@chrischall/myatriumhealth-mcp 1.3.6 → 1.3.7

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for MyAtriumHealth (Atrium Health's Epic MyChart patient portal) — test results, medications, allergies, immunizations, health issues, visits and messages. Requests relay through the user's own signed-in browser tab via the ContextMint Bridge extension, reusing their existing session.",
-    "version": "1.3.6"
+    "version": "1.3.7"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "MyAtriumHealth",
       "source": "./",
       "description": "Read MyAtriumHealth (Epic MyChart) records — test results, medications, allergies, immunizations, health issues, visits — by relaying requests through the user's signed-in browser tab via the ContextMint Bridge extension.",
-      "version": "1.3.6",
+      "version": "1.3.7",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "myatriumhealth-mcp",
   "displayName": "MyAtriumHealth",
-  "version": "1.3.6",
+  "version": "1.3.7",
   "description": "MyAtriumHealth (Epic MyChart) access for Claude — test results, medications, allergies, immunizations, visits",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -91,6 +91,7 @@ var require_util = __commonJS({
     exports.explicitlyAborted = explicitlyAborted2;
     exports.prefixIssues = prefixIssues2;
     exports.unwrapMessage = unwrapMessage2;
+    exports.sizeCaps = sizeCaps2;
     exports.attachSchema = attachSchema2;
     exports.finalizeIssue = finalizeIssue2;
     exports.getSizableOrigin = getSizableOrigin2;
@@ -625,6 +626,18 @@ var require_util = __commonJS({
     function unwrapMessage2(message) {
       return typeof message === "string" ? message : message?.message;
     }
+    function sizeCaps2(defChecks) {
+      const caps = [];
+      for (const ch of defChecks ?? []) {
+        const d = ch._zod.def;
+        if (!/_(length|size)$|_equals$/.test(d.check))
+          break;
+        const max = d.maximum ?? d.length ?? d.size;
+        if (max >= 0)
+          caps.push([max, ch]);
+      }
+      return caps;
+    }
     function attachSchema2(issues, start, inst) {
       var _a3;
       for (let i = start; i < issues.length; i++) {
@@ -2289,7 +2302,7 @@ var require_versions = __commonJS({
     exports.version = {
       major: 4,
       minor: 6,
-      patch: 5
+      patch: 6
     };
     (function() {
       var keys = Object.getOwnPropertyNames(exports);
@@ -3123,6 +3136,31 @@ var require_schemas = __commonJS({
         return payload;
       };
     });
+    function capSize2(inst, size) {
+      const caps = util.sizeCaps(inst._zod.def.checks);
+      if (!caps.length)
+        return;
+      const cap = Math.min(...caps.map((c) => c[0]));
+      const parse4 = inst._zod.parse;
+      inst._zod.parse = (payload, ctx) => {
+        const n = size(payload.value);
+        if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+          for (const [max, ch] of util.sizeCaps(inst._zod.def.checks)) {
+            if (n > max && ch._zod.def.when(payload)) {
+              const start = payload.issues.length;
+              ch._zod.check(payload);
+              payload.issues[start].continue = false;
+              util.attachSchema(payload.issues, start, inst);
+              return payload;
+            }
+          }
+        }
+        return parse4(payload, ctx);
+      };
+    }
+    var arraySize2 = (input2) => Array.isArray(input2) ? input2.length : -1;
+    var mapSize2 = (input2) => input2 instanceof Map ? input2.size : -1;
+    var setSize2 = (input2) => input2 instanceof Set ? input2.size : -1;
     function handleArrayResult2(result, final, index) {
       if (result.issues.length) {
         final.issues.push(...util.prefixIssues(index, result.issues));
@@ -3166,6 +3204,7 @@ var require_schemas = __commonJS({
         }
         return payload;
       };
+      capSize2(inst, arraySize2);
     });
     function handlePropertyResult2(result, final, key, input2, optin, optout) {
       const isPresent = key in input2;
@@ -4122,6 +4161,7 @@ var require_schemas = __commonJS({
           return Promise.all(proms).then(() => payload);
         return payload;
       };
+      capSize2(inst, mapSize2);
     });
     function handleMapResult2(keyResult, valueResult, final, key, input2, inst, ctx) {
       if (keyResult.issues.length) {
@@ -4188,6 +4228,7 @@ var require_schemas = __commonJS({
           return Promise.all(proms).then(() => payload);
