@buildinternet/uploads 0.48.1 → 0.50.0

package/dist/fetch-upload-source.js

@@ -0,0 +1,185 @@
+/**
+ * Fetch bytes from a caller-supplied URL for `put --url` / MCP `contentUrl`.
+ *
+ * Guardrails: HTTPS only (http allowed on loopback when `allowLoopback` is
+ * set), no URL credentials, private/internal hosts rejected unless they are
+ * loopback and `allowLoopback` is set. Redirects re-checked each hop; a
+ * public origin cannot redirect onto loopback. No auth headers forwarded.
+ * The server still sniffs and size-caps after this.
+ */
+import { UploadsError } from "./errors.js";
+import { isLoopbackHost, isPrivateOrLocalHost } from "./private-host.js";
+export const FETCH_UPLOAD_SOURCE_TIMEOUT_MS = 15_000;
+export const FETCH_UPLOAD_SOURCE_MAX_REDIRECTS = 5;
+/** Client-side cap when the caller does not pass a workspace policy ceiling. */
+export const FETCH_UPLOAD_SOURCE_DEFAULT_MAX_BYTES = 25 * 1024 * 1024;
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+function fail(label, message, code = "USAGE") {
+    throw new UploadsError(`${label} ${message}`, code);
+}
+/** Parse and reject URLs we will not fetch. Used on the original URL and every redirect. */
+export function assertFetchableUploadUrl(raw, label = "url", opts = {}) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        fail(label, "must be a valid absolute URL");
+    }
+    const loopback = isLoopbackHost(url.hostname);
+    const allowThisLoopback = Boolean(opts.allowLoopback && loopback);
+    if (url.protocol === "http:") {
+        if (!allowThisLoopback)
+            fail(label, "must be https");
+    }
+    else if (url.protocol !== "https:") {
+        fail(label, "must be https");
+    }
+    if (url.username !== "" || url.password !== "") {
+        fail(label, "must not include credentials");
+    }
+    if (isPrivateOrLocalHost(url.hostname) && !allowThisLoopback) {
+        fail(label, "targets a private or internal network");
+    }
+    return url;
+}
+/** Filename leaf from a URL path (`https://cdn.example/a/shot.png?x=1` → `shot.png`). */
+export function filenameFromUploadUrl(url) {
+    const last = url.pathname.replace(/\/+$/, "").split("/").pop();
+    if (!last)
+        return undefined;
+    let decoded = last;
+    try {
+        decoded = decodeURIComponent(last);
+    }
+    catch {
+        // Keep the raw segment.
+    }
+    const cleaned = decoded.replace(/[^A-Za-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
+    return cleaned || undefined;
+}
+/** `filename` if given, else the URL path leaf. Throws USAGE when neither works. */
+export function resolveUploadFilename(rawUrl, filename, label = "url", opts = {}) {
+    if (filename)
+        return filename;
+    const derived = filenameFromUploadUrl(assertFetchableUploadUrl(rawUrl, label, opts));
+    if (!derived) {
+        throw new UploadsError(`${label} has no filename in the path; pass a filename`, "USAGE");
+    }
+    return derived;
+}
+function timeoutError(label) {
+    fail(label, "fetch timed out", "NETWORK");
+}
+function isAbortError(err) {
+    return ((err instanceof DOMException && err.name === "AbortError") ||
+        (err instanceof Error && err.name === "AbortError"));
+}
+async function readCappedBody(res, maxBytes, label) {
+    const declared = Number(res.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > maxBytes) {
+        fail(label, `exceeds the upload limit (${maxBytes} bytes)`);
+    }
+    const body = res.body;
+    if (!body)
+        fail(label, "returned an empty body");
+    const reader = body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            if (!value || value.byteLength === 0)
+                continue;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel().catch(() => undefined);
+                fail(label, `exceeds the upload limit (${maxBytes} bytes)`);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        try {
+            reader.releaseLock();
+        }
+        catch {
+            // Already locked/cancelled after a size abort.
+        }
+    }
+    if (total === 0)
+        fail(label, "returned an empty body");
+    if (chunks.length === 1)
+        return chunks[0];
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return out;
+}
+/**
+ * GET `url` and return the body bytes, capped at `maxBytes`.
+ *
+ * Redirects are followed manually so each hop is re-validated (scheme, no
+ * credentials, host policy). A public origin cannot redirect onto loopback
+ * even when `allowLoopback` is set. Auth headers are never forwarded.
+ */
+export async function fetchUploadSource(raw, opts = {}) {
+    const label = opts.label ?? "url";
+    const timeoutMs = opts.timeoutMs ?? FETCH_UPLOAD_SOURCE_TIMEOUT_MS;
+    const maxBytes = opts.maxBytes ?? FETCH_UPLOAD_SOURCE_DEFAULT_MAX_BYTES;
+    const doFetch = opts.fetch ?? fetch;
+    const timeout = AbortSignal.timeout(timeoutMs);
+    const signal = opts.signal ? AbortSignal.any([opts.signal, timeout]) : timeout;
+    const urlOpts = { allowLoopback: opts.allowLoopback };
+    let url = assertFetchableUploadUrl(raw, label, urlOpts);
+    for (let hop = 0; hop <= FETCH_UPLOAD_SOURCE_MAX_REDIRECTS; hop++) {
+        let res;
+        try {
+            res = await doFetch(url, {
+                method: "GET",
+                redirect: "manual",
+                signal,
+                headers: {
+                    accept: "*/*",
+                    "user-agent": opts.userAgent ?? "uploads.sh",
+                },
+            });
+        }
+        catch (err) {
+            if (isAbortError(err) || timeout.aborted)
+                timeoutError(label);
+            throw new UploadsError(`could not fetch ${label}`, "NETWORK");
+        }
+        if (REDIRECT_STATUSES.has(res.status)) {
+            const location = res.headers.get("location");
+            if (!location)
+                fail(label, "redirect is missing a Location header");
+            if (hop === FETCH_UPLOAD_SOURCE_MAX_REDIRECTS) {
+                fail(label, "redirected too many times");
+            }
+            // Loopback is only sticky while we are already on loopback. A public
+            // CDN cannot bounce the CLI onto http://127.0.0.1.
+            url = assertFetchableUploadUrl(new URL(location, url).toString(), label, {
+                allowLoopback: urlOpts.allowLoopback && isLoopbackHost(url.hostname),
+            });
+            continue;
+        }
+        if (res.status !== 200) {
+            throw new UploadsError(`could not fetch ${label} (HTTP ${res.status})`, "NETWORK");
+        }
+        try {
+            return await readCappedBody(res, maxBytes, label);
+        }
+        catch (err) {
+            if (isAbortError(err) || timeout.aborted)
+                timeoutError(label);
+            throw err;
+        }
+    }
+    fail(label, "redirected too many times");
+}

