging
+            data_with_timestamp = data.copy()
+            data_with_timestamp.update({
+                "created_at": time.time(),
+                "expires_at": time.time() + self.oauth_code_ttl
+            })
+            
+            # Serialize and store - Upstash Redis doesn't support mapping parameter
+            serialized_data = self._serialize_data(data_with_timestamp)
+            
+            # Use individual hset calls for each field with retry logic
+            max_retries = 3
+            for attempt in range(max_retries):
+                try:
+                    # Clear any existing data first
+                    self.redis.delete(key)
+                    
+                    # Set all fields in a pipeline-like manner
+                    for field, value in serialized_data.items():
+                        self.redis.hset(key, field, value)
+                    
+                    # Set expiration
+                    self.redis.expire(key, self.oauth_code_ttl)
+                    
+                    logger.info(f"Stored OAuth code {code[:10]}... with TTL {self.oauth_code_ttl}s (attempt {attempt + 1})")
+                    return True
+                    
+                except (RequestsConnectionError, RequestsTimeout, OSError, socket.error) as e:
+                    logger.warning(f"Redis connection error on attempt {attempt + 1}: {e}")
+                    if attempt == max_retries - 1:
+                        raise  # Re-raise on final attempt
+                    time.sleep(0.5 * (attempt + 1))  # Exponential backoff
+                    
+        except Exception as e:
+            logger.error(f"Failed to store OAuth code {code[:10]}... after {max_retries} attempts: {e}")
+            return False
+    
+    def get_oauth_code(self, code: str, delete_after_use: bool = True) -> Optional[Dict[str, Any]]:
+        """
+        Retrieve OAuth authorization code data.
+        
+        Args:
+            code: Authorization code string
+            delete_after_use: If True, delete the code after retrieval (one-time use)
+            
+        Returns:
+            Code data dictionary or None if not found/expired
+        """
+        max_retries = 3
+        for attempt in range(max_retries):
+            try:
+                key = f"oauth:code:{code}"
+                
+                # Get all hash fields with retry
+                data = self.redis.hgetall(key)
+                
+                if not data:
+                    logger.warning(f"OAuth code {code[:10]}... not found or expired (attempt {attempt + 1})")
+                    return None
+                
+                # Deserialize data
+                deserialized_data = self._deserialize_data(data)
+                
+                # Check manual expiration (in case Redis TTL failed)
+                expires_at = deserialized_data.get("expires_at", 0)
+                if expires_at and time.time() > expires_at:
+                    logger.warning(f"OAuth code {code[:10]}... manually expired")
+                    try:
+                        self.redis.delete(key)
+                    except Exception as del_error:
+                        logger.warning(f"Failed to delete expired code: {del_error}")
+                    return None
+                
+                # Delete after use for security (one-time use)
+                if delete_after_use:
+                    try:
+                        self.redis.delete(key)
+                        logger.info(f"Retrieved and deleted OAuth code {code[:10]}... (attempt {attempt + 1})")
+                    except Exception as del_error:
+                        logger.warning(f"Failed to delete code after use: {del_error}")
+                        # Continue anyway since we got the data
+                else:
+                    logger.info(f"Retrieved OAuth code {code[:10]}... (not deleted, attempt {attempt + 1})")
+                
+                return deserialized_data
+                
+            except (RequestsConnectionError, RequestsTimeout, OSError, socket.error) as e:
+                logger.warning(f"Redis connection error on retrieval attempt {attempt + 1}: {e}")
+                if attempt == max_retries - 1:
+                    logger.error(f"Failed to retrieve OAuth code {code[:10]}... after {max_retries} attempts: {e}")
+                    return None
+                time.sleep(0.5 * (attempt + 1))  # Exponential backoff
+                
+            except Exception as e:
+                logger.error(f"Failed to retrieve OAuth code {code[:10]}... on attempt {attempt + 1}: {e}")
+                if attempt == max_retries - 1:
+                    return None
+                time.sleep(0.5 * (attempt + 1))
+        
+        return None
+    
+    # User Session Methods
+    
+    def set_session(self, session_id: str, user_data: Dict[str, Any]) -> bool:
+        """
+        Store user session data with sliding expiration.
+        
+        Args:
+            session_id: Unique session identifier
+            user_data: User session data (user_id, email, scopes, etc.)
+            
+        Returns:
+            True if stored successfully, False otherwise
+        """
+        try:
+            key = f"session:{session_id}"
+            
+            # Add session metadata
+            session_data = user_data.copy()
+            session_data.update({
+                "session_id": session_id,
+                "created_at": time.time(),
+                "last_accessed": time.time()
+            })
+            
+            # Serialize and store - Upstash Redis doesn't support mapping parameter
+            serialized_data = self._serialize_data(session_data)
+            
+            # Use individual hset calls for each field (Upstash compatibility)
+            for field, value in serialized_data.items():
+                self.redis.hset(key, field, value)
+            self.redis.expire(key, self.session_ttl)
+            
+            logger.info(f"Stored session {session_id[:10]}... with TTL {self.session_ttl}s")
+            return True
+            
+        except Exception as e:
+            logger.error(f"Failed to store session {session_id[:10]}...: {e}")
+            return False
+    
+    def get_session(self, session_id: str, refresh_ttl: bool = True) -> Optional[Dict[str, Any]]:
+        """
+        Retrieve user session data.
+        
+        Args:
+            session_id: Session identifier
+            refresh_ttl: If True, extend session TTL on access
+            
+        Returns:
+            Session data dictionary or None if not found/expired
+        """
+        try:
+            key = f"session:{session_id}"
+            
+            # Get session data
+            data = self.redis.hgetall(key)
+            
+            if not data:
+                logger.warning(f"Session {session_id[:10]}... not found or expired")
+                return None
+            
+            # Deserialize data
+            session_data = self._deserialize_data(data)
+            
+            # Update last accessed time and refresh TTL
+            if refresh_ttl:
+                session_data["last_accessed"] = time.time()
+                self.redis.hset(key, "last_accessed", str(time.time()))
+                self.redis.expire(key, self.session_ttl)
+                logger.debug(f"Refreshed session {session_id[:10]}... TTL")
+            
+            return session_data
+            
+        except Exception as e:
+            logger.error(f"Failed to retrieve session {session_id[:10]}...: {e}")
+            return None
+    
+    def delete_session(self, session_id: str) -> bool:
+        """
+        Delete user session (logout).
+        
+        Args:
+            session_id: Session identifier
+            
+        Returns:
+            True if deleted successfully, False otherwise
+        """
+        try:
+            key = f"session:{session_id}"
+            result = self.redis.delete(key)
+            
+            if result:
+                logger.info(f"Deleted session {session_id[:10]}...")
+                return True
+            else:
+                logger.warning(f"Session {session_id[:10]}... not found for deletion")
+                return False
+                
+        except Exception as e:
+            logger.error(f"Failed to delete session {session_id[:10]}...: {e}")
+            return False
+    
+    # Health Check Methods
+    
+    def health_check(self) -> Dict[str, Any]:
+        """
+        Perform Redis health check.
+        
+        Returns:
+            Health status dictionary
+        """
+        try:
+            # Test basic operations
+            test_key = f"health:check:{int(time.time())}"
+            test_value = {"timestamp": time.time(), "test": True}
+            
+            # Test set - Use individual hset calls for Upstash compatibility
+            serialized_test = self._serialize_data(test_value)
+            for field, value in serialized_test.items():
+                self.redis.hset(test_key, field, value)
+            
+            # Test get
+            retrieved = self.redis.hgetall(test_key)
+            
+            # Test delete
+            self.redis.delete(test_key)
+            
+            return {
+                "status": "healthy",
+                "redis_connected": True,
+                "operations_working": bool(retrieved),
+                "timestamp": datetime.utcnow().isoformat()
+            }
+            
+        except Exception as e:
+            logger.error(f"Redis health check failed: {e}")
+            return {
+                "status": "unhealthy",
+                "redis_connected": False,
+                "error": str(e),
+                "timestamp": datetime.utcnow().isoformat()
+            }
+    
+    def get_stats(self) -> Dict[str, Any]:
+        """
+        Get Redis usage statistics.
+        
+        Returns:
+            Statistics dictionary
+        """
+        try:
+            # Get basic info (not all Upstash plans support INFO command)
+            stats = {
+                "oauth_codes_pattern": "oauth:code:*",
+                "sessions_pattern": "session:*",
+                "timestamp": datetime.utcnow().isoformat()
+            }
+            
+            try:
+                # Try to get counts (may fail on some Upstash plans)
+                oauth_keys = self.redis.keys("oauth:code:*")
+                session_keys = self.redis.keys("session:*")
+                
+                stats.update({
+                    "active_oauth_codes": len(oauth_keys) if oauth_keys else 0,
+                    "active_sessions": len(session_keys) if session_keys else 0
+                })
+            except Exception as e:
+                logger.warning(f"Could not get detailed stats: {e}")
+                stats["warning"] = "Detailed stats not available on this Redis plan"
+            
+            return stats
+            
+        except Exception as e:
+            logger.error(f"Failed to get Redis stats: {e}")
+            return {"error": str(e), "timestamp": datetime.utcnow().isoformat()}
+
+# Global instance for easy importing
+redis_store = None
+
+def get_redis_store() -> Optional[RedisSessionStore]:
+    """
+    Get global Redis store instance (singleton pattern).
+    
+    Returns:
+        RedisSessionStore instance or None if initialization fails
+    """
+    global redis_store
+    
+    if redis_store is None:
+        try:
+            logger.info("Initializing Redis store...")
+            redis_store = RedisSessionStore()
+            logger.info("Redis store initialized successfully")
+        except Exception as e:
+            logger.error(f"Failed to initialize Redis store: {e}")
+            redis_store = None
+    
+    return redis_store
+
+def init_redis_store() -> RedisSessionStore:
+    """
+    Initialize Redis store and perform health check.
+    
+    Returns:
+        RedisSessionStore instance
+        
+    Raises:
+        Exception if Redis is not available or unhealthy
+    """
+    store = get_redis_store()
+    
+    # Perform health check
+    health = store.health_check()
+    
+    if health["status"] != "healthy":
+        raise Exception(f"Redis health check failed: {health}")
+    
+    logger.info("Redis session store initialized and healthy")
+    return store

