@chrischall/office-outlook-mcp 0.7.0 → 0.8.0

package/dist/bundle.js

@@ -125,10 +125,10 @@ var init_caller = __esm({
   }
 });
 
-// node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
+// node_modules/@modelcontextprotocol/server/dist/chunk-vYduTEsO.mjs
 var __create2, __defProp2, __getOwnPropDesc2, __getOwnPropNames2, __getProtoOf2, __hasOwnProp2, __commonJSMin, __exportAll, __copyProps2, __toESM2;
-var init_chunk_Br0eD_fh = __esm({
-  "node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs"() {
+var init_chunk_vYduTEsO = __esm({
+  "node_modules/@modelcontextprotocol/server/dist/chunk-vYduTEsO.mjs"() {
     __create2 = Object.create;
     __defProp2 = Object.defineProperty;
     __getOwnPropDesc2 = Object.getOwnPropertyDescriptor;
@@ -170,7 +170,7 @@ var init_chunk_Br0eD_fh = __esm({
   }
 });
 
-// node_modules/@modelcontextprotocol/server/dist/dialects-DoSzNhcb.mjs
+// node_modules/@modelcontextprotocol/server/dist/dialects-CDpMbily.mjs
 function declares2019Dialect($schema) {
   return typeof $schema === "string" && DRAFT_2019_09_URIS.has($schema.replace(/#$/, ""));
 }
@@ -183,8 +183,8 @@ function declaredDialect(schema, remedy) {
   throw new Error(`JSON Schema declares an unsupported dialect ("$schema": "${schema.$schema.slice(0, 200)}"). The default validator supports JSON Schema 2020-12, 2019-09, draft-07, and draft-06; ${remedy}`);
 }
 var DRAFT_2020_12_URIS, DRAFT_2019_09_URIS, DRAFT_07_URIS, DRAFT_06_URIS;
-var init_dialects_DoSzNhcb = __esm({
-  "node_modules/@modelcontextprotocol/server/dist/dialects-DoSzNhcb.mjs"() {
+var init_dialects_CDpMbily = __esm({
+  "node_modules/@modelcontextprotocol/server/dist/dialects-CDpMbily.mjs"() {
     DRAFT_2020_12_URIS = /* @__PURE__ */ new Set(["https://json-schema.org/draft/2020-12/schema", "http://json-schema.org/draft/2020-12/schema"]);
     DRAFT_2019_09_URIS = /* @__PURE__ */ new Set(["https://json-schema.org/draft/2019-09/schema", "http://json-schema.org/draft/2019-09/schema"]);
     DRAFT_07_URIS = /* @__PURE__ */ new Set(["https://json-schema.org/draft-07/schema", "http://json-schema.org/draft-07/schema"]);
@@ -20606,10 +20606,10 @@ var init_v4 = __esm({
   }
 });
 
-// node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs
-var LATEST_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, PROTOCOL_VERSION_META_KEY, CLIENT_INFO_META_KEY, SERVER_INFO_META_KEY, CLIENT_CAPABILITIES_META_KEY, SUBSCRIPTION_ID_META_KEY, LOG_LEVEL_META_KEY, JSONRPC_VERSION, JSONValueSchema, JSONObjectSchema, JSONArraySchema, ProgressTokenSchema, CursorSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultMetaObjectSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, JSONRPCNotificationSchema, JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, DiscoverRequestSchema, DiscoverResultSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, SubscriptionFilterSchema, SubscriptionsListenRequestParamsSchema, SubscriptionsListenRequestSchema, SubscriptionsAcknowledgedNotificationParamsSchema, SubscriptionsAcknowledgedNotificationSchema, SubscriptionsListenResultMetaSchema, SubscriptionsListenResultSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, TaskCreationParamsSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema, SafeUrlSchema, OAuthProtectedResourceMetadataSchema, OAuthMetadataSchema, OpenIdProviderMetadataSchema, OpenIdProviderDiscoveryMetadataSchema, OAuthTokensSchema, IdJagTokenExchangeResponseSchema, OAuthErrorResponseSchema, OptionalSafeUrlSchema, OAuthClientMetadataSchema, OAuthClientInformationSchema, OAuthClientInformationFullSchema, OAuthClientRegistrationErrorSchema, OAuthTokenRevocationRequestSchema;
-var init_auth_BNDyLTqp = __esm({
-  "node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs"() {
+// node_modules/@modelcontextprotocol/core/dist/schemas-DscsoNZN.mjs
+var LATEST_PROTOCOL_VERSION, SUPPORTED_PROTOCOL_VERSIONS, RELATED_TASK_META_KEY, PROTOCOL_VERSION_META_KEY, CLIENT_INFO_META_KEY, SERVER_INFO_META_KEY, CLIENT_CAPABILITIES_META_KEY, SUBSCRIPTION_ID_META_KEY, LOG_LEVEL_META_KEY, JSONRPC_VERSION, JSONValueSchema, JSONObjectSchema, JSONArraySchema, ProgressTokenSchema, CursorSchema, TaskMetadataSchema, RelatedTaskMetadataSchema, RequestMetaSchema, BaseRequestParamsSchema, TaskAugmentedRequestParamsSchema, RequestSchema, NotificationsParamsSchema, NotificationSchema, ResultMetaObjectSchema, ResultSchema, RequestIdSchema, JSONRPCRequestSchema, JSONRPCNotificationSchema, JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema, JSONRPCMessageSchema, JSONRPCResponseSchema, EmptyResultSchema, CancelledNotificationParamsSchema, CancelledNotificationSchema, IconSchema, IconsSchema, BaseMetadataSchema, ImplementationSchema, FormElicitationCapabilitySchema, ElicitationCapabilitySchema, ClientTasksCapabilitySchema, ServerTasksCapabilitySchema, ClientCapabilitiesSchema, InitializeRequestParamsSchema, InitializeRequestSchema, ServerCapabilitiesSchema, InitializeResultSchema, InitializedNotificationSchema, DiscoverRequestSchema, DiscoverResultSchema, PingRequestSchema, ProgressSchema, ProgressNotificationParamsSchema, ProgressNotificationSchema, PaginatedRequestParamsSchema, PaginatedRequestSchema, PaginatedResultSchema, ResourceContentsSchema, TextResourceContentsSchema, Base64Schema, BlobResourceContentsSchema, RoleSchema, AnnotationsSchema, ResourceSchema, ResourceTemplateSchema, ListResourcesRequestSchema, ListResourcesResultSchema, ListResourceTemplatesRequestSchema, ListResourceTemplatesResultSchema, ResourceRequestParamsSchema, ReadResourceRequestParamsSchema, ReadResourceRequestSchema, ReadResourceResultSchema, ResourceListChangedNotificationSchema, SubscribeRequestParamsSchema, SubscribeRequestSchema, UnsubscribeRequestParamsSchema, UnsubscribeRequestSchema, SubscriptionFilterSchema, SubscriptionsListenRequestParamsSchema, SubscriptionsListenRequestSchema, SubscriptionsAcknowledgedNotificationParamsSchema, SubscriptionsAcknowledgedNotificationSchema, SubscriptionsListenResultMetaSchema, SubscriptionsListenResultSchema, ResourceUpdatedNotificationParamsSchema, ResourceUpdatedNotificationSchema, PromptArgumentSchema, PromptSchema, ListPromptsRequestSchema, ListPromptsResultSchema, GetPromptRequestParamsSchema, GetPromptRequestSchema, TextContentSchema, ImageContentSchema, AudioContentSchema, ToolUseContentSchema, EmbeddedResourceSchema, ResourceLinkSchema, ContentBlockSchema, PromptMessageSchema, GetPromptResultSchema, PromptListChangedNotificationSchema, ToolAnnotationsSchema, ToolExecutionSchema, ToolSchema, ListToolsRequestSchema, ListToolsResultSchema, CallToolResultSchema, CompatibilityCallToolResultSchema, CallToolRequestParamsSchema, CallToolRequestSchema, ToolListChangedNotificationSchema, ListChangedOptionsBaseSchema, LoggingLevelSchema, SetLevelRequestParamsSchema, SetLevelRequestSchema, LoggingMessageNotificationParamsSchema, LoggingMessageNotificationSchema, ModelHintSchema, ModelPreferencesSchema, ToolChoiceSchema, ToolResultContentSchema, SamplingContentSchema, SamplingMessageContentBlockSchema, SamplingMessageSchema, CreateMessageRequestParamsSchema, CreateMessageRequestSchema, CreateMessageResultSchema, CreateMessageResultWithToolsSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema, UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema, LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema, EnumSchemaSchema, PrimitiveSchemaDefinitionSchema, ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema, ElicitRequestParamsSchema, ElicitRequestSchema, ElicitationCompleteNotificationParamsSchema, ElicitationCompleteNotificationSchema, ElicitResultSchema, ResourceTemplateReferenceSchema, PromptReferenceSchema, CompleteRequestParamsSchema, CompleteRequestSchema, CompleteResultSchema, RootSchema, ListRootsRequestSchema, ListRootsResultSchema, RootsListChangedNotificationSchema, TaskCreationParamsSchema, TaskStatusSchema, TaskSchema, CreateTaskResultSchema, TaskStatusNotificationParamsSchema, TaskStatusNotificationSchema, GetTaskRequestSchema, GetTaskResultSchema, GetTaskPayloadRequestSchema, GetTaskPayloadResultSchema, ListTasksRequestSchema, ListTasksResultSchema, CancelTaskRequestSchema, CancelTaskResultSchema, ClientRequestSchema, ClientNotificationSchema, ClientResultSchema, ServerRequestSchema, ServerNotificationSchema, ServerResultSchema;
+var init_schemas_DscsoNZN = __esm({
+  "node_modules/@modelcontextprotocol/core/dist/schemas-DscsoNZN.mjs"() {
     init_v4();
     LATEST_PROTOCOL_VERSION = "2025-11-25";
     SUPPORTED_PROTOCOL_VERSIONS = [
@@ -21398,6 +21398,14 @@ var init_auth_BNDyLTqp = __esm({
       ListToolsResultSchema,
       SubscriptionsListenResultSchema
     ]);
+  }
+});
+
+// node_modules/@modelcontextprotocol/core/dist/auth-UMQCo-ad.mjs
+var SafeUrlSchema, OAuthProtectedResourceMetadataSchema, OAuthMetadataSchema, OpenIdProviderMetadataSchema, OpenIdProviderDiscoveryMetadataSchema, OAuthTokensSchema, IdJagTokenExchangeResponseSchema, OAuthErrorResponseSchema, OptionalSafeUrlSchema, OAuthClientMetadataSchema, OAuthClientInformationSchema, OAuthClientInformationFullSchema, OAuthClientRegistrationErrorSchema, OAuthTokenRevocationRequestSchema;
+var init_auth_UMQCo_ad = __esm({
+  "node_modules/@modelcontextprotocol/core/dist/auth-UMQCo-ad.mjs"() {
+    init_v4();
     SafeUrlSchema = url().superRefine((val, ctx) => {
       if (!URL.canParse(val)) {
         ctx.addIssue({
@@ -21553,14 +21561,15 @@ var init_auth_BNDyLTqp = __esm({
   }
 });
 
-// node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core/dist/internal.mjs
+// node_modules/@modelcontextprotocol/core/dist/internal.mjs
 var init_internal = __esm({
-  "node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core/dist/internal.mjs"() {
-    init_auth_BNDyLTqp();
+  "node_modules/@modelcontextprotocol/core/dist/internal.mjs"() {
+    init_schemas_DscsoNZN();
+    init_auth_UMQCo_ad();
   }
 });
 
-// node_modules/@modelcontextprotocol/server/dist/src-Cqbh3MYc.mjs
+// node_modules/@modelcontextprotocol/server/dist/src-DdvbAHrR.mjs
 function stampErrorBrands(instance, ctor) {
   const brands = /* @__PURE__ */ new Set();
   let current = ctor;
@@ -23791,6 +23800,7 @@ function assertCompleteRequestResourceTemplate(request) {
 function scanXMcpHeaderDeclarations(inputSchema) {
   const declarations = [];
   const seenLower = /* @__PURE__ */ new Map();
+  let numberFault;
   const visit2 = (node2, path, reachable) => {
     if (node2 === null || typeof node2 !== "object") return void 0;
     const schema = node2;
@@ -23800,7 +23810,11 @@ function scanXMcpHeaderDeclarations(inputSchema) {
       if (typeof raw !== "string" || raw.length === 0) return `${pathName(path)}: x-mcp-header MUST be a non-empty string`;
       if (!RFC9110_TOKEN.test(raw)) return `${pathName(path)}: x-mcp-header '${raw}' is not a valid RFC 9110 token (no spaces, control characters or HTTP delimiters)`;
       const type = typeof schema.type === "string" ? schema.type : void 0;
-      if (type === void 0 || !PERMITTED_X_MCP_HEADER_TYPES.has(type)) return `${pathName(path)}: x-mcp-header is only permitted on primitive-typed properties (string, integer, boolean); got ${type ?? "<none>"}`;
+      if (type === void 0 || !PERMITTED_X_MCP_HEADER_TYPES.has(type)) {
+        const fault$1 = `${pathName(path)}: x-mcp-header is only permitted on primitive-typed properties (string, integer, boolean); got ${type ?? "<none>"}`;
+        if (type !== "number") return fault$1;
+        numberFault ??= fault$1;
+      }
       const lower2 = raw.toLowerCase();
       const prior = seenLower.get(lower2);
       if (prior !== void 0) return `x-mcp-header '${raw}' is not case-insensitively unique (also declared as '${prior}')`;
@@ -23827,12 +23841,17 @@ function scanXMcpHeaderDeclarations(inputSchema) {
     }
   };
   const fault = visit2(inputSchema, [], true);
-  return fault === void 0 ? {
+  if (fault !== void 0) return {
+    valid: false,
+    reason: numberFault ?? fault
+  };
+  return numberFault === void 0 ? {
     valid: true,
     declarations
   } : {
     valid: false,
-    reason: fault
+    reason: numberFault,
+    declarations
   };
 }
 function pathName(path) {
@@ -23918,15 +23937,17 @@ function standardSchemaToJsonSchema(schema, io = "input") {
     ...result
   };
 }
-function isProvablyObjectShapedRoot(schema) {
+function isProvablyObjectShapedRoot(schema, root = schema) {
   if ("properties" in schema || "patternProperties" in schema || "additionalProperties" in schema || "required" in schema) return true;
+  const ref = typeof schema.$ref === "string" && LOCAL_DEFINITION_REF.exec(schema.$ref);
+  if (ref && root[ref[1]]?.[ref[2]]?.type === "object") return true;
   for (const key of [
     "oneOf",
     "anyOf",
     "allOf"
   ]) {
     const members2 = schema[key];
-    if (Array.isArray(members2) && members2.length > 0) return members2.every((m) => m !== null && typeof m === "object" && (m.type === "object" || isProvablyObjectShapedRoot(m)));
+    if (Array.isArray(members2) && members2.length > 0) return members2.every((m) => m !== null && typeof m === "object" && (m.type === "object" || isProvablyObjectShapedRoot(m, "$id" in m ? {} : root)));
   }
   return false;
 }
@@ -24336,11 +24357,11 @@ function normalizeRawShapeSchema(schema) {
   if (!isStandardSchema(schema)) throw new TypeError("inputSchema/outputSchema/argsSchema must be a Standard Schema (e.g. z.object({...})) or a raw Zod shape ({ field: z.string() }).");
   return schema;
 }
-var BRANDS, OAuthError, SdkErrorCode, SdkError, SdkHttpError, FIRST_MODERN_PROTOCOL_VERSION, SUPPORTED_MODERN_PROTOCOL_VERSIONS, TOOL_RESULT_FOREIGN_FAMILY_KEYS, memo$1, REF_REWRITE_DATA_POSITION_KEYS, REF_REWRITE_NAME_MAP_KEYS, requestMethodKeys$1, notificationMethodKeys$1, resultMethodKeys, maps$1, rev2025RequestMethods, rev2025NotificationMethods, NOT_IN_ERA$1, rev2025Codec, memo2, CACHEABLE_RESULT_METHODS, RESULT_CACHE_HINT_FALLBACK, ProtocolErrorCode, ProtocolError, ResourceNotFoundError, UrlElicitationRequiredError, UnsupportedProtocolVersionError, MissingRequiredClientCapabilityError, DEFAULT_CACHE_TTL_MS, DEFAULT_CACHE_SCOPE, EXTENDED_RESULT_TYPE_METHODS, INPUT_REQUEST_METHODS_2026, maps, requestMethodKeys, notificationMethodKeys, rev2026RequestMethods, rev2026NotificationMethods, NOT_IN_ERA, REQUIRED_ENVELOPE_KEYS, rev2026Codec, wireResultSchemasMemo, MODERN_WIRE_REVISION, ALL_CODECS, schemas_exports3, isJSONRPCRequest, isJSONRPCNotification, isJSONRPCResultResponse, isJSONRPCErrorResponse, isInputRequiredResult, X_MCP_HEADER_KEY, RFC9110_TOKEN, PERMITTED_X_MCP_HEADER_TYPES, NON_REACHABLE_SUBSCHEMA_KEYWORDS, OBJECT_VALUED_SUBSCHEMA_KEYWORDS, HEADER_MISMATCH_ERROR_CODE, INBOUND_VALIDATION_LADDER, LADDER_ERROR_HTTP_STATUS, warnedZodFallback, JSON_SCHEMA_CONVERSION_TARGET, DATETIME_FRACTION_DIGITS, ANNOTATION_ONLY_JSON_SCHEMA_KEYWORDS, ROOT_KEYS, PROPERTY_KEYS_BY_TYPE, SUPPORTED_STRING_FORMATS, inputRequired, REQUEST_STATE_ONLY_LEG_PACING_MS, SPEC_SCHEMA_KEYS, authSchemas, _specTypeSchemas, _isSpecType, specTypeSchemas, isSpecType, DEFAULT_REQUEST_TIMEOUT_MSEC, RESERVED_ENVELOPE_META_KEYS, RETRY_PARAMS_KEYS, NO_REQUEST_STATE, writeNegotiatedProtocolVersion, Protocol, require_content_type, import_content_type, STDIO_DEFAULT_MAX_BUFFER_SIZE, ReadBuffer, TOOL_NAME_REGEX;
-var init_src_Cqbh3MYc = __esm({
-  "node_modules/@modelcontextprotocol/server/dist/src-Cqbh3MYc.mjs"() {
-    init_chunk_Br0eD_fh();
-    init_dialects_DoSzNhcb();
+var BRANDS, OAuthError, SdkErrorCode, SdkError, SdkHttpError, FIRST_MODERN_PROTOCOL_VERSION, SUPPORTED_MODERN_PROTOCOL_VERSIONS, TOOL_RESULT_FOREIGN_FAMILY_KEYS, memo$1, REF_REWRITE_DATA_POSITION_KEYS, REF_REWRITE_NAME_MAP_KEYS, requestMethodKeys$1, notificationMethodKeys$1, resultMethodKeys, maps$1, rev2025RequestMethods, rev2025NotificationMethods, NOT_IN_ERA$1, rev2025Codec, memo2, CACHEABLE_RESULT_METHODS, RESULT_CACHE_HINT_FALLBACK, ProtocolErrorCode, ProtocolError, ResourceNotFoundError, UrlElicitationRequiredError, UnsupportedProtocolVersionError, MissingRequiredClientCapabilityError, DEFAULT_CACHE_TTL_MS, DEFAULT_CACHE_SCOPE, EXTENDED_RESULT_TYPE_METHODS, INPUT_REQUEST_METHODS_2026, maps, requestMethodKeys, notificationMethodKeys, rev2026RequestMethods, rev2026NotificationMethods, NOT_IN_ERA, REQUIRED_ENVELOPE_KEYS, rev2026Codec, wireResultSchemasMemo, MODERN_WIRE_REVISION, ALL_CODECS, schemas_exports3, isJSONRPCRequest, isJSONRPCNotification, isJSONRPCResultResponse, isJSONRPCErrorResponse, isInputRequiredResult, X_MCP_HEADER_KEY, RFC9110_TOKEN, PERMITTED_X_MCP_HEADER_TYPES, NON_REACHABLE_SUBSCHEMA_KEYWORDS, OBJECT_VALUED_SUBSCHEMA_KEYWORDS, HEADER_MISMATCH_ERROR_CODE, INBOUND_VALIDATION_LADDER, LADDER_ERROR_HTTP_STATUS, warnedZodFallback, JSON_SCHEMA_CONVERSION_TARGET, LOCAL_DEFINITION_REF, DATETIME_FRACTION_DIGITS, ANNOTATION_ONLY_JSON_SCHEMA_KEYWORDS, ROOT_KEYS, PROPERTY_KEYS_BY_TYPE, SUPPORTED_STRING_FORMATS, inputRequired, REQUEST_STATE_ONLY_LEG_PACING_MS, SPEC_SCHEMA_KEYS, authSchemas, _specTypeSchemas, _isSpecType, specTypeSchemas, isSpecType, DEFAULT_REQUEST_TIMEOUT_MSEC, RESERVED_ENVELOPE_META_KEYS, RETRY_PARAMS_KEYS, NO_REQUEST_STATE, writeNegotiatedProtocolVersion, Protocol, require_content_type, import_content_type, STDIO_DEFAULT_MAX_BUFFER_SIZE, ReadBuffer, TOOL_NAME_REGEX;
+var init_src_DdvbAHrR = __esm({
+  "node_modules/@modelcontextprotocol/server/dist/src-DdvbAHrR.mjs"() {
+    init_chunk_vYduTEsO();
+    init_dialects_CDpMbily();
     init_internal();
     init_v4();
     BRANDS = /* @__PURE__ */ Symbol.for("mcp.sdk.errorBrands");
@@ -25069,8 +25090,7 @@ var init_src_Cqbh3MYc = __esm({
     PERMITTED_X_MCP_HEADER_TYPES = /* @__PURE__ */ new Set([
       "string",
       "integer",
-      "boolean",
-      "number"
+      "boolean"
     ]);
     NON_REACHABLE_SUBSCHEMA_KEYWORDS = [
       "items",
@@ -25187,6 +25207,7 @@ var init_src_Cqbh3MYc = __esm({
     };
     warnedZodFallback = false;
     JSON_SCHEMA_CONVERSION_TARGET = "draft-2020-12";
+    LOCAL_DEFINITION_REF = /^#\/(\$defs|definitions)\/([^/~%]+)$/;
     DATETIME_FRACTION_DIGITS = /\\\.\\d\{(\d+)\}/;
     ANNOTATION_ONLY_JSON_SCHEMA_KEYWORDS = /* @__PURE__ */ new Set([
       "$comment",
@@ -26253,7 +26274,7 @@ var init_src_Cqbh3MYc = __esm({
   }
 });
 