package/dist/index.d.ts

@@ -4,6 +4,7 @@ export { sanitizeKeySegment, sha256Short, deriveRepoFromGit, buildScreenshotKey
 export { BUILTIN_DESTINATIONS, isBuiltinDestination, keyMatchesDestination, resolveDestinationRoot, resolvePutPrefix, type BuiltinDestinationId, } from "./destinations.js";
 export { DEFAULT_API_URL, DEFAULT_WORKSPACE, UPLOADS_CONFIG_KEYS, defaultConfigPath, resolveConfigPath, loadConfigFile, loadEnvFile, resolveApiUrl, resolveConfig, describeConfigSources, redactToken, writeConfigKeys, configValuesFromClient, putDefaultsToConfigValues, resolvePutDefaults, mergePutDefaults, workspaceFromToken, workspaceMismatch, type UploadsClientConfig, type ResolvedConfig, type WorkspaceSource, type ConfigValueSource, type ConfigSources, type UploadsConfigKey, type UploadsConfigValues, type PutDefaults, } from "./config.js";
 export { UploadsError, type UploadsErrorCode } from "./errors.js";
+export { assertFetchableUploadUrl, fetchUploadSource, filenameFromUploadUrl, resolveUploadFilename, FETCH_UPLOAD_SOURCE_DEFAULT_MAX_BYTES, FETCH_UPLOAD_SOURCE_MAX_REDIRECTS, FETCH_UPLOAD_SOURCE_TIMEOUT_MS, } from "./fetch-upload-source.js";
 export { createUploadsClient, type UploadsClient, type PutOptions, type ProvenanceInput, type ListOptions, type PutResult, type ListItem, type ListResult, type HeadResult, type DeleteResult, type GalleryItem, type Gallery, type GallerySummary, type GalleryListOptions, type GalleryListResult, type CreateGalleryOptions, type AddGalleryItemOptions, type DeleteGalleryOptions, type HealthResult, type UsageResult, type ReconcileResult, type PurgeExpiredResult, type PurgeExpiredResponse, type FindFilesOptions, type FindFilesItem, type FindFilesResult, type MetadataKeysResult, type MetadataValuesResult, type GetMetadataResult, type PatchMetadataOptions, type ResolveGhPrefixOptions, type ResolveGhPrefixResult, } from "./client.js";
 export { buildCliProvenance } from "./provenance.js";
 export { META_KEY_RE, META_VALUE_MAX, META_MAX_KEYS, META_MAX_TOTAL_BYTES, validateMetaEntry, parseMetaPair, parseMetaFlags, } from "./metadata.js";