rekabet_mcp_module/client.py

@@ -0,0 +1,407 @@
+# rekabet_mcp_module/client.py
+
+import httpx
+from bs4 import BeautifulSoup
+from typing import List, Optional, Tuple, Dict, Any
+import logging
+import html
+import re
+import io # For io.BytesIO
+from urllib.parse import urlencode, urljoin, quote, parse_qs, urlparse
+from markitdown import MarkItDown
+import math
+
+# pypdf for PDF processing (lighter alternative to PyMuPDF)
+from pypdf import PdfReader, PdfWriter # PyPDF2'nin devamı niteliğindeki pypdf
+
+from .models import (
+    RekabetKurumuSearchRequest,
+    RekabetDecisionSummary,
+    RekabetSearchResult,
+    RekabetDocument,
+    RekabetKararTuruGuidEnum
+)
+from pydantic import HttpUrl # Ensure HttpUrl is imported from pydantic
+
+logger = logging.getLogger(__name__)
+if not logger.hasHandlers(): # Pragma: no cover
+    logging.basicConfig(
+        level=logging.INFO,  # Varsayılan log seviyesi
+        format='%(asctime)s - %(name)s - %(levelname)s - %(message)s'
+    )
+    # Debug betiğinde daha detaylı loglama için seviye ayrıca ayarlanabilir.
+
+class RekabetKurumuApiClient:
+    BASE_URL = "https://www.rekabet.gov.tr"
+    SEARCH_PATH = "/tr/Kararlar"
+    DECISION_LANDING_PATH_TEMPLATE = "/Karar"
+    # PDF sayfa bazlı Markdown döndürüldüğü için bu sabit artık doğrudan kullanılmıyor.
+    # DOCUMENT_MARKDOWN_CHUNK_SIZE = 5000 
+
+    def __init__(self, request_timeout: float = 60.0):
+        self.http_client = httpx.AsyncClient(
+            base_url=self.BASE_URL,
+            headers={
+                "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
+                "Accept-Language": "tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7",
+                "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
+            },
+            timeout=request_timeout,
+            verify=True,
+            follow_redirects=True
+        )
+
+    def _build_search_query_params(self, params: RekabetKurumuSearchRequest) -> List[Tuple[str, str]]:
+        query_params: List[Tuple[str, str]] = []
+        query_params.append(("sayfaAdi", params.sayfaAdi if params.sayfaAdi is not None else ""))
+        query_params.append(("YayinlanmaTarihi", params.YayinlanmaTarihi if params.YayinlanmaTarihi is not None else ""))
+        query_params.append(("PdfText", params.PdfText if params.PdfText is not None else ""))
+        
+        karar_turu_id_value = ""
+        if params.KararTuruID is not None: 
+            karar_turu_id_value = params.KararTuruID.value if params.KararTuruID.value != "ALL" else "" 
+        query_params.append(("KararTuruID", karar_turu_id_value))
+            
+        query_params.append(("KararSayisi", params.KararSayisi if params.KararSayisi is not None else ""))
+        query_params.append(("KararTarihi", params.KararTarihi if params.KararTarihi is not None else ""))
+        
+        if params.page and params.page > 1:
+            query_params.append(("page", str(params.page)))
+            
+        return query_params
+
+    async def search_decisions(self, params: RekabetKurumuSearchRequest) -> RekabetSearchResult:
+        request_path = self.SEARCH_PATH
+        final_query_params = self._build_search_query_params(params)
+        logger.info(f"RekabetKurumuApiClient: Performing search. Path: {request_path}, Parameters: {final_query_params}")
+        
+        try:
+            response = await self.http_client.get(request_path, params=final_query_params)
+            response.raise_for_status()
+            html_content = response.text
+        except httpx.RequestError as e:
+            logger.error(f"RekabetKurumuApiClient: HTTP request error during search: {e}")
+            raise
+        
+        soup = BeautifulSoup(html_content, 'html.parser')
+        processed_decisions: List[RekabetDecisionSummary] = []
+        total_records: Optional[int] = None
+        total_pages: Optional[int] = None
+        
+        pagination_div = soup.find("div", class_="yazi01")
+        if pagination_div:
+            text_content = pagination_div.get_text(separator=" ", strip=True)
+            total_match = re.search(r"Toplam\s*:\s*(\d+)", text_content)
+            if total_match:
+                try:
+                    total_records = int(total_match.group(1))
+                    logger.debug(f"Total records found from pagination: {total_records}")
+                except ValueError:
+                    logger.warning(f"Could not convert 'Toplam' value to int: {total_match.group(1)}")
+            else:
+                logger.warning("'Toplam :' string not found in pagination section.")
+            
+            results_per_page_assumed = 10 
+            if total_records is not None:
+                calculated_total_pages = math.ceil(total_records / results_per_page_assumed)
+                total_pages = calculated_total_pages if calculated_total_pages > 0 else (1 if total_records > 0 else 0)
+                logger.debug(f"Calculated total pages: {total_pages}")
+            
+            if total_pages is None: # Fallback if total_records couldn't be parsed
+                last_page_link = pagination_div.select_one("li.PagedList-skipToLast a")
+                if last_page_link and last_page_link.has_attr('href'):
+                    qs = parse_qs(urlparse(last_page_link['href']).query)
+                    if 'page' in qs and qs['page']:
+                        try:
+                            total_pages = int(qs['page'][0])
+                            logger.debug(f"Total pages found from 'Last >>' link: {total_pages}")
+                        except ValueError:
+                            logger.warning(f"Could not convert page value from 'Last >>' link to int: {qs['page'][0]}")
+                elif total_records == 0 : total_pages = 0 # If no records, 0 pages
+                elif total_records is not None and total_records > 0 : total_pages = 1 # If records exist but no last page link (e.g. single page)
+                else: logger.warning("'Last >>' link not found in pagination section.")
+        
+        decision_tables_container = soup.find("div", id="kararList")
+        if not decision_tables_container:
+            logger.warning("`div#kararList` (decision list container) not found. HTML structure might have changed or no decisions on this page.")
+        else:
+            decision_tables = decision_tables_container.find_all("table", class_="equalDivide")
+            logger.info(f"Found {len(decision_tables)} 'table' elements with class='equalDivide' for parsing.")
+            
+            if not decision_tables and total_records is not None and total_records > 0 :
+                 logger.warning(f"Page indicates {total_records} records but no decision tables found with class='equalDivide'.")
+
+            for idx, table in enumerate(decision_tables):
+                logger.debug(f"Processing table {idx + 1}...")
+                try:
+                    rows = table.find_all("tr")
+                    if len(rows) != 3: 
+                        logger.warning(f"Table {idx + 1} has an unexpected number of rows ({len(rows)} instead of 3). Skipping. HTML snippet:\n{table.prettify()[:500]}")
+                        continue
+
+                    # Row 1: Publication Date, Decision Number, Related Cases Link
+                    td_elements_r1 = rows[0].find_all("td")
+                    pub_date = td_elements_r1[0].get_text(strip=True) if len(td_elements_r1) > 0 else None
+                    dec_num = td_elements_r1[1].get_text(strip=True) if len(td_elements_r1) > 1 else None
+                    
+                    related_cases_link_tag = td_elements_r1[2].find("a", href=True) if len(td_elements_r1) > 2 else None
+                    related_cases_url_str: Optional[str] = None
+                    karar_id_from_related: Optional[str] = None
+                    if related_cases_link_tag and related_cases_link_tag.has_attr('href'):
+                        related_cases_url_str = urljoin(self.BASE_URL, related_cases_link_tag['href'])
+                        qs_related = parse_qs(urlparse(related_cases_link_tag['href']).query)
+                        if 'kararId' in qs_related and qs_related['kararId']:
+                            karar_id_from_related = qs_related['kararId'][0]
+                    
+                    # Row 2: Decision Date, Decision Type
+                    td_elements_r2 = rows[1].find_all("td")
+                    dec_date = td_elements_r2[0].get_text(strip=True) if len(td_elements_r2) > 0 else None
+                    dec_type_text = td_elements_r2[1].get_text(strip=True) if len(td_elements_r2) > 1 else None
+
+                    # Row 3: Title and Main Decision Link
+                    title_cell = rows[2].find("td", colspan="5")
+                    decision_link_tag = title_cell.find("a", href=True) if title_cell else None
+                    
+                    title_text: Optional[str] = None
+                    decision_landing_url_str: Optional[str] = None 
+                    karar_id_from_main_link: Optional[str] = None
+
+                    if decision_link_tag and decision_link_tag.has_attr('href'):
+                        title_text = decision_link_tag.get_text(strip=True)
+                        href_val = decision_link_tag['href']
+                        if href_val.startswith(self.DECISION_LANDING_PATH_TEMPLATE + "?kararId="): # Ensure it's a decision link
+                            decision_landing_url_str = urljoin(self.BASE_URL, href_val)
+                            qs_main = parse_qs(urlparse(href_val).query)
+                            if 'kararId' in qs_main and qs_main['kararId']:
+                                karar_id_from_main_link = qs_main['kararId'][0]
+                        else:
+                            logger.warning(f"Table {idx+1} decision link has unexpected format: {href_val}")
+                    else:
+                        logger.warning(f"Table {idx+1} could not find title/decision link tag.")
+                    
+                    current_karar_id = karar_id_from_main_link or karar_id_from_related
+
+                    if not current_karar_id: 
+                        logger.warning(f"Table {idx+1} Karar ID not found. Skipping. Title (if any): {title_text}")
+                        continue
+                    
+                    # Convert string URLs to HttpUrl for the model
+                    final_decision_url = HttpUrl(decision_landing_url_str) if decision_landing_url_str else None
+                    final_related_cases_url = HttpUrl(related_cases_url_str) if related_cases_url_str else None
+
+                    processed_decisions.append(RekabetDecisionSummary(
+                        publication_date=pub_date, decision_number=dec_num, decision_date=dec_date,
+                        decision_type_text=dec_type_text, title=title_text, 
+                        decision_url=final_decision_url, 
+                        karar_id=current_karar_id, 
+                        related_cases_url=final_related_cases_url
+                    ))
+                    logger.debug(f"Table {idx+1} parsed successfully: Karar ID '{current_karar_id}', Title '{title_text[:50] if title_text else 'N/A'}...'")
+
+                except Exception as e:
+                    logger.warning(f"RekabetKurumuApiClient: Error parsing decision summary {idx+1}: {e}. Problematic Table HTML:\n{table.prettify()}", exc_info=True)
+                    continue
+        
+        return RekabetSearchResult(
+            decisions=processed_decisions, total_records_found=total_records, 
+            retrieved_page_number=params.page, total_pages=total_pages if total_pages is not None else 0
+        )
+
+    async def _extract_pdf_url_and_landing_page_metadata(self, karar_id: str, landing_page_html: str, landing_page_url: str) -> Dict[str, Any]:
+        soup = BeautifulSoup(landing_page_html, 'html.parser')
+        data: Dict[str, Any] = {
+            "pdf_url": None,
+            "title_on_landing_page": soup.title.string.strip() if soup.title and soup.title.string else f"Rekabet Kurumu Kararı {karar_id}",
+        }
+        # This part needs to be robust and specific to Rekabet Kurumu's landing page structure.
+        # Look for common patterns: direct links, download buttons, embedded viewers.
+        pdf_anchor = soup.find("a", href=re.compile(r"\.pdf(\?|$)", re.IGNORECASE)) # Basic PDF link
+        if not pdf_anchor: # Try other common patterns if the basic one fails
+            # Example: Look for links with specific text or class
+            pdf_anchor = soup.find("a", string=re.compile(r"karar metni|pdf indir", re.IGNORECASE))
+        
+        if pdf_anchor and pdf_anchor.has_attr('href'):
+            pdf_path = pdf_anchor['href']
+            data["pdf_url"] = urljoin(landing_page_url, pdf_path)
+            logger.info(f"PDF link found on landing page (<a>): {data['pdf_url']}")
+        else:
+            iframe_pdf = soup.find("iframe", src=re.compile(r"\.pdf(\?|$)", re.IGNORECASE))
+            if iframe_pdf and iframe_pdf.has_attr('src'):
+                pdf_path = iframe_pdf['src']
+                data["pdf_url"] = urljoin(landing_page_url, pdf_path)
+                logger.info(f"PDF link found on landing page (<iframe>): {data['pdf_url']}")
+            else:
+                embed_pdf = soup.find("embed", src=re.compile(r"\.pdf(\?|$)", re.IGNORECASE), type="application/pdf")
+                if embed_pdf and embed_pdf.has_attr('src'):
+                    pdf_path = embed_pdf['src']
+                    data["pdf_url"] = urljoin(landing_page_url, pdf_path)
+                    logger.info(f"PDF link found on landing page (<embed>): {data['pdf_url']}")
+                else:
+                    logger.warning(f"No PDF link found on landing page {landing_page_url} for kararId {karar_id} using common selectors.")
+        return data
+
+    async def _download_pdf_bytes(self, pdf_url: str) -> Optional[bytes]:
+        try:
+            url_to_fetch = pdf_url if pdf_url.startswith(('http://', 'https://')) else urljoin(self.BASE_URL, pdf_url)
+            logger.info(f"Downloading PDF from: {url_to_fetch}")
+            response = await self.http_client.get(url_to_fetch)
+            response.raise_for_status()
+            pdf_bytes = await response.aread()
+            logger.info(f"PDF content downloaded ({len(pdf_bytes)} bytes) from: {url_to_fetch}")
+            return pdf_bytes
+        except httpx.RequestError as e:
+            logger.error(f"HTTP error downloading PDF from {pdf_url}: {e}")
+        except Exception as e:
+            logger.error(f"General error downloading PDF from {pdf_url}: {e}")
+        return None
+
+    def _extract_single_pdf_page_as_pdf_bytes(self, original_pdf_bytes: bytes, page_number_to_extract: int) -> Tuple[Optional[bytes], int]:
+        total_pages_in_original_pdf = 0
+        single_page_pdf_bytes: Optional[bytes] = None
+        
+        if not original_pdf_bytes:
+            logger.warning("No original PDF bytes provided for page extraction.")
+            return None, 0
+
+        try:
+            pdf_stream = io.BytesIO(original_pdf_bytes)
+            reader = PdfReader(pdf_stream)
+            total_pages_in_original_pdf = len(reader.pages)
+            
+            if not (0 < page_number_to_extract <= total_pages_in_original_pdf):
+                logger.warning(f"Requested page number ({page_number_to_extract}) is out of PDF page range (1-{total_pages_in_original_pdf}).")
+                return None, total_pages_in_original_pdf
+
+            writer = PdfWriter()
+            writer.add_page(reader.pages[page_number_to_extract - 1]) # pypdf is 0-indexed
+            
+            output_pdf_stream = io.BytesIO()
+            writer.write(output_pdf_stream)
+            single_page_pdf_bytes = output_pdf_stream.getvalue()
+            
+            logger.debug(f"Page {page_number_to_extract} of original PDF (total {total_pages_in_original_pdf} pages) extracted as new PDF using pypdf.")
+            
+        except Exception as e:
+            logger.error(f"Error extracting PDF page using pypdf: {e}", exc_info=True)
+            return None, total_pages_in_original_pdf 
+        return single_page_pdf_bytes, total_pages_in_original_pdf
+
+    def _convert_pdf_bytes_to_markdown(self, pdf_bytes: bytes, source_url_for_logging: str) -> Optional[str]:
+        if not pdf_bytes:
+            logger.warning(f"No PDF bytes provided for Markdown conversion (source: {source_url_for_logging}).")
+            return None
+        
+        pdf_stream = io.BytesIO(pdf_bytes)
+        try:
+            md_converter = MarkItDown(enable_plugins=False) 
+            conversion_result = md_converter.convert(pdf_stream) 
+            markdown_text = conversion_result.text_content
+            
+            if not markdown_text:
+                 logger.warning(f"MarkItDown returned empty content from PDF byte stream (source: {source_url_for_logging}). PDF page might be image-based or MarkItDown could not process the PDF stream.")
+            return markdown_text
+        except Exception as e:
+            logger.error(f"MarkItDown conversion error for PDF byte stream (source: {source_url_for_logging}): {e}", exc_info=True)
+            return None
+
+    async def get_decision_document(self, karar_id: str, page_number: int = 1) -> RekabetDocument:
+        if not karar_id:
+             return RekabetDocument(
+                source_landing_page_url=HttpUrl(f"{self.BASE_URL}"), 
+                karar_id=karar_id or "UNKNOWN_KARAR_ID",
+                error_message="karar_id is required.",
+                current_page=1, total_pages=0, is_paginated=False )
+
+        decision_url_path = f"{self.DECISION_LANDING_PATH_TEMPLATE}?kararId={karar_id}"
+        full_landing_page_url = urljoin(self.BASE_URL, decision_url_path)
+        
+        logger.info(f"RekabetKurumuApiClient: Getting decision document: {full_landing_page_url}, Requested PDF Page: {page_number}")
+
+        pdf_url_to_report: Optional[HttpUrl] = None
+        title_to_report: Optional[str] = f"Rekabet Kurumu Kararı {karar_id}" # Default
+        error_message: Optional[str] = None
+        markdown_for_requested_page: Optional[str] = None
+        total_pdf_pages: int = 0
+        
+        try:
+            async with self.http_client.stream("GET", full_landing_page_url) as response:
+                response.raise_for_status()
+                content_type = response.headers.get("content-type", "").lower()
+                final_url_of_response = HttpUrl(str(response.url))
+                original_pdf_bytes: Optional[bytes] = None
+
+                if "application/pdf" in content_type:
+                    logger.info(f"URL {final_url_of_response} is a direct PDF. Processing content.")
+                    pdf_url_to_report = final_url_of_response
+                    original_pdf_bytes = await response.aread()
+                elif "text/html" in content_type:
+                    logger.info(f"URL {final_url_of_response} is an HTML landing page. Looking for PDF link.")
+                    landing_page_html_bytes = await response.aread()
+                    detected_charset = response.charset_encoding or 'utf-8'
+                    try: landing_page_html = landing_page_html_bytes.decode(detected_charset)
+                    except UnicodeDecodeError: landing_page_html = landing_page_html_bytes.decode('utf-8', errors='replace')
+
+                    if landing_page_html.strip():
+                        landing_page_data = self._extract_pdf_url_and_landing_page_metadata(karar_id, landing_page_html, str(final_url_of_response))
+                        pdf_url_str_from_html = landing_page_data.get("pdf_url")
+                        if landing_page_data.get("title_on_landing_page"): title_to_report = landing_page_data.get("title_on_landing_page")
+                        if pdf_url_str_from_html:
+                            pdf_url_to_report = HttpUrl(pdf_url_str_from_html)
+                            original_pdf_bytes = await self._download_pdf_bytes(str(pdf_url_to_report))
+                        else: error_message = (error_message or "") + " PDF URL not found on HTML landing page."
+                    else: error_message = "Decision landing page content is empty."
+                else: error_message = f"Unexpected content type ({content_type}) for URL: {final_url_of_response}"
+
+                if original_pdf_bytes:
+                    single_page_pdf_bytes, total_pdf_pages_from_extraction = self._extract_single_pdf_page_as_pdf_bytes(original_pdf_bytes, page_number)
+                    total_pdf_pages = total_pdf_pages_from_extraction 
+
+                    if single_page_pdf_bytes:
+                        markdown_for_requested_page = self._convert_pdf_bytes_to_markdown(single_page_pdf_bytes, str(pdf_url_to_report or full_landing_page_url))
+                        if not markdown_for_requested_page:
+                            error_message = (error_message or "") + f"; Could not convert page {page_number} of PDF to Markdown."
+                    elif total_pdf_pages > 0 : 
+                        error_message = (error_message or "") + f"; Could not extract page {page_number} from PDF (page may be out of range or extraction failed)."
+                    else: 
+                         error_message = (error_message or "") + "; PDF could not be processed or page count was zero (original PDF might be invalid)."
+                elif not error_message: 
+                    error_message = "PDF content could not be downloaded or identified."
+            
+            is_paginated = total_pdf_pages > 1
+            current_page_final = page_number
+            if total_pdf_pages > 0: 
+                current_page_final = max(1, min(page_number, total_pdf_pages))
+            elif markdown_for_requested_page is None: 
+                current_page_final = 1 
+            
+            # If markdown is None but there was no specific error for markdown conversion (e.g. PDF not found first)
+            # make sure error_message reflects that.
+            if markdown_for_requested_page is None and pdf_url_to_report and not error_message:
+                 error_message = (error_message or "") + "; Failed to produce Markdown from PDF page."
+
+
+            return RekabetDocument(
+                source_landing_page_url=full_landing_page_url, karar_id=karar_id,
+                title_on_landing_page=title_to_report, pdf_url=pdf_url_to_report,
+                markdown_chunk=markdown_for_requested_page, current_page=current_page_final,
+                total_pages=total_pdf_pages, is_paginated=is_paginated,
+                error_message=error_message.strip("; ") if error_message else None )
+
+        except httpx.HTTPStatusError as e: error_msg_detail = f"HTTP Status error {e.response.status_code} while processing decision page."
+        except httpx.RequestError as e: error_msg_detail = f"HTTP Request error while processing decision page: {str(e)}"
+        except Exception as e: error_msg_detail = f"General error while processing decision: {str(e)}"
+        
+        exc_info_flag = not isinstance(e, (httpx.HTTPStatusError, httpx.RequestError)) if 'e' in locals() else True
+        logger.error(f"RekabetKurumuApiClient: Error processing decision {karar_id} from {full_landing_page_url}: {error_msg_detail}", exc_info=exc_info_flag)
+        error_message = (error_message + "; " if error_message else "") + error_msg_detail
+        
+        return RekabetDocument(
+            source_landing_page_url=full_landing_page_url, karar_id=karar_id,
+            title_on_landing_page=title_to_report, pdf_url=pdf_url_to_report,
+            markdown_chunk=None, current_page=page_number, total_pages=0, is_paginated=False,
+            error_message=error_message.strip("; ") if error_message else "An unexpected error occurred." )
+
+    async def close_client_session(self): # Pragma: no cover
+        if hasattr(self, 'http_client') and self.http_client and not self.http_client.is_closed:
+            await self.http_client.aclose()
+            logger.info("RekabetKurumuApiClient: HTTP client session closed.")