-// node_modules/@modelcontextprotocol/server/dist/ajvProvider-CEoC__sr.mjs
+// node_modules/@modelcontextprotocol/server/dist/ajvProvider-DyjnscPj.mjs
 function createDefaultAjvInstance(engineClass) {
   const ajv = new engineClass({
     strict: false,
@@ -26265,10 +26286,10 @@ function createDefaultAjvInstance(engineClass) {
   return ajv;
 }
 var require_code$1, require_scope, require_codegen, require_util, require_names, require_errors, require_boolSchema, require_rules, require_applicability, require_dataType, require_defaults, require_code, require_keyword, require_subschema, require_fast_deep_equal, require_json_schema_traverse, require_resolve, require_validate, require_validation_error, require_ref_error, require_compile, require_data, require_utils, require_schemes, require_fast_uri, require_uri, require_core$3, require_id, require_ref, require_core$2, require_limitNumber, require_multipleOf, require_ucs2length, require_limitLength, require_pattern, require_limitProperties, require_required, require_limitItems, require_equal, require_uniqueItems, require_const, require_enum, require_validation$2, require_additionalItems, require_items, require_prefixItems, require_items2020, require_contains, require_dependencies, require_propertyNames, require_additionalProperties, require_properties, require_patternProperties, require_not, require_anyOf, require_oneOf, require_allOf, require_if, require_thenElse, require_applicator$2, require_format$2, require_format$1, require_metadata, require_draft7, require_types, require_discriminator, require_json_schema_draft_07, require_ajv, require_dynamicAnchor, require_dynamicRef, require_recursiveAnchor, require_recursiveRef, require_dynamic, require_dependentRequired, require_dependentSchemas, require_limitContains, require_next, require_unevaluatedProperties, require_unevaluatedItems, require_unevaluated$1, require_schema$1, require_applicator$1, require_content$1, require_core$1, require_format, require_meta_data$1, require_validation$1, require_json_schema_2019_09, require__2019, require_draft2020, require_schema, require_applicator, require_unevaluated, require_content, require_core, require_format_annotation, require_meta_data, require_validation, require_json_schema_2020_12, require__2020, require_formats, require_limit, require_dist, import_ajv, import__2019, import__2020, import_dist, addFormats, AjvJsonSchemaValidator, Ajv;
-var init_ajvProvider_CEoC_sr = __esm({
-  "node_modules/@modelcontextprotocol/server/dist/ajvProvider-CEoC__sr.mjs"() {
-    init_chunk_Br0eD_fh();
-    init_dialects_DoSzNhcb();
+var init_ajvProvider_DyjnscPj = __esm({
+  "node_modules/@modelcontextprotocol/server/dist/ajvProvider-DyjnscPj.mjs"() {
+    init_chunk_vYduTEsO();
+    init_dialects_CDpMbily();
     require_code$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
       Object.defineProperty(exports, "__esModule", { value: true });
       exports.regexpCode = exports.getEsmExportName = exports.getProperty = exports.safeStringify = exports.stringify = exports.strConcat = exports.addCodeArg = exports.str = exports._ = exports.nil = exports._Code = exports.Name = exports.IDENTIFIER = exports._CodeOrName = void 0;
@@ -28950,6 +28971,22 @@ var init_ajvProvider_CEoC_sr = __esm({
     require_utils = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       const isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
       const isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
+      const isPort = RegExp.prototype.test.bind(/^\d*$/u);
+      const isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
+      const isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
+      const isPathCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/]$/u);
+      const isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/?]$/u);
+      const isUserinfoCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:]$/u);
+      const BYTE_HEX = new Array(256);
+      {
+        const HEX_DIGITS = "0123456789ABCDEF";
+        for (let i = 0; i < 256; i++) BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
+      }
+      function percentEncodeNonAscii(cp) {
+        if (cp < 2048) return BYTE_HEX[192 | cp >> 6] + BYTE_HEX[128 | cp & 63];
+        if (cp < 65536) return BYTE_HEX[224 | cp >> 12] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+        return BYTE_HEX[240 | cp >> 18] + BYTE_HEX[128 | cp >> 12 & 63] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      }
       function stringArrayToHexStripped(input2) {
         let acc = "";
         let code2 = 0;
@@ -28968,83 +29005,120 @@ var init_ajvProvider_CEoC_sr = __esm({
         }
         return acc;
       }
+      const isHextet = RegExp.prototype.test.bind(/^[\dA-Fa-f]{1,4}$/);
+      const isIPvFuture = RegExp.prototype.test.bind(/^[vV][\dA-Fa-f]+\.[A-Za-z\d\-._~!$&'()*+,;=:]+$/);
+      const isZoneCharacter = RegExp.prototype.test.bind(/^[A-Za-z\d\-._~]$/);
       const nonSimpleDomain = RegExp.prototype.test.bind(/[^!"$&'()*+,\-.;=_`a-z{}~]/u);
-      function consumeIsZone(buffer) {
-        buffer.length = 0;
-        return true;
-      }
-      function consumeHextets(buffer, address, output2) {
-        if (buffer.length) {
-          const hex3 = stringArrayToHexStripped(buffer);
-          if (hex3 !== "") address.push(hex3);
-          else {
-            output2.error = true;
-            return false;
+      function isZoneIdentifier(zone) {
+        if (zone.length === 0) return false;
+        for (let i = 0; i < zone.length; i++) {
+          if (isZoneCharacter(zone[i])) continue;
+          if (zone[i] === "%" && i + 2 < zone.length && isHexPair(zone.slice(i + 1, i + 3))) {
+            i += 2;
+            continue;
           }
-          buffer.length = 0;
+          return false;
         }
         return true;
       }
-      function getIPV6(input2) {
-        let tokenCount = 0;
-        const output2 = {
-          error: false,
-          address: "",
-          zone: ""
-        };
-        const address = [];
-        const buffer = [];
-        let endipv6Encountered = false;
-        let endIpv6 = false;
-        let consume = consumeHextets;
-        for (let i = 0; i < input2.length; i++) {
-          const cursor = input2[i];
-          if (cursor === "[" || cursor === "]") continue;
-          if (cursor === ":") {
-            if (endipv6Encountered === true) endIpv6 = true;
-            if (!consume(buffer, address, output2)) break;
-            if (++tokenCount > 7) {
-              output2.error = true;
-              break;
-            }
-            if (i > 0 && input2[i - 1] === ":") endipv6Encountered = true;
-            address.push(":");
-            continue;
-          } else if (cursor === "%") {
-            if (!consume(buffer, address, output2)) break;
-            consume = consumeIsZone;
-          } else {
-            buffer.push(cursor);
+      function compressIPv6ZeroRun(hextets) {
+        let bestStart = -1;
+        let bestLength = 0;
+        let runStart = -1;
+        let runLength = 0;
+        for (let i = 0; i < hextets.length; i++) if (hextets[i] === "0") {
+          if (runStart === -1) runStart = i;
+          runLength++;
+          if (runLength > bestLength) {
+            bestLength = runLength;
+            bestStart = runStart;
+          }
+        } else {
+          runStart = -1;
+          runLength = 0;
+        }
+        if (bestLength < 2) return hextets.join(":");
+        const head = hextets.slice(0, bestStart).join(":");
+        const tail = hextets.slice(bestStart + bestLength).join(":");
+        return head + "::" + tail;
+      }
+      function normalizeIPv6Address(input2) {
+        const compression = input2.indexOf("::");
+        if (compression !== -1 && input2.indexOf("::", compression + 1) !== -1) return void 0;
+        const left = compression === -1 ? input2.split(":") : input2.slice(0, compression).split(":");
+        const right = compression === -1 ? [] : input2.slice(compression + 2).split(":");
+        if (compression !== -1) {
+          if (left.length === 1 && left[0] === "") left.length = 0;
+          if (right.length === 1 && right[0] === "") right.length = 0;
+        }
+        const parts = left.concat(right);
+        let hextetCount = 0;
+        for (let i = 0; i < parts.length; i++) {
+          const part = parts[i];
+          if (part === "") return void 0;
+          if (part.indexOf(".") !== -1) {
+            if (i !== parts.length - 1 || compression !== -1 && right.length === 0 || !isIPv4(part)) return void 0;
+            hextetCount += 2;
             continue;
           }
+          if (!isHextet(part)) return void 0;
+          parts[i] = parseInt(part, 16).toString(16);
+          hextetCount++;
         }
-        if (buffer.length) if (consume === consumeIsZone) output2.zone = buffer.join("");
-        else if (endIpv6) address.push(buffer.join(""));
-        else address.push(stringArrayToHexStripped(buffer));
-        output2.address = address.join("");
-        return output2;
+        if (compression === -1) {
+          if (hextetCount !== 8) return void 0;
+          return compressIPv6ZeroRun(parts);
+        }
+        if (hextetCount >= 8) return void 0;
+        const expanded = parts.slice(0, left.length);
+        for (let i = hextetCount; i < 8; i++) expanded.push("0");
+        for (let i = left.length; i < parts.length; i++) expanded.push(parts[i]);
+        return compressIPv6ZeroRun(expanded);
       }
       function normalizeIPv6(host) {
-        if (findToken(host, ":") < 2) return {
+        const bracketed = host[0] === "[" && host[host.length - 1] === "]";
+        if ((host[0] === "[" || host[host.length - 1] === "]") && !bracketed) return {
           host,
-          isIPV6: false
+          isIPV6: false,
+          error: true
         };
-        const ipv63 = getIPV6(host);
-        if (!ipv63.error) {
-          let newHost = ipv63.address;
-          let escapedHost = ipv63.address;
-          if (ipv63.zone) {
-            newHost += "%" + ipv63.zone;
-            escapedHost += "%25" + ipv63.zone;
-          }
+        let input2 = bracketed ? host.slice(1, -1) : host;
+        if (bracketed && isIPvFuture(input2)) {
+          input2 = input2.toLowerCase();
           return {
-            host: newHost,
-            isIPV6: true,
-            escapedHost
+            host: `[${input2}]`,
+            escapedHost: input2,
+            isIPV6: false,
+            isIPVFuture: true
           };
-        } else return {
+        }
+        if (findToken(input2, ":") < 2) return {
+          host,
+          isIPV6: false,
+          error: bracketed
+        };
+        let zoneIdentifier = "";
+        const zoneSeparator = input2.indexOf("%");
+        if (zoneSeparator !== -1) {
+          const separatorLength = input2.slice(zoneSeparator, zoneSeparator + 3).toLowerCase() === "%25" ? 3 : 1;
+          zoneIdentifier = input2.slice(zoneSeparator + separatorLength);
+          if (!isZoneIdentifier(zoneIdentifier)) return {
+            host,
+            isIPV6: false,
+            error: true
+          };
+          input2 = input2.slice(0, zoneSeparator);
+        }
+        const address = normalizeIPv6Address(input2);
+        if (address === void 0) return {
           host,
-          isIPV6: false
+          isIPV6: false,
+          error: true
+        };
+        return {
+          host: address + (zoneIdentifier ? "%" + zoneIdentifier : ""),
+          escapedHost: address + (zoneIdentifier ? "%25" + zoneIdentifier : ""),
+          isIPV6: true
         };
       }
       function findToken(str, token) {
@@ -29120,41 +29194,225 @@ var init_ajvProvider_CEoC_sr = __esm({
         }
         return output2.join("");
       }
-      function normalizeComponentEncoding(component, esc2) {
-        const func = esc2 !== true ? escape : unescape;
-        if (component.scheme !== void 0) component.scheme = func(component.scheme);
-        if (component.userinfo !== void 0) component.userinfo = func(component.userinfo);
-        if (component.host !== void 0) component.host = func(component.host);
-        if (component.path !== void 0) component.path = func(component.path);
-        if (component.query !== void 0) component.query = func(component.query);
-        if (component.fragment !== void 0) component.fragment = func(component.fragment);
-        return component;
+      const HOST_DELIMS = {
+        "@": "%40",
+        "/": "%2F",
+        "?": "%3F",
+        "#": "%23",
+        ":": "%3A"
+      };
+      const HOST_DELIM_RE = /[@/?#:]/g;
+      const HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
+      function reescapeHostDelimiters(host, isIP2) {
+        const re = isIP2 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
+        re.lastIndex = 0;
+        return host.replace(re, (ch) => HOST_DELIMS[ch]);
+      }
+      function normalizePercentEncoding(input2, decodeUnreserved = false) {
+        if (input2.indexOf("%") === -1) return input2;
+        let output2 = "";
+        for (let i = 0; i < input2.length; i++) {
+          if (input2[i] === "%" && i + 2 < input2.length) {
+            const hex3 = input2.slice(i + 1, i + 3);
+            if (isHexPair(hex3)) {
+              const normalizedHex = hex3.toUpperCase();
+              const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+              if (decodeUnreserved && isUnreserved(decoded)) output2 += decoded;
+              else output2 += "%" + normalizedHex;
+              i += 2;
+              continue;
+            }
+          }
+          output2 += input2[i];
+        }
+        return output2;
+      }
+      function normalizePathEncoding(input2) {
+        let output2 = "";
+        for (let i = 0; i < input2.length; i++) {
+          const ch = input2[i];
+          if (ch === "%" && i + 2 < input2.length) {
+            const hex3 = input2.slice(i + 1, i + 3);
+            if (isHexPair(hex3)) {
+              const normalizedHex = hex3.toUpperCase();
+              const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+              if (decoded !== "." && isUnreserved(decoded)) output2 += decoded;
+              else output2 += "%" + normalizedHex;
+              i += 2;
+              continue;
+            }
+          }
+          if (isPathCharacter(ch)) output2 += ch;
+          else {
+            const code2 = input2.charCodeAt(i);
+            if (code2 < 128) output2 += isEscapeSafe(code2) ? ch : BYTE_HEX[code2];
+            else if (code2 < 55296 || code2 > 57343) output2 += percentEncodeNonAscii(code2);
+            else if (code2 <= 56319 && i + 1 < input2.length) {
+              const low = input2.charCodeAt(i + 1);
+              if (low >= 56320 && low <= 57343) {
+                output2 += percentEncodeNonAscii(65536 + (code2 - 55296 << 10) + (low - 56320));
+                i++;
+              } else output2 += percentEncodeNonAscii(65533);
+            } else output2 += percentEncodeNonAscii(65533);
+          }
+        }
+        return output2;
+      }
+      function serializePathEncoding(input2, pathNoScheme = false) {
+        let output2 = "";
+        let firstSegment = pathNoScheme && input2[0] !== "/";
+        for (let i = 0; i < input2.length; i++) {
+          const ch = input2[i];
+          if (ch === "%" && i + 2 < input2.length) {
+            const hex3 = input2.slice(i + 1, i + 3);
+            if (isHexPair(hex3)) {
+              output2 += "%" + hex3.toUpperCase();
+              i += 2;
+              continue;
+            }
+          }
+          if (ch === "/") firstSegment = false;
+          if (isPathCharacter(ch) && (ch !== ":" || !firstSegment)) output2 += ch;
+          else {
+            const code2 = input2.charCodeAt(i);
+            if (code2 < 128) output2 += BYTE_HEX[code2];
+            else if (code2 < 55296 || code2 > 57343) output2 += percentEncodeNonAscii(code2);
+            else if (code2 <= 56319 && i + 1 < input2.length) {
+              const low = input2.charCodeAt(i + 1);
+              if (low >= 56320 && low <= 57343) {
+                output2 += percentEncodeNonAscii(65536 + (code2 - 55296 << 10) + (low - 56320));
+                i++;
+              } else output2 += percentEncodeNonAscii(65533);
+            } else output2 += percentEncodeNonAscii(65533);
+          }
+        }
+        return output2;
+      }
+      function encodeComponent(input2, isAllowed) {
+        let output2 = "";
+        for (let i = 0; i < input2.length; i++) {
+          const ch = input2[i];
+          if (ch === "%" && i + 2 < input2.length) {
+            const hex3 = input2.slice(i + 1, i + 3);
+            if (isHexPair(hex3)) {
+              output2 += "%" + hex3.toUpperCase();
+              i += 2;
+              continue;
+            }
+          }
+          if (isAllowed(ch)) output2 += ch;
+          else {
+            const code2 = input2.charCodeAt(i);
+            if (code2 < 128) output2 += BYTE_HEX[code2];
+            else if (code2 < 55296 || code2 > 57343) output2 += percentEncodeNonAscii(code2);
+            else if (code2 <= 56319 && i + 1 < input2.length) {
+              const low = input2.charCodeAt(i + 1);
+              if (low >= 56320 && low <= 57343) {
+                output2 += percentEncodeNonAscii(65536 + (code2 - 55296 << 10) + (low - 56320));
+                i++;
+              } else output2 += percentEncodeNonAscii(65533);
+            } else output2 += percentEncodeNonAscii(65533);
+          }
+        }
+        return output2;
+      }
+      function encodeUserinfo(input2) {
+        return encodeComponent(input2, isUserinfoCharacter);
+      }
+      function encodeQuery(input2) {
+        return encodeComponent(input2, isQueryFragmentCharacter);
+      }
+      function encodeFragment(input2) {
+        return encodeComponent(input2, isQueryFragmentCharacter);
+      }
+      function isEscapeSafe(cp) {
+        return cp >= 48 && cp <= 57 || cp >= 65 && cp <= 90 || cp >= 97 && cp <= 122 || cp === 42 || cp === 43 || cp === 45 || cp === 46 || cp === 47 || cp === 64 || cp === 95;
+      }
+      function normalizeQueryFragmentEncoding(input2) {
+        let output2 = "";
+        for (let i = 0; i < input2.length; i++) {
+          const ch = input2[i];
+          if (ch === "%" && i + 2 < input2.length) {
+            const hex3 = input2.slice(i + 1, i + 3);
+            if (isHexPair(hex3)) {
+              const normalizedHex = hex3.toUpperCase();
+              const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
+              if (isUnreserved(decoded)) output2 += decoded;
+              else output2 += "%" + normalizedHex;
+              i += 2;
+              continue;
+            }
+          }
+          if (isQueryFragmentCharacter(ch)) output2 += ch;
+          else {
+            const code2 = input2.charCodeAt(i);
+            if (code2 < 128) output2 += isEscapeSafe(code2) ? ch : BYTE_HEX[code2];
+            else if (code2 < 55296 || code2 > 57343) output2 += percentEncodeNonAscii(code2);
+            else if (code2 <= 56319 && i + 1 < input2.length) {
+              const low = input2.charCodeAt(i + 1);
+              if (low >= 56320 && low <= 57343) {
+                output2 += percentEncodeNonAscii(65536 + (code2 - 55296 << 10) + (low - 56320));
+                i++;
+              } else output2 += percentEncodeNonAscii(65533);
+            } else output2 += percentEncodeNonAscii(65533);
+          }
+        }
+        return output2;
+      }
+      function escapePreservingEscapes(input2) {
+        let output2 = "";
+        for (let i = 0; i < input2.length; i++) {
+          if (input2[i] === "%" && i + 2 < input2.length) {
+            const hex3 = input2.slice(i + 1, i + 3);
+            if (isHexPair(hex3)) {
+              output2 += "%" + hex3.toUpperCase();
+              i += 2;
+              continue;
+            }
+          }
+          output2 += escape(input2[i]);
+        }
+        return output2;
       }
       function recomposeAuthority(component) {
         const uriTokens = [];
         if (component.userinfo !== void 0) {
-          uriTokens.push(component.userinfo);
+          uriTokens.push(encodeUserinfo(component.userinfo));
           uriTokens.push("@");
         }
         if (component.host !== void 0) {
-          let host = unescape(component.host);
+          let host = component.host;
           if (!isIPv4(host)) {
-            const ipV6res = normalizeIPv6(host);
-            if (ipV6res.isIPV6 === true) host = `[${ipV6res.escapedHost}]`;
-            else host = component.host;
+            let ipV6res = normalizeIPv6(host);
+            if (ipV6res.isIPV6 !== true && ipV6res.isIPVFuture !== true) {
+              host = normalizePercentEncoding(host, true);
+              ipV6res = normalizeIPv6(host);
+            }
+            if (ipV6res.isIPV6 === true || ipV6res.isIPVFuture === true) host = `[${ipV6res.escapedHost}]`;
+            else host = reescapeHostDelimiters(host, false);
           }
           uriTokens.push(host);
         }
         if (typeof component.port === "number" || typeof component.port === "string") {
+          const port = String(component.port);
+          if (!isPort(port)) throw new TypeError("URI port is malformed.");
           uriTokens.push(":");
-          uriTokens.push(String(component.port));
+          uriTokens.push(port);
         }
         return uriTokens.length ? uriTokens.join("") : void 0;
       }
       module.exports = {
         nonSimpleDomain,
         recomposeAuthority,
-        normalizeComponentEncoding,
+        reescapeHostDelimiters,
+        normalizePercentEncoding,
+        normalizePathEncoding,
+        serializePathEncoding,
+        normalizeQueryFragmentEncoding,
+        encodeUserinfo,
+        encodeQuery,
+        encodeFragment,
+        escapePreservingEscapes,
         removeDotSegments,
         isIPv4,
         isUUID,
@@ -29164,7 +29422,7 @@ var init_ajvProvider_CEoC_sr = __esm({
     }));
     require_schemes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       const { isUUID } = require_utils();
-      const URN_REG = /([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-.:;=@]|%[\da-f]{2})+)/iu;
+      const URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
       const supportedSchemeNames = [
         "http",
         "https",
@@ -29206,9 +29464,10 @@ var init_ajvProvider_CEoC_sr = __esm({
           wsComponent.secure = void 0;
         }
         if (wsComponent.resourceName) {
-          const [path, query] = wsComponent.resourceName.split("?");
+          const queryIndex = wsComponent.resourceName.indexOf("?");
+          const path = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
           wsComponent.path = path && path !== "/" ? path : void 0;
-          wsComponent.query = query;
+          wsComponent.query = queryIndex === -1 ? void 0 : wsComponent.resourceName.slice(queryIndex + 1);
           wsComponent.resourceName = void 0;
         }
         wsComponent.fragment = void 0;
@@ -29220,7 +29479,7 @@ var init_ajvProvider_CEoC_sr = __esm({
           return urnComponent;
         }
         const matches = urnComponent.path.match(URN_REG);
-        if (matches) {
+        if (matches && matches[0] === urnComponent.path) {
           const scheme = options.scheme || urnComponent.scheme || "urn";
           urnComponent.nid = matches[1].toLowerCase();
           urnComponent.nss = matches[2];
@@ -29310,16 +29569,32 @@ var init_ajvProvider_CEoC_sr = __esm({
       };
     }));
     require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-      const { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizeComponentEncoding, isIPv4, nonSimpleDomain } = require_utils();
+      const { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
       const { SCHEMES, getSchemeHandler } = require_schemes();
+      const VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
+      const MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
+      function decodeValidScheme(scheme) {
+        const decodedScheme = unescape(String(scheme));
+        if (!VALID_SCHEME.test(decodedScheme)) throw new TypeError(MALFORMED_SCHEME_ERROR);
+        return decodedScheme;
+      }
       function normalize(uri, options) {
-        if (typeof uri === "string") uri = serialize(parse3(uri, options), options);
+        if (typeof uri === "string") uri = normalizeString(uri, options);
         else if (typeof uri === "object") uri = parse3(serialize(uri, options), options);
         return uri;
       }
       function resolve5(baseURI, relativeURI, options) {
         const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-        const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
+        const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed, malformedPercentEncoding: baseMalformedPercentEncoding, malformedSchemeSpecific: baseMalformedSchemeSpecific, malformedHost: baseMalformedHost, malformedScheme: baseMalformedScheme } = parseWithStatus(baseURI, schemelessOptions);
+        const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed, malformedPercentEncoding: relativeMalformedPercentEncoding, malformedSchemeSpecific: relativeMalformedSchemeSpecific, malformedHost: relativeMalformedHost, malformedScheme: relativeMalformedScheme } = parseWithStatus(relativeURI, schemelessOptions);
+        if (baseMalformed || relativeMalformed || baseMalformedPercentEncoding || relativeMalformedPercentEncoding || baseMalformedSchemeSpecific || relativeMalformedSchemeSpecific || baseMalformedHost || relativeMalformedHost || baseMalformedScheme || relativeMalformedScheme) throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+        const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
+        const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
+        const resolvedHost = resolved.host;
+        const resolvedHostIsIP = resolvedHost !== void 0 && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+        canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
+        const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !/\P{ASCII}/u.test(resolvedHost);
+        if (resolved.error && !encodedASCIIHost) throw new Error(resolved.error);
         schemelessOptions.skipEscape = true;
         return serialize(resolved, schemelessOptions);
       }
@@ -29369,27 +29644,9 @@ var init_ajvProvider_CEoC_sr = __esm({
         return target;
       }
       function equal(uriA, uriB, options) {
-        if (typeof uriA === "string") {
-          uriA = unescape(uriA);
-          uriA = serialize(normalizeComponentEncoding(parse3(uriA, options), true), {
-            ...options,
-            skipEscape: true
-          });
-        } else if (typeof uriA === "object") uriA = serialize(normalizeComponentEncoding(uriA, true), {
-          ...options,
-          skipEscape: true
-        });
-        if (typeof uriB === "string") {
-          uriB = unescape(uriB);
-          uriB = serialize(normalizeComponentEncoding(parse3(uriB, options), true), {
-            ...options,
-            skipEscape: true
-          });
-        } else if (typeof uriB === "object") uriB = serialize(normalizeComponentEncoding(uriB, true), {
-          ...options,
-          skipEscape: true
-        });
-        return uriA.toLowerCase() === uriB.toLowerCase();
+        const normalizedA = normalizeComparableURI(uriA, options);
+        const normalizedB = normalizeComparableURI(uriB, options);
+        return normalizedA !== void 0 && normalizedB !== void 0 && normalizedA === normalizedB;
       }
       function serialize(cmpts, opts) {
         const component = {
@@ -29410,13 +29667,17 @@ var init_ajvProvider_CEoC_sr = __esm({
         };
         const options = Object.assign({}, opts);
         const uriTokens = [];
+        if (component.scheme) component.scheme = decodeValidScheme(component.scheme);
         const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
         if (schemeHandler && schemeHandler.serialize) schemeHandler.serialize(component, options);
-        if (component.path !== void 0) if (!options.skipEscape) {
-          component.path = escape(component.path);
-          if (component.scheme !== void 0) component.path = component.path.split("%3A").join(":");
-        } else component.path = unescape(component.path);
-        if (options.reference !== "suffix" && component.scheme) uriTokens.push(component.scheme, ":");
+        const hasAuthority = component.userinfo !== void 0 || component.host !== void 0 || component.port !== void 0;
+        const pathNoScheme = !options.skipEscape && component.scheme === void 0 && !hasAuthority;
+        if (component.path !== void 0) if (!options.skipEscape) component.path = serializePathEncoding(component.path, pathNoScheme);
+        else component.path = normalizePercentEncoding(component.path);
+        if (options.reference !== "suffix" && component.scheme) {
+          component.scheme = decodeValidScheme(component.scheme);
+          uriTokens.push(component.scheme, ":");
+        }
         const authority = recomposeAuthority(component);
         if (authority !== void 0) {
           if (options.reference !== "suffix") uriTokens.push("//");
@@ -29426,15 +29687,47 @@ var init_ajvProvider_CEoC_sr = __esm({
         if (component.path !== void 0) {
           let s = component.path;
           if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) s = removeDotSegments(s);
+          if (pathNoScheme) s = serializePathEncoding(s, true);
           if (authority === void 0 && s[0] === "/" && s[1] === "/") s = "/%2F" + s.slice(2);
           uriTokens.push(s);
         }
-        if (component.query !== void 0) uriTokens.push("?", component.query);
-        if (component.fragment !== void 0) uriTokens.push("#", component.fragment);
+        if (component.query !== void 0) uriTokens.push("?", encodeQuery(component.query));
+        if (component.fragment !== void 0) uriTokens.push("#", encodeFragment(component.fragment));
         return uriTokens.join("");
       }
       const URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
-      function parse3(uri, opts) {
+      const AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+      const AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
+      function getParseError(parsed, matches) {
+        if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") return 'URI path must start with "/" when authority is present.';
+        if (typeof parsed.port === "number" && (parsed.port < 0 || parsed.port > 65535)) return "URI port is malformed.";
+      }
+      function hasMalformedPercentEncoding(component) {
+        if (component === void 0) return false;
+        let percent = component.indexOf("%");
+        while (percent !== -1) {
+          if (percent + 2 >= component.length || !/^[\da-f]{2}$/iu.test(component.slice(percent + 1, percent + 3))) return true;
+          percent = component.indexOf("%", percent + 3);
+        }
+        return false;
+      }
+      function isIPLiteral(host) {
+        return host[0] === "[" && host[host.length - 1] === "]";
+      }
+      function hasMalformedComponentPercentEncoding(matches) {
+        const host = matches[4];
+        return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
+      }
+      function canonicalizeHost(parsed, options, schemeHandler, isIP2) {
+        if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP2 === false && nonSimpleDomain(parsed.host)) try {
+          parsed.host = new URL("http://" + parsed.host).hostname;
+        } catch (e) {
+          parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
+          return true;
+        }
+        return false;
+      }
+      function parseWithStatus(uri, opts) {
         const options = Object.assign({}, opts);
         const parsed = {
           scheme: void 0,
@@ -29445,9 +29738,34 @@ var init_ajvProvider_CEoC_sr = __esm({
           query: void 0,
           fragment: void 0
         };
+        let malformedAuthorityOrPort = false;
+        let malformedPercentEncoding = false;
+        let malformedSchemeSpecific = false;
+        let malformedHost = false;
+        let malformedIPLiteral = false;
+        let malformedScheme = false;
         let isIP2 = false;
         if (options.reference === "suffix") if (options.scheme) uri = options.scheme + ":" + uri;
         else uri = "//" + uri;
+        const authorityMatch = uri.match(AUTHORITY_PREFIX);
+        if (authorityMatch !== null && authorityMatch[1].indexOf("\\") !== -1) {
+          parsed.error = "URI authority must not contain a literal backslash.";
+          malformedAuthorityOrPort = true;
+        }
+        const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+        if (introducerMatch !== null) {
+          const region = introducerMatch[1];
+          const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+          if (normalizedRegion.length >= 2) {
+            if (normalizedRegion.slice(0, 2) !== "//") {
+              parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+              malformedAuthorityOrPort = true;
+            } else if (region.length !== normalizedRegion.length) {
+              parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+              malformedAuthorityOrPort = true;
+            }
+          }
+        }
         const matches = uri.match(URI_PARSE);
         if (matches) {
           parsed.scheme = matches[1];
@@ -29457,11 +29775,33 @@ var init_ajvProvider_CEoC_sr = __esm({
           parsed.path = matches[6] || "";
           parsed.query = matches[7];
           parsed.fragment = matches[8];
+          if (parsed.scheme !== void 0) {
+            const decodedScheme = unescape(parsed.scheme);
+            if (VALID_SCHEME.test(decodedScheme)) parsed.scheme = decodedScheme.toLowerCase();
+            else {
+              parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
+              malformedScheme = true;
+            }
+          }
+          malformedPercentEncoding = hasMalformedComponentPercentEncoding(matches);
+          if (malformedPercentEncoding) parsed.error = parsed.error || "URI contains malformed percent-encoding.";
           if (isNaN(parsed.port)) parsed.port = matches[5];
+          const parseError = getParseError(parsed, matches);
+          if (parseError !== void 0) {
+            parsed.error = parsed.error || parseError;
+            malformedAuthorityOrPort = true;
+          }
           if (parsed.host) if (isIPv4(parsed.host) === false) {
+            const bracketedIPLiteral = isIPLiteral(parsed.host);
+            const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
             const ipv6result = normalizeIPv6(parsed.host);
-            parsed.host = ipv6result.host.toLowerCase();
-            isIP2 = ipv6result.isIPV6;
+            isIP2 = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
+            malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
+            parsed.host = isIP2 ? ipv6result.host : ipv6result.host.toLowerCase();
+            if (malformedIPLiteral) {
+              parsed.error = parsed.error || "URI host is malformed.";
+              malformedAuthorityOrPort = true;
+            }
           } else isIP2 = true;
           if (parsed.scheme === void 0 && parsed.userinfo === void 0 && parsed.host === void 0 && parsed.port === void 0 && parsed.query === void 0 && !parsed.path) parsed.reference = "same-document";
           else if (parsed.scheme === void 0) parsed.reference = "relative";
@@ -29469,24 +29809,58 @@ var init_ajvProvider_CEoC_sr = __esm({
           else parsed.reference = "uri";
           if (options.reference && options.reference !== "suffix" && options.reference !== parsed.reference) parsed.error = parsed.error || "URI is not a " + options.reference + " reference.";
           const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
-          if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
-            if (parsed.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP2 === false && nonSimpleDomain(parsed.host)) try {
-              parsed.host = URL.domainToASCII(parsed.host.toLowerCase());
-            } catch (e) {
-              parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
-            }
+          if (!malformedIPLiteral) malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP2);
+          if (uri.indexOf("%") !== -1 && parsed.host !== void 0 && !malformedIPLiteral) {
+            let host = isIP2 ? parsed.host : normalizePercentEncoding(parsed.host, true);
+            if (!isIP2) host = normalizePercentEncoding(host.toLowerCase());
+            parsed.host = reescapeHostDelimiters(host, isIP2);
           }
           if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
-            if (uri.indexOf("%") !== -1) {
-              if (parsed.scheme !== void 0) parsed.scheme = unescape(parsed.scheme);
-              if (parsed.host !== void 0) parsed.host = unescape(parsed.host);
-            }
-            if (parsed.path) parsed.path = escape(unescape(parsed.path));
-            if (parsed.fragment) parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
+            if (parsed.path) parsed.path = normalizePathEncoding(parsed.path);
+            if (parsed.query) parsed.query = normalizeQueryFragmentEncoding(parsed.query);
+            if (parsed.fragment) parsed.fragment = normalizeQueryFragmentEncoding(parsed.fragment);
+          }
+          if (schemeHandler && schemeHandler.parse) {
+            schemeHandler.parse(parsed, options);
+            if (schemeHandler === SCHEMES.urn && parsed.nid === void 0) malformedSchemeSpecific = true;
           }
-          if (schemeHandler && schemeHandler.parse) schemeHandler.parse(parsed, options);
         } else parsed.error = parsed.error || "URI can not be parsed.";
-        return parsed;
+        return {
+          parsed,
+          malformedAuthorityOrPort,
+          malformedPercentEncoding,
+          malformedSchemeSpecific,
+          malformedHost,
+          malformedScheme
+        };
+      }
+      function parse3(uri, opts) {
+        return parseWithStatus(uri, opts).parsed;
+      }
+      function normalizeString(uri, opts) {
+        return normalizeStringWithStatus(uri, opts).normalized;
+      }
+      function normalizeStringWithStatus(uri, opts) {
+        const { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = parseWithStatus(uri, opts);
+        return {
+          normalized: malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? uri : serialize(parsed, opts),
+          malformedAuthorityOrPort,
+          malformedPercentEncoding,
+          malformedSchemeSpecific,
+          malformedHost,
+          malformedScheme
+        };
+      }
+      function normalizeComparableURI(uri, opts) {
+        if (typeof uri !== "string" && typeof uri !== "object") return;
+        let value;
+        try {
+          value = typeof uri === "string" ? uri : serialize(uri, opts);
+        } catch {
+          return;
+        }
+        const { normalized, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = normalizeStringWithStatus(value, opts);
+        return malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? void 0 : normalized;
       }
       const fastUri = {
         SCHEMES,
@@ -33274,68 +33648,25 @@ var init_ajvProvider_CEoC_sr = __esm({
 import process2 from "node:process";
 var init_shimsNode = __esm({
   "node_modules/@modelcontextprotocol/server/dist/shimsNode.mjs"() {
-    init_ajvProvider_CEoC_sr();
+    init_ajvProvider_DyjnscPj();
   }
 });
 