         return payload;
       };
+      capSize2(inst, setSize2);
     });
     function handleSetResult2(result, final) {
       if (result.issues.length) {
@@ -16292,9 +16333,15 @@ ${code2}
       doc.write(`}`);
       return outputVar;
     }
+    function generateSizeGate2(doc, schema, size) {
+      for (const [max, check2] of util.sizeCaps(schema._zod.def.checks)) {
+        doc.write(`if (${size} > ${numericOperand2(max, check2._zod.def.check)}) return INVALID;`);
+      }
+    }
     function generateArrayCheck2(doc, ctx, schema, accessor, buildsValue = true) {
       const def = schema._zod.def;
       doc.write(`if (!Array.isArray(${accessor})) return INVALID;`);
+      generateSizeGate2(doc, schema, `${accessor}.length`);
       const outputVar = buildsValue ? newVar2(ctx) : null;
       const iVar = newVar2(ctx);
       const elemVar = newVar2(ctx);
@@ -16694,6 +16741,7 @@ ${code2}
     function generateMapCheck2(doc, ctx, schema, accessor) {
       const def = schema._zod.def;
       doc.write(`if (!(${accessor} instanceof Map)) return INVALID;`);
+      generateSizeGate2(doc, schema, `${accessor}.size`);
       const outputVar = newVar2(ctx);
       const kVar = newVar2(ctx);
       const valVar = newVar2(ctx);
@@ -16710,6 +16758,7 @@ ${code2}
     function generateSetCheck2(doc, ctx, schema, accessor) {
       const def = schema._zod.def;
       doc.write(`if (!(${accessor} instanceof Set)) return INVALID;`);
+      generateSizeGate2(doc, schema, `${accessor}.size`);
       const outputVar = newVar2(ctx);
       const valVar = newVar2(ctx);
       doc.write(`const ${outputVar} = new Set();`);
@@ -23312,149 +23361,151 @@ var require_v4 = __commonJS({
 // node_modules/dotenv/dist/index.cjs
 var require_dist2 = __commonJS({
   "node_modules/dotenv/dist/index.cjs"(exports, module) {
-    var I = (e, o) => () => {
+    var k = (e, n) => () => {
       try {
-        return o || e((o = { exports: {} }).exports, o), o.exports;
+        return n || e((n = { exports: {} }).exports, n), n.exports;
       } catch (t) {
-        throw o = 0, t;
+        throw n = 0, t;
       }
     };
-    var S = I((xe, U) => {
+    var I = k((xe, U) => {
       function G(e) {
         return typeof e == "string" ? !["false", "0", "no", "off", ""].includes(e.toLowerCase()) : !!e;
       }
-      function X(e = process.env) {
-        let o = {};
+      function Y(e = process.env) {
+        let n = {};
         for (let t of ["ENCODING", "PATH", "QUIET", "DEBUG", "OVERRIDE", "FAST"]) {
-          let n = e[`DOTENV_${t}`] != null ? e[`DOTENV_${t}`] : e[`DOTENV_CONFIG_${t}`];
-          n != null && (o[t.toLowerCase()] = t === "ENCODING" || t === "PATH" ? n : G(n));
+          let o = e[`DOTENV_${t}`] != null ? e[`DOTENV_${t}`] : e[`DOTENV_CONFIG_${t}`];
+          o != null && (n[t.toLowerCase()] = t === "ENCODING" || t === "PATH" ? o : G(o));
         }
-        return o;
+        return n;
       }
-      U.exports = { parseBoolean: G, optionsFromEnv: X };
+      U.exports = { parseBoolean: G, optionsFromEnv: Y };
     });
-    var N = I((ye, x) => {
-      var Y = __require("fs"), j = __require("path"), z4 = __require("os"), { URL: Z, fileURLToPath: ee } = __require("url"), { parseBoolean: k, optionsFromEnv: B } = S(), te = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg, b = new Uint8Array(256);
+    var N = k((ye, x) => {
+      var z4 = __require("fs"), S = __require("path"), Z = __require("os"), { URL: ee, fileURLToPath: te } = __require("url"), { parseBoolean: $, optionsFromEnv: B } = I(), re = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg, b = new Uint8Array(256);
       for (let e = 48; e <= 57; e++) b[e] = 1;
       for (let e = 65; e <= 90; e++) b[e] = 1;
       for (let e = 97; e <= 122; e++) b[e] = 1;
       b[45] = 1;
       b[46] = 1;
       b[95] = 1;
-      function re(e) {
-        let o = {}, t = e.toString();
+      function ne(e) {
+        let n = {}, t = e.toString();
         t = t.replace(/\r\n?/mg, `
 `);
-        let n;
-        for (; (n = te.exec(t)) != null; ) {
-          let r = n[1], s = n[2] || "";
+        let o;
+        for (; (o = re.exec(t)) != null; ) {
+          let r = o[1], s = o[2] || "";
           s = s.trim();
           let i = s[0];
           s = s.replace(/^(['"`])([\s\S]*)\1$/mg, "$2"), i === '"' && (s = s.replace(/\\n/g, `
-`), s = s.replace(/\\r/g, "\r")), o[r] = s;
+`), s = s.replace(/\\r/g, "\r")), n[r] = s;
