@burdenoff/mcp-libs 2026.1014.4 → 2026.1026.1

package/dist/modules/files/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/core/errors.ts","../../../src/core/tool-name.ts","../../../src/core/result.ts","../../../src/modules/files/tools.ts","../../../src/modules/files/index.ts"],"names":["z"],"mappings":";;;;;;;;;;;AA8BO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EACjB,KAAA;AAAA,EAEzB,WAAA,CAAY,SAAiB,KAAA,EAAiB;AAC5C,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF,CAAA;;;AC1BA,IAAM,oBAAA,GAAuB,EAAA;AAE7B,SAAS,cAAA,CAAe,MAAc,IAAA,EAA8C;AAClF,EAAA,IAAuB,IAAA,CAAK,MAAA,GAAS,oBAAA,EAAsB;AACzD,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,CAAA,WAAA,EAAc,IAAI,CAAA,UAAA,EAAa,oBAAoB,CAAA,8CAAA;AAAA,KACrD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,WAAA,CAAY,gBAAwB,KAAA,EAAyB;AAC3E,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,iBAAiB,sCAAsC,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,IAAA,GAAO,CAAC,WAAA,EAAa,GAAG,KAAK,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7D,EAAA,OAAO,cAAA,CAAe,IAAY,CAAA;AACpC;;;AC4BO,SAAS,WAAA,CAAY,SAAiB,IAAA,EAA2B;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,OAAO;;AAAA,MAAA,EAAa,IAAI,CAAA,CAAA,GAAK,OAAA;AACpD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D;;;AC3DA,SAAS,YACP,MAAA,EACA,QAAA,EACA,OACA,WAAA,EACA,WAAA,EACA,aACA,cAAA,EACM;AACN,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,QAAA;AAAA,IACA;AAAA,MACE,KAAA;AAAA,MACA,WAAA,EAAa,GAAG,WAAW,CAAA,OAAA,CAAA;AAAA,MAC3B;AAAA,KACF;AAAA,IACA,YACE,WAAA;AAAA,MACE,aAAa,WAAW,CAAA,KAAA,EAAQ,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,oHAAA;AAAA;AAC3D,GACJ;AACF;AAEO,SAAS,kBAAA,CACd,MAAA,EACA,GAAA,EACA,KAAA,EACM;AAMN,EAAA,MAAM,WAAA,GACJ,sGAAA;AACF,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,0DAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD,eAAA;AAAA,IACA,oEAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,UAAUA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,QAAA,CAAS,iCAAiC,CAAA,EAAE;AAAA,IAC9E;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,YAAY,CAAC,CAAA;AAAA,IAChD,YAAA;AAAA,IACA,2DAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,UAAUA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,QAAA,CAAS,yCAAyC,CAAA,EAAE;AAAA,IACtF;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,WAAW,CAAC,CAAA;AAAA,IAC/C,UAAA;AAAA,IACA,4EAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,SAAS,CAAA,EAAE;AAAA,IACrC;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,gBAAgB,CAAC,CAAA;AAAA,IACpD,uBAAA;AAAA,IACA,4DAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,SAAS,CAAA,EAAE;AAAA,IACrC;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD,aAAA;AAAA,IACA,2NAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,IAAA,EAAMA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,sCAAsC,CAAA,EAAE;AAAA,IACpE;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,uBAAuB,CAAC,CAAA;AAAA,IAC3D,sBAAA;AAAA,IACA,iJAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,QAAA,EAAUA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,+BAA+B,CAAA,EAAE;AAAA,IACjE;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,uBAAuB,CAAC,CAAA;AAAA,IAC3D,sBAAA;AAAA,IACA,qFAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,SAAA,EAAWA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,uCAAuC,CAAA,EAAE;AAAA,IAC1E;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,aAAa,CAAC,CAAA;AAAA,IACjD,YAAA;AAAA,IACA,sDAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,MAAA,EAAQA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,kBAAkB,CAAA,EAAE;AAAA,IAClD;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAAA,IACxD,mBAAA;AAAA,IACA,mEAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,MAAA,EAAQA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,kBAAkB,CAAA,EAAE;AAAA,IAClD;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAAA,IACxD,mBAAA;AAAA,IACA,+CAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,oBAAoB,CAAA,EAAE;AAAA,IAChD;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD,mBAAA;AAAA,IACA,0EAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,UAAU,CAAA,EAAE;AAAA,IACtC;AAAA,GACF;AACF;;;ACpIA,IAAM,WAAA,GAAyB;AAAA,EAC7B,EAAA,EAAI,OAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,OAAA;AAAA,EACb,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,EAClB,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,EAE1B,QAAA,CAAS,QAAmB,GAAA,EAAqC;AAC/D,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,KAAsB;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,CAAA;AACZ,MAAA,OAAO,CAAA;AAAA,IACT,CAAA;AAEA,IAAA,kBAAA,CAAmB,MAAA,EAAQ,KAAK,KAAK,CAAA;AAErC,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,EAAC,EAAG,OAAA,EAAS,EAAC,EAAE;AAAA,EAC7C;AACF,CAAA;AAEA,IAAO,aAAA,GAAQ","file":"index.cjs","sourcesContent":["/**\n * Error classes for MCP SDK.\n *\n * Modules MUST throw these instead of throwing raw Errors. The registerTool\n * wrapper in result.ts catches and maps them to MCP-protocol-compliant\n * `{ isError: true, content: [...] }` responses.\n *\n * Throwing past the wrapper to the protocol surfaces as JSON-RPC -32603 to\n * the client and is a protocol bug.\n */\n\nexport class McpUserError extends Error {\n  public readonly hint: string | undefined;\n\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message);\n    this.name = 'McpUserError';\n    this.hint = opts?.hint;\n  }\n}\n\nexport class McpAuthError extends McpUserError {\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message, {\n      hint: opts?.hint ?? 'Run the auth_login tool to authenticate.',\n    });\n    this.name = 'McpAuthError';\n  }\n}\n\nexport class McpInternalError extends Error {\n  public override readonly cause: unknown;\n\n  constructor(message: string, cause?: unknown) {\n    super(message);\n    this.name = 'McpInternalError';\n    this.cause = cause;\n  }\n}\n","/**\n * Tool / resource / prompt naming helpers.\n *\n * Mandatory product prefix avoids collisions when Claude Desktop runs\n * multiple MCP servers concurrently (typical setup is ~6).\n *\n * Tool names are capped at 63 characters — Claude Desktop pre-1.x\n * truncated at 64 in some versions.\n */\n\nimport { McpInternalError } from './errors.js';\n\nconst MAX_TOOL_NAME_LENGTH = 63;\n\nfunction assertSafeName(name: string, kind: 'tool' | 'resource' | 'prompt'): string {\n  if (kind === 'tool' && name.length > MAX_TOOL_NAME_LENGTH) {\n    throw new McpInternalError(\n      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`,\n    );\n  }\n  return name;\n}\n\n/**\n * Build a tool name. Format: `<productName>_<...parts>` (snake_case).\n * Example: mcpToolName('vibecontrols', 'vibes', 'list') -> 'vibecontrols_vibes_list'\n */\nexport function mcpToolName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpToolName: productName is required');\n  }\n  const name = [productName, ...parts].filter(Boolean).join('_');\n  return assertSafeName(name, 'tool');\n}\n\n/**\n * Build a resource URI. Format: `<productName>://<...parts>`.