package/dist/index.js

@@ -4,6 +4,7 @@ export { sanitizeKeySegment, sha256Short, deriveRepoFromGit, buildScreenshotKey
 export { BUILTIN_DESTINATIONS, isBuiltinDestination, keyMatchesDestination, resolveDestinationRoot, resolvePutPrefix, } from "./destinations.js";
 export { DEFAULT_API_URL, DEFAULT_WORKSPACE, UPLOADS_CONFIG_KEYS, defaultConfigPath, resolveConfigPath, loadConfigFile, loadEnvFile, resolveApiUrl, resolveConfig, describeConfigSources, redactToken, writeConfigKeys, configValuesFromClient, putDefaultsToConfigValues, resolvePutDefaults, mergePutDefaults, workspaceFromToken, workspaceMismatch, } from "./config.js";
 export { UploadsError } from "./errors.js";
+export { assertFetchableUploadUrl, fetchUploadSource, filenameFromUploadUrl, resolveUploadFilename, FETCH_UPLOAD_SOURCE_DEFAULT_MAX_BYTES, FETCH_UPLOAD_SOURCE_MAX_REDIRECTS, FETCH_UPLOAD_SOURCE_TIMEOUT_MS, } from "./fetch-upload-source.js";
 export { createUploadsClient, } from "./client.js";
 export { buildCliProvenance } from "./provenance.js";
 export { META_KEY_RE, META_VALUE_MAX, META_MAX_KEYS, META_MAX_TOTAL_BYTES, validateMetaEntry, parseMetaPair, parseMetaFlags, } from "./metadata.js";

package/dist/mcp/args.d.ts

@@ -10,12 +10,10 @@ export declare function optPosInt(args: ToolArgs, name: string, options?: {
 export declare function optStringRecord(args: ToolArgs, name: string): Record<string, string> | undefined;
 /** A JSON-array argument of strings (e.g. a `delete` or `files` param). */
 export declare function optStringArray(args: ToolArgs, name: string): string[] | undefined;
-/**
- * Shared tool-description text for the metadata-shaped `metadata`/`set`/
- * `filters` params across the CLI/local MCP (put/attach/set_metadata/
- * find_files) and the remote MCP worker (set_metadata/find_files).
- */
-export declare const METADATA_DESCRIPTION = "Queryable custom metadata (key\u2192value), separate from provenance. Omit to leave any metadata already stored for this key untouched; pass an object (even {}) to fully replace it. Keys: lowercase, ^[a-z][a-z0-9._-]{0,63}$. Values: 1-512 printable ASCII characters. Caps: at most 24 keys, at most 8192 total key+value bytes. Canonical keys, which uploads.sh derives automatically where it can: url, path, env, theme, viewport, device, software, captured. Use `path` for the route (e.g. /settings) \u2014 that is the key `find_files` searches by, so spell it `path` and not route/page/screen. `gh.*` is reserved by convention for GitHub PR/issue attachment context (repo/kind/number/ref).";
+/** Shared cue: `path` is the route `find_files` searches by. */
+export declare const METADATA_PATH_CUE = "Use `path` for the route (e.g. /settings), not route/page/screen.";
+/** put/screenshot/attach `metadata`. Key regex and caps stay in usage errors. */
+export declare const METADATA_DESCRIPTION: string;
 export declare const metadataProp: {
     type: string;
     additionalProperties: {
@@ -23,6 +21,8 @@ export declare const metadataProp: {
     };
     description: string;
 };
+/** 1×1 PNG, used only in MCP `inputSchema.examples` so copy-paste from Inspector works. */
+export declare const MCP_EXAMPLE_PNG_BASE64 = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8z8BQDwAEhQGAhKmMIQAAAABJRU5ErkJggg==";
 export declare const stateProp: {
     type: string;
     enum: ("after" | "before" | "empty" | "error" | "loading")[];