-// node_modules/@modelcontextprotocol/server/dist/mcp-DIH4cS6P.mjs
+// node_modules/@modelcontextprotocol/server/dist/mcp-oHn3ureC.mjs
 function isCompletable(schema) {
   return !!schema && typeof schema === "object" && COMPLETABLE_SYMBOL in schema;
 }
 function getCompleter(schema) {
   return schema[COMPLETABLE_SYMBOL]?.complete;
 }
-function listenFilterAccepts(filter, event) {
-  switch (event.kind) {
-    case "tools_list_changed":
-      return filter.toolsListChanged === true;
-    case "prompts_list_changed":
-      return filter.promptsListChanged === true;
-    case "resources_list_changed":
-      return filter.resourcesListChanged === true;
-    case "resource_updated":
-      return filter.resourceSubscriptions !== void 0 && filter.resourceSubscriptions.includes(event.uri);
-  }
+function armSseKeepAlive(intervalMs, onTick) {
+  if (!Number.isFinite(intervalMs) || intervalMs < 1) return;
+  const timer = setInterval(onTick, Math.min(intervalMs, MAX_TIMER_DELAY_MS));
+  timer.unref?.();
+  return timer;
 }
-function honoredSubset(requested, capabilities) {
-  const honored = {};
-  const allow = (bit) => capabilities === void 0 || bit === true;
-  if (requested.toolsListChanged === true && allow(capabilities?.tools?.listChanged)) honored.toolsListChanged = true;
-  if (requested.promptsListChanged === true && allow(capabilities?.prompts?.listChanged)) honored.promptsListChanged = true;
-  if (requested.resourcesListChanged === true && allow(capabilities?.resources?.listChanged)) honored.resourcesListChanged = true;
-  if (requested.resourceSubscriptions !== void 0 && requested.resourceSubscriptions.length > 0 && allow(capabilities?.resources?.subscribe)) honored.resourceSubscriptions = [...requested.resourceSubscriptions];
-  return honored;
-}
-function stampSubscriptionId(notification, subscriptionId) {
-  return {
-    method: notification.method,
-    params: {
-      ...notification.params,
-      _meta: {
-        ...notification.params?._meta,
-        [SUBSCRIPTION_ID_META_KEY]: subscriptionId
-      }
-    }
-  };
-}
-function parseListenFilter(message) {
-  const outcome = codecForVersion(MODERN_WIRE_REVISION).validateRequest("subscriptions/listen", message);
-  return outcome.ok ? outcome.value.params?.notifications : void 0;
-}
-function notificationToServerEvent(method, uri) {
-  switch (method) {
-    case "notifications/tools/list_changed":
-      return { kind: "tools_list_changed" };
-    case "notifications/prompts/list_changed":
-      return { kind: "prompts_list_changed" };
-    case "notifications/resources/list_changed":
-      return { kind: "resources_list_changed" };
-    default:
-      return {
-        kind: "resource_updated",
-        uri: uri ?? ""
-      };
-  }
+function perRequestClassificationOf(transport) {
+  return transport instanceof PerRequestHTTPServerTransport ? readClassification(transport) : void 0;
 }
 function supportsScopeChallengeResolver(transport) {
   return typeof transport === "object" && transport !== null && "setScopeChallengeResolver" in transport && typeof transport.setScopeChallengeResolver === "function";
@@ -33467,143 +33798,230 @@ function unwrapOptionalSchema(schema) {
   if (!isOptionalSchema(schema)) return schema;
   return schema.def?.innerType ?? schema;
 }
-var COMPLETABLE_SYMBOL, MAX_TIMER_DELAY_MS, DEFAULT_MAX_SUBSCRIPTIONS, CHANGE_NOTIFICATION_METHODS, StdioListenRouter, DEFAULT_LEGACY_SHIM_MAX_ROUNDS, DEFAULT_LEGACY_SHIM_ROUND_TIMEOUT_MS, LegacyInputRequiredShim, INPUT_REQUIRED_CAPABLE_METHODS, writeClientIdentity, installDiscoverHandler, readServerIdentity, Server, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT;
-var init_mcp_DIH4cS6P = __esm({
-  "node_modules/@modelcontextprotocol/server/dist/mcp-DIH4cS6P.mjs"() {
-    init_src_Cqbh3MYc();
+var COMPLETABLE_SYMBOL, DEFAULT_SSE_KEEP_ALIVE_MS, MAX_TIMER_DELAY_MS, readClassification, PerRequestHTTPServerTransport, DEFAULT_LEGACY_SHIM_MAX_ROUNDS, DEFAULT_LEGACY_SHIM_ROUND_TIMEOUT_MS, LegacyInputRequiredShim, INPUT_REQUIRED_CAPABLE_METHODS, writeClientIdentity, installDiscoverHandler, readServerIdentity, Server, McpServer, EMPTY_OBJECT_JSON_SCHEMA, EMPTY_COMPLETION_RESULT;
+var init_mcp_oHn3ureC = __esm({
+  "node_modules/@modelcontextprotocol/server/dist/mcp-oHn3ureC.mjs"() {
+    init_src_DdvbAHrR();
     init_shimsNode();
     COMPLETABLE_SYMBOL = /* @__PURE__ */ Symbol.for("mcp.completable");
+    DEFAULT_SSE_KEEP_ALIVE_MS = 15e3;
     MAX_TIMER_DELAY_MS = 2 ** 31 - 1;
-    DEFAULT_MAX_SUBSCRIPTIONS = 1024;
-    CHANGE_NOTIFICATION_METHODS = /* @__PURE__ */ new Set([
-      "notifications/tools/list_changed",
-      "notifications/prompts/list_changed",
-      "notifications/resources/list_changed",
-      "notifications/resources/updated"
-    ]);
-    StdioListenRouter = class {
-      /** Active subscriptions, keyed by the listen request's JSON-RPC id verbatim. */
-      _subs = /* @__PURE__ */ new Map();
-      /**
-      * The serving instance's declared capabilities. Filled in by the entry
-      * once the modern instance is constructed (the router is created before
-      * the instance exists), so the acknowledged filter is narrowed against
-      * what the server can actually deliver.
-      */
-      _serverCapabilities;
-      /**
-      * The serving instance's identity, stamped onto the graceful-close
-      * results' `_meta` (the spec's `SubscriptionsListenResultMetaObject` extends
-      * `ResultMetaObject`). Handed over together with the capabilities.
-      */
-      _serverInfo;
-      constructor(_maxSubscriptions = DEFAULT_MAX_SUBSCRIPTIONS, serverCapabilities, serverInfo) {
-        this._maxSubscriptions = _maxSubscriptions;
-        this._serverCapabilities = serverCapabilities;
-        this._serverInfo = serverInfo;
+    PerRequestHTTPServerTransport = class {
+      static {
+        readClassification = (transport) => transport._classification;
       }
+      onclose;
+      onerror;
+      onmessage;
+      _classification;
+      _responseMode;
+      _started = false;
+      _used = false;
+      _closed = false;
+      _terminalDelivered = false;
       /**
-      * Record the serving instance's declared capabilities and identity once
-      * it has been constructed. Called by `serveStdio`'s connect path;
-      * subsequent `serve()` calls narrow the honored filter against the
-      * capabilities, and `teardownAll()` stamps the identity.
+      * `true` only while the inbound message is being delivered synchronously
+      * to the connected protocol layer. The pre-handler gates (the era
+      * registry gate, the edge→instance handoff check, the missing-handler
+      * rejection) answer inside this window; request handlers always run
+      * after it (the protocol layer defers them to a microtask). An error
+      * sent inside the window is therefore ladder-originated, and an error
+      * sent after it is handler-produced.
       */
-      setServerCapabilities(capabilities, serverInfo) {
-        this._serverCapabilities = capabilities;
-        if (serverInfo !== void 0) this._serverInfo = serverInfo;
+      _dispatchWindowOpen = false;
+      _requestId;
+      _deferredResponse;
+      _sse;
+      _abortCleanup;
+      _keepAliveMs;
+      constructor(options) {
+        this._classification = options.classification;
+        this._responseMode = options.responseMode ?? "auto";
+        this._keepAliveMs = options.keepAliveMs ?? DEFAULT_SSE_KEEP_ALIVE_MS;
       }
-      /** Whether `id` is an active listen subscription on this connection. */
-      has(id) {
-        return this._subs.has(id);
+      async start() {
+        if (this._started) throw new Error("PerRequestHTTPServerTransport is already started");
+        this._started = true;
       }
       /**
-      * Serve one inbound `subscriptions/listen` request: registers the
-      * subscription and returns the stamped acknowledged notification (or, on
-      * capacity / params rejection, the in-band JSON-RPC error response).
+      * Serves the single exchange: delivers the classified message to the
+      * connected server instance and resolves with the HTTP response.
       *
-      * @throws when called before {@linkcode setServerCapabilities} (or the
-      * constructor) has supplied the serving instance's capabilities. Honoring a
-      * filter without knowing the server's advertised capabilities would fail
-      * open (deliver unadvertised types); the entry guarantees capabilities are
-      * set before any listen request is routed here.
+      * Throws when called a second time (the transport is strictly
+      * single-use), or before a server has been connected to the transport.
+      * The returned promise rejects with a connection-closed error when the
+      * transport is closed before a response was produced (for example because
+      * the client disconnected).
       */
-      serve(message) {
-        if (this._serverCapabilities === void 0) throw new Error("StdioListenRouter.serve() called before setServerCapabilities(); refusing to honor a filter without capabilities");
-        if (this._subs.size >= this._maxSubscriptions) return {
-          jsonrpc: "2.0",
-          id: message.id,
-          error: {
-            code: -32603,
-            message: "Subscription limit reached"
-          }
+      async handleMessage(message, extra) {
+        if (this._used) throw new Error("PerRequestHTTPServerTransport serves exactly one exchange; construct a new transport per request");
+        if (!this._started || this.onmessage === void 0) throw new Error("PerRequestHTTPServerTransport is not connected: connect a server to this transport before handling a message");
+        if (this._closed) throw new Error("PerRequestHTTPServerTransport is closed");
+        this._used = true;
+        const signal = extra?.request?.signal;
+        if (signal?.aborted) {
+          await this.close();
+          throw new SdkError(SdkErrorCode.ConnectionClosed, "The request was aborted before it could be handled");
+        }
+        const messageExtra = {
+          classification: this._classification,
+          ...extra?.request !== void 0 && { request: extra.request },
+          ...extra?.authInfo !== void 0 && { authInfo: extra.authInfo }
         };
-        const filter = parseListenFilter(message);
-        if (filter === void 0) return {
-          jsonrpc: "2.0",
-          id: message.id,
-          error: {
-            code: -32602,
-            message: "Invalid params: 'notifications' is required and must be a valid SubscriptionFilter"
+        if (isJSONRPCRequest(message)) {
+          this._requestId = message.id;
+          let resolve5;
+          let reject;
+          const promise2 = new Promise((promiseResolve, promiseReject) => {
+            resolve5 = promiseResolve;
+            reject = promiseReject;
+          });
+          this._deferredResponse = {
+            promise: promise2,
+            resolve: resolve5,
+            reject,
+            settled: false
+          };
+          if (signal !== void 0) {
+            const onAbort = () => void this.close();
+            signal.addEventListener("abort", onAbort, { once: true });
+            this._abortCleanup = () => signal.removeEventListener("abort", onAbort);
           }
-        };
-        const honored = honoredSubset(filter, this._serverCapabilities);
-        this._subs.set(message.id, honored);
-        return stampSubscriptionId({
-          method: "notifications/subscriptions/acknowledged",
-          params: { notifications: honored }
-        }, message.id);
+          this._dispatchWindowOpen = true;
+          try {
+            this.onmessage(message, messageExtra);
+          } finally {
+            this._dispatchWindowOpen = false;
+          }
+          if (this._responseMode === "sse" && !this._closed && !this._deferredResponse.settled) this.upgradeToSse();
+          return promise2;
+        }
+        this.onmessage(message, messageExtra);
+        return new Response(null, { status: 202 });
       }
-      /**
-      * Tear down one subscription (inbound `notifications/cancelled`). Returns
-      * `true` when a subscription was removed. After this call NOTHING further
-      * is delivered for that subscription id (the post-cancel hardening).
-      */
-      cancel(id) {
-        return this._subs.delete(id);
+      async send(message, options) {
+        if (this._closed) return;
+        const isResponse = isJSONRPCResultResponse(message) || isJSONRPCErrorResponse(message);
+        const relatedId = isResponse ? message.id : options?.relatedRequestId;
+        if (this._requestId === void 0 || relatedId === void 0 || relatedId !== this._requestId) {
+          if (isResponse) this.onerror?.(/* @__PURE__ */ new Error(`Received a response for an unknown request id: ${String(message.id)}`));
+          return;
+        }
+        if (isResponse) {
+          if (this._terminalDelivered) return;
+          this._terminalDelivered = true;
+          const errorCode = isJSONRPCErrorResponse(message) ? message.error.code : void 0;
+          const ladderStatus = errorCode !== void 0 && (this._dispatchWindowOpen || errorCode === ProtocolErrorCode.MissingRequiredClientCapability) ? LADDER_ERROR_HTTP_STATUS[errorCode] : void 0;
+          if (ladderStatus !== void 0 && this._sse === void 0) {
+            this.settleResponse(Response.json(message, {
+              status: ladderStatus,
+              headers: { "Content-Type": "application/json" }
+            }));
+            queueMicrotask(() => void this.close());
+            return;
+          }
+          if (this._sse !== void 0 || this._responseMode === "sse") {
+            if (this._sse === void 0) this.upgradeToSse();
+            this.writeMessageFrame(message);
+            this.finalizeStream();
+            return;
+          }
+          this.settleResponse(Response.json(message, {
+            status: 200,
+            headers: { "Content-Type": "application/json" }
+          }));
+          queueMicrotask(() => void this.close());
+          return;
+        }
+        if (this._responseMode === "json") return;
+        if (this._sse === void 0) this.upgradeToSse();
+        this.writeMessageFrame(message);
       }
       /**
-      * Route an outbound notification through the active subscriptions.
-      *
-      * - For a subscription-gated change notification, returns one stamped copy
-      *   per subscription that opted in to it (an empty array means it is
-      *   dropped — the modern era never delivers an un-requested change type).
-      * - For any other outbound message, returns `'passthrough'` (the entry
-      *   forwards it as-is).
+      * Writes an SSE comment frame (a keep-alive heartbeat). Dropped when the
+      * exchange is not currently streaming.
       */
-      routeOutbound(message) {
-        if (!CHANGE_NOTIFICATION_METHODS.has(message.method)) return "passthrough";
-        const uriParam = message.params?.["uri"];
-        const uri = typeof uriParam === "string" ? uriParam : void 0;
-        const event = notificationToServerEvent(message.method, uri);
-        const out = [];
-        for (const [subscriptionId, filter] of this._subs) if (listenFilterAccepts(filter, event)) out.push(stampSubscriptionId({
-          method: message.method,
-          params: message.params ?? {}
-        }, subscriptionId));
-        return out;
+      writeCommentFrame(comment) {
+        if (this._closed || this._sse === void 0 || this._sse.closed) return;
+        const frame = comment.split("\n").map((line) => `: ${line}`).join("\n");
+        this.writeFrame(`${frame}
+
+`);
       }
-      /**
-      * Server-side graceful teardown of every active subscription: returns the
-      * empty `subscriptions/listen` JSON-RPC result for each subscription id —
-      * the spec's graceful-close signal, `_meta` carrying the subscription id
-      * and the serving instance's identity — for the entry to emit before
-      * closing the wire. Clears the set so nothing further is delivered.
-      */
-      teardownAll() {
-        const out = [];
-        for (const id of this._subs.keys()) out.push({
-          jsonrpc: "2.0",
-          id,
-          result: {
-            resultType: "complete",
-            _meta: {
-              [SUBSCRIPTION_ID_META_KEY]: id,
-              ...this._serverInfo !== void 0 && { [SERVER_INFO_META_KEY]: this._serverInfo }
-            }
+      async close() {
+        if (this._closed) return;
+        this._closed = true;
+        this._abortCleanup?.();
+        this._abortCleanup = void 0;
+        if (this._sse?.keepAliveTimer !== void 0) clearInterval(this._sse.keepAliveTimer);
+        if (this._sse !== void 0 && !this._sse.closed) {
+          this._sse.closed = true;
+          try {
+            this._sse.controller.close();
+          } catch {
+          }
+        }
+        if (this._deferredResponse !== void 0 && !this._deferredResponse.settled) {
+          this._deferredResponse.settled = true;
+          this._deferredResponse.reject(new SdkError(SdkErrorCode.ConnectionClosed, "Connection closed before a response was produced"));
+        }
+        this.onclose?.();
+      }
+      settleResponse(response) {
+        if (this._deferredResponse === void 0 || this._deferredResponse.settled) return;
+        this._deferredResponse.settled = true;
+        this._deferredResponse.resolve(response);
+      }
+      upgradeToSse() {
+        let controller;
+        const readable = new ReadableStream({
+          start: (streamController) => {
+            controller = streamController;
+          },
+          cancel: () => {
+            this.close();
           }
         });
-        this._subs.clear();
-        return out;
+        this._sse = {
+          controller,
+          encoder: new TextEncoder(),
+          closed: false
+        };
+        this._sse.keepAliveTimer = armSseKeepAlive(this._keepAliveMs, () => this.writeCommentFrame("keepalive"));
+        this.settleResponse(new Response(readable, {
+          status: 200,
+          headers: {
+            "Content-Type": "text/event-stream",
+            "Cache-Control": "no-cache, no-transform",
+            Connection: "keep-alive",
+            "X-Accel-Buffering": "no"
+          }
+        }));
+      }
+      finalizeStream() {
+        if (this._sse?.keepAliveTimer !== void 0) clearInterval(this._sse.keepAliveTimer);
+        if (this._sse !== void 0 && !this._sse.closed) {
+          this._sse.closed = true;
+          try {
+            this._sse.controller.close();
+          } catch {
+          }
+        }
+        queueMicrotask(() => void this.close());
+      }
+      writeMessageFrame(message) {
+        this.writeFrame(`event: message
+data: ${JSON.stringify(message)}
+
+`);
+      }
+      writeFrame(frame) {
+        if (this._sse === void 0 || this._sse.closed) return;
+        try {
+          this._sse.controller.enqueue(this._sse.encoder.encode(frame));
+        } catch (error62) {
+          this.onerror?.(/* @__PURE__ */ new Error(`Failed to write to the response stream: ${error62}`));
+        }
       }
     };
     DEFAULT_LEGACY_SHIM_MAX_ROUNDS = 8;
@@ -33723,6 +34141,7 @@ var init_mcp_DIH4cS6P = __esm({
       _requestStateVerify;
       _inputRequiredServing;
       _legacyShim;
+      _boundFromTransport = false;
       /** Lazily-built legacy shim; the loop lives in legacyInputRequiredShim.ts behind a narrow host contract. */
       _legacyInputRequiredShim() {
         return this._legacyShim ??= new LegacyInputRequiredShim({
@@ -33762,6 +34181,15 @@ var init_mcp_DIH4cS6P = __esm({
       /** Attaches to the given transport; rejects while this instance is connected to another one. */
       async connect(transport) {
         if (this.transport !== void 0) throw new SdkError(SdkErrorCode.AlreadyConnected, "Use a separate Server instance per connection: this instance is already connected to a transport. To connect it to a new transport, call close() first.");
+        if (this._boundFromTransport) {
+          this._boundFromTransport = false;
+          this._negotiatedProtocolVersion = void 0;
+        }
+        const revision = perRequestClassificationOf(transport)?.revision;
+        if (revision !== void 0 && !this._servedModernEra() && SUPPORTED_MODERN_PROTOCOL_VERSIONS.includes(revision) && modernProtocolVersions(this._supportedProtocolVersions).includes(revision)) {
+          this._negotiatedProtocolVersion = revision;
+          this._boundFromTransport = true;
+        }
         await super.connect(transport);
       }
       /**
@@ -34087,8 +34515,8 @@ var init_mcp_DIH4cS6P = __esm({
       * @deprecated Read client identity from the per-request handler context instead: on
       * 2026-07-28 (per-request envelope) requests `ctx.mcpReq.envelope` carries the client's
       * declared capabilities, while on 2025-era connections this accessor keeps returning the
-      * `initialize`-scoped value. The accessor remains functional — instances serving the
-      * 2026-07-28 era are backfilled per request from the validated envelope.
+      * `initialize`-scoped value. The accessor remains functional where `createMcpHandler`
+      * serves the 2026-07-28 era: it backfills it per request from the validated envelope.
       */
       getClientCapabilities() {
         return this._clientCapabilities;
@@ -34099,8 +34527,8 @@ var init_mcp_DIH4cS6P = __esm({
       * @deprecated Read client identity from the per-request handler context instead: on
       * 2026-07-28 (per-request envelope) requests `ctx.mcpReq.envelope` carries the client's
       * name and version, while on 2025-era connections this accessor keeps returning the
-      * `initialize`-scoped value. The accessor remains functional — instances serving the
-      * 2026-07-28 era are backfilled per request from the validated envelope.
+      * `initialize`-scoped value. The accessor remains functional where `createMcpHandler`
+      * serves the 2026-07-28 era: it backfills it per request from the validated envelope.
       */
       getClientVersion() {
         return this._clientVersion;
@@ -34648,8 +35076,14 @@ var init_mcp_DIH4cS6P = __esm({
               if (updates.uri) this._registeredResources[updates.uri] = registeredResource;
             }
             if (updates.name !== void 0) registeredResource.name = updates.name;
-            if (updates.title !== void 0) registeredResource.title = updates.title;
             if (updates.metadata !== void 0) registeredResource.metadata = updates.metadata;
+            if (updates.title !== void 0) {
+              registeredResource.title = updates.title;
+              registeredResource.metadata = {
+                ...registeredResource.metadata,
+                title: updates.title
+              };
+            }
             if (updates.callback !== void 0) registeredResource.readCallback = updates.callback;
             if (updates.scopeChallenge !== void 0) registeredResource.scopeChallenge = updates.scopeChallenge === null ? void 0 : updates.scopeChallenge;
             if (updates.enabled !== void 0) registeredResource.enabled = updates.enabled;
@@ -34675,9 +35109,15 @@ var init_mcp_DIH4cS6P = __esm({
               delete this._registeredResourceTemplates[name];
               if (updates.name) this._registeredResourceTemplates[updates.name] = registeredResourceTemplate;
             }
-            if (updates.title !== void 0) registeredResourceTemplate.title = updates.title;
             if (updates.template !== void 0) registeredResourceTemplate.resourceTemplate = updates.template;
             if (updates.metadata !== void 0) registeredResourceTemplate.metadata = updates.metadata;
+            if (updates.title !== void 0) {
+              registeredResourceTemplate.title = updates.title;
+              registeredResourceTemplate.metadata = {
+                ...registeredResourceTemplate.metadata,
+                title: updates.title
+              };
+            }
             if (updates.callback !== void 0) registeredResourceTemplate.readCallback = updates.callback;
             if (updates.scopeChallenge !== void 0) registeredResourceTemplate.scopeChallenge = updates.scopeChallenge === null ? void 0 : updates.scopeChallenge;
             if (updates.enabled !== void 0) registeredResourceTemplate.enabled = updates.enabled;
@@ -34880,6 +35320,199 @@ var init_mcp_DIH4cS6P = __esm({
   }
 });
 