rekabet_mcp_module/models.py

@@ -0,0 +1,71 @@
+# rekabet_mcp_module/models.py
+
+from pydantic import BaseModel, Field, HttpUrl
+from typing import List, Optional, Any
+from enum import Enum
+
+# Enum for decision type GUIDs (used by the client and expected by the website)
+class RekabetKararTuruGuidEnum(str, Enum):
+    TUMU = "ALL"  # Represents "All" or "Select Decision Type"
+    BIRLESME_DEVRALMA = "2fff0979-9f9d-42d7-8c2e-a30705889542"  # Merger and Acquisition
+    DIGER = "dda8feaf-c919-405c-9da1-823f22b45ad9"  # Other
+    MENFI_TESPIT_MUAFIYET = "95ccd210-5304-49c5-b9e0-8ee53c50d4e8"  # Negative Clearance and Exemption
+    OZELLESTIRME = "e1f14505-842b-4af5-95d1-312d6de1a541"  # Privatization
+    REKABET_IHLALI = "720614bf-efd1-4dca-9785-b98eb65f2677"  # Competition Infringement
+
+# Enum for user-friendly decision type names (for server tool parameters)
+# These correspond to the display names on the website's select dropdown.
+class RekabetKararTuruAdiEnum(str, Enum):
+    TUMU = "Tümü"  # Corresponds to the empty value "" for GUID, meaning "All"
+    BIRLESME_VE_DEVRALMA = "Birleşme ve Devralma"
+    DIGER = "Diğer"
+    MENFI_TESPIT_VE_MUAFIYET = "Menfi Tespit ve Muafiyet"
+    OZELLESTIRME = "Özelleştirme"
+    REKABET_IHLALI = "Rekabet İhlali"
+
+class RekabetKurumuSearchRequest(BaseModel):
+    """Model for Rekabet Kurumu (Turkish Competition Authority) search request."""
+    sayfaAdi: Optional[str] = Field(None, description="Title")
+    YayinlanmaTarihi: Optional[str] = Field(None, description="Date")
+    PdfText: Optional[str] = Field(None, description="Text")
+    KararTuruID: Optional[RekabetKararTuruGuidEnum] = Field(RekabetKararTuruGuidEnum.TUMU, description="Type")
+    KararSayisi: Optional[str] = Field(None, description="No")
+    KararTarihi: Optional[str] = Field(None, description="Date")
+    page: int = Field(1, ge=1, description="Page")
+
+class RekabetDecisionSummary(BaseModel):
+    """Model for a single Rekabet Kurumu decision summary from search results."""
+    publication_date: Optional[str] = Field(None, description="Pub date")
+    decision_number: Optional[str] = Field(None, description="Number")
+    decision_date: Optional[str] = Field(None, description="Date")
+    decision_type_text: Optional[str] = Field(None, description="Type")
+    title: Optional[str] = Field(None, description="Title")
+    decision_url: Optional[HttpUrl] = Field(None, description="URL")
+    karar_id: Optional[str] = Field(None, description="ID")
+    related_cases_url: Optional[HttpUrl] = Field(None, description="Cases URL")
+
+class RekabetSearchResult(BaseModel):
+    """Model for the overall search result for Rekabet Kurumu decisions."""
+    decisions: List[RekabetDecisionSummary]
+    total_records_found: Optional[int] = Field(None, description="Total")
+    retrieved_page_number: int = Field(description="Page")
+    total_pages: Optional[int] = Field(None, description="Pages")
+
+class RekabetDocument(BaseModel):
+    """
+    Model for a Rekabet Kurumu decision document.
+    Contains metadata from the landing page, a link to the PDF,
+    and the PDF's content converted to paginated Markdown.
+    """
+    source_landing_page_url: HttpUrl = Field(description="Source URL")
+    karar_id: str = Field(description="ID")
+    
+    title_on_landing_page: Optional[str] = Field(None, description="Title")
+    pdf_url: Optional[HttpUrl] = Field(None, description="PDF URL")
+    
+    markdown_chunk: Optional[str] = Field(None, description="Content")
+    current_page: int = Field(1, description="Page")
+    total_pages: int = Field(1, description="Total pages")
+    is_paginated: bool = Field(False, description="Paginated")
+    
+    error_message: Optional[str] = Field(None, description="Error")

requirements.txt

@@ -1,6 +1,11 @@
 fastmcp
 httpx
 beautifulsoup4
-markitdown
+markitdown[pdf]
 pydantic
-aiohttp 
+aiohttp
+playwright
+pypdf
+fastapi>=0.115.14
+uvicorn[standard]>=0.30.0
+starlette>=0.37.0

run_asgi.py

@@ -0,0 +1,119 @@
+#!/usr/bin/env python3
+"""
+Standalone ASGI server runner for Yargı MCP
+
+This script provides a simple way to run the Yargı MCP server
+as a web service using uvicorn.
+
+Usage:
+    python run_asgi.py
+    python run_asgi.py --host 0.0.0.0 --port 8080
+    python run_asgi.py --reload  # For development
+"""
+
+import os
+import sys
+import argparse
+import logging
+from pathlib import Path
+
+# Add project root to Python path
+sys.path.insert(0, str(Path(__file__).parent))
+
+try:
+    import uvicorn
+except ImportError:
+    print("Error: uvicorn is not installed.")
+    print("Please install it with: pip install uvicorn")
+    sys.exit(1)
+
+# Configure logging
+logging.basicConfig(
+    level=logging.INFO,
+    format='%(asctime)s - %(name)s - %(levelname)s - %(message)s'
+)
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Run Yargı MCP server as an ASGI web service"
+    )
+    parser.add_argument(
+        "--host",
+        type=str,
+        default=os.getenv("HOST", "127.0.0.1"),
+        help="Host to bind to (default: 127.0.0.1)"
+    )
+    parser.add_argument(
+        "--port",
+        type=int,
+        default=int(os.getenv("PORT", "8000")),
+        help="Port to bind to (default: 8000)"
+    )
+    parser.add_argument(
+        "--reload",
+        action="store_true",
+        help="Enable auto-reload for development"
+    )
+    parser.add_argument(
+        "--transport",
+        choices=["http", "sse"],
+        default="http",
+        help="Transport type (default: http)"
+    )
+    parser.add_argument(
+        "--log-level",
+        choices=["debug", "info", "warning", "error"],
+        default=os.getenv("LOG_LEVEL", "info").lower(),
+        help="Log level (default: info)"
+    )
+    parser.add_argument(
+        "--workers",
+        type=int,
+        default=1,
+        help="Number of worker processes (default: 1)"
+    )
+    
+    args = parser.parse_args()
+    
+    # Select app based on transport
+    app_name = "asgi_app:app" if args.transport == "http" else "asgi_app:sse_app"
+    
+    # Configure uvicorn
+    config = {
+        "app": app_name,
+        "host": args.host,
+        "port": args.port,
+        "log_level": args.log_level,
+        "reload": args.reload,
+        "access_log": True,
+    }
+    
+    # Add workers only if not in reload mode
+    if not args.reload and args.workers > 1:
+        config["workers"] = args.workers
+    
+    # Print startup information
+    print(f"Starting Yargı MCP server...")
+    print(f"Host: {args.host}")
+    print(f"Port: {args.port}")
+    print(f"Transport: {args.transport}")
+    print(f"Log level: {args.log_level}")
+    if args.reload:
+        print("Auto-reload: enabled")
+    else:
+        print(f"Workers: {args.workers}")
+    print(f"\nServer will be available at: http://{args.host}:{args.port}")
+    print(f"MCP endpoint: http://{args.host}:{args.port}/mcp/")
+    print(f"Health check: http://{args.host}:{args.port}/health")
+    print(f"API status: http://{args.host}:{args.port}/status")
+    print("\nPress CTRL+C to stop the server\n")
+    
+    # Run uvicorn
+    try:
+        uvicorn.run(**config)
+    except KeyboardInterrupt:
+        print("\nShutting down server...")
+        sys.exit(0)
+
+if __name__ == "__main__":
+    main()

sayistay_mcp_module/__init__.py

@@ -0,0 +1,56 @@
+# sayistay_mcp_module/__init__.py
+
+"""
+Sayıştay (Turkish Court of Accounts) MCP Module
+
+This module provides access to three types of Sayıştay decisions:
+- Genel Kurul (General Assembly) decisions
+- Temyiz Kurulu (Appeals Board) decisions  
+- Daire (Chamber) decisions
+
+The module handles ASP.NET WebForms authentication with CSRF tokens
+and DataTables-based pagination for comprehensive decision search.
+"""
+
+from .client import SayistayApiClient
+from .models import (
+    # Genel Kurul models
+    GenelKurulSearchRequest,
+    GenelKurulSearchResponse,
+    GenelKurulDecision,
+    
+    # Temyiz Kurulu models
+    TemyizKuruluSearchRequest, 
+    TemyizKuruluSearchResponse,
+    TemyizKuruluDecision,
+    
+    # Daire models
+    DaireSearchRequest,
+    DaireSearchResponse,
+    DaireDecision,
+    
+    # Document models
+    SayistayDocumentMarkdown
+)
+from .enums import (
+    DaireEnum,
+    KamuIdaresiTuruEnum,
+    WebKararKonusuEnum
+)
+
+__all__ = [
+    "SayistayApiClient",
+    "GenelKurulSearchRequest",
+    "GenelKurulSearchResponse", 
+    "GenelKurulDecision",
+    "TemyizKuruluSearchRequest",
+    "TemyizKuruluSearchResponse",
+    "TemyizKuruluDecision",
+    "DaireSearchRequest",
+    "DaireSearchResponse",
+    "DaireDecision",
+    "SayistayDocumentMarkdown",
+    "DaireEnum",
+    "KamuIdaresiTuruEnum",
+    "WebKararKonusuEnum"
+]