package/dist/mcp/args.js

@@ -66,17 +66,19 @@ export function optStringArray(args, name) {
     }
     return v;
 }
-/**
- * Shared tool-description text for the metadata-shaped `metadata`/`set`/
- * `filters` params across the CLI/local MCP (put/attach/set_metadata/
- * find_files) and the remote MCP worker (set_metadata/find_files).
- */
-export const METADATA_DESCRIPTION = "Queryable custom metadata (key→value), separate from provenance. Omit to leave any metadata already stored for this key untouched; pass an object (even {}) to fully replace it. Keys: lowercase, ^[a-z][a-z0-9._-]{0,63}$. Values: 1-512 printable ASCII characters. Caps: at most 24 keys, at most 8192 total key+value bytes. Canonical keys, which uploads.sh derives automatically where it can: url, path, env, theme, viewport, device, software, captured. Use `path` for the route (e.g. /settings) — that is the key `find_files` searches by, so spell it `path` and not route/page/screen. `gh.*` is reserved by convention for GitHub PR/issue attachment context (repo/kind/number/ref).";
+/** Shared cue: `path` is the route `find_files` searches by. */
+export const METADATA_PATH_CUE = "Use `path` for the route (e.g. /settings), not route/page/screen.";
+/** put/screenshot/attach `metadata`. Key regex and caps stay in usage errors. */
+export const METADATA_DESCRIPTION = "Queryable tags for later search (key→value). " +
+    METADATA_PATH_CUE +
+    " Omit to leave existing tags; pass an object (even {}) to replace them. `state` and `app` have their own fields.";
 export const metadataProp = {
     type: "object",
     additionalProperties: { type: "string" },
     description: METADATA_DESCRIPTION,
 };
+/** 1×1 PNG, used only in MCP `inputSchema.examples` so copy-paste from Inspector works. */
+export const MCP_EXAMPLE_PNG_BASE64 = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mP8z8BQDwAEhQGAhKmMIQAAAABJRU5ErkJggg==";
 export const stateProp = {
     type: "string",
     enum: [...META_STATE_VALUES],

package/dist/mcp/output-schemas.d.ts

@@ -20,7 +20,7 @@ export declare const repoLinkStatusResultSchema: JsonSchema;
 export declare const usageResultSchema: JsonSchema;
 export declare const reconcileResultSchema: JsonSchema;
 export declare const purgeExpiredResultSchema: JsonSchema;
-export declare const healthResultSchema: JsonSchema;
+export declare const whoamiResultSchema: JsonSchema;
 export declare const promoteToolResultSchema: JsonSchema;
 export declare const galleryResultSchema: JsonSchema;
 export declare const galleryFindResultSchema: JsonSchema;