+// node_modules/@modelcontextprotocol/server/dist/listenRouter-Bartj63y.mjs
+function listenFilterAccepts(filter, event) {
+  switch (event.kind) {
+    case "tools_list_changed":
+      return filter.toolsListChanged === true;
+    case "prompts_list_changed":
+      return filter.promptsListChanged === true;
+    case "resources_list_changed":
+      return filter.resourcesListChanged === true;
+    case "resource_updated":
+      return filter.resourceSubscriptions !== void 0 && filter.resourceSubscriptions.includes(event.uri);
+  }
+}
+function honoredSubset(requested, capabilities) {
+  const honored = {};
+  const allow = (bit) => capabilities === void 0 || bit === true;
+  if (requested.toolsListChanged === true && allow(capabilities?.tools?.listChanged)) honored.toolsListChanged = true;
+  if (requested.promptsListChanged === true && allow(capabilities?.prompts?.listChanged)) honored.promptsListChanged = true;
+  if (requested.resourcesListChanged === true && allow(capabilities?.resources?.listChanged)) honored.resourcesListChanged = true;
+  if (requested.resourceSubscriptions !== void 0 && requested.resourceSubscriptions.length > 0 && allow(capabilities?.resources?.subscribe)) honored.resourceSubscriptions = [...requested.resourceSubscriptions];
+  return honored;
+}
+function stampSubscriptionId(notification, subscriptionId) {
+  return {
+    method: notification.method,
+    params: {
+      ...notification.params,
+      _meta: {
+        ...notification.params?._meta,
+        [SUBSCRIPTION_ID_META_KEY]: subscriptionId
+      }
+    }
+  };
+}
+function parseListenFilter(message) {
+  const outcome = codecForVersion(MODERN_WIRE_REVISION).validateRequest("subscriptions/listen", message);
+  return outcome.ok ? outcome.value.params?.notifications : void 0;
+}
+function notificationToServerEvent(method, uri) {
+  switch (method) {
+    case "notifications/tools/list_changed":
+      return { kind: "tools_list_changed" };
+    case "notifications/prompts/list_changed":
+      return { kind: "prompts_list_changed" };
+    case "notifications/resources/list_changed":
+      return { kind: "resources_list_changed" };
+    default:
+      return {
+        kind: "resource_updated",
+        uri: uri ?? ""
+      };
+  }
+}
+var DEFAULT_MAX_SUBSCRIPTIONS, CHANGE_NOTIFICATION_METHODS, StdioListenRouter;
+var init_listenRouter_Bartj63y = __esm({
+  "node_modules/@modelcontextprotocol/server/dist/listenRouter-Bartj63y.mjs"() {
+    init_mcp_oHn3ureC();
+    init_src_DdvbAHrR();
+    DEFAULT_MAX_SUBSCRIPTIONS = 1024;
+    CHANGE_NOTIFICATION_METHODS = /* @__PURE__ */ new Set([
+      "notifications/tools/list_changed",
+      "notifications/prompts/list_changed",
+      "notifications/resources/list_changed",
+      "notifications/resources/updated"
+    ]);
+    StdioListenRouter = class {
+      /** Active subscriptions, keyed by the listen request's JSON-RPC id verbatim. */
+      _subs = /* @__PURE__ */ new Map();
+      /**
+      * The serving instance's declared capabilities. Filled in by the entry
+      * once the modern instance is constructed (the router is created before
+      * the instance exists), so the acknowledged filter is narrowed against
+      * what the server can actually deliver.
+      */
+      _serverCapabilities;
+      /**
+      * The serving instance's identity, stamped onto the graceful-close
+      * results' `_meta` (the spec's `SubscriptionsListenResultMetaObject` extends
+      * `ResultMetaObject`). Handed over together with the capabilities.
+      */
+      _serverInfo;
+      constructor(_maxSubscriptions = DEFAULT_MAX_SUBSCRIPTIONS, serverCapabilities, serverInfo) {
+        this._maxSubscriptions = _maxSubscriptions;
+        this._serverCapabilities = serverCapabilities;
+        this._serverInfo = serverInfo;
+      }
+      /**
+      * Record the serving instance's declared capabilities and identity once
+      * it has been constructed. Called by `serveStdio`'s connect path;
+      * subsequent `serve()` calls narrow the honored filter against the
+      * capabilities, and `teardownAll()` stamps the identity.
+      */
+      setServerCapabilities(capabilities, serverInfo) {
+        this._serverCapabilities = capabilities;
+        if (serverInfo !== void 0) this._serverInfo = serverInfo;
+      }
+      /** Whether `id` is an active listen subscription on this connection. */
+      has(id) {
+        return this._subs.has(id);
+      }
+      /**
+      * Serve one inbound `subscriptions/listen` request: registers the
+      * subscription and returns the stamped acknowledged notification (or, on
+      * capacity / params rejection, the in-band JSON-RPC error response).
+      *
+      * @throws when called before {@linkcode setServerCapabilities} (or the
+      * constructor) has supplied the serving instance's capabilities. Honoring a
+      * filter without knowing the server's advertised capabilities would fail
+      * open (deliver unadvertised types); the entry guarantees capabilities are
+      * set before any listen request is routed here.
+      */
+      serve(message) {
+        if (this._serverCapabilities === void 0) throw new Error("StdioListenRouter.serve() called before setServerCapabilities(); refusing to honor a filter without capabilities");
+        if (this._subs.size >= this._maxSubscriptions) return {
+          jsonrpc: "2.0",
+          id: message.id,
+          error: {
+            code: -32603,
+            message: "Subscription limit reached"
+          }
+        };
+        const filter = parseListenFilter(message);
+        if (filter === void 0) return {
+          jsonrpc: "2.0",
+          id: message.id,
+          error: {
+            code: -32602,
+            message: "Invalid params: 'notifications' is required and must be a valid SubscriptionFilter"
+          }
+        };
+        const honored = honoredSubset(filter, this._serverCapabilities);
+        this._subs.set(message.id, honored);
+        return stampSubscriptionId({
+          method: "notifications/subscriptions/acknowledged",
+          params: { notifications: honored }
+        }, message.id);
+      }
+      /**
+      * Tear down one subscription (inbound `notifications/cancelled`). Returns
+      * `true` when a subscription was removed. After this call NOTHING further
+      * is delivered for that subscription id (the post-cancel hardening).
+      */
+      cancel(id) {
+        return this._subs.delete(id);
+      }
+      /**
+      * Route an outbound notification through the active subscriptions.
+      *
+      * - For a subscription-gated change notification, returns one stamped copy
+      *   per subscription that opted in to it (an empty array means it is
+      *   dropped — the modern era never delivers an un-requested change type).
+      * - For any other outbound message, returns `'passthrough'` (the entry
+      *   forwards it as-is).
+      */
+      routeOutbound(message) {
+        if (!CHANGE_NOTIFICATION_METHODS.has(message.method)) return "passthrough";
+        const uriParam = message.params?.["uri"];
+        const uri = typeof uriParam === "string" ? uriParam : void 0;
+        const event = notificationToServerEvent(message.method, uri);
+        const out = [];
+        for (const [subscriptionId, filter] of this._subs) if (listenFilterAccepts(filter, event)) out.push(stampSubscriptionId({
+          method: message.method,
+          params: message.params ?? {}
+        }, subscriptionId));
+        return out;
+      }
+      /**
+      * Server-side graceful teardown of every active subscription: returns the
+      * empty `subscriptions/listen` JSON-RPC result for each subscription id —
+      * the spec's graceful-close signal, `_meta` carrying the subscription id
+      * and the serving instance's identity — for the entry to emit before
+      * closing the wire. Clears the set so nothing further is delivered.
+      */
+      teardownAll() {
+        const out = [];
+        for (const id of this._subs.keys()) out.push({
+          jsonrpc: "2.0",
+          id,
+          result: {
+            resultType: "complete",
+            _meta: {
+              [SUBSCRIPTION_ID_META_KEY]: id,
+              ...this._serverInfo !== void 0 && { [SERVER_INFO_META_KEY]: this._serverInfo }
+            }
+          }
+        });
+        this._subs.clear();
+        return out;
+      }
+    };
+  }
+});
+
 // node_modules/@modelcontextprotocol/server/dist/stdio.mjs
 function classifyOpeningMessage(message) {
   const params = message.params;
@@ -35198,8 +35831,9 @@ function toError(value) {
 var swallowsErrorsAfterClose, StdioServerTransport, DISCARD_ANSWER_TIMEOUT_MS, StdioConnectionChannel;
 var init_stdio = __esm({
   "node_modules/@modelcontextprotocol/server/dist/stdio.mjs"() {
-    init_mcp_DIH4cS6P();
-    init_src_Cqbh3MYc();
+    init_mcp_oHn3ureC();
+    init_src_DdvbAHrR();
+    init_listenRouter_Bartj63y();
     init_shimsNode();
     swallowsErrorsAfterClose = /* @__PURE__ */ Symbol("swallowsErrorsAfterClose");
     StdioServerTransport = class {
@@ -35390,8 +36024,9 @@ var init_stdio = __esm({
 var DEFAULT_MAX_REQUEST_BODY_SIZE;
 var init_dist = __esm({
   "node_modules/@modelcontextprotocol/server/dist/index.mjs"() {
-    init_mcp_DIH4cS6P();
-    init_src_Cqbh3MYc();
+    init_mcp_oHn3ureC();
+    init_src_DdvbAHrR();
+    init_listenRouter_Bartj63y();
     init_shimsNode();
     DEFAULT_MAX_REQUEST_BODY_SIZE = 4 * 1024 * 1024;
   }
@@ -35575,7 +36210,8 @@ var init_errors3 = __esm({
     HEADER_SECRET_RE = new RegExp(`(\\b(?:x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN}|api[-_]?key)\\s*:\\s*)[^\\s,;"'<>\`]+`, "gi");
     AWS_SIGV4_RE = /([?&]X-Amz-(?:Signature|Security-Token|Credential)=)[^&#\s"'<>`]+/gi;
     JSON_SECRET_KEYS = [
-      "(?:access|refresh|id|auth|session|bearer|csrf|xsrf)[_-]?token",
+      "(?:access|refresh|id|auth|session|bearer|csrf|xsrf|api)[_-]?token",
+      // api: fleet-audit#1444 (Pipedrive/Todoist-style, as in QUERY_SECRET_RE)
       "client[_-]?secret",
       "api[_-]?secret",
       "(?:x[_-])?api[_-]?key",
@@ -35700,6 +36336,12 @@ var init_untrusted = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/response/urlish.js
+var init_urlish = __esm({
+  "node_modules/@chrischall/mcp-utils/dist/response/urlish.js"() {
+  }
+});
+
 // node_modules/@chrischall/mcp-utils/dist/response/index.js
 function textResult(data) {
   return {
@@ -35723,6 +36365,7 @@ var init_response = __esm({
     init_view();
     init_media();
     init_untrusted();
+    init_urlish();
   }
 });
 
