@1mcp/agent 0.37.0 → 0.38.1

package/build/commands/serve/serve.d.ts

@@ -1,90 +1,2 @@
-import { type TemplateContextTrustMode } from '../../core/context/templateContextTrust.js';
-import { InstructionAggregator } from '../../core/instructions/instructionAggregator.js';
-import { McpLoadingManager } from '../../core/loading/mcpLoadingManager.js';
-import { type RuntimeScopeOwnership } from '../../core/server/runtimeScopeOwnership.js';
-import { ServerManager } from '../../core/server/serverManager.js';
-import { ExpressServer } from '../../transport/http/server.js';
-export interface ServeOptions {
-    config?: string;
-    'config-dir'?: string;
-    /** Lifecycle action: report the scoped runtime's state and exit. */
-    status?: boolean;
-    /** Lifecycle action: start the runtime as a detached background process. */
-    background?: boolean;
-    /** Lifecycle action: stop the runtime in the selected Runtime Scope. */
-    stop?: boolean;
-    /** Lifecycle action: stop (if running) then start a fresh background runtime. */
-    restart?: boolean;
-    /** Internal guard set on the detached child to prevent recursive spawning. */
-    'background-bootstrap'?: boolean;
-    /** Internal authorization proving that a supervised worker belongs to the scoped supervisor. */
-    'runtime-owner-claim-id'?: string;
-    /** Internal validated app-config snapshot used by supervised workers. */
-    'background-launch-config'?: string;
-    'log-level'?: 'debug' | 'info' | 'warn' | 'error';
-    'log-file'?: string;
-    transport?: string;
-    port?: number;
-    host?: string;
-    'external-url'?: string;
-    preset?: string;
-    filter?: string;
-    pagination: boolean;
-    auth?: boolean;
-    'enable-auth'?: boolean;
-    'enable-scope-validation'?: boolean;
-    'enable-enhanced-security'?: boolean;
-    'session-ttl'?: number;
-    'session-storage-path'?: string;
-    'rate-limit-window'?: number;
-    'rate-limit-max'?: number;
-    'trust-proxy'?: string;
-    'template-context-trust'?: TemplateContextTrustMode;
-    'confirm-untrusted-template-context'?: boolean;
-    'health-info-level': string;
-    'enable-async-loading'?: boolean;
-    'async-min-servers'?: number;
-    'async-timeout'?: number;
-    'async-batch-notifications'?: boolean;
-    'async-batch-delay'?: number;
-    'async-notify-on-snapshot'?: boolean;
-    'async-notify-on-ready'?: boolean;
-    'async-max-concurrent-loads'?: number;
-    'async-max-retries'?: number;
-    'async-retry-delay'?: number;
-    'async-background-retry'?: boolean;
-    'async-background-retry-interval'?: number;
-    'async-background-retry-max-servers'?: number;
-    'enable-lazy-loading'?: boolean;
-    'lazy-mode'?: string;
-    'lazy-inline-catalog'?: boolean;
-    'lazy-catalog-format': string;
-    'lazy-direct-expose'?: string;
-    'lazy-cache-max-entries'?: number;
-    'lazy-cache-ttl'?: number;
-    'lazy-preload'?: string;
-    'lazy-preload-keywords'?: string;
-    'lazy-fallback-on-error'?: string;
-    'lazy-fallback-timeout'?: number;
-    'enable-config-reload'?: boolean;
-    'config-reload-debounce'?: number;
-    'enable-env-substitution': boolean;
-    'enable-session-persistence': boolean;
-    'session-persist-requests': number;
-    'session-persist-interval': number;
-    'session-background-flush': number;
-    'enable-client-notifications': boolean;
-    'enable-jsonrpc-error-logging': boolean;
-    'enable-internal-tools': boolean;
-    'internal-tools'?: string;
-    'instructions-template'?: string;
-}
-/**
- * Set up graceful shutdown handling
- */
-export declare function setupGracefulShutdown(serverManager: ServerManager, loadingManager?: McpLoadingManager, expressServer?: ExpressServer, instructionAggregator?: InstructionAggregator, configDir?: string, runtimeOwnership?: RuntimeScopeOwnership): void;
-/**
- * Start the server using the specified transport.