         }
-        return o;
+        return n;
       }
       function w(e) {
         return e <= 32 ? e === 32 || e >= 9 && e <= 13 : e >= 160 && (e === 160 || e === 5760 || e >= 8192 && e <= 8202 || e === 8232 || e === 8233 || e === 8239 || e === 8287 || e === 12288 || e === 65279);
       }
-      function O(e) {
+      function q(e) {
         return e === 10 || e === 8232 || e === 8233;
       }
       function oe(e) {
-        let o = {}, t = typeof e == "string" ? e : e.toString();
+        let n = {}, t = typeof e == "string" ? e : e.toString();
         t.indexOf("\r") !== -1 && (t = t.replace(/\r\n?/g, `
 `));
-        let n = t.length, r = 0;
-        for (; r < n; ) {
+        let o = t.length, r = 0;
+        for (; r < o; ) {
           let s = t.charCodeAt(r);
-          for (; r < n && w(s); ) r++, s = t.charCodeAt(r);
-          if (r >= n) break;
+          for (; r < o && w(s); ) r++, s = t.charCodeAt(r);
+          if (r >= o) break;
           if (s === 35) {
-            for (; r < n && !O(t.charCodeAt(r)); ) r++;
+            for (; r < o && !q(t.charCodeAt(r)); ) r++;
             continue;
           }
           let i = -1;
-          if (s === 101 && r + 6 < n && t.charCodeAt(r + 1) === 120 && t.charCodeAt(r + 2) === 112 && t.charCodeAt(r + 3) === 111 && t.charCodeAt(r + 4) === 114 && t.charCodeAt(r + 5) === 116) {
+          if (s === 101 && r + 6 < o && t.charCodeAt(r + 1) === 120 && t.charCodeAt(r + 2) === 112 && t.charCodeAt(r + 3) === 111 && t.charCodeAt(r + 4) === 114 && t.charCodeAt(r + 5) === 116) {
             let v = t.charCodeAt(r + 6);
             if (w(v)) {
               let u = r + 7;
-              for (; u < n && w(t.charCodeAt(u)); ) u++;
+              for (; u < o && w(t.charCodeAt(u)); ) u++;
               b[t.charCodeAt(u)] && (i = r + 6, r = u);
             } else s = t.charCodeAt(r);
           }
           let l = r, d = 0;
-          for (; r < n && (d = t.charCodeAt(r), b[d]); ) r++;
+          for (; r < o && (d = t.charCodeAt(r), b[d]); ) r++;
           if (r === l) {
-            for (; r < n && !O(t.charCodeAt(r)); ) r++;
+            for (; r < o && !q(t.charCodeAt(r)); ) r++;
             continue;
           }
           let p = t.slice(l, r), f = r;
-          if (r >= n && (d = 0), w(d)) do
-            r++, d = r < n ? t.charCodeAt(r) : 0;
+          if (r >= o && (d = 0), w(d)) do
+            r++, d = r < o ? t.charCodeAt(r) : 0;
           while (w(d));
           if (d === 61) r++;
-          else if (d === 58 && r === f && r + 1 < n && w(t.charCodeAt(r + 1))) r += 2;
+          else if (d === 58 && r === f && r + 1 < o && w(t.charCodeAt(r + 1))) r += 2;
           else {
-            for (r = i === -1 ? f : i; r < n && !O(t.charCodeAt(r)); ) r++;
+            for (r = i === -1 ? f : i; r < o && !q(t.charCodeAt(r)); ) r++;
             continue;
           }
           let c = r, a = r;
-          for (; a < n && w(t.charCodeAt(a)); ) a++;
-          let g = t.charCodeAt(a), h, y = false;
-          if (g === 39 || g === 34 || g === 96) {
+          for (; a < o && w(t.charCodeAt(a)); ) a++;
+          let h = t.charCodeAt(a), g, y = false;
+          if (h === 39 || h === 34 || h === 96) {
             let v = t[a], u = t.indexOf(v, a + 1), m = -1, C = -1;
             for (; u !== -1; ) {
-              let q = t.charCodeAt(u - 1) === 92, E = u + 1;
-              for (; E < n && !O(t.charCodeAt(E)) && w(t.charCodeAt(E)); ) E++;
-              if ((E === n || O(t.charCodeAt(E)) || t.charCodeAt(E) === 35) && (m = u, C = E), !q) break;
+              let O = t.charCodeAt(u - 1) === 92, E = u + 1;
+              for (; E < o && !q(t.charCodeAt(E)) && w(t.charCodeAt(E)); ) E++;
+              if ((E === o || q(t.charCodeAt(E)) || t.charCodeAt(E) === 35) && (m = u, C = E), !O) break;
               u = t.indexOf(v, u + 1);
             }
             if (m !== -1) {
-              if (h = t.slice(a + 1, m), r = C, t.charCodeAt(r) === 35) for (; r < n && !O(t.charCodeAt(r)); ) r++;
+              if (g = t.slice(a + 1, m), r = C, t.charCodeAt(r) === 35) for (; r < o && !q(t.charCodeAt(r)); ) r++;
               y = true;
             }
           }
           if (!y) {
             let v = t.indexOf(`
 `, c);
-            v === -1 && (v = n);
+            v === -1 && (v = o);
             let u;
-            if (n < 4096) u = t.indexOf("#", c), (u === -1 || u > v) && (u = v);