@@ -37347,6 +37990,154 @@ var init_transport_failure = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/netguard/address.js
+function isPublicAddress(ip) {
+  const v4 = parseIPv4(ip);
+  if (v4)
+    return isPublicIPv4(v4);
+  const v6 = parseIPv6(ip);
+  if (v6)
+    return isPublicIPv6(v6);
+  return false;
+}
+function parseIPv4(text) {
+  if (!/^(?:0|[1-9]\d{0,2})(?:\.(?:0|[1-9]\d{0,2})){3}$/.test(text))
+    return void 0;
+  const octets = text.split(".").map(Number);
+  return octets.every((o) => o <= 255) ? octets : void 0;
+}
+function parseIPv6(text) {
+  if (!/^[0-9a-fA-F:.]+$/.test(text) || !text.includes(":"))
+    return void 0;
+  const halves = text.split("::");
+  if (halves.length > 2)
+    return void 0;
+  const groups = (part) => {
+    if (part === "")
+      return [];
+    const out = [];
+    const pieces = part.split(":");
+    for (const [i, piece] of pieces.entries()) {
+      if (i === pieces.length - 1 && piece.includes(".")) {
+        const v4 = parseIPv4(piece);
+        if (!v4)
+          return void 0;
+        const [a = 0, b = 0, c = 0, d = 0] = v4;
+        out.push(a << 8 | b, c << 8 | d);
+        continue;
+      }
+      if (!/^[0-9a-fA-F]{1,4}$/.test(piece))
+        return void 0;
+      out.push(parseInt(piece, 16));
+    }
+    return out;
+  };
+  const head = groups(halves[0] ?? "");
+  const tail = halves.length === 2 ? groups(halves[1] ?? "") : [];
+  if (!head || !tail)
+    return void 0;
+  const fill = 8 - head.length - tail.length;
+  if (halves.length === 2 ? fill < 1 : fill !== 0)
+    return void 0;
+  const words = [...head, ...new Array(fill).fill(0), ...tail];
+  const bytes = [];
+  for (const w of words)
+    bytes.push(w >> 8, w & 255);
+  return bytes;
+}
+function inRange(bytes, prefix, bits) {
+  for (let i = 0; i < bits; i += 1) {
+    const byte = i >> 3;
+    const mask = 128 >> (i & 7);
+    if (((bytes[byte] ?? 0) & mask) !== ((prefix[byte] ?? 0) & mask))
+      return false;
+  }
+  return true;
+}
+function isPublicIPv4(octets) {
+  return !BLOCKED_V4.some(([prefix, bits]) => inRange(octets, prefix, bits));
+}
+function isPublicIPv6(bytes) {
+  if (inRange(bytes, MAPPED_V4, 96) || inRange(bytes, SIIT_V4, 96) || inRange(bytes, NAT64, 96)) {
+    return isPublicIPv4(bytes.slice(12, 16));
+  }
+  if (inRange(bytes, SIX_TO_FOUR, 16))
+    return isPublicIPv4(bytes.slice(2, 6));
+  return !BLOCKED_V6.some(([prefix, bits]) => inRange(bytes, prefix, bits));
+}
+var BLOCKED_V4, V6, BLOCKED_V6, MAPPED_V4, SIIT_V4, NAT64, SIX_TO_FOUR;
+var init_address = __esm({
+  "node_modules/@chrischall/mcp-utils/dist/netguard/address.js"() {
+    BLOCKED_V4 = [
+      [[0, 0, 0, 0], 8],
+      // this network
+      [[10, 0, 0, 0], 8],
+      // RFC 1918
+      [[100, 64, 0, 0], 10],
+      // CGNAT
+      [[127, 0, 0, 0], 8],
+      // loopback
+      [[169, 254, 0, 0], 16],
+      // link-local, incl. cloud metadata
+      [[172, 16, 0, 0], 12],
+      // RFC 1918
+      [[192, 0, 0, 0], 24],
+      // IETF protocol assignments
+      [[192, 0, 2, 0], 24],
+      // TEST-NET-1
+      [[192, 88, 99, 0], 24],
+      // 6to4 relay anycast (deprecated)
+      [[192, 168, 0, 0], 16],
+      // RFC 1918
+      [[198, 18, 0, 0], 15],
+      // benchmarking
+      [[198, 51, 100, 0], 24],
+      // TEST-NET-2
+      [[203, 0, 113, 0], 24],
+      // TEST-NET-3
+      [[224, 0, 0, 0], 4],
+      // multicast
+      [[240, 0, 0, 0], 4]
+      // reserved + broadcast
+    ];
+    V6 = (hex3) => parseIPv6(hex3);
+    BLOCKED_V6 = [
+      [V6("::"), 96],
+      // ::, ::1 and the deprecated IPv4-compatible form, refused whole
+      [V6("64:ff9b:1::"), 48],
+      // local-use NAT64 (RFC 8215)
+      [V6("100::"), 64],
+      // discard-only
+      [V6("2001::"), 32],
+      // Teredo
+      [V6("2001:2::"), 48],
+      // benchmarking
+      [V6("2001:10::"), 28],
+      // ORCHID (deprecated)
+      [V6("2001:20::"), 28],
+      // ORCHIDv2
+      [V6("2001:db8::"), 32],
+      // documentation
+      [V6("3fff::"), 20],
+      // documentation (RFC 9637)
+      [V6("5f00::"), 16],
+      // SRv6 SIDs
+      [V6("fc00::"), 7],
+      // unique local
+      [V6("fe80::"), 10],
+      // link-local
+      [V6("fec0::"), 10],
+      // site-local (deprecated)
+      [V6("ff00::"), 8]
+      // multicast
+    ];
+    MAPPED_V4 = V6("::ffff:0:0");
+    SIIT_V4 = V6("::ffff:0:0:0");
+    NAT64 = V6("64:ff9b::");
+    SIX_TO_FOUR = V6("2002::");
+  }
+});
+
 // node_modules/@chrischall/mcp-utils/dist/internal/retry-after.js
 function retryAfterToMs(header, now = Date.now()) {
   if (header == null)
@@ -37366,6 +38157,44 @@ var init_retry_after = __esm({
   }
 });
 