- */
-export declare function serveCommand(parsedArgv: ServeOptions): Promise<void>;
+export * from '../../sdk/legacy/commands/serve.js';
 //# sourceMappingURL=serve.d.ts.map

package/build/commands/serve/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../../src/commands/serve/serve.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AAGxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAK3E,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAOlE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAQ9D,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iFAAiF;IACjF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,gGAAgG;IAChG,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yEAAyE;IACzE,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,WAAW,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,oCAAoC,CAAC,EAAE,OAAO,CAAC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,OAAO,CAAC;IACnC,4BAA4B,EAAE,OAAO,CAAC;IACtC,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,6BAA6B,EAAE,OAAO,CAAC;IACvC,8BAA8B,EAAE,OAAO,CAAC;IAExC,uBAAuB,EAAE,OAAO,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AA8FD;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,aAAa,EAC5B,cAAc,CAAC,EAAE,iBAAiB,EAClC,aAAa,CAAC,EAAE,aAAa,EAC7B,qBAAqB,CAAC,EAAE,qBAAqB,EAC7C,SAAS,CAAC,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,qBAAqB,GACvC,IAAI,CA4GN;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAgZ1E"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../../src/commands/serve/serve.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC"}

package/build/commands/serve/serve.js

@@ -1,551 +1,2 @@
-import fs from 'fs';
-import path from 'path';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { ConfigManager } from '../../config/configManager.js';
-import { getDefaultInstructionsTemplatePath, HOST, PORT } from '../../constants.js';
-import { ClientManager } from '../../core/client/clientManager.js';
-import { TemplateContextCapabilityStore, } from '../../core/context/templateContextTrust.js';
-import { formatValidationError, validateTemplateContent } from '../../core/instructions/templateValidator.js';
-import { RuntimeIdentityService } from '../../core/runtime/runtimeIdentityService.js';
-import { AgentConfigManager } from '../../core/server/agentConfig.js';
-import { getBackgroundLaunchConfigPath, readBackgroundLaunchConfig } from '../../core/server/backgroundLaunchConfig.js';
-import { cleanupPidFileOnExit, registerPidFileCleanup, writePidFile } from '../../core/server/pidFileManager.js';
-import { claimRuntimeScope, verifyRuntimeScopeOwnership, } from '../../core/server/runtimeScopeOwnership.js';
-import { resetBackendLogBroker } from '../../domains/backend-logs/backendLogRuntime.js';
-import { configureGlobalLogger } from '../../logger/configureGlobalLogger.js';
-import logger, { debugIf } from '../../logger/logger.js';
-import { resolveLoggingConfig } from '../../logger/loggingConfig.js';
-import { setupServer } from '../../server.js';
-import { ExpressServer } from '../../transport/http/server.js';
-import { displayLogo } from '../../utils/ui/logo.js';
-import { resolveAsyncLoadingOptions } from './asyncLoadingOptions.js';
-import { resolveServeConfigPaths } from './runtimeScope.js';
-import { parseCommaSeparatedList, parseInternalToolsList, resolveStdioFilterConfig } from './serveOptions.js';
-import { resolveTemplateContextTrust } from './templateContextTrust.js';
-/**
- * Load custom instructions template from file with validation
- * @param templatePath Path to template file (CLI option or default)
- * @param configDir Config directory for default template location
- * @returns Template content or undefined if not found/error
- */
-function loadInstructionsTemplate(templatePath, configDir) {
-    let templateFilePath;
-    if (templatePath) {
-        // Use provided template path (resolve relative paths)
-        templateFilePath = path.isAbsolute(templatePath) ? templatePath : path.resolve(process.cwd(), templatePath);
-    }
-    else {
-        // Use default template file in config directory
-        templateFilePath = getDefaultInstructionsTemplatePath(configDir);
-    }
-    try {
-        if (fs.existsSync(templateFilePath)) {
-            const templateContent = fs.readFileSync(templateFilePath, 'utf-8');
-            // Validate template content and syntax
-            const validation = validateTemplateContent(templateContent, templateFilePath);
-            if (!validation.valid) {