\n * Example: mcpResourceUri('vibecontrols', 'schema') -> 'vibecontrols://schema'\n */\nexport function mcpResourceUri(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpResourceUri: productName is required');\n  }\n  return `${productName}://${parts.filter(Boolean).join('/')}`;\n}\n\n/**\n * Build a prompt name. Format: `<productName>-<...parts>` (kebab-case).\n * Example: mcpPromptName('vibecontrols', 'setup') -> 'vibecontrols-setup'\n */\nexport function mcpPromptName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpPromptName: productName is required');\n  }\n  return [productName, ...parts].filter(Boolean).join('-');\n}\n\nexport const TOOL_NAME_LIMIT = MAX_TOOL_NAME_LENGTH;\n\n/**\n * Name-based hint heuristics for MCP `annotations` (readOnlyHint /\n * destructiveHint). Used by tool-governance.ts to auto-fill annotations for\n * the fleet of product modules that call `server.registerTool` directly\n * (bypassing the `registerTool()` core helper) and so never set them\n * explicitly today (BOFF-3903). Deliberately conservative — matched against\n * whole `_`-delimited segments so e.g. `timeentries_delete` and\n * `pomodoro_delete_goal` match, but a hypothetical `undeletable_check`\n * would not.\n *\n * A module can always override the inference by passing an explicit\n * `annotations` object to `registerTool()` / `server.registerTool()`.\n */\nconst DESTRUCTIVE_NAME_SEGMENT = /(?:^|_)delete(?:_|$)/i;\nconst READ_ONLY_NAME_SEGMENT = /(?:^|_)(?:list|get|search|check|read|count|stats|by_date)(?:_|$)/i;\n\n/** True when a tool name looks destructive (irreversibly deletes data) by naming convention. */\nexport function inferDestructiveHint(toolName: string): boolean {\n  return DESTRUCTIVE_NAME_SEGMENT.test(toolName);\n}\n\n/**\n * True when a tool name looks read-only by naming convention. Never true for\n * a name that also looks destructive (a tool can't be both).\n */\nexport function inferReadOnlyHint(toolName: string): boolean {\n  return !inferDestructiveHint(toolName) && READ_ONLY_NAME_SEGMENT.test(toolName);\n}\n","/**\n * MCP tool result helpers + central handler.\n *\n * Modules NEVER call server.registerTool directly — they use registerTool()\n * from this module so the central try/catch wraps the handler and:\n *   - maps thrown McpUserError / McpAuthError / McpInternalError to\n *     MCP-protocol-compliant `{ isError: true, content: [...] }` shapes\n *   - threads `_meta.progressToken` into ctx.progress for long ops\n *   - emits a structured log line on every error\n *   - never leaks `cause` from McpInternalError to the client\n *\n * This is the analog of cli-sdk's createProgram() central error handler.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { ZodRawShape } from 'zod';\nimport type { McpContext } from './context.js';\nimport { McpAuthError, McpInternalError, McpUserError } from './errors.js';\nimport type { ToolAnnotations } from './tool-governance.js';\n\nexport interface ToolTextContent {\n  type: 'text';\n  text: string;\n  [k: string]: unknown;\n}\n\nexport interface ToolResult {\n  content: ToolTextContent[];\n  isError?: boolean;\n  structuredContent?: Record<string, unknown>;\n  [k: string]: unknown;\n}\n\nexport interface ToolMeta {\n  progressToken?: string | number;\n}\n\n/**\n * Build a successful tool result with JSON content (pretty-printed).\n */\nexport function jsonResult(data: unknown, structured?: Record<string, unknown>): ToolResult {\n  const result: ToolResult = {\n    content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],\n  };\n  if (structured !== undefined) {\n    result.structuredContent = structured;\n  }\n  return result;\n}\n\n/**\n * Build a successful tool result with plain text content.\n */\nexport function textResult(text: string): ToolResult {\n  return { content: [{ type: 'text', text }] };\n}\n\n/**\n * Build an error tool result. Honors MCP's `{ isError: true, content }` shape.\n * Optional hint is appended on a new line so the LLM can react.\n */\nexport function errorResult(message: string, hint?: string): ToolResult {\n  const text = hint ? `${message}\\n\\nHint: ${hint}` : message;\n  return { content: [{ type: 'text', text }], isError: true };\n}\n\nexport interface ToolMetadata {\n  title: string;\n  description: string;\n  inputSchema?: ZodRawShape;\n  /**\n   * Explicit MCP annotations (readOnlyHint / destructiveHint / ...). Optional\n   * — when omitted, `wrapServerWithToolGovernance` (applied centrally in\n   * `createMcpServer`) infers them from the tool name. Set this to override\n   * the inference for a tool whose name doesn't match the naming convention.\n   */\n  annotations?: ToolAnnotations;\n}\n\nexport type ToolHandler<TArgs = Record<string, unknown>> = (\n  args: TArgs,\n  ctx: McpContext,\n  meta: ToolMeta,\n) => Promise<unknown>;\n\n/**\n * Register a tool with the central error wrapper.\n *\n * The handler returns a plain value or void. The wrapper:\n *   - wraps non-undefined returns in jsonResult()\n *   - if the value already looks like a ToolResult (has `content`), passes through\n *   - catches McpAuthError / McpUserError / McpInternalError / generic Error\n *   - logs every error via ctx.logger.error\n */\nexport function registerTool<TArgs extends Record<string, unknown>>(\n  server: McpServer,\n  ctx: McpContext,\n  name: string,\n  metadata: ToolMetadata,\n  handler: ToolHandler<TArgs>,\n): void {\n  const sdkConfig = {\n    title: metadata.title,\n    description: metadata.description,\n    ...(metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {}),\n    ...(metadata.annotations ? { annotations: metadata.annotations } : {}),\n  };\n\n  // The MCP SDK's registerTool signature is `(name, config, handler)`. The\n  // handler arity depends on whether inputSchema is present (1-arg without,\n  // 2-arg with). We accept a unified handler shape and dispatch at runtime.\n  // The SDK's typing is strict and conditional on the inputSchema generic;\n  // bypass with a cast since runtime acceptance is unconditional.\n  const wrapped = async (...callbackArgs: unknown[]): Promise<ToolResult> => {\n    const hasArgs = callbackArgs.length === 2;\n    const args = (hasArgs ? callbackArgs[0] : {}) as TArgs;\n    const extra = (hasArgs ? callbackArgs[1] : callbackArgs[0]) as\n      { _meta?: { progressToken?: string | number } } | undefined;\n\n    const progressToken = extra?._meta?.progressToken;\n    const meta: ToolMeta = progressToken !