+            if (o < 4096) u = t.indexOf("#", c), (u === -1 || u > v) && (u = v);
             else for (u = c; u < v && t.charCodeAt(u) !== 35; ) u++;
             let m = c, C = u;
             for (; m < C && w(t.charCodeAt(m)); ) m++;
             for (; C > m && w(t.charCodeAt(C - 1)); ) C--;
-            let q = t.charCodeAt(m);
-            if (C - m >= 2 && (q === 39 || q === 34 || q === 96) && t.charCodeAt(C - 1) === q ? h = t.slice(m + 1, C - 1) : h = t.slice(m, C), r = u, u < v) for (; r < n && !O(t.charCodeAt(r)); ) r++;
+            let O = t.charCodeAt(m);
+            if (C - m >= 2 && (O === 39 || O === 34 || O === 96) && t.charCodeAt(C - 1) === O ? g = t.slice(m + 1, C - 1) : g = t.slice(m, C), r = u, u < v) for (; r < o && !q(t.charCodeAt(r)); ) r++;
           }
-          g === 34 && (y || a < r) && h.indexOf("\\") !== -1 && (h = h.replace(/\\n/g, `
-`).replace(/\\r/g, "\r")), o[p] = h;
+          h === 34 && (y || a < r) && g.indexOf("\\") !== -1 && (g = g.replace(/\\n/g, `
+`).replace(/\\r/g, "\r")), n[p] = g;
         }
-        return o;
+        return n;
       }
-      function ne(e, o) {
-        return o && k(o.fast) ? oe(e) : re(e);
+      function se(e, n) {
+        return n && $(n.fast) ? oe(e) : ne(e);
       }
       function T(e) {
         console.log(`\u2506 ${e}`);
       }
-      function se(e) {
+      function ie(e) {
         console.error(`\u25C7 ${e}`);
       }
       function V(e) {
-        return e[0] === "~" ? j.join(z4.homedir(), e.slice(1)) : e;
+        return e[0] === "~" ? S.join(Z.homedir(), e.slice(1)) : e;
       }
-      function ie(e = {}) {
-        return { ...B(), ...e };
+      function ce(e = {}) {
+        let n = { ...e };
+        for (let t of Object.keys(n)) n[t] === void 0 && delete n[t];
+        return { ...B(), ...n };
       }
-      function ce(e) {
-        e = ie(e);
-        let o = j.resolve(process.cwd(), ".env"), t = "utf8", n = process.env;
-        e && e.processEnv != null && (n = e.processEnv);
-        let r = k(e && e.debug);
+      function ae(e) {
+        e = ce(e);
+        let n = S.resolve(process.cwd(), ".env"), t = "utf8", o = process.env;
+        e && e.processEnv != null && (o = e.processEnv);
+        let r = $(e && e.debug);
         e && e.encoding ? t = e.encoding : r && T("no encoding is specified (UTF-8 is used by default)");
-        let s = [o];
+        let s = [n];
         if (e && e.path) if (!Array.isArray(e.path)) s = [V(e.path)];
         else {
           s = [];
@@ -23462,100 +23513,100 @@ var require_dist2 = __commonJS({
         }
         let i, l = {}, d = { fast: e.fast };
         for (let c of s) try {
-          let a = A.parse(Y.readFileSync(c, { encoding: t }), d);
+          let a = A.parse(z4.readFileSync(c, { encoding: t }), d);
           A.populate(l, a, e);
         } catch (a) {
           r && T(`failed to load ${c} ${a.message}`), i = a;
         }
-        let p = A.populate(n, l, e), f = k(Object.prototype.hasOwnProperty.call(e, "quiet") ? e.quiet : B(n).quiet);
+        let p = A.populate(o, l, e), f = $(Object.prototype.hasOwnProperty.call(e, "quiet") ? e.quiet : B(o).quiet);
         if (r || !f) {
           let c = Object.keys(p).length, a = [];
-          for (let g of s) try {
-            let h = j.relative(process.cwd(), g instanceof Z ? ee(g) : g);
-            a.push(h);
-          } catch (h) {
-            r && T(`failed to load ${g} ${h.message}`), i = h;
+          for (let h of s) try {
+            let g = S.relative(process.cwd(), h instanceof ee ? te(h) : h);
+            a.push(g);
+          } catch (g) {
+            r && T(`failed to load ${h} ${g.message}`), i = g;
           }
-          se(`injected env (${c}) from ${a.join(",")}`);
+          ie(`injected env (${c}) from ${a.join(",")}`);
         }
         return i ? { parsed: l, error: i } : { parsed: l };
       }
-      function ae(e) {
+      function le(e) {
         return A.configDotenv(e);
       }
-      function le(e, o, t = {}) {
-        let n = !!(t && t.debug), r = !!(t && t.override), s = {};
-        if (e === null || typeof e != "object" || o === null || typeof o != "object") {
+      function fe(e, n, t = {}) {
+        let o = $(t && t.debug), r = $(t && t.override), s = {};
+        if (e === null || typeof e != "object" || n === null || typeof n != "object") {
           let i = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