package/dist/mcp/output-schemas.js

@@ -191,13 +191,30 @@ export const usageResultSchema = objectSchema({
     workspace: { type: "string" },
     bytes: { type: "number" },
     objects: { type: "number" },
+    sharedBytes: { type: "number" },
+    sharedObjects: { type: "number" },
     uploadsInPeriod: { type: "number" },
     periodStart: { type: "string" },
     updatedAt: { type: "string" },
+    storageBudgetBasis: { type: "string", enum: ["total", "shared"] },
     maxStorageBytes: { type: "number" },
     storageRemainingBytes: { type: "number" },
     maxUploadsPerPeriod: { type: "number" },
     uploadsRemaining: { type: "number" },
+    // GET /:workspace/usage (routes/workspace-usage.ts) also stamps these on
+    // every response — not part of `usageWithLimits`'s return, so easy to miss.
+    scopes: { type: "array", items: { type: "string" } },
+    plan: { type: "string" },
+    storage: objectSchema({
+        mode: { type: "string", enum: ["shared", "byo"] },
+        fallbackLanes: { type: "number" },
+        health: objectSchema({
+            ok: { type: "boolean" },
+            code: { type: "string" },
+            message: { type: "string" },
+            since: { type: "string" },
+        }, ["ok"]),
+    }, ["mode", "fallbackLanes", "health"]),
 });
 export const reconcileResultSchema = objectSchema({
     workspace: { type: "string" },
@@ -223,10 +240,14 @@ export const purgeExpiredResultSchema = objectSchema({
     keysTruncated: { type: "boolean" },
     reconcile: reconcileResultSchema,
 });
-export const healthResultSchema = objectSchema({
+export const whoamiResultSchema = objectSchema({
     ok: { type: "boolean" },
+    workspace: { type: "string" },
+    scopes: { type: "array", items: { type: "string" } },
+    userId: nullableString,
+    signedIn: { type: "boolean" },
     apiUrl: { type: "string" },
-});
+}, ["ok", "workspace"]);
 export const promoteToolResultSchema = objectSchema({
     // `promotion` is optional (issue #702): a `keys`-only call (no `branch`)
     // never runs the branch sweep, so there's nothing to report under it.
@@ -307,7 +328,7 @@ export const hostedOutputSchemas = {
     usage: usageResultSchema,
     reconcile: reconcileResultSchema,
     purge_expired: purgeExpiredResultSchema,
-    health: healthResultSchema,
+    whoami: whoamiResultSchema,
 };
 /** Shared-shape stdio tools. Hosted-only tools (`promote`, `repo_link_status`) omitted. */
 export const stdioOutputSchemas = {
@@ -340,7 +361,7 @@ export const stdioOutputSchemas = {
     usage: usageResultSchema,
     reconcile: reconcileResultSchema,
     purge_expired: purgeExpiredResultSchema,
-    health: healthResultSchema,
+    whoami: whoamiResultSchema,
     report: objectSchema({
         ok: { type: "boolean" },
         id: { type: "string" },

package/dist/mcp/server.d.ts

@@ -18,18 +18,18 @@
  * must never go to stdout.
  */
 import { McpServer, type Implementation, type jsonSchemaValidator } from "@modelcontextprotocol/server";
-export { appProp, canonicalMetaFromArgs, METADATA_DESCRIPTION, metadataArgWithCanonical, metadataProp, stateProp, optBool, optPosInt, optString, optStringArray, optStringRecord, usage, type ToolArgs, } from "./args.js";
+export { appProp, canonicalMetaFromArgs, METADATA_DESCRIPTION, METADATA_PATH_CUE, MCP_EXAMPLE_PNG_BASE64, metadataArgWithCanonical, metadataProp, stateProp, optBool, optPosInt, optString, optStringArray, optStringRecord, usage, type ToolArgs, } from "./args.js";
 export { ToolBatchError, batchFailureMessage } from "./batch-error.js";
 export { mapBounded } from "../async.js";
 export { McpServer, type jsonSchemaValidator };
-export { commentResultSchema, deleteResultSchema, findFilesResultSchema, galleryFindResultSchema, galleryResultSchema, healthResultSchema, hostedOutputSchemas, listResultSchema, metadataFacetsResultSchema, metadataResultSchema, promoteToolResultSchema, purgeExpiredResultSchema, putResultSchema, reconcileResultSchema, repoLinkStatusResultSchema, stdioOutputSchemas, usageResultSchema, withOutputSchemas, } from "./output-schemas.js";
+export { commentResultSchema, deleteResultSchema, findFilesResultSchema, galleryFindResultSchema, galleryResultSchema, hostedOutputSchemas, listResultSchema, metadataFacetsResultSchema, metadataResultSchema, promoteToolResultSchema, purgeExpiredResultSchema, putResultSchema, reconcileResultSchema, repoLinkStatusResultSchema, stdioOutputSchemas, usageResultSchema, withOutputSchemas, } from "./output-schemas.js";
 /** MCP tool safety hints. Required so tools/list advertises them for review. */
 export interface McpToolAnnotations {
     readOnlyHint: boolean;
     destructiveHint: boolean;
     openWorldHint: boolean;
 }
-/** Lookup / list / health. Does not change workspace or public state. */
+/** Lookup / list / whoami. Does not change workspace or public state. */
 export declare const mcpRead: McpToolAnnotations;
 /** Creates or updates a public object, gallery, or comment without deleting. */
 export declare const mcpWritePublic: McpToolAnnotations;
@@ -50,9 +50,9 @@ export type McpSecurityScheme = {
 export declare const mcpOAuthRead: McpSecurityScheme[];
 export declare const mcpOAuthWrite: McpSecurityScheme[];
 export declare const mcpOAuthDelete: McpSecurityScheme[];
-/** Authenticated, no particular file scope (hosted `health`). */
+/** Authenticated, no particular file scope (hosted `whoami`). */
 export declare const mcpOAuthAny: McpSecurityScheme[];
-/** Callable without a token (stdio `health`). */
+/** Callable without a token (stdio `whoami` when unsigned-in). */
 export declare const mcpNoAuth: McpSecurityScheme[];
 /**
  * Thrown when a presented token is missing a required scope. wrapHandler