-                const errorMessage = formatValidationError(validation);
-                logger.error(`Invalid instructions template: ${errorMessage}`);
-                // For explicit template paths, this is a hard error
-                if (templatePath) {
-                    logger.error('Template validation failed. Server will use built-in template.');
-                }
-                return undefined;
-            }
-            logger.info(`Loaded and validated custom instructions template from: ${templateFilePath}`);
-            debugIf(() => ({
-                message: 'Template length details',
-                meta: { templateLength: templateContent.length, templateFilePath },
-            }));
-            return templateContent;
-        }
-        else {
-            if (templatePath) {
-                // If user explicitly provided a template path, warn about missing file
-                logger.warn(`Custom instructions template file not found: ${templateFilePath}`);
-                logger.info('Template file resolution:');
-                logger.info(`  • Check that the file path is correct`);
-                logger.info(`  • Ensure the file has read permissions`);
-                logger.info(`  • Use absolute paths or paths relative to current directory`);
-                logger.info(`  • Server will use built-in template as fallback`);
-            }
-            else {
-                // If using default path, just log debug (it's optional)
-                debugIf(() => ({
-                    message: 'Default instructions template file not found, using built-in template',
-                    meta: { templateFilePath, usingBuiltIn: true },
-                }));
-            }
-            return undefined;
-        }
-    }
-    catch (error) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
-        logger.error(`Failed to load instructions template from ${templateFilePath}: ${errorMessage}`);
-        // Provide helpful troubleshooting guidance
-        logger.info('Template loading failed. Troubleshooting steps:');
-        logger.info(`  • Verify file exists and has read permissions`);
-        logger.info(`  • Check file encoding (should be UTF-8)`);
-        logger.info(`  • Ensure no other process is locking the file`);
-        logger.info(`  • Try using an absolute file path`);
-        logger.info(`  • Server will use built-in template as fallback`);
-        return undefined;
-    }
-}
-function warnForLegacyLazyLoadingOptions(parsedArgv) {
-    if (parsedArgv['lazy-mode'] !== undefined) {
-        logger.warn('DEPRECATION WARNING: --lazy-mode is ignored. Lazy loading is controlled only by --enable-lazy-loading; ' +
-            'for a persistent setting, use [lazyLoading] enabled = true in config.toml. Remove --lazy-mode because it does not change runtime behavior.');
-    }
-    if (parsedArgv['lazy-direct-expose'] !== undefined) {
-        logger.warn('DEPRECATION WARNING: --lazy-direct-expose is ignored. Lazy loading exposes only meta-tools when enabled; ' +
-            'for a persistent setting, use [lazyLoading] enabled = true in config.toml. Remove --lazy-direct-expose because it does not change runtime behavior.');
-    }
-}
-/**
- * Set up graceful shutdown handling
- */
-export function setupGracefulShutdown(serverManager, loadingManager, expressServer, instructionAggregator, configDir, runtimeOwnership) {
-    let shutdownPromise;
-    const shutdown = async () => {
-        if (shutdownPromise) {
-            return shutdownPromise;
-        }
-        shutdownPromise = (async () => {
-            logger.info('Shutting down server...');
-            // Stop the configuration reload service
-            // Config reload handled by ConfigManager singleton
-            // Shutdown loading manager if it exists
-            if (loadingManager && typeof loadingManager.shutdown === 'function') {
-                try {
-                    loadingManager.shutdown();
-                    logger.info('Loading manager shutdown complete');
-                }
-                catch (error) {
-                    logger.error(`Error shutting down loading manager: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-            try {
-                await ClientManager.shutdownCurrent();
-                logger.info('ClientManager shutdown complete');
-            }
-            catch (error) {
-                logger.error(`Error shutting down ClientManager: ${error instanceof Error ? error.message : String(error)}`);