== undefined ? { progressToken } : {};\n\n    try {\n      const result = await handler(args, ctx, meta);\n      if (isToolResult(result)) return result;\n      if (result === undefined) return textResult('OK');\n      return jsonResult(result);\n    } catch (error) {\n      return mapErrorToResult(error, ctx, name);\n    }\n  };\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (server as any).registerTool(name, sdkConfig, wrapped);\n}\n\nfunction isToolResult(value: unknown): value is ToolResult {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    'content' in value &&\n    Array.isArray((value as ToolResult).content)\n  );\n}\n\nfunction mapErrorToResult(error: unknown, ctx: McpContext, toolName: string): ToolResult {\n  if (error instanceof McpAuthError) {\n    ctx.logger.warn(`${toolName}: auth required`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpUserError) {\n    ctx.logger.info(`${toolName}: user error`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpInternalError) {\n    ctx.logger.error(`${toolName}: internal error`, {\n      message: error.message,\n      cause: stringifyCause(error.cause),\n    });\n    return errorResult(`Internal error in ${toolName}.`);\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  ctx.logger.error(`${toolName}: unhandled error`, { message });\n  return errorResult(`${toolName}: ${message}`);\n}\n\nfunction stringifyCause(cause: unknown): string | undefined {\n  if (cause === undefined || cause === null) return undefined;\n  if (cause instanceof Error) return cause.message;\n  try {\n    return JSON.stringify(cause);\n  } catch {\n    return String(cause);\n  }\n}\n","import { z } from 'zod';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { errorResult, mcpToolName, type McpContext } from '../../core/index.js';\n\ntype StubInputSchema = Record<string, z.ZodTypeAny>;\nfunction stubbedTool(\n  server: McpServer,\n  toolName: string,\n  title: string,\n  description: string,\n  featureNote: string,\n  inputSchema: StubInputSchema,\n  altSuggestions: string[],\n): void {\n  server.registerTool(\n    toolName,\n    {\n      title,\n      description: `${description} [STUB]`,\n      inputSchema,\n    },\n    async () =>\n      errorResult(\n        `[stubbed] ${featureNote} Use ${altSuggestions.join(', ')} instead. The tool remains registered so callers receive a meaningful response instead of a schema-validation error.`,\n      ),\n  );\n}\n\nexport function registerFilesTools(\n  server: McpServer,\n  ctx: McpContext,\n  track: (n: string) => string,\n): void {\n  // BOFF-8192: `Query.files` is gone on the live alpha gateway;\n  // none of the 11 files tools are reachable. Stubs so callers get a\n  // clean error rather than a schema-validation failure, and the\n  // per-call wiring stays in place for the day alpha re-exposes the\n  // files surface.\n  const featureNote =\n    'Live alpha removed the `files` query family (workspace files are moving to a per-workspace service).';\n  const alts = [\n    'the next alpha release that re-exposes the files surface',\n    'the SDK files API (which the MCP will mirror once it lands)',\n  ];\n\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_browse')),\n    'Browse Folder',\n    'Browse a workspace folder. Returns subfolders and paginated files.',\n    featureNote,\n    { folderId: z.string().optional().describe('Folder ID (omit to browse root)') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_list')),\n    'List Files',\n    'List files in a workspace, optionally scoped to a folder.',\n    featureNote,\n    { folderId: z.string().optional().describe('Folder ID (omit to list workspace root)') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_get')),\n    'Get File',\n    'Get a single file by ID. Returns the file record or an error if not found.',\n    featureNote,\n    { id: z.string().describe('File ID') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_download')),\n    'Get File Download URL',\n    'Resolve a server-signed presigned download URL for a file.',\n    featureNote,\n    { id: z.string().describe('File ID') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_upload')),\n    'Upload File',\n    'Single-shot file upload mirroring the SDK files.upload contract (s3Bucket/s3Key/size pre-resolved). For raw-byte uploads from MCP callers, prefer files_upload_initiate + files_upload_complete which use presigned URLs.',\n    featureNote,\n    { name: z.string().describe('Display filename including extension') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_upload_initiate')),\n    'Initiate File Upload',\n    'Initiate a multipart upload session. Returns presigned URL(s) the caller must PUT bytes to, plus a sessionId to use with files_upload_complete.',\n    featureNote,\n    { fileName: z.string().describe('File name including extension') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_upload_complete')),\n    'Complete File Upload',\n    'Complete an in-flight upload session previously initiated by files_upload_initiate.',\n    featureNote,\n    { sessionId: z.string().describe('Session ID from files_upload_initiate') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_share')),\n    'Share File',\n    'Create a share for a file (mirrors SDK files.share).',\n    featureNote,\n    { fileId: z.string().describe('File ID to share') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_share_create')),\n    'Create File Share',\n    'Create a shareable link for a file with optional access controls.',\n    featureNote,\n    { fileId: z.string().describe('File ID to share') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_share_revoke')),\n    'Revoke File Share',\n    'Revoke a previously created file share by ID.',\n    featureNote,\n    { id: z.string().describe('Share ID to revoke') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_revoke')),\n    'Revoke File Share',\n    'Revoke an existing file share by ID (mirrors SDK files.shareApi.revoke).',\n    featureNote,\n    { id: z.string().describe('Share ID') },\n    alts,\n  );\n}\n","/**\n * Files module — workspace file browse, upload (initiate/complete), and share\n * (<product>_files_{browse,upload_initiate,upload_complete,share_create,share_revoke}).\n *\n * Backend: ~/products/wspace/files/wspace-files-svc/.\n * Ported from cli-sdk/src/modules/files/.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { McpContext, McpModule, ModuleRegistration } from '../../core/index.js';\nimport { registerFilesTools } from './tools.js';\n\nconst filesModule: McpModule = {\n  id: 'files',\n  version: '0.0.1',\n  displayName: 'Files',\n  dependsOn: ['auth'],\n  capabilities: { tools: {} },\n\n  register(server: McpServer, ctx: McpContext): ModuleRegistration {\n    const tools: string[] = [];\n    const track = (n: string): string => {\n      tools.push(n);\n      return n;\n    };\n\n    registerFilesTools(server, ctx, track);\n\n    return { tools, resources: [], prompts: [] };\n  },\n};\n\nexport default filesModule;\n"]}