           throw i.code = "OBJECT_REQUIRED", i;
         }
-        for (let i of Object.keys(o)) Object.prototype.hasOwnProperty.call(e, i) ? (r === true && (e[i] = o[i], s[i] = o[i]), n && T(r === true ? `"${i}" is already defined and WAS overwritten` : `"${i}" is already defined and was NOT overwritten`)) : (e[i] = o[i], s[i] = o[i]);
+        for (let i of Object.keys(n)) Object.prototype.hasOwnProperty.call(e, i) ? (r === true && (e[i] = n[i], s[i] = n[i]), o && T(r === true ? `"${i}" is already defined and WAS overwritten` : `"${i}" is already defined and was NOT overwritten`)) : (e[i] = n[i], s[i] = n[i]);
         return s;
       }
-      var A = { configDotenv: ce, config: ae, parse: ne, populate: le };
+      var A = { configDotenv: ae, config: le, parse: se, populate: fe };
       x.exports.configDotenv = A.configDotenv;
       x.exports.config = A.config;
       x.exports.parse = A.parse;
       x.exports.populate = A.populate;
       x.exports = A;
     });
-    var M = I((Te, W) => {
-      var _ = __require("child_process"), fe = __require("fs"), L = __require("path");
-      function ue(e) {
-        let o = ['"'], t = 0;
-        for (let n of e) {
-          if (n === "\\") {
+    var M = k((Te, W) => {
+      var _ = __require("child_process"), ue = __require("fs"), L = __require("path");
+      function de(e) {
+        let n = ['"'], t = 0;
+        for (let o of e) {
+          if (o === "\\") {
             t++;
             continue;
           }
-          n === '"' ? o.push("\\".repeat(t * 2 + 1), '"') : o.push("\\".repeat(t), n), t = 0;
+          o === '"' ? n.push("\\".repeat(t * 2 + 1), '"') : n.push("\\".repeat(t), o), t = 0;
         }
-        return o.push("\\".repeat(t * 2), '"'), o.join("");
+        return n.push("\\".repeat(t * 2), '"'), n.join("");
       }
-      function H(e, o = 1) {
-        for (let t = 0; t < o; t++) {
-          let n = [];
+      function H(e, n = 1) {
+        for (let t = 0; t < n; t++) {
+          let o = [];
           for (let r of e) {
             let s = r.charCodeAt(0), i = s >= 48 && s <= 57 || s >= 65 && s <= 90 || s >= 97 && s <= 122, l = "\\/:._-".includes(r);
-            !i && !l && s < 128 && n.push("^"), n.push(r);
+            !i && !l && s < 128 && o.push("^"), o.push(r);
           }
-          e = n.join("");
+          e = o.join("");
         }
         return e;
       }
-      function P(e, o) {
-        let t = Object.keys(e).reverse().find((n) => n.toUpperCase() === o);
+      function P(e, n) {
+        let t = Object.keys(e).reverse().find((o) => o.toUpperCase() === n);
         return t === void 0 ? void 0 : e[t];
       }
-      function de(e, o, t) {
-        let n = (P(o, "PATHEXT") || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean), s = n.some((l) => e.toLowerCase().endsWith(l.toLowerCase())) ? ["", ...n] : [...n, ""], i = /[\\/]/.test(e) ? [t] : [t, ...(P(o, "PATH") || "").split(";")];
+      function pe(e, n, t) {
+        let o = (P(n, "PATHEXT") || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean), s = o.some((l) => e.toLowerCase().endsWith(l.toLowerCase())) ? ["", ...o] : [...o, ""], i = /[\\/]/.test(e) ? [t] : [t, ...(P(n, "PATH") || "").split(";")];
         for (let l of i) for (let d of s) {
           let p = L.resolve(t, l.replace(/^"|"$/g, ""), e + d);
           try {
-            if (fe.statSync(p).isFile()) return p;
+            if (ue.statSync(p).isFile()) return p;
           } catch {
           }
         }
       }
-      function pe(e, o, t) {
-        if (process.platform !== "win32") return _.spawn(e, o, t);
-        let n = t.env || process.env, r = de(e, n, t.cwd || process.cwd());
-        if (r && /\.(?:exe|com)$/i.test(r)) return _.spawn(r, o, t);
+      function he(e, n, t) {
+        if (process.platform !== "win32") return _.spawn(e, n, t);
+        let o = t.env || process.env, r = pe(e, o, t.cwd || process.cwd());
+        if (r && /\.(?:exe|com)$/i.test(r)) return _.spawn(r, n, t);
         let s = /\.(?:bat|cmd)$/i.test(r || e), i = [H(L.normalize(r || e))];
-        for (let d of o) i.push(H(ue(d), s ? 2 : 1));
+        for (let d of n) i.push(H(de(d), s ? 2 : 1));
         let l = i.join(" ");
-        return _.spawn(P(n, "COMSPEC") || "cmd.exe", ["/d", "/v:off", "/s", "/c", `"${l}"`], { ...t, windowsVerbatimArguments: true });
+        return _.spawn(P(o, "COMSPEC") || "cmd.exe", ["/d", "/v:off", "/s", "/c", `"${l}"`], { ...t, windowsVerbatimArguments: true });