-            }
-            try {
-                await serverManager.cleanup();
-                logger.info('ServerManager cleanup complete');
-            }
-            catch (error) {
-                logger.error(`Error cleaning up ServerManager: ${error instanceof Error ? error.message : String(error)}`);
-            }
-            // Shutdown ExpressServer if it exists
-            if (expressServer) {
-                try {
-                    expressServer.shutdown();
-                    logger.info('ExpressServer shutdown complete');
-                }
-                catch (error) {
-                    logger.error(`Error shutting down ExpressServer: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-            // Close all transports
-            for (const [sessionId, transport] of serverManager.getTransports().entries()) {
-                try {
-                    transport?.close();
-                    logger.info(`Closed transport: ${sessionId}`);
-                }
-                catch (error) {
-                    logger.error(`Error closing transport ${sessionId}: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-            // Cleanup InstructionAggregator if it exists
-            if (instructionAggregator && typeof instructionAggregator.cleanup === 'function') {
-                try {
-                    instructionAggregator.cleanup();
-                    logger.info('InstructionAggregator cleanup complete');
-                }
-                catch (error) {
-                    logger.error(`Error cleaning up InstructionAggregator: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-            // Cleanup PresetManager if it exists
-            try {
-                const PresetManager = (await import('../../domains/preset/manager/presetManager.js')).PresetManager;
-                const presetManager = PresetManager.getInstance();
-                if (presetManager && typeof presetManager.cleanup === 'function') {
-                    await presetManager.cleanup();
-                    logger.info('PresetManager cleanup complete');
-                }
-            }
-            catch (error) {
-                logger.error(`Error cleaning up PresetManager: ${error instanceof Error ? error.message : String(error)}`);
-            }
-            // Cleanup PID file if configDir is available
-            if (configDir) {
-                try {
-                    cleanupPidFileOnExit(configDir);
-                    logger.info('PID file cleanup complete');
-                }
-                catch (error) {
-                    logger.error(`Error cleaning up PID file: ${error instanceof Error ? error.message : String(error)}`);
-                }
-            }
-            runtimeOwnership?.release();
-            logger.info('Server shutdown complete');
-            process.exit(0);
-        })();
-        return shutdownPromise;
-    };
-    // Handle various signals for graceful shutdown
-    process.on('SIGINT', shutdown);
-    process.on('SIGTERM', shutdown);
-    process.on('SIGHUP', shutdown);
-}
-/**
- * Start the server using the specified transport.
- */
-export async function serveCommand(parsedArgv) {
-    let runtimeOwnership;
-    try {
-        const { configFilePath, runtimeScope } = resolveServeConfigPaths(parsedArgv);
-        // Lifecycle actions short-circuit before any server setup. They operate on
-        // the Runtime Scope via the lifecycle module and then exit.
-        if (parsedArgv.status) {
-            const { runServeStatus } = await import('./serveStatus.js');
-            await runServeStatus(runtimeScope);
-            return;
-        }
-        if (parsedArgv.stop) {
-            const { runServeStop } = await import('./serveStop.js');
-            await runServeStop(runtimeScope);
-            return;
-        }
-        // Restart: stop the scoped runtime (if any) then start a fresh detached
-        // background runtime. The guard mirrors the background branch; the detached
-        // child never carries --restart, but the check keeps the branch defensive.
-        if (parsedArgv.restart && !parsedArgv['background-bootstrap']) {
-            const { runServeRestart } = await import('./serveRestart.js');
-            await runServeRestart(parsedArgv);
-            return;
-        }
-        // Background parent: spawn a detached supervisor and wait for its worker's
-        // readiness. The supervisor carries the guard flag so it cannot recurse.