+{"version":3,"sources":["../../../src/core/errors.ts","../../../src/core/tool-name.ts","../../../src/core/result.ts","../../../src/modules/files/tools.ts","../../../src/modules/files/index.ts"],"names":["z"],"mappings":";;;;;;;;;;;AA8BO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EACjB,KAAA;AAAA,EAEzB,WAAA,CAAY,SAAiB,KAAA,EAAiB;AAC5C,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF,CAAA;;;AC1BA,IAAM,oBAAA,GAAuB,EAAA;AAE7B,SAAS,cAAA,CAAe,MAAc,IAAA,EAA8C;AAClF,EAAA,IAAuB,IAAA,CAAK,MAAA,GAAS,oBAAA,EAAsB;AACzD,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,CAAA,WAAA,EAAc,IAAI,CAAA,UAAA,EAAa,oBAAoB,CAAA,8CAAA;AAAA,KACrD;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,WAAA,CAAY,gBAAwB,KAAA,EAAyB;AAC3E,EAAA,IAAI,CAAC,WAAA,EAAa;AAChB,IAAA,MAAM,IAAI,iBAAiB,sCAAsC,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,IAAA,GAAO,CAAC,WAAA,EAAa,GAAG,KAAK,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7D,EAAA,OAAO,cAAA,CAAe,IAAY,CAAA;AACpC;;;AC4BO,SAAS,WAAA,CAAY,SAAiB,IAAA,EAA2B;AACtE,EAAA,MAAM,IAAA,GAAO,IAAA,GAAO,CAAA,EAAG,OAAO;;AAAA,MAAA,EAAa,IAAI,CAAA,CAAA,GAAK,OAAA;AACpD,EAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAC5D;;;AC3DA,SAAS,YACP,MAAA,EACA,QAAA,EACA,OACA,WAAA,EACA,WAAA,EACA,aACA,cAAA,EACM;AACN,EAAA,MAAA,CAAO,YAAA;AAAA,IACL,QAAA;AAAA,IACA;AAAA,MACE,KAAA;AAAA,MACA,WAAA,EAAa,GAAG,WAAW,CAAA,OAAA,CAAA;AAAA,MAC3B;AAAA,KACF;AAAA,IACA,YACE,WAAA;AAAA,MACE,aAAa,WAAW,CAAA,KAAA,EAAQ,cAAA,CAAe,IAAA,CAAK,IAAI,CAAC,CAAA,oHAAA;AAAA;AAC3D,GACJ;AACF;AAEO,SAAS,kBAAA,CACd,MAAA,EACA,GAAA,EACA,KAAA,EACM;AAMN,EAAA,MAAM,WAAA,GACJ,sGAAA;AACF,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,0DAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD,eAAA;AAAA,IACA,oEAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,UAAUA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,QAAA,CAAS,iCAAiC,CAAA,EAAE;AAAA,IAC9E;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,YAAY,CAAC,CAAA;AAAA,IAChD,YAAA;AAAA,IACA,2DAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,UAAUA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,QAAA,CAAS,yCAAyC,CAAA,EAAE;AAAA,IACtF;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,WAAW,CAAC,CAAA;AAAA,IAC/C,UAAA;AAAA,IACA,4EAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,SAAS,CAAA,EAAE;AAAA,IACrC;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,gBAAgB,CAAC,CAAA;AAAA,IACpD,uBAAA;AAAA,IACA,4DAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,SAAS,CAAA,EAAE;AAAA,IACrC;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD,aAAA;AAAA,IACA,2NAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,IAAA,EAAMA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,sCAAsC,CAAA,EAAE;AAAA,IACpE;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,uBAAuB,CAAC,CAAA;AAAA,IAC3D,sBAAA;AAAA,IACA,iJAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,QAAA,EAAUA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,+BAA+B,CAAA,EAAE;AAAA,IACjE;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,uBAAuB,CAAC,CAAA;AAAA,IAC3D,sBAAA;AAAA,IACA,qFAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,SAAA,EAAWA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,uCAAuC,CAAA,EAAE;AAAA,IAC1E;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,aAAa,CAAC,CAAA;AAAA,IACjD,YAAA;AAAA,IACA,sDAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,MAAA,EAAQA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,kBAAkB,CAAA,EAAE;AAAA,IAClD;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAAA,IACxD,mBAAA;AAAA,IACA,mEAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,MAAA,EAAQA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,kBAAkB,CAAA,EAAE;AAAA,IAClD;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,oBAAoB,CAAC,CAAA;AAAA,IACxD,mBAAA;AAAA,IACA,+CAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,oBAAoB,CAAA,EAAE;AAAA,IAChD;AAAA,GACF;AACA,EAAA,WAAA;AAAA,IACE,MAAA;AAAA,IACA,KAAA,CAAM,WAAA,CAAY,GAAA,CAAI,WAAA,EAAa,cAAc,CAAC,CAAA;AAAA,IAClD,mBAAA;AAAA,IACA,0EAAA;AAAA,IACA,WAAA;AAAA,IACA,EAAE,EAAA,EAAIA,KAAAA,CAAE,QAAO,CAAE,QAAA,CAAS,UAAU,CAAA,EAAE;AAAA,IACtC;AAAA,GACF;AACF;;;ACpIA,IAAM,WAAA,GAAyB;AAAA,EAC7B,EAAA,EAAI,OAAA;AAAA,EACJ,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,OAAA;AAAA,EACb,SAAA,EAAW,CAAC,MAAM,CAAA;AAAA,EAClB,YAAA,EAAc,EAAE,KAAA,EAAO,EAAC,EAAE;AAAA,EAE1B,QAAA,CAAS,QAAmB,GAAA,EAAqC;AAC/D,IAAA,MAAM,QAAkB,EAAC;AACzB,IAAA,MAAM,KAAA,GAAQ,CAAC,CAAA,KAAsB;AACnC,MAAA,KAAA,CAAM,KAAK,CAAC,CAAA;AACZ,MAAA,OAAO,CAAA;AAAA,IACT,CAAA;AAEA,IAAA,kBAAA,CAAmB,MAAA,EAAQ,KAAK,KAAK,CAAA;AAErC,IAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,EAAC,EAAG,OAAA,EAAS,EAAC,EAAE;AAAA,EAC7C;AACF,CAAA;AAEA,IAAO,aAAA,GAAQ","file":"index.cjs","sourcesContent":["/**\n * Error classes for MCP SDK.\n *\n * Modules MUST throw these instead of throwing raw Errors. The registerTool\n * wrapper in result.ts catches and maps them to MCP-protocol-compliant\n * `{ isError: true, content: [...] }` responses.\n *\n * Throwing past the wrapper to the protocol surfaces as JSON-RPC -32603 to\n * the client and is a protocol bug.\n */\n\nexport class McpUserError extends Error {\n  public readonly hint: string | undefined;\n\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message);\n    this.name = 'McpUserError';\n    this.hint = opts?.hint;\n  }\n}\n\nexport class McpAuthError extends McpUserError {\n  constructor(message: string, opts?: { hint?: string }) {\n    super(message, {\n      hint: opts?.hint ?? 'Run the auth_login tool to authenticate.',\n    });\n    this.name = 'McpAuthError';\n  }\n}\n\nexport class McpInternalError extends Error {\n  public override readonly cause: unknown;\n\n  constructor(message: string, cause?: unknown) {\n    super(message);\n    this.name = 'McpInternalError';\n    this.cause = cause;\n  }\n}\n","/**\n * Tool / resource / prompt naming helpers.\n *\n * Mandatory product prefix avoids collisions when Claude Desktop runs\n * multiple MCP servers concurrently (typical setup is ~6).\n *\n * Tool names are capped at 63 characters — Claude Desktop pre-1.x\n * truncated at 64 in some versions.\n */\n\nimport { McpInternalError } from './errors.js';\n\nconst MAX_TOOL_NAME_LENGTH = 63;\n\nfunction assertSafeName(name: string, kind: 'tool' | 'resource' | 'prompt'): string {\n  if (kind === 'tool' && name.length > MAX_TOOL_NAME_LENGTH) {\n    throw new McpInternalError(\n      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`,\n    );\n  }\n  return name;\n}\n\n/**\n * Build a tool name. Format: `<productName>_<...parts>` (snake_case).\n * Example: mcpToolName('vibecontrols', 'vibes', 'list') -> 'vibecontrols_vibes_list'\n */\nexport function mcpToolName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpToolName: productName is required');\n  }\n  const name = [productName, ...parts].filter(Boolean).join('_');\n  return assertSafeName(name, 'tool');\n}\n\n/**\n * Build a resource URI. Format: `<productName>://<...parts>`.