       }
-      W.exports = pe;
+      W.exports = he;
     });
-    var K = I(($e, F) => {
-      var he = __require("fs"), ge = __require("os"), Q = __require("path"), me = __require("child_process"), ve = M(), R = N(), { optionsFromEnv: Ce } = S();
-      function $() {
+    var X = k(($e, F) => {
+      var ge = __require("fs"), me = __require("os"), Q = __require("path"), ve = __require("child_process"), Ce = M(), R = N(), { optionsFromEnv: J } = I();
+      function D() {
         console.log(["Usage: dotenv run [--help] [-q|--quiet] [--debug] [--override] [--fast] [-f|--file <paths>] [--] <command> [args...]", "", "Run a command with environment variables from a .env file.", "Place dotenv options before the command; all following arguments go to the command.", "", "Options:", "  -f, --file <paths>  .env paths, comma-separated or repeated (default: .env)", "  -q, --quiet suppress the injected env message", "  --debug     enable debug logging", "  --override  override existing environment variables", "  --fast      use the faster character-scanner parser", "", "Environment variables (DOTENV_CONFIG_* names remain as fallbacks):", "  DOTENV_PATH, DOTENV_ENCODING, DOTENV_QUIET,", "  DOTENV_DEBUG, DOTENV_OVERRIDE,", "  DOTENV_FAST"].join(`
 `));
       }
       function we(e) {
-        let o = [], t = false, n, r, s, i, l = -1;
+        let n = [], t = false, o, r, s, i, l = -1;
         for (let p = 0; p < e.length; p++) {
           let f = e[p];
           if (f === "--") {
@@ -23564,7 +23615,7 @@ var require_dist2 = __commonJS({
           }
           if (f === "--help" || f === "-h") return { help: true };
           if (f === "--quiet" || f === "-q") {
-            n = true;
+            o = true;
             continue;
           }
           if (f === "--debug") {
@@ -23580,11 +23631,11 @@ var require_dist2 = __commonJS({
             continue;
           }
           if (f === "-f" || f === "--file" || f.startsWith("-f=") || f.startsWith("--file=")) {
-            let c = f.indexOf("="), a = c === -1 ? f : f.slice(0, c), g = c === -1 ? e[++p] : f.slice(c + 1);
-            if (!g || g === "--") return { error: `${a} requires a path` };
-            let h = g.split(",").map((y) => y.trim()).filter(Boolean);
-            if (h.length === 0) return { error: `${a} requires a path` };
-            o.push(...h), t = true;
+            let c = f.indexOf("="), a = c === -1 ? f : f.slice(0, c), h = c === -1 ? e[++p] : f.slice(c + 1);
+            if (!h || h === "--") return { error: `${a} requires a path` };
+            let g = h.split(",").map((y) => y.trim()).filter(Boolean);
+            if (g.length === 0) return { error: `${a} requires a path` };
+            n.push(...g), t = true;
             continue;
           }
           if (f.startsWith("-")) return { error: `unknown option: ${f}` };
@@ -23592,67 +23643,67 @@ var require_dist2 = __commonJS({
           break;
         }
         let d = l === -1 ? [] : e.slice(l);
-        return { paths: o, pathSet: t, quiet: n, debug: r, override: s, fast: i, command: d };
+        return { paths: n, pathSet: t, quiet: o, debug: r, override: s, fast: i, command: d };
       }
       function Ae(e) {
-        return e[0] === "~" ? Q.join(ge.homedir(), e.slice(1)) : e;
+        return e[0] === "~" ? Q.join(me.homedir(), e.slice(1)) : e;
       }
       function Ee(e) {
-        let o = Ce(), t = { encoding: o.encoding || "utf8", quiet: o.quiet === true, debug: o.debug === true, override: o.override === true, fast: o.fast === true, paths: [".env"], defaultPath: true };
-        return o.path != null && (t.paths = [o.path], t.defaultPath = false), e.pathSet && (t.paths = e.paths, t.defaultPath = false), e.quiet != null && (t.quiet = e.quiet), e.debug != null && (t.debug = e.debug), e.override != null && (t.override = e.override), e.fast != null && (t.fast = e.fast), t;
+        let n = J(), t = { encoding: n.encoding || "utf8", quiet: n.quiet, debug: n.debug === true, override: n.override === true, fast: n.fast === true, paths: [".env"], defaultPath: true };
+        return n.path != null && (t.paths = [n.path], t.defaultPath = false), e.pathSet && (t.paths = e.paths, t.defaultPath = false), e.quiet != null && (t.quiet = e.quiet), e.debug != null && (t.debug = e.debug), e.override != null && (t.override = e.override), e.fast != null && (t.fast = e.fast), t;
       }