-        if (parsedArgv.background && !parsedArgv['background-bootstrap']) {
-            const { runServeBackground } = await import('./serveBackground.js');
-            await runServeBackground(parsedArgv);
-            return;
-        }
-        const supervisorClaimId = parsedArgv['runtime-owner-claim-id'];
-        const launchConfigFile = parsedArgv['background-launch-config'];
-        if (launchConfigFile && !supervisorClaimId) {
-            throw new Error('Background launch configuration is only valid for an authorized supervised worker');
-        }
-        if (parsedArgv['background-bootstrap'] && !supervisorClaimId) {
-            const { runServeBackgroundSupervisor } = await import('./serveBackground.js');
-            await runServeBackgroundSupervisor(parsedArgv);
-            return;
-        }
-        if (supervisorClaimId) {
-            verifyRuntimeScopeOwnership(runtimeScope, supervisorClaimId, 'background-supervisor');
-            const expectedLaunchConfigFile = getBackgroundLaunchConfigPath(runtimeScope);
-            if (!launchConfigFile || path.resolve(launchConfigFile) !== path.resolve(expectedLaunchConfigFile)) {
-                throw new Error('Authorized supervised workers must use the Runtime Scope background launch configuration');
-            }
-        }
-        else {
-            runtimeOwnership = claimRuntimeScope(runtimeScope, {
-                kind: parsedArgv.transport === 'stdio' ? 'foreground-stdio' : 'foreground-http',
-            });
-            process.once('exit', runtimeOwnership.release);
-        }
-        // Initialize MCP config manager using resolved config path
-        const mcpConfigManager = ConfigManager.getInstance(configFilePath);
-        // Load app-level config from config.toml (CLI args take precedence)
-        const launchConfig = launchConfigFile ? readBackgroundLaunchConfig(launchConfigFile) : null;
-        if (launchConfig && launchConfig.claimId !== supervisorClaimId) {
-            throw new Error('Background launch configuration does not match the active supervisor claim');
-        }
-        const appConfig = launchConfig?.appConfig ?? mcpConfigManager.getAppConfig();
-        // Get server count for logo display
-        const transportConfig = mcpConfigManager.getTransportConfig();
-        const serverCount = Object.keys(transportConfig).length;
-        // Handle backward compatibility for auth flag
-        const authEnabled = parsedArgv['enable-auth'] ?? parsedArgv['auth'] ?? appConfig.auth?.enabled ?? false;
-        // Display logo with runtime information (skip for stdio or when logging to file)
-        const effectiveTransport = parsedArgv.transport ?? appConfig.transport ?? 'http';
-        const effectivePort = parsedArgv.port ?? appConfig.port ?? PORT;
-        const effectiveHost = parsedArgv.host ?? appConfig.host ?? HOST;
-        const templateContextTrust = resolveTemplateContextTrust({
-            cliTrust: parsedArgv['template-context-trust'],
-            configTrust: appConfig.templateContext?.trust,
-            host: effectiveHost,
-            confirmUntrusted: parsedArgv['confirm-untrusted-template-context'] ?? false,
-            transport: effectiveTransport,
-        });
-        // Resolve logging from normalized CLI/config sources. ONE_MCP_* env vars
-        // are already merged into parsedArgv by yargs; legacy LOG_LEVEL handling is
-        // centralized in logger.configureLogger when no explicit level is supplied.
-        const { resolved: resolvedLogging, deprecatedKeys: deprecatedLoggingKeys } = resolveLoggingConfig({
-            cli: { level: parsedArgv['log-level'], file: parsedArgv['log-file'] },
-            structured: appConfig.logging,
-            flat: { level: appConfig.logLevel, file: appConfig.logFile },
-        });
-        const configuredLogLevel = parsedArgv['log-level'] ?? appConfig.logging?.level ?? appConfig.logLevel;
-        configureGlobalLogger({
-            ...parsedArgv,
-            'log-level': configuredLogLevel,
-            'log-file': resolvedLogging.file,
-            maxSize: resolvedLogging.maxSize,
-            maxFiles: resolvedLogging.maxFiles,
-        }, effectiveTransport);
-        if (deprecatedLoggingKeys.length > 0) {
-            logger.warn(`⚠️  DEPRECATION WARNING: config keys ${deprecatedLoggingKeys
-                .map((key) => `\`${key}\``)
-                .join(' and ')} are deprecated. Use the structured \`logging\` block ` +
-                '(logging.level / logging.file) instead. The flat keys still work but will be removed in a future release.');
-        }
-        const effectiveLogFile = resolvedLogging.file;
-        if (effectiveTransport !== 'stdio' && !effectiveLogFile) {
-            displayLogo({
-                transport: effectiveTransport,
-                port: effectivePort,
-                host: effectiveHost,
-                serverCount,
-                authEnabled,
-                logLevel: resolvedLogging.level,
-                configDir: runtimeScope,
-            });
-        }
-        // Configure server settings from CLI arguments (CLI args take precedence over appConfig)
-        const serverConfigManager = AgentConfigManager.getInstance();
-        const scopeValidationExplicit = parsedArgv['enable-scope-validation'] ?? appConfig.auth?.enableScopeValidation;
-        const scopeValidationEnabled = scopeValidationExplicit ?? (authEnabled ? true : false);
-        const enhancedSecurityEnabled = parsedArgv['enable-enhanced-security'] ?? appConfig.auth?.enableEnhancedSecurity ?? false;
-        // Startup guard: detect contradictory security configuration that would silently
-        // fail open (auth disabled but scope authorization enforced). Industry references:
-        // Kubernetes apiserver rejects `--authorization-config` × `--authorization-mode`
-        // conflicts at startup; Auth.js CVE-2026-73421 (CVSS 9.1) is a real-world
-        // fail-open caused by config corruption. Policy: WARN and continue (fail-open
-        // preserved for backward compatibility); users can silence by disabling
-        // --enable-scope-validation when --enable-auth is off. CWE-862 / CWE-636.