sayistay_mcp_module/client.py

@@ -0,0 +1,684 @@
+# sayistay_mcp_module/client.py
+
+import httpx
+import re
+from bs4 import BeautifulSoup
+from typing import Dict, Any, List, Optional, Tuple
+import logging
+import html
+import io
+from urllib.parse import urlencode, urljoin
+from markitdown import MarkItDown
+
+from .models import (
+    GenelKurulSearchRequest, GenelKurulSearchResponse, GenelKurulDecision,
+    TemyizKuruluSearchRequest, TemyizKuruluSearchResponse, TemyizKuruluDecision,
+    DaireSearchRequest, DaireSearchResponse, DaireDecision,
+    SayistayDocumentMarkdown
+)
+from .enums import DaireEnum, KamuIdaresiTuruEnum, WebKararKonusuEnum
+
+logger = logging.getLogger(__name__)
+if not logger.hasHandlers():
+    logging.basicConfig(
+        level=logging.INFO,
+        format='%(asctime)s - %(name)s - %(levelname)s - %(message)s'
+    )
+
+class SayistayApiClient:
+    """
+    API Client for Sayıştay (Turkish Court of Accounts) decision search system.
+    
+    Handles three types of decisions:
+    - Genel Kurul (General Assembly): Precedent-setting interpretive decisions
+    - Temyiz Kurulu (Appeals Board): Appeals against chamber decisions  
+    - Daire (Chamber): First-instance audit findings and sanctions
+    
+    Features:
+    - ASP.NET WebForms session management with CSRF tokens
+    - DataTables-based pagination and filtering
+    - Automatic session refresh on expiration
+    - Document retrieval with Markdown conversion
+    """
+    
+    BASE_URL = "https://www.sayistay.gov.tr"
+    
+    # Search endpoints for each decision type
+    GENEL_KURUL_ENDPOINT = "/KararlarGenelKurul/DataTablesList"
+    TEMYIZ_KURULU_ENDPOINT = "/KararlarTemyiz/DataTablesList" 
+    DAIRE_ENDPOINT = "/KararlarDaire/DataTablesList"
+    
+    # Page endpoints for session initialization and document access
+    GENEL_KURUL_PAGE = "/KararlarGenelKurul"
+    TEMYIZ_KURULU_PAGE = "/KararlarTemyiz"
+    DAIRE_PAGE = "/KararlarDaire"
+    
+    def __init__(self, request_timeout: float = 60.0):
+        self.request_timeout = request_timeout
+        self.session_cookies: Dict[str, str] = {}
+        self.csrf_tokens: Dict[str, str] = {}  # Store tokens for each endpoint
+        
+        self.http_client = httpx.AsyncClient(
+            base_url=self.BASE_URL,
+            headers={
+                "Accept": "application/json, text/javascript, */*; q=0.01",
+                "Accept-Language": "tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7",
+                "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8",
+                "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",
+                "X-Requested-With": "XMLHttpRequest",
+                "Sec-Fetch-Dest": "empty",
+                "Sec-Fetch-Mode": "cors", 
+                "Sec-Fetch-Site": "same-origin"
+            },
+            timeout=request_timeout,
+            follow_redirects=True
+        )
+
+    async def _initialize_session_for_endpoint(self, endpoint_type: str) -> bool:
+        """
+        Initialize session and obtain CSRF token for specific endpoint.
+        
+        Args:
+            endpoint_type: One of 'genel_kurul', 'temyiz_kurulu', 'daire'
+            
+        Returns:
+            True if session initialized successfully, False otherwise
+        """
+        page_mapping = {
+            'genel_kurul': self.GENEL_KURUL_PAGE,
+            'temyiz_kurulu': self.TEMYIZ_KURULU_PAGE,
+            'daire': self.DAIRE_PAGE
+        }
+        
+        if endpoint_type not in page_mapping:
+            logger.error(f"Invalid endpoint type: {endpoint_type}")
+            return False
+            
+        page_url = page_mapping[endpoint_type]
+        logger.info(f"Initializing session for {endpoint_type} endpoint: {page_url}")
+        
+        try:
+            response = await self.http_client.get(page_url)
+            response.raise_for_status()
+            
+            # Extract session cookies
+            for cookie_name, cookie_value in response.cookies.items():
+                self.session_cookies[cookie_name] = cookie_value
+                logger.debug(f"Stored session cookie: {cookie_name}")
+            
+            # Extract CSRF token from form
+            soup = BeautifulSoup(response.text, 'html.parser')
+            csrf_input = soup.find('input', {'name': '__RequestVerificationToken'})
+            
+            if csrf_input and csrf_input.get('value'):
+                self.csrf_tokens[endpoint_type] = csrf_input['value']
+                logger.info(f"Extracted CSRF token for {endpoint_type}")
+                return True
+            else:
+                logger.warning(f"CSRF token not found in {endpoint_type} page")
+                return False
+                
+        except httpx.RequestError as e:
+            logger.error(f"HTTP error during session initialization for {endpoint_type}: {e}")
+            return False
+        except Exception as e:
+            logger.error(f"Error initializing session for {endpoint_type}: {e}")
+            return False
+
+    def _enum_to_form_value(self, enum_value: str, enum_type: str) -> str:
+        """Convert enum values to form values expected by the API."""
+        if enum_value == "ALL":
+            if enum_type == "daire":
+                return "Tüm Daireler"
+            elif enum_type == "kamu_idaresi":
+                return "Tüm Kurumlar" 
+            elif enum_type == "web_karar_konusu":
+                return "Tüm Konular"
+        return enum_value
+
+    def _build_datatables_params(self, start: int, length: int, draw: int = 1) -> List[Tuple[str, str]]:
+        """Build standard DataTables parameters for all endpoints."""
+        params = [
+            ("draw", str(draw)),
+            ("start", str(start)),
+            ("length", str(length)),
+            ("search[value]", ""),
+            ("search[regex]", "false")
+        ]
+        return params
+
+    def _build_genel_kurul_form_data(self, params: GenelKurulSearchRequest, draw: int = 1) -> List[Tuple[str, str]]:
+        """Build form data for Genel Kurul search request."""
+        form_data = self._build_datatables_params(params.start, params.length, draw)
+        
+        # Add DataTables column definitions (from actual request)
+        column_defs = [
+            ("columns[0][data]", "KARARNO"),
+            ("columns[0][name]", ""),
+            ("columns[0][searchable]", "true"),
+            ("columns[0][orderable]", "false"),
+            ("columns[0][search][value]", ""),
+            ("columns[0][search][regex]", "false"),
+            
+            ("columns[1][data]", "KARARNO"),
+            ("columns[1][name]", ""),
+            ("columns[1][searchable]", "true"),
+            ("columns[1][orderable]", "true"),
+            ("columns[1][search][value]", ""),
+            ("columns[1][search][regex]", "false"),
+            
+            ("columns[2][data]", "KARARTARIH"),
+            ("columns[2][name]", ""),
+            ("columns[2][searchable]", "true"),
+            ("columns[2][orderable]", "true"),
+            ("columns[2][search][value]", ""),
+            ("columns[2][search][regex]", "false"),
+            
+            ("columns[3][data]", "KARAROZETI"),
+            ("columns[3][name]", ""),
+            ("columns[3][searchable]", "true"),
+            ("columns[3][orderable]", "false"),
+            ("columns[3][search][value]", ""),
+            ("columns[3][search][regex]", "false"),
+            
+            ("columns[4][data]", ""),
+            ("columns[4][name]", ""),
+            ("columns[4][searchable]", "true"),
+            ("columns[4][orderable]", "false"),
+            ("columns[4][search][value]", ""),
+            ("columns[4][search][regex]", "false"),
+            
+            ("order[0][column]", "2"),
+            ("order[0][dir]", "desc")
+        ]
+        form_data.extend(column_defs)
+        
+        # Add search parameters
+        form_data.extend([
+            ("KararlarGenelKurulAra.KARARNO", params.karar_no or ""),
+            ("__Invariant[]", "KararlarGenelKurulAra.KARARNO"),
+            ("__Invariant[]", "KararlarGenelKurulAra.KARAREK"),
+            ("KararlarGenelKurulAra.KARAREK", params.karar_ek or ""),
+            ("KararlarGenelKurulAra.KARARTARIHBaslangic", params.karar_tarih_baslangic or "Başlangıç Tarihi"),
+            ("KararlarGenelKurulAra.KARARTARIHBitis", params.karar_tarih_bitis or "Bitiş Tarihi"), 
+            ("KararlarGenelKurulAra.KARARTAMAMI", params.karar_tamami or ""),
+            ("__RequestVerificationToken", self.csrf_tokens.get('genel_kurul', ''))
+        ])
+        
+        return form_data
+
+    def _build_temyiz_kurulu_form_data(self, params: TemyizKuruluSearchRequest, draw: int = 1) -> List[Tuple[str, str]]:
+        """Build form data for Temyiz Kurulu search request."""
+        form_data = self._build_datatables_params(params.start, params.length, draw)
+        
+        # Add DataTables column definitions (from actual request)
+        column_defs = [
+            ("columns[0][data]", "TEMYIZTUTANAKTARIHI"),
+            ("columns[0][name]", ""),
+            ("columns[0][searchable]", "true"),
+            ("columns[0][orderable]", "false"),
+            ("columns[0][search][value]", ""),
+            ("columns[0][search][regex]", "false"),
+            
+            ("columns[1][data]", "TEMYIZTUTANAKTARIHI"),
+            ("columns[1][name]", ""),
+            ("columns[1][searchable]", "true"),
+            ("columns[1][orderable]", "true"),
+            ("columns[1][search][value]", ""),
+            ("columns[1][search][regex]", "false"),
+            
+            ("columns[2][data]", "ILAMDAIRESI"),
+            ("columns[2][name]", ""),
+            ("columns[2][searchable]", "true"),
+            ("columns[2][orderable]", "true"),
+            ("columns[2][search][value]", ""),
+            ("columns[2][search][regex]", "false"),
+            
+            ("columns[3][data]", "TEMYIZKARAR"),
+            ("columns[3][name]", ""),
+            ("columns[3][searchable]", "true"),
+            ("columns[3][orderable]", "false"),
+            ("columns[3][search][value]", ""),
+            ("columns[3][search][regex]", "false"),
+            
+            ("columns[4][data]", ""),
+            ("columns[4][name]", ""),
+            ("columns[4][searchable]", "true"),
+            ("columns[4][orderable]", "false"),
+            ("columns[4][search][value]", ""),
+            ("columns[4][search][regex]", "false"),
+            
+            ("order[0][column]", "1"),
+            ("order[0][dir]", "desc")
+        ]
+        form_data.extend(column_defs)
+        
+        # Add search parameters
+        daire_value = self._enum_to_form_value(params.ilam_dairesi, "daire")
+        kamu_idaresi_value = self._enum_to_form_value(params.kamu_idaresi_turu, "kamu_idaresi")
+        web_karar_konusu_value = self._enum_to_form_value(params.web_karar_konusu, "web_karar_konusu")
+        
+        form_data.extend([
+            ("KararlarTemyizAra.ILAMDAIRESI", daire_value),
+            ("KararlarTemyizAra.YILI", params.yili or ""),
+            ("KararlarTemyizAra.KARARTRHBaslangic", params.karar_tarih_baslangic or ""),
+            ("KararlarTemyizAra.KARARTRHBitis", params.karar_tarih_bitis or ""),
+            ("KararlarTemyizAra.KAMUIDARESITURU", kamu_idaresi_value if kamu_idaresi_value != "Tüm Kurumlar" else ""),
+            ("KararlarTemyizAra.ILAMNO", params.ilam_no or ""),
+            ("KararlarTemyizAra.DOSYANO", params.dosya_no or ""),
+            ("KararlarTemyizAra.TEMYIZTUTANAKNO", params.temyiz_tutanak_no or ""),
+            ("__Invariant", "KararlarTemyizAra.TEMYIZTUTANAKNO"),
+            ("KararlarTemyizAra.TEMYIZKARAR", params.temyiz_karar or ""),
+            ("KararlarTemyizAra.WEBKARARKONUSU", web_karar_konusu_value if web_karar_konusu_value != "Tüm Konular" else ""),
+            ("__RequestVerificationToken", self.csrf_tokens.get('temyiz_kurulu', ''))
+        ])
+        
+        return form_data
+
+    def _build_daire_form_data(self, params: DaireSearchRequest, draw: int = 1) -> List[Tuple[str, str]]:
+        """Build form data for Daire search request."""
+        form_data = self._build_datatables_params(params.start, params.length, draw)
+        
+        # Add DataTables column definitions (from actual request)
+        column_defs = [
+            ("columns[0][data]", "YARGILAMADAIRESI"),
+            ("columns[0][name]", ""),
+            ("columns[0][searchable]", "true"),
+            ("columns[0][orderable]", "false"),
+            ("columns[0][search][value]", ""),
+            ("columns[0][search][regex]", "false"),
+            
+            ("columns[1][data]", "KARARTRH"),
+            ("columns[1][name]", ""),
+            ("columns[1][searchable]", "true"),
+            ("columns[1][orderable]", "true"),
+            ("columns[1][search][value]", ""),
+            ("columns[1][search][regex]", "false"),
+            
+            ("columns[2][data]", "KARARNO"),
+            ("columns[2][name]", ""),
+            ("columns[2][searchable]", "true"),
+            ("columns[2][orderable]", "true"),
+            ("columns[2][search][value]", ""),
+            ("columns[2][search][regex]", "false"),
+            
+            ("columns[3][data]", "YARGILAMADAIRESI"),
+            ("columns[3][name]", ""),
+            ("columns[3][searchable]", "true"),
+            ("columns[3][orderable]", "true"),
+            ("columns[3][search][value]", ""),
+            ("columns[3][search][regex]", "false"),
+            
+            ("columns[4][data]", "WEBKARARMETNI"),
+            ("columns[4][name]", ""),
+            ("columns[4][searchable]", "true"),
+            ("columns[4][orderable]", "false"),
+            ("columns[4][search][value]", ""),
+            ("columns[4][search][regex]", "false"),
+            
+            ("columns[5][data]", ""),
+            ("columns[5][name]", ""),
+            ("columns[5][searchable]", "true"),
+            ("columns[5][orderable]", "false"),
+            ("columns[5][search][value]", ""),
+            ("columns[5][search][regex]", "false"),
+            
+            ("order[0][column]", "2"),
+            ("order[0][dir]", "desc")
+        ]
+        form_data.extend(column_defs)
+        
+        # Add search parameters
+        daire_value = self._enum_to_form_value(params.yargilama_dairesi, "daire")
+        kamu_idaresi_value = self._enum_to_form_value(params.kamu_idaresi_turu, "kamu_idaresi")
+        web_karar_konusu_value = self._enum_to_form_value(params.web_karar_konusu, "web_karar_konusu")
+        
+        form_data.extend([
+            ("KararlarDaireAra.YARGILAMADAIRESI", daire_value),
+            ("KararlarDaireAra.KARARTRHBaslangic", params.karar_tarih_baslangic or ""),
+            ("KararlarDaireAra.KARARTRHBitis", params.karar_tarih_bitis or ""),