\n * Example: mcpResourceUri('vibecontrols', 'schema') -> 'vibecontrols://schema'\n */\nexport function mcpResourceUri(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpResourceUri: productName is required');\n  }\n  return `${productName}://${parts.filter(Boolean).join('/')}`;\n}\n\n/**\n * Build a prompt name. Format: `<productName>-<...parts>` (kebab-case).\n * Example: mcpPromptName('vibecontrols', 'setup') -> 'vibecontrols-setup'\n */\nexport function mcpPromptName(productName: string, ...parts: string[]): string {\n  if (!productName) {\n    throw new McpInternalError('mcpPromptName: productName is required');\n  }\n  return [productName, ...parts].filter(Boolean).join('-');\n}\n\nexport const TOOL_NAME_LIMIT = MAX_TOOL_NAME_LENGTH;\n\n/**\n * Name-based hint heuristics for MCP `annotations` (readOnlyHint /\n * destructiveHint). Used by tool-governance.ts to auto-fill annotations for\n * the fleet of product modules that call `server.registerTool` directly\n * (bypassing the `registerTool()` core helper) and so never set them\n * explicitly today (BOFF-3903). Deliberately conservative — matched against\n * whole `_`-delimited segments so e.g. `timeentries_delete` and\n * `pomodoro_delete_goal` match, but a hypothetical `undeletable_check`\n * would not.\n *\n * The destructive verb set covers more than `delete`: stopping, killing or\n * terminating a running process, revoking or rotating a credential/share,\n * resetting settings and removing/purging/uninstalling are all actions an\n * MCP client must not auto-run without the user's intent (VC/FG parity G57 —\n * e.g. `vibecontrols_sessions_kill`, `vibecontrols_tunnels_rotate_credentials`\n * were previously reported as non-destructive).\n *\n * A module can always override the inference by passing an explicit\n * `annotations` object to `registerTool()` / `server.registerTool()` — do\n * that for the rare verb match that is harmless (e.g. a typing indicator's\n * `typing_stop`).\n */\nexport const DESTRUCTIVE_NAME_VERBS = [\n  'delete',\n  'destroy',\n  'erase',\n  'kill',\n  'purge',\n  'remove',\n  'reset',\n  'revoke',\n  'rotate',\n  'stop',\n  'terminate',\n  'uninstall',\n  'wipe',\n] as const;\nconst DESTRUCTIVE_NAME_SEGMENT = new RegExp(\n  `(?:^|_)(?:${DESTRUCTIVE_NAME_VERBS.join('|')})(?:_|$)`,\n  'i',\n);\nconst READ_ONLY_NAME_SEGMENT = /(?:^|_)(?:list|get|search|check|read|count|stats|by_date)(?:_|$)/i;\n\n/** True when a tool name looks destructive (irreversibly deletes data) by naming convention. */\nexport function inferDestructiveHint(toolName: string): boolean {\n  return DESTRUCTIVE_NAME_SEGMENT.test(toolName);\n}\n\n/**\n * True when a tool name looks read-only by naming convention. Never true for\n * a name that also looks destructive (a tool can't be both).\n */\nexport function inferReadOnlyHint(toolName: string): boolean {\n  return !inferDestructiveHint(toolName) && READ_ONLY_NAME_SEGMENT.test(toolName);\n}\n","/**\n * MCP tool result helpers + central handler.\n *\n * Modules NEVER call server.registerTool directly — they use registerTool()\n * from this module so the central try/catch wraps the handler and:\n *   - maps thrown McpUserError / McpAuthError / McpInternalError to\n *     MCP-protocol-compliant `{ isError: true, content: [...] }` shapes\n *   - threads `_meta.progressToken` into ctx.progress for long ops\n *   - emits a structured log line on every error\n *   - never leaks `cause` from McpInternalError to the client\n *\n * This is the analog of cli-sdk's createProgram() central error handler.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { ZodRawShape } from 'zod';\nimport type { McpContext } from './context.js';\nimport { McpAuthError, McpInternalError, McpUserError } from './errors.js';\nimport type { ToolAnnotations } from './tool-governance.js';\n\nexport interface ToolTextContent {\n  type: 'text';\n  text: string;\n  [k: string]: unknown;\n}\n\nexport interface ToolResult {\n  content: ToolTextContent[];\n  isError?: boolean;\n  structuredContent?: Record<string, unknown>;\n  [k: string]: unknown;\n}\n\nexport interface ToolMeta {\n  progressToken?: string | number;\n}\n\n/**\n * Build a successful tool result with JSON content (pretty-printed).\n */\nexport function jsonResult(data: unknown, structured?: Record<string, unknown>): ToolResult {\n  const result: ToolResult = {\n    content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],\n  };\n  if (structured !== undefined) {\n    result.structuredContent = structured;\n  }\n  return result;\n}\n\n/**\n * Build a successful tool result with plain text content.\n */\nexport function textResult(text: string): ToolResult {\n  return { content: [{ type: 'text', text }] };\n}\n\n/**\n * Build an error tool result. Honors MCP's `{ isError: true, content }` shape.\n * Optional hint is appended on a new line so the LLM can react.\n */\nexport function errorResult(message: string, hint?: string): ToolResult {\n  const text = hint ? `${message}\\n\\nHint: ${hint}` : message;\n  return { content: [{ type: 'text', text }], isError: true };\n}\n\nexport interface ToolMetadata {\n  title: string;\n  description: string;\n  inputSchema?: ZodRawShape;\n  /**\n   * Explicit MCP annotations (readOnlyHint / destructiveHint / ...). Optional\n   * — when omitted, `wrapServerWithToolGovernance` (applied centrally in\n   * `createMcpServer`) infers them from the tool name. Set this to override\n   * the inference for a tool whose name doesn't match the naming convention.\n   */\n  annotations?: ToolAnnotations;\n}\n\nexport type ToolHandler<TArgs = Record<string, unknown>> = (\n  args: TArgs,\n  ctx: McpContext,\n  meta: ToolMeta,\n) => Promise<unknown>;\n\n/**\n * Register a tool with the central error wrapper.\n *\n * The handler returns a plain value or void. The wrapper:\n *   - wraps non-undefined returns in jsonResult()\n *   - if the value already looks like a ToolResult (has `content`), passes through\n *   - catches McpAuthError / McpUserError / McpInternalError / generic Error\n *   - logs every error via ctx.logger.error\n */\nexport function registerTool<TArgs extends Record<string, unknown>>(\n  server: McpServer,\n  ctx: McpContext,\n  name: string,\n  metadata: ToolMetadata,\n  handler: ToolHandler<TArgs>,\n): void {\n  const sdkConfig = {\n    title: metadata.title,\n    description: metadata.description,\n    ...(metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {}),\n    ...(metadata.annotations ? { annotations: metadata.annotations } : {}),\n  };\n\n  // The MCP SDK's registerTool signature is `(name, config, handler)`. The\n  // handler arity depends on whether inputSchema is present (1-arg without,\n  // 2-arg with). We accept a unified handler shape and dispatch at runtime.