-        if (!authEnabled && scopeValidationExplicit === true) {
-            logger.warn('⚠️  SECURITY WARNING: authentication is DISABLED but scope validation is ENABLED. ' +
-                'Requests will be served without a verified identity, so authorization cannot be ' +
-                'enforced (fail-open, CWE-862 / CWE-636). ' +
-                'Action: either enable authentication via `--enable-auth`, or disable scope ' +
-                'validation via `--enable-scope-validation=false`. Test/local use only.');
-        }
-        // Handle trust proxy configuration (convert 'true'/'false' strings to boolean)
-        const trustProxyValue = parsedArgv['trust-proxy'] ?? appConfig.auth?.trustProxy ?? 'loopback';
-        const trustProxy = trustProxyValue === 'true' ? true : trustProxyValue === 'false' ? false : trustProxyValue;
-        // Derive session storage path: explicit option > config-dir/sessions > global default
-        let sessionStoragePath = parsedArgv['session-storage-path'];
-        if (!sessionStoragePath && (parsedArgv['config-dir'] || parsedArgv.config)) {
-            // Store sessions within the selected Runtime Scope to maintain isolation.
-            sessionStoragePath = path.join(runtimeScope, 'sessions');
-        }
-        const internalToolsList = parseInternalToolsList(parsedArgv['internal-tools']);
-        warnForLegacyLazyLoadingOptions(parsedArgv);
-        const directExpose = parseCommaSeparatedList(parsedArgv['lazy-direct-expose']);
-        const preloadPatterns = parseCommaSeparatedList(parsedArgv['lazy-preload']);
-        const preloadKeywords = parseCommaSeparatedList(parsedArgv['lazy-preload-keywords']);
-        const sessionTtlMinutes = parsedArgv['session-ttl'] ?? appConfig.auth?.sessionTtl ?? 1440;
-        const asyncLoading = resolveAsyncLoadingOptions(parsedArgv, appConfig.asyncLoading, (warning) => logger.warn(warning));
-        serverConfigManager.updateConfig({
-            host: effectiveHost,
-            port: effectivePort,
-            externalUrl: parsedArgv['external-url'],
-            runtimeScopeStoragePath: runtimeScope,
-            trustProxy,
-            admin: {
-                enabled: appConfig.admin?.enabled ?? true,
-                rateLimit: {
-                    login: {
-                        windowMs: (appConfig.admin?.rateLimit?.login?.windowSeconds ?? 900) * 1000,
-                        maxRequests: appConfig.admin?.rateLimit?.login?.maxRequests ?? 30,
-                        maxFailedAttempts: appConfig.admin?.rateLimit?.login?.maxFailedAttempts ?? 5,
-                    },
-                    status: {
-                        windowMs: (appConfig.admin?.rateLimit?.status?.windowSeconds ?? 60) * 1000,
-                        maxRequests: appConfig.admin?.rateLimit?.status?.maxRequests ?? 120,
-                    },
-                    sensitive: {
-                        windowMs: (appConfig.admin?.rateLimit?.sensitive?.windowSeconds ?? 900) * 1000,
-                        maxRequests: appConfig.admin?.rateLimit?.sensitive?.maxRequests ?? 10,
-                    },
-                },
-                audit: {
-                    retentionMs: (appConfig.admin?.audit?.retentionDays ?? 30) * 24 * 60 * 60 * 1000,
-                },
-            },
-            templateContext: {
-                trust: templateContextTrust,
-            },
-            templateInstancePool: {
-                maxInstancesPerTemplate: appConfig.templateSettings?.pool?.maxInstancesPerTemplate ?? 50,
-                maxTotalInstances: appConfig.templateSettings?.pool?.maxTotalInstances ?? 100,
-                idleTimeoutMs: appConfig.templateSettings?.pool?.idleTimeout ?? 300000,
-                cleanupIntervalMs: appConfig.templateSettings?.pool?.cleanupInterval ?? 30000,
-            },
-            auth: {
-                enabled: authEnabled,