+            ("KararlarDaireAra.ILAMNO", params.ilam_no or ""),
+            ("KararlarDaireAra.KAMUIDARESITURU", kamu_idaresi_value if kamu_idaresi_value != "Tüm Kurumlar" else ""),
+            ("KararlarDaireAra.HESAPYILI", params.hesap_yili or ""),
+            ("KararlarDaireAra.WEBKARARKONUSU", web_karar_konusu_value if web_karar_konusu_value != "Tüm Konular" else ""),
+            ("KararlarDaireAra.WEBKARARMETNI", params.web_karar_metni or ""),
+            ("__RequestVerificationToken", self.csrf_tokens.get('daire', ''))
+        ])
+        
+        return form_data
+
+    async def search_genel_kurul_decisions(self, params: GenelKurulSearchRequest) -> GenelKurulSearchResponse:
+        """
+        Search Sayıştay Genel Kurul (General Assembly) decisions.
+        
+        Args:
+            params: Search parameters for Genel Kurul decisions
+            
+        Returns:
+            GenelKurulSearchResponse with matching decisions
+        """
+        # Initialize session if needed
+        if 'genel_kurul' not in self.csrf_tokens:
+            if not await self._initialize_session_for_endpoint('genel_kurul'):
+                raise Exception("Failed to initialize session for Genel Kurul endpoint")
+        
+        form_data = self._build_genel_kurul_form_data(params)
+        encoded_data = urlencode(form_data, encoding='utf-8')
+        
+        logger.info(f"Searching Genel Kurul decisions with parameters: {params.model_dump(exclude_none=True)}")
+        
+        try:
+            # Update headers with cookies
+            headers = self.http_client.headers.copy()
+            if self.session_cookies:
+                cookie_header = "; ".join([f"{k}={v}" for k, v in self.session_cookies.items()])
+                headers["Cookie"] = cookie_header
+            
+            response = await self.http_client.post(
+                self.GENEL_KURUL_ENDPOINT,
+                data=encoded_data,
+                headers=headers
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            
+            # Parse response
+            decisions = []
+            for item in response_json.get('data', []):
+                decisions.append(GenelKurulDecision(
+                    id=item['Id'],
+                    karar_no=item['KARARNO'],
+                    karar_tarih=item['KARARTARIH'],
+                    karar_ozeti=item['KARAROZETI']
+                ))
+            
+            return GenelKurulSearchResponse(
+                decisions=decisions,
+                total_records=response_json.get('recordsTotal', 0),
+                total_filtered=response_json.get('recordsFiltered', 0),
+                draw=response_json.get('draw', 1)
+            )
+            
+        except httpx.RequestError as e:
+            logger.error(f"HTTP error during Genel Kurul search: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"Error processing Genel Kurul search: {e}")
+            raise
+
+    async def search_temyiz_kurulu_decisions(self, params: TemyizKuruluSearchRequest) -> TemyizKuruluSearchResponse:
+        """
+        Search Sayıştay Temyiz Kurulu (Appeals Board) decisions.
+        
+        Args:
+            params: Search parameters for Temyiz Kurulu decisions
+            
+        Returns:
+            TemyizKuruluSearchResponse with matching decisions
+        """
+        # Initialize session if needed
+        if 'temyiz_kurulu' not in self.csrf_tokens:
+            if not await self._initialize_session_for_endpoint('temyiz_kurulu'):
+                raise Exception("Failed to initialize session for Temyiz Kurulu endpoint")
+        
+        form_data = self._build_temyiz_kurulu_form_data(params)
+        encoded_data = urlencode(form_data, encoding='utf-8')
+        
+        logger.info(f"Searching Temyiz Kurulu decisions with parameters: {params.model_dump(exclude_none=True)}")
+        
+        try:
+            # Update headers with cookies
+            headers = self.http_client.headers.copy()
+            if self.session_cookies:
+                cookie_header = "; ".join([f"{k}={v}" for k, v in self.session_cookies.items()])
+                headers["Cookie"] = cookie_header
+            
+            response = await self.http_client.post(
+                self.TEMYIZ_KURULU_ENDPOINT,
+                data=encoded_data,
+                headers=headers
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            
+            # Parse response
+            decisions = []
+            for item in response_json.get('data', []):
+                decisions.append(TemyizKuruluDecision(
+                    id=item['Id'],
+                    temyiz_tutanak_tarihi=item['TEMYIZTUTANAKTARIHI'],
+                    ilam_dairesi=item['ILAMDAIRESI'],
+                    temyiz_karar=item['TEMYIZKARAR']
+                ))
+            
+            return TemyizKuruluSearchResponse(
+                decisions=decisions,
+                total_records=response_json.get('recordsTotal', 0),
+                total_filtered=response_json.get('recordsFiltered', 0),
+                draw=response_json.get('draw', 1)
+            )
+            
+        except httpx.RequestError as e:
+            logger.error(f"HTTP error during Temyiz Kurulu search: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"Error processing Temyiz Kurulu search: {e}")
+            raise
+
+    async def search_daire_decisions(self, params: DaireSearchRequest) -> DaireSearchResponse:
+        """
+        Search Sayıştay Daire (Chamber) decisions.
+        
+        Args:
+            params: Search parameters for Daire decisions
+            
+        Returns:
+            DaireSearchResponse with matching decisions
+        """
+        # Initialize session if needed
+        if 'daire' not in self.csrf_tokens:
+            if not await self._initialize_session_for_endpoint('daire'):
+                raise Exception("Failed to initialize session for Daire endpoint")
+        
+        form_data = self._build_daire_form_data(params)
+        encoded_data = urlencode(form_data, encoding='utf-8')
+        
+        logger.info(f"Searching Daire decisions with parameters: {params.model_dump(exclude_none=True)}")
+        
+        try:
+            # Update headers with cookies
+            headers = self.http_client.headers.copy()
+            if self.session_cookies:
+                cookie_header = "; ".join([f"{k}={v}" for k, v in self.session_cookies.items()])
+                headers["Cookie"] = cookie_header
+            
+            response = await self.http_client.post(
+                self.DAIRE_ENDPOINT,
+                data=encoded_data,
+                headers=headers
+            )
+            response.raise_for_status()
+            response_json = response.json()
+            
+            # Parse response
+            decisions = []
+            for item in response_json.get('data', []):
+                decisions.append(DaireDecision(
+                    id=item['Id'],
+                    yargilama_dairesi=item['YARGILAMADAIRESI'],
+                    karar_tarih=item['KARARTRH'],
+                    karar_no=item['KARARNO'],
+                    ilam_no=item.get('ILAMNO'),  # Use get() to handle None values
+                    madde_no=item['MADDENO'],
+                    kamu_idaresi_turu=item['KAMUIDARESITURU'],
+                    hesap_yili=item['HESAPYILI'],
+                    web_karar_konusu=item['WEBKARARKONUSU'],
+                    web_karar_metni=item['WEBKARARMETNI']
+                ))
+            
+            return DaireSearchResponse(
+                decisions=decisions,
+                total_records=response_json.get('recordsTotal', 0),
+                total_filtered=response_json.get('recordsFiltered', 0),
+                draw=response_json.get('draw', 1)
+            )
+            
+        except httpx.RequestError as e:
+            logger.error(f"HTTP error during Daire search: {e}")
+            raise
+        except Exception as e:
+            logger.error(f"Error processing Daire search: {e}")
+            raise
+
+    def _convert_html_to_markdown(self, html_content: str) -> Optional[str]:
+        """Convert HTML content to Markdown using MarkItDown with BytesIO to avoid filename length issues."""
+        if not html_content:
+            return None
+            
+        try:
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_content.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
+            
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            result = md_converter.convert(html_stream)
+            markdown_content = result.text_content
+            
+            logger.info("Successfully converted HTML to Markdown")
+            return markdown_content
+            
+        except Exception as e:
+            logger.error(f"Error converting HTML to Markdown: {e}")
+            return f"Error converting HTML content: {str(e)}"
+
+    async def get_document_as_markdown(self, decision_id: str, decision_type: str) -> SayistayDocumentMarkdown:
+        """
+        Retrieve full text of a Sayıştay decision and convert to Markdown.
+        
+        Args:
+            decision_id: Unique decision identifier
+            decision_type: Type of decision ('genel_kurul', 'temyiz_kurulu', 'daire')
+            
+        Returns:
+            SayistayDocumentMarkdown with converted content
+        """
+        logger.info(f"Retrieving document for {decision_type} decision ID: {decision_id}")
+        
+        # Validate decision_id
+        if not decision_id or not decision_id.strip():
+            return SayistayDocumentMarkdown(
+                decision_id=decision_id,
+                decision_type=decision_type,
+                source_url="",
+                markdown_content=None,
+                error_message="Decision ID cannot be empty"
+            )
+        
+        # Map decision type to URL path
+        url_path_mapping = {
+            'genel_kurul': 'KararlarGenelKurul',
+            'temyiz_kurulu': 'KararlarTemyiz',
+            'daire': 'KararlarDaire'
+        }
+        
+        if decision_type not in url_path_mapping:
+            return SayistayDocumentMarkdown(
+                decision_id=decision_id,
+                decision_type=decision_type,
+                source_url="",
+                markdown_content=None,
+                error_message=f"Invalid decision type: {decision_type}. Must be one of: {list(url_path_mapping.keys())}"
+            )
+        
+        # Build document URL
+        url_path = url_path_mapping[decision_type]
+        document_url = f"{self.BASE_URL}/{url_path}/Detay/{decision_id}/"
+        
+        try:
+            # Make HTTP GET request to document URL
+            headers = {
+                "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+                "Accept-Language": "tr-TR,tr;q=0.9,en-US;q=0.8,en;q=0.7",
+                "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36",
+                "Sec-Fetch-Dest": "document",
+                "Sec-Fetch-Mode": "navigate",
+                "Sec-Fetch-Site": "same-origin"
+            }
+            
+            # Include session cookies if available
+            if self.session_cookies:
+                cookie_header = "; ".join([f"{k}={v}" for k, v in self.session_cookies.items()])
+                headers["Cookie"] = cookie_header
+            
+            response = await self.http_client.get(document_url, headers=headers)
+            response.raise_for_status()
+            html_content = response.text
+            
+            if not html_content or not html_content.strip():
+                logger.warning(f"Received empty HTML content from {document_url}")
+                return SayistayDocumentMarkdown(
+                    decision_id=decision_id,
+                    decision_type=decision_type,
+                    source_url=document_url,
+                    markdown_content=None,
+                    error_message="Document content is empty"
+                )
+            
+            # Convert HTML to Markdown using existing method
+            markdown_content = self._convert_html_to_markdown(html_content)
+            
+            if markdown_content and "Error converting HTML content" not in markdown_content:
+                logger.info(f"Successfully retrieved and converted document {decision_id} to Markdown")
+                return SayistayDocumentMarkdown(
+                    decision_id=decision_id,
+                    decision_type=decision_type,
+                    source_url=document_url,
+                    markdown_content=markdown_content,
+                    retrieval_date=None  # Could add datetime.now().isoformat() if needed
+                )
+            else:
+                return SayistayDocumentMarkdown(
+                    decision_id=decision_id,
+                    decision_type=decision_type,
+                    source_url=document_url,
+                    markdown_content=None,
+                    error_message=f"Failed to convert HTML to Markdown: {markdown_content}"
+                )
+                
+        except httpx.HTTPStatusError as e:
+            error_msg = f"HTTP error {e.response.status_code} when fetching document: {e}"
+            logger.error(f"HTTP error fetching document {decision_id}: {error_msg}")
+            return SayistayDocumentMarkdown(
+                decision_id=decision_id,
+                decision_type=decision_type,
+                source_url=document_url,
+                markdown_content=None,
+                error_message=error_msg
+            )
+        except httpx.RequestError as e:
+            error_msg = f"Network error when fetching document: {e}"
+            logger.error(f"Network error fetching document {decision_id}: {error_msg}")
+            return SayistayDocumentMarkdown(
+                decision_id=decision_id,
+                decision_type=decision_type,
+                source_url=document_url,
+                markdown_content=None,
+                error_message=error_msg
+            )
+        except Exception as e:
+            error_msg = f"Unexpected error when fetching document: {e}"
+            logger.error(f"Unexpected error fetching document {decision_id}: {error_msg}")
+            return SayistayDocumentMarkdown(
+                decision_id=decision_id,
+                decision_type=decision_type,
+                source_url=document_url,
+                markdown_content=None,
+                error_message=error_msg
+            )
+
+    async def close_client_session(self):
+        """Close HTTP client session."""
+        if hasattr(self, 'http_client') and self.http_client and not self.http_client.is_closed:
+            await self.http_client.aclose()
+            logger.info("SayistayApiClient: HTTP client session closed.")