\n  // The SDK's typing is strict and conditional on the inputSchema generic;\n  // bypass with a cast since runtime acceptance is unconditional.\n  const wrapped = async (...callbackArgs: unknown[]): Promise<ToolResult> => {\n    const hasArgs = callbackArgs.length === 2;\n    const args = (hasArgs ? callbackArgs[0] : {}) as TArgs;\n    const extra = (hasArgs ? callbackArgs[1] : callbackArgs[0]) as\n      { _meta?: { progressToken?: string | number } } | undefined;\n\n    const progressToken = extra?._meta?.progressToken;\n    const meta: ToolMeta = progressToken !== undefined ? { progressToken } : {};\n\n    try {\n      const result = await handler(args, ctx, meta);\n      if (isToolResult(result)) return result;\n      if (result === undefined) return textResult('OK');\n      return jsonResult(result);\n    } catch (error) {\n      return mapErrorToResult(error, ctx, name);\n    }\n  };\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (server as any).registerTool(name, sdkConfig, wrapped);\n}\n\nfunction isToolResult(value: unknown): value is ToolResult {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    'content' in value &&\n    Array.isArray((value as ToolResult).content)\n  );\n}\n\nfunction mapErrorToResult(error: unknown, ctx: McpContext, toolName: string): ToolResult {\n  if (error instanceof McpAuthError) {\n    ctx.logger.warn(`${toolName}: auth required`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpUserError) {\n    ctx.logger.info(`${toolName}: user error`, { message: error.message });\n    return errorResult(error.message, error.hint);\n  }\n  if (error instanceof McpInternalError) {\n    ctx.logger.error(`${toolName}: internal error`, {\n      message: error.message,\n      cause: stringifyCause(error.cause),\n    });\n    return errorResult(`Internal error in ${toolName}.`);\n  }\n  const message = error instanceof Error ? error.message : String(error);\n  ctx.logger.error(`${toolName}: unhandled error`, { message });\n  return errorResult(`${toolName}: ${message}`);\n}\n\nfunction stringifyCause(cause: unknown): string | undefined {\n  if (cause === undefined || cause === null) return undefined;\n  if (cause instanceof Error) return cause.message;\n  try {\n    return JSON.stringify(cause);\n  } catch {\n    return String(cause);\n  }\n}\n","import { z } from 'zod';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { errorResult, mcpToolName, type McpContext } from '../../core/index.js';\n\ntype StubInputSchema = Record<string, z.ZodTypeAny>;\nfunction stubbedTool(\n  server: McpServer,\n  toolName: string,\n  title: string,\n  description: string,\n  featureNote: string,\n  inputSchema: StubInputSchema,\n  altSuggestions: string[],\n): void {\n  server.registerTool(\n    toolName,\n    {\n      title,\n      description: `${description} [STUB]`,\n      inputSchema,\n    },\n    async () =>\n      errorResult(\n        `[stubbed] ${featureNote} Use ${altSuggestions.join(', ')} instead. The tool remains registered so callers receive a meaningful response instead of a schema-validation error.`,\n      ),\n  );\n}\n\nexport function registerFilesTools(\n  server: McpServer,\n  ctx: McpContext,\n  track: (n: string) => string,\n): void {\n  // BOFF-8192: `Query.files` is gone on the live alpha gateway;\n  // none of the 11 files tools are reachable. Stubs so callers get a\n  // clean error rather than a schema-validation failure, and the\n  // per-call wiring stays in place for the day alpha re-exposes the\n  // files surface.\n  const featureNote =\n    'Live alpha removed the `files` query family (workspace files are moving to a per-workspace service).';\n  const alts = [\n    'the next alpha release that re-exposes the files surface',\n    'the SDK files API (which the MCP will mirror once it lands)',\n  ];\n\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_browse')),\n    'Browse Folder',\n    'Browse a workspace folder. Returns subfolders and paginated files.',\n    featureNote,\n    { folderId: z.string().optional().describe('Folder ID (omit to browse root)') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_list')),\n    'List Files',\n    'List files in a workspace, optionally scoped to a folder.',\n    featureNote,\n    { folderId: z.string().optional().describe('Folder ID (omit to list workspace root)') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_get')),\n    'Get File',\n    'Get a single file by ID. Returns the file record or an error if not found.',\n    featureNote,\n    { id: z.string().describe('File ID') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_download')),\n    'Get File Download URL',\n    'Resolve a server-signed presigned download URL for a file.',\n    featureNote,\n    { id: z.string().describe('File ID') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_upload')),\n    'Upload File',\n    'Single-shot file upload mirroring the SDK files.upload contract (s3Bucket/s3Key/size pre-resolved). For raw-byte uploads from MCP callers, prefer files_upload_initiate + files_upload_complete which use presigned URLs.',\n    featureNote,\n    { name: z.string().describe('Display filename including extension') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_upload_initiate')),\n    'Initiate File Upload',\n    'Initiate a multipart upload session. Returns presigned URL(s) the caller must PUT bytes to, plus a sessionId to use with files_upload_complete.',\n    featureNote,\n    { fileName: z.string().describe('File name including extension') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_upload_complete')),\n    'Complete File Upload',\n    'Complete an in-flight upload session previously initiated by files_upload_initiate.',\n    featureNote,\n    { sessionId: z.string().describe('Session ID from files_upload_initiate') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_share')),\n    'Share File',\n    'Create a share for a file (mirrors SDK files.share).',\n    featureNote,\n    { fileId: z.string().describe('File ID to share') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_share_create')),\n    'Create File Share',\n    'Create a shareable link for a file with optional access controls.',\n    featureNote,\n    { fileId: z.string().describe('File ID to share') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_share_revoke')),\n    'Revoke File Share',\n    'Revoke a previously created file share by ID.',\n    featureNote,\n    { id: z.string().describe('Share ID to revoke') },\n    alts,\n  );\n  stubbedTool(\n    server,\n    track(mcpToolName(ctx.productName, 'files_revoke')),\n    'Revoke File Share',\n    'Revoke an existing file share by ID (mirrors SDK files.shareApi.revoke).',\n    featureNote,\n    { id: z.string().describe('Share ID') },\n    alts,\n  );\n}\n","/**\n * Files module — workspace file browse, upload (initiate/complete), and share\n * (<product>_files_{browse,upload_initiate,upload_complete,share_create,share_revoke}).\n *\n * Backend: ~/products/wspace/files/wspace-files-svc/.\n * Ported from cli-sdk/src/modules/files/.\n */\n\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { McpContext, McpModule, ModuleRegistration } from '../../core/index.js';\nimport { registerFilesTools } from './tools.js';\n\nconst filesModule: McpModule = {\n  id: 'files',\n  version: '0.0.1',\n  displayName: 'Files',\n  dependsOn: ['auth'],\n  capabilities: { tools: {} },\n\n  register(server: McpServer, ctx: McpContext): ModuleRegistration {\n    const tools: string[] = [];\n    const track = (n: string): string => {\n      tools.push(n);\n      return n;\n    };\n\n    registerFilesTools(server, ctx, track);\n\n    return { tools, resources: [], prompts: [] };\n  },\n};\n\nexport default filesModule;\n"]}