-                sessionTtlMinutes,
-                sessionStoragePath,
-                oauthCodeTtlMs: 60 * 1000, // 1 minute
-                oauthTokenTtlMs: sessionTtlMinutes * 60 * 1000,
-            },
-            rateLimit: {
-                windowMs: (parsedArgv['rate-limit-window'] ?? appConfig.auth?.rateLimitWindow ?? 15) * 60 * 1000,
-                max: parsedArgv['rate-limit-max'] ?? appConfig.auth?.rateLimitMax ?? 100,
-            },
-            features: {
-                auth: authEnabled,
-                scopeValidation: scopeValidationEnabled,
-                enhancedSecurity: enhancedSecurityEnabled,
-                configReload: parsedArgv['enable-config-reload'] ?? appConfig.configReload?.enabled ?? true,
-                envSubstitution: parsedArgv['enable-env-substitution'],
-                sessionPersistence: parsedArgv['enable-session-persistence'],
-                clientNotifications: parsedArgv['enable-client-notifications'],
-                jsonRpcErrorLogging: parsedArgv['enable-jsonrpc-error-logging'],
-                // Internal tool configuration from CLI flags
-                internalTools: parsedArgv['enable-internal-tools'],
-                internalToolsList,
-            },
-            health: {
-                detailLevel: parsedArgv['health-info-level'],
-                rateLimit: {
-                    windowMs: (appConfig.health?.rateLimit?.windowSeconds ?? 300) * 1000,
-                    maxRequests: appConfig.health?.rateLimit?.maxRequests ?? 200,
-                },
-            },
-            asyncLoading,
-            lazyLoading: {
-                enabled: parsedArgv['enable-lazy-loading'] ?? appConfig.lazyLoading?.enabled ?? false,
-                inlineCatalog: parsedArgv['lazy-inline-catalog'] ?? appConfig.lazyLoading?.inlineCatalog ?? false,
-                catalogFormat: (parsedArgv['lazy-catalog-format'] || 'grouped'),
-                directExpose,
-                cache: {
-                    maxEntries: parsedArgv['lazy-cache-max-entries'] ?? appConfig.lazyLoading?.cacheMaxEntries ?? 1000,
-                    strategy: 'lru',
-                    ttlMs: parsedArgv['lazy-cache-ttl'],
-                },
-                preload: {
-                    patterns: preloadPatterns,
-                    keywords: preloadKeywords,
-                },
-                fallback: {
-                    onError: (parsedArgv['lazy-fallback-on-error'] || 'skip'),
-                    timeoutMs: parsedArgv['lazy-fallback-timeout'] ?? 30000,
-                },
-            },
-            configReload: {
-                debounceMs: parsedArgv['config-reload-debounce'] ?? appConfig.configReload?.debounce ?? 500,
-            },
-            sessionPersistence: {
-                persistRequests: parsedArgv['session-persist-requests'],
-                persistIntervalMinutes: parsedArgv['session-persist-interval'],
-                backgroundFlushSeconds: parsedArgv['session-background-flush'],
-            },
-        });
-        if (effectiveTransport !== 'stdio') {
-            const runtimeScopeId = new RuntimeIdentityService({ storageDir: runtimeScope }).getRuntimeScopeId();
-            new TemplateContextCapabilityStore({ storageDir: runtimeScope, runtimeScopeId }).getOrCreate();
-            if (templateContextTrust === 'legacy') {
-                logger.warn('Template context trust is LEGACY: unverified clients may render command, args, cwd, and env templates');
-            }
-        }
-        // Initialize PresetManager with config directory option before server setup
-        // This ensures the singleton is created with the correct config directory
-        const PresetManager = (await import('../../domains/preset/manager/presetManager.js')).PresetManager;
-        PresetManager.getInstance(runtimeScope);
-        // Backend log history is scoped to this Aggregated Runtime invocation.