package/dist/mcp/server.js

@@ -21,12 +21,12 @@ import { fromJsonSchema, McpServer, } from "@modelcontextprotocol/server";
 import { UploadsError } from "../errors.js";
 import { errorCodeFromUnknown, recordEvent } from "../telemetry.js";
 import { ToolBatchError } from "./batch-error.js";
-export { appProp, canonicalMetaFromArgs, METADATA_DESCRIPTION, metadataArgWithCanonical, metadataProp, stateProp, optBool, optPosInt, optString, optStringArray, optStringRecord, usage, } from "./args.js";
+export { appProp, canonicalMetaFromArgs, METADATA_DESCRIPTION, METADATA_PATH_CUE, MCP_EXAMPLE_PNG_BASE64, metadataArgWithCanonical, metadataProp, stateProp, optBool, optPosInt, optString, optStringArray, optStringRecord, usage, } from "./args.js";
 export { ToolBatchError, batchFailureMessage } from "./batch-error.js";
 export { mapBounded } from "../async.js";
 export { McpServer };
-export { commentResultSchema, deleteResultSchema, findFilesResultSchema, galleryFindResultSchema, galleryResultSchema, healthResultSchema, hostedOutputSchemas, listResultSchema, metadataFacetsResultSchema, metadataResultSchema, promoteToolResultSchema, purgeExpiredResultSchema, putResultSchema, reconcileResultSchema, repoLinkStatusResultSchema, stdioOutputSchemas, usageResultSchema, withOutputSchemas, } from "./output-schemas.js";
-/** Lookup / list / health. Does not change workspace or public state. */
+export { commentResultSchema, deleteResultSchema, findFilesResultSchema, galleryFindResultSchema, galleryResultSchema, hostedOutputSchemas, listResultSchema, metadataFacetsResultSchema, metadataResultSchema, promoteToolResultSchema, purgeExpiredResultSchema, putResultSchema, reconcileResultSchema, repoLinkStatusResultSchema, stdioOutputSchemas, usageResultSchema, withOutputSchemas, } from "./output-schemas.js";
+/** Lookup / list / whoami. Does not change workspace or public state. */
 export const mcpRead = {
     readOnlyHint: true,
     destructiveHint: false,
@@ -56,9 +56,9 @@ function oauth(scopes) {
 export const mcpOAuthRead = oauth(["files:read"]);
 export const mcpOAuthWrite = oauth(["files:write"]);
 export const mcpOAuthDelete = oauth(["files:delete"]);
-/** Authenticated, no particular file scope (hosted `health`). */
+/** Authenticated, no particular file scope (hosted `whoami`). */
 export const mcpOAuthAny = oauth([]);
-/** Callable without a token (stdio `health`). */
+/** Callable without a token (stdio `whoami` when unsigned-in). */
 export const mcpNoAuth = [{ type: "noauth" }];
 /**
  * Thrown when a presented token is missing a required scope. wrapHandler

package/dist/mcp/tools.d.ts

@@ -1,6 +1,6 @@
 /**
  * MCP tool set mirroring the CLI commands (put, attach, list, delete,
- * usage, reconcile, purge_expired, comment, health, doctor). Config is
+ * usage, reconcile, purge_expired, comment, whoami, doctor). Config is
  * resolved fresh per tool call so a
  * per-call `workspace` argument behaves like the CLI's --workspace flag, and
  * a missing token surfaces as a tool error rather than a startup failure.