       function be(e) {
-        let o = {}, t = [], n = { override: e.override, debug: e.debug };
+        let n = {}, t = [], o = { override: e.override, debug: e.debug };
         for (let s of e.paths) {
           let i = Q.resolve(process.cwd(), Ae(s));
           try {
-            let l = R.parse(he.readFileSync(i, { encoding: e.encoding }), { fast: e.fast });
-            R.populate(o, l, n), t.push(s);
+            let l = R.parse(ge.readFileSync(i, { encoding: e.encoding }), { fast: e.fast });
+            R.populate(n, l, o), t.push(s);
           } catch (l) {
             if (e.debug && console.log(`\u2506 failed to load ${s} ${l.message}`), !(e.defaultPath && l.code === "ENOENT")) throw l;
           }
         }
-        return { injected: R.populate(process.env, o, n), loadedPaths: t };
+        return { injected: R.populate(process.env, n, o), loadedPaths: t };
       }
-      function J(e) {
-        let o = e[0];
-        if (o === "--help" || o === "-h") {
-          $();
+      function K(e) {
+        let n = e[0];
+        if (n === "--help" || n === "-h") {
+          D();
           return;
         }
-        if (o !== "run") {
-          $(), process.exitCode = 1;
+        if (n !== "run") {
+          D(), process.exitCode = 1;
           return;
         }
         let t = we(e.slice(1));
         if (t.help) {
-          $();
+          D();
           return;
         }
         if (t.error) {
-          console.error(`dotenv: ${t.error}`), $(), process.exitCode = 1;
+          console.error(`dotenv: ${t.error}`), D(), process.exitCode = 1;
           return;
         }
         if (t.command.length === 0) {
-          $(), process.exitCode = 1;
+          D(), process.exitCode = 1;
           return;
         }
-        let n = Ee(t);
+        let o = Ee(t);
         try {
-          let c = be(n);
-          if (!n.quiet) {
-            let a = `\u25C7 injected env (${Object.keys(c.injected).length})`;
-            c.loadedPaths.length > 0 && (a += ` from ${c.loadedPaths.join(", ")}`), console.error(a);
+          let c = be(o);
+          if (!(o.quiet == null ? J().quiet : o.quiet)) {
+            let h = `\u25C7 injected env (${Object.keys(c.injected).length})`;
+            c.loadedPaths.length > 0 && (h += ` from ${c.loadedPaths.join(", ")}`), console.error(h);
           }
         } catch (c) {
           console.error(`dotenv: ${c.message}`), process.exitCode = 1;
           return;
         }
-        let r = !!process.stdin.isTTY, s = process.platform !== "win32" && !r, i = ve(t.command[0], t.command.slice(1), { stdio: "inherit", detached: s }), l = /* @__PURE__ */ new Map(), d = 0;
+        let r = !!process.stdin.isTTY, s = process.platform !== "win32" && !r, i = Ce(t.command[0], t.command.slice(1), { stdio: "inherit", detached: s }), l = /* @__PURE__ */ new Map(), d = 0;
         function p(c) {
           if (!(!i.pid || i.exitCode !== null || i.signalCode !== null)) {
             if (process.platform === "win32") {
-              me.spawnSync("taskkill", ["/pid", String(i.pid), "/T", "/F"], { stdio: "ignore" });
+              ve.spawnSync("taskkill", ["/pid", String(i.pid), "/T", "/F"], { stdio: "ignore" });
               return;
             }
             try {
@@ -23685,17 +23736,17 @@ var require_dist2 = __commonJS({
           }, 1e3), process.kill(process.pid, a));
         });
       }
-      F.exports = J;
-      __require.main === F && J(process.argv.slice(2));
+      F.exports = K;
+      __require.main === F && K(process.argv.slice(2));
     });
-    var D = N();
-    var Oe = K();
-    module.exports = D;
-    module.exports.config = D.config;
-    module.exports.configDotenv = D.configDotenv;
-    module.exports.parse = D.parse;
-    module.exports.populate = D.populate;
-    __require.main === module && Oe(process.argv.slice(2));
+    var j = N();
+    var qe = X();
+    module.exports = j;
+    module.exports.config = j.config;
+    module.exports.configDotenv = j.configDotenv;
+    module.exports.parse = j.parse;
+    module.exports.populate = j.populate;
+    __require.main === module && qe(process.argv.slice(2));
   }
 });
 
@@ -27480,7 +27531,7 @@ function declaredDialect(schema, remedy) {
   throw new Error(`JSON Schema declares an unsupported dialect ("$schema": "${schema.$schema.slice(0, 200)}"). The default validator supports JSON Schema 2020-12, 2019-09, draft-07, and draft-06; ${remedy}`);
 }
 