sayistay_mcp_module/enums.py

@@ -0,0 +1,49 @@
+# sayistay_mcp_module/enums.py
+
+from typing import Literal
+
+# Chamber/Daire options for Temyiz Kurulu and Daire endpoints (1-8 + All)
+DaireEnum = Literal[
+    "ALL",           # All chambers/departments
+    "1",             # 1. Daire
+    "2",             # 2. Daire  
+    "3",             # 3. Daire
+    "4",             # 4. Daire
+    "5",             # 5. Daire
+    "6",             # 6. Daire
+    "7",             # 7. Daire
+    "8"              # 8. Daire
+]
+
+# Public Administration Types (Kamu İdaresi Türü)
+KamuIdaresiTuruEnum = Literal[
+    "ALL",                                      # All institutions
+    "Genel Bütçe Kapsamındaki İdareler",       # General Budget Administrations
+    "Yüksek Öğretim Kurumları",                # Higher Education Institutions
+    "Diğer Özel Bütçeli İdareler",             # Other Special Budget Administrations
+    "Düzenleyici ve Denetleyici Kurumlar",     # Regulatory and Supervisory Institutions
+    "Sosyal Güvenlik Kurumları",               # Social Security Institutions
+    "Özel İdareler",                           # Special Administrations
+    "Belediyeler ve Bağlı İdareler",           # Municipalities and Affiliated Administrations
+    "Diğer"                                    # Other
+]
+
+# Decision Subject Categories (Web Karar Konusu)
+WebKararKonusuEnum = Literal[
+    "ALL",                                                          # All subjects
+    "Harcırah Mevzuatı ile İlgili Kararlar",                      # Travel Allowance Legislation Related Decisions
+    "İhale Mevzuatı ile İlgili Kararlar",                         # Procurement Legislation Related Decisions
+    "İş Mevzuatı ile İlgili Kararlar",                            # Labor Legislation Related Decisions
+    "Personel Mevzuatı ile İlgili Kararlar",                      # Personnel Legislation Related Decisions
+    "Sorumluluk ve Yargılama Usulleri ile İlgili Kararlar",       # Liability and Trial Procedures Related Decisions
+    "Vergi Resmi Harç ve Diğer Gelirlerle İlgili Kararlar",       # Tax, Official Fee and Other Revenue Related Decisions
+    "Çeşitli Konuları İlgilendiren Kararlar"                      # Decisions Concerning Various Topics
+]
+
+# Year ranges for different endpoints
+GENEL_KURUL_YEARS = [str(year) for year in range(2006, 2025)]  # 2006-2024
+TEMYIZ_KURULU_YEARS = [str(year) for year in range(1993, 2023)]  # 1993-2022
+DAIRE_YEARS = [str(year) for year in range(2012, 2026)]  # 2012-2025
+
+# Account years for Temyiz Kurulu and Daire endpoints
+HESAP_YILLARI = [str(year) for year in range(1993, 2024)]  # 1993-2023

sayistay_mcp_module/models.py

@@ -0,0 +1,160 @@
+# sayistay_mcp_module/models.py
+
+from pydantic import BaseModel, Field
+from typing import Optional, List, Union
+from .enums import DaireEnum, KamuIdaresiTuruEnum, WebKararKonusuEnum
+
+# ============================================================================
+# Genel Kurul (General Assembly) Models
+# ============================================================================
+
+class GenelKurulSearchRequest(BaseModel):
+    """
+    Search request for Sayıştay Genel Kurul (General Assembly) decisions.
+    
+    Genel Kurul decisions are precedent-setting rulings made by the full assembly
+    of the Turkish Court of Accounts, typically addressing interpretation of
+    audit and accountability regulations.
+    """
+    karar_no: Optional[str] = Field(None, description="Decision no")
+    karar_ek: Optional[str] = Field(None, description="Appendix no")
+    
+    karar_tarih_baslangic: Optional[str] = Field(None, description="Start year (YYYY)")
+    
+    karar_tarih_bitis: Optional[str] = Field(None, description="End year")
+    
+    karar_tamami: Optional[str] = Field(None, description="Value")
+    
+    # DataTables pagination
+    start: int = Field(0, description="Starting record for pagination (0-based)")
+    length: int = Field(10, description="Number of records per page (1-10)")
+
+class GenelKurulDecision(BaseModel):
+    """Single Genel Kurul decision entry from search results."""
+    id: int = Field(..., description="Unique decision ID")
+    karar_no: str = Field(..., description="Decision number (e.g., '5415/1')")
+    karar_tarih: str = Field(..., description="Decision date in DD.MM.YYYY format")
+    karar_ozeti: str = Field(..., description="Decision summary/abstract")
+
+class GenelKurulSearchResponse(BaseModel):
+    """Response from Genel Kurul search endpoint."""
+    decisions: List[GenelKurulDecision] = Field(default_factory=list, description="List of matching decisions")
+    total_records: int = Field(0, description="Total number of matching records")
+    total_filtered: int = Field(0, description="Number of records after filtering")
+    draw: int = Field(1, description="DataTables draw counter")
+
+# ============================================================================
+# Temyiz Kurulu (Appeals Board) Models
+# ============================================================================
+
+class TemyizKuruluSearchRequest(BaseModel):
+    """
+    Search request for Sayıştay Temyiz Kurulu (Appeals Board) decisions.
+    
+    Temyiz Kurulu reviews appeals against audit chamber decisions,
+    providing higher-level review of audit findings and sanctions.
+    """
+    ilam_dairesi: DaireEnum = Field("ALL", description="Value")
+    
+    yili: Optional[str] = Field(None, description="Value")
+    
+    karar_tarih_baslangic: Optional[str] = Field(None, description="Value")
+    
+    karar_tarih_bitis: Optional[str] = Field(None, description="End year")
+    
+    kamu_idaresi_turu: KamuIdaresiTuruEnum = Field("ALL", description="Value")
+    
+    ilam_no: Optional[str] = Field(None, description="Audit report number (İlam No, max 50 chars)")
+    dosya_no: Optional[str] = Field(None, description="File number for the case")
+    temyiz_tutanak_no: Optional[str] = Field(None, description="Appeals board meeting minutes number")
+    
+    temyiz_karar: Optional[str] = Field(None, description="Value")
+    
+    web_karar_konusu: WebKararKonusuEnum = Field("ALL", description="Value")
+    
+    # DataTables pagination
+    start: int = Field(0, description="Starting record for pagination (0-based)")
+    length: int = Field(10, description="Number of records per page (1-10)")
+
+class TemyizKuruluDecision(BaseModel):
+    """Single Temyiz Kurulu decision entry from search results."""
+    id: int = Field(..., description="Unique decision ID")
+    temyiz_tutanak_tarihi: str = Field(..., description="Appeals board meeting date in DD.MM.YYYY format")
+    ilam_dairesi: int = Field(..., description="Chamber number (1-8)")
+    temyiz_karar: str = Field(..., description="Appeals decision summary and reasoning")
+
+class TemyizKuruluSearchResponse(BaseModel):
+    """Response from Temyiz Kurulu search endpoint."""
+    decisions: List[TemyizKuruluDecision] = Field(default_factory=list, description="List of matching appeals decisions")
+    total_records: int = Field(0, description="Total number of matching records")
+    total_filtered: int = Field(0, description="Number of records after filtering")
+    draw: int = Field(1, description="DataTables draw counter")
+
+# ============================================================================
+# Daire (Chamber) Models  
+# ============================================================================
+
+class DaireSearchRequest(BaseModel):
+    """
+    Search request for Sayıştay Daire (Chamber) decisions.
+    
+    Daire decisions are first-instance audit findings and sanctions
+    issued by individual audit chambers before potential appeals.
+    """
+    yargilama_dairesi: DaireEnum = Field("ALL", description="Value")
+    
+    karar_tarih_baslangic: Optional[str] = Field(None, description="Value")
+    
+    karar_tarih_bitis: Optional[str] = Field(None, description="End year")
+    
+    ilam_no: Optional[str] = Field(None, description="Audit report number (İlam No, max 50 chars)")
+    
+    kamu_idaresi_turu: KamuIdaresiTuruEnum = Field("ALL", description="Value")
+    
+    hesap_yili: Optional[str] = Field(None, description="Value")
+    
+    web_karar_konusu: WebKararKonusuEnum = Field("ALL", description="Value")
+    
+    web_karar_metni: Optional[str] = Field(None, description="Value")
+    
+    # DataTables pagination
+    start: int = Field(0, description="Starting record for pagination (0-based)")
+    length: int = Field(10, description="Number of records per page (1-10)")
+
+class DaireDecision(BaseModel):
+    """Single Daire decision entry from search results."""
+    id: int = Field(..., description="Unique decision ID")
+    yargilama_dairesi: int = Field(..., description="Chamber number (1-8)")
+    karar_tarih: str = Field(..., description="Decision date in DD.MM.YYYY format")
+    karar_no: str = Field(..., description="Decision number")
+    ilam_no: Optional[str] = Field(None, description="Audit report number (may be null)")
+    madde_no: int = Field(..., description="Article/item number within the decision")
+    kamu_idaresi_turu: str = Field(..., description="Public administration type")
+    hesap_yili: int = Field(..., description="Account year being audited")
+    web_karar_konusu: str = Field(..., description="Decision subject category")
+    web_karar_metni: str = Field(..., description="Decision text/summary")
+
+class DaireSearchResponse(BaseModel):
+    """Response from Daire search endpoint."""
+    decisions: List[DaireDecision] = Field(default_factory=list, description="List of matching chamber decisions")
+    total_records: int = Field(0, description="Total number of matching records")
+    total_filtered: int = Field(0, description="Number of records after filtering")
+    draw: int = Field(1, description="DataTables draw counter")
+
+# ============================================================================
+# Document Models
+# ============================================================================
+
+class SayistayDocumentMarkdown(BaseModel):
+    """
+    Sayıştay decision document converted to Markdown format.
+    
+    Used for retrieving full text of decisions from any of the three
+    decision types (Genel Kurul, Temyiz Kurulu, Daire).
+    """
+    decision_id: str = Field(..., description="Unique decision identifier")
+    decision_type: str = Field(..., description="Value")
+    source_url: str = Field(..., description="Original URL where the document was retrieved")
+    markdown_content: Optional[str] = Field(None, description="Full decision text converted to Markdown format")
+    retrieval_date: Optional[str] = Field(None, description="Date when document was retrieved (ISO format)")
+    error_message: Optional[str] = Field(None, description="Error message if document retrieval failed")