-        resetBackendLogBroker();
-        // Initialize server and get server manager with custom config path if provided
-        const { serverManager, loadingManager, asyncOrchestrator, instructionAggregator } = await setupServer(configFilePath, undefined, asyncLoading.loadingPolicy);
-        // Load custom instructions template if provided (applies to all transport types)
-        const customTemplate = loadInstructionsTemplate(parsedArgv['instructions-template'], runtimeScope);
-        let expressServer;
-        switch (effectiveTransport) {
-            case 'stdio': {
-                // DEPRECATION WARNING
-                logger.warn('⚠️  DEPRECATION WARNING: `serve --transport stdio` is deprecated');
-                logger.warn('⚠️  Please use `1mcp proxy` instead for better compatibility');
-                logger.warn('⚠️  This mode may be removed in a future major version');
-                logger.warn('');
-                logger.warn('Migration guide:');
-                logger.warn('  1. Start HTTP server: 1mcp serve');
-                logger.warn('  2. Use proxy command: 1mcp proxy');
-                logger.warn('');
-                // Use stdio transport
-                const transport = new StdioServerTransport();
-                const filterConfig = await resolveStdioFilterConfig(parsedArgv);
-                if (!filterConfig) {
-                    runtimeOwnership?.release();
-                    return;
-                }
-                await serverManager.connectTransport(transport, 'stdio', {
-                    ...filterConfig,
-                    enablePagination: parsedArgv.pagination,
-                    customTemplate,
-                });
-                // Initialize notifications for async loading if enabled
-                if (asyncOrchestrator) {
-                    const inboundConnection = serverManager.getServer('stdio');
-                    if (inboundConnection) {
-                        asyncOrchestrator.initializeNotifications(inboundConnection);
-                        logger.info('Async loading notifications initialized for stdio transport');
-                    }
-                }
-                logger.info('Server started with stdio transport');
-                break;
-            }
-            case 'sse': {
-                logger.warning('sse option is deprecated, use http instead');
-            }
-            // Reason: Intentional fallthrough from deprecated 'sse' to 'http' case for backward compatibility
-            // eslint-disable-next-line no-fallthrough
-            case 'http': {
-                // Use HTTP/SSE transport
-                expressServer = new ExpressServer(serverManager, loadingManager, asyncOrchestrator, customTemplate);
-                expressServer.start();
-                // Write PID file for proxy auto-discovery
-                const serverUrl = serverConfigManager.getUrl();
-                writePidFile(runtimeScope, {
-                    pid: process.pid,
-                    url: `${serverUrl}/mcp`,
-                    port: effectivePort,
-                    host: effectiveHost,
-                    transport: 'http',
-                    startedAt: new Date().toISOString(),
-                    configDir: runtimeScope,
-                    // Record the effective log file so `serve --status` reports the real
-                    // path rather than recomputing a default that would be wrong under an
-                    // explicit `--log-file`. Undefined when no log file is configured.
-                    logFile: effectiveLogFile,
-                });
-                // Register cleanup handlers
-                registerPidFileCleanup(runtimeScope);
-                break;
-            }
-            default:
-                logger.error(`Invalid transport: ${effectiveTransport}`);
-                process.exit(1);
-        }
-        // Set up graceful shutdown handling
-        setupGracefulShutdown(serverManager, loadingManager, expressServer, instructionAggregator, runtimeScope, runtimeOwnership);
-        // Log MCP loading progress (non-blocking)
-        loadingManager.on('loading-progress', (summary) => {
-            logger.info(`MCP loading progress: ${summary.ready}/${summary.totalServers} servers ready (${summary.loading} loading, ${summary.failed} failed)`);
-        });
-        loadingManager.on('loading-complete', (summary) => {
-            logger.info(`MCP loading complete: ${summary.ready}/${summary.totalServers} servers ready (${Number(summary.successRate).toFixed(1)}% success rate)`);
-        });
-    }
-    catch (error) {
-        runtimeOwnership?.release();
-        logger.error(`Server error: ${error instanceof Error ? error.message : String(error)}`);
-        process.exit(1);
-    }
-}
+export * from '../../sdk/legacy/commands/serve.js';
 //# sourceMappingURL=serve.js.map