-// node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs
+// node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs
 var z = __toESM(require_v4(), 1);
 var LATEST_PROTOCOL_VERSION = "2025-11-25";
 var SUPPORTED_PROTOCOL_VERSIONS = [
@@ -43012,6 +43063,7 @@ __export(util_exports, {
   required: () => required,
   safeExtend: () => safeExtend,
   shallowClone: () => shallowClone,
+  sizeCaps: () => sizeCaps,
   slugify: () => slugify,
   stringifyPrimitive: () => stringifyPrimitive,
   toZod: () => toZod,
@@ -43531,6 +43583,18 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start, inst) {
   var _a3;
   for (let i = start; i < issues.length; i++) {
@@ -44951,7 +45015,7 @@ ${content.join("\n")}
 var version = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 6
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -45707,6 +45771,31 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
     return payload;
   };
 });
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c) => c[0]));
+  const parse4 = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start].continue = false;
+          attachSchema(payload.issues, start, inst);
+          return payload;
+        }
+      }
+    }
+    return parse4(payload, ctx);
+  };
+}
+var arraySize = (input2) => Array.isArray(input2) ? input2.length : -1;
+var mapSize = (input2) => input2 instanceof Map ? input2.size : -1;
+var setSize = (input2) => input2 instanceof Set ? input2.size : -1;
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -45750,6 +45839,7 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
     }
     return payload;
   };
+  capSize(inst, arraySize);
 });
 function handlePropertyResult(result, final, key, input2, optin, optout) {
   const isPresent = key in input2;
@@ -46706,6 +46796,7 @@ var $ZodMap = /* @__PURE__ */ $constructor("$ZodMap", (inst, def) => {
       return Promise.all(proms).then(() => payload);
     return payload;
   };
+  capSize(inst, mapSize);
 });
 function handleMapResult(keyResult, valueResult, final, key, input2, inst, ctx) {
   if (keyResult.issues.length) {
@@ -46772,6 +46863,7 @@ var $ZodSet = /* @__PURE__ */ $constructor("$ZodSet", (inst, def) => {
       return Promise.all(proms).then(() => payload);
     return payload;
   };
+  capSize(inst, setSize);
 });
 function handleSetResult(result, final) {
   if (result.issues.length) {
@@ -56302,9 +56394,15 @@ function generateNullableCheck(doc, ctx, schema, accessor, buildsValue = true) {
   doc.write(`}`);
   return outputVar;
 }
+function generateSizeGate(doc, schema, size) {
+  for (const [max, check2] of sizeCaps(schema._zod.def.checks)) {
+    doc.write(`if (${size} > ${numericOperand(max, check2._zod.def.check)}) return INVALID;`);
+  }
+}
 function generateArrayCheck(doc, ctx, schema, accessor, buildsValue = true) {
   const def = schema._zod.def;
   doc.write(`if (!Array.isArray(${accessor})) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.length`);
   const outputVar = buildsValue ? newVar(ctx) : null;
   const iVar = newVar(ctx);
   const elemVar = newVar(ctx);
@@ -56704,6 +56802,7 @@ function literalPropertyKey(ctx, key) {
 function generateMapCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Map)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const kVar = newVar(ctx);
   const valVar = newVar(ctx);
@@ -56720,6 +56819,7 @@ function generateMapCheck(doc, ctx, schema, accessor) {
 function generateSetCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Set)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const valVar = newVar(ctx);
   doc.write(`const ${outputVar} = new Set();`);
@@ -76298,7 +76398,7 @@ function registerVisitTools(server, client2, patients2) {
 }
 
 // src/version.ts
-var VERSION = "1.3.6";
+var VERSION = "1.3.7";
 
 // src/index.ts
 var dotenvCandidates = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/myatriumhealth-mcp",
-  "version": "1.3.6",
+  "version": "1.3.7",
   "description": "MCP server for MyAtriumHealth (Atrium Health's Epic MyChart patient portal) via the fetchproxy browser bridge.",
   "type": "module",
   "bin": {

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/myatriumhealth-mcp",
     "source": "github"
   },
-  "version": "1.3.6",
+  "version": "1.3.7",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/myatriumhealth-mcp",
-      "version": "1.3.6",
+      "version": "1.3.7",
       "transport": {
         "type": "stdio"
       },