starlette_app.py

@@ -0,0 +1,159 @@
+"""
+Starlette integration example for Yargı MCP Server
+
+This module demonstrates how to integrate the Yargı MCP server
+with a Starlette application, including authentication middleware
+and custom routing.
+
+Usage:
+    uvicorn starlette_app:app --host 0.0.0.0 --port 8000
+"""
+
+import os
+from starlette.applications import Starlette
+from starlette.routing import Mount, Route
+from starlette.requests import Request
+from starlette.responses import JSONResponse, PlainTextResponse, RedirectResponse
+from starlette.middleware import Middleware
+from starlette.middleware.cors import CORSMiddleware
+from starlette.middleware.authentication import AuthenticationMiddleware
+from starlette.authentication import (
+    AuthenticationBackend, AuthCredentials, SimpleUser, AuthenticationError
+)
+
+# Import the main MCP app
+from mcp_server_main import app as mcp_server
+
+# Simple token authentication backend
+class TokenAuthBackend(AuthenticationBackend):
+    async def authenticate(self, request):
+        auth_header = request.headers.get("Authorization")
+        expected_token = os.getenv("API_TOKEN")
+        
+        # Skip auth for health check and public endpoints
+        if request.url.path in ["/health", "/", "/login"]:
+            return None
+            
+        if not expected_token:
+            # No token configured, allow all
+            return AuthCredentials(["authenticated"]), SimpleUser("anonymous")
+            
+        if not auth_header:
+            raise AuthenticationError("Authorization header required")
+            
+        try:
+            scheme, token = auth_header.split()
+            if scheme.lower() != "bearer":
+                raise AuthenticationError("Invalid authentication scheme")
+                
+            if token != expected_token:
+                raise AuthenticationError("Invalid token")
+                
+            return AuthCredentials(["authenticated"]), SimpleUser("user")
+        except ValueError:
+            raise AuthenticationError("Invalid authorization header format")
+
+# Homepage
+async def homepage(request: Request):
+    return JSONResponse({
+        "service": "Yargı MCP Server",
+        "version": "0.1.0",
+        "endpoints": {
+            "mcp": "/mcp-server/mcp/",
+            "api": "/api/",
+            "health": "/health"
+        }
+    })
+
+# API info endpoint
+async def api_info(request: Request):
+    if not request.user.is_authenticated:
+        return JSONResponse({"error": "Authentication required"}, status_code=401)
+        
+    return JSONResponse({
+        "authenticated_as": request.user.display_name,
+        "available_tools": len(mcp_server._tool_manager._tools),
+        "databases": [
+            "Yargıtay", "Danıştay", "Emsal", "Uyuşmazlık",
+            "Anayasa", "KIK", "Rekabet", "Bedesten"
+        ]
+    })
+
+# Health check
+async def health_check(request: Request):
+    return JSONResponse({
+        "status": "healthy",
+        "service": "Yargı MCP Server"
+    })
+
+# Login example (returns token for demo)
+async def login(request: Request):
+    token = os.getenv("API_TOKEN", "demo-token")
+    return JSONResponse({
+        "message": "Use this token in Authorization header",
+        "example": f"Authorization: Bearer {token}",
+        "note": "Set API_TOKEN environment variable to change token"
+    })
+
+# Create MCP ASGI app
+mcp_app = mcp_server.http_app(path='/mcp')
+
+# Configure middleware
+middleware = [
+    Middleware(
+        CORSMiddleware,
+        allow_origins=os.getenv("ALLOWED_ORIGINS", "*").split(","),
+        allow_credentials=True,
+        allow_methods=["*"],
+        allow_headers=["*"],
+    ),
+    Middleware(AuthenticationMiddleware, backend=TokenAuthBackend()),
+]
+
+# Create routes
+routes = [
+    Route("/", homepage),
+    Route("/health", health_check),
+    Route("/login", login),
+    Route("/api/info", api_info),
+    Mount("/mcp-server", app=mcp_app),
+]
+
+# Create Starlette app
+app = Starlette(
+    routes=routes,
+    middleware=middleware,
+    lifespan=mcp_app.lifespan
+)
+
+# Nested mount example
+def create_nested_app():
+    """Example of nested mounting for complex routing structures"""
+    
+    # Create inner app with MCP
+    inner_app = Starlette(
+        routes=[Mount("/services", app=mcp_app)],
+        middleware=middleware
+    )
+    
+    # Create outer app
+    outer_app = Starlette(
+        routes=[
+            Route("/", homepage),
+            Mount("/v1", app=inner_app),
+        ],
+        lifespan=mcp_app.lifespan
+    )
+    
+    # MCP would be available at /v1/services/mcp/
+    return outer_app
+
+# Export both apps
+nested_app = create_nested_app()
+
+if __name__ == "__main__":
+    import uvicorn
+    print("Starting Starlette app with authentication...")
+    print("Set API_TOKEN environment variable to enable authentication")
+    print("Example: API_TOKEN=secret-token python starlette_app.py")
+    uvicorn.run(app, host="0.0.0.0", port=8000)

stripe_webhook.py

@@ -0,0 +1,25 @@
+import os, stripe
+from clerk_backend_api import Clerk                         # Clerk backend SDK
+from fastapi import APIRouter, Request, HTTPException
+
+router = APIRouter()
+stripe.api_key = os.getenv("STRIPE_SECRET")
+clerk         = Clerk(bearer_auth=os.getenv("CLERK_SECRET_KEY"))
+
+@router.post("/stripe/webhook")
+async def stripe_hook(req: Request):
+    payload, sig = await req.body(), req.headers["stripe-signature"]
+    try:
+        event = stripe.Webhook.construct_event(             # Stripe-recommended verify
+            payload, sig, os.getenv("STRIPE_WEBHOOK_SECRET"))
+    except stripe.error.SignatureVerificationError:
+        raise HTTPException(400, "Bad sig")
+
+    if event["type"] == "customer.subscription.updated":
+        item   = event["data"]["object"]["items"]["data"][0]
+        plan   = item["price"]["nickname"]                  # "Pro", "Enterprise"…
+        userID = event["data"]["object"]["metadata"]["clerk_user_id"]
+        clerk.users.update_user_metadata(                   # merge into unsafe_metadata
+            userID, unsafe_metadata={"plan": plan})
+    return {"ok": True}
+    

uyusmazlik_mcp_module/client.py

@@ -7,8 +7,7 @@ from typing import Dict, Any, List, Optional, Union, Tuple
 import logging
 import html
 import re
-import tempfile
-import os
+import io
 from markitdown import MarkItDown
 from urllib.parse import urljoin, urlencode # urlencode for aiohttp form data
 
@@ -31,13 +30,15 @@ BOLUM_ENUM_TO_ID_MAP = {
     UyusmazlikBolumEnum.CEZA_BOLUMU: "f6b74320-f2d7-4209-ad6e-c6df180d4e7c",
     UyusmazlikBolumEnum.GENEL_KURUL_KARARLARI: "e4ca658d-a75a-4719-b866-b2d2f1c3b1d9",
     UyusmazlikBolumEnum.HUKUK_BOLUMU: "96b26fc4-ef8e-4a4f-a9cc-a3de89952aa1",
-    UyusmazlikBolumEnum.TUMU: "" # Represents "...Seçiniz..." or all
+    UyusmazlikBolumEnum.TUMU: "", # Represents "...Seçiniz..." or all - empty string for API
+    "ALL": "" # Also map the new "ALL" literal to empty string for backward compatibility
 }
 
 UYUSMAZLIK_TURU_ENUM_TO_ID_MAP = {
     UyusmazlikTuruEnum.GOREV_UYUSMAZLIGI: "7b1e2cd3-8f09-418a-921c-bbe501e1740c",
     UyusmazlikTuruEnum.HUKUM_UYUSMAZLIGI: "19b88402-172b-4c1d-8339-595c942a89f5",
-    UyusmazlikTuruEnum.TUMU: "" # Represents "...Seçiniz..." or all
+    UyusmazlikTuruEnum.TUMU: "", # Represents "...Seçiniz..." or all - empty string for API
+    "ALL": "" # Also map the new "ALL" literal to empty string for backward compatibility
 }
 
 KARAR_SONUCU_ENUM_TO_ID_MAP = {
@@ -194,21 +195,18 @@ class UyusmazlikApiClient:
         html_input_for_markdown = processed_html
 
         markdown_text = None
-        temp_file_path = None
         try:
-            md_converter = MarkItDown(enable_plugins=False)
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_file:
-                tmp_file.write(html_input_for_markdown)
-                temp_file_path = tmp_file.name
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_input_for_markdown.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
             
-            conversion_result = md_converter.convert(temp_file_path)
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            conversion_result = md_converter.convert(html_stream)
             markdown_text = conversion_result.text_content
             logger.info("UyusmazlikApiClient: HTML to Markdown conversion successful.")
         except Exception as e:
             logger.error(f"UyusmazlikApiClient: Error during MarkItDown HTML to Markdown conversion: {e}")
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path):
-                os.remove(temp_file_path)
         return markdown_text
 
     async def get_decision_document_as_markdown(self, document_url: str) -> UyusmazlikDocumentMarkdown:

uyusmazlik_mcp_module/models.py

@@ -7,14 +7,14 @@ from enum import Enum
 # Enum definitions for user-friendly input based on the provided HTML form
 class UyusmazlikBolumEnum(str, Enum):
     """User-friendly names for 'BolumId'."""
-    TUMU = "" # Represents "...Seçiniz..." or all
+    TUMU = "ALL" # Represents "...Seçiniz..." or all
     CEZA_BOLUMU = "Ceza Bölümü"
     GENEL_KURUL_KARARLARI = "Genel Kurul Kararları"
     HUKUK_BOLUMU = "Hukuk Bölümü"
 
 class UyusmazlikTuruEnum(str, Enum):
     """User-friendly names for 'UyusmazlikId'."""
-    TUMU = "" # Represents "...Seçiniz..." or all
+    TUMU = "ALL" # Represents "...Seçiniz..." or all
     GOREV_UYUSMAZLIGI = "Görev Uyuşmazlığı"
     HUKUM_UYUSMAZLIGI = "Hüküm Uyuşmazlığı"
 
@@ -28,41 +28,41 @@ class UyusmazlikKararSonucuEnum(str, Enum): # Based on checkbox text in the form
 
 class UyusmazlikSearchRequest(BaseModel): # This is the model the MCP tool will accept
     """Model for Uyuşmazlık Mahkemesi search request using user-friendly terms."""
-    icerik: Optional[str] = Field("", description="Keyword or content for main text search (Icerik).")
+    icerik: Optional[str] = Field("", description="Search text")
     
     bolum: Optional[UyusmazlikBolumEnum] = Field(
         UyusmazlikBolumEnum.TUMU, 
-        description="Select the department (Bölüm)."
+        description="Department"
     )
     uyusmazlik_turu: Optional[UyusmazlikTuruEnum] = Field(
         UyusmazlikTuruEnum.TUMU, 
-        description="Select the type of dispute (Uyuşmazlık)."
+        description="Dispute type"
     )
     
     # User provides a list of user-friendly names for Karar Sonucu
     karar_sonuclari: Optional[List[UyusmazlikKararSonucuEnum]] = Field( # Changed to list of Enums
         default_factory=list, 
-        description="List of desired 'Karar Sonucu' types."
+        description="Decision types"
     )
     
-    esas_yil: Optional[str] = Field("", description="Case year ('Esas Yılı').")
-    esas_sayisi: Optional[str] = Field("", description="Case number ('Esas Sayısı').")
-    karar_yil: Optional[str] = Field("", description="Decision year ('Karar Yılı').")
-    karar_sayisi: Optional[str] = Field("", description="Decision number ('Karar Sayısı').")
-    kanun_no: Optional[str] = Field("", description="Relevant Law Number ('KanunNo').")
+    esas_yil: Optional[str] = Field("", description="Case year")
+    esas_sayisi: Optional[str] = Field("", description="Case no")
+    karar_yil: Optional[str] = Field("", description="Decision year")
+    karar_sayisi: Optional[str] = Field("", description="Decision no")
+    kanun_no: Optional[str] = Field("", description="Law no")
     
-    karar_date_begin: Optional[str] = Field("", description="Decision start date (DD.MM.YYYY) ('KararDateBegin').")
-    karar_date_end: Optional[str] = Field("", description="Decision end date (DD.MM.YYYY) ('KararDateEnd').")
+    karar_date_begin: Optional[str] = Field("", description="Start date (DD.MM.YYYY)")
+    karar_date_end: Optional[str] = Field("", description="End date (DD.MM.YYYY)")
     
-    resmi_gazete_sayi: Optional[str] = Field("", description="Official Gazette number ('ResmiGazeteSayi').")
-    resmi_gazete_date: Optional[str] = Field("", description="Official Gazette date (DD.MM.YYYY) ('ResmiGazeteDate').")
+    resmi_gazete_sayi: Optional[str] = Field("", description="Gazette no")
+    resmi_gazete_date: Optional[str] = Field("", description="Gazette date (DD.MM.YYYY)")
     
     # Detailed text search fields from the "icerikDetail" section of the form
-    tumce: Optional[str] = Field("", description="Exact phrase search ('Tumce').")
-    wild_card: Optional[str] = Field("", description="Search for phrase and its inflections ('WildCard').") # Changed from WildCard for Pythonic name
-    hepsi: Optional[str] = Field("", description="Search for texts containing all specified words ('Hepsi').")
-    herhangi_birisi: Optional[str] = Field("", description="Search for texts containing any of the specified words ('Herhangibirisi').")
-    not_hepsi: Optional[str] = Field("", description="Exclude texts containing these specified words ('NotHepsi').")
+    tumce: Optional[str] = Field("", description="Exact phrase")
+    wild_card: Optional[str] = Field("", description="Wildcard search")
+    hepsi: Optional[str] = Field("", description="All words")
+    herhangi_birisi: Optional[str] = Field("", description="Any word")
+    not_hepsi: Optional[str] = Field("", description="Exclude words")
 
 class UyusmazlikApiDecisionEntry(BaseModel):
     """Model for an individual decision entry parsed from Uyuşmazlık API's HTML search response."""
@@ -71,9 +71,9 @@ class UyusmazlikApiDecisionEntry(BaseModel):
     bolum: Optional[str] = Field(None)
     uyusmazlik_konusu: Optional[str] = Field(None)
     karar_sonucu: Optional[str] = Field(None)
-    popover_content: Optional[str] = Field(None, description="Summary/description from popover.")
+    popover_content: Optional[str] = Field(None, description="Summary")
     document_url: HttpUrl # Full URL to the decision document HTML page
-    pdf_url: Optional[HttpUrl] = Field(None, description="Direct URL to PDF if available.")
+    pdf_url: Optional[HttpUrl] = Field(None, description="PDF URL")
 
 class UyusmazlikSearchResponse(BaseModel): # This is what the MCP tool will return
     """Response model for Uyuşmazlık Mahkemesi search results for the MCP tool."""

yargitay_mcp_module/client.py

@@ -6,8 +6,7 @@ from typing import Dict, Any, List, Optional
 import logging
 import html
 import re
-import tempfile
-import os
+import io
 from markitdown import MarkItDown
 
 from .models import (
@@ -66,6 +65,19 @@ class YargitayOfficialApiClient:
             response.raise_for_status() # Raise an exception for HTTP 4xx or 5xx status codes
             response_json_data = response.json()
             
+            logger.debug(f"YargitayOfficialApiClient: Raw API response: {response_json_data}")
+            
+            # Handle None or empty data response from API
+            if response_json_data is None:
+                logger.warning("YargitayOfficialApiClient: API returned None response")
+                response_json_data = {"data": {"data": [], "recordsTotal": 0, "recordsFiltered": 0}}
+            elif not isinstance(response_json_data, dict):
+                logger.warning(f"YargitayOfficialApiClient: API returned unexpected response type: {type(response_json_data)}")
+                response_json_data = {"data": {"data": [], "recordsTotal": 0, "recordsFiltered": 0}}
+            elif response_json_data.get("data") is None:
+                logger.warning("YargitayOfficialApiClient: API response data field is None")
+                response_json_data["data"] = {"data": [], "recordsTotal": 0, "recordsFiltered": 0}
+            
             # Validate and parse the response using Pydantic models
             api_response = YargitayApiSearchResponse(**response_json_data)
 