+// node_modules/@chrischall/mcp-utils/dist/internal/sleep.js
+function abortReason(signal) {
+  return signal.reason ?? new DOMException("This operation was aborted", "AbortError");
+}
+function cancellableSleep(ms, sleep3) {
+  const signal = currentCallSignal();
+  if (signal?.aborted)
+    return Promise.reject(abortReason(signal));
+  if (!signal)
+    return sleep3 ? sleep3(ms) : new Promise((resolve5) => setTimeout(resolve5, ms));
+  return new Promise((resolve5, reject) => {
+    let timer;
+    const onAbort = () => {
+      if (timer !== void 0)
+        clearTimeout(timer);
+      reject(abortReason(signal));
+    };
+    const done = () => {
+      signal.removeEventListener("abort", onAbort);
+      resolve5();
+    };
+    signal.addEventListener("abort", onAbort, { once: true });
+    if (sleep3) {
+      sleep3(ms).then(done, (err) => {
+        signal.removeEventListener("abort", onAbort);
+        reject(err);
+      });
+    } else {
+      timer = setTimeout(done, ms);
+    }
+  });
+}
+var init_sleep = __esm({
+  "node_modules/@chrischall/mcp-utils/dist/internal/sleep.js"() {
+    init_cancel();
+  }
+});
+
 // node_modules/@chrischall/mcp-utils/dist/http/index.js
 function withoutCredentials(headers, tokenHeader) {
   const drop = new Set(CROSS_ORIGIN_DROPPED_HEADERS);
@@ -37417,6 +38246,9 @@ async function writeOrUnknown(run, onUnknown) {
     return { ok: false, result: await onUnknown(err, unknownOutcomeReason(err)) };
   }
 }
+function isOutcomeUnknownStatus(status) {
+  return status >= 500 && status <= 599 && status !== 501 && status !== 505;
+}
 function headerOf(headers, name) {
   if (headers === void 0)
     return void 0;
@@ -37532,7 +38364,7 @@ function createApiClient(opts) {
   const retry = opts.retry ?? DEFAULT_RETRY;
   const service = opts.serviceName ?? hostOf(opts.baseUrl);
   const doFetch = opts.fetchImpl ?? fetch;
-  const sleep3 = opts.sleep ?? defaultSleep;
+  const sleep3 = (ms) => cancellableSleep(ms, opts.sleep);
   const unauthorized = () => opts.onUnauthorized ? opts.onUnauthorized() : new UnauthorizedError(service);
   const retryStatuses = retry.statuses ?? [429];
   const timeoutMs = opts.timeout === false ? 0 : opts.timeout ?? DEFAULT_REQUEST_TIMEOUT_MS;
@@ -37547,6 +38379,7 @@ function createApiClient(opts) {
   }
   const authHeader = (token) => !token ? {} : opts.tokenHeader ? { [opts.tokenHeader]: token } : { Authorization: `Bearer ${token}` };
   const transportFailures = /* @__PURE__ */ new WeakSet();
+  const answered5xx = /* @__PURE__ */ new WeakSet();
   const markTransportFailure = (err) => {
     if (typeof err === "object" && err !== null && err.name !== "AbortError") {
       transportFailures.add(err);
@@ -37626,7 +38459,7 @@ function createApiClient(opts) {
   const baseParts = (() => {
     try {
       const u = new URL(base);
-      return { origin: u.origin, username: u.username, password: u.password };
+      return { origin: u.origin, hostname: u.hostname, username: u.username, password: u.password };
     } catch {
       return void 0;
     }
@@ -37666,6 +38499,15 @@ function createApiClient(opts) {
     const next = new URL(href);
     return baseOrigin !== void 0 && next.origin === baseOrigin && next.username === baseParts?.username && next.password === baseParts?.password;
   }
+  function isNonPublicLiteralHost(hostname3) {
+    const host = hostname3.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+    if (host === "localhost" || host.endsWith(".localhost"))
+      return true;
+    if (/^[\d.]+$/.test(host) || host.includes(":"))
+      return !isPublicAddress(host);
+    return false;
+  }
+  const baseIsPublic = baseParts !== void 0 && !isNonPublicLiteralHost(baseParts.hostname);
   function sameOriginHop(location, from) {
     const href = resolveLocation(location, from);
     const next = new URL(href);
@@ -37718,7 +38560,11 @@ function createApiClient(opts) {
         }
         if (stripCrossOrigin) {
           hopUrl = resolveLocation(location, hopUrl);
-          if (credentialed && !onBaseOrigin(hopUrl))
+          const offOrigin = !onBaseOrigin(hopUrl);
+          if (offOrigin && baseIsPublic && isNonPublicLiteralHost(new URL(hopUrl).hostname)) {
+            throw new RedirectRefusedError(`Refusing redirect from ${service} to ${new URL(hopUrl).origin}: it is not a public address (loopback, link-local or a private network), so nothing is sent there.`);
+          }
+          if (credentialed && offOrigin)
             credentialed = false;
         } else {
           hopUrl = sameOriginHop(location, hopUrl);
@@ -37793,19 +38639,22 @@ function createApiClient(opts) {
           hint: opts.writeOutcomeHint
         });
       }
-      if (typeof err === "object" && err !== null && transportFailures.has(err)) {
+      if (typeof err === "object" && err !== null && (transportFailures.has(err) || answered5xx.has(err))) {
         throw new WriteOutcomeUnknownError(service, method, { cause: err, hint: opts.writeOutcomeHint });
       }
       throw err;
     }
   }
-  function withIdempotency(opt) {
+  function withIdempotency(method, opt) {
     const name = opts.idempotencyHeader;
     if (name === void 0 || name === "")
       return opt;
     const lower2 = name.toLowerCase();
     if (opt.headers && Object.keys(opt.headers).some((k) => k.toLowerCase() === lower2))
       return opt;
+    const repeatable = opt.idempotent === true || SAFE_METHODS.has(method.toUpperCase());
+    if (opt.idempotencyKey === void 0 && repeatable)
+      return opt;
     const key = opt.idempotencyKey ?? globalThis.crypto.randomUUID();
     return { ...opt, headers: { ...opt.headers, [name]: key } };
   }
@@ -37820,18 +38669,21 @@ function createApiClient(opts) {
       if (decision === "retry" && !retried)
         return "retry";
     }
-    return httpError(res, text, method, path, service);
+    const err = httpError(res, text, method, path, service);
+    if (isOutcomeUnknownStatus(res.status) && !(err instanceof EdgeBlockedError))
+      answered5xx.add(err);
+    return err;
   }
   const fetchJson = (method, path, opt = {}) => {
-    const o = withIdempotency(opt);
+    const o = withIdempotency(method, opt);
     return guardWrite(method, o, (dispatch) => fetchJsonOnce(method, path, o, dispatch));
   };
   const fetchHtml = (method, path, opt = {}) => {
-    const o = withIdempotency(opt);
+    const o = withIdempotency(method, opt);
     return guardWrite(method, o, (dispatch) => fetchHtmlOnce(method, path, o, dispatch));
   };
   const fetchRaw = (method, path, opt = {}) => {
-    const o = withIdempotency(opt);
+    const o = withIdempotency(method, opt);
     return guardWrite(method, o, (dispatch) => fetchRawOnce(method, path, o, dispatch));
   };
   async function fetchJsonOnce(method, path, opt, dispatch) {
@@ -37973,7 +38825,7 @@ function decodeJwtExp(token) {
   }
   return exp;
 }
-var DEFAULT_RETRY, defaultSleep, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_MAX_REDIRECTS, FETCH_MAX_REDIRECTS, CROSS_ORIGIN_DROPPED_HEADERS, REDIRECT_STATUSES, UnauthorizedError, RateLimitedError, RequestTimeoutError, DEFAULT_WRITE_OUTCOME_HINT, WriteOutcomeUnknownError, SAFE_METHODS, ApiError, EdgeBlockedError, EDGE_BLOCK_SCAN_MAX, EDGE_BLOCK_MARKERS;
+var DEFAULT_RETRY, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_MAX_REDIRECTS, FETCH_MAX_REDIRECTS, CROSS_ORIGIN_DROPPED_HEADERS, REDIRECT_STATUSES, UnauthorizedError, RateLimitedError, RequestTimeoutError, DEFAULT_WRITE_OUTCOME_HINT, WriteOutcomeUnknownError, SAFE_METHODS, ApiError, EdgeBlockedError, EDGE_BLOCK_SCAN_MAX, EDGE_BLOCK_MARKERS;
 var init_http = __esm({
   "node_modules/@chrischall/mcp-utils/dist/http/index.js"() {
     init_headers();
@@ -37989,9 +38841,10 @@ var init_http = __esm({
     init_body_limit();
     init_net_atoms();
     init_url_safety();
+    init_address();
     init_retry_after();
+    init_sleep();
     DEFAULT_RETRY = { count: 1, delayMs: 2e3 };
-    defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
     DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
     DEFAULT_MAX_REDIRECTS = 5;
     FETCH_MAX_REDIRECTS = 20;
@@ -38233,7 +39086,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     PACKAGE_NAME = "office-outlook-mcp";
-    VERSION = "0.7.0";
+    VERSION = "0.8.0";
   }
 });
 