package/dist/modules/files/index.d.ts

@@ -1,8 +1,3 @@
-import { c as McpModule } from '../../module-VpgjAf8m.js';
-import '@modelcontextprotocol/sdk/server/mcp.js';
-import '../../context-DGO4h-Pd.js';
-import 'graphql-request';
-
+import type { McpModule } from '../../core/index.js';
 declare const filesModule: McpModule;
-
-export { filesModule as default };
+export default filesModule;

package/dist/modules/files/index.js

@@ -1,4 +1,4 @@
-import { mcpToolName, errorResult } from '../../chunk-G76DKEPI.js';
+import { mcpToolName, errorResult } from '../../chunk-FHXCNP2U.js';
 import { z } from 'zod';
 
 function stubbedTool(server, toolName, title, description, featureNote, inputSchema, altSuggestions) {

package/dist/modules/files/operations.d.ts

@@ -0,0 +1,9 @@
+export declare const BROWSE_FOLDER = "\n  query BrowseFolder($folderId: ID, $pagination: PaginationInput) {\n    getFolder(id: $folderId) {\n      id name path\n      files { id name size mimeType }\n      subFolders { id name path level }\n    }\n    getFilesInFolder(folderId: $folderId, pagination: $pagination) {\n      files { id name size mimeType extension createdAt }\n      total hasMore\n    }\n  }\n";
+export declare const LIST_FILES = "\n  query GetFiles($folderId: ID, $pagination: PaginationInput) {\n    getFiles(folderId: $folderId, pagination: $pagination) {\n      files {\n        id name description workspaceId folderId\n        mimeType extension size s3Key s3Bucket\n        downloadUrl status visibility\n        starred downloadCount viewCount sha256Hash\n        uploadedById createdAt updatedAt tags\n      }\n      total page limit hasMore\n    }\n  }\n";
+export declare const GET_FILE = "\n  query GetFile($id: ID!) {\n    getFile(id: $id) {\n      id name description workspaceId folderId\n      mimeType extension size s3Key s3Bucket\n      downloadUrl status visibility\n      starred downloadCount viewCount sha256Hash\n      uploadedById createdAt updatedAt tags\n    }\n  }\n";
+export declare const GET_FILE_DOWNLOAD_URL = "\n  query GetFileDownloadUrl($id: ID!, $expiresIn: Int) {\n    getFileDownloadUrl(id: $id, expiresIn: $expiresIn)\n  }\n";
+export declare const UPLOAD_FILE = "\n  mutation UploadFile($input: UploadFileInput!) {\n    uploadFile(input: $input) {\n      file {\n        id name description workspaceId folderId\n        mimeType extension size s3Key s3Bucket\n        status visibility uploadedById createdAt\n      }\n      uploadProgress\n      message\n    }\n  }\n";
+export declare const INITIATE_UPLOAD = "\n  mutation InitiateUpload($input: InitiateUploadInput!) {\n    initiateUpload(input: $input) {\n      session { id fileName fileSize s3Bucket s3Key }\n      uploadUrl\n      presignedUrls { partNumber url expiresAt }\n      multipartUploadId\n    }\n  }\n";
+export declare const COMPLETE_UPLOAD = "\n  mutation CompleteUpload($input: CompleteUploadInput!) {\n    completeUpload(input: $input) {\n      file { id name size s3Bucket s3Key downloadUrl }\n      fileId\n    }\n  }\n";
+export declare const CREATE_SHARE = "\n  mutation CreateShare($input: FileCreateShareInput!) {\n    createShare(input: $input) {\n      id token shareType accessLevel expiresAt requiresPassword\n      downloadCount maxDownloads createdAt\n    }\n  }\n";
+export declare const REVOKE_SHARE = "\n  mutation RevokeShare($id: ID!) {\n    revokeShare(id: $id) {\n      id revokedAt revokedBy\n    }\n  }\n";

package/dist/modules/files/tools.d.ts

@@ -0,0 +1,3 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type McpContext } from '../../core/index.js';
+export declare function registerFilesTools(server: McpServer, ctx: McpContext, track: (n: string) => string): void;

package/dist/modules/fluidgrids/index.cjs

@@ -1082,7 +1082,8 @@ function registerCredentialTools(server, ctx, track) {
         vaultId: zod.z.string().optional().describe("Vault to store secret material in"),
         credentialSecretId: zod.z.string().optional().describe("Existing vault secret reference"),
         managedSecretName: zod.z.string().optional().describe("Managed secret name")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async (args) => runTool(ctx, "credentials_create", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1102,7 +1103,8 @@ function registerCredentialTools(server, ctx, track) {
         name: zod.z.string().optional().describe("Name"),
         description: zod.z.string().optional().describe("Description"),
         config: zod.z.unknown().optional().describe("Non-secret provider config as JSON")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id, ...input }) => runTool(ctx, "credentials_update", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1154,7 +1156,8 @@ function registerCredentialTools(server, ctx, track) {
       inputSchema: {
         connectionId: zod.z.string().describe("Connection ID"),
         apiKey: zod.z.string().describe("API key to store")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ connectionId, apiKey }) => runTool(ctx, "credentials_auth_api_key", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1173,7 +1176,8 @@ function registerCredentialTools(server, ctx, track) {
         connectionId: zod.z.string().describe("Connection ID"),
         username: zod.z.string().describe("Username"),
         password: zod.z.string().describe("Password")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ connectionId, username, password }) => runTool(ctx, "credentials_auth_basic", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1424,7 +1428,8 @@ function registerRunTools(server, ctx, track) {
     {
       title: "Pause Run",
       description: "Pause a running workflow run.",
-      inputSchema: { id: zod.z.string().describe("Run ID") }