@@ -108,37 +120,32 @@ class YargitayOfficialApiClient:
         html_to_convert = processed_html
 
         markdown_output = None
-        temp_file_path = None
         try:
-            md_converter = MarkItDown(enable_plugins=False) # Plugins disabled as per basic usage
+            # Convert HTML string to bytes and create BytesIO stream
+            html_bytes = html_to_convert.encode('utf-8')
+            html_stream = io.BytesIO(html_bytes)
             
-            # Write the HTML to a temporary file for MarkItDown to process
-            with tempfile.NamedTemporaryFile(mode="w", delete=False, suffix=".html", encoding="utf-8") as tmp_html_file:
-                tmp_html_file.write(html_to_convert)
-                temp_file_path = tmp_html_file.name
-            
-            conversion_result = md_converter.convert(temp_file_path)
+            # Pass BytesIO stream to MarkItDown to avoid temp file creation
+            md_converter = MarkItDown()
+            conversion_result = md_converter.convert(html_stream)
             markdown_output = conversion_result.text_content
             
             logger.info("Successfully converted HTML to Markdown.")
 
         except Exception as e:
             logger.error(f"Error during MarkItDown HTML to Markdown conversion: {e}")
-        finally:
-            if temp_file_path and os.path.exists(temp_file_path):
-                os.remove(temp_file_path) # Clean up the temporary file
         
         return markdown_output
 
-    async def get_decision_document_as_markdown(self, document_id: str) -> YargitayDocumentMarkdown:
+    async def get_decision_document_as_markdown(self, id: str) -> YargitayDocumentMarkdown:
         """
         Retrieves a specific Yargitay decision by its ID and returns its content
         as Markdown.
         Based on user-provided /getDokuman response structure.
         """
-        document_api_url = f"{self.DOCUMENT_ENDPOINT}?id={document_id}"
+        document_api_url = f"{self.DOCUMENT_ENDPOINT}?id={id}"
         source_url = f"{self.BASE_URL}{document_api_url}" # The original URL of the document
-        logger.info(f"YargitayOfficialApiClient: Fetching document for Markdown conversion (ID: {document_id})")
+        logger.info(f"YargitayOfficialApiClient: Fetching document for Markdown conversion (ID: {id})")
 
         try:
             response = await self.http_client.get(document_api_url)
@@ -149,24 +156,24 @@ class YargitayOfficialApiClient:
             html_content_from_api = response_json.get("data")
 
             if not isinstance(html_content_from_api, str):
-                logger.error(f"YargitayOfficialApiClient: 'data' field in API response is not a string or not found (ID: {document_id}).")
+                logger.error(f"YargitayOfficialApiClient: 'data' field in API response is not a string or not found (ID: {id}).")
                 raise ValueError("Expected HTML content not found in API response's 'data' field.")
 
             markdown_content = self._convert_html_to_markdown(html_content_from_api)
 
             return YargitayDocumentMarkdown(
-                document_id=document_id,
+                id=id,
                 markdown_content=markdown_content,
                 source_url=source_url
             )
         except httpx.RequestError as e:
-            logger.error(f"YargitayOfficialApiClient: HTTP error fetching document for Markdown (ID: {document_id}): {e}")
+            logger.error(f"YargitayOfficialApiClient: HTTP error fetching document for Markdown (ID: {id}): {e}")
             raise
         except ValueError as e: # For JSON parsing errors or missing 'data' field
-             logger.error(f"YargitayOfficialApiClient: Error processing document response for Markdown (ID: {document_id}): {e}")
+             logger.error(f"YargitayOfficialApiClient: Error processing document response for Markdown (ID: {id}): {e}")
              raise
         except Exception as e: # For other unexpected errors
-            logger.error(f"YargitayOfficialApiClient: General error fetching/processing document for Markdown (ID: {document_id}): {e}")
+            logger.error(f"YargitayOfficialApiClient: General error fetching/processing document for Markdown (ID: {id}): {e}")
             raise
 
     async def close_client_session(self):

yargitay_mcp_module/models.py

@@ -1,7 +1,32 @@
 # yargitay_mcp_module/models.py
 
-from pydantic import BaseModel, Field, HttpUrl
-from typing import List, Optional, Dict, Any
+from pydantic import BaseModel, Field, HttpUrl, ConfigDict
+from typing import List, Optional, Dict, Any, Literal
+
+# Yargıtay Chamber/Board Options
+YargitayBirimEnum = Literal[
+    "ALL",  # "ALL" for all chambers
+    # Hukuk (Civil) Chambers
+    "Hukuk Genel Kurulu",
+    "1. Hukuk Dairesi", "2. Hukuk Dairesi", "3. Hukuk Dairesi", "4. Hukuk Dairesi",
+    "5. Hukuk Dairesi", "6. Hukuk Dairesi", "7. Hukuk Dairesi", "8. Hukuk Dairesi",
+    "9. Hukuk Dairesi", "10. Hukuk Dairesi", "11. Hukuk Dairesi", "12. Hukuk Dairesi",
+    "13. Hukuk Dairesi", "14. Hukuk Dairesi", "15. Hukuk Dairesi", "16. Hukuk Dairesi",
+    "17. Hukuk Dairesi", "18. Hukuk Dairesi", "19. Hukuk Dairesi", "20. Hukuk Dairesi",
+    "21. Hukuk Dairesi", "22. Hukuk Dairesi", "23. Hukuk Dairesi",
+    "Hukuk Daireleri Başkanlar Kurulu",
+    # Ceza (Criminal) Chambers
+    "Ceza Genel Kurulu", 
+    "1. Ceza Dairesi", "2. Ceza Dairesi", "3. Ceza Dairesi", "4. Ceza Dairesi",
+    "5. Ceza Dairesi", "6. Ceza Dairesi", "7. Ceza Dairesi", "8. Ceza Dairesi",
+    "9. Ceza Dairesi", "10. Ceza Dairesi", "11. Ceza Dairesi", "12. Ceza Dairesi",
+    "13. Ceza Dairesi", "14. Ceza Dairesi", "15. Ceza Dairesi", "16. Ceza Dairesi",
+    "17. Ceza Dairesi", "18. Ceza Dairesi", "19. Ceza Dairesi", "20. Ceza Dairesi",
+    "21. Ceza Dairesi", "22. Ceza Dairesi", "23. Ceza Dairesi",
+    "Ceza Daireleri Başkanlar Kurulu",
+    # General Assembly
+    "Büyük Genel Kurulu"
+]
 
 class YargitayDetailedSearchRequest(BaseModel):
     """
@@ -9,68 +34,74 @@ class YargitayDetailedSearchRequest(BaseModel):
     to Yargitay's detailed search endpoint (e.g., /aramadetaylist).
     Based on the payload provided by the user.
     """
-    arananKelime: Optional[str] = Field("", description="Keyword to search for.")
-    # Department/Board selection. Based on user provided payload.
-    # birimYrg* fields seem to be the ones used for filtering.
-    birimYrgKurulDaire: Optional[str] = Field("", description="Yargitay Board Unit (e.g., 'Hukuk Genel Kurulu').")
-    birimYrgHukukDaire: Optional[str] = Field("", description="Yargitay Civil Chamber (e.g., '1. Hukuk Dairesi').")
-    birimYrgCezaDaire: Optional[str] = Field("", description="Yargitay Criminal Chamber.")
+    arananKelime: Optional[str] = Field("", description="Turkish keywords (supports +word -word \"phrase\" operators)")
+    # Department/Board selection - Complete Court of Cassation chamber hierarchy
+    birimYrgKurulDaire: Optional[str] = Field("ALL", description="Chamber (ALL or specific chamber name)")
+    birimYrgHukukDaire: Optional[str] = Field("", description="Legacy field")
+    birimYrgCezaDaire: Optional[str] = Field("", description="Legacy field")
     
-    esasYil: Optional[str] = Field("", description="Case year for 'Esas No'.")
-    esasIlkSiraNo: Optional[str] = Field("", description="Starting sequence number for 'Esas No'.")
-    esasSonSiraNo: Optional[str] = Field("", description="Ending sequence number for 'Esas No'.")
+    esasYil: Optional[str] = Field("", description="Case year (YYYY)")
+    esasIlkSiraNo: Optional[str] = Field("", description="Start case no")
+    esasSonSiraNo: Optional[str] = Field("", description="End case no")
     
-    kararYil: Optional[str] = Field("", description="Decision year for 'Karar No'.")
-    kararIlkSiraNo: Optional[str] = Field("", description="Starting sequence number for 'Karar No'.")
-    kararSonSiraNo: Optional[str] = Field("", description="Ending sequence number for 'Karar No'.")
+    kararYil: Optional[str] = Field("", description="Decision year (YYYY)")
+    kararIlkSiraNo: Optional[str] = Field("", description="Start decision no")
+    kararSonSiraNo: Optional[str] = Field("", description="End decision no")
     
-    baslangicTarihi: Optional[str] = Field("", description="Start date for decision search (DD.MM.YYYY).")
-    bitisTarihi: Optional[str] = Field("", description="End date for decision search (DD.MM.YYYY).")
+    baslangicTarihi: Optional[str] = Field("", description="Start date (DD.MM.YYYY)")
+    bitisTarihi: Optional[str] = Field("", description="End date (DD.MM.YYYY)")
     
-    siralama: Optional[str] = Field("3", description="Sorting criteria (1: Esas No, 2: Karar No, 3: Karar Tarihi).") # Default to 'Karar Tarihine Göre'
-    siralamaDirection: Optional[str] = Field("desc", description="Sorting direction ('asc' or 'desc').") # Default to 'Büyükten Küçüğe'
+    siralama: Optional[str] = Field("3", description="Sort by (1=case, 2=decision, 3=date)")
+    siralamaDirection: Optional[str] = Field("desc", description="Direction (asc/desc)")
     
-    pageSize: int = Field(10, ge=1, le=100, description="Number of results per page.")
-    pageNumber: int = Field(1, ge=1, description="Page number to retrieve.")
+    pageSize: int = Field(10, ge=1, le=10, description="Results per page (1-100)")
+    pageNumber: int = Field(1, ge=1, description="Page number (1-indexed)")
 
 class YargitayApiDecisionEntry(BaseModel):
     """Model for an individual decision entry from the Yargitay API search response."""
     id: str # Unique system ID of the decision
-    daire: Optional[str] = Field(None, description="The chamber that made the decision.")
-    esasNo: Optional[str] = Field(None, alias="esasNo", description="Case registry number ('Esas No').")
-    kararNo: Optional[str] = Field(None, alias="kararNo", description="Decision number ('Karar No').")
-    kararTarihi: Optional[str] = Field(None, alias="kararTarihi", description="Date of the decision.")
-    arananKelime: Optional[str] = Field(None, alias="arananKelime", description="Matched keyword in the search result item.")
+    daire: Optional[str] = Field(None, description="Chamber")
+    esasNo: Optional[str] = Field(None, alias="esasNo", description="Case no")
+    kararNo: Optional[str] = Field(None, alias="kararNo", description="Decision no")
+    kararTarihi: Optional[str] = Field(None, alias="kararTarihi", description="Date")
     # 'index' and 'siraNo' from API response are not critical for MCP tool, so omitted for brevity
     
     # This field will be populated by the client after fetching the search list
-    document_url: Optional[HttpUrl] = Field(None, description="Direct URL to the decision document.")
+    document_url: Optional[HttpUrl] = Field(None, description="Document URL")
 
-    class Config:
-        populate_by_name = True # To allow populating by alias from API response
+    model_config = ConfigDict(populate_by_name=True)  # To allow populating by alias from API response
 
 
 class YargitayApiResponseInnerData(BaseModel):
     """Model for the inner 'data' object in the Yargitay API search response."""
-    data: List[YargitayApiDecisionEntry]
+    data: List[YargitayApiDecisionEntry] = Field(default_factory=list)
     # draw: Optional[int] = None # Typically used by DataTables, not essential for MCP
-    recordsTotal: int # Total number of records matching the query
-    recordsFiltered: int # Total number of records after filtering (usually same as recordsTotal)
+    recordsTotal: int = Field(default=0) # Total number of records matching the query
+    recordsFiltered: int = Field(default=0) # Total number of records after filtering (usually same as recordsTotal)
 
 class YargitayApiSearchResponse(BaseModel):
     """Model for the complete search response from the Yargitay API."""
-    data: YargitayApiResponseInnerData
+    data: Optional[YargitayApiResponseInnerData] = Field(default_factory=lambda: YargitayApiResponseInnerData())
     # metadata: Optional[Dict[str, Any]] = None # Optional metadata from API
 
 class YargitayDocumentMarkdown(BaseModel):
     """Model for a Yargitay decision document, containing only Markdown content."""
-    document_id: str = Field(..., description="The unique ID of the document.")
-    markdown_content: Optional[str] = Field(None, description="The decision content converted to Markdown.")
-    source_url: HttpUrl = Field(..., description="The source URL of the original document.")
+    id: str = Field(..., description="Document ID")
+    markdown_content: Optional[str] = Field(None, description="Content")
+    source_url: HttpUrl = Field(..., description="Source URL")
+
+class CleanYargitayDecisionEntry(BaseModel):
+    """Clean decision entry without arananKelime field to reduce token usage."""
+    id: str
+    daire: Optional[str] = Field(None, description="Chamber")
+    esasNo: Optional[str] = Field(None, description="Case no")
+    kararNo: Optional[str] = Field(None, description="Decision no")
+    kararTarihi: Optional[str] = Field(None, description="Date")
+    document_url: Optional[HttpUrl] = Field(None, description="Document URL")
 
 class CompactYargitaySearchResult(BaseModel):
     """A more compact search result model for the MCP tool to return."""
-    decisions: List[YargitayApiDecisionEntry]
+    decisions: List[CleanYargitayDecisionEntry]
     total_records: int
     requested_page: int
     page_size: int