@@ -49559,6 +50412,49 @@ var OutlookClient = class {
 init_zod();
 init_dist2();
 
+// src/tools/_hints.ts
+init_zod();
+init_dist2();
+
+// src/tools/_untrusted.ts
+init_dist2();
+init_dist2();
+var UNTRUSTED_CONTENT_NOTE2 = "Message bodies, previews, subjects, names and event text below are written by other people (anyone who can email or invite this mailbox). " + UNTRUSTED_CONTENT_RULE;
+function mailboxUntrusted(payload) {
+  return untrustedResult(payload, { note: UNTRUSTED_CONTENT_NOTE2 });
+}
+
+// src/tools/_hints.ts
+function workMeta(intent, extra = {}) {
+  return { mint: { domain: "work", intent, ...extra } };
+}
+var BRIEF_MAX = 120;
+var BRIEF_NOTE = '"brief": one line per item, `title \u2014 <ISO date or "no date"> \u2014 <status>`, at most 120 chars each, as `data` in the untrusted-content envelope; a last line `-- more` means another page exists (re-ask without "brief" for its nextLink).';
+function briefViewParam(rungs, note) {
+  const base = viewParam(rungs);
+  return external_exports.enum([...rungs, "brief"]).optional().describe(`${base.description ?? ""} ${BRIEF_NOTE} ${note}`.trim());
+}
+function flat(s) {
+  const out = s?.replace(/\s+/g, " ").trim();
+  return out ? out : void 0;
+}
+function briefDate(dt) {
+  return flat(dt?.replace(/\.0+(?=Z?$)/, "")) ?? "no date";
+}
+function briefLine(title, date5, status) {
+  const tail = ` \u2014 ${date5} \u2014 ${status}`;
+  const shown = flat(title) ?? "(no subject)";
+  const room = BRIEF_MAX - tail.length;
+  return `${shown.length > room ? `${shown.slice(0, Math.max(room - 1, 0))}\u2026` : shown}${tail}`;
+}
+var BRIEF_MORE = "-- more";
+function briefResult(lines, hasMore = false) {
+  return mailboxUntrusted(hasMore ? [...lines, BRIEF_MORE] : lines);
+}
+function spaced(value) {
+  return value.replace(/([a-z])([A-Z])/g, "$1 $2").toLowerCase();
+}
+
 // src/view.ts
 init_dist2();
 var VIEWS2 = ["compact", "full", "raw"];
@@ -49773,14 +50669,6 @@ function nextPosition(rows, pos) {
   return { t: utcLiteral(newest), ids: [...carried, ...tied] };
 }
 