+      inputSchema: { id: zod.z.string().describe("Run ID") },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id }) => runTool(ctx, "runs_pause", async () => {
       const data = await ctx.gql.workspace.request(PAUSE_RUN, {
@@ -1441,7 +1446,8 @@ function registerRunTools(server, ctx, track) {
       inputSchema: {
         id: zod.z.string().describe("Run ID"),
         payload: zod.z.unknown().optional().describe("Payload to resume with")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true }
     },
     async ({ id, payload }) => runTool(ctx, "runs_resume", async () => {
       const data = await ctx.gql.workspace.request(RESUME_RUN, {
@@ -1459,7 +1465,8 @@ function registerRunTools(server, ctx, track) {
       inputSchema: {
         id: zod.z.string().describe("Run ID"),
         nodeId: zod.z.string().describe("Node ID to retry")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true }
     },
     async ({ id: runId, nodeId }) => runTool(ctx, "runs_retry_node", async () => {
       const runData = await ctx.gql.workspace.request(GET_RUN, { id: runId });
@@ -1524,7 +1531,8 @@ function registerScheduledJobTools(server, ctx, track) {
         schedule: zod.z.string().describe("Cron or interval expression"),
         enabled: zod.z.boolean().optional().describe("Start enabled (default true)"),
         config: zod.z.unknown().optional().describe("Job config as JSON")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async (args) => runTool(ctx, "scheduled_jobs_create", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1545,7 +1553,8 @@ function registerScheduledJobTools(server, ctx, track) {
         schedule: zod.z.string().optional().describe("Cron or interval expression"),
         enabled: zod.z.boolean().optional().describe("Enabled state"),
         config: zod.z.unknown().optional().describe("Job config as JSON")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ jobId, ...input }) => runTool(ctx, "scheduled_jobs_update", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1628,7 +1637,8 @@ function registerWebhookTools(server, ctx, track) {
         secretToken: zod.z.string().optional().describe("Shared secret for validation"),
         projectId: zod.z.string().optional().describe("Owning project ID"),
         tags: zod.z.array(zod.z.string()).optional().describe("Tags")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async (args) => runTool(ctx, "webhooks_create", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1654,7 +1664,8 @@ function registerWebhookTools(server, ctx, track) {
         validationMethod: zod.z.string().optional().describe("Signature validation method"),
         secretToken: zod.z.string().optional().describe("Shared secret"),
         tags: zod.z.array(zod.z.string()).optional().describe("Tags")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id, ...input }) => runTool(ctx, "webhooks_update", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1672,7 +1683,8 @@ function registerWebhookTools(server, ctx, track) {
       inputSchema: {
         id: zod.z.string().describe("Event registration ID"),
         isActive: zod.z.boolean().describe("True to enable, false to disable")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id, isActive }) => runTool(ctx, "webhooks_toggle", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1781,7 +1793,8 @@ function registerWorkflowTools(server, ctx, track) {
         projectId: zod.z.string().optional().describe("Owning project ID"),
         context: zod.z.unknown().optional().describe("Context JSON"),
         tags: zod.z.array(zod.z.string()).optional().describe("Tags")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async (args) => runTool(ctx, "workflows_create", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1807,7 +1820,8 @@ function registerWorkflowTools(server, ctx, track) {
         context: zod.z.unknown().optional().describe("Context JSON"),
         tags: zod.z.array(zod.z.string()).optional().describe("Tags"),
         version: zod.z.string().optional().describe("Version")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id, ...input }) => runTool(ctx, "workflows_update", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1848,7 +1862,8 @@ function registerWorkflowTools(server, ctx, track) {
         triggerData: zod.z.unknown().optional().describe("Payload passed to the trigger node"),
         context: zod.z.unknown().optional().describe("Run context JSON"),
         stopAtNodeId: zod.z.string().optional().describe("Stop after this node and mark the run COMPLETED")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true }
     },
     async (args) => runTool(ctx, "workflows_trigger", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1863,7 +1878,8 @@ function registerWorkflowTools(server, ctx, track) {
     {
       title: "Publish Workflow",
       description: "Publish a workflow definition, making that version the executable one.",
-      inputSchema: { id: zod.z.string().describe("Workflow definition ID") }
+      inputSchema: { id: zod.z.string().describe("Workflow definition ID") },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id }) => runTool(ctx, "workflows_publish", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1878,7 +1894,8 @@ function registerWorkflowTools(server, ctx, track) {
     {
       title: "Activate Workflow",
       description: "Activate a workflow definition. Exactly one version per workflowKey may be ACTIVE.",
-      inputSchema: { id: zod.z.string().describe("Workflow definition ID") }
+      inputSchema: { id: zod.z.string().describe("Workflow definition ID") },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id }) => runTool(ctx, "workflows_activate", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1893,7 +1910,8 @@ function registerWorkflowTools(server, ctx, track) {
     {
       title: "Deactivate Workflow",
       description: "Deactivate a workflow definition so no version of the key is executable.",
-      inputSchema: { id: zod.z.string().describe("Workflow definition ID") }
+      inputSchema: { id: zod.z.string().describe("Workflow definition ID") },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ id }) => runTool(ctx, "workflows_deactivate", async () => {
       const data = await ctx.gql.workspace.request(
@@ -1913,7 +1931,8 @@ function registerWorkflowTools(server, ctx, track) {
         version: zod.z.string().describe("Source version"),
         newWorkflowKey: zod.z.string().describe("Key for the copy"),
         newVersion: zod.z.string().optional().describe("Version for the copy")
-      }
+      },
+      annotations: { readOnlyHint: false, destructiveHint: false }
     },
     async ({ workflowKey, version, newWorkflowKey, newVersion }) => runTool(ctx, "workflows_duplicate", async () => {
       const data = await ctx.gql.workspace.request(