-// src/tools/_untrusted.ts
-init_dist2();
-init_dist2();
-var UNTRUSTED_CONTENT_NOTE2 = "Message bodies, previews, subjects, names and event text below are written by other people (anyone who can email or invite this mailbox). " + UNTRUSTED_CONTENT_RULE;
-function mailboxUntrusted(payload) {
-  return untrustedResult(payload, { note: UNTRUSTED_CONTENT_NOTE2 });
-}
-
 // src/tools/mail.ts
 var WELL_KNOWN = [
   "inbox",
@@ -49830,6 +50718,13 @@ function triageKind(m) {
   if (/Cancel/.test(type)) return "meetingCancelled";
   return "meetingResponse";
 }
+function briefUnread(m) {
+  const who = m.From ?? m.Sender;
+  const sender = who?.EmailAddress?.Name || who?.EmailAddress?.Address;
+  const kind = triageKind(m);
+  const title = sender ? `${sender}: ${m.Subject ?? "(no subject)"}` : m.Subject;
+  return briefLine(title, briefDate(m.ReceivedDateTime), kind === "mail" ? "unread" : spaced(kind));
+}
 function triageEvent(e) {
   return stripUndefined({
     id: e.Id,
@@ -49918,6 +50813,7 @@ function registerMailTools(server, client2) {
     {
       description: "List mail folders with unread and total counts. Use this to discover folder ids before listing messages; the well-known names (" + WELL_KNOWN.join(", ") + ") can be used directly without a lookup. Lists ONE level: top-level folders by default, or the child folders of `parent`. A folder with `Children` > 0 has subfolders \u2014 list them with `parent` set to its Id.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         parent: external_exports.string().min(1).optional().describe("List the child folders of this folder (id or well-known name). Omit for the top level."),
@@ -49942,6 +50838,7 @@ function registerMailTools(server, client2) {
     {
       description: 'List messages in a folder, newest first. Defaults to the inbox. Use `unreadOnly` for a triage view. Bodies are NOT included \u2014 call outlook_get_message for one. Note `search` and `unreadOnly` cannot be combined on a first-page request (the API rejects $search with $filter); pass `search` alone to search the whole mailbox. When following a `nextLink`, both are ignored, so echoing them back is harmless. Each message\'s To list (and Cc, in the full view) holds at most 20 addresses; a longer list adds ToCount/ToTruncated (CcCount/CcTruncated) with the full count \u2014 pass view:"raw" for every address. ' + FROM_DESCRIPTION + " Cannot combine with `search`, `skip` or `nextLink`. " + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup", { aliases: ["email", "mail", "inbox"] }),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         folder: external_exports.string().optional().describe('Folder id or well-known name (default "inbox")'),
@@ -49993,6 +50890,7 @@ function registerMailTools(server, client2) {
     {
       description: `Get one message including its body. The body is requested as plain text rather than HTML (measured ~9x smaller and far easier to read); pass view:"raw" to get Outlook's untouched record. To and Cc list at most 20 addresses; a longer list adds ToCount/ToTruncated (CcCount/CcTruncated) with the full count \u2014 view:"raw" returns every address. ` + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         id: external_exports.string().min(1).describe("Message Id from outlook_list_messages"),
@@ -50013,7 +50911,11 @@ function registerMailTools(server, client2) {
     {
       description: 'Triage batch: the unread messages in a folder (default inbox), newest first, each WITH its plain-text body (truncated to `maxBodyChars`) in one call \u2014 no follow-up outlook_get_message needed. Every item has a `kind`: "mail", "meetingRequest", "meetingCancelled" or "meetingResponse" (a reply to an invite you sent). Requests and cancellations also carry `event` (id, time, organizer, your current `responseStatus`) so the invite can be answered by its event id (when the meeting is no longer on your calendar \u2014 already declined, cancelled or deleted \u2014 the item has a `hint` instead and there is nothing to respond to). `to`/`cc` list at most 20 addresses; a longer list adds `toCount`/`ccCount` and `toTruncated`/`ccTruncated`. This does NOT mark anything read. Processing loop: read the batch \u2192 act on each item (reply, respond to the invite, file, flag \u2014 or leave it) \u2192 call outlook_mark_read on the plain mail you handled, so the next call returns only what is still new. An invite you answer with outlook_respond_to_invite needs no mark-read: Outlook moves it to Deleted Items under a new id, so its old id would 404. Follow `nextLink` for more. ' + FROM_DESCRIPTION + " Cannot combine with `sinceHours` or `nextLink`. " + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("whats-new", { canonical: true, aliases: ["email", "mail", "inbox", "unread", "new mail", "work email"] }),
       inputSchema: external_exports.object({
+        view: external_exports.enum(["brief"]).optional().describe(
+          'Omit for the triage batch above. "brief": one line per message, `<sender>: <subject> \u2014 <received ISO time or "no date"> \u2014 <unread | meeting request | meeting cancelled | meeting response>`, at most 120 chars each, as `data` in the untrusted-content envelope; fetches no body and no invite; a last line `-- more` means another page exists (re-ask without "brief" for its nextLink / next_from).'
+        ),
         folder: external_exports.string().min(1).optional().describe('Folder id or well-known name (default "inbox")'),
         limit: external_exports.number().int().min(1).max(50).optional().describe("Max messages (default 25, max 50)"),
         sinceHours: external_exports.number().positive().max(24 * 365).optional().describe("Only mail received in the last N hours (not with `from`)"),
@@ -50023,7 +50925,7 @@ function registerMailTools(server, client2) {
         nextLink: nextLinkParam
       })
     },
-    async ({ folder, limit, sinceHours, includeBody, maxBodyChars, from, nextLink }) => {
+    async ({ view, folder, limit, sinceHours, includeBody, maxBodyChars, from, nextLink }) => {
       const pos = fromPosition(from, { nextLink, sinceHours });
       const max = limit ?? 25;
       const keyset = pos !== void 0 ? fromQuery(pos, max) : void 0;
@@ -50048,6 +50950,10 @@ function registerMailTools(server, client2) {
       const listed = Array.isArray(data?.value) ? data.value : [];
       const page = pos !== void 0 ? fromPage(listed, pos, max, Boolean(data?.["@odata.nextLink"])) : void 0;
       const rows = page?.rows ?? listed;
+      if (view === "brief") {
+        const more = page !== void 0 ? page.has_more : Boolean(data?.["@odata.nextLink"]);
+        return briefResult(rows.map(briefUnread), more);
+      }
       const wantBody = includeBody !== false;
       const cap = maxBodyChars ?? 4e3;
       const items = await mapWithConcurrency(rows, BODY_CONCURRENCY, async (m) => {
@@ -50110,6 +51016,7 @@ function registerMailTools(server, client2) {
     {
       description: "List a message's attachments (name, size, content type). Metadata only \u2014 this deliberately does not download bytes.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         id: external_exports.string().min(1).describe("Message Id"),
         nextLink: nextLinkParam
@@ -50130,6 +51037,7 @@ function registerMailTools(server, client2) {
     {
       description: "Get one attachment's content (ids from outlook_list_attachments). An image comes back as image content the model can see; a text-like file (text/*, JSON, CSV, XML, .ics) is decoded to `text`, capped at 200 KB (`textTruncated` marks a cut). Any other binary (PDF, Office, archives) and anything over 5 MB is returned as metadata only \u2014 its bytes are not inlined. An attached Outlook item (a forwarded email or event) or a cloud-file link has no bytes to return; the result says which. " + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         messageId: external_exports.string().min(1).describe("Message Id"),
         attachmentId: external_exports.string().min(1).describe("Attachment Id from outlook_list_attachments")
@@ -50237,6 +51145,11 @@ function assertWindow(start, end) {
 function trimTime(dt) {
   return dt?.replace(/\.0+$/, "");
 }
+function briefEvent(e) {
+  const response = e.ResponseStatus?.Response;
+  const status = e.IsCancelled ? "cancelled" : response && response !== "None" ? spaced(response) : "scheduled";
+  return briefLine(e.Subject, briefDate(e.Start?.DateTime), status);
+}
 var attendeeList = (what) => external_exports.array(external_exports.string().min(3)).describe(`Email addresses of ${what}`);
 function registerCalendarTools(server, client2) {
   server.registerTool(
@@ -50244,8 +51157,9 @@ function registerCalendarTools(server, client2) {
     {
       description: 'List calendar events in a date window. This uses the calendar VIEW, which expands recurring series into their individual occurrences \u2014 the right tool for "what is on my schedule". Times are returned in `timeZone` when given. view:"raw" returns Outlook\'s records as-is and uncapped; the list carries no Attendees in any view \u2014 outlook_get_event returns them. ' + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("whats-on", { canonical: true, when: { start: "start", end: "end" }, aliases: ["calendar", "meetings", "schedule", "agenda", "appointments", "work calendar"] }),
       inputSchema: external_exports.object({
-        view: viewParam(VIEWS2),
+        view: briefViewParam(VIEWS2, 'A brief status is "cancelled" or your response (accepted, organizer, not responded, \u2026).'),
         start: external_exports.string().min(1).describe("Window start, ISO 8601 (e.g. 2026-09-20T00:00:00Z)"),
         end: external_exports.string().min(1).describe("Window end, ISO 8601"),
         timeZone: external_exports.string().optional().describe(
@@ -50272,6 +51186,7 @@ function registerCalendarTools(server, client2) {
           ...zone ? { prefer: `outlook.timezone="${zone}"` } : {}
         }
       );
+      if (view === "brief") return briefResult((data?.value ?? []).map(briefEvent), Boolean(data?.["@odata.nextLink"]));
       const v = resolveView(view, VIEWS2);
       if (v === "raw") return mailboxUntrusted(data);
       return mailboxUntrusted(
@@ -50284,6 +51199,7 @@ function registerCalendarTools(server, client2) {
     {
       description: `Get one calendar event in full, including attendees and their responses. Attendees appear in view:"full", every one of them \u2014 there is no 20-address cap as on a message's To/Cc; view:"raw" returns Outlook's untouched record, uncapped, Attendees included. ` + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         id: external_exports.string().min(1).describe("Event Id from outlook_list_events"),
@@ -50306,6 +51222,7 @@ function registerCalendarTools(server, client2) {
     {
       description: "List the calendars in the mailbox, for picking one to read or write against.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         nextLink: nextLinkParam
@@ -50322,6 +51239,7 @@ function registerCalendarTools(server, client2) {
     {
       description: "Find times when people can meet \u2014 Outlook's Scheduling Assistant. Give the attendees, a search window and a duration; Outlook checks everyone's free/busy (and the signed-in user's, as organizer) and returns ranked candidate slots with each attendee's availability. By default only working hours are searched. Use this to answer \"when can X and Y meet?\"; then book with outlook_create_event \u2014 each suggestion carries `createEventArgs` (times, zone and attendees; `subject` too when given here) to pass to it as-is. `start`/`end` are local wall-clock times in `timeZone` (default: the mailbox zone), and returned slots are in that zone too. view: 'raw' returns Outlook's response as-is, without `createEventArgs`. " + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup", { aliases: ["free time", "when can we meet"] }),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         attendees: attendeeList("required attendees").min(1),
@@ -50408,6 +51326,7 @@ function registerCalendarTools(server, client2) {
     {
       description: "Get people's free/busy blocks for a time window \u2014 the grid view of Outlook's Scheduling Assistant. Returns each person's busy, tentative and out-of-office items (with subject and location where their calendar shares them). Use outlook_find_meeting_times to have Outlook pick slots instead. `start`/`end` are local wall-clock times in `timeZone` (default: the mailbox zone). " + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup", { aliases: ["free busy", "availability"] }),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         people: attendeeList("people (or rooms) to look up").min(1).max(100),
@@ -50458,12 +51377,18 @@ function collection(data, raw) {
   if (raw) return data;
   return plainCollection(data);
 }
+function briefTask(t) {
+  const due = t.DueDateTime;
+  const status = typeof t.Status === "string" && t.Status ? spaced(t.Status) : "no status";
+  return briefLine(typeof t.Subject === "string" ? t.Subject : void 0, briefDate(due?.DateTime), status);
+}
 function registerDirectoryTools(server, client2) {
   server.registerTool(
     "outlook_get_profile",
     {
       description: "Get the signed-in mailbox's identity (email address, display name, alias). The cheapest call that proves the credential works.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({})
     },
     async () => minifiedResult(stripOData(await client2.get("/me")))
@@ -50473,6 +51398,7 @@ function registerDirectoryTools(server, client2) {
     {
       description: "Get mailbox settings: time zone, working hours, language, and automatic-replies (out-of-office) configuration.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup", { aliases: ["out of office", "working hours"] }),
       inputSchema: external_exports.object({})
     },
     async () => minifiedResult(stripOData(await client2.get("/me/MailboxSettings")))
@@ -50482,6 +51408,7 @@ function registerDirectoryTools(server, client2) {
     {
       description: "List saved contacts from the mailbox address book.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup", { aliases: ["contacts", "address book"] }),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         limit: external_exports.number().int().min(1).max(200).optional().describe("Max contacts (default 50)"),
@@ -50512,6 +51439,7 @@ function registerDirectoryTools(server, client2) {
     {
       description: 'List people ranked by relevance to the user \u2014 colleagues and frequent correspondents, drawn from mail traffic rather than the saved address book. Better than outlook_list_contacts for resolving "who is X" in a work mailbox.',
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({
         view: viewParam(VIEWS2),
         limit: external_exports.number().int().min(1).max(100).optional().describe("Max people (default 25)"),
@@ -50538,8 +51466,9 @@ function registerDirectoryTools(server, client2) {
     {
       description: "List Outlook tasks with status and due dates.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("whats-due", { canonical: true, aliases: ["tasks", "to do", "to-dos", "due", "deadlines"] }),
       inputSchema: external_exports.object({
-        view: viewParam(VIEWS2),
+        view: briefViewParam(VIEWS2, "A brief status is the task's own (not started, in progress, completed, \u2026)."),
         limit: external_exports.number().int().min(1).max(200).optional().describe("Max tasks (default 50)"),
         nextLink: nextLinkParam
       })
@@ -50556,6 +51485,7 @@ function registerDirectoryTools(server, client2) {
           }
         }
       );
+      if (view === "brief") return briefResult((data?.value ?? []).map(briefTask), Boolean(data?.["@odata.nextLink"]));
       return minifiedResult(collection(data, resolveView(view, VIEWS2) === "raw"));
     }
   );
@@ -50564,6 +51494,7 @@ function registerDirectoryTools(server, client2) {
     {
       description: "List the mailbox's categories (the master list) with their colours \u2014 the names outlook_update_message can add or remove.",
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("lookup"),
       inputSchema: external_exports.object({})
     },
     async () => {
@@ -50614,7 +51545,7 @@ function dateTimeTimeZone2(value, zone) {
   }
   return { DateTime: value, TimeZone: zone };
 }
-var TIMEOUT_SENTENCE = 'If Outlook does not answer in time (or the connection drops) the result has status "unknown": the write may well have gone through, so check before retrying \u2014 never resend blindly.';
+var TIMEOUT_SENTENCE = 'If Outlook does not answer in time, the connection drops, or a server error (5xx) comes back after the request was sent, the result has status "unknown": the write may well have gone through, so check before retrying \u2014 never resend blindly.';
 function writeOrUnknown2(run, checkWhere) {
   return writeOrUnknown(
     run,
@@ -50697,6 +51628,7 @@ function registerWriteTools(server, client2) {
     {
       description: "Send an email from the signed-in mailbox. " + CONFIRM_FLOW_SENTENCE + " The preview shows exactly what would be sent. " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+      _meta: workMeta("send", { aliases: ["email", "send an email", "mail"] }),
       inputSchema: external_exports.object({
         to: recipientList,
         cc: recipientList,
@@ -50742,6 +51674,7 @@ function registerWriteTools(server, client2) {
       // Self-only and additive, like outlook_reply with draftOnly: nothing is
       // overwritten or sent. Not idempotent: a repeat creates a second draft.
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
+      _meta: workMeta("change", { aliases: ["draft", "draft an email"] }),
       inputSchema: external_exports.object({
         to: recipientList,
         cc: recipientList,
@@ -50770,6 +51703,7 @@ function registerWriteTools(server, client2) {
     {
       description: "Mark a message read or unread. The result is verified by re-reading the message \u2014 a 2xx alone is not proof it persisted. " + CONFIRM_FLOW_SENTENCE,
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+      _meta: workMeta("change"),
       inputSchema: external_exports.object({
         id: external_exports.string().min(1).describe("Message Id"),
         isRead: external_exports.boolean().describe("true to mark read, false to mark unread"),
@@ -50805,6 +51739,7 @@ function registerWriteTools(server, client2) {
     {
       description: 'Flag, categorise and/or mark read up to 50 messages at once \u2014 the filing step of the triage loop (outlook_list_unread_messages \u2192 act \u2192 update). `flag`: "flagged", "complete" or "none". `categories` replaces a message\'s categories; `addCategories`/`removeCategories` edit each message\'s current list instead (names from outlook_list_categories). Duplicate ids are collapsed, so each message is written once. Each id gets its own result `{ id, ok, error? }`, verified against what Outlook stored; one failure does not stop the rest, but a rejected or missing credential fails the whole call. Only your mailbox changes \u2014 nobody is notified. ' + CONFIRM_FLOW_SENTENCE,
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+      _meta: workMeta("change", { aliases: ["flag", "categorize"] }),
       inputSchema: external_exports.object({
         messageIds: external_exports.array(external_exports.string().min(1)).min(1).max(50).describe("Message Ids (1 to 50)"),
         flag: external_exports.enum(["flagged", "complete", "none"]).optional().describe("Follow-up flag to set"),
@@ -50884,6 +51819,7 @@ function registerWriteTools(server, client2) {
     {
       description: 'Move a message to another folder (e.g. "archive", "deleteditems", or a folder id from outlook_list_folders). Moving assigns a NEW message id, which is returned. ' + CONFIRM_FLOW_SENTENCE,
       annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
+      _meta: workMeta("change", { aliases: ["file", "archive"] }),
       inputSchema: external_exports.object({
         id: external_exports.string().min(1).describe("Message Id"),
         destination: external_exports.string().min(1).describe('Destination folder id or well-known name (e.g. "archive")'),
@@ -50923,6 +51859,7 @@ function registerWriteTools(server, client2) {
     {
       description: 'Create a calendar event or meeting. A Microsoft Teams meeting is attached by default (`teamsMeeting: false` to skip) and its join link is returned. `timeZone` takes a WINDOWS zone name such as "Eastern Standard Time", not an IANA name. Attendees are emailed an invitation. To pick a time first, use outlook_find_meeting_times: each suggestion it returns carries `createEventArgs` that can be passed here as-is (add `subject` if the search did not set one). ' + CONFIRM_FLOW_SENTENCE + " " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+      _meta: workMeta("change", { aliases: ["book a meeting", "schedule a meeting", "invite"] }),
       inputSchema: createEventInput
     },
     async ({ subject, start, end, timeZone, location, body, attendees, optionalAttendees, teamsMeeting, confirmToken }, ctx) => {
@@ -50980,6 +51917,7 @@ function registerWriteTools(server, client2) {
     {
       description: "Update a meeting you organize: retitle, move, relocate, edit the description, or add/remove attendees. Moving only `start` keeps the meeting's length. It does not add a Microsoft Teams meeting unless you pass `teamsMeeting: true` (on an event that lacks one). Attendees are sent an updated invitation. Only the organizer can update a meeting \u2014 an attendee's edit would change their own copy alone, so it is refused. The result is verified by re-reading the event. " + CONFIRM_FLOW_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true },
+      _meta: workMeta("change", { aliases: ["reschedule", "move the meeting"] }),
       inputSchema: external_exports.object({
         id: external_exports.string().min(1).describe("Event Id from outlook_list_events or outlook_get_event"),
         subject: external_exports.string().optional().describe("New title"),
@@ -51099,6 +52037,7 @@ function registerWriteTools(server, client2) {
     {
       description: "Accept, tentatively accept or decline a meeting invitation. Pass the invite's `messageId` (from outlook_list_unread_messages, which marks it kind \"meetingRequest\") or the event's `eventId` \u2014 exactly one. The organizer is sent your response unless `sendResponse: false`, in which case only your calendar changes and no confirmation is asked. Cancelled meetings and meetings you organize are refused. The result is verified by re-reading the event's response status; a declined meeting may leave your calendar entirely. Outlook then moves the invite message itself to Deleted Items (under a new id), so an answered invite needs no outlook_mark_read. " + CONFIRM_FLOW_SENTENCE + " " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+      _meta: workMeta("send", { aliases: ["accept", "decline", "rsvp"] }),
       inputSchema: external_exports.object({
         messageId: external_exports.string().min(1).optional().describe("Id of the invite message (resolved to its event). Give this or eventId."),
         eventId: external_exports.string().min(1).optional().describe("Event Id. Give this or messageId."),
@@ -51218,6 +52157,7 @@ function registerWriteTools(server, client2) {
     {
       description: `Delete a calendar event. An occurrence's id deletes only that occurrence; a series master's id (Type "SeriesMaster" in outlook_get_event) deletes the WHOLE series. Only the organizer can delete a meeting \u2014 for an invite you received, decline it with outlook_respond_to_invite instead (a meeting the organizer already cancelled can be removed here). Deleting a meeting that has attendees sends each of them a cancellation, so it is confirmed first; your own appointment with no attendees, or a cancelled meeting, is removed without asking because only your calendar changes. The result is verified by re-reading the event. ` + CONFIRM_FLOW_SENTENCE + " " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE,
       annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true },
+      _meta: workMeta("change", { aliases: ["cancel the meeting"] }),
       inputSchema: external_exports.object({
         id: external_exports.string().min(1).describe("Event Id from outlook_list_events or outlook_get_event (an occurrence, or a series master)"),
         confirmToken: confirmTokenParam
@@ -51285,6 +52225,7 @@ function registerWriteTools(server, client2) {
     {
       description: "Reply, reply-all or forward a message, with `comment` as your new text above the quoted original. Outlook picks the recipients for reply (the sender, or its Reply-To) and reply-all (sender plus the original To and Cc, minus you); a forward needs `to`. `draftOnly: true` leaves the reply in Drafts and returns its id, sending nothing and asking no confirmation; otherwise it is sent at once. " + CONFIRM_FLOW_SENTENCE + " The preview shows the recipients, subject and comment. " + TIMEOUT_SENTENCE + " " + CONFIRM_INJECTION_RULE + " " + UNTRUSTED_DESCRIPTION_SUFFIX,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
+      _meta: workMeta("send", { aliases: ["reply", "reply all", "forward"] }),
       inputSchema: external_exports.object({
         messageId: external_exports.string().min(1).describe("Id of the message to answer or forward"),
         mode: external_exports.enum(["reply", "replyAll", "forward"]).describe("reply (sender only), replyAll, or forward"),
@@ -51491,6 +52432,9 @@ function expiry(opts) {
   return Math.floor((opts?.now ?? Date.now()) + ttl);
 }
 function toArrayBuffer(view) {
+  const buf = view.buffer;
+  if (buf instanceof ArrayBuffer && view.byteOffset === 0 && view.byteLength === buf.byteLength)
+    return buf;
   return view.slice().buffer;
 }
 function createBlobStore(opts) {
@@ -51704,6 +52648,7 @@ function buildZip(entries, modifiedAt = new Date(Date.UTC(1980, 0, 1))) {
 // node_modules/@chrischall/mcp-utils/dist/export/sink.js
 var EXPORT_MARKER = ".mcp-export";
 var EXPORT_DIR_NAME = /-\d{8}-\d{6}(?:-\d+)?$/;
+var EXPORT_BLOB_MAX_BYTES = 256 * 1024 * 1024;
 var EXPORT_ID = /^[A-Za-z0-9_-]{8,64}$/;
 var MAX_PART = 9999;
 var MAX_REL_PATH = 1024;
@@ -51781,14 +52726,17 @@ async function openExportSink(opts) {
   const part = checkPart(opts.part ?? 1);
   const exportId = checkExportId(opts.exportId);
   const now = opts.now;
+  if (opts.maxBytes !== void 0 && !(Number.isSafeInteger(opts.maxBytes) && opts.maxBytes > 0)) {
+    throw new TypeError(`openExportSink: maxBytes must be a positive whole number, got ${opts.maxBytes}.`);
+  }
   const store = blobStoreFromEnv(env);
   if (store)
     return openBlobSink(store, exportId, part, opts, now);
   if (opts.existingDir !== void 0) {
-    return openDiskSink(resumeDir(opts.existingDir, opts.envVar, env, exportId), exportId, part);
+    return openDiskSink(resumeDir(opts.existingDir, opts.envVar, env, exportId, opts.name), exportId, part);
   }
   const dir = freshDir(opts, env, now);
-  await writeFileSafe(join10(dir, EXPORT_MARKER), new TextEncoder().encode(JSON.stringify({ exportId })), {
+  await writeFileSafe(join10(dir, EXPORT_MARKER), new TextEncoder().encode(JSON.stringify({ exportId, name: opts.name })), {
     allowedRoots: [dir],
     mode: 384
   });
@@ -51831,6 +52779,7 @@ function freshDir(opts, env, now) {
 function notThisExport() {
   return badInput2("The export directory to resume was not created by this export.", "Pass the cursor exactly as returned, or start a new export without one.");
 }
+var MAX_MARKER = 4096;
 function readMarker(dir) {
   let fd;
   try {
@@ -51839,18 +52788,21 @@ function readMarker(dir) {
     return void 0;
   }
   try {
-    const buf = Buffer.alloc(256);
+    const buf = Buffer.alloc(MAX_MARKER);
     const n = readSync(fd, buf, 0, buf.length, 0);
     const parsed = JSON.parse(buf.subarray(0, n).toString("utf8"));
     const id = parsed?.exportId;
-    return typeof id === "string" ? id : void 0;
+    const name = parsed?.name;
+    if (typeof id !== "string")
+      return void 0;
+    return { exportId: id, name: typeof name === "string" ? name : void 0 };
   } catch {
     return void 0;
   } finally {
     closeSync4(fd);
   }
 }
-function resumeDir(existingDir, envVar, env, exportId) {
+function resumeDir(existingDir, envVar, env, exportId, name) {
   if (typeof existingDir !== "string" || existingDir.length === 0)
     throw outsideRoots("export directory", envVar);
   const roots = exportAllowedRoots(envVar, env);
@@ -51876,7 +52828,10 @@ function resumeDir(existingDir, envVar, env, exportId) {
   } catch {
     markerIsFile = false;
   }
-  if (!markerIsFile || readMarker(real) !== exportId)
+  if (!markerIsFile)
+    throw notThisExport();
+  const marker = readMarker(real);
+  if (!marker || marker.exportId !== exportId || marker.name !== name)
     throw notThisExport();
   return real;
 }
@@ -51930,6 +52885,8 @@ function openBlobSink(store, exportId, part, opts, now) {
   const signOpts = { ...opts.ttlMs !== void 0 ? { ttlMs: opts.ttlMs } : {} };
   store.signGetUrl(key, { ...signOpts, now: now ?? Date.now() });
   const entries = /* @__PURE__ */ new Map();
+  const maxBytes = opts.maxBytes ?? EXPORT_BLOB_MAX_BYTES;
+  let held = 0;
   let finished = false;
   return {
     mode: "blob",
@@ -51942,6 +52899,20 @@ function openBlobSink(store, exportId, part, opts, now) {
       if (entries.has(relPath) && !o.overwrite)
         throw badInput2(`Export file ${relPath} was already written.`);
       const bytes = toBytes(data);
+      const replaced = entries.get(relPath)?.bytes.byteLength ?? 0;
+      if (bytes.byteLength > maxBytes) {
+        throw new McpToolError(`Export file ${relPath} alone is ${bytes.byteLength} bytes, over the ${maxBytes}-byte part limit.`, {
+          kind: "too_large",
+          hint: "No export part can hold this file: skip it, or raise the part limit (maxBytes)."
+        });
+      }
+      if (held - replaced + bytes.byteLength > maxBytes) {
+        throw new McpToolError(`This export part would exceed its ${maxBytes}-byte limit with ${relPath}.`, {
+          kind: "too_large",
+          hint: "Finish this part and continue the export in the next one (return the resume cursor)."
+        });
+      }
+      held += bytes.byteLength - replaced;
       entries.delete(relPath);
       entries.set(relPath, { bytes, compress: shouldCompress(relPath, contentType) });
       return { name: relPath, bytes: bytes.byteLength };
@@ -52138,7 +53109,7 @@ function isoBound(name, raw) {
   }
   return decodeFrom(raw).t;
 }
-var defaultSleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+var defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
 async function with429Retry(fn, sleep3) {
   for (let attempt = 0; ; attempt++) {
     try {
@@ -52278,7 +53249,7 @@ function extendSpan(totals, t) {
   if (!totals.oldest || ms < timeOf(totals.oldest)) totals.oldest = t;
   if (!totals.newest || ms > timeOf(totals.newest)) totals.newest = t;
 }
-function inRange(received, since, until) {
+function inRange2(received, since, until) {
   if (!since && !until) return true;
   const t = timeOf(received);
   if (Number.isNaN(t)) return false;
@@ -52658,7 +53629,7 @@ function registerExportTools(server, client2, opts = {}) {
   const run = {
     ...opts,
     env: opts.env ?? process.env,
-    sleep: opts.sleep ?? defaultSleep2,
+    sleep: opts.sleep ?? defaultSleep,
     clock: opts.clock ?? Date.now
   };
   const pageSize = Math.min(Math.max(1, opts.pageSize ?? MAX_TOP2), MAX_TOP2);
@@ -52668,6 +53639,7 @@ function registerExportTools(server, client2, opts = {}) {
     {
       description: MESSAGES_DESCRIPTION,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("other"),
       inputSchema: external_exports.object({
         folder: external_exports.string().min(1).optional().describe('Well-known folder name (inbox, sentitems, archive, \u2026) or folder id; "all" exports the whole mailbox. Default inbox. Ignored with `search` (a search spans the mailbox).'),
         since: external_exports.string().min(1).optional().describe("Only mail received at or after this ISO 8601 time (no zone = UTC)"),
@@ -52745,7 +53717,7 @@ function registerExportTools(server, client2, opts = {}) {
             sleep3
           ),
           (link2) => with429Retry(() => client2.getAbsolute(link2, { text: true }), sleep3),
-          (m) => inRange(m.ReceivedDateTime, since, until)
+          (m) => inRange2(m.ReceivedDateTime, since, until)
         );
       };
       return runExport(client2, run, input2, {
@@ -52770,6 +53742,7 @@ function registerExportTools(server, client2, opts = {}) {
     {
       description: EVENTS_DESCRIPTION,
       annotations: { readOnlyHint: true, openWorldHint: true },
+      _meta: workMeta("other"),
       inputSchema: external_exports.object({
         since: external_exports.string().min(1).optional().describe("Window start, ISO 8601 (no zone = UTC). Required unless `cursor` is given."),
         until: external_exports.string().min(1).optional().describe("Window end, ISO 8601 (no zone = UTC); at most two years after `since`. Required unless `cursor` is given."),
@@ -52878,7 +53851,7 @@ await runMcp({
 });
 /*! Bundled license information:
 
-@modelcontextprotocol/server/dist/src-Cqbh3MYc.mjs:
+@modelcontextprotocol/server/dist/src-DdvbAHrR.mjs:
   (*!
   * content-type
   * Copyright(c) 2015 Douglas Christopher Wilson